Skip to content

chore(deps): update go dependencies#111

Open
red-hat-konflux[bot] wants to merge 1 commit intomainfrom
konflux/mintmaker/main/go-deps
Open

chore(deps): update go dependencies#111
red-hat-konflux[bot] wants to merge 1 commit intomainfrom
konflux/mintmaker/main/go-deps

Conversation

@red-hat-konflux
Copy link

@red-hat-konflux red-hat-konflux bot commented Feb 27, 2026 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
cuelang.org/go indirect minor v0.15.4 -> v0.16.0
github.com/AzureAD/microsoft-authentication-library-for-go indirect minor v1.6.0 -> v1.7.0
github.com/ProtonMail/go-crypto indirect minor v1.3.0 -> v1.4.0
github.com/ThalesIgnite/crypto11 indirect minor v1.2.5 -> v1.6.0
github.com/aws/aws-sdk-go-v2/credentials indirect patch v1.19.10 -> v1.19.11
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect patch v1.18.18 -> v1.18.19
github.com/aws/aws-sdk-go-v2/internal/configsources indirect patch v1.4.18 -> v1.4.19
github.com/aws/aws-sdk-go-v2/internal/ini indirect patch v1.8.4 -> v1.8.5
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding indirect patch v1.13.5 -> v1.13.6
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url indirect patch v1.13.18 -> v1.13.19
github.com/awslabs/amazon-ecr-credential-helper/ecr-login require minor v0.11.0 -> v0.12.0
github.com/go-openapi/errors indirect patch v0.22.6 -> v0.22.7
github.com/go-openapi/jsonpointer indirect patch v0.22.4 -> v0.22.5
github.com/go-openapi/jsonreference indirect patch v0.21.4 -> v0.21.5
github.com/go-openapi/spec indirect patch v0.22.3 -> v0.22.4
github.com/go-openapi/swag indirect patch v0.25.4 -> v0.25.5
github.com/go-openapi/swag/cmdutils indirect patch v0.25.4 -> v0.25.5
github.com/go-openapi/swag/conv indirect patch v0.25.4 -> v0.25.5
github.com/go-openapi/swag/fileutils indirect patch v0.25.4 -> v0.25.5
github.com/go-openapi/swag/jsonname indirect patch v0.25.4 -> v0.25.5
github.com/go-openapi/swag/jsonutils indirect patch v0.25.4 -> v0.25.5
github.com/go-openapi/swag/loading indirect patch v0.25.4 -> v0.25.5
github.com/go-openapi/swag/mangling indirect patch v0.25.4 -> v0.25.5
github.com/go-openapi/swag/netutils indirect patch v0.25.4 -> v0.25.5
github.com/go-openapi/swag/stringutils indirect patch v0.25.4 -> v0.25.5
github.com/go-openapi/swag/typeutils indirect patch v0.25.4 -> v0.25.5
github.com/go-openapi/swag/yamlutils indirect patch v0.25.4 -> v0.25.5
github.com/google/go-containerregistry require patch v0.21.1 -> v0.21.2
github.com/google/go-containerregistry/pkg/authn/k8schain require digest 85f2bf5 -> 9e0ccb0
github.com/google/go-containerregistry/pkg/authn/kubernetes require digest 85f2bf5 -> 9e0ccb0
github.com/googleapis/enterprise-certificate-proxy indirect patch v0.3.12 -> v0.3.13
github.com/letsencrypt/boulder require minor v0.20260225.0 -> v0.20260303.0
github.com/prometheus/procfs indirect patch v0.20.0 -> v0.20.1
github.com/sigstore/scaffolding require patch v0.7.22 -> v0.7.33
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc indirect minor v0.65.0 -> v0.66.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp indirect minor v0.65.0 -> v0.66.0
go.opentelemetry.io/contrib/instrumentation/runtime indirect minor v0.65.0 -> v0.66.0
go.opentelemetry.io/otel/exporters/prometheus indirect minor v0.62.0 -> v0.63.0
k8s.io/api require patch v0.35.1 -> v0.35.2
k8s.io/apiextensions-apiserver indirect patch v0.35.1 -> v0.35.2
k8s.io/apimachinery require patch v0.35.1 -> v0.35.2
k8s.io/client-go require patch v0.35.1 -> v0.35.2
k8s.io/code-generator replace patch v0.35.1 -> v0.35.2
k8s.io/code-generator require patch v0.35.1 -> v0.35.2
k8s.io/kube-openapi replace digest a19766b -> 5b3e3fd
k8s.io/kube-openapi require digest a19766b -> 5b3e3fd
knative.dev/pkg require digest b239e96 -> a902bbf

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

cue-lang/cue (cuelang.org/go)

v0.16.0

Compare Source

Changes which may break some users are marked below with: ⚠️

Language

As a reminder, we have two ongoing language experiments since v0.15; a replacement for struct embedding and a rework of aliases. Please give these a try and report any issues or feedback!

⚠️ The cmdreferencepkg global experiment is now stable, meaning that CUE_EXPERIMENT=cmdreferencepkg is always enabled.

#"""# is now accepted as a string literal quoting a double quote, ".

Multiline string literals now require a trailing newline, matching the language spec.

The new try experiment

This release introduces the try experiment, which adds a try clause in comprehensions as well as the use of ? in field selectors. This addition to the language is intended to provide a more concise syntax for handling optional fields without the risk of unintentionally swallowing errors.

This experiment also introduces the else clause for if and try comprehensions, and the fallback clause for for comprehensions, which trigger when a comprehension produces zero values.

You can try this experiment by following our how-to guides on the try clause and the else clause. For more information, see the proposal on GitHub and the spec change patch.

Evaluator

Performance

Further improve the use of caching in the typochecker algorithm; this provides speed-ups of up to 80% on some large projects.

Very large structs (tested with 20,000 fields) are up to 80% faster now, as we were repeating some work unnecessarily.

A great deal of effort has gone into reducing the allocations and memory usage across a number of projects. For some of these, memory usage is down by as much as 60%.

These improvements were possible thanks to our Unity service, letting us analyze CUE's performance and test for regressions on third party projects. Contact @​mvdan on Discord, Slack, or via the Unity page to ensure that your project is included or you are running into slowness.

A number of changes were made to improve support for using cue.Values concurrently; see Issue #​2733 for more details and ongoing progress.

Other changes

Fix a regression introduced in v0.13 where the or built-in with literal arguments could stop behaving like a disjunction.

A number of panics and other bugs in the evaluator which were reported since v0.15.0 have been fixed; thank you to all who reported these.

cmd/cue

Add support for $DOCKER_AUTH_CONFIG to directly provide the contents of $DOCKER_CONFIG/config.json to authenticate with module registries, matching Docker's current behavior.

The --outfile flag now works when given non-regular files such as named pipes or sockets.

⚠️ cue mod publish no longer ignores sub-directories containing a go.mod file.

⚠️ Using cue inside the cue.mod directory now fails consistently with a clear error message to not place CUE code there. Previously, some commands worked while others failed with confusing errors.

⚠️ The global --verbose and --trace flags have been moved to the cue get go and cue trim commands respectively, as they were the only ones actually using those flags, and this could be confusing to users.

Fix a bug where loading ./...:pkgname could lead to loading directories without CUE files as instances, which could cause poor performance for CUE packages with multiple parent directories.

cue exp writefs gains an encoding optional field for regular files, to specify an encoding rather than infer it from the filename extension.

LSP server

Initial LSP support for editing embedded JSON and YAML files. This feature provides completions and hover-docs when editing JSON or YAML files which are embedded into CUE via the @embed attribute. A teaser video is available on YouTube.

Code Actions: two code actions are now provided, Add surrounding struct braces and Remove surrounding struct braces, which convert between

a: b: c

and

a: {
	b: c
}

with the cursor on b.

A complete overhaul of how the LSP server suggests code completions. This solves the previous naïve implementation which would only make suggestions after a field name or path had been started. Now completions are available from within whitespace.

Embedded paths with mutual dependencies: embedded paths with multiple components (e.g. a.b.c) can in some cases only be fully resolved after the resolution of other embedded paths. The LSP server can now correctly handle these dependencies.

The LSP server now implements LSP Document Symbols functionality. This is often used by editors to provide light-weight breadcrumb navigation within a file.

Some preliminary diagnostics are now sent from the LSP server back to the editor. Initially this mainly indicates syntax errors in CUE files, but this can be extended in the future.

Many bug fixes, including better behaviour for files and directories with spaces; improvements for value aliases (foo: L=x); LSP rename now provides placeholder text; improved jump-to-definition behaviour for package-level fields; fixed issues around imports; path resolution; formatting of standalone CUE files; and others.

See our Getting Started wiki page for instructions on how to set it up with your editor.

Please report any bugs or missing features you encounter via the Issue tracker or via the #lsp channels on Discord or Slack.

Encodings

Add support for encoding YAML tags like key: !Custom value by using CUE attributes like key: "value" @​yaml(,tag="!Custom").

cue get go now detects which Go packages use Kubernetes type semantics via // +k8s:openapi-gen=true and obeys the field annotations // +optional and // +nullable.

cue get go gains a --codec flag to configure the use and priority of Go struct field tags like json or yaml.

Fix a bug where cue get go could skip over fields whose type implements one of the supported marshaling interfaces.

Fix a few bugs where cue get go could result in invalid or failing CUE code.

JSON Schema's Config.OpenOnlyWhenExplicit option is now exposed for the CLI via the filetype tag jsonschema+openOnlyWhenExplicit.

JSON Schema now properly encodes hash references for better compatibility with other tools.

Standard library

The strconv package adds ParseNumber, like ParseInt or ParseFloat but allowing other CUE number strings such as 1Ki.

The net package adds InCIDR to test whether an IP is contained by a CIDR string.

The net package adds ParseCIDR to extract useful information from a CIDR string.

The net package adds CompareIP to compare two IP addresses, which can be useful for computing with IP ranges.

The net/http package adds Serve as an experimental API to listen on a port and serve HTTP requests.

The tool/file package adds Symlink to create symbolic links.

Go API

cue.Value.Decode now supports the new cue.Unmarshaler interface, allowing Go types to implement their own CUE value decoding logic via an UnmarshalCUE(cue.Value) error method.

The new cue.IsIncomplete function reports whether the given value is a CUE incomplete error.

cue/ast gains the NewPredeclared and Ident.IsPredeclared to mark and detect identifiers referencing predeclared names like error or int rather than fields which may shadow those names in the current scope.

⚠️ cue.Value.Decode now uses cue.IsIncomplete to not treat incomplete errors as fatal, allowing the decoding to continue.

Fix a bug where cue.Value.Decode could behave incorrectly when decoding a CUE null or incomplete value.

⚠️ cue/token.Compare now sorts absolute paths before relative ones, to ensure consistent behavior between Unix-like systems and Windows.

⚠️ The long-deprecated cue/ast.Node.Comments and cue/ast.Node.AddComment interface methods are now removed; use cue/ast.Comments and cue/ast.AddComment respectively.

⚠️ The long-deprecated and unused cue/parser.FromVersion and cue/parser.DeprecationError APIs are now removed.

⚠️ The long-deprecated and hidden cue.Instance.Eval method is now removed.

Full list of changes since v0.15.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
Copy link
Author

red-hat-konflux bot commented Feb 27, 2026

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: github.com/ThalesIgnite/crypto11@v1.6.0: parsing go.mod:
	module declares its path as: github.com/ThalesGroup/crypto11
	        but was required as: github.com/ThalesIgnite/crypto11

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 11 times, most recently from a8cffde to c2d6c53 Compare March 4, 2026 18:05
@red-hat-konflux
chore(deps): update go dependencies
abbc8ae 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from c2d6c53 to abbc8ae Compare March 4, 2026 22:26
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants