Update github.com/timakin/bodyclose digest to 857993a

[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Type	Update	Change
github.com/timakin/bodyclose	indirect	digest	73d1f95 → 857993a

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign mbrudnoy for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a openshift-hyperfleet member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 6dcb46f6-de49-4f32-b2a3-cd4fd1b9bf74

📥 Commits

Reviewing files that changed from the base of the PR and between bca2f92 and 86479be.

⛔ Files ignored due to path filters (1)

• tools/go.sum is excluded by !**/*.sum, !**/go.sum

📒 Files selected for processing (1)

• tools/go.mod

🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

• openshift-hyperfleet/architecture (manual)
• openshift-hyperfleet/hyperfleet-api (manual)
• openshift-hyperfleet/hyperfleet-sentinel (manual)
• openshift-hyperfleet/hyperfleet-adapter (manual)
• openshift-hyperfleet/hyperfleet-broker (manual)

Included review availability: Your plan provides up to 12 included reviews per hour; 9 remain after this review.

---

📝 Walkthrough

Summary by CodeRabbit

• Chores
  • Updated an internal tooling dependency to a newer version.

Walkthrough

The pull request updates the indirect github.com/timakin/bodyclose dependency in tools/go.mod from a January 2026 pseudo-version to a July 2026 pseudo-version.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 86479

This change only updates an indirect dependency digest, and no actionable merge-blocking risk remains beyond normal checks and review.

Suggested reviewers: vkareh, jsell-rh, kuudori

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Sec-02: Secrets In Log Output	✅ Passed	PASS. The PR changes only the indirect github.com/timakin/bodyclose version in the tooling module and its tools/go.sum checksums. It adds no Go source or log statement. Existing non-test/example `…
No Hardcoded Secrets	✅ Passed	PASS. The pull request changes only the indirect github.com/timakin/bodyclose version in tools/go.mod and its Go checksum records in tools/go.sum. The added 44-character base64 strings are h1:…
No Weak Cryptography	✅ Passed	PASS. The pull request changes only the tools module dependency and checksum entries for github.com/timakin/bodyclose; it adds no Go implementation or cryptographic call. The old and new `bodyclos…
No Injection Vectors	✅ Passed	PASS. The PR changes only tools/go.mod and tools/go.sum; it adds no project executable source. Static inspection of the updated bodyclose source found no fmt.Sprintf query construction, `exec.…
No Privileged Containers	✅ Passed	PASS. The PR changes only tools/go.mod and tools/go.sum. The diff updates github.com/timakin/bodyclose and its checksums. It does not change a Kubernetes/OpenShift manifest, Helm template, or Dockerfi…
No Pii Or Sensitive Data In Logs	✅ Passed	PASS. The pull request changes only the indirect github.com/timakin/bodyclose version in tools/go.mod and its checksums in tools/go.sum. It adds no Go source files or logging statements. The dep…
Description check	✅ Passed	The description accurately identifies the indirect github.com/timakin/bodyclose dependency update from digest 73d1f95 to 857993a.
Title check	✅ Passed	The title clearly identifies the bodyclose dependency digest update and matches the main change.

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Sec-02: Secrets In Log Output

Explanation

PASS. The PR changes only the indirect github.com/timakin/bodyclose version in the tooling module and its tools/go.sum checksums. It adds no Go source or log statement. Existing non-test/example slog calls use identity, owner, namespace, resource, and error fields, with no token, password, credential, or secret field or interpolation. No CWE/CVE applies.

Full details: No Hardcoded Secrets

Explanation

PASS. The pull request changes only the indirect github.com/timakin/bodyclose version in tools/go.mod and its Go checksum records in tools/go.sum. The added 44-character base64 strings are h1: module checksums, not credentials, and go.sum is dependency metadata rather than application configuration. No API key, token, password, private key, credentialed URL, or secret-bearing variable was added. No CWE or CVE applies.

Full details: No Weak Cryptography

Explanation

PASS. The pull request changes only the tools module dependency and checksum entries for github.com/timakin/bodyclose; it adds no Go implementation or cryptographic call. The old and new bodyclose source archives contain no banned cryptographic imports or primitives. The repository Go sources also contain no matching crypto usage. No CWE or CVE applies.

Full details: No Injection Vectors

Explanation

PASS. The PR changes only tools/go.mod and tools/go.sum; it adds no project executable source. Static inspection of the updated bodyclose source found no fmt.Sprintf query construction, exec.Command/exec.CommandContext, template.HTML, yaml.Unmarshal/yaml.NewDecoder, or SQL construction. The added http.Get calls are hardcoded test fixtures. No CWE-89, CWE-78, CWE-79, or CWE-502 injection vector was introduced. No CVE is indicated.

Full details: No Privileged Containers

Explanation

PASS. The PR changes only tools/go.mod and tools/go.sum. The diff updates github.com/timakin/bodyclose and its checksums. It does not change a Kubernetes/OpenShift manifest, Helm template, or Dockerfile, and it introduces none of the specified privileged-container settings. No CWE or CVE applies to this custom check.

Full details: No Pii Or Sensitive Data In Logs

Explanation

PASS. The pull request changes only the indirect github.com/timakin/bodyclose version in tools/go.mod and its checksums in tools/go.sum. It adds no Go source files or logging statements. The dependency is used by the tooling module for golangci-lint, not by application logging code. No PII or sensitive data logging condition is introduced. No CWE/CVE applies to this check.

✨ Finishing Touches 💡 1

🛠️ Fix failing CI checks 💡

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/main/github.com-timakin-bodyclose-digest

✨ Simplify code

• Create PR with simplified code
• Commit simplified code in branch konflux/mintmaker/main/github.com-timakin-bodyclose-digest

---

_{Comment @coderabbitai help to get the list of available commands.}

[ciaranRoche]

Superseded by consolidated dependency PR #26