Skip to content

chore(deps): update go dependencies - #316

Open
red-hat-konflux[bot] wants to merge 1 commit into
release-1.0from
konflux/mintmaker/release-1.0/go-deps
Open

chore(deps): update go dependencies#316
red-hat-konflux[bot] wants to merge 1 commit into
release-1.0from
konflux/mintmaker/release-1.0/go-deps

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
cloud.google.com/go/auth indirect patch v0.24.1 → v0.24.3
cloud.google.com/go/auth/oauth2adapt indirect patch v0.3.0 → v0.3.1
cloud.google.com/go/iam indirect minor v1.14.0 → v1.15.1
cloud.google.com/go/kms indirect minor v1.35.0 → v1.36.1
cloud.google.com/go/longrunning indirect minor v1.3.0 → v1.5.0
github.com/Azure/azure-sdk-for-go/sdk/azcore require minor v1.23.2 → v1.24.0
github.com/digitorus/pkcs7 indirect digest ffadbf3 → a476de3
github.com/digitorus/timestamp indirect digest c455327 → b4b58b9
github.com/docker/cli indirect patch v29.9.1+incompatible → v29.9.3+incompatible
github.com/go-openapi/runtime indirect patch v0.33.3 → v0.33.4
github.com/go-openapi/runtime/server-middleware indirect patch v0.33.3 → v0.33.4
github.com/go-openapi/strfmt indirect patch v0.27.3 → v0.27.4
github.com/go-openapi/validate indirect patch v1.0.0 → v1.0.1
github.com/google/go-github/v73 indirect major v73.0.0 → v93.0.0
github.com/googleapis/gax-go/v2 indirect minor v2.26.2 → v2.27.0
github.com/grpc-ecosystem/grpc-gateway/v2 indirect minor v2.32.0 → v2.33.0
github.com/hashicorp/go-rootcerts require minor v1.0.2 → v1.1.0
github.com/lestrrat-go/jwx/v3 indirect major v3.3.0 → v4.6.0
github.com/open-policy-agent/opa indirect minor v1.21.1 → v1.22.2
github.com/prometheus/common indirect minor v0.72.1 → v0.73.1
github.com/prometheus/procfs indirect minor v0.22.0 → v0.23.0
gitlab.com/gitlab-org/api/client-go indirect major v1.46.0 → v3.44.0 v3.46.1 (+2)
go.opentelemetry.io/contrib/instrumentation/runtime indirect minor v0.69.0 → v0.72.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc indirect minor v1.46.0 → v1.47.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp indirect minor v1.46.0 → v1.47.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace indirect minor v1.46.0 → v1.47.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc indirect minor v1.46.0 → v1.47.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp indirect minor v1.46.0 → v1.47.0
go.opentelemetry.io/otel/exporters/prometheus indirect minor v0.66.0 → v0.69.0
go.opentelemetry.io/otel/sdk/metric indirect minor v1.46.0 → v1.47.0
go.opentelemetry.io/proto/otlp indirect patch v1.11.0 → v1.11.1
go.step.sm/crypto indirect minor v0.91.0 → v0.92.0
go.yaml.in/yaml/v2 indirect major v2.4.4 → v3.0.1
golang.org/x/net require minor v0.61.0 → v0.62.0
golang.org/x/oauth2 indirect minor v0.37.0 → v0.38.0
golang.org/x/sync indirect minor v0.24.0 → v0.25.0
golang.org/x/sys indirect minor v0.49.0 → v0.50.0
google.golang.org/api indirect minor v0.304.0 → v0.311.0
google.golang.org/grpc require minor v1.84.0 → v1.85.0
gopkg.in/evanphx/json-patch.v4 indirect major v4.13.0 → v5.9.11
k8s.io/api require patch v0.37.1 → v0.37.2
k8s.io/apiextensions-apiserver indirect patch v0.37.1 → v0.37.2
k8s.io/apimachinery require patch v0.37.1 → v0.37.2
k8s.io/client-go require patch v0.37.1 → v0.37.2
k8s.io/code-generator replace patch v0.37.1 → v0.37.2
k8s.io/code-generator require patch v0.37.1 → v0.37.2
k8s.io/kube-openapi replace digest d427ff9 → 5bee61f
k8s.io/kube-openapi require digest d427ff9 → 5bee61f
k8s.io/utils indirect digest cf1189d → ca04ba5

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/auth)

v0.24.3: auth: v0.24.3

Bug Fixes
  • auth: Strip -fips suffix from AWS service name in SigV4 signer (#​20805) (7a1474c)

v0.24.2: auth: v0.24.2

Bug Fixes
  • Adds additional validation for REST RPC requests (#​20753) (7827181)
  • auth/grpctransport: Use storage-direct authority for Interconnect (#​20738) (232cbe4)
Azure/azure-sdk-for-go (github.com/Azure/azure-sdk-for-go/sdk/azcore)

v1.24.0

1.24.0 (2026-11-02)

Features Added
  • Added tracing.WrapTracer to decorate a tracer while preserving attribute override ordering.
  • Added supporting infrastructure for SSE responses. This includes streaming types, runtime support, and fakes.
  • Added arm.ResourceID.ValidateResourceTypeChain to validate complete resource-type ancestry.
Bugs Fixed
  • Client tracing spans now redact the request URL in error descriptions using the pipeline's query parameter allow list.
  • Retry logging now uses the pipeline's query parameter allow list and redacts request URLs in errors.
Other Changes
  • Upgraded to Go 1.26.0.
  • Upgraded dependencies.

v1.23.3

1.23.3 (2026-10-06)

Bugs Fixed
  • Fixed arm.ResourceID.Location being empty when the locations segment uses different casing.
Other Changes
  • Added azure-deprecating to the default set of allowed (non-redacted) response headers for logging.
  • Replaced internal default HTTP client with the one from sdk/internal.
docker/cli (github.com/docker/cli)

v29.9.3+incompatible

Compare Source

v29.9.2+incompatible

Compare Source

go-openapi/runtime (github.com/go-openapi/runtime)

v0.33.4

Compare Source

0.33.4 - 2026-10-28

redoc v3

Full Changelog: go-openapi/runtime@v0.33.3...v0.33.4

9 commits in this release.

Fixed bugs
Miscellaneous tasks
Updates
People who contributed to this release

runtime license terms

License

Per-module changes
client-middleware/opentracing (0.33.4)
Miscellaneous tasks
Updates
docs/examples (0.33.4)
Miscellaneous tasks
Updates
server-middleware (0.33.4)
Fixed bugs
go-openapi/strfmt (github.com/go-openapi/strfmt)

v0.27.4

Compare Source

0.27.4 - 2026-10-19

Full Changelog: go-openapi/strfmt@v0.27.3...v0.27.4

5 commits in this release.

Miscellaneous tasks
Updates
People who contributed to this release

strfmt license terms

License

Per-module changes

enable/mongodb (0.27.4)

Miscellaneous tasks
Updates
  • build(deps): bump go.mongodb.org/mongo-driver/v2 from 2.9.1 to 2.9.2 in the other-dependencies group across 1 directory by @​dependabot[bot] in #​318 ...

internal/testintegration (0.27.4)

Miscellaneous tasks
Updates
go-openapi/validate (github.com/go-openapi/validate)

v1.0.1

Compare Source

1.0.1 - 2026-10-20

Full Changelog: go-openapi/validate@v1.0.0...v1.0.1

10 commits in this release.

Documentation
Miscellaneous tasks
Updates
People who contributed to this release

validate license terms

License

google/go-github (github.com/google/go-github/v73)

v93.0.0

Compare Source

This release contains the following breaking API changes:

  • feat!: Support reason in UsersService.Unsuspend (#​4614)
    BREAKING CHANGE: UsersService.Unsuspend now takes an UnsuspendUserRequest body argument.
  • refactor!: Pass repository creation by value (#​4616)
    BREAKING CHANGE: RepositoriesService.Create now requires a CreateRepositoryRequest value instead of a *Repository.
  • refactor!: Rename LockIssueOptions, PullRequestBranchUpdateOptions, and UserSuspendOptions to ...Request and pass them by value (#​4612)
    BREAKING CHANGE: LockIssueOptions, PullRequestBranchUpdateOptions, and UserSuspendOptions are renamed to LockIssueRequest, UpdatePullRequestBranchRequest, and SuspendUserRequest and are passed by value to IssuesService.Lock, PullRequestsService.UpdateBranch, and UsersService.Suspend; LockIssueRequest.LockReason is now *string.
  • refactor!: Pass the Projects v2 item body types by value and rename them to ...Request (#​4609)
    BREAKING CHANGE: AddProjectItemOptions and UpdateProjectItemOptions are renamed to AddProjectItemRequest and UpdateProjectItemRequest and passed by value; AddProjectItemRequest.Type is no longer a pointer; UpdateProjectItemOptions.Archived is removed.
  • refactor!: Rename RepositoryCreateForkOptions and RepositoryAddCollaboratorOptions to ...Request and pass them by value (#​4607)
    BREAKING CHANGE: RepositoryCreateForkOptions and RepositoryAddCollaboratorOptions are renamed to CreateForkRequest and AddCollaboratorRequest; RepositoriesService.CreateFork and RepositoriesService.AddCollaborator now take them by value instead of by pointer; CreateForkRequest.Organization, CreateForkRequest.Name, CreateForkRequest.DefaultBranchOnly and AddCollaboratorRequest.Permission are now pointers.
  • refactor!: Pass the Teams body types by value and rename them to ...Request (#​4606)
    BREAKING CHANGE: TeamAddTeamMembershipOptions, TeamAddTeamRepoOptions and TeamProjectOptions are renamed to AddTeamMembershipRequest, AddTeamRepoRequest and AddTeamProjectRequest; TeamsService.AddTeamMembershipByID, AddTeamMembershipBySlug, AddTeamRepoByID, AddTeamRepoBySlug, AddTeamProjectByID and AddTeamProjectBySlug now take them by value instead of by pointer; AddTeamMembershipRequest.Role and AddTeamRepoRequest.Permission are now *string.
  • refactor!: Pass the secret scanning body types by value and rename them to ...Request (#​4548)
    BREAKING CHANGE: SecretScanningAlertUpdateOptions and SecretScanningPatternConfigsUpdateOptions are renamed to UpdateSecretScanningAlertRequest and UpdateSecretScanningPatternConfigsRequest; SecretScanningService.UpdateAlert, UpdatePatternConfigsForEnterprise and UpdatePatternConfigsForOrg now take them by value; UpdateSecretScanningAlertRequest.State is now *string.
  • fix!: Match request body fields to the OpenAPI schemas (#​4581)
    BREAKING CHANGE: Many required request body fields are now passed by value.
  • fix!: Send credentials only to configured origins (#​4564)
    BREAKING CHANGE: Credentials are sent only to a client's configured API and upload origins — every other destination, including a redirect hop, goes out unauthenticated. A request body aimed outside those origins is refused. BasicAuthTransport and UnauthenticatedRateLimitedTransport gained AllowedOrigins, which GitHub Enterprise users must set.
  • refactor!: Pass org invitation requests by value (#​4551)
    BREAKING CHANGE: OrganizationsService.CreateOrgInvitation now takes CreateOrgInvitationRequest (by value); CreateOrgInvitationRequest.TeamID is now TeamIDs.

...and the following additional changes:

  • chore: Bump version of go-github to v93.0.0 (#​4634)
  • chore: Consolidate Dependabot PRs (#​4633)
  • feat: Add support for stargazer count and history (#​4611)
  • build: Bump github.com/ProtonMail/go-crypto from 1.5.1 to 1.5.2 in /example (#​4608)
  • fix: Allow removing runner group networks (#​4541)
  • feat: Add actions policies endpoints (#​4604)
  • feat: Add Actions cache limits for an organization (#​4597)
  • feat: Add dismissal_restriction to PullRequestRuleParameters (#​4599)
  • feat: Add code coverage ruleset support (#​4603)
  • tools: Leave response struct fields out of the schemafields check (#​4592)
  • feat: Add org private registries permission scope (#​4591)
  • chore: Use local gcl to create custom gcl if on path (#​4600)
  • feat: Add required field on combined status responses (#​4586)
  • build: Bump github.com/ProtonMail/go-crypto from 1.4.1 to 1.5.1 in /example (#​4602)
  • feat: Add Agents variables API (#​4587)
  • feat: Add ListPublicEmails (#​4595)
  • build: Bump codecov/codecov-action from 7.0.0 to 7.1.1 (#​4593)
  • chore: Report stale entries in openapi_operations.yaml (#​4589)
  • chore: Update openapi_operations.yaml (#​4588)
  • chore: Update maintenance tooling (#​4580)
  • docs: Add Trung Huynh Chi to AUTHORS (#​4582)
  • feat: Check request body fields against OpenAPI (#​4576)
  • docs: Add Sushant Poudel to AUTHORS (#​4579)
  • docs: Fix go-githubauth GitHub App example (#​4578)
  • chore: Consolidate Dependabot PRs (#​4575)
  • feat: Support explicit custom property values (#​4561)
  • feat: Support Changes and Enterprise fields on ReleaseEvent (#​4558)
  • fix: Reject an upload URL whose host differs from the configured upload host (#​4556)
  • chore: Update dependencies (#​4557)
  • feat: Add asynchronous SBOM support (#​4543)
  • chore: Bump go-github from v91 to v92 in /scrape (#​4555)

v92.0.0

Compare Source

This release contains the following breaking API changes:

  • refactor!: Pass the Codespaces body types by value and rename them to ...Request (#​4540)
    BREAKING CHANGE: CreateCodespaceOptions, CodespaceCreateForUserOptions, UpdateCodespaceOptions and PublishCodespaceOptions are renamed to CreateCodespaceRequest, CreateCodespaceForUserRequest, UpdateCodespaceRequest and PublishCodespaceRequest; CodespacesService.CreateInRepo, CreateFromPullRequest, Create, Update and Publish now take them by value instead of by pointer; CreateCodespaceForUserRequest.RepositoryID is now *int64.
  • refactor!: Rename DependencyGraphSnapshot to CreateDependencyGraphSnapshotRequest and pass by value (#​4519)
    BREAKING CHANGE: DependencyGraphSnapshot is now CreateDependencyGraphSnapshotRequest with field pointer/value changes.
  • feat!: Add pagination to Enterprise.ListBudgets and add GetUserStatesForBudget (#​4501)
    BREAKING CHANGE: EnterpriseService.ListBudgets now takes EnterpriseListBudgetsOptions.
  • refactor!: Split RepositoryComment request bodies and pass by value (#​4496)
    BREAKING CHANGE: RepositoriesService.CreateComment now takes CreateCommitCommentRequest and RepositoriesService.UpdateComment takes UpdateCommitCommentRequest, both passed by value instead of *RepositoryComment.

...and the following additional changes:

  • chore: Bump version of go-github to v92.0.0 (#​4554)
  • fix: Re-add ldapdb for ghes team creation (#​4553)
  • feat: Add ImageGen to HostedRunner and UpdateHostedRunnerRequest (#​4549)
  • feat: Support the edited and dismissed actions on PullRequestReviewEvent (#​4552)
  • fix: Escape package names in UsersService methods (#​4546)
  • feat: Add simple CRUD endpoints for GitHub Copilot Spaces (#​4379)
  • feat: Add Agents secrets API (#​4533)
  • fix: Escape environment names in URL paths across 5 files (#​4536)
  • feat: Add Copilot user-teams daily metrics report endpoints (#​4500)
  • chore: Consolidate Dependabot PRs (#​4542)
  • chore: Remove alexandear from REVIEWERS (#​4535)
  • feat: Add stacked pull request endpoints (#​4436)
  • feat: Add GetOrganizationUsageSummary and GetUserUsageSummary to BillingService (#​4521)
  • fix: Escape branch names when listing rules (#​4534)
  • fix: Accept 202 when deleting app installation (#​4529)
  • docs: Deprecate singular assignee fields (#​4528)
  • chore: Update AUTHORS (#​4522)
  • feat: Add ThrottledAt field to HookDelivery (#​4518)
  • chore: Consolidate Dependabot PRs (#​4515)
  • feat: Add IsEnabled field to IssueType (#​4504)
  • feat: Add Copilot repository daily metrics report endpoints (#​4498)
  • chore: Bump go-github from v90 to v91 in /scrape (#​4506)

v91.0.0

Compare Source

This release contains the following breaking API changes:

  • refactor!: Rename EditComment to UpdateComment on PullRequestsService, split review comment request bodies, and pass by value (#​4493)
    BREAKING CHANGE: PullRequestsService.CreateComment now takes CreatePullRequestCommentRequest by value; PullRequestsService.EditComment is now UpdateComment and takes UpdatePullRequestCommentRequest by value.
  • refactor!: Split Key request bodies into CreateDeployKeyRequest, CreateUserKeyRequest and CreateSSHSigningKeyRequest and pass by value (#​4477)
    BREAKING CHANGE: RepositoriesService.CreateKey, UsersService.CreateKey and UsersService.CreateSSHSigningKey now take CreateDeployKeyRequest, CreateUserKeyRequest and CreateSSHSigningKeyRequest by value.
  • refactor!: Pass PendingDeploymentsRequest and ReviewCustomDeploymentProtectionRuleRequest by value (#​4475)
    BREAKING CHANGE: ActionsService.PendingDeployments and ActionsService.ReviewCustomDeploymentProtectionRule now take PendingDeploymentsRequest and ReviewCustomDeploymentProtectionRuleRequest by value.
  • refactor!: Rename EditComment to UpdateComment on IssuesService, pass a new IssueCommentRequest by value, and add missing IssueComment fields (#​4444)
    BREAKING CHANGE: IssuesService.CreateComment now takes IssueCommentRequest by value; IssuesService.EditComment is now UpdateComment and takes IssueCommentRequest by value.
  • refactor!: Rename ImpersonateUserOptions to CreateUserImpersonationRequest and pass by value (#​4462)
    BREAKING CHANGE: AdminService.CreateUserImpersonation now takes CreateUserImpersonationRequest by value instead of *ImpersonateUserOptions.
  • refactor!: Update teams create & update patterns (#​4446)
    BREAKING CHANGE: CreateTeam and UpdateTeamBy* now take new body params by value.
  • refactor!: Rename EditMilestone to UpdateMilestone, split Milestone request bodies into CreateMilestoneRequest and UpdateMilestoneRequest, and pass by value (#​4438)
    BREAKING CHANGE: IssuesService.CreateMilestone now takes a new CreateMilestoneRequest by value; IssuesService.EditMilestone is now UpdateMilestone and takes a new UpdateMilestoneRequest by value.
  • refactor!: Pass UpdatePreReceiveHook request body by value via new UpdatePreReceiveHookRequest (#​4434)
    BREAKING CHANGE: RepositoriesService.UpdatePreReceiveHook now takes a new UpdatePreReceiveHookRequest by value instead of *PreReceiveHook.
  • refactor!: Rename UsersService.Edit to Update, introduce UserUpdateRequest, and pass request by value (#​4433)
    BREAKING CHANGE: UsersService.Edit is now Update and uses a new UserUpdateRequest body value.
  • refactor!: Pass LDAP mapping request bodies by value via new UpdateUserLDAPMappingRequest and UpdateTeamLDAPMappingRequest (#​4432)
    BREAKING CHANGE: AdminService.UpdateUserLDAPMapping and UpdateTeamLDAPMapping now take UpdateUserLDAPMappingRequest and UpdateTeamLDAPMappingRequest (with non-pointer LDAPDN) by value.

...and the following additional changes:

  • chore: Bump version of go-github to v91.0.0 (#​4505)
  • build: Bump google.golang.org/grpc from 1.82.1 to 1.83.1 in /example in the go_modules group across 1 directory (#​4502)
  • feat: Add Copilot code review active user counts to metrics structs (#​4490)
  • feat: Add MergeAsync and GetMergeAsyncResult support (#​4491)
  • feat: Add Copilot app metrics to usage metrics structs (#​4488)
  • fix: Close the original response body on non-2xx responses (#​4486)
  • perf: Reduce allocations in Client.Do response decoding with a buffer pool (#​4494)
  • feat: Require Go 1.26 and use new(expr) for pointer literals (#​4481)
  • build: Bump github.com/getkin/kin-openapi from 0.146.0 to 0.147.0 in /tools (#​4495)
  • feat: Add enterprise Visual Studio subscription licensing APIs (#​4483)
  • feat: Add Copilot AI credits and adoption phase metrics (#​4480)
  • feat: Add Copilot 3rd-party agent metrics (#​4460)
  • chore: Remove stale paramcheck allowlist entries (#​4476)
  • feat: Add tools/list-return-structs (#​4478)
  • feat: Add agent tasks API support (#​4225)
  • chore: Consolidate Dependabot PRs (#​4474)
  • fix: Keep the public toggle on repository visibility rules (#​4455)
  • chore: Bump golang-ci-lint version to v2.13.1 (#​4463)
  • chore: Consolidate Dependabot PRs (#​4454)
  • fix: Adjust argument index for Fprintf in fmtpercentv linter check (#​4443)
  • chore: Consolidate Dependabot PRs (#​4442)
  • chore: Remove stale User entry from the paramcheck allowlist (#​4437)
  • feat: Add enterprise level secret scanning custom patterns support (#​4431)
  • chore: Update openapi_operations.yaml (#​4430)
  • chore: Bump go-github from v89 to v90 in /scrape (#​4429)

v90.0.0

Compare Source

This release contains the following breaking API changes:

  • refactor!: Pass UpdateConnectedExternalGroup request body by value via new UpdateConnectedExternalGroupRequest (#​4425)
    BREAKING CHANGE: TeamsService.UpdateConnectedExternalGroup now takes UpdateConnectedExternalGroupRequest (with non-pointer GroupID) by value.
  • refactor!: Rename PullRequestReviewDismissalRequest to PullRequestDismissReviewRequest, add PullRequestSubmitReviewRequest, and pass review request bodies by value (#​4406)
    BREAKING CHANGE: PullRequestReviewDismissalRequest is now PullRequestDismissReviewRequest with non-pointer Message and PullRequestsService.DismissReview takes it by value; PullRequestsService.SubmitReview now takes a new PullRequestSubmitReviewRequest.
  • refactor!: Split CreateOrUpdateCustomRepoRoleOptions into CreateCustomRepoRoleRequest and UpdateCustomRepoRoleRequest and pass by value (#​4401)
    BREAKING CHANGE: CreateOrUpdateCustomRepoRoleOptions is split into CreateCustomRepoRoleRequest (with non-pointer Name and BaseRole) and UpdateCustomRepoRoleRequest; OrganizationsService.CreateCustomRepoRole and UpdateCustomRepoRole now take these request types by value.
  • refactor!: Rename EditLabel to UpdateLabel, Split Label into CreateLabelRequest & UpdateLabelRequest and pass by value (#​4400)
    BREAKING CHANGE: IssuesService.CreateLabel now takes CreateLabelRequest by value (with required non-pointer Name); IssuesService.EditLabel renamed to UpdateLabel, taking an UpdateLabelRequest by value.
  • refactor!: Rename AutolinkOptions to CreateAutolinkRequest, AddAutolink to CreateAutolink, and pass the body by value (#​4399)
    BREAKING CHANGE: AutolinkOptions is now CreateAutolinkRequest with non-pointer KeyPrefix and URLTemplate; RepositoriesService.AddAutolink is now CreateAutolink and passes body by value.
  • refactor!: Split IssueRequest into CreateIssueRequest & UpdateIssueRequest and pass by value (#​4396)
    BREAKING CHANGE: IssueService.Edit is renamed to IssueService.Update.
  • refactor!: Rename NewPullRequest to CreatePullRequest and pass it by value (#​4395)
    BREAKING CHANGE: NewPullRequest is renamed to CreatePullRequest, PullRequests.Create now takes it by value, and CreatePullRequest.Head and CreatePullRequest.Base are now string.
  • refactor!: Pass SarifAnalysis by value (#​4394)
    BREAKING CHANGE: CodeScanningService.UploadSarif now takes body by value and its required fields are no longer pointers.
  • refactor!: Pass CreateDeploymentBranchPolicyRequest and UpdateDeploymentBranchPolicyRequest by value (#​4382)
    BREAKING CHANGE: RepositoriesService.CreateDeploymentBranchPolicy and UpdateDeploymentBranchPolicy now take body by value and the required Name field is of type string.
  • refactor!: Pass TemplateRepoRequest by value in Repositories.CreateFromTemplate (#​4378)
    BREAKING CHANGE: RepositoriesService.CreateFromTemplate now passes body by value and Name is now required and passed by value.
  • refactor!: Pass RepositoryMergeRequest and RepoMergeUpstreamRequest by value (#​4372)
    BREAKING CHANGE: RepositoriesService.Merge and RepositoriesService.MergeUpstream now pass body by value and required struct fields are now values.
  • feat!: Refactor dependabot secrets to pass request by value (#​4348)
    BREAKING CHANGE: DependabotService methods involving secrets have new params and return values.

...and the following additional changes:

  • chore: Bump version of go-github to v90.0.0 (#​4428)
  • docs: Clarify assisted contribution expectations (#​4427)
  • feat: Add org level secret scanning custom patterns support (#​4426)
  • feat: Add MetaService.ListAPIVersions (#​4422)
  • feat: Add DeleteCodeQLDatabase for code scanning (#​4421)
  • feat: Add Stack field to PullRequest for stacked pull requests (#​4423)
  • build: Bump GitHub workflow action versions (#​4424)
  • feat: Add search_type support to issue search (#​4414)
  • chore: Update SecurityAdvisory structs with new fields (#​4413)
  • chore: Consolidate Dependabot PRs (#​4418)
  • feat: Support OIDC custom property claims for Actions (#​4411)
  • feat: Add repo-level secret scanning custom patterns support (#​4397)
  • chore: Update openapi_operations.yaml (#​4412)
  • chore: Fix comment typo (#​4410)
  • chore: Update dependabot changes (#​4405)
  • chore: Update openapi_operations.yaml (#​4398)
  • feat: Add remaining Projects v2 endpoints (#​4319)
  • chore: Update Dependabot-driven dependencies (#​4393)
  • chore: Bump /example dependencies (#​4380)
  • chore: Fix flaky tests with deterministic runs (#​4377)
  • build(deps): Bump golang.org/x/sync from 0.21.0 to 0.22.0 in /tools (#​4376)
  • chore: Fix flaky unit test (#​4374)
  • fix: Enable submitting empty allowlist for actions permissions patterns (#​4371)
  • feat: Add GitHub App Enterprise perm scope (#​4343)
  • chore: Bump go-github from v88 to v89 in /scrape (#​4370)

v89.0.0

Compare Source

This release contains the following breaking API changes:

  • refactor!: Pass DeploymentRequest and DeploymentStatusRequest by value (#​4361)
    BREAKING CHANGE: CreateDeployment and CreateDeploymentStatus now take DeploymentRequest and DeploymentStatusRequest by value; DeploymentRequest.Ref and DeploymentStatusRequest.State are now string, and DeploymentRequest.RequiredContexts is now []string.
  • refactor!: Pass HookConfig by value and rename EditHookConfiguration to UpdateHookConfiguration (#​4360)
    BREAKING CHANGE: EditHookConfiguration is renamed to UpdateHookConfiguration on RepositoriesService and OrganizationsService; these methods and AppsService.UpdateHookConfig now take HookConfig by value.
  • refactor!: Pass OIDCSubjectClaimCustomTemplate by value in the OIDC subject-claim Set methods (#​4340)
    BREAKING CHANGE: SetOrgOIDCSubjectClaimCustomTemplate and SetRepoOIDCSubjectClaimCustomTemplate now take their body params by value.
  • feat!: Refactor actions variables to pass request by value (#​4346)
    BREAKING CHANGE: ActionsService methods involving variables have new params and return values.
  • feat!: Replace actions env secret endpoints (#​4335)
    BREAKING CHANGE: ActionsService methods involving secrets have new params and return values.
  • refactor!: Pass CreateJITConfigRequest by value and rename Generate*JITConfig to Create*JITConfig ([#​4337](https://redirect.github.com/google/go-github/issues/4337

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux

red-hat-konflux Bot commented Oct 23, 2026 •
edited
Loading

Copy link
Copy Markdown
Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 22 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package Change
go 1.26.5 -> 1.27.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.1 -> v1.15.0
github.com/aws/aws-sdk-go-v2 v1.47.1 -> v1.47.5
github.com/go-jose/go-jose/v4 v4.1.5 -> v4.1.9
github.com/aws/aws-sdk-go-v2/config v1.33.6 -> v1.33.10
github.com/aws/aws-sdk-go-v2/credentials v1.20.6 -> v1.20.10
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.20.1 -> v1.20.4
github.com/aws/aws-sdk-go-v2/internal/configsources v1.5.4 -> v1.5.8
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.8.4 -> v2.8.8
github.com/aws/aws-sdk-go-v2/internal/v4a v1.5.4 -> v1.5.7
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.19 -> v1.13.22
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.14.4 -> v1.14.7
github.com/aws/aws-sdk-go-v2/service/kms v1.61.1 -> v1.62.2
github.com/aws/aws-sdk-go-v2/service/signin v1.10.1 -> v1.10.5
github.com/aws/aws-sdk-go-v2/service/sso v1.38.1 -> v1.38.5
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.43.1 -> v1.43.5
github.com/aws/aws-sdk-go-v2/service/sts v1.51.1 -> v1.51.5
github.com/aws/smithy-go v1.28.2 -> v1.28.7
github.com/googleapis/enterprise-certificate-proxy v0.3.23 -> v0.3.24
go.yaml.in/yaml/v3 v3.0.5 -> v3.0.6
google.golang.org/genproto v0.0.0-20261005182115-fad411399dd8 -> v0.0.0-20261012220534-4341edf3f941
google.golang.org/genproto/googleapis/api v0.0.0-20261012220534-4341edf3f941 -> v0.0.0-20261026165753-2ffab32bce7e
google.golang.org/genproto/googleapis/rpc v0.0.0-20261005182115-fad411399dd8 -> v0.0.0-20261026165753-2ffab32bce7e

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.0/go-deps branch 6 times, most recently from bff9970 to 81b478a Compare October 31, 2026 03:49
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.0/go-deps branch 7 times, most recently from 9cd7094 to 637f590 Compare November 8, 2026 01:42
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.0/go-deps branch from 637f590 to 55e71f6 Compare November 9, 2026 01:23
@red-hat-konflux
chore(deps): update go dependencies
1328f9c 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.0/go-deps branch from 55e71f6 to 1328f9c Compare November 10, 2026 02:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants