Skip to content

chore(deps): update go dependencies - #38

Closed
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps
Closed

chore(deps): update go dependencies#38
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jul 20, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
github.com/docker/docker-credential-helpers indirect minor v0.8.2 -> v0.9.3
github.com/fsnotify/fsnotify indirect minor v1.8.0 -> v1.9.0
github.com/go-logr/logr indirect patch v1.4.2 -> v1.4.3
github.com/go-openapi/jsonpointer indirect patch v0.21.0 -> v0.21.1
github.com/google/gnostic-models indirect minor v0.6.9 -> v0.7.0
github.com/google/pprof indirect digest 27863c8 -> 6e76a2b
github.com/letsencrypt/boulder indirect minor v0.0.0-20240620165639-de9c06129bec -> v0.20250714.0
github.com/opencontainers/image-spec indirect patch v1.1.0 -> v1.1.1
github.com/prometheus/client_model indirect patch v0.6.1 -> v0.6.2
github.com/prometheus/common indirect minor v0.62.0 -> v0.65.0
github.com/prometheus/procfs indirect minor v0.15.1 -> v0.17.0
github.com/sigstore/protobuf-specs indirect minor v0.4.1 -> v0.5.0
github.com/sigstore/sigstore indirect patch v1.9.4 -> v1.9.5
github.com/sigstore/sigstore-go require minor v1.0.0 -> v1.1.0
github.com/spf13/pflag indirect patch v1.0.6 -> v1.0.7
github.com/vbatts/tar-split indirect minor v0.11.6 -> v0.12.1
golang.org/x/crypto indirect minor v0.38.0 -> v0.40.0
golang.org/x/net indirect minor v0.40.0 -> v0.42.0
golang.org/x/oauth2 indirect minor v0.29.0 -> v0.30.0
golang.org/x/sync indirect minor v0.14.0 -> v0.16.0
golang.org/x/sys indirect minor v0.33.0 -> v0.34.0
golang.org/x/term indirect minor v0.32.0 -> v0.33.0
golang.org/x/text indirect minor v0.25.0 -> v0.27.0
golang.org/x/time indirect minor v0.9.0 -> v0.12.0
golang.org/x/tools indirect minor v0.31.0 -> v0.35.0
google.golang.org/genproto/googleapis/api indirect digest 207652e -> 7130f93
k8s.io/api require minor v0.32.1 -> v0.33.3
k8s.io/apiextensions-apiserver indirect minor v0.32.0 -> v0.33.3
k8s.io/apimachinery require minor v0.32.1 -> v0.33.3
k8s.io/client-go require minor v0.32.1 -> v0.33.3
k8s.io/kube-openapi indirect digest c8a335a -> f3f2b99
k8s.io/utils indirect digest 3ea5e8c -> 4c0f3b2
sigs.k8s.io/controller-runtime require minor v0.20.0 -> v0.21.0
sigs.k8s.io/json indirect digest 9aa6b5e -> cfa47c3
sigs.k8s.io/yaml indirect minor v1.4.0 -> v1.5.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)

v0.9.3

Compare Source

What's Changed

Full Changelog: docker/docker-credential-helpers@v0.9.2...v0.9.3

v0.9.2

Compare Source

What's Changed

Full Changelog: docker/docker-credential-helpers@v0.9.1...v0.9.2

v0.9.1

Compare Source

What's Changed

Full Changelog: docker/docker-credential-helpers@v0.9.0...v0.9.1

v0.9.0

Compare Source

[!WARNING]
This release introduced an important regression that prevents credentials stored with earlier versions of docker-credential-osxkeychain from being accessible with this version.

v0.9.1 has been released to address this issue, but credentials stored with v0.9.0 won't be accessible with >= v0.9.1 and versions prior to v0.9.0.

Additionally, we've retracted the Go module v0.9.0.

What's Changed

Dependency updates

Full Changelog: docker/docker-credential-helpers@v0.8.2...v0.9.0

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.9.0

Compare Source

Changes and fixes

  • all: make BufferedWatcher buffered again (#​657)

  • inotify: fix race when adding/removing watches while a watched path is being deleted (#​678, #​686)

  • inotify: don't send empty event if a watched path is unmounted (#​655)

  • inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#​679)

  • kqueue: fix watching relative symlinks (#​681)

  • kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#​682)

  • illumos: don't send error if changed file is deleted while processing the event (#​678)

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.21.1

Compare Source

google/gnostic-models (github.com/google/gnostic-models)

v0.7.0

Compare Source

letsencrypt/boulder (github.com/letsencrypt/boulder)

v0.20250714.0

Compare Source

v0.20250707.0

Compare Source

v0.20250701.0

Compare Source

opencontainers/image-spec (github.com/opencontainers/image-spec)

v1.1.1

Compare Source

Vote Passed [+5 -0 nv1] - https://groups.google.com/a/opencontainers.org/g/dev/c/T-olx0jdT18
Release PR : https://github.com/opencontainers/image-spec/pull/1247
Full Changelog: opencontainers/image-spec@v1.1.0...v1.1.1

prometheus/client_model (github.com/prometheus/client_model)

v0.6.2

Compare Source

What's Changed

Full Changelog: prometheus/client_model@v0.6.1...v0.6.2

prometheus/common (github.com/prometheus/common)

v0.65.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.64.0...v0.65.0

v0.64.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.63.0...v0.64.0

v0.63.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.62.0...v0.63.0

prometheus/procfs (github.com/prometheus/procfs)

v0.17.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.16.1...v0.17.0

v0.16.1

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.16.0...v0.16.1

v0.16.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.15.1...v0.16.0

sigstore/protobuf-specs (github.com/sigstore/protobuf-specs)

v0.5.0

Compare Source

Added
  • Introduce v0.2 TrustedRoot, un-deprecate log ID. Checkpoint key ID and
    Operator for TrustedRoot are only set for v0.2 TrustedRoot.
    (#​690)
Changed
  • Remove service-proto codegen for Go
    (#​676)

v0.4.3

Compare Source

v0.4.2

Compare Source

sigstore/sigstore (github.com/sigstore/sigstore)

v1.9.5

Compare Source

What's Changed

Full Changelog: sigstore/sigstore@v1.9.4...v1.9.5

sigstore/sigstore-go (github.com/sigstore/sigstore-go)

v1.1.0

Compare Source

sigstore-go v1.1.0 introduces support for Rekor v2, a redesigned and modernized transparency log that's cheaper to operate, easier to scale, and simpler to maintain.

What's Changed

Full Changelog: sigstore/sigstore-go@v1.0.0...v1.1.0

spf13/pflag (github.com/spf13/pflag)

v1.0.7

Compare Source

What's Changed

New Contributors

Configuration

📅 Schedule: Branch creation - "after 5am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

@red-hat-konflux
chore(deps): update go dependencies
0df7a72 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux

red-hat-konflux Bot commented Jul 20, 2025 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.6 -> 1.24.0
github.com/google/go-containerregistry v0.20.3 -> v0.20.6
github.com/docker/cli v27.5.0+incompatible -> v28.2.2+incompatible
github.com/go-jose/go-jose/v4 v4.0.5 -> v4.1.0

@sourcery-ai

sourcery-ai Bot commented Jul 20, 2025 •
edited
Loading

Copy link
Copy Markdown

Reviewer's Guide

This PR updates the Go toolchain directive and refreshes both direct and indirect module dependencies in go.mod, applying version bumps across Kubernetes APIs, container/security libraries, observability (Prometheus and monitoring) modules, and various golang.org/x and auxiliary packages, with corresponding changes reflected in go.sum.

File-Level Changes

Change Details Files
Update Go toolchain version
  • Bump Go version from 1.23.6 to 1.24.0
  • Add toolchain directive go1.24.4
 go.mod
go.sum
Bump core platform dependencies
  • Upgrade google/go-containerregistry to v0.20.6
  • Update k8s.io/api, apimachinery, client-go to v0.33.3
  • Bump sigs.k8s.io/controller-runtime to v0.21.0
 go.mod
go.sum
Upgrade container and security libraries
  • Bump docker CLI to v28.2.2 and docker-credential-helpers to v0.9.3
  • Upgrade go-jose to v4.1.0
  • Update sigstore/protobuf-specs to v0.5.0 and sigstore/sigstore to v1.9.5
 go.mod
go.sum
Refresh observability and monitoring modules
  • Upgrade fsnotify to v1.9.0, go-logr/logr to v1.4.3, go-openapi/jsonpointer to v0.21.1
  • Bump Prometheus client_model to v0.6.2, common to v0.65.0, procfs to v0.17.0
 go.mod
go.sum
Update auxiliary Go and third-party modules
  • Refresh multiple golang.org/x/* modules to latest minor versions
  • Bump opencontainers/image-spec, google genproto, k8s.io/kube-openapi, k8s.io/utils, sigs.k8s.io/json & yaml
 go.mod
go.sum
Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@JasonPowr JasonPowr closed this Jul 21, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@JasonPowr