Skip to content

chore(deps): update go dependencies#665

Open
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.3from
konflux/mintmaker/release-1.3/go-deps
Open

chore(deps): update go dependencies#665
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.3from
konflux/mintmaker/release-1.3/go-deps

Conversation

@red-hat-konflux
Copy link
Copy Markdown

@red-hat-konflux red-hat-konflux bot commented Apr 7, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
cloud.google.com/go/iam indirect minor v1.7.0v1.9.0
cloud.google.com/go/longrunning indirect minor v0.9.0v0.11.0
cuelang.org/go require patch v0.16.0v0.16.1
github.com/Azure/azure-sdk-for-go/sdk/azcore indirect patch v1.21.0v1.21.1
github.com/aws/aws-sdk-go-v2/credentials indirect patch v1.19.14v1.19.15
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect patch v1.18.21v1.18.22
github.com/aws/aws-sdk-go-v2/internal/configsources indirect patch v1.4.21v1.4.22
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding indirect patch v1.13.7v1.13.8
github.com/aws/aws-sdk-go-v2/service/signin indirect patch v1.0.9v1.0.10
github.com/go-openapi/jsonpointer indirect minor v0.22.5v0.23.1
github.com/go-openapi/runtime require patch v0.29.3v0.29.4
github.com/go-openapi/swag indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/cmdutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/conv require minor v0.25.5v0.26.0
github.com/go-openapi/swag/fileutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/jsonname indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/jsonutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/loading indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/mangling indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/netutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/stringutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/typeutils indirect minor v0.25.5v0.26.0
github.com/go-openapi/swag/yamlutils indirect minor v0.25.5v0.26.0
github.com/google/go-containerregistry require patch v0.21.4v0.21.5
github.com/lestrrat-go/dsig indirect minor v1.2.1v1.3.0
github.com/letsencrypt/boulder indirect minor v0.20260406.0v0.20260413.0
github.com/open-policy-agent/opa require patch v1.15.1v1.15.2
golang.org/x/crypto indirect minor v0.48.0v0.50.0
golang.org/x/crypto require minor v0.49.0v0.50.0
golang.org/x/exp indirect digest 7ab1446746e56f
golang.org/x/mod indirect minor v0.34.0v0.35.0
golang.org/x/net indirect minor v0.52.0v0.53.0
golang.org/x/sys indirect minor v0.42.0v0.43.0
golang.org/x/term require minor v0.41.0v0.42.0
golang.org/x/text indirect minor v0.35.0v0.36.0
golang.org/x/tools indirect minor v0.43.0v0.44.0
google.golang.org/api require minor v0.275.0v0.276.0
google.golang.org/genproto indirect digest 6f92a3bafd174a
google.golang.org/genproto/googleapis/api indirect digest 6f92a3bafd174a
google.golang.org/genproto/googleapis/rpc indirect digest 6f92a3bafd174a
k8s.io/api require patch v0.35.3v0.35.4
k8s.io/apimachinery require patch v0.35.3v0.35.4
k8s.io/client-go require patch v0.35.3v0.35.4
k8s.io/kube-openapi indirect digest 16be699ec9c827

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

googleapis/google-cloud-go (cloud.google.com/go/longrunning)

v0.11.0

Compare Source

  • Clients for spanner, pubsub and video are now in beta.

  • New client for DLP.

  • spanner: performance and testing improvements.

  • storage: requester-pays buckets are supported.

  • storage, profiler, bigtable, bigquery: bug fixes and other minor improvements.

  • pubsub: bug fixes and other minor improvements

v0.10.0

Compare Source

  • pubsub: Subscription.ModifyPushConfig replaced with Subscription.Update.

  • pubsub: Subscription.Receive now runs concurrently for higher throughput.

  • vision: cloud.google.com/go/vision is deprecated. Use
    cloud.google.com/go/vision/apiv1 instead.

  • translation: now stable.

  • trace: several changes to the surface. See the link below.

Code changes required from v0.9.0
  • pubsub: Replace

    sub.ModifyPushConfig(ctx, pubsub.PushConfig{Endpoint: "https://example.com/push"})
    

    with

    sub.Update(ctx, pubsub.SubscriptionConfigToUpdate{
        PushConfig: &pubsub.PushConfig{Endpoint: "https://example.com/push"},
    })
    
  • trace: traceGRPCServerInterceptor will be provided from *trace.Client.
    Given an initialized *trace.Client named tc, instead of

    s := grpc.NewServer(grpc.UnaryInterceptor(trace.GRPCServerInterceptor(tc)))
    

    write

    s := grpc.NewServer(grpc.UnaryInterceptor(tc.GRPCServerInterceptor()))
    
  • trace trace.GRPCClientInterceptor will also provided from *trace.Client.
    Instead of

    conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(trace.GRPCClientInterceptor()))
    

    write

    conn, err := grpc.Dial(srv.Addr, grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor()))
    
  • trace: We removed the deprecated trace.EnableGRPCTracing. Use the gRPC
    interceptor as a dial option as shown below when initializing Cloud package
    clients:

    c, err := pubsub.NewClient(ctx, "project-id", option.WithGRPCDialOption(grpc.WithUnaryInterceptor(tc.GRPCClientInterceptor())))
    if err != nil {
        ...
    }
    
cue-lang/cue (cuelang.org/go)

v0.16.1

Compare Source

Language

The fallback keyword in the aliasv2 experiment is replaced by otherwise, which is clearer. cue fmt or cue fix can be used to rewrite existing code.

Evaluator

Fix a regression where the compiler could add comments to the input AST value, which could lead to increased memory usage.

Fix a bug where exporting certain schemas could result in "cannot have both alias and field in same scope" errors.

cmd/cue

Fix a panic which could occur when using non-label expressions in the --path flag.

Teach cue login to give helpful errors when used with OCI registries which don't support the OAuth2 device flow.

Go API

Fix a regression where cue.Context.Encode could panic on custom marshaler types with pointer receivers.

Full list of changes since v0.16.0
go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.23.1

Compare Source

0.23.1 - 2026-04-18

Full Changelog: go-openapi/jsonpointer@v0.23.0...v0.23.1

5 commits in this release.


Fixed bugs
  • fix(offset): in Offset method, fixed index of value of array element. by @​fredbi in #​128 ...
Documentation
Updates

People who contributed to this release

jsonpointer license terms

License

v0.23.0

Compare Source

0.23.0 - 2026-04-15

Support for known limitations

Full Changelog: go-openapi/jsonpointer@v0.22.5...v0.23.0

16 commits in this release.


Implemented enhancements
Fixed bugs
Documentation
Miscellaneous tasks
Updates

People who contributed to this release

New Contributors

jsonpointer license terms

License

go-openapi/runtime (github.com/go-openapi/runtime)

v0.29.4

Compare Source

0.29.4 - 2026-04-18

Security update

Full Changelog: go-openapi/runtime@v0.29.3...v0.29.4

16 commits in this release.


Documentation
Testing
Miscellaneous tasks
Updates

People who contributed to this release

runtime license terms

License

Per-module changes


client-middleware/opentracing (0.29.4)

Miscellaneous tasks
Updates
go-openapi/swag (github.com/go-openapi/swag)

v0.26.0

Compare Source

0.26.0 - 2026-04-15

Full Changelog: go-openapi/swag@v0.25.5...v0.26.0

14 commits in this release.


Implemented enhancements
  • feat(jsonname): added new json name provider more respectful of go co… by @​fredbi in #​195 ...
Documentation
Code quality
Miscellaneous tasks
Updates

People who contributed to this release

swag license terms

License

Per-module changes


cmdutils (0.26.0)

Miscellaneous tasks

conv (0.26.0)

Miscellaneous tasks
Updates

fileutils (0.26.0)

Miscellaneous tasks
Updates

jsonname (0.26.0)

Implemented enhancements
  • feat(jsonname): added new json name provider more respectful of go co… by @​fredbi in #​195 ...
Miscellaneous tasks
Updates

jsonutils/adapters/easyjson (0.26.0)

Miscellaneous tasks
Updates

jsonutils/adapters/testintegration/benchmarks (0.26.0)

Miscellaneous tasks
Updates

jsonutils/adapters/testintegration (0.26.0)

Miscellaneous tasks
Updates

jsonutils/fixtures_test (0.26.0)

Miscellaneous tasks
Updates

jsonutils (0.26.0)

Miscellaneous tasks
Updates

loading (0.26.0)

Miscellaneous tasks
Updates

mangling (0.26.0)

Miscellaneous tasks
Updates

netutils (0.26.0)

Miscellaneous tasks
Updates

stringutils (0.26.0)

Miscellaneous tasks
Updates

typeutils (0.26.0)

Miscellaneous tasks
Updates

yamlutils (0.26.0)

Miscellaneous tasks
Updates
google/go-containerregistry (github.com/google/go-containerregistry)

v0.21.5

Compare Source

What's Changed

Full Changelog: google/go-containerregistry@v0.21.4...v0.21.5

lestrrat-go/dsig (github.com/lestrrat-go/dsig)

v1.3.0

Compare Source

What's Changed

Full Changelog: lestrrat-go/dsig@v1.2.2...v1.3.0

v1.2.2

Compare Source

What's Changed

Full Changelog: lestrrat-go/dsig@v1.2.1...v1.2.2

letsencrypt/boulder (github.com/letsencrypt/boulder)

v0.20260413.0

Compare Source

What's Changed

Full Changelog: letsencrypt/boulder@v0.20260406.0...v0.20260413.0

open-policy-agent/opa (github.com/open-policy-agent/opa)

v1.15.2

Compare Source

This release updates the version of Go used to build the OPA binaries and images to 1.26.2.
This version of Go contains multiple security fixes.

<detai


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
Copy link
Copy Markdown
Author

red-hat-konflux bot commented Apr 7, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 8 additional dependencies were updated

Details:

Package Change
cloud.google.com/go/kms v1.27.0 -> v1.28.0
github.com/aws/aws-sdk-go-v2 v1.41.5 -> v1.41.6
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.21 -> v2.7.22
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.21 -> v1.13.22
github.com/aws/aws-sdk-go-v2/service/sso v1.30.15 -> v1.30.16
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.19 -> v1.35.20
github.com/aws/aws-sdk-go-v2/service/sts v1.41.10 -> v1.42.0
github.com/aws/smithy-go v1.24.3 -> v1.25.0
File name: test/fakeoidc/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.0

@red-hat-konflux red-hat-konflux bot changed the title chore(deps): update module golang.org/x/crypto to v0.49.0 chore(deps): update go dependencies Apr 8, 2026
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 19 times, most recently from 76cbda7 to 69c4f3f Compare April 15, 2026 06:33
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 8 times, most recently from 676dbf6 to b391fd5 Compare April 17, 2026 10:12
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch 13 times, most recently from 4efd078 to 3faea07 Compare April 19, 2026 18:18
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.3/go-deps branch from 3faea07 to 1714beb Compare April 19, 2026 22:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants