Skip to content

Update go updates#268

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/go-updates
Open

Update go updates#268
renovate[bot] wants to merge 1 commit intomainfrom
renovate/go-updates

Conversation

@renovate
Copy link
Copy Markdown
Contributor

@renovate renovate bot commented Sep 8, 2025

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/cenkalti/backoff/v4 v4.3.0v5.0.3 age confidence indirect major
github.com/docker/docker v28.3.3+incompatiblev28.5.2+incompatible age confidence indirect minor
github.com/fxamacker/cbor/v2 v2.9.0v2.9.1 age confidence indirect patch
github.com/go-openapi/jsonpointer v0.21.2v0.22.5 age confidence indirect minor
github.com/go-openapi/jsonreference v0.21.0v0.21.5 age confidence indirect patch
github.com/go-openapi/swag v0.23.1v0.25.5 age confidence indirect minor
github.com/google/gnostic-models v0.7.0v0.7.1 age confidence indirect patch
github.com/mailru/easyjson v0.9.0v0.9.2 age confidence indirect patch
go.opentelemetry.io/auto/sdk v1.1.0v1.2.1 age confidence indirect minor
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.62.0v0.67.0 age confidence indirect minor
go.opentelemetry.io/otel v1.37.0v1.43.0 age confidence indirect minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.37.0v1.43.0 age confidence indirect minor
go.opentelemetry.io/otel/metric v1.37.0v1.43.0 age confidence indirect minor
go.opentelemetry.io/otel/trace v1.37.0v1.43.0 age confidence indirect minor
go.opentelemetry.io/proto/otlp v1.7.1v1.10.0 age confidence indirect minor
go.yaml.in/yaml/v2 v2.4.2v3.0.4 age confidence indirect major
golang.org/x/net v0.43.0v0.52.0 age confidence indirect minor
golang.org/x/oauth2 v0.30.0v0.36.0 age confidence indirect minor
golang.org/x/sys v0.35.0v0.42.0 age confidence indirect minor
golang.org/x/term v0.34.0v0.41.0 age confidence indirect minor
golang.org/x/text v0.28.0v0.35.0 age confidence indirect minor
golang.org/x/time v0.12.0v0.15.0 age confidence indirect minor
google.golang.org/protobuf v1.36.8v1.36.11 age confidence indirect patch
gopkg.in/evanphx/json-patch.v4 v4.12.0v5.9.11 age confidence indirect major
k8s.io/api v0.34.0v0.35.3 age confidence indirect minor
k8s.io/apimachinery v0.34.0v0.35.3 age confidence indirect minor
k8s.io/client-go v0.34.0v0.35.3 age confidence indirect minor
k8s.io/klog/v2 v2.130.1v2.140.0 age confidence indirect minor
k8s.io/kube-openapi d7b6acb16be699 age confidence indirect digest
k8s.io/utils 0af2bda28399d8 age confidence indirect digest
sigs.k8s.io/structured-merge-diff/v6 v6.3.0v6.3.2 age confidence indirect patch

Release Notes

cenkalti/backoff (github.com/cenkalti/backoff/v4)

v5.0.3

Compare Source

v5.0.2

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

docker/docker (github.com/docker/docker)

v28.5.2+incompatible

Compare Source

v28.5.1+incompatible

Compare Source

v28.5.0+incompatible

Compare Source

v28.4.0+incompatible

Compare Source

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.1

Compare Source

This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.

🐞 Bug fixes related to the keyasint feature

These changes only affect Go struct fields tagged with keyasint:

  • [Decoding] Reject integer keys that exceed math.MaxInt64 when decoding CBOR map to a struct with keyasint field (PR #​757)
  • [Decoding] Prevent string representation of an integer key from matching the struct field tagged by keyasint (PR #​757)
  • [Encoding & Decoding] Deduplicate struct fields with the same normalized keyasint tag values (PR #​757)
🐞 Other bug fixes and defensive checks

Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).

NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).

  • [Decoding] Reject decoding epoch time encoded as floats that overflow int64 (PR #​753)
  • [Encoding] Return a cloned slice for an empty RawMessage from RawMessage.MarshalCBOR (PR #​753)
  • [Encoding] Reject encoding nil inside indefinite-length strings (PR #​750)
  • [Diagnostic] Accept valid U+FFFD replacement character (PR #​753)

What's Changed

CI / GitHub Actions and Docs
🔎 Details...

New Contributors

Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.22.5

Compare Source

0.22.5 - 2026-03-02

Full Changelog: go-openapi/jsonpointer@v0.22.4...v0.22.5

15 commits in this release.


Documentation
Code quality
Miscellaneous tasks
Updates

People who contributed to this release

New Contributors

jsonpointer license terms

License

v0.22.4

Compare Source

0.22.4 - 2025-12-06

Full Changelog: go-openapi/jsonpointer@v0.22.3...v0.22.4

1 commits in this release.


Miscellaneous tasks

People who contributed to this release

jsonpointer license terms

License

v0.22.3

Compare Source

0.22.3 - 2025-11-17

Full Changelog: go-openapi/jsonpointer@v0.22.2...v0.22.3

8 commits in this release.


Documentation
Code quality
Miscellaneous tasks

People who contributed to this release

New Contributors

jsonpointer license terms

License

v0.22.2

Compare Source

0.22.2 - 2025-11-14

Full Changelog: go-openapi/jsonpointer@v0.22.1...v0.22.2

12 commits in this release.


Documentation
Code quality
Testing
Miscellaneous tasks
Security
Updates

People who contributed to this release

jsonpointer license terms

License

v0.22.1

Compare Source

v0.22.0

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.5

Compare Source

0.21.5 - 2026-03-02

Full Changelog: go-openapi/jsonreference@v0.21.4...v0.21.5

14 commits in this release.


Documentation
Code quality
Testing
Miscellaneous tasks
Updates

People who contributed to this release

jsonreference license terms

License

v0.21.4

Compare Source

0.21.4 - 2025-12-08

Full Changelog: go-openapi/jsonreference@v0.21.3...v0.21.4

1 commits in this release.


Documentation

People who contributed to this release

New Contributors

jsonreference license terms

License

v0.21.3

Compare Source

v0.21.2

Compare Source

v0.21.1

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

v0.25.5

Compare Source

0.25.5 - 2026-03-02

Full Changelog: go-openapi/swag@v0.25.4...v0.25.5

16 commits in this release.


Documentation
Code quality
Testing
Miscellaneous tasks
Updates

People who contributed to this release

New Contributors

swag license terms

License

Per-module changes


cmdutils (0.25.5)

Testing

conv (0.25.5)

Testing
Miscellaneous tasks
Updates

fileutils (0.25.5)

Testing
Updates

jsonname (0.25.5)

Testing
Updates

jsonutils/adapters/easyjson (0.25.5)

Testing
Miscellaneous tasks
Updates
  • build(deps): bump th

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM, only on Monday ( * 0-3 * * 1 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot force-pushed the renovate/go-updates branch 6 times, most recently from 7990835 to 91ce491 Compare September 12, 2025 05:09
@renovate renovate bot force-pushed the renovate/go-updates branch from 91ce491 to a5967d8 Compare September 16, 2025 04:35
@renovate renovate bot force-pushed the renovate/go-updates branch 5 times, most recently from 346d52d to 9210a2e Compare September 26, 2025 22:11
@renovate renovate bot force-pushed the renovate/go-updates branch 7 times, most recently from 385b12a to ec3bc8c Compare October 9, 2025 01:28
@renovate renovate bot force-pushed the renovate/go-updates branch 4 times, most recently from 9dd5b8a to a78b0d0 Compare November 9, 2025 14:55
@renovate renovate bot force-pushed the renovate/go-updates branch 5 times, most recently from efed7aa to ad44025 Compare November 18, 2025 04:00
@renovate renovate bot force-pushed the renovate/go-updates branch 2 times, most recently from eb7472f to 2d44250 Compare November 21, 2025 17:54
@renovate renovate bot force-pushed the renovate/go-updates branch from 0f34548 to 55e8b5b Compare December 22, 2025 21:00
@renovate
Copy link
Copy Markdown
Contributor Author

renovate bot commented Dec 22, 2025

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.3 -> 1.25.0

@renovate renovate bot force-pushed the renovate/go-updates branch from 55e8b5b to ebe9f9d Compare December 23, 2025 01:59
@renovate renovate bot force-pushed the renovate/go-updates branch 7 times, most recently from 698a980 to 7072ce8 Compare January 12, 2026 17:57
@renovate renovate bot force-pushed the renovate/go-updates branch 3 times, most recently from 497444e to eece943 Compare January 27, 2026 16:04
@renovate renovate bot force-pushed the renovate/go-updates branch 6 times, most recently from abf922e to 29c9491 Compare February 9, 2026 21:59
@renovate renovate bot force-pushed the renovate/go-updates branch 4 times, most recently from 52f38ba to 5fa623c Compare February 11, 2026 04:31
@renovate renovate bot force-pushed the renovate/go-updates branch 4 times, most recently from 39c02e9 to a7695ec Compare February 19, 2026 22:45
@renovate renovate bot force-pushed the renovate/go-updates branch 2 times, most recently from 6a329f8 to db38fde Compare February 27, 2026 09:48
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants