build(deps): bump grafana/xk6 from 1.0.0 to 1.0.1

[dependabot]

Bumps grafana/xk6 from 1.0.0 to 1.0.1.

Release notes

Sourced from grafana/xk6's releases.

v1.0.1

Grafana xk6 v1.0.0 is here! 🎉

xk6 v1.0.0 marks a significant milestone, incorporating numerous features and capabilities that were gradually introduced in previous versions. These release notes are a bit different, by detailing changes implemented incrementally in anticipation of this major release.

xk6 version 1.0.0 introduces significant enhancements, effectively evolving the Custom k6 builder into a comprehensive k6 extension developer toolbox.

What's been removed in xk6 v1.0.0?

Breaking Changes

No unknown k6 commands wrapping

xk6 v1.0.0 only wraps the k6 run command as xk6 run. Any other commands will no longer be automatically passed through. Previously, xk6 would forward all unrecognized commands to the dynamically built k6.

Previously, the xk6 version command displayed the k6 version built during the process. Now, this command shows the xk6 version itself.

No API exposed

xk6 v1.0.0 does not expose a public Go API.

A dedicated Go library (grafana/k6foundry) now exists for building k6 executables. Since xk6 utilizes this library directly, there is no benefit to adding another layer of wrapping.

What's new in xk6 v1.0.0?

Get started docs

Before getting into what's new, it's worth mentioning the new docs that help you get started with extension development.

The k6 extension development quick start guide offers a straightforward, step-by-step introduction. For a more in-depth understanding, the k6 extension development tutorial provides a practical example of extension development.

There are also two new example extensions to help users get started:

• xk6-example: This JavaScript extension shows the integration between the k6 JavaScript runtime and a Go extension. It also provides JavaScript API documentation and demonstrates the use of reusable GitHub workflows offered by xk6.
• xk6-output-example: This output extension shows how to process k6 runtime metrics within an extension.

Refactored command handling

The command-line interface has been significantly refactored in xk6 v1.0.0. This overhaul introduces new commands alongside the existing xk6 build and xk6 run, expanding xk6's functionality. All commands support the standard --help flag for displaying usage instructions.

Print xk6 Version

The command xk6 version is now available and outputs the xk6 version.

Create Extension

The xk6 new command simplifies the creation of new k6 extensions. With a single command, you can generate a functional extension. This command utilizes the grafana/xk6-example and grafana/xk6-output-example repositories as a template for the new extension.

Check Compliance

... (truncated)

Commits

• 78bf8ab Merge pull request #221 from grafana/220-security-fix
• 42a4685 release notes
• cee810e Updated Docker base image to golang:1.24.4-alpine3.22 to fix:
• 8e37925 Merge pull request #219 from grafana/dependabot/github_actions/securego/gosec...
• 2a5ac24 Merge pull request #218 from grafana/dependabot/github_actions/astral-sh/setu...
• 21c14aa build(deps): bump securego/gosec from 2.22.4 to 2.22.5
• 9e19ac4 build(deps): bump astral-sh/setup-uv from 6.1.0 to 6.3.0
• b14293c Merge pull request #217 from grafana/fix-xk6-validate-workflow-fails-when-run...
• 77ee610 ci: fix gosec version
• d4e91de docs: update after repository variables removal
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[szkiba]

LGTM