Skip to content

Conversation

@red-hat-konflux
Copy link

@red-hat-konflux red-hat-konflux bot commented Aug 3, 2025

This PR contains the following updates:

Package Type Update Change
cloud.google.com/go indirect minor v0.120.0 -> v0.123.0
cloud.google.com/go/auth indirect minor v0.16.0 -> v0.17.0
cloud.google.com/go/compute/metadata indirect minor v0.6.0 -> v0.9.0
cloud.google.com/go/iam indirect patch v1.5.0 -> v1.5.3
cloud.google.com/go/kms indirect minor v1.21.2 -> v1.23.2
cloud.google.com/go/longrunning indirect minor v0.6.6 -> v0.7.0
cuelabs.dev/go/oci/ociregistry indirect digest 2c00c10 -> 074d060
cuelang.org/go require minor v0.12.1 -> v0.14.2
github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider indirect minor v0.14.0 -> v0.19.0
github.com/Azure/azure-sdk-for-go/sdk/azcore indirect minor v1.18.0 -> v1.19.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity indirect minor v1.9.0 -> v1.13.0
github.com/Azure/azure-sdk-for-go/sdk/internal indirect patch v1.11.1 -> v1.11.2
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys indirect minor v1.3.1 -> v1.4.0
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal indirect minor v1.1.1 -> v1.2.0
github.com/Azure/go-autorest/autorest indirect patch v0.11.29 -> v0.11.30
github.com/Azure/go-autorest/autorest/adal indirect patch v0.9.23 -> v0.9.24
github.com/Azure/go-autorest/autorest/azure/auth indirect patch v0.5.12 -> v0.5.13
github.com/Azure/go-autorest/autorest/azure/cli indirect patch v0.4.6 -> v0.4.7
github.com/Azure/go-autorest/autorest/date indirect patch v0.3.0 -> v0.3.1
github.com/Azure/go-autorest/logger indirect patch v0.2.1 -> v0.2.2
github.com/Azure/go-autorest/tracing indirect patch v0.6.0 -> v0.6.1
github.com/AzureAD/microsoft-authentication-library-for-go indirect minor v1.4.2 -> v1.5.0
github.com/alibabacloud-go/alibabacloud-gateway-spi indirect patch v0.0.4 -> v0.0.5
github.com/alibabacloud-go/debug indirect patch v1.0.0 -> v1.0.1
github.com/alibabacloud-go/openapi-util indirect patch v0.1.0 -> v0.1.1
github.com/alibabacloud-go/tea indirect minor v1.2.1 -> v1.3.13
github.com/aliyun/credentials-go indirect minor v1.3.2 -> v1.4.7
github.com/aws/aws-sdk-go-v2/credentials indirect minor v1.17.67 -> v1.18.18
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect minor v1.16.30 -> v1.18.10
github.com/aws/aws-sdk-go-v2/internal/configsources indirect minor v1.3.34 -> v1.4.10
github.com/aws/aws-sdk-go-v2/internal/ini indirect patch v1.8.3 -> v1.8.4
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding indirect minor v1.12.3 -> v1.13.2
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url indirect minor v1.12.15 -> v1.13.10
github.com/aws/smithy-go indirect minor v1.22.3 -> v1.23.1
github.com/awslabs/amazon-ecr-credential-helper/ecr-login require minor v0.9.1 -> v0.10.1
github.com/buildkite/go-pipeline indirect minor v0.13.3 -> v0.16.0
github.com/buildkite/roko indirect minor v1.3.1 -> v1.4.0
github.com/cloudflare/circl indirect minor v1.3.7 -> v1.6.1
github.com/containerd/stargz-snapshotter/estargz indirect minor v0.16.3 -> v0.18.0
github.com/digitorus/pkcs7 indirect digest 3a137a8 -> ffadbf3
github.com/digitorus/timestamp require digest 220c5c2 -> c455327
github.com/docker/docker-credential-helpers indirect patch v0.9.3 -> v0.9.4
github.com/emicklei/proto indirect minor v1.13.4 -> v1.14.2
github.com/fsnotify/fsnotify indirect minor v1.8.0 -> v1.9.0
github.com/go-logr/logr indirect patch v1.4.2 -> v1.4.3
github.com/go-openapi/analysis indirect minor v0.23.0 -> v0.24.0
github.com/go-openapi/errors indirect patch v0.22.1 -> v0.22.3
github.com/go-openapi/jsonpointer indirect minor v0.21.0 -> v0.22.1
github.com/go-openapi/jsonreference indirect patch v0.21.0 -> v0.21.2
github.com/go-openapi/loads indirect minor v0.22.0 -> v0.23.1
github.com/go-openapi/spec indirect minor v0.21.0 -> v0.22.0
github.com/go-openapi/strfmt require minor v0.23.0 -> v0.24.0
github.com/go-openapi/swag require minor v0.23.1 -> v0.25.1
github.com/go-openapi/validate indirect minor v0.24.0 -> v0.25.0
github.com/google/certificate-transparency-go require patch v1.3.1 -> v1.3.2
github.com/google/gnostic-models indirect minor v0.6.9 -> v0.7.0
github.com/google/go-containerregistry require patch v0.20.3 -> v0.20.6
github.com/hashicorp/go-retryablehttp indirect patch v0.7.7 -> v0.7.8
github.com/hashicorp/go-secure-stdlib/parseutil indirect minor v0.1.7 -> v0.2.0
github.com/hashicorp/go-sockaddr indirect patch v1.0.5 -> v1.0.7
github.com/hashicorp/vault/api indirect minor v1.16.0 -> v1.22.0
github.com/in-toto/attestation indirect patch v1.1.1 -> v1.1.2
github.com/klauspost/compress indirect patch v1.18.0 -> v1.18.1
github.com/letsencrypt/boulder indirect minor v0.0.0-20240620165639-de9c06129bec -> v0.20251021.0
github.com/mailru/easyjson indirect patch v0.9.0 -> v0.9.1
github.com/open-policy-agent/opa require minor v1.1.0 -> v1.9.0
github.com/prometheus/client_golang indirect minor v1.22.0 -> v1.23.2
github.com/prometheus/common indirect minor v0.63.0 -> v0.67.1
github.com/prometheus/procfs indirect minor v0.15.1 -> v0.18.0
github.com/protocolbuffers/txtpbfmt indirect digest a5fe556 -> 16587c7
github.com/sagikazarmark/locafero indirect minor v0.7.0 -> v0.12.0
github.com/secure-systems-lab/go-securesystemslib require patch v0.9.0 -> v0.9.1
github.com/sigstore/fulcio require minor v1.6.6 -> v1.7.1
github.com/sigstore/protobuf-specs require minor v0.4.2 -> v0.5.0
github.com/sigstore/rekor require minor v1.3.10 -> v1.4.2
github.com/sigstore/sigstore require patch v1.9.4 -> v1.9.5
github.com/sigstore/sigstore-go require patch v0.7.2 -> v0.7.3
github.com/sigstore/sigstore/pkg/signature/kms/aws require patch v1.9.4 -> v1.9.5
github.com/sigstore/sigstore/pkg/signature/kms/azure require patch v1.9.4 -> v1.9.5
github.com/sigstore/sigstore/pkg/signature/kms/gcp require patch v1.9.4 -> v1.9.5
github.com/sigstore/sigstore/pkg/signature/kms/hashivault require patch v1.9.4 -> v1.9.5
github.com/sigstore/timestamp-authority require patch v1.2.7 -> v1.2.9
github.com/spf13/afero indirect minor v1.12.0 -> v1.15.0
github.com/spf13/cast indirect minor v1.7.1 -> v1.10.0
github.com/spf13/cobra require minor v1.9.1 -> v1.10.1
github.com/spf13/pflag require patch v1.0.6 -> v1.0.10
github.com/spf13/viper require minor v1.20.1 -> v1.21.0
github.com/stretchr/testify require minor v1.10.0 -> v1.11.1
github.com/vbatts/tar-split indirect patch v0.12.1 -> v0.12.2
gitlab.com/gitlab-org/api/client-go require minor v0.128.0 -> v0.157.0
go.mongodb.org/mongo-driver indirect minor v1.14.0 -> v1.17.4
go.opentelemetry.io/auto/sdk indirect minor v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc indirect minor v0.60.0 -> v0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp indirect minor v0.60.0 -> v0.63.0
go.step.sm/crypto indirect minor v0.63.0 -> v0.72.0
golang.org/x/crypto indirect minor v0.35.0 -> v0.43.0
golang.org/x/crypto require minor v0.38.0 -> v0.43.0
golang.org/x/exp indirect digest 054e65f -> 90e834f
golang.org/x/mod indirect minor v0.24.0 -> v0.29.0
golang.org/x/net indirect minor v0.40.0 -> v0.46.0
golang.org/x/oauth2 require minor v0.30.0 -> v0.32.0
golang.org/x/sync require minor v0.14.0 -> v0.17.0
golang.org/x/sys indirect minor v0.33.0 -> v0.37.0
golang.org/x/term require minor v0.32.0 -> v0.36.0
golang.org/x/text indirect minor v0.25.0 -> v0.30.0
golang.org/x/time indirect minor v0.11.0 -> v0.14.0
golang.org/x/tools indirect minor v0.33.0 -> v0.38.0
google.golang.org/api require minor v0.230.0 -> v0.253.0
google.golang.org/genproto indirect digest a0af3ef -> 3a174f9
google.golang.org/genproto/googleapis/api indirect digest 207652e -> 3a174f9
google.golang.org/genproto/googleapis/rpc indirect digest 207652e -> 3a174f9
k8s.io/api require minor v0.28.3 -> v0.34.1
k8s.io/apimachinery require minor v0.28.3 -> v0.34.1
k8s.io/client-go require minor v0.28.3 -> v0.34.1
k8s.io/kube-openapi indirect digest c8a335a -> 589584f
k8s.io/utils require digest 24370be -> bc988d5
sigs.k8s.io/json indirect digest cfa47c3 -> 2d32026
sigs.k8s.io/release-utils require minor v0.11.1 -> v0.12.2
sigs.k8s.io/yaml indirect minor v1.4.0 -> v1.6.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

googleapis/google-cloud-go (cloud.google.com/go)

v0.123.0

Compare Source

Features
Bug Fixes

v0.122.0

Compare Source

Features
Bug Fixes

v0.121.6

Compare Source

Bug Fixes
  • internal/librariangen: Fix Dockerfile permissions for go mod tidy (#​12704) (0e70a0b)

v0.121.5

Compare Source

Bug Fixes
  • internal/librariangen: Get README title from service config yaml (#​12676) (b3b8f70)
  • internal/librariangen: Update source_paths to source_roots in generate-request.json (#​12691) (2adb6f9)

v0.121.4

Compare Source

Bug Fixes
  • geminidataanalytics: Correct resource reference type for parent field in data_chat_service.proto (98ba6f0)
  • internal/postprocessor: Add git (#​12524) (82030ee)

v0.121.3

Compare Source

Documentation
  • impersonate: Address TODO in impersonate/example_test.go (#​12401) (dd096ec)

v0.121.2

Compare Source

Documentation

v0.121.1

Compare Source

Bug Fixes
  • civil: Add support for civil.Date, civil.Time and civil.DateTime arguments to their respective Scan methods (#​12240) (7127ce9), refs #​12060

v0.121.0

Compare Source

Features

v0.120.1

Compare Source

Bug Fixes
cue-lang/cue (cuelang.org/go)

v0.14.2

Compare Source

Evaluator

Fix an unintended evalv2 regression in v0.14.1; the change only intended to affect evalv3.

Fix a panic in the parser which could occur when @experiment() file attributes are invalid.

Fix an edge case where binary streams with ''' sequences would not roundtrip correctly.

Full list of changes since v0.14.1

v0.14.1

Compare Source

Evaluator

Fix three more regressions where evalv3 gave cycle errors and evalv2 did not.

Fix a regression where evalv3 was too strict with ellipses in certain situations, causing "field not allowed" regressions.

Fix a regression where errors in optional fields were not being ignored as intended.

Full list of changes since v0.14.0

v0.14.0

Compare Source

This release brings significant performance improvements, three language changes, and initial support for Kubernetes CRDs.

Changes which may break some users are marked below with: ⚠️

Evaluator

Performance

A particularly slow part of the new closedness algorithm has been rewritten for speed, resulting in improvements of up to 10x in wall times for some projects.

Significant progress has been made to the new evaluator's memory usage; a few large projects experiencing high memory usage on v0.13 now see reductions of up to 80%.

Various other optimizations and performance bug fixes have been made to the new evaluator, yielding speed-ups of 5-20% on a variety of CUE projects.

error builtin

A new error builtin is added to the language, which allows users to create custom error values with a specified message.

Don't simplify validators into concrete values

A new CUE_EXPERIMENT=keepvalidators experiment is introduced, already on by default, which prevents validators from being simplified into concrete values.

X == Y and == X

Firstly, there were several bug fixes related to ==. Most notably, [int] == [int] incorrectly resolved to true. It now correctly resolves to an error.

All other changes are enabled using the @experiment(structcmp) file-level attribute.
Enabling this experiment allows all CUE values to be compared for equality. This includes comparing structs.

The same experiment also allows a unary == to enforce that a value is a specific concrete value.

Other changes

⚠️ The file embedding experiment can no longer be disabled via CUE_EXPERIMENT=embed=0, having been introduced in CUE v0.10.0.

File embedding is now enabled when using the cue/cuecontext or cue/load APIs; earlier versions could not expose it via the Go API due to an import cycle.

⚠️ The topological field sorting experiment can no longer be disabled via CUE_EXPERIMENT=toposort=0, having been introduced in CUE v0.11.0.

⚠️ CUE_EXPERIMENT=cmdreferencepkg, introduced in v0.13.0 to require referencing tool packages to declare cue cmd tasks, is now on by default.

The new closedness algorithm has been adjusted to fix a number of "field not allowed" bugs, particularly in the form of regressions compared to the old evaluator.

A particularly slow part of the new closedness algorithm has been optimized, resulting in improvements of up to 10x in wall times for some projects.

cmd/cue

⚠️ cue def --strict jsonschema:, deprecated in favor of cue def jsonschema+strict: in v0.11.0, is no longer supported.

Two bugs have been fixed in the new cue trim algorithm where disjunctions could incorrectly select defaults or be treated as ambiguous.

Encodings

cue get crd introduces support for extracting Kubernetes Custom Resource Definitions (CRDs) as CUE definitions; see cue help get crd.

The new encoding/jsonschema.ExtractCRDs Go API exposes the extractor used by cue get crd.

The JSON Schema decoder has gained support for dependencies, bringing the pass rate for the official JSON Schema test suite up from 79% to 81%.

Go API

cue/load now provides module information via the new Instance.ModuleFile field.

⚠️ In order to support the above change, the mod/modfile.File.Format method has been moved to the function mod/modfile.Format: an API-breaking change but necessary to avoid a cyclic package dependency.

cue/parser gains a new Config API, which allows other packages like cue/load to properly apply the right parser options such as the CUE language version.

⚠️ In order to support the above change, the cue/parser.Config.ParseFile and cue/build.ParseFile signatures have now changed (incompatibly) to add a parser.Config argument, enabling the CUE language version to be passed through.

Fix an issue where cue.Value.Decode did not work with *math/big.Float types.

Full list of changes since v0.13.0

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 2 times, most recently from f357ab8 to 186f9d8 Compare August 10, 2025 12:09
@red-hat-konflux red-hat-konflux bot changed the title chore(deps): update go dependencies Update Go Dependencies Aug 10, 2025
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 3 times, most recently from 9920c0f to ff10711 Compare August 17, 2025 12:30
@tommyd450
Copy link

/retest

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 4 times, most recently from 6177d88 to d6178d3 Compare August 24, 2025 20:31
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 3 times, most recently from 6aa5637 to 3715a71 Compare September 7, 2025 08:36
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 3 times, most recently from 9afbd4b to 144565a Compare September 14, 2025 08:39
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 4 times, most recently from a730bbb to e1dc0c2 Compare September 21, 2025 12:36
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 8 times, most recently from b91c2b5 to 97499dd Compare September 25, 2025 20:54
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 28 times, most recently from d638352 to 4e74945 Compare October 27, 2025 08:25
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from 4e74945 to e7ea0ba Compare October 27, 2025 12:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant