Skip to content

Conversation

@red-hat-konflux
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Oct 22, 2025

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0 age confidence indirect minor
github.com/evanphx/json-patch v4.5.0+incompatible -> v4.13.0+incompatible age confidence indirect minor
github.com/fsnotify/fsnotify v1.7.0 -> v1.9.0 age confidence indirect minor
github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0 age confidence indirect minor
github.com/go-openapi/jsonpointer v0.19.6 -> v0.22.4 age confidence indirect minor
github.com/go-openapi/jsonreference v0.20.2 -> v0.21.4 age confidence indirect minor
github.com/go-openapi/swag v0.22.4 -> v0.25.4 age confidence indirect minor
github.com/google/cel-go v0.20.1 -> v0.26.1 age confidence indirect minor
github.com/google/gnostic-models v0.6.8 -> v0.7.1 age confidence indirect minor
github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.27.3 age confidence indirect minor
github.com/mailru/easyjson v0.7.7 -> v0.9.1 age confidence indirect minor
github.com/onsi/ginkgo/v2 v2.26.0 -> v2.27.3 age confidence require minor
github.com/prometheus/client_golang v1.19.1 -> v1.23.2 age confidence require minor
github.com/prometheus/common v0.55.0 -> v0.67.4 age confidence indirect minor
github.com/prometheus/procfs v0.15.1 -> v0.19.2 age confidence indirect minor
github.com/spf13/cobra v1.8.1 -> v1.10.2 age confidence indirect minor
github.com/stoewer/go-strcase v1.2.0 -> v1.3.1 age confidence indirect minor
go (source) 1.24.6 -> 1.25.5 age confidence toolchain minor
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1 age confidence indirect minor
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.53.0 -> v0.64.0 age confidence indirect minor
go.opentelemetry.io/otel v1.34.0 -> v1.39.0 age confidence indirect minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0 -> v1.39.0 age confidence indirect minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.27.0 -> v1.39.0 age confidence indirect minor
go.opentelemetry.io/otel/metric v1.34.0 -> v1.39.0 age confidence indirect minor
go.opentelemetry.io/otel/sdk v1.34.0 -> v1.39.0 age confidence indirect minor
go.opentelemetry.io/otel/trace v1.34.0 -> v1.39.0 age confidence indirect minor
go.opentelemetry.io/proto/otlp v1.3.1 -> v1.9.0 age confidence indirect minor
golang.org/x/mod v0.27.0 -> v0.31.0 age confidence indirect minor
golang.org/x/net v0.43.0 -> v0.48.0 age confidence indirect minor
golang.org/x/oauth2 v0.25.0 -> v0.34.0 age confidence indirect minor
golang.org/x/sync v0.16.0 -> v0.19.0 age confidence indirect minor
golang.org/x/sys v0.35.0 -> v0.39.0 age confidence indirect minor
golang.org/x/term v0.34.0 -> v0.38.0 age confidence indirect minor
golang.org/x/text v0.28.0 -> v0.32.0 age confidence indirect minor
golang.org/x/time v0.3.0 -> v0.14.0 age confidence indirect minor
golang.org/x/tools v0.36.0 -> v0.40.0 age confidence indirect minor
gomodules.xyz/jsonpatch/v2 v2.4.0 -> v2.5.0 age confidence indirect minor
google.golang.org/grpc v1.71.0 -> v1.78.0 age confidence indirect minor
k8s.io/api v0.31.0 -> v0.35.0 age confidence require minor
k8s.io/apiextensions-apiserver v0.31.0 -> v0.35.0 age confidence indirect minor
k8s.io/apimachinery v0.31.0 -> v0.35.0 age confidence require minor
k8s.io/apiserver v0.31.0 -> v0.35.0 age confidence indirect minor
k8s.io/client-go v0.31.0 -> v0.35.0 age confidence require minor
k8s.io/component-base v0.31.0 -> v0.35.0 age confidence indirect minor
sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.30.3 -> v0.34.0 age confidence indirect minor
sigs.k8s.io/controller-runtime v0.19.0 -> v0.22.4 age confidence require minor
sigs.k8s.io/structured-merge-diff/v4 v4.4.1 -> v4.7.0 age confidence indirect minor
sigs.k8s.io/yaml v1.4.0 -> v1.6.0 age confidence indirect minor

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.13.0

Compare Source

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)

v3.12.2

Compare Source

  • allow empty payloads in post,put,patch, issue #​580 ( thanks @​liggitt, Jordan Liggitt)

v3.12.1

Compare Source

  • fix misroute when dealing multiple webservice with regex (#​549) (thanks Haitao Chen)

v3.12.0

Compare Source

v3.11.3

Compare Source

  • better not have 2 tags on one commit

v3.11.2

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.1

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)
evanphx/json-patch (github.com/evanphx/json-patch)

v4.13.0+incompatible

Compare Source

v4.12.0+incompatible

Compare Source

v4.11.0+incompatible

Compare Source

v4.9.0+incompatible

Compare Source

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.9.0

Compare Source

Changes and fixes
  • all: make BufferedWatcher buffered again (#​657)

  • inotify: fix race when adding/removing watches while a watched path is being deleted (#​678, #​686)

  • inotify: don't send empty event if a watched path is unmounted (#​655)

  • inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#​679)

  • kqueue: fix watching relative symlinks (#​681)

  • kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#​682)

  • illumos: don't send error if changed file is deleted while processing the event (#​678)

v1.8.0

Compare Source

Additions

  • all: add FSNOTIFY_DEBUG to print debug logs to stderr (#​619)
Changes and fixes
  • windows: fix behaviour of WatchList() to be consistent with other platforms (#​610)

  • kqueue: ignore events with Ident=0 (#​590)

  • kqueue: set O_CLOEXEC to prevent passing file descriptors to children (#​617)

  • kqueue: emit events as "/path/dir/file" instead of "path/link/file" when watching a symlink (#​625)

  • inotify: don't send event for IN_DELETE_SELF when also watching the parent (#​620)

  • inotify: fix panic when calling Remove() in a goroutine (#​650)

  • fen: allow watching subdirectories of watched directories (#​621)

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.0

Compare Source

v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.

v2.9.0 passed fuzz tests and is production quality. However, the new TextUnmarshaler feature will continue being fuzz tested a bit longer due to recent changes. The recent changes are limited and don't affect other parts of the codec that passed ~2 billion execs fuzzing.

What's Changed

Docs

CI

🔎 Details

Special Thanks

Many thanks to @​benluddy for adding these new features! 🎉

  • Add opt-in support for encoding.TextMarshaler and encoding.TextUnmarshaler to encode and decode from CBOR text string.
  • Add opt-in support for json.Marshaler and json.Unmarshaler via user-provided transcoding function.

New Contributors

Full Changelog: fxamacker/cbor@v2.8.0...v2.9.0

v2.8.0

Compare Source

v2.8.0 adds omitzero struct tag option, fixes and deprecates 3 functions, and bumps requirements to go 1.20+.

Many thanks to @​liggitt for contributing the omitzero support!

The "omitzero" option omits zero values from encoding, matching stdlib encoding/json behavior.
When specified in the cbor tag, the option is always honored.
When specified in the json tag, the option is honored when building with Go 1.24+.

This release fixes 3 functions (when called directly by user apps) to use same error handling on bad input as cbor.Unmarshal():

  • RawTag.UnmarshalCBOR() (thanks @​thomas-fossati for reporting this!)
  • ByteString.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

This release also deprecates those 3 functions because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

What's Changed

Other Changes
🔍 Details

New Contributors

Full Changelog: fxamacker/cbor@v2.7.0...v2.8.0

v2.7.1

Compare Source

v2.7.1 fixes 3 functions (when called directly by user apps) to use same error handling on bad inputs as cbor.Unmarshal():

  • ByteString.UnmarshalCBOR()
  • RawTag.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

The above 3 fixed functions are deprecated because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

Before Upgrading to v2.7.1

v2.8.0 is being fuzz tested and will be released later today. It adds support for omitzero struct tag option.

v2.7.1 is the last version to support go 1.17-1.19. v2.8.0 and newer releases will require go 1.20+.

What's Changed

Special Thanks

Thanks @​thomas-fossati for reporting the bug in RawTag.UnmarshalCBOR() when it is called directly by user apps providing bad input data!

Full Changelog: fxamacker/cbor@v2.7.0...v2.7.1

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.22.4

Compare Source

0.22.4 - 2025-12-06

Full Changelog: go-openapi/jsonpointer@v0.22.3...v0.22.4

1 commits in this release.


Miscellaneous tasks

People who contributed to this release

jsonpointer license terms

License

v0.22.3

Compare Source

0.22.3 - 2025-11-17

Full Changelog: go-openapi/jsonpointer@v0.22.2...v0.22.3

8 commits in this release.


Documentation
Code quality
Miscellaneous tasks

People who contributed to this release

New Contributors

jsonpointer license terms

License

v0.22.2

Compare Source

0.22.2 - 2025-11-14

Full Changelog: go-openapi/jsonpointer@v0.22.1...v0.22.2

12 commits in this release.


Documentation
Code quality
Testing
Miscellaneous tasks
Security
Updates

People who contributed to this release

jsonpointer license terms

License

v0.22.1

Compare Source

v0.22.0

Compare Source

v0.21.2

Compare Source

v0.21.1

Compare Source

v0.21.0

Compare Source

v0.20.3

Compare Source

v0.20.2

Compare Source

[v0.20.1](https://redire


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux bot requested a review from a team as a code owner October 22, 2025 08:40
@red-hat-konflux
Copy link
Contributor Author

red-hat-konflux bot commented Oct 22, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated

Details:

Package Change
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
golang.org/x/exp v0.0.0-20240506185415-9bf2ced13842 -> v0.0.0-20240719175910-8a7402abbf56
google.golang.org/genproto/googleapis/api v0.0.0-20251014184007-4626949a642f -> v0.0.0-20251202230838-ff82c1b0f217
google.golang.org/genproto/googleapis/rpc v0.0.0-20251007200510-49b9836ed3ff -> v0.0.0-20251202230838-ff82c1b0f217
k8s.io/kube-openapi v0.0.0-20240228011516-70dd3763d340 -> v0.0.0-20250910181357-589584f1c912
k8s.io/utils v0.0.0-20240711033017-18e509b52bc8 -> v0.0.0-20251002143259-bc988d571ff4
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd -> v0.0.0-20250730193827-2d320260d730

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-minor-dependencies branch 25 times, most recently from 14268f2 to 3df7904 Compare October 28, 2025 20:28
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-minor-dependencies branch 3 times, most recently from 1116c33 to 6e6ec19 Compare October 30, 2025 16:33
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-minor-dependencies branch 28 times, most recently from 773f597 to 03df237 Compare December 25, 2025 21:29
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-minor-dependencies branch from 03df237 to f2dc17c Compare December 26, 2025 05:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant