Update go module minor/patch updates by red-hat-konflux-kflux-prd-rh02[bot] · Pull Request #178 · openshift-hyperfleet/hyperfleet-sentinel

red-hat-konflux-kflux-prd-rh02 · 2026-06-15T20:06:03Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
cel.dev/expr	`v0.25.1` → `v0.25.2`
cloud.google.com/go/auth	`v0.18.1` → `v0.20.0`
cloud.google.com/go/iam	`v1.5.3` → `v1.11.0`
cloud.google.com/go/pubsub/v2	`v2.4.0` → `v2.6.0`
github.com/ThreeDotsLabs/watermill	`v1.5.1` → `v1.5.2`
github.com/ThreeDotsLabs/watermill-amqp/v3	`v3.0.2` → `v3.1.0`
github.com/ThreeDotsLabs/watermill-googlecloud/v2	`v2.0.0` → `v2.0.1`
github.com/docker/go-connections	`v0.6.0` → `v0.7.0`
github.com/ebitengine/purego	`v0.10.0` → `v0.10.1`
github.com/felixge/httpsnoop	`v1.0.4` → `v1.1.0`
github.com/fsnotify/fsnotify	`v1.9.0` → `v1.10.1`
github.com/google/cel-go	`v0.27.0` → `v0.28.1`
github.com/googleapis/enterprise-certificate-proxy	`v0.3.12` → `v0.3.16`
github.com/googleapis/gax-go/v2	`v2.17.0` → `v2.22.0`
github.com/grpc-ecosystem/grpc-gateway/v2	`v2.28.0` → `v2.29.0`
github.com/klauspost/compress	`v1.18.5` → `v1.18.6`
github.com/moby/moby/api	`v1.54.1` → `v1.54.2`
github.com/moby/moby/client	`v0.4.0` → `v0.4.1`
github.com/moby/sys/sequential	`v0.6.0` → `v0.7.0`
github.com/oapi-codegen/runtime	`v1.1.2` → `v1.4.1`
github.com/openshift-hyperfleet/hyperfleet-api-spec	`v1.0.12` → `v1.0.21`
github.com/pelletier/go-toml/v2	`v2.2.4` → `v2.3.1`
github.com/prometheus/common	`v0.66.1` → `v0.68.1`
github.com/prometheus/procfs	`v0.17.0` → `v0.20.1`
github.com/rabbitmq/amqp091-go	`v1.10.0` → `v1.11.0`
github.com/shirou/gopsutil/v4	`v4.26.3` → `v4.26.5`
github.com/spf13/cobra	`v1.8.0` → `v1.10.2`
github.com/tklauser/go-sysconf	`v0.3.16` → `v0.4.0`
github.com/tklauser/numcpus	`v0.11.0` → `v0.12.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	`v0.65.0` → `v0.69.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`v0.65.0` → `v0.69.0`
go.opentelemetry.io/contrib/propagators/autoprop	`v0.68.0` → `v0.69.0`
go.opentelemetry.io/contrib/propagators/aws	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/contrib/propagators/b3	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/contrib/propagators/jaeger	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/contrib/propagators/ot	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/stdout/stdouttrace	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/metric	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/sdk	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/trace	`v1.43.0` → `v1.44.0`
go.uber.org/zap	`v1.27.1` → `v1.28.0`
go.yaml.in/yaml/v2	`v2.4.2` → `v2.4.4`
golang.org/x/crypto	`v0.49.0` → `v0.53.0`
golang.org/x/net	`v0.52.0` → `v0.56.0`
golang.org/x/oauth2	`v0.35.0` → `v0.36.0`
golang.org/x/sync	`v0.20.0` → `v0.21.0`
golang.org/x/sys	`v0.42.0` → `v0.46.0`
golang.org/x/text	`v0.35.0` → `v0.38.0`
golang.org/x/time	`v0.14.0` → `v0.15.0`
google.golang.org/api	`v0.266.0` → `v0.284.0`
google.golang.org/grpc	`v1.80.0` → `v1.81.1`

Release Notes

google/cel-spec (cel.dev/expr)

`v0.25.2`

Compare Source

What's Changed

Add conformance tests for (string).reverse() by @jnthntatum in #491
Updates to the conformance tests for integer values in %e and %f format directives by @TristonianJones in #495
Add automated BCR publishing on release tags by @mmorel-35 in #498
Add clarification on scoping rules. by @jnthntatum in #506
Networking extension conformance tests by @TristonianJones in #507
Add conformance test cases for null assignability around repeated fields and maps by @l46kok in #510

New Contributors

@mmorel-35 made their first contribution in #498

Full Changelog: google/cel-spec@v0.25.1...v0.25.2

googleapis/google-cloud-go (cloud.google.com/go/auth)

`v0.20.0`

Compare Source

bigquery: Support SchemaUpdateOptions for load jobs.
bigtable:
- Add SampleRowKeys.
- cbt: Support union, intersection GCPolicy.
- Retry admin RPCS.
- Add trace spans to retries.
datastore: Add OpenCensus tracing.
firestore:
- Fix queries involving Null and NaN.
- Allow Timestamp protobuffers for time values.
logging: Add a WriteTimeout option.
spanner: Support Batch API.
storage: Add OpenCensus tracing.

`v0.19.0`

bigquery:
- Support customer-managed encryption keys.
bigtable:
- Improved emulator support.
- Support GetCluster.
datastore:
- Add general mutations.
- Support pointer struct fields.
- Support transaction options.
firestore:
- Add Transaction.GetAll.
- Support document cursors.
logging:
- Support concurrent RPCs to the service.
- Support per-entry resources.
profiler:
- Add config options to disable heap and thread profiling.
- Read the project ID from $GOOGLE_CLOUD_PROJECT when it's set.
pubsub:
- BEHAVIOR CHANGE: Release flow control after ack/nack (instead of after the
  callback returns).
- Add SubscriptionInProject.
- Add OpenCensus instrumentation for streaming pull.
storage:
- Support CORS.

ThreeDotsLabs/watermill (github.com/ThreeDotsLabs/watermill)

`v1.5.2`

Compare Source

What's Changed

Propagate AddConsumerHandler to examples and docs by @m110 in #612
Add quickstart docs by @m110 in #615
Update Quickstart link in README by @m110 in #618
Polish watermill.io after update by @roblaszczak in #619
Update Pub/Sub links to latest versions by @m110 in #620
added sqlite docs PoC by @roblaszczak in #563
edit SQLite documentation and transaction example by @dkotik in #621
Refresh getting started by @m110 in #628
docs: add suport of mysql delayed messages by @AdrianZajkowski in #630
refactor: use maps.Copy to simplify the code by @dulanting in #627
docs: update discord link by @m110 in #634
chore: fix some comments by @geogrego in #635
refactor: remove redundant variable declarations in for loops by @efcking in #637
chore: execute goimports to format the code by @xibeiyoumian in #644
Rename variable from pub to sub in main.go by @sdil in #643
I can't see anything by @boreq in #674
Bump dependencies and fix races by @m110 in #679
Bump vite from 5.4.12 to 5.4.21 in /docs by @dependabot[bot] in #629
Bump picomatch from 2.3.1 to 2.3.2 in /docs by @dependabot[bot] in #680
docs: assorted documentation and comment improvements by @jjpinto in #647
Fix HTTP response body leak and add retry backoff in run.go by @jjpinto in #665
Validate all examples + fix by @m110 in #681
Added support for custom JSON configuration in the forwarder component by @falboe in #667
feat(retry): add OnRetriesExhausted hook for cleanup actions by @Br1an67 in #670
Restore PR CI by @m110 in #682

New Contributors

@AdrianZajkowski made their first contribution in #630
@dulanting made their first contribution in #627
@geogrego made their first contribution in #635
@efcking made their first contribution in #637
@xibeiyoumian made their first contribution in #644
@sdil made their first contribution in #643
@jjpinto made their first contribution in #647
@falboe made their first contribution in #667
@Br1an67 made their first contribution in #670

Full Changelog: ThreeDotsLabs/watermill@v1.5.1...v1.5.2

ThreeDotsLabs/watermill-amqp (github.com/ThreeDotsLabs/watermill-amqp/v3)

`v3.1.0`

Compare Source

What's Changed

Bumps dependencies by @m110 in #35
Added support for pre process delivery in the marshaler by @micbis in #33
fix: Adjust notifyCloseConnection to be a buffered channel to avoid blocking during exception handling by @nengwu765 in #30

New Contributors

@micbis made their first contribution in #33
@nengwu765 made their first contribution in #30

Full Changelog: ThreeDotsLabs/watermill-amqp@v3.0.2...v3.1.0

ThreeDotsLabs/watermill-googlecloud (github.com/ThreeDotsLabs/watermill-googlecloud/v2)

`v2.0.1`

Compare Source

What's Changed

Bump dependencies by @m110 in #46

Full Changelog: ThreeDotsLabs/watermill-googlecloud@v2.0.0...v2.0.1

docker/go-connections (github.com/docker/go-connections)

`v0.7.0`

Compare Source

ebitengine/purego (github.com/ebitengine/purego)

`v0.10.1`

Compare Source

Fix a concurrency bug where simultaneous FFI calls could swap return values across goroutines (#451)

felixge/httpsnoop (github.com/felixge/httpsnoop)

`v1.1.0`

Compare Source

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

`v1.10.1`

Compare Source

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)

`v1.10.0`

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

google/cel-go (github.com/google/cel-go)

`v0.28.1`

Compare Source

What's Changed

fix: deleted IntToDuration overload by @alexsnaps in #1300
Support shorthand types in env yaml and REPL by @jnthntatum in #1301
Preserve operation interrupted in ContextEval error by @dims in #1303
Use shorthand type specifiers in env yaml files by @jnthntatum in #1305
Cost estimation and tracking for strings extension by @TristonianJones in #1307
Update repl type string for doubles by @TristonianJones in #1308

New Contributors

@alexsnaps made their first contribution in #1300
@dims made their first contribution in #1303

Full Changelog: google/cel-go@v0.28.0...v0.28.1

`v0.28.0`

Compare Source

High-Level Changes

Enhanced JSON Interoperability: New support for JSON names across the checker, AST, and runtime allows for more seamless data handling when working with JSON-native structures.
Improved Developer Tooling: Integration is now smoother thanks to new utilities for converting Go errors into cel.Issues and more descriptive, context-aware error messages.
Greater Environment Flexibility: You can now redeclare variables as constants and export parse limit options, providing finer control over how CEL environments are configured and constrained.
Native Struct Improvements: Support for mixing CEL and native values within native structs simplifies the handling of complex, hybrid data types.

🚀 Features

Add helper method to check whether a function has a singleton binding in #1266
Helper utility for converting a Go error into cel.Issues in #1267
Policy API improvements in #1268
CEL Test usability requirements in #1269
Better context-related error messages in #1271
Sort env.Config values where reasonable in #1273
Support redeclaring variables as constants in NewEnv in #1275
Add support for exporting parse limit options in #1277
Support mixing CEL values and native values in native structs in #1270
Add checker, AST, and type-provider support for JSON names in #1283
JSON field names runtime support in #1286
Optionally include reachable fieldpaths in prompt in #1285
REPL -- cel-spec pb2 and json name support #1294

🐞 Bug Fixes

Fix support for config-based type references in #1265
Check arg kinds in optional.or and .orValue impl in #1276
Bazel fixes for import in #1278
Support zero-value literals in presence test inlining #1280
Cache concatList.Size() to prevent O(N^2) evaluation time #1291
Preserve runtime error node IDs from Resolve #1290
Default enable identifier escaping with backticks #1295
Cap format string precision to prevent memory exhaustion #1292

🛠️ Maintenance & Internal

chore: Migrate gsutil usage to gcloud storage in #1274
Lint fixes for exported function/type comments in #1279
Lint fixes for import in #1287

Full Changelog: https://github.com/google/cel-go/compare/v0.27.0...v0.28.0-alpha

googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)

`v0.3.16`

Compare Source

What's Changed

chore: Update go.mod to upgrade the go version to 1.25.8 by @nolanleastin in #193
chore: Update version.txt to 0.3.16 by @nolanleastin in #194

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.15...v0.3.16

`v0.3.15`

Compare Source

What's Changed

chore: Update version.txt to 0.3.15 by @nolanleastin in #192

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.14...v0.3.15

`v0.3.14`

Compare Source

What's Changed

chore: Update main.go to increase proxyrequesttimeout by @agrawalradhika-cell in #187
chore: Increase proxy request timeout for rsync gcloud fix by @agrawalradhika-cell in #188
feat: Update version.txt to 0.3.14 by @agrawalradhika-cell in #189

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.13...v0.3.14

`v0.3.13`

Compare Source

What's Changed

feat: support non-mtls requests as well by @sai-sunder-s in #185
feat: Update version.txt to 0.3.12 by @agrawalradhika-cell in #183
feat: Update version.txt to 0.3.13 by @agrawalradhika-cell in #186

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.12...v0.3.13

googleapis/gax-go (github.com/googleapis/gax-go/v2)

`v2.22.0`: v2: v2.22.0

Compare Source

v2.22.0 (2026-04-14)

`v2.21.0`: v2: v2.21.0

Compare Source

Features

update IsFeatureEnabled to not require EXPERIMENTAL (#497) (a2a329e3)
hook transport telemetry into gax.Invoke and record (#496) (d5310019)

`v2.20.0`: v2: v2.20.0

Compare Source

Features

hook metric recording into gax.Invoke (#494) (1f3e9aef)
add TelemetryErrorInfo and ExtractTelemetryErrorInfo (#487) (defdded3)

`v2.19.0`: v2: v2.19.0

Compare Source

Features

update WithLogger to WithLoggerContext. (#478) (1cb70baf)
pass logger to downstream via context (#474) (434fa676)
add WithClientMetrics CallOption (#479) (76f0284e)
add TransportTelemetryData for dynamic transport attributes (#481) (8a7caf00)
add ClientMetrics initialization core (#473) (f53618c2)

Bug Fixes

lazy initialization and getters for ClientMetrics (#485) (fb6c5f4d)

`v2.18.0`: v2: v2.18.0

Compare Source

Features

move gax-go to use 1.25 as the lower bound of support (#469) (01594ca5)
add callctx telemetry helpers (#472) (fa319ffc)

grpc-ecosystem/grpc-gateway (github.com/grpc-ecosystem/grpc-gateway/v2)

`v2.29.0`

Compare Source

What's Changed

fix: use proto.Merge to avoid copylocks with use_opaque_api=true by @emahiro in #6383
fix: allow proto3 optional fields in path parameters by @susanachl in #6416
Add option to disable HTTP method override by @achew22 in #6447
Add Go documentation badge to README by @achew22 in #6448
fix: add missing return statements in error handler paths by @jet-go in #6561
Deprecate fields and methods if file is deprecated by @aidandj in #6613
Add edition 2024 support by @printfn in #6622

New Contributors

@emahiro made their first contribution in #6383
@susanachl made their first contribution in #6416
@jet-go made their first contribution in #6561
@aidandj made their first contribution in #6613
@printfn made their first contribution in #6622

Full Changelog: grpc-ecosystem/grpc-gateway@v2.28.0...v2.29.0

klauspost/compress (github.com/klauspost/compress)

`v1.18.6`

Compare Source

What's Changed

s2: Fix amd64 stack frame corruption by @klauspost in #1145
gzhttp: Canonicalize ETag header by @justinmayhew in #1139
perf: pool hash tables in Go encode paths to reduce allocations by @huynhanx03 in #1143

New Contributors

@justinmayhew made their first contribution in #1139
@huynhanx03 made their first contribution in #1143
@thaJeztah made their first contribution in #1144

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

moby/moby (github.com/moby/moby/client)

`v0.4.1`

Compare Source

oapi-codegen/runtime (github.com/oapi-codegen/runtime)

`v1.4.1`: Bug fixes

Compare Source

This is a bug fix release.

Changes in v1.4.0, coupled with changes in v2.7.0 of oapi-codegen exposed some new problems. deepObject style marshaling behavior now supports encoding unicode. UTF-8 can't be directly included in parameters, so we need to % escape it.

Form binding now detects maps, which makes binding to a Nullable possible. We can't use generics around Nullable[T], so we handle maps generically, assuming they're a Nullable with its behavior assumptions.

🐛 Bug fixes

Fix form binding of Nullables (#133) @mromaszewicz
Percent-encode deepObject parameter wire output (#132) @mromaszewicz

📦 Dependency updates

chore(deps): update oapi-codegen/actions action to v0.7.0 (#127) @renovate[bot]
chore(deps): update github/codeql-action action to v4 (#107) @renovate[bot]
fix(deps): update module github.com/kataras/iris/v12 to v12.2.11 (#11) @renovate[bot]
chore(deps): update release-drafter/release-drafter action to v7.2.0 (#122) @renovate[bot]

`v1.4.0`: Parameter handling improvements and fixes

Compare Source

This release fixes some missing edge cases in parameter binding and styling. We now handle all the permutations of style and explode, for the first time. Lots of tests have been added to catch regressions.

🚀 New features and improvements

Improve deepobject unmarshalling to support nullable.Nullable and encode.TextUnmarshaler (#45) @j-waters
feat: support spaceDelimited and pipeDelimited query parameter binding (#117) @mromaszewicz

🐛 Bug fixes

Fix form/explode=false incorrectly splitting primitive string values

Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>

red-hat-konflux-kflux-prd-rh02 · 2026-06-15T20:06:05Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading github.com/openshift-hyperfleet/hyperfleet-broker v1.1.1
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading github.com/spf13/cobra v1.10.2
go: downloading github.com/spf13/pflag v1.0.10
go: downloading go.opentelemetry.io/otel/sdk v1.44.0
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading go.opentelemetry.io/otel v1.44.0
go: downloading github.com/cenkalti/backoff/v5 v5.0.3
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0
go: downloading github.com/spf13/viper v1.21.0
go: downloading github.com/google/cel-go v0.28.1
go: downloading github.com/cloudevents/sdk-go/v2 v2.16.2
go: downloading go.opentelemetry.io/contrib/propagators/autoprop v0.69.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.44.0
go: downloading go.opentelemetry.io/otel/trace v1.44.0
go: downloading github.com/google/uuid v1.6.0
go: downloading cloud.google.com/go/pubsub/v2 v2.6.0
go: downloading cloud.google.com/go v0.123.0
go: downloading github.com/ThreeDotsLabs/watermill v1.5.2
go: downloading github.com/ThreeDotsLabs/watermill-amqp/v3 v3.1.0
go: downloading github.com/ThreeDotsLabs/watermill-googlecloud/v2 v2.0.1
go: downloading google.golang.org/grpc v1.81.1
go: downloading google.golang.org/protobuf v1.36.11
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading github.com/prometheus/common v0.68.1
go: downloading github.com/prometheus/procfs v0.20.1
go: downloading golang.org/x/sys v0.46.0
go: downloading github.com/inconshreveable/mousetrap v1.1.0
go: downloading github.com/felixge/httpsnoop v1.1.0
go: downloading go.opentelemetry.io/otel/metric v1.44.0
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading github.com/go-viper/mapstructure/v2 v2.5.0
go: downloading github.com/sagikazarmark/locafero v0.12.0
go: downloading github.com/spf13/afero v1.15.0
go: downloading github.com/spf13/cast v1.10.0
go: downloading github.com/go-logr/logr v1.4.3
go: downloading cel.dev/expr v0.25.2
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa
go: downloading golang.org/x/text v0.38.0
go: downloading google.golang.org/genproto v0.0.0-20260511170946-3700d4141b60
go: downloading github.com/kylelemons/godebug v1.1.0
go: downloading go.opentelemetry.io/contrib/propagators/aws v1.44.0
go: downloading go.opentelemetry.io/contrib/propagators/b3 v1.44.0
go: downloading go.opentelemetry.io/contrib/propagators/jaeger v1.44.0
go: downloading go.opentelemetry.io/contrib/propagators/ot v1.44.0
go: downloading go.opentelemetry.io/proto/otlp v1.10.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa
go: downloading github.com/googleapis/gax-go/v2 v2.22.0
go: downloading go.opencensus.io v0.24.0
go: downloading golang.org/x/sync v0.21.0
go: downloading google.golang.org/api v0.284.0
go: downloading github.com/cenkalti/backoff/v3 v3.2.2
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/rabbitmq/amqp091-go v1.11.0
go: downloading github.com/lithammer/shortuuid/v3 v3.0.7
go: downloading github.com/oklog/ulid v1.3.1
go: downloading github.com/sony/gobreaker v1.0.0
go: downloading github.com/json-iterator/go v1.1.12
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading github.com/subosito/gotenv v1.6.0
go: downloading github.com/pelletier/go-toml/v2 v2.3.1
go: downloading go.yaml.in/yaml/v3 v3.0.4
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/antlr4-go/antlr/v4 v4.13.1
go: downloading go.uber.org/multierr v1.11.0
go: downloading go.uber.org/zap v1.28.0
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0
go: downloading golang.org/x/net v0.56.0
go: downloading golang.org/x/oauth2 v0.36.0
go: downloading cloud.google.com/go/iam v1.11.0
go: downloading cloud.google.com/go/auth v0.20.0
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.2
go: downloading golang.org/x/exp v0.0.0-20240823005443-9b4947da3948
go: downloading cloud.google.com/go/compute/metadata v0.9.0
go: downloading cloud.google.com/go/auth/oauth2adapt v0.2.8
go: downloading go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0
go: downloading golang.org/x/time v0.15.0
go: downloading github.com/google/s2a-go v0.1.9
go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.16
go: downloading golang.org/x/crypto v0.53.0
go: github.com/openshift-hyperfleet/hyperfleet-sentinel/internal/client imports
	github.com/openshift-hyperfleet/hyperfleet-sentinel/pkg/api/openapi: cannot find module providing package github.com/openshift-hyperfleet/hyperfleet-sentinel/pkg/api/openapi

openshift-ci · 2026-06-15T20:06:09Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign ldornele for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci · 2026-06-15T20:06:16Z

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a openshift-hyperfleet member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

coderabbitai · 2026-06-15T20:06:17Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: ca6b2b4e-4cc4-4435-964a-b3ebc648a711

📥 Commits

Reviewing files that changed from the base of the PR and between 6cb186e and cd111fc.

📒 Files selected for processing (1)

go.mod

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

openshift-hyperfleet/architecture (manual)
openshift-hyperfleet/hyperfleet-api (manual)
openshift-hyperfleet/hyperfleet-sentinel (manual)
openshift-hyperfleet/hyperfleet-adapter (manual)
openshift-hyperfleet/hyperfleet-broker (manual)

📝 Walkthrough

Summary by CodeRabbit

Chores
- Updated multiple Go module dependencies, including OpenTelemetry libraries (v1.44.0), CLI frameworks, and transitive dependencies. These updates bring performance improvements, security patches, and bug fixes from upstream projects while maintaining compatibility.

Walkthrough

go.mod receives a batch of version bumps with no changes to the module path or Go directive. Direct dependencies upgraded include oapi-codegen/runtime, openshift-hyperfleet/hyperfleet-api-spec, spf13/cobra, spf13/viper, and testcontainers-go. The OpenTelemetry stack advances from v1.43.0 to v1.44.0 across core, OTLP exporters, metric, and contrib instrumentation packages (otelgrpc, otelhttp). Indirect transitive bumps cover cel-go, klauspost/compress, rabbitmq/amqp091-go, gopsutil, golang.org/x/*, google.golang.org/grpc, and prometheus/* among others.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Supply chain surface — items requiring explicit verification (CWE-1357, CWE-829):

github.com/openshift-hyperfleet/hyperfleet-api-spec is a first-party module. Confirm the bumped version was produced from a controlled release pipeline, not an opportunistic tag. A compromised API spec module directly poisons generated client/server stubs across the Go K8s platform.
testcontainers-go has a history of pulling Docker socket access at test time. Verify no new privileged capability requests were introduced in the bumped release (check upstream changelog for CVE advisories).
klauspost/compress — patch bump; verify against any disclosed decompression bomb vectors (related CWE-400).
rabbitmq/amqp091-go — confirm no protocol-level deserialization changes that could affect the Broker component's message handling trust boundary.
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc — this package instruments gRPC interceptors. Any behavioral change here affects the Sentinel/Adapter observability path; review upstream release notes for interceptor ordering or context propagation changes that could leak trace data cross-tenant.
golang.org/x/net, golang.org/x/crypto — always check for patched CVEs in x/ bumps. Confirm no CVE was left unpatched by using govulncheck against the new go.sum.

Action required: Run govulncheck ./... and go mod verify in CI before merging. A go.sum diff is not present in this PR — confirm it was updated atomically with go.mod to prevent dependency confusion (CWE-494).

🚥 Pre-merge checks | ✅ 10 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name	Status	Explanation	Resolution
Title check	❓ Inconclusive	The title 'Update go module minor/patch updates' is vague and generic, using non-descriptive language that does not clearly convey what specific dependencies or systems are being updated.	Replace with a more specific title that identifies key updated packages, e.g., 'Update Go dependencies: OpenTelemetry v1.44.0, gRPC, and stdlib extensions' or focus on the most critical modules.

✅ Passed checks (10 passed)

Check name	Status	Explanation
Description check	✅ Passed	The PR description is comprehensive and directly related to the changeset, detailing 50+ Go module dependency updates with specific version changes across cloud, observability, and infrastructure ecosystems.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Sec-02: Secrets In Log Output	✅ Passed	PR contains only go.mod/go.sum dependency updates; comprehensive search found zero log statements exposing tokens, passwords, credentials, or secrets in non-test source code.
No Hardcoded Secrets	✅ Passed	PR contains only go.mod dependency updates with no hardcoded secrets, API keys, tokens, passwords, or embedded credentials found in code or configuration files.
No Weak Cryptography	✅ Passed	No weak cryptography detected. Zero imports of banned crypto/md5, crypto/des, crypto/rc4, crypto/sha1. golang.org/x/crypto v0.53.0 is secure. gRPC v1.81.1 enforces TLS 1.2+. No custom crypto or har...
No Injection Vectors	✅ Passed	No injection vectors detected: CWE-89 (no SQL queries), CWE-78 (no exec.Command), CWE-79 (no template.HTML), CWE-502 (no yaml.Unmarshal). Application code uses fmt.Sprintf only for telemetry/loggin...
No Privileged Containers	✅ Passed	No privileged containers found. Root user only in Dockerfile build stage (documented), runtime uses UID 65532. Helm enforces allowPrivilegeEscalation=false, runAsUser=65532, all capabilities droppe...
No Pii Or Sensitive Data In Logs	✅ Passed	PR modifies only go.mod with dependency version bumps. No code changes, no new logging statements, no PII/sensitive data exposure introduced. Existing logging uses only resource IDs and operational...

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch konflux/mintmaker/main/go-module-minorpatch-updates

✨ Simplify code

Create PR with simplified code
Commit simplified code in branch konflux/mintmaker/main/go-module-minorpatch-updates

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Update go module minor/patch updates

cd111fc

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>

openshift-ci Bot requested review from jsell-rh and rafabene June 15, 2026 20:06

openshift-ci Bot added the needs-ok-to-test label Jun 15, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Update go module minor/patch updates#178

Update go module minor/patch updates#178
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-module-minorpatch-updates

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 15, 2026

Uh oh!

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 15, 2026

Uh oh!

openshift-ci Bot commented Jun 15, 2026

Uh oh!

openshift-ci Bot commented Jun 15, 2026

Uh oh!

coderabbitai Bot commented Jun 15, 2026 •

edited

Loading

Summary by CodeRabbit

Walkthrough

Estimated code review effort

❌ Failed checks (1 inconclusive)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 15, 2026

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Changes and fixes

Changes and fixes

What's Changed

New Contributors

High-Level Changes

🚀 Features

🐞 Bug Fixes

🛠️ Maintenance & Internal

What's Changed

What's Changed

What's Changed

What's Changed

v2.22.0: v2: v2.22.0

v2.22.0 (2026-04-14)

v2.21.0: v2: v2.21.0

Features

v2.20.0: v2: v2.20.0

Features

v2.19.0: v2: v2.19.0

Features

Bug Fixes

v2.18.0: v2: v2.18.0

Features

What's Changed

New Contributors

What's Changed

New Contributors

v1.4.1: Bug fixes

🐛 Bug fixes

📦 Dependency updates

Sponsors

v1.4.0: Parameter handling improvements and fixes

🚀 New features and improvements

🐛 Bug fixes

Configuration

Documentation

Uh oh!

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 15, 2026

⚠️ Artifact update problem

File name: go.sum

Uh oh!

openshift-ci Bot commented Jun 15, 2026

Uh oh!

openshift-ci Bot commented Jun 15, 2026

Uh oh!

coderabbitai Bot commented Jun 15, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Walkthrough

Estimated code review effort

❌ Failed checks (1 inconclusive)

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

`v2.22.0`: v2: v2.22.0

`v2.21.0`: v2: v2.21.0

`v2.20.0`: v2: v2.20.0

`v2.19.0`: v2: v2.19.0

`v2.18.0`: v2: v2.18.0

`v1.4.1`: Bug fixes

`v1.4.0`: Parameter handling improvements and fixes

coderabbitai Bot commented Jun 15, 2026 •

edited

Loading