Skip to content

Comments

chore(deps): update go dependencies#156

Open
red-hat-konflux[bot] wants to merge 1 commit intotech-previewfrom
konflux/mintmaker/tech-preview/go-deps
Open

chore(deps): update go dependencies#156
red-hat-konflux[bot] wants to merge 1 commit intotech-previewfrom
konflux/mintmaker/tech-preview/go-deps

Conversation

@red-hat-konflux
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Feb 10, 2026

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
github.com/containerd/stargz-snapshotter/estargz indirect minor v0.17.0 -> v0.18.2
github.com/go-openapi/jsonpointer indirect patch v0.22.0 -> v0.22.4
github.com/go-openapi/jsonreference indirect patch v0.21.1 -> v0.21.4
github.com/go-openapi/swag indirect minor v0.24.1 -> v0.25.4
github.com/go-openapi/swag/cmdutils indirect minor v0.24.0 -> v0.25.4
github.com/go-openapi/swag/conv indirect minor v0.24.0 -> v0.25.4
github.com/go-openapi/swag/fileutils indirect minor v0.24.0 -> v0.25.4
github.com/go-openapi/swag/jsonname indirect minor v0.24.0 -> v0.25.4
github.com/go-openapi/swag/jsonutils indirect minor v0.24.0 -> v0.25.4
github.com/go-openapi/swag/loading indirect minor v0.24.0 -> v0.25.4
github.com/go-openapi/swag/mangling indirect minor v0.24.0 -> v0.25.4
github.com/go-openapi/swag/netutils indirect minor v0.24.0 -> v0.25.4
github.com/go-openapi/swag/stringutils indirect minor v0.24.0 -> v0.25.4
github.com/go-openapi/swag/typeutils indirect minor v0.24.0 -> v0.25.4
github.com/go-openapi/swag/yamlutils indirect minor v0.24.0 -> v0.25.4
github.com/google/gnostic-models indirect patch v0.7.0 -> v0.7.1
github.com/google/go-containerregistry require minor v0.20.6 -> v0.21.1
github.com/google/pprof indirect digest 8b542ba -> cb029da
github.com/klauspost/compress indirect patch v1.18.0 -> v1.18.4
github.com/letsencrypt/boulder indirect minor v0.20250819.0 -> v0.20260223.0
github.com/prometheus/common indirect minor v0.66.1 -> v0.67.5
github.com/prometheus/procfs indirect minor v0.17.0 -> v0.19.2
github.com/secure-systems-lab/go-securesystemslib indirect minor v0.9.1 -> v0.10.0
github.com/sigstore/sigstore indirect minor v1.9.6-0.20250729224751-181c5d3339b3 -> v1.10.4
github.com/sigstore/sigstore-go require patch v1.1.2 -> v1.1.4
github.com/sirupsen/logrus indirect patch v1.9.3 -> v1.9.4
github.com/vbatts/tar-split indirect patch v0.12.1 -> v0.12.2
golang.org/x/crypto indirect minor v0.42.0 -> v0.48.0
golang.org/x/net indirect minor v0.44.0 -> v0.50.0
golang.org/x/oauth2 indirect minor v0.31.0 -> v0.35.0
golang.org/x/sync indirect minor v0.17.0 -> v0.19.0
golang.org/x/sys indirect minor v0.36.0 -> v0.41.0
golang.org/x/term indirect minor v0.35.0 -> v0.40.0
golang.org/x/text indirect minor v0.29.0 -> v0.34.0
golang.org/x/time indirect minor v0.13.0 -> v0.14.0
golang.org/x/tools indirect minor v0.37.0 -> v0.42.0
google.golang.org/genproto/googleapis/api indirect digest 9702482 -> 2f722ef
google.golang.org/genproto/googleapis/rpc indirect digest 9702482 -> 2f722ef
k8s.io/api require minor v0.34.1 -> v0.35.1
k8s.io/apiextensions-apiserver indirect minor v0.34.1 -> v0.35.1
k8s.io/apimachinery require minor v0.34.1 -> v0.35.1
k8s.io/client-go require minor v0.34.1 -> v0.35.1
k8s.io/kube-openapi indirect digest 589584f -> a19766b
k8s.io/utils require digest 0af2bda -> b8788ab
sigs.k8s.io/controller-runtime require minor v0.22.1 -> v0.23.1

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

containerd/stargz-snapshotter (github.com/containerd/stargz-snapshotter/estargz)

v0.18.2

Compare Source

Notable Changes

v0.18.1

Compare Source

Notable Changes

v0.18.0

Compare Source

Notable Changes

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.22.4

Compare Source

0.22.4 - 2025-12-06

Full Changelog: go-openapi/jsonpointer@v0.22.3...v0.22.4

1 commits in this release.


Miscellaneous tasks

People who contributed to this release

jsonpointer license terms

License

v0.22.3

Compare Source

0.22.3 - 2025-11-17

Full Changelog: go-openapi/jsonpointer@v0.22.2...v0.22.3

8 commits in this release.


Documentation
Code quality
Miscellaneous tasks

People who contributed to this release

New Contributors

jsonpointer license terms

License

v0.22.2

Compare Source

0.22.2 - 2025-11-14

Full Changelog: go-openapi/jsonpointer@v0.22.1...v0.22.2

12 commits in this release.


Documentation
Code quality
Testing
Miscellaneous tasks
Security
Updates

People who contributed to this release

jsonpointer license terms

License

v0.22.1

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.4

Compare Source

0.21.4 - 2025-12-08

Full Changelog: go-openapi/jsonreference@v0.21.3...v0.21.4

1 commits in this release.


Documentation

People who contributed to this release

New Contributors

jsonreference license terms

License

v0.21.3

Compare Source

v0.21.2

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

v0.25.4

Compare Source

v0.25.3

Compare Source

v0.25.2

Compare Source

v0.25.1

Compare Source

v0.25.0

Compare Source

google/gnostic-models (github.com/google/gnostic-models)

v0.7.1

Compare Source

google/go-containerregistry (github.com/google/go-containerregistry)

v0.21.1

Compare Source

This release fixes a regression in crane introduced in the previous release.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.21.0...v0.21.1

v0.21.0

Compare Source

This release updates the minimum Go version to 1.25.6.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.7...v0.21.0

v0.20.8

Compare Source

v0.20.7

Compare Source

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.6...v0.20.7

klauspost/compress (github.com/klauspost/compress)

v1.18.4

Compare Source

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.2...v1.18.4

v1.18.3

Compare Source

Downstream CVE-2025-61728

See golang/go#77102

Full Changelog: klauspost/compress@v1.18.2...v1.18.3

v1.18.2

Compare Source

What's Changed

v1.18.1 is marked "retracted" due to invalid flate/zip/gzip encoding.

New Contributors

Full Changelog: klauspost/compress@v1.18.1...v1.18.2

v1.18.1

Compare Source

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

letsencrypt/boulder (github.com/letsencrypt/boulder)

v0.20260223.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260217.0...v0.20260223.0

v0.20260217.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260202.0...v0.20260217.0

v0.20260202.0

Compare Source

What's Changed

New Contributors

Full Changelog: letsencrypt/boulder@v0.20260126.0...v0.20260202.0

v0.20260126.0

Compare Source

What's Changed

New Contributors

Full Changelog: letsencrypt/boulder@v0.20260120.0...v0.20260126.0

v0.20260120.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260112.0...v0.20260120.0

v0.20260112.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260105.0...v0.20260112.0

v0.20260105.0

Compare Source

What's Changed

New Contributors

Full Changelog: letsencrypt/boulder@v0.20251216.0...v0.20260105.0

v0.20251216.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20251208.0...v0.20251216.0

v0.20251208.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20251202.0...v0.20251208.0

v0.20251202.0

Compare Source

What's Changed


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
Copy link
Contributor Author

red-hat-konflux bot commented Feb 10, 2026

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 8 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.6
github.com/onsi/ginkgo/v2 v2.23.4 -> v2.27.2
github.com/onsi/gomega v1.37.0 -> v1.38.2
github.com/theupdateframework/go-tuf/v2 v2.1.1 -> v2.3.0
github.com/docker/cli v28.2.2+incompatible -> v29.2.1+incompatible
go.yaml.in/yaml/v2 v2.4.2 -> v2.4.3
sigs.k8s.io/structured-merge-diff/v6 v6.3.0 -> v6.3.2-0.20260122202528-d9cc6641c482
google.golang.org/protobuf v1.36.8 -> v1.36.11
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v4.13.0

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 26 times, most recently from 6faa2c2 to 49e1330 Compare February 17, 2026 22:48
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 2 times, most recently from efff90c to 81551a0 Compare February 18, 2026 07:00
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 15 times, most recently from 180eabf to 7216995 Compare February 25, 2026 01:35
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch from 7216995 to 80deb51 Compare February 25, 2026 05:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants