NO-JIRA: chore(deps): weekly dependabot consolidation

[hypershift-jira-solve-ci]

Summary

Weekly consolidation of dependabot dependency updates.

Consolidated PRs

• build(deps): bump the misc-dependencies group across 1 directory with 3 updates #8461: build(deps): bump the misc-dependencies group across 1 directory with 3 updates
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 in the azure-github-dependencies group #8460: build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 in the azure-github-dependencies group

Commits

1. chore(deps): update root module dependencies
2. chore(deps): update vendored dependencies

---

Assisted-by: Claude (via Claude Code)

---

Note: This PR was auto-generated by the dependabot-triage periodic CI job. See the full report for token usage, cost breakdown, and detailed output.

Summary by CodeRabbit

• Chores
  • Updated Go module dependencies to newer patch/minor versions (including Azure SDK, Google APIs & gRPC, and INI library), ensuring up-to-date runtime libraries and indirect dependency increments.
  • No changes to public APIs or exported declarations; project build directives and replace rules remain unchanged.

[openshift-merge-bot]

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

[openshift-ci-robot]

@hypershift-jira-solve-ci[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

Summary

Weekly consolidation of dependabot dependency updates.

Consolidated PRs

• build(deps): bump the misc-dependencies group across 1 directory with 3 updates #8461: build(deps): bump the misc-dependencies group across 1 directory with 3 updates
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 in the azure-github-dependencies group #8460: build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 in the azure-github-dependencies group

Commits

1. chore(deps): update root module dependencies
2. chore(deps): update vendored dependencies

---

Assisted-by: Claude (via Claude Code)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci]

Please specify an area label

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: hypershift-jira-solve-ci[bot]
Once this PR has been reviewed and has the lgtm label, please assign csrwng for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 5c7e0e26-d317-4316-9d04-f4f254744a6b

📥 Commits

Reviewing files that changed from the base of the PR and between ad6c1cf and d48ef8b.

⛔ Files ignored due to path filters (47)

• go.sum is excluded by !**/*.sum
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/CHANGELOG.md is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/exported/response_error.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/shared/constants.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime/policy_http_trace.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime/policy_logging.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime/request.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/diag/diag.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/diag/doc.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/errorinfo/doc.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/errorinfo/errorinfo.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/exported/exported.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/log/doc.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/log/log.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/poller/util.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/temporal/resource.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/uuid/doc.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/uuid/uuid.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/compute/v1/compute-api.json is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/compute/v1/compute-gen.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/compute/v1/compute2-gen.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/compute/v1/compute3-gen.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/dns/v1/dns-api.json is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/dns/v1/dns-gen.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/internal/version.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/clientconn.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/experimental/stats/metrics.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/envconfig/envconfig.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/envconfig/xds.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/mem/buffer_pool.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/resolver/config_selector.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/http2_client.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/http_util.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/readyreader/raw_conn_linux.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/readyreader/raw_conn_nonlinux.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/readyreader/ready_reader.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/transport.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/mem/buffer_slice.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/mem/buffers.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/stream.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/version.go is excluded by !vendor/**, !**/vendor/**
• vendor/gopkg.in/ini.v1/.golangci.yml is excluded by !vendor/**, !**/vendor/**
• vendor/gopkg.in/ini.v1/data_source.go is excluded by !vendor/**, !**/vendor/**
• vendor/gopkg.in/ini.v1/file.go is excluded by !vendor/**, !**/vendor/**
• vendor/gopkg.in/ini.v1/key.go is excluded by !vendor/**, !**/vendor/**
• vendor/gopkg.in/ini.v1/struct.go is excluded by !vendor/**, !**/vendor/**
• vendor/modules.txt is excluded by !vendor/**, !**/vendor/**

📒 Files selected for processing (1)

• go.mod

🚧 Files skipped from review as they are similar to previous changes (1)

• go.mod

---

📝 Walkthrough

Walkthrough

This change updates the go.mod file with newer versions of several Go module dependencies. The direct dependencies updated include Azure SDK modules (github.com/Azure/azure-sdk-for-go/sdk/azcore from v1.21.0 to v1.21.1), Google API modules (google.golang.org/api from v0.277.0 to v0.278.0 and google.golang.org/grpc from v1.80.0 to v1.81.0), and the INI configuration library (gopkg.in/ini.v1 from v1.67.1 to v1.67.2). Additionally, an indirect Azure SDK dependency (github.com/Azure/azure-sdk-for-go/sdk/internal) is updated from v1.11.2 to v1.12.0. The Go version directive and module path remain unchanged.

---

Important

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

❌ Failed checks (1 error, 1 warning)

Check name	Status	Explanation	Resolution
Stable And Deterministic Test Names	❌ Error	PR adds 12 Ginkgo test names with dynamic content using fmt.Sprintf and workload.Name variable. These violate the requirement for stable/deterministic test names.	Remove fmt.Sprintf from test titles. Use static descriptive names like "should validate resource requests" instead of "should have resource requests for %s containers".
Single Node Openshift (Sno) Test Compatibility	⚠️ Warning	New e2e tests added without SNO compatibility checks. hosted_cluster_ccm_test.go expects available nodes without SNO guards.	Add SNO checks to new e2e tests: [Skipped:SingleReplicaTopology] labels or exutil.IsSingleNode() guards in tests that assume multiple nodes.

✅ Passed checks (10 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly describes the main change: a weekly consolidation of dependabot dependency updates, which matches the pull request's primary objective.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Test Structure And Quality	✅ Passed	Auto-generated dependency update PR, not test code development. Ginkgo check not applicable to vendoring changes.
Microshift Test Compatibility	✅ Passed	This PR is a dependency update that does not add any new Ginkgo e2e tests. The custom MicroShift test compatibility check is not applicable as it only applies when new tests are added.
Topology-Aware Scheduling Compatibility	✅ Passed	PR modifies only go.mod and vendored dependencies. No deployment manifests, operator code, or controllers are changed. The topology-aware scheduling check does not apply.
Ote Binary Stdout Contract	✅ Passed	Dependency update PR with no new code changes that could violate OTE stdout contract. Existing main.go correctly writes to stderr only.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	This PR updates Go module dependencies (go.mod/go.sum) with vendored dependency updates. The custom check applies only to PRs that add new Ginkgo e2e tests. No new tests are added.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

• Generate code and open pull requests
• Plan features and break down work
• Investigate incidents and troubleshoot customer tickets together
• Automate recurring tasks and respond to alerts with triggers
• Summarize progress and report instantly

Built for teams:

• Shared memory across your entire org—no repeating context
• Per-thread sandboxes to safely plan and execute work
• Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 37.53%. Comparing base (37f46b9) to head (d48ef8b).
⚠️ Report is 2 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #8464   +/-   ##
=======================================
  Coverage   37.53%   37.53%           
=======================================
  Files         751      751           
  Lines       92025    92025           
=======================================
  Hits        34543    34543           
  Misses      54841    54841           
  Partials     2641     2641           

Flag	Coverage Δ
cmd-support	32.76% <ø> (ø)
cpo-hostedcontrolplane	36.77% <ø> (ø)
cpo-other	37.76% <ø> (ø)
hypershift-operator	47.93% <ø> (ø)
other	27.77% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[openshift-ci]

@hypershift-jira-solve-ci[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[hypershift-jira-solve-ci]

I now have the complete picture. Here is the analysis:

Test Failure Analysis Complete

Job Information

• Prow Job: codecov/project (GitHub Check Run)
• Build ID: 75017835479
• PR: NO-JIRA: chore(deps): weekly dependabot consolidation #8464 — NO-JIRA: chore(deps): weekly dependabot consolidation
• Commit: d48ef8b

Test Failure Analysis

Error

codecov/project: 34.84% (-2.70%) compared to 37f46b9
Coverage dropped from 37.53% (751 files, 92025 lines) to 34.84% (444 files, 37749 lines) — 307 files missing from report.

Summary

This is a transient Codecov race condition, not a real coverage regression. The codecov/project check was created at 12:57:36 UTC using an incomplete coverage report (only 444 of 751 files) because Codecov's notify.wait_for_ci: false configuration causes it to evaluate coverage before all CI upload jobs complete. A subsequent check run at 13:01:37 UTC—with full data from all 751 files—passed with 37.53% coverage (±0.00% change). The PR's current codecov/project status is pass. The PR itself changes only go.mod, go.sum, and vendored dependency files, none of which affect test coverage.

Root Cause

The root cause is a race condition in Codecov's multi-upload aggregation combined with the repository's notify.wait_for_ci: false configuration in codecov.yml.

The hypershift repository runs unit tests across 5 parallel coverage flags: cmd-support, cpo-hostedcontrolplane, cpo-other, hypershift-operator, and other. Each flag uploads its coverage report independently after its GitHub Actions job completes. The timeline was:

1. 12:55:33 UTC — codecov/patch check created (success, no coverage impact since only vendor/go.mod files changed)
2. 12:57:36 UTC — codecov/project check created (failure) — only 444 files reported (some flags not yet uploaded). Computed 34.84% which is −2.70% vs. the base's 37.53%. This is check run ID 75017835479 — the one reported as failed.
3. 13:01:37 UTC — codecov/project check created (success) — all 751 files now reported. Computed 37.53% (+0.00%). This is check run ID 75018454436 which superseded the failing one.

The wait_for_ci: false setting in codecov.yml tells Codecov to create status checks immediately upon receiving any upload rather than waiting for all CI jobs to finish. When the first few flags upload their coverage data but the cmd-support flag (and possibly others) haven't finished yet, Codecov computes coverage against only a partial file set (444 files instead of 751), resulting in an artificial −2.70% drop. Once all uploads arrive, the corrected check run shows the true 0.00% change.

Recommendations

1. No action needed for this PR — The failing check run (ID 75017835479) has already been superseded by a passing check run (ID 75018454436). The current codecov/project status on the PR is pass.

2. To prevent future transient failures, consider changing codecov.yml to set notify.wait_for_ci: true (or removing the line, as true is the default). This would make Codecov wait for all CI jobs to complete before computing coverage, eliminating the race condition:

   codecov:
     branch: main
     notify:
       wait_for_ci: true  # Wait for all uploads before creating check runs

3. If transient failures are acceptable, no configuration change is needed — Codecov self-corrects once all uploads arrive, and GitHub uses the latest check run to determine PR merge eligibility.

Evidence

Evidence	Detail
Failing check run ID	75017835479 — completed 12:57:36 UTC
Failing coverage	34.84% (−2.70%) — 444 files, 37,749 lines
Passing check run ID	75018454436 — completed 13:01:37 UTC
Passing coverage	37.53% (+0.00%) — 751 files, 92,025 lines
Same commit SHA	Both check runs target d48ef8b53fa6f9e99e94bd9e03a9f022cab660bd
Same check suite	Both belong to check suite 68081747247
Current PR status	codecov/project: pass (confirmed via gh pr checks)
Config root cause	codecov.yml → notify.wait_for_ci: false
Missing flag	cmd-support flag shows ? in the intermediate PR comment (not yet uploaded at failure time)
PR file changes	Only go.mod, go.sum, and 46 vendor files — zero test-coverable code changed

---