Skip to content

chore(deps): bump pkg.package-operator.run/cardboard from 0.0.4 to 0.1.0 #433

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
dependabot wants to merge 1 commit into
base: main
Choose a base branch
from
Open

chore(deps): bump pkg.package-operator.run/cardboard from 0.0.4 to 0.1.0 #433

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -15,7 +15,7 @@ require (
k8s.io/client-go v0.35.0
k8s.io/kube-openapi v0.0.0-20260127142750-a19766b6e2d4
k8s.io/utils v0.0.0-20260108192941-914a6e750570
pkg.package-operator.run/cardboard v0.0.4
pkg.package-operator.run/cardboard v0.1.0
pkg.package-operator.run/cardboard/kubeutils v0.0.4
pkg.package-operator.run/cardboard/modules/kind v0.0.4
Comment on lines +18 to 20
Copy link

@coderabbitai coderabbitai bot Feb 5, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Check current versions of cardboard-related modules in go.mod and go.sum
echo "=== cardboard modules in go.mod ==="
rg -n 'pkg\.package-operator\.run/cardboard' go.mod

echo -e "\n=== cardboard modules in go.sum ==="
rg -n 'pkg\.package-operator\.run/cardboard' go.sum | head -20

echo -e "\n=== Full go.mod for context ==="
cat -n go.mod | sed -n '15,25p'

Repository: package-operator/boxcutter

Length of output: 1783

🌐 Web query:

cardboard v0.1.0 release notes pkg.package-operator.run kubeutils modules/kind compatibility

💡 Result:

pkg.package-operator.run/cardboard v0.1.0 was released on Feb 5, 2026. (github.com)

Key points relevant to your query:

  • Release notes (v0.1.0): primarily a broad dependency refresh / “Update all the deps”, plus some small maintenance chores. (github.com)
  • kubeutils (v0.1.0): introduces ContainerRuntime (docker, podman) and ContainerRuntimeOrDetect(...). (pkg.go.dev)
  • modules/kind compatibility in v0.1.0: the modules/kind module was updated and explicitly bumped to sigs.k8s.io/kind v0.27.0, along with multiple other dependency bumps in that module. (github.com)

Citations:

Upgrade cardboard submodules to v0.1.0 to align with root module.

The root pkg.package-operator.run/cardboard is bumped to v0.1.0, but cardboard/kubeutils, cardboard/modules/kind, and cardboard/modules/kubeclients remain at v0.0.4. The v0.1.0 release includes dependency refreshes and explicit updates to modules/kind (bumping to sigs.k8s.io/kind v0.27.0). Both kubeutils and modules/kind have v0.1.0 versions available. Update all related cardboard modules to v0.1.0 for consistency and to pick up the intended dependency updates.

🤖 Prompt for AI Agents 
In `@go.mod` around lines 18 - 20, The go.mod pins for cardboard submodules are
inconsistent: pkg.package-operator.run/cardboard is at v0.1.0 but
pkg.package-operator.run/cardboard/kubeutils and
pkg.package-operator.run/cardboard/modules/kind remain at v0.0.4; update those
module versions (pkg.package-operator.run/cardboard/kubeutils and
pkg.package-operator.run/cardboard/modules/kind) to v0.1.0 in go.mod so all
cardboard modules match the root and pull in the dependency refresh (including
the modules/kind bump to sigs.k8s.io/kind v0.27.0).

sigs.k8s.io/controller-runtime v0.23.1
Expand Down
4 changes: 2 additions & 2 deletions go.sum
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -219,8 +219,8 @@ k8s.io/kube-openapi v0.0.0-20260127142750-a19766b6e2d4 h1:HhDfevmPS+OalTjQRKbTHp
k8s.io/kube-openapi v0.0.0-20260127142750-a19766b6e2d4/go.mod h1:kdmbQkyfwUagLfXIad1y2TdrjPFWp2Q89B3qkRwf/pQ=
k8s.io/utils v0.0.0-20260108192941-914a6e750570 h1:JT4W8lsdrGENg9W+YwwdLJxklIuKWdRm+BC+xt33FOY=
k8s.io/utils v0.0.0-20260108192941-914a6e750570/go.mod h1:xDxuJ0whA3d0I4mf/C4ppKHxXynQ+fxnkmQH0vTHnuk=
pkg.package-operator.run/cardboard v0.0.4 h1:a5wus35NCnpVkJmqzq1WZukLM3SOPiRoYD30k33E5nY=
pkg.package-operator.run/cardboard v0.0.4/go.mod h1:txTwfizKr008RFlNrfa2USO5oQnPOSnkEdRJ4bb4nvQ=
pkg.package-operator.run/cardboard v0.1.0 h1:p06MDAa6c1e5zK7WCQSDrdXYqR/cbHj7Hm8M7yoq28o=
pkg.package-operator.run/cardboard v0.1.0/go.mod h1:HrwVuyOqGV4BraGBcc0jk1PoU8RBhBdTVWbKa51bvIU=
pkg.package-operator.run/cardboard/kubeutils v0.0.4 h1:rsDqBsnnqN3NaCI3yUdoePqVzJQUVxjLBY3s0wRSoW4=
pkg.package-operator.run/cardboard/kubeutils v0.0.4/go.mod h1:Un8SWMuALmnjjPBti2L74ouCSJM27olSGodK/G1kmUk=
pkg.package-operator.run/cardboard/modules/kind v0.0.4 h1:pjwFHk/j2Wsnfw21cfJuOKY8hN6w+48mX65kKbWIGtk=
Expand Down
Loading