fix(deps): update gomod dependencies - #293
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
Conversation
red-hat-konflux-kflux-prd-rh03
Bot
added
approved
|
red-hat-konflux-kflux-prd-rh03
Bot
added
approved
openshift-ci
Bot
added
the
needs-ok-to-test
|
Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
84d25d5 to
7121f06
Compare
|
New changes are detected. LGTM label has been removed. |
727793d to
e264433
Compare
fc15498 to
71c7a23
Compare
b8fb173 to
bc65554
Compare
|
🤖 Finished Review · ✅ Success · Started 4:06 AM UTC · Completed 4:17 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.56 |
![fullsend-ai-review[bot]](https://avatars.githubusercontent.com/in/3478501?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
16bd95b to
951a929
Compare
|
🤖 Finished Review · ✅ Success · Started 4:05 AM UTC · Completed 4:20 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.08 |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
951a929 to
8ae5c88
Compare
|
🤖 Finished Review · ✅ Success · Started 4:06 AM UTC · Completed 4:18 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.74 |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
8ae5c88 to
54ff4f5
Compare
|
🤖 Review · ❌ Terminated · Started 4:07 AM UTC · Ended 4:19 AM UTC Commit: |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 4:07 AM UTC · Completed 4:19 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.87 |
54ff4f5 to
424c738
Compare
|
🤖 Review · ❌ Terminated · Started 4:06 AM UTC · Ended 4:20 AM UTC Commit: |
|
[APPROVALNOTIFIER] This PR is APPROVED Approval requirements bypassed by manually added approval. This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot] The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 4:06 AM UTC · Completed 4:20 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.13 |
|
Important Review skippedBot user detected. To trigger a single review, invoke the ⚙️ Run configurationConfiguration used: Repository YAML (base), Central YAML (inherited) Review profile: CHILL Plan: Advanced Run ID: You can disable this status message by setting the Use the checkbox below for a quick retry:
Comment |
|
🤖 Finished Review · ✅ Success · Started 4:08 AM UTC · Completed 4:22 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.42 |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 4:06 AM UTC · Completed 4:19 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.81 |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
Signed-off-by: red-hat-konflux-kflux-prd-rh03 <206760901+red-hat-konflux-kflux-prd-rh03[bot]@users.noreply.github.com>
|
🤖 Finished Review · ✅ Success · Started 4:07 AM UTC · Completed 4:21 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.08 |
| k8s.io/api => k8s.io/api v0.37.0 | ||
| k8s.io/apimachinery => k8s.io/apimachinery v0.37.0 | ||
| k8s.io/client-go => k8s.io/client-go v0.37.0 | ||
| sigs.k8s.io/cluster-api-provider-aws => github.com/openshift/cluster-api-provider-aws c5a9d1911d7a |
There was a problem hiding this comment.
[critical] invalid-go-module-syntax
The replace directive for sigs.k8s.io/cluster-api-provider-aws uses a bare commit hash (c5a9d1911d7a) without a version prefix. Go module replace directives require the replacement version to be a valid semver or pseudo-version string. This means the go.mod file in its current form cannot be parsed by the Go toolchain, so go build, go test, go mod tidy, and all other Go commands will fail. The base branch correctly used pseudo-version format v0.2.1-0.20201125052318-b85a18cbf338.
Suggested fix: Replace the bare hash with a proper pseudo-version. Either restore the original v0.2.1-0.20201125052318-b85a18cbf338 if the same commit is intended, or run go mod edit -replace 'sigs.k8s.io/cluster-api-provider-aws=github.com/openshift/cluster-api-provider-aws@c5a9d1911d7a' followed by go mod tidy to let Go resolve the commit hash to a valid pseudo-version string.
| github.com/openshift/operator-custom-metrics v0.5.1 | ||
| github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.67.1 | ||
| github.com/prometheus/client_golang v1.23.2 | ||
| github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.94.0 |
There was a problem hiding this comment.
[low] major-version-jump-risk
prometheus-operator/pkg/apis/monitoring is bumped from v0.67.1 to v0.94.0, a jump of 27 minor versions. The codebase uses monitorv1.ServiceMonitor, monitorv1.ServiceMonitorSpec, and monitorv1.Endpoint across 6 Go source files. While the types used are fundamental and stable within the monitoring/v1 API, compatibility cannot be verified until the critical go.mod syntax error is fixed and the project compiles.
Suggested fix: After fixing the replace directive syntax, run go build ./... and make go-test to confirm compatibility with the new prometheus-operator version.
This PR contains the following updates:
v2.9.2→v2.9.3v1.4.3→v1.4.4v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.27023385→6331bc6v0.0.22→v0.0.24v2.32.0→v2.32.2v1.42.1→v1.43.041627d8→c1fd4255c75e62→c1fd425b85a18c→c5a9d19v0.0.0-20210209143830-3442c7a36c1e→v0.1.0-alpha.3751e0d2→d3668b5v0.67.1→v0.94.0v1.23.2→v1.24.1v0.6.2→v0.6.3v0.69.0→v0.71.0v0.21.1→v0.22.0v3.0.4→v3.0.5v0.37.0→v0.41.0v0.56.0→v0.59.0v0.36.0→v0.37.0v0.21.0→v0.23.0v0.46.0→v0.48.0v0.44.0→v0.46.0v0.39.0→v0.42.0v0.15.0→v0.16.0v0.47.0→v0.50.0v1.36.12-0.20260120151049-f2248ac996af→v1.36.12v0.35.2→v0.37.0v0.36.0→v0.37.0v0.36.0→v0.37.0v0.35.2→v0.37.0v0.36.0→v0.37.0v0.35.2→v0.37.0v0.36.0→v0.37.0v0.36.0→v0.37.028399d8→cf1189dv0.23.3→v0.25.0v0.25.12d32026→11ed52ev6.4.0→v6.4.2Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
fxamacker/cbor (github.com/fxamacker/cbor/v2)
v2.9.3Compare Source
This release fixes a potential panic when decoding into a
time.Timefrom a CBOR byte string, map, or array under certain conditions.Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with
timeTag = DecTagRequired.Upgrading to v2.9.3 is recommended.
The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.
What's Changed
Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3
go-logr/logr (github.com/go-logr/logr)
v1.4.4Compare Source
What's Changed
New Contributors
Full Changelog: go-logr/logr@v1.4.3...v1.4.4
go-openapi/swag (github.com/go-openapi/swag)
v0.29.2Compare Source
0.29.2 - 2026-09-04
Full Changelog: go-openapi/swag@v0.29.1...v0.29.2
8 commits in this release.
Documentation
Miscellaneous tasks
Updates
People who contributed to this release
swag license terms
Per-module changes
cmdutils (0.29.2)
Miscellaneous tasks
conv (0.29.2)
Miscellaneous tasks
Updates
fileutils (0.29.2)
Miscellaneous tasks
Updates
jsonname (0.29.2)
Miscellaneous tasks
Updates
jsonutils/adapters/easyjson (0.29.2)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration/benchmarks (0.29.2)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration (0.29.2)
Miscellaneous tasks
Updates
jsonutils/fixtures_test (0.29.2)
Miscellaneous tasks
Updates
jsonutils (0.29.2)
Miscellaneous tasks
Updates
loading (0.29.2)
Miscellaneous tasks
Updates
mangling (0.29.2)
Miscellaneous tasks
Updates
netutils (0.29.2)
Miscellaneous tasks
Updates
pools (0.29.2)
Miscellaneous tasks
Updates
stringutils (0.29.2)
Miscellaneous tasks
Updates
typeutils (0.29.2)
Miscellaneous tasks
Updates
yamlutils (0.29.2)
Miscellaneous tasks
Updates
v0.29.1Compare Source
0.29.1 - 2026-08-21
Full Changelog: go-openapi/swag@v0.29.0...v0.29.1
4 commits in this release.
Testing
Miscellaneous tasks
Updates
People who contributed to this release
swag license terms
Per-module changes
conv (0.29.1)
Miscellaneous tasks
jsonname (0.29.1)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.29.1)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.29.1)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.29.1)
Miscellaneous tasks
jsonutils (0.29.1)
Testing
Miscellaneous tasks
loading (0.29.1)
Miscellaneous tasks
mangling (0.29.1)
Miscellaneous tasks
netutils (0.29.1)
Miscellaneous tasks
pools (0.29.1)
Miscellaneous tasks
stringutils (0.29.1)
Miscellaneous tasks
typeutils (0.29.1)
Miscellaneous tasks
yamlutils (0.29.1)
Miscellaneous tasks
v0.29.0Compare Source
0.29.0 - 2026-08-19
New fsutils on top of io.FS
Full Changelog: go-openapi/swag@v0.28.0...v0.29.0
10 commits in this release.
Implemented enhancements
Documentation
Testing
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release
swag license terms
Per-module changes
conv (0.29.0)
Miscellaneous tasks
fileutils (0.29.0)
Implemented enhancements
jsonname (0.29.0)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.29.0)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration/benchmarks (0.29.0)
Testing
Miscellaneous tasks
Updates
Other (technical)
jsonutils/adapters/testintegration (0.29.0)
Miscellaneous tasks
Updates
jsonutils/fixtures_test (0.29.0)
Miscellaneous tasks
Updates
jsonutils (0.29.0)
Miscellaneous tasks
Updates
loading (0.29.0)
Testing
Miscellaneous tasks
Updates
Other (technical)
mangling (0.29.0)
Miscellaneous tasks
netutils (0.29.0)
Miscellaneous tasks
pools (0.29.0)
Miscellaneous tasks
stringutils (0.29.0)
Miscellaneous tasks
typeutils (0.29.0)
Miscellaneous tasks
Configuration
📅 Schedule: (in timezone UTC)
* 2-4 * * 1-5)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.