chore(deps): update module sigs.k8s.io/structured-merge-diff/v6 to v7 - #367
Conversation
Signed-off-by: red-hat-konflux-kflux-prd-rh03 <206760901+red-hat-konflux-kflux-prd-rh03[bot]@users.noreply.github.com>
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
|
🤖 Finished Review · ✅ Success · Started 4:11 AM UTC · Completed 4:27 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.11 |
|
Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Risk Assessment: moderate (2/5) DetailsBot-authored dependency update claiming a major version bump (v6 to v7) confined to go.mod (1 file, 71 lines). While metadata signals are low-risk (bot author, single file, no protected paths), the major-update and manual-review-required labels elevate concern. Low churn and no reverts are positive signals. Overall risk is moderate due to the major version bump classification. |
ReviewFindingsCritical
Medium
Low
Next steps:
|
| module github.com/openshift/ocm-agent-operator | ||
|
|
||
| go 1.26.0 | ||
| go 1.27 |
There was a problem hiding this comment.
[medium] logic-error
Go directive bumped from go 1.26.0 to go 1.27 without updating go.sum. Running go mod tidy with Go 1.27 may produce different checksums or resolve different transitive dependencies, potentially causing build failures.
Suggested fix: Run go mod tidy with the Go 1.27 toolchain and include the resulting go.sum changes in the PR. Verify the project builds and tests pass with Go 1.27.
| gopkg.in/yaml.v2 v2.4.0 // indirect | ||
| gopkg.in/yaml.v3 v3.0.1 // indirect | ||
| k8s.io/apiextensions-apiserver v0.36.0 // indirect | ||
| k8s.io/code-generator v0.36.0 // indirect |
There was a problem hiding this comment.
[low] pattern-violation
Pre-existing duplicate '// indirect; // indirect' comment on k8s.io/gengo/v2 carried forward without cleanup during require block consolidation.
Suggested fix: Run go mod tidy to normalize go.mod formatting.
| @@ -10,11 +10,13 @@ require ( | |||
| github.com/onsi/gomega v1.42.1 | |||
| github.com/openshift/api v0.0.0-20260317095243-5c75e62da3e7 | |||
| github.com/openshift/operator-custom-metrics v0.5.1 | |||
There was a problem hiding this comment.
[low] code-organization
Dependencies consolidated from multiple require blocks into two (direct + indirect). Running go mod tidy would ensure correct direct/indirect classification.
Suggested fix: Run go mod tidy to let the Go toolchain determine the correct direct/indirect classification automatically.
|
@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## master #367 +/- ##
==========================================
+ Coverage 65.60% 70.26% +4.65%
==========================================
Files 23 23
Lines 1608 1419 -189
==========================================
- Hits 1055 997 -58
+ Misses 473 422 -51
+ Partials 80 0 -80 🚀 New features to boost your workflow:
|
This PR contains the following updates:
v6.4.0→v7.0.0Release Notes
kubernetes-sigs/structured-merge-diff (sigs.k8s.io/structured-merge-diff/v6)
v7.0.0Compare Source
v6.4.2Compare Source
v6.4.1Compare Source
Configuration
📅 Schedule: (in timezone UTC)
* 2-4 * * 1-5)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.