Update go module minor/patch updates by red-hat-konflux-kflux-prd-rh02[bot] · Pull Request #194 · openshift-hyperfleet/hyperfleet-sentinel

red-hat-konflux-kflux-prd-rh02 · 2026-06-22T12:05:50Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
cel.dev/expr	`v0.25.1` → `v0.25.2`
cloud.google.com/go/auth	`v0.18.1` → `v0.20.0`
cloud.google.com/go/iam	`v1.5.3` → `v1.11.0`
cloud.google.com/go/pubsub/v2	`v2.4.0` → `v2.6.0`
github.com/ThreeDotsLabs/watermill	`v1.5.1` → `v1.5.2`
github.com/ThreeDotsLabs/watermill-amqp/v3	`v3.0.2` → `v3.1.0`
github.com/ThreeDotsLabs/watermill-googlecloud/v2	`v2.0.0` → `v2.0.1`
github.com/docker/go-connections	`v0.6.0` → `v0.7.0`
github.com/ebitengine/purego	`v0.10.0` → `v0.10.1`
github.com/felixge/httpsnoop	`v1.0.4` → `v1.1.0`
github.com/fsnotify/fsnotify	`v1.9.0` → `v1.10.1`
github.com/google/cel-go	`v0.27.0` → `v0.28.1`
github.com/googleapis/enterprise-certificate-proxy	`v0.3.12` → `v0.3.16`
github.com/googleapis/gax-go/v2	`v2.17.0` → `v2.22.0`
github.com/grpc-ecosystem/grpc-gateway/v2	`v2.28.0` → `v2.29.0`
github.com/klauspost/compress	`v1.18.5` → `v1.18.6`
github.com/moby/moby/api	`v1.54.1` → `v1.55.0`
github.com/moby/moby/client	`v0.4.0` → `v0.5.0`
github.com/moby/sys/sequential	`v0.6.0` → `v0.7.0`
github.com/openshift-hyperfleet/hyperfleet-api-spec	`v1.0.12` → `v1.0.22`
github.com/pelletier/go-toml/v2	`v2.2.4` → `v2.4.0`
github.com/prometheus/common	`v0.66.1` → `v0.69.0`
github.com/prometheus/procfs	`v0.17.0` → `v0.20.1`
github.com/rabbitmq/amqp091-go	`v1.10.0` → `v1.12.0`
github.com/shirou/gopsutil/v4	`v4.26.3` → `v4.26.5`
github.com/testcontainers/testcontainers-go	`v0.42.0` → `v0.43.0`
github.com/testcontainers/testcontainers-go/modules/rabbitmq	`v0.42.0` → `v0.43.0`
github.com/tklauser/go-sysconf	`v0.3.16` → `v0.4.0`
github.com/tklauser/numcpus	`v0.11.0` → `v0.12.0`
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc	`v0.65.0` → `v0.69.0`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`v0.65.0` → `v0.69.0`
go.opentelemetry.io/contrib/propagators/autoprop	`v0.68.0` → `v0.69.0`
go.opentelemetry.io/contrib/propagators/aws	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/contrib/propagators/b3	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/contrib/propagators/jaeger	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/contrib/propagators/ot	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/exporters/stdout/stdouttrace	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/metric	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/sdk	`v1.43.0` → `v1.44.0`
go.opentelemetry.io/otel/trace	`v1.43.0` → `v1.44.0`
go.uber.org/zap	`v1.27.1` → `v1.28.0`
go.yaml.in/yaml/v2	`v2.4.2` → `v2.4.4`
golang.org/x/crypto	`v0.49.0` → `v0.53.0`
golang.org/x/net	`v0.52.0` → `v0.56.0`
golang.org/x/oauth2	`v0.35.0` → `v0.36.0`
golang.org/x/sync	`v0.20.0` → `v0.21.0`
golang.org/x/sys	`v0.42.0` → `v0.46.0`
golang.org/x/text	`v0.35.0` → `v0.38.0`
golang.org/x/time	`v0.14.0` → `v0.15.0`
google.golang.org/api	`v0.266.0` → `v0.285.0`
google.golang.org/grpc	`v1.80.0` → `v1.81.1`

Release Notes

google/cel-spec (cel.dev/expr)

`v0.25.2`

Compare Source

What's Changed

Add conformance tests for (string).reverse() by @jnthntatum in #491
Updates to the conformance tests for integer values in %e and %f format directives by @TristonianJones in #495
Add automated BCR publishing on release tags by @mmorel-35 in #498
Add clarification on scoping rules. by @jnthntatum in #506
Networking extension conformance tests by @TristonianJones in #507
Add conformance test cases for null assignability around repeated fields and maps by @l46kok in #510

New Contributors

@mmorel-35 made their first contribution in #498

Full Changelog: cel-expr/cel-spec@v0.25.1...v0.25.2

googleapis/google-cloud-go (cloud.google.com/go/auth)

`v0.20.0`

Compare Source

bigquery: Support SchemaUpdateOptions for load jobs.
bigtable:
- Add SampleRowKeys.
- cbt: Support union, intersection GCPolicy.
- Retry admin RPCS.
- Add trace spans to retries.
datastore: Add OpenCensus tracing.
firestore:
- Fix queries involving Null and NaN.
- Allow Timestamp protobuffers for time values.
logging: Add a WriteTimeout option.
spanner: Support Batch API.
storage: Add OpenCensus tracing.

`v0.19.0`

bigquery:
- Support customer-managed encryption keys.
bigtable:
- Improved emulator support.
- Support GetCluster.
datastore:
- Add general mutations.
- Support pointer struct fields.
- Support transaction options.
firestore:
- Add Transaction.GetAll.
- Support document cursors.
logging:
- Support concurrent RPCs to the service.
- Support per-entry resources.
profiler:
- Add config options to disable heap and thread profiling.
- Read the project ID from $GOOGLE_CLOUD_PROJECT when it's set.
pubsub:
- BEHAVIOR CHANGE: Release flow control after ack/nack (instead of after the
  callback returns).
- Add SubscriptionInProject.
- Add OpenCensus instrumentation for streaming pull.
storage:
- Support CORS.

ThreeDotsLabs/watermill (github.com/ThreeDotsLabs/watermill)

`v1.5.2`

Compare Source

What's Changed

Propagate AddConsumerHandler to examples and docs by @m110 in #612
Add quickstart docs by @m110 in #615
Update Quickstart link in README by @m110 in #618
Polish watermill.io after update by @roblaszczak in #619
Update Pub/Sub links to latest versions by @m110 in #620
added sqlite docs PoC by @roblaszczak in #563
edit SQLite documentation and transaction example by @dkotik in #621
Refresh getting started by @m110 in #628
docs: add suport of mysql delayed messages by @AdrianZajkowski in #630
refactor: use maps.Copy to simplify the code by @dulanting in #627
docs: update discord link by @m110 in #634
chore: fix some comments by @geogrego in #635
refactor: remove redundant variable declarations in for loops by @efcking in #637
chore: execute goimports to format the code by @xibeiyoumian in #644
Rename variable from pub to sub in main.go by @sdil in #643
I can't see anything by @boreq in #674
Bump dependencies and fix races by @m110 in #679
Bump vite from 5.4.12 to 5.4.21 in /docs by @dependabot[bot] in #629
Bump picomatch from 2.3.1 to 2.3.2 in /docs by @dependabot[bot] in #680
docs: assorted documentation and comment improvements by @jjpinto in #647
Fix HTTP response body leak and add retry backoff in run.go by @jjpinto in #665
Validate all examples + fix by @m110 in #681
Added support for custom JSON configuration in the forwarder component by @falboe in #667
feat(retry): add OnRetriesExhausted hook for cleanup actions by @Br1an67 in #670
Restore PR CI by @m110 in #682

New Contributors

@AdrianZajkowski made their first contribution in #630
@dulanting made their first contribution in #627
@geogrego made their first contribution in #635
@efcking made their first contribution in #637
@xibeiyoumian made their first contribution in #644
@sdil made their first contribution in #643
@jjpinto made their first contribution in #647
@falboe made their first contribution in #667
@Br1an67 made their first contribution in #670

Full Changelog: ThreeDotsLabs/watermill@v1.5.1...v1.5.2

ThreeDotsLabs/watermill-amqp (github.com/ThreeDotsLabs/watermill-amqp/v3)

`v3.1.0`

Compare Source

What's Changed

Bumps dependencies by @m110 in #35
Added support for pre process delivery in the marshaler by @micbis in #33
fix: Adjust notifyCloseConnection to be a buffered channel to avoid blocking during exception handling by @nengwu765 in #30

New Contributors

@micbis made their first contribution in #33
@nengwu765 made their first contribution in #30

Full Changelog: ThreeDotsLabs/watermill-amqp@v3.0.2...v3.1.0

ThreeDotsLabs/watermill-googlecloud (github.com/ThreeDotsLabs/watermill-googlecloud/v2)

`v2.0.1`

Compare Source

What's Changed

Bump dependencies by @m110 in #46

Full Changelog: ThreeDotsLabs/watermill-googlecloud@v2.0.0...v2.0.1

docker/go-connections (github.com/docker/go-connections)

`v0.7.0`

Compare Source

ebitengine/purego (github.com/ebitengine/purego)

`v0.10.1`

Compare Source

Fix a concurrency bug where simultaneous FFI calls could swap return values across goroutines (#451)

felixge/httpsnoop (github.com/felixge/httpsnoop)

`v1.1.0`

Compare Source

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

`v1.10.1`

Compare Source

Changes and fixes

inotify: don't remove sibling watches sharing a path prefix (#754)
inotify, windows: don't rename sibling watches sharing a path prefix
(#755)

`v1.10.0`

Compare Source

This version of fsnotify needs Go 1.23.

Changes and fixes

inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

google/cel-go (github.com/google/cel-go)

`v0.28.1`

Compare Source

What's Changed

fix: deleted IntToDuration overload by @alexsnaps in #1300
Support shorthand types in env yaml and REPL by @jnthntatum in #1301
Preserve operation interrupted in ContextEval error by @dims in #1303
Use shorthand type specifiers in env yaml files by @jnthntatum in #1305
Cost estimation and tracking for strings extension by @TristonianJones in #1307
Update repl type string for doubles by @TristonianJones in #1308

New Contributors

@alexsnaps made their first contribution in #1300
@dims made their first contribution in #1303

Full Changelog: cel-expr/cel-go@v0.28.0...v0.28.1

`v0.28.0`

Compare Source

High-Level Changes

Enhanced JSON Interoperability: New support for JSON names across the checker, AST, and runtime allows for more seamless data handling when working with JSON-native structures.
Improved Developer Tooling: Integration is now smoother thanks to new utilities for converting Go errors into cel.Issues and more descriptive, context-aware error messages.
Greater Environment Flexibility: You can now redeclare variables as constants and export parse limit options, providing finer control over how CEL environments are configured and constrained.
Native Struct Improvements: Support for mixing CEL and native values within native structs simplifies the handling of complex, hybrid data types.

🚀 Features

Add helper method to check whether a function has a singleton binding in #1266
Helper utility for converting a Go error into cel.Issues in #1267
Policy API improvements in #1268
CEL Test usability requirements in #1269
Better context-related error messages in #1271
Sort env.Config values where reasonable in #1273
Support redeclaring variables as constants in NewEnv in #1275
Add support for exporting parse limit options in #1277
Support mixing CEL values and native values in native structs in #1270
Add checker, AST, and type-provider support for JSON names in #1283
JSON field names runtime support in #1286
Optionally include reachable fieldpaths in prompt in #1285
REPL -- cel-spec pb2 and json name support #1294

🐞 Bug Fixes

Fix support for config-based type references in #1265
Check arg kinds in optional.or and .orValue impl in #1276
Bazel fixes for import in #1278
Support zero-value literals in presence test inlining #1280
Cache concatList.Size() to prevent O(N^2) evaluation time #1291
Preserve runtime error node IDs from Resolve #1290
Default enable identifier escaping with backticks #1295
Cap format string precision to prevent memory exhaustion #1292

🛠️ Maintenance & Internal

chore: Migrate gsutil usage to gcloud storage in #1274
Lint fixes for exported function/type comments in #1279
Lint fixes for import in #1287

Full Changelog: https://github.com/google/cel-go/compare/v0.27.0...v0.28.0-alpha

googleapis/enterprise-certificate-proxy (github.com/googleapis/enterprise-certificate-proxy)

`v0.3.16`

Compare Source

What's Changed

chore: Update go.mod to upgrade the go version to 1.25.8 by @nolanleastin in #193
chore: Update version.txt to 0.3.16 by @nolanleastin in #194

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.15...v0.3.16

`v0.3.15`

Compare Source

What's Changed

chore: Update version.txt to 0.3.15 by @nolanleastin in #192

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.14...v0.3.15

`v0.3.14`

Compare Source

What's Changed

chore: Update main.go to increase proxyrequesttimeout by @agrawalradhika-cell in #187
chore: Increase proxy request timeout for rsync gcloud fix by @agrawalradhika-cell in #188
feat: Update version.txt to 0.3.14 by @agrawalradhika-cell in #189

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.13...v0.3.14

`v0.3.13`

Compare Source

What's Changed

feat: support non-mtls requests as well by @sai-sunder-s in #185
feat: Update version.txt to 0.3.12 by @agrawalradhika-cell in #183
feat: Update version.txt to 0.3.13 by @agrawalradhika-cell in #186

Full Changelog: googleapis/enterprise-certificate-proxy@v0.3.12...v0.3.13

googleapis/gax-go (github.com/googleapis/gax-go/v2)

`v2.22.0`: v2: v2.22.0

Compare Source

v2.22.0 (2026-04-14)

`v2.21.0`: v2: v2.21.0

Compare Source

Features

update IsFeatureEnabled to not require EXPERIMENTAL (#497) (a2a329e3)
hook transport telemetry into gax.Invoke and record (#496) (d5310019)

`v2.20.0`: v2: v2.20.0

Compare Source

Features

hook metric recording into gax.Invoke (#494) (1f3e9aef)
add TelemetryErrorInfo and ExtractTelemetryErrorInfo (#487) (defdded3)

`v2.19.0`: v2: v2.19.0

Compare Source

Features

update WithLogger to WithLoggerContext. (#478) (1cb70baf)
pass logger to downstream via context (#474) (434fa676)
add WithClientMetrics CallOption (#479) (76f0284e)
add TransportTelemetryData for dynamic transport attributes (#481) (8a7caf00)
add ClientMetrics initialization core (#473) (f53618c2)

Bug Fixes

lazy initialization and getters for ClientMetrics (#485) (fb6c5f4d)

`v2.18.0`: v2: v2.18.0

Compare Source

Features

move gax-go to use 1.25 as the lower bound of support (#469) (01594ca5)
add callctx telemetry helpers (#472) (fa319ffc)

grpc-ecosystem/grpc-gateway (github.com/grpc-ecosystem/grpc-gateway/v2)

`v2.29.0`

Compare Source

What's Changed

fix: use proto.Merge to avoid copylocks with use_opaque_api=true by @emahiro in #6383
fix: allow proto3 optional fields in path parameters by @susanachl in #6416
Add option to disable HTTP method override by @achew22 in #6447
Add Go documentation badge to README by @achew22 in #6448
fix: add missing return statements in error handler paths by @jet-go in #6561
Deprecate fields and methods if file is deprecated by @aidandj in #6613
Add edition 2024 support by @printfn in #6622

New Contributors

@emahiro made their first contribution in #6383
@susanachl made their first contribution in #6416
@jet-go made their first contribution in #6561
@aidandj made their first contribution in #6613
@printfn made their first contribution in #6622

Full Changelog: grpc-ecosystem/grpc-gateway@v2.28.0...v2.29.0

klauspost/compress (github.com/klauspost/compress)

`v1.18.6`

Compare Source

What's Changed

s2: Fix amd64 stack frame corruption by @klauspost in #1145
gzhttp: Canonicalize ETag header by @justinmayhew in #1139
perf: pool hash tables in Go encode paths to reduce allocations by @huynhanx03 in #1143

New Contributors

@justinmayhew made their first contribution in #1139
@huynhanx03 made their first contribution in #1143
@thaJeztah made their first contribution in #1144

Full Changelog: klauspost/compress@v1.18.5...v1.18.6

moby/moby (github.com/moby/moby/client)

`v0.5.0`

Compare Source

`v0.4.1`

Compare Source

openshift-hyperfleet/hyperfleet-api-spec (github.com/openshift-hyperfleet/hyperfleet-api-spec)

`v1.0.22`

Compare Source

First official stable release of the HyperFleet API specification.

Added

Complete CRUD operations for clusters, nodepools, and statuses
Status tracking and reporting with comprehensive history management
Core API variant with generic cluster spec
GCP API variant with GCP-specific cluster spec
Kubernetes-style timestamp conventions
List-based pagination for resource collections
Separate public and internal status endpoints
Interactive API documentation

`v1.0.21`

Compare Source

First official stable release of the HyperFleet API specification.

Added

Complete CRUD operations for clusters, nodepools, and statuses
Status tracking and reporting with comprehensive history management
Core API variant with generic cluster spec
GCP API variant with GCP-specific cluster spec
Kubernetes-style timestamp conventions
List-based pagination for resource collections
Separate public and internal status endpoints
Interactive API documentation

Configuration

📅 Schedule: Branch creation - "on monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux-kflux-prd-rh02 · 2026-06-22T12:05:52Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading github.com/cenkalti/backoff/v5 v5.0.3
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.69.0
go: downloading go.opentelemetry.io/otel v1.44.0
go: downloading go.opentelemetry.io/otel/sdk v1.44.0
go: downloading github.com/spf13/pflag v1.0.10
go: downloading github.com/spf13/viper v1.21.0
go: downloading github.com/google/cel-go v0.28.1
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading github.com/openshift-hyperfleet/hyperfleet-broker v1.1.1
go: downloading github.com/spf13/cobra v1.10.2
go: downloading github.com/cloudevents/sdk-go/v2 v2.16.2
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/google/uuid v1.6.0
go: downloading go.opentelemetry.io/contrib/propagators/autoprop v0.69.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.44.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.44.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.44.0
go: downloading go.opentelemetry.io/otel/trace v1.44.0
go: downloading github.com/felixge/httpsnoop v1.1.0
go: downloading go.opentelemetry.io/otel/metric v1.44.0
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading github.com/go-viper/mapstructure/v2 v2.5.0
go: downloading github.com/sagikazarmark/locafero v0.12.0
go: downloading github.com/spf13/afero v1.15.0
go: downloading github.com/spf13/cast v1.10.0
go: downloading cel.dev/expr v0.25.2
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260526163538-3dc84a4a5aaa
go: downloading google.golang.org/protobuf v1.36.11
go: downloading google.golang.org/genproto v0.0.0-20260511170946-3700d4141b60
go: downloading golang.org/x/text v0.38.0
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading github.com/prometheus/common v0.69.0
go: downloading github.com/prometheus/procfs v0.20.1
go: downloading golang.org/x/sys v0.46.0
go: downloading github.com/kylelemons/godebug v1.1.0
go: downloading cloud.google.com/go/pubsub/v2 v2.6.0
go: downloading cloud.google.com/go v0.123.0
go: downloading github.com/ThreeDotsLabs/watermill v1.5.2
go: downloading github.com/ThreeDotsLabs/watermill-amqp/v3 v3.1.0
go: downloading github.com/ThreeDotsLabs/watermill-googlecloud/v2 v2.0.1
go: downloading google.golang.org/grpc v1.81.1
go: downloading github.com/inconshreveable/mousetrap v1.1.0
go: downloading go.opentelemetry.io/contrib/propagators/aws v1.44.0
go: downloading go.opentelemetry.io/contrib/propagators/b3 v1.44.0
go: downloading go.opentelemetry.io/contrib/propagators/jaeger v1.44.0
go: downloading go.opentelemetry.io/contrib/propagators/ot v1.44.0
go: downloading go.opentelemetry.io/proto/otlp v1.10.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260610212136-7ab31c22f7ad
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/subosito/gotenv v1.6.0
go: downloading github.com/pelletier/go-toml/v2 v2.4.0
go: downloading go.yaml.in/yaml/v3 v3.0.4
go: downloading github.com/antlr4-go/antlr/v4 v4.13.1
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading github.com/googleapis/gax-go/v2 v2.22.0
go: downloading go.opencensus.io v0.24.0
go: downloading golang.org/x/sync v0.21.0
go: downloading google.golang.org/api v0.285.0
go: downloading github.com/cenkalti/backoff/v3 v3.2.2
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/rabbitmq/amqp091-go v1.12.0
go: downloading github.com/lithammer/shortuuid/v3 v3.0.7
go: downloading github.com/oklog/ulid v1.3.1
go: downloading github.com/sony/gobreaker v1.0.0
go: downloading github.com/json-iterator/go v1.1.12
go: downloading go.uber.org/zap v1.28.0
go: downloading go.uber.org/multierr v1.11.0
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.29.0
go: downloading golang.org/x/net v0.56.0
go: downloading golang.org/x/exp v0.0.0-20240823005443-9b4947da3948
go: downloading golang.org/x/oauth2 v0.36.0
go: downloading cloud.google.com/go/iam v1.11.0
go: downloading cloud.google.com/go/auth v0.20.0
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.2
go: downloading cloud.google.com/go/compute/metadata v0.9.0
go: downloading cloud.google.com/go/auth/oauth2adapt v0.2.8
go: downloading go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0
go: downloading golang.org/x/time v0.15.0
go: downloading github.com/google/s2a-go v0.1.9
go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.16
go: downloading golang.org/x/crypto v0.53.0
go: github.com/openshift-hyperfleet/hyperfleet-sentinel/internal/client imports
	github.com/openshift-hyperfleet/hyperfleet-sentinel/pkg/api/openapi: cannot find module providing package github.com/openshift-hyperfleet/hyperfleet-sentinel/pkg/api/openapi

openshift-ci · 2026-06-22T12:05:56Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign aredenba-rh for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci · 2026-06-22T12:06:02Z

Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR.

I'm waiting for a openshift-hyperfleet member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

coderabbitai · 2026-06-22T12:06:05Z

📝 Walkthrough

Walkthrough

go.mod receives version bumps across all require blocks. Direct dependency github.com/openshift-hyperfleet/hyperfleet-api-spec moves from v1.0.12 to v1.0.22 (9 minor versions). OpenTelemetry core, SDK, OTLP exporters, stdout exporter, and contrib propagators advance from the v1.43.x/v0.68.x line to v1.44.0/v0.69.0. OTel instrumentation packages (otelgrpc, otelhttp) jump from v0.65.0 to v0.69.0. Indirect bumps cover GCP cloud libraries, ThreeDotsLabs/watermill, moby packages, Docker helpers, cel-go, klauspost/compress, Prometheus, RabbitMQ AMQP, gRPC, and golang.org/x/*.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Supply chain notes — treat these as mandatory checks, not suggestions.

CWE-1395 / supply chain integrity: hyperfleet-api-spec jumps 9 minor versions (v1.0.12 → v1.0.22) in a single PR. Verify every intermediate release tag in that internal repo for integrity. A compromised or silently force-pushed internal tag is a direct injection vector into this Sentinel binary.

CWE-829 (inclusion of functionality from untrusted control sphere): otelgrpc/otelhttp skip four minor versions (v0.65.0 → v0.69.0). Review the OTel contrib changelog for any interceptor or middleware behavioral changes — these sit on every gRPC/HTTP request path in the Sentinel.

CVE surface: klauspost/compress, moby/sys/sequential, and google/cel-go bumps must be cross-referenced against the GitHub Advisory Database before merge. Confirm go.sum was also updated and committed atomically with this go.mod to prevent hash substitution attacks (CWE-494).

moby/sys/sequential 0.6.0 → 0.7.0: This is a non-patch jump. Verify it does not alter file operation sequencing behavior relied upon by any Sentinel log or config handling path.

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Title check	✅ Passed	Title 'Update go module minor/patch updates' directly describes the changeset, which is a Go dependency update.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Sec-02: Secrets In Log Output	✅ Passed	PR modifies only go.mod/go.sum (dependencies); contains no .go source code changes, therefore no new log statements to audit for secrets.
No Hardcoded Secrets	✅ Passed	No hardcoded secrets found. broker.yaml contains only default RabbitMQ dev credentials (guest:guest), marked as localhost-only. Example configs use documented placeholders, not active credentials....
No Weak Cryptography	✅ Passed	No weak cryptography detected: codebase audit found zero usage of md5/des/rc4/SHA1-for-security/ECB/custom crypto/non-constant-time comparisons; all 48 dependency updates are patch/minor stable ver...
No Injection Vectors	✅ Passed	PR only updates go.mod dependency versions; codebase contains no SQL concatenation, exec.Command with user input, template.HTML, or unsafe yaml.Unmarshal patterns (uses safe viper.UnmarshalExact wi...
No Privileged Containers	✅ Passed	PR modifies only Go module dependencies (go.mod/go.sum); no Kubernetes/Helm/Dockerfile changes. Existing infrastructure code has hardened security contexts without privileged patterns.
No Pii Or Sensitive Data In Logs	✅ Passed	PR contains only go.mod/go.sum changes with no source code modifications. No new logging statements exposing PII/sensitive data are introduced.
Description check	✅ Passed	PR description is a Renovate-generated dependency update table with release notes, directly related to the go.mod changeset.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

📝 Generate docstrings

Create stacked PR
Commit on current branch

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch konflux/mintmaker/main/go-module-minorpatch-updates

✨ Simplify code

Create PR with simplified code
Commit simplified code in branch konflux/mintmaker/main/go-module-minorpatch-updates

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>

openshift-ci · 2026-06-25T09:54:33Z

PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

openshift-ci Bot requested review from crizzo71 and ma-hill June 22, 2026 12:05

openshift-ci Bot added the needs-ok-to-test label Jun 22, 2026

Update go module minor/patch updates

350a036

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>

red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/mintmaker/main/go-module-minorpatch-updates branch from 9edfa84 to 350a036 Compare June 22, 2026 16:05

openshift-ci Bot added the needs-rebase label Jun 25, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Update go module minor/patch updates#194

Update go module minor/patch updates#194
red-hat-konflux-kflux-prd-rh02[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/go-module-minorpatch-updates

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 22, 2026 •

edited

Loading

Uh oh!

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 22, 2026 •

edited

Loading

Uh oh!

openshift-ci Bot commented Jun 22, 2026

Uh oh!

openshift-ci Bot commented Jun 22, 2026

Uh oh!

coderabbitai Bot commented Jun 22, 2026 •

edited

Loading

Walkthrough

Estimated code review effort

Uh oh!

openshift-ci Bot commented Jun 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

Changes and fixes

Changes and fixes

What's Changed

New Contributors

High-Level Changes

🚀 Features

🐞 Bug Fixes

🛠️ Maintenance & Internal

What's Changed

What's Changed

What's Changed

What's Changed

v2.22.0: v2: v2.22.0

v2.22.0 (2026-04-14)

v2.21.0: v2: v2.21.0

Features

v2.20.0: v2: v2.20.0

Features

v2.19.0: v2: v2.19.0

Features

Bug Fixes

v2.18.0: v2: v2.18.0

Features

What's Changed

New Contributors

What's Changed

New Contributors

Added

Added

Configuration

Documentation

Uh oh!

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

openshift-ci Bot commented Jun 22, 2026

Uh oh!

openshift-ci Bot commented Jun 22, 2026

Uh oh!

coderabbitai Bot commented Jun 22, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Estimated code review effort

Uh oh!

openshift-ci Bot commented Jun 25, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 22, 2026 •

edited

Loading

`v2.22.0`: v2: v2.22.0

`v2.21.0`: v2: v2.21.0

`v2.20.0`: v2: v2.20.0

`v2.19.0`: v2: v2.19.0

`v2.18.0`: v2: v2.18.0

red-hat-konflux-kflux-prd-rh02 Bot commented Jun 22, 2026 •

edited

Loading

coderabbitai Bot commented Jun 22, 2026 •

edited

Loading