chore: bump deps

[sergelogvinov]

Updated dependencies

Pull Request

What? (description)

Why? (reasoning)

Acceptance

Please use the following checklist:

• you linked an issue (if applicable)
• you included tests (if applicable)
• you linted your code (make lint)
• you linted your code (make unit)

See make help for a description of the available targets.

Summary by CodeRabbit

Release Notes

• Chores
  • Updated Go toolchain to version 1.25.5 and refreshed builder image accordingly.
  • Synchronized and upgraded multiple dependencies to their latest compatible versions for improved stability.
  • Cleaned up linting configuration by removing unused import alias entries.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

[coderabbitai]

Walkthrough

This pull request updates the Go toolchain version from 1.25.4 to 1.25.5 across the Dockerfile and go.mod files. The go.mod file is updated with multiple dependency version bumps, including Kubernetes modules (k8s.io) to v0.34.3, go-proxmox libraries, golang.org packages, and various indirect dependencies. Additionally, a single import alias entry (proxmoxapi) is removed from the golangci.yml configuration.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

Possibly related PRs

• chore: bump deps #260: Both PRs coordinate updates to go.mod dependencies, including synchronized Kubernetes module version bumps to v0.34.3 and other shared dependency upgrades.

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title 'chore: bump deps' accurately reflects the main purpose of the pull request, which updates dependencies across Go modules, Dockerfile base image, and linter configuration.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch deps

---

📜 Recent review details

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 71174a0 and c0f37e8.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (3)

• .golangci.yml
• Dockerfile
• go.mod

💤 Files with no reviewable changes (1)

• .golangci.yml

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)

• GitHub Check: Build

🔇 Additional comments (5)

Dockerfile (1)

4-4: Patch version bump to Go 1.25.5 is safe and appropriate.

The builder stage base image update from golang:1.25.4-alpine to golang:1.25.5-alpine is a straightforward patch-level upgrade that should include security/bug fixes without introducing breaking changes.

go.mod (4)

3-3: Confirm go.sum has been updated and is included in this PR.

Dependency updates in go.mod must be accompanied by a corresponding go.sum update to ensure reproducible builds. Verify that go.sum changes are included in this PR and reflect all the module versions specified in go.mod.

Also applies to: 10-10, 13-13, 18-22

---

97-104: Verify compatibility of golang.org/x module updates across the codebase.

The golang.org/x packages have been updated to fairly recent versions (e.g., x/crypto v0.46.0, x/net v0.48.0, x/sys v0.39.0). Ensure that your codebase has no implicit dependencies on APIs that may have been removed, deprecated, or changed in these versions. Run the full test suite to confirm compatibility.

---

5-6: The commented replace directive is informational; ensure it remains intentional.

Line 6 adds a commented replace directive for the luthermonson/go-proxmox fork. This is currently inactive and will not affect the build. Confirm that this comment is intentional and that you do not intend to activate this replacement at this time.

---

3-3: Automated CI will enforce test/lint completion on this dependency bump.

The repository has a configured CI workflow that automatically runs make lint and make unit on any PR modifying go.mod or go.sum, so manual checklist completion is not the enforcement mechanism. go.sum is also properly included and updated in this commit. However, ensure the CI workflow passes before merging to confirm no breaking changes in the Kubernetes v0.34.3 and golang.org/x module updates.

Likely an incorrect or invalid review comment.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}