Skip to content

Conversation

@red-hat-konflux
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Nov 6, 2025

This PR contains the following updates:

Package Type Update Change
github.com/containerd/stargz-snapshotter/estargz indirect minor v0.16.3 -> v0.18.1
github.com/docker/docker-credential-helpers indirect patch v0.9.3 -> v0.9.4
github.com/go-logr/logr require patch v1.4.2 -> v1.4.3
github.com/go-openapi/jsonpointer indirect minor v0.21.1 -> v0.22.3
github.com/go-openapi/jsonreference indirect patch v0.21.0 -> v0.21.3
github.com/go-openapi/swag indirect minor v0.23.1 -> v0.25.3
github.com/google/certificate-transparency-go require patch v1.3.1 -> v1.3.2
github.com/google/gnostic-models indirect minor v0.6.9 -> v0.7.0
github.com/google/go-containerregistry require patch v0.20.3 -> v0.20.6
github.com/google/pprof indirect digest c008609 -> 4902fdd
github.com/klauspost/compress indirect patch v1.18.0 -> v1.18.1
github.com/mailru/easyjson indirect patch v0.9.0 -> v0.9.1
github.com/openshift/api require digest 7152b1b -> b6fddd3
github.com/operator-framework/api require minor v0.31.0 -> v0.36.0
github.com/operator-framework/operator-lib require minor v0.18.0 -> v0.19.0
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring require minor v0.81.0 -> v0.86.2
github.com/prometheus/client_golang indirect minor v1.22.0 -> v1.23.2
github.com/prometheus/common indirect minor v0.63.0 -> v0.67.3
github.com/prometheus/procfs indirect minor v0.16.1 -> v0.19.2
github.com/spf13/pflag indirect patch v1.0.6 -> v1.0.10
github.com/vbatts/tar-split indirect patch v0.12.1 -> v0.12.2
golang.org/x/exp require digest 7e4ce0a -> e25ba8c
golang.org/x/oauth2 indirect minor v0.29.0 -> v0.33.0
golang.org/x/sys indirect minor v0.32.0 -> v0.38.0
golang.org/x/term indirect minor v0.31.0 -> v0.37.0
golang.org/x/text indirect minor v0.24.0 -> v0.31.0
golang.org/x/time indirect minor v0.11.0 -> v0.14.0
golang.org/x/tools indirect minor v0.32.0 -> v0.39.0
k8s.io/api require minor v0.32.4 -> v0.34.2
k8s.io/apiextensions-apiserver require minor v0.32.4 -> v0.34.2
k8s.io/apimachinery require minor v0.32.4 -> v0.34.2
k8s.io/client-go require minor v0.32.4 -> v0.34.2
k8s.io/kube-openapi indirect digest c8a335a -> 589584f
k8s.io/utils require digest 0f33e8f -> bc988d5
sigs.k8s.io/controller-runtime require minor v0.20.4 -> v0.22.4
sigs.k8s.io/json indirect digest cfa47c3 -> 2d32026
sigs.k8s.io/yaml require minor v1.4.0 -> v1.6.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

containerd/stargz-snapshotter (github.com/containerd/stargz-snapshotter/estargz)

v0.18.1

Compare Source

Notable Changes

v0.18.0

Compare Source

Notable Changes

v0.17.0

Compare Source

Notable Changes

For other changes, refer to the full diff: containerd/stargz-snapshotter@v0.16.3...v0.17.0

docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)

v0.9.4

Compare Source

What's Changed

  • update to go1.25.1 #​387
  • wincred: fix unsafe uintptr usage to be GC-safe on go1.25 #​386
  • gha: add macos-15-intel, remove macos-13 (deprecated) #​384
  • deb: Dockerfile: update to debian bookworm, ubuntu jammy (22.04) #​385
  • Dockerfile: update xx to v1.7.0 #​383
  • Dockerfile: update golangci-lint to v2.5 #​386
  • Dockerfile: merge build stages #​249
  • build(deps): bump github.com/danieljoos/wincred v1.2.3 #​388
  • build(deps): bump softprops/action-gh-release from 2.2.1 to 2.3.2 #​373
  • build(deps): bump actions/checkout from 4 to 5 #​376
  • build(deps): bump actions/setup-go from 5 to 6 #​377
  • build(deps): bump actions/github-script from 7 to 8 #​378
  • build(deps): bump softprops/action-gh-release from 2.3.2 to 2.3.3 #​379

Full Changelog: docker/docker-credential-helpers@v0.9.3...v0.9.4

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.22.3

Compare Source

0.22.3 - 2025-11-17

Full Changelog: go-openapi/jsonpointer@v0.22.2...v0.22.3

8 commits in this release.


Documentation
Code quality
Miscellaneous tasks

People who contributed to this release

New Contributors

jsonpointer license terms

License

v0.22.2

Compare Source

0.22.2 - 2025-11-14

Full Changelog: go-openapi/jsonpointer@v0.22.1...v0.22.2

12 commits in this release.


Documentation
Code quality
Testing
Miscellaneous tasks
Security
Updates

People who contributed to this release

jsonpointer license terms

License

v0.22.1

Compare Source

v0.22.0

Compare Source

v0.21.2

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.3

Compare Source

v0.21.2

Compare Source

v0.21.1

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

v0.25.3

Compare Source

v0.25.2

Compare Source

v0.25.1

Compare Source

v0.25.0

Compare Source

v0.24.1

Compare Source

v0.24.0

Compare Source

google/certificate-transparency-go (github.com/google/certificate-transparency-go)

v1.3.2

Compare Source

Misc
  • [migrillian] remove etcd support in #​1699
  • Bump golangci-lint from 1.55.1 to 1.61.0 (developers should update to this version).
  • Update ctclient tool to support SCT extensions field by @​liweitianux in #​1645
  • Bump go to 1.23
  • [ct_hammer] support HTTPS and Bearer token for Authentication.
  • [preloader] support Bearer token Authentication for non temporal logs.
  • [preloader] support end indexes
  • [CTFE] Short cache max-age when get-entries returns fewer entries than requested by @​robstradling in #​1707
  • [CTFE] Disalllow mismatching signature algorithm identifiers in #​702.
  • [jsonclient] surface HTTP Do and Read errors #​1695 by @​FiloSottile
CTFE Storage Saving: Extra Data Issuance Chain Deduplication
CTFE Rate Limiting Of Non-Fresh Submissions

To protect a log from being flooded with requests for "old" certificates, optional rate limiting for "non-fresh submissions" can be configured by providing the following flags:

  • non_fresh_submission_age
  • non_fresh_submission_burst
  • non_fresh_submission_limit

This can help to ensure that the log maintains its ability to (1) accept "fresh" submissions and (2) distribute all log entries to monitors.

Dependency updates
  • Bump the docker-deps group across 5 directories with 3 updates (#​1705)
  • Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in the all-deps group (#​1704)
  • Bump github.com/go-jose/go-jose/v4 in the go_modules group (#​1700)
  • Bump the all-deps group with 7 updates (#​1701)
  • Bump the all-deps group with 7 updates (#​1693)
  • Bump the docker-deps group across 4 directories with 1 update (#​1694)
  • Bump github/codeql-action from 3.28.13 to 3.28.16 in the all-deps group (#​1692)
  • Bump the all-deps group across 1 directory with 7 updates (#​1688)
  • Bump distroless/base-debian12 (#​1686)
  • Bump golangci/golangci-lint-action from 6.5.1 to 7.0.0 in the all-deps group (#​1685)
  • Bump the all-deps group with 4 updates (#​1681)
  • Bump the all-deps group with 6 updates (#​1683)
  • Bump the docker-deps group across 4 directories with 2 updates (#​1682)
  • Bump github.com/golang-jwt/jwt/v4 in the go_modules group (#​1680)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1676)
  • Bump the all-deps group with 2 updates (#​1677)
  • Bump github/codeql-action from 3.28.10 to 3.28.11 in the all-deps group (#​1670)
  • Bump the all-deps group with 8 updates (#​1672)
  • Bump the docker-deps group across 4 directories with 1 update (#​1671)
  • Bump the docker-deps group across 4 directories with 1 update (#​1668)
  • Bump the all-deps group with 4 updates (#​1666)
  • Bump golangci-lint from 1.55.1 to 1.61.0 (#​1667)
  • Bump the all-deps group with 3 updates (#​1665)
  • Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 in the all-deps group (#​1660)
  • Bump the docker-deps group across 5 directories with 2 updates (#​1661)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1662)
  • Bump the docker-deps group across 4 directories with 1 update (#​1656)
  • Bump the all-deps group with 2 updates (#​1654)
  • Bump the all-deps group with 4 updates (#​1657)
  • Bump github/codeql-action from 3.28.5 to 3.28.8 in the all-deps group (#​1652)
  • Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 in the all-deps group (#​1651)
  • Bump the all-deps group with 2 updates (#​1649)
  • Bump the all-deps group with 5 updates (#​1650)
  • Bump the docker-deps group across 5 directories with 3 updates (#​1648)
  • Bump google.golang.org/protobuf in the all-deps group (#​1647)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1646)
google/gnostic-models (github.com/google/gnostic-models)

v0.7.0

Compare Source

google/go-containerregistry (github.com/google/go-containerregistry)

v0.20.6

Compare Source

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.4...v0.20.6

v0.20.5

Compare Source

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.5

v0.20.4: - Not usable as a go module

Compare Source

🚨 This release was published to the Go module proxy and then re-tagged with a different commit. This means it's not usable as a Go module (#​2107) -- please us v0.20.5 instead.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.4

klauspost/compress (github.com/klauspost/compress)

v1.18.1

Compare Source

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

mailru/easyjson (github.com/mailru/easyjson)

v0.9.1

Compare Source

What's Changed

New Contributors

Full Changelog: mailru/easyjson@v0.9.0...v0.9.1

operator-framework/api (github.com/operator-framework/api)

v0.36.0

Compare Source

What's Changed

Full Changelog: operator-framework/api@v0.35.0...v0.36.0

v0.35.0

Compare Source

Notice

This release updates to k8s 1.34

What's Changed

Full Changelog: operator-framework/api@v0.34.0...v0.35.0

v0.34.0

Compare Source

What's Changed

Full Changelog: operator-framework/api@v0.33.0...v0.34.0

v0.33.0

Compare Source

What's Changed

Full Changelog: operator-framework/api@v0.32.0...v0.33.0

v0.32.0

Compare Source

What's Changed

Full Changelog: operator-framework/api@v0.31.0...v0.32.0

operator-framework/operator-lib (github.com/operator-framework/operator-lib)

v0.19.0

Compare Source

What's Changed

Full Changelog: operator-framework/operator-lib@v0.18.0...v0.19.0

prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)

v0.86.2: 0.86.2 / 2025-11-07

Compare Source

  • [CHANGE/BUGFIX] Fix operator's permissions to emit Kubernetes events. #​8077

v0.86.1: 0.86.1 / 2025-10-13

Compare Source

  • [BUGFIX] Fix formatting of Kubernetes events. #​8015

v0.86.0: 0.86.0 / 2025-10-07

Compare Source

[!NOTE]
This release introduces the status subresource (behind the StatusForConfigurationResources feature gate) for ServiceMonitor, PodMonitor, Probe and Scrapeconfig custom resources. It is only supported for Prometheus resources.

[!IMPORTANT]
This release enables automatic UTF-8 character support in label names, metric names and PrometheusRule expressions for Prometheus/PrometheusAgent resources running with version >= 3.0.0.

To preserve backward compatibility, the admission webhook service validates PrometheusRule resources against the legacy Prometheus scheme by default (but it can be changed with the --name-validation-scheme flag).

  • [CHANGE] Remove automatic addition of the metadata-wal-records feature flag for Prometheus versions >= 3.4. #​7893
  • [CHANGE] Add miscellaneous validations to the ScrapeConfig CRD. #​7856 #​7823 #​7835 #​7838 #​7838 ##​7966
  • [CHANGE/FEATURE] Add support for UTF-8 characters to label names and metric names in PrometheusRule resources and relabel configurations.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
Copy link
Contributor Author

red-hat-konflux bot commented Nov 6, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 8 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.6 -> 1.24.6
golang.org/x/net v0.39.0 -> v0.47.0
google.golang.org/grpc v1.72.0 -> v1.73.0
google.golang.org/protobuf v1.36.6 -> v1.36.10
github.com/docker/cli v27.5.1+incompatible -> v28.2.2+incompatible
github.com/fxamacker/cbor/v2 v2.8.0 -> v2.9.0
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee
golang.org/x/sync v0.13.0 -> v0.18.0
google.golang.org/genproto/googleapis/rpc v0.0.0-20250428153025-10db94c68c34 -> v0.0.0-20250603155806-513f23925822

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 24 times, most recently from 1414eed to 2e08a84 Compare November 13, 2025 13:38
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 4 times, most recently from e663b88 to 1d91ab4 Compare November 14, 2025 17:39
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 16 times, most recently from f70e797 to a9c96f6 Compare November 18, 2025 13:39
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch from a9c96f6 to 7978e9a Compare November 18, 2025 17:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants