Skip to content

chore(deps): update go dependencies - #128

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps
Open

chore(deps): update go dependencies#128
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jul 20, 2026

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
github.com/ThalesGroup/crypto11 require patch v1.6.2v1.6.8
github.com/cenkalti/backoff/v5 indirect major v5.0.3v7.0.0
github.com/go-logr/logr indirect patch v1.4.3v1.4.4
github.com/go-openapi/analysis indirect minor v0.25.3v0.26.0
github.com/go-openapi/loads indirect minor v0.24.0v0.25.0 v0.25.1
github.com/go-openapi/runtime indirect minor v0.32.5v0.33.0
github.com/go-openapi/runtime/server-middleware indirect minor v0.32.5v0.33.0
github.com/go-openapi/spec indirect patch v0.22.6v0.22.9
github.com/go-openapi/swag indirect minor v0.27.0v0.28.0
github.com/go-openapi/swag/cmdutils indirect minor v0.27.0v0.28.0
github.com/go-openapi/swag/conv indirect minor v0.27.0v0.28.0
github.com/go-openapi/swag/fileutils indirect minor v0.27.0v0.28.0
github.com/go-openapi/swag/jsonname indirect minor v0.27.0v0.28.0
github.com/go-openapi/swag/jsonutils indirect minor v0.27.0v0.28.0
github.com/go-openapi/swag/loading indirect minor v0.27.0v0.28.0
github.com/go-openapi/swag/mangling indirect minor v0.27.0v0.28.0
github.com/go-openapi/swag/netutils indirect minor v0.27.0v0.28.0
github.com/go-openapi/swag/stringutils indirect minor v0.27.0v0.28.0
github.com/go-openapi/swag/typeutils indirect minor v0.27.0v0.28.0
github.com/go-openapi/swag/yamlutils indirect minor v0.27.0v0.28.0
github.com/go-openapi/validate indirect patch v0.26.0v0.26.3
github.com/google/go-containerregistry require patch v0.21.7v0.21.9
github.com/grpc-ecosystem/grpc-gateway/v2 indirect minor v2.29.0v2.30.0
github.com/oklog/ulid/v2 indirect patch v2.1.1v2.1.2
github.com/sigstore/sigstore require patch v1.10.8v1.10.9
github.com/sigstore/sigstore-go require minor v1.2.2v1.3.0
github.com/theupdateframework/go-tuf indirect major v0.7.0v2.4.2
go.opentelemetry.io/otel require minor v1.44.0v1.45.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace indirect minor v1.44.0v1.45.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp require minor v1.44.0v1.45.0
go.opentelemetry.io/otel/metric indirect minor v1.44.0v1.45.0
go.opentelemetry.io/otel/sdk require minor v1.44.0v1.45.0
go.opentelemetry.io/otel/trace require minor v1.44.0v1.45.0
go.opentelemetry.io/proto/otlp indirect minor v1.10.0v1.11.0
go.yaml.in/yaml/v3 indirect patch v3.0.4v3.0.5
golang.org/x/crypto require minor v0.54.0v0.55.0
golang.org/x/mod indirect minor v0.38.0v0.40.0
golang.org/x/net indirect minor v0.57.0v0.58.0
golang.org/x/text indirect minor v0.40.0v0.41.0
google.golang.org/genproto/googleapis/api indirect digest e75dac1ec0a776
google.golang.org/genproto/googleapis/rpc indirect digest e75dac1ec0a776
google.golang.org/grpc indirect minor v1.82.1v1.83.0
google.golang.org/protobuf require patch v1.36.11v1.36.12

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

ThalesGroup/crypto11 (github.com/ThalesGroup/crypto11)

v1.6.8

Compare Source

What's Changed

  • downgrade the go version to 1.25.0 and add go toolchain by @​Nicolas-Peiffer in eclipse-keypont#139
  • fix: restore eclipse-keypont module path; refresh README install command, Go Reference badge and documentation links

Full Changelog: eclipse-keypont/crypto11@v1.6.5...v1.6.8

Module path restored — github.com/eclipse-keypont/crypto11

This release restores the correct module path following the repository move from
github.com/ThalesGroup/crypto11 to github.com/eclipse-keypont/crypto11.

Migrating
go get github.com/eclipse-keypont/crypto11@​v1.6.8
-import "github.com/ThalesGroup/crypto11"
+import "github.com/eclipse-keypont/crypto11"

The old path is deprecated and frozen at
ThalesGroup/crypto11@​v1.6.7.
It will receive no further updates, including security fixes. GitHub still redirects the old
repository URL, but the Go module path must be updated by hand — go get cannot follow it for you.

If you are already on this path: upgrade v1.6.5 → v1.6.8

v1.6.6 and v1.6.7 declare the old module path and exist only to publish the deprecation
notice for github.com/ThalesGroup/crypto11. They are not usable as
github.com/eclipse-keypont/crypto11 and will fail with:

module declares its path as: github.com/ThalesGroup/crypto11
        but was required as: github.com/eclipse-keypont/crypto11

v1.6.8 fixes this, so github.com/eclipse-keypont/crypto11@​latest resolves correctly again.

Go version policy

go.mod targets go 1.25.0 with toolchain go1.25.8. The go directive is kept conservative
so this library does not raise the minimum Go version for projects that import it, while
maintainers build and test with the latest patch toolchain. See #​137 and #​139.

The v1.6.x series is the current stable line. v2.x.y on github.com/eclipse-keypont/crypto11/v2 is in
development (v2.0.0-rc3), which is why pkg.go.dev reports a higher tagged major version.

v1.6.7

Compare Source

v1.6.6

Compare Source

v1.6.5

Compare Source

Full Changelog: eclipse-keypont/crypto11@v1.6.3...v1.6.5

v1.6.4

Compare Source

v1.6.3

Compare Source

cenkalti/backoff (github.com/cenkalti/backoff/v5)

v7.0.0

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

go-logr/logr (github.com/go-logr/logr)

v1.4.4

Compare Source

What's Changed
New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

go-openapi/analysis (github.com/go-openapi/analysis)

v0.26.0

Compare Source

0.26.0 - 2026-08-08

Full Changelog: go-openapi/analysis@v0.25.5...v0.26.0

7 commits in this release.


Implemented enhancements
Documentation
Miscellaneous tasks
Updates

People who contributed to this release

analysis license terms

License

Per-module changes


internal/testintegration (0.26.0)

Miscellaneous tasks
Updates

v0.25.5

Compare Source

0.25.5 - 2026-07-20

Full Changelog: go-openapi/analysis@v0.25.4...v0.25.5

1 commits in this release.


Code quality
  • fix(flatten): in options, guarded against possible json serialization of by @​fredbi in #​221 ...

People who contributed to this release

analysis license terms

License

v0.25.4

Compare Source

0.25.4 - 2026-07-20

Full Changelog: go-openapi/analysis@v0.25.3...v0.25.4

8 commits in this release.


Implemented enhancements
  • feat: inject a confined document loader into flatten and schema analysis by @​fredbi in #​220 ...
Documentation
Updates
Other (technical)

People who contributed to this release

analysis license terms

License

Per-module changes


internal/testintegration (0.25.4)

Implemented enhancements
  • feat: inject a confined document loader into flatten and schema analysis by @​fredbi in #​220 ...
Updates
go-openapi/loads (github.com/go-openapi/loads)

v0.25.0

Compare Source

0.25.0 - 2026-07-20

Full Changelog: go-openapi/loads@v0.24.2...v0.25.0

1 commits in this release.


Implemented enhancements

People who contributed to this release

loads license terms

License

v0.24.2

Compare Source

0.24.2 - 2026-07-20

Full Changelog: go-openapi/loads@v0.24.1...v0.24.2

1 commits in this release.


Miscellaneous tasks

People who contributed to this release

loads license terms

License

v0.24.1

Compare Source

0.24.1 - 2026-07-20

Full Changelog: go-openapi/loads@v0.24.0...v0.24.1

10 commits in this release.


Documentation
Miscellaneous tasks
Security
Updates

People who contributed to this release

loads license terms

License

go-openapi/runtime (github.com/go-openapi/runtime)

v0.33.0

Compare Source

0.33.0 - 2026-07-27

Support for server-side streaming of multipart form

Full Changelog: go-openapi/runtime@v0.32.6...v0.33.0

3 commits in this release.


Implemented enhancements
Miscellaneous tasks
Updates

People who contributed to this release

New Contributors

runtime license terms

License

Per-module changes


client-middleware/opentracing (0.33.0)

Miscellaneous tasks

v0.32.6

Compare Source

0.32.6 - 2026-07-21

Full Changelog: go-openapi/runtime@v0.32.5...v0.32.6

4 commits in this release.


Miscellaneous tasks
Updates

People who contributed to this release

runtime license terms

License

Per-module changes


client-middleware/opentracing (0.32.6)

Miscellaneous tasks
Updates

docs/examples (0.32.6)

Miscellaneous tasks
Updates
go-openapi/spec (github.com/go-openapi/spec)

v0.22.9

Compare Source

0.22.9 - 2026-07-20

Full Changelog: go-openapi/spec@v0.22.8...v0.22.9

1 commits in this release.


Implemented enhancements
  • feat(expander): add ExpandParameterWithOptions and ExpandResponseWithOptions by @​fredbi in #​292 ...

People who contributed to this release

spec license terms

License

v0.22.8

Compare Source

0.22.8 - 2026-07-20

Full Changelog: go-openapi/spec@v0.22.7...v0.22.8

1 commits in this release.


Implemented enhancements
  • feat(expander): add ExpandSchemaWithOptions for confined schema expansion by @​fredbi in #​291 ...

People who contributed to this release

spec license terms

License

v0.22.7

Compare Source

0.22.7 - 2026-07-20

Full Changelog: go-openapi/spec@v0.22.6...v0.22.7

17 commits in this release.


Implemented enhancements
  • feat(expander): accept an option-aware document loader by @​fredbi ...
Fixed bugs
  • fix(ref): stop performing a network request in IsValidURI by @​fredbi ...
  • fix(expander): cap $ref expansion node count to prevent amplification DoS by @​fredbi ...
Documentation
Miscellaneous tasks
Security
  • test(expander): validate the SSRF posture of an injected loader by @​fredbi ...
  • docs(security): warn that the default $ref loader is not sandboxed by @​fredbi ...
Updates
Other (technical)

People who contributed to this release

spec license terms

License

go-openapi/swag (github.com/go-openapi/swag)

v0.28.0

Compare Source

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.


Implemented enhancements
Miscellaneous tasks
Updates

People who contributed to this release

swag license terms

License

Per-module changes


conv (0.28.0)

Implemented enhancements
Miscellaneous tasks

jsonutils/adapters/easyjson (0.28.0)

Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.28.0)

Miscellaneous tasks

jsonutils/adapters/testintegration (0.28.0)

Miscellaneous tasks

jsonutils (0.28.0)

Miscellaneous tasks

loading (0.28.0)

Miscellaneous tasks

yamlutils (0.28.0)

Miscellaneous tasks

v0.27.3

Compare Source

0.27.3 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.2...v0.27.3

2 commits in this release.


Fixed bugs
Miscellaneous tasks

People who contributed to this release

swag license terms

License

Per-module changes


conv (0.27.3)

Miscellaneous tasks

jsonutils/adapters/easyjson (0.27.3)

Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.27.3)

Miscellaneous tasks

jsonutils/adapters/testintegration (0.27.3)

Miscellaneous tasks

jsonutils (0.27.3)

Miscellaneous tasks

loading (0.27.3)

Fixed bugs
Miscellaneous tasks

yamlutils (0.27.3)

Miscellaneous tasks

v0.27.2

Compare Source

0.27.2 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.1...v0.27.2

2 commits in this release.


Fixed bugs
Miscellaneous tasks

People who contributed to this release

swag license terms

License

Per-module changes


conv (0.27.2)

Miscellaneous tasks

jsonutils/adapters/easyjson (0.27.2)

Miscellaneous tasks

jsonutils/adapters/testintegration/benchmarks (0.27.2)

Miscellaneous tasks

jsonutils/adapters/testintegration (0.27.2)

Miscellaneous tasks

jsonutils (0.27.2)

Miscellaneous tasks

loading (0.27.2)

Fixed bugs
Miscellaneous tasks

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 81383d8 to 2a4384b Compare July 20, 2026 21:40
@codecov-commenter

codecov-commenter commented Jul 20, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 41.90%. Comparing base (73a90c8) to head (6fcb396).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #128   +/-   ##
=======================================
  Coverage   41.90%   41.90%           
=======================================
  Files          57       57           
  Lines        3625     3625           
=======================================
  Hits         1519     1519           
  Misses       1967     1967           
  Partials      139      139           
Flag Coverage Δ
unit 41.90% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 2a4384b to 6e2130b Compare July 21, 2026 01:39
@red-hat-konflux red-hat-konflux Bot changed the title Update Go Dependencies Update Go Dependencies to v2 Jul 22, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 6e2130b to d6ab33a Compare July 22, 2026 21:44
@red-hat-konflux red-hat-konflux Bot changed the title Update Go Dependencies to v2 Update Go Dependencies Jul 22, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 23 times, most recently from 4f822eb to c618509 Compare July 29, 2026 22:12
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 21 times, most recently from a24e161 to eafbc3b Compare August 9, 2026 17:36
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 3 times, most recently from ca83552 to f4a8e04 Compare August 11, 2026 02:45
@red-hat-konflux red-hat-konflux Bot changed the title Update Go Dependencies chore(deps): update go dependencies Aug 11, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 4 times, most recently from 87293c7 to a926e51 Compare August 14, 2026 06:35
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant