chore(deps): update module k8s.io/klog to v2 by red-hat-konflux[bot] · Pull Request #1706 · konflux-ci/release-service

red-hat-konflux · 2026-06-17T14:47:06Z

This PR contains the following updates:

Package	Change	Age	Confidence
k8s.io/klog	`v1.0.0` → `v2.140.0`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

kubernetes/klog (k8s.io/klog)

`v2.140.0`: Prepare klog release for Kubernetes v1.36

Compare Source

What's Changed

Add dependabot by @lucacome in #410
Use strconv.AppendQuote instead of strconv.Quote for message formatting by @astef in #413
de-duplication of key/value pairs by @pohly in #415
Fix: Ensure constant format strings in fmt and printf calls by @mikelolasagasti in #417
Remove old note on Go version requirements by @guettli in #425
test with 1.24 and 1.25 by @pohly in #428
ktesting: fix vmodule support by @pohly in #431
ktesting: support multi-line result from AnyToStringHook by @pohly in #433
textlogger: optionally turn off header by @pohly in #430
feat: fix stderrthreshold not honored when logtostderr is set (#212) + two new flags by @pierluigilenoci in #432

New Contributors

@lucacome made their first contribution in #410
@astef made their first contribution in #413
@mikelolasagasti made their first contribution in #417
@guettli made their first contribution in #425
@pierluigilenoci made their first contribution in #432

Full Changelog: kubernetes/klog@v2.130.1...v2.140.0

`v2.130.1`: Prepare klog release for Kubernetes v1.31 (Take 2)

Compare Source

What's Changed

data race: avoid unprotected access to sb.file by @pohly in #408

Full Changelog: kubernetes/klog@v2.130.0...v2.130.1

`v2.130.0`: Prepare klog release for Kubernetes v1.31 (Take 1)

Compare Source

What's Changed

chore(*): fix spelling of Intel Corporation by @jsoref in #399
build: fix some linter warnings by @pohly in #402
examples: fix linter warning by @pohly in #406
Do not acquire lock for file.Sync() fsync call by @1978629634 in #404
ktesting: tone down warning about leaked test goroutine by @pohly in #401

New Contributors

@jsoref made their first contribution in #399
@1978629634 made their first contribution in #404

Full Changelog: kubernetes/klog@v2.120.1...v2.130.0

`v2.120.1`: Prepare klog release for Kubernetes v1.30 (Take 2)

Compare Source

What's Changed

textlogger: allow caller to override stack unwinding by @pohly in #397

Full Changelog: kubernetes/klog@v2.120.0...v2.120.1

`v2.120.0`: Prepare klog release for Kubernetes v1.30 (Take 1)

Compare Source

What's Changed

OWNERS: remove serathius, add mengjiao-liu, promote pohly by @pohly in #394
docs: clarify relationship between different features by @pohly in #395
Add SafePtr wrapper by @kaisoz in #393
logr v1.4.1 + SetSlogLogger by @pohly in #396

New Contributors

@kaisoz made their first contribution in #393

Full Changelog: kubernetes/klog@v2.110.1...v2.120.0

`v2.110.1`: Prepare klog release for Kubernetes v1.29 (Take 1)

Compare Source

What's Changed

fix: SetLogger via klog.SetLogger will output an unexpected newline by @aimuz in #378
resolve comments warning by @lowang-bh in #379
stderrthreshold: fix flag comment by @pohly in #376
enable "go vet" checks for parameters by @pohly in #390
promote experimental code to stable by @pohly in #392
golangci-lint action by @pohly in #380
output: handle WithName like zapr does by @pohly in #391
slog support + logr 1.3.0 update by @pohly in #384

New Contributors

@aimuz made their first contribution in #378
@lowang-bh made their first contribution in #379

Full Changelog: kubernetes/klog@v2.100.1...v2.110.1

`v2.100.1`: Prepare klog release for Kubernetes v1.28 (Take 1)

Compare Source

What's Changed

expose logBridge via NewStandardLog() by @mikedanese in #369
add Format wrapper by @pohly in #374
JSON as fallback encoding by @pohly in #375

New Contributors

@mikedanese made their first contribution in #369

Full Changelog: kubernetes/klog@v2.90.1...v2.100.1

`v2.90.1`: Prepare klog release for Kubernetes v1.27 (Take 2)

Compare Source

What's Changed

buffer: restore dropping of too large buffers by @pohly in #366
ktesting improvements by @pohly in #365
ktesting + textlogger config api by @pohly in #368
textlogger write through by @pohly in #363

Full Changelog: kubernetes/klog@v2.90.0...v2.90.1

`v2.90.0`: Prepare klog release for Kubernetes v1.27 (Take 1)

Compare Source

What's Changed

klog: benchmark the overhead when logging is off by @pohly in #355
improve textlogger by @pohly in #362

Full Changelog: kubernetes/klog@v2.80.1...v2.90.0

There are some API differences from previous version

k8s.io/klog/v2/klogr contains incompatible changes:
 - klogger.Enabled: removed
 - klogger.Error: removed
 - klogger.Info: removed

k8s.io/klog/v2/test contains incompatible changes:
 - InitKlog: changed from func() to func(testing.TB) *flag.FlagSet

`v2.80.1`: Prepare klog release for Kubernetes v1.26 (Take 2)

Compare Source

What's Changed

InitFlags concurrency fix by @pohly in #349

Full Changelog: kubernetes/klog@v2.80.0...v2.80.1

`v2.80.0`: Prepare klog release for Kubernetes v1.26 (Take 1)

Compare Source

What's Changed

OWNERS: add harshanarayana by @pohly in #342
kvlistformat: fix the issue with display marshalled value for non string type by @harshanarayana in #344
Bump version of golang to 1.19 and drop older versions by @dims in #345

Full Changelog: kubernetes/klog@v2.70.1...v2.80.0

`v2.70.1`: Prepare klog release for Kubernetes v1.25 (Take 2)

Compare Source

What's Changed

ktesting: handle test completion by @pohly in #337
contextual logging: enable by default again by @pohly in #341

Full Changelog: kubernetes/klog@v2.70.0...v2.70.1

`v2.70.0`: Prepare klog release for Kubernetes v1.25 (Take 1)

Compare Source

What's Changed

logcheck: contextual logging + enhanced checks by @pohly in #297
hack/tools: drop dependency on golangci-lint by @pohly in #313
StopFlushDaemon: document flushing on shutdown by @pohly in #314
logcheck: fix detection of invalid * regexp in filter by @pohly in #315
README.md: clarify -logtostderr by @pohly in #319
Trim duplicates by @pohly in #324
replace KObjs with KObjSlice by @pohly in #322
support logr.Marshaler by @pohly in #325
internal: remove unused TrimDuplicates by @pohly in #326
save and restore state by @pohly in #320
GitHub: use apidiff with more recent Go by @pohly in #329
remove hack/tools by @pohly in #330
GIT-331: fix shadowing key from the kv pair by @harshanarayana in #332
klog.Fatal backtrace revert by @pohly in #328
ktesting: capture log data in memory by @pohly in #327
GIT-275: add tests for int and struct keys by @harshanarayana in #333

New Contributors

@harshanarayana made their first contribution in #332

Full Changelog: kubernetes/klog@v2.60.1...v2.70.0

`v2.60.1`: Prepare klog release for Kubernetes v1.24 (Take 6)

Compare Source

What's Changed

Cleanup OWNERS file by @serathius in #309
dependencies: avoid k8s.io/utils, fork clock code instead by @pohly in #310
promote contextual logging APIs to stable by @pohly in #311

Full Changelog: kubernetes/klog@v2.60.0...v2.60.1

`v2.60.0`: Prepare klog release for Kubernetes v1.24 (Take 5)

Compare Source

What's Changed

SetContextualLogger: remove unintentionally merged API call by @pohly in #308

Full Changelog: kubernetes/klog@v2.50.2...v2.60.0

`v2.50.2`

Compare Source

`v2.50.1`: Prepare klog release for Kubernetes v1.24 (Take 4)

Compare Source

What's Changed

SetLoggerWithOptions: support flushing by @pohly in #306

Full Changelog: kubernetes/klog@v2.50.0...v2.50.1

`v2.50.0`: Prepare klog release for Kubernetes v1.24 (Take 3)

Compare Source

What's Changed

Panic on empty info with custom logr by @jklaw90 in #283
Add missing Depth logging functions. by @s3rj1k in #280
fix typo in klog.go by @cocaccola in #270
Update README.md by @noaabarki in #281
log filter: ignored by V, used during log call by @pohly in #290
SetLogger/ClearLogger/SetLogFilter cleanup by @pohly in #289
fixes for PR #280, refactoring, textlogger, unit test by @pohly in #287
klogr verbosity by @pohly in #295
test: fix Go version matrix by @pohly in #298
handle panics in MarshalLog, Error, String by @pohly in #299
Fix goroutine leak: make flushDaemon stoppable by @katexochen in #293
structured logging: replacing Fatal/Exit/etc. without loss of flushing by @pohly in #303
contextual logging by @pohly in #296
remove side effects of tests by @pohly in #305
tests: stop testing with Go 1.14 by @pohly in #304

New Contributors

@jklaw90 made their first contribution in #283
@s3rj1k made their first contribution in #280
@cocaccola made their first contribution in #270
@noaabarki made their first contribution in #281
@katexochen made their first contribution in #293

Full Changelog: kubernetes/klog@v2.40.1...v2.50.0

`v2.40.1`: Prepare klog release for Kubernetes v1.24 (Take 2)

Compare Source

What's Changed

Using OS targeted go files to separate out the username logic. by @phillipsj in #271
Recover from nil pointers when logging by @dims in #279

New Contributors

@phillipsj made their first contribution in #271

Full Changelog: kubernetes/klog@v2.40.0...v2.40.1

`v2.40.0`: Prepare klog release for Kubernetes v1.24

Compare Source

What's Changed

structured logging: support values with line breaks by @pohly in #273
Fix klog lock release on panic error by @astraw99 in #272
add format test for KObjs by @pohly in #276
add Verbose.InfoSDepth by @pohly in #277

Known Issues

#278

New Contributors

@astraw99 made their first contribution in #272

Full Changelog: kubernetes/klog@v2.30.0...v2.40.0

`v2.30.0`: Prepare klog release for Kubernetes v1.23 (take 2)

Compare Source

What's Changed

Fix logcheck exit function by @luyou86 in #265
custom marshaler for ObjectRef by @pohly in #266

New Contributors

@luyou86 made their first contribution in #265

Full Changelog: kubernetes/klog@v2.20.0...v2.30.0

`v2.20.0`: Prepare klog release for Kubernetes v1.23

Compare Source

Changes are here : kubernetes/klog@v2.10.0...v2.20.0

since we moved to logr v1.0.0, there are incompatible changes:

- klogger.Enabled: changed from func() bool to func(int) bool
- klogger.Info: changed from func(string, ...interface{}) to func(int, string, ...interface{})
- klogger.V: removed
- klogger.WithCallDepth: changed from func(int) github.com/go-logr/logr.Logger to func(int) github.com/go-logr/logr.LogSink
- klogger.WithName: changed from func(string) github.com/go-logr/logr.Logger to func(string) github.com/go-logr/logr.LogSink
- klogger.WithValues: changed from func(...interface{}) github.com/go-logr/logr.Logger to func(...interface{}) github.com/go-logr/logr.LogSink

83653a6 Update to newest versions of golang 1.17.x
d648c2e fix file-based filtering symbolization
8ee3d65 export ClearLogger
4171f3c Switching to logr tag v1.0.0
9ab3c2b add serathius as approvers of klog

`v2.10.0`: One more change to support 1.22 release

Compare Source

Changes are here : kubernetes/klog@v2.9.0...v2.10.0

new function added:

func KObjs(arg interface{}) []ObjectRef

`v2.9.0`: Prepare release for Kubernetes v1.22

Compare Source

Changes are here : kubernetes/klog@v2.8.0...v2.9.0

6a9ef3f fix typo
59f7cb5 fix byte array display in InfoS and ErrorS
cf22f1e Call logr with call depth
e95c7e3 make SetLogger thread-safe
2728fe1 check usage of format specifier in structured log func
a18bc97 Fix by pr suggestions
4e4135c Add check for InfoS & ErrorS parameters

klog.go has new API:

+func ErrorSDepth(depth int, err error, msg string, keysAndValues ...interface{}) {
+func InfoSDepth(depth int, msg string, keysAndValues ...interface{}) {

klogr/klogr.go has new API:

func (l klogger) WithCallDepth(depth int) logr.Logger {
func NewWithOptions(options ...Option) logr.Logger {
func WithFormat(format Format) Option {

`v2.4.0`: Prepare release for Kubernetes v1.20

Compare Source

Changes are here : kubernetes/klog@v2.3.0...v2.4.0

`v2.3.0`: Fix Typo-ed Method Error -> ErrorS

Compare Source

Changes are here : kubernetes/klog@v2.2.0...v2.3.0

`v2.2.0`: Dependency update and bugfix for InfoS

Compare Source

2e691eb Fix missing fields in verbose InfoS
966c986 feat use go-logr v0.2.0

Changes are here : kubernetes/klog@v2.1.0...v2.2.0

`v2.1.0`: Better support for Structured Logging

Compare Source

We are now enforcing API compatibility, added Windows based tests, and have tweaked the structured logging methods after some real world experience updating kubernetes main repo.

bbd9ca1 Add tests for error in InfoS
1ccc0e1 fix imported bug time encode format form kvlistFormat
dd4d1a6 fix typo in README.md
49123d4 ErrorS(nil, ...) should call loggr.Error(nil, ...)
5b199cd Fix documentation for V(level)
d1eb30f Add apidiff script to check go signature changes
dc505bf Switch slack channel to #klog
a47ebb9 Add example for co-existence of klog v1 and v2
134f148 logName(): lazily lookup userName instead of on init()
db06a1b fix serialization of special html chars
5727d2a Fix Windows integration tests
edbc1d3 test(*): TestRollover failed randomly on Windows
6f99060 Add LogToStderr, a programatic way to log exclusively to stderr or not

`v2.0.0`: Release to support Kubernetes v1.19

Compare Source

Beware of type change: Verbose

New Methods:

SetLogger (override logger to set a custom implementation)
InfoS (structured logging)
ErrorS (structured logging)

Changes are here : kubernetes/klog@v2.0.0-rc.1...v2.0.0

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-06-17T14:47:08Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go mod tidy
go: finding module for package k8s.io/klog/v2/v2
go: github.com/konflux-ci/release-service/e2e-tests/cmd tested by
	github.com/konflux-ci/release-service/e2e-tests/cmd.test imports
	k8s.io/klog/v2/v2: module k8s.io/klog/v2@latest found (v2.140.0), but does not contain package k8s.io/klog/v2/v2

fullsend-ai-review · 2026-06-17T14:48:51Z

🤖 Finished Review · ✅ Success · Started 2:48 PM UTC · Completed 2:53 PM UTC
Commit: 218f229 · View workflow run →

fullsend-ai-review · 2026-06-17T14:53:29Z

Review

Findings

Medium

[API contract violation] go.mod:115 — The PR removes the k8s.io/klog v1.0.0 // indirect entry and replaces it with k8s.io/klog/v2 v2.140.0 // indirect. However, k8s.io/klog/v2 already exists as a direct dependency on line 162 of go.mod, so the replacement creates a duplicate entry. More importantly, if any transitive dependency still requires k8s.io/klog v1, removing it will cause build failures. The concern about missing go.sum changes is less significant since go.sum already contains checksums for both versions; however, running go mod tidy is still the correct way to validate the change and clean up the duplicate.
Remediation: Run go mod tidy to validate that no transitive dependency still requires k8s.io/klog v1. If go mod tidy re-adds the v1 entry, both must coexist. The tidy operation will also remove the duplicate k8s.io/klog/v2 entry.

Labels: PR is an automated dependency update for a Go module

Previous run

Looks good to me

Previous run (2)

Review

Findings

Medium

[logic-error] go.mod:115 — The PR replaces k8s.io/klog v1.0.0 // indirect with k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 already exists on line 162 as a direct dependency, creating a duplicate entry. In Go modules, k8s.io/klog (v1) and k8s.io/klog/v2 are distinct module paths — removing the v1 entry may break transitive dependencies that still require it. While Go tooling tolerates duplicate require directives and the build won't fail outright, the change is likely incomplete without running go mod tidy to validate the dependency graph.
Remediation: Run go mod tidy and commit the resulting go.mod and go.sum. If klog v1 is still required transitively, go mod tidy will re-add it. The Renovate bot should be configured to run go mod tidy as a post-update command if not already.

Previous run (3)

Review

Findings

High

[logic-error] go.mod:115 — After applying this diff, k8s.io/klog/v2 v2.140.0 would appear twice in go.mod: on line 115 (as // indirect) and on line 162 (as a direct dependency). In Go modules, k8s.io/klog (v1) and k8s.io/klog/v2 are distinct module paths, so this change replaces the v1 entry with a duplicate v2 entry rather than simply removing the v1 line. Duplicate require directives for the same module in go.mod are invalid and will cause build or tooling errors.
Remediation: Run go mod tidy to let Go resolve the dependency graph correctly. If k8s.io/klog v1 is no longer needed by any transitive dependency, go mod tidy will remove it and keep the single k8s.io/klog/v2 entry. If a transitive dependency still requires klog v1, it must remain. Do not manually edit go.mod to produce duplicate entries.

Low

[missing-artifact] go.mod:115 — The PR only modifies go.mod but does not update go.sum. The go.sum already contains hashes for k8s.io/klog/v2, so no new entries are needed, but the now-unused k8s.io/klog v1.0.0 entries should be cleaned up.
Remediation: Run go mod tidy to fix both go.mod and go.sum together.

Previous run (4)

Review

Findings

Critical

[go-module-structure] go.mod:115 — The change replaces k8s.io/klog v1.0.0 on line 115 with k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 already exists on line 162 (without the // indirect comment). This creates a duplicate module path in go.mod, which will cause Go tooling errors (e.g., go: k8s.io/klog/v2 is listed twice in go.mod).
Remediation: Remove the k8s.io/klog v1.0.0 entry on line 115 entirely rather than replacing it with k8s.io/klog/v2, since k8s.io/klog/v2 v2.140.0 already exists on line 162. If k8s.io/klog v1 is truly no longer needed, simply delete line 115. Run go mod tidy to normalize the file.

Previous run (5)

Review

Findings

Critical

[logic-error] go.mod:115 — The PR replaces k8s.io/klog v1.0.0 // indirect with k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 is already declared as a direct dependency on line 162. After this change, the same module path (k8s.io/klog/v2) appears in two separate require blocks, which the Go toolchain rejects as a duplicate require error. go build and go mod tidy will fail.
Remediation: Remove the k8s.io/klog v1.0.0 // indirect line entirely rather than replacing it with a duplicate of the existing k8s.io/klog/v2 entry. Then run go mod tidy to reconcile go.mod and go.sum. If a transitive dependency still requires k8s.io/klog v1, the original line must be kept as-is.

Low

[maintenance] go.mod:115 — go.sum retains checksum entries for k8s.io/klog v1.0.0 which would become stale if the v1 dependency is dropped. Running go mod tidy after fixing the go.mod issue would clean these up.

Previous run (6)

Review

Findings

High

[logic error] go.mod:115 — The PR replaces k8s.io/klog v1.0.0 with k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 already exists on line 162 as a direct dependency. Applying this diff will produce a duplicate require entry for k8s.io/klog/v2, which will cause go mod tidy to report an error or produce unexpected behavior. Note that k8s.io/klog (v1) and k8s.io/klog/v2 are technically different Go module paths under Go module semantics, so removing the v1 entry is valid only if no transitive dependency still requires v1.
Remediation: Remove the k8s.io/klog v1.0.0 line entirely rather than replacing it with a v2 line. Then run go mod tidy to verify the dependency graph is consistent and that no transitive dependency still requires v1.

Low

[missing artifact] go.mod — The diff only modifies go.mod but does not include corresponding go.sum changes. The go.sum file still contains checksum entries for k8s.io/klog v1.0.0.
Remediation: Run go mod tidy and include the resulting go.sum changes in the PR.

Previous run (7)

Review

Findings

High

[logic error] go.mod:115 — The PR replaces k8s.io/klog v1.0.0 with k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 already exists at line 162 as a direct (non-indirect) dependency. After this patch, go.mod will contain two require entries for the same module path k8s.io/klog/v2 — one marked // indirect and one without. Go tooling will reject or deduplicate this. Furthermore, k8s.io/klog (v1) and k8s.io/klog/v2 are distinct Go modules; if any transitive dependency still requires k8s.io/klog v1, removing the v1 entry will cause resolution failures.
Remediation: Run go mod tidy to let Go resolve the correct set of required modules. If k8s.io/klog v1 is no longer transitively needed, go mod tidy will remove it. If it is still needed, the line must remain. Do not manually replace one module path with another.

Low

[missing file change] go.sum — The PR modifies go.mod but does not include a corresponding update to go.sum. The go.sum file still contains entries for k8s.io/klog v1.0.0. Any valid dependency change in go.mod should be accompanied by a go.sum update.
Remediation: Run go mod tidy and include the resulting go.sum changes in the PR.

Labels: PR modifies Go dependency management files

Previous run (8)

Review

Findings

High

[logic-error] go.mod:115 — The diff replaces k8s.io/klog v1.0.0 (line 115) with k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 already exists on line 162 (without the // indirect comment). After applying the diff, go.mod would contain two require entries for the same module path k8s.io/klog/v2 at the same version, which is invalid. Additionally, k8s.io/klog (v1) and k8s.io/klog/v2 are distinct Go modules — if any transitive dependency still requires k8s.io/klog v1, removing it from go.mod is incorrect and go mod tidy would re-add it. This appears to be a Renovate bot misconfiguration treating the v1-to-v2 major module path change as a simple version bump.
Remediation: Do not merge this PR as-is. Run go mod graph | grep 'k8s.io/klog@' to identify which transitive dependency requires klog v1. If the goal is to drop klog v1, that transitive dependency must first be updated to a version that no longer depends on it.

Low

[missing-test] go.mod:115 — The go.sum file still contains entries for k8s.io/klog v1.0.0 but the PR does not modify go.sum. If the go.mod change were applied, stale checksum entries would remain. This is subsumed by the high-severity finding above — fixing the fundamental issue would address this as well.
Remediation: Run go mod tidy after making any go.mod changes and include the resulting go.sum changes in the PR.

Labels: PR is an automated dependency update modifying go.mod

Previous run (9)

Review

Findings

Medium

[dependency correctness] go.mod:115 — The PR replaces k8s.io/klog v1.0.0 (line 115) with k8s.io/klog/v2 v2.140.0, but k8s.io/klog/v2 v2.140.0 already exists as a direct dependency at line 162. After applying this diff, go.mod would contain two entries for the same module path (k8s.io/klog/v2), which is invalid. Additionally, since k8s.io/klog (v1) and k8s.io/klog/v2 are distinct Go modules, this is not a version bump but a module path replacement. If any transitive dependency still requires k8s.io/klog v1, removing it will cause build failures.
Remediation: Run go mod tidy to let the Go toolchain determine the correct set of dependencies. If k8s.io/klog v1 is truly no longer needed, go mod tidy will remove it; the existing k8s.io/klog/v2 entry at line 162 will remain. Do not manually replace one module path with another.

Low

[missing artifact] go.mod — The go.sum file is not updated in this PR. After modifying go.mod dependencies, go.sum should reflect the change. The current go.sum still contains k8s.io/klog v1.0.0 checksum entries that would become stale if v1 is no longer required.

Labels: PR updates a Go module dependency in go.mod.

Previous run (10)

Review

Findings

Critical

[logic-error] go.mod:115 — The diff replaces k8s.io/klog v1.0.0 (line 115, indirect) with k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 already exists as a direct dependency at line 162 in a separate require block. After the patch is applied, go.mod will contain two require directives for k8s.io/klog/v2, which the Go toolchain rejects as a duplicate requirement, breaking all builds.
Remediation: Remove the k8s.io/klog v1.0.0 line entirely rather than replacing it with klog/v2. Then run go mod tidy to let Go resolve the transitive dependency graph and confirm klog v1 is no longer needed.

Labels: Go module dependency update by renovate bot.

Previous run (11)

Review

Findings

Critical

[logic-error] go.mod:115 — The PR replaces k8s.io/klog v1.0.0 with k8s.io/klog/v2 v2.140.0, but k8s.io/klog/v2 v2.140.0 already exists at line 162 of go.mod. In Go modules, k8s.io/klog (v1) and k8s.io/klog/v2 are distinct module paths — this is not a version upgrade but a module replacement. After this change, k8s.io/klog/v2 v2.140.0 would be listed twice, creating a duplicate require directive that will cause a build error. Additionally, k8s.io/klog v1.0.0 is present in go.sum as a transitive dependency — removing it without verifying that no dependency chain still requires the v1 module path may cause resolution failures.
Remediation: Do not apply this change as-is. Run go mod tidy to let Go determine the correct set of dependencies. If k8s.io/klog v1 is genuinely no longer needed by any transitive dependency, go mod tidy will remove it automatically. The duplicate k8s.io/klog/v2 entry must not be introduced.

Previous run (12)

Review

Findings

Medium

[logic error] go.mod:115 — The diff replaces k8s.io/klog v1.0.0 // indirect with k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 already exists as a direct dependency on line 162. After this change, go.mod would contain two require directives for k8s.io/klog/v2: one marked // indirect (line 115) and one direct (line 162). While Go tooling handles duplicate require entries at the same version gracefully by deduplicating rather than erroring, the result is still a redundant entry. Additionally, removing k8s.io/klog v1 (a distinct module from k8s.io/klog/v2) may break the build if any transitive dependency still requires the v1 module. The PR also lacks go.sum updates, suggesting go mod tidy was not run.
Remediation: Run go mod tidy to let Go resolve the correct set of dependencies. This will remove the duplicate k8s.io/klog/v2 entry and either keep or remove k8s.io/klog v1 based on actual transitive requirements. It will also update go.sum.

Previous run (13)

Review

Findings

High

[logic error] go.mod:115 — After applying this diff, go.mod would contain two require entries for k8s.io/klog/v2 v2.140.0: the modified line 115 (marked // indirect) and the existing line 162 (not marked indirect). Go tooling does not permit duplicate require directives for the same module path and this will cause build failures. Additionally, k8s.io/klog (v1) and k8s.io/klog/v2 are distinct Go module paths; removing the v1 entry may break the module graph if any transitive dependency still requires k8s.io/klog v1.
Remediation: Do not manually replace the v1 entry with a v2 entry at line 115. Instead, remove the k8s.io/klog v1.0.0 // indirect line entirely (if no transitive dependency requires the v1 module path) and run go mod tidy to verify the dependency graph is consistent. If go mod tidy re-adds k8s.io/klog v1.0.0, a transitive dependency still requires it and the v1 entry must remain.

Low

[missing artifact] go.mod — The PR modifies go.mod but does not update go.sum. The go.sum file still contains checksums for k8s.io/klog v1.0.0. While stale go.sum entries are not harmful to builds, running go mod tidy would clean this up and is already required to validate the dependency graph change.
Remediation: Run go mod tidy and include the resulting go.sum changes in the PR.

Previous run (14)

Review

Findings

Critical

[logic-error] go.mod:115 — The PR changes line 115 from k8s.io/klog v1.0.0 // indirect to k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 already exists as a direct dependency at line 162. After this change, go.mod would contain two require directives for the same module path k8s.io/klog/v2, which the Go toolchain rejects with a duplicate require parse error. Note that k8s.io/klog (v1) and k8s.io/klog/v2 are distinct Go module paths per the major-version-suffix convention — replacing one with the other is not an upgrade but a module substitution. If no transitive dependency still needs k8s.io/klog v1, the line should be removed entirely; if one does, it must remain as-is.
Remediation: Do not merge as-is. Run go mod tidy to let Go resolve whether k8s.io/klog v1 is still needed as an indirect dependency. If it is no longer needed, go mod tidy will remove line 115 entirely. The existing k8s.io/klog/v2 entry at line 162 already satisfies the v2 dependency.

Previous run (15)

Review

Findings

Low

[logic-error] go.mod:115 — After this change, k8s.io/klog/v2 v2.140.0 will appear twice in go.mod: once as // indirect (line 115, replacing the old v1 entry) and once as a direct dependency (line 162). Go tooling handles duplicates gracefully so this won't break the build, but the resulting go.mod is inconsistent with what go mod tidy would produce. Additionally, go.sum still contains checksums for the removed k8s.io/klog v1.0.0 module.
Remediation: Run go mod tidy to consolidate the duplicate k8s.io/klog/v2 entries and clean up stale go.sum checksums.

Previous run (16)

Review

Findings

Medium

[logic-error] go.mod:115 — The diff replaces k8s.io/klog v1.0.0 // indirect with k8s.io/klog/v2 v2.140.0 // indirect. However, k8s.io/klog/v2 v2.140.0 already exists at line 162 as a direct dependency (without // indirect). After applying this diff, go.mod will contain two require directives for the same module path k8s.io/klog/v2 at the same version but with conflicting indirect annotations. While Go tooling handles this gracefully and go mod tidy would collapse the duplicate, the resulting go.mod is redundant. The correct change would be to simply remove the k8s.io/klog v1.0.0 line rather than replacing it with a duplicate entry.
Remediation: Remove the k8s.io/klog v1.0.0 // indirect line entirely instead of replacing it with k8s.io/klog/v2 v2.140.0 // indirect, since k8s.io/klog/v2 v2.140.0 is already present at line 162. Then run go mod tidy to ensure consistency.

Low

[stale-reference] go.sum:420 — After removing klog v1 from go.mod, go.sum retains entries for k8s.io/klog v1.0.0. These extra entries are harmless — go.sum is designed as an append-only integrity database — but running go mod tidy would clean them up as a hygiene step.

Previous run (17)

Review

Findings

High

[logic error] go.mod:115 — The diff replaces k8s.io/klog v1.0.0 // indirect with k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 already exists at line 162 (as a direct dependency). After applying this diff, go.mod would contain two require directives for the same module path k8s.io/klog/v2, which the Go toolchain rejects as invalid. Note that k8s.io/klog (v1) and k8s.io/klog/v2 are distinct Go module paths — this is not an in-place upgrade but rather the introduction of a duplicate declaration.
Remediation: Remove the k8s.io/klog v1.0.0 // indirect line entirely instead of replacing it with a klog/v2 entry. Run go mod tidy to verify the dependency graph is consistent. If a transitive dependency still requires klog v1, the line must remain as-is.

Low

[error handling gap] go.mod:115 — The go.sum file still contains checksum entries for k8s.io/klog v1.0.0. If klog v1 is removed from the dependency graph, these entries become stale. Running go mod tidy (as recommended for the high finding) would automatically resolve this.

Previous run (18)

Review

Findings

Critical

[logic-error] go.mod:115 — This change creates a duplicate require for k8s.io/klog/v2 v2.140.0 in go.mod. Line 162 already declares k8s.io/klog/v2 v2.140.0 as a direct dependency, so adding it again as indirect on line 115 will cause a Go toolchain parse error (go: errors parsing go.mod: ... duplicate require). Additionally, k8s.io/klog (v1) and k8s.io/klog/v2 are entirely different Go modules with different import paths. The go.sum file contains checksum entries for k8s.io/klog v1.0.0, confirming at least one transitive dependency requires the v1 module. Removing the v1 require without verifying that no transitive dependency needs it risks a build failure.
Remediation: Do not replace k8s.io/klog v1.0.0 with k8s.io/klog/v2. Run go mod tidy to let the Go toolchain determine whether k8s.io/klog v1 is still transitively required. If it is, the line must remain as-is. If it is not, the line should be deleted entirely rather than replaced with v2, which already has its own require directive on line 162.

Info

[authorization] go.mod:115 — Automated dependency update from renovate[bot] lacks a linked issue. The change attempts to replace k8s.io/klog v1 with k8s.io/klog/v2, which is a module path change, not a simple version bump.

Previous run (19)

Review

Findings

High

[logic-error] go.mod:115 — After applying this diff, go.mod will contain two entries for k8s.io/klog/v2 v2.140.0: one at line 115 (marked // indirect) and one at line 162 (not marked indirect). The Go toolchain does not permit duplicate module requirements. Running go mod tidy will collapse them, but the change as-is is incorrect: the correct fix is to remove the k8s.io/klog v1.0.0 line entirely (if no transitive dependency still requires it) rather than replacing it with a duplicate of an existing entry.
Remediation: Remove the k8s.io/klog v1.0.0 line entirely instead of replacing it with k8s.io/klog/v2 v2.140.0, since k8s.io/klog/v2 is already listed at line 162. Run go mod tidy to verify no transitive dependency still pulls in k8s.io/klog v1.

Low

[incomplete-change] go.mod:115 — The diff only modifies go.mod but does not update go.sum. The k8s.io/klog v1.0.0 entries remain in go.sum. This is a downstream artifact of the primary finding and will be resolved automatically when the go.mod issue is fixed via go mod tidy.
Remediation: Run go mod tidy after fixing the duplicate entry in go.mod.

Previous run (20)

Review

Findings

Medium

[api-contract] go.mod:115 — This PR replaces k8s.io/klog v1.0.0 (indirect, line 115) with k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 already exists at line 162 as a direct dependency. In Go modules, k8s.io/klog and k8s.io/klog/v2 are distinct module paths — the v1→v2 transition is not a simple version bump. The resulting go.mod would contain a duplicate entry for k8s.io/klog/v2, which is invalid and would cause go mod commands to fail.
Remediation: Run go mod tidy to resolve the dependency graph correctly. This should remove the stale k8s.io/klog v1.0.0 entry (if no transitive dependency still requires it) without duplicating k8s.io/klog/v2. Include the resulting go.mod and go.sum diffs in the PR.

Low

[api-contract] go.sum — go.sum still contains checksums for k8s.io/klog v1.0.0. If v1 is no longer required by any transitive dependency, these entries are stale and should be cleaned up by running go mod tidy.

Previous run (21)

Review

Findings

High

[logic-error] go.mod:115 — The PR replaces k8s.io/klog v1.0.0 // indirect with k8s.io/klog/v2 v2.140.0 // indirect, but k8s.io/klog/v2 v2.140.0 already exists as a direct dependency at line 162 of go.mod. This creates a duplicate require directive for the same module path, which the Go toolchain rejects as invalid. The build will fail with a "duplicate require" error.
Remediation: Remove the k8s.io/klog v1.0.0 // indirect line entirely instead of replacing it, since k8s.io/klog/v2 v2.140.0 is already declared at line 162. Run go mod tidy to verify the resulting go.mod is valid and no dependency still requires klog v1.

fullsend-ai-review · 2026-06-17T22:11:45Z

🤖 Finished Review · ✅ Success · Started 10:11 PM UTC · Completed 10:17 PM UTC
Commit: 218f229 · View workflow run →

seanconroy2021 · 2026-06-18T10:16:19Z

Go Test on Pull Requests / Check sources (pull_request)Failing after 54s

fullsend-ai-review · 2026-06-18T10:49:02Z

🤖 Finished Review · ✅ Success · Started 10:49 AM UTC · Completed 10:53 AM UTC
Commit: 218f229 · View workflow run →

fullsend-ai-review · 2026-06-18T16:13:57Z

🤖 Finished Review · ✅ Success · Started 4:13 PM UTC · Completed 4:20 PM UTC
Commit: 218f229 · View workflow run →

fullsend-ai-review · 2026-06-18T19:39:28Z

🤖 Finished Review · ✅ Success · Started 7:39 PM UTC · Completed 7:45 PM UTC
Commit: 218f229 · View workflow run →

fullsend-ai-review · 2026-06-22T10:38:32Z

🤖 Finished Review · ✅ Success · Started 10:38 AM UTC · Completed 10:44 AM UTC
Commit: 218f229 · View workflow run →

fullsend-ai-review · 2026-06-22T14:49:43Z

🤖 Finished Review · ✅ Success · Started 2:49 PM UTC · Completed 2:55 PM UTC
Commit: 7acff03 · View workflow run →

fullsend-ai-review · 2026-06-30T10:50:29Z

🤖 Finished Review · ✅ Success · Started 10:50 AM UTC · Completed 10:57 AM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review · 2026-06-30T16:42:26Z

🤖 Finished Review · ❌ Failure · Started 4:42 PM UTC · Completed 4:49 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review · 2026-07-01T14:32:41Z

🤖 Finished Review · ✅ Success · Started 2:32 PM UTC · Completed 2:39 PM UTC
Commit: ec21706 · View workflow run →

Superseded by updated review

fullsend-ai-review · 2026-07-02T01:39:11Z

🤖 Finished Review · ✅ Success · Started 1:39 AM UTC · Completed 1:44 AM UTC
Commit: ec21706 · View workflow run →

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

fullsend-ai-review · 2026-07-02T14:44:43Z

🤖 Finished Review · ✅ Success · Started 2:44 PM UTC · Completed 2:49 PM UTC
Commit: ec21706 · View workflow run →

release-service-bot assigned FilipNikolovski and seanconroy2021 Jun 17, 2026