Update go module minor/patch updates by red-hat-konflux-kflux-prd-rh02[bot] · Pull Request #278 · openshift-hyperfleet/hyperfleet-api

red-hat-konflux-kflux-prd-rh02 · 2026-07-06T04:03:39Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
filippo.io/edwards25519	`v1.1.0` → `v1.2.0`
github.com/bxcodec/faker/v3	`v3.2.0` → `v3.8.1`
github.com/docker/go-connections	`v0.6.0` → `v0.7.0`
github.com/ebitengine/purego	`v0.10.0` → `v0.10.1`
github.com/felixge/httpsnoop	`v1.0.4` → `v1.1.0`
github.com/fsnotify/fsnotify	`v1.9.0` → `v1.10.1`
github.com/getkin/kin-openapi	`v0.133.0` → `v0.140.0`
github.com/go-ole/go-ole	`v1.2.6` → `v1.3.0`
github.com/go-openapi/jsonpointer	`v0.21.0` → `v0.24.0`
github.com/go-openapi/swag	`v0.23.0` → `v0.27.0`
github.com/go-sql-driver/mysql	`v1.8.1` → `v1.10.0`
github.com/go-viper/mapstructure/v2	`v2.4.0` → `v2.5.0`
github.com/grpc-ecosystem/grpc-gateway/v2	`v2.28.0` → `v2.29.0`
github.com/jackc/pgx/v5	`v5.6.0` → `v5.10.0`
github.com/klauspost/compress	`v1.18.5` → `v1.19.0`
github.com/mailru/easyjson	`v0.7.7` → `v0.9.2`
github.com/moby/moby/api	`v1.54.1` → `v1.55.0`
github.com/moby/moby/client	`v0.4.0` → `v0.5.0`
github.com/moby/sys/sequential	`v0.6.0` → `v0.7.0`
github.com/moby/sys/user	`v0.4.0` → `v0.4.1`
github.com/oasdiff/yaml	`v0.0.0-20250309154309-f31be36b4037` → `v0.1.1`
github.com/oasdiff/yaml3	`v0.0.0-20250309153720-d2182401db90` → `v0.0.14`
github.com/onsi/gomega	`v1.42.0` → `v1.42.1`
github.com/pelletier/go-toml/v2	`v2.2.4` → `v2.4.2`
github.com/prometheus/client_golang	`v1.16.0` → `v1.23.2`
github.com/prometheus/client_model	`v0.3.0` → `v0.6.2`
github.com/prometheus/common	`v0.42.0` → `v0.69.0`
github.com/prometheus/procfs	`v0.10.1` → `v0.21.1`
github.com/sagikazarmark/locafero	`v0.11.0` → `v0.12.0`
github.com/shirou/gopsutil/v4	`v4.26.3` → `v4.26.6`
github.com/testcontainers/testcontainers-go	`v0.42.0` → `v0.43.0`
github.com/testcontainers/testcontainers-go/modules/postgres	`v0.42.0` → `v0.43.0`
github.com/tklauser/go-sysconf	`v0.3.16` → `v0.4.0`
github.com/tklauser/numcpus	`v0.11.0` → `v0.12.0`
github.com/woodsbury/decimal128	`v1.3.0` → `v1.4.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`v0.62.0` → `v0.69.0`
go.opentelemetry.io/contrib/propagators/autoprop	`v0.68.0` → `v0.69.0`
go.opentelemetry.io/contrib/propagators/aws	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/contrib/propagators/b3	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/contrib/propagators/jaeger	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/contrib/propagators/ot	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/stdout/stdouttrace	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/metric	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/sdk	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/trace	`v1.43.0` → `v1.44.0`
golang.org/x/crypto	`v0.52.0` → `v0.53.0`
golang.org/x/net	`v0.54.0` → `v0.56.0`
golang.org/x/sync	`v0.20.0` → `v0.21.0`
golang.org/x/sys	`v0.45.0` → `v0.46.0`
golang.org/x/text	`v0.37.0` → `v0.38.0`
golang.org/x/time	`v0.14.0` → `v0.15.0`
google.golang.org/grpc	`v1.80.0` → `v1.82.0`
gorm.io/driver/mysql	`v1.5.6` → `v1.6.0`
gorm.io/gorm	`v1.31.1` → `v1.31.2`

Release Notes

FiloSottile/edwards25519 (filippo.io/edwards25519)

`v1.2.0`

Compare Source

`v1.1.1`

Compare Source

bxcodec/faker (github.com/bxcodec/faker/v3)

`v3.8.1`: Deprecating v3 module

Compare Source

Full Changelog: bxcodec/faker@v3.8.0...v3.8.1

`v3.8.0`

Compare Source

What's Changed

feat: add min max size for random slice map And allowing one element for Oneof by @autumn31 in #130
Support for Korean Hangul by @geshtng in #154
fix slice tag bug AND add chinese name by @qiangmzsx in #141
Support for Emoticons by @geshtng in #155
Float boundaries by @Xaspy in #156

New Contributors

@autumn31 made their first contribution in #130
@geshtng made their first contribution in #154
@qiangmzsx made their first contribution in #141
@Xaspy made their first contribution in #156

Full Changelog: bxcodec/faker@v3.7.0...v3.8.0

`v3.7.0`

Compare Source

What's Changed

feat: added random source customization by @fredbi in #137
feat: Support for Japanese hiragana and katakana by @tomtwinkle in #145
chore: check slice.Contains in for range block by @eval-exec in #151
feat: randomInt support third argument by @maco in #150

New Contributors

@fredbi made their first contribution in #137
@tomtwinkle made their first contribution in #145 and thanks to @geshtng for reviewing the PR
@eval-exec made their first contribution in #151
@maco made their first contribution in #150

Full Changelog: bxcodec/faker@v3.6.0...v3.7.0

`v3.6.0`

Compare Source

Features

feat: added fake jwt-token support (#113) by @musinit
feat: Add RemoveProvider public method (#115) by @pioz
feat: Add ability to ignore interface{} population with SetIgnoreInterface() (#123) by @nashikb

Chores

chore: removes Adolf from male names (#128) by @DavidLarsKetch

`v3.5.0`

Compare Source

Features

feat: Implement oneof tag (#103) by @andrew-werdna
feat: oneof float support (#106) by @andrew-werdna
feat: Adds Slice length tag (#109) by @Icety

Fixes

fix: excluded characters in random string generator (#111) by @musinit

`v3.4.0`

Compare Source

Features

feat: added gender tag (#104) by @musinit
- test: add gender unit test (#105)by @bxcodec
feat: new lang tag, chinese + russian lang generators (#97) by @musinit
- docs: added lang tag example in readme (#100) by @musinit
feat: upgrade linter version to use the latest stable version (#98) by @bxcodec

Fixes

fix: Allow AddProvider to still work with some custom types (#102) by @andrew-werdna
bugfix(faker): don't panic on typed array (#99) by @xaionaro
fix: 0 not valid for random size #96 by @mattquest

`v3.3.1`

Compare Source

Fixes

fix: convert slice types (#91) by @rgaskill

Chores

chore: update README.md adding badge for pkg.go.dev (#90) by @bxcodec

`v3.3.0`

Compare Source

Features

feat(error): extend error messages for bad tag's name (#80) by @steveoc64

Chores

chore(linters): resolve linter and typos (#78)
README.md: fix a typo & formatting (#79) by @ifnotak
chore(go): update go version for testing in travis (#85)
chore: update examples (#88) by @momotaro98
chores(docs): Move example from markdown to tests (#89) by @mrVanboy

docker/go-connections (github.com/docker/go-connections)

`v0.7.0`

Compare Source

ebitengine/purego (github.com/ebitengine/purego)

`v0.10.1`

Compare Source

Fix a concurrency bug where simultaneous FFI calls could swap return values across goroutines (#451)

felixge/httpsnoop (github.com/felixge/httpsnoop)

`v1.1.0`

Compare Source

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

`v1.10.1`

Compare Source

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)

`v1.10.0`

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

getkin/kin-openapi (github.com/getkin/kin-openapi)

`v0.140.0`

Compare Source

What's Changed

openapi3: document that a custom ReadFromURIFunc bypasses IsExternalRefsAllowed by @reuvenharrison in #1191
openapi3: remove deepcopy dependency by @alexandear in #1193
openapi3: remove decimal128 dependency by @alexandear in #1194
refactor: apply modernize fixes by @alexandear in #1195
openapi2,openapi3: replace marshmallow with encoding/json by @alexandear in #1196
docs: update GoDoc links to Go Reference by @alexandear in #1197
chore: bump jsonpointer to v0.22.5 by @alexandear in #1198

Full Changelog: getkin/kin-openapi@v0.139.0...v0.140.0

`v0.139.0`

Compare Source

What's Changed

feat(openapi3): batch-convert long-tail RequiredFieldError sites by @reuvenharrison in #1170
feat(openapi3): typed validation error clusters (combined: #1171-#1179) by @reuvenharrison in #1180
openapi3gen: skip component export for anonymous types by @0-don in #1163
feat: migrate to oasdiff/yaml v0.1.0 single Unmarshal API + enable DisableTimestamps by @reuvenharrison in #1181
openapi3: typed context errors for Validate() wrapper chain by @reuvenharrison in #1183
openapi3: track Origin on the document root (T) by @reuvenharrison in #1184
openapi3: tests flakiness corrected by @fenollp in #1159
openapi3: aggregate independent validation errors via EnableMultiError by @reuvenharrison in #1185
openapi3: fix validation of duplicated path templates by @reuvenharrison in #1189
openapi3: type the remaining bare-error validation sites by @reuvenharrison in #1187

Full Changelog: getkin/kin-openapi@v0.138.0...v0.139.0

`v0.138.0`

Compare Source

What's Changed

openapi3gen: clear nullable on exported component bodies by @0-don in #1164
openapi3: add test for issue #927 (nullable not respected on $ref schemas) by @fenollp in #1165
test: move public-API tests to external _test packages by @fenollp in #1168
feat(openapi3): add per-type validation errors with cluster wrappers by @reuvenharrison in #1166
feat(openapi3conv): canonicalization pass for 3.0 -> 3.x by @reuvenharrison in #1162
openapi3conv: test Upgrade on many documents by @fenollp in #1169

Full Changelog: getkin/kin-openapi@v0.137.0...v0.138.0

`v0.137.0`

Compare Source

What's Changed

revert to go 1.25 and revert cc4f8d9 by @fenollp in #1161

Full Changelog: getkin/kin-openapi@v0.136.0...v0.137.0

`v0.136.0`

Compare Source

What's Changed

openapi3: stop injecting contentless default in NewResponses() by @0-don in #1148
openapi3: standardize Origin json tag to "-" across all types by @reuvenharrison in #1149
Update usage message in cmd/validate by @fenollp in #1150
openapi3: fix determinism when handling discriminator mappings by @fenollp in #1151
feat: bump Go to 1.26 by @fenollp in #1152
openapi3: use componentNames for deterministic visitings by @fenollp in #1153
feat: add OpenAPI 3.1 support by @reuvenharrison in #1125
openapi3: add JoinFunc for custom $ref path resolution by @reuvenharrison in #1154
Add many many tests from ApisGuruOpenapiDirectory by @fenollp in #1155
openapi3: remove map-iteration order leaks causing flaky tests by @cloudnativeninja in #1158
openapi2conv: nil-guard components lookup in FromV3SchemaRef by @SAY-5 in #1156
Address various lint errors by @fenollp in #1157

New Contributors

@0-don made their first contribution in #1148
@cloudnativeninja made their first contribution in #1158
@SAY-5 made their first contribution in #1156

Full Changelog: getkin/kin-openapi@v0.135.0...v0.136.0

`v0.135.0`

Compare Source

What's Changed

openapi3: strip origin from Encodings and ServerVariables maps by @reuvenharrison in #1132
fix: update yaml3 to prevent panic on empty mapping node in sequence by @reuvenharrison in #1133
openapi3: strip origin from extension values to prevent spurious diffs by @reuvenharrison in #1137
openapi3: strip origin from slices in example values by @reuvenharrison in #1138
fix: bump yaml and yaml3 to v0.0.4 by @reuvenharrison in #1136
openapi3: OriginTree approach for origin tracking — separate pass, no inline stripping by @reuvenharrison in #1142
README: drop go-openapi/spec3 by @zonescape in #1143
fix: bump yaml3+yaml to v0.0.9 to fix -root schema origin by @reuvenharrison in #1144
openapi3: call ReadFromURIFunc before checking IsExternalRefsAllowed by @reuvenharrison in #1146
fix: use location.String() instead of location.Path for origin file tracking by @reuvenharrison in #1145
refactor: Replace sort usage with slices package by @jedevc in #1147

New Contributors

@zonescape made their first contribution in #1143
@jedevc made their first contribution in #1147

Full Changelog: getkin/kin-openapi@v0.134.0...v0.135.0

`v0.134.0`

Compare Source

What's Changed

openapi3filter: feat(multipart-ct-decoder): default body decoder on binary schema by @mieltn in #1097
openapi3: ensure SchemaErrors get the correct path for allOf schemas by @jamesfcarter in #1098
openapi3filter: Fix empty string handling in parameter validation by @utah-KT in #1096
tidy(docs): Update references to oapi-codegen project URL (issue #1094) by @frenchi in #1095
openapi2conv: fix allOf inside additionalProperties by @dani-maarouf in #1103
openapi3filter: Reject requests with body when non expected (issue 1100) by @CynanX in #1101
openapi3: fix for RFC3339 validation: time-offset is a required component by @mpreu in #1104
openapi3: add file path to origin location tracking by @reuvenharrison in #1128
openapi3filter: fix bug where absent optional properties fail validation in form-urlencoded requests by @thierry-f-78 in #1110
feat: add document-scoped format validators to prevent global state pollution by @the-corp-mark in #1126
openapi3: process discriminator mapping values as refs by @RaduPetreTarean in #1108
openapi3: serialize Extensions when using $ref by @irees in #1131

New Contributors

@mieltn made their first contribution in #1097
@jamesfcarter made their first contribution in #1098
@utah-KT made their first contribution in #1096
@frenchi made their first contribution in #1095
@dani-maarouf made their first contribution in #1103
@CynanX made their first contribution in #1101
@mpreu made their first contribution in #1104
@thierry-f-78 made their first contribution in #1110
@the-corp-mark made their first contribution in #1126
@RaduPetreTarean made their first contribution in #1108

Full Changelog: getkin/kin-openapi@v0.133.0...v0.134.0

go-ole/go-ole (github.com/go-ole/go-ole)

`v1.3.0`

Compare Source

What's Changed

Fix VT_BOOL value conversion by @mikelr in #229
fix: crash when using *int8 as param by @Khaos66 in #232
Create a Security Policy by @joycebrum in #244
Update appveyor.yml by @jacobsantos in #249
Bump golang.org/x/sys from 0.0.0-20190916202348-b4ddaad3f8a3 to 0.1.0 by @dependabot in #240
refs added code to com InitializeSecurity by @patilsanty in #248

New Contributors

@mikelr made their first contribution in #229
@Khaos66 made their first contribution in #232
@joycebrum made their first contribution in #244
@dependabot made their first contribution in #240
@patilsanty made their first contribution in #248

Full Changelog: go-ole/go-ole@v1.2.6...v1.3.0

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

`v0.24.0`

Compare Source

0.24.0 - 2026-06-29

Full Changelog: go-openapi/jsonpointer@v0.23.2...v0.24.0

17 commits in this release.

Implemented enhancements

feat(jsonname): added new json name provider more respectful of go conventions for JSON (#195) by @fredbi ...

Refactor

refact: refactored the package into multiple specialized sub-packages by @fredbi ...
refact loading, jsonutils, yamlutils utililities by @fredbi ...

Documentation

doc: announced dependencies reshuffle for v0.24.0 by @fredbi in #142 ...
licensing: modernized the licensing of source code. by @fredbi ...

Code quality

chore: wired the local jsonname package & relinted by @fredbi ...
lint: fix modernize issues by @alexandear ...
chore: improved mono-repo management by @fredbi ...
chore(ci): setup monorepo linting and fixed automerge by @fredbi ...

Testing

test: upgraded tests to use generics (#176) by @fredbi ...
test: upgraded to go-openapi/testify@v2.3.0 (#175) by @fredbi ...

Miscellaneous tasks

chore: removed most remaining external dependencies by @fredbi ...

Updates

build(deps): bump the go-openapi-dependencies group across 15 directories with 2 updates by [@dependabot[bot

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- "on monday"
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>

red-hat-konflux-kflux-prd-rh02 · 2026-07-06T04:03:40Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading github.com/onsi/gomega v1.42.1
go: downloading go.opentelemetry.io/otel/sdk v1.44.0
go: downloading go.opentelemetry.io/otel v1.44.0
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading gorm.io/gorm v1.31.2
go: downloading github.com/testcontainers/testcontainers-go v0.43.0
go: downloading github.com/testcontainers/testcontainers-go/modules/postgres v0.43.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0
go: downloading go.opentelemetry.io/otel/trace v1.44.0
go: downloading go.opentelemetry.io/contrib/propagators/autoprop v0.69.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.44.0
go: downloading github.com/getkin/kin-openapi v0.140.0
go: downloading github.com/bxcodec/faker/v3 v3.8.1
go: downloading github.com/felixge/httpsnoop v1.1.0
go: downloading github.com/prometheus/common v0.69.0
go: downloading github.com/prometheus/procfs v0.21.1
go: downloading golang.org/x/sys v0.46.0
go: downloading gorm.io/driver/mysql v1.6.0
go: downloading golang.org/x/time v0.15.0
go: downloading golang.org/x/crypto v0.53.0
go: downloading golang.org/x/text v0.38.0
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading github.com/go-viper/mapstructure/v2 v2.5.0
go: downloading github.com/sagikazarmark/locafero v0.12.0
go: downloading github.com/jackc/pgx/v5 v5.10.0
go: downloading github.com/moby/moby/api v1.55.0
go: downloading github.com/moby/moby/client v0.5.0
go: downloading go.opentelemetry.io/otel/metric v1.44.0
go: downloading go.opentelemetry.io/contrib/propagators/aws v1.44.0
go: downloading go.opentelemetry.io/contrib/propagators/b3 v1.44.0
go: downloading go.opentelemetry.io/contrib/propagators/jaeger v1.44.0
go: downloading go.opentelemetry.io/contrib/propagators/ot v1.44.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260526163538-3dc84a4a5aaa
go: downloading google.golang.org/grpc v1.82.0
go: downloading golang.org/x/net v0.56.0
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading github.com/go-openapi/jsonpointer v0.24.0
go: downloading github.com/oasdiff/yaml v0.1.1
go: downloading github.com/santhosh-tekuri/jsonschema/v6 v6.0.2
go: downloading github.com/go-sql-driver/mysql v1.10.0
go: downloading github.com/pelletier/go-toml/v2 v2.4.2
go: downloading github.com/moby/sys/sequential v0.7.0
go: downloading github.com/moby/sys/user v0.4.1
go: downloading github.com/docker/go-connections v0.7.0
go: downloading github.com/shirou/gopsutil/v4 v4.26.6
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0
go: downloading github.com/oasdiff/yaml3 v0.0.14
go: downloading filippo.io/edwards25519 v1.2.0
go: downloading github.com/klauspost/compress v1.19.0
go: downloading github.com/tklauser/go-sysconf v0.4.0
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa
go: downloading golang.org/x/sync v0.21.0
go: downloading github.com/ebitengine/purego v0.10.1
go: downloading github.com/tklauser/numcpus v0.12.0
go: downloading github.com/go-ole/go-ole v1.3.0
go: github.com/openshift-hyperfleet/hyperfleet-api/pkg/api imports
	github.com/openshift-hyperfleet/hyperfleet-api/pkg/api/openapi: cannot find module providing package github.com/openshift-hyperfleet/hyperfleet-api/pkg/api/openapi
go: module github.com/bxcodec/faker/v3 is deprecated: use github.com/go-faker/faker/v4 instead.

openshift-ci · 2026-07-06T04:03:45Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign ldornele for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci · 2026-07-06T04:03:52Z

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a openshift-hyperfleet member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

coderabbitai · 2026-07-06T04:04:03Z

📝 Walkthrough

Walkthrough

CWE-1104 (use of unmaintained third-party components) mitigation attempt: go.mod dependency versions bumped across direct requirements (faker, kin-openapi, gomega, testify, Prometheus, OpenTelemetry, testcontainers, gorm) and indirect requirements (OTel propagators, x/time, Docker/OpenAPI helpers, SQL drivers including go-sql-driver/mysql, gRPC/protobuf, x/* modules, gorm.io/driver/mysql). No go.sum diff provided — checksum integrity unverifiable from this input. No source code or exported entity changes. Supply-chain risk: unpinned transitive upgrade blast radius spans API, Sentinel, Adapter, Broker services if any module is compromised (cf. CVE-2021-44228-class dependency-confusion concerns generally).

Estimated code review effort: 3 (Moderate) | ~20 minutes

Suggested labels: dependencies, go.mod, security-review-needed

Suggested reviewers: Requires manual go.sum diff review; verify no typosquatted module paths introduced; confirm checksums against sum.golang.org before merge.

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Sec-02: Secrets In Log Output	✅ Passed	PASS: only go.mod changed; no log statements were added or modified, so no token/password/secret can appear in log output. CWE-532 not implicated.
No Hardcoded Secrets	✅ Passed	Only go.mod version bumps changed; no secret-shaped literals, creds-in-URL, private keys, or apiKey/secret/token/password assignments found (CWE-798).
No Weak Cryptography	✅ Passed	Only go.mod changed; no crypto/md5, des, rc4, SHA1-for-security, ECB, or secret comparisons appear in the patch (CWE-327/CWE-347).
No Injection Vectors	✅ Passed	Only go.mod changed; no code sinks for CWE-89/78/79/502 were introduced.
No Privileged Containers	✅ Passed	Diff touches only go.mod; no manifests, Helm templates, or Dockerfiles changed, and no privileged settings appear in the PR diff.
No Pii Or Sensitive Data In Logs	✅ Passed	PASS: Patch only updates go.mod dependency versions; no logging code or debug output was added, so no CWE-532 exposure found.
Title check	✅ Passed	The title accurately reflects a Go module dependency bump in go.mod.
Description check	✅ Passed	The description is directly about dependency version updates and release notes for the same changeset.

✨ Finishing Touches

📝 Generate docstrings

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch konflux/mintmaker/main/go-module-minorpatch-updates

✨ Simplify code

Create PR with simplified code
Commit simplified code in branch konflux/mintmaker/main/go-module-minorpatch-updates

_{Comment @coderabbitai help to get the list of available commands.}

Update go module minor/patch updates

47da5ff

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>

openshift-ci Bot requested review from pnguyen44 and rh-amarin July 6, 2026 04:03

openshift-ci Bot added the needs-ok-to-test label Jul 6, 2026

This was referenced Jul 6, 2026

Update go module minor/patch updates openshift-hyperfleet/hyperfleet-adapter#225

Open

Update go module minor/patch updates openshift-hyperfleet/hyperfleet-sentinel#214

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update go module minor/patch updates#278

Update go module minor/patch updates#278
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-module-minorpatch-updates

red-hat-konflux-kflux-prd-rh02 Bot commented Jul 6, 2026 •

edited

Loading

Uh oh!

red-hat-konflux-kflux-prd-rh02 Bot commented Jul 6, 2026

Uh oh!

openshift-ci Bot commented Jul 6, 2026

Uh oh!

openshift-ci Bot commented Jul 6, 2026

Uh oh!

coderabbitai Bot commented Jul 6, 2026 •

edited

Loading

Walkthrough

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

red-hat-konflux-kflux-prd-rh02 Bot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v3.8.1: Deprecating v3 module

What's Changed

New Contributors

What's Changed

New Contributors

Features

Chores

Features

Fixes

Features

Fixes

Fixes

Chores

Features

Chores

Changes and fixes

Changes and fixes

What's Changed

What's Changed

What's Changed

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

0.24.0 - 2026-06-29

Implemented enhancements

Refactor

Documentation

Code quality

Testing

Miscellaneous tasks

Updates

Configuration

Documentation

Uh oh!

red-hat-konflux-kflux-prd-rh02 Bot commented Jul 6, 2026

⚠️ Artifact update problem

File name: go.sum

Uh oh!

openshift-ci Bot commented Jul 6, 2026

Uh oh!

openshift-ci Bot commented Jul 6, 2026

Uh oh!

coderabbitai Bot commented Jul 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux-kflux-prd-rh02 Bot commented Jul 6, 2026 •

edited

Loading

`v3.8.1`: Deprecating v3 module

coderabbitai Bot commented Jul 6, 2026 •

edited

Loading