Skip to content

fix(deps): update non-k8s-go-dependencies#211

Closed
red-hat-konflux[bot] wants to merge 1 commit intooadp-1.4from
konflux/mintmaker/oadp-1.4/non-k8s-go-dependencies
Closed

fix(deps): update non-k8s-go-dependencies#211
red-hat-konflux[bot] wants to merge 1 commit intooadp-1.4from
konflux/mintmaker/oadp-1.4/non-k8s-go-dependencies

Conversation

@red-hat-konflux
Copy link
Copy Markdown
Contributor

@red-hat-konflux red-hat-konflux bot commented Mar 17, 2026 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/emicklei/go-restful/v3 v3.11.2 -> v3.13.0 age confidence indirect minor
github.com/evanphx/json-patch/v5 v5.9.0 -> v5.9.11 age confidence indirect patch
github.com/fatih/color v1.16.0 -> v1.19.0 age confidence indirect minor
github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0 age confidence indirect minor
github.com/go-logr/logr v1.4.2 -> v1.4.3 age confidence indirect patch
github.com/go-openapi/jsonpointer v0.21.0 -> v0.22.5 age confidence indirect minor
github.com/go-openapi/jsonreference v0.20.4 -> v0.21.5 age confidence indirect minor
github.com/go-openapi/swag v0.23.0 -> v0.25.5 age confidence indirect minor
github.com/google/gnostic-models v0.6.8 -> v0.7.1 age confidence indirect minor
github.com/google/go-cmp v0.6.0 -> v0.7.0 age confidence indirect minor
github.com/hashicorp/go-hclog v0.14.1 -> v0.16.2 age confidence indirect minor
github.com/hashicorp/go-plugin v1.6.0 -> v1.7.0 age confidence indirect minor
github.com/hashicorp/yamux v0.1.1 -> v0.1.2 age confidence indirect patch
github.com/kubernetes-csi/external-snapshotter/client/v8 v8.2.0 -> v8.4.0 age confidence require minor
github.com/mailru/easyjson v0.7.7 -> v0.9.2 age confidence indirect minor
github.com/mattn/go-colorable v0.1.13 -> v0.1.14 age confidence indirect patch
github.com/mitchellh/go-testing-interface v1.0.0 -> v1.14.1 age confidence indirect minor
github.com/oklog/run v1.0.0 -> v1.2.0 age confidence indirect minor
github.com/onsi/gomega v1.35.1 -> v1.39.1 age confidence require minor
github.com/openshift/api f636181 -> 30c2ef7 indirect digest
github.com/openshift/hive/apis 3f49f26 -> 8296ffc age confidence require digest
github.com/openshift/hypershift/api 830af05 -> 304806b age confidence require digest
github.com/prometheus/client_golang v1.19.1 -> v1.23.2 age confidence indirect minor
github.com/prometheus/client_model v0.6.1 -> v0.6.2 age confidence indirect patch
github.com/prometheus/common v0.55.0 -> v0.67.5 age confidence indirect minor
github.com/prometheus/procfs v0.15.1 -> v0.20.1 age confidence indirect minor
github.com/sirupsen/logrus v1.9.3 -> v1.9.4 age confidence require patch
github.com/spf13/afero v1.10.0 -> v1.15.0 age confidence indirect minor
github.com/spf13/cobra v1.8.1 -> v1.10.2 age confidence indirect minor
github.com/spf13/pflag v1.0.6-0.20210604193023-d5e0c0615ace -> v1.0.10 age confidence indirect patch
github.com/vmware-tanzu/velero v1.14.0 -> v1.18.0 age confidence require minor
go (source) 1.23.6 -> 1.26.1 age confidence toolchain minor
golang.org/x/exp ec58324 -> 7ab1446 age confidence indirect digest
golang.org/x/net v0.33.0 -> v0.52.0 age confidence indirect minor
golang.org/x/oauth2 v0.23.0 -> v0.36.0 age confidence indirect minor
golang.org/x/sys v0.28.0 -> v0.42.0 age confidence indirect minor
golang.org/x/term v0.27.0 -> v0.41.0 age confidence indirect minor
golang.org/x/text v0.21.0 -> v0.35.0 age confidence indirect minor
golang.org/x/time v0.7.0 -> v0.15.0 age confidence indirect minor
gomodules.xyz/jsonpatch/v2 v2.4.0 -> v2.5.0 age confidence indirect minor
google.golang.org/genproto/googleapis/rpc f6361c8 -> d00831a age confidence indirect digest
google.golang.org/grpc v1.65.0 -> v1.79.3 age confidence indirect minor
google.golang.org/protobuf v1.35.1 -> v1.36.11 age confidence indirect minor
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v4.13.0 age confidence indirect minor

Release Notes

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.13.0

Compare Source

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)

v3.12.2

Compare Source

  • allow empty payloads in post,put,patch, issue #​580 ( thanks @​liggitt, Jordan Liggitt)

v3.12.1

Compare Source

  • fix misroute when dealing multiple webservice with regex (#​549) (thanks Haitao Chen)

v3.12.0

Compare Source

v3.11.3

Compare Source

  • better not have 2 tags on one commit
evanphx/json-patch (github.com/evanphx/json-patch/v5)

v5.9.11

Compare Source

What's Changed

Full Changelog: evanphx/json-patch@v5.9.10...v5.9.11

v5.9.10

Compare Source

What's Changed

New Contributors

Full Changelog: evanphx/json-patch@v5.9.0...v5.9.10

fatih/color (github.com/fatih/color)

v1.19.0

Compare Source

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

v1.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: fatih/color@v1.17.0...v1.18.0

v1.17.0

Compare Source

What's Changed

New Contributors

Full Changelog: fatih/color@v1.16.0...v1.17.0

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.0

Compare Source

v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.

v2.9.0 passed fuzz tests and is production quality. However, the new TextUnmarshaler feature will continue being fuzz tested a bit longer due to recent changes. The recent changes are limited and don't affect other parts of the codec that passed ~2 billion execs fuzzing.

What's Changed

Docs

CI

🔎 Details

Special Thanks

Many thanks to @​benluddy for adding these new features! 🎉

  • Add opt-in support for encoding.TextMarshaler and encoding.TextUnmarshaler to encode and decode from CBOR text string.
  • Add opt-in support for json.Marshaler and json.Unmarshaler via user-provided transcoding function.

New Contributors

Full Changelog: fxamacker/cbor@v2.8.0...v2.9.0

v2.8.0

Compare Source

v2.8.0 adds omitzero struct tag option, fixes and deprecates 3 functions, and bumps requirements to go 1.20+.

Many thanks to @​liggitt for contributing the omitzero support!

The "omitzero" option omits zero values from encoding, matching stdlib encoding/json behavior.
When specified in the cbor tag, the option is always honored.
When specified in the json tag, the option is honored when building with Go 1.24+.

This release fixes 3 functions (when called directly by user apps) to use same error handling on bad input as cbor.Unmarshal():

  • RawTag.UnmarshalCBOR() (thanks @​thomas-fossati for reporting this!)
  • ByteString.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

This release also deprecates those 3 functions because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

What's Changed

Other Changes
🔍 Details

New Contributors

Full Changelog: fxamacker/cbor@v2.7.0...v2.8.0

v2.7.1

Compare Source

v2.7.1 fixes 3 functions (when called directly by user apps) to use same error handling on bad inputs as cbor.Unmarshal():

  • ByteString.UnmarshalCBOR()
  • RawTag.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

The above 3 fixed functions are deprecated because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

Before Upgrading to v2.7.1

v2.8.0 is being fuzz tested and will be released later today. It adds support for omitzero struct tag option.

v2.7.1 is the last version to support go 1.17-1.19. v2.8.0 and newer releases will require go 1.20+.

What's Changed

Special Thanks

Thanks @​thomas-fossati for reporting the bug in RawTag.UnmarshalCBOR() when it is called directly by user apps providing bad input data!

Full Changelog: fxamacker/cbor@v2.7.0...v2.7.1

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.22.5

Compare Source

0.22.5 - 2026-03-02

Full Changelog: go-openapi/jsonpointer@v0.22.4...v0.22.5

15 commits in this release.

Documentation
Code quality
Miscellaneous tasks
Updates
People who contributed to this release
New Contributors

jsonpointer license terms

License

v0.22.4

Compare Source

0.22.4 - 2025-12-06

Full Changelog: go-openapi/jsonpointer@v0.22.3...v0.22.4

1 commits in this release.

Miscellaneous tasks
People who contributed to this release

jsonpointer license terms

License

v0.22.3

Compare Source

0.22.3 - 2025-11-17

Full Changelog: go-openapi/jsonpointer@v0.22.2...v0.22.3

8 commits in this release.

Documentation
Code quality
Miscellaneous tasks
People who contributed to this release
New Contributors

jsonpointer license terms

License

v0.22.2

Compare Source

0.22.2 - 2025-11-14

Full Changelog: go-openapi/jsonpointer@v0.22.1...v0.22.2

12 commits in this release.

Documentation
Code quality
Testing
  • test: added fuzz test for parsing by [@​fredbi](https://red

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux bot added area/ci-tooling ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Mar 17, 2026
@red-hat-konflux
Copy link
Copy Markdown
Contributor Author

red-hat-konflux bot commented Mar 17, 2026 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: downloading go1.26.1 (linux/amd64)
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading github.com/vmware-tanzu/velero v1.18.0
go: downloading github.com/kubernetes-csi/external-snapshotter/client/v8 v8.4.0
go: downloading github.com/openshift/hive/apis v0.0.0-20260325221018-8296ffc88128
go: downloading github.com/openshift/hypershift/api v0.0.0-20260326134444-304806bd4a97
go: downloading k8s.io/api v0.35.1
go: downloading k8s.io/apiextensions-apiserver v0.34.3
go: downloading k8s.io/apimachinery v0.35.1
go: downloading k8s.io/utils v0.0.0-20260108192941-914a6e750570
go: downloading sigs.k8s.io/controller-runtime v0.22.4
go: downloading github.com/onsi/gomega v1.39.1
go: downloading k8s.io/client-go v0.34.3
go: downloading golang.org/x/sys v0.42.0
go: downloading github.com/openshift/api v0.0.0-20260326111139-30c2ef7a272e
go: downloading github.com/hashicorp/go-plugin v1.7.0
go: downloading github.com/spf13/pflag v1.0.10
go: downloading google.golang.org/grpc v1.79.3
go: downloading github.com/gogo/protobuf v1.3.2
go: downloading k8s.io/klog/v2 v2.130.1
go: downloading k8s.io/kube-openapi v0.0.0-20250910181357-589584f1c912
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.1
go: downloading golang.org/x/net v0.52.0
go: downloading github.com/hashicorp/go-hclog v1.6.3
go: downloading github.com/hashicorp/yamux v0.1.2
go: downloading github.com/oklog/run v1.2.0
go: downloading google.golang.org/protobuf v1.36.11
go: downloading golang.org/x/term v0.41.0
go: downloading golang.org/x/oauth2 v0.36.0
go: downloading golang.org/x/time v0.15.0
go: downloading github.com/fatih/color v1.19.0
go: downloading github.com/mattn/go-colorable v0.1.14
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260319201613-d00831a3d3e7
go: downloading github.com/spf13/cobra v1.10.2
go: downloading github.com/google/gnostic-models v0.7.1
go: downloading github.com/go-openapi/jsonreference v0.21.5
go: downloading github.com/go-openapi/swag v0.25.5
go: downloading golang.org/x/text v0.35.0
go: downloading gomodules.xyz/jsonpatch/v2 v2.5.0
go: downloading github.com/go-openapi/jsonpointer v0.22.5
go: downloading github.com/go-openapi/swag/cmdutils v0.25.5
go: downloading github.com/go-openapi/swag/conv v0.25.5
go: downloading github.com/go-openapi/swag/fileutils v0.25.5
go: downloading github.com/go-openapi/swag/jsonname v0.25.5
go: downloading github.com/go-openapi/swag/jsonutils v0.25.5
go: downloading github.com/go-openapi/swag/loading v0.25.5
go: downloading github.com/go-openapi/swag/mangling v0.25.5
go: downloading github.com/go-openapi/swag/netutils v0.25.5
go: downloading github.com/go-openapi/swag/stringutils v0.25.5
go: downloading github.com/go-openapi/swag/typeutils v0.25.5
go: downloading github.com/go-openapi/swag/yamlutils v0.25.5
go: downloading golang.org/x/sync v0.20.0
go: downloading github.com/prometheus/common v0.67.5
go: downloading github.com/prometheus/procfs v0.20.1
go: downloading github.com/emicklei/go-restful/v3 v3.13.0
go: github.com/openshift/hypershift-oadp-plugin/pkg/common imports
	sigs.k8s.io/controller-runtime/pkg/client imports
	k8s.io/client-go/kubernetes/scheme imports
	k8s.io/api/storagemigration/v1alpha1: cannot find module providing package k8s.io/api/storagemigration/v1alpha1

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Mar 17, 2026 •
edited
Loading

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 3bdd8a70-164d-449d-8481-2b6bba8f8e64

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/oadp-1.4/non-k8s-go-dependencies

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci openshift-ci bot requested review from kaovilai and sjenning March 17, 2026 17:44
@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Mar 17, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign csrwng for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Mar 17, 2026

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/oadp-1.4/non-k8s-go-dependencies branch 21 times, most recently from 463337e to eaa7268 Compare March 24, 2026 09:32
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/oadp-1.4/non-k8s-go-dependencies branch 11 times, most recently from 5249f19 to 17592bf Compare March 26, 2026 09:25
@red-hat-konflux
fix(deps): update non-k8s-go-dependencies
236e816 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/oadp-1.4/non-k8s-go-dependencies branch from 17592bf to 236e816 Compare March 26, 2026 14:17
@jparrill
Copy link
Copy Markdown
Contributor

jparrill commented Mar 26, 2026

/close

This branch will be deleted, not used in any place

@openshift-ci openshift-ci bot closed this Mar 26, 2026
@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Mar 26, 2026

@jparrill: Closed this PR.

Details

In response to this:

/close

This branch will be deleted, not used in any place

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@kaovilai kaovilai Awaiting requested review from kaovilai

@sjenning sjenning Awaiting requested review from sjenning

Assignees

No one assigned

Labels

area/ci-tooling ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@jparrill