fix(deps): update gomod dependencies - #477
fix(deps): update gomod dependencies#477red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
Conversation
|
|
Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
ea66449 to
be660ef
Compare
|
New changes are detected. LGTM label has been removed. |
Signed-off-by: red-hat-konflux-kflux-prd-rh03 <206760901+red-hat-konflux-kflux-prd-rh03[bot]@users.noreply.github.com>
be660ef to
bb742a1
Compare
|
[APPROVALNOTIFIER] This PR is APPROVED Approval requirements bypassed by manually added approval. This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot] The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
This PR contains the following updates:
v2.9.0→v2.9.3v0.28.0→v0.29.0v0.29.1v0.28.0→v0.29.0v0.29.1v0.28.0→v0.29.0v0.29.1v0.28.0→v0.29.0v0.29.1v0.28.0→v0.29.0v0.29.1v0.28.0→v0.29.0v0.29.1v0.28.0→v0.29.0v0.29.1v0.28.0→v0.29.0v0.29.1v0.28.0→v0.29.0v0.29.1v0.28.0→v0.29.0v0.29.1v0.28.0→v0.29.0v0.29.1v0.28.0→v0.29.0v0.29.1v0.7.0→v0.7.15c75e62→2a3d7395c75e62→2a3d739v0.89.0→v0.93.1v1.12.0→v1.12.1v3.0.4→v3.0.5v0.39.0→v0.40.0v0.35.2→v0.36.4v0.35.2→v0.36.4v0.35.2→v0.36.4v0.35.2→v0.36.4v0.23.0→v0.24.1v0.6.0→v0.7.0v6.4.1→v6.4.2Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
fxamacker/cbor (github.com/fxamacker/cbor/v2)
v2.9.3Compare Source
This release fixes a potential panic when decoding into a
time.Timefrom a CBOR byte string, map, or array under certain conditions.Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with
timeTag = DecTagRequired.Upgrading to v2.9.3 is recommended.
The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.
What's Changed
Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3
v2.9.2Compare Source
This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.
Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).
The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.
This release passed fuzz tests (billions of execs) and it is production quality.
What's Changed
CI / GitHub Actions and Docs
🔎 Details...
Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2
v2.9.1Compare Source
This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.
🐞 Bug fixes related to the
keyasintfeatureThese changes only affect Go struct fields tagged with
keyasint:math.MaxInt64when decoding CBOR map to a struct withkeyasintfield (PR #757)keyasinttag values (PR #757)🐞 Other bug fixes and defensive checks
Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).
NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).
RawMessagefromRawMessage.MarshalCBOR(PR #753)U+FFFDreplacement character (PR #753)What's Changed
TimeRFC3339NanoUTCby @fxamacker in #688CI / GitHub Actions and Docs
🔎 Details...
New Contributors
Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1
go-openapi/swag (github.com/go-openapi/swag)
v0.29.0Compare Source
0.29.0 - 2026-08-19
New fsutils on top of io.FS
Full Changelog: go-openapi/swag@v0.28.0...v0.29.0
10 commits in this release.
Implemented enhancements
Documentation
Testing
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release
swag license terms
Per-module changes
conv (0.29.0)
Miscellaneous tasks
fileutils (0.29.0)
Implemented enhancements
jsonname (0.29.0)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.29.0)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration/benchmarks (0.29.0)
Testing
Miscellaneous tasks
Updates
Other (technical)
jsonutils/adapters/testintegration (0.29.0)
Miscellaneous tasks
Updates
jsonutils/fixtures_test (0.29.0)
Miscellaneous tasks
Updates
jsonutils (0.29.0)
Miscellaneous tasks
Updates
loading (0.29.0)
Testing
Miscellaneous tasks
Updates
Other (technical)
mangling (0.29.0)
Miscellaneous tasks
netutils (0.29.0)
Miscellaneous tasks
pools (0.29.0)
Miscellaneous tasks
stringutils (0.29.0)
Miscellaneous tasks
typeutils (0.29.0)
Miscellaneous tasks
yamlutils (0.29.0)
Testing
Miscellaneous tasks
Updates
Other (technical)
google/gnostic-models (github.com/google/gnostic-models)
v0.7.1Compare Source
prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)
v0.93.1: 0.93.1 / 2026-08-10Compare Source
v0.93.0: 0.93.0 / 2026-07-28Compare Source
--storage.tsdb.delay-compact-file.path,--shipper.meta-file-name,--shipper.ignore-unequal-block-size) instead of disabling compaction. Setspec.disableCompaction: trueto keep the previous behavior. #8694.spec.shardsforPrometheusandPrometheusAgentCRDs. #8691updateMessagefield to the Slack receiver in theAlertmanagerConfigCRD. #8506chunkEncodingfield toTSDBSpecfor runtime float encoding selection inPrometheusandPrometheusAgentCRDs. #8675kubeletService on dual-stack clusters. #8682v0.92.1: 0.92.1 / 2026-06-30Compare Source
v0.92.0: 0.92.0 / 2026-06-18Compare Source
tokenUrlfield in OAuth2 configuration across all CRDs. #8579urlfield inRemoteReadSpecinPrometheusCRD. #8596PrometheusCRD (Prometheus >= v3 uses the config file; older versions continue to use CLI flags). #8547staleSeriesCompactionThresholdfield toTSDBSpecinPrometheusandPrometheusAgentCRDs. #8563labelNameUnderscoreSanitizationandlabelNamePreserveMultipleUnderscoresfields toOTLPConfiginPrometheusandPrometheusAgentCRDs. #8562payloadfield to Webhook receiver inAlertmanagerConfigCRD. #8507PrometheusTopologyShardingfeature gate is enabled (removes the need forattachMetadata.node=true). #8564update_messagefield in Alertmanager configuration Secret. #8556Probestatic configuration to prevent invalid Prometheus scrape configs. #7901pollBasedListerWatcher. #8593ProxyConfigin OAuth2 configuration. #8610returnin admission webhook after marshal failure. #8582FindOwnerto returnnilonmeta.Accessorerror. #8585Closeerrors inGzipConfigandGunzipConfig. #8573--labels "key"). #8560v0.91.0: 0.91.0 / 2026-05-05Compare Source
basicAuth,authorizationandoauth2inScrapeConfigCRD. #8480ScrapeConfigCRD. #8479AlertmanagerConfigCRD. #8220AlertmanagerConfigCRD. #8267AlertmanagerConfigCRD. #8270PrometheusShardRetentionPolicyfeature gate). #8478TopologyforPrometheusandPrometheusAgentcustom resources (it requires thePrometheusTopologyShardingfeature gate). #8486TopologyforPrometheusandPrometheusAgentcustom resources (it requires thePrometheusTopologyShardingfeature gate). #8519TopologyforPrometheusandPrometheusAgentcustom resources (it requires thePrometheusTopologyShardingfeature gate). #8538--promql-optionsCLI argument to the admission-webhook binary. #8531PrometheusRuleresources selected byPrometheusresources based on the PromQL enabled features. #8545ScrapeConfigCRD. #8489auth_secret_filefield for Email receiver in Alertmanager configuration Secret. #8394smtp_auth_secret_filefield in Alertmanager configuration Secret. #8396externalIdfield to SigV4 configuration inAlertmanager,Prometheus,PrometheusAgentandThanosRulerCRDs. #8494cipherSuitessupport for Thanos Sidecars and Rulers. #8524curvessupport for Thanos Sidecars and Rulers. #8542AlertmanagerCRD. #8503 #8534payloadfield for Webhook receiver in Alertmanager configuration Secret. #8505update_messagefield for Slack receiver in Alertmanager configuration Secret. #8502AlertmanagerConfigCRD. #8400healthFilterfield for ConsulSD inScrapeConfigCRD. #8529Retain. #8513v0.90.1: 0.90.1 / 2026-03-25Compare Source
v0.90.0: 0.90.0 / 2026-03-19Compare Source
httporhttps. #8455--repair-policy-for-statefulsetsCLI argument to the operator. It defines how the operator manages StatefulSet's pods stuck at an incorrect revision. Users running Kubernetes v1.35+ are encouraged to enable this feature (see troubleshooting guide). #8443schedulerNamesupport to thePrometheus,PrometheusAgent,AlertmanagerandThanosRulerCRDs. #8451--web.tls-curvesCLI argument to the operator and admission-webhook binaries. #8385ThanosRulerpods. #8441messageTextsupport for Slack receiver inAlertmanagerConfigCRD. #8374messageTextsupport for Slack receiver in Alertmanager secret config. #8375forceImplicitTLSsupport for SMTP email config in Alertmanager secret config. #8384 #8404forceImplicitTLSsupport for SMTP email config inAlertmanagerConfigCRD. #8386forceImplicitTLSsupport for SMTP global config in Alertmanager secret config. #8405forceImplicitTLSsupport for SMTP global config inAlertmanagerCRD. #8406AlertmanagerCRD. #8372chatIDFilesupport for Telegram receiver in Alertmanager secret config. #8376wechatAPISecretFilesupport in Alertmanager global config. #8377authSecretFilesupport for email config in Alertmanager secret config. #8396Configuration
📅 Schedule: (in timezone UTC)
* 2-4 * * 1-5)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.