Skip to content

chore(deps): update gomod dependencies - #168

Open
red-hat-konflux[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies
Open

chore(deps): update gomod dependencies#168
red-hat-konflux[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gomod-dependencies

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
github.com/aws/aws-sdk-go-v2 v1.42.0v1.43.4 age confidence indirect minor v1.43.5
github.com/aws/aws-sdk-go-v2/config v1.32.25v1.32.35 age confidence indirect patch v1.32.36
github.com/aws/aws-sdk-go-v2/credentials v1.19.24v1.19.34 age confidence indirect patch v1.19.35
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.29v1.18.35 age confidence indirect patch v1.18.36
github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.29v1.4.35 age confidence indirect patch v1.4.36
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.29v2.7.35 age confidence indirect patch v2.7.36
github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.30v1.4.36 age confidence indirect patch v1.4.37
github.com/aws/aws-sdk-go-v2/service/cloudformation v1.72.1v1.76.1 age confidence indirect minor v1.76.2
github.com/aws/aws-sdk-go-v2/service/ec2 v1.307.1v1.321.0 age confidence indirect minor v1.321.1
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.12v1.13.15 age confidence indirect patch v1.13.16
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.29v1.13.35 age confidence indirect patch v1.13.36
github.com/aws/aws-sdk-go-v2/service/signin v1.2.0v1.5.4 age confidence indirect minor v1.5.5
github.com/aws/aws-sdk-go-v2/service/sso v1.31.3v1.33.4 age confidence indirect minor v1.33.5
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.36.6v1.38.4 age confidence indirect minor v1.38.5
github.com/aws/aws-sdk-go-v2/service/sts v1.43.3v1.45.4 age confidence indirect minor v1.45.5
github.com/aws/smithy-go v1.27.2v1.27.7 age confidence indirect patch
github.com/go-logr/logr v1.4.3v1.4.4 age confidence indirect patch
github.com/go-openapi/jsonpointer v0.23.1v0.24.0 age confidence indirect minor
github.com/go-openapi/swag v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/cmdutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/conv v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/fileutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/jsonname v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/jsonutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/loading v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/mangling v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/netutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/stringutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/typeutils v0.26.1v0.28.0 age confidence indirect minor
github.com/go-openapi/swag/yamlutils v0.26.1v0.28.0 age confidence indirect minor
github.com/google/pprof 7023385ef3492d age confidence indirect digest
github.com/onsi/ginkgo/v2 v2.31.0v2.32.0 age confidence indirect minor v2.32.1
github.com/onsi/gomega v1.42.0v1.42.1 age confidence indirect patch
github.com/openshift-online/ocm-api-model/clientapi v0.0.458v0.0.463 age confidence indirect patch v0.0.464
github.com/openshift-online/ocm-api-model/model v0.0.458v0.0.463 age confidence indirect patch v0.0.464
github.com/openshift-online/ocm-sdk-go v0.1.503v0.1.508 age confidence indirect patch v0.1.509
github.com/openshift/api c5eb4609d7eaab replace digest
github.com/openshift/api c5eb4609d7eaab indirect digest
github.com/openshift/client-go df412d4ddca5e0 indirect digest
github.com/openshift/osde2e-common 751e0d2dcf3e27 age confidence indirect digest
github.com/operator-framework/api v0.30.0v0.45.0 age confidence indirect minor
github.com/operator-framework/operator-lifecycle-manager v0.22.0v0.46.0 age confidence indirect minor
github.com/pelletier/go-toml/v2 v2.4.0v2.4.3 age confidence indirect patch
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.74.0v0.93.0 age confidence indirect minor v0.93.1
github.com/prometheus-operator/prometheus-operator/pkg/client v0.74.0v0.93.0 age confidence indirect minor v0.93.1
github.com/prometheus/client_golang v1.23.2v1.24.1 age confidence indirect minor
github.com/prometheus/common v0.69.0v0.70.1 age confidence indirect minor
github.com/prometheus/procfs v0.20.1v0.21.1 age confidence indirect minor
github.com/sirupsen/logrus v1.9.3v1.9.4 age confidence indirect patch
github.com/vmware-tanzu/velero v1.10.2v1.18.2 age confidence indirect minor
go.yaml.in/yaml/v3 v3.0.4v3.0.5 age confidence indirect patch
golang.org/x/mod v0.37.0v0.38.0 age confidence indirect minor v0.39.0
golang.org/x/net v0.56.0v0.57.0 age confidence indirect minor v0.58.0
golang.org/x/sync v0.21.0v0.22.0 age confidence indirect minor
golang.org/x/sys v0.46.0v0.47.0 age confidence indirect minor
golang.org/x/term v0.44.0v0.45.0 age confidence indirect minor
golang.org/x/text v0.38.0v0.40.0 age confidence indirect minor v0.41.0
golang.org/x/tools v0.46.0v0.48.0 age confidence indirect minor
k8s.io/api v0.36.2v0.36.3 age confidence indirect patch
k8s.io/apiextensions-apiserver v0.36.0v0.36.3 age confidence indirect patch
k8s.io/apimachinery v0.36.2v0.36.3 age confidence indirect patch
k8s.io/client-go v0.36.2v0.36.3 age confidence replace patch
k8s.io/kube-openapi bc653b6d427ff9 age confidence indirect digest
k8s.io/streaming v0.36.2v0.36.3 age confidence indirect patch
k8s.io/utils a95e086cf1189d age confidence indirect digest
sigs.k8s.io/structured-merge-diff/v6 v6.4.0v6.4.2 age confidence indirect patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

v1.43.4

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2: v1.41.5
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/accessanalyzer: v1.45.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/account: v1.30.5
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/acm: v1.37.23
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/acmpca: v1.46.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/aiops: v1.6.21
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/amp: v1.42.9
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/amplify: v1.38.14
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/amplifybackend: v1.32.20
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder: v1.28.20
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/apigateway: v1.39.1
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi: v1.29.14
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/apigatewayv2: v1.34.1
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/appconfig: v1.43.13
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/appconfigdata: v1.23.22
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/appfabric: v1.16.21
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/appflow: v1.51.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/appintegrations: v1.37.7
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/applicationautoscaling: v1.41.14
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler: v1.27.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/applicationdiscoveryservice: v1.35.13
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/applicationinsights: v1.34.20
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/applicationsignals: v1.19.1
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/appmesh: v1.35.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/apprunner: v1.39.14
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/appstream: v1.54.4
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/appsync: v1.53.5
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/arcregionswitch: v1.6.3
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/arczonalshift: v1.22.23
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/artifact: v1.15.5
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/athena: v1.57.4
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.46.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/autoscaling: v1.64.4
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/autoscalingplans: v1.30.14
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/b2bi: v1.0.0-preview.100
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/backup: v1.54.11
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/backupgateway: v1.26.3
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/backupsearch: v1.6.23
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/batch: v1.63.2
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bcmdashboards: v1.1.4
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bcmdataexports: v1.14.0
    • Feature: With this release we are providing an option to accounts to have their export delivered to an S3 bucket that is not owned by the account.
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bcmpricingcalculator: v1.10.9
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bcmrecommendedactions: v1.1.5
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bedrock: v1.57.1
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bedrockagent: v1.52.7
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bedrockagentcore: v1.15.2
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bedrockagentcorecontrol: v1.25.1
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime: v1.51.8
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bedrockdataautomation: v1.13.5
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bedrockdataautomationruntime: v1.10.4
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/bedrockruntime: v1.50.4
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/billing: v1.10.4
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/billingconductor: v1.28.5
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/braket: v1.39.8
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/budgets: v1.43.4
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/chatbot: v1.14.21
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/chime: v1.41.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/chimesdkidentity: v1.27.20
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/chimesdkmediapipelines: v1.26.21
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/chimesdkmeetings: v1.33.15
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging: v1.32.17
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/chimesdkvoice: v1.28.13
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.42.4
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cleanroomsml: v1.22.5
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloud9: v1.33.20
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudcontrol: v1.29.13
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/clouddirectory: v1.30.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudformation: v1.71.9
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudfront: v1.60.4
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudfrontkeyvaluestore: v1.12.24
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudhsm: v1.29.21
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudhsmv2: v1.34.21
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudsearch: v1.32.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudsearchdomain: v1.28.20
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudtrail: v1.55.9
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudtraildata: v1.17.13
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.55.3
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudwatchevents: v1.32.23
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.65.0
    • Feature: This release adds parameter support to saved queries in CloudWatch Logs Insights. Define reusable query templates with named placeholders, invoke them using start query. Available in Console, CLI and SDK
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codeartifact: v1.38.21
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codebuild: v1.68.13
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codecatalyst: v1.21.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codecommit: v1.33.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codeconnections: v1.10.20
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codedeploy: v1.35.13
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codeguruprofiler: v1.29.20
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codegurureviewer: v1.34.20
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codegurusecurity: v1.16.24
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codepipeline: v1.46.21
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codestarconnections: v1.35.13
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/codestarnotifications: v1.31.21
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cognitoidentity: v1.33.22
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider: v1.59.3
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/cognitosync: v1.29.12
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/comprehend: v1.40.21
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/comprehendmedical: v1.31.21
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/computeoptimizer: v1.49.8
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/computeoptimizerautomation: v1.0.8
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/configservice: v1.62.1
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/connect: v1.166.1
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/connectcampaigns: v1.20.20
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/connectcampaignsv2: v1.11.4
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/connectcases: v1.39.1
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/connectcontactlens: v1.33.13
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/connecthealth: v1.0.3
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/connectparticipant: v1.36.7
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/controlcatalog: v1.14.9
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/controltower: v1.28.9
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/costandusagereportservice: v1.34.13
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/costexplorer: v1.63.6
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/costoptimizationhub: v1.22.8
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/customerprofiles: v1.57.2
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/databasemigrationservice: v1.61.10
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/databrew: v1.39.14
    • Bug Fix: Fix a bug where a recorded clock skew could persist on the client even if the client and server clock ended up realigning.
  • github.com/aws/aws-sdk-go-v2/service/dataexchange: v1.40.14
    • Bug Fix: Fix a bug where a recorded clo

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • Between 02:00 AM and 04:59 AM, Monday through Friday (* 2-4 * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux Bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Jun 25, 2026
@red-hat-konflux
red-hat-konflux Bot enabled auto-merge (squash) June 25, 2026 02:06
@red-hat-konflux

red-hat-konflux Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: downloading github.com/openshift/osde2e v0.0.0-20260618163913-c7ae4e94e3d5
go: downloading github.com/Masterminds/semver/v3 v3.5.0
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/openshift/client-go v0.0.0-20260622130833-df412d4d283e
go: downloading k8s.io/api v0.36.3
go: downloading k8s.io/apimachinery v0.36.3
go: downloading k8s.io/client-go v0.36.3
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/onsi/ginkgo/v2 v2.32.0
go: downloading github.com/openshift/api v0.0.0-20260623101811-c5eb460d04e3
go: downloading github.com/openshift/osde2e-common v0.0.0-20260723151626-dcf3e27b8016
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading github.com/mitchellh/mapstructure v1.5.0
go: downloading github.com/spf13/afero v1.15.0
go: downloading github.com/spf13/pflag v1.0.10
go: downloading github.com/spf13/viper v1.21.0
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/onsi/gomega v1.42.1
go: downloading github.com/operator-framework/api v0.45.0
go: downloading github.com/operator-framework/operator-lifecycle-manager v0.46.0
go: downloading github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.93.0
go: downloading github.com/prometheus-operator/prometheus-operator/pkg/client v0.93.0
go: downloading github.com/vmware-tanzu/velero v1.18.2
go: downloading sigs.k8s.io/e2e-framework v0.7.0
go: downloading github.com/adamliesko/retry v0.0.0-20200123222335-86c8baac277d
go: downloading github.com/openshift-online/ocm-sdk-go v0.1.508
go: downloading github.com/go-logr/logr v1.4.4
go: downloading k8s.io/klog/v2 v2.140.0
go: downloading k8s.io/utils v0.0.0-20260707023825-cf1189d6abe3
go: downloading sigs.k8s.io/randfill v1.0.0
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading golang.org/x/net v0.57.0
go: downloading golang.org/x/term v0.45.0
go: downloading k8s.io/kube-openapi v0.0.0-20260721132016-d427ff9ee9ad
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.4.2
go: downloading golang.org/x/sys v0.47.0
go: downloading golang.org/x/text v0.40.0
go: downloading github.com/go-viper/mapstructure/v2 v2.5.0
go: downloading github.com/sagikazarmark/locafero v0.12.0
go: downloading github.com/spf13/cast v1.10.0
go: downloading github.com/joshdk/go-junit v1.0.0
go: downloading github.com/google/go-cmp v0.7.0
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading sigs.k8s.io/controller-runtime v0.24.1
go: downloading github.com/json-iterator/go v1.1.12
go: downloading github.com/openshift-online/ocm-api-model/clientapi v0.0.463
go: downloading github.com/openshift-online/ocm-api-model/model v0.0.463
go: downloading github.com/prometheus/client_golang v1.24.1
go: downloading github.com/golang/glog v1.2.5
go: downloading github.com/aws/aws-sdk-go v1.55.8
go: downloading github.com/aws/aws-sdk-go-v2 v1.43.4
go: downloading github.com/aws/aws-sdk-go-v2/config v1.32.35
go: downloading github.com/aws/aws-sdk-go-v2/service/cloudformation v1.76.1
go: downloading github.com/aws/aws-sdk-go-v2/service/ec2 v1.321.0
go: downloading github.com/hashicorp/go-retryablehttp v0.7.8
go: downloading github.com/google/gnostic-models v0.7.1
go: downloading google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af
go: downloading golang.org/x/time v0.15.0
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
go: downloading github.com/fxamacker/cbor/v2 v2.9.2
go: downloading sigs.k8s.io/yaml v1.6.0
go: downloading golang.org/x/oauth2 v0.36.0
go: downloading go.yaml.in/yaml/v2 v2.4.4
go: downloading github.com/subosito/gotenv v1.6.0
go: downloading github.com/pelletier/go-toml/v2 v2.4.3
go: downloading go.yaml.in/yaml/v3 v3.0.5
go: downloading github.com/blang/semver/v4 v4.0.0
go: downloading github.com/gorilla/websocket v1.5.4-0.20250319132907-e064f32e3674
go: downloading k8s.io/streaming v0.36.3
go: downloading github.com/evanphx/json-patch/v5 v5.9.11
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
go: downloading github.com/cenkalti/backoff/v4 v4.3.0
go: downloading github.com/golang-jwt/jwt/v4 v4.5.2
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966
go: downloading github.com/microcosm-cc/bluemonday v1.0.27
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading github.com/prometheus/common v0.70.1
go: downloading github.com/prometheus/procfs v0.21.1
go: downloading github.com/aws/smithy-go v1.27.7
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.19.34
go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.35
go: downloading github.com/aws/aws-sdk-go-v2/service/signin v1.5.4
go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.33.4
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.38.4
go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.45.4
go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.35
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.15
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.35
go: downloading github.com/hashicorp/go-cleanhttp v0.5.2
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading github.com/go-task/slim-sprig/v3 v3.0.0
go: downloading golang.org/x/tools v0.48.0
go: downloading gopkg.in/evanphx/json-patch.v4 v4.13.0
go: downloading k8s.io/apiextensions-apiserver v0.36.3
go: downloading github.com/aymerick/douceur v0.2.0
go: downloading github.com/jmespath/go-jmespath v0.4.0
go: downloading github.com/aws/aws-sdk-go-v2/internal/v4a v1.4.36
go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.35
go: downloading github.com/go-openapi/swag v0.28.0
go: downloading github.com/go-openapi/jsonreference v1.0.0
go: downloading github.com/google/pprof v0.0.0-20260802141513-ef3492d7dac3
go: downloading golang.org/x/sync v0.22.0
go: downloading github.com/gorilla/css v1.0.1
go: downloading github.com/emicklei/go-restful/v3 v3.13.0
go: downloading github.com/go-openapi/jsonpointer v1.0.0
go: downloading github.com/go-openapi/swag/cmdutils v0.28.0
go: downloading github.com/go-openapi/swag/conv v0.28.0
go: downloading github.com/go-openapi/swag/fileutils v0.28.0
go: downloading github.com/go-openapi/swag/jsonutils v0.28.0
go: downloading github.com/go-openapi/swag/loading v0.28.0
go: downloading github.com/go-openapi/swag/mangling v0.28.0
go: downloading github.com/go-openapi/swag/netutils v0.28.0
go: downloading github.com/go-openapi/swag/stringutils v0.28.0
go: downloading github.com/go-openapi/swag/typeutils v0.28.0
go: downloading github.com/go-openapi/swag/yamlutils v0.28.0
go: downloading golang.org/x/mod v0.38.0
go: downloading github.com/moby/spdystream v0.5.1
go: downloading github.com/go-openapi/swag/pools v0.28.0
go: github.com/openshift/osd-cluster-ready imports
	github.com/openshift/osde2e/pkg/common/cluster imports
	github.com/openshift/osde2e/pkg/common/helper imports
	github.com/vmware-tanzu/velero/pkg/generated/clientset/versioned: cannot find module providing package github.com/vmware-tanzu/velero/pkg/generated/clientset/versioned

@openshift-ci
openshift-ci Bot requested review from bergmannf and ravitri June 25, 2026 02:07
@openshift-ci

openshift-ci Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

1 similar comment
@openshift-ci

openshift-ci Bot commented Jun 25, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@coderabbitai

coderabbitai Bot commented Jun 25, 2026

Copy link
Copy Markdown

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

  • @coderabbitai resume to resume automatic reviews.
  • @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

  • ▶️ Resume reviews
  • 🔍 Trigger review

Walkthrough

This PR updates Go module versions across AWS, OpenAPI, OpenShift, operator, Prometheus, Kubernetes, logging, and Velero dependencies. It also updates the k8s.io/client-go replacement to v0.36.3.

Changes

Go dependency refresh

Layer / File(s) Summary
Module version updates
go.mod
Updates direct and indirect AWS, OpenAPI, OpenShift, operator, Prometheus, Kubernetes, logging, Velero, Go, and structured merge dependency versions.
Kubernetes replacement alignment
go.mod
Updates the k8s.io/client-go replacement to v0.36.3. The github.com/openshift/api replacement remains unchanged.

Estimated code review effort: 2 (Simple) | ~5 minutes

Suggested reviewers: bergmannf, ravitri

🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed The pull request changes only go.mod; it adds no Ginkgo tests or test titles, and the existing Go tests use stable static names.
Test Structure And Quality ✅ Passed The PR changes only go.mod; it adds or modifies no Ginkgo tests, cluster operations, waits, setup, cleanup, or assertions.
Microshift Test Compatibility ✅ Passed Only go.mod changed; no Go files or new Ginkgo tests were added, so MicroShift compatibility is not applicable.
Single Node Openshift (Sno) Test Compatibility ✅ Passed The commit changes only go.mod dependency versions and replacements; it adds no Ginkgo tests or other Go source that could introduce SNO-incompatible assumptions.
Topology-Aware Scheduling Compatibility ✅ Passed The PR changes only go.mod dependency versions. It adds or modifies no deployment manifests, operator code, controllers, or scheduling constraints.
Ote Binary Stdout Contract ✅ Passed PR changes only go.mod; main.go has no stdout writes, and its log calls plus the upgraded osde2e logger use stderr.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed The commit changes only go.mod. It adds no Ginkgo tests, test files, IPv4 assumptions, or external connectivity requirements.
No-Weak-Crypto ✅ Passed The PR changes only go.mod; searches found no MD5, SHA1, DES, 3DES, RC4, Blowfish, ECB, custom crypto, or secret-comparison code.
Container-Privileges ✅ Passed Only go.mod changed, with dependency version updates. No privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, or allowPrivilegeEscalation settings were added; existing privileged-nested defaults t...
No-Sensitive-Data-In-Logs ✅ Passed The PR changes only go.mod dependency versions. It adds no logging code and no log arguments containing passwords, tokens, API keys, PII, hostnames, or customer data.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the dependency updates made in go.mod.
✨ Finishing Touches 💡 1
🛠️ Fix failing CI checks 💡
  • Fix failing CI checks
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/master/gomod-dependencies

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@go.mod`:
- Line 82: The dependency entry uses an invalid Go module version string, so
update the github.com/openshift/api requirement to a valid pseudo-version or
tagged release and make the same correction anywhere the version is referenced
in go.mod; use the existing github.com/openshift/api module entry as the locator
and ensure both require and replace-style references parse correctly.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 9f8890e0-3711-46bf-8ea9-d25d97cf6b43

📥 Commits

Reviewing files that changed from the base of the PR and between 99baf06 and c4d444f.

📒 Files selected for processing (1)
  • go.mod

Comment thread go.mod Outdated
@openshift-merge-bot

Copy link
Copy Markdown
Contributor

/retest-required

Remaining retests: 0 against base HEAD 753a2f3 and 2 for PR HEAD c4d444f in total

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from c4d444f to eed3448 Compare July 14, 2026 04:50
@openshift-ci openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jul 14, 2026
@openshift-ci

openshift-ci Bot commented Jul 14, 2026

Copy link
Copy Markdown
Contributor

New changes are detected. LGTM label has been removed.

@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update gomod dependencies fix(deps): update gomod dependencies Jul 14, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from eed3448 to 7b2e4f7 Compare July 20, 2026 03:23

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
go.mod (1)

5-131: 🔒 Security & Privacy | 🟠 Major | ⚡ Quick win

Align the velero pin in go.mod:102 github.com/vmware-tanzu/velero v1.18.2 doesn't contain pkg/generated/clientset/versioned, which breaks the import chain pulled in by github.com/openshift/osde2e. Bump to a compatible velero release or update the upstream dependency.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` around lines 5 - 131, Update the github.com/vmware-tanzu/velero
dependency in the go.mod require block to a release that contains
pkg/generated/clientset/versioned and is compatible with
github.com/openshift/osde2e; preserve the existing dependency alignment and
verify the import chain resolves.

Source: Path instructions

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Outside diff comments:
In `@go.mod`:
- Around line 5-131: Update the github.com/vmware-tanzu/velero dependency in the
go.mod require block to a release that contains
pkg/generated/clientset/versioned and is compatible with
github.com/openshift/osde2e; preserve the existing dependency alignment and
verify the import chain resolves.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 6f8b9fe1-b738-4e2c-b1a5-a9b24b6448c8

📥 Commits

Reviewing files that changed from the base of the PR and between c4d444f and 7b2e4f7.

📒 Files selected for processing (1)
  • go.mod

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 7b2e4f7 to d70240f Compare July 28, 2026 04:50

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Caution

Some comments are outside the diff and can’t be posted inline due to platform limitations.

⚠️ Outside diff range comments (1)
go.mod (1)

5-138: 🔒 Security & Privacy | 🟡 Minor | ⚡ Quick win

Add provenance/cosign signing and document the AWS SDK exception

  • Tekton already covers SBOM and RPM signature scans, but there’s no provenance/cosign signing step.
  • github.com/aws/aws-sdk-go v1.55.8 is flagged by OSV (GO-2022-0635/0646) and needs an explicit security exception.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` around lines 5 - 138, Update the release/build workflow associated
with this dependency configuration to add provenance generation and Cosign
signing, preserving the existing Tekton SBOM and RPM signature scans. Document
an explicit security exception for github.com/aws/aws-sdk-go v1.55.8 covering
OSV findings GO-2022-0635 and GO-2022-0646, using the repository’s established
exception format.

Source: Path instructions

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Outside diff comments:
In `@go.mod`:
- Around line 5-138: Update the release/build workflow associated with this
dependency configuration to add provenance generation and Cosign signing,
preserving the existing Tekton SBOM and RPM signature scans. Document an
explicit security exception for github.com/aws/aws-sdk-go v1.55.8 covering OSV
findings GO-2022-0635 and GO-2022-0646, using the repository’s established
exception format.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 159a0d81-b35c-43ae-8e2d-752cf49adc8d

📥 Commits

Reviewing files that changed from the base of the PR and between 7b2e4f7 and d70240f.

📒 Files selected for processing (1)
  • go.mod

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from d70240f to 33740c0 Compare July 30, 2026 02:36
@red-hat-konflux red-hat-konflux Bot changed the title fix(deps): update gomod dependencies chore(deps): update gomod dependencies Jul 30, 2026

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (1)
go.mod (1)

11-26: 🔒 Security & Privacy | 🔵 Trivial

Add SBOM/provenance/signing coverage for this dependency refresh
go.sum and govulncheck cover part of the supply-chain story, but I don't see SBOM, provenance, or artifact-signing wired into the build/release path.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` around lines 11 - 26, Add supply-chain coverage for the AWS
dependency refresh by wiring SBOM generation, build provenance attestation, and
release artifact signing into the existing build/release workflow. Ensure these
outputs are produced and verified alongside the refreshed Go dependencies, using
the repository’s established CI and artifact symbols rather than adding an
unrelated path.

Source: Path instructions

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@go.mod`:
- Around line 11-26: Add supply-chain coverage for the AWS dependency refresh by
wiring SBOM generation, build provenance attestation, and release artifact
signing into the existing build/release workflow. Ensure these outputs are
produced and verified alongside the refreshed Go dependencies, using the
repository’s established CI and artifact symbols rather than adding an unrelated
path.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: b38f5331-8d3e-401b-b9ab-a658fba4569d

📥 Commits

Reviewing files that changed from the base of the PR and between d70240f and 33740c0.

📒 Files selected for processing (1)
  • go.mod

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 33740c0 to 14cc0b3 Compare July 31, 2026 02:13
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update gomod dependencies fix(deps): update gomod dependencies Jul 31, 2026

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🧹 Nitpick comments (1)
go.mod (1)

7-7: 🔒 Security & Privacy | 🔵 Trivial

Verify release supply-chain controls before merging.

Confirm that the release pipeline checks license compatibility, generates an SBOM with provenance attestations, and signs release artifacts with Sigstore or cosign. go.mod cannot establish these controls.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` at line 7, Verify the release pipeline configuration rather than
relying on go.mod: ensure it checks license compatibility, generates an SBOM
with provenance attestations, and signs release artifacts using Sigstore or
cosign before merging.

Source: Path instructions

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@go.mod`:
- Line 115: Replace the prerelease google.golang.org/protobuf dependency in
go.mod with the stable tagged v1.36.11 release, then regenerate go.sum so module
checksums match the updated requirement.

---

Nitpick comments:
In `@go.mod`:
- Line 7: Verify the release pipeline configuration rather than relying on
go.mod: ensure it checks license compatibility, generates an SBOM with
provenance attestations, and signs release artifacts using Sigstore or cosign
before merging.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 6e3d6fff-96a8-4f08-bbb0-af5b5f46eaaa

📥 Commits

Reviewing files that changed from the base of the PR and between 33740c0 and 14cc0b3.

📒 Files selected for processing (1)
  • go.mod

Comment thread go.mod
golang.org/x/time v0.15.0 // indirect
golang.org/x/tools v0.46.0 // indirect
golang.org/x/tools v0.48.0 // indirect
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔒 Security & Privacy | 🟠 Major | ⚡ Quick win

Replace the protobuf development version with a stable release.

google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af contains a prerelease -0 suffix. The path policy prohibits prerelease production dependencies. Use a stable tagged version or document an approved exception, then regenerate go.sum. Public package metadata lists stable v1.36.11. (pkg.go.dev)

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` at line 115, Replace the prerelease google.golang.org/protobuf
dependency in go.mod with the stable tagged v1.36.11 release, then regenerate
go.sum so module checksums match the updated requirement.

Sources: Path instructions, MCP tools

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/gomod-dependencies branch from 14cc0b3 to cdcf970 Compare August 11, 2026 02:03
@openshift-ci

openshift-ci Bot commented Aug 11, 2026

Copy link
Copy Markdown
Contributor

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/lint cdcf970 link true /test lint
ci/prow/test cdcf970 link true /test test
ci/prow/images cdcf970 link true /test images
ci/prow/scan cdcf970 link false /test scan

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@red-hat-konflux red-hat-konflux Bot changed the title fix(deps): update gomod dependencies chore(deps): update gomod dependencies Aug 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants