Skip to content

chore(deps): update go dependencies#97

Open
red-hat-konflux[bot] wants to merge 1 commit intotech-previewfrom
konflux/mintmaker/tech-preview/go-deps
Open

chore(deps): update go dependencies#97
red-hat-konflux[bot] wants to merge 1 commit intotech-previewfrom
konflux/mintmaker/tech-preview/go-deps

Conversation

@red-hat-konflux
Copy link

@red-hat-konflux red-hat-konflux bot commented Feb 10, 2026 •
edited
Loading

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
cel.dev/expr indirect minor v0.24.0 -> v0.25.1
cloud.google.com/go/auth indirect minor v0.17.0 -> v0.18.2
cloud.google.com/go/longrunning indirect minor v0.7.0 -> v0.8.0
cuelang.org/go indirect minor v0.14.2 -> v0.16.0
github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider indirect minor v0.19.0 -> v0.20.0
github.com/AliyunContainerService/ack-ram-tool/pkg/ecsmetadata indirect patch v0.0.9 -> v0.0.10
github.com/Azure/azure-sdk-for-go/sdk/azcore require minor v1.19.1 -> v1.21.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity require patch v1.13.0 -> v1.13.1
github.com/AzureAD/microsoft-authentication-library-for-go indirect minor v1.5.0 -> v1.7.0
github.com/GoogleCloudPlatform/grpc-gcp-go/grpcgcp indirect minor v1.5.3 -> v1.6.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric indirect minor v0.54.0 -> v0.55.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping indirect minor v0.54.0 -> v0.55.0
github.com/ProtonMail/go-crypto indirect minor v1.3.0 -> v1.4.0
github.com/ThalesIgnite/crypto11 indirect minor v1.2.5 -> v1.6.0
github.com/alibabacloud-go/openapi-util indirect patch v0.1.1 -> v0.1.2
github.com/alibabacloud-go/tea indirect minor v1.3.13 -> v1.4.0
github.com/aliyun/credentials-go indirect patch v1.4.7 -> v1.4.11
github.com/aws/aws-sdk-go-v2/credentials indirect minor v1.18.17 -> v1.19.11
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect patch v1.18.10 -> v1.18.19
github.com/aws/aws-sdk-go-v2/internal/configsources indirect patch v1.4.10 -> v1.4.19
github.com/aws/aws-sdk-go-v2/internal/ini indirect patch v1.8.4 -> v1.8.5
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding indirect patch v1.13.2 -> v1.13.6
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url indirect patch v1.13.10 -> v1.13.19
github.com/aws/smithy-go indirect patch v1.23.1 -> v1.23.2
github.com/awslabs/amazon-ecr-credential-helper/ecr-login require minor v0.10.1 -> v0.12.0
github.com/cloudflare/circl indirect patch v1.6.1 -> v1.6.3
github.com/cncf/xds/go indirect digest 2ee22ca -> dba9d58
github.com/containerd/stargz-snapshotter/estargz indirect patch v0.18.0 -> v0.18.2
github.com/docker/docker-credential-helpers require patch v0.9.4 -> v0.9.5
github.com/emicklei/proto indirect patch v1.14.2 -> v1.14.3
github.com/envoyproxy/protoc-gen-validate indirect minor v1.2.1 -> v1.3.3
github.com/go-openapi/analysis indirect patch v0.24.0 -> v0.24.2
github.com/go-openapi/errors indirect patch v0.22.3 -> v0.22.7
github.com/go-openapi/jsonpointer indirect patch v0.22.1 -> v0.22.5
github.com/go-openapi/jsonreference indirect patch v0.21.2 -> v0.21.5
github.com/go-openapi/loads indirect patch v0.23.1 -> v0.23.2
github.com/go-openapi/runtime indirect patch v0.29.0 -> v0.29.2
github.com/go-openapi/spec indirect patch v0.22.0 -> v0.22.4
github.com/go-openapi/strfmt indirect minor v0.24.0 -> v0.25.0
github.com/go-openapi/swag indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/swag/cmdutils indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/swag/conv indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/swag/fileutils indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/swag/jsonname indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/swag/jsonutils indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/swag/loading indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/swag/mangling indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/swag/netutils indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/swag/stringutils indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/swag/typeutils indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/swag/yamlutils indirect patch v0.25.1 -> v0.25.5
github.com/go-openapi/validate indirect patch v0.25.0 -> v0.25.1
github.com/google/certificate-transparency-go indirect patch v1.3.2 -> v1.3.3
github.com/google/gnostic-models indirect patch v0.7.0 -> v0.7.1
github.com/google/go-containerregistry require minor v0.20.6 -> v0.21.2
github.com/google/go-containerregistry/pkg/authn/k8schain require digest cb4a037 -> 9e0ccb0
github.com/google/go-containerregistry/pkg/authn/kubernetes require digest cb4a037 -> 9e0ccb0
github.com/google/go-querystring indirect minor v1.1.0 -> v1.2.0
github.com/googleapis/enterprise-certificate-proxy indirect patch v0.3.6 -> v0.3.13
github.com/in-toto/in-toto-golang indirect minor v0.9.0 -> v0.10.0
github.com/klauspost/compress indirect patch v1.18.1 -> v1.18.4
github.com/letsencrypt/boulder require minor v0.20250721.0 -> v0.20260303.0
github.com/miekg/pkcs11 indirect patch v1.1.1 -> v1.1.2
github.com/open-policy-agent/opa indirect minor v1.1.0 -> v1.14.0
github.com/prometheus/common indirect patch v0.67.1 -> v0.67.5
github.com/prometheus/procfs indirect minor v0.17.0 -> v0.20.1
github.com/protocolbuffers/txtpbfmt indirect digest f293424 -> a481f6a
github.com/secure-systems-lab/go-securesystemslib indirect minor v0.9.1 -> v0.10.0
github.com/sigstore/rekor require minor v1.4.2 -> v1.5.0
github.com/sigstore/scaffolding require patch v0.7.22 -> v0.7.33
github.com/sigstore/sigstore require minor v1.9.6-0.20251017153808-5089bd7668f3 -> v1.10.4
github.com/sigstore/sigstore-go require patch v1.1.3 -> v1.1.4
github.com/sigstore/sigstore/pkg/signature/kms/aws require minor v1.9.5 -> v1.10.4
github.com/sigstore/sigstore/pkg/signature/kms/azure require minor v1.9.5 -> v1.10.4
github.com/sigstore/sigstore/pkg/signature/kms/gcp require minor v1.9.6-0.20251017153808-5089bd7668f3 -> v1.10.4
github.com/sigstore/sigstore/pkg/signature/kms/hashivault require minor v1.9.5 -> v1.10.4
github.com/sirupsen/logrus indirect patch v1.9.3 -> v1.9.4
github.com/spf13/cobra require patch v1.10.1 -> v1.10.2
github.com/transparency-dev/formats indirect minor v0.0.0-20251017110053-404c0d5b696c -> v0.1.0
github.com/transparency-dev/tessera indirect patch v1.0.0 -> v1.0.2
gitlab.com/gitlab-org/api/client-go indirect minor v0.157.0 -> v0.161.1
go.mongodb.org/mongo-driver indirect patch v1.17.4 -> v1.17.9
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc indirect minor v0.63.0 -> v0.66.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp indirect minor v0.63.0 -> v0.66.0
go.opentelemetry.io/contrib/instrumentation/runtime indirect minor v0.63.0 -> v0.66.0
go.opentelemetry.io/otel/exporters/prometheus indirect minor v0.60.0 -> v0.63.0
go.opentelemetry.io/proto/otlp indirect minor v1.8.0 -> v1.9.0
golang.org/x/crypto require minor v0.43.0 -> v0.48.0
golang.org/x/exp indirect digest 90e834f -> 3dfff04
golang.org/x/mod indirect minor v0.29.0 -> v0.33.0
golang.org/x/net require minor v0.46.0 -> v0.51.0
golang.org/x/oauth2 indirect minor v0.32.0 -> v0.35.0
golang.org/x/sync indirect minor v0.17.0 -> v0.19.0
golang.org/x/sys indirect minor v0.37.0 -> v0.41.0
golang.org/x/term indirect minor v0.36.0 -> v0.40.0
golang.org/x/text indirect minor v0.30.0 -> v0.34.0
golang.org/x/tools indirect minor v0.38.0 -> v0.42.0
google.golang.org/api indirect minor v0.252.0 -> v0.269.0
google.golang.org/genproto indirect digest 88f65dc -> a57be14
google.golang.org/genproto/googleapis/api indirect digest 88f65dc -> a57be14
google.golang.org/genproto/googleapis/rpc indirect digest 88f65dc -> a57be14
k8s.io/api require minor v0.34.1 -> v0.35.2
k8s.io/apiextensions-apiserver indirect minor v0.34.1 -> v0.35.2
k8s.io/apimachinery require minor v0.34.1 -> v0.35.2
k8s.io/client-go require minor v0.34.1 -> v0.35.2
k8s.io/code-generator replace minor v0.34.1 -> v0.35.2
k8s.io/code-generator require minor v0.34.1 -> v0.35.2
k8s.io/gengo/v2 indirect digest ec3ebc5 -> 5ee0d03
k8s.io/kube-openapi replace digest 589584f -> 5b3e3fd
k8s.io/kube-openapi require digest 589584f -> 5b3e3fd
k8s.io/utils indirect digest bc988d5 -> b8788ab
knative.dev/hack require digest 4fae780 -> 0126b28
knative.dev/hack/schema require digest 4fae780 -> 0126b28
knative.dev/pkg require digest a1339c6 -> a902bbf
sigs.k8s.io/release-utils require patch v0.12.2 -> v0.12.3

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

google/cel-spec (cel.dev/expr)

v0.25.1

Compare Source

Minor additions to the v0.25.0 release

What's Changed

Full Changelog: google/cel-spec@v0.25.0...v0.25.1

v0.25.0

Compare Source

What's Changed

New Contributors

Full Changelog: google/cel-spec@v0.24.0...v0.25.0

googleapis/google-cloud-go (cloud.google.com/go/auth)

v0.18.0

Compare Source

  • bigquery:

    • Marked stable.
    • Schema inference of nullable fields supported.
    • Added TimePartitioning to QueryConfig.

  • firestore: Data provided to DocumentRef.Set with a Merge option can contain
    Delete sentinels.

  • logging: Clients can accept parent resources other than projects.

  • pubsub:

    • pubsub/pstest: A lighweight fake for pubsub. Experimental; feedback welcome.
    • Support updating more subscription metadata: AckDeadline,
      RetainAckedMessages and RetentionDuration.

  • oslogin/apiv1beta: New client for the Cloud OS Login API.

  • rpcreplay: A package for recording and replaying gRPC traffic.

  • spanner:

    • Add a ReadWithOptions that supports a row limit, as well as an index.
    • Support query plan and execution statistics.
    • Added OpenCensus support.

  • storage: Clarify checksum validation for gzipped files (it is not validated
    when the file is served uncompressed).

cue-lang/cue (cuelang.org/go)

v0.16.0

Compare Source

Changes which may break some users are marked below with: ⚠️

Language

As a reminder, we have two ongoing language experiments since v0.15; a replacement for struct embedding and a rework of aliases. Please give these a try and report any issues or feedback!

⚠️ The cmdreferencepkg global experiment is now stable, meaning that CUE_EXPERIMENT=cmdreferencepkg is always enabled.

#"""# is now accepted as a string literal quoting a double quote, ".

Multiline string literals now require a trailing newline, matching the language spec.

The new try experiment

This release introduces the try experiment, which adds a try clause in comprehensions as well as the use of ? in field selectors. This addition to the language is intended to provide a more concise syntax for handling optional fields without the risk of unintentionally swallowing errors.

This experiment also introduces the else clause for if and try comprehensions, and the fallback clause for for comprehensions, which trigger when a comprehension produces zero values.

You can try this experiment by following our how-to guides on the try clause and the else clause. For more information, see the proposal on GitHub and the spec change patch.

Evaluator

Performance

Further improve the use of caching in the typochecker algorithm; this provides speed-ups of up to 80% on some large projects.

Very large structs (tested with 20,000 fields) are up to 80% faster now, as we were repeating some work unnecessarily.

A great deal of effort has gone into reducing the allocations and memory usage across a number of projects. For some of these, memory usage is down by as much as 60%.

These improvements were possible thanks to our Unity service, letting us analyze CUE's performance and test for regressions on third party projects. Contact @​mvdan on Discord, Slack, or via the Unity page to ensure that your project is included or you are running into slowness.

A number of changes were made to improve support for using cue.Values concurrently; see Issue #​2733 for more details and ongoing progress.

Other changes

Fix a regression introduced in v0.13 where the or built-in with literal arguments could stop behaving like a disjunction.

A number of panics and other bugs in the evaluator which were reported since v0.15.0 have been fixed; thank you to all who reported these.

cmd/cue

Add support for $DOCKER_AUTH_CONFIG to directly provide the contents of $DOCKER_CONFIG/config.json to authenticate with module registries, matching Docker's current behavior.

The --outfile flag now works when given non-regular files such as named pipes or sockets.

⚠️ cue mod publish no longer ignores sub-directories containing a go.mod file.

⚠️ Using cue inside the cue.mod directory now fails consistently with a clear error message to not place CUE code there. Previously, some commands worked while others failed with confusing errors.

⚠️ The global --verbose and --trace flags have been moved to the cue get go and cue trim commands respectively, as they were the only ones actually using those flags, and this could be confusing to users.

Fix a bug where loading ./...:pkgname could lead to loading directories without CUE files as instances, which could cause poor performance for CUE packages with multiple parent directories.

cue exp writefs gains an encoding optional field for regular files, to specify an encoding rather than infer it from the filename extension.

LSP server

Initial LSP support for editing embedded JSON and YAML files. This feature provides completions and hover-docs when editing JSON or YAML files which are embedded into CUE via the @embed attribute. A teaser video is available on YouTube.

Code Actions: two code actions are now provided, Add surrounding struct braces and Remove surrounding struct braces, which convert between

a: b: c

and

a: {
	b: c
}

with the cursor on b.

A complete overhaul of how the LSP server suggests code completions. This solves the previous naïve implementation which would only make suggestions after a field name or path had been started. Now completions are available from within whitespace.

Embedded paths with mutual dependencies: embedded paths with multiple components (e.g. a.b.c) can in some cases only be fully resolved after the resolution of other embedded paths. The LSP server can now correctly handle these dependencies.

The LSP server now implements LSP Document Symbols functionality. This is often used by editors to provide light-weight breadcrumb navigation within a file.

Some preliminary diagnostics are now sent from the LSP server back to the editor. Initially this mainly indicates syntax errors in CUE files, but this can be extended in the future.

Many bug fixes, including better behaviour for files and directories with spaces; improvements for value aliases (foo: L=x); LSP rename now provides placeholder text; improved jump-to-definition behaviour for package-level fields; fixed issues around imports; path resolution; formatting of standalone CUE files; and others.

See our Getting Started wiki page for instructions on how to set it up with your editor.

Please report any bugs or missing features you encounter via the Issue tracker or via the #lsp channels on Discord or Slack.

Encodings

Add support for encoding YAML tags like key: !Custom value by using CUE attributes like key: "value" @​yaml(,tag="!Custom").

cue get go now detects which Go packages use Kubernetes type semantics via // +k8s:openapi-gen=true and obeys the field annotations // +optional and // +nullable.

cue get go gains a --codec flag to configure the use and priority of Go struct field tags like json or yaml.

Fix a bug where cue get go could skip over fields whose type implements one of the supported marshaling interfaces.

Fix a few bugs where cue get go could result in invalid or failing CUE code.

JSON Schema's Config.OpenOnlyWhenExplicit option is now exposed for the CLI via the filetype tag jsonschema+openOnlyWhenExplicit.

JSON Schema now properly encodes hash references for better compatibility with other tools.

Standard library

The strconv package adds ParseNumber, like ParseInt or ParseFloat but allowing other CUE number strings such as 1Ki.

The net package adds InCIDR to test whether an IP is contained by a CIDR string.

The net package adds ParseCIDR to extract useful information from a CIDR string.

The net package adds CompareIP to compare two IP addresses, which can be useful for computing with IP ranges.

The net/http package adds Serve as an experimental API to listen on a port and serve HTTP requests.

The tool/file package adds Symlink to create symbolic links.

Go API

cue.Value.Decode now supports the new cue.Unmarshaler interface, allowing Go types to implement their own CUE value decoding logic via an UnmarshalCUE(cue.Value) error method.

The new cue.IsIncomplete function reports whether the given value is a CUE incomplete error.

cue/ast gains the NewPredeclared and Ident.IsPredeclared to mark and detect identifiers referencing predeclared names like error or int rather than fields which may shadow those names in the current scope.

⚠️ cue.Value.Decode now uses cue.IsIncomplete to not treat incomplete errors as fatal, allowing the decoding to continue.

Fix a bug where cue.Value.Decode could behave incorrectly when decoding a CUE null or incomplete value.

⚠️ cue/token.Compare now sorts absolute paths before relative ones, to ensure consistent behavior between Unix-like systems and Windows.

⚠️ The long-deprecated cue/ast.Node.Comments and cue/ast.Node.AddComment interface methods are now removed; use cue/ast.Comments and cue/ast.AddComment respectively.

⚠️ The long-deprecated and unused cue/parser.FromVersion and cue/parser.DeprecationError APIs are now removed.

⚠️ The long-deprecated and hidden cue.Instance.Eval method is now removed.

Full list of changes since v0.15.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
Copy link
Author

red-hat-konflux bot commented Feb 10, 2026

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: github.com/ThalesIgnite/crypto11@v1.6.0: parsing go.mod:
	module declares its path as: github.com/ThalesGroup/crypto11
	        but was required as: github.com/ThalesIgnite/crypto11

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 13 times, most recently from 37b89fd to ee30e28 Compare February 13, 2026 21:27
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 4 times, most recently from e9c1832 to 143fe8e Compare February 18, 2026 09:45
@red-hat-konflux red-hat-konflux bot changed the title chore(deps): update go dependencies chore(deps): update go dependencies - abandoned Feb 18, 2026
@red-hat-konflux
Copy link
Author

red-hat-konflux bot commented Feb 18, 2026

Autoclosing Skipped

This PR has been flagged for autoclosing. However, it is being skipped due to the branch being already modified. Please close/delete it manually or report a bug if you think this is in error.

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch from 143fe8e to 7ca91ff Compare February 18, 2026 19:10
@red-hat-konflux red-hat-konflux bot changed the title chore(deps): update go dependencies - abandoned chore(deps): update go dependencies Feb 18, 2026
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 7 times, most recently from 6acce46 to 1326e5e Compare February 20, 2026 21:44
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/tech-preview/go-deps branch 29 times, most recently from 0670117 to b13df16 Compare March 3, 2026 14:57
@red-hat-konflux
chore(deps): update go dependencies
a8fc683 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants