Skip to content

chore(deps): bump armoapi-go to v0.0.719#384

Merged
matthyx merged 1 commit into
mainfrom
feat/bump-armoapi-rule-openprotection
Jun 19, 2026
Merged

chore(deps): bump armoapi-go to v0.0.719#384
matthyx merged 1 commit into
mainfrom
feat/bump-armoapi-rule-openprotection

Conversation

@matthyx

@matthyx matthyx commented Jun 12, 2026

Copy link
Copy Markdown
Contributor

What

Bumps github.com/armosec/armoapi-go from v0.0.673 → v0.0.719.

Why

This is the dep-modernization step ahead of a rule open-protection watcher. v0.0.719 adds the types that watcher needs:

  • armotypes.OpenMatchers + armotypes.UnionOpenProtection
  • the ProfileDataRequired schema

The follow-up watcher will resolve RuntimeRuleAlertBinding selectors against the rule library (armosec/rulelibrary, which requires armoapi ≥ v0.0.719) and publish the union of profileDataRequired.opens as a ConfigMap that the storage apiserver reads to keep sensitive-file rules (e.g. R0010) working through profile generalisation. Keeping the version bump as its own PR isolates the dependency change from the feature.

Scope / cascade

Minimal and additive:

  • Only armoapi-go moves in require; node-agent (v0.3.38) and storage (v0.0.239) compile unchanged against the newer armoapi — no coordinated bump needed.
  • go.mod change is one line; go.sum changes are 2 lines; no indirect requires added or removed.

Verification

  • go build ./... — clean
  • go vet ./... — clean (compiles all packages incl. tests)
  • go test ./watcher/... — pass

🤖 Generated with Claude Code

Summary by CodeRabbit

  • Chores
    • Updated internal dependencies to latest stable versions.

@coderabbitai

coderabbitai Bot commented Jun 12, 2026

Copy link
Copy Markdown

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 75c802e9-de1e-43b0-890d-4addde20a0e1

📥 Commits

Reviewing files that changed from the base of the PR and between 9a5c8b0 and c5fb1fb.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

📝 Walkthrough

Walkthrough

The direct Go module dependency github.com/armosec/armoapi-go is bumped from v0.0.714 to v0.0.719 in go.mod. No other module entries, replace directives, or source files are modified.

Changes

armoapi-go Dependency Bump

Layer / File(s) Summary
armoapi-go version bump
go.mod
Updates github.com/armosec/armoapi-go from v0.0.714 to v0.0.719 in the direct requirements block.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Possibly related PRs

  • kubescape/operator#353: Also bumps github.com/armosec/armoapi-go in go.mod with no other changes, following the same single-line dependency update pattern.

Poem

🐇 A hop, a skip, five versions new,
The armoapi-go gets a fresh debut.
One line in go.mod, that's all it takes,
No fuss, no muss, no sweeping rakes.
The bunny nods and hops away — done! 🎉

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The PR title clearly and concisely summarizes the main change: bumping the armoapi-go dependency to v0.0.719, which is the primary objective of this changeset.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch feat/bump-armoapi-rule-openprotection

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions

Copy link
Copy Markdown

Summary:

  • License scan: success
  • Credentials scan: failure
  • Vulnerabilities scan: failure
  • Unit test: success
  • Go linting: failure

Modernize the operator's armoapi-go from v0.0.673 to v0.0.719 to pick up the
rule open-protection types (armotypes.OpenMatchers / UnionOpenProtection,
ProfileDataRequired schema). This unblocks a follow-up watcher that resolves
RuntimeRuleAlertBinding selectors against the rule library and publishes the
union of profileDataRequired.opens for the storage apiserver.

The bump is additive: node-agent (v0.3.38) and storage (v0.0.239) compile
unchanged against the newer armoapi, so no coordinated bump is required here.
go build, go vet, and the watcher test suite all pass.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Signed-off-by: Matthias Bertschy <matthias.bertschy@gmail.com>

# Conflicts:
#	go.mod
#	go.sum
@matthyx matthyx force-pushed the feat/bump-armoapi-rule-openprotection branch from e953a9e to c5fb1fb Compare June 19, 2026 05:29
@github-actions

Copy link
Copy Markdown

Summary:

  • License scan: success
  • Credentials scan: failure
  • Vulnerabilities scan: failure
  • Unit test: success
  • Go linting: failure

@matthyx matthyx merged commit 483814e into main Jun 19, 2026
11 checks passed
@matthyx matthyx deleted the feat/bump-armoapi-rule-openprotection branch June 19, 2026 06:12
@matthyx matthyx moved this to To Archive in KS PRs tracking Jun 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: To Archive

Development

Successfully merging this pull request may close these issues.

1 participant