Skip to content

fix(deps): update gomod dependencies#293

Open
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies
Open

fix(deps): update gomod dependencies#293
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies

Conversation

@red-hat-konflux-kflux-prd-rh03

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot commented Jun 16, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
github.com/emicklei/go-restful/v3 v3.11.2 → v3.13.0 age confidence indirect minor
github.com/fatih/color v1.17.0 → v1.19.0 age confidence indirect minor
github.com/fsnotify/fsnotify v1.7.0 → v1.10.1 age confidence indirect minor
github.com/fxamacker/cbor/v2 v2.7.0 → v2.9.2 age confidence indirect minor
github.com/go-logr/logr v1.4.2 → v1.4.3 age confidence require patch
github.com/go-openapi/jsonpointer v0.21.0 → v0.23.1 age confidence indirect minor
github.com/go-openapi/jsonreference v0.20.4 → v0.21.6 age confidence indirect minor
github.com/go-openapi/swag v0.23.0 → v0.26.1 age confidence indirect minor
github.com/google/gnostic-models v0.6.9 → v0.7.1 age confidence indirect minor
github.com/google/pprof d1b30fe → 7023385 age confidence indirect digest
github.com/mailru/easyjson v0.7.7 → v0.9.2 age confidence indirect minor
github.com/mattn/go-colorable v0.1.13 → v0.1.15 age confidence indirect patch
github.com/mattn/go-isatty v0.0.20 → v0.0.22 age confidence indirect patch
github.com/moby/spdystream v0.5.0 → v0.5.1 age confidence indirect patch
github.com/onsi/ginkgo/v2 v2.22.0 → v2.31.0 age confidence require minor
github.com/onsi/gomega v1.36.1 → v1.42.0 age confidence require minor
github.com/openshift/api 41627d8 → d22a47a replace digest
github.com/openshift/api 41627d8 → d22a47a require digest
github.com/openshift/cluster-api-provider-aws b85a18c → 77b3287 replace digest
github.com/openshift/cluster-api-provider-azure v0.0.0-20210209143830-3442c7a36c1e → v0.1.0-alpha.3 age confidence replace minor
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.67.1 → v0.91.0 age confidence require minor v0.92.0
github.com/prometheus/client_golang v1.22.0 → v1.23.2 age confidence require minor
github.com/prometheus/client_model v0.6.1 → v0.6.2 age confidence require patch
github.com/prometheus/common v0.62.0 → v0.68.1 age confidence indirect minor v0.69.0
github.com/prometheus/procfs v0.15.1 → v0.20.1 age confidence indirect minor
github.com/spf13/cobra v1.8.1 → v1.10.2 age confidence indirect minor
github.com/spf13/pflag v1.0.5 → v1.0.10 age confidence indirect patch
go.uber.org/mock v0.3.0 → v0.6.0 age confidence require minor
go.uber.org/zap v1.27.0 → v1.28.0 age confidence require minor
golang.org/x/mod v0.27.0 → v0.37.0 age confidence indirect minor
golang.org/x/net v0.45.0 → v0.56.0 age confidence indirect minor
golang.org/x/oauth2 v0.27.0 → v0.36.0 age confidence indirect minor
golang.org/x/sync v0.17.0 → v0.21.0 age confidence indirect minor
golang.org/x/sys v0.36.0 → v0.46.0 age confidence indirect minor
golang.org/x/term v0.35.0 → v0.44.0 age confidence indirect minor
golang.org/x/text v0.29.0 → v0.38.0 age confidence indirect minor
golang.org/x/time v0.9.0 → v0.15.0 age confidence indirect minor
golang.org/x/tools v0.36.0 → v0.46.0 age confidence indirect minor
gomodules.xyz/jsonpatch/v2 v2.4.0 → v2.5.0 age confidence indirect minor
google.golang.org/protobuf v1.36.5 → v1.36.11 age confidence indirect patch
gopkg.in/evanphx/json-patch.v4 v4.12.0 → v4.13.0 age confidence indirect minor
k8s.io/api v0.33.2 → v0.36.2 age confidence replace minor
k8s.io/api v0.33.2 → v0.36.2 age confidence require minor
k8s.io/apiextensions-apiserver v0.33.2 → v0.36.2 age confidence indirect minor
k8s.io/apimachinery v0.33.2 → v0.36.2 age confidence replace minor
k8s.io/apimachinery v0.33.2 → v0.36.2 age confidence require minor
k8s.io/client-go v0.33.2 → v0.36.2 age confidence replace minor
k8s.io/client-go v0.33.2 → v0.36.2 age confidence require minor
k8s.io/gengo/v2 v2.0.0-20250207200755-1244d31929d7 → v2.0.0-20260408192533-25e2208e0dc3 age confidence indirect patch
k8s.io/klog/v2 v2.130.1 → v2.140.0 age confidence indirect minor
sigs.k8s.io/controller-runtime v0.21.0 → v0.24.1 age confidence require minor
sigs.k8s.io/controller-tools v0.16.4 → v0.21.0 age confidence require minor
sigs.k8s.io/e2e-framework v0.2.0 → v0.7.0 age confidence require minor
sigs.k8s.io/json 9aa6b5e → 2d32026 age confidence indirect digest
sigs.k8s.io/structured-merge-diff/v4 v4.6.0 → v4.7.0 age confidence indirect minor
sigs.k8s.io/yaml v1.4.0 → v1.6.0 age confidence indirect minor

Release Notes

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.13.0

Compare Source

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)

v3.12.2

Compare Source

  • allow empty payloads in post,put,patch, issue #​580 ( thanks @​liggitt, Jordan Liggitt)

v3.12.1

Compare Source

  • fix misroute when dealing multiple webservice with regex (#​549) (thanks Haitao Chen)

v3.12.0

Compare Source

v3.11.3

Compare Source

  • better not have 2 tags on one commit
fatih/color (github.com/fatih/color)

v1.19.0

Compare Source

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

v1.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: fatih/color@v1.17.0...v1.18.0

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes

  • inotify: don't remove sibling watches sharing a path prefix (#​754)

  • inotify, windows: don't rename sibling watches sharing a path prefix
    (#​755)

v1.10.0

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

  • inotify: improve initialization error message (#​731)

  • inotify: send Rename event if recursive watch is renamed (#​696)

  • inotify: avoid copying event buffers when reading names (#​741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#​748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#​740)

  • windows: fix nil pointer dereference in remWatch (#​736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#​709, #​749)

v1.9.0

Compare Source

Changes and fixes

  • all: make BufferedWatcher buffered again (#​657)

  • inotify: fix race when adding/removing watches while a watched path is being deleted (#​678, #​686)

  • inotify: don't send empty event if a watched path is unmounted (#​655)

  • inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#​679)

  • kqueue: fix watching relative symlinks (#​681)

  • kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#​682)

  • illumos: don't send error if changed file is deleted while processing the event (#​678)

v1.8.0

Compare Source

Additions

  • all: add FSNOTIFY_DEBUG to print debug logs to stderr (#​619)
Changes and fixes

  • windows: fix behaviour of WatchList() to be consistent with other platforms (#​610)

  • kqueue: ignore events with Ident=0 (#​590)

  • kqueue: set O_CLOEXEC to prevent passing file descriptors to children (#​617)

  • kqueue: emit events as "/path/dir/file" instead of "path/link/file" when watching a symlink (#​625)

  • inotify: don't send event for IN_DELETE_SELF when also watching the parent (#​620)

  • inotify: fix panic when calling Remove() in a goroutine (#​650)

  • fen: allow watching subdirectories of watched directories (#​621)

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.2

Compare Source

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed

  • Reject encoding indefinite-length map with odd item count by @​fxamacker in #​764
  • Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @​fxamacker in #​765
  • Make TagSet.Remove a no-op when contentType is nil by @​fxamacker in #​766
  • Refactor indefinite-length encoding and improve chunk validation during encoding by @​fxamacker in #​767
  • Add more tests, fix a nit in unreachable panic message, update docs & ci by @​fxamacker in #​768
CI / GitHub Actions and Docs
🔎 Details...

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

v2.9.1

Compare Source

This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.

🐞 Bug fixes related to the keyasint feature

These changes only affect Go struct fields tagged with keyasint:

  • [Decoding] Reject integer keys that exceed math.MaxInt64 when decoding CBOR map to a struct with keyasint field (PR #​757)
  • [Decoding] Prevent string representation of an integer key from matching the struct field tagged by keyasint (PR #​757)
  • [Encoding & Decoding] Deduplicate struct fields with the same normalized keyasint tag values (PR #​757)
🐞 Other bug fixes and defensive checks

Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).

NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).

  • [Decoding] Reject decoding epoch time encoded as floats that overflow int64 (PR #​753)
  • [Encoding] Return a cloned slice for an empty RawMessage from RawMessage.MarshalCBOR (PR #​753)
  • [Encoding] Reject encoding nil inside indefinite-length strings (PR #​750)
  • [Diagnostic] Accept valid U+FFFD replacement character (PR #​753)

What's Changed

CI / GitHub Actions and Docs
🔎 Details...

New Contributors

Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1

v2.9.0

Compare Source

v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.

v2.9.0 passed fuzz tests and is production quality. However, the new TextUnmarshaler feature will continue being fuzz tested a bit longer due to recent changes. The recent changes are limited and don't affect other parts of the codec that passed ~2 billion execs fuzzing.

What's Changed

Docs

CI

🔎 Details

Special Thanks

Many thanks to @​benluddy for adding these new features! 🎉

  • Add opt-in support for encoding.TextMarshaler and encoding.TextUnmarshaler to encode and decode from CBOR text string.
  • Add opt-in support for json.Marshaler and json.Unmarshaler via user-provided transcoding function.

New Contributors

Full Changelog: fxamacker/cbor@v2.8.0...v2.9.0

v2.8.0

Compare Source

v2.8.0 adds omitzero struct tag option, fixes and deprecates 3 functions, and bumps requirements to go 1.20+.

Many thanks to @​liggitt for contributing the omitzero support!

The "omitzero" option omits zero values from encoding, matching stdlib encoding/json behavior.
When specified in the cbor tag, the option is always honored.
When specified in the json tag, the option is honored when building with Go 1.24+.

This release fixes 3 functions (when called directly by user apps) to use same error handling on bad input as cbor.Unmarshal():

  • RawTag.UnmarshalCBOR() (thanks @​thomas-fossati for reporting this!)
  • ByteString.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

This release also deprecates those 3 functions because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

What's Changed

Other Changes
🔍 Details

Configuration

📅 Schedule: Branch creation - Between 02:00 AM and 04:59 AM, Monday through Friday ( * 2-4 * * 1-5 ) in timezone UTC, Automerge - Between 02:00 AM and 04:59 AM, Monday through Friday ( * 2-4 * * 1-5 ) in timezone UTC.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Jun 16, 2026
@red-hat-konflux-kflux-prd-rh03

red-hat-konflux-kflux-prd-rh03 Bot commented Jun 16, 2026

Copy link
Copy Markdown
Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: errors parsing go.mod:
go.mod:107:2: replace github.com/openshift/cluster-api-provider-aws: version "v0.2.1-0.20260514140640-77b3287fd6d4" invalid: go.mod has post-v0 module path "sigs.k8s.io/cluster-api-provider-aws/v2" at revision 77b3287fd6d4

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Jun 16, 2026
@openshift-ci openshift-ci Bot requested review from rbhilare and vaidehi411 June 16, 2026 04:09
@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Jun 16, 2026
@openshift-ci

openshift-ci Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot

openshift-merge-bot Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD e61a51b and 2 for PR HEAD 84d25d5 in total

@openshift-ci

openshift-ci Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-binary-build-success 84d25d5 link true /test e2e-binary-build-success
ci/prow/lint 84d25d5 link true /test lint
ci/prow/validate 84d25d5 link true /test validate
ci/prow/coverage 84d25d5 link true /test coverage
ci/prow/images 84d25d5 link true /test images
ci/prow/test 84d25d5 link true /test test

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 84d25d5 to 7121f06 Compare June 17, 2026 04:17
@openshift-ci openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jun 17, 2026
@openshift-ci

openshift-ci Bot commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

New changes are detected. LGTM label has been removed.

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 7121f06 to 3293fdc Compare June 18, 2026 04:08
@red-hat-konflux-kflux-prd-rh03
fix(deps): update gomod dependencies
ff2fadf 
Signed-off-by: red-hat-konflux-kflux-prd-rh03 <206760901+red-hat-konflux-kflux-prd-rh03[bot]@users.noreply.github.com>
@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 3293fdc to ff2fadf Compare June 19, 2026 04:10
@openshift-ci

openshift-ci Bot commented Jun 19, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rbhilare rbhilare Awaiting requested review from rbhilare

@vaidehi411 vaidehi411 Awaiting requested review from vaidehi411

Assignees

No one assigned

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants