Update google.golang.org/genproto/googleapis/api digest to 7ab31c2#218
Open
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit into
Conversation
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
Contributor
Author
|
📝 WalkthroughSummary by CodeRabbit
Walkthrough
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes Supply chain flag — CWE-1357 / CWE-829.
🚥 Pre-merge checks | ✅ 11✅ Passed checks (11 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
✨ Simplify code
Warning There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure. 🔧 golangci-lint (2.12.2)level=error msg="Running error: context loading failed: failed to load packages: failed to load packages: failed to load with go/packages: err: exit status 1: stderr: go: updates to go.mod needed, disabled by -mod=readonly; to update it:\n\tgo mod tidy\n" Comment |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 2
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@go.mod`:
- Line 149: The google.golang.org/genproto/googleapis/api module revision has
been updated in go.mod to the new version shown at line 149, but go.sum still
contains the checksum for the old revision (v0.0.0-20260401024825-9d38bb4040a9),
creating a module resolution mismatch. Run go mod tidy to regenerate go.sum and
ensure it includes the correct checksum for the new revision, which will restore
module integrity and reproducibility.
- Line 149: The version for the google.golang.org/genproto/googleapis/api
dependency is malformed and violates Go module version syntax. The current
pseudo-version 7ab31c22f7ad is missing the required v0.0.0- prefix and
timestamp. Update this dependency entry to follow the correct pseudo-version
format of v0.0.0-<YYYYMMDDHHMMSS>-<COMMITHASH>, such as
v0.0.0-20260401024825-7ab31c22f7ad, to resolve go mod tidy and build failures.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Central YAML (base), Organization UI (inherited)
Review profile: CHILL
Plan: Enterprise
Run ID: e7ed6f4c-c143-4cf9-acb5-7fd101858e7c
📒 Files selected for processing (1)
go.mod
🔗 Linked repositories identified
CodeRabbit considers these linked repositories for cross-repo context during reviews:
openshift-hyperfleet/architecture(manual)openshift-hyperfleet/hyperfleet-api(manual)openshift-hyperfleet/hyperfleet-sentinel(manual)openshift-hyperfleet/hyperfleet-adapter(manual)openshift-hyperfleet/hyperfleet-broker(manual)
| golang.org/x/sys v0.42.0 // indirect | ||
| golang.org/x/text v0.35.0 // indirect | ||
| google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-9d38bb4040a9 // indirect | ||
| google.golang.org/genproto/googleapis/api 7ab31c22f7ad // indirect |
There was a problem hiding this comment.
go.sum/go.mod sync failure — reproducibility broken (CWE-829).
go.sum still contains checksums for the old revision (v0.0.0-20260401024825-9d38bb4040a9), not the new one. This mismatch breaks module resolution integrity. Update go.sum to include the checksum entry for the new revision, or run go mod tidy to regenerate.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@go.mod` at line 149, The google.golang.org/genproto/googleapis/api module
revision has been updated in go.mod to the new version shown at line 149, but
go.sum still contains the checksum for the old revision
(v0.0.0-20260401024825-9d38bb4040a9), creating a module resolution mismatch. Run
go mod tidy to regenerate go.sum and ensure it includes the correct checksum for
the new revision, which will restore module integrity and reproducibility.
Malformed pseudo-version: missing v0.0.0- prefix and timestamp.
Line 149 contains google.golang.org/genproto/googleapis/api 7ab31c22f7ad // indirect. This violates Go module version syntax. The correct format is v0.0.0-<YYYYMMDDHHMMSS>-<COMMITHASH> (e.g., v0.0.0-20260401024825-7ab31c22f7ad). The current syntax will cause go mod tidy and build failures.
🐛 Proposed fix
- google.golang.org/genproto/googleapis/api 7ab31c22f7ad // indirect
+ google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-7ab31c22f7ad // indirect📝 Committable suggestion
‼️ IMPORTANT
Carefully review the code before committing. Ensure that it accurately replaces the highlighted code, contains no missing lines, and has no issues with indentation. Thoroughly test & benchmark the code to ensure it meets the requirements.
Suggested change
| google.golang.org/genproto/googleapis/api 7ab31c22f7ad // indirect | |
| google.golang.org/genproto/googleapis/api v0.0.0-20260401024825-7ab31c22f7ad // indirect |
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@go.mod` at line 149, The version for the
google.golang.org/genproto/googleapis/api dependency is malformed and violates
Go module version syntax. The current pseudo-version 7ab31c22f7ad is missing the
required v0.0.0- prefix and timestamp. Update this dependency entry to follow
the correct pseudo-version format of v0.0.0-<YYYYMMDDHHMMSS>-<COMMITHASH>, such
as v0.0.0-20260401024825-7ab31c22f7ad, to resolve go mod tidy and build
failures.
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR. I'm waiting for a openshift-hyperfleet member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
9d38bb4→7ab31c2Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Configuration
📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.