Skip to content

fix(deps): update gomod dependencies#562

Closed
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies
Closed

fix(deps): update gomod dependencies#562
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies

Conversation

@red-hat-konflux-kflux-prd-rh03

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot commented Jun 17, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/go-openapi/jsonreference v0.21.5 → v0.21.6 age confidence indirect patch
github.com/go-openapi/swag v0.26.0 → v0.26.1 age confidence indirect patch
github.com/go-openapi/swag/cmdutils v0.26.0 → v0.26.1 age confidence indirect patch
github.com/go-openapi/swag/conv v0.26.0 → v0.26.1 age confidence indirect patch
github.com/go-openapi/swag/fileutils v0.26.0 → v0.26.1 age confidence indirect patch
github.com/go-openapi/swag/jsonname v0.26.0 → v0.26.1 age confidence indirect patch
github.com/go-openapi/swag/jsonutils v0.26.0 → v0.26.1 age confidence indirect patch
github.com/go-openapi/swag/loading v0.26.0 → v0.26.1 age confidence indirect patch
github.com/go-openapi/swag/mangling v0.26.0 → v0.26.1 age confidence indirect patch
github.com/go-openapi/swag/netutils v0.26.0 → v0.26.1 age confidence indirect patch
github.com/go-openapi/swag/stringutils v0.26.0 → v0.26.1 age confidence indirect patch
github.com/go-openapi/swag/typeutils v0.26.0 → v0.26.1 age confidence indirect patch
github.com/go-openapi/swag/yamlutils v0.26.0 → v0.26.1 age confidence indirect patch
github.com/google/pprof 545e8a4 → 7023385 age confidence indirect digest
github.com/openshift/api 83b017b → 5346161 require digest
github.com/openshift/cluster-logging-operator 05f4f8b → d2691e4 age confidence require digest
github.com/openshift/osde2e-common 8a4449a → 751e0d2 age confidence require digest
github.com/prometheus/common v0.66.1 → v0.69.0 age confidence indirect minor
go.opentelemetry.io/otel v1.41.0 → v1.44.0 age confidence indirect minor
go.opentelemetry.io/otel/trace v1.41.0 → v1.44.0 age confidence indirect minor
golang.org/x/mod v0.36.0 → v0.37.0 age confidence indirect minor
golang.org/x/net v0.54.0 → v0.56.0 age confidence indirect minor
golang.org/x/sync v0.20.0 → v0.21.0 age confidence indirect minor
golang.org/x/sys v0.45.0 → v0.46.0 age confidence indirect minor
golang.org/x/term v0.43.0 → v0.44.0 age confidence indirect minor
golang.org/x/text v0.37.0 → v0.38.0 age confidence indirect minor
golang.org/x/time v0.14.0 → v0.15.0 age confidence indirect minor
golang.org/x/tools v0.45.0 → v0.46.0 age confidence indirect minor
k8s.io/api v0.35.4 → v0.36.2 age confidence require minor
k8s.io/apiextensions-apiserver v0.35.4 → v0.36.2 age confidence require minor
k8s.io/client-go v0.35.4 → v0.36.2 age confidence require minor
k8s.io/component-base v0.35.4 → v0.36.2 age confidence indirect minor
k8s.io/kube-openapi 43fb72c → bc653b6 age confidence indirect digest
k8s.io/utils b8788ab → a95e086 age confidence require digest
sigs.k8s.io/controller-runtime v0.23.3 → v0.24.1 age confidence require minor
sigs.k8s.io/structured-merge-diff/v6 v6.3.2 → v6.4.0 age confidence indirect minor

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.6

Compare Source

0.21.6 - 2026-05-31

Full Changelog: go-openapi/jsonreference@v0.21.5...v0.21.6

21 commits in this release.

Documentation
Code quality
Miscellaneous tasks
Updates
People who contributed to this release

jsonreference license terms

License

go-openapi/swag (github.com/go-openapi/swag)

v0.26.1

Compare Source

0.26.1 - 2026-06-07

Full Changelog: go-openapi/swag@v0.26.0...v0.26.1

12 commits in this release.

Implemented enhancements
  • feat(loading): sandbox local loading with WithRoot (GHSA-v2xp-g8xf-22pf) by @​fredbi in #​203 ...
  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...
Documentation
Miscellaneous tasks
Security
Updates
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.26.1)
Miscellaneous tasks
Updates
fileutils (0.26.1)
Updates
jsonname (0.26.1)
Updates
jsonutils/adapters/easyjson (0.26.1)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration/benchmarks (0.26.1)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration (0.26.1)
Miscellaneous tasks
Updates
jsonutils/fixtures_test (0.26.1)
Updates
jsonutils (0.26.1)
Miscellaneous tasks
Updates
loading (0.26.1)
Implemented enhancements
  • feat(loading): sandbox local loading with WithRoot (GHSA-v2xp-g8xf-22pf) by @​fredbi in #​203 ...
Miscellaneous tasks
Security
Updates
mangling (0.26.1)
Updates
netutils (0.26.1)
Updates
stringutils (0.26.1)
Updates
typeutils (0.26.1)
Updates
yamlutils (0.26.1)
Miscellaneous tasks
Updates
prometheus/common (github.com/prometheus/common)

v0.69.0

Compare Source

Security / behavior changes
  • config: credentials are no longer forwarded across cross-host redirects. When FollowRedirects is enabled, the HTTP client now strips Authorization, Cookie, Proxy-Authorization and other sensitive headers, and skips basic-auth, bearer-token and OAuth2 credentials, when a redirect points to a different host. This aligns with Go's net/http behavior. Callers that relied on credentials being sent to a redirect target on another host will need to target that host directly. #​901 #​920 #​921
  • config: LoadHTTPConfigFile now resolves relative file paths (e.g. *_file credentials, http_headers files) against the config file's own directory instead of its parent directory. Configs that worked around the old behavior by prefixing paths with the config's directory name must drop that prefix. #​925
Bugfixes
  • expfmt: fix nil pointer panic when parsing empty braces {}. #​922
  • model: fix Time.UnmarshalJSON for larger negative numbers. #​918
Performance
  • model: reduce allocations in Time.UnmarshalJSON. #​918
Internal
  • Synchronize common files from prometheus/prometheus. #​917
  • Modernize Go. #​919

Full Changelog: prometheus/common@v0.68.1...v0.69.0

v0.68.1

Compare Source

Security / behavior changes
  • config: credentials are no longer forwarded across cross-host redirects. When FollowRedirects is enabled, the HTTP client now strips Authorization, Cookie, Proxy-Authorization and other sensitive headers, and skips basic-auth, bearer-token and OAuth2 credentials, when a redirect points to a different host. This aligns with Go's net/http behavior. Callers that relied on credentials being sent to a redirect target on another host will need to target that host directly. #​901 #​920 #​921
  • config: LoadHTTPConfigFile now resolves relative file paths (e.g. *_file credentials, http_headers files) against the config file's own directory instead of its parent directory. Configs that worked around the old behavior by prefixing paths with the config's directory name must drop that prefix. #​925
Bugfixes
  • expfmt: fix nil pointer panic when parsing empty braces {}. #​922
  • model: fix Time.UnmarshalJSON for larger negative numbers. #​918
Performance
  • model: reduce allocations in Time.UnmarshalJSON. #​918
Internal
  • Synchronize common files from prometheus/prometheus. #​917
  • Modernize Go. #​919

Full Changelog: prometheus/common@v0.68.1...v0.69.0

v0.68.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.5...v0.68.0

v0.67.5

Compare Source

What's Changed

Full Changelog: prometheus/common@v0.67.4...v0.67.5

v0.67.4: / 2025-11-18

Compare Source

What's Changed

Full Changelog: prometheus/common@v0.67.3...v0.67.4

v0.67.3: / 2025-11-18

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.67.2...v0.67.3

v0.67.2

Compare Source

v0.67.1

Compare Source

v0.67.0

Compare Source

open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)

v1.44.0: /v0.66.0/v0.20.0/v0.0.17

Compare Source

Added
  • Add ByteSlice and ByteSliceValue functions for new BYTESLICE attribute type in go.opentelemetry.io/otel/attribute. (#​7948)
  • Apply attribute value limit to the KindBytes attribute type in go.opentelemetry.io/otel/sdk/log. (#​7990)
  • Apply attribute value limit to the BYTESLICE attribute type in go.opentelemetry.io/otel/sdk/trace. (#​7990)
  • Support BYTESLICE attributes in go.opentelemetry.io/otel/trace. (#​8153)
  • Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#​8153)
  • Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#​8153)
  • Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#​8153)
  • Support BYTESLICE attributes in go.opentelemetry.io/otel/exporters/zipkin. (#​8153)
  • Add String method for Value type in go.opentelemetry.io/otel/attribute. (#​8142)
  • Add Slice and SliceValue functions for new SLICE attribute type in go.opentelemetry.io/otel/attribute. (#​8166)
  • Support SLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#​8216)
  • Support SLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlplog. (#​8216)
  • Support SLICE attributes in go.opentelemetry.io/otel/exporters/otlp/otlpmetric. (#​8216)
  • Support SLICE attributes in go.opentelemetry.io/otel/exporters/zipkin. (#​8216)
  • Apply AttributeValueLengthLimit to attribute.SLICE type attribute values in go.opentelemetry.io/otel/sdk/trace, recursively truncating contained string values. (#​8217)
  • Add Error field on Record type in go.opentelemetry.io/otel/log/logtest. (#​8148)
  • Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc. (#​8157)
  • Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#​8157)
  • Add WithMaxRequestSize option in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#​8157)
  • Add WithMaxRequestSize option in `go.opentelemetry.io/otel/exporters/otl

Configuration

📅 Schedule: Branch creation - Between 02:00 AM and 04:59 AM, Monday through Friday ( * 2-4 * * 1-5 ) in timezone UTC, Automerge - Between 02:00 AM and 04:59 AM, Monday through Friday ( * 2-4 * * 1-5 ) in timezone UTC.

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Jun 17, 2026
@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot enabled auto-merge (squash) June 17, 2026 04:13
@openshift-ci openshift-ci Bot requested review from joshbranham and xiaoyu74 June 17, 2026 04:15
@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Jun 17, 2026
@openshift-ci

openshift-ci Bot commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot

openshift-merge-bot Bot commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD 2ee04ec and 2 for PR HEAD 8807bce in total

@openshift-ci

openshift-ci Bot commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci openshift-ci Bot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Jun 17, 2026
@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Jun 18, 2026
@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 8807bce to 9080d91 Compare June 18, 2026 00:05
@openshift-ci

openshift-ci Bot commented Jun 18, 2026

Copy link
Copy Markdown
Contributor

New changes are detected. LGTM label has been removed.

@openshift-ci openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jun 18, 2026
@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 9080d91 to b934df8 Compare June 19, 2026 04:08
@red-hat-konflux-kflux-prd-rh03
fix(deps): update gomod dependencies
f350da9 
Signed-off-by: red-hat-konflux-kflux-prd-rh03 <206760901+red-hat-konflux-kflux-prd-rh03[bot]@users.noreply.github.com>
@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from b934df8 to f350da9 Compare June 22, 2026 04:15
@red-hat-konflux-kflux-prd-rh03

red-hat-konflux-kflux-prd-rh03 Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: downloading github.com/openshift/operator-custom-metrics v0.5.1
go: downloading k8s.io/klog/v2 v2.140.0
go: downloading sigs.k8s.io/controller-runtime v0.24.1
go: downloading k8s.io/api v0.36.2
go: downloading k8s.io/apimachinery v0.36.2
go: downloading github.com/ghodss/yaml v1.0.1-0.20220118164431-d8423dcdf344
go: downloading github.com/openshift/api v0.0.0-20260619095050-5346161d1bf2
go: downloading github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.55.1
go: downloading k8s.io/utils v0.0.0-20260617174310-a95e086a2553
go: downloading k8s.io/client-go v0.36.2
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading github.com/openshift/hive/apis v0.0.0-20230327212335-7fd70848a6d5
go: downloading github.com/openshift/cluster-logging-operator v0.0.0-20260617165507-d2691e4ec475
go: downloading k8s.io/apiextensions-apiserver v0.36.2
go: downloading github.com/go-logr/logr v1.4.3
go: downloading gomodules.xyz/jsonpatch/v2 v2.5.0
go: downloading github.com/evanphx/json-patch v5.9.11+incompatible
go: downloading sigs.k8s.io/randfill v1.0.0
go: downloading gopkg.in/yaml.v2 v2.4.0
go: downloading k8s.io/kube-openapi v0.0.0-20260618221249-bc653b64f974
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.4.0
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading golang.org/x/net v0.56.0
go: downloading github.com/spf13/pflag v1.0.10
go: downloading golang.org/x/term v0.44.0
go: downloading github.com/evanphx/json-patch/v5 v5.9.11
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading github.com/prometheus/common v0.69.0
go: downloading github.com/prometheus/procfs v0.20.1
go: downloading golang.org/x/sys v0.46.0
go: downloading google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af
go: downloading github.com/openshift/custom-resource-status v1.1.3-0.20220503160415-f2fdb4999d87
go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
go: downloading gopkg.in/evanphx/json-patch.v4 v4.13.0
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading github.com/json-iterator/go v1.1.12
go: downloading go.yaml.in/yaml/v2 v2.4.4
go: downloading github.com/fxamacker/cbor/v2 v2.9.2
go: downloading golang.org/x/oauth2 v0.36.0
go: downloading golang.org/x/time v0.15.0
go: downloading sigs.k8s.io/yaml v1.6.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
go: downloading github.com/google/gnostic-models v0.7.1
go: downloading go.yaml.in/yaml/v3 v3.0.4
go: downloading github.com/go-openapi/jsonreference v0.21.6
go: downloading github.com/go-openapi/swag v0.26.1
go: downloading golang.org/x/text v0.38.0
go: downloading github.com/go-openapi/jsonpointer v0.23.1
go: downloading github.com/go-openapi/swag/cmdutils v0.26.1
go: downloading github.com/go-openapi/swag/conv v0.26.1
go: downloading github.com/go-openapi/swag/fileutils v0.26.1
go: downloading github.com/go-openapi/swag/jsonname v0.26.1
go: downloading github.com/go-openapi/swag/jsonutils v0.26.1
go: downloading github.com/go-openapi/swag/loading v0.26.1
go: downloading github.com/go-openapi/swag/mangling v0.26.1
go: downloading github.com/go-openapi/swag/netutils v0.26.1
go: downloading github.com/go-openapi/swag/stringutils v0.26.1
go: downloading github.com/go-openapi/swag/typeutils v0.26.1
go: downloading github.com/go-openapi/swag/yamlutils v0.26.1
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/emicklei/go-restful/v3 v3.13.0
go: github.com/openshift/managed-cluster-validating-webhooks/pkg/webhooks/clusterlogging imports
	github.com/openshift/cluster-logging-operator/apis/logging/v1: cannot find module providing package github.com/openshift/cluster-logging-operator/apis/logging/v1

@openshift-ci

openshift-ci Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@diakovnec

diakovnec commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

/retest

@openshift-ci

openshift-ci Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/pr-check f350da9 link true /test pr-check
ci/prow/e2e-binary-build-success f350da9 link true /test e2e-binary-build-success

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@diakovnec

diakovnec commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

All three bot PRs (#562, #569, #571) are failing for the same reason: they update go.mod without running go mod tidy to sync go.sum.

@diakovnec

diakovnec commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

/close

@openshift-ci openshift-ci Bot closed this Jun 22, 2026
auto-merge was automatically disabled June 22, 2026 06:23

Pull request was closed

@openshift-ci

openshift-ci Bot commented Jun 22, 2026

Copy link
Copy Markdown
Contributor

@diakovnec: Closed this PR.

Details

In response to this:

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@joshbranham joshbranham Awaiting requested review from joshbranham
@xiaoyu74 xiaoyu74 Awaiting requested review from xiaoyu74

Assignees

No one assigned

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@diakovnec