Skip to content

Update Go Dependencies - #128

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps
Open

Update Go Dependencies#128
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
github.com/ThalesGroup/crypto11 require patch v1.6.2 → v1.6.8
github.com/cenkalti/backoff/v5 indirect major v5.0.3 → v7.0.0
github.com/go-logr/logr indirect patch v1.4.3 → v1.4.4
github.com/go-openapi/analysis indirect patch v0.25.3 → v0.25.5
github.com/go-openapi/loads indirect minor v0.24.0 → v0.25.0
github.com/go-openapi/runtime/server-middleware indirect minor v0.32.5 → v0.33.0
github.com/go-openapi/spec indirect patch v0.22.6 → v0.22.9
github.com/go-openapi/swag indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/cmdutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/conv indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/fileutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/jsonname indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/jsonutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/loading indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/mangling indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/netutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/stringutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/typeutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/swag/yamlutils indirect minor v0.27.0 → v0.28.0
github.com/go-openapi/validate indirect patch v0.26.0 → v0.26.1
github.com/oklog/ulid/v2 indirect patch v2.1.1 → v2.1.2
github.com/sigstore/sigstore-go require minor v1.2.2 → v1.3.0
github.com/theupdateframework/go-tuf indirect major v0.7.0 → v2.4.2
go.opentelemetry.io/proto/otlp indirect minor v1.10.0 → v1.11.0
go.yaml.in/yaml/v3 indirect patch v3.0.4 → v3.0.5
google.golang.org/genproto/googleapis/api indirect digest e75dac1 → 8efbd57
google.golang.org/genproto/googleapis/rpc indirect digest e75dac1 → 8efbd57
google.golang.org/grpc indirect minor v1.82.1 → v1.83.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

ThalesGroup/crypto11 (github.com/ThalesGroup/crypto11)

v1.6.8

Compare Source

What's Changed

  • downgrade the go version to 1.25.0 and add go toolchain by @​Nicolas-Peiffer in eclipse-keypont#139
  • fix: restore eclipse-keypont module path; refresh README install command, Go Reference badge and documentation links

Full Changelog: eclipse-keypont/crypto11@v1.6.5...v1.6.8

Module path restored — github.com/eclipse-keypont/crypto11

This release restores the correct module path following the repository move from
github.com/ThalesGroup/crypto11 to github.com/eclipse-keypont/crypto11.

Migrating
go get github.com/eclipse-keypont/crypto11@​v1.6.8
-import "github.com/ThalesGroup/crypto11"
+import "github.com/eclipse-keypont/crypto11"

The old path is deprecated and frozen at
ThalesGroup/crypto11@​v1.6.7.
It will receive no further updates, including security fixes. GitHub still redirects the old
repository URL, but the Go module path must be updated by hand — go get cannot follow it for you.

If you are already on this path: upgrade v1.6.5 → v1.6.8

v1.6.6 and v1.6.7 declare the old module path and exist only to publish the deprecation
notice for github.com/ThalesGroup/crypto11. They are not usable as
github.com/eclipse-keypont/crypto11 and will fail with:

module declares its path as: github.com/ThalesGroup/crypto11
        but was required as: github.com/eclipse-keypont/crypto11

v1.6.8 fixes this, so github.com/eclipse-keypont/crypto11@​latest resolves correctly again.

Go version policy

go.mod targets go 1.25.0 with toolchain go1.25.8. The go directive is kept conservative
so this library does not raise the minimum Go version for projects that import it, while
maintainers build and test with the latest patch toolchain. See #​137 and #​139.

The v1.6.x series is the current stable line. v2.x.y on github.com/eclipse-keypont/crypto11/v2 is in
development (v2.0.0-rc3), which is why pkg.go.dev reports a higher tagged major version.

v1.6.7

Compare Source

v1.6.6

Compare Source

v1.6.5

Compare Source

Full Changelog: eclipse-keypont/crypto11@v1.6.3...v1.6.5

v1.6.4

Compare Source

v1.6.3

Compare Source

cenkalti/backoff (github.com/cenkalti/backoff/v5)

v7.0.0

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

go-logr/logr (github.com/go-logr/logr)

v1.4.4

Compare Source

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

go-openapi/analysis (github.com/go-openapi/analysis)

v0.25.5

Compare Source

0.25.5 - 2026-07-20

Full Changelog: go-openapi/analysis@v0.25.4...v0.25.5

1 commits in this release.

Code quality
  • fix(flatten): in options, guarded against possible json serialization of by @​fredbi in #​221 ...
People who contributed to this release

analysis license terms

License

v0.25.4

Compare Source

0.25.4 - 2026-07-20

Full Changelog: go-openapi/analysis@v0.25.3...v0.25.4

8 commits in this release.

Implemented enhancements
  • feat: inject a confined document loader into flatten and schema analysis by @​fredbi in #​220 ...
Documentation
Updates
Other (technical)
People who contributed to this release

analysis license terms

License

Per-module changes

internal/testintegration (0.25.4)

Implemented enhancements
  • feat: inject a confined document loader into flatten and schema analysis by @​fredbi in #​220 ...
Updates
go-openapi/loads (github.com/go-openapi/loads)

v0.25.0

Compare Source

0.25.0 - 2026-07-20

Full Changelog: go-openapi/loads@v0.24.2...v0.25.0

1 commits in this release.

Implemented enhancements
People who contributed to this release

loads license terms

License

v0.24.2

Compare Source

0.24.2 - 2026-07-20

Full Changelog: go-openapi/loads@v0.24.1...v0.24.2

1 commits in this release.

Miscellaneous tasks
People who contributed to this release

loads license terms

License

v0.24.1

Compare Source

0.24.1 - 2026-07-20

Full Changelog: go-openapi/loads@v0.24.0...v0.24.1

10 commits in this release.

Documentation
Miscellaneous tasks
Security
Updates
People who contributed to this release

loads license terms

License

go-openapi/runtime (github.com/go-openapi/runtime/server-middleware)

v0.33.0

Compare Source

0.33.0 - 2026-07-27

Support for server-side streaming of multipart form

Full Changelog: go-openapi/runtime@v0.32.6...v0.33.0

3 commits in this release.

Implemented enhancements
Miscellaneous tasks
Updates
People who contributed to this release
New Contributors

runtime license terms

License

Per-module changes
client-middleware/opentracing (0.33.0)
Miscellaneous tasks

v0.32.6

Compare Source

0.32.6 - 2026-07-21

Full Changelog: go-openapi/runtime@v0.32.5...v0.32.6

4 commits in this release.

Miscellaneous tasks
Updates
People who contributed to this release

runtime license terms

License

Per-module changes
client-middleware/opentracing (0.32.6)
Miscellaneous tasks
Updates
docs/examples (0.32.6)
Miscellaneous tasks
Updates
go-openapi/spec (github.com/go-openapi/spec)

v0.22.9

Compare Source

0.22.9 - 2026-07-20

Full Changelog: go-openapi/spec@v0.22.8...v0.22.9

1 commits in this release.

Implemented enhancements
  • feat(expander): add ExpandParameterWithOptions and ExpandResponseWithOptions by @​fredbi in #​292 ...
People who contributed to this release

spec license terms

License

v0.22.8

Compare Source

0.22.8 - 2026-07-20

Full Changelog: go-openapi/spec@v0.22.7...v0.22.8

1 commits in this release.

Implemented enhancements
  • feat(expander): add ExpandSchemaWithOptions for confined schema expansion by @​fredbi in #​291 ...
People who contributed to this release

spec license terms

License

v0.22.7

Compare Source

0.22.7 - 2026-07-20

Full Changelog: go-openapi/spec@v0.22.6...v0.22.7

17 commits in this release.

Implemented enhancements
  • feat(expander): accept an option-aware document loader by @​fredbi ...
Fixed bugs
  • fix(ref): stop performing a network request in IsValidURI by @​fredbi ...
  • fix(expander): cap $ref expansion node count to prevent amplification DoS by @​fredbi ...
Documentation
Miscellaneous tasks
Security
  • test(expander): validate the SSRF posture of an injected loader by @​fredbi ...
  • docs(security): warn that the default $ref loader is not sandboxed by @​fredbi ...
Updates
Other (technical)
People who contributed to this release

spec license terms

License

go-openapi/swag (github.com/go-openapi/swag)

v0.28.0

Compare Source

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

Implemented enhancements
Miscellaneous tasks
Updates
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.28.0)
Implemented enhancements
Miscellaneous tasks
jsonutils/adapters/easyjson (0.28.0)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.28.0)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.28.0)
Miscellaneous tasks
jsonutils (0.28.0)
Miscellaneous tasks
loading (0.28.0)
Miscellaneous tasks
yamlutils (0.28.0)
Miscellaneous tasks

v0.27.3

Compare Source

0.27.3 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.2...v0.27.3

2 commits in this release.

Fixed bugs
Miscellaneous tasks
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.27.3)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.27.3)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.27.3)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.27.3)
Miscellaneous tasks
jsonutils (0.27.3)
Miscellaneous tasks
loading (0.27.3)
Fixed bugs
Miscellaneous tasks
yamlutils (0.27.3)
Miscellaneous tasks

v0.27.2

Compare Source

0.27.2 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.1...v0.27.2

2 commits in this release.

Fixed bugs
Miscellaneous tasks
People who contributed to this release

swag license terms

License

Per-module changes

conv (0.27.2)

Miscellaneous tasks

jsonutils/adapters/easyjson (0.27.2)

Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.27.2)

Miscellaneous tasks

jsonutils/adapters/testintegration (0.27.2)

Miscellaneous tasks

jsonutils (0.27.2)

Miscellaneous tasks

loading (0.27.2)

Fixed bugs
Miscellaneous tasks

yamlutils (0.27.2)

Miscellaneous tasks

v0.27.1

Compare Source

0.27.1 - 2026-07-19

Full Changelog: go-openapi/swag@v0.27.0...v0.27.1

12 commits in this release.

Fixed bugs
  • fix(yamlutils): bound YAML anchor/alias expansion and detect cycles by @​fredbi ...
  • fix(yamlutils): bound recursion depth in YAML<->JSON transforms by @​fredbi ...
  • fix(jsonutils): bound recursion depth in ordered-JSON marshal/unmarshal by @​fredbi ...
Refactor
  • refact(adapters): refactored pools and options in json adapters. by @​fredbi ...
Documentation
Performance
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release

swag license terms

License

Per-module changes

conv (0.27.1)

Miscellaneous tasks

jsonname (0.27.1)

Updates

jsonutils/adapters/easyjson (0.27.1)

Fixed bugs
  • fix(jsonutils): bound recursion depth in ordered-JSON marshal/unmarshal by @​fredbi ...
Refactor
  • refact(adapters): refactored pools and options in json adapters. by @​fredbi ...
Miscellaneous tasks
Other (technical)

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 81383d8 to 2a4384b Compare July 20, 2026 21:40
@codecov-commenter

codecov-commenter commented Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 41.90%. Comparing base (73a90c8) to head (6fcb396).

Additional details and impacted files 
@@           Coverage Diff           @@
##             main     #128   +/-   ##
=======================================
  Coverage   41.90%   41.90%           
=======================================
  Files          57       57           
  Lines        3625     3625           
=======================================
  Hits         1519     1519           
  Misses       1967     1967           
  Partials      139      139
Flag Coverage Δ
unit 41.90% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 2a4384b to 6e2130b Compare July 21, 2026 01:39
@red-hat-konflux red-hat-konflux Bot changed the title Update Go Dependencies Update Go Dependencies to v2 Jul 22, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 6e2130b to d6ab33a Compare July 22, 2026 21:44
@red-hat-konflux red-hat-konflux Bot changed the title Update Go Dependencies to v2 Update Go Dependencies Jul 22, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 23 times, most recently from 4f822eb to c618509 Compare July 29, 2026 22:12
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 8 times, most recently from dbd3ae7 to 6fcb396 Compare August 1, 2026 11:47
@red-hat-konflux

red-hat-konflux Bot commented Aug 1, 2026

Copy link
Copy Markdown
Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
google.golang.org/genproto/googleapis/api v0.0.0-20260715232425-e75dac1f907d -> v0.0.0-20260720211330-0afa2a65878a
google.golang.org/genproto/googleapis/rpc v0.0.0-20260715232425-e75dac1f907d -> v0.0.0-20260720211330-0afa2a65878a

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 6fcb396 to fe84736 Compare August 1, 2026 13:42
@red-hat-konflux

red-hat-konflux Bot commented Aug 1, 2026

Copy link
Copy Markdown
Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: github.com/ThalesGroup/crypto11@v1.6.8: parsing go.mod:
	module declares its path as: github.com/eclipse-keypont/crypto11
	        but was required as: github.com/ThalesGroup/crypto11

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 5 times, most recently from 3023a4a to fb7564a Compare August 2, 2026 22:12
@red-hat-konflux
Update Go Dependencies
e2d969d 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from fb7564a to e2d969d Compare August 3, 2026 02:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@codecov-commenter