Update Go Dependencies by red-hat-konflux[bot] · Pull Request #72 · securesign/model-validation-operator

red-hat-konflux · 2026-03-24T10:21:16Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
cel.dev/expr	indirect	minor	`v0.18.0` → `v0.25.3`
github.com/antlr4-go/antlr/v4	indirect	patch	`v4.13.0` → `v4.13.1`
github.com/asaskevich/govalidator	indirect	digest	`f61b66f` → `a9d515a`
github.com/cenkalti/backoff/v4	indirect	major	`v4.3.0` → `v7.0.1`
github.com/emicklei/go-restful/v3	indirect	minor	`v3.11.0` → `v3.14.0`
github.com/felixge/httpsnoop	indirect	minor	`v1.0.4` → `v1.1.0`
github.com/fsnotify/fsnotify	indirect	minor	`v1.7.0` → `v1.10.1`
github.com/fxamacker/cbor/v2	indirect	minor	`v2.7.0` → `v2.9.6`
github.com/go-logr/logr	require	patch	`v1.4.2` → `v1.4.4`
github.com/go-openapi/jsonpointer	indirect	major	`v0.21.0` → `v1.0.2`
github.com/go-openapi/jsonreference	indirect	major	`v0.20.2` → `v1.0.3`
github.com/go-openapi/swag	indirect	minor	`v0.23.0` → `v0.29.2`
github.com/google/cel-go	indirect	minor	`v0.22.0` → `v0.30.0`
github.com/google/gnostic-models	indirect	minor	`v0.6.8` → `v0.7.1`
github.com/google/go-cmp	indirect	minor	`v0.6.0` → `v0.7.0`
github.com/grpc-ecosystem/grpc-gateway/v2	indirect	minor	`v2.20.0` → `v2.31.0`
github.com/mailru/easyjson	indirect	minor	`v0.7.7` → `v0.9.2`
github.com/onsi/ginkgo/v2	require	minor	`v2.22.0` → `v2.33.1`
github.com/onsi/gomega	require	minor	`v1.36.1` → `v1.44.0`
github.com/prometheus/client_golang	require	minor	`v1.19.1` → `v1.25.0`
github.com/prometheus/client_model	require	patch	`v0.6.1` → `v0.6.3`
github.com/prometheus/common	require	minor	`v0.55.0` → `v0.72.0`	`v0.72.1`
github.com/prometheus/procfs	indirect	minor	`v0.15.1` → `v0.22.0`
github.com/spf13/cobra	indirect	minor	`v1.8.1` → `v1.10.2`
github.com/spf13/pflag	indirect	patch	`v1.0.5` → `v1.0.10`
github.com/stoewer/go-strcase	indirect	patch	`v1.3.0` → `v1.3.1`
github.com/stretchr/testify	require	minor	`v1.9.0` → `v1.12.1`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.53.0` → `v0.72.0`
go.opentelemetry.io/otel	indirect	minor	`v1.28.0` → `v1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	indirect	minor	`v1.28.0` → `v1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	indirect	minor	`v1.27.0` → `v1.47.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.28.0` → `v1.47.0`
go.opentelemetry.io/otel/sdk	indirect	minor	`v1.28.0` → `v1.47.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.28.0` → `v1.47.0`
go.opentelemetry.io/proto/otlp	indirect	minor	`v1.3.1` → `v1.11.1`
go.uber.org/zap	indirect	minor	`v1.27.0` → `v1.28.0`
golang.org/x/net	indirect	minor	`v0.38.0` → `v0.61.0`
golang.org/x/oauth2	indirect	minor	`v0.27.0` → `v0.37.0`
golang.org/x/sync	indirect	minor	`v0.12.0` → `v0.24.0`
golang.org/x/sys	indirect	minor	`v0.31.0` → `v0.49.0`
golang.org/x/term	indirect	minor	`v0.30.0` → `v0.47.0`
golang.org/x/text	indirect	minor	`v0.23.0` → `v0.43.0`
golang.org/x/time	require	minor	`v0.7.0` → `v0.16.0`
golang.org/x/tools	indirect	minor	`v0.26.0` → `v0.51.0`	`v0.52.0`
gomodules.xyz/jsonpatch/v2	indirect	major	`v2.4.0` → `v3.0.1`
google.golang.org/grpc	indirect	minor	`v1.65.0` → `v1.84.0`
google.golang.org/protobuf	indirect	minor	`v1.35.1` → `v1.36.12`
gopkg.in/evanphx/json-patch.v4	indirect	major	`v4.12.0` → `v5.9.11`
k8s.io/api	require	minor	`v0.32.1` → `v0.37.1`
k8s.io/apiextensions-apiserver	indirect	minor	`v0.32.1` → `v0.37.1`
k8s.io/apimachinery	require	minor	`v0.32.1` → `v0.37.1`
k8s.io/apiserver	indirect	minor	`v0.32.1` → `v0.37.1`
k8s.io/client-go	require	minor	`v0.32.1` → `v0.37.1`
k8s.io/component-base	indirect	minor	`v0.32.1` → `v0.37.1`
k8s.io/klog/v2	require	minor	`v2.130.1` → `v2.140.0`
k8s.io/kube-openapi	indirect	digest	`32ad38e` → `e2e80c3`
k8s.io/utils	indirect	digest	`3ea5e8c` → `cf1189d`
sigs.k8s.io/apiserver-network-proxy/konnectivity-client	indirect	minor	`v0.31.0` → `v0.37.0`
sigs.k8s.io/controller-runtime	require	minor	`v0.20.4` → `v0.25.2`
sigs.k8s.io/json	indirect	digest	`9aa6b5e` → `11ed52e`
sigs.k8s.io/structured-merge-diff/v4	indirect	major	`v4.4.2` → `v7.0.0`
sigs.k8s.io/yaml	indirect	minor	`v1.4.0` → `v1.6.0`

Release Notes

cel-expr/cel-spec (cel.dev/expr)

`v0.25.3`

Compare Source

What's Changed

Workaround inconsistent ? in proto textformat by @jnthntatum in #512
Update README with repository relocation notice by @dmitriplotnikov in #514
Add basic tests for out-of-range epoch int to timestamp conversions by @l46kok in #500
Update README with new repository link by @dmitriplotnikov in #519
Lint fixes for import by @jnthntatum in #521
CEL conformance test documentation: fix links in markdown by @AustinWise in #518
Avoid ? in textproto test cases. by @jnthntatum in #525
Add initial conformance tests for lists ext by @jnthntatum in #528

New Contributors

@dmitriplotnikov made their first contribution in #514
@AustinWise made their first contribution in #518

Full Changelog: cel-expr/cel-spec@v0.25.2...v0.25.3

`v0.25.2`

Compare Source

What's Changed

Add conformance tests for (string).reverse() by @jnthntatum in google#491
Updates to the conformance tests for integer values in %e and %f format directives by @TristonianJones in google#495
Add automated BCR publishing on release tags by @mmorel-35 in google#498
Add clarification on scoping rules. by @jnthntatum in google#506
Networking extension conformance tests by @TristonianJones in google#507
Add conformance test cases for null assignability around repeated fields and maps by @l46kok in google#510

New Contributors

@mmorel-35 made their first contribution in google#498

Full Changelog: cel-expr/cel-spec@v0.25.1...v0.25.2

`v0.25.1`

Compare Source

Minor additions to the v0.25.0 release

What's Changed

Remove test/v1 directory and its protos by @l46kok in google#487
Add parsing tests for string and bytes literals by @hudlow in google#489

Full Changelog: cel-expr/cel-spec@v0.25.0...v0.25.1

`v0.25.0`

Compare Source

What's Changed

Initial version of the policy specification by @jcking in google#477
Remove orphaned ToC entry for enums as ints from the specification by @timostamm in google#476
Tests for selector, function, and field names formerly defined as reserved by @hudlow in google#480
Add a test case for lastIndexOf in string_ext against an empty string by @l46kok in google#468
Remove TOC from language definition by @hudlow in google#482
Remove int(enum) -> int signature by @hudlow in google#483
Clarify formatting decimals, add %f formatting test cases around rounding by @l46kok in google#485
Remove remaining google.rpc.Status deps from cel-spec by @TristonianJones in google#486

New Contributors

@timostamm made their first contribution in google#476

Full Changelog: cel-expr/cel-spec@v0.24.0...v0.25.0

`v0.24.0`

Compare Source

What's Changed

Add/update missing function documentation by @TristonianJones in google#461
Add corner test cases related to optional values and maps to codify behavior by @jcking in google#462
Add tests for type identifiers for time types by @jnthntatum in google#465
Add typecheck tests for edge cases with free type parameters by @jnthntatum in google#463
Add tests for repeated enum field accesses by @jnthntatum in google#464
Add upb build targets for CEL C by @jcking in google#467
Updated testsuite result_kind to use nested ErrorSet by @ChinmayMadeshi in google#469
Generated pb.go for eval.proto. by @ChinmayMadeshi in google#470

New Contributors

@ChinmayMadeshi made their first contribution in google#469

Full Changelog: cel-expr/cel-spec@v0.23.1...v0.24.0

`v0.23.1`

Compare Source

What's Changed

Restore duration string conversion supported suffixes by @TristonianJones in google#459
Change optional_string field to be optional string type in test_all_types by @l46kok in google#458
Revert "Remove Unicode space handling from .trim()" by @jcking in google#460

Full Changelog: cel-expr/cel-spec@v0.23.0...v0.23.1

`v0.23.0`

Compare Source

What's Changed

update grammar and tests to differentiate reserved tokens by @hudlow in google#437
Bzlmod update regen by @TristonianJones in google#451
Add py_proto_library targets by @ferstlf in google#452
Remove Unicode space handling from .trim() by @jcking in google#453
Extracted context input as a separate oneof out of test input by @aakash070 in google#456
Add basic conformance tests for some comprehensions v2 macros by @jcking in google#454
Minor update to the field name and numbering for test suites by @TristonianJones in google#457

New Contributors

@ferstlf made their first contribution in google#452

Full Changelog: cel-expr/cel-spec@v0.22.1...v0.23.0

`v0.22.1`

Compare Source

What's Changed

Add a doc field on Function and update content advice by @TristonianJones in google#446
Upgrade the googleapis repo deps, remove switched_rules by @TristonianJones in google#447
Add a separate field for expressions under input bindings map by @aakash070 in google#449
Add java_lite messages to test_all_types messages by @l46kok in google#450

Full Changelog: cel-expr/cel-spec@v0.22.0...v0.22.1

`v0.22.0`

Compare Source

What's Changed

Add test_suite and test_config under conformance [#441]

New Contributors

@aakash070 made their first contribution in google#441

Full Changelog: cel-expr/cel-spec@v0.21.2...v0.22.0

`v0.21.2`

Compare Source

What's Changed

Fix misspellings again by @jcking in google#443

Full Changelog: cel-expr/cel-spec@v0.21.1...v0.21.2

`v0.21.1`

Compare Source

What's Changed

Fix typeo in string_ext.textproto by @jcking in google#442

Full Changelog: cel-expr/cel-spec@v0.21.0...v0.21.1

`v0.21.0`

Compare Source

What's Changed

Fix and document string.format by @jcking in google#436

Full Changelog: cel-expr/cel-spec@v0.20.0...v0.21.0

`v0.20.0`

What's Changed

Indicate that CEL is an official Google product by @TristonianJones in google#439
Add conformance tests for quoted field selectors. by @jnthntatum in google#431
Add java_lite_proto_library targets to canonical CEL protos. Deprecate explain.proto. by @l46kok in google#440

Full Changelog: cel-expr/cel-spec@v0.19.2...v0.20.0

`v0.19.2`

Compare Source

What's Changed

Correct 'worst-cast' typos by @hudlow in google#418
Add additional type check tests by @jnthntatum in google#419
clarify error behavior for e.exists(x, p) by @hudlow in google#427
typo, formatting, and link fixes by @hudlow in google#422
tests to verify parsers ignore whitespace and comments by @hudlow in google#430
clarify Unicode handling by @hudlow in google#423
Fix strings.format tests by @jcking in google#435

Full Changelog: cel-expr/cel-spec@v0.19.1...v0.19.2

`v0.19.1`

Compare Source

What's Changed

Regenerate go conformance SimpleTest* protos by @jnthntatum in google#417

Full Changelog: cel-expr/cel-spec@v0.19.0...v0.19.1

`v0.19.0`

Compare Source

What's Changed

Temporarily restore simple.proto to its former location by @TristonianJones in google#406
Update Java conformance test proto package by @TristonianJones in google#405
Correct double literal example by @hudlow in google#414
Add typed result matches to SimpleTest definition by @jnthntatum in google#408
Add basic tests for type deductions. by @jnthntatum in google#416

Full Changelog: cel-expr/cel-spec@v0.18.0...v0.19.0

antlr4-go/antlr (github.com/antlr4-go/antlr/v4)

`v4.13.1`: Release 4.13.1

Compare Source

The 4.13.1 release has:

Some minor performance improvements
An optional build tag -tags antlr.nomutex which allows a build without
using mutexes, when the user knows they will not use it with multiple
go routines. (Note, somewhat experimental)

Note that I did not remove the sort.Slices calls. They will not be experimental for long
and are implemented efficently. Please make a fork if you must use it without this
dependency. Maybe review whether you need to do so for the sake of one call.

cenkalti/backoff (github.com/cenkalti/backoff/v4)

emicklei/go-restful (github.com/emicklei/go-restful/v3)

`v3.14.0`

Compare Source

`v3.13.0`

Compare Source

optimize performance of path matching in CurlyRouter ( thanks @wenhuang, Wen Huang)

`v3.12.2`

Compare Source

allow empty payloads in post,put,patch, issue #580 ( thanks @liggitt, Jordan Liggitt)

`v3.12.1`

Compare Source

fix misroute when dealing multiple webservice with regex (#549) (thanks Haitao Chen)

`v3.12.0`

Compare Source

add Flush method #529 (#538)
fix: Improper handling of empty POST requests (#543)

`v3.11.3`

Compare Source

better not have 2 tags on one commit

`v3.11.2`

Compare Source

fix by restoring custom JSON handler functions (Mike Beaumont #540)

`v3.11.1`

Compare Source

fix by restoring custom JSON handler functions (Mike Beaumont #540)

felixge/httpsnoop (github.com/felixge/httpsnoop)

`v1.1.0`

Compare Source

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

`v1.10.1`

Compare Source

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)

`v1.10.0`

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

`v1.9.0`

Compare Source

Changes and fixes

all: make BufferedWatcher buffered again (#657)
inotify: fix race when adding/removing watches while a watched path is being deleted (#678, #686)
inotify: don't send empty event if a watched path is unmounted (#655)
inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#679)
kqueue: fix watching relative symlinks (#681)
kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#682)
illumos: don't send error if changed file is deleted while processing the event (#678)

`v1.8.0`

Compare Source

Additions

all: add FSNOTIFY_DEBUG to print debug logs to stderr (#619)

Changes and fixes

windows: fix behaviour of WatchList() to be consistent with other platforms (#610)
kqueue: ignore events with Ident=0 (#590)
kqueue: set O_CLOEXEC to prevent passing file descriptors to children (#617)
kqueue: emit events as "/path/dir/file" instead of "path/link/file" when watching a symlink (#625)
inotify: don't send event for IN_DELETE_SELF when also watching the parent (#620)
inotify: fix panic when calling Remove() in a goroutine (#650)
fen: allow watching subdirectories of watched directories (#621)

fxamacker/cbor (github.com/fxamacker/cbor/v2)

`v2.9.6`

Compare Source

v2.9.6 fixes 12 bugs, including an important fix for apps that decode CBOR maps into Go maps, and has one behavior change. API is unchanged but more errors are detected.

Most of these bugs were identified while improving tests and reviewing code for an upcoming release.

Tests and fuzz tests were extended.

Upgrading to v2.9.6 from all prior versions is recommended.

🐞 Important Fix

Not affected:

Decoding data this codec encoded from the same Go map type, because this codec does not encode to CBOR null from Go values of bool, integer, float, or string kind.
Apps that don't decode a CBOR null or undefined map key or value into a Go map whose key or value type is of bool, integer, float, or string kind.
Decoding CBOR maps into structs (struct fields of map type follow the bullet above).
Decoding CBOR maps into map[any]any, and into any (with unchanged DefaultMapType).

For use cases outside the "not affected" list, decoding a CBOR null or undefined map key or value (including 55799(null)) into a Go map whose key or value type is of bool, integer, float, or string kind kept the previous map entry's key or value (instead of the zero value). See PR #855 for details.

⚠️ Behavior change

Decoding CBOR null or undefined into an interface that holds a value now sets it to nil, matching encoding/json (v1 and v2). Previously, the interface kept its value (PR #827), which was not the intended behavior.

What's Changed

Some of these bugs could only be triggered by incorrect usage in user apps, such as invalid struct tags or an unsupported DefaultByteStringType setting, etc. None of these bugs were reported by a project affected by them.

Decoding

Skip CBOR data item when destination struct has incorrect tags by @fxamacker in #821
Fix decoding CBOR null/undefined to interface value by @fxamacker in #827
Fix decoding to unaddressable value in interface by @fxamacker in #828
Improve the DefaultByteStringType check by @fxamacker in #829
Fix decoding to self-referencing types by @fxamacker in #831
Fix decoding 55799(null) to pointer or interface by @fxamacker in #851
Fix stale Go map entry from CBOR null key/value by @fxamacker in #855

Encoding

Fix encoding self-referencing types by @fxamacker in #833
Fix panic encoding marshaler of unsupported underlying types by @fxamacker in #834
Fix omitzero panic encoding struct field of unsupported underlying types implementing marshaler by @fxamacker in #835
Fix encoding TimeUnixMicro outside 1677 to 2262 by @fxamacker in #837
- Encoded output also changes for some times within one second of either end of that range.
Reject encoding time.Time when Go formats wrong year by @fxamacker in #838

CI / GitHub Actions and Docs

Improve docs related to encoding time.Time by @fxamacker in #854

Full Changelog: fxamacker/cbor@v2.9.4...v2.9.6

`v2.9.5`

Compare Source

This version was tagged from the wrong branch by mistake and is retracted.

Use v2.9.6 (https://github.com/fxamacker/cbor/releases/tag/v2.9.6) instead.

`v2.9.4`

Compare Source

This release fixes potential panics when decoding a CBOR map whose key decodes to an uncomparable Go value under certain conditions.

Not affected: user apps that don't register tag types and don't use map key types that are either named empty interfaces (e.g. type MyAny any) or contain interfaces.

These potential panics can be encountered when one of these two conditions is met:

user application registers a tag type (via TagSet interface) that is an array or struct with uncomparable or interface{} element or field type, or
user application specifies a destination Go map whose key type is a named empty interface type or a type containing an interface.

This was identified while improving tests and reviewing code for an upcoming release.

Tests and fuzz tests were extended to cover this bug.

Upgrading to v2.9.4 is recommended.

What's Changed

Fix panic decoding uncomparable map keys under certain conditions by @fxamacker in #817

Full Changelog: fxamacker/cbor@v2.9.3...v2.9.4

`v2.9.3`

Compare Source

This release fixes a potential panic when decoding into a time.Time from a CBOR byte string, map, or array under certain conditions.

Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with timeTag = DecTagRequired.

Upgrading to v2.9.3 is recommended.

The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.

What's Changed

Skip data item when decoding to time.Time fails under certain conditions by @fxamacker in #803

Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3

`v2.9.2`

Compare Source

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed

Reject encoding indefinite-length map with odd item count by @fxamacker in #764
Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @fxamacker in #765
Make TagSet.Remove a no-op when contentType is nil by @fxamacker in #766
Refactor indefinite-length encoding and improve chunk validation during encoding by @fxamacker in #767
Add more tests, fix a nit in unreachable panic message, update docs & ci by @fxamacker in #768

CI / GitHub Actions and Docs

🔎 Details...

Bump actions/setup-go from 6.3.0 to 6.4.0 by @dependabot[bot] in #760
Bump github/codeql-action from 4.34.1 to 4.35.1 by @dependabot[bot] in #761
Bump github/codeql-action from 4.35.1 to 4.35.2 by @dependabot[bot] in #763
Update README for v2.9.2 release by @fxamacker in #769

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

`v2.9.1`

Compare Source

This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.

🐞 Bug fixes related to the `keyasint` feature

These changes only affect Go struct fields tagged with keyasint:

[Decoding] Reject integer keys that exceed math.MaxInt64 when decoding CBOR map to a struct with keyasint field (PR #757)
[Decoding] Prevent string representation of an integer key from matching the struct field tagged by keyasint (PR #757)
[Encoding & Decoding] Deduplicate struct fields with the same normalized keyasint tag values (PR #757)

🐞 Other bug fixes and defensive checks

Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).

NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).

[Decoding] Reject decoding epoch time encoded as floats that overflow int64 (PR #753)
[Encoding] Return a cloned slice for an empty RawMessage from RawMessage.MarshalCBOR (PR #753)
[Encoding] Reject encoding nil inside indefinite-length strings (PR #750)
[Diagnostic] Accept valid U+FFFD replacement character (PR #753)

What's Changed

🆕 Add TimeMode encoding option TimeRFC3339NanoUTC by @fxamacker in #688
Use actual negative zero in tests by @makew0rld in #708
Reject encoding nil inside CBOR indefinite-length string by @fxamacker in #750
Refactor and add tests by @fxamacker in #752
Small bugfixes, defensive checks, and improvements by @fxamacker in #753
Refactor parseMapToStruct(), getDecodingStructType(), getEncodingStructType(), and field struct by @fxamacker in #754
Fix several issues related to keyasint tag option by @fxamacker in #757

CI / GitHub Actions and Docs

🔎 Details...

Bump github/codeql-action from 3.29.2 to 3.29.4 by @dependabot[bot] in #690
Bump github/codeql-action from 3.29.4 to 3.29.5 by @dependabot[bot] in #691
Bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #696
Bump github/codeql-action from 3.29.7 to 3.29.9 by @dependabot[bot] in #697
Bump github/codeql-action from 3.29.9 to 3.29.11 by @dependabot[bot] in #700
Bump github/codeql-action from 3.29.11 to 3.30.0 by @dependabot[bot] in #702
Bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #703
Bump github/codeql-action from 3.30.0 to 3.30.3 by @dependabot[bot] in #706
Bump github/codeql-action from 3.30.3 to 3.30.4 by @dependabot[bot] in #710
Bump github/codeql-action from 3.30.4 to 3.30.6 by @dependabot[bot] in #712
Bump github/codeql-action from 3.30.6 to 4.30.7 by @dependabot[bot] in #713
Bump github/codeql-action from 4.30.7 to 4.30.8 by @dependabot[bot] in #716
Bump github/codeql-action from 4.30.8 to 4.30.9 by @dependabot[bot] in #718
Bump github/codeql-action from 4.30.9 to 4.31.2 by @dependabot[bot] in #720
Bump github/codeql-action from 4.31.2 to 4.31.3 by @dependabot[bot] in #721
Bump github/codeql-action from 4.31.3 to 4.31.4 by @dependabot[bot] in #724
Bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #725
Bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in #726
Bump github/codeql-action from 4.31.4 to 4.31.5 by @dependabot[bot] in #727
Bump github/codeql-action from 4.31.5 to 4.31.6 by @dependabot[bot] in #728
Bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #729
Bump github/codeql-action from 4.31.6 to 4.31.8 by @dependabot[bot] in #732
Bump github/codeql-action from 4.31.8 to 4.31.9 by @dependabot[bot] in #733
Bump github/codeql-action from 4.31.9 to 4.31.10 by @dependabot[bot] in #738
Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #739
Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #740
Bump github/codeql-action from 4.31.10 to 4.32.0 by @dependabot[bot] in #742
Bump github/codeql-action from 4.32.0 to 4.32.3 by @dependabot[bot] in #745
Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #746
Bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in #747
Bump github/codeql-action from 4.32.4 to 4.32.6 by @dependabot[bot] in #748
Bump github/codeql-action from 4.32.6 to 4.34.0 by @dependabot[bot] in #749
Bump github/codeql-action from 4.34.0 to 4.34.1 by @dependabot[bot] in #751
Update README status section by @fxamacker in #758

New Contributors

@makew0rld made their first contributihttps://github.com/fxamacker/cbor/pull/708ll/708

Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1

`v2.9.0`

Compare Source

v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.

v2.9.0 passed f

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-03-30T14:45:29Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

17 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.23.0` -> `1.25.0`
`github.com/onsi/ginkgo/v2`	`v2.22.0` -> `v2.27.2`
`github.com/onsi/gomega`	`v1.36.1` -> `v1.38.2`
`github.com/antlr4-go/antlr/v4`	`v4.13.0` -> `v4.13.1`
`github.com/emicklei/go-restful/v3`	`v3.11.0` -> `v3.12.2`
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.0`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.20.0` -> `v2.28.0`
`github.com/modern-go/reflect2`	`v1.0.2` -> `v1.0.3-0.20250322232337-35a7c28c31ee`
`github.com/spf13/cobra`	`v1.8.1` -> `v1.10.0`
`go.opentelemetry.io/otel`	`v1.28.0` -> `v1.42.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.28.0` -> `v1.34.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`	`v1.27.0` -> `v1.34.0`
`go.opentelemetry.io/otel/metric`	`v1.28.0` -> `v1.42.0`
`go.opentelemetry.io/otel/sdk`	`v1.28.0` -> `v1.42.0`
`go.opentelemetry.io/otel/trace`	`v1.28.0` -> `v1.42.0`
`google.golang.org/grpc`	`v1.65.0` -> `v1.79.2`
`google.golang.org/protobuf`	`v1.35.1` -> `v1.36.11`
`gopkg.in/evanphx/json-patch.v4`	`v4.12.0` -> `v4.13.0`

red-hat-konflux · 2026-04-04T14:36:03Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

5 additional dependencies were updated
The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package	Change
`go`	`1.23.0` -> `1.27.0`
`github.com/go-task/slim-sprig/v3`	`v3.0.0` -> `v3.0.0`
`github.com/google/pprof`	`v0.0.0-20241029153458-d1b30febd7db` -> `v0.0.0-20260402051712-545e8a4df936`
`github.com/modern-go/reflect2`	`v1.0.2` -> `v1.0.3-0.20250322232337-35a7c28c31ee`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20240826202546-f6391c0de4c7` -> `v0.0.0-20260928230214-8a89bd6388cc`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20240826202546-f6391c0de4c7` -> `v0.0.0-20260928230214-8a89bd6388cc`

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Mar 24, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 12 times, most recently from c4a6a07 to 09df490 Compare March 30, 2026 14:45

red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 12 times, most recently from e5537f5 to ac8b4fa Compare April 4, 2026 14:35

red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 3 times, most recently from e98e645 to 87ce976 Compare April 5, 2026 02:30

red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 29 times, most recently from 6baa790 to 0356203 Compare April 14, 2026 11:37

Update Go Dependencies

52d3c5a

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Navigation Menu

Repository navigation

Update Go Dependencies - #72

Update Go Dependencies#72
red-hat-konflux[bot] wants to merge 1 commit into
tech-previewfrom
konflux/mintmaker/tech-preview/go-deps

red-hat-konflux Bot commented Mar 24, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Mar 30, 2026

Uh oh!

red-hat-konflux Bot commented Apr 4, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented Mar 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

v4.13.1: Release 4.13.1

Changes and fixes

Changes and fixes

Changes and fixes

Additions

Changes and fixes

🐞 Important Fix

⚠️ Behavior change

What's Changed

Decoding

Encoding

CI / GitHub Actions and Docs

What's Changed

What's Changed

What's Changed

CI / GitHub Actions and Docs

🐞 Bug fixes related to the keyasint feature

🐞 Other bug fixes and defensive checks

What's Changed

CI / GitHub Actions and Docs

New Contributors

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Mar 30, 2026

ℹ Artifact update notice

File name: go.mod

Uh oh!

red-hat-konflux Bot commented Apr 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Mar 24, 2026 •

edited

Loading

`v4.13.1`: Release 4.13.1

🐞 Bug fixes related to the `keyasint` feature

red-hat-konflux Bot commented Apr 4, 2026 •

edited

Loading