Skip to content

chore(deps): update go dependencies #42

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

red-hat-konflux[bot]
Copy link

@red-hat-konflux red-hat-konflux bot commented May 11, 2025

This PR contains the following updates:

Package Type Update Change
cloud.google.com/go indirect minor v0.120.0 -> v0.121.2
cloud.google.com/go/auth indirect minor v0.15.0 -> v0.16.2
cloud.google.com/go/compute/metadata indirect minor v0.6.0 -> v0.7.0
cloud.google.com/go/iam indirect patch v1.5.0 -> v1.5.2
cloud.google.com/go/kms indirect minor v1.21.1 -> v1.22.0
cloud.google.com/go/longrunning indirect patch v0.6.6 -> v0.6.7
contrib.go.opencensus.io/exporter/ocagent indirect digest 05415f1 -> 7399e0f
cuelang.org/go indirect minor v0.12.1 -> v0.13.1
github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider indirect minor v0.14.0 -> v0.18.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity require minor v1.9.0 -> v1.10.1
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys indirect minor v1.3.1 -> v1.4.0
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal indirect minor v1.1.1 -> v1.2.0
github.com/Azure/go-autorest/autorest indirect patch v0.11.29 -> v0.11.30
github.com/Azure/go-autorest/autorest/adal indirect patch v0.9.23 -> v0.9.24
github.com/Azure/go-autorest/autorest/azure/auth indirect patch v0.5.12 -> v0.5.13
github.com/Azure/go-autorest/autorest/azure/cli indirect patch v0.4.6 -> v0.4.7
github.com/Azure/go-autorest/autorest/date indirect patch v0.3.0 -> v0.3.1
github.com/Azure/go-autorest/logger indirect patch v0.2.1 -> v0.2.2
github.com/Azure/go-autorest/tracing indirect patch v0.6.0 -> v0.6.1
github.com/ThalesIgnite/crypto11 indirect minor v1.2.5 -> v1.4.1
github.com/agnivade/levenshtein indirect patch v1.2.0 -> v1.2.1
github.com/alibabacloud-go/alibabacloud-gateway-spi indirect patch v0.0.4 -> v0.0.5
github.com/alibabacloud-go/debug indirect patch v1.0.0 -> v1.0.1
github.com/alibabacloud-go/openapi-util indirect patch v0.1.0 -> v0.1.1
github.com/alibabacloud-go/tea indirect minor v1.2.1 -> v1.3.9
github.com/aliyun/credentials-go indirect minor v1.3.2 -> v1.4.6
github.com/aws/aws-sdk-go-v2/credentials indirect patch v1.17.67 -> v1.17.70
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect patch v1.16.30 -> v1.16.32
github.com/aws/aws-sdk-go-v2/internal/configsources indirect patch v1.3.34 -> v1.3.36
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding indirect patch v1.12.3 -> v1.12.4
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url indirect patch v1.12.15 -> v1.12.17
github.com/aws/smithy-go indirect patch v1.22.2 -> v1.22.4
github.com/cloudflare/circl indirect minor v1.3.7 -> v1.6.1
github.com/cyberphone/json-canonicalization indirect digest 785e297 -> 19d51d7
github.com/digitorus/timestamp indirect digest 220c5c2 -> c455327
github.com/fsnotify/fsnotify indirect minor v1.8.0 -> v1.9.0
github.com/go-logfmt/logfmt indirect minor v0.5.1 -> v0.6.0
github.com/go-logr/logr indirect patch v1.4.2 -> v1.4.3
github.com/gobuffalo/flect indirect patch v1.0.2 -> v1.0.3
github.com/google/certificate-transparency-go indirect patch v1.3.1 -> v1.3.2
github.com/google/go-containerregistry require patch v0.20.3 -> v0.20.6
github.com/google/go-containerregistry/pkg/authn/k8schain require digest dbcd01c -> 59a4b85
github.com/google/go-containerregistry/pkg/authn/kubernetes require digest dbcd01c -> 59a4b85
github.com/hashicorp/go-retryablehttp require patch v0.7.7 -> v0.7.8
github.com/hashicorp/vault/api indirect minor v1.16.0 -> v1.20.0
github.com/in-toto/attestation indirect patch v1.1.1 -> v1.1.2
github.com/jdolitsky/glog replace digest 78744e9 -> 9ef845f
github.com/jedisct1/go-minisign indirect digest 661be99 -> d2f9f49
github.com/klauspost/compress indirect minor v1.17.11 -> v1.18.0
github.com/letsencrypt/boulder require digest de9c061 -> 1bfc318
github.com/open-policy-agent/opa indirect minor v1.1.0 -> v1.5.1
github.com/opencontainers/image-spec indirect patch v1.1.0 -> v1.1.1
github.com/prometheus/client_golang indirect minor v1.21.1 -> v1.22.0
github.com/prometheus/client_model indirect patch v0.6.1 -> v0.6.2
github.com/prometheus/common indirect minor v0.62.0 -> v0.64.0
github.com/prometheus/procfs indirect minor v0.15.1 -> v0.16.1
github.com/prometheus/statsd_exporter indirect minor v0.22.8 -> v0.28.0
github.com/rcrowley/go-metrics indirect digest cf1acfc -> 65e299d
github.com/sagikazarmark/locafero indirect minor v0.7.0 -> v0.9.0
github.com/sigstore/protobuf-specs require patch v0.4.1 -> v0.4.3
github.com/sigstore/scaffolding require patch v0.7.22 -> v0.7.23
github.com/sigstore/sigstore require patch v1.9.3 -> v1.9.5
github.com/sigstore/sigstore-go indirect patch v0.7.1 -> v0.7.3
github.com/sigstore/sigstore/pkg/signature/kms/aws require patch v1.9.3 -> v1.9.5
github.com/sigstore/sigstore/pkg/signature/kms/azure require patch v1.9.3 -> v1.9.5
github.com/sigstore/sigstore/pkg/signature/kms/gcp require patch v1.9.3 -> v1.9.5
github.com/sigstore/sigstore/pkg/signature/kms/hashivault require patch v1.9.3 -> v1.9.5
github.com/sigstore/timestamp-authority indirect patch v1.2.5 -> v1.2.8
github.com/spf13/afero indirect minor v1.12.0 -> v1.14.0
github.com/spf13/cast indirect minor v1.7.1 -> v1.9.2
github.com/vbatts/tar-split indirect minor v0.11.6 -> v0.12.1
gitlab.com/gitlab-org/api/client-go indirect minor v0.127.0 -> v0.130.1
go.mongodb.org/mongo-driver indirect minor v1.14.0 -> v1.17.4
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc indirect minor v0.60.0 -> v0.61.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp indirect minor v0.60.0 -> v0.61.0
go.uber.org/atomic indirect minor v1.9.0 -> v1.11.0
golang.org/x/exp indirect digest 7e4ce0a -> b7579e2
golang.org/x/mod indirect minor v0.24.0 -> v0.25.0
golang.org/x/net require minor v0.39.0 -> v0.41.0
golang.org/x/oauth2 indirect minor v0.29.0 -> v0.30.0
golang.org/x/sync indirect minor v0.13.0 -> v0.15.0
golang.org/x/sys indirect minor v0.32.0 -> v0.33.0
golang.org/x/term indirect minor v0.31.0 -> v0.32.0
golang.org/x/text indirect minor v0.24.0 -> v0.26.0
golang.org/x/time require minor v0.11.0 -> v0.12.0
golang.org/x/tools indirect minor v0.32.0 -> v0.34.0
google.golang.org/api indirect minor v0.228.0 -> v0.238.0
google.golang.org/genproto indirect digest 207652e -> 513f239
google.golang.org/genproto/googleapis/api indirect digest 207652e -> 513f239
google.golang.org/genproto/googleapis/rpc indirect digest 207652e -> 513f239
k8s.io/api require minor v0.32.3 -> v0.33.2
k8s.io/apiextensions-apiserver indirect minor v0.27.6 -> v0.33.2
k8s.io/apimachinery require minor v0.32.3 -> v0.33.2
k8s.io/client-go require minor v0.32.3 -> v0.33.2
k8s.io/code-generator replace minor v0.29.4 -> v0.33.2
k8s.io/code-generator require minor v0.32.2 -> v0.33.2
k8s.io/gengo indirect digest 1244d31 -> 85fd79d
k8s.io/kube-openapi replace digest 2dd684a -> 8b98d1e
k8s.io/kube-openapi require digest 32ad38e -> 8b98d1e
k8s.io/utils indirect digest 1f6e0b7 -> 4c0f3b2
knative.dev/hack require digest e89096d -> f525e18
knative.dev/hack/schema require digest 0914314 -> f525e18
knative.dev/pkg require digest 74c4be5 -> fd105c6

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

googleapis/google-cloud-go (cloud.google.com/go)

v0.121.2

Compare Source

Documentation

v0.121.1

Compare Source

Bug Fixes
  • civil: Add support for civil.Date, civil.Time and civil.DateTime arguments to their respective Scan methods (#​12240) (7127ce9), refs #​12060

v0.121.0

Compare Source

Features

v0.120.1

Compare Source

Bug Fixes
cue-lang/cue (cuelang.org/go)

v0.13.1

Compare Source

Evaluator

The evaluator's core packages no longer depend on the golang.org/x/mod module, which was only used to format version strings.

Fix a regression causing "cyclic field to reference" in some cases.

Fix a regression causing closedness rules to not apply in some cases.

Disable a minor optimization which was also causing closedness rules to not apply in some cases.

cmd/cue

Fix a build error triggered by changes in the upcoming Go 1.25 version, allowing v0.13 to be used further into the future.

cue mod mirror --dry-run now works as documented; it had been left unimplemented by accident.

Full list of changes since v0.13.0

v0.13.0

Compare Source

This release finally enables the new evaluator by default -- the culmination of over a year's worth of work!

It also packs in lots of new features, such as support for absolute module packages, dozens of JSON Schema improvements, and a new experimental XML encoding.

Changes which may break some users are marked below with: ⚠️

Evaluator

The new evaluator first introduced in v0.9.0 via CUE_EXPERIMENT=evalv3 is now enabled by default! There are no remaining substantial regressions in our test suite, and the Unity corpus is almost entirely working now. Given that the new evaluator fixes dozens of bugs for many users, and is already significantly faster for the majority of CUE users, we believe it is time to turn it on by default.

We will continue to track any remaining issues for the new evaluator via the evalv3 label. If you encounter any regressions, please file a bug report. You can also revert to the old evaluator to temporarily work around bugs via CUE_EXPERIMENT=evalv3=0. See this FAQ page for more information.

We aim to resolve many of these remaining bugs in an upcoming v0.13.1 bugfix release.

An entirely new algorithm for cue trim and tools/trim has been implemented for evalv3, which resolves all known bugs when trimming CUE.

Closedness in evalv3 has been revisited to match the semantics of evalv2 much more closely, while at the same time reducing its overhead for larger configurations. This fixes most "field not allowed" regressions and improves the performance of some configurations by up to 5x. As a result, CUE_DEBUG=openinline is now removed as it is unnecessary.

Performance work for the new evaluator is ongoing; a number of changes in this release led to performance improvements of between 5% and 80% for a variety of projects. For more details, see Marcel's performance update last month.

⚠️ The new topological sort algorithm for field ordering has been tweaked to avoid becoming too slow in some cases. This may result in some ordering changes, but we expect them to be relatively small. See the change for more details.

The parser now correctly allows keywords as required field labels, such as if!: _, fixing a discrepancy with the spec.

Filenames beginning with a dot can now be embedded as long as the glob pattern uses an explicit dot, such as @embed(glob="dir/.data_*.json").

⚠️ @embed(glob="pattern...") directives whose file globbing results in zero files now result in an error, to avoid situations where a glob pattern silently stops working as intended.

cmd/cue

Initial support for absolute packages is introduced, which allow specifying a remote package at a particular version such as cue export foo.com/data@v1.2.3 or cue vet foo.com/schema@v1.2.3 -d '#schema' data.yaml without requiring a CUE module file locally.

The cue help filetypes logic, written itself in CUE, no longer requires using the evaluator to parse CLI arguments or load CUE packages. This results in significant speed-ups when using the CLI with many inputs.

The new cue refactor imports command rewrites import paths, making it easy to migrate between module locations and major versions.

The new cue mod mirror command copies modules from one registry to another.

cue mod tidy now preserves the top-level custom field as intended.

Hidden files, and files with build tags, should now be correctly filtered when loading a single CUE package.

cue get go should no longer attempt to import types from the Go standard library as CUE, which caused errors.

cue get go no longer fails on Go strings containing certain character escape sequences or non-UTF8 bytes.

cue get go now interprets Go fields with the new json:",omitzero" struct tag as CUE optional fields.

cue cmd now fails if no tasks were actually defined, to avoid situations where a user is misled into thinking a task was defined when it was not.

Encodings

The XML "Koala" encoding proposed in February is now available via an experimental implementation. Try it out via the CLI like cue export xml+koala: data.xml, or via its Go API.

The encoding/jsonschema package gains better support for Kubernetes schemas (CRDs and the core API) although these improvements are as yet only available via the Go API.

⚠️ The JSON Schema decoder now imports schema descriptions as CUE doc comments, which required a change to encoding/jsonschema.Config.DefineSchema.

Empty YAML files are now decoded as *null | _ rather than null, allowing them to be unified with struct schemas as if they were an empty struct.

cue exp gengotypes now allows control over how to generate optional CUE fields via e.g. @(,optional=nullable), where the default now is not to use pointers.

⚠️ cue exp gengotypes tweaks how it parses @(,type=) options to support composite types such as slices and maps. Note that this means package paths with slashes must be quoted now.

Builtins

⚠️ The uuid.ToString function is removed, given that it never did anything useful and could mislead users into thinking it did.

tool/http gained a followRedirects option to let the user disable HTTP redirection.

Go API

⚠️ CUE_EXPERIMENT=decodeint64 can no longer be disabled as we consider the experiment finished, having been introduced in CUE v0.11.0.

⚠️ The long-deprecated cue.Runtime methods Parse, FromExpr, CompileFile, and CompileExpr are now removed.

cuecontext.EvalDefault still pointed to the old evaluator; it now correctly points to the new evaluator, and follows the CUE_EXPERIMENT=evalv3 flag just like cmd/cue and the rest of the Go API.

Mirroring cuecontext.EvalExperiment, the new cuecontext.EvalStable constant is added to track the latest stable version of the evaluator.

module.SplitPathVersion and module.ParseImportPath have been deprecated in favor of cue/ast.SplitPackageVersion and cue/ast.ParseImportPath package to consolidate the API.

The new mod/modfile.File.ModuleForImportPath function allows resolving a module and default major version for a package without consulting a registry.

The new mod/modregistry.Client.Mirror method implements the logic behind the new cue mod mirror command.

The new mod/module.Version.Compare method is added in favor of module.Sort, which is now deprecated.

Full list of changes since v0.12.0

Copy link

sourcery-ai bot commented May 11, 2025

Reviewer's Guide

This pull request updates a large set of Go module dependencies to their latest minor, patch, or digest versions, as specified in go.mod. No application code changes are included; the implementation consists solely of dependency version bumps and associated go.mod/go.sum updates.

File-Level Changes

Change Details Files
Update Go module dependencies to newer versions.
  • Bump versions for direct and indirect dependencies in go.mod to latest minor, patch, or digest releases.
  • Update replace directives to use newer commit hashes where applicable.
  • No changes to application source code; only dependency management files are modified.
go.mod
go.sum

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 2 times, most recently from 45a3e5c to 11d8fe3 Compare May 18, 2025 10:36
@red-hat-konflux red-hat-konflux bot changed the title fix(deps): update go dependencies chore(deps): update go dependencies May 18, 2025
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 2 times, most recently from bbdcd0a to 3c6d12b Compare May 25, 2025 18:21
@JasonPowr
Copy link

/retest

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 3 times, most recently from 7eb4a35 to 2082a1d Compare June 8, 2025 12:49
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 5 times, most recently from 3115927 to 86fa229 Compare June 15, 2025 14:42
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 2 times, most recently from 0ce7ef8 to fc650b5 Compare June 15, 2025 20:55
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from fc650b5 to a2ec7e6 Compare June 22, 2025 09:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant