[release-v1.16][gomod]: Bump the minor group across 1 directory with 25 updates by dependabot[bot] · Pull Request #1822 · openshift-knative/eventing

dependabot · 2026-03-16T11:36:05Z

Bumps the minor group with 9 updates in the / directory:

Package	From	To
github.com/cert-manager/cert-manager	`1.13.3`	`1.20.0`
github.com/cloudevents/conformance	`0.2.0`	`0.4.1`
github.com/cloudevents/sdk-go/observability/opencensus/v2	`2.15.2`	`2.16.2`
github.com/cloudevents/sdk-go/sql/v2	`2.0.0-20240712172937-3ce6b2f1f011`	`2.16.2`
github.com/coreos/go-oidc/v3	`3.9.0`	`3.17.0`
github.com/eclipse/paho.golang	`0.12.0`	`0.23.0`
github.com/pelletier/go-toml/v2	`2.0.5`	`2.2.4`
github.com/rickb777/date	`1.13.0`	`1.22.0`
go.uber.org/atomic	`1.10.0`	`1.11.0`

Updates github.com/cert-manager/cert-manager from 1.13.3 to 1.20.0

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.20.0

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.20.0 adds alpha support for the new ListenerSet resource, adds support for Azure Private DNS; parentRefs are no longer required when using ACME with Gateway API, and OtherNames was promoted to Beta.

Changes by Kind

Feature

Added a set of flags to permit setting NetworkPolicy across all deployed containers. Remove redundant global IP ranges from example policies. (#8370, @jcpunk)

Added selectable fields to custom resource definitions for .spec.issuerRef.{group, kind, name} (#8256, @tareksha)

Added support for specifying imagePullSecrets in the startupapicheck-job Helm template to enable pulling images from private registries. (#8186, @mathieu-clnk)

Added 'extraContainers' helm chart value, allowing the deployment of arbitrary sidecar containers within the cert-manager operator pod. This can be used to support, for e.g., AWS IAM Roles Anywhere for Route53 DNS01 verification. (#8355, @dancmeyers)

Added parentRef override annotations on the Certificate resource. (#8518, @hjoshi123)

Added support for azure private zones for dns01 issuer. (#8494, @hjoshi123)

Added support for configuring PEM decoding size limits, allowing operators to handle larger certificates and keys. (#7642, @robertlestak)

Added support for unhealthyPodEvictionPolicy in PodDisruptionBudget (#7728, @jcpunk)

For Venafi provider, read venafi.cert-manager.io/custom-fields annotation on Issuer/ClusterIssuer and use it as base with override/append capabilities on Certificate level. (#8301, @k0da)

Improve error message when CA issuers are misconfigured to use a clashing secret name (#8374, @majiayu000)

Introduce a new Ingress annotation acme.cert-manager.io/http01-ingress-ingressclassname to override http01.ingress.ingressClassName field in HTTP-01 challenge solvers. (#8244, @lunarwhite)

Update global.nodeSelector to helm chart to perform a merge and allow for a single nodeSelector to be set across all services. (#8195, @StingRayZA)

Vault issuers will now include the Vault server address as one of the default audiences on generated service account tokens. (#8228, @terinjokes)

Added experimental XListenerSets feature gate (#8394, @hjoshi123)

Documentation

Add GWAPI documentation to NOTES.TXT in helm chart (#8353, @jaxels10)

Bug or Regression

Adds logs for cases when acme server returns us a fatal error in the order controller (#8199, @Peac36)

Fixed an issue where kind or group in the issuerRef of a Certificate was omitted, upgrading to 1.19.x incorrectly caused the certificate to be renewed (#8160, @inteon)

Changes to the Duration and RenewBefore annotations on ingress and gateway-api resources will now trigger certificate updates. (#8232, @eleanor-merry)

Fix an issue where ACME challenge TXT records are not cleaned up when there are many resource records in CloudDNS. (#8456, @tkna)

Fix unregulated retries with the DigitalOcean DNS-01 solver Add full detailed DNS-01 errors to the events attached to the Challenge, for easier debugging (#8221, @wallrj-cyberark)

Fixed an infinite re-issuance loop that could occur when an issuer returns a certificate with a public key that doesn't match the CSR. The issuing controller now validates the certificate before storing it and fails with backoff on mismatch. (#8403, @calm329)

Fixed an issue where HTTP-01 challenges failed when the Host header contains an IPv6 address. This means that users can now issue IP address certificates for IPv6 address subjects. (#8424, @SlashNephy)

Fixed the HTTP-01 Gateway solver creating invalid HTTPRoutes by not setting spec.hostnames when the challenge DNSName is an IP address. (#8443, @alviss7)

Revert API defaults for issuer reference kind and group introduced in 0.19.0 (#8173, @erikgb)

Security (MODERATE): Fix a potential panic in the cert-manager controller when a DNS response in an unexpected order was cached. If an attacker was able to modify DNS responses (or if they controlled the DNS server) it was possible to cause denial of service for the cert-manager controller. (#8469, @SgtCoDFish)

Update Go to v1.25.5 to fix CVE-2025-61727 and CVE-2025-61729 (#8290, @octo-sts[bot])

When Prometheus monitoring is enabled, the metrics label is now set to the intended value of cert-manager. Previously, it was set depending on various factors (namespace cert-manager is installed in and/or Helm release name). (#8162, @LiquidPL)

Other (Cleanup or Flake)

Promoted the OtherNames feature to Beta and enabled it by default (#8288, @wallrj-cyberark)

Promoting XListenerSets feature gate to ListenerSets (#8501, @hjoshi123)

Rebranding of the Venafi Issuer to CyberArk (#8215, @iossifbenbassat123)

Switched to SSA for challenge finalizer updates (#8519, @inteon)

... (truncated)

Commits

0d2f215 Merge pull request #8599 from hjoshi123/fix/cherry-pick-1.26
992544c cherry picking go 1.26.1 onto release-1.20
0ef9dd0 Merge pull request #8598 from cert-manager-bot/cherry-pick-8581-to-release-1.20
700e95a Merge pull request #8597 from cert-manager-bot/cherry-pick-8595-to-release-1.20
0ee2440 Merge pull request #8596 from cert-manager-bot/cherry-pick-8590-to-release-1.20
fbf8b99 fix(deps): update module k8s.io/klog/v2 to v2.140.0
58d6b5a disable metrics server for test webhook
04762ea configure contextual test logger for controller-runtime webhook only
fb10af9 Merge pull request #8576 from maelvls/release-1.20
f27af7b [release-1.20] update trivy to fix scans
Additional commits viewable in compare view

Updates github.com/cloudevents/conformance from 0.2.0 to 0.4.1

Release notes

Sourced from github.com/cloudevents/conformance's releases.

Improved diff

Found a bug where I expected to be able to say --match foo,bar but cobra does not split on comma, adding the ability to split on comma for the match flag.

Improved matching and searching while diffing a to b events.

Adding Diff command

diff compares two yaml event files.
cloudevents diff ./want.yaml ./got.yaml
want.yaml could have fewer fields specified to allow for fuzzy matching.

Example, if you only wanted to compare on type and ignore additional fields:
$ cat ./want.yaml
ContextAttributes:
  type: com.example.someevent
$ cat ./got.yaml
Mode: structured
ContextAttributes:
  specversion: 1.0
  type: com.example.someevent
  time: 2018-04-05T03:56:24Z
  id: 4321-4321-4321-a
  source: /mycontext/subcontext
  Extensions:
    comexampleextension1 : "value"
    comexampleextension2 : |
      {"othervalue": 5}
TransportExtensions:
  user-agent: "foo"
Data: |
  {"world":"hello"}
$ cloudevents diff ./want.yaml ./got.yaml --match type --ignore-additions
This validates that at least one event of type com.example.someevent is present in the got.yaml file.

Adding history to listen command to cli.

New feature: return back the events that listen has collected via a GET on /history .

Start the listener:
$ cloudevents listen
</tr></table> 

... (truncated)

Commits

7a8ee0a Merge pull request #27 from n3wscott/ce-diff
c4e318c better findby, split on comma, add find tracker
3302931 Update README.md
4e495fa Merge pull request #25 from n3wscott/ce-diff
312bd2c add diff to readme
981936c fix data race
9ef4496 update actions to use go 1.16 and 1.17
cd561e9 add cloudevent diff command
08d5cb1 Merge pull request #24 from n3wscott/history-2
fbd3e52 adding non-consuming buffer option, and a blocking wait call on history
Additional commits viewable in compare view

Updates github.com/cloudevents/sdk-go/observability/opencensus/v2 from 2.15.2 to 2.16.2

Release notes

Sourced from github.com/cloudevents/sdk-go/observability/opencensus/v2's releases.

Release v2.16.2

No release notes provided.

Release v2.16.1

CloudEvents SDK Go v2.16.1

🐛 Bug Fixes and Improvements

⚡ NATS JetStream Enhancement: Made send subject optional via context by @kmpm in cloudevents/sdk-go#1143

Added WithSubject function to override the default subject when sending messages

Added comprehensive tests and updated samples

Non-breaking enhancement that adds flexibility for NATS users

📝 CloudEvents JSON Handling Fixes by @alank-ps:

WriteJson Fix in cloudevents/sdk-go#1162: Fixed WriteJson to properly handle data as JSON when dataContentType is application/cloudevents+json or batch

ConsumeData Fix in cloudevents/sdk-go#1164: Fixed consumeData functions to properly recognize structured mode JSON content types

Improves compatibility with the CloudEvents specification

🔧 CI/Test Improvements: Fix failing CI tests by @embano1 in cloudevents/sdk-go#1156

🔄 Maintenance and Dependency Updates

🛠️ Dependency Management Overhaul by @embano1 in cloudevents/sdk-go#1145

Added script (hack/update-deps.sh) to update Go dependencies across all modules

Replaced Dependabot with custom script for better dependency management

Removed stale and broken OpenTelemetry samples

📦 Key Dependency Updates:

github.com/google/go-cmp: v0.6.0 → v0.7.0

golang.org/x/sync: v0.12.0 → v0.13.0

github.com/nats-io/nats.go: v1.37.0 → v1.41.2

github.com/IBM/sarama: v1.40.1 → v1.45.1

github.com/docker/docker: v20.10.17 → v27.1.1

go.opentelemetry.io/otel: v1.18.0 → v1.35.0

🐹 Go version: Updated from 1.22 to 1.23.0 (toolchain 1.23.8)

🚨 Breaking Changes

None. All updates are either backward-compatible improvements, bug fixes, or internal refactors.

👥 New Contributors

@github-actions made their first contribution in cloudevents/sdk-go#1147

@kmpm made their first contribution in cloudevents/sdk-go#1143

@alank-ps made their first contribution in cloudevents/sdk-go#1162

📋 What's Changed

Dependency Management Improvements by @embano1 in cloudevents/sdk-go#1145

chore(deps): Bump the go_modules group across 2 directories with 2 updates by @dependabot in cloudevents/sdk-go#1146

chore: update dependencies by @github-actions in cloudevents/sdk-go#1147

chore: update dependencies by @github-actions in cloudevents/sdk-go#1148

chore: update dependencies by @github-actions in cloudevents/sdk-go#1149

... (truncated)

Commits

af3e859 Merge pull request #1184 from cloudevents/dependabot/github_actions/actions/s...
bf5b8a6 chore(deps): Bump actions/setup-go from 5.5.0 to 6.0.0
945d930 Merge pull request #1180 from philicious/refactor-pubsubv2
35623f2 chore: Replace deprecated grpc.Dial calls
f0bd406 fix: Properly test that supplied ReceiveSettings are being used
ae89eba Refactor pubsub protocol to use new upstream v2 library
34f7f6f Merge pull request #1183 from embano1/go-version
cafbb12 chore: update go version in workflows
0a1147c Merge pull request #1182 from cloudevents/automated-dependency-updates
835c486 chore: update dependencies
Additional commits viewable in compare view

Updates github.com/cloudevents/sdk-go/sql/v2 from 2.0.0-20240712172937-3ce6b2f1f011 to 2.16.2

Release notes

Sourced from github.com/cloudevents/sdk-go/sql/v2's releases.

Release v2.16.2

No release notes provided.

Release v2.16.1

CloudEvents SDK Go v2.16.1

🐛 Bug Fixes and Improvements

⚡ NATS JetStream Enhancement: Made send subject optional via context by @kmpm in cloudevents/sdk-go#1143

Added WithSubject function to override the default subject when sending messages

Added comprehensive tests and updated samples

Non-breaking enhancement that adds flexibility for NATS users

📝 CloudEvents JSON Handling Fixes by @alank-ps:

WriteJson Fix in cloudevents/sdk-go#1162: Fixed WriteJson to properly handle data as JSON when dataContentType is application/cloudevents+json or batch

ConsumeData Fix in cloudevents/sdk-go#1164: Fixed consumeData functions to properly recognize structured mode JSON content types

Improves compatibility with the CloudEvents specification

🔧 CI/Test Improvements: Fix failing CI tests by @embano1 in cloudevents/sdk-go#1156

🔄 Maintenance and Dependency Updates

🛠️ Dependency Management Overhaul by @embano1 in cloudevents/sdk-go#1145

Added script (hack/update-deps.sh) to update Go dependencies across all modules

Replaced Dependabot with custom script for better dependency management

Removed stale and broken OpenTelemetry samples

📦 Key Dependency Updates:

github.com/google/go-cmp: v0.6.0 → v0.7.0

golang.org/x/sync: v0.12.0 → v0.13.0

github.com/nats-io/nats.go: v1.37.0 → v1.41.2

github.com/IBM/sarama: v1.40.1 → v1.45.1

github.com/docker/docker: v20.10.17 → v27.1.1

go.opentelemetry.io/otel: v1.18.0 → v1.35.0

🐹 Go version: Updated from 1.22 to 1.23.0 (toolchain 1.23.8)

🚨 Breaking Changes

None. All updates are either backward-compatible improvements, bug fixes, or internal refactors.

👥 New Contributors

@github-actions made their first contribution in cloudevents/sdk-go#1147

@kmpm made their first contribution in cloudevents/sdk-go#1143

@alank-ps made their first contribution in cloudevents/sdk-go#1162

📋 What's Changed

Dependency Management Improvements by @embano1 in cloudevents/sdk-go#1145

chore(deps): Bump the go_modules group across 2 directories with 2 updates by @dependabot in cloudevents/sdk-go#1146

chore: update dependencies by @github-actions in cloudevents/sdk-go#1147

chore: update dependencies by @github-actions in cloudevents/sdk-go#1148

chore: update dependencies by @github-actions in cloudevents/sdk-go#1149

... (truncated)

Commits

See full diff in compare view

Updates github.com/cloudevents/sdk-go/v2 from 2.15.2 to 2.16.2

Release notes

Sourced from github.com/cloudevents/sdk-go/v2's releases.

Release v2.16.2

No release notes provided.

Release v2.16.1

CloudEvents SDK Go v2.16.1

🐛 Bug Fixes and Improvements

⚡ NATS JetStream Enhancement: Made send subject optional via context by @kmpm in cloudevents/sdk-go#1143

Added WithSubject function to override the default subject when sending messages

Added comprehensive tests and updated samples

Non-breaking enhancement that adds flexibility for NATS users

📝 CloudEvents JSON Handling Fixes by @alank-ps:

WriteJson Fix in cloudevents/sdk-go#1162: Fixed WriteJson to properly handle data as JSON when dataContentType is application/cloudevents+json or batch

ConsumeData Fix in cloudevents/sdk-go#1164: Fixed consumeData functions to properly recognize structured mode JSON content types

Improves compatibility with the CloudEvents specification

🔧 CI/Test Improvements: Fix failing CI tests by @embano1 in cloudevents/sdk-go#1156

🔄 Maintenance and Dependency Updates

🛠️ Dependency Management Overhaul by @embano1 in cloudevents/sdk-go#1145

Added script (hack/update-deps.sh) to update Go dependencies across all modules

Replaced Dependabot with custom script for better dependency management

Removed stale and broken OpenTelemetry samples

📦 Key Dependency Updates:

github.com/google/go-cmp: v0.6.0 → v0.7.0

golang.org/x/sync: v0.12.0 → v0.13.0

github.com/nats-io/nats.go: v1.37.0 → v1.41.2

github.com/IBM/sarama: v1.40.1 → v1.45.1

github.com/docker/docker: v20.10.17 → v27.1.1

go.opentelemetry.io/otel: v1.18.0 → v1.35.0

🐹 Go version: Updated from 1.22 to 1.23.0 (toolchain 1.23.8)

🚨 Breaking Changes

None. All updates are either backward-compatible improvements, bug fixes, or internal refactors.

👥 New Contributors

@github-actions made their first contribution in cloudevents/sdk-go#1147

@kmpm made their first contribution in cloudevents/sdk-go#1143

@alank-ps made their first contribution in cloudevents/sdk-go#1162

📋 What's Changed

Dependency Management Improvements by @embano1 in cloudevents/sdk-go#1145

chore(deps): Bump the go_modules group across 2 directories with 2 updates by @dependabot in cloudevents/sdk-go#1146

chore: update dependencies by @github-actions in cloudevents/sdk-go#1147

chore: update dependencies by @github-actions in cloudevents/sdk-go#1148

chore: update dependencies by @github-actions in cloudevents/sdk-go#1149

... (truncated)

Commits

af3e859 Merge pull request #1184 from cloudevents/dependabot/github_actions/actions/s...
bf5b8a6 chore(deps): Bump actions/setup-go from 5.5.0 to 6.0.0
945d930 Merge pull request #1180 from philicious/refactor-pubsubv2
35623f2 chore: Replace deprecated grpc.Dial calls
f0bd406 fix: Properly test that supplied ReceiveSettings are being used
ae89eba Refactor pubsub protocol to use new upstream v2 library
34f7f6f Merge pull request #1183 from embano1/go-version
cafbb12 chore: update go version in workflows
0a1147c Merge pull request #1182 from cloudevents/automated-dependency-updates
835c486 chore: update dependencies
Additional commits viewable in compare view

Updates github.com/coreos/go-oidc/v3 from 3.9.0 to 3.17.0

Release notes

Sourced from github.com/coreos/go-oidc/v3's releases.

v3.17.0

What's Changed

oidc: improve error message for mismatched issuer URLs by @ericchiang in coreos/go-oidc#469

Full Changelog: coreos/go-oidc@v3.16.0...v3.17.0

v3.16.0

What's Changed

refactor: Remove unused time injection from RemoteKeySet by @ponimas in coreos/go-oidc#466

bump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net dependency by @wardviaene in coreos/go-oidc#467

New Contributors

@wardviaene made their first contribution in coreos/go-oidc#467

Full Changelog: coreos/go-oidc@v3.15.0...v3.16.0

v3.15.0

What's Changed

oidc: verify the ID Token's signature before processing claims by @ericchiang in coreos/go-oidc#464

Full Changelog: coreos/go-oidc@v3.14.1...v3.15.0

v3.14.1

What's Changed

oidctest: fix import by @ericchiang in coreos/go-oidc#457

Full Changelog: coreos/go-oidc@v3.14.0...v3.14.1

v3.14.0

What's Changed

oidc/oidctest: add new package by @ericchiang in coreos/go-oidc#400

Full Changelog: coreos/go-oidc@v3.13.0...v3.14.0

v3.13.0

What's Changed

*: bump dependency versions by @ericchiang in coreos/go-oidc#453

Full Changelog: coreos/go-oidc@v3.12.0...v3.13.0

v3.12.0

What's Changed

oidc: add JSON tags to ProviderConfig by @ericchiang in coreos/go-oidc#446

... (truncated)

Commits

35b8e03 oidc: improve error message for mismatched issuer URLs
e958473 bump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net d...
69b1670 refactor: Remove unused time injection from RemoteKeySet
8d1e57e oidc: verify the ID Token's signature before processing claims
a7c457e oidctest: fix import
aba1ce2 oidc/oidctest: add new package
60d436e *: bump dependency versions
4b5f82d oidc: add JSON tags to ProviderConfig
0fe9887 oidc: ignore cancellation of remote key set context
308e778 chore(deps): bump dependencies to address security issues
Additional commits viewable in compare view

Updates github.com/eclipse/paho.golang from 0.12.0 to 0.23.0

Release notes

Sourced from github.com/eclipse/paho.golang's releases.

0.23

The is a minor release that incorporates fixes/improvements made over the last 10 months. Dependencies have been updated, and Go version 1.24 is now required (matching the "Go release policy").

I don't believe there are any breaking changes. Keepalive behaviour has been changed so that a PING is sent unless a packet has been sent AND received within the keepalive period (to address potential issues where a client is sending constantly, but never receives anything).

Note that one of the fixes addresses a potential security issue where data from one field (e.g. topic, properties) may leak into another (e.g. message body). This issue was raised against paho.mqtt.golang (issue 730) but the same code existed in this library. Thanks to Paul Gerste (Sonar) for reporting the original issue.

Thanks to those who have provided fixes/enhancements included in this release!.

What's Changed

Comments and unused consts by @MattBrittan in eclipse-paho/paho.golang#275

Topicaliases extension - Fix the topic disappear when registering a new topic alias in the TAHandler by @shirou in eclipse-paho/paho.golang#272

Topicaliases extension - Add ResetAll() in topicaliases to prevent error on reconnection by @shirou in eclipse-paho/paho.golang#277

Add OnConnectionDown callback in autopaho by @thedevop in eclipse-paho/paho.golang#281

Update Go version and dependencies by @MattBrittan in eclipse-paho/paho.golang#290

Testing - Potential data race in TestServer by @MattBrittan in eclipse-paho/paho.golang#291

Ping when no packets received within keep alive period by @MattBrittan in eclipse-paho/paho.golang#292

Prevent blocking in responseHandler() after context cancel by @tinytux in eclipse-paho/paho.golang#293

add constants for RetainHandling subscribe option by @agebhar1 in eclipse-paho/paho.golang#299

build_rpc_cm: update Makefile path issue by @hiproz in eclipse-paho/paho.golang#296

Example - fix autopaho Docker example by @agebhar1 in eclipse-paho/paho.golang#300

Fix potential for packet corruption with very long strings/binary data by @MattBrittan in eclipse-paho/paho.golang#305

fix folder existence check in autopaho file queue by @alpine-ibex in eclipse-paho/paho.golang#309

Filestore should attempt to create folder if it does not exist by @MattBrittan in eclipse-paho/paho.golang#306

drop redundant stat before MkdirAll by @alpine-ibex in eclipse-paho/paho.golang#310

Fix AuthResponse success value being set to true on error by @nickajacks1 in eclipse-paho/paho.golang#315

Fix OnServerDisconnect not being called when packet has no properties by @nickajacks1 in eclipse-paho/paho.golang#312

New Contributors

@shirou made their first contribution in eclipse-paho/paho.golang#272

@thedevop made their first contribution in eclipse-paho/paho.golang#281

@tinytux made their first contribution in eclipse-paho/paho.golang#293

@agebhar1 made their first contribution in eclipse-paho/paho.golang#299

@hiproz made their first contribution in eclipse-paho/paho.golang#296

@alpine-ibex made their first contribution in eclipse-paho/paho.golang#309

@nickajacks1 made their first contribution in eclipse-paho/paho.golang#315

Full Changelog: eclipse-paho/paho.golang@v0.22.0...v0.23.0

0.22

The is a minor release that incorporates fixes/improvements made over the last 9 months.

There is one breaking change, autopaho.ConnectPacketBuilder may now return an error (this is useful when the packet cannot be built, for example when auth details are temporarily unavailable).

Thanks to those who have provided fixes/enhanceents included in this release!.

What's Changed

fix: respect context cancellation while using the provided Dialer by @Lorderot in eclipse-paho/paho.golang#248

PublishWithOptions QoS0 return empty PublishRespoonse by @wic006 in eclipse-paho/paho.golang#255

Improve default ping handler by @Lorderot in eclipse-paho/paho.golang#257

... (truncated)

Commits

1aa0396 Dependency and go version update.
b45d25d DISCONNECT packet with missing property length prevented OnServerDisconnect call
38d3585 Fix AuthResponse success value being set to true on error
6f75464 Fix AuthResponse success value being set to true on error
022e144 Fix OnServerDisconnect not being called when packet has no properties
ab72a18 Simplify Directory creation
ec5d947 drop redundant stat before MkdirAll
16106c7 Filestore should attempt to create folder if it does not exist
3b79283 autopaho file queue - fix folder creation
9135b2a fix folder existence check in autopaho file queue
Additional commits viewable in compare view

Updates github.com/google/go-cmp from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/google/go-cmp's releases.

v0.7.0

New API:

(#367) Support compare functions with SortSlices and SortMaps

Panic messaging:

(#370) Detect proto.Message types when failing to export a field

Commits

9b12f36 Detect proto.Message types when failing to export a field (#370)
4dd3d63 fix: type 'aribica' => 'arabica' (#368)
391980c Support compare functions with SortSlices and SortMaps (#367)
See full diff in compare view

Updates github.com/gorilla/websocket from 1.5.3 to 1.5.4-0.20250319132907-e064f32e3674

Commits

See full diff in compare view

Updates github.com/pelletier/go-toml/v2 from 2.0.5 to 2.2.4

Release notes

Sourced from github.com/pelletier/go-toml/v2's releases.

v2.2.4

Highlight

In this release, @mikattack removed the last dependency of go-toml! 🎉 (pelletier/go-toml#981)

What's Changed

Documentation

Fix typos in comments and tests by @alexandear in pelletier/go-toml#972

Other changes

Replace stretchr/testify with an internal test suite by @mikattack in pelletier/go-toml#981

Update to go 1.24 by @pelletier in pelletier/go-toml#982

New Contributors

@alexandear made their first contribution in pelletier/go-toml#972

@mikattack made their first contribution in pelletier/go-toml#981

Full Changelog: pelletier/go-toml@v2.2.3...v2.2.4

v2.2.3

What's Changed

What's new

Allow int, uint, and float as map keys by @daniel-weisse in pelletier/go-toml#958

Performance

Remove unstable.Parser allocation when creating Decoder by @mvdan in pelletier/go-toml#953

Fixed bugs

Fix reflect.Pointer backward compatibility by @xxxVitoxxx in pelletier/go-toml#956

Documentation

Fix readme typo by @testwill in pelletier/go-toml#951

Other changes

go.mod: bump minimum language version to 1.21 by @mvdan in pelletier/go-toml#949

Bump testing to go 1.23 by @pelletier in pelletier/go-toml#961

New Contributors

@mvdan made their first contribution in pelletier/go-toml#949

@testwill made their first contribution in pelletier/go-toml#951

@xxxVitoxxx made their first contribution in pelletier/go-toml#956

Full Changelog: pelletier/go-toml@v2.2.2...v2.2.3

v2.2.2

What's Changed

Fixed bugs

Fix race condition when tracking keys that have already been seen by @sysulq in pelletier/go-toml#947

... (truncated)

Commits

ee07c92 Update to go 1.24 (#982)
014204c Replace stretchr/testify with an internal test suite (#981)
923b2ab Fix typos in comments and tests (#972)
af236b6 Fix goreleaser deprecated attribute name (#964)
b730b2b Bump testing to go 1.23 (#961)
a437caa Fix reflect.Pointer backward compatibility (#956)
be6c57b Fix readme typo(#951)
d553047 Allow int, uint, and floats as map keys (#958)
0977c05 Update goreleaser action to v6 and set goreleaser binary to v2 (#959)
bccd6e4 allocate unstable.Parser as part of decoder (#953)
Additional commits viewable in compare view

Updates github.com/rickb777/date from 1.13.0 to 1.22.0

Release notes

Sourced from github.com/rickb777/date's releases.

v1.22.0

No release notes provided.

v1 ParseISO tweaked

ParseISO now accepts date-time inputs, ignoring the time field.

period.AddTo revised to reduce the impact of subtle behaviours of time.AddDate

Minor bugfix

resolves issue #19

updates dependencies

v1.20.2 updated dependencies

No release notes provided.

v1.20.0

No release notes provided.

v1.19.1

No release notes provided.

Bufix: MarshalJSON

Date.MarshalJSON incorrectly wrote the zero value as a blank string, which might raise difficulties at the receiver.

Code that relied on this incorrect behaviour might see this as a breaking change.

v1.18

No release notes provided.

updated dependencies

No release notes provided.

Bug fixed: integer overflow on 32bit architecture

No release notes provided.

v1.14.1

No release notes provided.

Period revised

Improvements to Period, including new methods and improved tests.

Commits

cedbf7d v1 is now marked as deprecated; updated dependencies
57313ad updated dependencies (v1 branch)
b7388c8 Minor test correction
db08fef Date ParseISO & AutoParse now accept a date-time input (time is ignored)
9a7458e updated dependencies
02b87e1 another parse test case
ff580cf more tests added to period.Between

…25 updates Bumps the minor group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.13.3` | `1.20.0` | | [github.com/cloudevents/conformance](https://github.com/cloudevents/conformance) | `0.2.0` | `0.4.1` | | [github.com/cloudevents/sdk-go/observability/opencensus/v2](https://github.com/cloudevents/sdk-go) | `2.15.2` | `2.16.2` | | [github.com/cloudevents/sdk-go/sql/v2](https://github.com/cloudevents/sdk-go) | `2.0.0-20240712172937-3ce6b2f1f011` | `2.16.2` | | [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.9.0` | `3.17.0` | | [github.com/eclipse/paho.golang](https://github.com/eclipse/paho.golang) | `0.12.0` | `0.23.0` | | [github.com/pelletier/go-toml/v2](https://github.com/pelletier/go-toml) | `2.0.5` | `2.2.4` | | [github.com/rickb777/date](https://github.com/rickb777/date) | `1.13.0` | `1.22.0` | | [go.uber.org/atomic](https://github.com/uber-go/atomic) | `1.10.0` | `1.11.0` | Updates `github.com/cert-manager/cert-manager` from 1.13.3 to 1.20.0 - [Release notes](https://github.com/cert-manager/cert-manager/releases) - [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md) - [Commits](cert-manager/cert-manager@v1.13.3...v1.20.0) Updates `github.com/cloudevents/conformance` from 0.2.0 to 0.4.1 - [Release notes](https://github.com/cloudevents/conformance/releases) - [Commits](cloudevents/conformance@v0.2.0...v0.4.1) Updates `github.com/cloudevents/sdk-go/observability/opencensus/v2` from 2.15.2 to 2.16.2 - [Release notes](https://github.com/cloudevents/sdk-go/releases) - [Commits](cloudevents/sdk-go@v2.15.2...v2.16.2) Updates `github.com/cloudevents/sdk-go/sql/v2` from 2.0.0-20240712172937-3ce6b2f1f011 to 2.16.2 - [Release notes](https://github.com/cloudevents/sdk-go/releases) - [Commits](https://github.com/cloudevents/sdk-go/commits/v2.16.2) Updates `github.com/cloudevents/sdk-go/v2` from 2.15.2 to 2.16.2 - [Release notes](https://github.com/cloudevents/sdk-go/releases) - [Commits](cloudevents/sdk-go@v2.15.2...v2.16.2) Updates `github.com/coreos/go-oidc/v3` from 3.9.0 to 3.17.0 - [Release notes](https://github.com/coreos/go-oidc/releases) - [Commits](coreos/go-oidc@v3.9.0...v3.17.0) Updates `github.com/eclipse/paho.golang` from 0.12.0 to 0.23.0 - [Release notes](https://github.com/eclipse/paho.golang/releases) - [Commits](eclipse-paho/paho.golang@v0.12.0...v0.23.0) Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](google/go-cmp@v0.6.0...v0.7.0) Updates `github.com/gorilla/websocket` from 1.5.3 to 1.5.4-0.20250319132907-e064f32e3674 - [Release notes](https://github.com/gorilla/websocket/releases) - [Commits](https://github.com/gorilla/websocket/commits) Updates `github.com/pelletier/go-toml/v2` from 2.0.5 to 2.2.4 - [Release notes](https://github.com/pelletier/go-toml/releases) - [Commits](pelletier/go-toml@v2.0.5...v2.2.4) Updates `github.com/rickb777/date` from 1.13.0 to 1.22.0 - [Release notes](https://github.com/rickb777/date/releases) - [Commits](rickb777/date@v1.13.0...v1.22.0) Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.10.0...v1.11.1) Updates `go.opentelemetry.io/otel` from 1.34.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.34.0...v1.40.0) Updates `go.opentelemetry.io/otel/trace` from 1.34.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.34.0...v1.40.0) Updates `go.uber.org/atomic` from 1.10.0 to 1.11.0 - [Release notes](https://github.com/uber-go/atomic/releases) - [Changelog](https://github.com/uber-go/atomic/blob/master/CHANGELOG.md) - [Commits](uber-go/atomic@v1.10.0...v1.11.0) Updates `go.uber.org/zap` from 1.27.0 to 1.27.1 - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](uber-go/zap@v1.27.0...v1.27.1) Updates `golang.org/x/net` from 0.35.0 to 0.51.0 - [Commits](golang/net@v0.35.0...v0.51.0) Updates `golang.org/x/sync` from 0.11.0 to 0.19.0 - [Commits](golang/sync@v0.11.0...v0.19.0) Updates `k8s.io/api` from 0.30.14 to 0.35.2 - [Commits](kubernetes/api@v0.30.14...v0.35.2) Updates `k8s.io/apiextensions-apiserver` from 0.30.14 to 0.35.2 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.30.14...v0.35.2) Updates `k8s.io/apimachinery` from 0.30.14 to 0.35.2 - [Commits](kubernetes/apimachinery@v0.30.14...v0.35.2) Updates `k8s.io/apiserver` from 0.30.14 to 0.35.2 - [Commits](kubernetes/apiserver@v0.30.14...v0.35.2) Updates `k8s.io/client-go` from 0.30.14 to 0.35.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.30.14...v0.35.2) Updates `k8s.io/utils` from 0.0.0-20240711033017-18e509b52bc8 to 0.0.0-20260210185600-b8788abfbbc2 - [Commits](https://github.com/kubernetes/utils/commits) Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.6.0 - [Release notes](https://github.com/kubernetes-sigs/yaml/releases) - [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md) - [Commits](kubernetes-sigs/yaml@v1.4.0...v1.6.0) --- updated-dependencies: - dependency-name: github.com/cert-manager/cert-manager dependency-version: 1.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: github.com/cloudevents/conformance dependency-version: 0.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: github.com/cloudevents/sdk-go/observability/opencensus/v2 dependency-version: 2.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: github.com/cloudevents/sdk-go/sql/v2 dependency-version: 2.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: github.com/cloudevents/sdk-go/v2 dependency-version: 2.16.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: github.com/coreos/go-oidc/v3 dependency-version: 3.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: github.com/eclipse/paho.golang dependency-version: 0.23.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: github.com/google/go-cmp dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: github.com/gorilla/websocket dependency-version: 1.5.4-0.20250319132907-e064f32e3674 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: github.com/pelletier/go-toml/v2 dependency-version: 2.2.4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: github.com/rickb777/date dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: github.com/stretchr/testify dependency-version: 1.11.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: go.opentelemetry.io/otel dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: go.uber.org/atomic dependency-version: 1.11.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: go.uber.org/zap dependency-version: 1.27.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: golang.org/x/net dependency-version: 0.51.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: golang.org/x/sync dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/api dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/apimachinery dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/apiserver dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/client-go dependency-version: 0.35.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor - dependency-name: k8s.io/utils dependency-version: 0.0.0-20260210185600-b8788abfbbc2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: minor - dependency-name: sigs.k8s.io/yaml dependency-version: 1.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: minor ... Signed-off-by: dependabot[bot] <support@github.com>

openshift-ci · 2026-03-16T11:36:19Z

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift-knative member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

openshift-ci · 2026-03-16T11:36:38Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign aliok for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 16, 2026

openshift-ci bot added the needs-ok-to-test label Mar 16, 2026

openshift-ci bot requested review from creydr and matzew March 16, 2026 11:36

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

[release-v1.16][gomod]: Bump the minor group across 1 directory with 25 updates#1822

[release-v1.16][gomod]: Bump the minor group across 1 directory with 25 updates#1822
dependabot[bot] wants to merge 1 commit intorelease-v1.16from
dependabot/go_modules/release-v1.16/minor-98b07ed864

dependabot bot commented on behalf of github Mar 16, 2026 •

edited

Loading

Uh oh!

openshift-ci bot commented Mar 16, 2026

Uh oh!

openshift-ci bot commented Mar 16, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github Mar 16, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.20.0

Changes by Kind

Feature

Documentation

Bug or Regression

Other (Cleanup or Flake)

Improved diff

Adding Diff command

Adding history to listen command to cli.

Release v2.16.2

Release v2.16.1

CloudEvents SDK Go v2.16.1

🐛 Bug Fixes and Improvements

🔄 Maintenance and Dependency Updates

🚨 Breaking Changes

👥 New Contributors

📋 What's Changed

Release v2.16.2

Release v2.16.1

CloudEvents SDK Go v2.16.1

🐛 Bug Fixes and Improvements

🔄 Maintenance and Dependency Updates

🚨 Breaking Changes

👥 New Contributors

📋 What's Changed

Release v2.16.2

Release v2.16.1

CloudEvents SDK Go v2.16.1

🐛 Bug Fixes and Improvements

🔄 Maintenance and Dependency Updates

🚨 Breaking Changes

👥 New Contributors

📋 What's Changed

v3.17.0

What's Changed

v3.16.0

What's Changed

New Contributors

v3.15.0

What's Changed

v3.14.1

What's Changed

v3.14.0

What's Changed

v3.13.0

What's Changed

v3.12.0

What's Changed

0.23

What's Changed

New Contributors

0.22

What's Changed

v0.7.0

v2.2.4

Highlight

What's Changed

Documentation

Other changes

New Contributors

v2.2.3

What's Changed

What's new

Performance

Fixed bugs

Documentation

Other changes

New Contributors

v2.2.2

What's Changed

Fixed bugs

v1.22.0

v1 ParseISO tweaked

Minor bugfix

v1.20.2 updated dependencies

v1.20.0

v1.19.1

dependabot bot commented on behalf of github Mar 16, 2026 •

edited

Loading