Update module cloud.google.com/go/auth to v0.22.0

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
cloud.google.com/go/auth	v0.20.0 → v0.22.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/auth)

v0.22.0

Compare Source

• bigtable:

  • cbt: Support cells per column limit for row read.
  • bttest: Correctly handle empty RowSet.
  • Fix ReadModifyWrite operation in emulator.
  • Fix API path in GetCluster.

• bigquery:

  • BEHAVIOR CHANGE: Retry on 503 status code.
  • Add dataset.DeleteWithContents.
  • Add SchemaUpdateOptions for query jobs.
  • Add Timeline to QueryStatistics.
  • Add more stats to ExplainQueryStage.
  • Support Parquet data format.

• datastore:

  • Support omitempty for times.

• dlp:

  • BREAKING CHANGE: Remove v1beta1 client. Please migrate to the v2 client,
    which is now out of beta.
  • Add v2 client.

• firestore:

  • BEHAVIOR CHANGE: Treat set({}, MergeAll) as valid.

• iam:

  • Support JWT signing via SignJwt callopt.

• profiler:

  • BEHAVIOR CHANGE: PollForSerialOutput returns an error when context.Done.
  • BEHAVIOR CHANGE: Increase the initial backoff to 1 minute.
  • Avoid returning empty serial port output.

• pubsub:

  • BEHAVIOR CHANGE: Don't backoff during next retryable error once stream is healthy.
  • BEHAVIOR CHANGE: Don't backoff on EOF.
  • pstest: Support Acknowledge and ModifyAckDeadline RPCs.

• redis:

  • Add v1 beta Redis client.

• spanner:

  • Support SessionLabels.

• speech:

  • Add api v1 beta1 client.

• storage:

  • BEHAVIOR CHANGE: Retry reads when retryable error occurs.
  • Fix delete of object in requester-pays bucket.
  • Support KMS integration.

v0.21.0

Compare Source

• bigquery:

  • Add OpenCensus tracing.

• firestore:

  • BREAKING CHANGE: If a document does not exist, return a DocumentSnapshot
    whose Exists method returns false. DocumentRef.Get and Transaction.Get
    return the non-nil DocumentSnapshot in addition to a NotFound error.
    DocumentRef.GetAll and Transaction.GetAll return a non-nil
    DocumentSnapshot instead of nil.
  • Add DocumentIterator.Stop. Call Stop whenever you are done with a
    DocumentIterator.
  • Added Query.Snapshots and DocumentRef.Snapshots, which provide realtime
    notification of updates. See https://cloud.google.com/firestore/docs/query-data/listen.
  • Canceling an RPC now always returns a grpc.Status with codes.Canceled.

• spanner:

  • Add CommitTimestamp, which supports inserting the commit timestamp of a
    transaction into a column.

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift-online member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

Walkthrough

Updated the indirect cloud.google.com/go/auth dependency in go.mod from v0.20.0 to v0.22.0. No exported or public entities were changed.

Changes

Go module dependency update

Layer / File(s)	Summary
Cloud Auth module version go.mod	Bumps the indirect cloud.google.com/go/auth requirement from v0.20.0 to v0.22.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Possibly related PRs

• openshift-online/ocm-cli#1147: Updates the same Cloud Auth dependency.
• openshift-online/ocm-cli#1188: Updates the same indirect Cloud Auth dependency.
• openshift-online/ocm-cli#1195: Updates another cloud.google.com/go/* dependency in go.mod.

Suggested labels: dependencies, go, ok-to-test

Suggested reviewers: rcampos2029, miguelhbrito

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No-Weak-Crypto	✅ Passed	Diff only bumps cloud.google.com/go/auth in go.mod/go.sum; no weak-crypto patterns or custom crypto code were introduced.
Container-Privileges	✅ Passed	Only go.mod and go.sum changed; no container/K8s manifests or privilege settings were modified.
No-Sensitive-Data-In-Logs	✅ Passed	Only go.mod/go.sum changed for a dependency bump; no source/logging code was added or modified, and no sensitive-data logging appears in the diff.
No-Hardcoded-Secrets	✅ Passed	The only diff in go.mod is a cloud.google.com/go/auth version bump; no hardcoded secret-like literals were added.
No-Injection-Vectors	✅ Passed	PR only bumps a Go dependency in go.mod/go.sum; no source code changed and no new injection-prone patterns were introduced.
Ai-Attribution	✅ Passed	No AI-tool use is mentioned; HEAD only has a Signed-off-by trailer and no Co-Authored-By/Assisted-by/Generated-by AI attribution.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately and concisely describes the dependency version bump shown in the diff.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/main/cloud.google.com-go-auth-0.x

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

@red-hat-konflux[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/images-images	5b1cdf8	link	true	/test images-images

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[openshift-ci]

New changes are detected. LGTM label has been removed.

[coderabbitai]

🧹 Nitpick comments (1)

go.mod (1)

39-39: 🔒 Security & Privacy | 🔵 Trivial

Dependency bump is fine; add release hardening separately

go.sum is in sync and OSV reports no advisories for cloud.google.com/go/auth@v0.21.0. .github/workflows/publish-release.yaml still doesn’t emit SBOM/provenance attestations or signed artifacts, so add that there if release hardening is required.

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` at line 39, Keep the cloud.google.com/go/auth dependency update
unchanged; separately update the publish-release workflow to emit SBOM and
provenance attestations and produce signed release artifacts, using the
workflow’s existing release and artifact steps.

Sources: Path instructions, MCP tools

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@go.mod`:
- Line 39: Keep the cloud.google.com/go/auth dependency update unchanged;
separately update the publish-release workflow to emit SBOM and provenance
attestations and produce signed release artifacts, using the workflow’s existing
release and artifact steps.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository: openshift-online/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: d17c67df-0f2e-4e94-aa17-199acf4409dc

📥 Commits

Reviewing files that changed from the base of the PR and between 5c02f9e and 4e2afa9.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod