chore(deps): update google.golang.org/genproto/googleapis/api digest to 925bb5d

[red-hat-konflux]

This PR contains the following updates:

Package	Type	Update	Change
google.golang.org/genproto/googleapis/api	indirect	digest	31a09d3 → 925bb5d

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 18 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.21 -> 1.25.0
golang.org/x/tools	v0.21.0 -> v0.39.0
cloud.google.com/go/compute/metadata	v0.2.3 -> v0.9.0
github.com/cespare/xxhash/v2	v2.2.0 -> v2.3.0
github.com/google/go-cmp	v0.6.0 -> v0.7.0
go.opentelemetry.io/otel	v1.23.0 -> v1.39.0
go.opentelemetry.io/otel/metric	v1.23.0 -> v1.39.0
go.opentelemetry.io/otel/trace	v1.23.0 -> v1.39.0
golang.org/x/crypto	v0.23.0 -> v0.46.0
golang.org/x/mod	v0.17.0 -> v0.30.0
golang.org/x/net	v0.25.0 -> v0.48.0
golang.org/x/oauth2	v0.17.0 -> v0.34.0
golang.org/x/sync	v0.7.0 -> v0.19.0
golang.org/x/sys	v0.29.0 -> v0.39.0
golang.org/x/term	v0.20.0 -> v0.38.0
golang.org/x/text	v0.15.0 -> v0.32.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20240205150955-31a09d347014 -> v0.0.0-20260401001100-f93e5f3e9f0f
google.golang.org/grpc	v1.61.0 -> v1.79.3
google.golang.org/protobuf	v1.33.0 -> v1.36.11

[snyk-io]

⛔ Snyk checks have failed. 8 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (8)
⛔	Open Source Security	0	8	0	0	8 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

[red-hat-konflux]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 18 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23.0 -> 1.25.0
golang.org/x/tools	v0.30.0 -> v0.39.0
cloud.google.com/go/compute/metadata	v0.2.3 -> v0.9.0
github.com/cespare/xxhash/v2	v2.2.0 -> v2.3.0
github.com/google/go-cmp	v0.6.0 -> v0.7.0
go.opentelemetry.io/otel	v1.23.0 -> v1.39.0
go.opentelemetry.io/otel/metric	v1.23.0 -> v1.39.0
go.opentelemetry.io/otel/trace	v1.23.0 -> v1.39.0
golang.org/x/crypto	v0.33.0 -> v0.46.0
golang.org/x/mod	v0.23.0 -> v0.30.0
golang.org/x/net	v0.35.0 -> v0.48.0
golang.org/x/oauth2	v0.17.0 -> v0.34.0
golang.org/x/sync	v0.11.0 -> v0.19.0
golang.org/x/sys	v0.30.0 -> v0.39.0
golang.org/x/term	v0.29.0 -> v0.38.0
golang.org/x/text	v0.22.0 -> v0.32.0
google.golang.org/genproto/googleapis/rpc	v0.0.0-20240205150955-31a09d347014 -> v0.0.0-20260622175928-b703f567277d
google.golang.org/grpc	v1.61.0 -> v1.79.3
google.golang.org/protobuf	v1.33.0 -> v1.36.11

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 9:49 PM UTC · Completed 10:00 PM UTC
Commit: ec21706 · View workflow run →

[fullsend-ai-review]

Looks good to me

Previous run

Review

Findings

Critical

• [api-contract] go.mod:3 — The PR bumps the go directive from 1.22.0 to 1.25.0, but all CI workflows hardcode Go 1.22: test.yml (go-version: [1.22.x]), lint.yml (go-version: '1.22'), pre-commit.yml (go-version: '1.22'), release.yml (goversion: '1.22'), and slack-message.yml (container: golang:1.22 + go-version: '1.22'). Go 1.22 cannot build a module that declares go 1.25. This will cause go build and go test to fail in CI.
  Remediation: Either (a) update all CI workflow files to use Go 1.25+, OR (b) do not bump the go directive to 1.25.0 and keep it at 1.22.0.

• [build-breakage] Dockerfile:1 — The Dockerfile uses registry.access.redhat.com/ubi9/go-toolset:9.8-1780373831 which ships Go 1.22.x. With go.mod declaring go 1.25, the Docker build will fail because the toolchain version is older than what go.mod requires. This breaks the container image build, which is the primary delivery mechanism for this project.
  Remediation: Update the Dockerfile builder image to one that ships Go 1.25+, or use a different base image.

High

• [scope-creep] go.mod — PR title claims "update google.golang.org/genproto/googleapis/api digest to b703f56" but bundles: (1) Go 1.22.0 → 1.25.0 language version bump, (2) golang.org/x/tools v0.30.0 → v0.39.0 direct dependency bump, (3) grpc v1.61.0 → v1.79.3, (4) protobuf v1.33.0 → v1.36.11, and dozens of indirect dependency updates. The Go version bump is genuinely out of scope for a digest update, even accounting for automated dependency resolution cascades.
  Remediation: Split into separate PRs: (1) Go 1.25 upgrade with coordinated CI/Dockerfile/docs updates, (2) remaining dependency updates. Or update the PR description to accurately reflect the scope.

Medium

• [missing-authorization] go.mod:3 — A 3-minor-version Go language upgrade (1.22 → 1.25) is architecturally significant and should be explicitly authorized. This automated bot PR has no linked issue covering the Go version bump.
  Remediation: Create or link an issue explicitly authorizing the Go 1.25 upgrade.

---

Labels: Automated dependency update PR modifying go.mod and go.sum.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 9:27 PM UTC · Completed 9:31 PM UTC
Commit: ec21706 · View workflow run →