Skip to content

Update go.mod packages - Disabled branches #573

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
wants to merge 1 commit into from
Closed

Update go.mod packages - Disabled branches #573

wants to merge 1 commit into from

Conversation

@red-hat-konflux
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Jul 20, 2025 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0 age confidence indirect minor
github.com/emicklei/go-restful/v3 v3.10.2 -> v3.12.2 age confidence indirect minor
github.com/evanphx/json-patch v5.6.0+incompatible -> v5.9.11+incompatible age confidence indirect minor
github.com/go-logr/logr v1.2.4 -> v1.4.3 age confidence indirect minor
github.com/go-openapi/jsonpointer v0.19.6 -> v0.21.2 age confidence indirect minor
github.com/go-openapi/jsonreference v0.20.2 -> v0.21.0 age confidence indirect minor
github.com/go-openapi/swag v0.22.3 -> v0.23.1 age confidence indirect minor
github.com/golang/protobuf v1.5.3 -> v1.5.4 age confidence indirect patch
github.com/google/gnostic v0.6.9 -> v0.7.0 age confidence indirect minor
github.com/google/go-cmp v0.5.9 -> v0.7.0 age confidence indirect minor
github.com/google/uuid v1.3.0 -> v1.6.0 age confidence indirect minor
github.com/imdario/mergo v0.3.15 -> v0.3.16 age confidence indirect patch
github.com/jackc/pgservicefile 091c0ba -> 5a60cdf age confidence indirect digest
github.com/jackc/pgtype v1.14.0 -> v1.14.4 age confidence indirect patch
github.com/lib/pq v1.10.7 -> v1.10.9 age confidence indirect patch
github.com/mailru/easyjson v0.7.7 -> v0.9.0 age confidence indirect minor
github.com/prometheus/client_model v0.4.0 -> v0.6.2 age confidence indirect minor
github.com/prometheus/common v0.44.0 -> v0.65.0 age confidence indirect minor
github.com/prometheus/procfs v0.10.0 -> v0.17.0 age confidence indirect minor
github.com/shopspring/decimal v1.3.1 -> v1.4.0 age confidence indirect minor
github.com/spf13/pflag v1.0.6-0.20210604193023-d5e0c0615ace -> v1.0.7 age confidence indirect patch
golang.org/x/crypto v0.37.0 -> v0.41.0 age confidence indirect minor
golang.org/x/net v0.39.0 -> v0.43.0 age confidence indirect minor
golang.org/x/sys v0.32.0 -> v0.35.0 age confidence indirect minor
golang.org/x/term v0.31.0 -> v0.34.0 age confidence indirect minor
golang.org/x/text v0.24.0 -> v0.28.0 age confidence indirect minor
golang.org/x/time v0.3.0 -> v0.12.0 age confidence indirect minor
google.golang.org/protobuf v1.36.5 -> v1.36.7 age confidence indirect patch
k8s.io/api v0.27.2 -> v0.33.3 age confidence indirect minor
k8s.io/kube-openapi 54b630e -> f3f2b99 age confidence indirect digest
k8s.io/utils 9f67429 -> 4c0f3b2 age confidence indirect digest
sigs.k8s.io/controller-runtime v0.15.0 -> v0.21.0 age confidence indirect minor
sigs.k8s.io/json bc3834c -> 2d32026 age confidence indirect digest
sigs.k8s.io/structured-merge-diff/v4 v4.2.3 -> v4.7.0 age confidence indirect minor
sigs.k8s.io/yaml v1.3.0 -> v1.6.0 age confidence indirect minor

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

cespare/xxhash (github.com/cespare/xxhash/v2)

v2.3.0

Compare Source

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.12.2

Compare Source

  • allow empty payloads in post,put,patch, issue #​580 ( thanks @​liggitt, Jordan Liggitt)

v3.12.1

Compare Source

  • fix misroute when dealing multiple webservice with regex (#​549) (thanks Haitao Chen)

v3.12.0

Compare Source

v3.11.3

Compare Source

  • better not have 2 tags on one commit

v3.11.2

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.1

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.0

Compare Source

  • restored behavior as <= v3.9.0 with option to change path strategy using TrimRightSlashEnabled.
evanphx/json-patch (github.com/evanphx/json-patch)

v5.9.11+incompatible

Compare Source

v5.9.10+incompatible

Compare Source

v5.9.0+incompatible

Compare Source

v5.8.1+incompatible

Compare Source

v5.8.0+incompatible

Compare Source

v5.7.0+incompatible

Compare Source

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

v1.4.2

Compare Source

What's Changed

Dependencies:

Full Changelog: go-logr/logr@v1.4.1...v1.4.2

v1.4.1

Compare Source

What's Changed

Full Changelog: go-logr/logr@v1.4.0...v1.4.1

v1.4.0

Compare Source

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.3.0...v1.4.0

v1.3.0

Compare Source

This release adds support for slog in a new, self-contained logr/slogr package. Implementers of a logr.LogSink are encouraged, but not required, to extend their implementation to improve the quality of log output coming from a slog API call.

Breaking change: the call depth for LogSink.Enabled when called via Logger.Enabled was fixed to be the same as for other call paths. Implementers of a LogSink who have worked around this bug will need to remove their workarounds.

Security best practices were improved. Only Go versions >= 1.18 are supported by this release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.2.4...v1.3.0

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.21.2

Compare Source

v0.21.1

Compare Source

v0.21.0

Compare Source

v0.20.3

Compare Source

v0.20.2

Compare Source

v0.20.1

Compare Source

v0.20.0

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.0

Compare Source

v0.20.5

Compare Source

v0.20.4

Compare Source

v0.20.3

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

v0.23.1

Compare Source

v0.23.0

Compare Source

v0.22.10

Compare Source

v0.22.9

Compare Source

v0.22.8

Compare Source

v0.22.7

Compare Source

v0.22.6

Compare Source

v0.22.5

Compare Source

v0.22.4

Compare Source

golang/protobuf (github.com/golang/protobuf)

v1.5.4

Compare Source

Notable changes

  • update descriptor.proto to latest version
google/gnostic (github.com/google/gnostic)

v0.7.0

Compare Source

google/go-cmp (github.com/google/go-cmp)

v0.7.0

Compare Source

New API:

  • (#​367) Support compare functions with SortSlices and SortMaps

Panic messaging:

  • (#​370) Detect proto.Message types when failing to export a field

v0.6.0

Compare Source

New API:

  • (#​340) Add cmpopts.EquateComparable

Documentation changes:

  • (#​337) Use of hotlinking of Go identifiers

Build changes:

  • (#​325) Remove purego fallbacks

Testing changes:

  • (#​322) Run tests for Go 1.20 version
  • (#​332) Pin GitHub action versions
  • (#​327) set workflow permission to read-only
google/uuid (github.com/google/uuid)

v1.6.0

Compare Source

Features
Bug Fixes

v1.5.0

Compare Source

Features

v1.4.0

Compare Source

Features
  • UUIDs slice type with Strings() convenience method (#​133) (cd5fbbd)
Fixes
  • Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior)

v1.3.1

Compare Source

Bug Fixes
imdario/mergo (github.com/imdario/mergo)

v0.3.16: Announcement: v1.0.0 will be released on June 18th

Compare Source

This release doesn't contain code changes.

After 10 years, with many corner cases covered, very few issues pending (at least, comparing them with the usage of the library as part of Docker, Kubernetes, Datadog's agent, etc.), and a very stable API, I think it's time to release a 1.0.0 version.

This version will be released under a vanity URL: dario.cat/mergo

PS: although I'll make sure that github.com/imdario/mergo will be available, I'm going to also change my GitHub handle, so expect for a few minutes to not be able to pull from github.com/imdario as I fork it from the new handle to the old one.

PS2: I'm creating a discussion for this release to make sure we can have a conversation around the topic, and anything else about Mergo that you care about.

jackc/pgtype (github.com/jackc/pgtype)

v1.14.4

Compare Source

v1.14.3

Compare Source

v1.14.2

Compare Source

v1.14.1

Compare Source

lib/pq (github.com/lib/pq)

v1.10.9

Compare Source

  • Fixes backwards incompat bug with 1.13.
  • Fixes pgpass issue

v1.10.8

Compare Source

mailru/easyjson (github.com/mailru/easyjson)

v0.9.0

Compare Source

up go version and bugfixes

v0.8.0

Compare Source

stable version before go version bump

prometheus/client_model (github.com/prometheus/client_model)

v0.6.2

Compare Source

What's Changed

Configuration

📅 Schedule: Branch creation - "after 5am on sunday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

@red-hat-konflux
Copy link
Contributor Author

red-hat-konflux bot commented Jul 20, 2025 •
edited
Loading

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.0 -> 1.24.0
github.com/prometheus/client_golang v1.15.1 -> v1.22.0
github.com/stretchr/testify v1.8.1 -> v1.10.0
k8s.io/apimachinery v0.27.2 -> v0.33.0
k8s.io/klog/v2 v2.100.1 -> v2.130.1
golang.org/x/oauth2 v0.28.0 -> v0.30.0

@openshift-ci
Copy link

openshift-ci bot commented Jul 20, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign xrajesh for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-2.12/go.mod-packages-disabled-branches branch 4 times, most recently from 246f3da to e344e8d Compare August 3, 2025 09:47
@red-hat-konflux
Update go.mod packages - Disabled branches
3fb10f3 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-2.12/go.mod-packages-disabled-branches branch from e344e8d to 3fb10f3 Compare August 10, 2025 12:15
@sonarqubecloud
Copy link

sonarqubecloud bot commented Aug 10, 2025

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

@openshift-ci
Copy link

openshift-ci bot commented Aug 10, 2025

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/test-unit 3fb10f3 link true /test test-unit
ci/prow/lint 3fb10f3 link true /test lint
ci/prow/images 3fb10f3 link true /test images
ci/prow/pr-image-mirror 3fb10f3 link true /test pr-image-mirror

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@smcavey smcavey closed this Aug 14, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dco-signoff: yes

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@smcavey