Skip to content

Update google.golang.org/genproto digest to 3dc84a4#162

Open
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/google.golang.org-genproto-digest
Open

Update google.golang.org/genproto digest to 3dc84a4#162
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/google.golang.org-genproto-digest

Conversation

@red-hat-konflux-kflux-prd-rh02
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
google.golang.org/genproto indirect digest 4cfbd413dc84a4

Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
@red-hat-konflux-kflux-prd-rh02
Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260523011958-0a33c5d7ca68
go: downloading golang.org/x/text v0.36.0
go: downloading google.golang.org/genproto v0.0.0-20260526163538-3dc84a4a5aaa
go: downloading golang.org/x/sys v0.43.0
go: downloading cloud.google.com/go/pubsub/v2 v2.5.1
go: downloading google.golang.org/grpc v1.81.1
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260523011958-0a33c5d7ca68
go: downloading github.com/googleapis/gax-go/v2 v2.21.0
go: downloading google.golang.org/api v0.274.0
go: downloading golang.org/x/net v0.53.0
go: downloading golang.org/x/exp v0.0.0-20240823005443-9b4947da3948
go: downloading golang.org/x/oauth2 v0.36.0
go: downloading cloud.google.com/go/iam v1.11.0
go: downloading cloud.google.com/go/auth v0.18.2
go: downloading golang.org/x/time v0.15.0
go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.14
go: downloading golang.org/x/crypto v0.50.0
go: github.com/openshift-hyperfleet/hyperfleet-sentinel/internal/client imports
	github.com/openshift-hyperfleet/hyperfleet-sentinel/pkg/api/openapi: cannot find module providing package github.com/openshift-hyperfleet/hyperfleet-sentinel/pkg/api/openapi

@openshift-ci openshift-ci Bot requested review from Mischulee and aredenba-rh June 1, 2026 00:24
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Jun 1, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign vkareh for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Jun 1, 2026

📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated internal dependencies.

Walkthrough

The PR updates a single transitive dependency in go.mod: the google.golang.org/genproto indirect requirement is bumped to a newer revision. This is a mechanical version constraint change with no source code modifications. The update remains marked as an indirect dependency and does not affect any other module declarations.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

🚥 Pre-merge checks | ✅ 6
✅ Passed checks (6 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately describes the main change: updating the google.golang.org/genproto dependency digest from 4cfbd41 to 3dc84a4.
Description check ✅ Passed The description is directly related to the changeset, providing context about the dependency update with a clear changelog table and configuration details.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Sec-02: Secrets In Log Output ✅ Passed PR only updates go.mod dependency version; comprehensive scan of production code found no log statements exposing tokens, passwords, credentials, or secrets.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/main/google.golang.org-genproto-digest
✨ Simplify code
  • Create PR with simplified code
  • Commit simplified code in branch konflux/mintmaker/main/google.golang.org-genproto-digest

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 golangci-lint (2.12.2)

level=error msg="Running error: context loading failed: failed to load packages: failed to load packages: failed to load with go/packages: err: exit status 1: stderr: go: updates to go.mod needed, disabled by -mod=readonly; to update it:\n\tgo mod tidy\n"


Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Jun 1, 2026

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a openshift-hyperfleet member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@go.mod`:
- Line 138: The go.mod entry for the module symbol google.golang.org/genproto is
using a bare commit hash (3dc84a4a5aaa) which is invalid; replace that entry
with the canonical pseudo-version generated by the Go toolchain for that commit
(or a proper semver) by running go get/google module resolution (e.g., run `go
get google.golang.org/genproto@<commit>` or `go mod tidy`) to update the
dependency to the correct pseudo-version and commit mapping, then commit the
updated go.mod/go.sum.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 8e8d7bf5-0f4d-452e-b771-be2e9dbba997

📥 Commits

Reviewing files that changed from the base of the PR and between 0a0ed9c and efeabaa.

📒 Files selected for processing (1)
  • go.mod

Comment thread go.mod
golang.org/x/time v0.14.0 // indirect
google.golang.org/api v0.266.0 // indirect
google.golang.org/genproto v0.0.0-20260209200024-4cfbd4190f57 // indirect
google.golang.org/genproto 3dc84a4a5aaa // indirect
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "Checking go.mod for non-canonical require versions (bare hashes)..."
rg -nP '^\s*[a-zA-Z0-9./_-]+\s+[0-9a-f]{7,40}\s*(//.*)?$' go.mod || true

echo
echo "Current genproto lines:"
rg -n 'google\.golang\.org/genproto' go.mod

Repository: openshift-hyperfleet/hyperfleet-sentinel

Length of output: 479


🏁 Script executed:

#!/bin/bash
set -euo pipefail

echo "go.mod parser acceptance check:"
(go mod edit -print >/dev/null) && echo "go mod edit -print: OK" || echo "go mod edit -print: FAILED"

echo
echo "Module resolution/version check (may contact proxy):"
(go list -m -json google.golang.org/genproto >/dev/null) && echo "go list -m: OK" || echo "go list -m: FAILED"

Repository: openshift-hyperfleet/hyperfleet-sentinel

Length of output: 446


Fix invalid go.mod dependency version for google.golang.org/genproto (line 138)

go mod rejects google.golang.org/genproto 3dc84a4a5aaa because the version is a bare hash; it must be a valid semver or canonical pseudo-version.

Suggested fix
-	google.golang.org/genproto 3dc84a4a5aaa // indirect
+	google.golang.org/genproto v0.0.0-<timestamp>-<commit> // indirect

Use the version produced by go get/go mod tidy for commit 3dc84a4a5aaa.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` at line 138, The go.mod entry for the module symbol
google.golang.org/genproto is using a bare commit hash (3dc84a4a5aaa) which is
invalid; replace that entry with the canonical pseudo-version generated by the
Go toolchain for that commit (or a proper semver) by running go get/google
module resolution (e.g., run `go get google.golang.org/genproto@<commit>` or `go
mod tidy`) to update the dependency to the correct pseudo-version and commit
mapping, then commit the updated go.mod/go.sum.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants