Update Go Dependencies #216

red-hat-konflux · 2025-05-11T09:14:13Z

This PR contains the following updates:

Package	Type	Update	Change
cloud.google.com/go	indirect	minor	`v0.120.0` -> `v0.123.0`
cloud.google.com/go/auth	indirect	minor	`v0.16.1` -> `v0.17.0`
cloud.google.com/go/compute/metadata	indirect	minor	`v0.7.0` -> `v0.9.0`
cloud.google.com/go/iam	indirect	patch	`v1.5.2` -> `v1.5.3`
cloud.google.com/go/kms	indirect	minor	`v1.22.0` -> `v1.23.2`
cloud.google.com/go/longrunning	indirect	minor	`v0.6.7` -> `v0.7.0`
cloud.google.com/go/security	require	minor	`v1.18.5` -> `v1.19.2`
github.com/Azure/azure-sdk-for-go/sdk/azcore	indirect	minor	`v1.18.0` -> `v1.20.0`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	indirect	minor	`v1.10.0` -> `v1.13.1`
github.com/Azure/azure-sdk-for-go/sdk/internal	indirect	patch	`v1.11.1` -> `v1.11.2`
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys	indirect	minor	`v1.3.1` -> `v1.4.0`
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal	indirect	minor	`v1.1.1` -> `v1.2.0`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.4.2` -> `v1.6.0`
github.com/aws/aws-sdk-go-v2/credentials	indirect	minor	`v1.17.67` -> `v1.19.3`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	minor	`v1.16.30` -> `v1.18.15`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	minor	`v1.3.34` -> `v1.4.15`
github.com/aws/aws-sdk-go-v2/internal/ini	indirect	patch	`v1.8.3` -> `v1.8.4`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	minor	`v1.12.3` -> `v1.13.4`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	minor	`v1.12.15` -> `v1.13.15`
github.com/aws/smithy-go	indirect	minor	`v1.22.2` -> `v1.23.2`
github.com/beevik/ntp	require	minor	`v1.4.3` -> `v1.5.0`
github.com/digitorus/pkcs7	require	digest	`3a137a8` -> `ffadbf3`
github.com/digitorus/timestamp	require	digest	`220c5c2` -> `c455327`
github.com/fsnotify/fsnotify	indirect	minor	`v1.7.0` -> `v1.9.0`
github.com/fsnotify/fsnotify	indirect	minor	`v1.8.0` -> `v1.9.0`
github.com/gabriel-vasile/mimetype	indirect	patch	`v1.4.8` -> `v1.4.11`
github.com/go-logr/logr	indirect	patch	`v1.4.2` -> `v1.4.3`
github.com/go-openapi/analysis	indirect	minor	`v0.23.0` -> `v0.24.1`
github.com/go-openapi/errors	indirect	patch	`v0.22.1` -> `v0.22.4`
github.com/go-openapi/errors	require	patch	`v0.22.1` -> `v0.22.4`
github.com/go-openapi/inflect	indirect	patch	`v0.21.2` -> `v0.21.4`
github.com/go-openapi/jsonpointer	indirect	minor	`v0.21.1` -> `v0.22.3`
github.com/go-openapi/jsonreference	indirect	patch	`v0.21.0` -> `v0.21.3`
github.com/go-openapi/loads	indirect	minor	`v0.22.0` -> `v0.23.2`
github.com/go-openapi/loads	require	minor	`v0.22.0` -> `v0.23.2`
github.com/go-openapi/spec	indirect	minor	`v0.21.0` -> `v0.22.1`
github.com/go-openapi/spec	require	minor	`v0.21.0` -> `v0.22.1`
github.com/go-openapi/strfmt	indirect	minor	`v0.23.0` -> `v0.25.0`
github.com/go-openapi/strfmt	require	minor	`v0.23.0` -> `v0.25.0`
github.com/go-openapi/swag	indirect	minor	`v0.23.1` -> `v0.25.4`
github.com/go-openapi/swag	require	minor	`v0.23.1` -> `v0.25.4`
github.com/go-openapi/validate	indirect	minor	`v0.24.0` -> `v0.25.1`
github.com/go-swagger/go-swagger	require	minor	`v0.31.0` -> `v0.33.1`
github.com/google/go-containerregistry	indirect	patch	`v0.20.3` -> `v0.20.7`
github.com/googleapis/enterprise-certificate-proxy	indirect	patch	`v0.3.6` -> `v0.3.7`
github.com/huandu/xstrings	indirect	minor	`v1.4.0` -> `v1.5.0`
github.com/jessevdk/go-flags	indirect	minor	`v1.5.0` -> `v1.6.1`
github.com/letsencrypt/boulder	indirect	minor	`v0.0.0-20240620165639-de9c06129bec` -> `v0.20251202.0`
github.com/magiconair/properties	indirect	patch	`v1.8.7` -> `v1.8.10`
github.com/mailru/easyjson	indirect	patch	`v0.9.0` -> `v0.9.1`
github.com/prometheus/client_golang	require	minor	`v1.22.0` -> `v1.23.2`
github.com/prometheus/client_model	indirect	patch	`v0.6.1` -> `v0.6.2`
github.com/prometheus/common	indirect	minor	`v0.62.0` -> `v0.67.4`
github.com/prometheus/procfs	indirect	minor	`v0.15.1` -> `v0.19.2`
github.com/rogpeppe/go-internal	indirect	minor	`v1.12.0` -> `v1.14.1`
github.com/sagikazarmark/locafero	indirect	minor	`v0.4.0` -> `v0.12.0`
github.com/sagikazarmark/locafero	indirect	minor	`v0.7.0` -> `v0.12.0`
github.com/secure-systems-lab/go-securesystemslib	indirect	patch	`v0.9.0` -> `v0.9.1`
github.com/shopspring/decimal	indirect	minor	`v1.3.1` -> `v1.4.0`
github.com/sigstore/protobuf-specs	indirect	minor	`v0.4.1` -> `v0.5.0`
github.com/sigstore/sigstore	require	minor	`v1.9.4` -> `v1.10.0`
github.com/sigstore/sigstore/pkg/signature/kms/aws	require	minor	`v1.9.4` -> `v1.10.0`
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	minor	`v1.9.4` -> `v1.10.0`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	require	minor	`v1.9.4` -> `v1.10.0`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	require	minor	`v1.9.4` -> `v1.10.0`
github.com/spf13/afero	indirect	minor	`v1.11.0` -> `v1.15.0`
github.com/spf13/afero	indirect	minor	`v1.12.0` -> `v1.15.0`
github.com/spf13/cast	indirect	minor	`v1.7.0` -> `v1.10.0`
github.com/spf13/cast	indirect	minor	`v1.7.1` -> `v1.10.0`
github.com/spf13/cobra	require	minor	`v1.9.1` -> `v1.10.2`
github.com/spf13/pflag	indirect	patch	`v1.0.5` -> `v1.0.10`
github.com/spf13/pflag	require	patch	`v1.0.6` -> `v1.0.10`
github.com/spf13/viper	indirect	minor	`v1.19.0` -> `v1.21.0`
github.com/spf13/viper	require	minor	`v1.20.1` -> `v1.21.0`
github.com/toqueteos/webbrowser	indirect	patch	`v1.2.0` -> `v1.2.1`
go.mongodb.org/mongo-driver	indirect	minor	`v1.14.0` -> `v1.17.6`
go.opentelemetry.io/auto/sdk	indirect	minor	`v1.1.0` -> `v1.2.1`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	indirect	minor	`v0.60.0` -> `v0.63.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.60.0` -> `v0.63.0`
go.step.sm/crypto	require	minor	`v0.66.0` -> `v0.75.0`
golang.org/x/crypto	indirect	minor	`v0.35.0` -> `v0.45.0`
golang.org/x/crypto	indirect	minor	`v0.40.0` -> `v0.45.0`
golang.org/x/exp	indirect	digest	`a685a6e` -> `87e1e73`
golang.org/x/mod	indirect	minor	`v0.22.0` -> `v0.30.0`
golang.org/x/net	require	minor	`v0.42.0` -> `v0.47.0`
golang.org/x/oauth2	indirect	minor	`v0.30.0` -> `v0.33.0`
golang.org/x/sync	indirect	minor	`v0.11.0` -> `v0.18.0`
golang.org/x/sync	indirect	minor	`v0.16.0` -> `v0.18.0`
golang.org/x/sys	indirect	minor	`v0.30.0` -> `v0.38.0`
golang.org/x/sys	indirect	minor	`v0.34.0` -> `v0.38.0`
golang.org/x/term	indirect	minor	`v0.33.0` -> `v0.37.0`
golang.org/x/text	indirect	minor	`v0.22.0` -> `v0.31.0`
golang.org/x/text	indirect	minor	`v0.27.0` -> `v0.31.0`
golang.org/x/time	indirect	minor	`v0.12.0` -> `v0.14.0`
golang.org/x/tools	indirect	minor	`v0.29.0` -> `v0.39.0`
google.golang.org/api	indirect	minor	`v0.234.0` -> `v0.257.0`
google.golang.org/genproto	indirect	digest	`f936aa4` -> `ff82c1b`
google.golang.org/genproto/googleapis/api	indirect	digest	`f936aa4` -> `ff82c1b`
google.golang.org/genproto/googleapis/rpc	indirect	digest	`5a2f75b` -> `ff82c1b`
sigs.k8s.io/release-utils	require	minor	`v0.11.1` -> `v0.12.2`

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

googleapis/google-cloud-go (cloud.google.com/go)

`v0.123.0`

Compare Source

Features

internal/stategen: Populate the latest googleapis commit (#12880) (7b017a0)
librariangen: Implement the build command (#12817) (14734c8)

Bug Fixes

internal/librariangen: Add link to source commit in release notes (#12881) (1c06cc6)
internal/librariangen: Fix CHANGES.md headers (#12849) (baf515d)
internal/librariangen: Remove go mod init/tidy from postprocessor (#12832) (1fe506a)
internal/librariangen: Test for error path with flags (#12830) (f0da7b2)
internal/postprocessor: Add dlp to skip-module-scan-paths (#12857) (45a7d9b)
librariangen: Honor original container contract (#12846) (71c8fd3)
librariangen: Improvements to release-init (#12842) (0db677a)
stategen: Specify an appropriate tag format for google-cloud-go (#12835) (ffcff33)

`v0.122.0`

Compare Source

Features

internal/librariangen: Add release-init command (#12751) (52e84cc)

Bug Fixes

internal/godocfx: Better support for v2 modules (#12797) (4bc8785)
internal/godocfx: Module detection when tidy errors (#12801) (83d46cd)
internal/librariangen: Fix goimports errors (#12765) (83bdaa4)

`v0.121.6`

Compare Source

Bug Fixes

internal/librariangen: Fix Dockerfile permissions for go mod tidy (#12704) (0e70a0b)

`v0.121.5`

Compare Source

Bug Fixes

internal/librariangen: Get README title from service config yaml (#12676) (b3b8f70)
internal/librariangen: Update source_paths to source_roots in generate-request.json (#12691) (2adb6f9)

`v0.121.4`

Compare Source

Bug Fixes

geminidataanalytics: Correct resource reference type for parent field in data_chat_service.proto (98ba6f0)
internal/postprocessor: Add git (#12524) (82030ee)

`v0.121.3`

Compare Source

Documentation

impersonate: Address TODO in impersonate/example_test.go (#12401) (dd096ec)

`v0.121.2`

Compare Source

Documentation

internal/generated: Remove outdated pubsub snippets (#12284) (0338a40)

`v0.121.1`

Compare Source

Bug Fixes

civil: Add support for civil.Date, civil.Time and civil.DateTime arguments to their respective Scan methods (#12240) (7127ce9), refs #12060

`v0.121.0`

Compare Source

Features

debugger: Remove debugger/apiv2 client (#12050) (af8641e)

`v0.120.1`

Compare Source

Bug Fixes

readme: Update authentication section (#11918) (2fda860)

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.6.0`

Compare Source

What's Changed

Deprecate ROPC flow by @Ugonnaak1 in #584
Added a cache lookup for AcquireTokenByCredential by @4gust in #590
Fix panic in AcquireTokenSilent for public clients due to nil Credential by @4gust in #581
Adding support for FMI (Federated Managed Identity) by @4gust in #586
Adjust issuer validation to handle cases where instance discovery is not performed by @Avery-Dunn in #591

New Contributors

@Ugonnaak1 made their first contribution in #584

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.5.0...v1.6.0

`v1.5.0`

Compare Source

What's Changed

Bump github.com/golang-jwt/jwt/v5 from 5.0.0 to 5.2.2 by @dependabot[bot] in #563
Added a FIC test by @4gust in #557
Fix CodeQL warning 'Cross-site scripting vulnerability due to user-provided value by @fengga in #566
fix: support both login.partner.microsoftonline.cn and login.chinaclo… by @Achiket123 in #575
Add validation for issuer returned by OIDC endpoint by @Avery-Dunn in #576
#572 - Update spelling of client by @equalsgibson in #573

New Contributors

@dependabot[bot] made their first contribution in #563
@fengga made their first contribution in #566
@Achiket123 made their first contribution in #575
@Avery-Dunn made their first contribution in #576
@equalsgibson made their first contribution in #573

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.4.2...v1.5.0

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/credentials)

`v1.19.1`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/feature/s3/manager: v1.19.11
- Bug Fix: Add missing ChecksumType field to UploadOutput.
github.com/aws/aws-sdk-go-v2/service/cloudformation: v1.67.0
- Feature: Add new warning type 'EXCLUDED_RESOURCES'
github.com/aws/aws-sdk-go-v2/service/connectcases: v1.32.0
- Feature: New Search All Related Items API enables searching related items across cases
github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.51.0
- Feature: Add support for dual-stack account endpoint generation
github.com/aws/aws-sdk-go-v2/service/guardduty: v1.64.3
- Documentation: Updated descriptions for the Location parameter in CreateTrustedEntitySet and CreateThreatEntitySet.
github.com/aws/aws-sdk-go-v2/service/synthetics: v1.41.0
- Feature: Adds support to configure canaries with pre-configured blueprint code on supported runtime versions. This behavior can be controlled via the new BlueprintTypes property exposed in the CreateCanary and UpdateCanary APIs.

`v1.19.0`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2: v1.40.0
- Feature: Add support for AWS Login credentials (package credentials/logincreds) to the default credential chain.
github.com/aws/aws-sdk-go-v2/config: v1.32.0
- Feature: Add support for AWS Login credentials (package credentials/logincreds) to the default credential chain.
github.com/aws/aws-sdk-go-v2/credentials: v1.19.0
- Feature: Add support for AWS Login credentials (package credentials/logincreds) to the default credential chain.

`v1.18.1`

General Highlights

Feature: Add handwritten paginators that were present in some services in the v1 SDK.
Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/service/cloud9: v1.18.11
- Documentation: Update to imageId parameter behavior and dates updated.
github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.23.0
- Documentation: Updating descriptions for several APIs.
github.com/aws/aws-sdk-go-v2/service/kendra: v1.44.0
- Feature: Changes for a new feature in Amazon Kendra's Query API to Collapse/Expand query results
github.com/aws/aws-sdk-go-v2/service/rds: v1.57.0
- Feature: This release adds support for upgrading the storage file system configuration on the DB instance using a blue/green deployment or a read replica.
github.com/aws/aws-sdk-go-v2/service/wisdom: v1.16.0
- Feature: This release adds an max limit of 25 recommendation ids for NotifyRecommendationsReceived API.

`v1.18.0`

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.18.0
- Feature: Add config switch DisableDefaultMaxBackoff that allows you to disable the default maximum backoff (1 second) for IMDS calls retry attempt
github.com/aws/aws-sdk-go-v2/service/batch: v1.55.0
- Feature: AWS Batch for SageMaker Training jobs feature support. Includes new APIs for service job submission (e.g., SubmitServiceJob) and managing service environments (e.g., CreateServiceEnvironment) that enable queueing SageMaker Training jobs.
github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.27.0
- Feature: This feature provides the ability to update the table reference and allowed columns on an existing configured table.
github.com/aws/aws-sdk-go-v2/service/deadline: v1.18.0
- Feature: Adds support for tag management on monitors.
github.com/aws/aws-sdk-go-v2/service/location: v1.46.0
- Feature: This release 1) adds support for multi-polygon geofences with disconnected territories, and 2) enables polygon exclusion zones within geofences for more accurate representation of real-world boundaries.
github.com/aws/aws-sdk-go-v2/service/opensearchserverless: v1.21.0
- Feature: This is to support Granular access control support for SAML with IAMFedraton in AOSS

aws/smithy-go (github.com/aws/smithy-go)

`v1.23.2`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.23.2
- Bug Fix: Adjust the initial sizes of each middleware phase to avoid some unnecessary reallocation.
- Bug Fix: Avoid unnecessary allocation overhead from the metrics system when not in use.

`v1.23.1`

Compare Source

`v1.23.0`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.23.0
- Feature: Sort map keys in JSON Document types.

`v1.22.5`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.22.5
- Feature: Add HTTP interceptors.

`v1.22.4`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.22.4
- Bug Fix: Fix CBOR serd empty check for string and enum fields
- Bug Fix: Fix HTTP metrics data race.
- Bug Fix: Replace usages of deprecated ioutil package.

`v1.22.3`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.22.3
Dependency Update: Bump minimum Go version to 1.22 per our language support policy.

beevik/ntp (github.com/beevik/ntp)

`v1.5.0`

Compare Source

==============

Changes

Added the GetSystemTime field to QueryOptions.
Updated minimum required Go version to 1.24.

Fixes

Upgraded package dependencies to retrieve security fixes.

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

`v1.9.0`

Compare Source

Changes and fixes

all: make BufferedWatcher buffered again (#657)
inotify: fix race when adding/removing watches while a watched path is being deleted (#678, #686)
inotify: don't send empty event if a watched path is unmounted (#655)
inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#679)
kqueue: fix watching relative symlinks (#681)
kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#682)
illumos: don't send error if changed file is deleted while processing the event (#678)

`v1.8.0`

Compare Source

Additions

all: add FSNOTIFY_DEBUG to print debug logs to stderr (#619)

Changes and fixes

windows: fix behaviour of WatchList() to be consistent with other platforms (#610)
kqueue: ignore events with Ident=0 (#590)
kqueue: set O_CLOEXEC to prevent passing file descriptors to children (#617)
kqueue: emit events as "/path/dir/file" instead of "path/link/file" when watching a symlink (#625)
inotify: don't send event for IN_DELETE_SELF when also watching the parent (#620)
inotify: fix panic when calling Remove() in a goroutine (#650)
fen: allow watching subdirectories of watched directories (#621)

gabriel-vasile/mimetype (github.com/gabriel-vasile/mimetype)

`v1.4.11`: cpio, wordperfect support

Compare Source

What's Changed

wordperfect: add support in #707
cpio: add support for binary version in #709
shebang: fix detection with args by @scop in #710
shebang: support env -S by @scop in #712
dxf: add support in #720
clone: stop cloning MIME when there is no charset in #722
aaf: remove individual node for aaf in #724
msoxml: match files and directories for first zip entry in #729

Full Changelog: gabriel-vasile/mimetype@v1.4.10...v1.4.11

`v1.4.10`: perfomance inprovements, tests and new formats

Compare Source

This release adds support for XHTML, Lotus-1-2-3, KML, shell scripts, VSDX, OneNote, CHM and Netpbm file formats.
Changes were made to make mimetype behave more file linux $ file --mime utility.

https://github.com/gabriel-vasile/mimetype_tests repo is now used for running comparisons between mimetype and $ file --mime. It contains 50 000 samples and mimetype identifies the same format as $ file --mime for ~97% of them. Results are in the Actions tab.

What's Changed

charset: remove dependency on x/net for parsing html in #669
CSV: replace stdlib reader with a parser that allocates less in #672
svg: make detection harder in #674
pdf: relax check to match file in #677
csv: stop mutating input byte slices; for #680 in #681
charset: remove dependency on mime in #684
mso_office: increase limit of checked entries from 4 to 100 in #685
jar: replace application/jar with application/java-archive in #686
Zip container improvements in #687
Jar first entry inside a zip in #688
svg+html: better handling for comments in #689
xhtml: add support in #690
misc: behave more like file in #691
lotus-1-2-3: add support in #695
Add support for zipped KML files by @dmlambea in #693
shell: add support by @scop in #694
ruby: add support by @scop in #700
python: associate with python2 and python3 shebangs by @scop in #699
vsdx: add support in #702
oneNote: add support in #703
chm: add support for Microsoft Compiled HTML Help in #704
Netpbm: add support by @kenshaw in #705

New Contributors

@dmlambea made their first contribution in #693
@scop made their first contribution in #694
@kenshaw made their first contribution in #705

Full Changelog: gabriel-vasile/mimetype@v1.4.9...v1.4.10

`v1.4.9`: GLTF support and performance improvements

Compare Source

What's Changed

SRT detection: reduce allocs by @gabriel-vasile in #636
json: more benchmarking by @gabriel-vasile in #640
Bump golang.org/x/net from 0.33.0 to 0.39.0 in the gomod
json: add parser with query capacity by @gabriel-vasile in #652
feat: add support for GLTF by @gabriel-vasile in #655

Full Changelog: gabriel-vasile/mimetype@v1.4.8...v1.4.9

go-logr/logr (github.com/go-logr/logr)

`v1.4.3`

Compare Source

Minor release.

What's Changed

Fix slog tests for 1.25 by @hoeppi-google in #361
Remove one exception from Slog testing by @thockin in #362

New Contributors

@hoeppi-google made their first contribution in #361

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

go-openapi/analysis (github.com/go-openapi/analysis)

`v0.24.1`

Compare Source

`v0.24.0`

Compare Source

go-openapi/errors (github.com/go-openapi/errors)

go-openapi/inflect (github.com/go-openapi/inflect)

`v0.21.4`

Compare Source

0.21.4 - 2025-12-05

Full Changelog: go-openapi/inflect@v0.21.3...v0.21.4

1 commits in this release.

Documentation

doc: updated contributors file by @bot-go-openapi[bot] in #29 ...

People who contributed to this release

@bot-go-openapi[bot]

New Contributors

@bot-go-openapi[bot] made their first contribution
in #29

inflect license terms

`v0.21.3`

Compare Source

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

`v0.22.3`

Compare Source

0.22.3 - 2025-11-17

Full Changelog: go-openapi/jsonpointer@v0.22.2...v0.22.3

8 commits in this release.

Documentation

doc: updated contributors file by @github-actions[bot] in #76 ...
doc: automated a record of all-time contributors by @fredbi in #75 ...
doc: release badge in README by @fredbi in #73 ...

Code quality

docs: added maintainer's doc and style guide by @fredbi in #77 ...
doc: improved documentation by @fredbi in #70 ...
chore(lint): more linting by @fredbi in #71 ...

Miscellaneous tasks

test: added tests for edge cases by @fredbi in #74 ...
ci: run fuzz test in ci by @fredbi in #72 ...

People who contributed to this release

New Contributors

@github-actions[bot] made their first contribution
in #76

jsonpointer license terms

`v0.22.2`

Compare Source

0.22.2 - 2025-11-14

Full Changelog: go-openapi/jsonpointer@v0.22.1...v0.22.2

12 commits in this release.

Documentation

ci: fixed typo by @fredbi ...
docs: fixed typo in NOTICE by @fredbi in #62 ...
Licensing: added NOTICE by @fredbi in #61 ...

Code quality

chore(lint): code quality by @fredbi in #64 ...

Testing

test: added fuzz test for parsing by @fredbi in #69 ...
test: improved test coverage by @fredbi in #68 ...

Miscellaneous tasks

ci: fixed sarif file by @fredbi ...
chore(deps): removed indirect test dependencies by @fredbi in #60 ...

Security

ci: added govulscan security scanner tool by @fredbi in #67 ...
doc: added examples to document simple use cases by @fredbi in #65 ...
ci: added workflows by @fredbi in #63 ...

Updates

chore(deps): bump the development-dependencies group with 5 updates by @dependabot[bot] in #66 ...

People who contributed to this release

@fredbi

jsonpointer license terms

`v0.22.1`

Compare Source

`v0.22.0`

Compare Source

`v0.21.2`

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

`v0.21.3`

Compare Source

`v0.21.2`

Compare Source

`v0.21.1`

Compare Source

go-openapi/loads (github.com/go-openapi/loads)

`v0.23.2`

Compare Source

`v0.23.1`

Compare Source

`v0.23.0`

Compare Source

go-openapi/spec (github.com/go-openapi/spec)

`v0.22.1`

Compare Source

`v0.22.0`

[Compare Source](https://redirect.github.com/go-openapi/spec/compare/v0.21.

sourcery-ai · 2025-05-11T09:14:19Z

Reviewer's Guide

This pull request updates the Go toolchain and a large set of direct and indirect dependencies to their latest minor or patch versions, as reflected in the go.mod and hack/tools/go.mod files. No application code changes are included; the updates are limited to dependency version bumps for improved security, compatibility, and bug fixes.

File-Level Changes

Change	Details	Files
Update Go toolchain and dependencies to latest versions.	Bump Go toolchain from 1.23.4 to 1.23.9. Update direct dependencies such as github.com/prometheus/client_golang, github.com/sigstore/sigstore, github.com/spf13/viper, go.step.sm/crypto, golang.org/x/net, sigs.k8s.io/release-utils, and others to newer minor or patch versions. Update a wide range of indirect dependencies (e.g., cloud.google.com/go, github.com/fsnotify/fsnotify, github.com/huandu/xstrings, github.com/jessevdk/go-flags, github.com/klauspost/compress, github.com/magiconair/properties, github.com/prometheus/common, github.com/spf13/afero, go.mongodb.org/mongo-driver, golang.org/x/crypto, golang.org/x/exp, golang.org/x/sync, golang.org/x/sys, golang.org/x/text, google.golang.org/api, google.golang.org/genproto, and more). Apply the same dependency updates in hack/tools/go.mod for development tooling.	`go.mod` `hack/tools/go.mod`

Tips and commands

Interacting with Sourcery

Trigger a new review: Comment @sourcery-ai review on the pull request.
Continue discussions: Reply directly to Sourcery's review comments.
Generate a GitHub issue from a review comment: Ask Sourcery to create an
issue from a review comment by replying to it. You can also reply to a
review comment with @sourcery-ai issue to create an issue from it.
Generate a pull request title: Write @sourcery-ai anywhere in the pull
request title to generate a title at any time. You can also comment
@sourcery-ai title on the pull request to (re-)generate the title at any time.
Generate a pull request summary: Write @sourcery-ai summary anywhere in
the pull request body to generate a PR summary at any time exactly where you
want it. You can also comment @sourcery-ai summary on the pull request to
(re-)generate the summary at any time.
Generate reviewer's guide: Comment @sourcery-ai guide on the pull
request to (re-)generate the reviewer's guide at any time.
Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
pull request to resolve all Sourcery comments. Useful if you've already
addressed all the comments and don't want to see them anymore.
Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
request to dismiss all existing Sourcery reviews. Especially useful if you
want to start fresh with a new review - don't forget to comment
@sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

Enable or disable review features such as the Sourcery-generated pull request
summary, the reviewer's guide, and others.
Change the review language.
Add, remove or edit custom review instructions.
Adjust other review settings.

Getting Help

Contact our support team for questions or feedback.
Visit our documentation for detailed guides and information.
Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

openshift-ci · 2025-05-11T09:14:19Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign lance for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

red-hat-konflux · 2025-06-15T11:27:35Z

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

19 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.23.6` -> `1.25.0`
`github.com/tink-crypto/tink-go/v2`	`v2.4.0` -> `v2.5.0`
`google.golang.org/protobuf`	`v1.36.6` -> `v1.36.10`
`github.com/aws/aws-sdk-go-v2`	`v1.36.3` -> `v1.40.1`
`github.com/aws/aws-sdk-go-v2/config`	`v1.29.14` -> `v1.32.1`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.6.34` -> `v2.7.15`
`github.com/aws/aws-sdk-go-v2/service/kms`	`v1.38.3` -> `v1.48.2`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.25.3` -> `v1.30.6`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.30.1` -> `v1.35.11`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.33.19` -> `v1.41.3`
`github.com/go-jose/go-jose/v4`	`v4.1.1` -> `v4.1.3`
`github.com/go-viper/mapstructure/v2`	`v2.2.1` -> `v2.4.0`
`github.com/golang-jwt/jwt/v5`	`v5.2.2` -> `v5.3.0`
`github.com/googleapis/gax-go/v2`	`v2.14.2` -> `v2.15.0`
`github.com/jellydator/ttlcache/v3`	`v3.3.0` -> `v3.4.0`
`github.com/pelletier/go-toml/v2`	`v2.2.3` -> `v2.2.4`
`go.opentelemetry.io/otel`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/otel/metric`	`v1.35.0` -> `v1.38.0`
`go.opentelemetry.io/otel/trace`	`v1.35.0` -> `v1.38.0`
`google.golang.org/grpc`	`v1.72.2` -> `v1.77.0`

File name: hack/tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

3 additional dependencies were updated
The go directive was updated for compatibility reasons

Details:

Package	Change
`go`	`1.23.6` -> `1.24.0`
`github.com/Masterminds/semver/v3`	`v3.2.1` -> `v3.4.0`
`github.com/Masterminds/sprig/v3`	`v3.2.3` -> `v3.3.0`
`github.com/pelletier/go-toml/v2`	`v2.2.2` -> `v2.2.4`

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot added the dependencies label May 11, 2025

openshift-ci bot requested review from JasonPowr and tommyd450 May 11, 2025 09:14

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 2 times, most recently from 5008355 to cb24cfc Compare May 18, 2025 13:04

red-hat-konflux bot changed the title ~~fix(deps): update go dependencies~~ chore(deps): update go dependencies May 18, 2025

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 2 times, most recently from df2a5ff to 1a75a57 Compare May 25, 2025 19:07

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from 1a75a57 to b20be65 Compare June 8, 2025 06:20

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from b20be65 to d7217de Compare June 15, 2025 11:27

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 5 times, most recently from 308e593 to 0f84382 Compare June 22, 2025 11:14

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 4 times, most recently from d168165 to add8af9 Compare June 29, 2025 10:56

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 4 times, most recently from af44a5f to 8469dbb Compare July 13, 2025 05:43

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 4 times, most recently from c804fca to 9f7c859 Compare July 20, 2025 08:59

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 18 times, most recently from 642ca7a to 87b948a Compare December 3, 2025 21:20

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 10 times, most recently from 88e71ed to e0593a0 Compare December 6, 2025 05:49

Update Go Dependencies

fc417b2

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from e0593a0 to fc417b2 Compare December 6, 2025 13:20

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update Go Dependencies #216

Update Go Dependencies #216

red-hat-konflux bot commented May 11, 2025 •

edited

Loading

Uh oh!

sourcery-ai bot commented May 11, 2025 •

edited

Loading

Interacting with Sourcery

Customizing Your Experience

Getting Help

Uh oh!

openshift-ci bot commented May 11, 2025

Uh oh!

red-hat-konflux bot commented Jun 15, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Update Go Dependencies #216

Are you sure you want to change the base?

Update Go Dependencies #216

Conversation

red-hat-konflux bot commented May 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

Features

Bug Fixes

Features

Bug Fixes

Bug Fixes

Bug Fixes

Bug Fixes

Documentation

Documentation

Bug Fixes

Features

Bug Fixes

What's Changed

New Contributors

What's Changed

New Contributors

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

General Highlights

Module Highlights

Changes and fixes

Additions

Changes and fixes

v1.4.11: cpio, wordperfect support

What's Changed

v1.4.10: perfomance inprovements, tests and new formats

What's Changed

New Contributors

v1.4.9: GLTF support and performance improvements

What's Changed

What's Changed

New Contributors

0.21.4 - 2025-12-05

Documentation

People who contributed to this release

New Contributors

0.22.3 - 2025-11-17

Documentation

Code quality

Miscellaneous tasks

People who contributed to this release

New Contributors

0.22.2 - 2025-11-14

Documentation

Code quality

Testing

Miscellaneous tasks

Security

Updates

People who contributed to this release

Uh oh!

sourcery-ai bot commented May 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Reviewer's Guide

File-Level Changes

Interacting with Sourcery

Customizing Your Experience

Getting Help

Uh oh!

red-hat-konflux bot commented May 11, 2025 •

edited

Loading

`v1.4.11`: cpio, wordperfect support

`v1.4.10`: perfomance inprovements, tests and new formats

`v1.4.9`: GLTF support and performance improvements

sourcery-ai bot commented May 11, 2025 •

edited

Loading

red-hat-konflux bot commented Jun 15, 2025 •

edited

Loading