Skip to content

fix(deps): update gomod dependencies#445

Open
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies
Open

fix(deps): update gomod dependencies#445
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies

Conversation

@red-hat-konflux-kflux-prd-rh03

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
github.com/cespare/xxhash/v2 v2.2.0v2.3.0 age confidence indirect minor
github.com/emicklei/go-restful/v3 v3.9.0v3.13.0 age confidence indirect minor
github.com/evanphx/json-patch v5.6.0+incompatiblev5.9.11+incompatible age confidence indirect minor
github.com/evanphx/json-patch/v5 v5.6.0v5.9.11 age confidence indirect minor
github.com/fsnotify/fsnotify v1.6.0v1.10.1 age confidence indirect minor
github.com/go-logr/logr v1.2.4v1.4.3 age confidence require minor
github.com/go-logr/zapr v1.2.4v1.3.0 age confidence indirect minor
github.com/go-openapi/jsonpointer v0.19.6v0.23.1 age confidence indirect minor
github.com/go-openapi/jsonreference v0.20.1v0.21.6 age confidence indirect minor
github.com/go-openapi/swag v0.22.3v0.26.1 age confidence indirect minor
github.com/golang/groupcache 41bb18b2c02b82 age confidence indirect digest
github.com/golang/protobuf v1.5.3v1.5.4 age confidence indirect patch
github.com/google/gnostic v0.6.9v0.7.1 age confidence indirect minor
github.com/google/go-cmp v0.6.0v0.7.0 age confidence require minor
github.com/google/pprof 4bb14d47023385 age confidence indirect digest
github.com/google/uuid v1.3.0v1.6.0 age confidence indirect minor
github.com/imdario/mergo v0.3.13v0.3.16 age confidence indirect patch
github.com/mailru/easyjson v0.7.7v0.9.2 age confidence indirect minor
github.com/moby/spdystream v0.2.0v0.5.1 age confidence indirect minor
github.com/onsi/ginkgo/v2 v2.9.5v2.31.0 age confidence require minor v2.32.0
github.com/onsi/gomega v1.27.7v1.42.0 age confidence require minor
github.com/openshift/api a83e6f85346161 replace digest
github.com/openshift/api 77b88975346161 require digest
github.com/openshift/operator-custom-metrics v0.5.0v0.5.1 age confidence require patch
github.com/openshift/osde2e-common 1b1a774751e0d2 age confidence require digest
github.com/operator-framework/operator-lib v0.11.0v0.19.0 age confidence require minor
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.58.0v0.92.0 age confidence require minor
github.com/prometheus-operator/prometheus-operator/pkg/client v0.58.0v0.92.0 age confidence require minor
github.com/prometheus/client_golang v1.15.1v1.23.2 age confidence indirect minor
github.com/prometheus/client_model v0.4.0v0.6.2 age confidence indirect minor
github.com/prometheus/common v0.43.0v0.69.0 age confidence indirect minor
github.com/prometheus/procfs v0.9.0v0.20.1 age confidence indirect minor
github.com/spf13/pflag v1.0.5v1.0.10 age confidence indirect patch
github.com/stretchr/testify v1.8.2v1.11.1 age confidence indirect minor
go.uber.org/atomic v1.7.0v1.11.0 age confidence indirect minor
go.uber.org/multierr v1.6.0v1.11.0 age confidence indirect minor
go.uber.org/zap v1.24.0v1.28.0 age confidence indirect minor
golang.org/x/net v0.38.0v0.56.0 age confidence indirect minor
golang.org/x/oauth2 v0.27.0v0.36.0 age confidence indirect minor
golang.org/x/sys v0.31.0v0.46.0 age confidence indirect minor
golang.org/x/term v0.30.0v0.44.0 age confidence indirect minor
golang.org/x/text v0.23.0v0.38.0 age confidence indirect minor
golang.org/x/time v0.3.0v0.15.0 age confidence indirect minor
golang.org/x/tools v0.21.1-0.20240508182429-e35e4ccd0d2dv0.46.0 age confidence indirect minor
gomodules.xyz/jsonpatch/v2 v2.3.0v2.5.0 age confidence indirect minor
google.golang.org/protobuf v1.33.0v1.36.11 age confidence indirect minor
k8s.io/api v0.27.2v0.36.2 age confidence require minor
k8s.io/apiextensions-apiserver v0.27.2v0.36.2 age confidence indirect minor
k8s.io/apimachinery v0.27.2v0.36.2 age confidence require minor
k8s.io/client-go v0.27.2v0.36.2 age confidence require minor
k8s.io/component-base v0.27.2v0.36.2 age confidence indirect minor
k8s.io/klog/v2 v2.90.1v2.140.0 age confidence indirect minor
k8s.io/kube-openapi 8b0f38bbc653b6 age confidence require digest
k8s.io/utils a36077ca95e086 age confidence indirect digest
sigs.k8s.io/controller-runtime v0.15.0v0.24.1 age confidence require minor
sigs.k8s.io/e2e-framework v0.2.0v0.7.0 age confidence indirect minor
sigs.k8s.io/json c049b762d32026 age confidence replace digest
sigs.k8s.io/json bc3834c2d32026 age confidence indirect digest
sigs.k8s.io/structured-merge-diff/v4 v4.2.3v4.7.0 age confidence indirect minor
sigs.k8s.io/yaml v1.3.0v1.6.0 age confidence indirect minor

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

cespare/xxhash (github.com/cespare/xxhash/v2)

v2.3.0

Compare Source

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.13.0

Compare Source

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)

v3.12.2

Compare Source

  • allow empty payloads in post,put,patch, issue #​580 ( thanks @​liggitt, Jordan Liggitt)

v3.12.1

Compare Source

  • fix misroute when dealing multiple webservice with regex (#​549) (thanks Haitao Chen)

v3.12.0

Compare Source

v3.11.3

Compare Source

  • better not have 2 tags on one commit

v3.11.2

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.1

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.0

Compare Source

  • restored behavior as <= v3.9.0 with option to change path strategy using TrimRightSlashEnabled.

v3.10.2

Compare Source

  • introduced MergePathStrategy to be able to revert behaviour of path concatenation to 3.9.0
    see comment in Readme how to customize this behaviour.

v3.10.1

Compare Source

  • fix broken 3.10.0 by using path package for joining paths

v3.10.0

Compare Source

  • changed tokenizer to match std route match behavior; do not trimright the path (#​511)
  • Add MIME_ZIP (#​512)
  • Add MIME_ZIP and HEADER_ContentDisposition (#​513)
  • Changed how to get query parameter issue #​510
evanphx/json-patch (github.com/evanphx/json-patch)

v5.9.11+incompatible

Compare Source

v5.9.10+incompatible

Compare Source

v5.9.0+incompatible

Compare Source

v5.8.1+incompatible

Compare Source

v5.8.0+incompatible

Compare Source

v5.7.0+incompatible

Compare Source

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.10.1

Compare Source

Changes and fixes
  • inotify: don't remove sibling watches sharing a path prefix (#​754)

  • inotify, windows: don't rename sibling watches sharing a path prefix
    (#​755)

v1.10.0

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes
  • inotify: improve initialization error message (#​731)

  • inotify: send Rename event if recursive watch is renamed (#​696)

  • inotify: avoid copying event buffers when reading names (#​741)

  • kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#​748)

  • kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#​740)

  • windows: fix nil pointer dereference in remWatch (#​736)

  • windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#​709, #​749)

v1.9.0

Compare Source

Changes and fixes
  • all: make BufferedWatcher buffered again (#​657)

  • inotify: fix race when adding/removing watches while a watched path is being deleted (#​678, #​686)

  • inotify: don't send empty event if a watched path is unmounted (#​655)

  • inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#​679)

  • kqueue: fix watching relative symlinks (#​681)

  • kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#​682)

  • illumos: don't send error if changed file is deleted while processing the event (#​678)

v1.8.0

Compare Source

Additions

  • all: add FSNOTIFY_DEBUG to print debug logs to stderr (#​619)
Changes and fixes
  • windows: fix behaviour of WatchList() to be consistent with other platforms (#​610)

  • kqueue: ignore events with Ident=0 (#​590)

  • kqueue: set O_CLOEXEC to prevent passing file descriptors to children (#​617)

  • kqueue: emit events as "/path/dir/file" instead of "path/link/file" when watching a symlink (#​625)

  • inotify: don't send event for IN_DELETE_SELF when also watching the parent (#​620)

  • inotify: fix panic when calling Remove() in a goroutine (#​650)

  • fen: allow watching subdirectories of watched directories (#​621)

v1.7.0

Compare Source

This version of fsnotify needs Go 1.17.

Additions
  • illumos: add FEN backend to support illumos and Solaris. (#​371)

  • all: add NewBufferedWatcher() to use a buffered channel, which can be useful in cases where you can't control the kernel buffer and receive a large number of events in bursts. (#​550, #​572)

  • all: add AddWith(), which is identical to Add() but allows passing options. (#​521)

  • windows: allow setting the ReadDirectoryChangesW() buffer size with fsnotify.WithBufferSize(); the default of 64K is the highest value that works on all platforms and is enough for most purposes, but in some cases a highest buffer is needed. (#​521)

Changes and fixes
  • inotify: remove watcher if a watched path is renamed (#​518)

    After a rename the reported name wasn't updated, or even an empty string. Inotify doesn't provide any good facilities to update it, so just remove the watcher. This is already how it worked on kqueue and FEN.

    On Windows this does work, and remains working.

  • windows: don't listen for file attribute changes (#​520)

    File attribute changes are sent as FILE_ACTION_MODIFIED by the Windows API, with no way to see if they're a file write or attribute change, so would show up as a fsnotify.Write event. This is never useful, and could result in many spurious Write events.

  • windows: return ErrEventOverflow if the buffer is full (#​525)

    Before it would merely return "short read", making it hard to detect this error.

  • kqueue: make sure events for all files are delivered properly when removing a watched directory (#​526)

    Previously they would get sent with "" (empty string) or "." as the path name.

  • kqueue: don't emit spurious Create events for symbolic links (#​524)

    The link would get resolved but kqueue would "forget" it already saw the link itself, resulting on a Create for every Write event for the directory.

  • all: return ErrClosed on Add() when the watcher is closed (#​516)

  • other: add Watcher.Errors and Watcher.Events to the no-op Watcher in backend_other.go, making it easier to use on unsupported platforms such as WASM, AIX, etc. (#​528)

  • other: use the backend_other.go no-op if the appengine build tag is set; Google AppEngine forbids usage of the unsafe package so the inotify backend won't compile there.

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

v1.4.2

Compare Source

What's Changed

Dependencies:

Full Changelog: go-logr/logr@v1.4.1...v1.4.2

v1.4.1

Compare Source

What's Changed

Full Changelog: go-logr/logr@v1.4.0...v1.4.1

v1.4.0

Compare Source

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.3.0...v1.4.0

v1.3.0

Compare Source

This release adds support for slog in a new, self-contained logr/slogr package. Implementers of a logr.LogSink are encouraged, but not required, to extend their implementation to improve the quality of log output coming from a slog API call.

Breaking change: the call depth for LogSink.Enabled when called via Logger.Enabled was fixed to be the same as for other call paths. Implementers of a LogSink who have worked around this bug will need to remove their workarounds.

Security best practices were improved. Only Go versions >= 1.18 are supported by this release.

What's Changed


New Contributors

Full Changelog: go-logr/logr@v1.2.4...v1.3.0

go-logr/zapr (github.com/go-logr/zapr)

v1.3.0

Compare Source

This release adds support for slog. zapr implements slogr.SlogSink and therefore can be used through slogr.NewSlogHandler as backend for slog.

What's Changed


Configuration

📅 Schedule: Branch creation - Between 02:00 AM and 04:59 AM, Monday through Friday ( * 2-4 * * 1-5 ) in timezone UTC, Automerge - Between 02:00 AM and 04:59 AM, Monday through Friday ( * 2-4 * * 1-5 ) in timezone UTC.

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Jun 16, 2026
@red-hat-konflux-kflux-prd-rh03

red-hat-konflux-kflux-prd-rh03 Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.9 -> 1.26.0
github.com/davecgh/go-spew v1.1.1 -> v1.1.2-0.20180830191138-d8f796af33cc
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee

@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Jun 16, 2026
@openshift-ci

openshift-ci Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci

openshift-ci Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

1 similar comment
@openshift-ci

openshift-ci Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@pshickeydev

Copy link
Copy Markdown

/ok-to-test

@openshift-ci openshift-ci Bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Jun 16, 2026
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD ffbe888 and 2 for PR HEAD fc39227 in total

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from fc39227 to ac70c68 Compare June 17, 2026 04:13
@openshift-ci openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jun 17, 2026
@openshift-ci

openshift-ci Bot commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

New changes are detected. LGTM label has been removed.

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 3 times, most recently from 2a4ce19 to 0c3b39a Compare June 22, 2026 04:16
@openshift-ci

openshift-ci Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/images 0c3b39a link true /test images
ci/prow/validate 0c3b39a link true /test validate
ci/prow/lint 0c3b39a link true /test lint
ci/prow/coverage 0c3b39a link true /test coverage
ci/prow/test 0c3b39a link true /test test

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Signed-off-by: red-hat-konflux-kflux-prd-rh03 <206760901+red-hat-konflux-kflux-prd-rh03[bot]@users.noreply.github.com>
@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 0c3b39a to 02bb451 Compare June 24, 2026 04:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant