Skip to content

fix(deps): update non-k8s-go-dependencies#251

Open
red-hat-konflux[bot] wants to merge 1 commit intooadp-1.5from
konflux/mintmaker/oadp-1.5/non-k8s-go-dependencies
Open

fix(deps): update non-k8s-go-dependencies#251
red-hat-konflux[bot] wants to merge 1 commit intooadp-1.5from
konflux/mintmaker/oadp-1.5/non-k8s-go-dependencies

Conversation

@red-hat-konflux
Copy link
Copy Markdown
Contributor

@red-hat-konflux red-hat-konflux Bot commented May 7, 2026 •
edited
Loading

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/emicklei/go-restful/v3 v3.12.2 → v3.13.0 age confidence indirect minor
github.com/fsnotify/fsnotify v1.9.0 → v1.10.1 age confidence indirect minor
github.com/fxamacker/cbor/v2 v2.9.0 → v2.9.2 age confidence indirect patch
github.com/go-openapi/jsonpointer v0.21.1 → v0.23.1 age confidence indirect minor
github.com/go-openapi/jsonreference v0.21.0 → v0.21.5 age confidence indirect patch
github.com/go-openapi/swag v0.23.1 → v0.26.0 age confidence indirect minor
github.com/google/gnostic-models v0.7.0 → v0.7.1 age confidence indirect patch
github.com/hashicorp/go-hclog v0.14.1 → v0.16.2 age confidence indirect minor
github.com/hashicorp/go-plugin v1.6.0 → v1.8.0 age confidence indirect minor
github.com/hashicorp/yamux v0.1.1 → v0.1.2 age confidence indirect patch
github.com/kubernetes-csi/external-snapshotter/client/v8 v8.2.0 → v8.4.0 age confidence require minor
github.com/mailru/easyjson v0.9.0 → v0.9.2 age confidence indirect patch
github.com/mattn/go-isatty v0.0.20 → v0.0.22 age confidence indirect patch
github.com/mitchellh/go-testing-interface v1.0.0 → v1.14.1 age confidence indirect minor
github.com/onsi/gomega v1.38.2 → v1.40.0 age confidence require minor
github.com/openshift/api 68ce3d9 → 49ae21b indirect digest
github.com/openshift/hive/apis 3f49f26 → a6c32a8 age confidence require digest
github.com/openshift/hypershift/api 2d4aedc → bded456 age confidence require digest
github.com/prometheus/client_golang v1.22.0 → v1.23.2 age confidence indirect minor
github.com/prometheus/common v0.65.0 → v0.67.5 age confidence indirect minor
github.com/prometheus/procfs v0.16.1 → v0.20.1 age confidence indirect minor
github.com/sirupsen/logrus v1.9.3 → v1.9.4 age confidence require patch
github.com/spf13/cobra v1.9.1 → v1.10.2 age confidence indirect minor
github.com/spf13/pflag v1.0.7 → v1.0.10 age confidence indirect patch
github.com/vmware-tanzu/velero v1.14.0 → v1.18.0 age confidence require minor
go (source) 1.25.8 → 1.26.3 age confidence toolchain minor
go.yaml.in/yaml/v2 v2.4.2 → v2.4.4 age confidence indirect patch
golang.org/x/net v0.52.0 → v0.54.0 age confidence indirect minor
golang.org/x/oauth2 v0.30.0 → v0.36.0 age confidence indirect minor
golang.org/x/sys v0.42.0 → v0.44.0 age confidence indirect minor
golang.org/x/term v0.41.0 → v0.43.0 age confidence indirect minor
golang.org/x/text v0.35.0 → v0.37.0 age confidence indirect minor
golang.org/x/time v0.11.0 → v0.15.0 age confidence indirect minor
google.golang.org/genproto/googleapis/rpc a0af3ef → 60b97b3 age confidence indirect digest
google.golang.org/grpc v1.72.1 → v1.81.0 age confidence indirect minor
google.golang.org/protobuf v1.36.7 → v1.36.11 age confidence indirect patch
gopkg.in/evanphx/json-patch.v4 v4.12.0 → v4.13.0 age confidence indirect minor

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.13.0

Compare Source

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)
fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes

  • inotify: don't remove sibling watches sharing a path prefix (#​754)

  • inotify, windows: don't rename sibling watches sharing a path prefix
    (#​755)

v1.10.0

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

  • inotify: improve initialization error message (#​731)

  • inotify: send Rename event if recursive watch is renamed (#​696)

  • inotify: avoid copying event buffers when reading names (#​741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#​748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#​740)

  • windows: fix nil pointer dereference in remWatch (#​736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#​709, #​749)

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.2

Compare Source

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed
  • Reject encoding indefinite-length map with odd item count by @​fxamacker in #​764
  • Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @​fxamacker in #​765
  • Make TagSet.Remove a no-op when contentType is nil by @​fxamacker in #​766
  • Refactor indefinite-length encoding and improve chunk validation during encoding by @​fxamacker in #​767
  • Add more tests, fix a nit in unreachable panic message, update docs & ci by @​fxamacker in #​768
CI / GitHub Actions and Docs
🔎 Details...

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

v2.9.1

Compare Source

This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.

🐞 Bug fixes related to the keyasint feature

These changes only affect Go struct fields tagged with keyasint:

  • [Decoding] Reject integer keys that exceed math.MaxInt64 when decoding CBOR map to a struct with keyasint field (PR #​757)
  • [Decoding] Prevent string representation of an integer key from matching the struct field tagged by keyasint (PR #​757)
  • [Encoding & Decoding] Deduplicate struct fields with the same normalized keyasint tag values (PR #​757)
🐞 Other bug fixes and defensive checks

Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).

NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).

  • [Decoding] Reject decoding epoch time encoded as floats that overflow int64 (PR #​753)
  • [Encoding] Return a cloned slice for an empty RawMessage from RawMessage.MarshalCBOR (PR #​753)
  • [Encoding] Reject encoding nil inside indefinite-length strings (PR #​750)
  • [Diagnostic] Accept valid U+FFFD replacement character (PR #​753)
What's Changed
CI / GitHub Actions and Docs
🔎 Details...

New Contributors

Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.23.1

Compare Source

0.23.1 - 2026-04-18

Full Changelog: go-openapi/jsonpointer@v0.23.0...v0.23.1

5 commits in this release.

Fixed bugs
  • fix(offset): in Offset method, fixed index of value of array element. by @​fredbi in #​128 ...
Documentation
Updates
People who contributed to this release

jsonpointer license terms

License

v0.23.0

Compare Source

0.23.0 - 2026-04-15

Support for known limitations

Full Changelog: go-openapi/jsonpointer@v0.22.5...v0.23.0

16 commits in this release.

Implemented enhancements
Fixed bugs
Documentation
Miscellaneous tasks
Updates
People who contributed to this release
New Contributors

jsonpointer license terms

License

v0.22.5

Compare Source

0.22.5 - 2026-03-02

Full Changelog: go-openapi/jsonpointer@v0.22.4...v0.22.5

15 commits in this release.

Documentation
Code quality
Miscellaneous tasks
Updates
People who contributed to this release
New Contributors

jsonpointer license terms

License

v0.22.4

Compare Source

0.22.4 - 2025-12-06

Full Changelog: go-openapi/jsonpointer@v0.22.3...v0.22.4

1 commits in this release.

Miscellaneous tasks
People who contributed to this release

jsonpointer license terms

License

v0.22.3

Compare Source

0.22.3 - 2025-11-17

Full Changelog: go-openapi/jsonpointer@v0.22.2...v0.22.3

8 commits in this release.

Documentation
Code quality
Miscellaneous tasks
People who contributed to this release
New Contributors

jsonpointer license terms

License

v0.22.2

Compare Source

0.22.2 - 2025-11-14

Full Changelog: go-openapi/jsonpointer@v0.22.1...v0.22.2

12 commits in this release.

Documentation
Code quality
Testing
Miscellaneous tasks
Security
Updates
People who contributed to this release

jsonpointer license terms

License

v0.22.1

Compare Source

v0.22.0

Compare Source

v0.21.2

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.5

Compare Source

0.21.5 - 2026-03-02

Full Changelog: go-openapi/jsonreference@v0.21.4...v0.21.5

14 commits in this release.

Documentation
Code quality
Testing
Miscellaneous tasks
Updates

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux Bot added area/ci-tooling ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels May 7, 2026
@red-hat-konflux
Copy link
Copy Markdown
Contributor Author

red-hat-konflux Bot commented May 7, 2026 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: downloading github.com/kubernetes-csi/external-snapshotter/client/v8 v8.4.0
go: downloading github.com/openshift/hive/apis v0.0.0-20260506164003-a6c32a8c8828
go: downloading github.com/openshift/hypershift/api v0.0.0-20260508170830-bded45614c40
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading k8s.io/api v0.35.1
go: downloading k8s.io/apiextensions-apiserver v0.34.2
go: downloading k8s.io/apimachinery v0.35.1
go: downloading k8s.io/client-go v0.34.2
go: downloading sigs.k8s.io/controller-runtime v0.20.4
go: downloading github.com/onsi/gomega v1.40.0
go: downloading github.com/openshift/api v0.0.0-20260508190616-49ae21b8502f
go: downloading golang.org/x/sys v0.44.0
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading k8s.io/utils v0.0.0-20260108192941-914a6e750570
go: downloading k8s.io/klog/v2 v2.130.1
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.1
go: downloading k8s.io/kube-openapi v0.0.0-20251125145642-4e65d59e963e
go: downloading github.com/hashicorp/go-plugin v1.8.0
go: downloading golang.org/x/net v0.54.0
go: downloading google.golang.org/grpc v1.81.0
go: downloading github.com/openshift/installer v1.4.21-pre2.0.20260112230456-1c2444827f23
go: downloading go.yaml.in/yaml/v2 v2.4.4
go: downloading github.com/hashicorp/go-hclog v1.6.3
go: downloading github.com/hashicorp/yamux v0.1.2
go: downloading github.com/oklog/run v1.2.0
go: downloading google.golang.org/protobuf v1.36.11
go: downloading github.com/fxamacker/cbor/v2 v2.9.2
go: downloading golang.org/x/term v0.43.0
go: downloading golang.org/x/oauth2 v0.36.0
go: downloading golang.org/x/time v0.15.0
go: downloading github.com/google/gnostic-models v0.7.1
go: downloading github.com/go-openapi/jsonreference v0.21.5
go: downloading github.com/go-openapi/swag v0.26.0
go: downloading golang.org/x/text v0.37.0
go: downloading github.com/fatih/color v1.19.0
go: downloading github.com/mattn/go-isatty v0.0.22
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260504160031-60b97b32f348
go: downloading github.com/google/btree v1.1.3
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading github.com/go-openapi/jsonpointer v0.23.1
go: downloading github.com/go-openapi/swag/cmdutils v0.26.0
go: downloading github.com/go-openapi/swag/conv v0.26.0
go: downloading github.com/go-openapi/swag/fileutils v0.26.0
go: downloading github.com/go-openapi/swag/jsonname v0.26.0
go: downloading github.com/go-openapi/swag/jsonutils v0.26.0
go: downloading github.com/go-openapi/swag/loading v0.26.0
go: downloading github.com/go-openapi/swag/mangling v0.26.0
go: downloading github.com/go-openapi/swag/netutils v0.26.0
go: downloading github.com/go-openapi/swag/stringutils v0.26.0
go: downloading github.com/go-openapi/swag/typeutils v0.26.0
go: downloading github.com/go-openapi/swag/yamlutils v0.26.0
go: downloading github.com/prometheus/procfs v0.20.1
go: github.com/openshift/hypershift-oadp-plugin/pkg/common imports
	github.com/openshift/hive/apis/hive/v1 imports
	github.com/openshift/hive/apis/hive/v1/vsphere imports
	github.com/openshift/installer/pkg/types/vsphere: github.com/openshift/installer@v1.4.21-pre2.0.20260112230456-1c2444827f23: verifying module: github.com/openshift/installer@v1.4.21-pre2.0.20260112230456-1c2444827f23: reading https://sum.golang.org/lookup/github.com/openshift/installer@v1.4.21-pre2.0.20260112230456-1c2444827f23: 404 Not Found
	server response: not found: 
go: github.com/openshift/hypershift-oadp-plugin/pkg/common imports
	sigs.k8s.io/controller-runtime/pkg/client imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/storagemigration/v1alpha1: cannot find module providing package k8s.io/api/storagemigration/v1alpha1

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 7, 2026 •
edited
Loading

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: f7da78a6-8013-418b-b585-4e2bd0d8cad7

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/oadp-1.5/non-k8s-go-dependencies

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci openshift-ci Bot requested review from csrwng and sjenning May 7, 2026 09:16
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 7, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign muraee for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 7, 2026

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/oadp-1.5/non-k8s-go-dependencies branch 9 times, most recently from 102a3d1 to 4cf618e Compare May 9, 2026 00:56
@red-hat-konflux
fix(deps): update non-k8s-go-dependencies
db20d2a 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/oadp-1.5/non-k8s-go-dependencies branch from 4cf618e to db20d2a Compare May 9, 2026 04:57
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 9, 2026

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/build db20d2a link true /test build
ci/prow/unit db20d2a link true /test unit
ci/prow/verify db20d2a link true /test verify

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@csrwng csrwng Awaiting requested review from csrwng

@sjenning sjenning Awaiting requested review from sjenning

Assignees

No one assigned

Labels

area/ci-tooling ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants