Skip to content

chore(deps): update go dependencies - #1741

Open
red-hat-konflux[bot] wants to merge 1 commit into
release-1.3from
konflux/mintmaker/release-1.3/go-deps
Open

chore(deps): update go dependencies#1741
red-hat-konflux[bot] wants to merge 1 commit into
release-1.3from
konflux/mintmaker/release-1.3/go-deps

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Apr 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
github.com/Masterminds/semver/v3 indirect minor v3.4.0 → v3.5.0
github.com/docker/cli indirect minor v29.4.0+incompatible → v29.7.0+incompatible v29.7.1+incompatible
github.com/docker/docker-credential-helpers indirect patch v0.9.5 → v0.9.8
github.com/fsnotify/fsnotify indirect minor v1.9.0 → v1.10.1
github.com/fxamacker/cbor/v2 indirect patch v2.9.1 → v2.9.2
github.com/go-logr/logr require patch v1.4.3 → v1.4.4
github.com/go-openapi/jsonpointer indirect major v0.22.5 → v1.0.0
github.com/go-openapi/jsonreference indirect major v0.21.5 → v1.0.0
github.com/go-openapi/swag indirect minor v0.26.0 → v0.28.0
github.com/go-openapi/swag/cmdutils indirect minor v0.26.0 → v0.28.0
github.com/go-openapi/swag/conv indirect minor v0.26.0 → v0.28.0
github.com/go-openapi/swag/fileutils indirect minor v0.26.0 → v0.28.0
github.com/go-openapi/swag/jsonname indirect minor v0.26.0 → v0.28.0
github.com/go-openapi/swag/jsonutils indirect minor v0.26.0 → v0.28.0
github.com/go-openapi/swag/loading indirect minor v0.26.0 → v0.28.0
github.com/go-openapi/swag/mangling indirect minor v0.26.0 → v0.28.0
github.com/go-openapi/swag/netutils indirect minor v0.26.0 → v0.28.0
github.com/go-openapi/swag/stringutils indirect minor v0.26.0 → v0.28.0
github.com/go-openapi/swag/typeutils indirect minor v0.26.0 → v0.28.0
github.com/go-openapi/swag/yamlutils indirect minor v0.26.0 → v0.28.0
github.com/google/go-containerregistry require patch v0.21.5 → v0.21.7 v0.21.8
github.com/klauspost/compress indirect minor v1.18.5 → v1.19.1
github.com/onsi/ginkgo/v2 require minor v2.28.1 → v2.32.0
github.com/onsi/gomega require minor v1.39.1 → v1.42.1
github.com/openshift/api require digest 464776f → 05ea89d
github.com/operator-framework/api require minor v0.42.0 → v0.45.0
github.com/prometheus/client_golang indirect minor v1.23.2 → v1.24.1
github.com/prometheus/common indirect minor v0.67.5 → v0.70.1
github.com/prometheus/procfs indirect minor v0.20.1 → v0.21.1
github.com/vbatts/tar-split indirect patch v0.12.2 → v0.12.3
go.yaml.in/yaml/v2 indirect major v2.4.4 → v3.0.5
go.yaml.in/yaml/v3 indirect patch v3.0.4 → v3.0.5
golang.org/x/mod indirect minor v0.35.0 → v0.38.0
golang.org/x/net indirect minor v0.55.0 → v0.57.0
golang.org/x/sync indirect minor v0.20.0 → v0.22.0
golang.org/x/sys indirect minor v0.45.0 → v0.47.0
golang.org/x/term indirect minor v0.43.0 → v0.45.0
golang.org/x/text indirect minor v0.37.0 → v0.40.0
golang.org/x/tools indirect minor v0.44.0 → v0.48.0
gomodules.xyz/jsonpatch/v2 indirect major v2.5.0 → v3.0.1
gopkg.in/evanphx/json-patch.v4 indirect major v4.13.0 → v5.9.11
k8s.io/api require minor v0.35.4 → v0.36.3
k8s.io/apiextensions-apiserver indirect minor v0.35.4 → v0.36.3
k8s.io/apimachinery require minor v0.35.4 → v0.36.3
k8s.io/client-go require minor v0.35.4 → v0.36.3
k8s.io/kube-openapi indirect digest ec9c827 → d427ff9
k8s.io/utils require digest 28399d8 → cf1189d
sigs.k8s.io/controller-runtime require minor v0.23.3 → v0.24.1
sigs.k8s.io/structured-merge-diff/v6 indirect minor v6.3.2 → v6.4.2

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

Masterminds/semver (github.com/Masterminds/semver/v3)

v3.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

docker/cli (github.com/docker/cli)

v29.7.0+incompatible

Compare Source

v29.6.2+incompatible

Compare Source

v29.6.1+incompatible

Compare Source

v29.6.0+incompatible

Compare Source

v29.5.3+incompatible

Compare Source

v29.5.2+incompatible

Compare Source

v29.5.1+incompatible

Compare Source

v29.5.0+incompatible

Compare Source

v29.4.3+incompatible

Compare Source

v29.4.2+incompatible

Compare Source

v29.4.1+incompatible

Compare Source

docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)

v0.9.8

Compare Source

What's Changed

  • update to go1.26.4
  • wincred: inline label, and append to existing
  • build(deps): bump actions/checkout from 6.0.2 to 6.0.3
  • build(deps): bump codecov/codecov-action from 6.0.0 to 6.0.1
  • build(deps): bump crazy-max/.github/.github/workflows/zizmor.yml from 1.7.1 to 1.10.0
  • build(deps): bump docker/bake-action from 7.1.0 to 7.2.0
  • build(deps): bump docker/setup-buildx-action from 4.0.0 to 4.1.0
  • build(deps): bump docker/setup-qemu-action from 4.0.0 to 4.1.0

Full Changelog: docker/docker-credential-helpers@v0.9.7...v0.9.8

v0.9.7

Compare Source

What's Changed

  • update to go1.26.3
  • ci: update zizmore action to v1.7.1

Full Changelog: docker/docker-credential-helpers@v0.9.6...v0.9.7

v0.9.6

Compare Source

What's Changed

  • update to go1.25.9
  • secretservice: allow building on openbsd
  • wincred: minor cleanups
  • Dockerfile: document build-args
  • Dockerfile: update golangci-lint to v2.11
  • Dockerfile: update xx to v1.9.0
  • ci: set default permissions and timeouts
  • ci: update actions
  • ci: pin actions by sha
  • ci: add zizmor workflow

Full Changelog: docker/docker-credential-helpers@v0.9.5...v0.9.6

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes

  • inotify: don't remove sibling watches sharing a path prefix (#​754)

  • inotify, windows: don't rename sibling watches sharing a path prefix
    (#​755)

v1.10.0

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

  • inotify: improve initialization error message (#​731)

  • inotify: send Rename event if recursive watch is renamed (#​696)

  • inotify: avoid copying event buffers when reading names (#​741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#​748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#​740)

  • windows: fix nil pointer dereference in remWatch (#​736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#​709, #​749)

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.2

Compare Source

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed

  • Reject encoding indefinite-length map with odd item count by @​fxamacker in #​764
  • Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @​fxamacker in #​765
  • Make TagSet.Remove a no-op when contentType is nil by @​fxamacker in #​766
  • Refactor indefinite-length encoding and improve chunk validation during encoding by @​fxamacker in #​767
  • Add more tests, fix a nit in unreachable panic message, update docs & ci by @​fxamacker in #​768
CI / GitHub Actions and Docs
🔎 Details...

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

go-logr/logr (github.com/go-logr/logr)

v1.4.4

Compare Source

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v1.0.0

Compare Source

1.0.0 - 2026-07-07

Stable API pledge - no change from v0.24.0

Full Changelog: go-openapi/jsonpointer@v0.24.0...v1.0.0

2 commits in this release.

Documentation
People who contributed to this release

jsonpointer license terms

License

v0.24.0

Compare Source

0.24.0 - 2026-06-29

Full Changelog: go-openapi/jsonpointer@v0.23.2...v0.24.0

17 commits in this release.

Implemented enhancements
  • feat(jsonname): added new json name provider more respectful of go conventions for JSON (#​195) by @​fredbi ...
Refactor
  • refact: refactored the package into multiple specialized sub-packages by @​fredbi ...
  • refact loading, jsonutils, yamlutils utililities by @​fredbi ...
Documentation
Code quality
Testing
Miscellaneous tasks
  • chore: removed most remaining external dependencies by @​fredbi ...
Updates
  • build(deps): bump the go-openapi-dependencies group across 15 directories with 2 updates by @​dependabot[bot] ...
  • build(deps): bump the go-openapi-dependencies group across 15 directories with 2 updates by @​dependabot[bot] ...
Other (technical)
People who contributed to this release

jsonpointer license terms

License

v0.23.2

Compare Source

0.23.2 - 2026-06-26

Full Changelog: go-openapi/jsonpointer@v0.23.1...v0.23.2

13 commits in this release.

Implemented enhancements
  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...
Documentation
Miscellaneous tasks
Updates
People who contributed to this release

jsonpointer license terms

License

v0.23.1

Compare Source

0.23.1 - 2026-04-18

Full Changelog: go-openapi/jsonpointer@v0.23.0...v0.23.1

5 commits in this release.

Fixed bugs
  • fix(offset): in Offset method, fixed index of value of array element. by @​fredbi in #​128 ...
Documentation
Updates
People who contributed to this release

jsonpointer license terms

License

v0.23.0

Compare Source

0.23.0 - 2026-04-15

Support for known limitations

Full Changelog: go-openapi/jsonpointer@v0.22.5...v0.23.0

16 commits in this release.

Implemented enhancements
Fixed bugs
Documentation
Miscellaneous tasks
Updates
People who contributed to this release
New Contributors

jsonpointer license terms

License

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v1.0.0

Compare Source

1.0.0 - 2026-07-07

Stable API pledge - no change from v0.21.6

Full Changelog: go-openapi/jsonreference@v0.21.6...v1.0.0

10 commits in this release.

Documentation
Miscellaneous tasks
Updates
People who contributed to this release

jsonreference license terms

License

v0.21.6

Compare Source

0.21.6 - 2026-05-31

Full Changelog: go-openapi/jsonreference@v0.21.5...v0.21.6

21 commits in this release.

Documentation
Code quality
Miscellaneous tasks
Updates
People who contributed to this release

jsonreference license terms

License

go-openapi/swag (github.com/go-openapi/swag)

v0.28.0

Compare Source

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

Implemented enhancements
Miscellaneous tasks
Updates
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.28.0)
Implemented enhancements
Miscellaneous tasks
jsonutils/adapters/easyjson (0.28.0)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.28.0)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.28.0)
Miscellaneous tasks
jsonutils (0.28.0)
Miscellaneous tasks
loading (0.28.0)
Miscellaneous tasks
yamlutils (0.28.0)
Miscellaneous tasks

v0.27.3

Compare Source

[0.27.3](https://redirect.github.com/go-o

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 9 times, most recently from 8d9555f to 7f43221 Compare April 22, 2026 22:21
@red-hat-konflux

red-hat-konflux Bot commented Apr 22, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.7 -> 1.26.3
google.golang.org/protobuf v1.36.11 -> v1.36.12-0.20260120151049-f2248ac996af

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 16 times, most recently from 127b756 to 067b200 Compare April 29, 2026 22:34
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 3 times, most recently from aa498ab to 2e281bf Compare April 30, 2026 18:49
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 20 times, most recently from 9ac3999 to 71f4ab0 Compare May 13, 2026 02:57
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 9 times, most recently from 8f4ab32 to f6d2d26 Compare May 18, 2026 02:39
@red-hat-konflux
chore(deps): update go dependencies
54b53ad 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants