Skip to content

chore(deps): update go dependencies#684

Open
red-hat-konflux[bot] wants to merge 1 commit into
release-1.4from
konflux/mintmaker/release-1.4/go-deps
Open

chore(deps): update go dependencies#684
red-hat-konflux[bot] wants to merge 1 commit into
release-1.4from
konflux/mintmaker/release-1.4/go-deps

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented May 12, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
cloud.google.com/go/spanner require minor v1.91.0 → v1.92.0
cloud.google.com/go/storage indirect patch v1.62.1 → v1.62.3 v1.63.0
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping indirect minor v0.56.0 → v0.57.0
github.com/apache/beam/sdks/v2 require minor v2.72.0 → v2.74.0
github.com/avast/retry-go/v4 indirect major v4.7.0 → v5.0.0
github.com/cenkalti/backoff/v5 indirect major v5.0.3 → v6.0.1
github.com/cheggaaa/pb/v3 indirect patch v3.1.6 → v3.1.7
github.com/clipperhouse/uax29/v2 indirect minor v2.2.0 → v2.7.0
github.com/felixge/httpsnoop indirect minor v1.0.4 → v1.1.0
github.com/fxamacker/cbor/v2 indirect patch v2.9.1 → v2.9.2
github.com/go-openapi/jsonreference indirect patch v0.21.5 → v0.21.6
github.com/go-openapi/swag indirect patch v0.26.0 → v0.26.1
github.com/go-openapi/swag/cmdutils indirect patch v0.26.0 → v0.26.1
github.com/go-openapi/swag/conv indirect patch v0.26.0 → v0.26.1
github.com/go-openapi/swag/fileutils indirect patch v0.26.0 → v0.26.1
github.com/go-openapi/swag/jsonname indirect patch v0.26.0 → v0.26.1
github.com/go-openapi/swag/jsonutils indirect patch v0.26.0 → v0.26.1
github.com/go-openapi/swag/loading indirect patch v0.26.0 → v0.26.1
github.com/go-openapi/swag/mangling indirect patch v0.26.0 → v0.26.1
github.com/go-openapi/swag/netutils indirect patch v0.26.0 → v0.26.1
github.com/go-openapi/swag/stringutils indirect patch v0.26.0 → v0.26.1
github.com/go-openapi/swag/typeutils indirect patch v0.26.0 → v0.26.1
github.com/go-openapi/swag/yamlutils indirect patch v0.26.0 → v0.26.1
github.com/golang-cz/devslog indirect patch v0.0.15 → v0.0.17
github.com/google/go-licenses/v2 require patch v2.0.0-alpha.1 → v2.0.1
github.com/google/pprof indirect digest 92041b7 → 7023385
github.com/googleapis/enterprise-certificate-proxy indirect patch v0.3.15 → v0.3.16 v0.3.17
github.com/grpc-ecosystem/go-grpc-middleware require major v1.4.0 → v2.3.3
github.com/imdario/mergo indirect major v0.3.16 → v1.0.2
github.com/jackc/pgx/v4 indirect major v4.18.3 → v5.10.0
github.com/jackc/pgx/v5 require minor v5.9.2 → v5.10.0
github.com/jhump/protoreflect/v2 indirect patch v2.0.0-beta.1 → v2.0.0-beta.2
github.com/mattn/go-colorable indirect patch v0.1.14 → v0.1.15
github.com/mattn/go-runewidth indirect patch v0.0.23 → v0.0.24
github.com/olekukonko/tablewriter indirect major v0.0.5 → v1.1.4
github.com/onsi/ginkgo indirect major v1.16.5 → v2.32.0
github.com/prometheus/common indirect minor v0.67.5 → v0.69.0
github.com/prometheus/prometheus indirect minor v0.311.3 → v0.312.0
github.com/spiffe/go-spiffe/v2 indirect minor v2.6.0 → v2.8.1
go.etcd.io/bbolt indirect minor v1.4.3 → v1.5.0
go.etcd.io/etcd/api/v3 indirect patch v3.6.10 → v3.6.12
go.etcd.io/etcd/client/pkg/v3 indirect patch v3.6.10 → v3.6.12
go.etcd.io/etcd/client/v3 require patch v3.6.10 → v3.6.12
go.etcd.io/etcd/etcdctl/v3 require patch v3.6.10 → v3.6.12
go.etcd.io/etcd/etcdutl/v3 indirect patch v3.6.10 → v3.6.12
go.etcd.io/etcd/pkg/v3 indirect patch v3.6.10 → v3.6.12
go.etcd.io/etcd/server/v3 require patch v3.6.10 → v3.6.12
go.etcd.io/etcd/tests/v3 indirect patch v3.6.10 → v3.6.12
go.etcd.io/etcd/v3 require patch v3.6.10 → v3.6.12
go.etcd.io/raft/v3 indirect minor v3.6.0 → v3.7.0
go.opentelemetry.io/contrib/detectors/gcp indirect minor v1.43.0 → v1.44.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc indirect minor v0.68.0 → v0.69.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp indirect minor v0.68.0 → v0.69.0
go.opentelemetry.io/otel indirect minor v1.43.0 → v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace indirect minor v1.43.0 → v1.44.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc indirect minor v1.43.0 → v1.44.0
go.opentelemetry.io/otel/metric indirect minor v1.43.0 → v1.44.0
go.opentelemetry.io/otel/sdk indirect minor v1.43.0 → v1.44.0
go.opentelemetry.io/otel/sdk/metric indirect minor v1.43.0 → v1.44.0
go.opentelemetry.io/otel/trace indirect minor v1.43.0 → v1.44.0
go.uber.org/zap indirect minor v1.27.1 → v1.28.0
go.yaml.in/yaml/v2 indirect major v2.4.4 → v3.0.4
golang.org/x/crypto require minor v0.51.0 → v0.53.0
golang.org/x/exp indirect digest 74f9aab → c48552f
golang.org/x/mod indirect minor v0.36.0 → v0.37.0
golang.org/x/net indirect minor v0.54.0 → v0.56.0
golang.org/x/sync require minor v0.20.0 → v0.21.0
golang.org/x/sys require minor v0.44.0 → v0.46.0
golang.org/x/term indirect minor v0.43.0 → v0.44.0
golang.org/x/text indirect minor v0.37.0 → v0.38.0
golang.org/x/tools require minor v0.45.0 → v0.46.0 v0.47.0
google.golang.org/api require minor v0.278.0 → v0.286.0
google.golang.org/genproto require digest 3700d41 → b703f56
google.golang.org/genproto/googleapis/api require digest 3700d41 → b703f56
google.golang.org/genproto/googleapis/rpc require digest 3700d41 → b703f56
google.golang.org/grpc require patch v1.81.0 → v1.81.1
gopkg.in/evanphx/json-patch.v4 indirect major v4.13.0 → v5.9.11
gopkg.in/yaml.v2 require major v2.4.0 → v3.0.1
k8s.io/api require minor v0.35.4 → v0.36.2
k8s.io/apimachinery require minor v0.35.4 → v0.36.2
k8s.io/client-go require minor v0.35.4 → v0.36.2
k8s.io/utils require digest ff6756f → a95e086

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

GoogleCloudPlatform/opentelemetry-operations-go (github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping)

v0.57.0: v1.33.0/v0.57.0

Compare Source

What's Changed
New Contributors

Full Changelog: GoogleCloudPlatform/opentelemetry-operations-go@v0.56.0...v0.57.0

apache/beam (github.com/apache/beam/sdks/v2)

v2.74.0: Beam 2.74.0 release

Compare Source

We are happy to present the new 2.74.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.74.0, check out the detailed release notes.

Highlights

  • Spark 4 runner support for Java SDK (#​38255).
I/Os
  • IcebergIO: support declaring a table's sort order on dynamic table creation via the new sort_fields config (#​38269).
  • IcebergIO: support writing with hash distribution mode, and with autosharding (#​38061).
New Features / Improvements
  • Capability introduces an indicator for aggregations and timers firing during a pipeline drain, allowing users and sinks to recognize and appropriately handle potentially incomplete or partial data (#​36884).
  • Added support for setting disk provisioned IOPS and throughput in Dataflow runner via --diskProvisionedIops and --diskProvisionedThroughputMibps pipeline options (Java/Go/Python) (#​38349).
  • TriggerStateMachineRunner changes from BitSetCoder to SentinelBitSetCoder to
    encode finished bitset. SentinelBitSetCoder and BitSetCoder are state
    compatible. Both coders can decode encoded bytes from the other coder
    (#​38139).
  • (Python) Added type alias for with_exception_handling to be used for typehints. (#​38173).
  • (Java) BatchElements transform for Java SDK (#​38369)
  • Added plugin mechanism to support different Lineage implementations (Java) (#​36790).
  • (Python) Supported Python user type in Beam SQL. For example, SQL statements like SELECT some_field from PCOLLECTION can now operate a PCollection of Beam Row containing pickable Python user type (#​20738).
  • (Python) Introduced beam.coders.registry.register_row as preferred API to register a named tuple or dataclass with a Beam Row. At pipelne runtime, the original type associated with the registered row are preserved across the serialization boundary (#​38108).
Breaking Changes
  • (Python) Made Beartype the default fallback type checking tool. This can be disabled with the --disable_beartype pipeline option. (#​38275)
Deprecations
Bugfixes
  • Fixed BigQueryEnrichmentHandler batch mode dropping earlier requests when multiple requests share the same enrichment key (Python) (#​38035).
  • Added max_batch_duration_secs passthrough support in Python Enrichment BigQuery and CloudSQL handlers so batching duration can be forwarded to BatchElements (#​38243).

According to git shortlog, the following people contributed to the 2.74.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Andrew Crites, Andrew Kabas, Arran Cudbard-Bell, Arun Pandian, Asish Kumar, Bentsi Leviav, Blake Jones, Bruno Volpato, Chris Jordan, Danny McCormick, Deji Ibrahim, Derrick Williams, Elia LIU, Ganesh Sivakumar, Jack McCluskey, Kenneth Knowles, Lalit Yadav, M Junaid Shaukat, Matej Aleksandrov, Prabhnoor Singh, Radek Stankiewicz, Radosław Stankiewicz, Reuven Lax, RuiLong J., Sam Whittle, Shunping Huang, Subramanya V, Tarun Annapareddy, Tobias Kaymak, TongruiLi, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, ZIHAN DAI, apanich, bambadiouf1, chenxuesdu, claudevdm, harshadkhetpal, johnjcasey, parveensania, tianz101

v2.73.0: Beam 2.73.0 release

Compare Source

We are happy to present the new 2.73.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.73.0, check out the detailed release notes.

Highlights

I/Os
  • DebeziumIO (Java): added OffsetRetainer interface and FileSystemOffsetRetainer implementation to persist and restore CDC offsets across pipeline restarts, and exposed withStartOffset / withOffsetRetainer on DebeziumIO.Read and the cross-language ReadBuilder (#​28248).
New Features / Improvements
  • (Python) Added BigQuery CDC streaming source (#​37724)
  • Added ADKAgentModelHandler for running Google Agent Development Kit (ADK) agents (Python) (#​37917).
  • (Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (#​37422).
  • (Python) Added a pipeline option --experiments=pip_no_build_isolation to disable build isolation when installing dependencies in the runtime environment (#​37331).
  • (Go) Added OrderedListState support to the Go SDK stateful DoFn API (#​37629).
  • Added support for large pipeline options via a file (Python) (#​37370).
  • Supported infer schema from dataclass (Python) (#​22085). Default coder for typehint-ed (or set with_output_type) for non-frozen dataclasses changed to RowCoder. To preserve the old behavior (fast primitive coder), explicitly register the type with FastPrimitiveCoder.
  • Updates minimum Go version to 1.26.1 (#​37897).
  • (Python) Added image embedding support in apache_beam.ml.rag package (#​37628).
  • (Python) Added support for Python version 3.14 (#​37247).
Breaking Changes
  • The Python SDK container's boot.go now passes pipeline options through a file instead of the PIPELINE_OPTIONS environment variable. If a user pairs a new Python SDK container with an older SDK version (which does not support the file-based approach), the pipeline options will not be recognized and the pipeline will fail. Users must ensure their SDK and container versions are synchronized (#​37370).
  • Python DoFn.with_exception_handling now respects user DoFn typehints. This can break update compatibility if coders change. It can also break pipeline compilation if existing typehints are incorrect. To update safely sepcify the pipeline option --update_compatibility_version=2.72.0. To fix typehints replace any incorrect typehints that were previously ignored (#​37590)
Bugfixes
  • Fixed ProcessManager not reaping child processes, causing zombie process accumulation on long-running Flink deployments (Java) (#​37930).
Security Fixes

List of Contributors

According to git shortlog, the following people contributed to the 2.73.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Alex Malao, Alexander Nieuwenhuijse, Andres Tiko, Andrew Crites, Arun Pandian, Bentsi Leviav, Bruno Volpato, Chamikara Jayalath, Chandra Kiran Bolla, Danny McCormick, Deji Ibrahim, Derrick Williams, Elia LIU, Esmelealem, Hannes Gustafsson, Jack McCluskey, Joey Tran, Kenneth Knowles, M Junaid Shaukat, Mansi Singh, Matej Aleksandrov, Mathijs Deelen, Mattie Fu, Praneet Nadella, Radek Stankiewicz, Radosław Stankiewicz, Reuven Lax, RuiLong J., S. Veyrié, Sakthivel Subramanian, Sam Whittle, Shubham Thakur, Shunping Huang, Subramanya V, Tarun Annapareddy, Tobias Kaymak, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, ZIHAN DAI, claudevdm, kishorepola, parveensania

avast/retry-go (github.com/avast/retry-go/v4)

v5.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: avast/retry-go@4.7.0...v5.0.0

cenkalti/backoff (github.com/cenkalti/backoff/v5)

v6.0.1

Compare Source

v6.0.0

Compare Source

cheggaaa/pb (github.com/cheggaaa/pb/v3)

v3.1.7

Compare Source

clipperhouse/uax29 (github.com/clipperhouse/uax29/v2)

v2.7.0

Compare Source

v2.6.0

Compare Source

v2.5.0

Compare Source

What's Changed

Breaking change

The returned iterator type from FromString() and FromBytes() is now a pointer. This will not present a problem if you are just using it in the typical way, which is assigning to a local variable and iterating.

If you are embedding this iterator into another object, and therefore declaring its type, this change might break your compilation. You’ll need to change to a pointer type. Apologies if so — this seems like a small enough change that a v3 would be a bit much.

New Contributors

Full Changelog: clipperhouse/uax29@v2.4.0...v2.5.0

v2.4.0

Compare Source

Adds Unicode 16 support

What's Changed

Full Changelog: clipperhouse/uax29@v2.3.0...v2.4.0

v2.3.1

Compare Source

v2.3.0

Compare Source

felixge/httpsnoop (github.com/felixge/httpsnoop)

v1.1.0

Compare Source

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.2

Compare Source

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed
  • Reject encoding indefinite-length map with odd item count by @​fxamacker in #​764
  • Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @​fxamacker in #​765
  • Make TagSet.Remove a no-op when contentType is nil by @​fxamacker in #​766
  • Refactor indefinite-length encoding and improve chunk validation during encoding by @​fxamacker in #​767
  • Add more tests, fix a nit in unreachable panic message, update docs & ci by @​fxamacker in #​768
CI / GitHub Actions and Docs
🔎 Details...

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.6

Compare Source

0.21.6 - 2026-05-31

Full Changelog: go-openapi/jsonreference@v0.21.5...v0.21.6

21 commits in this release.

Documentation
Code quality
Miscellaneous tasks
Updates
People who contributed to this release

jsonreference license terms

License

go-openapi/swag (github.com/go-openapi/swag)

v0.26.1

Compare Source

0.26.1 - 2026-06-07

Full Changelog: go-openapi/swag@v0.26.0...v0.26.1

12 commits in this release.

Implemented enhancements
  • feat(loading): sandbox local loading with WithRoot (GHSA-v2xp-g8xf-22pf) by @​fredbi in #​203 ...
  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...
Documentation
Miscellaneous tasks
Security
Updates
People who contributed to this release

swag license terms

License

Per-module changes

conv (0.26.1)

Miscellaneous tasks
Updates

fileutils (0.26.1)

Updates

jsonname (0.26.1)

Updates

jsonutils/adapters/easyjson (0.26.1)

Miscellaneous tasks
Updates

jsonutils/adapters/testintegration/benchmarks (0.26.1)

Miscellaneous tasks
Updates

jsonutils/adapters/testintegration (0.26.1)

Miscellaneous tasks
Updates

jsonutils/fixtures_test (0.26.1)

Updates

jsonutils (0.26.1)

Miscellaneous tasks
Updates

loading (0.26.1)

Implemented enhancements
  • feat(loading): sandbox local loading with WithRoot (GHSA-v2xp-g8xf-22pf) by @​fredbi in #​203 ...
Miscellaneous tasks
Security
  • doc(loading): document security implications of using the loader by [

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch from 962162f to 2efd0c6 Compare May 13, 2026 02:57
@red-hat-konflux

red-hat-konflux Bot commented May 13, 2026 •
edited
Loading

Copy link
Copy Markdown
Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 3 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.9 -> 1.26.0
google.golang.org/genproto v0.0.0-20260511170946-3700d4141b60 -> v0.0.0-20260519071638-aa98bba5eb94
google.golang.org/genproto/googleapis/api v0.0.0-20260511170946-3700d4141b60 -> v0.0.0-20260526163538-3dc84a4a5aaa
google.golang.org/genproto/googleapis/rpc v0.0.0-20260511170946-3700d4141b60 -> v0.0.0-20260610212136-7ab31c22f7ad

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 17 times, most recently from 68fd81e to 30b0338 Compare May 22, 2026 06:26
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 10 times, most recently from 01893b3 to 3f52370 Compare May 28, 2026 02:54
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 15 times, most recently from a5cc312 to e38fdd2 Compare June 5, 2026 14:22
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 9 times, most recently from 611e3e9 to 096b61e Compare June 20, 2026 02:37
@red-hat-konflux

red-hat-konflux Bot commented Jun 20, 2026

Copy link
Copy Markdown
Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: github.com/imdario/mergo@v1.0.2: parsing go.mod:
	module declares its path as: dario.cat/mergo
	        but was required as: github.com/imdario/mergo

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 4 times, most recently from 97e43a3 to df4bcda Compare June 20, 2026 18:26
@red-hat-konflux
chore(deps): update go dependencies
a0bcfa8 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants