Skip to content

chore(deps): bump github.com/onsi/gomega from 1.42.1 to 1.43.0 - #132

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/onsi/gomega-1.43.0
Open

chore(deps): bump github.com/onsi/gomega from 1.42.1 to 1.43.0#132
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/onsi/gomega-1.43.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 31, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/onsi/gomega from 1.42.1 to 1.43.0.

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.43.0

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.43.0

Features

Add gomock adaptor extension for using Gomega matchers with gomock

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • Chores
    • Updated the Gomega testing dependency to version 1.43.0.

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.42.1 to 1.43.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.42.1...v1.43.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Aug 31, 2026
@openshift-ci

openshift-ci Bot commented Aug 31, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign cdoan1 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@coderabbitai

coderabbitai Bot commented Aug 31, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository: openshift-online/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: d7561a7a-3cd0-49dd-beb9-ce3c8cabe052

📥 Commits

Reviewing files that changed from the base of the PR and between 82b3f74 and eb08fac.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

Included review availability: Your plan provides up to 12 included reviews per hour; 7 remain after this review.


Walkthrough

The pull request updates the direct github.com/onsi/gomega dependency from v1.42.1 to v1.43.0.

Changes

Dependency update

Layer / File(s) Summary
Update Gomega version
go.mod
The required github.com/onsi/gomega version changes from v1.42.1 to v1.43.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to eb08f

This change only updates a test dependency and its checksums; no actionable merge-blocking risk remains beyond normal validation.

Suggested reviewers: cdoan1, typeid

🚥 Pre-merge checks | ✅ 11
✅ Passed checks (11 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the dependency update from github.com/onsi/gomega 1.42.1 to 1.43.0.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
No-Weak-Crypto ✅ Passed PASS. The pull request changes only go.mod and go.sum to update Gomega from v1.42.1 to v1.43.0. It adds no application crypto code, secret comparisons, or custom crypto implementation. The existin…
Container-Privileges ✅ Passed PASS. The pull request changes only go.mod and go.sum. The diff adds no container or Kubernetes manifest and contains none of the specified privilege settings. Existing privileged: true and USER root …
No-Sensitive-Data-In-Logs ✅ Passed PASS. The pull request changes only the Gomega version in go.mod and its go.sum checksums. The parent-to-commit patch adds no logging code and contains no sensitive-data logging patterns. Gomega usage…
No-Hardcoded-Secrets ✅ Passed PASS: The pull request changes only the Gomega version in go.mod and the corresponding module checksums in go.sum. The added lines contain no API keys, tokens, passwords, credentials, private keys, or…
No-Injection-Vectors ✅ Passed PASS: The pull request changes only go.mod and go.sum. It updates Gomega from v1.42.1 to v1.43.0 and replaces the corresponding checksums. No SQL concatenation, shell execution, eval/exec, pickle,…
Ai-Attribution ✅ Passed No AI tool use is mentioned in the authored PR description or in the PR commit. The only PR commit is the Dependabot dependency update, and its sole trailer is Signed-off-by: dependabot[bot]; it has…
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: No-Weak-Crypto

Explanation

PASS. The pull request changes only go.mod and go.sum to update Gomega from v1.42.1 to v1.43.0. It adds no application crypto code, secret comparisons, or custom crypto implementation. The existing SHA-1 OIDC thumbprint code is unchanged from origin/main. Gomega’s MD5 cache code is present in both v1.42.1 and v1.43.0, and the new gomock adaptor contains no crypto code. Therefore, the pull request introduces no weak-crypto finding under this check.

Full details: Container-Privileges

Explanation

PASS. The pull request changes only go.mod and go.sum. The diff adds no container or Kubernetes manifest and contains none of the specified privilege settings. Existing privileged: true and USER root entries are outside the pull-request diff, so they are pre-existing and do not cause a failure.

Full details: No-Sensitive-Data-In-Logs

Explanation

PASS. The pull request changes only the Gomega version in go.mod and its go.sum checksums. The parent-to-commit patch adds no logging code and contains no sensitive-data logging patterns. Gomega usage is limited to test files, and no passwords, tokens, API keys, PII, session IDs, hostnames, or customer data are introduced.

Full details: No-Hardcoded-Secrets

Explanation

PASS: The pull request changes only the Gomega version in go.mod and the corresponding module checksums in go.sum. The added lines contain no API keys, tokens, passwords, credentials, private keys, or URLs with embedded credentials. The two 44-character base64-like values are Go module checksums in go.sum, not hardcoded secrets or configuration values.

Full details: No-Injection-Vectors

Explanation

PASS: The pull request changes only go.mod and go.sum. It updates Gomega from v1.42.1 to v1.43.0 and replaces the corresponding checksums. No SQL concatenation, shell execution, eval/exec, pickle, unsafe YAML loading, os.system, or dangerouslySetInnerHTML code is introduced. Existing Gomega uses are confined to unchanged test files.

Full details: Ai-Attribution

Explanation

No AI tool use is mentioned in the authored PR description or in the PR commit. The only PR commit is the Dependabot dependency update, and its sole trailer is Signed-off-by: dependabot[bot]; it has no Assisted-by, Generated-by, or AI-related Co-Authored-By trailer. An older repository commit mentions Claude, but it is outside this PR range.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/go_modules/github.com/onsi/gomega-1.43.0

Comment @coderabbitai help to get the list of available commands.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants