Skip to content

Update all non-major dependencies - #215

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-major
Open

Update all non-major dependencies#215
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-non-major

Conversation

@renovate

@renovate renovate Bot commented Aug 7, 2026

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
alpine (source) final minor 3.183.24 age confidence
cimg/go docker minor 1.201.25 1.27 (+1) age confidence
github.com/spf13/cobra require minor v1.7.0v1.10.2 age confidence
github.com/spf13/pflag require patch v1.0.5v1.0.10 age confidence
github.com/stretchr/testify require minor v1.8.4v1.12.1 age confidence
goreleaser/goreleaser docker minor v2.15.4v2.18.0 v2.18.1 age confidence
k8s.io/api require minor v0.28.1v0.37.0 age confidence
k8s.io/apimachinery require minor v0.28.1v0.37.0 age confidence
k8s.io/client-go require minor v0.28.1v0.37.0 age confidence
k8s.io/klog/v2 require minor v2.100.1v2.140.0 age confidence
sigs.k8s.io/controller-runtime require minor v0.16.2v0.24.1 v0.25.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

spf13/cobra (github.com/spf13/cobra)

v1.10.2

Compare Source

🔧 Dependencies

  • chore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 by @​dims in #​2336 - the gopkg.in/yaml.v3 package has been deprecated for some time: this should significantly cleanup dependency/supply-chains for consumers of spf13/cobra

📈 CI/CD

🔥✍🏼 Docs

🍂 Refactors

🤗 New Contributors

Full Changelog: spf13/cobra@v1.10.1...v1.10.2

Thank you to our amazing contributors!!!!! 🐍 🚀

v1.10.1

Compare Source

🐛 Fix

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

v1.10.0

Compare Source

What's Changed

🚨 Attention!

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

  • If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
  • or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: #​2303 (comment)

✨ Features
🐛 Fix
🪠 Testing
📝 Docs

New Contributors

Full Changelog: spf13/cobra@v1.9.1...v1.9.2

v1.9.1

Compare Source

🐛 Fixes

Full Changelog: spf13/cobra@v1.9.0...v1.9.1

v1.9.0

Compare Source

✨ Features

🐛 Fixes

🤖 Completions

🧪 Testing

✍🏼 Documentation

🔧 Dependency upgrades


Thank you to all of our amazing contributors and all the great work that's been going into the completions feature!!

👋🏼 New Contributors

Full Changelog: spf13/cobra@v1.8.1...v1.9.0

v1.8.1

Compare Source

✨ Features

  • Add env variable to suppress completion descriptions on create by @​scop in #​1938

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation

New Contributors


Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍

Full Changelog: spf13/cobra@v1.8.0...v1.8.1

v1.8.0

Compare Source

✨ Features

  • Support usage as plugin for tools like kubectl by @​nirs in #​2018 - this means that programs that utilize a "plugin-like" structure have much better support and usage (like for completions, command paths, etc.)
  • Move documentation sources to site/content by @​umarcor in #​1428
  • Add 'one required flag' group by @​marevers in #​1952 - this includes a new MarkFlagsOneRequired API for flags which can be used to mark a flag group as required and cause command failure if at least one is not used when invoked.
  • Customizable error message prefix by @​5ouma in #​2023 - This adds the SetErrPrefix and ErrPrefix APIs on the Command struct to allow for setting a custom prefix for errors
  • feat: add getters for flag completions by @​avirtopeanu-ionos in #​1943
  • Feature: allow running persistent run hooks of all parents by @​vkhoroz in #​2044
  • Improve API to get flag completion function by @​marckhouzam in #​2063

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation


Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍

Full Changelog: spf13/cobra@v1.7.0...v1.8.0

spf13/pflag (github.com/spf13/pflag)

v1.0.10

Compare Source

What's Changed

  • fix deprecation comment for (FlagSet.)ParseErrorsWhitelist by @​thaJeztah in #​447
  • remove uses of errors.Is, which requires go1.13, move go1.16/go1.21 tests to separate file by @​thaJeztah in #​448

New Contributors

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

v1.0.9

Compare Source

What's Changed

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

Compare Source

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

v1.0.7

Compare Source

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.6...v1.0.7

v1.0.6

Compare Source

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.5...v1.0.6

stretchr/testify (github.com/stretchr/testify)

v1.12.1

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed
New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed
New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

Compare Source

What's Changed

Functional Changes
Fixes
Documentation, Build & CI

New Contributors

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

What's Changed

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from sudermanjr as a code owner August 7, 2026 20:01
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Aug 7, 2026
@renovate
renovate Bot requested a review from transient1 as a code owner August 7, 2026 20:01
@renovate renovate Bot added the dependencies Pull requests that update a dependency file label Aug 7, 2026
@renovate

renovate Bot commented Aug 7, 2026

Copy link
Copy Markdown
Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 27 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package Change
go 1.20 -> 1.26.0
github.com/Masterminds/semver/v3 v3.2.1 -> v3.4.0
github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
github.com/davecgh/go-spew v1.1.1 -> v1.1.2-0.20180830191138-d8f796af33cc
github.com/emicklei/go-restful/v3 v3.11.0 -> v3.13.0
github.com/go-logr/logr v1.2.4 -> v1.4.3
github.com/go-openapi/jsonpointer v0.20.0 -> v1.0.0
github.com/go-openapi/jsonreference v0.20.2 -> v1.0.0
github.com/go-openapi/swag v0.22.4 -> v0.27.1
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
github.com/pmezard/go-difflib v1.0.0 -> v1.0.1-0.20181226105442-5d4384ee4fb2
github.com/prometheus/client_golang v1.16.0 -> v1.23.2
github.com/prometheus/client_model v0.4.0 -> v0.6.2
github.com/prometheus/common v0.44.0 -> v0.67.5
github.com/prometheus/procfs v0.11.1 -> v0.19.2
go.opentelemetry.io/otel v1.17.0 -> v1.41.0
go.opentelemetry.io/otel/metric v1.17.0 -> v1.41.0
go.opentelemetry.io/otel/sdk v1.17.0 -> v1.40.0
go.opentelemetry.io/otel/trace v1.17.0 -> v1.41.0
golang.org/x/net v0.15.0 -> v0.57.0
golang.org/x/oauth2 v0.12.0 -> v0.36.0
golang.org/x/sys v0.12.0 -> v0.47.0
google.golang.org/protobuf v1.31.0 -> v1.36.12-0.20260120151049-f2248ac996af
k8s.io/apiextensions-apiserver v0.28.1 -> v0.36.0
k8s.io/kube-openapi v0.0.0-20230905202853-d090da108d2f -> v0.0.0-20260721132016-d427ff9ee9ad
k8s.io/utils v0.0.0-20230726121419-3b25d923346b -> v0.0.0-20260626114624-be93311217bd
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd -> v0.0.0-20250730193827-2d320260d730
sigs.k8s.io/yaml v1.3.0 -> v1.6.0

@fairwinds-insights

Copy link
Copy Markdown

Fairwinds Insights Scan Results

View the full report at insights.fairwinds.com.

✅ No new Action Items detected!

@CLAassistant

Copy link
Copy Markdown

CLA assistant check
Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
You have signed the CLA already but the status is still pending? Let us recheck it.

@renovate
renovate Bot force-pushed the renovate/all-non-major branch from 4b30253 to 3b84b4d Compare August 15, 2026 11:14
@renovate
renovate Bot force-pushed the renovate/all-non-major branch 2 times, most recently from d872260 to cfb211e Compare September 1, 2026 07:15
@renovate
renovate Bot force-pushed the renovate/all-non-major branch from cfb211e to 0830bc2 Compare September 6, 2026 03:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant