Skip to content

chore(deps): update go dependencies - #410

Open
red-hat-konflux[bot] wants to merge 3 commits into
release-1.4from
konflux/mintmaker/release-1.4/go-deps
Open

chore(deps): update go dependencies#410
red-hat-konflux[bot] wants to merge 3 commits into
release-1.4from
konflux/mintmaker/release-1.4/go-deps

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jul 17, 2026

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
github.com/aws/smithy-go indirect patch v1.27.3v1.27.4
github.com/cenkalti/backoff/v4 indirect major v4.3.0v7.0.0
github.com/go-openapi/analysis indirect patch v0.25.1v0.25.3
github.com/go-openapi/jsonpointer indirect major v0.23.1v1.0.0
github.com/go-openapi/jsonreference indirect major v0.21.5v1.0.0
github.com/go-openapi/loads require minor v0.23.3v0.24.0
github.com/go-openapi/runtime indirect patch v0.32.4v0.32.5
github.com/go-openapi/runtime require minor v0.29.5v0.32.5
github.com/go-openapi/runtime/server-middleware indirect patch v0.32.4v0.32.5
github.com/go-openapi/spec require patch v0.22.5v0.22.6
github.com/go-openapi/strfmt indirect minor v0.26.4v0.27.0
github.com/go-openapi/strfmt require minor v0.26.4v0.27.0
github.com/go-openapi/swag indirect minor v0.25.5v0.27.0 v0.27.1
github.com/go-openapi/swag require minor v0.26.1v0.27.0 v0.27.1
github.com/go-openapi/swag/cmdutils indirect minor v0.25.5v0.27.0 v0.27.1
github.com/go-openapi/swag/jsonname indirect minor v0.26.1v0.27.0 v0.27.1
github.com/go-openapi/validate indirect minor v0.25.2v0.26.0
github.com/go-swagger/go-swagger require minor v0.33.2v0.35.0
github.com/google/go-containerregistry indirect patch v0.21.5v0.21.7
github.com/hashicorp/hcl indirect major v1.0.1-vault-7v2.24.0
go.step.sm/crypto require minor v0.84.1v0.85.0
go.yaml.in/yaml/v2 indirect major v2.4.4v3.0.4
google.golang.org/api indirect minor v0.288.0v0.289.0
google.golang.org/genproto indirect digest 3700d41e75dac1
google.golang.org/genproto/googleapis/api indirect digest 925bb5de75dac1
google.golang.org/genproto/googleapis/rpc indirect digest 925bb5de75dac1
google.golang.org/grpc indirect patch v1.82.0v1.82.1
gopkg.in/yaml.v2 indirect major v2.4.0v3.0.1

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

aws/smithy-go (github.com/aws/smithy-go)

v1.27.4

Compare Source

cenkalti/backoff (github.com/cenkalti/backoff/v4)

v7.0.0

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

v5.0.3

Compare Source

v5.0.2

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

go-openapi/analysis (github.com/go-openapi/analysis)

v0.25.3

Compare Source

0.25.3 - 2026-06-27

Full Changelog: go-openapi/analysis@v0.25.2...v0.25.3

14 commits in this release.


Documentation
Miscellaneous tasks
Updates

People who contributed to this release

analysis license terms

License

Per-module changes


internal/testintegration (0.25.3)

Updates

v0.25.2

Compare Source

0.25.2 - 2026-06-02

Full Changelog: go-openapi/analysis@v0.25.1...v0.25.2

5 commits in this release.


Implemented enhancements
  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...
Documentation
Miscellaneous tasks
Security
Updates

People who contributed to this release

analysis license terms

License

Per-module changes


internal/testintegration (0.25.2)

Miscellaneous tasks
Security
go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v1.0.0

Compare Source

1.0.0 - 2026-07-07

Stable API pledge - no change from v0.24.0

Full Changelog: go-openapi/jsonpointer@v0.24.0...v1.0.0

2 commits in this release.


Documentation

People who contributed to this release

jsonpointer license terms

License

v0.24.0

Compare Source

0.24.0 - 2026-06-29

Full Changelog: go-openapi/jsonpointer@v0.23.2...v0.24.0

17 commits in this release.


Implemented enhancements
  • feat(jsonname): added new json name provider more respectful of go conventions for JSON (#​195) by @​fredbi ...
Refactor
  • refact: refactored the package into multiple specialized sub-packages by @​fredbi ...
  • refact loading, jsonutils, yamlutils utililities by @​fredbi ...
Documentation
Code quality
Testing
Miscellaneous tasks
  • chore: removed most remaining external dependencies by @​fredbi ...
Updates
  • build(deps): bump the go-openapi-dependencies group across 15 directories with 2 updates by @​dependabot[bot] ...
  • build(deps): bump the go-openapi-dependencies group across 15 directories with 2 updates by @​dependabot[bot] ...
Other (technical)

People who contributed to this release

jsonpointer license terms

License

v0.23.2

Compare Source

0.23.2 - 2026-06-26

Full Changelog: go-openapi/jsonpointer@v0.23.1...v0.23.2

13 commits in this release.


Implemented enhancements
  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...
Documentation
Miscellaneous tasks
Updates

People who contributed to this release

jsonpointer license terms

License

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v1.0.0

Compare Source

1.0.0 - 2026-07-07

Stable API pledge - no change from v0.21.6

Full Changelog: go-openapi/jsonreference@v0.21.6...v1.0.0

10 commits in this release.


Documentation
Miscellaneous tasks
Updates

People who contributed to this release

jsonreference license terms

License

v0.21.6

Compare Source

0.21.6 - 2026-05-31

Full Changelog: go-openapi/jsonreference@v0.21.5...v0.21.6

21 commits in this release.


Documentation
Code quality
Miscellaneous tasks
Updates

People who contributed to this release

jsonreference license terms

License

go-openapi/loads (github.com/go-openapi/loads)

v0.24.0

Compare Source

0.24.0 - 2026-06-07

New security features

Full Changelog: go-openapi/loads@v0.23.4...v0.24.0

4 commits in this release.


Documentation
Security
  • feat(security): added containment options and predefined secure loaders by @​fredbi in #​145 ...
Updates

People who contributed to this release

loads license terms

License

v0.23.4

Compare Source

0.23.4 - 2026-06-02

Full Changelog: go-openapi/loads@v0.23.3...v0.23.4

14 commits in this release.


Implemented enhancements
  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...
Documentation
Miscellaneous tasks
Updates

People who contributed to this release

loads license terms

License

go-openapi/runtime (github.com/go-openapi/runtime)

v0.32.5

Compare Source

0.32.5 - 2026-07-16

Full Changelog: go-openapi/runtime@v0.32.4...v0.32.5

10 commits in this release.


Documentation
Miscellaneous tasks
Updates
Other (technical)

People who contributed to this release

New Contributors

runtime license terms

License

Per-module changes

client-middleware/opentracing (0.32.5)
Miscellaneous tasks
Updates

docs/examples (0.32.5)
Updates

server-middleware (0.32.5)
Updates
go-openapi/spec (github.com/go-openapi/spec)

v0.22.6

Compare Source

0.22.6 - 2026-06-14

Full Changelog: go-openapi/spec@v0.22.5...v0.22.6

8 commits in this release.


Fixed bugs
  • fix(header): header extension should correctly marshal as JSON by @​fredbi ...
Documentation
Code quality
Updates

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 3 times, most recently from 1478df7 to fded6b0 Compare July 19, 2026 17:28
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch from fded6b0 to 9fdb231 Compare July 19, 2026 21:43
dependabot Bot and others added 2 commits July 20, 2026 10:07
…5.0 in /hack/tools in the gomod-hack group across 1 directory (sigstore#1380)

* chore(deps): bump github.com/go-swagger/go-swagger

Bumps the gomod-hack group with 1 update in the /hack/tools directory: [github.com/go-swagger/go-swagger](https://github.com/go-swagger/go-swagger).

Updates `github.com/go-swagger/go-swagger` from 0.33.2 to 0.34.1
- [Release notes](https://github.com/go-swagger/go-swagger/releases)
- [Commits](go-swagger/go-swagger@v0.33.2...v0.34.1)

---
updated-dependencies:
- dependency-name: github.com/go-swagger/go-swagger
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-hack
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bump to v0.35.0, make all, fix tests

Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>

* lint

Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Hayden <8418760+Hayden-IO@users.noreply.github.com>
Bumps go-openapi/{analysis,loads,runtime,spec,strfmt,swag,validate},
google.golang.org/{api,grpc,genproto}, go.step.sm/crypto,
github.com/google/go-containerregistry, aws/smithy-go,
and other patch updates to latest compatible versions.

go-openapi/jsonpointer v1.0.0 and jsonreference v1.0.0 now safe
with go-swagger v0.35 in place.

Skipped: cenkalti/backoff v7 (major, no upstream migration),
hashicorp/hcl v2 (major, viper still uses v1),
go.yaml.in/yaml v3 (major).
@red-hat-konflux

Copy link
Copy Markdown
Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@sampras343

Copy link
Copy Markdown
Member

/retest

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant