[cpanato]

Xref: #2018 #2019 #2020 #2021 #2042

Summary

Bumping go.opentelemetry.io/otel/sdk past v1.44 makes the policy-controller webhook crash on startup, which is why every e2e job fails on the open otel and minor-patch dependabot PRs:

panic: conflicting Schema URL: https://opentelemetry.io/schemas/1.43.0 and https://opentelemetry.io/schemas/1.41.0
knative.dev/pkg/observability/resource.Default (default.go:66)

The pinned knative.dev/pkg merges its resource using semconv v1.41.0, while newer otel SDKs use v1.43.0. knative.dev/pkg main has moved to semconv v1.43.0, so this bumps it. That also pulls otel to v1.47.0 and k8s to v0.36.5.

The new knative.dev/pkg marks ConditionManager.MarkFalse as printf-like, so go vet/lint flag passing msg as the format string. Those calls now use "%s", msg, which also stops a % in an error message from being mangled.

Testing

• resource.Default(...) no longer panics and returns schema 1.43.0.
• go build ./..., go vet, golangci-lint run (0 issues), and ./hack/update-codegen.sh (no diff) pass.
• go test ./... passes except pkg/policy, which hangs fetching the public TUF root from my machine. It hangs the same way on main, so it's environmental.

Not covered here

• chore(deps): Bump the minor-patch group across 1 directory with 17 updates #2030 (GitHub Actions bump): the new setup-kind drops v1.33.x. Test e2e against supported Kubernetes versions where possible #2040 already updates the k8s matrix and setup-kind.
• chore(deps): Bump the minor-patch group across 1 directory with 31 updates #2042 lint: the sigstore/sigstore bump deprecates pkg/tuf and fulcioroots. Begin to replace deprecated sigstore/sigstore implemented TUF client implementation with sigstore/sigstore-go #2037 (migrate to sigstore-go) addresses that.

🤖 Generated with Claude Code

[codecov]

Codecov Report

❌ Patch coverage is 0% with 8 lines in your changes missing coverage. Please review.
✅ Project coverage is 34.81%. Comparing base (45f4f1e) to head (6dfac7e).
⚠️ Report is 7 commits behind head on main.

Files with missing lines	Patch %	Lines
...is/policy/v1alpha1/clusterimagepolicy_lifecycle.go	0.00%	3 Missing ⚠️
...pis/policy/v1beta1/clusterimagepolicy_lifecycle.go	0.00%	3 Missing ⚠️
pkg/apis/policy/v1alpha1/trustroot_lifecycle.go	0.00%	2 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2044   +/-   ##
=======================================
  Coverage   34.81%   34.81%           
=======================================
  Files         127      127           
  Lines        6870     6870           
=======================================
  Hits         2392     2392           
  Misses       4478     4478           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.