chore(deps): update module golang.org/x/net to v0.58.0

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
golang.org/x/net	v0.56.0 → v0.58.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 4 additional dependencies were updated

Details:

Package	Change
golang.org/x/term	v0.44.0 -> v0.45.0
golang.org/x/text	v0.38.0 -> v0.41.0
github.com/prometheus/client_model	v0.6.2 -> v0.6.2
golang.org/x/sys	v0.46.0 -> v0.47.0

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 9:25 PM UTC · Completed 9:28 PM UTC
Commit: 58b0710 · View workflow run →

[fullsend-ai-review]

Looks good to me

Previous run

Looks good to me

Previous run (2)

Review — approve

PR: #1231 — chore(deps): update module golang.org/x/net to v0.57.0
Author: red-hat-konflux[bot]
Scope: go.mod, go.sum (2 files, 20+/20−)

Summary

Routine automated dependency update bumping golang.org/x/net from v0.56.0 to v0.57.0. This is an official Go sub-repository maintained by the Go team.

Changes reviewed

Area	Verdict
Primary update	golang.org/x/net v0.56.0 → v0.57.0 ✅
Transitive bumps	x/mod, x/sync, x/sys, x/term, x/text, x/tools — all consistent ✅
go.mod structure	k8s.io/apimachinery promoted from indirect to direct (correctly reflects actual imports in exporters/kaexporter/collector.go) ✅
go.mod structure	gopkg.in/yaml.v3 // indirect annotation removed (correctly reflects actual imports in exporters/kaexporter/config.go) ✅

Dimension results

Dimension	Result
Correctness	No findings — version bumps and structural changes are consistent with the import graph
Security	No findings — no secrets, injection patterns, or permission changes
Intent & coherence	Mechanical dependency update; scope authorization is implicit
Style & conventions	No findings — early exit (mechanical change)
Documentation currency	No documentation made stale by this PR
Cross-repo contracts	Skipped — no exported interfaces or API surfaces modified

No blocking findings. Safe to merge.

Previous run (3)

Review — Approve ✅

PR: #1231 — Update module golang.org/x/net to v0.57.0
Author: red-hat-konflux[bot] (MintMaker/Renovate)
Scope: go.mod, go.sum (+19/−19)

Summary

Routine automated dependency version bump. All changes are mechanical version number updates in Go module files:

Package	Change
golang.org/x/net	v0.56.0 → v0.57.0 (primary)
golang.org/x/sys	v0.46.0 → v0.47.0
golang.org/x/term	v0.44.0 → v0.45.0
golang.org/x/text	v0.38.0 → v0.40.0
golang.org/x/mod	v0.36.0 → v0.37.0 (go.sum)
golang.org/x/sync	v0.21.0 → v0.22.0 (go.sum)
golang.org/x/tools	v0.45.0 → v0.47.0 (go.sum)

Additionally, k8s.io/apimachinery v0.35.3 was correctly promoted from // indirect to a direct dependency — it is directly imported in exporters/kaexporter/collector.go.

Dimensions reviewed

Dimension	Result
Correctness	✅ No issues — versions consistent, apimachinery promotion verified
Security	✅ No concerns — routine stdlib extension bumps, no secrets or permission changes
Intent & coherence	✅ Mechanical change — authorization implicit from bot-generated dependency update
Style & conventions	✅ No findings — values follow surrounding patterns
Documentation currency	✅ No impact — no behavioral or API changes
Cross-repo contracts	⏭ Skipped — no exported interfaces modified

No findings above the reporting threshold.

Previous run (4)

Review — ✅ Approve

PR: #1231 — Update module golang.org/x/net to v0.57.0
Author: red-hat-konflux[bot] (MintMaker/Renovate)

Summary

Routine minor-version dependency update. Only go.mod and go.sum are changed — no source code modifications.

Changes verified

Package	From	To	Type
golang.org/x/net	v0.56.0	v0.57.0	primary
golang.org/x/term	v0.44.0	v0.45.0	transitive
golang.org/x/text	v0.38.0	v0.40.0	transitive
golang.org/x/sys	v0.46.0	v0.47.0	transitive
golang.org/x/mod	v0.36.0	v0.37.0	transitive
golang.org/x/sync	v0.21.0	v0.22.0	transitive
golang.org/x/tools	v0.45.0	v0.47.0	transitive

All updates are minor version bumps within Go's golang.org/x/* module family, which follow Go's compatibility promise.

k8s.io/apimachinery promotion: The PR moves k8s.io/apimachinery v0.35.3 from // indirect to the direct dependency block. This is correct — the package is directly imported in exporters/kaexporter/collector.go (metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"). This is likely a result of go mod tidy running as part of the dependency update and is a welcome fix.

Correctness

• Version bumps are consistent across the golang.org/x/* module family
• go.sum hashes match the declared versions
• No source code changes — behavioral impact limited to transitive dependency behavior

Security

• No new dependencies introduced
• Minor version bumps in well-maintained Go standard library extensions
• No known security advisories addressed or introduced by these specific version changes

No findings

This is a clean, automated dependency update with no concerns.

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:40 PM UTC · Completed 1:45 PM UTC
Commit: 58b0710 · View workflow run →

[fullsend-ai-review]

🤖 Review · ❌ Terminated · Started 1:38 PM UTC · Ended 1:44 PM UTC
Commit: 58b0710 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 6:05 PM UTC · Completed 6:12 PM UTC
Commit: 58b0710 · View workflow run →

[fullsend-ai-review]

🤖 Finished Review · ✅ Success · Started 1:35 AM UTC · Completed 1:44 AM UTC
Commit: 58b0710 · View workflow run →