Skip to content

Conversation

@red-hat-konflux
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Oct 1, 2025

This PR contains the following updates:

Package Type Update Change
github.com/Microsoft/go-winio indirect patch v0.6.1 -> v0.6.2
github.com/distribution/reference indirect minor v0.5.0 -> v0.6.0
github.com/docker/go-connections indirect minor v0.4.0 -> v0.6.0
github.com/fsnotify/fsnotify indirect minor v1.7.0 -> v1.9.0
github.com/go-logr/logr require patch v1.4.1 -> v1.4.3
github.com/go-openapi/jsonpointer indirect minor v0.20.2 -> v0.22.1
github.com/go-openapi/jsonreference indirect minor v0.20.4 -> v0.21.2
github.com/go-openapi/swag indirect minor v0.22.9 -> v0.25.1
github.com/go-task/slim-sprig indirect digest 52ccab3 -> 6e46e2e
github.com/golang/groupcache indirect digest 41bb18b -> 2c02b82
github.com/google/certificate-transparency-go require minor v1.1.7 -> v1.3.2
github.com/google/gnostic-models indirect minor v0.6.8 -> v0.7.0
github.com/google/go-cmp indirect minor v0.6.0 -> v0.7.0
github.com/google/pprof indirect digest ff6d637 -> 9e5a51a
github.com/google/trillian require minor v1.6.0 -> v1.7.2
github.com/letsencrypt/boulder indirect minor v0.0.0-20240620165639-de9c06129bec -> v0.20250929.0
github.com/mailru/easyjson indirect minor v0.7.7 -> v0.9.1
github.com/opencontainers/image-spec indirect patch v1.1.0-rc5 -> v1.1.1
github.com/openshift/api require digest 0f638a8 -> 7f24529
github.com/operator-framework/api require minor v0.22.0 -> v0.34.0
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring require minor v0.70.0 -> v0.85.0
github.com/prometheus/client_golang indirect minor v1.18.0 -> v1.23.2
github.com/prometheus/client_model indirect patch v0.6.0 -> v0.6.2
github.com/prometheus/common indirect minor v0.48.0 -> v0.66.1
github.com/prometheus/procfs indirect minor v0.12.0 -> v0.17.0
github.com/secure-systems-lab/go-securesystemslib indirect patch v0.9.0 -> v0.9.1
github.com/sigstore/fulcio require minor v1.4.4 -> v1.7.1
github.com/sigstore/sigstore require minor v1.8.15 -> v1.9.5
github.com/spf13/pflag indirect patch v1.0.5 -> v1.0.10
go (source) toolchain minor 1.22.9 -> 1.23.6
golang.org/x/crypto indirect minor v0.32.0 -> v0.42.0
golang.org/x/exp indirect digest ec58324 -> df92998
golang.org/x/mod indirect minor v0.17.0 -> v0.28.0
golang.org/x/net require minor v0.25.0 -> v0.44.0
golang.org/x/oauth2 indirect minor v0.26.0 -> v0.31.0
golang.org/x/sync indirect minor v0.10.0 -> v0.17.0
golang.org/x/sys indirect minor v0.29.0 -> v0.36.0
golang.org/x/term indirect minor v0.28.0 -> v0.35.0
golang.org/x/text indirect minor v0.21.0 -> v0.29.0
golang.org/x/time indirect minor v0.5.0 -> v0.13.0
golang.org/x/tools indirect minor v0.21.1-0.20240508182429-e35e4ccd0d2d -> v0.37.0
google.golang.org/genproto/googleapis/rpc indirect digest dc85e6b -> 57b25ae
k8s.io/api require minor v0.28.5 -> v0.34.1
k8s.io/apiextensions-apiserver require minor v0.28.5 -> v0.34.1
k8s.io/apimachinery require minor v0.28.5 -> v0.34.1
k8s.io/client-go require minor v0.28.5 -> v0.34.1
k8s.io/component-base indirect minor v0.28.5 -> v0.34.1
k8s.io/kube-openapi indirect digest 2ac9dc5 -> 589584f
k8s.io/utils require digest e7106e6 -> 0af2bda
sigs.k8s.io/controller-runtime require minor v0.16.3 -> v0.22.1
sigs.k8s.io/json indirect digest bc3834c -> 2d32026
sigs.k8s.io/yaml indirect minor v1.4.0 -> v1.6.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

Microsoft/go-winio (github.com/Microsoft/go-winio)

v0.6.2

Compare Source

What's Changed

New Contributors

Full Changelog: microsoft/go-winio@v0.6.1...v0.6.2

distribution/reference (github.com/distribution/reference)

v0.6.0

Compare Source

What's Changed

New Contributors

Full Changelog: distribution/reference@v0.5.0...v0.6.0

docker/go-connections (github.com/docker/go-connections)

v0.6.0

Compare Source

v0.5.0

Compare Source

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

v1.9.0

Compare Source

Changes and fixes
  • all: make BufferedWatcher buffered again (#​657)

  • inotify: fix race when adding/removing watches while a watched path is being deleted (#​678, #​686)

  • inotify: don't send empty event if a watched path is unmounted (#​655)

  • inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#​679)

  • kqueue: fix watching relative symlinks (#​681)

  • kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#​682)

  • illumos: don't send error if changed file is deleted while processing the event (#​678)

v1.8.0

Compare Source

Additions

  • all: add FSNOTIFY_DEBUG to print debug logs to stderr (#​619)
Changes and fixes
  • windows: fix behaviour of WatchList() to be consistent with other platforms (#​610)

  • kqueue: ignore events with Ident=0 (#​590)

  • kqueue: set O_CLOEXEC to prevent passing file descriptors to children (#​617)

  • kqueue: emit events as "/path/dir/file" instead of "path/link/file" when watching a symlink (#​625)

  • inotify: don't send event for IN_DELETE_SELF when also watching the parent (#​620)

  • inotify: fix panic when calling Remove() in a goroutine (#​650)

  • fen: allow watching subdirectories of watched directories (#​621)

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

v1.4.2

Compare Source

What's Changed

Dependencies:

Full Changelog: go-logr/logr@v1.4.1...v1.4.2

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.22.1

Compare Source

v0.22.0

Compare Source

v0.21.2

Compare Source

v0.21.1

Compare Source

v0.21.0

Compare Source

v0.20.3

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.2

Compare Source

v0.21.1

Compare Source

v0.21.0

Compare Source

v0.20.5

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

v0.25.1

Compare Source

v0.25.0

Compare Source

v0.24.1

Compare Source

v0.24.0

Compare Source

v0.23.1

Compare Source

v0.23.0

Compare Source

v0.22.10

Compare Source

google/certificate-transparency-go (github.com/google/certificate-transparency-go)

v1.3.2

Compare Source

Misc
  • [migrillian] remove etcd support in #​1699
  • Bump golangci-lint from 1.55.1 to 1.61.0 (developers should update to this version).
  • Update ctclient tool to support SCT extensions field by @​liweitianux in #​1645
  • Bump go to 1.23
  • [ct_hammer] support HTTPS and Bearer token for Authentication.
  • [preloader] support Bearer token Authentication for non temporal logs.
  • [preloader] support end indexes
  • [CTFE] Short cache max-age when get-entries returns fewer entries than requested by @​robstradling in #​1707
  • [CTFE] Disalllow mismatching signature algorithm identifiers in #​702.
  • [jsonclient] surface HTTP Do and Read errors #​1695 by @​FiloSottile
CTFE Storage Saving: Extra Data Issuance Chain Deduplication
CTFE Rate Limiting Of Non-Fresh Submissions

To protect a log from being flooded with requests for "old" certificates, optional rate limiting for "non-fresh submissions" can be configured by providing the following flags:

  • non_fresh_submission_age
  • non_fresh_submission_burst
  • non_fresh_submission_limit

This can help to ensure that the log maintains its ability to (1) accept "fresh" submissions and (2) distribute all log entries to monitors.

Dependency updates
  • Bump the docker-deps group across 5 directories with 3 updates (#​1705)
  • Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in the all-deps group (#​1704)
  • Bump github.com/go-jose/go-jose/v4 in the go_modules group (#​1700)
  • Bump the all-deps group with 7 updates (#​1701)
  • Bump the all-deps group with 7 updates (#​1693)
  • Bump the docker-deps group across 4 directories with 1 update (#​1694)
  • Bump github/codeql-action from 3.28.13 to 3.28.16 in the all-deps group (#​1692)
  • Bump the all-deps group across 1 directory with 7 updates (#​1688)
  • Bump distroless/base-debian12 (#​1686)
  • Bump golangci/golangci-lint-action from 6.5.1 to 7.0.0 in the all-deps group (#​1685)
  • Bump the all-deps group with 4 updates (#​1681)
  • Bump the all-deps group with 6 updates (#​1683)
  • Bump the docker-deps group across 4 directories with 2 updates (#​1682)
  • Bump github.com/golang-jwt/jwt/v4 in the go_modules group (#​1680)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1676)
  • Bump the all-deps group with 2 updates (#​1677)
  • Bump github/codeql-action from 3.28.10 to 3.28.11 in the all-deps group (#​1670)
  • Bump the all-deps group with 8 updates (#​1672)
  • Bump the docker-deps group across 4 directories with 1 update (#​1671)
  • Bump the docker-deps group across 4 directories with 1 update (#​1668)
  • Bump the all-deps group with 4 updates (#​1666)
  • Bump golangci-lint from 1.55.1 to 1.61.0 (#​1667)
  • Bump the all-deps group with 3 updates (#​1665)
  • Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 in the all-deps group (#​1660)
  • Bump the docker-deps group across 5 directories with 2 updates (#​1661)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1662)
  • Bump the docker-deps group across 4 directories with 1 update (#​1656)
  • Bump the all-deps group with 2 updates (#​1654)
  • Bump the all-deps group with 4 updates (#​1657)
  • Bump github/codeql-action from 3.28.5 to 3.28.8 in the all-deps group (#​1652)
  • Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 in the all-deps group (#​1651)
  • Bump the all-deps group with 2 updates (#​1649)
  • Bump the all-deps group with 5 updates (#​1650)
  • Bump the docker-deps group across 5 directories with 3 updates (#​1648)
  • Bump google.golang.org/protobuf in the all-deps group (#​1647)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1646)

v1.3.1

Compare Source

Dependency Update

v1.3.0

Compare Source

CTFE Storage Saving: Extra Data Issuance Chain Deduplication

This feature now supports PostgreSQL, in addition to the support for MySQL/MariaDB that was added in v1.2.0.

Log operators can choose to enable this feature for new PostgreSQL-based CT logs by adding new CTFE configs in the LogMultiConfig and importing the database schema. The other available options are documented in the v1.2.0 changelog entry.

This change is tested in Cloud Build tests using the postgres:17 Docker image as of the time of writing.

Misc
Dependency update

v1.2.2

Compare Source

  • Recommended Go version for development: 1.22
    • Using a different version can lead to presubmits failing due to unexpected diffs.
Add TLS Support

Add TLS support for Trillian: By using --trillian_tls_ca_cert_file flag, users can provide a CA certificate, that is used to establish a secure communication with Trillian log server.

Add TLS support for ct_server: By using --tls_certificate and --tls_key flags, users can provide a service certificate and key, that enables the server to handle HTTPS requests.

HTTP Idle Connection Timeout Flag

A new flag http_idle_timeout is added to set the HTTP server's idle timeout value in the ct_server binary. This controls the maximum amount of time to wait for the next request when keep-alives are enabled.

Misc
Fixes
Dependency update

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.0/go-deps branch from 16cc98d to 9c46224 Compare October 1, 2025 12:31
@osmman osmman closed this Oct 17, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant