Update Go Dependencies by red-hat-konflux[bot] · Pull Request #72 · securesign/model-validation-operator

red-hat-konflux · 2026-03-24T10:21:16Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Type	Update	Change	Pending
cel.dev/expr	indirect	minor	`v0.18.0` → `v0.25.3`
github.com/antlr4-go/antlr/v4	indirect	patch	`v4.13.0` → `v4.13.1`
github.com/asaskevich/govalidator	indirect	digest	`f61b66f` → `a9d515a`
github.com/cenkalti/backoff/v4	indirect	major	`v4.3.0` → `v7.0.3`
github.com/emicklei/go-restful/v3	indirect	minor	`v3.11.0` → `v3.14.0`
github.com/felixge/httpsnoop	indirect	minor	`v1.0.4` → `v1.1.0`
github.com/fsnotify/fsnotify	indirect	minor	`v1.7.0` → `v1.10.1`
github.com/fxamacker/cbor/v2	indirect	minor	`v2.7.0` → `v2.10.0`
github.com/go-logr/logr	require	patch	`v1.4.2` → `v1.4.4`
github.com/go-openapi/jsonpointer	indirect	major	`v0.21.0` → `v1.0.2`
github.com/go-openapi/jsonreference	indirect	major	`v0.20.2` → `v1.0.3`
github.com/go-openapi/swag	indirect	minor	`v0.23.0` → `v0.29.2`
github.com/google/cel-go	indirect	minor	`v0.22.0` → `v0.30.0`
github.com/google/gnostic-models	indirect	minor	`v0.6.8` → `v0.7.1`
github.com/google/go-cmp	indirect	minor	`v0.6.0` → `v0.7.0`
github.com/grpc-ecosystem/grpc-gateway/v2	indirect	minor	`v2.20.0` → `v2.33.0`
github.com/mailru/easyjson	indirect	minor	`v0.7.7` → `v0.9.2`
github.com/onsi/ginkgo/v2	require	minor	`v2.22.0` → `v2.34.0`
github.com/onsi/gomega	require	minor	`v1.36.1` → `v1.44.0`
github.com/prometheus/client_golang	require	minor	`v1.19.1` → `v1.25.0`
github.com/prometheus/client_model	require	patch	`v0.6.1` → `v0.6.3`
github.com/prometheus/common	require	minor	`v0.55.0` → `v0.73.1`
github.com/prometheus/procfs	indirect	minor	`v0.15.1` → `v0.23.0`
github.com/spf13/cobra	indirect	minor	`v1.8.1` → `v1.10.2`
github.com/spf13/pflag	indirect	patch	`v1.0.5` → `v1.0.10`	`v1.1.0`
github.com/stoewer/go-strcase	indirect	patch	`v1.3.0` → `v1.3.1`
github.com/stretchr/testify	require	minor	`v1.9.0` → `v1.12.1`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.53.0` → `v0.72.0`
go.opentelemetry.io/otel	indirect	minor	`v1.28.0` → `v1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	indirect	minor	`v1.28.0` → `v1.47.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	indirect	minor	`v1.27.0` → `v1.47.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.28.0` → `v1.47.0`
go.opentelemetry.io/otel/sdk	indirect	minor	`v1.28.0` → `v1.47.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.28.0` → `v1.47.0`
go.opentelemetry.io/proto/otlp	indirect	minor	`v1.3.1` → `v1.11.1`
go.uber.org/zap	indirect	minor	`v1.27.0` → `v1.28.0`
golang.org/x/net	indirect	minor	`v0.38.0` → `v0.62.0`
golang.org/x/oauth2	indirect	minor	`v0.27.0` → `v0.37.0`
golang.org/x/sync	indirect	minor	`v0.12.0` → `v0.24.0`
golang.org/x/sys	indirect	minor	`v0.31.0` → `v0.49.0`
golang.org/x/term	indirect	minor	`v0.30.0` → `v0.47.0`
golang.org/x/text	indirect	minor	`v0.23.0` → `v0.43.0`
golang.org/x/time	require	minor	`v0.7.0` → `v0.16.0`
golang.org/x/tools	indirect	minor	`v0.26.0` → `v0.52.0`
gomodules.xyz/jsonpatch/v2	indirect	major	`v2.4.0` → `v3.0.1`
google.golang.org/grpc	indirect	minor	`v1.65.0` → `v1.85.0`
google.golang.org/protobuf	indirect	minor	`v1.35.1` → `v1.36.12`
gopkg.in/evanphx/json-patch.v4	indirect	major	`v4.12.0` → `v5.9.11`
k8s.io/api	require	minor	`v0.32.1` → `v0.37.2`
k8s.io/apiextensions-apiserver	indirect	minor	`v0.32.1` → `v0.37.2`
k8s.io/apimachinery	require	minor	`v0.32.1` → `v0.37.2`
k8s.io/apiserver	indirect	minor	`v0.32.1` → `v0.37.2`
k8s.io/client-go	require	minor	`v0.32.1` → `v0.37.2`
k8s.io/component-base	indirect	minor	`v0.32.1` → `v0.37.2`
k8s.io/klog/v2	require	minor	`v2.130.1` → `v2.140.0`
k8s.io/utils	indirect	digest	`3ea5e8c` → `ca04ba5`
sigs.k8s.io/apiserver-network-proxy/konnectivity-client	indirect	minor	`v0.31.0` → `v0.37.0`
sigs.k8s.io/controller-runtime	require	minor	`v0.20.4` → `v0.25.2`
sigs.k8s.io/json	indirect	digest	`9aa6b5e` → `11ed52e`
sigs.k8s.io/structured-merge-diff/v4	indirect	major	`v4.4.2` → `v7.0.1`
sigs.k8s.io/yaml	indirect	minor	`v1.4.0` → `v1.6.0`

Release Notes

cel-expr/cel-spec (cel.dev/expr)

`v0.25.3`

Compare Source

What's Changed

Workaround inconsistent ? in proto textformat by @jnthntatum in #512
Update README with repository relocation notice by @dmitriplotnikov in #514
Add basic tests for out-of-range epoch int to timestamp conversions by @l46kok in #500
Update README with new repository link by @dmitriplotnikov in #519
Lint fixes for import by @jnthntatum in #521
CEL conformance test documentation: fix links in markdown by @AustinWise in #518
Avoid ? in textproto test cases. by @jnthntatum in #525
Add initial conformance tests for lists ext by @jnthntatum in #528

New Contributors

@dmitriplotnikov made their first contribution in #514
@AustinWise made their first contribution in #518

Full Changelog: cel-expr/cel-spec@v0.25.2...v0.25.3

`v0.25.2`

Compare Source

What's Changed

Add conformance tests for (string).reverse() by @jnthntatum in google#491
Updates to the conformance tests for integer values in %e and %f format directives by @TristonianJones in google#495
Add automated BCR publishing on release tags by @mmorel-35 in google#498
Add clarification on scoping rules. by @jnthntatum in google#506
Networking extension conformance tests by @TristonianJones in google#507
Add conformance test cases for null assignability around repeated fields and maps by @l46kok in google#510

New Contributors

@mmorel-35 made their first contribution in google#498

Full Changelog: cel-expr/cel-spec@v0.25.1...v0.25.2

`v0.25.1`

Compare Source

Minor additions to the v0.25.0 release

What's Changed

Remove test/v1 directory and its protos by @l46kok in google#487
Add parsing tests for string and bytes literals by @hudlow in google#489

Full Changelog: cel-expr/cel-spec@v0.25.0...v0.25.1

`v0.25.0`

Compare Source

What's Changed

Initial version of the policy specification by @jcking in google#477
Remove orphaned ToC entry for enums as ints from the specification by @timostamm in google#476
Tests for selector, function, and field names formerly defined as reserved by @hudlow in google#480
Add a test case for lastIndexOf in string_ext against an empty string by @l46kok in google#468
Remove TOC from language definition by @hudlow in google#482
Remove int(enum) -> int signature by @hudlow in google#483
Clarify formatting decimals, add %f formatting test cases around rounding by @l46kok in google#485
Remove remaining google.rpc.Status deps from cel-spec by @TristonianJones in google#486

New Contributors

@timostamm made their first contribution in google#476

Full Changelog: cel-expr/cel-spec@v0.24.0...v0.25.0

`v0.24.0`

Compare Source

What's Changed

Add/update missing function documentation by @TristonianJones in google#461
Add corner test cases related to optional values and maps to codify behavior by @jcking in google#462
Add tests for type identifiers for time types by @jnthntatum in google#465
Add typecheck tests for edge cases with free type parameters by @jnthntatum in google#463
Add tests for repeated enum field accesses by @jnthntatum in google#464
Add upb build targets for CEL C by @jcking in google#467
Updated testsuite result_kind to use nested ErrorSet by @ChinmayMadeshi in google#469
Generated pb.go for eval.proto. by @ChinmayMadeshi in google#470

New Contributors

@ChinmayMadeshi made their first contribution in google#469

Full Changelog: cel-expr/cel-spec@v0.23.1...v0.24.0

`v0.23.1`

Compare Source

What's Changed

Restore duration string conversion supported suffixes by @TristonianJones in google#459
Change optional_string field to be optional string type in test_all_types by @l46kok in google#458
Revert "Remove Unicode space handling from .trim()" by @jcking in google#460

Full Changelog: cel-expr/cel-spec@v0.23.0...v0.23.1

`v0.23.0`

Compare Source

What's Changed

update grammar and tests to differentiate reserved tokens by @hudlow in google#437
Bzlmod update regen by @TristonianJones in google#451
Add py_proto_library targets by @ferstlf in google#452
Remove Unicode space handling from .trim() by @jcking in google#453
Extracted context input as a separate oneof out of test input by @aakash070 in google#456
Add basic conformance tests for some comprehensions v2 macros by @jcking in google#454
Minor update to the field name and numbering for test suites by @TristonianJones in google#457

New Contributors

@ferstlf made their first contribution in google#452

Full Changelog: cel-expr/cel-spec@v0.22.1...v0.23.0

`v0.22.1`

Compare Source

What's Changed

Add a doc field on Function and update content advice by @TristonianJones in google#446
Upgrade the googleapis repo deps, remove switched_rules by @TristonianJones in google#447
Add a separate field for expressions under input bindings map by @aakash070 in google#449
Add java_lite messages to test_all_types messages by @l46kok in google#450

Full Changelog: cel-expr/cel-spec@v0.22.0...v0.22.1

`v0.22.0`

Compare Source

What's Changed

Add test_suite and test_config under conformance [#441]

New Contributors

@aakash070 made their first contribution in google#441

Full Changelog: cel-expr/cel-spec@v0.21.2...v0.22.0

`v0.21.2`

Compare Source

What's Changed

Fix misspellings again by @jcking in google#443

Full Changelog: cel-expr/cel-spec@v0.21.1...v0.21.2

`v0.21.1`

Compare Source

What's Changed

Fix typeo in string_ext.textproto by @jcking in google#442

Full Changelog: cel-expr/cel-spec@v0.21.0...v0.21.1

`v0.21.0`

Compare Source

What's Changed

Fix and document string.format by @jcking in google#436

Full Changelog: cel-expr/cel-spec@v0.20.0...v0.21.0

`v0.20.0`

What's Changed

Indicate that CEL is an official Google product by @TristonianJones in google#439
Add conformance tests for quoted field selectors. by @jnthntatum in google#431
Add java_lite_proto_library targets to canonical CEL protos. Deprecate explain.proto. by @l46kok in google#440

Full Changelog: cel-expr/cel-spec@v0.19.2...v0.20.0

`v0.19.2`

Compare Source

What's Changed

Correct 'worst-cast' typos by @hudlow in google#418
Add additional type check tests by @jnthntatum in google#419
clarify error behavior for e.exists(x, p) by @hudlow in google#427
typo, formatting, and link fixes by @hudlow in google#422
tests to verify parsers ignore whitespace and comments by @hudlow in google#430
clarify Unicode handling by @hudlow in google#423
Fix strings.format tests by @jcking in google#435

Full Changelog: cel-expr/cel-spec@v0.19.1...v0.19.2

`v0.19.1`

Compare Source

What's Changed

Regenerate go conformance SimpleTest* protos by @jnthntatum in google#417

Full Changelog: cel-expr/cel-spec@v0.19.0...v0.19.1

`v0.19.0`

Compare Source

What's Changed

Temporarily restore simple.proto to its former location by @TristonianJones in google#406
Update Java conformance test proto package by @TristonianJones in google#405
Correct double literal example by @hudlow in google#414
Add typed result matches to SimpleTest definition by @jnthntatum in google#408
Add basic tests for type deductions. by @jnthntatum in google#416

Full Changelog: cel-expr/cel-spec@v0.18.0...v0.19.0

antlr4-go/antlr (github.com/antlr4-go/antlr/v4)

`v4.13.1`: Release 4.13.1

Compare Source

The 4.13.1 release has:

Some minor performance improvements
An optional build tag -tags antlr.nomutex which allows a build without
using mutexes, when the user knows they will not use it with multiple
go routines. (Note, somewhat experimental)

Note that I did not remove the sort.Slices calls. They will not be experimental for long
and are implemented efficently. Please make a fork if you must use it without this
dependency. Maybe review whether you need to do so for the sake of one call.

cenkalti/backoff (github.com/cenkalti/backoff/v4)

emicklei/go-restful (github.com/emicklei/go-restful/v3)

`v3.14.0`

Compare Source

`v3.13.0`

Compare Source

optimize performance of path matching in CurlyRouter ( thanks @wenhuang, Wen Huang)

`v3.12.2`

Compare Source

allow empty payloads in post,put,patch, issue #580 ( thanks @liggitt, Jordan Liggitt)

`v3.12.1`

Compare Source

fix misroute when dealing multiple webservice with regex (#549) (thanks Haitao Chen)

`v3.12.0`

Compare Source

add Flush method #529 (#538)
fix: Improper handling of empty POST requests (#543)

`v3.11.3`

Compare Source

better not have 2 tags on one commit

`v3.11.2`

Compare Source

fix by restoring custom JSON handler functions (Mike Beaumont #540)

`v3.11.1`

Compare Source

fix by restoring custom JSON handler functions (Mike Beaumont #540)

felixge/httpsnoop (github.com/felixge/httpsnoop)

`v1.1.0`

Compare Source

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

`v1.10.1`

Compare Source

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)

`v1.10.0`

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

`v1.9.0`

Compare Source

Changes and fixes

all: make BufferedWatcher buffered again (#657)
inotify: fix race when adding/removing watches while a watched path is being deleted (#678, #686)
inotify: don't send empty event if a watched path is unmounted (#655)
inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#679)
kqueue: fix watching relative symlinks (#681)
kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#682)
illumos: don't send error if changed file is deleted while processing the event (#678)

`v1.8.0`

Compare Source

Additions

all: add FSNOTIFY_DEBUG to print debug logs to stderr (#619)

Changes and fixes

windows: fix behaviour of WatchList() to be consistent with other platforms (#610)
kqueue: ignore events with Ident=0 (#590)
kqueue: set O_CLOEXEC to prevent passing file descriptors to children (#617)
kqueue: emit events as "/path/dir/file" instead of "path/link/file" when watching a symlink (#625)
inotify: don't send event for IN_DELETE_SELF when also watching the parent (#620)
inotify: fix panic when calling Remove() in a goroutine (#650)
fen: allow watching subdirectories of watched directories (#621)

fxamacker/cbor (github.com/fxamacker/cbor/v2)

`v2.10.0`

Compare Source

v2.10 speeds up encoding by up to 2.88× and decoding by up to 1.87× with zero memory regressions (B/op, allocs/op), reduces memory use, adds the toindefarray struct tag option, and fixes bugs. The Contributing Guidelines, Security Policy, and templates were extensively updated.

Encoding sorted nested maps of dynamic JSON-like data to CBOR drops from 70 allocs/op to 1 and from 7.2 KiB/op to 4.0 KiB/op in the benchmarks below. Encoding time.Time, big.Int, Tag and Marshaler values, and decoding into time.Time, big.Int and Tag, use 1 to 2 fewer allocs/op (20% to 50% fewer).

This release does not use Go's unsafe package. Performance in user apps depends on configuration and data.

Tests were refactored and coverage increased to 97.7%. Fuzz tests (not yet public) were also extended. Internal checklists and procedures were updated to reduce potential mistakes.

Performance and Benchmarks

Across all 215 benchmarks, there are zero memory regressions (B/op, allocs/op). Just one benchmark showed a speed dip: Marshal/struct_many_flds_all_omitempty_all_empty/map is ~4-5% slower, but only when a struct has 32 fields that are both omitzero and empty (same scenario with an 8-field struct is now faster).

Benchmarks ran with Go 1.26.10 on linux/amd64 (benchstat n=10, p=0.000):

CBOR Speedup by Data Type: groups of different benchmarks summarized per row
CBOR Encoding Reflection-Free Speedup: dynamic JSON-like data types and common types

CBOR Speedup by Data Type

Unmarshal	Speedup	ΔSec/op
Single values (bool, int, float, byte string, text string)	1.10× to 1.51×¹	-8.87% to -33.92%¹
Epoch time, bignum, other tags	1.18× to 1.64×	-15.33% to -38.91%
Arrays and maps to non-struct	1.33× to 1.87×	-24.63% to -46.49%
Arrays and maps to structs	1.06× to 1.52×	-5.46% to -34.40%
Real-world (COSE, CWT, SenML, WebAuthn)	1.35× to 1.64×	-26.06% to -39.19%

¹ 2.54× speedup (-60.64%) when decoding into a named []byte type that has methods.

Marshal	Speedup	ΔSec/op
Single values (bool, int, float, byte slice, string)	1.32× to 1.55×	-24.49% to -35.41%
time.Time, big.Int, Tag, Marshaler²	1.15× to 1.63×	-12.94% to -38.84%
Slices and maps	1.35× to 2.88×	-25.97% to -65.26%
Structs	1.57× to 2.17×	-36.37% to -53.96%
Structs with omitempty fields	0.95×³ to 1.35×	+5.01%³ to -25.96%
Real-world (COSE, CWT, SenML, WebAuthn)	1.12× to 1.33×	-10.66% to -24.77%

² For addressable values (reached through a pointer, struct field, slice element or map value).

³ Only when every field is omitempty and empty: 7.6 ns slower for a 32-field struct, 2.37 ns faster for an 8-field struct. This is the only performance regression in all 215 benchmarks.

CBOR Encoding Reflection-Free Speedup

PR #870 optimized common types: int, int64, uint, uint64, float64, bool, string, nil, []byte, []any, map[any]any, map[string]any, and map[string]string.

Marshal Benchmark v2.9.6 → v2.10	Speedup	Time ΔSec/op	Memory ΔB/op	Memory ΔAllocs/op
[]any	2.50×	-607.5 ns (-60.03%)	-	-
map[string]any	2.60×	-821.9 ns (-61.47%)	-	-
map[string]string	2.59×	-335.9 ns (-61.34%)	-	-
nested_map[any]any	2.88×	-16.542 µs (-65.26%)	-	-
nested_map[string]any	2.78×	-14.201 µs (-64.01%)	-	-
nested_map[any]any, bw_lex	2.53×	-22.36 µs (-60.54%)	-3314 (-44.72%)	-69 (-98.57%)
nested_map[string]any, bw_lex	2.41×	-19.52 µs (-58.54%)	-3323 (-44.79%)	-69 (-98.57%)

bw_lex = SortBytewiseLexical. Memory improvements are from #774 and #860.

Upgrade Notes

Go 1.24 or newer is required (#773). All tests (97.7% coverage) pass on Go 1.24-1.27.
Pointer-receiver marshal methods (user-implemented methods) are called on the original value instead of a copy when the value is addressable (#866).
Marshal configured to use TagsForbidden returns an error for a big.Int outside [-2^64, 2^64-1], and EncMode creation returns an error for settings that would emit tags if TagsForbidden is also set (#868).
Decoder advances past well-formed data items rejected by DecOptions value or serialization restrictions (e.g. NaN, IndefLength), and Skip skips them without an error (#872).
Marshal configured to emit text-based time returns an error for time.Time outside RFC 3339 limits (#873).

TinyGo (experimental)

TinyGo support for v2.10.0 is available in tag tinygo-beta/v2.10.0-tinygo0.42 (branch feature/cbor-tinygo-beta). It requires TinyGo 0.42.0 or newer. It is experimental and not fuzz tested. For details, see TinyGo (https://github.com/fxamacker/cbor#tinygo) in the README.

What's Changed

⭐ Features

feat: add toindefarray struct tag option for CBOR indefinite-length arrays by @tdnguyenND in #770

🚀 Optimizations

Optimize encoding speed primarily for slices, maps, and structs by @fxamacker in #806
Reduce decoding time up to 17% for all CBOR data types by @fxamacker in #807
Reduce decoding time by inlining well-formedness checks by @fxamacker in #810
Optimize decoding CBOR byte string by @fxamacker in #811
Optimize decoding CBOR text string by up to 16% by @fxamacker in #812
Reduce allocs and bound memory of keyValue pool by @fxamacker in #860
Reduce allocations when encoding addressable values by @fxamacker in #866
Add reflection-free encoding for common types (up to 2.8x faster) by @fxamacker in #870
Reduce allocs to speed up time.Time, Tag, and big.Int by @fxamacker in #886

🛠 Improvements

Update to require go 1.24 and modernize code by @fxamacker in #773
Refactor to use slices.SortFunc (Go 1.21+) by @fxamacker in #774
Small refactor and cleanups by @fxamacker in #815
Refactor encoding functions to prepare for reflection-free path by @fxamacker in #861
Refactor struct field sorter to use slices.SortFunc by @fxamacker in #877

🐞 Bug Fixes

Enforce TagsForbidden for bignums and ByteSliceLaterFormat by @fxamacker in #868
Advance Decoder past restricted CBOR data items by @fxamacker in #872
Reject marshaling out-of-range time.Time to RFC 3339 by @fxamacker in #873
Fix some error messages returned by EncMode() and DecMode() by @fxamacker in #883
Fix float range check when decoding Unix time by @fxamacker in #889

🧪 Testing

Shorten benchmark names by @fxamacker in #816
Move tests and helpers to new files by @fxamacker in #878
Add checkMarshal test helpers by @fxamacker in #879
Add checkUnmarshal test helpers by @fxamacker in #881
Add test helpers for modes, tags, and round trips by @fxamacker in #884
Refactor invalid option tests to table-driven tests by @fxamacker in #885
Add checkNoError and checkErrorCase test helpers by @fxamacker in #887
Standardize test failure messages and fix several test bugs by @fxamacker in #888
Add more benchmarks by @fxamacker in #891

📖 Documentation

Update comments to use newer terminology by @fxamacker in #779
Update TinyGo section in README.md by @fxamacker in #793
Update doc.go and README.md for v2.10.0 by @fxamacker in #890

📖 Contributing Guidelines, Security Policy, and Templates

Update PR template to clarify approval requirement by @fxamacker in #849
Rewrite security policy and reporting guidelines by @fxamacker in #864
Rewrite PR template to reduce risks from AI and uncoordinated PRs by @fxamacker in #865
Rewrite bug report form to reduce security risks by @fxamacker in #867
Rewrite feature request form to help triage and reduce risks by @fxamacker in #869
Replace docs issue template with an issue form by @fxamacker in #874
Update security policy, PR template, and issue forms by @fxamacker in #875
Update CONTRIBUTING.md to reduce risks by @fxamacker in #862
Improve issue forms for triage and previews by @fxamacker in #880

CI / GitHub Actions

🔎 Details

Bump govulncheck from v1.1.4 to v1.3.0 by @fxamacker in #772
Add more linters to .golangci.yml and lint by @fxamacker in #775
Update CodeQL actions to v4.36.3 and add CodeQL group to dependabot.yml by @fxamacker in #790
Bump golangci-lint to v2.13.2 and lint by @fxamacker in #814
Update CI to add Go 1.27 and bump govulncheck by @fxamacker in #852
Change Go version for golangci-lint 2.13.2 by @fxamacker in #863

Other Changes

Use a security-hardened .gitignore by @fxamacker in #826

Ported from release-2.9

Already released in v2.9.3 through v2.9.6.

🔎 Details

Port PR 803 to master branch by @fxamacker in #804
Port #817 from v2.9.4 to master by @fxamacker in #818
Port #821 from release-2.9 to master by @fxamacker in #822
Port #827 from release-2.9 to master by @fxamacker in #839
Port #828 from release-2.9 to master by @fxamacker in #840
Port #829 from release-2.9 to master by @fxamacker in #841
Port #831 from release-2.9 to master by @fxamacker in #842
Port #834 from release-2.9 to master by @fxamacker in #843
Port #835 from release-2.9 to master by @fxamacker in #844
Port #833 from release-2.9 to master by @fxamacker in #845
Port #837 from release-2.9 to master by @fxamacker in #846
Port #838 from release-2.9 to master by @fxamacker in #850
Port #851 from release-2.9 to master by @fxamacker in #853
Port #854 from release-2.9 to master by @fxamacker in #856
Port #857 from release-2.9 to master by @fxamacker in #858
Port #855 from v2.9.6 to master by @fxamacker in #859

Dependabot Updates

🔎 Details

Bump github/codeql-action from 4.35.2 to 4.35.4 by @dependabot[bot] in #771
Bump github/codeql-action from 4.35.4 to 4.35.5 by @dependabot[bot] in #776
Bump github/codeql-action from 4.35.5 to 4.36.0 by @dependabot[bot] in #778
Bump github/codeql-action from 4.36.0 to 4.36.2 by @dependabot[bot] in [#781](https://redirect.github.com/f

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-03-30T14:45:29Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

17 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.23.0` -> `1.25.0`
`github.com/onsi/ginkgo/v2`	`v2.22.0` -> `v2.27.2`
`github.com/onsi/gomega`	`v1.36.1` -> `v1.38.2`
`github.com/antlr4-go/antlr/v4`	`v4.13.0` -> `v4.13.1`
`github.com/emicklei/go-restful/v3`	`v3.11.0` -> `v3.12.2`
`github.com/fxamacker/cbor/v2`	`v2.7.0` -> `v2.9.0`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.20.0` -> `v2.28.0`
`github.com/modern-go/reflect2`	`v1.0.2` -> `v1.0.3-0.20250322232337-35a7c28c31ee`
`github.com/spf13/cobra`	`v1.8.1` -> `v1.10.0`
`go.opentelemetry.io/otel`	`v1.28.0` -> `v1.42.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.28.0` -> `v1.34.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`	`v1.27.0` -> `v1.34.0`
`go.opentelemetry.io/otel/metric`	`v1.28.0` -> `v1.42.0`
`go.opentelemetry.io/otel/sdk`	`v1.28.0` -> `v1.42.0`
`go.opentelemetry.io/otel/trace`	`v1.28.0` -> `v1.42.0`
`google.golang.org/grpc`	`v1.65.0` -> `v1.79.2`
`google.golang.org/protobuf`	`v1.35.1` -> `v1.36.11`
`gopkg.in/evanphx/json-patch.v4`	`v4.12.0` -> `v4.13.0`

red-hat-konflux · 2026-04-04T14:36:03Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

5 additional dependencies were updated
The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package	Change
`go`	`1.23.0` -> `1.27`
`github.com/google/pprof`	`v0.0.0-20241029153458-d1b30febd7db` -> `v0.0.0-20260402051712-545e8a4df936`
`github.com/modern-go/reflect2`	`v1.0.2` -> `v1.0.3-0.20250322232337-35a7c28c31ee`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20240826202546-f6391c0de4c7` -> `v0.0.0-20261026165753-2ffab32bce7e`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20240826202546-f6391c0de4c7` -> `v0.0.0-20261019180522-ce908d29299b`
`k8s.io/kube-openapi`	`v0.0.0-20241105132330-32ad38e42d3f` -> `v0.0.0-20260721132016-d427ff9ee9ad`

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Mar 24, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 12 times, most recently from c4a6a07 to 09df490 Compare March 30, 2026 14:45

red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 12 times, most recently from e5537f5 to ac8b4fa Compare April 4, 2026 14:35

red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 3 times, most recently from e98e645 to 87ce976 Compare April 5, 2026 02:30

red-hat-konflux Bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 29 times, most recently from 6baa790 to 0356203 Compare April 14, 2026 11:37

Update Go Dependencies

9067c08

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

Navigation Menu

Repository navigation

Update Go Dependencies - #72

Update Go Dependencies#72
red-hat-konflux[bot] wants to merge 1 commit into
tech-previewfrom
konflux/mintmaker/tech-preview/go-deps

red-hat-konflux Bot commented Mar 24, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Mar 30, 2026

Uh oh!

red-hat-konflux Bot commented Apr 4, 2026 •

edited

Loading

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

red-hat-konflux Bot commented Mar 24, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

v4.13.1: Release 4.13.1

Changes and fixes

Changes and fixes

Changes and fixes

Additions

Changes and fixes

Performance and Benchmarks

CBOR Speedup by Data Type

CBOR Encoding Reflection-Free Speedup

Upgrade Notes

TinyGo (experimental)

What's Changed

⭐ Features

🚀 Optimizations

🛠 Improvements

🐞 Bug Fixes

🧪 Testing

📖 Documentation

📖 Contributing Guidelines, Security Policy, and Templates

CI / GitHub Actions

Other Changes

Ported from release-2.9

Dependabot Updates

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Mar 30, 2026

ℹ Artifact update notice

File name: go.mod

Uh oh!

red-hat-konflux Bot commented Apr 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Mar 24, 2026 •

edited

Loading

`v4.13.1`: Release 4.13.1

red-hat-konflux Bot commented Apr 4, 2026 •

edited

Loading