fix(deps): update gomod dependencies - #293
fix(deps): update gomod dependencies#293red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
Conversation
red-hat-konflux-kflux-prd-rh03
Bot
added
approved
|
red-hat-konflux-kflux-prd-rh03
Bot
added
approved
openshift-ci
Bot
added
the
needs-ok-to-test
|
Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
84d25d5 to
7121f06
Compare
|
New changes are detected. LGTM label has been removed. |
727793d to
e264433
Compare
fc15498 to
71c7a23
Compare
b8fb173 to
bc65554
Compare
![fullsend-ai-review[bot]](https://avatars.githubusercontent.com/in/3478501?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
fullsend-ai-review
Bot
removed
the
ready-for-merge
|
🤖 Finished Review · ✅ Success · Started 4:07 AM UTC · Completed 4:19 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.68 |
50f647f to
efe408d
Compare
|
🤖 Finished Review · ✅ Success · Started 4:05 AM UTC · Completed 4:21 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.51 |
|
Risk Assessment: low (1/5) DetailsLow-risk automated bot dependency update touching only go.mod with 90 lines changed, no protected paths, no security-sensitive files, minimal churn and no regressions; consistent with prior assessment. Previous runRisk Assessment: low (1/5) DetailsLow-risk automated bot dependency update touching only go.mod with 90 lines changed, no protected paths, no security-sensitive files, minimal churn and no regressions; consistent with prior assessment. Previous run (2)Risk Assessment: low (1/5) DetailsLow-risk automated bot dependency update touching only go.mod with 84 lines changed, no protected paths, no security-sensitive files, no recent churn or regressions; consistent with prior assessment. Previous run (3)Risk Assessment: low (1/5) DetailsLow-risk automated bot dependency update touching only go.mod with a small 84-line change, no protected paths, no security-sensitive files, and no recent churn or regressions on the changed file. |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
efe408d to
bb58ee5
Compare
|
🤖 Review · ❌ Terminated · Started 4:06 AM UTC · Ended 4:20 AM UTC Commit: |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 4:06 AM UTC · Completed 4:20 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.13 |
bb58ee5 to
16bd95b
Compare
|
🤖 Finished Review · ✅ Success · Started 4:06 AM UTC · Completed 4:17 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.56 |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
16bd95b to
951a929
Compare
|
🤖 Finished Review · ✅ Success · Started 4:05 AM UTC · Completed 4:20 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.08 |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
951a929 to
8ae5c88
Compare
|
🤖 Finished Review · ✅ Success · Started 4:06 AM UTC · Completed 4:18 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.74 |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
Signed-off-by: red-hat-konflux-kflux-prd-rh03 <206760901+red-hat-konflux-kflux-prd-rh03[bot]@users.noreply.github.com>
8ae5c88 to
54ff4f5
Compare
|
🤖 Review · ❌ Terminated · Started 4:07 AM UTC · Ended 4:19 AM UTC Commit: |
|
[APPROVALNOTIFIER] This PR is APPROVED Approval requirements bypassed by manually added approval. This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot] The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
| k8s.io/api => k8s.io/api v0.37.0 | ||
| k8s.io/apimachinery => k8s.io/apimachinery v0.37.0 | ||
| k8s.io/client-go => k8s.io/client-go v0.37.0 | ||
| sigs.k8s.io/cluster-api-provider-aws => github.com/openshift/cluster-api-provider-aws c5a9d1911d7a |
There was a problem hiding this comment.
[critical] invalid-go-module-syntax
The replace directive for sigs.k8s.io/cluster-api-provider-aws uses a bare commit hash (c5a9d1911d7a) without a version prefix. Go module replace directives require the target version to be a valid semver or pseudo-version string (e.g., v0.0.0-20201125052318-b85a18cbf338). A bare commit hash is not valid go.mod syntax and will cause a parse error, breaking go build, go mod tidy, and all Go tooling. The base branch correctly used the pseudo-version v0.2.1-0.20201125052318-b85a18cbf338. This was introduced by this PR's diff, which changed the correctly-formatted pseudo-version to a bare hash.
Suggested fix: Replace the bare hash with a proper pseudo-version. Run: go mod edit -replace sigs.k8s.io/cluster-api-provider-aws=github.com/openshift/cluster-api-provider-aws@c5a9d1911d7a followed by go mod tidy to let Go resolve the commit hash to a valid pseudo-version string. Alternatively, if the intent was to keep pointing at the same commit as before, restore the original pseudo-version: v0.2.1-0.20201125052318-b85a18cbf338.
