Skip to content

Update module github.com/cenkalti/backoff/v5 to v7 #217

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
red-hat-konflux-kflux-prd-rh02 wants to merge 1 commit into from
Closed

Update module github.com/cenkalti/backoff/v5 to v7 #217

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -3,7 +3,7 @@ module github.com/openshift-hyperfleet/hyperfleet-sentinel
go 1.26.0

require (
github.com/cenkalti/backoff/v5 v5.0.3
github.com/cenkalti/backoff/v7 v7.0.0

@coderabbitai coderabbitai Bot Jul 6, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🩺 Stability & Availability | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail
rg -n 'github.com/cenkalti/backoff/(v5|v7)' --glob '*.go' --glob 'go.mod' --glob 'go.sum' .

Repository: openshift-hyperfleet/hyperfleet-sentinel

Length of output: 496

Update the backoff import to v7 and regenerate sums (CWE-829).

internal/client/client.go still imports github.com/cenkalti/backoff/v5, so this go.mod bump to github.com/cenkalti/backoff/v7 will break the build until the source import is migrated and go.sum is refreshed.

🤖 Prompt for AI Agents 
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` at line 6, The module version has been bumped to
github.com/cenkalti/backoff/v7, but internal/client/client.go still references
the old v5 import, so update that import to v7 and regenerate go.sum so the
build stays consistent. Make the change in the client code that uses the backoff
package, then refresh the dependency sums to match the new go.mod requirement.

Source: Path instructions

github.com/cloudevents/sdk-go/v2 v2.16.2
github.com/google/uuid v1.6.0
github.com/oapi-codegen/runtime v1.4.2
Expand Down