NO-ISSUE: Bump golang.org/x/text from 0.40.0 to 0.41.0

[dependabot]

Bumps golang.org/x/text from 0.40.0 to 0.41.0.

Commits

• acdba66 go.mod: update golang.org/x dependencies
• 02aa981 secure/precis: fix short destination buffer handling in Nickname profile
• See full diff in compare view

Summary by CodeRabbit

• Chores
  • Updated an underlying language-support component to improve compatibility and maintenance.

[openshift-merge-bot]

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

[openshift-ci-robot]

@dependabot[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

Bumps golang.org/x/text from 0.38.0 to 0.41.0.

Commits

• acdba66 go.mod: update golang.org/x dependencies
• 02aa981 secure/precis: fix short destination buffer handling in Nickname profile
• 724af9c go.mod: update golang.org/x dependencies
• bf5b9d6 internal/export/idna: always treat Punycode encoding pure ASCII as an error
• b326f3d go.mod: update golang.org/x dependencies
• 5ae8e57 unicode/norm: avoid infinite loop on invalid input
• 0dc94a2 all: fix some comments
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: c0579a6c-0119-4969-b5c5-8321be3d3f52

📥 Commits

Reviewing files that changed from the base of the PR and between 3c3dfed and 054f382.

⛔ Files ignored due to path filters (2)

• go.sum is excluded by !**/*.sum
• vendor/modules.txt is excluded by !**/vendor/**, !vendor/**

📒 Files selected for processing (1)

• go.mod

Included review availability: Your plan provides up to 12 included reviews per hour; 11 remain after this review.

---

Walkthrough

The pull request updates the direct golang.org/x/text dependency from v0.40.0 to v0.41.0.

Changes

Dependency update

Layer / File(s)	Summary
Update text dependency go.mod	The direct golang.org/x/text requirement changes from v0.40.0 to v0.41.0.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 054f3

This updates a Go dependency and its vendored metadata without any identified merge-blocking risk; it is merge-ready after normal checks and review.

Suggested reviewers: ankitathomas, rashmigottipati, grokspawn

🚥 Pre-merge checks | ✅ 15

✅ Passed checks (15 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly and concisely identifies the dependency update from golang.org/x/text 0.40.0 to 0.41.0.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	PASS. The pull request changes only go.mod, go.sum, and vendor/modules.txt to update golang.org/x/text from v0.40.0 to v0.41.0. No test files or test declarations changed. Therefore, the p…
Test Structure And Quality	✅ Passed	PASS: The pull request changes only go.mod, go.sum, and vendor/modules.txt to update golang.org/x/text from v0.40.0 to v0.41.0. It changes no Ginkgo test code, test setup, cleanup, waits, …
Microshift Test Compatibility	✅ Passed	PASS: The pull request changes only go.mod, go.sum, and vendor/modules.txt to update golang.org/x/text from v0.40.0 to v0.41.0. No Ginkgo e2e test files or test declarations were added, so…
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PASS: The pull request adds no Ginkgo e2e tests and changes no Go files. The diff only updates golang.org/x/text metadata in go.mod, go.sum, and vendor/modules.txt. Therefore, the SNO compatibility ch…
Topology-Aware Scheduling Compatibility	✅ Passed	PASS. The pull request changes only dependency metadata: go.mod, go.sum, and vendor/modules.txt. The diff contains no deployment manifests, operator code, controllers, or scheduling configuratio…
Ote Binary Stdout Contract	✅ Passed	PASS. The commit changes only dependency metadata: go.mod, go.sum, and vendor/modules.txt. It changes no Go source files. The vendored golang.org/x/text source tree is identical to the parent …
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PASS: The pull request changes only dependency metadata in go.mod, go.sum, and vendor/modules.txt. No Ginkgo e2e tests or other test files were added, and the diff contains no IPv4 assumptions o…
No-Weak-Crypto	✅ Passed	PASS. The PR changes only go.mod, go.sum, and vendor/modules.txt; it changes no Go source or vendored implementation files. The application uses golang.org/x/text/cases and language, and the…
Container-Privileges	✅ Passed	PASS. The pull request changes only Go dependency metadata: go.mod, go.sum, and vendor/modules.txt. It does not change a container image, Kubernetes manifest, or deployment configuration. The re…
No-Sensitive-Data-In-Logs	✅ Passed	PASS. The pull request changes only the x/text version, checksums, and vendor module metadata. It adds no logging code and no sensitive-data fields. Vendored x/text source files are unchanged, and the…

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Stable And Deterministic Test Names

Explanation

PASS. The pull request changes only go.mod, go.sum, and vendor/modules.txt to update golang.org/x/text from v0.40.0 to v0.41.0. No test files or test declarations changed. Therefore, the pull request introduces no unstable or overly-specific test names.

Full details: Test Structure And Quality

Explanation

PASS: The pull request changes only go.mod, go.sum, and vendor/modules.txt to update golang.org/x/text from v0.40.0 to v0.41.0. It changes no Ginkgo test code, test setup, cleanup, waits, or assertions. Therefore, it introduces none of the listed test-quality failures.

Full details: Microshift Test Compatibility

Explanation

PASS: The pull request changes only go.mod, go.sum, and vendor/modules.txt to update golang.org/x/text from v0.40.0 to v0.41.0. No Ginkgo e2e test files or test declarations were added, so the MicroShift API compatibility check does not apply.

Full details: Single Node Openshift (Sno) Test Compatibility

Explanation

PASS: The pull request adds no Ginkgo e2e tests and changes no Go files. The diff only updates golang.org/x/text metadata in go.mod, go.sum, and vendor/modules.txt. Therefore, the SNO compatibility check is not applicable.

Full details: Topology-Aware Scheduling Compatibility

Explanation

PASS. The pull request changes only dependency metadata: go.mod, go.sum, and vendor/modules.txt. The diff contains no deployment manifests, operator code, controllers, or scheduling configuration. It introduces no topology-related scheduling constraint.

Full details: Ote Binary Stdout Contract

Explanation

PASS. The commit changes only dependency metadata: go.mod, go.sum, and vendor/modules.txt. It changes no Go source files. The vendored golang.org/x/text source tree is identical to the parent commit, so the dependency bump introduces no process-level stdout write. Existing fmt.Println calls in cmd/cluster-olm-operator/main.go are unchanged and therefore are not caused by this pull request.

Full details: Ipv6 And Disconnected Network Test Compatibility

Explanation

PASS: The pull request changes only dependency metadata in go.mod, go.sum, and vendor/modules.txt. No Ginkgo e2e tests or other test files were added, and the diff contains no IPv4 assumptions or external connectivity requirements.

Full details: No-Weak-Crypto

Explanation

PASS. The PR changes only go.mod, go.sum, and vendor/modules.txt; it changes no Go source or vendored implementation files. The application uses golang.org/x/text/cases and language, and the vendored x/text code has no weak-crypto or crypto imports. The cached x/text v0.41.0 secure/precis nickname fix uses Unicode and transform logic only. Its Compare method compares normalized strings with bytes.Equal, not secrets or tokens. Existing MD5, SHA1, DES, and Blowfish references in other vendored dependencies are unchanged and are not caused by this PR.

Full details: Container-Privileges

Explanation

PASS. The pull request changes only Go dependency metadata: go.mod, go.sum, and vendor/modules.txt. It does not change a container image, Kubernetes manifest, or deployment configuration. The repository deployment manifest sets runAsNonRoot: true, allowPrivilegeEscalation: false, and drops all capabilities. No changed line introduces privileged: true, host namespace use, SYS_ADMIN, root execution, or allowPrivilegeEscalation: true.

Full details: No-Sensitive-Data-In-Logs

Explanation

PASS. The pull request changes only the x/text version, checksums, and vendor module metadata. It adds no logging code and no sensitive-data fields. Vendored x/text source files are unchanged, and the application uses x/text only for English title casing in pkg/controller/builder.go. No explicit sensitive-data-in-logs condition is introduced.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/golang.org/x/text-0.41.0

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[tmshort]

/ok-to-test

[tmshort]

/approve

[rashmigottipati]

/lgtm

[openshift-merge-bot]

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test openshift-e2e-aws
/test openshift-e2e-aws-customnoupgrade
/test openshift-e2e-aws-devpreview
/test openshift-e2e-aws-techpreview

[tmshort]

/retest

[tmshort]

/retest

[tmshort]

/lgtm

[openshift-merge-bot]

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test openshift-e2e-aws
/test openshift-e2e-aws-customnoupgrade
/test openshift-e2e-aws-devpreview
/test openshift-e2e-aws-techpreview

[tmshort]

/retest

[tmshort]

/verified by CI

[openshift-ci-robot]

@tmshort: This PR has been marked as verified by CI.

Details

In response to this:

/verified by CI

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[openshift-ci-robot]

@dependabot[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.

---

Bumps golang.org/x/text from 0.40.0 to 0.41.0.

Commits

• acdba66 go.mod: update golang.org/x dependencies
• 02aa981 secure/precis: fix short destination buffer handling in Nickname profile
• See full diff in compare view

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[tmshort]

/lgtm

[openshift-merge-bot]

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test openshift-e2e-aws
/test openshift-e2e-aws-customnoupgrade
/test openshift-e2e-aws-devpreview
/test openshift-e2e-aws-techpreview

[tmshort]

/lgtm

[openshift-merge-bot]

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test openshift-e2e-aws
/test openshift-e2e-aws-customnoupgrade
/test openshift-e2e-aws-devpreview
/test openshift-e2e-aws-techpreview

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dependabot[bot], rashmigottipati, tmshort

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [tmshort]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@dependabot[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.