Skip to content

chore(deps): update go dependencies #1164

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: release-1.2
Choose a base branch
from

Conversation

red-hat-konflux[bot]
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Jun 22, 2025

This PR contains the following updates:

Package Type Update Change
github.com/containerd/stargz-snapshotter/estargz indirect minor v0.16.3 -> v0.17.0
github.com/go-logr/logr require patch v1.4.2 -> v1.4.3
github.com/google/certificate-transparency-go require patch v1.3.1 -> v1.3.2
github.com/google/gnostic-models indirect minor v0.6.9 -> v0.7.0
github.com/google/go-containerregistry require patch v0.20.3 -> v0.20.6
github.com/google/pprof indirect digest c008609 -> 6e76a2b
github.com/operator-framework/api require minor v0.31.0 -> v0.33.0
github.com/operator-framework/operator-lib require minor v0.18.0 -> v0.19.0
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring require minor v0.81.0 -> v0.84.0
github.com/prometheus/common indirect minor v0.63.0 -> v0.65.0
github.com/prometheus/procfs indirect minor v0.16.1 -> v0.17.0
github.com/spf13/pflag indirect patch v1.0.6 -> v1.0.7
golang.org/x/exp require digest 7e4ce0a -> 645b1fa
golang.org/x/net require minor v0.39.0 -> v0.42.0
golang.org/x/oauth2 indirect minor v0.29.0 -> v0.30.0
golang.org/x/sync indirect minor v0.13.0 -> v0.16.0
golang.org/x/sys indirect minor v0.32.0 -> v0.34.0
golang.org/x/term indirect minor v0.31.0 -> v0.33.0
golang.org/x/text indirect minor v0.24.0 -> v0.27.0
golang.org/x/time indirect minor v0.11.0 -> v0.12.0
golang.org/x/tools indirect minor v0.32.0 -> v0.35.0
google.golang.org/genproto/googleapis/rpc indirect digest 10db94c -> a45f3df
k8s.io/apiextensions-apiserver require minor v0.32.4 -> v0.33.3
k8s.io/client-go require minor v0.32.4 -> v0.33.3
k8s.io/kube-openapi indirect digest c8a335a -> f3f2b99
k8s.io/utils require digest 0f33e8f -> 4c0f3b2
sigs.k8s.io/controller-runtime require minor v0.20.4 -> v0.21.0
sigs.k8s.io/yaml require minor v1.4.0 -> v1.6.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

containerd/stargz-snapshotter (github.com/containerd/stargz-snapshotter/estargz)

v0.17.0

Compare Source

Notable Changes

For other changes, refer to the full diff: containerd/stargz-snapshotter@v0.16.3...v0.17.0

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

google/certificate-transparency-go (github.com/google/certificate-transparency-go)

v1.3.2

Compare Source

Misc
CTFE Storage Saving: Extra Data Issuance Chain Deduplication
CTFE Rate Limiting Of Non-Fresh Submissions

To protect a log from being flooded with requests for "old" certificates, optional rate limiting for "non-fresh submissions" can be configured by providing the following flags:

  • non_fresh_submission_age
  • non_fresh_submission_burst
  • non_fresh_submission_limit

This can help to ensure that the log maintains its ability to (1) accept "fresh" submissions and (2) distribute all log entries to monitors.

Dependency updates
  • Bump the docker-deps group across 5 directories with 3 updates (#​1705)
  • Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in the all-deps group (#​1704)
  • Bump github.com/go-jose/go-jose/v4 in the go_modules group (#​1700)
  • Bump the all-deps group with 7 updates (#​1701)
  • Bump the all-deps group with 7 updates (#​1693)
  • Bump the docker-deps group across 4 directories with 1 update (#​1694)
  • Bump github/codeql-action from 3.28.13 to 3.28.16 in the all-deps group (#​1692)
  • Bump the all-deps group across 1 directory with 7 updates (#​1688)
  • Bump distroless/base-debian12 (#​1686)
  • Bump golangci/golangci-lint-action from 6.5.1 to 7.0.0 in the all-deps group (#​1685)
  • Bump the all-deps group with 4 updates (#​1681)
  • Bump the all-deps group with 6 updates (#​1683)
  • Bump the docker-deps group across 4 directories with 2 updates (#​1682)
  • Bump github.com/golang-jwt/jwt/v4 in the go_modules group (#​1680)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1676)
  • Bump the all-deps group with 2 updates (#​1677)
  • Bump github/codeql-action from 3.28.10 to 3.28.11 in the all-deps group (#​1670)
  • Bump the all-deps group with 8 updates (#​1672)
  • Bump the docker-deps group across 4 directories with 1 update (#​1671)
  • Bump the docker-deps group across 4 directories with 1 update (#​1668)
  • Bump the all-deps group with 4 updates (#​1666)
  • Bump golangci-lint from 1.55.1 to 1.61.0 (#​1667)
  • Bump the all-deps group with 3 updates (#​1665)
  • Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 in the all-deps group (#​1660)
  • Bump the docker-deps group across 5 directories with 2 updates (#​1661)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1662)
  • Bump the docker-deps group across 4 directories with 1 update (#​1656)
  • Bump the all-deps group with 2 updates (#​1654)
  • Bump the all-deps group with 4 updates (#​1657)
  • Bump github/codeql-action from 3.28.5 to 3.28.8 in the all-deps group (#​1652)
  • Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 in the all-deps group (#​1651)
  • Bump the all-deps group with 2 updates (#​1649)
  • Bump the all-deps group with 5 updates (#​1650)
  • Bump the docker-deps group across 5 directories with 3 updates (#​1648)
  • Bump google.golang.org/protobuf in the all-deps group (#​1647)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1646)
google/gnostic-models (github.com/google/gnostic-models)

v0.7.0

Compare Source

google/go-containerregistry (github.com/google/go-containerregistry)

v0.20.6

Compare Source

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.4...v0.20.6

v0.20.5

Compare Source

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.5

v0.20.4: - Not usable as a go module

Compare Source

🚨 This release was published to the Go module proxy and then re-tagged with a different commit. This means it's not usable as a Go module (https://github.com/google/go-containerregistry/issues/2107) -- please us v0.20.5 instead.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.4

operator-framework/api (github.com/operator-framework/api)

v0.33.0

Compare Source

What's Changed

Full Changelog: operator-framework/api@v0.32.0...v0.33.0

v0.32.0

Compare Source

What's Changed

Full Changelog: operator-framework/api@v0.31.0...v0.32.0

operator-framework/operator-lib (github.com/operator-framework/operator-lib)

v0.19.0

Compare Source

What's Changed

Full Changelog: operator-framework/operator-lib@v0.18.0...v0.19.0

prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)

v0.84.0: 0.84.0 / 2025-07-14

Compare Source

  • [FEATURE] Add telegram field to AlertManager CRD global configuration. #​7631
  • [FEATURE] Add jira field to AlertManager CRD global configuration. #​7626
  • [FEATURE] Add webex field to AlertManager CRD global configuration. #​7632
  • [FEATURE] Add victorops field to Alertmanager CRD global configuration. #​7654
  • [FEATURE] Add wechat field to Alertmanager CRD global configuration. #​7627
  • [FEATURE] Add ruleQueryOffset field to ThanosRuler CRD. #​7580
  • [FEATURE] Add ruleConcurrentEval field to ThanosRuler CRD. #​7659
  • [FEATURE] Add ruleOutageTolerance field to ThanosRuler CRD. #​7672
  • [FEATURE] Add ProxyConfig fields to ServiceMonitor. #​7647
  • [FEATURE] Add ProxyConfig fields to Probe. #​7660
  • [FEATURE] Add ProxyConfig fields to Prometheus apiServerConfig. #​7670
  • [FEATURE] Add scrapeClassicHistograms field to Prometheus. #​7667
  • [FEATURE] Add labelSelector field to HetznerSDConfig in the ScrapeConfig CRD. #​7675
  • [FEATURE] Add startupProbe to config-reloader. #​7575
  • [ENHANCEMENT] Set reason: ConfigurationUnmanaged in the Reconciled condition when the operator doesn't managed the Prometheus configuration. #​7661
  • [ENHANCEMENT] AlertManager matchType defaults to = if neither matchType nor regex is set, and =~ if regex: true is set without matchType. #​7592

v0.83.0: 0.83.0 / 2025-05-30

Compare Source

  • [FEATURE] Add limits option for Alertmanager silences. #​7478
  • [FEATURE] Add NoTranslation as a translationStrategy option to OTLP config. #​7539
  • [FEATURE] Add nameEscapingScheme field to Prometheus CRDs. #​7538
  • [FEATURE] Add convertHistogramsToNHCB field to OTLPConfig. #​7533
  • [FEATURE] Add convert_classic_histograms_to_nhcb option to Prometheus global config. #​7543
  • [FEATURE] Add new MetricNameEscapingScheme and MetricNameValidationScheme parameters to ScrapeConfig. #​7555
  • [ENHANCEMENT] Do not insert sharding relabeling in scrapeConfigs if already present. #​7421

v0.82.2: 0.82.2 / 2025-05-12

Compare Source

  • [BUGFIX] Fix Alertmanager peer discovery for Alertmanager when using custom service name. #​7512
  • [BUGFIX] Fix parsing role field in openstackSDConfigs in ScrapeConfig CRD. #​7516

v0.82.1: 0.82.1 / 2025-05-06

Compare Source

  • [BUGFIX] Fix ThanosRuler when no remote-write configuration is defined. #​7498

v0.82.0: 0.82.0 / 2025-04-17

Compare Source

  • [CHANGE] Add more API validations to the ScrapeConfig CRD. #​7413
  • [CHANGE] Remove web console arguments if Prometheus version >= 3. #​7457
  • [FEATURE] Add RemoteWrite support for ThanosRuler CRD. Note that when remote write is configured, Thanos Ruler runs in stateless mode. #​7444
  • [FEATURE] Add msTeamsV2Configs receiver to AlertManagerConfig CRD. #​7464
  • [FEATURE] Add content, username and avatarURL fields to discordConfigs receiver in AlertmanagerConfig CRD. #​7307
  • [FEATURE] Add convertClassicHistogramsToNHCB field to ServiceMonitor, PodMonitor, Probe and ScrapeConfig CRDs. #​7448
  • [FEATURE] Add timeout field to webhookConfigs receiver in AlertManagerConfig CRD. #​7310
  • [FEATURE] Add additionalArgs field to AlertManager CRD. #​7385
  • [ENHANCEMENT] Add maxSamplesPerSend field to RemoteWrite Metadata Config. #​7443
  • [ENHANCEMENT] Add the terminationGracePeriodSeconds to the Alertmanager, Prometheus, PrometheusAgent and ThanosRuler CRDs. #​7439
  • [ENHANCEMENT] Validate proxyURL field in AlertManagerConfig CRD. #​6876
  • [BUGFIX] Fix nameValidationScheme support for Prometheus and PrometheusAgent CRDs. #​7414
  • [BUGFIX] Support socks5 scheme in proxyUrl field for all CRDs. #​7460 #​7466
prometheus/common (github.com/prometheus/common)

v0.65.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.64.0...v0.65.0

v0.64.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.63.0...v0.64.0

prometheus/procfs (github.com/prometheus/procfs)

v0.17.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.16.1...v0.17.0

spf13/pflag (github.com/spf13/pflag)

v1.0.7

Compare Source

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.6...v1.0.7

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.33.3

Compare Source

v0.33.2

Compare Source

v0.33.1

Compare Source

v0.33.0

Compare Source

v0.32.7

Compare Source

v0.32.6

Compare Source

v0.32.5

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.33.3

Compare Source

v0.33.2

Compare Source

v0.33.1

Compare Source

v0.33.0

Compare Source

v0.32.7

Compare Source

v0.32.6

Compare Source

v0.32.5

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.21.0

Compare Source

Highlights

  • Bump to Kubernetes v1.33 libraries
  • Improvements for priority queue (#​2374)
  • envtest now has an option to download envtest binaries (can be used to replace setup-envtest depending on use case)
  • Metric improvements: native histograms, all Go runtime metrics are enabled now
  • Various bug fixes
  • New reviewers: @​troy0820, @​JoelSpeed!!

⚠️ Breaking Changes

  • Bump to k8s.io/* v0.33.0 and Go 1.24 (#​3104 #​3142 #​3161 #​3204 #​3215)
  • config: Stop enabling client-side ratelimiter by default (#​3119)
    • Previous behavior can be preserved by setting QPS 20 and Burst 30 on the rest.Config
  • controller: NewUnmanaged/NewTypedUnmanaged: Stop requiring a manager (#​3141)
  • reconcile: Deprecate Result.Requeue (#​3107)

✨ New Features

  • controller: priority queue:
    • Add debug logging for the state of the priority queue ([#​3075](https://r

Configuration

📅 Schedule: Branch creation - "after 5am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

Copy link
Contributor Author

red-hat-konflux bot commented Jun 22, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.6 -> 1.24.4
google.golang.org/grpc v1.72.0 -> v1.73.0
k8s.io/api v0.32.4 -> v0.33.3
k8s.io/apimachinery v0.32.4 -> v0.33.3
github.com/docker/cli v27.5.1+incompatible -> v28.2.2+incompatible
github.com/gorilla/websocket v1.5.3 -> v1.5.4-0.20250319132907-e064f32e3674

Copy link

sourcery-ai bot commented Jun 22, 2025

Reviewer's Guide

This PR updates the Go toolchain and bumps a broad set of direct and indirect module dependencies in go.mod, then regenerates go.sum via go mod tidy.

File-Level Changes

Change Details Files
Go version and toolchain upgraded
  • go directive updated from 1.23.6 to 1.24.0
  • added toolchain directive go1.24.4
go.mod
Direct dependency versions bumped
  • github.com/go-logr/logr to v1.4.3
  • github.com/google/certificate-transparency-go to v1.3.2
  • github.com/openshift/api to c3cf9bb5ccab
  • prometheus-operator monitoring API to v0.83.0
  • sigs.k8s.io/controller-runtime to v0.21.0
  • k8s.io/api, client-go, apimachinery, apiextensions-apiserver to v0.33.1
go.mod
Indirect dependencies updated (digests and minor releases)
  • github.com/google/pprof digest updated
  • golang.org/x/* modules bumped (exp, net, oauth2, sync, sys, term, text, time, tools)
  • google.golang.org/genproto and k8s.io/kube-openapi digests bumped
  • github.com/prometheus/common to v0.64.0
go.mod
Regenerated checksum file
  • Updated go.sum to match new module versions
go.sum

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

Copy link
Contributor Author

red-hat-konflux bot commented Jun 22, 2025

Caution

There are some errors in your PipelineRun template.

PipelineRun Error
operator-v1-0 no kind "ProjectDevelopmentStream" is registered for version "projctl.konflux.dev/v1beta1" in scheme "k8s.io/client-go/kubernetes/scheme/register.go:83"
operator-v1-1 no kind "ProjectDevelopmentStream" is registered for version "projctl.konflux.dev/v1beta1" in scheme "k8s.io/client-go/kubernetes/scheme/register.go:83"
operator-v1-2 no kind "ProjectDevelopmentStream" is registered for version "projctl.konflux.dev/v1beta1" in scheme "k8s.io/client-go/kubernetes/scheme/register.go:83"
operator no kind "Project" is registered for version "projctl.konflux.dev/v1beta1" in scheme "k8s.io/client-go/kubernetes/scheme/register.go:83"
operator-template no kind "ProjectDevelopmentStreamTemplate" is registered for version "projctl.konflux.dev/v1beta1" in scheme "k8s.io/client-go/kubernetes/scheme/register.go:83"

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 5 times, most recently from 6d71602 to e61e457 Compare June 29, 2025 14:03
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 2 times, most recently from 016b319 to da2d553 Compare July 6, 2025 06:59
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 4 times, most recently from cf1745c to 9fbdf57 Compare July 13, 2025 20:31
@jourdee-lab
Copy link

/retest

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 3 times, most recently from 1b31abf to 738fd15 Compare July 20, 2025 23:08
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 3 times, most recently from b138a34 to 6167f8a Compare July 27, 2025 17:01
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch from 6167f8a to c6acb1f Compare July 27, 2025 21:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant