NO-JIRA: chore(deps): weekly dependabot consolidation

[hypershift-jira-solve-ci]

Summary

Weekly consolidation of dependabot dependency updates.

Consolidated PRs

• build(deps): bump the misc-dependencies group across 1 directory with 3 updates #8461: build(deps): bump the misc-dependencies group across 1 directory with 3 updates
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 in the azure-github-dependencies group across 1 directory #8460: build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 in the azure-github-dependencies group

Commits

1. chore(deps): update root module dependencies
2. chore(deps): update vendored dependencies

---

Assisted-by: Claude (via Claude Code)

---

Note: This PR was auto-generated by the dependabot-triage periodic CI job. See the full report for token usage, cost breakdown, and detailed output.

Summary by CodeRabbit

• Chores
  • Bumped Go module dependencies to newer patch/minor versions (Azure SDK, Azure Blob, Google APIs & gRPC, multiple golang.org/x modules, INI library and related indirect modules).
  • Updated Python dependency urllib3 to a newer patch release.
  • No changes to public APIs, exported declarations, build directives, or replace rules.

[openshift-merge-bot]

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

[openshift-ci-robot]

@hypershift-jira-solve-ci[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

Summary

Weekly consolidation of dependabot dependency updates.

Consolidated PRs

• build(deps): bump the misc-dependencies group across 1 directory with 3 updates #8461: build(deps): bump the misc-dependencies group across 1 directory with 3 updates
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 in the azure-github-dependencies group across 1 directory #8460: build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 in the azure-github-dependencies group

Commits

1. chore(deps): update root module dependencies
2. chore(deps): update vendored dependencies

---

Assisted-by: Claude (via Claude Code)

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 4ef16dfb-84da-4920-a4ff-e1f2ee9db31c

📥 Commits

Reviewing files that changed from the base of the PR and between ef46faf and 951a406.

⛔ Files ignored due to path filters (193)

• api/go.sum is excluded by !**/*.sum
• api/vendor/golang.org/x/net/http2/README.md is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/client_conn_pool.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/clientconn.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/config.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/hpack/tables.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/http2.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/server.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/server_common.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/server_wrap.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/transport.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/transport_common.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/transport_wrap.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/writesched.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/writesched_common.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/writesched_priority_rfc7540.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/writesched_priority_rfc9218.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/writesched_random.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/http2/writesched_roundrobin.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/go118.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/idna.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/idna9.0.0.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/pre_go118.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/punycode.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/tables10.0.0.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/tables11.0.0.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/tables12.0.0.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/tables13.0.0.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/tables15.0.0.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/tables17.0.0.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/tables9.0.0.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/trie12.0.0.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/idna/trie13.0.0.go is excluded by !**/vendor/**
• api/vendor/golang.org/x/net/internal/httpcommon/request.go is excluded by !**/vendor/**
• api/vendor/modules.txt is excluded by !**/vendor/**
• go.sum is excluded by !**/*.sum
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/CHANGELOG.md is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/exported/response_error.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/internal/shared/constants.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime/policy_http_trace.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime/policy_logging.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/azcore/runtime/request.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/diag/diag.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/diag/doc.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/errorinfo/doc.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/errorinfo/errorinfo.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/exported/exported.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/log/doc.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/log/log.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/poller/util.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/temporal/resource.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/uuid/doc.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/internal/uuid/uuid.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/CHANGELOG.md is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/appendblob/client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/appendblob/models.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/assets.json is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/blob/models.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/bloberror/error_codes.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/blockblob/client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/blockblob/models.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/container/constants.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/base/clients.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/exported/blob_batch.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/exported/version.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/appendblob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/autorest.md is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/blob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/block_blob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/constants.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/container_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/pageblob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/service_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_appendblob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_blob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_blockblob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_constants.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_container_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_models.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_options.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_pageblob_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/internal/generated/zz_service_client.go is excluded by !**/generated/**, !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/pageblob/client.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/pageblob/models.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/sas/query_params.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/sas/service.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/service/constants.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/Azure/azure-sdk-for-go/sdk/storage/azblob/service/models.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/confidential/confidential.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/base.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/storage/partitioned_storage.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/base/storage/storage.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/local/server.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/authority/authority.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/authority/known_metadata.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/internal/comm/comm.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/oauth/ops/internal/comm/compress.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/shared/shared.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/internal/version/version.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/managedidentity/managedidentity.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/AzureAD/microsoft-authentication-library-for-go/apps/public/public.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/golang-jwt/jwt/v5/README.md is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/golang-jwt/jwt/v5/VERSION_HISTORY.md is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/golang-jwt/jwt/v5/parser.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/golang-jwt/jwt/v5/parser_option.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/golang-jwt/jwt/v5/token.go is excluded by !vendor/**, !**/vendor/**
• vendor/github.com/golang-jwt/jwt/v5/validator.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/hkdf/hkdf.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/crypto/pbkdf2/pbkdf2.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/README.md is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/client_conn_pool.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/clientconn.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/config.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/hpack/tables.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/http2.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/server.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/server_common.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/server_wrap.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/transport.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/transport_common.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/transport_wrap.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/writesched.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/writesched_common.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/writesched_priority_rfc7540.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/writesched_priority_rfc9218.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/writesched_random.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/http2/writesched_roundrobin.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/go118.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/idna.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/idna9.0.0.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/pre_go118.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/punycode.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/tables10.0.0.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/tables11.0.0.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/tables12.0.0.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/tables13.0.0.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/tables15.0.0.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/tables17.0.0.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/tables9.0.0.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/trie12.0.0.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/idna/trie13.0.0.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/net/internal/httpcommon/request.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/cpu/cpu_other_arm64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/cpu/cpu_windows.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/cpu/cpu_windows_arm64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/cpu/zcpu_windows.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/affinity_linux.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/mkall.sh is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/syscall_linux.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/syscall_linux_arm.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/syscall_linux_arm64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/syscall_linux_loong64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/syscall_linux_riscv64.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/unix/zsyscall_linux.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/windows/syscall_windows.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/windows/types_windows.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/sys/windows/zsyscall_windows.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/go/types/objectpath/objectpath.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/internal/gcimporter/ureader.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/internal/gocommand/version.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/internal/pkgbits/version.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/internal/typeparams/coretype.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/internal/typesinternal/types.go is excluded by !vendor/**, !**/vendor/**
• vendor/golang.org/x/tools/internal/versions/features.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/compute/v1/compute-api.json is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/compute/v1/compute-gen.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/compute/v1/compute2-gen.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/compute/v1/compute3-gen.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/dns/v1/dns-api.json is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/dns/v1/dns-gen.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/api/internal/version.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/clientconn.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/experimental/stats/metrics.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/envconfig/envconfig.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/envconfig/xds.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/mem/buffer_pool.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/resolver/config_selector.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/http2_client.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/http_util.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/readyreader/raw_conn_linux.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/readyreader/raw_conn_nonlinux.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/readyreader/ready_reader.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/internal/transport/transport.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/mem/buffer_slice.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/mem/buffers.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/stream.go is excluded by !vendor/**, !**/vendor/**
• vendor/google.golang.org/grpc/version.go is excluded by !vendor/**, !**/vendor/**
• vendor/gopkg.in/ini.v1/.golangci.yml is excluded by !vendor/**, !**/vendor/**
• vendor/gopkg.in/ini.v1/data_source.go is excluded by !vendor/**, !**/vendor/**
• vendor/gopkg.in/ini.v1/file.go is excluded by !vendor/**, !**/vendor/**
• vendor/gopkg.in/ini.v1/key.go is excluded by !vendor/**, !**/vendor/**
• vendor/gopkg.in/ini.v1/struct.go is excluded by !vendor/**, !**/vendor/**
• vendor/modules.txt is excluded by !vendor/**, !**/vendor/**

📒 Files selected for processing (3)

• api/go.mod
• go.mod
• hypershift-ci-python/requirements.txt

✅ Files skipped from review due to trivial changes (2)

• hypershift-ci-python/requirements.txt
• api/go.mod

🚧 Files skipped from review as they are similar to previous changes (1)

• go.mod

---

📝 Walkthrough

Walkthrough

This change updates dependency versions across the repository: top-level go.mod bumps several direct dependencies (including github.com/Azure/azure-sdk-for-go/sdk/azcore and storage/azblob), updates multiple golang.org/x/* modules and Google modules (google.golang.org/api, google.golang.org/grpc), and updates indirect Azure and auth-related modules plus tooling golang.org/x/* modules. api/go.mod updates indirect golang.org/x/net and golang.org/x/text versions. The CI Python requirements file bumps urllib3 from 2.6.3 to 2.7.0. No replace directives or the Go toolchain directive were changed.

Possibly related PRs

• openshift/hypershift#8077: Also updates google.golang.org/grpc module version in go.mod.

Suggested reviewers

• sjenning
• muraee
• bryan-cox

🚥 Pre-merge checks | ✅ 12

✅ Passed checks (12 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the pull request as a weekly consolidation of dependabot dependency updates across multiple files and modules.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	No test files are modified. The PR only updates dependency versions in configuration files (go.mod, api/go.mod, requirements.txt). Check is not applicable.
Test Structure And Quality	✅ Passed	Test files modified use standard Go testing patterns, not Ginkgo's Describe/Context/It structure. Custom check targets Ginkgo-specific patterns, making it not applicable to this PR.
Microshift Test Compatibility	✅ Passed	PR contains only dependency updates and generated code. No new Ginkgo e2e tests are being added, so the custom check does not apply.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	PR is a dependency update (go.mod, api/go.mod, requirements.txt). No new Ginkgo e2e tests added. SNO compatibility check only applies when tests are added, so it is not applicable here.
Topology-Aware Scheduling Compatibility	✅ Passed	PR contains only dependency version updates with no code/manifest/operator changes. Topology-aware scheduling check is not applicable.
Ote Binary Stdout Contract	✅ Passed	PR only updates dependency versions in go.mod and requirements.txt. No source code changes in process-level contexts that could violate OTE stdout contract.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	This PR contains only dependency updates (go.mod, api/go.mod, requirements.txt). No Ginkgo e2e tests are added or modified, so this check is not applicable.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

• Generate code and open pull requests
• Plan features and break down work
• Investigate incidents and troubleshoot customer tickets together
• Automate recurring tasks and respond to alerts with triggers
• Summarize progress and report instantly

Built for teams:

• Shared memory across your entire org—no repeating context
• Per-thread sandboxes to safely plan and execute work
• Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 40.07%. Comparing base (10fd799) to head (951a406).
⚠️ Report is 34 commits behind head on main.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #8464   +/-   ##
=======================================
  Coverage   40.07%   40.07%           
=======================================
  Files         751      751           
  Lines       92863    92863           
=======================================
  Hits        37215    37215           
  Misses      52956    52956           
  Partials     2692     2692           

Flag	Coverage Δ
cmd-support	34.31% <ø> (ø)
cpo-hostedcontrolplane	40.56% <ø> (ø)
cpo-other	40.14% <ø> (ø)
hypershift-operator	50.52% <ø> (ø)
other	31.54% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[bryan-cox]

/approve

[bryan-cox]

/area ci-tooling

[muraee]

/lgtm

[openshift-merge-bot]

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test e2e-aks
/test e2e-aws
/test e2e-aws-upgrade-hypershift-operator
/test e2e-azure-self-managed
/test e2e-kubevirt-aws-ovn-reduced
/test e2e-v2-aws

[bryan-cox]

/verified by e2e

[openshift-ci-robot]

@bryan-cox: This PR has been marked as verified by e2e.

Details

In response to this:

/verified by e2e

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[cwbotbot]

Test Results

e2e-aws

• Status: ✅ PASS
• Started: 2026-05-11T14:15:56Z
• View Job
• View Job History

e2e-aks

• Status: ✅ PASS
• Started: 2026-05-11T12:42:57Z
• View Job
• View Job History

[openshift-merge-bot]

/retest-required

Remaining retests: 0 against base HEAD 1abf815 and 2 for PR HEAD d48ef8b in total

[bryan-cox]

/retest

[bryan-cox]

/retest

[hypershift-jira-solve-ci]

I now have the complete picture. Let me compile the final report.

Test Failure Analysis Complete

Job Information

• Prow Job: pull-ci-openshift-hypershift-main-security
• Build ID: 2053863523615772672
• Target: security
• Job Type: presubmit (PR NO-JIRA: chore(deps): weekly dependabot consolidation #8464)
• Build Cluster: build01
• State: error
• Start Time: 2026-05-11T15:43:17Z
• Completion Time: 2026-05-11T16:13:17Z (30 minutes — entire duration spent pending)

Test Failure Analysis

Error

Pod scheduling timeout. 0/56 nodes are available: 1 node(s) didn't satisfy existing pods
anti-affinity rules, 1 node(s) had untolerated taint {node-role.kubernetes.io/ci-builds-tmpfs-worker},
1 node(s) had untolerated taint {node-role.kubernetes.io/ci-longtests-worker}, 1 node(s) had
untolerated taint {node.kubernetes.io/not-ready}, 16 node(s) didn't match Pod's node affinity/selector,
2 Insufficient memory, 24 node(s) had untolerated taint {node-role.kubernetes.io/ci-tests-worker},
3 node(s) had untolerated taint {node-role.kubernetes.io/ci-builds-worker: ci-builds-worker},
3 node(s) had untolerated taint {node-role.kubernetes.io/infra}, 3 node(s) had untolerated taint
{node-role.kubernetes.io/master}. preemption: 0/56 nodes are available: 53 Preemption is not helpful
for scheduling, 2 Insufficient memory, 1 No preemption victims found.

Summary

This is a CI infrastructure issue, not a code or test problem. The security job pod was never scheduled on the build01 cluster because no suitable nodes were available during the 30-minute scheduling window. The pod requires nodes labeled ci-workload: prowjobs and tolerates only the ci-prowjobs-worker taint, but all 56 nodes in the cluster were excluded: 24 were ci-tests-workers, 16 didn't match the pod's node affinity, 4 were ci-builds-workers, 1 was ci-builds-tmpfs, 1 was ci-longtests, 3 were infra nodes, 3 were masters, 1 was not-ready, 1 failed anti-affinity, and the remaining 2 eligible nodes had insufficient memory. The PR's code changes (dependabot dependency updates) are completely unrelated to this failure.

Root Cause

The job failed with state error (not failure) and description "Pod scheduling timeout." — the ci-operator pod c4c734ee-c013-4f07-afc5-7bb3f122c494 was created on the build01 cluster at 15:43:17Z but remained in Pending phase with PodScheduled: False (reason: Unschedulable) for the entire 30-minute Prow scheduling timeout window until it was killed at 16:13:17Z.

The pod's scheduling constraints require:

• nodeSelector: ci-workload: prowjobs — only nodes with this label are eligible
• toleration: node-role.kubernetes.io/ci-prowjobs-worker — the pod can only tolerate prowjobs-worker taints
• nodeAffinity: kubernetes.io/arch must be amd64 or arm64, and hostname must not be ip-10-0-171-26.ec2.internal

Of 56 nodes in the cluster, none could satisfy these constraints at the time:

• 24 nodes: tainted ci-tests-worker (not tolerated)
• 16 nodes: didn't match pod's node affinity/selector
• 4 nodes: tainted ci-builds-worker (not tolerated)
• 3 nodes: tainted infra (not tolerated)
• 3 nodes: tainted master (not tolerated)
• 2 nodes: insufficient memory (eligible prowjobs-worker nodes but overcommitted)
• 1 node: tainted ci-builds-tmpfs-worker (not tolerated)
• 1 node: tainted ci-longtests-worker (not tolerated)
• 1 node: not-ready (node unhealthy)
• 1 node: failed anti-affinity rules

The 2 nodes that were otherwise eligible (prowjobs-worker nodes) did not have enough memory. No preemption was possible (53 nodes: preemption not helpful; 2 nodes: insufficient memory even after preemption; 1 node: no viable preemption victims).

This is a transient CI infrastructure capacity problem on build01 — not related to the PR changes.

Recommendations

1. Retry the job — This is a transient infrastructure issue. Re-trigger with /retest or /test security on the PR. The cluster capacity likely freed up since the failure.
2. No code changes needed — The dependabot dependency updates in PR NO-JIRA: chore(deps): weekly dependabot consolidation #8464 are completely unrelated to this scheduling failure. The ci-operator pod never ran, so no test code was ever executed.
3. If retries continue to fail — File an issue with the CI infrastructure team (Test Platform / DPTP) about build01 cluster capacity for ci-prowjobs-worker nodes, noting that memory pressure on eligible nodes prevented scheduling.

Evidence

Evidence	Detail
Job State	error (infrastructure error, not test failure)
Status Description	Pod scheduling timeout.
Pod Phase	Failed — pod never reached Running
PodScheduled Condition	False, reason: Unschedulable
Build Cluster	build01
Pending Duration	30 minutes (15:43:17Z → 16:13:17Z, entire timeout)
Available Nodes	0/56 schedulable
Bottleneck	2 eligible prowjobs-worker nodes had insufficient memory
Artifacts Present	Only prowjob.json, podinfo.json, started.json, finished.json — no build-log.txt, no test artifacts (pod never ran)
Node Selector	ci-workload: prowjobs
Toleration	node-role.kubernetes.io/ci-prowjobs-worker only

---

[openshift-ci-robot]

@hypershift-jira-solve-ci[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

Summary

Weekly consolidation of dependabot dependency updates.

Consolidated PRs

• build(deps): bump the misc-dependencies group across 1 directory with 3 updates #8461: build(deps): bump the misc-dependencies group across 1 directory with 3 updates
• build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 in the azure-github-dependencies group across 1 directory #8460: build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.21.0 to 1.21.1 in the azure-github-dependencies group

Commits

1. chore(deps): update root module dependencies
2. chore(deps): update vendored dependencies

---

Assisted-by: Claude (via Claude Code)

---

Note: This PR was auto-generated by the dependabot-triage periodic CI job. See the full report for token usage, cost breakdown, and detailed output.

Summary by CodeRabbit

• Chores
• Bumped Go module dependencies to newer patch/minor versions (Azure SDK, Google APIs & gRPC, golang.org/x modules, INI library and related indirect modules).
• Updated Python dependency urllib3 to a newer patch release.
• No changes to public APIs, exported declarations, build directives, or replace rules.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[bryan-cox]

/lgtm

[openshift-merge-bot]

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test e2e-aks
/test e2e-aws
/test e2e-aws-upgrade-hypershift-operator
/test e2e-azure-self-managed
/test e2e-kubevirt-aws-ovn-reduced
/test e2e-v2-aws
/test e2e-v2-gke

[bryan-cox]

/retest

[bryan-cox]

/test e2e-aks

[bryan-cox]

/approve
/verified by e2e

[openshift-ci-robot]

@bryan-cox: This PR has been marked as verified by e2e.

Details

In response to this:

/approve
/verified by e2e

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

[JoelSpeed]

/approve

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: bryan-cox, hypershift-jira-solve-ci[bot], JoelSpeed

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [bryan-cox]
• api/OWNERS [JoelSpeed]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@hypershift-jira-solve-ci: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.