fix(deps): update go patch dependencies by red-hat-konflux[bot] · Pull Request #27 · konflux-ci/konflux-build-cli

red-hat-konflux · 2026-01-13T17:29:40Z

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/containerd/platforms	`v1.0.0-rc.2` → `v1.0.0-rc.4`
github.com/fxamacker/cbor/v2	`v2.9.0` → `v2.9.1`
github.com/google/gnostic-models	`v0.7.0` → `v0.7.1`
github.com/sirupsen/logrus	`v1.9.3` → `v1.9.4`
github.com/spf13/pflag	`v1.0.9` → `v1.0.10`
go.yaml.in/yaml/v2	`v2.4.3` → `v2.4.4`
google.golang.org/protobuf	`v1.36.8` → `v1.36.11`
k8s.io/api	`v0.35.0` → `v0.35.3`
k8s.io/apimachinery	`v0.35.0` → `v0.35.3`
k8s.io/client-go	`v0.35.0` → `v0.35.3`
sigs.k8s.io/structured-merge-diff/v6	`v6.3.0` → `v6.3.2`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

containerd/platforms (github.com/containerd/platforms)

`v1.0.0-rc.4`

Compare Source

What's Changed

refactor, optimize FormatAll, ParseAll by @thaJeztah in #30
Strip the win32k when comparing windows platforms by @dmcgowan in #31
Add OnlyOS function allow matching any architecture by @dmcgowan in #33

Full Changelog: containerd/platforms@v1.0.0-rc.3...v1.0.0-rc.4

`v1.0.0-rc.3`

Compare Source

What's Changed

Update GitHub actions by @dmcgowan in #27
Add support for OS Features in the format by @dmcgowan in #16
Match and Compare platforms with OSFeatures by @dmcgowan in #20
Add encoding to os version and features by @dmcgowan in #28

Full Changelog: containerd/platforms@v1.0.0-rc.2...v1.0.0-rc.3

fxamacker/cbor (github.com/fxamacker/cbor/v2)

`v2.9.1`

Compare Source

This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.

🐞 Bug fixes related to the `keyasint` feature

These changes only affect Go struct fields tagged with keyasint:

[Decoding] Reject integer keys that exceed math.MaxInt64 when decoding CBOR map to a struct with keyasint field (PR #757)
[Decoding] Prevent string representation of an integer key from matching the struct field tagged by keyasint (PR #757)
[Encoding & Decoding] Deduplicate struct fields with the same normalized keyasint tag values (PR #757)

🐞 Other bug fixes and defensive checks

Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).

NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).

[Decoding] Reject decoding epoch time encoded as floats that overflow int64 (PR #753)
[Encoding] Return a cloned slice for an empty RawMessage from RawMessage.MarshalCBOR (PR #753)
[Encoding] Reject encoding nil inside indefinite-length strings (PR #750)
[Diagnostic] Accept valid U+FFFD replacement character (PR #753)

What's Changed

🆕 Add TimeMode encoding option TimeRFC3339NanoUTC by @fxamacker in #688
Use actual negative zero in tests by @makew0rld in #708
Reject encoding nil inside CBOR indefinite-length string by @fxamacker in #750
Refactor and add tests by @fxamacker in #752
Small bugfixes, defensive checks, and improvements by @fxamacker in #753
Refactor parseMapToStruct(), getDecodingStructType(), getEncodingStructType(), and field struct by @fxamacker in #754
Fix several issues related to keyasint tag option by @fxamacker in #757

CI / GitHub Actions and Docs

🔎 Details...

Bump github/codeql-action from 3.29.2 to 3.29.4 by @dependabot[bot] in #690
Bump github/codeql-action from 3.29.4 to 3.29.5 by @dependabot[bot] in #691
Bump actions/checkout from 4.2.2 to 5.0.0 by @dependabot[bot] in #696
Bump github/codeql-action from 3.29.7 to 3.29.9 by @dependabot[bot] in #697
Bump github/codeql-action from 3.29.9 to 3.29.11 by @dependabot[bot] in #700
Bump github/codeql-action from 3.29.11 to 3.30.0 by @dependabot[bot] in #702
Bump actions/setup-go from 5.5.0 to 6.0.0 by @dependabot[bot] in #703
Bump github/codeql-action from 3.30.0 to 3.30.3 by @dependabot[bot] in #706
Bump github/codeql-action from 3.30.3 to 3.30.4 by @dependabot[bot] in #710
Bump github/codeql-action from 3.30.4 to 3.30.6 by @dependabot[bot] in #712
Bump github/codeql-action from 3.30.6 to 4.30.7 by @dependabot[bot] in #713
Bump github/codeql-action from 4.30.7 to 4.30.8 by @dependabot[bot] in #716
Bump github/codeql-action from 4.30.8 to 4.30.9 by @dependabot[bot] in #718
Bump github/codeql-action from 4.30.9 to 4.31.2 by @dependabot[bot] in #720
Bump github/codeql-action from 4.31.2 to 4.31.3 by @dependabot[bot] in #721
Bump github/codeql-action from 4.31.3 to 4.31.4 by @dependabot[bot] in #724
Bump actions/setup-go from 6.0.0 to 6.1.0 by @dependabot[bot] in #725
Bump actions/checkout from 5.0.0 to 6.0.0 by @dependabot[bot] in #726
Bump github/codeql-action from 4.31.4 to 4.31.5 by @dependabot[bot] in #727
Bump github/codeql-action from 4.31.5 to 4.31.6 by @dependabot[bot] in #728
Bump actions/checkout from 6.0.0 to 6.0.1 by @dependabot[bot] in #729
Bump github/codeql-action from 4.31.6 to 4.31.8 by @dependabot[bot] in #732
Bump github/codeql-action from 4.31.8 to 4.31.9 by @dependabot[bot] in #733
Bump github/codeql-action from 4.31.9 to 4.31.10 by @dependabot[bot] in #738
Bump actions/setup-go from 6.1.0 to 6.2.0 by @dependabot[bot] in #739
Bump actions/checkout from 6.0.1 to 6.0.2 by @dependabot[bot] in #740
Bump github/codeql-action from 4.31.10 to 4.32.0 by @dependabot[bot] in #742
Bump github/codeql-action from 4.32.0 to 4.32.3 by @dependabot[bot] in #745
Bump actions/setup-go from 6.2.0 to 6.3.0 by @dependabot[bot] in #746
Bump github/codeql-action from 4.32.3 to 4.32.4 by @dependabot[bot] in #747
Bump github/codeql-action from 4.32.4 to 4.32.6 by @dependabot[bot] in #748
Bump github/codeql-action from 4.32.6 to 4.34.0 by @dependabot[bot] in #749
Bump github/codeql-action from 4.34.0 to 4.34.1 by @dependabot[bot] in #751
Update README status section by @fxamacker in #758

New Contributors

@makew0rld made their first contributihttps://github.com/fxamacker/cbor/pull/708ll/708

Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1

google/gnostic-models (github.com/google/gnostic-models)

`v0.7.1`

Compare Source

sirupsen/logrus (github.com/sirupsen/logrus)

`v1.9.4`

Compare Source

Notable changes

go.mod: update minimum supported go version to v1.17 #1460
go.mod: bump up dependencies #1460
Touch-up godoc and add "doc" links.
README: fix links, grammar, and update examples.
Add GNU/Hurd support #1364
Add WASI wasip1 support #1388
Remove uses of deprecated ioutil package #1472
CI: update actions and golangci-lint #1459
CI: remove appveyor, add macOS #1460

Full Changelog: sirupsen/logrus@v1.9.3...v1.9.4

spf13/pflag (github.com/spf13/pflag)

`v1.0.10`

Compare Source

What's Changed

fix deprecation comment for (FlagSet.)ParseErrorsWhitelist by @thaJeztah in #447
remove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by @thaJeztah in #448

New Contributors

@thaJeztah made their first contribution in #447

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

yaml/go-yaml (go.yaml.in/yaml/v2)

`v2.4.4`

Compare Source

protocolbuffers/protobuf-go (google.golang.org/protobuf)

`v1.36.11`

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.10...v1.36.11

User-visible changes:
CL/726780: encoding/prototext: Support URL chars in type URLs in text-format.

Bug fixes:
CL/728680: internal/impl: check recursion limit in lazy decoding validation
CL/711015: reflect/protodesc: fix handling of import options in dynamic builds

Maintenance:
CL/728681: reflect/protodesc: add support for edition unstable
CL/727960: all: add EDITION_UNSTABLE support
CL/727940: types: regenerate using latest protobuf v33.2 release
CL/727140: internal/testprotos/lazy: convert .proto files to editions
CL/723440: cmd/protoc-gen-go: add missing annotations for few generated protobuf symbols.
CL/720980: internal/filedesc: remove duplicative Message.unmarshalOptions
CL/716360: internal/encoding/tag: use proto3 defaults if proto3
CL/716520: proto: un-flake TestHasExtensionNoAlloc
CL/713342: compiler/protogen: properly filter option dependencies in go-protobuf plugin.
CL/711200: proto: add test for oneofs containing messages with required fields
CL/710855: proto: add explicit test for a non-nil but empty byte slice

`v1.36.10`

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.9...v1.36.10

Bug fixes:
CL/704415: reflect/protodesc: edition-2024-specific properties should not be lost when converting FileDescriptorProto to protoreflect.FileDescriptor

Maintenance:
CL/708555: internal/race_test: add missing impl.LazyEnabled() t.Skip
CL/703295: proto: add more invalid group encoding test cases
CL/703276: internal/impl: verify lazy unmarshal on Deterministic encoding
CL/703275: internal/impl: stop using deprecated .Field in lazy_test.go
CL/702795: all: update to latest github.com/google/go-cmp

`v1.36.9`

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.8...v1.36.9

User-visible changes:
CL/699715: cmd/protoc-gen-go: add test for "import option" directive
CL/699115: internal/editionssupport: declare support for edition 2024
CL/697595: editions: Fix spelling mistake in panic message

kubernetes/api (k8s.io/api)

kubernetes/apimachinery (k8s.io/apimachinery)

`v0.35.3`

Compare Source

`v0.35.2`

Compare Source

`v0.35.1`

Compare Source

kubernetes/client-go (k8s.io/client-go)

`v0.35.3`

Compare Source

`v0.35.2`

Compare Source

`v0.35.1`

Compare Source

kubernetes-sigs/structured-merge-diff (sigs.k8s.io/structured-merge-diff/v6)

`v6.3.2`

Compare Source

`v6.3.1`

Compare Source

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

snyk-io · 2026-01-13T17:47:43Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch from 3a4c735 to f641f51 Compare January 14, 2026 01:17

red-hat-konflux bot changed the title ~~chore(deps): update go patch dependencies~~ chore(deps): update module gopkg.in/check.v1 to v1.0.0-20201130134442-10cb98267c6c Jan 14, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch from f641f51 to 0f4bc5e Compare January 14, 2026 05:19

red-hat-konflux bot changed the title ~~chore(deps): update module gopkg.in/check.v1 to v1.0.0-20201130134442-10cb98267c6c~~ chore(deps): update go patch dependencies Jan 14, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch from 0f4bc5e to c663213 Compare January 14, 2026 17:40

red-hat-konflux bot requested a review from a team as a code owner January 14, 2026 17:40

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch from c663213 to d273979 Compare January 15, 2026 13:21

red-hat-konflux bot changed the title ~~chore(deps): update go patch dependencies~~ fix(deps): update go patch dependencies Jan 15, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch 9 times, most recently from d0d30e1 to 371dc57 Compare January 23, 2026 09:13

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch 6 times, most recently from 53a80a4 to b5dc7a6 Compare January 27, 2026 01:19

red-hat-konflux bot changed the title ~~fix(deps): update go patch dependencies~~ chore(deps): update go patch dependencies Jan 27, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch from b5dc7a6 to cf17dc1 Compare January 27, 2026 05:17

red-hat-konflux bot changed the title ~~chore(deps): update go patch dependencies~~ fix(deps): update go patch dependencies Jan 27, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch 3 times, most recently from c5463de to f64f616 Compare January 28, 2026 17:33

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch 3 times, most recently from 16e3bc0 to 6d92a2d Compare February 4, 2026 17:31

red-hat-konflux bot changed the title ~~fix(deps): update go patch dependencies~~ fix(deps): update module github.com/sirupsen/logrus to v1.9.4 Feb 4, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch from 6d92a2d to 6e8cfd5 Compare February 4, 2026 21:47

red-hat-konflux bot changed the title ~~fix(deps): update module github.com/sirupsen/logrus to v1.9.4~~ fix(deps): update go patch dependencies Feb 5, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch 2 times, most recently from 82a10bd to f2770b7 Compare February 5, 2026 09:43

red-hat-konflux bot changed the title ~~fix(deps): update go patch dependencies~~ chore(deps): update go patch dependencies Feb 5, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch from f2770b7 to 27b6183 Compare February 5, 2026 13:22

red-hat-konflux bot changed the title ~~chore(deps): update go patch dependencies~~ fix(deps): update go patch dependencies Feb 5, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch from 27b6183 to dbcdbc6 Compare February 5, 2026 21:18

red-hat-konflux bot changed the title ~~fix(deps): update go patch dependencies~~ chore(deps): update go patch dependencies Feb 5, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch from dbcdbc6 to 3edcb50 Compare February 6, 2026 01:20

red-hat-konflux bot changed the title ~~chore(deps): update go patch dependencies~~ fix(deps): update go patch dependencies Feb 6, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch 8 times, most recently from 80f9ad8 to 17c04dd Compare February 12, 2026 17:31

red-hat-konflux bot changed the title ~~fix(deps): update go patch dependencies~~ chore(deps): update go patch dependencies Feb 12, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch from 17c04dd to c633727 Compare February 12, 2026 21:21

red-hat-konflux bot changed the title ~~chore(deps): update go patch dependencies~~ fix(deps): update go patch dependencies Feb 12, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-patch-dependencies branch 3 times, most recently from d628245 to a955ff2 Compare February 17, 2026 22:09

fix(deps): update go patch dependencies

ac69555

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update go patch dependencies#27

fix(deps): update go patch dependencies#27
red-hat-konflux[bot] wants to merge 1 commit intomainfrom
konflux/mintmaker/main/go-patch-dependencies

red-hat-konflux bot commented Jan 13, 2026 •

edited

Loading

Uh oh!

snyk-io bot commented Jan 13, 2026 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux bot commented Jan 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

What's Changed

🐞 Bug fixes related to the keyasint feature

🐞 Other bug fixes and defensive checks

What's Changed

CI / GitHub Actions and Docs

New Contributors

Notable changes

What's Changed

New Contributors

Configuration

Documentation

Uh oh!

snyk-io bot commented Jan 13, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux bot commented Jan 13, 2026 •

edited

Loading

🐞 Bug fixes related to the `keyasint` feature

snyk-io bot commented Jan 13, 2026 •

edited

Loading