Skip to content

fix(deps): update gomod dependencies - #590

Open
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies
Open

red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies

Conversation

@red-hat-konflux-kflux-prd-rh03

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
github.com/fxamacker/cbor/v2 v2.9.2v2.9.3 age confidence indirect patch v2.9.4
github.com/go-openapi/jsonpointer v1.0.0v1.0.1 age confidence indirect patch
github.com/go-openapi/jsonreference v1.0.0v1.0.2 age confidence indirect patch
github.com/go-openapi/swag v0.27.1v0.29.2 age confidence indirect minor
github.com/go-openapi/swag/cmdutils v0.27.1v0.29.2 age confidence indirect minor
github.com/go-openapi/swag/conv v0.27.1v0.29.2 age confidence indirect minor
github.com/go-openapi/swag/fileutils v0.27.1v0.29.2 age confidence indirect minor
github.com/go-openapi/swag/jsonutils v0.27.1v0.29.2 age confidence indirect minor
github.com/go-openapi/swag/loading v0.27.1v0.29.2 age confidence indirect minor
github.com/go-openapi/swag/mangling v0.27.1v0.29.2 age confidence indirect minor
github.com/go-openapi/swag/netutils v0.27.1v0.29.2 age confidence indirect minor
github.com/go-openapi/swag/pools v0.27.1v0.29.2 age confidence indirect minor
github.com/go-openapi/swag/stringutils v0.27.1v0.29.2 age confidence indirect minor
github.com/go-openapi/swag/typeutils v0.27.1v0.29.2 age confidence indirect minor
github.com/go-openapi/swag/yamlutils v0.27.1v0.29.2 age confidence indirect minor
github.com/google/pprof b9395ee6331bc6 age confidence indirect digest
github.com/onsi/ginkgo/v2 v2.32.1v2.32.2 age confidence require patch
github.com/openshift/api 8bc26b09edb1b2 require digest
github.com/openshift/osde2e-common 8a4449ad3668b5 age confidence require digest
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.55.1v0.94.0 age confidence require minor
github.com/prometheus/client_model v0.6.2v0.6.3 age confidence indirect patch
github.com/prometheus/common v0.70.1v0.71.0 age confidence indirect minor
github.com/prometheus/procfs v0.21.1v0.22.0 age confidence indirect minor
go (source) 1.26.51.27.1 age confidence toolchain minor
go.opentelemetry.io/otel v1.44.0v1.46.0 age confidence indirect minor
go.opentelemetry.io/otel/trace v1.44.0v1.46.0 age confidence indirect minor
go.yaml.in/yaml/v3 v3.0.4v3.0.5 age confidence indirect patch
golang.org/x/mod v0.38.0v0.41.0 age confidence indirect minor
golang.org/x/net v0.57.0v0.59.0 age confidence indirect minor
golang.org/x/oauth2 v0.36.0v0.37.0 age confidence indirect minor
golang.org/x/sync v0.22.0v0.23.0 age confidence indirect minor
golang.org/x/sys v0.47.0v0.48.0 age confidence indirect minor
golang.org/x/term v0.45.0v0.46.0 age confidence indirect minor
golang.org/x/text v0.40.0v0.42.0 age confidence indirect minor
golang.org/x/time v0.15.0v0.16.0 age confidence indirect minor
golang.org/x/tools v0.48.0v0.50.0 age confidence indirect minor
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996afv1.36.12 age confidence indirect patch
k8s.io/kube-openapi d427ff97970a1e age confidence indirect digest
sigs.k8s.io/json 2d3202611ed52e age confidence indirect digest

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.3

Compare Source

This release fixes a potential panic when decoding into a time.Time from a CBOR byte string, map, or array under certain conditions.

Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with timeTag = DecTagRequired.

Upgrading to v2.9.3 is recommended.

The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.

What's Changed

  • Skip data item when decoding to time.Time fails under certain conditions by @​fxamacker in #​803

Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v1.0.1

Compare Source

1.0.1 - 2026-09-04

Full Changelog: go-openapi/jsonpointer@v1.0.0...v1.0.1

14 commits in this release.


Documentation
Miscellaneous tasks
Updates

People who contributed to this release

jsonpointer license terms

License

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v1.0.2

Compare Source

1.0.2 - 2026-09-04

Full Changelog: go-openapi/jsonreference@v1.0.1...v1.0.2

4 commits in this release.


Refactor
Documentation
Updates

People who contributed to this release

jsonreference license terms

License

v1.0.1

Compare Source

1.0.1 - 2026-08-25

Full Changelog: go-openapi/jsonreference@v1.0.0...v1.0.1

12 commits in this release.


Fixed bugs
  • fix: keep NormalizeURL's output parseable when dropping a default port by @​fredbi ...
Documentation
Performance
  • perf: replace the duplicate-slash regexp in NormalizeURL with a scan by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

People who contributed to this release

jsonreference license terms

License

go-openapi/swag (github.com/go-openapi/swag)

v0.29.2

Compare Source

0.29.2 - 2026-09-04

Full Changelog: go-openapi/swag@v0.29.1...v0.29.2

8 commits in this release.


Documentation
Miscellaneous tasks
Updates

People who contributed to this release

swag license terms

License

Per-module changes

cmdutils (0.29.2)
Miscellaneous tasks

conv (0.29.2)
Miscellaneous tasks
Updates

fileutils (0.29.2)
Miscellaneous tasks
Updates

jsonname (0.29.2)
Miscellaneous tasks
Updates

jsonutils/adapters/easyjson (0.29.2)
Miscellaneous tasks
Updates

jsonutils/adapters/testintegration/benchmarks (0.29.2)
Miscellaneous tasks
Updates

jsonutils/adapters/testintegration (0.29.2)
Miscellaneous tasks
Updates

jsonutils/fixtures_test (0.29.2)
Miscellaneous tasks
Updates

jsonutils (0.29.2)
Miscellaneous tasks
Updates

loading (0.29.2)
Miscellaneous tasks
Updates

mangling (0.29.2)
Miscellaneous tasks
Updates

netutils (0.29.2)
Miscellaneous tasks
Updates

pools (0.29.2)
Miscellaneous tasks
Updates

stringutils (0.29.2)
Miscellaneous tasks
Updates

typeutils (0.29.2)
Miscellaneous tasks
Updates

yamlutils (0.29.2)
Miscellaneous tasks
Updates

v0.29.1

Compare Source

0.29.1 - 2026-08-21

Full Changelog: go-openapi/swag@v0.29.0...v0.29.1

4 commits in this release.


Testing
Miscellaneous tasks
Updates

People who contributed to this release

swag license terms

License

Per-module changes

conv (0.29.1)
Miscellaneous tasks

jsonname (0.29.1)
Miscellaneous tasks

jsonutils/adapters/easyjson (0.29.1)
Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.29.1)
Miscellaneous tasks

jsonutils/adapters/testintegration (0.29.1)
Miscellaneous tasks

jsonutils (0.29.1)
Testing
Miscellaneous tasks

loading (0.29.1)
Miscellaneous tasks

mangling (0.29.1)
Miscellaneous tasks

netutils (0.29.1)
Miscellaneous tasks

pools (0.29.1)
Miscellaneous tasks

stringutils (0.29.1)
Miscellaneous tasks

typeutils (0.29.1)
Miscellaneous tasks

yamlutils (0.29.1)
Miscellaneous tasks

v0.29.0

Compare Source

0.29.0 - 2026-08-19

New fsutils on top of io.FS

Full Changelog: go-openapi/swag@v0.28.0...v0.29.0

10 commits in this release.


Implemented enhancements
Documentation
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

People who contributed to this release

swag license terms

License

Per-module changes

conv (0.29.0)
Miscellaneous tasks

fileutils (0.29.0)
Implemented enhancements

jsonname (0.29.0)
Miscellaneous tasks

jsonutils/adapters/easyjson (0.29.0)
Miscellaneous tasks

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • Between 02:00 AM and 04:59 AM, Monday through Friday (* 2-4 * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Jul 2, 2026
@openshift-ci
openshift-ci Bot requested review from anispate and tnierman July 2, 2026 04:04
@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Jul 2, 2026
@openshift-ci

openshift-ci Bot commented Jul 2, 2026

Copy link
Copy Markdown
Contributor

Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot

Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD 5ed2a10 and 2 for PR HEAD 5cfde73 in total

@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 5cfde73 to 9503f4f Compare July 3, 2026 04:03
@openshift-ci openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jul 3, 2026
@openshift-ci

openshift-ci Bot commented Jul 3, 2026

Copy link
Copy Markdown
Contributor

New changes are detected. LGTM label has been removed.

@MitaliBhalla

Copy link
Copy Markdown
Contributor

/retest

@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 3 times, most recently from 0268c82 to 9a74d7c Compare July 8, 2026 04:03
@smarthall

Copy link
Copy Markdown
Member

/retest

@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 4 times, most recently from 1ed3a9d to efee087 Compare July 14, 2026 04:03
@smarthall

Copy link
Copy Markdown
Member

/retest

1 similar comment
@smarthall

Copy link
Copy Markdown
Member

/retest

@openshift-ci

openshift-ci Bot commented Jul 15, 2026

Copy link
Copy Markdown
Contributor

PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci openshift-ci Bot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Jul 15, 2026
@smarthall

Copy link
Copy Markdown
Member

/ok-to-test

@openshift-ci openshift-ci Bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Jul 15, 2026
@smarthall

smarthall commented Jul 15, 2026

Copy link
Copy Markdown
Member

Made ROSAENG-61788 to update the dependencies we didn't update in #597

@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 4 times, most recently from 332da80 to db9b0fe Compare August 11, 2026 04:05
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 6 times, most recently from 84584fd to 267ad66 Compare August 20, 2026 04:04
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 5 times, most recently from ab10b0c to cffdbd0 Compare August 27, 2026 04:03
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 6 times, most recently from ec0cea5 to 9fe16e2 Compare September 7, 2026 04:03
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 3 times, most recently from 9b924df to ef2bf28 Compare September 10, 2026 04:05
@coderabbitai

coderabbitai Bot commented Sep 10, 2026

Copy link
Copy Markdown

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Advanced

Run ID: 800f22a2-fe05-4a64-8b26-96d281b49536

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review

Comment @coderabbitai help to get the list of available commands.

@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from ef2bf28 to 59369fd Compare September 14, 2026 04:04
Signed-off-by: red-hat-konflux-kflux-prd-rh03 <206760901+red-hat-konflux-kflux-prd-rh03[bot]@users.noreply.github.com>
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 59369fd to 8e588f7 Compare September 15, 2026 04:08
@openshift-ci

openshift-ci Bot commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/images 8e588f7 link true /test images
ci/prow/e2e-binary-build-success 8e588f7 link true /test e2e-binary-build-success
ci/prow/pr-check 8e588f7 link true /test pr-check
ci/prow/rosa-sts-e2e 8e588f7 link false /test rosa-sts-e2e

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants