Skip to content

Update go.mod packages #579

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: release-2.15
Choose a base branch
from

Conversation

red-hat-konflux[bot]
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Jul 27, 2025

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/doug-martin/goqu/v9 v9.18.0 -> v9.19.0 age confidence require minor
github.com/emicklei/go-restful/v3 v3.11.0 -> v3.12.2 age confidence indirect minor
github.com/evanphx/json-patch v5.6.0+incompatible -> v5.9.11+incompatible age confidence indirect minor
github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0 age confidence indirect minor
github.com/go-logr/logr v1.4.2 -> v1.4.3 age confidence indirect patch
github.com/go-openapi/jsonpointer v0.21.0 -> v0.21.2 age confidence indirect patch
github.com/go-openapi/jsonreference v0.20.2 -> v0.21.0 age confidence indirect minor
github.com/go-openapi/swag v0.23.0 -> v0.23.1 age confidence indirect patch
github.com/google/gnostic-models v0.6.8 -> v0.7.0 age confidence indirect minor
github.com/imdario/mergo v0.3.15 -> v0.3.16 age confidence indirect patch
github.com/jackc/pgservicefile 091c0ba -> 5a60cdf age confidence indirect digest
github.com/jackc/pgtype v1.14.0 -> v1.14.4 age confidence indirect patch
github.com/lib/pq v1.10.7 -> v1.10.9 age confidence indirect patch
github.com/mailru/easyjson v0.7.7 -> v0.9.0 age confidence indirect minor
github.com/onsi/ginkgo/v2 v2.22.0 -> v2.23.4 age confidence indirect minor
github.com/prometheus/client_golang v1.22.0 -> v1.23.0 age confidence require minor
github.com/prometheus/client_model v0.6.1 -> v0.6.2 age confidence indirect patch
github.com/prometheus/common v0.62.0 -> v0.65.0 age confidence indirect minor
github.com/prometheus/procfs v0.15.1 -> v0.17.0 age confidence indirect minor
github.com/shopspring/decimal v1.3.1 -> v1.4.0 age confidence indirect minor
github.com/spf13/pflag v1.0.6-0.20210604193023-d5e0c0615ace -> v1.0.7 age confidence indirect patch
github.com/stolostron/cluster-lifecycle-api 7394aeb -> 278b42d age confidence require digest
golang.org/x/crypto v0.37.0 -> v0.41.0 age confidence indirect minor
golang.org/x/net v0.39.0 -> v0.43.0 age confidence indirect minor
golang.org/x/sys v0.32.0 -> v0.35.0 age confidence indirect minor
golang.org/x/term v0.31.0 -> v0.34.0 age confidence indirect minor
golang.org/x/text v0.24.0 -> v0.28.0 age confidence indirect minor
golang.org/x/time v0.11.0 -> v0.12.0 age confidence indirect minor
google.golang.org/protobuf v1.36.5 -> v1.36.7 age confidence indirect patch
k8s.io/api v0.30.4 -> v0.33.3 age confidence replace minor
k8s.io/api v0.32.2 -> v0.33.3 age confidence indirect minor
k8s.io/client-go v0.30.4 -> v0.33.3 age confidence replace minor
k8s.io/client-go v0.32.2 -> v0.33.3 age confidence require minor
k8s.io/kube-openapi 32ad38e -> f3f2b99 age confidence indirect digest
k8s.io/utils 3ea5e8c -> 4c0f3b2 age confidence indirect digest
open-cluster-management.io/api v0.16.2-0.20250422072120-cadf714c3055 -> v0.16.2 age confidence require patch
quay.io/konflux-ci/konflux-vanguard/task-rpms-signature-scan 6d7e2f9 -> b5c2ba8 tekton-bundle digest
sigs.k8s.io/json 9aa6b5e -> 2d32026 age confidence indirect digest
sigs.k8s.io/structured-merge-diff/v4 v4.4.2 -> v4.7.0 age confidence indirect minor
sigs.k8s.io/yaml v1.4.0 -> v1.6.0 age confidence indirect minor

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

doug-martin/goqu (github.com/doug-martin/goqu/v9)

v9.19.0

Compare Source

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.12.2

Compare Source

  • allow empty payloads in post,put,patch, issue #​580 ( thanks @​liggitt, Jordan Liggitt)

v3.12.1

Compare Source

  • fix misroute when dealing multiple webservice with regex (#​549) (thanks Haitao Chen)

v3.12.0

Compare Source

v3.11.3

Compare Source

  • better not have 2 tags on one commit

v3.11.2

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.1

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)
evanphx/json-patch (github.com/evanphx/json-patch)

v5.9.11+incompatible

Compare Source

v5.9.10+incompatible

Compare Source

v5.9.0+incompatible

Compare Source

v5.8.1+incompatible

Compare Source

v5.8.0+incompatible

Compare Source

v5.7.0+incompatible

Compare Source

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.0

Compare Source

v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.

v2.9.0 passed fuzz tests and is production quality. However, the new TextUnmarshaler feature will continue being fuzz tested a bit longer due to recent changes. The recent changes are limited and don't affect other parts of the codec that passed ~2 billion execs fuzzing.

What's Changed

Docs

CI

🔎 Details

Special Thanks

Many thanks to @​benluddy for adding these new features! 🎉

  • Add opt-in support for encoding.TextMarshaler and encoding.TextUnmarshaler to encode and decode from CBOR text string.
  • Add opt-in support for json.Marshaler and json.Unmarshaler via user-provided transcoding function.

New Contributors

Full Changelog: fxamacker/cbor@v2.8.0...v2.9.0

v2.8.0

Compare Source

v2.8.0 adds omitzero struct tag option, fixes and deprecates 3 functions, and bumps requirements to go 1.20+.

Many thanks to @​liggitt for contributing the omitzero support!

The "omitzero" option omits zero values from encoding, matching stdlib encoding/json behavior.
When specified in the cbor tag, the option is always honored.
When specified in the json tag, the option is honored when building with Go 1.24+.

This release fixes 3 functions (when called directly by user apps) to use same error handling on bad input as cbor.Unmarshal():

  • RawTag.UnmarshalCBOR() (thanks @​thomas-fossati for reporting this!)
  • ByteString.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

This release also deprecates those 3 functions because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

What's Changed

Other Changes
🔍 Details

New Contributors

Full Changelog: fxamacker/cbor@v2.7.0...v2.8.0

v2.7.1

Compare Source

v2.7.1 fixes 3 functions (when called directly by user apps) to use same error handling on bad inputs as cbor.Unmarshal():

  • ByteString.UnmarshalCBOR()
  • RawTag.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

The above 3 fixed functions are deprecated because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

Before Upgrading to v2.7.1

v2.8.0 is being fuzz tested and will be released later today. It adds support for omitzero struct tag option.

v2.7.1 is the last version to support go 1.17-1.19. v2.8.0 and newer releases will require go 1.20+.

What's Changed

Special Thanks

Thanks @​thomas-fossati for reporting the bug in RawTag.UnmarshalCBOR() when it is called directly by user apps providing bad input data!

Full Changelog: fxamacker/cbor@v2.7.0...v2.7.1

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.21.2

Compare Source

v0.21.1

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.0

Compare Source

v0.20.5

Compare Source

v0.20.4

Compare Source

v0.20.3

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

v0.23.1

Compare Source

google/gnostic-models (github.com/google/gnostic-models)

v0.7.0

Compare Source

v0.6.9

Compare Source

imdario/mergo (github.com/imdario/mergo)

v0.3.16: Announcement: v1.0.0 will be released on June 18th

Compare Source

This release doesn't contain code changes.

After 10 years, with many corner cases covered, very few issues pending (at least, comparing them with the usage of the library as part of Docker, Kubernetes, Datadog's agent, etc.), and a very stable API, I think it's time to release a 1.0.0 version.

This version will be released under a vanity URL: dario.cat/mergo

PS: although I'll make sure that github.com/imdario/mergo will be available, I'm going to also change my GitHub handle, so expect for a few minutes to not be able to pull from github.com/imdario as I fork it from the new handle to the old one.

PS2: I'm creating a discussion for this release to make sure we can have a conversation around the topic, and anything else about Mergo that you care about.

jackc/pgtype (github.com/jackc/pgtype)

v1.14.4

Compare Source

v1.14.3

Compare Source

v1.14.2

Compare Source

v1.14.1

Compare Source

lib/pq (github.com/lib/pq)

v1.10.9

Compare Source

  • Fixes backwards incompat bug with 1.13.
  • Fixes pgpass issue

v1.10.8

Compare Source

mailru/easyjson (github.com/mailru/easyjson)

v0.9.0

Compare Source

up go version and bugfixes

v0.8.0

Compare Source

stable version before go version bump

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.23.4

Compare Source

2.23.4

Prior to this release Ginkgo would compute the incorrect number of available CPUs when running with -p in a linux container. Thanks to @​emirot for the fix!

Features
  • Add automaxprocs for using CPUQuota [2b9c428]
Fixes
  • clarify gotchas about -vet flag [1f59d07]
Maintenance

v2.23.3

Compare Source

2.23.3

Fixes
  • allow - as a standalone argument [cfcc1a5]
  • Bug Fix: Add GinkoTBWrapper.Chdir() and GinkoTBWrapper.Context() [feaf292]
  • ignore exit code for symbol test on linux [88e2282]

v2.23.2

Compare Source

2.23.2

🎉🎉🎉

At long last, some long-standing performance gaps between ginkgo and go test have been resolved!

Ginkgo operates by running go test -c to generate test binaries, and then running those binaries. It turns out that the compilation step of go test -c is slower than go test's compilation step because go test strips out debug symbols (ldflags=-w) whereas go test -c does not.

Ginkgo now passes the appropriate ldflags to go test -c when running specs to strip out symbols. This is only done when it is safe to do so and symbols are preferred when profiling is enabled and when ginkgo build is called explicitly.

This, coupled, with the instructions for disabling XProtect on MacOS yields a much better performance experience with Ginkgo.

v2.23.1

Compare Source

2.23.1

🚨 For users on MacOS 🚨

A long-standing Ginkgo performance issue on MacOS seems to be due to mac's antimalware XProtect. You can follow the instructions here to disable it in your terminal. Doing so sped up Ginkgo's own test suite from 1m8s to 47s.

Fixes

Ginkgo's CLI is now a bit clearer if you pass flags in incorrectly:

  • make it clearer that you need to pass a filename to the various profile flags, not an absolute directory [a0e52ff]
  • emit an error and exit if the ginkgo invocation includes flags after positional arguments [b799d8d]

This might cause existing CI builds to fail. If so then it's likely that your CI build was misconfigured and should be corrected. Open an issue if you need help.

v2.23.0

Compare Source

2.23.0

Ginkgo 2.23.0 adds a handful of methods to GinkgoT() to make it compatible with the testing.TB interface in Go 1.24. GinkgoT().Context(), in particular, is a useful shorthand for generating a new context that will clean itself up in a DeferCleanup(). This has subtle behavior differences from the golang implementation but should make sense in a Ginkgo... um... context.

Features
  • bump to go 1.24.0 - support new testing.TB methods and add a test to cover testing.TB regressions [37a511b]
Fixes
  • fix edge case where build -o is pointing at an explicit file, not a directory [7556a86]
  • Fix binary paths when precompiling multiple suites. [4df06c6]
Maintenance

v2.22.2

Compare Source

What's Changed

Full Changelog: onsi/ginkgo@v2.22.1...v2.22.2

v2.22.1

Compare Source

2.22.1

Fixes

Fix CSV encoding

Maintenance
  • ensure *.test files are gitignored so we don't accidentally commit compiled tests again [c88c634]
  • remove golang.org/x/net/context in favour of stdlib context [4df44bf]
prometheus/client_golang (github.com/prometheus/client_golang)

v1.23.0: - 2025-07-30

Compare Source

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #​1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #​1766
  • [FEATURE] Add exemplars for native histograms #​1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #​1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #​1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #​1729
All Changes * Update example test by @​SuperQ in https://github.com/prometheus/client_golang/pull/1770 * build(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 in /tutorials/whatsup by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1776 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1771 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1778 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1779 * build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1782 * build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1781 * bui

Configuration

📅 Schedule: Branch creation - "after 5am on sunday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

Copy link
Contributor Author

red-hat-konflux bot commented Jul 27, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.6 -> 1.24.0
k8s.io/apimachinery v0.32.2 -> v0.33.3
golang.org/x/oauth2 v0.29.0 -> v0.30.0

Copy link

openshift-ci bot commented Jul 27, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign sherinv for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-2.15/go.mod-packages branch 4 times, most recently from 4463fe1 to 722c840 Compare August 3, 2025 11:41
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-2.15/go.mod-packages branch from 722c840 to 4fdbb37 Compare August 4, 2025 02:16
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-2.15/go.mod-packages branch from 4fdbb37 to 77abaed Compare August 10, 2025 12:28
Copy link

Copy link

openshift-ci bot commented Aug 10, 2025

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/test-unit 77abaed link true /test test-unit
ci/prow/lint 77abaed link true /test lint
ci/prow/pr-image-mirror 77abaed link true /test pr-image-mirror
ci/prow/images 77abaed link true /test images

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants