Skip to content

fix(deps): update gomod dependencies - #249

Open
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/gomod-dependencies
Open

fix(deps): update gomod dependencies#249
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/gomod-dependencies

Conversation

@red-hat-konflux-kflux-prd-rh02

@red-hat-konflux-kflux-prd-rh02 red-hat-konflux-kflux-prd-rh02 Bot commented Aug 18, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
github.com/fxamacker/cbor/v2 v2.9.2v2.9.3 age confidence indirect patch
github.com/go-openapi/swag v0.28.0v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/cmdutils v0.28.0v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/conv v0.28.0v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/fileutils v0.28.0v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/jsonutils v0.28.0v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/loading v0.28.0v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/mangling v0.28.0v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/netutils v0.28.0v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/pools v0.28.0v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/stringutils v0.28.0v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/typeutils v0.28.0v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/yamlutils v0.28.0v0.29.1 age confidence indirect minor
github.com/rhobs/obo-prometheus-operator/pkg/apis/monitoring v0.87.0-rhobs1v0.87.0 age confidence require patch
k8s.io/api v0.36.3v0.36.4 age confidence require patch v0.37.0
k8s.io/apimachinery v0.36.3v0.36.4 age confidence require patch v0.37.0
k8s.io/client-go v0.36.3v0.36.4 age confidence require patch v0.37.0
k8s.io/kube-openapi d427ff9be32def age confidence indirect digest

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.3

Compare Source

This release fixes a potential panic when decoding into a time.Time from a CBOR byte string, map, or array under certain conditions.

Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with timeTag = DecTagRequired.

Upgrading to v2.9.3 is recommended.

The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.

What's Changed

  • Skip data item when decoding to time.Time fails under certain conditions by @​fxamacker in #​803

Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3

go-openapi/swag (github.com/go-openapi/swag)

v0.29.1

Compare Source

0.29.1 - 2026-08-21

Full Changelog: go-openapi/swag@v0.29.0...v0.29.1

4 commits in this release.


Testing
Miscellaneous tasks
Updates

People who contributed to this release

swag license terms

License

Per-module changes

conv (0.29.1)
Miscellaneous tasks

jsonname (0.29.1)
Miscellaneous tasks

jsonutils/adapters/easyjson (0.29.1)
Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.29.1)
Miscellaneous tasks

jsonutils/adapters/testintegration (0.29.1)
Miscellaneous tasks

jsonutils (0.29.1)
Testing
Miscellaneous tasks

loading (0.29.1)
Miscellaneous tasks

mangling (0.29.1)
Miscellaneous tasks

netutils (0.29.1)
Miscellaneous tasks

pools (0.29.1)
Miscellaneous tasks

stringutils (0.29.1)
Miscellaneous tasks

typeutils (0.29.1)
Miscellaneous tasks

yamlutils (0.29.1)
Miscellaneous tasks

v0.29.0

Compare Source

0.29.0 - 2026-08-19

New fsutils on top of io.FS

Full Changelog: go-openapi/swag@v0.28.0...v0.29.0

10 commits in this release.


Implemented enhancements
Documentation
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

People who contributed to this release

swag license terms

License

Per-module changes

conv (0.29.0)
Miscellaneous tasks

fileutils (0.29.0)
Implemented enhancements

jsonname (0.29.0)
Miscellaneous tasks

jsonutils/adapters/easyjson (0.29.0)
Miscellaneous tasks
Updates

jsonutils/adapters/testintegration/benchmarks (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

jsonutils/adapters/testintegration (0.29.0)
Miscellaneous tasks
Updates

jsonutils/fixtures_test (0.29.0)
Miscellaneous tasks
Updates

jsonutils (0.29.0)
Miscellaneous tasks
Updates

loading (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

mangling (0.29.0)
Miscellaneous tasks

netutils (0.29.0)
Miscellaneous tasks

pools (0.29.0)
Miscellaneous tasks

stringutils (0.29.0)
Miscellaneous tasks

typeutils (0.29.0)
Miscellaneous tasks

yamlutils (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)
rhobs/obo-prometheus-operator (github.com/rhobs/obo-prometheus-operator/pkg/apis/monitoring)

v0.87.0

Compare Source

kubernetes/api (k8s.io/api)

v0.36.4

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.36.4

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.36.4

Compare Source


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • Between 02:00 AM and 04:59 AM, Monday through Friday (* 2-4 * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@openshift-ci

openshift-ci Bot commented Aug 18, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh02[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

2 similar comments
@openshift-ci

openshift-ci Bot commented Aug 18, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh02[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Aug 18, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh02[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Aug 18, 2026

Copy link
Copy Markdown

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a rhobs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci

openshift-ci Bot commented Aug 18, 2026

Copy link
Copy Markdown

@red-hat-konflux-kflux-prd-rh02[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e 964da47 link true /test e2e
ci/prow/test 964da47 link true /test test
ci/prow/build 964da47 link true /test build
ci/prow/e2e-cluster 964da47 link true /test e2e-cluster
ci/prow/coverage 964da47 link true /test coverage
ci/prow/lint 964da47 link true /test lint
ci/prow/images 964da47 link true /test images

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@red-hat-konflux-kflux-prd-rh02
red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch from 964da47 to 19f3cba Compare August 21, 2026 04:05
@openshift-ci openshift-ci Bot removed the lgtm label Aug 21, 2026
@openshift-ci

openshift-ci Bot commented Aug 21, 2026

Copy link
Copy Markdown

New changes are detected. LGTM label has been removed.

@red-hat-konflux-kflux-prd-rh02 red-hat-konflux-kflux-prd-rh02 Bot changed the title fix(deps): update module github.com/rhobs/obo-prometheus-operator/pkg/apis/monitoring to v0.87.0 fix(deps): update gomod dependencies Aug 21, 2026
@red-hat-konflux-kflux-prd-rh02
red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch 4 times, most recently from 3bfe368 to e01856e Compare August 27, 2026 04:07
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
@red-hat-konflux-kflux-prd-rh02
red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/mintmaker/main/gomod-dependencies branch from e01856e to 8ceb8e1 Compare August 28, 2026 04:06
@red-hat-konflux-kflux-prd-rh02

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: github.com/rhobs/obo-prometheus-operator/pkg/apis/monitoring@v0.87.0: parsing go.mod:
	module declares its path as: github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring
	        but was required as: github.com/rhobs/obo-prometheus-operator/pkg/apis/monitoring

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants