Skip to content

Conversation

@red-hat-konflux
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Nov 4, 2025

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/doug-martin/goqu/v9 v9.18.0 -> v9.19.0 age confidence require minor
github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0 age confidence indirect minor
github.com/evanphx/json-patch v5.6.0+incompatible -> v5.9.11+incompatible age confidence indirect minor
github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0 age confidence indirect minor
github.com/go-logr/logr v1.4.2 -> v1.4.3 age confidence indirect patch
github.com/go-openapi/jsonpointer v0.21.0 -> v0.22.1 age confidence indirect minor
github.com/go-openapi/jsonreference v0.20.2 -> v0.21.3 age confidence indirect minor
github.com/go-openapi/swag v0.23.0 -> v0.25.1 age confidence indirect minor
github.com/google/gnostic-models v0.6.8 -> v0.7.0 age confidence indirect minor
github.com/imdario/mergo v0.3.15 -> v0.3.16 age confidence indirect patch
github.com/jackc/pgservicefile 091c0ba -> 5a60cdf age confidence indirect digest
github.com/jackc/pgtype v1.14.0 -> v1.14.4 age confidence indirect patch
github.com/lib/pq v1.10.7 -> v1.10.9 age confidence indirect patch
github.com/mailru/easyjson v0.7.7 -> v0.9.1 age confidence indirect minor
github.com/onsi/ginkgo/v2 v2.22.0 -> v2.27.2 age confidence indirect minor
github.com/prometheus/client_golang v1.22.0 -> v1.23.2 age confidence require minor
github.com/prometheus/client_model v0.6.1 -> v0.6.2 age confidence indirect patch
github.com/prometheus/common v0.62.0 -> v0.67.2 age confidence indirect minor
github.com/prometheus/procfs v0.15.1 -> v0.19.2 age confidence indirect minor
github.com/shopspring/decimal v1.3.1 -> v1.4.0 age confidence indirect minor
github.com/spf13/pflag v1.0.6-0.20210604193023-d5e0c0615ace -> v1.0.10 age confidence indirect patch
github.com/stolostron/cluster-lifecycle-api 7394aeb -> 64a17b4 age confidence require digest
github.com/stretchr/testify v1.10.0 -> v1.11.1 age confidence require minor
golang.org/x/crypto v0.37.0 -> v0.43.0 age confidence indirect minor
golang.org/x/net v0.39.0 -> v0.46.0 age confidence indirect minor
golang.org/x/oauth2 v0.29.0 -> v0.33.0 age confidence indirect minor
golang.org/x/sys v0.32.0 -> v0.38.0 age confidence indirect minor
golang.org/x/term v0.31.0 -> v0.36.0 age confidence indirect minor
golang.org/x/text v0.24.0 -> v0.30.0 age confidence indirect minor
golang.org/x/time v0.11.0 -> v0.14.0 age confidence indirect minor
google.golang.org/protobuf v1.36.5 -> v1.36.10 age confidence indirect patch
k8s.io/api v0.30.4 -> v0.34.1 age confidence replace minor
k8s.io/api v0.32.2 -> v0.34.1 age confidence indirect minor
k8s.io/apimachinery v0.32.2 -> v0.34.1 age confidence require minor
k8s.io/client-go v0.30.4 -> v0.34.1 age confidence replace minor
k8s.io/client-go v0.32.2 -> v0.34.1 age confidence require minor
k8s.io/kube-openapi 32ad38e -> 589584f age confidence indirect digest
k8s.io/utils 3ea5e8c -> bc988d5 age confidence indirect digest
open-cluster-management.io/api v0.16.2-0.20250422072120-cadf714c3055 -> v0.16.2 age confidence require patch
sigs.k8s.io/json 9aa6b5e -> 2d32026 age confidence indirect digest
sigs.k8s.io/structured-merge-diff/v4 v4.4.2 -> v4.7.0 age confidence indirect minor
sigs.k8s.io/yaml v1.4.0 -> v1.6.0 age confidence indirect minor

Release Notes

doug-martin/goqu (github.com/doug-martin/goqu/v9)

v9.19.0

Compare Source

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.13.0

Compare Source

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)

v3.12.2

Compare Source

  • allow empty payloads in post,put,patch, issue #​580 ( thanks @​liggitt, Jordan Liggitt)

v3.12.1

Compare Source

  • fix misroute when dealing multiple webservice with regex (#​549) (thanks Haitao Chen)

v3.12.0

Compare Source

v3.11.3

Compare Source

  • better not have 2 tags on one commit

v3.11.2

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.1

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)
evanphx/json-patch (github.com/evanphx/json-patch)

v5.9.11+incompatible

Compare Source

v5.9.10+incompatible

Compare Source

v5.9.0+incompatible

Compare Source

v5.8.1+incompatible

Compare Source

v5.8.0+incompatible

Compare Source

v5.7.0+incompatible

Compare Source

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.0

Compare Source

v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.

v2.9.0 passed fuzz tests and is production quality. However, the new TextUnmarshaler feature will continue being fuzz tested a bit longer due to recent changes. The recent changes are limited and don't affect other parts of the codec that passed ~2 billion execs fuzzing.

What's Changed

Docs

CI

🔎 Details

Special Thanks

Many thanks to @​benluddy for adding these new features! 🎉

  • Add opt-in support for encoding.TextMarshaler and encoding.TextUnmarshaler to encode and decode from CBOR text string.
  • Add opt-in support for json.Marshaler and json.Unmarshaler via user-provided transcoding function.

New Contributors

Full Changelog: fxamacker/cbor@v2.8.0...v2.9.0

v2.8.0

Compare Source

v2.8.0 adds omitzero struct tag option, fixes and deprecates 3 functions, and bumps requirements to go 1.20+.

Many thanks to @​liggitt for contributing the omitzero support!

The "omitzero" option omits zero values from encoding, matching stdlib encoding/json behavior.
When specified in the cbor tag, the option is always honored.
When specified in the json tag, the option is honored when building with Go 1.24+.

This release fixes 3 functions (when called directly by user apps) to use same error handling on bad input as cbor.Unmarshal():

  • RawTag.UnmarshalCBOR() (thanks @​thomas-fossati for reporting this!)
  • ByteString.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

This release also deprecates those 3 functions because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

What's Changed

Other Changes
🔍 Details

New Contributors

Full Changelog: fxamacker/cbor@v2.7.0...v2.8.0

v2.7.1

Compare Source

v2.7.1 fixes 3 functions (when called directly by user apps) to use same error handling on bad inputs as cbor.Unmarshal():

  • ByteString.UnmarshalCBOR()
  • RawTag.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

The above 3 fixed functions are deprecated because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

Before Upgrading to v2.7.1

v2.8.0 is being fuzz tested and will be released later today. It adds support for omitzero struct tag option.

v2.7.1 is the last version to support go 1.17-1.19. v2.8.0 and newer releases will require go 1.20+.

What's Changed

Special Thanks

Thanks @​thomas-fossati for reporting the bug in RawTag.UnmarshalCBOR() when it is called directly by user apps providing bad input data!

Full Changelog: fxamacker/cbor@v2.7.0...v2.7.1

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.22.1

Compare Source

v0.22.0

Compare Source

v0.21.2

Compare Source

v0.21.1

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.3

Compare Source

v0.21.2

Compare Source

v0.21.1

Compare Source

v0.21.0

Compare Source

v0.20.5

Compare Source

v0.20.4

Compare Source

v0.20.3

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

v0.25.1

Compare Source

v0.25.0

Compare Source

v0.24.1

Compare Source

v0.24.0

Compare Source

v0.23.1

Compare Source

google/gnostic-models (github.com/google/gnostic-models)

v0.7.0

Compare Source

v0.6.9

Compare Source

imdario/mergo (github.com/imdario/mergo)

v0.3.16: Announcement: v1.0.0 will be released on June 18th

Compare Source

This release doesn't contain code changes.

After 10 years, with many corner cases covered, very few issues pending (at least, comparing them with the usage of the library as part of Docker, Kubernetes, Datadog's agent, etc.), and a very stable API, I think it's time to release a 1.0.0 version.

This version will be released under a vanity URL: dario.cat/mergo

PS: although I'll make sure that github.com/imdario/mergo will be available, I'm going to also change my GitHub handle, so expect for a few minutes to not be able to pull from github.com/imdario as I fork it from the new handle to the old one.

PS2: I'm creating a discussion for this release to make sure we can have a conversation around the topic, and anything else about Mergo that you care about.

jackc/pgtype (github.com/jackc/pgtype)

v1.14.4

Compare Source

v1.14.3

Compare Source

v1.14.2

Compare Source

v1.14.1

Compare Source

lib/pq (github.com/lib/pq)

v1.10.9

Compare Source

  • Fixes backwards incompat bug with 1.13.
  • Fixes pgpass issue

v1.10.8

Compare Source

mailru/easyjson (github.com/mailru/easyjson)

v0.9.1

Compare Source

What's Changed

New Contributors

Full Changelog: mailru/easyjson@v0.9.0...v0.9.1

v0.9.0

Compare Source

up go version and bugfixes

v0.8.0

Compare Source

stable version before go version bump

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.27.2

Compare Source

2.27.2

Fixes
  • inline automaxprocs to simplify dependencies; this will be removed when Go 1.26 comes out [a69113a]
Maintenance
  • Fix syntax errors and typo [a99c6e0]
  • Fix paragraph position error [f993df5]

v2.27.1

Compare Source

2.27.1

Fixes
  • Fix Ginkgo Reporter slice-bounds panic [606c1cb]
  • Bug Fix: Add GinkoTBWrapper.Attr() and GinkoTBWrapper.Output() [a6463b3]

v2.27.0

Compare Source

2.27.0

Features
Transforming Nodes during Tree Construction

This release adds support for NodeArgsTransformers that can be registered with AddTreeConstructionNodeArgsTransformer.

These are called during the tree construction phase as nodes are constructed and can modify the node strings and decorators. This enables frameworks built on top of Ginkgo to modify Ginkgo nodes and enforce conventions.

Learn more here.

Spec Prioritization

A new SpecPriority(int) decorator has been added. Ginkgo will honor priority when ordering specs, ensuring that higher priority specs start running before lower priority specs

Learn more here.

Maintenance
  • Bump rexml from 3.4.0 to 3.4.2 in /docs (#​1595) [1333dae]
  • Bump github.com/gkampitakis/go-snaps from 0.5.14 to 0.5.15 (#​1600) [17ae63e]

v2.26.0

Compare Source

2.26.0

Features

Ginkgo can now generate json-formatted reports that are compatible with the go test json format. Use ginkgo --gojson-report=report.go.json. This is not intended to be a replacement for Ginkgo's native json format which is more information rich and better models Ginkgo's test structure semantics.

v2.25.3

Compare Source

2.25.3

Fixes
  • emit --github-output group only for progress report itself [f01aed1]

v2.25.2

Compare Source

2.25.2

Fixes

Add github output group for progress report content

Maintenance

Bump Gomega

v2.25.1

Compare Source

2.25.1

Fixes
  • fix(types): ignore nameless nodes on FullText() [10866d3]
  • chore: fix some CodeQL warnings [2e42cff]

v2.25.0

Compare Source

2.25.0

AroundNode

This release introduces a new decorator to support more complex spec setup usecases.

AroundNode registers a function that runs before each individual node. This is considered a more advanced decorator.

Please read the docs for more information and some examples.

Allowed signatures:

  • AroundNode(func()) - func will be called before the node is run.
  • AroundNode(func(ctx context.Context) context.Context) - func can wrap the passed in context and return a new one which will be passed on to the node.
  • AroundNode(func(ctx context.Context, body func(ctx context.Context))) - ctx is the context for the node and body is a function that must be called to run the node. This gives you complete control over what runs before and after the node.

Multiple AroundNode decorators can be applied to a single node and they will run in the order they are applied.

Unlike setup nodes like BeforeEach and DeferCleanup, AroundNode is guaranteed to run in the same goroutine as the decorated node. This is necessary when working with lower-level libraries that must run on a single thread (you can call runtime.LockOSThread() in the AroundNode to ensure that the node runs on a single thread).

Since AroundNode allows you to modify the context you can also use AroundNode to implement shared setup that attaches values to the context.

If applied to a container, AroundNode will run before every node in the container. Including setup nodes like BeforeEach and DeferCleanup.

AroundNode can also be applied to RunSpecs to run before every node in the suite. This opens up new mechanisms for instrumenting individual nodes across an entire suite.

v2.24.0

Compare Source

2.24.0

Features

Specs can now be decorated with (e.g.) SemVerConstraint("2.1.0") and ginkgo --sem-ver-filter="2.1.1" will only run constrained specs that match the requested version. Learn more in the docs here! Thanks to @​Icarus9913 for the


Configuration

📅 Schedule: Branch creation - "before 8am on Tuesday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
Copy link
Contributor Author

red-hat-konflux bot commented Nov 4, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee

@openshift-ci
Copy link

openshift-ci bot commented Nov 4, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign dislbenn for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-2.15/go.mod-packages branch from 3ae8821 to b41fdb3 Compare November 11, 2025 08:26
@sonarqubecloud
Copy link

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-2.15/go.mod-packages branch from b41fdb3 to e42b836 Compare November 11, 2025 12:27
@openshift-ci
Copy link

openshift-ci bot commented Nov 11, 2025

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/sonar-pre-submit e42b836 link true /test sonar-pre-submit
ci/prow/test-unit e42b836 link true /test test-unit

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@red-hat-konflux red-hat-konflux bot changed the title Update go.mod packages Update go.mod packages - abandoned Nov 11, 2025
@red-hat-konflux
Copy link
Contributor Author

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@smcavey smcavey closed this Nov 12, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant