Skip to content

fix(deps): update gomod dependencies - #293

Open
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies
Open

fix(deps): update gomod dependencies#293
red-hat-konflux-kflux-prd-rh03[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies

Conversation

@red-hat-konflux-kflux-prd-rh03

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot commented Jun 16, 2026 •
edited
Loading

Copy link
Copy Markdown

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
github.com/fxamacker/cbor/v2 v2.9.2 → v2.9.3 age confidence indirect patch
github.com/go-logr/logr v1.4.3 → v1.4.4 age confidence require patch
github.com/go-openapi/swag/cmdutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/conv v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/fileutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/jsonutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/loading v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/mangling v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/netutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/stringutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/go-openapi/swag/typeutils v0.27.0 → v0.29.1 age confidence indirect minor
github.com/mattn/go-isatty v0.0.22 → v0.0.24 age confidence indirect patch
github.com/onsi/ginkgo/v2 v2.32.0 → v2.32.1 age confidence require patch
github.com/onsi/gomega v1.42.1 → v1.43.0 age confidence require minor
github.com/openshift/api 41627d8 → c7d4aa1 replace digest
github.com/openshift/api 5c75e62 → c7d4aa1 require digest
github.com/openshift/cluster-api-provider-aws b85a18c → e345a83 replace digest
github.com/openshift/cluster-api-provider-azure v0.0.0-20210209143830-3442c7a36c1e → v0.1.0-alpha.3 age confidence replace minor
github.com/openshift/osde2e-common 751e0d2 → dcf3e27 age confidence require digest
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.67.1 → v0.93.1 age confidence require minor
github.com/prometheus/client_golang v1.23.2 → v1.24.1 age confidence require minor
github.com/prometheus/common v0.69.0 → v0.70.1 age confidence indirect minor v0.71.0
github.com/prometheus/procfs v0.21.1 → v0.22.0 age confidence indirect minor
go.yaml.in/yaml/v3 v3.0.4 → v3.0.5 age confidence indirect patch
golang.org/x/mod v0.37.0 → v0.40.0 age confidence indirect minor
golang.org/x/net v0.56.0 → v0.58.0 age confidence indirect minor
golang.org/x/sync v0.21.0 → v0.22.0 age confidence indirect minor
golang.org/x/sys v0.46.0 → v0.47.0 age confidence indirect minor
golang.org/x/term v0.44.0 → v0.45.0 age confidence indirect minor
golang.org/x/text v0.39.0 → v0.41.0 age confidence indirect minor
golang.org/x/tools v0.47.0 → v0.49.0 age confidence indirect minor
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af → v1.36.12 age confidence indirect patch
k8s.io/api v0.35.2 → v0.37.0 age confidence replace minor
k8s.io/api v0.36.0 → v0.37.0 age confidence require minor
k8s.io/apiextensions-apiserver v0.36.0 → v0.37.0 age confidence indirect minor
k8s.io/apimachinery v0.35.2 → v0.37.0 age confidence replace minor
k8s.io/apimachinery v0.36.0 → v0.37.0 age confidence require minor
k8s.io/client-go v0.35.2 → v0.37.0 age confidence replace minor
k8s.io/client-go v0.36.0 → v0.37.0 age confidence require minor
k8s.io/code-generator v0.36.0 → v0.37.0 age confidence indirect minor
k8s.io/kube-openapi 8949caa → be32def age confidence require digest
k8s.io/utils 28399d8 → cf1189d age confidence indirect digest
sigs.k8s.io/controller-runtime v0.23.3 → v0.24.1 age confidence require minor
sigs.k8s.io/structured-merge-diff/v6 v6.4.0 → v6.4.2 age confidence indirect patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.3

Compare Source

This release fixes a potential panic when decoding into a time.Time from a CBOR byte string, map, or array under certain conditions.

Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with timeTag = DecTagRequired.

Upgrading to v2.9.3 is recommended.

The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.

What's Changed

  • Skip data item when decoding to time.Time fails under certain conditions by @​fxamacker in #​803

Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3

go-logr/logr (github.com/go-logr/logr)

v1.4.4

Compare Source

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

go-openapi/swag (github.com/go-openapi/swag/cmdutils)

v0.29.1

Compare Source

0.29.1 - 2026-08-21

Full Changelog: go-openapi/swag@v0.29.0...v0.29.1

4 commits in this release.

Testing
Miscellaneous tasks
Updates
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.29.1)
Miscellaneous tasks
jsonname (0.29.1)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.29.1)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.29.1)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.29.1)
Miscellaneous tasks
jsonutils (0.29.1)
Testing
Miscellaneous tasks
loading (0.29.1)
Miscellaneous tasks
mangling (0.29.1)
Miscellaneous tasks
netutils (0.29.1)
Miscellaneous tasks
pools (0.29.1)
Miscellaneous tasks
stringutils (0.29.1)
Miscellaneous tasks
typeutils (0.29.1)
Miscellaneous tasks
yamlutils (0.29.1)
Miscellaneous tasks

v0.29.0

Compare Source

0.29.0 - 2026-08-19

New fsutils on top of io.FS

Full Changelog: go-openapi/swag@v0.28.0...v0.29.0

10 commits in this release.

Implemented enhancements
Documentation
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.29.0)
Miscellaneous tasks
fileutils (0.29.0)
Implemented enhancements
jsonname (0.29.0)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.29.0)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration/benchmarks (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)
jsonutils/adapters/testintegration (0.29.0)
Miscellaneous tasks
Updates
jsonutils/fixtures_test (0.29.0)
Miscellaneous tasks
Updates
jsonutils (0.29.0)
Miscellaneous tasks
Updates
loading (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)
mangling (0.29.0)
Miscellaneous tasks
netutils (0.29.0)
Miscellaneous tasks
pools (0.29.0)
Miscellaneous tasks
stringutils (0.29.0)
Miscellaneous tasks
typeutils (0.29.0)
Miscellaneous tasks
yamlutils (0.29.0)
Testing
  • test: rename the fixtures directories to testdata by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)

v0.28.0

Compare Source

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

Implemented enhancements
Miscellaneous tasks
Updates
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.28.0)
Implemented enhancements
Miscellaneous tasks
jsonutils/adapters/easyjson (0.28.0)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.28.0)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.28.0)
Miscellaneous tasks
jsonutils (0.28.0)
Miscellaneous tasks
loading (0.28.0)
Miscellaneous tasks
yamlutils (0.28.0)
Miscellaneous tasks

v0.27.3

Compare Source

0.27.3 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.2...v0.27.3

2 commits in this release.

Fixed bugs
Miscellaneous tasks
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.27.3)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.27.3)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.27.3)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.27.3)
Miscellaneous tasks
jsonutils (0.27.3)
Miscellaneous tasks
loading (0.27.3)
Fixed bugs
Miscellaneous tasks
yamlutils (0.27.3)
Miscellaneous tasks

v0.27.2

Compare Source

0.27.2 - 2026-07-20

Full Changelog: go-openapi/swag@v0.27.1...v0.27.2

2 commits in this release.

Fixed bugs
Miscellaneous tasks
People who contributed to this release

swag license terms

License

Per-module changes
conv (0.27.2)
Miscellaneous tasks
jsonutils/adapters/easyjson (0.27.2)
Miscellaneous tasks
jsonutils/adapters/testintegration/benchmarks (0.27.2)
Miscellaneous tasks
jsonutils/adapters/testintegration (0.27.2)
Miscellaneous tasks
jsonutils (0.27.2)
Miscellaneous tasks
loading (0.27.2)
Fixed bugs
Miscellaneous tasks
yamlutils (0.27.2)
Miscellaneous tasks

v0.27.1

Compare Source

0.27.1 - 2026-07-19

Full Changelog: go-openapi/swag@v0.27.0...v0.27.1

12 commits in this release.

Fixed bugs
  • fix(yamlutils): bound YAML anchor/alias expansion and detect cycles by @​fredbi ...
  • fix(yamlutils): bound recursion depth in YAML<->JSON transforms by @​fredbi ...
  • fix(jsonutils): bound recursion depth in ordered-JSON marshal/unmarshal by @​fredbi ...
Refactor
  • refact(adapters): refactored pools and options in json adapters. by @​fredbi ...
Documentation
Performance
Miscellaneous tasks
Updates
Other (technical)
  • chore: fixed go.mod replace by @​fredbi in #​222 ...
  • Perf/adapter options by [@​fredbi](http

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • Between 02:00 AM and 04:59 AM, Monday through Friday (* 2-4 * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Jun 16, 2026
@red-hat-konflux-kflux-prd-rh03

red-hat-konflux-kflux-prd-rh03 Bot commented Jun 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: errors parsing go.mod:
go.mod:121:2: replace github.com/openshift/cluster-api-provider-aws: version "v0.2.1-0.20260812173731-e345a83efda5" invalid: go.mod has post-v0 module path "sigs.k8s.io/cluster-api-provider-aws/v2" at revision e345a83efda5

@red-hat-konflux-kflux-prd-rh03 red-hat-konflux-kflux-prd-rh03 Bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Jun 16, 2026
@openshift-ci
openshift-ci Bot requested review from rbhilare and vaidehi411 June 16, 2026 04:09
@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Jun 16, 2026
@openshift-ci

openshift-ci Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-merge-bot

openshift-merge-bot Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD e61a51b and 2 for PR HEAD 84d25d5 in total

@openshift-ci

openshift-ci Bot commented Jun 16, 2026

Copy link
Copy Markdown
Contributor

@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-binary-build-success 84d25d5 link true /test e2e-binary-build-success
ci/prow/lint 84d25d5 link true /test lint
ci/prow/validate 84d25d5 link true /test validate
ci/prow/coverage 84d25d5 link true /test coverage
ci/prow/images 84d25d5 link true /test images
ci/prow/test 84d25d5 link true /test test

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 84d25d5 to 7121f06 Compare June 17, 2026 04:17
@openshift-ci openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jun 17, 2026
@openshift-ci

openshift-ci Bot commented Jun 17, 2026

Copy link
Copy Markdown
Contributor

New changes are detected. LGTM label has been removed.

@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 5 times, most recently from 727793d to e264433 Compare June 24, 2026 04:06
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 6 times, most recently from fc15498 to 71c7a23 Compare July 2, 2026 04:07
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 5 times, most recently from b8fb173 to bc65554 Compare July 9, 2026 04:05
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 3 times, most recently from 5b81fc2 to 0759048 Compare August 21, 2026 04:04
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch 4 times, most recently from 311023f to ccf6ad3 Compare August 27, 2026 04:04
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 27, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:05 AM UTC · Completed 4:17 AM UTC

Commit: ccf6ad3 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.53

@fullsend-ai-review

fullsend-ai-review Bot commented Aug 27, 2026 •
edited
Loading

Copy link
Copy Markdown

Review

Findings

High

  • [missing lockfile update] go.mod — go.sum is not included in the PR despite 43 dependency version changes in go.mod. The existing go.sum on the base branch contains checksums for old versions (e.g., k8s.io/api v0.35.2, sigs.k8s.io/controller-runtime v0.23.3) and has no entries for the new versions (k8s.io/api v0.37.0, sigs.k8s.io/controller-runtime v0.24.1, etc.). Without an updated go.sum, go mod verify will fail and the project will not build, as Go requires matching checksums in go.sum for all dependencies referenced in go.mod.
    Remediation: Run go mod tidy to regenerate go.sum with correct checksums for all updated dependencies, then include the updated go.sum in this PR.

Medium

  • [invalid go module version format] go.mod:121 — The replace directive for sigs.k8s.io/cluster-api-provider-aws uses a bare commit hash (e345a83efda5) instead of the required Go pseudo-version format. The Go module system requires replace target versions to be valid semver or pseudo-version strings; a bare commit hash will cause go mod tidy and go build to fail with a parsing error.
    Remediation: Run go mod tidy to resolve the bare commit hash to the correct pseudo-version format (e.g., v0.2.1-0.20YYMMDDHHMMSS-e345a83efda5).

Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR
Previous run

Review

Findings

High

  • [missing lockfile update] go.mod — go.sum is not updated despite 43 dependency version changes in go.mod. The go.sum file still contains checksums for old versions (e.g., k8s.io/api v0.35.2, k8s.io/apimachinery v0.35.2, k8s.io/client-go v0.35.2, sigs.k8s.io/controller-runtime v0.23.3) and has no entries for the v0.37.0 k8s dependencies or v0.24.1 controller-runtime. This will cause go mod verify and builds to fail because the checksums for the new dependency versions are missing from go.sum.
    Remediation: Run go mod tidy to regenerate go.sum with correct checksums for all updated dependencies, then include the updated go.sum in this PR.

Medium

  • [invalid go module version format] go.mod:122 — The replace directive for sigs.k8s.io/cluster-api-provider-aws uses a bare commit hash (e345a83efda5) instead of the required Go pseudo-version format. The previous value was a valid pseudo-version (v0.2.1-0.20201125052318-b85a18cbf338). Go modules require replace targets in go.mod to use valid semver or pseudo-version strings; a bare commit hash will cause parsing errors during go mod tidy and go build.
    Remediation: Run go mod tidy to resolve the commit hash to the correct pseudo-version format (e.g., v0.2.1-0.20YYMMDDHHMMSS-e345a83efda5).

Next steps:

  • /fs-fix — agent addresses review findings automatically
  • /fs-fix <your instruction> — agent fixes with your specific guidance
  • Push commits directly — review re-runs automatically on push
  • /fs-fix-stop — disable automatic fix runs for this PR
Previous run (2)

Looks good to me

Previous run (3)

Review

Findings

Medium

  • [invalid replace directive syntax] go.mod:121 — The replace directive sigs.k8s.io/cluster-api-provider-aws => github.com/openshift/cluster-api-provider-aws e345a83efda5 uses a bare commit hash without a proper pseudo-version prefix. The canonical go.mod format requires either a semantic version tag or a pseudo-version (e.g., v0.0.0-YYYYMMDDHHMMSS-hash). The previous value was a proper pseudo-version (v0.2.1-0.20201125052318-b85a18cbf338). Consider running go mod tidy to verify this resolves to a proper pseudo-version, or specify the full pseudo-version manually.

Low

  • [major version bump risk] go.mod:13 — The prometheus-operator/prometheus-operator/pkg/apis/monitoring dependency jumps from v0.67.1 to v0.93.1 (26 minor versions). As a v0.x package, breaking API changes are possible without semver guarantees. Worth confirming CI passes with the updated monitoring API types.

@fullsend-ai-review fullsend-ai-review Bot added the requires-manual-review Review requires human judgment label Aug 27, 2026
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from ccf6ad3 to 7ed31ec Compare August 28, 2026 04:04
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 28, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Review · ❌ Terminated · Started 4:06 AM UTC · Ended 4:20 AM UTC

Commit: 7ed31ec · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge and removed requires-manual-review Review requires human judgment labels Aug 28, 2026
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 28, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:06 AM UTC · Completed 4:19 AM UTC

Commit: 7ed31ec · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.18

This was referenced Aug 30, 2026
Open
Open
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 7ed31ec to 50f647f Compare August 31, 2026 04:06
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 31, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Review · ❌ Terminated · Started 4:07 AM UTC · Ended 4:19 AM UTC

Commit: 50f647f · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review fullsend-ai-review Bot removed the ready-for-merge All reviewers approved — ready to merge label Aug 31, 2026
@fullsend-ai-review

fullsend-ai-review Bot commented Aug 31, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:07 AM UTC · Completed 4:19 AM UTC

Commit: 50f647f · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.68

@red-hat-konflux-kflux-prd-rh03
fix(deps): update gomod dependencies
efe408d 
Signed-off-by: red-hat-konflux-kflux-prd-rh03 <206760901+red-hat-konflux-kflux-prd-rh03[bot]@users.noreply.github.com>
@red-hat-konflux-kflux-prd-rh03
red-hat-konflux-kflux-prd-rh03 Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 50f647f to efe408d Compare September 1, 2026 04:04
@fullsend-ai-review

fullsend-ai-review Bot commented Sep 1, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 4:05 AM UTC · Completed 4:21 AM UTC

Commit: efe408d · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.51

@openshift-ci

openshift-ci Bot commented Sep 1, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@fullsend-ai-review fullsend-ai-review Bot added the risk/low PR risk: low label Sep 1, 2026
@fullsend-ai-review

fullsend-ai-review Bot commented Sep 1, 2026

Copy link
Copy Markdown

Risk Assessment: low (1/5)

Details

Low-risk automated bot dependency update touching only go.mod with a small 84-line change, no protected paths, no security-sensitive files, and no recent churn or regressions on the changed file.

fullsend-ai-review[bot]
fullsend-ai-review Bot suggested changes Sep 1, 2026
View reviewed changes

@fullsend-ai-review fullsend-ai-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the review comment for full details.

Comment thread go.mod
k8s.io/api => k8s.io/api v0.37.0
k8s.io/apimachinery => k8s.io/apimachinery v0.37.0
k8s.io/client-go => k8s.io/client-go v0.37.0
sigs.k8s.io/cluster-api-provider-aws => github.com/openshift/cluster-api-provider-aws e345a83efda5

@fullsend-ai-review fullsend-ai-review Bot Sep 1, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

[medium] invalid go module version format

The replace directive for sigs.k8s.io/cluster-api-provider-aws uses a bare commit hash (e345a83efda5) instead of the required Go pseudo-version format. The Go module system requires replace target versions to be valid semver or pseudo-version strings; a bare commit hash will cause go mod tidy and go build to fail with a parsing error.

Suggested fix: Run go mod tidy to resolve the bare commit hash to the correct pseudo-version format (e.g., v0.2.1-0.20YYMMDDHHMMSS-e345a83efda5).

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@rbhilare rbhilare Awaiting requested review from rbhilare
@vaidehi411 vaidehi411 Awaiting requested review from vaidehi411
1 more reviewer
@fullsend-ai-review fullsend-ai-review[bot] fullsend-ai-review[bot] requested changes
Reviewers whose approvals may not affect merge requirements

Assignees

No one assigned

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. risk/low PR risk: low

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants