Repository navigation
Update Go Dependencies - #116
Open
red-hat-konflux[bot] wants to merge 1 commit into
Open
red-hat-konflux[bot] wants to merge 1 commit into
red-hat-konflux[bot] wants to merge 1 commit into
Conversation
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by Details:
|
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
9 times, most recently
from
September 27, 2026 01:01
d7884cf to
c19b0a5
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
from
September 28, 2026 01:10
c19b0a5 to
3e952e3
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #116 +/- ##
==========================================
+ Coverage 36.34% 37.95% +1.61%
==========================================
Files 20 20
Lines 1992 1752 -240
==========================================
- Hits 724 665 -59
+ Misses 1223 1087 -136
+ Partials 45 0 -45
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
5 times, most recently
from
October 5, 2026 01:32
d8236fc to
4690e7e
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
7 times, most recently
from
October 13, 2026 02:50
f401f78 to
0f4d219
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
5 times, most recently
from
October 18, 2026 01:38
f8df082 to
469d3c7
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
5 times, most recently
from
October 25, 2026 05:35
b05db5f to
754b0ba
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
7 times, most recently
from
November 3, 2026 02:51
d739de1 to
a95a1be
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
4 times, most recently
from
November 7, 2026 04:34
7262da1 to
f9c5a09
Compare
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
from
November 8, 2026 01:37
f9c5a09 to
0166108
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.25.2→v0.25.3v3.4.0→v3.5.0v5.0.3→v7.0.319d51d7→32a4819ffadbf3→a476de3c455327→b4b58b9v3.13.0→v3.14.0v1.0.4→v1.1.0v1.9.0→v1.10.1v2.9.1→v2.10.0v0.25.0→v1.0.1v0.22.7→v0.22.9v0.22.5→v1.0.2v0.21.5→v1.0.3v0.23.3→v0.25.3v0.29.3→v0.33.4v0.22.4→v1.0.1v0.26.1→v0.27.4v0.25.5→v0.29.2v0.25.5→v0.29.2v0.25.5→v0.29.2v0.25.5→v0.29.2v0.25.5→v0.29.2v0.25.5→v0.29.2v0.25.5→v0.29.2v0.25.5→v0.29.2v0.25.5→v0.29.2v0.25.5→v0.29.2v0.25.5→v0.29.2v0.25.5→v0.29.2v0.25.2→v1.0.1v0.27.0→v0.30.0v1.3.3→v1.4.0v0.21.4→v0.22.1545e8a4→4bf881dv2.29.0→v2.33.0v2.1.1→v2.1.2v2.28.1→v2.34.0v1.39.1→v1.44.0v1.23.2→v1.25.0v0.6.2→v0.6.3v0.67.5→v0.73.1v0.20.1→v0.23.0v0.0.0-20260226135740-d987ec6b59e6→v0.0.3v0.10.0→v0.11.1v0.5.1→v0.5.2v1.5.1→v1.5.5v2.2.1→v2.4.1v1.10.5→v1.11.3v1.1.4→v1.4.0v2.0.5→v2.2.0v1.11.1→v1.12.1v2.4.1→v2.4.2v0.1.0→v0.1.1v0.68.0→v0.72.0v1.45.0→v1.47.0v1.45.0→v1.47.0v1.45.0→v1.47.0v1.45.0→v1.47.0v1.45.0→v1.47.0v1.45.0→v1.47.0v1.11.0→v1.11.1v1.27.1→v1.28.0v2.4.4→v4.0.0v3.0.4→v4.0.0v0.57.0→v0.58.0v0.41.0→v0.42.0v0.60.0→v0.62.0v0.36.0→v0.37.0v0.23.0→v0.24.0v0.48.0→v0.49.0v0.46.0→v0.47.0v0.42.0→v0.43.0v0.15.0→v0.16.0v0.49.0→v0.52.0v2.5.0→v3.0.16ac0973→d1e00e96ac0973→d1e00e9v1.83.2→v1.85.0v1.36.11→v1.36.12v4.13.0→v5.9.11v0.35.3→v0.37.2v0.35.3→v0.37.2v0.35.3→v0.37.2v0.35.3→v0.37.2v0.35.3→v0.37.2v0.35.3→v0.37.216be699→5bee61f28399d8→ca04ba5v0.34.0→v0.37.0v0.23.3→v0.25.22d32026→11ed52ev6.3.2→v7.0.1Release Notes
cel-expr/cel-spec (cel.dev/expr)
v0.25.3Compare Source
What's Changed
New Contributors
Full Changelog: cel-expr/cel-spec@v0.25.2...v0.25.3
Masterminds/semver (github.com/Masterminds/semver/v3)
v3.5.0Compare Source
What's Changed
New Contributors
Full Changelog: Masterminds/semver@v3.4.0...v3.5.0
cenkalti/backoff (github.com/cenkalti/backoff/v5)
v7.0.3Compare Source
v7.0.2Compare Source
v7.0.1Compare Source
v7.0.0Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
emicklei/go-restful (github.com/emicklei/go-restful/v3)
v3.14.0Compare Source
felixge/httpsnoop (github.com/felixge/httpsnoop)
v1.1.0Compare Source
fsnotify/fsnotify (github.com/fsnotify/fsnotify)
v1.10.1Compare Source
Changes and fixes
inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)
v1.10.0Compare Source
This version of fsnotify needs Go 1.23.
Changes and fixes
inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)
fxamacker/cbor (github.com/fxamacker/cbor/v2)
v2.10.0Compare Source
v2.10 speeds up encoding by up to 2.88× and decoding by up to 1.87× with zero memory regressions (B/op, allocs/op), reduces memory use, adds the
toindefarraystruct tag option, and fixes bugs. The Contributing Guidelines, Security Policy, and templates were extensively updated.Encoding sorted nested maps of dynamic JSON-like data to CBOR drops from 70 allocs/op to 1 and from 7.2 KiB/op to 4.0 KiB/op in the benchmarks below. Encoding
time.Time,big.Int,TagandMarshalervalues, and decoding intotime.Time,big.IntandTag, use 1 to 2 fewer allocs/op (20% to 50% fewer).This release does not use Go's
unsafepackage. Performance in user apps depends on configuration and data.Tests were refactored and coverage increased to 97.7%. Fuzz tests (not yet public) were also extended. Internal checklists and procedures were updated to reduce potential mistakes.
Performance and Benchmarks
Across all 215 benchmarks, there are zero memory regressions (B/op, allocs/op). Just one benchmark showed a speed dip:
Marshal/struct_many_flds_all_omitempty_all_empty/mapis ~4-5% slower, but only when a struct has 32 fields that are bothomitzeroand empty (same scenario with an 8-field struct is now faster).Benchmarks ran with Go 1.26.10 on linux/amd64 (benchstat n=10, p=0.000):
CBOR Speedup by Data Type
¹ 2.54× speedup (-60.64%) when decoding into a named
[]bytetype that has methods.² For addressable values (reached through a pointer, struct field, slice element or map value).
³ Only when every field is omitempty and empty: 7.6 ns slower for a 32-field struct, 2.37 ns faster for an 8-field struct. This is the only performance regression in all 215 benchmarks.
CBOR Encoding Reflection-Free Speedup
PR #870 optimized common types:
int,int64,uint,uint64,float64,bool,string,nil,[]byte,[]any,map[any]any,map[string]any, andmap[string]string.v2.9.6 → v2.10
ΔSec/op
ΔB/op
ΔAllocs/op
SortBytewiseLexical. Memory improvements are from #774 and #860.Upgrade Notes
Marshalconfigured to useTagsForbiddenreturns an error for abig.Intoutside [-2^64, 2^64-1], andEncModecreation returns an error for settings that would emit tags ifTagsForbiddenis also set (#868).Decoderadvances past well-formed data items rejected byDecOptionsvalue or serialization restrictions (e.g.NaN,IndefLength), andSkipskips them without an error (#872).Marshalconfigured to emit text-based time returns an error fortime.Timeoutside RFC 3339 limits (#873).TinyGo (experimental)
TinyGo support for v2.10.0 is available in tag
tinygo-beta/v2.10.0-tinygo0.42(branchfeature/cbor-tinygo-beta). It requires TinyGo 0.42.0 or newer. It is experimental and not fuzz tested. For details, see TinyGo (https://github.com/fxamacker/cbor#tinygo) in the README.What's Changed
⭐ Features
🚀 Optimizations
🛠 Improvements
🐞 Bug Fixes
🧪 Testing
📖 Documentation
📖 Contributing Guidelines, Security Policy, and Templates
CI / GitHub Actions
🔎 Details
Other Changes
Ported from release-2.9
Already released in v2.9.3 through v2.9.6.
🔎 Details
Dependabot Updates
🔎 Details
New Contributors
Full Changelog: fxamacker/cbor@v2.9.6...v2.10.0
v2.9.6Compare Source
v2.9.6 fixes 12 bugs, including an important fix for apps that decode CBOR maps into Go maps, and has one behavior change. API is unchanged but more errors are detected.
Most of these bugs were identified while improving tests and reviewing code for an upcoming release.
Tests and fuzz tests were extended.
Upgrading to v2.9.6 from all prior versions is recommended.
🐞 Important Fix
For use cases outside the "not affected by this bug" list below, decoding a CBOR null or undefined map key or value (including
55799(null)) into a Go map whose key or value type is of bool, integer, float, or string kind kept the previous map entry's key or value (instead of the zero value). See PR #855 for details.Not affected by this bug:
map[any]any, and intoany(with unchangedDefaultMapType).Decoding CBOR null or undefined into an interface that holds a value now sets it to nil, matching encoding/json (v1 and v2). Previously, the interface kept its value (PR #827), which was not the intended behavior.
🛠 Bug fixes
Some of these bugs could only be triggered by incorrect usage in user apps, such as invalid struct tags or an unsupported DefaultByteStringType setting, etc. None of these bugs were reported by a project affected by them.
Decoding
Encoding
📖 Documentation
Full Changelog: fxamacker/cbor@v2.9.4...v2.9.6
v2.9.5Compare Source
This version was tagged from the default branch by mistake and is retracted.
Use v2.9.6 (https://github.com/fxamacker/cbor/releases/tag/v2.9.6) instead.
v2.9.4Compare Source
This release fixes potential panics when decoding a CBOR map whose key decodes to an uncomparable Go value under certain conditions.
Not affected: user apps that don't register tag types and don't use map key types that are either named empty interfaces (e.g.
type MyAny any) or contain interfaces.These potential panics can be encountered when one of these two conditions is met:
TagSetinterface) that is an array or struct with uncomparable orinterface{}element or field type, orThis was identified while improving tests and reviewing code for an upcoming release.
Tests and fuzz tests were extended to cover this bug.
Upgrading to v2.9.4 is recommended.
What's Changed
Full Changelog: fxamacker/cbor@v2.9.3...v2.9.4
v2.9.3Compare Source
This release fixes a potential panic when decoding into a
time.Timefrom a CBOR byte string, map, or array under certain conditions.Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with
timeTag = DecTagRequired.Upgrading to v2.9.3 is recommended.
The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.
What's Changed
Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3
v2.9.2Compare Source
This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.
Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).
The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.
This release passed fuzz tests (billions of execs) and it is production quality.
What's Changed
CI / GitHub Actions and Docs
🔎 Details...
Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2
go-openapi/analysis (github.com/go-openapi/analysis)
v1.0.1Compare Source
1.0.1 - 2026-10-04
Full Changelog: go-openapi/analysis@v1.0.0...v1.0.1
8 commits in this release.
Fixed bugs
Documentation
Miscellaneous tasks
Updates
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.