chore(deps): update go dependencies by red-hat-konflux[bot] · Pull Request #299 · securesign/policy-controller-operator

red-hat-konflux · 2026-07-30T13:58:16Z

This PR contains the following updates:

Package	Type	Update	Change
github.com/cenkalti/backoff/v5	indirect	major	`v5.0.3` → `v7.0.0`
github.com/docker/cli	indirect	minor	`v29.6.2+incompatible` → `v29.7.1+incompatible`
github.com/go-openapi/swag	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/go-openapi/swag/cmdutils	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/go-openapi/swag/conv	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/go-openapi/swag/fileutils	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/go-openapi/swag/jsonutils	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/go-openapi/swag/loading	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/go-openapi/swag/mangling	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/go-openapi/swag/netutils	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/go-openapi/swag/pools	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/go-openapi/swag/stringutils	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/go-openapi/swag/typeutils	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/go-openapi/swag/yamlutils	indirect	minor	`v0.27.3` → `v0.28.0`
github.com/sigstore/sigstore	indirect	patch	`v1.10.8` → `v1.10.9`
github.com/sigstore/sigstore-go	require	minor	`v1.2.2` → `v1.3.0`
go.yaml.in/yaml/v2	indirect	major	`v2.4.4` → `v3.0.5`
gomodules.xyz/jsonpatch/v2	indirect	major	`v2.4.0` → `v3.0.1`
gopkg.in/evanphx/json-patch.v4	indirect	major	`v4.13.0` → `v5.9.11`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

cenkalti/backoff (github.com/cenkalti/backoff/v5)

docker/cli (github.com/docker/cli)

`v29.7.1+incompatible`

Compare Source

`v29.7.0+incompatible`

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

`v0.28.0`

Compare Source

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

Implemented enhancements

feat(conv): add support for AppendXXX formatting of numbers by @fredbi in #229 ...

Miscellaneous tasks

chore: prepare release v0.28.0 by @bot-go-openapi[bot] in #230 ...

Updates

build(deps): bump the development-dependencies group with 9 updates by @dependabot[bot] in #228 ...

People who contributed to this release

@fredbi

swag license terms

Per-module changes

conv (0.28.0)

Implemented enhancements

feat(conv): add support for AppendXXX formatting of numbers by @fredbi in #229 ...

Miscellaneous tasks

chore: prepare release v0.28.0 by @bot-go-openapi[bot] in #230 ...

jsonutils/adapters/easyjson (0.28.0)

Miscellaneous tasks

chore: prepare release v0.28.0 by @bot-go-openapi[bot] in #230 ...

jsonutils/adapters/testintegration/benchmarks (0.28.0)

Miscellaneous tasks

chore: prepare release v0.28.0 by @bot-go-openapi[bot] in #230 ...

jsonutils/adapters/testintegration (0.28.0)

Miscellaneous tasks

chore: prepare release v0.28.0 by @bot-go-openapi[bot] in #230 ...

jsonutils (0.28.0)

Miscellaneous tasks

chore: prepare release v0.28.0 by @bot-go-openapi[bot] in #230 ...

loading (0.28.0)

Miscellaneous tasks

chore: prepare release v0.28.0 by @bot-go-openapi[bot] in #230 ...

yamlutils (0.28.0)

Miscellaneous tasks

chore: prepare release v0.28.0 by @bot-go-openapi[bot] in #230 ...

sigstore/sigstore (github.com/sigstore/sigstore)

`v1.10.9`

Compare Source

What's Changed

Note: #2369 deprecates the TUF client. Use the TUF client from sigstore-go instead: https://github.com/sigstore/sigstore-go/tree/main/pkg/tuf

Deprecate TUF client, ValidatePubKey in #2369
docs: add OVHcloud KMS in available external plugins in #2359
fix(oauthflow): default the device flow poll interval to 5s per RFC 8628 in #2381
Add BrowserOpener field to InteractiveIDTokenGetter in #2383
Fix Azure KMS support for RSA signatures in #2355

Full Changelog: sigstore/sigstore@v1.10.8...v1.10.9

sigstore/sigstore-go (github.com/sigstore/sigstore-go)

`v1.3.0`

Compare Source

What's Changed

Bump actions/setup-go from 6.5.0 to 7.0.0 by @dependabot[bot] in #659
Bump the minor-patch group across 1 directory with 6 updates by @dependabot[bot] in #660
fix(verify): prevent nil-pointer panic in TLogEntries by @cmenjivar in #658
Bump actions/checkout from 7.0.0 to 7.0.1 by @dependabot[bot] in #663
Bump the minor-patch group across 1 directory with 2 updates by @dependabot[bot] in #662
Handle 409s from Rekor by fetching the entry by @Hayden-IO in #647
verify: stop materializing in-toto predicates the verifier never reads by @mattmoor in #666
Bump linter, disable goconst, run go fix by @Hayden-IO in #664
Bump google.golang.org/grpc from 1.82.0 to 1.82.1 by @codysoyland in #667

New Contributors

@cmenjivar made their first contribution in #658
@mattmoor made their first contribution in #666

Full Changelog: sigstore/sigstore-go@v1.2.2...v1.3.0

yaml/go-yaml (go.yaml.in/yaml/v2)

`v3.0.5`

Compare Source

`v3.0.4`

Compare Source

`v3.0.3`

Compare Source

`v3.0.2`

Compare Source

`v3.0.1`

Compare Source

`v3.0.0`

Compare Source

gomodules/jsonpatch (gomodules.xyz/jsonpatch/v2)

`v3.0.1`

Compare Source

This release uses our forked gomodules/orderedmap library. Our forked version has 2 major changes:

Uses *OrderedMap instead of OrderedMap inside nested orderedmaps.
I ported unstructured helpers from Kubernetes to work with orderedmaps.

`v3.0.0`

Compare Source

This release uses iancoleman/orderedmap to generate predictable patch. This is very useful if the generated patch is checked into a VCS like git.

`v2.5.0`

Compare Source

What's Changed

Fix: handle lossy max int64 by @lacroixthomas in #40

New Contributors

@lacroixthomas made their first contribution in #40

Full Changelog: gomodules/jsonpatch@v2.4.0...v2.5.0

evanphx/json-patch (gopkg.in/evanphx/json-patch.v4)

`v5.9.11`

Compare Source

What's Changed

Export errBadJSONDoc and errBadJSONPatch errors by @skitt in #209

Full Changelog: evanphx/json-patch@v5.9.10...v5.9.11

`v5.9.10`

Compare Source

What's Changed

Drop the reference to gopkg.in for v5 by @skitt in #203
remove unmaintained errors pkg(github.com/pkg/errors) by @koba1t in #206

New Contributors

@skitt made their first contribution in #203
@koba1t made their first contribution in #206

Full Changelog: evanphx/json-patch@v5.9.0...v5.9.10

`v5.9.0`

Compare Source

What's Changed

Validate that the partialDoc is decoded correctly by @evanphx in #201
Add option to control if the output is HTMLEscaped by @evanphx in #202

Full Changelog: evanphx/json-patch@v5.8.1...v5.9.0

`v5.8.1`: Fix API breakage

Compare Source

This PR fixes Operation containing a reference to internal/json and breaking the ability to manually compose one. This restores that ability using a type alias.

Full Changelog: evanphx/json-patch@v5.8.0...v5.8.1

`v5.8.0`: Blargh Phixs and Empathyprovements

Compare Source

This release fixes a few stray panics, addresses large number accuracy, and improves performance!

What's Changed

Compare strings after decoding them to handle unicode correctly. Fixes #172 by @evanphx in #195
Always use UseNumber() to avoid float64 lossyness by @evanphx in #194
Handle null correctly when introduced by replace. Fixes #171 by @evanphx in #196
Handle from="" more properly. Fixes #192 by @evanphx in #193
Improve performance by @evanphx in #197

Full Changelog: evanphx/json-patch@v5.7.0...v5.8.0

`v5.7.0`: The 2023 Release

Compare Source

What's Changed

Fix invalid sprintf by @howardjohn in #152
Add CIFuzz GitHub action by @DavidKorczynski in #167
README: Remove Travis by @ohkinozomu in #164
Updated min supported version to go 1.18 by @Neo2308 in #181
Added dependabot by @Neo2308 in #182
Pre-flight DecodePatch validation: Issue #177 by @radwaretaltr in #180
Check if raw is a null pointer for findObject by @JosieLi-Google in #173
Bump actions/checkout from 2 to 4 by @dependabot in #187
Fix panic on test op by @erickertz in #158

New Contributors

@howardjohn made their first contribution in #152
@DavidKorczynski made their first contribution in #167
@ohkinozomu made their first contribution in #164
@Neo2308 made their first contribution in #181
@radwaretaltr made their first contribution in #180
@JosieLi-Google made their first contribution in #173
@dependabot made their first contribution in #187
@erickertz made their first contribution in #158

Full Changelog: evanphx/json-patch@v5.6.0...v5.7.0

`v5.6.0`: Bug fixes

Compare Source

What's Changed

Function ensurePathExists should handle appending correctly by @MarcelMue in #148
Fix partial negative indice support in v4 by @zqzten in #146

New Contributors

@MarcelMue made their first contribution in #148
@zqzten made their first contribution in #146

Full Changelog: evanphx/json-patch@v5.5.0...v5.6.0

`v5.5.0`: Better null handling

Compare Source

This incorporates a few fixes related to how nulls are handles in array's and objects.

`v5.3.0`: Fix zero sized document crash

Compare Source

This fixes a crash bug where submitted an empty slice as the document would panic.

`v5.2.0`

Compare Source

`v5.1.0`

Compare Source

`v5.0.0`: Proper Go modules release

Compare Source

This release has a proper /v5 directory, unlike the previous releases that did not have a /v4 dir. Thanks to @BenTheElder for getting this sorted out!

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2026-08-03T19:46:45Z

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

1 additional dependency was updated

Details:

Package	Change
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260715232425-e75dac1f907d` -> `v0.0.0-20260727163830-6c54dddc4772`

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot added the dependencies label Jul 30, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.0/go-deps branch 7 times, most recently from 20cd288 to aa187db Compare August 3, 2026 19:46

chore(deps): update go dependencies

e4a11e1

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.0/go-deps branch from aa187db to e4a11e1 Compare August 4, 2026 06:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update go dependencies - #299

chore(deps): update go dependencies#299
red-hat-konflux[bot] wants to merge 1 commit into
release-1.0from
konflux/mintmaker/release-1.0/go-deps

red-hat-konflux Bot commented Jul 30, 2026 •

edited

Loading

Uh oh!

red-hat-konflux Bot commented Aug 3, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

red-hat-konflux Bot commented Jul 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

0.28.0 - 2026-07-27

Implemented enhancements

Miscellaneous tasks

Updates

People who contributed to this release

Per-module changes

conv (0.28.0)

Implemented enhancements

Miscellaneous tasks

jsonutils/adapters/easyjson (0.28.0)

Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.28.0)

Miscellaneous tasks

jsonutils/adapters/testintegration (0.28.0)

Miscellaneous tasks

jsonutils (0.28.0)

Miscellaneous tasks

loading (0.28.0)

Miscellaneous tasks

yamlutils (0.28.0)

Miscellaneous tasks

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

v5.8.1: Fix API breakage

v5.8.0: Blargh Phixs and Empathyprovements

What's Changed

v5.7.0: The 2023 Release

What's Changed

New Contributors

v5.6.0: Bug fixes

What's Changed

New Contributors

v5.5.0: Better null handling

v5.3.0: Fix zero sized document crash

v5.0.0: Proper Go modules release

Configuration

Documentation

Uh oh!

red-hat-konflux Bot commented Aug 3, 2026

ℹ️ Artifact update notice

File name: go.mod

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux Bot commented Jul 30, 2026 •

edited

Loading

`v5.8.1`: Fix API breakage

`v5.8.0`: Blargh Phixs and Empathyprovements

`v5.7.0`: The 2023 Release

`v5.6.0`: Bug fixes

`v5.5.0`: Better null handling

`v5.3.0`: Fix zero sized document crash

`v5.0.0`: Proper Go modules release