Skip to content

chore(deps): update go-openapi packages - #234

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-openapi
Open

chore(deps): update go-openapi packages#234
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-openapi

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jun 30, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/go-openapi/jsonpointer v0.23.1v0.24.0 age confidence
github.com/go-openapi/swag v0.26.1v0.29.1 age confidence
github.com/go-openapi/swag/cmdutils v0.26.1v0.29.1 age confidence
github.com/go-openapi/swag/conv v0.26.1v0.29.1 age confidence
github.com/go-openapi/swag/fileutils v0.26.1v0.29.1 age confidence
github.com/go-openapi/swag/jsonname v0.26.1v0.29.1 age confidence
github.com/go-openapi/swag/jsonutils v0.26.1v0.29.1 age confidence
github.com/go-openapi/swag/loading v0.26.1v0.29.1 age confidence
github.com/go-openapi/swag/mangling v0.26.1v0.29.1 age confidence
github.com/go-openapi/swag/netutils v0.26.1v0.29.1 age confidence
github.com/go-openapi/swag/stringutils v0.26.1v0.29.1 age confidence
github.com/go-openapi/swag/typeutils v0.26.1v0.29.1 age confidence
github.com/go-openapi/swag/yamlutils v0.26.1v0.29.1 age confidence

Release Notes

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.24.0

Compare Source

0.24.0 - 2026-06-29

Full Changelog: go-openapi/jsonpointer@v0.23.2...v0.24.0

17 commits in this release.


Implemented enhancements
  • feat(jsonname): added new json name provider more respectful of go conventions for JSON (#​195) by @​fredbi ...
Refactor
  • refact: refactored the package into multiple specialized sub-packages by @​fredbi ...
  • refact loading, jsonutils, yamlutils utililities by @​fredbi ...
Documentation
Code quality
Testing
Miscellaneous tasks
  • chore: removed most remaining external dependencies by @​fredbi ...
Updates
  • build(deps): bump the go-openapi-dependencies group across 15 directories with 2 updates by @​dependabot[bot] ...
  • build(deps): bump the go-openapi-dependencies group across 15 directories with 2 updates by @​dependabot[bot] ...
Other (technical)

People who contributed to this release

jsonpointer license terms

License

v0.23.2

Compare Source

0.23.2 - 2026-06-26

Full Changelog: go-openapi/jsonpointer@v0.23.1...v0.23.2

13 commits in this release.


Implemented enhancements
  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...
Documentation
Miscellaneous tasks
Updates

People who contributed to this release

jsonpointer license terms

License

go-openapi/swag (github.com/go-openapi/swag)

v0.29.1

Compare Source

0.29.1 - 2026-08-21

Full Changelog: go-openapi/swag@v0.29.0...v0.29.1

4 commits in this release.


Testing
Miscellaneous tasks
Updates

People who contributed to this release

swag license terms

License

Per-module changes

conv (0.29.1)
Miscellaneous tasks

jsonname (0.29.1)
Miscellaneous tasks

jsonutils/adapters/easyjson (0.29.1)
Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.29.1)
Miscellaneous tasks

jsonutils/adapters/testintegration (0.29.1)
Miscellaneous tasks

jsonutils (0.29.1)
Testing
Miscellaneous tasks

loading (0.29.1)
Miscellaneous tasks

mangling (0.29.1)
Miscellaneous tasks

netutils (0.29.1)
Miscellaneous tasks

pools (0.29.1)
Miscellaneous tasks

stringutils (0.29.1)
Miscellaneous tasks

typeutils (0.29.1)
Miscellaneous tasks

yamlutils (0.29.1)
Miscellaneous tasks

v0.29.0

Compare Source

0.29.0 - 2026-08-19

New fsutils on top of io.FS

Full Changelog: go-openapi/swag@v0.28.0...v0.29.0

10 commits in this release.


Implemented enhancements
Documentation
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

People who contributed to this release

swag license terms

License

Per-module changes

conv (0.29.0)
Miscellaneous tasks

fileutils (0.29.0)
Implemented enhancements

jsonname (0.29.0)
Miscellaneous tasks

jsonutils/adapters/easyjson (0.29.0)
Miscellaneous tasks
Updates

jsonutils/adapters/testintegration/benchmarks (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

jsonutils/adapters/testintegration (0.29.0)
Miscellaneous tasks
Updates

jsonutils/fixtures_test (0.29.0)
Miscellaneous tasks
Updates

jsonutils (0.29.0)
Miscellaneous tasks
Updates

loading (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

mangling (0.29.0)
Miscellaneous tasks

netutils (0.29.0)
Miscellaneous tasks

pools (0.29.0)
Miscellaneous tasks

stringutils (0.29.0)
Miscellaneous tasks

typeutils (0.29.0)
Miscellaneous tasks

yamlutils (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

v0.28.0

Compare Source

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.


Implemented enhancements
Miscellaneous tasks
Updates

People who contributed to this release

swag license terms

License

Per-module changes

conv (0.28.0)
Implemented enhancements
Miscellaneous tasks

jsonutils/adapters/easyjson (0.28.0)
Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.28.0)
Miscellaneous tasks

jsonutils/adapters/testintegration (0.28.0)
Miscellaneous tasks

jsonutils (0.28.0)
Miscellaneous tasks

loading (0.28.0)
Miscellaneous tasks

yamlutils (0.28.0)
Miscellaneous tasks

v0.27.3

Compare Source

0.27.3 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.2...v0.27.3

2 commits in this release.


Fixed bugs
Miscellaneous tasks

People who contributed to this release

swag license terms

License

Per-module changes

conv (0.27.3)
Miscellaneous tasks

jsonutils/adapters/easyjson (0.27.3)
Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.27.3)
Miscellaneous tasks

jsonutils/adapters/testintegration (0.27.3)
Miscellaneous tasks

jsonutils (0.27.3)
Miscellaneous tasks

loading (0.27.3)
Fixed bugs
Miscellaneous tasks

yamlutils (0.27.3)
Miscellaneous tasks

v0.27.2

Compare Source

0.27.2 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.1...v0.27.2

2 commits in this release.


Fixed bugs
Miscellaneous tasks

People who contributed to this release

swag license terms

License

Per-module changes

conv (0.27.2)
Miscellaneous tasks

jsonutils/adapters/easyjson (0.27.2)
Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.27.2)
Miscellaneous tasks

jsonutils/adapters/testintegration (0.27.2)
Miscellaneous tasks

jsonutils (0.27.2)
Miscellaneous tasks

loading (0.27.2)
Fixed bugs
Miscellaneous tasks

yamlutils (0.27.2)
Miscellaneous tasks

v0.27.1

Compare Source

0.27.1 - 2026-07-19

Full Changelog: go-openapi/swag@v0.27.0...v0.27.1

12 commits in this release.


Fixed bugs
  • fix(yamlutils): bound YAML anchor/alias expansion and detect cycles by @​fredbi ...
  • fix(yamlutils): bound recursion depth in YAML<->JSON transforms by @​fredbi ...
  • fix(jsonutils): bound recursion depth in ordered-JSON marshal/unmarshal by @​fredbi ...
Refactor
  • refact(adapters): refactored pools and options in json adapters. by @​fredbi ...
Documentation
Performance
Miscellaneous tasks
Updates
Other (technical)

People who contributed to this release

swag license terms

License

Per-module changes

conv (0.27.1)
Miscellaneous tasks

jsonname (0.27.1)
Updates

jsonutils/adapters/easyjson (0.27.1)
Fixed bugs
  • fix(jsonutils): bound recursion depth in ordered-JSON marshal/unmarshal by @​fredbi ...
Refactor
  • refact(adapters): refactored pools and options in json adapters. by @​fredbi ...
Miscellaneous tasks
Other (technical)

jsonutils/adapters/testintegration/benchmarks (0.27.1)
Performance
  • perf(adapters): updated benchmark by [@​fr

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
red-hat-konflux Bot requested a review from flacatus as a code owner June 30, 2026 22:05
@fullsend-ai-review

fullsend-ai-review Bot commented Jun 30, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 10:08 PM UTC · Completed 10:12 PM UTC
Commit: 01f864b · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Jun 30, 2026

Copy link
Copy Markdown

Review

Findings

Low

  • [module rename/removal staleness] go.mod:68 — The submodule github.com/go-openapi/swag/jsonname (v0.26.1) is removed and replaced by github.com/go-openapi/swag/pools (v0.27.3). This is an upstream internal refactor within the swag library. All go-openapi packages are indirect dependencies with no direct imports in this repository's Go source files, so CI (go build ./... and go test ./...) will confirm the module graph resolves cleanly.

  • [semver major bump] go.mod:61go-openapi/jsonpointer is bumped from v0.23.1 to v1.0.0 (major version change). In Go module semantics, v0 to v1 requires no import path change (no /v1 suffix needed), so this is mechanically safe. Since this package is an indirect dependency, any incompatibility would surface through CI.

Previous run

Review

Findings

Low

  • [dependency version mismatch] go.mod — The parent module github.com/go-openapi/swag remains at v0.26.1 while all its sub-modules (swag/cmdutils, swag/conv, swag/pools, etc.) are bumped to v0.27.3. This is expected behavior in Go multi-module repositories where each module is independently versioned — Go treats each module path as a separate dependency. No runtime risk; all are indirect dependencies with consistent go.sum entries.
Previous run (2)

Looks good to me

Previous run (3)

Review

Findings

Low

  • [dependency version mismatch] go.mod:61 — jsonpointer is bumped from v0.23.1 to v1.0.0. All affected packages are indirect dependencies, and go.sum was updated consistently, indicating the Go toolchain resolved a compatible dependency graph. The same import path (no /v1 suffix) means the maintainers treat this as a compatible release.
  • [subpackage swap] go.mod:67 — The indirect dependency swag/jsonname was removed and swag/pools was added, consistent with an upstream refactor in go-openapi/swag v0.27.x. The go.sum update confirms correct module graph resolution.
Previous run (4)

Looks good to me

Previous run (5)

Review

Findings

Low

  • [API contract violation] go.mod:61 — The PR body/Renovate table states jsonpointer is being updated from v0.23.1 to v0.24.0, but the actual diff bumps it to v1.0.0. While this is nominally a major version change, in Go module semantics a v0→v1 transition is the graduation from unstable to stable and does not require a new import path (only v2+ does). No code in this repository directly imports go-openapi/jsonpointer — it is purely an indirect dependency. The Go toolchain's module resolution would reject an incompatible dependency graph. The Renovate description inaccuracy is worth noting but the actual risk is minimal.
    Remediation: Confirm go build ./... and go test ./... pass (CI should cover this).

  • [API contract violation] go.mod:64 — The go-openapi/swag/jsonname sub-module (v0.26.1) has been removed and replaced by go-openapi/swag/pools (v0.27.1). This is a module substitution within the swag package family as part of the v0.26.1 to v0.27.1 upgrade. Since these are all indirect dependencies with no direct imports in this codebase, and go.sum was updated consistently, this is expected behavior from the upstream swag refactoring.

Previous run (6)

Looks good to me

Previous run (7)

Looks good to me

Previous run (8)

Review — chore(deps): update go-openapi packages

Verdict: approve

Summary

This is an automated dependency update from MintMaker (Renovate) bumping indirect go-openapi packages:

Package Change
go-openapi/jsonpointer v0.23.1 → v0.24.0
go-openapi/swag + 10 sub-modules v0.26.1 → v0.27.0

Only go.mod and go.sum are modified. No source code changes.

Analysis

Correctness — No source code in this project directly imports any go-openapi package; all 14 entries are // indirect transitive dependencies (pulled in via ArgoCD, Kubernetes, or kube-openapi libraries). The swag/jsonname sub-module was removed from go.mod because upstream deprecated it in v0.27.0 and merged the functionality into jsonpointer v0.24.0 — this is consistent with the upstream release notes and expected behavior from go mod tidy.

Security — No new dependencies are introduced. These are minor version bumps of well-established Apache-2.0 licensed packages maintained by the go-openapi organization. The upstream changelogs show refactoring, CI improvements, and a new sync.Pool utility — no security-sensitive changes.

Intent & coherence — Properly scoped automated dependency update targeting a single dependency group (go-openapi). The PR follows the project's established dependency management process via MintMaker.

Style/conventionsgo.mod formatting is consistent. All entries retain the // indirect annotation.

Documentation — No documentation impact from a dependency-only change.

Cross-repo contracts — No API, schema, or interface changes. These are internal transitive dependencies with no impact on this project's public surface.

Findings

No findings at or above the severity threshold.

Previous run (9)

Review — approve

PR: #234 — chore(deps): update go-openapi packages
Author: red-hat-konflux[bot]

Summary

Routine, bot-generated dependency version bump of indirect go-openapi packages. Changes are confined to go.mod and go.sum — no application code, tests, configs, or manifests are modified.

Packages updated:

  • go-openapi/jsonpointer: v0.23.1 → v0.24.0
  • go-openapi/swag/* (11 sub-packages): v0.26.1 → v0.27.0
  • go-openapi/testify/*: v2.5.1 → v2.6.0

All are indirect dependencies pulled in through the Kubernetes ecosystem (k8s.io/kube-openapi). The version bumps are minor-level, and all swag/* sub-packages are bumped in lockstep as expected.

Review dimensions

Dimension Result
Correctness ✅ No findings — versions are self-consistent, no hidden code changes
Security ✅ No findings — no secrets, no permission changes, legitimate sources
Intent & coherence ✅ Mechanical change — authorization implicit
Style & conventions ✅ No findings — value-only change follows existing patterns
Documentation currency ✅ No findings — no code changes to create staleness
Cross-repo contracts ⏭ Skipped — no exported interfaces modified

No findings above the severity threshold.

Previous run (10)

Looks good to me

Previous run (11)

Looks good to me

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review fullsend-ai-review Bot added the ready-for-merge All reviewers approved — ready to merge label Jun 30, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch from ae21a3f to 02c11fb Compare July 2, 2026 21:57
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go-openapi packages to v0.23.2 chore(deps): update go-openapi packages Jul 2, 2026
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 2, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 9:59 PM UTC · Completed 10:03 PM UTC
Commit: 01f864b · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge and removed ready-for-merge All reviewers approved — ready to merge labels Jul 2, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch 2 times, most recently from 0e887aa to f14a311 Compare July 8, 2026 21:23
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go-openapi packages chore(deps): update go-openapi packages to v0.27.0 Jul 12, 2026
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go-openapi packages to v0.27.0 chore(deps): update go-openapi packages Jul 12, 2026
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go-openapi packages chore(deps): update go-openapi packages to v0.27.0 Jul 12, 2026
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go-openapi packages to v0.27.0 chore(deps): update go-openapi packages Jul 13, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch 3 times, most recently from 73b9b94 to b67184d Compare July 19, 2026 21:37
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 19, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 9:38 PM UTC · Completed 9:43 PM UTC
Commit: 58b0710 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge and removed ready-for-merge All reviewers approved — ready to merge labels Jul 19, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch from b67184d to 7539d08 Compare July 20, 2026 03:10
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 20, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 3:11 AM UTC · Completed 3:15 AM UTC
Commit: 58b0710 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge and removed ready-for-merge All reviewers approved — ready to merge labels Jul 20, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch from 7539d08 to 14f9f66 Compare July 20, 2026 21:08
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch from 6ee658b to 7d410b8 Compare July 23, 2026 01:18
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 23, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 1:19 AM UTC · Completed 1:25 AM UTC
Commit: 58b0710 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch from 7d410b8 to f649a6c Compare July 23, 2026 05:36
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 23, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 5:36 AM UTC · Completed 5:45 AM UTC
Commit: 58b0710 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch from f649a6c to b812d11 Compare July 23, 2026 17:57
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 23, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 5:58 PM UTC · Completed 6:05 PM UTC
Commit: 58b0710 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go-openapi packages chore(deps): update go-openapi packages to v0.27.3 Jul 24, 2026
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go-openapi packages to v0.27.3 chore(deps): update go-openapi packages Jul 24, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch from b812d11 to 84df399 Compare July 27, 2026 09:59
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 27, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 10:00 AM UTC · Completed 10:08 AM UTC
Commit: 58b0710 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch from 84df399 to 09af4fd Compare July 27, 2026 15:48
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 27, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 3:49 PM UTC · Completed 3:57 PM UTC
Commit: 58b0710 · View workflow run →

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch 3 times, most recently from 826f5ff to 40143d9 Compare July 30, 2026 21:50
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch 4 times, most recently from 25a5929 to fa2ba10 Compare August 9, 2026 21:26
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch from fa2ba10 to b0af895 Compare August 23, 2026 02:26
@red-hat-konflux

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch 2 times, most recently from 634d617 to 54fb21e Compare August 25, 2026 08:18
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-openapi branch from 54fb21e to 635bbfd Compare August 26, 2026 03:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ready-for-merge All reviewers approved — ready to merge

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants