Skip to content

Update go modules (main) (minor) - #3285

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main-main/go-modules
Open

Update go modules (main) (minor)#3285
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main-main/go-modules

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented May 11, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
4d63.com/gocheckcompilerdirectives v1.3.0v1.4.0 age confidence indirect minor
cloud.google.com/go/auth v0.20.0v0.22.0 age confidence indirect minor v0.23.0
cloud.google.com/go/firestore v1.21.0v1.24.0 age confidence indirect minor v1.25.0
cloud.google.com/go/iam v1.11.0v1.12.0 age confidence indirect minor v1.13.0
cloud.google.com/go/kms v1.31.0v1.33.0 age confidence indirect minor
cloud.google.com/go/longrunning v1.0.0v1.2.0 age confidence indirect minor
cloud.google.com/go/monitoring v1.25.0v1.30.0 age confidence indirect minor
cloud.google.com/go/storage v1.62.0v1.64.0 age confidence indirect minor
cuelang.org/go v0.16.0v0.17.1 age confidence indirect minor
cuelang.org/go v0.16.0v0.17.1 age confidence require minor
dev.gaijin.team/go/golib v0.6.0v0.8.1 age confidence indirect minor
github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider v0.15.0v0.20.0 age confidence indirect minor
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.21.1v1.22.0 age confidence indirect minor
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.13.1v1.14.0 age confidence indirect minor
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.4.0v1.5.0 age confidence indirect minor
github.com/AzureAD/microsoft-authentication-library-for-go v1.6.0v1.8.0 age confidence indirect minor
github.com/CycloneDX/cyclonedx-go v0.10.0v0.11.0 age confidence indirect minor
github.com/CycloneDX/cyclonedx-go v0.10.0v0.11.0 age confidence require minor
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.32.0v1.35.0 age confidence indirect minor
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.55.0v0.59.0 age confidence indirect minor
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.55.0v0.59.0 age confidence indirect minor
github.com/IBM/sarama v1.45.2v1.60.1 age confidence indirect minor
github.com/Masterminds/semver/v3 v3.4.0v3.5.0 age confidence indirect minor
github.com/Microsoft/go-winio ad3df937561016 indirect digest
github.com/ProtonMail/go-crypto v1.3.0v1.4.1 age confidence indirect minor
github.com/ThalesIgnite/crypto11 v1.2.5v1.6.8 age confidence indirect minor
github.com/alecthomas/chroma/v2 v2.23.1v2.27.0 age confidence indirect minor
github.com/alessio/shellescape v1.4.2v1.6.0 age confidence indirect minor
github.com/alibabacloud-go/tea v1.2.2v1.5.3 age confidence indirect minor
github.com/aliyun/credentials-go v1.3.9v1.4.12 age confidence indirect minor
github.com/anchore/go-struct-converter v0.1.0v0.2.1 age confidence indirect minor
github.com/aws/aws-sdk-go-v2 v1.42.0v1.43.4 age confidence indirect minor
github.com/aws/aws-sdk-go-v2/service/ecr v1.55.3v1.60.4 age confidence indirect minor
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.38.10v1.41.4 age confidence indirect minor
github.com/aws/aws-sdk-go-v2/service/kms v1.51.1v1.55.4 age confidence indirect minor
github.com/aws/aws-sdk-go-v2/service/s3 v1.97.3v1.106.5 age confidence indirect minor v1.107.0
github.com/aws/aws-sdk-go-v2/service/signin v1.0.11v1.5.4 age confidence indirect minor
github.com/aws/aws-sdk-go-v2/service/sso v1.30.17v1.33.4 age confidence indirect minor
github.com/bmatcuk/doublestar/v4 v4.6.1v4.10.0 age confidence indirect minor
github.com/bombsimon/wsl/v5 v5.6.0v5.8.0 age confidence indirect minor
github.com/charmbracelet/x/ansi v0.10.1v0.11.7 age confidence indirect minor
github.com/clipperhouse/displaywidth v0.10.0v0.11.0 age confidence indirect minor
github.com/clipperhouse/uax29/v2 v2.6.0v2.7.0 age confidence indirect minor
github.com/conforma/go-containerregistry ae5f0aef9eefe1 replace digest
github.com/containerd/typeurl/v2 v2.2.3v2.3.0 age confidence indirect minor
github.com/coreos/go-oidc/v3 v3.19.0v3.20.0 age confidence indirect minor
github.com/cucumber/godog v0.15.0v0.16.0 age confidence require minor
github.com/cyphar/filepath-securejoin v0.6.1v0.7.0 age confidence indirect minor
github.com/daixiang0/gci v0.13.7v0.14.0 age confidence require minor
github.com/dgraph-io/ristretto/v2 v2.2.0v2.4.2 age confidence indirect minor
github.com/digitorus/pkcs7 3a137a8ffadbf3 age confidence indirect digest
github.com/digitorus/timestamp 220c5c2c455327 age confidence indirect digest
github.com/dlclark/regexp2 v1.11.5v1.12.0 age confidence indirect minor
github.com/docker/cli v29.5.3+incompatiblev29.7.2+incompatible age confidence indirect minor
github.com/docker/go-connections v0.7.0v0.8.1 age confidence indirect minor
github.com/felixge/httpsnoop v1.0.4v1.1.0 age confidence indirect minor
github.com/gdamore/tcell/v2 v2.9.0v2.13.10 age confidence indirect minor
github.com/go-ole/go-ole v1.2.6v1.3.0 age confidence indirect minor
github.com/go-openapi/jsonpointer v0.23.1v0.24.0 age confidence indirect minor
github.com/go-openapi/loads v0.24.0v0.25.0 age confidence indirect minor
github.com/go-openapi/runtime v0.32.4v0.33.0 age confidence indirect minor
github.com/go-openapi/runtime v0.32.4v0.33.0 age confidence require minor
github.com/go-openapi/runtime/server-middleware v0.30.0v0.33.0 age confidence indirect minor
github.com/go-openapi/strfmt v0.26.4v0.27.0 age confidence indirect minor
github.com/go-openapi/strfmt v0.26.4v0.27.0 age confidence require minor
github.com/go-openapi/swag v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/cmdutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/conv v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/fileutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/jsonname v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/jsonutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/loading v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/mangling v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/netutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/stringutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/typeutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/yamlutils v0.26.1v0.28.0 age confidence indirect minor
github.com/goccy/go-yaml v1.18.0v1.19.2 age confidence indirect minor
github.com/golangci/dupl f665c8dc99c5cf age confidence indirect digest
github.com/golangci/gofmt d62b90ee7be49a age confidence indirect digest
github.com/golangci/golangci-lint/v2 v2.11.4v2.12.2 age confidence require minor
github.com/google/cel-go v0.28.0v0.30.0 age confidence indirect minor v0.31.0
github.com/google/flatbuffers v25.2.10+incompatiblev25.12.19+incompatible age confidence indirect minor
github.com/google/go-containerregistry/pkg/authn/k8schain 7a662787b32099 age confidence indirect digest
github.com/google/go-containerregistry/pkg/authn/kubernetes 098045d7b32099 age confidence indirect digest
github.com/google/go-querystring v1.1.0v1.2.0 age confidence indirect minor
github.com/google/pprof 545e8a4ef3492d age confidence indirect digest
github.com/google/safetext 5a72de71fb717a age confidence indirect digest
github.com/googleapis/gax-go/v2 v2.22.0v2.23.0 age confidence indirect minor
github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0v2.30.0 age confidence indirect minor
github.com/hashicorp/hcl/v2 v2.23.0v2.24.0 age confidence indirect minor
github.com/hashicorp/vault/api v1.22.0v1.23.0 age confidence indirect minor
github.com/huandu/go-sqlbuilder v1.39.1v1.42.1 age confidence indirect minor
github.com/in-toto/archivista v0.10.0v0.11.1 age confidence indirect minor
github.com/in-toto/attestation v1.1.2v1.2.0 age confidence indirect minor
github.com/in-toto/go-witness v0.9.1v0.12.0 age confidence indirect minor
github.com/in-toto/in-toto-golang v0.10.0v0.11.0 age confidence indirect minor
github.com/jedisct1/go-minisign 661be99a09352b age confidence indirect digest
github.com/jgautheron/goconst v1.8.2v1.11.0 age confidence indirect minor
github.com/kevinburke/ssh_config v1.2.0v1.6.0 age confidence indirect minor
github.com/kisielk/errcheck v1.10.0v1.20.0 age confidence indirect minor
github.com/klauspost/compress v1.18.6v1.19.2 age confidence indirect minor
github.com/klauspost/cpuid/v2 v2.3.0v2.4.0 age confidence indirect minor
github.com/ldez/gomoddirectives v0.8.0v0.9.0 age confidence indirect minor
github.com/lestrrat-go/dsig v1.0.0v1.3.0 age confidence indirect minor
github.com/lestrrat-go/jwx/v3 v3.0.13v3.2.0 age confidence indirect minor
github.com/letsencrypt/boulder v0.20260309.0v0.20260804.0 age confidence indirect minor
github.com/lib/pq v1.11.2v1.12.3 age confidence indirect minor
github.com/lucasb-eyer/go-colorful v1.3.0v1.4.1 age confidence indirect minor
github.com/lufia/plan9stats 39d0f17341c2f0 age confidence indirect digest
github.com/lufia/plan9stats b1d8f4d341c2f0 age confidence indirect digest
github.com/magiconair/properties v1.8.10v1.18.11 age confidence indirect minor
github.com/manuelarte/funcorder v0.5.0v0.6.0 age confidence indirect minor
github.com/maruel/natural v1.1.1v1.3.0 age confidence indirect minor
github.com/moby/buildkit v0.29.0v0.32.2 age confidence indirect minor
github.com/moby/go-archive v0.2.0v0.3.3 age confidence indirect minor
github.com/moby/sys/sequential v0.6.0v0.7.0 age confidence indirect minor
github.com/montanaflynn/stats v0.7.1v0.12.2 age confidence indirect minor
github.com/olekukonko/errors v1.2.0v1.3.0 age confidence indirect minor
github.com/open-policy-agent/conftest v0.68.2v0.69.0 age confidence require minor
github.com/open-policy-agent/opa v1.15.2v1.19.0 age confidence indirect minor
github.com/open-policy-agent/opa v1.15.2v1.19.0 age confidence require minor
github.com/pelletier/go-toml/v2 v2.3.0v2.4.3 age confidence indirect minor
github.com/pkg/diff 20ebb0f4e6772a age confidence require digest
github.com/planetscale/vtprotobuf 0393e588ae5a48 indirect digest
github.com/power-devops/perfstat 5aafc228845660 age confidence indirect digest
github.com/power-devops/perfstat 82ca3688845660 age confidence indirect digest
github.com/prometheus/client_golang v1.23.2v1.24.1 age confidence indirect minor
github.com/prometheus/common v0.68.0v0.70.1 age confidence indirect minor
github.com/prometheus/procfs v0.20.1v0.21.1 age confidence indirect minor
github.com/protocolbuffers/txtpbfmt a481f6a1fd8a60 age confidence indirect digest
github.com/raeperd/recvcheck v0.2.0v0.3.0 age confidence indirect minor
github.com/rogpeppe/go-internal v1.14.1v1.16.0 age confidence indirect minor
github.com/sagikazarmark/locafero v0.11.0v0.12.0 age confidence indirect minor
github.com/securego/gosec/v2 v2.24.8-0.20260309165252-619ce2117e08v2.28.0 age confidence indirect minor
github.com/shirou/gopsutil/v3 v3.23.12v3.24.5 age confidence indirect minor
github.com/shoenig/go-m1cpu v0.1.6v0.2.2 age confidence indirect minor
github.com/sigstore/cosign/v3 v3.0.4v3.1.3 age confidence require minor
github.com/sigstore/rekor-tiles/v2 v2.0.1v2.3.0 age confidence indirect minor
github.com/sigstore/rekor-tiles/v2 v2.2.2-0.20260601073857-5d098a2b6443v2.3.0 age confidence indirect minor
github.com/sigstore/sigstore-go v1.1.4v1.3.0 age confidence indirect minor
github.com/sigstore/sigstore-go v1.2.1v1.3.0 age confidence require minor
github.com/sigstore/timestamp-authority/v2 v2.0.3v2.1.3 age confidence indirect minor
github.com/sigstore/timestamp-authority/v2 v2.0.4v2.1.3 age confidence indirect minor
github.com/sourcegraph/go-diff v0.7.0v0.8.0 age confidence indirect minor
github.com/spiffe/go-spiffe/v2 v2.6.0v2.8.1 age confidence indirect minor
github.com/tektoncd/chains v0.26.2v0.29.0 age confidence require minor
github.com/tektoncd/cli v0.44.1v0.46.0 age confidence require minor
github.com/tektoncd/triggers v0.35.0v0.37.0 age

Note

PR body was truncated to here.

@red-hat-konflux

red-hat-konflux Bot commented May 11, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: acceptance/go.sum
Command failed: go get -t ./...
go: github.com/alessio/shellescape@v1.6.0: parsing go.mod:
	module declares its path as: al.essio.dev/pkg/shellescape
	        but was required as: github.com/alessio/shellescape

File name: go.sum
Command failed: go get -t ./...
go: github.com/ThalesIgnite/crypto11@v1.6.8: parsing go.mod:
	module declares its path as: github.com/eclipse-keypont/crypto11
	        but was required as: github.com/ThalesIgnite/crypto11

File name: tools/go.sum
Command failed: go get -t ./...
go: github.com/ThalesIgnite/crypto11@v1.6.8: parsing go.mod:
	module declares its path as: github.com/eclipse-keypont/crypto11
	        but was required as: github.com/ThalesIgnite/crypto11

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main-main/go-modules branch 25 times, most recently from ff4d004 to 5f37272 Compare May 19, 2026 02:50
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main-main/go-modules branch from 5f37272 to c8f3087 Compare May 20, 2026 03:38
fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 2, 2026

Copy link
Copy Markdown

🤖 Review · ⚠️ Cancelled · Started 2:35 AM UTC · Ended 2:39 AM UTC
Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 2, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:40 AM UTC · Completed 2:51 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 3, 2026

Copy link
Copy Markdown

🤖 Review · ⚠️ Cancelled · Started 2:41 AM UTC · Ended 2:44 AM UTC
Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 3, 2026

Copy link
Copy Markdown

🤖 Review · ⚠️ Cancelled · Started 2:45 AM UTC · Ended 2:50 AM UTC
Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 3, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:51 AM UTC · Completed 3:04 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 4, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:41 AM UTC · Completed 2:51 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 4, 2026

Copy link
Copy Markdown

🤖 Review · ⚠️ Cancelled · Started 3:15 AM UTC · Ended 3:16 AM UTC
Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 4, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 3:17 AM UTC · Completed 3:29 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 5, 2026

Copy link
Copy Markdown

🤖 Review · ⚠️ Cancelled · Started 2:21 AM UTC · Ended 2:23 AM UTC
Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 5, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:24 AM UTC · Completed 2:33 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 6, 2026

Copy link
Copy Markdown

🤖 Review · ⚠️ Cancelled · Started 2:20 AM UTC · Ended 2:23 AM UTC
Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 6, 2026

Copy link
Copy Markdown

🤖 Review · ⚠️ Cancelled · Started 2:24 AM UTC · Ended 2:25 AM UTC
Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 6, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:26 AM UTC · Completed 2:37 AM UTC
Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 7, 2026

Copy link
Copy Markdown

🤖 Review · ⚠️ Cancelled · Started 2:28 AM UTC · Ended 2:36 AM UTC
Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 7, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:37 AM UTC · Completed 2:51 AM UTC
Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 8, 2026

Copy link
Copy Markdown

🤖 Finished Review · ❌ Failure · Started 2:20 AM UTC · Completed 2:26 AM UTC

Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 8, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:29 AM UTC · Completed 2:42 AM UTC

Commit: 87c4a29 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 9, 2026

Copy link
Copy Markdown

🤖 Review · ⚠️ Cancelled · Started 2:27 AM UTC · Ended 2:31 AM UTC

Commit: 87c4a29 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 9, 2026

Copy link
Copy Markdown

🤖 Review · ⚠️ Cancelled · Started 2:32 AM UTC · Ended 2:41 AM UTC

Commit: 87c4a29 · View workflow run →

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 9, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:42 AM UTC · Completed 2:55 AM UTC

Commit: 87c4a29 · View workflow run →

@fullsend-ai-review fullsend-ai-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the review comment for full details.

Comment thread acceptance/go.mod

// Maybe less important in acceptance, but it seems sensible to use the fork here too
replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry v0.21.8-0.20260626175242-ae5f0ae7a0b0
replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry f9eefe19c7b2

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] invalid go.mod syntax

The replace directive uses a bare commit hash f9eefe19c7b2 without the required pseudo-version prefix. Go modules require versions in the form vX.Y.Z-YYYYMMDDHHMMSS-abcdefabcdef. The main go.mod correctly uses v0.21.8-0.20260702142841-f9eefe19c7b2 for the same replacement. This will cause go mod tidy or build failures in the acceptance module.

Suggested fix: Change to replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry v0.21.8-0.20260702142841-f9eefe19c7b2 (matching the main go.mod).

Comment thread acceptance/go.mod
github.com/Microsoft/go-winio v0.6.3-0.20251027160822-ad3df93bed29 // indirect
github.com/ProtonMail/go-crypto v1.3.0 // indirect
github.com/alessio/shellescape v1.4.2 // indirect
github.com/Microsoft/go-winio 75610162e7da // indirect

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] invalid go.mod syntax

Dependency github.com/Microsoft/go-winio 75610162e7da uses a bare commit hash without the required v-prefixed pseudo-version. The same issue appears in go.mod (line 100) and tools/go.mod (line 88). This will cause module resolution failures across all three modules.

Suggested fix: Replace the bare commit hash with the proper pseudo-version in all three go.mod files (run go mod tidy in each module directory).

Comment thread go.mod
github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
github.com/power-devops/perfstat v0.0.0-20210106213030-5aafc221ea8c // indirect
github.com/prometheus/client_golang v1.23.2 // indirect
github.com/planetscale/vtprotobuf 8ae5a48058df // indirect

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[high] invalid go.mod syntax

Dependency github.com/planetscale/vtprotobuf 8ae5a48058df uses a bare commit hash without the required v-prefixed pseudo-version. The same issue appears in tools/go.mod (line 442). This will cause module resolution failures.

Suggested fix: Replace the bare commit hash with the proper pseudo-version (run go mod tidy).

Comment thread tools/go.mod
// gocloud.dev >= v0.44.0 removed the docstore/awsdynamodb package, which
// tektoncd/chains (via tektoncd/cli) still imports
replace gocloud.dev => gocloud.dev v0.43.0
replace gocloud.dev => gocloud.dev v0.46.0

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] stale-comment

The replace directive now pins gocloud.dev to v0.46.0, but the comment states gocloud.dev >= v0.44.0 removed the docstore/awsdynamodb package. Since tektoncd/chains and tektoncd/cli were bumped to newer versions that likely no longer need this package, the replace directive and stale comment should be cleaned up.

Suggested fix: Verify whether the replace is still needed by running go mod tidy without it. If it resolves, remove both the directive and comment.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code main renovate size: XXL

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants