Skip to content

fix(deps): update module go.yaml.in/yaml/v2 to v3#1462

Draft
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go.yaml.in-yaml-v2-3.x
Draft

fix(deps): update module go.yaml.in/yaml/v2 to v3#1462
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go.yaml.in-yaml-v2-3.x

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Apr 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
go.yaml.in/yaml/v2 v2.4.4v3.0.4 age confidence

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

yaml/go-yaml (go.yaml.in/yaml/v2)

v3.0.4

Compare Source

v3.0.3

Compare Source

v3.0.2

Compare Source

v3.0.1

Compare Source

v3.0.0

Compare Source


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@snyk-io

snyk-io Bot commented Apr 3, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues
Code Security 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go.yaml.in-yaml-v2-3.x branch 3 times, most recently from 4a3f487 to 7de8c95 Compare April 7, 2026 15:31
@midnightercz

Copy link
Copy Markdown

/retest

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go.yaml.in-yaml-v2-3.x branch 7 times, most recently from 17f9088 to 3f2011f Compare April 10, 2026 16:09
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module go.yaml.in/yaml/v2 to v3 chore(deps): update module go.yaml.in/yaml/v2 to v3 - autoclosed Apr 12, 2026
@red-hat-konflux red-hat-konflux Bot closed this Apr 12, 2026
@red-hat-konflux red-hat-konflux Bot deleted the konflux/mintmaker/main/go.yaml.in-yaml-v2-3.x branch April 12, 2026 18:15
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module go.yaml.in/yaml/v2 to v3 - autoclosed chore(deps): update module go.yaml.in/yaml/v2 to v3 Apr 12, 2026
@red-hat-konflux red-hat-konflux Bot reopened this Apr 12, 2026
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go.yaml.in-yaml-v2-3.x branch 11 times, most recently from 65b7465 to a799a7e Compare April 17, 2026 10:16
fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 23, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 1:22 PM UTC · Completed 1:27 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 23, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 9:03 PM UTC · Completed 9:08 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 24, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 8:36 PM UTC · Completed 8:42 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 26, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:04 PM UTC · Completed 2:10 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 26, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 5:52 PM UTC · Completed 6:01 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 29, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 11:30 AM UTC · Completed 11:39 AM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 29, 2026

Copy link
Copy Markdown

🤖 Finished Review · ❌ Failure · Started 3:40 PM UTC · Completed 3:47 PM UTC
Commit: ec21706 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 30, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 10:51 AM UTC · Completed 10:58 AM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 30, 2026

Copy link
Copy Markdown

🤖 Finished Review · ❌ Failure · Started 4:43 PM UTC · Completed 4:50 PM UTC
Commit: ec21706 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 1, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:33 PM UTC · Completed 2:42 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-retro

fullsend-ai-retro Bot commented Jul 1, 2026

Copy link
Copy Markdown

🤖 Finished Retro · ✅ Success · Started 9:57 PM UTC · Completed 10:02 PM UTC
Commit: ec21706 · View workflow run →

@fullsend-ai-retro

Copy link
Copy Markdown

Retro: PR #1462 — Renovate bot dependency update (yaml v2→v3)

What happened: PR #1462 was a Renovate/MintMaker automated dependency update upgrading go.yaml.in/yaml/v2 to v3. The PR was open from April 3 to July 1, 2026 (~3 months), during which Renovate rebased it 119 times. The fullsend review agent ran 21+ times, all approving with at most Low/Info-severity findings. The PR was ultimately autoclosed without merging.

Key observations:

  1. Massive token waste from repeated reviews — 21 review runs on a trivial, unchanged dependency bump. Each rebase triggered a new review dispatch despite no semantic change to the diff.
  2. Non-deterministic review output — The same trivial change produced "Looks good to me" ~57% of the time and Low/Info findings ~38% of the time, with findings varying in labels, framing, and detail across runs on identical code.
  3. Unnecessary retro dispatch — This retro was triggered on an autoclosed bot-authored PR with no human engagement beyond a single /retest, which is low-value analysis work.

No new proposals filed. All identified improvement opportunities are already covered by existing open issues in fullsend-ai/fullsend:

Problem Existing Issues
Cap runaway review dispatches #2599 (per-PR review budget)
Skip re-review on rebased bot PRs #1355, #1287
Lightweight review for bot dep bumps #1358, #2639, #2842
Skip review dispatch for bot PRs #1371
Deduplicate dispatches for same SHA #1452
Prevent review self-triggering loop #1271
Non-deterministic verdicts on unchanged code #1389, #2746
Skip retro on autoclosed bot PRs #2461

This PR is strong evidence that implementing #2599 (per-PR review budget) and #1355/#1358 (bot dep-bump handling) should be prioritized — this single PR likely consumed 20x the tokens it should have.

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 2, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 1:39 AM UTC · Completed 1:46 AM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 2, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:45 PM UTC · Completed 2:54 PM UTC
Commit: ec21706 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-retro

fullsend-ai-retro Bot commented Jul 3, 2026

Copy link
Copy Markdown

🤖 Finished Retro · ✅ Success · Started 9:35 AM UTC · Completed 9:39 AM UTC
Commit: ec21706 · View workflow run →

@fullsend-ai-retro

Copy link
Copy Markdown

Retro: PR #1462 — Renovate bot dependency bump reviewed 22+ times

PR #1462 was a trivial 3-line dependency bump (go.yaml.in/yaml/v2v3) opened by red-hat-konflux[bot] on Apr 3. It sat open for 3 months, was rebased ~119 times by Renovate, and was autoclosed on Jul 3 without merging. Only one human ever interacted with it (a single /retest on Apr 8).

The review agent ran 22+ times between Jun 15 and Jul 2, all producing approvals, consuming significant tokens for zero incremental value after the first review. The retro agent also ran twice on this autoclosed bot PR.

All improvement opportunities are already tracked

Every issue identified in this workflow maps to existing open issues in fullsend-ai/fullsend:

Problem Existing Issues
Repeated reviews on rebase-only changes #1287, #1355, #1356, #963
Review deduplication for same HEAD SHA #1452, #1422, #766
Per-PR review budget / cap #2599, #2587, #902
Skip/fast-path for bot dependency PRs #1371, #1358, #2639, #2842
Non-deterministic review verdicts #2746, #1389
Skip retro on autoclosed bot PRs #2461, #1630

The previous retro run on this same PR (Jul 1) reached identical conclusions and also found no net-new proposals. No new issues are warranted. The priority should be implementing the existing proposals — particularly #2599 (per-PR review budget) and #1371 (skip review for bot PRs), which together would have prevented the vast majority of waste on this PR.

Notable meta-observation

The fullsend-ai/fullsend issue tracker has significant fragmentation: 18+ open issues on review deduplication and 15+ on retro skip conditions, many with overlapping scope. This fragmentation may itself be slowing resolution.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 4, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 1:34 AM UTC · Completed 1:41 AM UTC
Commit: ec21706 · View workflow run →

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code ready-for-merge All reviewers approved — ready to merge

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants