build(deps): bump sigs.k8s.io/cluster-api-provider-openstack from 0.14.6 to 0.14.7 in the sigs-k8s-dependencies group

[dependabot]

Bumps the sigs-k8s-dependencies group with 1 update: sigs.k8s.io/cluster-api-provider-openstack.

Updates sigs.k8s.io/cluster-api-provider-openstack from 0.14.6 to 0.14.7

Release notes

Sourced from sigs.k8s.io/cluster-api-provider-openstack's releases.

v0.14.7

Highlights

Changes since v0.14.6

📈 Overview

• 9 new commits merged
• 1 bug fixed 🐛

🐛 Bug Fixes

• Ignore description when comparing security group rules (#3281)

🌱 Others

• Bump go version to 1.25.12 (#3258)

Dependencies

Added

Nothing has changed.

Changed

• github.com/go-logr/logr: v1.4.3 → v1.4.4
• google.golang.org/protobuf: v1.36.11 → f2248ac
• k8s.io/api: v0.34.9 → v0.34.10
• k8s.io/apiextensions-apiserver: v0.34.9 → v0.34.10
• k8s.io/apimachinery: v0.34.9 → v0.34.10
• k8s.io/apiserver: v0.34.9 → v0.34.10
• k8s.io/client-go: v0.34.9 → v0.34.10
• k8s.io/code-generator: v0.34.9 → v0.34.10
• k8s.io/component-base: v0.34.9 → v0.34.10
• k8s.io/kms: v0.34.9 → v0.34.10
• sigs.k8s.io/cluster-api/test: v1.12.8 → v1.12.10
• sigs.k8s.io/cluster-api: v1.12.8 → v1.12.10
• sigs.k8s.io/structured-merge-diff/v6: v6.4.0 → v6.4.2

Removed

Nothing has changed.

Thanks to all our contributors! 😊

Commits

• a4694b4 Merge pull request #3298 from kubernetes-sigs/dependabot/go_modules/release-0...
• d3d9a0e 🌱(deps): Bump the all-go-mod-patch-and-minor group across 1 director...
• 0d119a2 Merge pull request #3293 from kubernetes-sigs/dependabot/go_modules/release-0...
• 854c347 Update generated code
• 73110b1 🌱(deps): Bump the all-go-mod-patch-and-minor group across 1 director...
• e952156 Merge pull request #3286 from kubernetes-sigs/dependabot/github_actions/relea...
• 4125d60 🌱(deps): Bump the all-github-actions group with 2 updates
• 1cfbddf Merge pull request #3281 from k8s-infra-cherrypick-robot/cherry-pick-3184-to-...
• a2801da ✏️ Fix rules not being propagated to all nodes.
• 834f9a4 Merge pull request #3270 from kubernetes-sigs/dependabot/github_actions/relea...
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

• Chores
  • Updated the OpenStack integration dependency to version 0.14.7.

[openshift-merge-bot]

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 9f66559b-55d2-4ba8-9394-c63ef4a50b63

📥 Commits

Reviewing files that changed from the base of the PR and between f7e85cc and 40f4bda.

⛔ Files ignored due to path filters (2)

• go.sum is excluded by !**/*.sum
• vendor/modules.txt is excluded by !vendor/**, !**/vendor/**

📒 Files selected for processing (1)

• go.mod

---

📝 Walkthrough

Walkthrough

The direct sigs.k8s.io/cluster-api-provider-openstack dependency was upgraded from v0.14.6 to v0.14.7 in go.mod.

Suggested reviewers: bryan-cox

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	The commit changes only dependency metadata in go.mod, go.sum, and vendor/modules.txt; it adds no Ginkgo tests or test-title strings.
Test Structure And Quality	✅ Passed	The diff changes only go.mod, go.sum, and vendor/modules.txt; no Ginkgo test files or It blocks changed, so the stated test-quality requirements are not implicated.
Topology-Aware Scheduling Compatibility	✅ Passed	The commit changes only go.mod, go.sum, and vendor/modules.txt for a dependency version bump; it adds or modifies no manifests, operator code, controllers, or scheduling constraints.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	The PR changes only Go dependency metadata; it adds no Ginkgo tests or networking code to assess.
No-Weak-Crypto	✅ Passed	The PR changes only dependency metadata in go.mod, go.sum, and vendor/modules.txt; no changed lines introduce weak crypto, custom crypto, or secret comparisons.
Container-Privileges	✅ Passed	The diff changes only Go dependency metadata in go.mod, go.sum, and vendor/modules.txt; it adds no manifests or privilege-related fields.
No-Sensitive-Data-In-Logs	✅ Passed	The PR changes only dependency metadata; the v0.14.6–v0.14.7 source comparison found security-group logic and tests only, with no logging or sensitive-data changes.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and accurately describes the dependency update from version 0.14.6 to 0.14.7.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/sigs-k8s-dependencies-e053e54d2c

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[cblecker]

/uncc

[clebs]

/test unit

[clebs]

/ok-to-test

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 45.73%. Comparing base (f7e85cc) to head (c3765f4).
⚠️ Report is 15 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #9311   +/-   ##
=======================================
  Coverage   45.73%   45.73%           
=======================================
  Files         781      781           
  Lines       97837    97837           
=======================================
  Hits        44744    44744           
  Misses      50024    50024           
  Partials     3069     3069           

Flag	Coverage Δ
cmd-support	38.83% <ø> (ø)
cpo-hostedcontrolplane	47.98% <ø> (ø)
cpo-other	45.93% <ø> (ø)
hypershift-operator	57.00% <ø> (ø)
other	34.38% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[openshift-ci]

@dependabot[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[clebs]

/approve

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: clebs, dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [clebs]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[clebs]

/auto-cc

[dependabot]

Looks like sigs.k8s.io/cluster-api-provider-openstack is updatable in another way, so this is no longer needed.