Skip to content

Conversation

@red-hat-konflux
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Nov 6, 2025

This PR contains the following updates:

Package Type Update Change
github.com/containerd/stargz-snapshotter/estargz indirect minor v0.16.3 -> v0.18.1
github.com/docker/docker-credential-helpers indirect patch v0.9.3 -> v0.9.4
github.com/go-logr/logr require patch v1.4.2 -> v1.4.3
github.com/go-openapi/jsonpointer indirect minor v0.21.1 -> v0.22.2
github.com/go-openapi/jsonreference indirect patch v0.21.0 -> v0.21.3
github.com/go-openapi/swag indirect minor v0.23.1 -> v0.25.1
github.com/google/certificate-transparency-go require patch v1.3.1 -> v1.3.2
github.com/google/gnostic-models indirect minor v0.6.9 -> v0.7.0
github.com/google/go-containerregistry require patch v0.20.3 -> v0.20.6
github.com/google/pprof indirect digest c008609 -> 4902fdd
github.com/klauspost/compress indirect patch v1.18.0 -> v1.18.1
github.com/mailru/easyjson indirect patch v0.9.0 -> v0.9.1
github.com/openshift/api require digest 7152b1b -> 6711368
github.com/operator-framework/api require minor v0.31.0 -> v0.36.0
github.com/operator-framework/operator-lib require minor v0.18.0 -> v0.19.0
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring require minor v0.81.0 -> v0.86.2
github.com/prometheus/client_golang indirect minor v1.22.0 -> v1.23.2
github.com/prometheus/common indirect minor v0.63.0 -> v0.67.2
github.com/prometheus/procfs indirect minor v0.16.1 -> v0.19.2
github.com/spf13/pflag indirect patch v1.0.6 -> v1.0.10
github.com/vbatts/tar-split indirect patch v0.12.1 -> v0.12.2
golang.org/x/exp require digest 7e4ce0a -> e25ba8c
golang.org/x/net require minor v0.39.0 -> v0.47.0
golang.org/x/oauth2 indirect minor v0.29.0 -> v0.33.0
golang.org/x/sync indirect minor v0.13.0 -> v0.18.0
golang.org/x/sys indirect minor v0.32.0 -> v0.38.0
golang.org/x/term indirect minor v0.31.0 -> v0.37.0
golang.org/x/text indirect minor v0.24.0 -> v0.31.0
golang.org/x/time indirect minor v0.11.0 -> v0.14.0
golang.org/x/tools indirect minor v0.32.0 -> v0.39.0
google.golang.org/genproto/googleapis/rpc indirect digest 10db94c -> 95abcf5
k8s.io/api require minor v0.32.4 -> v0.34.2
k8s.io/apiextensions-apiserver require minor v0.32.4 -> v0.34.2
k8s.io/apimachinery require minor v0.32.4 -> v0.34.2
k8s.io/client-go require minor v0.32.4 -> v0.34.2
k8s.io/kube-openapi indirect digest c8a335a -> 589584f
k8s.io/utils require digest 0f33e8f -> bc988d5
sigs.k8s.io/controller-runtime require minor v0.20.4 -> v0.22.4
sigs.k8s.io/json indirect digest cfa47c3 -> 2d32026
sigs.k8s.io/yaml require minor v1.4.0 -> v1.6.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

containerd/stargz-snapshotter (github.com/containerd/stargz-snapshotter/estargz)

v0.18.1

Compare Source

Notable Changes

v0.18.0

Compare Source

Notable Changes

v0.17.0

Compare Source

Notable Changes

For other changes, refer to the full diff: containerd/stargz-snapshotter@v0.16.3...v0.17.0

docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)

v0.9.4

Compare Source

What's Changed

  • update to go1.25.1 #​387
  • wincred: fix unsafe uintptr usage to be GC-safe on go1.25 #​386
  • gha: add macos-15-intel, remove macos-13 (deprecated) #​384
  • deb: Dockerfile: update to debian bookworm, ubuntu jammy (22.04) #​385
  • Dockerfile: update xx to v1.7.0 #​383
  • Dockerfile: update golangci-lint to v2.5 #​386
  • Dockerfile: merge build stages #​249
  • build(deps): bump github.com/danieljoos/wincred v1.2.3 #​388
  • build(deps): bump softprops/action-gh-release from 2.2.1 to 2.3.2 #​373
  • build(deps): bump actions/checkout from 4 to 5 #​376
  • build(deps): bump actions/setup-go from 5 to 6 #​377
  • build(deps): bump actions/github-script from 7 to 8 #​378
  • build(deps): bump softprops/action-gh-release from 2.3.2 to 2.3.3 #​379

Full Changelog: docker/docker-credential-helpers@v0.9.3...v0.9.4

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.22.2

Compare Source

0.22.2 - 2025-11-14

Full Changelog: go-openapi/jsonpointer@v0.22.1...v0.22.2

12 commits in this release.


Documentation
Code quality
Testing
Miscellaneous tasks
Security
Updates

People who contributed to this release

jsonpointer license terms

License

v0.22.1

Compare Source

v0.22.0

Compare Source

v0.21.2

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.3

Compare Source

v0.21.2

Compare Source

v0.21.1

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

v0.25.1

Compare Source

v0.25.0

Compare Source

v0.24.1

Compare Source

v0.24.0

Compare Source

google/certificate-transparency-go (github.com/google/certificate-transparency-go)

v1.3.2

Compare Source

Misc
  • [migrillian] remove etcd support in #​1699
  • Bump golangci-lint from 1.55.1 to 1.61.0 (developers should update to this version).
  • Update ctclient tool to support SCT extensions field by @​liweitianux in #​1645
  • Bump go to 1.23
  • [ct_hammer] support HTTPS and Bearer token for Authentication.
  • [preloader] support Bearer token Authentication for non temporal logs.
  • [preloader] support end indexes
  • [CTFE] Short cache max-age when get-entries returns fewer entries than requested by @​robstradling in #​1707
  • [CTFE] Disalllow mismatching signature algorithm identifiers in #​702.
  • [jsonclient] surface HTTP Do and Read errors #​1695 by @​FiloSottile
CTFE Storage Saving: Extra Data Issuance Chain Deduplication
CTFE Rate Limiting Of Non-Fresh Submissions

To protect a log from being flooded with requests for "old" certificates, optional rate limiting for "non-fresh submissions" can be configured by providing the following flags:

  • non_fresh_submission_age
  • non_fresh_submission_burst
  • non_fresh_submission_limit

This can help to ensure that the log maintains its ability to (1) accept "fresh" submissions and (2) distribute all log entries to monitors.

Dependency updates
  • Bump the docker-deps group across 5 directories with 3 updates (#​1705)
  • Bump google.golang.org/grpc from 1.72.1 to 1.72.2 in the all-deps group (#​1704)
  • Bump github.com/go-jose/go-jose/v4 in the go_modules group (#​1700)
  • Bump the all-deps group with 7 updates (#​1701)
  • Bump the all-deps group with 7 updates (#​1693)
  • Bump the docker-deps group across 4 directories with 1 update (#​1694)
  • Bump github/codeql-action from 3.28.13 to 3.28.16 in the all-deps group (#​1692)
  • Bump the all-deps group across 1 directory with 7 updates (#​1688)
  • Bump distroless/base-debian12 (#​1686)
  • Bump golangci/golangci-lint-action from 6.5.1 to 7.0.0 in the all-deps group (#​1685)
  • Bump the all-deps group with 4 updates (#​1681)
  • Bump the all-deps group with 6 updates (#​1683)
  • Bump the docker-deps group across 4 directories with 2 updates (#​1682)
  • Bump github.com/golang-jwt/jwt/v4 in the go_modules group (#​1680)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1676)
  • Bump the all-deps group with 2 updates (#​1677)
  • Bump github/codeql-action from 3.28.10 to 3.28.11 in the all-deps group (#​1670)
  • Bump the all-deps group with 8 updates (#​1672)
  • Bump the docker-deps group across 4 directories with 1 update (#​1671)
  • Bump the docker-deps group across 4 directories with 1 update (#​1668)
  • Bump the all-deps group with 4 updates (#​1666)
  • Bump golangci-lint from 1.55.1 to 1.61.0 (#​1667)
  • Bump the all-deps group with 3 updates (#​1665)
  • Bump github.com/spf13/cobra from 1.8.1 to 1.9.1 in the all-deps group (#​1660)
  • Bump the docker-deps group across 5 directories with 2 updates (#​1661)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1662)
  • Bump the docker-deps group across 4 directories with 1 update (#​1656)
  • Bump the all-deps group with 2 updates (#​1654)
  • Bump the all-deps group with 4 updates (#​1657)
  • Bump github/codeql-action from 3.28.5 to 3.28.8 in the all-deps group (#​1652)
  • Bump github.com/spf13/pflag from 1.0.5 to 1.0.6 in the all-deps group (#​1651)
  • Bump the all-deps group with 2 updates (#​1649)
  • Bump the all-deps group with 5 updates (#​1650)
  • Bump the docker-deps group across 5 directories with 3 updates (#​1648)
  • Bump google.golang.org/protobuf in the all-deps group (#​1647)
  • Bump golangci/golangci-lint-action in the all-deps group (#​1646)
google/gnostic-models (github.com/google/gnostic-models)

v0.7.0

Compare Source

google/go-containerregistry (github.com/google/go-containerregistry)

v0.20.6

Compare Source

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.4...v0.20.6

v0.20.5

Compare Source

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.5

v0.20.4: - Not usable as a go module

Compare Source

🚨 This release was published to the Go module proxy and then re-tagged with a different commit. This means it's not usable as a Go module (#​2107) -- please us v0.20.5 instead.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.4

klauspost/compress (github.com/klauspost/compress)

v1.18.1

Compare Source

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.18.0...v1.18.1

mailru/easyjson (github.com/mailru/easyjson)

v0.9.1

Compare Source

What's Changed

New Contributors

Full Changelog: mailru/easyjson@v0.9.0...v0.9.1

operator-framework/api (github.com/operator-framework/api)

v0.36.0

Compare Source

What's Changed

Full Changelog: operator-framework/api@v0.35.0...v0.36.0

v0.35.0

Compare Source

Notice

This release updates to k8s 1.34

What's Changed

Full Changelog: operator-framework/api@v0.34.0...v0.35.0

v0.34.0

Compare Source

What's Changed

Full Changelog: operator-framework/api@v0.33.0...v0.34.0

v0.33.0

Compare Source

What's Changed

Full Changelog: operator-framework/api@v0.32.0...v0.33.0

v0.32.0

Compare Source

What's Changed

Full Changelog: operator-framework/api@v0.31.0...v0.32.0

operator-framework/operator-lib (github.com/operator-framework/operator-lib)

v0.19.0

Compare Source

What's Changed

Full Changelog: operator-framework/operator-lib@v0.18.0...v0.19.0

prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)

v0.86.2: 0.86.2 / 2025-11-07

Compare Source

  • [CHANGE/BUGFIX] Fix operator's permissions to emit Kubernetes events. #​8077

v0.86.1: 0.86.1 / 2025-10-13

Compare Source

  • [BUGFIX] Fix formatting of Kubernetes events. #​8015

v0.86.0: 0.86.0 / 2025-10-07

Compare Source

[!NOTE]
This release introduces the status subresource (behind the StatusForConfigurationResources feature gate) for ServiceMonitor, PodMonitor, Probe and Scrapeconfig custom resources. It is only supported for Prometheus resources.

[!IMPORTANT]
This release enables automatic UTF-8 character support in label names, metric names and PrometheusRule expressions for Prometheus/PrometheusAgent resources running with version >= 3.0.0.

To preserve backward compatibility, the admission webhook service validates PrometheusRule resources against the legacy Prometheus scheme by default (but it can be changed with the --name-validation-scheme flag).

  • [CHANGE] Remove automatic addition of the metadata-wal-records feature flag for Prometheus versions >= 3.4. #​7893
  • [CHANGE] Add miscellaneous validations to the ScrapeConfig CRD. #​7856 #​7823 #​7835 #​7838 #​7838 ##​7966
  • [CHANGE/FEATURE] Add support for UTF-8 characters to label names and metric names in PrometheusRule resources and relabel configurations. #​7637 #​7985
  • [FEATURE] Add the flag --name-validation-scheme to admission webhook to select between utf8 and legacy validations. #​7985
  • [FEATURE] Add status subresource for ServiceMonitor custom resources (requires the StatusForConfigurationResources feature gate). #​7767 #​7836 #​7827 #​7795
  • [FEATURE] Add status subresource for PodMonitor custom resources (requires the StatusForConfigurationResources feature gate). #​7929 #​7914 #​7936
  • [FEATURE] Add status subresource for ScrapeConfig custom resources (requires the StatusForConfigurationResources feature gate). #​7958 #​7964 #​7969
  • [FEATURE] Add status subresource for Probe custom resources (requires the StatusForConfigurationResources feature gate). #​7933 #​7934 #​7980
  • [FEATURE] Add serviceDiscoveryRole field to ServiceMonitor. #​7982
  • [FEATURE] Add useFIPSSTSEndpoint field to Sigv4 config. #​7987
  • [FEATURE] Add UnderscoreEscapingWithoutSuffixes to the translationStrategy field for the Prometheus and PrometheusAgent CRDs. #​7947
  • [FEATURE] Add promoteScopeMetadata field to the Prometheus and PrometheusAgent CRDs. #​7803
  • [FEATURE] Add enableHttp2 field to Alertmanager and AlertmanagerConfig CRDs. #​7963
  • [ENHANCEMENT] Add the related object to the events emitted by the operator. #​7867 #​7953
  • [ENHANCEMENT] Add webhook validation for the MSTeams V2 receiver of AlertmanagerConfig CRD. [#​7906](https://redirect.github.com/pr

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
Copy link
Contributor Author

red-hat-konflux bot commented Nov 6, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.6 -> 1.24.6
google.golang.org/grpc v1.72.0 -> v1.73.0
google.golang.org/protobuf v1.36.6 -> v1.36.10
github.com/docker/cli v27.5.1+incompatible -> v28.2.2+incompatible
github.com/fxamacker/cbor/v2 v2.8.0 -> v2.9.0
github.com/modern-go/reflect2 v1.0.2 -> v1.0.3-0.20250322232337-35a7c28c31ee

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 24 times, most recently from 1414eed to 2e08a84 Compare November 13, 2025 13:38
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch 4 times, most recently from e663b88 to 1d91ab4 Compare November 14, 2025 17:39
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch from 1d91ab4 to 49a067b Compare November 14, 2025 21:35
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.2/go-deps branch from 49a067b to 50f36d0 Compare November 15, 2025 01:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants