Skip to content

fix(deps): update go dependencies#635

Closed
red-hat-konflux[bot] wants to merge 1 commit into
security-compliancefrom
konflux/mintmaker/security-compliance/go-deps
Closed

fix(deps): update go dependencies#635
red-hat-konflux[bot] wants to merge 1 commit into
security-compliancefrom
konflux/mintmaker/security-compliance/go-deps

Conversation

@red-hat-konflux
Copy link
Copy Markdown
Contributor

@red-hat-konflux red-hat-konflux Bot commented May 27, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/Masterminds/semver/v3 v3.4.0v3.5.0 age confidence indirect minor
github.com/RedHatInsights/rhc-osdk-utils v0.14.0v0.15.1 age confidence require minor
github.com/fsnotify/fsnotify v1.9.0v1.10.1 age confidence indirect minor
github.com/fxamacker/cbor/v2 v2.9.0v2.9.2 age confidence indirect patch
github.com/go-openapi/jsonpointer v0.22.3v0.23.1 age confidence indirect minor
github.com/go-openapi/jsonreference v0.21.3v0.21.5 age confidence indirect patch
github.com/go-openapi/swag v0.25.3v0.26.0 age confidence indirect minor
github.com/go-openapi/swag/cmdutils v0.25.3v0.26.0 age confidence indirect minor
github.com/go-openapi/swag/conv v0.25.3v0.26.0 age confidence indirect minor
github.com/go-openapi/swag/fileutils v0.25.3v0.26.0 age confidence indirect minor
github.com/go-openapi/swag/jsonname v0.25.3v0.26.0 age confidence indirect minor
github.com/go-openapi/swag/jsonutils v0.25.3v0.26.0 age confidence indirect minor
github.com/go-openapi/swag/loading v0.25.3v0.26.0 age confidence indirect minor
github.com/go-openapi/swag/mangling v0.25.3v0.26.0 age confidence indirect minor
github.com/go-openapi/swag/netutils v0.25.3v0.26.0 age confidence indirect minor
github.com/go-openapi/swag/stringutils v0.25.3v0.26.0 age confidence indirect minor
github.com/go-openapi/swag/typeutils v0.25.3v0.26.0 age confidence indirect minor
github.com/go-openapi/swag/yamlutils v0.25.3v0.26.0 age confidence indirect minor
github.com/google/gnostic-models v0.6.8v0.7.1 age confidence replace minor
github.com/google/gnostic-models v0.7.0v0.7.1 age confidence indirect patch
github.com/onsi/ginkgo/v2 v2.27.2v2.29.0 age confidence require minor
github.com/onsi/gomega v1.38.2v1.41.0 age confidence require minor
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.76.0v0.91.0 age confidence require minor
github.com/prometheus/common v0.67.2v0.67.5 age confidence indirect patch
github.com/prometheus/procfs v0.19.2v0.20.1 age confidence indirect minor
github.com/sirupsen/logrus v1.9.3v1.9.4 age confidence indirect patch
go (source) 1.24.61.26.3 age confidence toolchain minor
go.uber.org/zap v1.27.0v1.28.0 age confidence indirect minor
go.yaml.in/yaml/v2 v2.4.3v2.4.4 age confidence indirect patch
golang.org/x/mod v0.31.0v0.36.0 age confidence indirect minor
golang.org/x/net v0.48.0v0.55.0 age confidence indirect minor
golang.org/x/oauth2 v0.32.0v0.36.0 age confidence indirect minor
golang.org/x/sync v0.19.0v0.20.0 age confidence indirect minor
golang.org/x/sys v0.39.0v0.45.0 age confidence indirect minor
golang.org/x/term v0.38.0v0.43.0 age confidence indirect minor
golang.org/x/text v0.32.0v0.37.0 age confidence indirect minor
golang.org/x/time v0.13.0v0.15.0 age confidence indirect minor
golang.org/x/tools v0.40.0v0.45.0 age confidence indirect minor
google.golang.org/protobuf v1.36.10v1.36.11 age confidence indirect patch
k8s.io/api v0.31.4v0.36.1 age confidence require minor
k8s.io/apiextensions-apiserver v0.31.4v0.36.1 age confidence require minor
k8s.io/apimachinery v0.31.4v0.36.1 age confidence require minor
k8s.io/client-go v0.31.4v0.36.1 age confidence require minor
k8s.io/klog/v2 v2.130.1v2.140.0 age confidence indirect minor
sigs.k8s.io/controller-runtime v0.19.1v0.24.1 age confidence require minor

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

Masterminds/semver (github.com/Masterminds/semver/v3)

v3.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

RedHatInsights/rhc-osdk-utils (github.com/RedHatInsights/rhc-osdk-utils)

v0.15.1

Compare Source

What's Changed

Full Changelog: RedHatInsights/rhc-osdk-utils@v0.15.0...v0.15.1

v0.15.0

Compare Source

What's Changed

New Contributors

Full Changelog: RedHatInsights/rhc-osdk-utils@v0.14.0...v0.15.0

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes
  • inotify: don't remove sibling watches sharing a path prefix (#​754)

  • inotify, windows: don't rename sibling watches sharing a path prefix
    (#​755)

v1.10.0

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes
  • inotify: improve initialization error message (#​731)

  • inotify: send Rename event if recursive watch is renamed (#​696)

  • inotify: avoid copying event buffers when reading names (#​741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#​748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#​740)

  • windows: fix nil pointer dereference in remWatch (#​736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#​709, #​749)

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.2

Compare Source

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed
  • Reject encoding indefinite-length map with odd item count by @​fxamacker in #​764
  • Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @​fxamacker in #​765
  • Make TagSet.Remove a no-op when contentType is nil by @​fxamacker in #​766
  • Refactor indefinite-length encoding and improve chunk validation during encoding by @​fxamacker in #​767
  • Add more tests, fix a nit in unreachable panic message, update docs & ci by @​fxamacker in #​768
CI / GitHub Actions and Docs
🔎 Details...

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

v2.9.1

Compare Source

This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.

🐞 Bug fixes related to the keyasint feature

These changes only affect Go struct fields tagged with keyasint:

  • [Decoding] Reject integer keys that exceed math.MaxInt64 when decoding CBOR map to a struct with keyasint field (PR #​757)
  • [Decoding] Prevent string representation of an integer key from matching the struct field tagged by keyasint (PR #​757)
  • [Encoding & Decoding] Deduplicate struct fields with the same normalized keyasint tag values (PR #​757)
🐞 Other bug fixes and defensive checks

Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).

NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).

  • [Decoding] Reject decoding epoch time encoded as floats that overflow int64 (PR #​753)
  • [Encoding] Return a cloned slice for an empty RawMessage from RawMessage.MarshalCBOR (PR #​753)
  • [Encoding] Reject encoding nil inside indefinite-length strings (PR #​750)
  • [Diagnostic] Accept valid U+FFFD replacement character (PR #​753)
What's Changed
CI / GitHub Actions and Docs
🔎 Details...

New Contributors

Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.23.1

Compare Source

0.23.1 - 2026-04-18

Full Changelog: go-openapi/jsonpointer@v0.23.0...v0.23.1

5 commits in this release.


Fixed bugs
  • fix(offset): in Offset method, fixed index of value of array element. by @​fredbi in #​128 ...
Documentation
Updates

People who contributed to this release

jsonpointer license terms

License

v0.23.0

Compare Source

0.23.0 - 2026-04-15

Support for known limitations

Full Changelog: go-openapi/jsonpointer@v0.22.5...v0.23.0

16 commits in this release.


Implemented enhancements
Fixed bugs
Documentation
Miscellaneous tasks
Updates

People who contributed to this release

New Contributors

jsonpointer license terms

License

v0.22.5

Compare Source

0.22.5 - 2026-03-02

Full Changelog: go-openapi/jsonpointer@v0.22.4...v0.22.5

15 commits in this release.


Documentation
Code quality
Miscellaneous tasks
Updates

People who contributed to this release

New Contributors

jsonpointer license terms

License

v0.22.4

Compare Source

0.22.4 - 2025-12-06

Full Changelog: go-openapi/jsonpointer@v0.22.3...v0.22.4

1 commits in this release.


Miscellaneous tasks

People who contributed to this release

jsonpointer license terms

License

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.5

Compare Source

0.21.5 - 2026-03-02

Full Changelog: go-openapi/jsonreference@v0.21.4...v0.21.5

14 commits in this release.


Documentation
Code quality
Testing
Miscellaneous tasks
Updates

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: downloading go1.26.3 (linux/amd64)
go: downloading github.com/RedHatInsights/clowder v0.101.0
go: downloading k8s.io/api v0.36.1
go: downloading k8s.io/apiextensions-apiserver v0.36.1
go: downloading k8s.io/apimachinery v0.36.1
go: downloading sigs.k8s.io/controller-runtime v0.24.1
go: downloading github.com/RedHatInsights/rhc-osdk-utils v0.15.1
go: downloading github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.91.0
go: downloading k8s.io/client-go v11.0.0+incompatible
go: downloading github.com/onsi/ginkgo/v2 v2.29.0
go: downloading github.com/onsi/gomega v1.41.0
go: downloading go.uber.org/zap v1.28.0
go: downloading k8s.io/utils v0.0.0-20260507154919-ff6756f316d2
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.4.0
go: downloading github.com/redhatinsights/platform-go-middlewares/v2 v2.1.0
go: downloading github.com/prometheus/common v1.20.99
go: downloading github.com/prometheus/procfs v0.20.1
go: downloading golang.org/x/sys v0.45.0
go: downloading google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af
go: downloading golang.org/x/net v0.55.0
go: downloading go.yaml.in/yaml/v2 v2.4.4
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading github.com/grafana/regexp v0.0.0-20250905093917-f7b3be9d1853
go: downloading golang.org/x/oauth2 v0.36.0
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading golang.org/x/time v0.15.0
go: downloading github.com/fxamacker/cbor/v2 v2.9.2
go: downloading github.com/Masterminds/semver/v3 v3.5.0
go: downloading github.com/google/gnostic-models v0.7.1
go: downloading github.com/go-openapi/jsonreference v0.21.5
go: downloading github.com/go-openapi/swag v0.26.0
go: downloading golang.org/x/crypto v0.51.0
go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
go: downloading cloud.google.com/go/compute/metadata v0.9.0
go: downloading github.com/go-openapi/jsonpointer v0.23.1
go: downloading github.com/go-openapi/swag/cmdutils v0.26.0
go: downloading github.com/go-openapi/swag/conv v0.26.0
go: downloading github.com/go-openapi/swag/fileutils v0.26.0
go: downloading github.com/go-openapi/swag/jsonname v0.26.0
go: downloading github.com/go-openapi/swag/jsonutils v0.26.0
go: downloading github.com/go-openapi/swag/loading v0.26.0
go: downloading github.com/go-openapi/swag/mangling v0.26.0
go: downloading github.com/go-openapi/swag/netutils v0.26.0
go: downloading github.com/go-openapi/swag/stringutils v0.26.0
go: downloading github.com/go-openapi/swag/typeutils v0.26.0
go: downloading github.com/go-openapi/swag/yamlutils v0.26.0
go: downloading github.com/google/pprof v0.0.0-20260507013755-92041b743c96
go: downloading github.com/Azure/go-autorest/autorest v0.11.30
go: downloading github.com/Azure/go-autorest v14.2.0+incompatible
go: downloading github.com/Azure/go-autorest/autorest/adal v0.9.24
go: downloading github.com/googleapis/gnostic v0.7.1
go: downloading github.com/gophercloud/gophercloud v1.14.1
go: downloading k8s.io/client-go v0.36.1
go: downloading k8s.io/klog v1.0.0
go: downloading github.com/Azure/go-autorest/tracing v0.6.0
go: downloading github.com/Azure/go-autorest/logger v0.2.1
go: downloading github.com/Azure/go-autorest/autorest/date v0.3.0
go: downloading github.com/golang-jwt/jwt/v4 v4.5.2
go: github.com/RedHatInsights/frontend-operator imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/auditregistration/v1alpha1: cannot find module providing package k8s.io/api/auditregistration/v1alpha1
go: github.com/RedHatInsights/frontend-operator imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/autoscaling/v2beta1: cannot find module providing package k8s.io/api/autoscaling/v2beta1
go: github.com/RedHatInsights/frontend-operator imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/autoscaling/v2beta2: cannot find module providing package k8s.io/api/autoscaling/v2beta2
go: github.com/RedHatInsights/frontend-operator imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/batch/v2alpha1: cannot find module providing package k8s.io/api/batch/v2alpha1
go: github.com/RedHatInsights/frontend-operator imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/scheduling/v1alpha1: cannot find module providing package k8s.io/api/scheduling/v1alpha1
go: github.com/RedHatInsights/frontend-operator imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/settings/v1alpha1: cannot find module providing package k8s.io/api/settings/v1alpha1
go: github.com/RedHatInsights/frontend-operator/api/v1alpha1 imports
	sigs.k8s.io/controller-runtime/pkg/client imports
	k8s.io/client-go/metadata: cannot find module providing package k8s.io/client-go/metadata
go: github.com/RedHatInsights/frontend-operator/api/v1alpha1 imports
	sigs.k8s.io/controller-runtime/pkg/client imports
	k8s.io/client-go/util/apply: cannot find module providing package k8s.io/client-go/util/apply
go: github.com/RedHatInsights/frontend-operator/controllers imports
	k8s.io/client-go/tools/record imports
	k8s.io/apimachinery/pkg/util/clock: cannot find module providing package k8s.io/apimachinery/pkg/util/clock
go: github.com/RedHatInsights/frontend-operator imports
	sigs.k8s.io/controller-runtime imports
	sigs.k8s.io/controller-runtime/pkg/manager imports
	k8s.io/client-go/kubernetes/typed/events/v1: cannot find module providing package k8s.io/client-go/kubernetes/typed/events/v1
go: github.com/RedHatInsights/frontend-operator imports
	sigs.k8s.io/controller-runtime imports
	sigs.k8s.io/controller-runtime/pkg/manager imports
	k8s.io/client-go/tools/events: cannot find module providing package k8s.io/client-go/tools/events
go: github.com/RedHatInsights/frontend-operator/controllers tested by
	github.com/RedHatInsights/frontend-operator/controllers.test imports
	sigs.k8s.io/controller-runtime/pkg/client/fake imports
	k8s.io/client-go/applyconfigurations: cannot find module providing package k8s.io/client-go/applyconfigurations
go: github.com/RedHatInsights/frontend-operator/api/v1alpha1 imports
	sigs.k8s.io/controller-runtime/pkg/client imports
	sigs.k8s.io/controller-runtime/pkg/client/apiutil imports
	k8s.io/client-go/discovery imports
	github.com/googleapis/gnostic/OpenAPIv2: cannot find module providing package github.com/googleapis/gnostic/OpenAPIv2
go: github.com/RedHatInsights/frontend-operator/controllers tested by
	github.com/RedHatInsights/frontend-operator/controllers.test imports
	sigs.k8s.io/controller-runtime/pkg/envtest imports
	k8s.io/apiextensions-apiserver/pkg/client/clientset/clientset imports
	k8s.io/apiextensions-apiserver/pkg/client/clientset/clientset/typed/apiextensions/v1 imports
	k8s.io/client-go/gentype: cannot find module providing package k8s.io/client-go/gentype
go: github.com/RedHatInsights/frontend-operator/controllers tested by
	github.com/RedHatInsights/frontend-operator/controllers.test imports
	sigs.k8s.io/controller-runtime/pkg/envtest imports
	k8s.io/apiextensions-apiserver/pkg/client/clientset/clientset imports
	k8s.io/apiextensions-apiserver/pkg/client/clientset/clientset/typed/apiextensions/v1 imports
	k8s.io/apiextensions-apiserver/pkg/client/applyconfiguration/apiextensions/v1 imports
	k8s.io/client-go/applyconfigurations/meta/v1: cannot find module providing package k8s.io/client-go/applyconfigurations/meta/v1
go: warning: github.com/prometheus/common@v1.20.99: retracted by module author: This tag is needed to retract accidental tags below, but is retracted directly.
go: warning: k8s.io/client-go@v11.0.0+incompatible: retracted by module author: pre-module versions are obsolete
go: to switch to the latest unretracted version, run:
	go get <module>@latest

@karelhala
Copy link
Copy Markdown
Contributor

Closing: superseded by combined dependency update PR on main.

@karelhala karelhala closed this May 28, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant