Update go module minor/patch updates#230
Conversation
Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
|
Hi @red-hat-konflux-kflux-prd-rh02[bot]. Thanks for your PR. I'm waiting for a openshift-hyperfleet member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
📝 WalkthroughWalkthroughgo.mod modifies indirect dependency version pins: cel-go, golang.org/x/text, go-openapi/swag suite (with jsonpointer bumped and swag/jsonname entry removed), klauspost/compress, prometheus/procfs, shirou/gopsutil/v4, and google.golang.org/api and grpc. No exported/public declarations changed. Estimated code review effort: 1 (Trivial) | ~5 minutes Security note: Unverified transitive bumps to google.golang.org/grpc (v1.81.1→v1.82.0) and google.golang.org/api touch network/RPC attack surface — check upstream changelogs/advisories (no CVE cited in diff) before merge. go-openapi/swag/jsonname removal changes the dependency graph shape; confirm no residual references or supply-chain substitution risk (CWE-1104-class: unmaintained/third-party component reliance). No go.sum hashes included in this summary — verify checksum integrity separately. Suggested labels: dependencies, go.mod Suggested reviewers: N/A — assign based on module ownership of vendored network/RPC and OpenAPI dependencies. 🚥 Pre-merge checks | ✅ 11✅ Passed checks (11 passed)
✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
✨ Simplify code
Comment |
|
/ok-to-test |
Risk Score: 0 —
|
| Signal | Detail | Points |
|---|---|---|
| PR size | 129 lines | +0 |
| Sensitive paths | none | +0 |
Computed by hyperfleet-risk-scorer
|
/lgtm |
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: rafabene The full list of commands accepted by this bot can be found here. The pull request process is described here DetailsNeeds approval from an approver in each of these files:
Approvers can indicate their approval by writing |
…overy - Cap gRPC reconnect backoff at 5s via ExtraDialOpts/ConnectParams (upstream sdk-go PR openshift-hyperfleet#230 merged) - Add bounded retry (3 attempts, exponential backoff) for transient gRPC errors (codes.Unavailable) in Create/Get/Patch ManifestWork - Log structured warning in AlwaysAck before discarding errors
1 participant
This PR contains the following updates:
v0.23.2→v0.24.0v0.26.1→v0.27.0v0.26.1→v0.27.0v0.26.1→v0.27.0v0.26.1→v0.27.0v0.26.1→v0.27.0v0.26.1→v0.27.0v0.26.1→v0.27.0v0.26.1→v0.27.0v0.26.1→v0.27.0v0.26.1→v0.27.0v0.26.1→v0.27.0v0.26.1→v0.27.0v0.28.1→v0.29.1v1.18.6→v1.19.0v0.20.1→v0.21.1v4.26.5→v4.26.6v0.38.0→v0.39.0v0.286.0→v0.287.0v1.81.1→v1.82.0Release Notes
go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)
v0.24.0Compare Source
0.24.0 - 2026-06-29
Full Changelog: go-openapi/jsonpointer@v0.23.2...v0.24.0
17 commits in this release.
Implemented enhancements
Refactor
Documentation
Code quality
Testing
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release
jsonpointer license terms
go-openapi/swag (github.com/go-openapi/swag)
v0.27.0Compare Source
0.27.0 - 2026-06-29
Pools utility module
Full Changelog: go-openapi/swag@v0.26.1...v0.27.0
9 commits in this release.
Implemented enhancements
Documentation
Miscellaneous tasks
Updates
93b1676to2e57e83in the development-dependencies group by @dependabot[bot] in #211 ...People who contributed to this release
swag license terms
Per-module changes
conv (0.27.0)
Miscellaneous tasks
Updates
fileutils (0.27.0)
Updates
jsonname (0.27.0)
Miscellaneous tasks
Updates
jsonutils/adapters/easyjson (0.27.0)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration/benchmarks (0.27.0)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration (0.27.0)
Miscellaneous tasks
Updates
jsonutils/fixtures_test (0.27.0)
Updates
jsonutils (0.27.0)
Miscellaneous tasks
Updates
loading (0.27.0)
Miscellaneous tasks
Updates
mangling (0.27.0)
Updates
netutils (0.27.0)
Updates
pools (0.27.0)
Implemented enhancements
stringutils (0.27.0)
Updates
typeutils (0.27.0)
Updates
yamlutils (0.27.0)
Miscellaneous tasks
Updates
google/cel-go (github.com/google/cel-go)
v0.29.1Compare Source
What's Changed
Full Changelog: cel-expr/cel-go@v0.29.0...v0.29.1
v0.29.0Compare Source
What's Changed
New Features
extlibrary for JSON encoding by @rohan-patnaik in cel-expr#1340network.IP/CIDRsupport from Kubernetes by @tdesrosi in cel-expr#1238InterpretableV2by @TristonianJones in cel-expr#1344Bug Fixes
has()unknown propagation during partial evaluation by @0xASTRA in cel-expr#1324indexOfandlastIndexOfby @alhudz in cel-expr#1335int32/uint32map key narrowing inqualifyInternalby @alhudz in cel-expr#1337genRange()inext/liststo prevent OOM by @marwan9696 in cel-expr#1310Cost Tracking
startsWith/endsWithruntime cost agreement with checked cost by @TristonianJones in cel-expr#1351Testing & Tooling
Documentation
klauspost/compress (github.com/klauspost/compress)
v1.19.0Compare Source
What's Changed
decodedLenby @eustas in #1148New Contributors
Full Changelog: klauspost/compress@v1.18.6...v1.19.0
v1.18.7Compare Source
Security release without other changes.
Full Changelog: klauspost/compress@v1.18.6...v1.18.7
prometheus/procfs (github.com/prometheus/procfs)
v0.21.1Compare Source
What's Changed
New Contributors
Full Changelog: prometheus/procfs@v0.21.0...v0.21.1
v0.21.0Compare Source
What's Changed
/sys/class/mei/mei0by @micgor32 in #792New Contributors
Full Changelog: prometheus/procfs@v0.20.1...v0.21.0
shirou/gopsutil (github.com/shirou/gopsutil/v4)
v4.26.6Compare Source
What's Changed
cpu
disk
mem
sensor
New Contributors
Full Changelog: shirou/gopsutil@v4.26.5...v4.26.6
googleapis/google-api-go-client (google.golang.org/api)
v0.287.0Compare Source
Features
grpc/grpc-go (google.golang.org/grpc)
v1.82.0: Release 1.82.0Compare Source
Behavior Changes
GRPC_GO_EXPERIMENTAL_DISABLE_STRICT_PATH_CHECKINGenvironment varibale. Strict incoming RPC path validation (which has been the default sincev1.79.3) can no longer be disabled. (#9112)16MBto8KB. This may be enabled by settingGRPC_GO_EXPERIMENTAL_ENABLE_8KB_DEFAULT_HEADER_LIST_SIZE=true. This will be enabled by default in a subsequent release. (#9019)GRPC_GO_EXPERIMENTAL_CASE_SENSITIVE_BALANCER_REGISTRIES=false(and file an issue) to revert to case-insensitive behavior. (#9017)New Features
NewContextWithLabelCallback, to register a callback that is invoked when telemetry labels are added. (#8877)GRPC_GO_SERVER_GOROUTINE_LABELSthat controls settingruntime/pprof.Labelson goroutines spawned by the server. SetGRPC_GO_SERVER_GOROUTINE_LABELS=grpc.method=trueto add thegrpc.methodlabel on goroutines spawned to handle incoming requests. (#9082)Bug Fixes
gzipCompressor (used via the deprecatedWithCompressordial option), enforce theMaxRecvMsgSizelimit on the decompressed message buffer, preventing excessive memory allocation from highly compressed payloads. (#9114)grpc.previous-rpc-attempts, at the call level and not the attempt level. (#8923)Close()is always called on readers returned fromCompressor.Decompressif possible. (#9135)LastMessageSentTimestampandLastMessageReceivedTimestampfields inSocketMetricsto ensure they contain correct timestamp values. (#9109)Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.