Skip to content

chore(deps): update go dependencies - #128

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps
Open

chore(deps): update go dependencies#128
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-deps

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jul 20, 2026

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
github.com/ThalesGroup/crypto11 require patch v1.6.2v1.6.8
github.com/cenkalti/backoff/v5 indirect major v5.0.3v7.0.0
github.com/coreos/go-oidc/v3 require minor v3.20.0v3.21.0
github.com/digitorus/pkcs7 indirect digest ffadbf305f7944
github.com/go-jose/go-jose/v4 indirect patch v4.1.4v4.1.5
github.com/go-openapi/analysis indirect major v0.25.5v1.0.0
github.com/go-openapi/jsonpointer indirect patch v1.0.0v1.0.1
github.com/go-openapi/jsonreference indirect patch v1.0.0v1.0.2
github.com/go-openapi/loads indirect patch v0.25.0v0.25.3
github.com/go-openapi/runtime indirect patch v0.33.0v0.33.2
github.com/go-openapi/runtime/server-middleware indirect minor v0.32.5v0.33.2
github.com/go-openapi/spec indirect major v0.22.9v1.0.1
github.com/go-openapi/strfmt indirect patch v0.27.0v0.27.2
github.com/go-openapi/swag indirect minor v0.27.0v0.29.2
github.com/go-openapi/swag/cmdutils indirect minor v0.27.0v0.29.2
github.com/go-openapi/swag/conv indirect minor v0.27.3v0.29.2
github.com/go-openapi/swag/fileutils indirect minor v0.27.3v0.29.2
github.com/go-openapi/swag/jsonutils indirect minor v0.27.3v0.29.2
github.com/go-openapi/swag/loading indirect minor v0.27.3v0.29.2
github.com/go-openapi/swag/mangling indirect minor v0.27.3v0.29.2
github.com/go-openapi/swag/netutils indirect minor v0.27.0v0.29.2
github.com/go-openapi/swag/pools indirect minor v0.27.3v0.29.2
github.com/go-openapi/swag/stringutils indirect minor v0.27.3v0.29.2
github.com/go-openapi/swag/typeutils indirect minor v0.27.3v0.29.2
github.com/go-openapi/swag/yamlutils indirect minor v0.27.3v0.29.2
github.com/go-openapi/validate indirect major v0.26.1v1.0.0
github.com/google/go-containerregistry require minor v0.21.9v0.22.1
github.com/grpc-ecosystem/grpc-gateway/v2 indirect minor v2.29.0v2.30.0
github.com/oklog/ulid/v2 indirect patch v2.1.1v2.1.2
github.com/secure-systems-lab/go-securesystemslib indirect patch v0.11.0v0.11.1
github.com/sigstore/protobuf-specs require patch v0.5.1v0.5.2
github.com/sigstore/rekor indirect patch v1.5.3v1.5.4
github.com/theupdateframework/go-tuf indirect major v0.7.0v2.4.2
go.opentelemetry.io/otel require minor v1.45.0v1.46.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace indirect minor v1.45.0v1.46.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp require minor v1.45.0v1.46.0
go.opentelemetry.io/otel/metric indirect minor v1.45.0v1.46.0
go.opentelemetry.io/otel/sdk require minor v1.45.0v1.46.0
go.opentelemetry.io/otel/trace require minor v1.45.0v1.46.0
go.yaml.in/yaml/v3 indirect patch v3.0.4v3.0.5
golang.org/x/crypto require minor v0.55.0v0.56.0
golang.org/x/mod indirect minor v0.38.0v0.40.0
golang.org/x/net indirect minor v0.57.0v0.58.0
google.golang.org/genproto/googleapis/api indirect digest 6ac0973d0f1323
google.golang.org/genproto/googleapis/rpc indirect digest 6ac0973d0f1323
google.golang.org/grpc indirect patch v1.83.0v1.83.2

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

ThalesGroup/crypto11 (github.com/ThalesGroup/crypto11)

v1.6.8

Compare Source

What's Changed

  • downgrade the go version to 1.25.0 and add go toolchain by @​Nicolas-Peiffer in eclipse-keypont#139
  • fix: restore eclipse-keypont module path; refresh README install command, Go Reference badge and documentation links

Full Changelog: eclipse-keypont/crypto11@v1.6.5...v1.6.8

Module path restored — github.com/eclipse-keypont/crypto11

This release restores the correct module path following the repository move from
github.com/ThalesGroup/crypto11 to github.com/eclipse-keypont/crypto11.

Migrating
go get github.com/eclipse-keypont/crypto11@​v1.6.8
-import "github.com/ThalesGroup/crypto11"
+import "github.com/eclipse-keypont/crypto11"

The old path is deprecated and frozen at
ThalesGroup/crypto11@​v1.6.7.
It will receive no further updates, including security fixes. GitHub still redirects the old
repository URL, but the Go module path must be updated by hand — go get cannot follow it for you.

If you are already on this path: upgrade v1.6.5 → v1.6.8

v1.6.6 and v1.6.7 declare the old module path and exist only to publish the deprecation
notice for github.com/ThalesGroup/crypto11. They are not usable as
github.com/eclipse-keypont/crypto11 and will fail with:

module declares its path as: github.com/ThalesGroup/crypto11
        but was required as: github.com/eclipse-keypont/crypto11

v1.6.8 fixes this, so github.com/eclipse-keypont/crypto11@​latest resolves correctly again.

Go version policy

go.mod targets go 1.25.0 with toolchain go1.25.8. The go directive is kept conservative
so this library does not raise the minimum Go version for projects that import it, while
maintainers build and test with the latest patch toolchain. See #​137 and #​139.

The v1.6.x series is the current stable line. v2.x.y on github.com/eclipse-keypont/crypto11/v2 is in
development (v2.0.0-rc3), which is why pkg.go.dev reports a higher tagged major version.

v1.6.7

Compare Source

v1.6.6

Compare Source

v1.6.5

Compare Source

Full Changelog: eclipse-keypont/crypto11@v1.6.3...v1.6.5

v1.6.4

Compare Source

v1.6.3

Compare Source

cenkalti/backoff (github.com/cenkalti/backoff/v5)

v7.0.0

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

coreos/go-oidc (github.com/coreos/go-oidc/v3)

v3.21.0

Compare Source

What's Changed

  • oidc: ignore JWKs with unsupported key types rather than failing by @​nicoske in #​499

New Contributors

Full Changelog: coreos/go-oidc@v3.20.0...v3.21.0

go-jose/go-jose (github.com/go-jose/go-jose/v4)

v4.1.5

Compare Source

Fixed security issues

  • cipher/cbc_hmac: don't panic on empty ciphertext (#​292)
  • cipher/cbc_hmac: don't panic on invalid key (#​291)
  • json: limit stack depth (#​290)
  • jwt: reject out-of-range NumericDate values (#​278)
  • Check alg against pubkey curve during verify. (#​293)
  • Reject malformed Ed25519 JWKs (#​250)
  • jws: choose verification key per-signature (#​243)

Changed

  • Verify OpaqueSigner's Public() return is public (#​260)
  • jws: skip signature on ErrJWKSKidNotFound (#​248)
  • Handle JWE JSON without protected header (#​240)
  • jws: don't strip internal whitespace before parsing JSON (#​239)
  • jws: fewer calls to OpaqueSigner.Public() (#​224)
  • Return a specific error when parsing empty string (#​216)
  • Reject typed nil at Verify time (#​285)
go-openapi/analysis (github.com/go-openapi/analysis)

v1.0.0

Compare Source

1.0.0 - 2026-09-03

Full Changelog: go-openapi/analysis@v0.26.2...v1.0.0

5 commits in this release.


Documentation
Miscellaneous tasks
Updates

People who contributed to this release

analysis license terms

License

Per-module changes


internal/testintegration (1.0.0)

Miscellaneous tasks
Updates

v0.26.2

Compare Source

0.26.2 - 2026-08-25

Full Changelog: go-openapi/analysis@v0.26.1...v0.26.2

2 commits in this release.


Fixed bugs
Miscellaneous tasks

People who contributed to this release

analysis license terms

License

Per-module changes


internal/testintegration (0.26.2)

Fixed bugs
Miscellaneous tasks

v0.26.1

Compare Source

0.26.1 - 2026-08-24

Full Changelog: go-openapi/analysis@v0.26.0...v0.26.1

16 commits in this release.


Fixed bugs
  • fix: upgraded spec to onboard expand fixes by @​fredbi ...
  • fix(flatten): import the target of a $ref held by an unmapped keyword by @​fredbi ...
Documentation
Testing
  • test: rename fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

People who contributed to this release

analysis license terms

License

Per-module changes


internal/testintegration (0.26.1)

Fixed bugs
Testing
  • test: rename fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

v0.26.0

Compare Source

0.26.0 - 2026-08-08

Full Changelog: go-openapi/analysis@v0.25.5...v0.26.0

7 commits in this release.


Implemented enhancements
Documentation
Miscellaneous tasks
Updates

People who contributed to this release

analysis license terms

License

Per-module changes


internal/testintegration (0.26.0)

Miscellaneous tasks
Updates
go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v1.0.1

Compare Source

1.0.1 - 2026-09-04

Full Changelog: go-openapi/jsonpointer@v1.0.0...v1.0.1

14 commits in this release.


Documentation
Miscellaneous tasks
Updates

People who contributed to this release

jsonpointer license terms

License

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v1.0.2

Compare Source

1.0.2 - 2026-09-04

Full Changelog: go-openapi/jsonreference@v1.0.1...v1.0.2

4 commits in this release.


Refactor
Documentation
Updates

People who contributed to this release

jsonreference license terms

License

v1.0.1

Compare Source

1.0.1 - 2026-08-25

Full Changelog: go-openapi/jsonreference@v1.0.0...v1.0.1

12 commits in this release.


Fixed bugs
  • fix: keep NormalizeURL's output parseable when dropping a default port by @​fredbi ...
Documentation
Performance
  • perf: replace the duplicate-slash regexp in NormalizeURL with a scan by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

People who contributed to this release

jsonreference license terms

License

go-openapi/loads (github.com/go-openapi/loads)

v0.25.3

Compare Source

0.25.3 - 2026-09-04

Full Changelog: go-openapi/loads@v0.25.2...v0.25.3

4 commits in this release.


Documentation
Miscellaneous tasks
Updates

People who contributed to this release

loads license terms

License

v0.25.2

Compare Source

0.25.2 - 2026-08-25

Full Changelog: go-openapi/loads@v0.25.1...v0.25.2

11 commits in this release.


Fixed bugs
Documentation
  • doc: add technical writing instructions for agents by @​fredbi ...
Testing
Miscellaneous tasks
Updates
Other (technical)

People who contributed to this release

loads license terms

License

v0.25.1

Compare Source

0.25.1 - 2026-08-14

Full Changelog: go-openapi/loads@v0.25.0...v0.25.1

8 commits in this release.


Fixed bugs
Documentation
Updates

People who contributed to this release

loads license terms

License

go-openapi/runtime (github.com/go-openapi/runtime)

v0.33.2

Compare Source

0.33.2 - 2026-09-03

Full Changelog: go-openapi/runtime@v0.33.1...v0.33.2

11 commits in this release.


Documentation
Miscellaneous tasks
Updates
Other (technical)

People who contributed to this release

runtime license terms

License

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 81383d8 to 2a4384b Compare July 20, 2026 21:40
@codecov-commenter

codecov-commenter commented Jul 20, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 41.90%. Comparing base (73a90c8) to head (6fcb396).

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #128   +/-   ##
=======================================
  Coverage   41.90%   41.90%           
=======================================
  Files          57       57           
  Lines        3625     3625           
=======================================
  Hits         1519     1519           
  Misses       1967     1967           
  Partials      139      139           
Flag Coverage Δ
unit 41.90% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 2a4384b to 6e2130b Compare July 21, 2026 01:39
@red-hat-konflux red-hat-konflux Bot changed the title Update Go Dependencies Update Go Dependencies to v2 Jul 22, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch from 6e2130b to d6ab33a Compare July 22, 2026 21:44
@red-hat-konflux red-hat-konflux Bot changed the title Update Go Dependencies to v2 Update Go Dependencies Jul 22, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 23 times, most recently from 4f822eb to c618509 Compare July 29, 2026 22:12
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 21 times, most recently from a24e161 to eafbc3b Compare August 9, 2026 17:36
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 3 times, most recently from ca83552 to f4a8e04 Compare August 11, 2026 02:45
@red-hat-konflux red-hat-konflux Bot changed the title Update Go Dependencies chore(deps): update go dependencies Aug 11, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/go-deps branch 4 times, most recently from 87293c7 to a926e51 Compare August 14, 2026 06:35
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant