Bump go.k6.io/k6 from 1.6.1 to 1.7.1 in /long-running-test-arch/xk6

[dependabot]

Bumps go.k6.io/k6 from 1.6.1 to 1.7.1.

Release notes

Sourced from go.k6.io/k6's releases.

v1.7.1

k6 v1.7.1 is here 🎉! This release includes:

• Dependency updates for google.golang.org/grpc.

Maintenance and internal improvements

• #5746 Updates google.golang.org/grpc which contains a fix for CVE-2026-33186.

v1.7.0

k6 v1.7.0 is here 🎉! This release includes:

• Automatic resolution for subcommand extensions — no more manual xk6 builds required to use them!
• K6_SECRET_SOURCE env var as an alternative to --secret-source, accepting the same syntax.

Breaking changes

There are no breaking changes in this release.

New features

Automatic resolution for subcommand extensions #5664

You can now rely on automatic extension resolution also when using a subcommand extension that isn't included in the current binary.

Previously, using extension subcommands required manually building a custom k6 binary with xk6. Now, k6 detects the missing extension, provisions the binary on demand, and executes the command transparently — the same experience already available for JavaScript extensions.

For instance, if you run:

k6 x httpbin

and the xk6-subcommand-httpbin subcommand extension isn't in the current binary, k6 will automatically provision a binary with it on demand and execute the command transparently.

UX improvements and enhancements

• #5655 Recommends the OpenTelemetry output instead of InfluxDB.
• #5724 Adds K6_SECRET_SOURCE env var as an alternative to --secret-source, accepting the same syntax. Thanks @​vortegatorres, for the contribution!

Bug fixes

• #5629 Ensures that all redirected requests are handled for page.on('response') and page.on('requestfinished').

Maintenance and internal improvements

... (truncated)

Commits

• 9f82e6f Bump k6 version to v1.7.1 (#5763)
• c36ab15 Release notes v1.7.1 (#5764)
• 9246cd0 fix(deps): update module google.golang.org/grpc to v1.79.3 [security] (#5746)
• 776c078 Release notes v1.7.0 (#5638)
• 390cd4e Bump k6 version to v1.7.0 (#5756)
• 8c03cd5 fix(ci): Pass GITHUB_TOKEN as input to test-common composite action (#5755)
• 4f25152 fix(cmd/state): Use constants when possible (#5626)
• 3fdfa3b Merge pull request #5735 from grafana/5731-chore-exclude-non-essential-files-...
• cece0c7 exclude non-essential files from vendor/ folder
• af37f05 Merge pull request #5728 from grafana/5727-update-xk6-dashboard-dependency-to...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)