fix(deps): update go dependencies#635
Closed
red-hat-konflux[bot] wants to merge 1 commit into
Closed
Conversation
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Contributor
Author
|
Contributor
|
Closing: superseded by combined dependency update PR on main. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3.4.0→v3.5.0v0.14.0→v0.15.1v1.9.0→v1.10.1v2.9.0→v2.9.2v0.22.3→v0.23.1v0.21.3→v0.21.5v0.25.3→v0.26.0v0.25.3→v0.26.0v0.25.3→v0.26.0v0.25.3→v0.26.0v0.25.3→v0.26.0v0.25.3→v0.26.0v0.25.3→v0.26.0v0.25.3→v0.26.0v0.25.3→v0.26.0v0.25.3→v0.26.0v0.25.3→v0.26.0v0.25.3→v0.26.0v0.6.8→v0.7.1v0.7.0→v0.7.1v2.27.2→v2.29.0v1.38.2→v1.41.0v0.76.0→v0.91.0v0.67.2→v0.67.5v0.19.2→v0.20.1v1.9.3→v1.9.41.24.6→1.26.3v1.27.0→v1.28.0v2.4.3→v2.4.4v0.31.0→v0.36.0v0.48.0→v0.55.0v0.32.0→v0.36.0v0.19.0→v0.20.0v0.39.0→v0.45.0v0.38.0→v0.43.0v0.32.0→v0.37.0v0.13.0→v0.15.0v0.40.0→v0.45.0v1.36.10→v1.36.11v0.31.4→v0.36.1v0.31.4→v0.36.1v0.31.4→v0.36.1v0.31.4→v0.36.1v2.130.1→v2.140.0v0.19.1→v0.24.1Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
Masterminds/semver (github.com/Masterminds/semver/v3)
v3.5.0Compare Source
What's Changed
New Contributors
Full Changelog: Masterminds/semver@v3.4.0...v3.5.0
RedHatInsights/rhc-osdk-utils (github.com/RedHatInsights/rhc-osdk-utils)
v0.15.1Compare Source
What's Changed
Full Changelog: RedHatInsights/rhc-osdk-utils@v0.15.0...v0.15.1
v0.15.0Compare Source
What's Changed
New Contributors
Full Changelog: RedHatInsights/rhc-osdk-utils@v0.14.0...v0.15.0
fsnotify/fsnotify (github.com/fsnotify/fsnotify)
v1.10.1Compare Source
Changes and fixes
inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)
v1.10.0Compare Source
This version of fsnotify needs Go 1.23.
Changes and fixes
inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)
fxamacker/cbor (github.com/fxamacker/cbor/v2)
v2.9.2Compare Source
This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.
Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).
The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.
This release passed fuzz tests (billions of execs) and it is production quality.
What's Changed
CI / GitHub Actions and Docs
🔎 Details...
Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2
v2.9.1Compare Source
This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.
🐞 Bug fixes related to the
keyasintfeatureThese changes only affect Go struct fields tagged with
keyasint:math.MaxInt64when decoding CBOR map to a struct withkeyasintfield (PR #757)keyasinttag values (PR #757)🐞 Other bug fixes and defensive checks
Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).
NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).
RawMessagefromRawMessage.MarshalCBOR(PR #753)U+FFFDreplacement character (PR #753)What's Changed
TimeRFC3339NanoUTCby @fxamacker in #688CI / GitHub Actions and Docs
🔎 Details...
New Contributors
Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1
go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)
v0.23.1Compare Source
0.23.1 - 2026-04-18
Full Changelog: go-openapi/jsonpointer@v0.23.0...v0.23.1
5 commits in this release.
Fixed bugs
Documentation
Updates
People who contributed to this release
jsonpointer license terms
v0.23.0Compare Source
0.23.0 - 2026-04-15
Support for known limitations
Full Changelog: go-openapi/jsonpointer@v0.22.5...v0.23.0
16 commits in this release.
Implemented enhancements
"-"array suffix is now supported by @fredbi in #121 ...Fixed bugs
Documentation
Miscellaneous tasks
Updates
People who contributed to this release
New Contributors
in #118
jsonpointer license terms
v0.22.5Compare Source
0.22.5 - 2026-03-02
Full Changelog: go-openapi/jsonpointer@v0.22.4...v0.22.5
15 commits in this release.
Documentation
Code quality
Miscellaneous tasks
Updates
People who contributed to this release
New Contributors
in #97
jsonpointer license terms
v0.22.4Compare Source
0.22.4 - 2025-12-06
Full Changelog: go-openapi/jsonpointer@v0.22.3...v0.22.4
1 commits in this release.
Miscellaneous tasks
People who contributed to this release
jsonpointer license terms
go-openapi/jsonreference (github.com/go-openapi/jsonreference)
v0.21.5Compare Source
0.21.5 - 2026-03-02
Full Changelog: go-openapi/jsonreference@v0.21.4...v0.21.5
14 commits in this release.
Documentation
Code quality
Testing
Miscellaneous tasks
Updates
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.