|
🤖 Finished Review · ✅ Success · Started 4:07 AM UTC · Completed 4:19 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.87 |
This PR contains the following updates:
v2.9.2→v2.9.3v1.4.3→v1.4.4v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.27.0→v0.29.2v0.0.22→v0.0.24v2.32.0→v2.32.1v1.42.1→v1.43.041627d8→81278705c75e62→8127870b85a18c→c5a9d19v0.0.0-20210209143830-3442c7a36c1e→v0.1.0-alpha.3751e0d2→d3668b5v0.67.1→v0.93.1v1.23.2→v1.24.1v0.6.2→v0.6.3v0.69.0→v0.71.0v0.21.1→v0.22.0v3.0.4→v3.0.5v0.37.0→v0.40.0v0.56.0→v0.58.0v0.21.0→v0.22.0v0.46.0→v0.47.0v0.44.0→v0.45.0v0.39.0→v0.41.0v0.47.0→v0.49.0v1.36.12-0.20260120151049-f2248ac996af→v1.36.12v0.35.2→v0.37.0v0.36.0→v0.37.0v0.36.0→v0.37.0v0.35.2→v0.37.0v0.36.0→v0.37.0v0.35.2→v0.37.0v0.36.0→v0.37.0v0.36.0→v0.37.08949caa→9ab319528399d8→cf1189dv0.23.3→v0.25.0v0.21.0→v0.22.0v6.4.0→v6.4.2Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
fxamacker/cbor (github.com/fxamacker/cbor/v2)
v2.9.3Compare Source
This release fixes a potential panic when decoding into a
time.Timefrom a CBOR byte string, map, or array under certain conditions.Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with
timeTag = DecTagRequired.Upgrading to v2.9.3 is recommended.
The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.
What's Changed
Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3
go-logr/logr (github.com/go-logr/logr)
v1.4.4Compare Source
What's Changed
New Contributors
Full Changelog: go-logr/logr@v1.4.3...v1.4.4
go-openapi/swag (github.com/go-openapi/swag)
v0.29.2Compare Source
0.29.2 - 2026-09-04
Full Changelog: go-openapi/swag@v0.29.1...v0.29.2
8 commits in this release.
Documentation
Miscellaneous tasks
Updates
People who contributed to this release
swag license terms
Per-module changes
cmdutils (0.29.2)
Miscellaneous tasks
conv (0.29.2)
Miscellaneous tasks
Updates
fileutils (0.29.2)
Miscellaneous tasks
Updates
jsonname (0.29.2)
Miscellaneous tasks
Updates
jsonutils/adapters/easyjson (0.29.2)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration/benchmarks (0.29.2)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration (0.29.2)
Miscellaneous tasks
Updates
jsonutils/fixtures_test (0.29.2)
Miscellaneous tasks
Updates
jsonutils (0.29.2)
Miscellaneous tasks
Updates
loading (0.29.2)
Miscellaneous tasks
Updates
mangling (0.29.2)
Miscellaneous tasks
Updates
netutils (0.29.2)
Miscellaneous tasks
Updates
pools (0.29.2)
Miscellaneous tasks
Updates
stringutils (0.29.2)
Miscellaneous tasks
Updates
typeutils (0.29.2)
Miscellaneous tasks
Updates
yamlutils (0.29.2)
Miscellaneous tasks
Updates
v0.29.1Compare Source
0.29.1 - 2026-08-21
Full Changelog: go-openapi/swag@v0.29.0...v0.29.1
4 commits in this release.
Testing
Miscellaneous tasks
Updates
People who contributed to this release
swag license terms
Per-module changes
conv (0.29.1)
Miscellaneous tasks
jsonname (0.29.1)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.29.1)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.29.1)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.29.1)
Miscellaneous tasks
jsonutils (0.29.1)
Testing
Miscellaneous tasks
loading (0.29.1)
Miscellaneous tasks
mangling (0.29.1)
Miscellaneous tasks
netutils (0.29.1)
Miscellaneous tasks
pools (0.29.1)
Miscellaneous tasks
stringutils (0.29.1)
Miscellaneous tasks
typeutils (0.29.1)
Miscellaneous tasks
yamlutils (0.29.1)
Miscellaneous tasks
v0.29.0Compare Source
0.29.0 - 2026-08-19
New fsutils on top of io.FS
Full Changelog: go-openapi/swag@v0.28.0...v0.29.0
10 commits in this release.
Implemented enhancements
Documentation
Testing
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release
swag license terms
Per-module changes
conv (0.29.0)
Miscellaneous tasks
fileutils (0.29.0)
Implemented enhancements
jsonname (0.29.0)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.29.0)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration/benchmarks (0.29.0)
Testing
Miscellaneous tasks
Updates
Other (technical)
jsonutils/adapters/testintegration (0.29.0)
Miscellaneous tasks
Updates
jsonutils/fixtures_test (0.29.0)
Miscellaneous tasks
Updates
jsonutils (0.29.0)
Miscellaneous tasks
Updates
loading (0.29.0)
Testing
Miscellaneous tasks
Updates
Other (technical)
mangling (0.29.0)
Miscellaneous tasks
netutils (0.29.0)
Miscellaneous tasks
pools (0.29.0)
Miscellaneous tasks
stringutils (0.29.0)
Miscellaneous tasks
typeutils (0.29.0)
Miscellaneous tasks
yamlutils (0.29.0)
Testing
Miscellaneous tasks
Updates
Configuration
📅 Schedule: (in timezone UTC)
* 2-4 * * 1-5)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.