Skip to content

Update Go Dependencies - #126

Open
red-hat-konflux[bot] wants to merge 1 commit into
tech-previewfrom
konflux/mintmaker/tech-preview/go-deps
Open

Update Go Dependencies#126
red-hat-konflux[bot] wants to merge 1 commit into
tech-previewfrom
konflux/mintmaker/tech-preview/go-deps

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
github.com/ThalesGroup/crypto11 require patch v1.6.2 → v1.6.8
github.com/cenkalti/backoff/v5 indirect major v5.0.3 → v7.0.0
github.com/go-logr/logr indirect patch v1.4.3 → v1.4.4
github.com/go-openapi/analysis indirect patch v0.25.3 → v0.25.5
github.com/go-openapi/loads indirect minor v0.24.0 → v0.25.0
github.com/go-openapi/runtime indirect minor v0.32.5 → v0.33.0
github.com/go-openapi/runtime/server-middleware indirect minor v0.32.5 → v0.33.0
github.com/go-openapi/spec indirect patch v0.22.6 → v0.22.9
github.com/go-openapi/swag indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/cmdutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/conv indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/fileutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/jsonname indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/jsonutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/loading indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/mangling indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/netutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/stringutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/typeutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/yamlutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/validate indirect patch v0.26.0 → v0.26.1
github.com/oklog/ulid/v2 indirect patch v2.1.1 → v2.1.2
github.com/sigstore/sigstore-go require minor v1.2.2 → v1.3.0
github.com/theupdateframework/go-tuf indirect major v0.7.0 → v2.4.2
go.opentelemetry.io/proto/otlp indirect minor v1.10.0 → v1.11.0
go.yaml.in/yaml/v3 indirect patch v3.0.4 → v3.0.5
google.golang.org/genproto/googleapis/api indirect digest e75dac1 → 8efbd57
google.golang.org/genproto/googleapis/rpc indirect digest e75dac1 → 8efbd57
google.golang.org/grpc indirect minor v1.82.1 → v1.83.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

ThalesGroup/crypto11 (github.com/ThalesGroup/crypto11)

v1.6.8

Compare Source

What's Changed

  • downgrade the go version to 1.25.0 and add go toolchain by @​Nicolas-Peiffer in eclipse-keypont#139
  • fix: restore eclipse-keypont module path; refresh README install command, Go Reference badge and documentation links

Full Changelog: eclipse-keypont/crypto11@v1.6.5...v1.6.8

Module path restored — github.com/eclipse-keypont/crypto11

This release restores the correct module path following the repository move from
github.com/ThalesGroup/crypto11 to github.com/eclipse-keypont/crypto11.

Migrating
go get github.com/eclipse-keypont/crypto11@​v1.6.8
-import "github.com/ThalesGroup/crypto11"
+import "github.com/eclipse-keypont/crypto11"

The old path is deprecated and frozen at
ThalesGroup/crypto11@​v1.6.7.
It will receive no further updates, including security fixes. GitHub still redirects the old
repository URL, but the Go module path must be updated by hand — go get cannot follow it for you.

If you are already on this path: upgrade v1.6.5 → v1.6.8

v1.6.6 and v1.6.7 declare the old module path and exist only to publish the deprecation
notice for github.com/ThalesGroup/crypto11. They are not usable as
github.com/eclipse-keypont/crypto11 and will fail with:

module declares its path as: github.com/ThalesGroup/crypto11
        but was required as: github.com/eclipse-keypont/crypto11

v1.6.8 fixes this, so github.com/eclipse-keypont/crypto11@​latest resolves correctly again.

Go version policy

go.mod targets go 1.25.0 with toolchain go1.25.8. The go directive is kept conservative
so this library does not raise the minimum Go version for projects that import it, while
maintainers build and test with the latest patch toolchain. See #​137 and #​139.

The v1.6.x series is the current stable line. v2.x.y on github.com/eclipse-keypont/crypto11/v2 is in
development (v2.0.0-rc3), which is why pkg.go.dev reports a higher tagged major version.

v1.6.7

Compare Source

v1.6.6

Compare Source

v1.6.5

Compare Source

Full Changelog: eclipse-keypont/crypto11@v1.6.3...v1.6.5

v1.6.4

Compare Source

v1.6.3

Compare Source

cenkalti/backoff (github.com/cenkalti/backoff/v5)

v7.0.0

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

go-logr/logr (github.com/go-logr/logr)

v1.4.4

Compare Source

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

go-openapi/analysis (github.com/go-openapi/analysis)

v0.25.5

Compare Source

0.25.5 - 2026-07-20

Full Changelog: go-openapi/analysis@v0.25.4...v0.25.5

1 commits in this release.

Code quality
  • fix(flatten): in options, guarded against possible json serialization of by @​fredbi in #​221 ...
People who contributed to this release

analysis license terms

License

v0.25.4

Compare Source

0.25.4 - 2026-07-20

Full Changelog: go-openapi/analysis@v0.25.3...v0.25.4

8 commits in this release.

Implemented enhancements
  • feat: inject a confined document loader into flatten and schema analysis by @​fredbi in #​220 ...
Documentation
Updates
Other (technical)
People who contributed to this release

analysis license terms

License

Per-module changes

internal/testintegration (0.25.4)

Implemented enhancements
  • feat: inject a confined document loader into flatten and schema analysis by @​fredbi in #​220 ...
Updates
go-openapi/loads (github.com/go-openapi/loads)

v0.25.0

Compare Source

0.25.0 - 2026-07-20

Full Changelog: go-openapi/loads@v0.24.2...v0.25.0

1 commits in this release.

Implemented enhancements
People who contributed to this release

loads license terms

License

v0.24.2

Compare Source

0.24.2 - 2026-07-20

Full Changelog: go-openapi/loads@v0.24.1...v0.24.2

1 commits in this release.

Miscellaneous tasks
People who contributed to this release

loads license terms

License

v0.24.1

Compare Source

0.24.1 - 2026-07-20

Full Changelog: go-openapi/loads@v0.24.0...v0.24.1

10 commits in this release.

Documentation
Miscellaneous tasks
Security
Updates
People who contributed to this release

loads license terms

License

go-openapi/runtime (github.com/go-openapi/runtime)

v0.33.0

Compare Source

0.33.0 - 2026-07-27

Support for server-side streaming of multipart form

Full Changelog: go-openapi/runtime@v0.32.6...v0.33.0

3 commits in this release.

Implemented enhancements
Miscellaneous tasks
Updates
People who contributed to this release
New Contributors

runtime license terms

License

Per-module changes
client-middleware/opentracing (0.33.0)
Miscellaneous tasks

v0.32.6

Compare Source

0.32.6 - 2026-07-21

Full Changelog: go-openapi/runtime@v0.32.5...v0.32.6

4 commits in this release.

Miscellaneous tasks
Updates
People who contributed to this release

runtime license terms

License

Per-module changes
client-middleware/opentracing (0.32.6)
Miscellaneous tasks
Updates
docs/examples (0.32.6)
Miscellaneous tasks
Updates
go-openapi/spec (github.com/go-openapi/spec)

v0.22.9

Compare Source

0.22.9 - 2026-07-20

Full Changelog: go-openapi/spec@v0.22.8...v0.22.9

1 commits in this release.

Implemented enhancements
  • feat(expander): add ExpandParameterWithOptions and ExpandResponseWithOptions by @​fredbi in #​292 ...
People who contributed to this release

spec license terms

License

v0.22.8

Compare Source

0.22.8 - 2026-07-20

Full Changelog: go-openapi/spec@v0.22.7...v0.22.8

1 commits in this release.

Implemented enhancements
  • feat(expander): add ExpandSchemaWithOptions for confined schema expansion by @​fredbi in #​291 ...
People who contributed to this release

spec license terms

License

v0.22.7

Compare Source

0.22.7 - 2026-07-20

Full Changelog: go-openapi/spec@v0.22.6...v0.22.7

17 commits in this release.

Implemented enhancements
  • feat(expander): accept an option-aware document loader by @​fredbi ...
Fixed bugs
  • fix(ref): stop performing a network request in IsValidURI by @​fredbi ...
  • fix(expander): cap $ref expansion node count to prevent amplification DoS by @​fredbi ...
Documentation
Miscellaneous tasks
Security
  • test(expander): validate the SSRF posture of an injected loader by @​fredbi ...
  • docs(security): warn that the default $ref loader is not sandboxed by @​fredbi ...
Updates
Other (technical)
People who contributed to this release

spec license terms

License

go-openapi/swag (github.com/go-openapi/swag)

v0.28.0

Compare Source

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

Implemented enhancements
Miscellaneous tasks
Updates
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.28.0)
Implemented enhancements
Miscellaneous tasks
jsonutils/adapters/easyjson (0.28.0)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.28.0)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.28.0)
Miscellaneous tasks
jsonutils (0.28.0)
Miscellaneous tasks
loading (0.28.0)
Miscellaneous tasks
yamlutils (0.28.0)
Miscellaneous tasks

v0.27.3

Compare Source

0.27.3 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.2...v0.27.3

2 commits in this release.

Fixed bugs
Miscellaneous tasks
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.27.3)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.27.3)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.27.3)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.27.3)
Miscellaneous tasks
jsonutils (0.27.3)
Miscellaneous tasks
loading (0.27.3)
Fixed bugs
Miscellaneous tasks
yamlutils (0.27.3)
Miscellaneous tasks

v0.27.2

Compare Source

0.27.2 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.1...v0.27.2

2 commits in this release.

Fixed bugs
Miscellaneous tasks
People who contributed to this release

swag license terms

License

Per-module changes

conv (0.27.2)

Miscellaneous tasks

jsonutils/adapters/easyjson (0.27.2)

Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.27.2)

Miscellaneous tasks

jsonutils/adapters/testintegration (0.27.2)

Miscellaneous tasks

jsonutils (0.27.2)

Miscellaneous tasks

loading (0.27.2)

Fixed bugs
Miscellaneous tasks

yamlutils (0.27.2)

Miscellaneous tasks

v0.27.1

Compare Source

0.27.1 - 2026-07-19

Full Changelog: go-openapi/swag@v0.27.0...v0.27.1

12 commits in this release.

Fixed bugs
  • fix(yamlutils): bound YAML anchor/alias expansion and detect cycles by @​fredbi ...
  • fix(yamlutils): bound recursion depth in YAML<->JSON transforms by @​fredbi ...
  • fix(jsonutils): bound recursion depth in ordered-JSON marshal/unmarshal by @​fredbi ...
Refactor
  • refact(adapters): refactored pools and options in json adapters. by @​fredbi ...
Documentation
Performance
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release

swag license terms

License

Per-module changes

conv (0.27.1)

Miscellaneous tasks

jsonname (0.27.1)

Updates

jsonutils/adapters/easyjson (0.27.1)

Fixed bugs
  • fix(jsonutils): bound recursion depth in ordered-JSON marshal/unmarshal by @​fredbi ...
Refactor
  • refact(adapters): refactored pools and options in json adapters. by @​fredbi ...
Miscellaneous tasks
Other (technical)
  • Perf/adapt

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 16 times, most recently from 0f390a8 to 458fe50 Compare July 27, 2026 21:05
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 12 times, most recently from 4d7e53d to 34c56d1 Compare August 1, 2026 11:14
@red-hat-konflux

red-hat-konflux Bot commented Aug 1, 2026

Copy link
Copy Markdown
Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
google.golang.org/genproto/googleapis/api v0.0.0-20260715232425-e75dac1f907d -> v0.0.0-20260720211330-0afa2a65878a
google.golang.org/genproto/googleapis/rpc v0.0.0-20260715232425-e75dac1f907d -> v0.0.0-20260720211330-0afa2a65878a

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch from 34c56d1 to caee2aa Compare August 1, 2026 14:21
@red-hat-konflux

red-hat-konflux Bot commented Aug 1, 2026

Copy link
Copy Markdown
Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: github.com/ThalesGroup/crypto11@v1.6.8: parsing go.mod:
	module declares its path as: github.com/eclipse-keypont/crypto11
	        but was required as: github.com/ThalesGroup/crypto11

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 3 times, most recently from 0a4782e to 11b8d99 Compare August 2, 2026 05:54
@red-hat-konflux
Update Go Dependencies
b87f842 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch from 11b8d99 to b87f842 Compare August 2, 2026 18:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants