fix(deps): update gomod dependencies - #477
fix(deps): update gomod dependencies#477red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
Conversation
|
|
Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
ea66449 to
be660ef
Compare
|
New changes are detected. LGTM label has been removed. |
be660ef to
bb742a1
Compare
Signed-off-by: red-hat-konflux-kflux-prd-rh03 <206760901+red-hat-konflux-kflux-prd-rh03[bot]@users.noreply.github.com>
bb742a1 to
d56d8a5
Compare
|
[APPROVALNOTIFIER] This PR is APPROVED Approval requirements bypassed by manually added approval. This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot] The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
This PR contains the following updates:
v2.9.0→v2.9.3v0.28.0→v0.29.1v0.28.0→v0.29.1v0.28.0→v0.29.1v0.28.0→v0.29.1v0.28.0→v0.29.1v0.28.0→v0.29.1v0.28.0→v0.29.1v0.28.0→v0.29.1v0.28.0→v0.29.1v0.28.0→v0.29.1v0.28.0→v0.29.1v0.28.0→v0.29.1v0.7.0→v0.7.15c75e62→c804ea65c75e62→c804ea6v0.89.0→v0.93.1v0.89.0→v0.93.1v1.12.0→v1.12.1v3.0.4→v3.0.5v0.39.0→v0.40.0v0.35.2→v0.36.4v0.35.2→v0.36.4v0.35.2→v0.36.4v0.35.2→v0.36.4d427ff9→be32defv0.23.0→v0.24.1v0.6.0→v0.7.0v6.4.1→v6.4.2Release Notes
fxamacker/cbor (github.com/fxamacker/cbor/v2)
v2.9.3Compare Source
This release fixes a potential panic when decoding into a
time.Timefrom a CBOR byte string, map, or array under certain conditions.Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with
timeTag = DecTagRequired.Upgrading to v2.9.3 is recommended.
The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.
What's Changed
Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3
v2.9.2Compare Source
This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.
Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).
The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.
This release passed fuzz tests (billions of execs) and it is production quality.
What's Changed
CI / GitHub Actions and Docs
🔎 Details...
Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2
v2.9.1Compare Source
This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.
🐞 Bug fixes related to the
keyasintfeatureThese changes only affect Go struct fields tagged with
keyasint:math.MaxInt64when decoding CBOR map to a struct withkeyasintfield (PR #757)keyasinttag values (PR #757)🐞 Other bug fixes and defensive checks
Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).
NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).
RawMessagefromRawMessage.MarshalCBOR(PR #753)U+FFFDreplacement character (PR #753)What's Changed
TimeRFC3339NanoUTCby @fxamacker in #688CI / GitHub Actions and Docs
🔎 Details...
New Contributors
Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1
go-openapi/swag (github.com/go-openapi/swag)
v0.29.1Compare Source
0.29.1 - 2026-08-21
Full Changelog: go-openapi/swag@v0.29.0...v0.29.1
4 commits in this release.
Testing
Miscellaneous tasks
Updates
People who contributed to this release
swag license terms
Per-module changes
conv (0.29.1)
Miscellaneous tasks
jsonname (0.29.1)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.29.1)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.29.1)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.29.1)
Miscellaneous tasks
jsonutils (0.29.1)
Testing
Miscellaneous tasks
loading (0.29.1)
Miscellaneous tasks
mangling (0.29.1)
Miscellaneous tasks
netutils (0.29.1)
Miscellaneous tasks
pools (0.29.1)
Miscellaneous tasks
stringutils (0.29.1)
Miscellaneous tasks
typeutils (0.29.1)
Miscellaneous tasks
yamlutils (0.29.1)
Miscellaneous tasks
v0.29.0Compare Source
0.29.0 - 2026-08-19
New fsutils on top of io.FS
Full Changelog: go-openapi/swag@v0.28.0...v0.29.0
10 commits in this release.
Implemented enhancements
Documentation
Testing
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release
swag license terms
Per-module changes
conv (0.29.0)
Miscellaneous tasks
fileutils (0.29.0)
Implemented enhancements
jsonname (0.29.0)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.29.0)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration/benchmarks (0.29.0)
Testing
Miscellaneous tasks
Updates
Other (technical)
jsonutils/adapters/testintegration (0.29.0)
Miscellaneous tasks
Updates
jsonutils/fixtures_test (0.29.0)
Miscellaneous tasks
Updates
jsonutils (0.29.0)
Miscellaneous tasks
Updates
loading (0.29.0)
Testing
Miscellaneous tasks
Updates
Other (technical)
mangling (0.29.0)
Miscellaneous tasks
netutils (0.29.0)
Miscellaneous tasks
pools (0.29.0)
Miscellaneous tasks
stringutils (0.29.0)
Miscellaneous tasks
typeutils (0.29.0)
Miscellaneous tasks
yamlutils (0.29.0)
Testing
Miscellaneous tasks
Updates
Other (technical)
google/gnostic-models (github.com/google/gnostic-models)
v0.7.1Compare Source
prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)
v0.93.1: 0.93.1 / 2026-08-10Compare Source
v0.93.0: 0.93.0 / 2026-07-28Compare Source
--storage.tsdb.delay-compact-file.path,--shipper.meta-file-name,--shipper.ignore-unequal-block-size) instead of disabling compaction. Setspec.disableCompaction: trueto keep the previous behavior. #8694.spec.shardsforPrometheusandPrometheusAgentCRDs. #8691updateMessagefield to the Slack receiver in theAlertmanagerConfigCRD. #8506chunkEncodingfield toTSDBSpecfor runtime float encoding selection inPrometheusandPrometheusAgentCRDs. #8675kubeletService on dual-stack clusters. #8682v0.92.1: 0.92.1 / 2026-06-30Compare Source
v0.92.0: 0.92.0 / 2026-06-18Compare Source
tokenUrlfield in OAuth2 configuration across all CRDs. #8579urlfield inRemoteReadSpecinPrometheusCRD. #8596PrometheusCRD (Prometheus >= v3 uses the config file; older versions continue to use CLI flags). #8547staleSeriesCompactionThresholdfield toTSDBSpecinPrometheusandPrometheusAgentCRDs. #8563labelNameUnderscoreSanitizationandlabelNamePreserveMultipleUnderscoresfields toOTLPConfiginPrometheusandPrometheusAgentCRDs. #8562payloadfield to Webhook receiver inAlertmanagerConfigCRD. #8507PrometheusTopologyShardingfeature gate is enabled (removes the need forattachMetadata.node=true). #8564update_messagefield in Alertmanager configuration Secret. #8556Probestatic configuration to prevent invalid Prometheus scrape configs. #7901pollBasedListerWatcher. #8593ProxyConfigin OAuth2 configuration. #8610returnin admission webhook after marshal failure. #8582FindOwnerto returnnilonmeta.Accessorerror. #8585Closeerrors inGzipConfigandGunzipConfig. #8573--labels "key"). #8560v0.91.0: 0.91.0 / 2026-05-05Compare Source
basicAuth,authorizationandoauth2inScrapeConfigCRD. #8480ScrapeConfigCRD. #8479AlertmanagerConfigCRD. #8220AlertmanagerConfigCRD. #8267AlertmanagerConfigCRD. #8270PrometheusShardRetentionPolicyfeature gate). #8478TopologyforPrometheusandPrometheusAgentcustom resources (it requires thePrometheusTopologyShardingfeature gate). #8486TopologyforPrometheusandPrometheusAgentcustom resources (it requires thePrometheusTopologyShardingfeature gate). #8519TopologyforPrometheusandPrometheusAgentcustom resources (it requires thePrometheusTopologyShardingfeature gate). #8538--promql-optionsCLI argument to the admission-webhook binary. #8531PrometheusRuleresources selected byPrometheusresources based on the PromQL enabled features. #8545ScrapeConfigCRD. #8489Configuration
📅 Schedule: (in timezone UTC)
* 2-4 * * 1-5)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.