Skip to content

fix(deps): update gomod dependencies - #296

Open
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/gomod-dependencies
Open

fix(deps): update gomod dependencies#296
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/gomod-dependencies

Conversation

@red-hat-konflux-kflux-prd-rh03

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot commented Jun 26, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
github.com/fxamacker/cbor/v2 v2.9.2 → v2.9.3 age confidence indirect patch
github.com/go-logr/logr v1.4.3 → v1.4.4 age confidence indirect patch
github.com/go-openapi/swag v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/cmdutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/conv v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/fileutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/jsonutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/loading v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/mangling v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/netutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/stringutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/typeutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/yamlutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/onsi/ginkgo/v2 v2.32.0 → v2.32.1 age confidence require patch
github.com/openshift-online/ocm-api-model/clientapi v0.0.461 → v0.0.466 age confidence indirect patch
github.com/openshift-online/ocm-api-model/model v0.0.461 → v0.0.466 age confidence indirect patch
github.com/openshift-online/ocm-sdk-go v0.1.505 → v0.1.510 age confidence require patch
github.com/openshift/api ef71f94 → 38053d3 require digest
github.com/openshift/osde2e-common 751e0d2 → dcf3e27 age confidence require digest
github.com/prometheus/client_golang v1.23.2 → v1.24.1 age confidence require minor
github.com/prometheus/common v0.69.0 → v0.70.1 age confidence indirect minor
go.opentelemetry.io/otel v1.44.0 → v1.45.0 age confidence indirect minor v1.46.0
go.opentelemetry.io/otel/trace v1.44.0 → v1.45.0 age confidence indirect minor v1.46.0
go.yaml.in/yaml/v3 v3.0.4 → v3.0.5 age confidence indirect patch
golang.org/x/mod v0.38.0 → v0.40.0 age confidence indirect minor
golang.org/x/net v0.57.0 → v0.58.0 age confidence indirect minor
golang.org/x/text v0.40.0 → v0.41.0 age confidence indirect minor
golang.org/x/tools v0.48.0 → v0.49.0 age confidence indirect minor
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af → v1.36.12 age confidence indirect patch
k8s.io/api v0.36.2 → v0.36.4 age confidence require patch v0.37.0
k8s.io/apiextensions-apiserver v0.36.2 → v0.36.4 age confidence indirect patch v0.37.0
k8s.io/apimachinery v0.36.2 → v0.36.4 age confidence require patch v0.37.0
k8s.io/client-go v0.36.2 → v0.36.4 age confidence require patch v0.37.0
k8s.io/component-base v0.36.2 → v0.36.4 age confidence indirect patch v0.37.0
k8s.io/kube-openapi cdb1db5 → be32def age confidence indirect digest
k8s.io/streaming v0.36.2 → v0.37.0 age confidence indirect minor

Release Notes

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.3

Compare Source

This release fixes a potential panic when decoding into a time.Time from a CBOR byte string, map, or array under certain conditions.

Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with timeTag = DecTagRequired.

Upgrading to v2.9.3 is recommended.

The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.

What's Changed

  • Skip data item when decoding to time.Time fails under certain conditions by @​fxamacker in #​803

Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3

go-logr/logr (github.com/go-logr/logr)

v1.4.4

Compare Source

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

go-openapi/swag (github.com/go-openapi/swag)

v0.29.1

Compare Source

0.29.1 - 2026-08-21

Full Changelog: go-openapi/swag@v0.29.0...v0.29.1

4 commits in this release.

Testing
Miscellaneous tasks
Updates
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.29.1)
Miscellaneous tasks
jsonname (0.29.1)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.29.1)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.29.1)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.29.1)
Miscellaneous tasks
jsonutils (0.29.1)
Testing
Miscellaneous tasks
loading (0.29.1)
Miscellaneous tasks
mangling (0.29.1)
Miscellaneous tasks
netutils (0.29.1)
Miscellaneous tasks
pools (0.29.1)
Miscellaneous tasks
stringutils (0.29.1)
Miscellaneous tasks
typeutils (0.29.1)
Miscellaneous tasks
yamlutils (0.29.1)
Miscellaneous tasks

v0.29.0

Compare Source

0.29.0 - 2026-08-19

New fsutils on top of io.FS

Full Changelog: go-openapi/swag@v0.28.0...v0.29.0

10 commits in this release.

Implemented enhancements
Documentation
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.29.0)
Miscellaneous tasks
fileutils (0.29.0)
Implemented enhancements
jsonname (0.29.0)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.29.0)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration/benchmarks (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)
jsonutils/adapters/testintegration (0.29.0)
Miscellaneous tasks
Updates
jsonutils/fixtures_test (0.29.0)
Miscellaneous tasks
Updates
jsonutils (0.29.0)
Miscellaneous tasks
Updates
loading (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)
mangling (0.29.0)
Miscellaneous tasks
netutils (0.29.0)
Miscellaneous tasks
pools (0.29.0)
Miscellaneous tasks
stringutils (0.29.0)
Miscellaneous tasks
typeutils (0.29.0)
Miscellaneous tasks
yamlutils (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

v0.28.0

Compare Source

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

Implemented enhancements
Miscellaneous tasks
Updates
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.28.0)
Implemented enhancements
Miscellaneous tasks
jsonutils/adapters/easyjson (0.28.0)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.28.0)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.28.0)
Miscellaneous tasks
jsonutils (0.28.0)
Miscellaneous tasks
loading (0.28.0)
Miscellaneous tasks
yamlutils (0.28.0)
Miscellaneous tasks

v0.27.3

Compare Source

0.27.3 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.2...v0.27.3

2 commits in this release.

Fixed bugs
Miscellaneous tasks
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.27.3)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.27.3)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.27.3)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.27.3)
Miscellaneous tasks
jsonutils (0.27.3)
Miscellaneous tasks
loading (0.27.3)
Fixed bugs
Miscellaneous tasks
yamlutils (0.27.3)
Miscellaneous tasks

v0.27.2

Compare Source

0.27.2 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.1...v0.27.2

2 commits in this release.

Fixed bugs
Miscellaneous tasks
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.27.2)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.27.2)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.27.2)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.27.2)
Miscellaneous tasks
jsonutils (0.27.2)
Miscellaneous tasks
loading (0.27.2)
Fixed bugs
Miscellaneous tasks
yamlutils (0.27.2)
Miscellaneous tasks

v0.27.1

Compare Source

0.27.1 - 2026-07-19

Full Changelog: go-openapi/swag@v0.27.0...v0.27.1

12 commits in this release.

Fixed bugs
  • fix(yamlutils): bound YAML anchor/alias expansion and detect cycles by @​fredbi ...
  • fix(yamlutils): bound recursion depth in YAML<->JSON transforms by @​fredbi ...
  • fix(jsonutils): bound recursion depth in ordered-JSON marshal/unmarshal by @​fredbi ...
Refactor
  • refact(adapters): refactored pools and options in json adapters. by @​fredbi ...
Documentation
Performance
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.27.1)
Miscellaneous tasks
jsonname (0.27.1)
Updates
jsonutils/adapters/easyjson (0.27.1)
Fixed bugs
  • fix(jsonutils): bound recursion depth in ordered-JSON marshal/unmarshal by @​fredbi ...
Refactor
  • refact(adapters): refactored pools and options in json adapters. by @​fredbi ...
Miscellaneous tasks
Other (technical)

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • Between 02:00 AM and 04:59 AM, Monday through Friday (* 2-4 * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Jun 26, 2026
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot enabled auto-merge (squash) June 26, 2026 04:02
@openshift-ci
openshift-ci Bot requested review from TheUndeadKing and ravitri June 26, 2026 04:05
@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Jun 26, 2026
@openshift-ci

openshift-ci Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot

openshift-merge-bot Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD 0c2ef88 and 2 for PR HEAD 665afbf in total

@openshift-ci

openshift-ci Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/validate 665afbf link true /test validate
ci/prow/coverage 665afbf link true /test coverage

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch from 665afbf to 0b5369d Compare June 29, 2026 04:11
@openshift-ci openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jun 29, 2026
@openshift-ci

openshift-ci Bot commented Jun 29, 2026

Copy link
Copy Markdown
Contributor

New changes are detected. LGTM label has been removed.

@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch 5 times, most recently from f541db8 to 0ef1f86 Compare July 7, 2026 04:02
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch 5 times, most recently from 8900cce to 06f111d Compare July 14, 2026 04:02
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch 3 times, most recently from dffc614 to 4c19129 Compare July 23, 2026 04:02
@red-hat-konflux-kflux-prd-rh03

red-hat-konflux-kflux-prd-rh03 Bot commented Jul 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
github.com/go-openapi/jsonpointer v0.24.0 -> v1.0.0
github.com/go-openapi/jsonreference v0.21.6 -> v1.0.0

@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch 3 times, most recently from 48b47ad to bceb327 Compare July 28, 2026 04:03
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch 4 times, most recently from 1fe59fd to 28e94b1 Compare August 4, 2026 04:03
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch 4 times, most recently from 97d8954 to d297c89 Compare August 11, 2026 04:04
@openshift-ci

openshift-ci Bot commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch 2 times, most recently from 136f2de to a70cd68 Compare August 17, 2026 04:04
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch 3 times, most recently from b8d95bc to b9f9a1e Compare August 25, 2026 04:03
@red-hat-konflux-kflux-prd-rh03
fix(deps): update gomod dependencies
0cf3c75 
Signed-off-by: red-hat-konflux-kflux-prd-rh03 <206760901+red-hat-konflux-kflux-prd-rh03[bot]@users.noreply.github.com>
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch from b9f9a1e to 0cf3c75 Compare August 27, 2026 04:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@ravitri ravitri Awaiting requested review from ravitri
@TheUndeadKing TheUndeadKing Awaiting requested review from TheUndeadKing

Assignees

No one assigned

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants