Skip to content

Conversation

@red-hat-konflux
Copy link
Contributor

This PR contains the following updates:

Package Type Update Change
github.com/fxamacker/cbor/v2 indirect minor v2.7.0 -> v2.8.0
github.com/google/go-cmp indirect minor v0.6.0 -> v0.7.0
github.com/klauspost/compress indirect minor v1.17.11 -> v1.18.0
github.com/ovn-org/ovn-kubernetes/go-controller require digest 5518ba1 -> 14237a8
github.com/prometheus/client_golang require minor v1.21.1 -> v1.22.0
github.com/prometheus/client_model indirect patch v0.6.1 -> v0.6.2
github.com/prometheus/common require minor v0.62.0 -> v0.63.0
github.com/prometheus/procfs indirect minor v0.15.1 -> v0.16.1
go (source) toolchain minor 1.23.5 -> 1.24.2
golang.org/x/net indirect minor v0.36.0 -> v0.39.0
golang.org/x/oauth2 indirect minor v0.24.0 -> v0.29.0
golang.org/x/sys indirect minor v0.30.0 -> v0.32.0
golang.org/x/term indirect minor v0.29.0 -> v0.31.0
golang.org/x/text indirect minor v0.22.0 -> v0.24.0
golang.org/x/time indirect minor v0.7.0 -> v0.11.0
google.golang.org/protobuf indirect patch v1.36.1 -> v1.36.6
k8s.io/api require minor v0.32.3 -> v0.33.0
k8s.io/apimachinery require minor v0.32.3 -> v0.33.0
k8s.io/client-go require minor v0.32.3 -> v0.33.0
k8s.io/kube-openapi indirect digest 32ad38e -> c8a335a
k8s.io/utils indirect digest 3ea5e8c -> 1f6e0b7
sigs.k8s.io/structured-merge-diff/v4 indirect minor v4.4.2 -> v4.7.0

Release Notes

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.8.0

Compare Source

v2.8.0 adds omitzero struct tag option, fixes and deprecates 3 functions, and bumps requirements to go 1.20+.

Many thanks to @​liggitt for contributing the omitzero support!

The "omitzero" option omits zero values from encoding, matching stdlib encoding/json behavior.
When specified in the cbor tag, the option is always honored.
When specified in the json tag, the option is honored when building with Go 1.24+.

This release fixes 3 functions (when called directly by user apps) to use same error handling on bad input as cbor.Unmarshal():

  • RawTag.UnmarshalCBOR() (thanks @​thomas-fossati for reporting this!)
  • ByteString.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

This release also deprecates those 3 functions because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

What's Changed

Other Changes
🔍 Details

New Contributors

Full Changelog: fxamacker/cbor@v2.7.0...v2.8.0

v2.7.1

Compare Source

v2.7.1 fixes 3 functions (when called directly by user apps) to use same error handling on bad inputs as cbor.Unmarshal():

  • ByteString.UnmarshalCBOR()
  • RawTag.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

The above 3 fixed functions are deprecated because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

Before Upgrading to v2.7.1

v2.8.0 is being fuzz tested and will be released later today. It adds support for omitzero struct tag option.

v2.7.1 is the last version to support go 1.17-1.19. v2.8.0 and newer releases will require go 1.20+.

What's Changed

Special Thanks

Thanks @​thomas-fossati for reporting the bug in RawTag.UnmarshalCBOR() when it is called directly by user apps providing bad input data!

Full Changelog: fxamacker/cbor@v2.7.0...v2.7.1

google/go-cmp (github.com/google/go-cmp)

v0.7.0

Compare Source

New API:

  • (#​367) Support compare functions with SortSlices and SortMaps

Panic messaging:

  • (#​370) Detect proto.Message types when failing to export a field
klauspost/compress (github.com/klauspost/compress)

v1.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.11...v1.18.0

prometheus/client_golang (github.com/prometheus/client_golang)

v1.22.0: - 2025-04-07

Compare Source

⚠️ This release contains potential breaking change if you use experimental zstd support introduce in #​1496 ⚠️

Experimental support for zstd on scrape was added, controlled by the request Accept-Encoding header.
It was enabled by default since version 1.20, but now you need to add a blank import to enable it.
The decision to make it opt-in by default was originally made because the Go standard library was expected to have default zstd support added soon,
https://github.com/golang/go/issues/62513 however, the work took longer than anticipated and it will be postponed to upcoming major Go versions.

e.g.:

import (
  _ "github.com/prometheus/client_golang/prometheus/promhttp/zstd"
)
  • [FEATURE] prometheus: Add new CollectorFunc utility #​1724
  • [CHANGE] Minimum required Go version is now 1.22 (we also test client_golang against latest go version - 1.24) #​1738
  • [FEATURE] api: WithLookbackDelta and WithStats options have been added to API client. #​1743
  • [CHANGE] ⚠️ promhttp: Isolate zstd support and klauspost/compress library use to promhttp/zstd package. #​1765
All Changes

New Contributors

Full Changelog: prometheus/client_golang@v1.21.1...v1.22.0-rc.0

prometheus/client_model (github.com/prometheus/client_model)

v0.6.2

Compare Source

What's Changed

Full Changelog: prometheus/client_model@v0.6.1...v0.6.2

prometheus/common (github.com/prometheus/common)

v0.63.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.62.0...v0.63.0

prometheus/procfs (github.com/prometheus/procfs)

v0.16.1

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.16.0...v0.16.1

v0.16.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.15.1...v0.16.0

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.6

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.5...v1.36.6

User-visible changes:
CL/657895: internal_gengo: generate a const string literal for the raw descriptor
CL/653536: proto: Add CloneOf[M Message](m M) M

Maintenance:
CL/649135: all: set Go language version to Go 1.22
CL/654955: types/descriptorpb: regenerate using latest protobuf v30 release

v1.36.5

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.4...v1.36.5

Bug fixes:
CL/644437: protogen: fix name mangling for fields with identical GoCamelCase

Maintenance:
CL/641655: all: remove weak field support

v1.36.4

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.3...v1.36.4

Bug fixes:
CL/642975: reflect/protodesc: fix panic when working with dynamicpb

Maintenance:
CL/643276: internal_gengo: avoid allocations in rawDescGZIP() accessors
CL/642857: internal_gengo: switch back from string literal to hex byte slice
CL/642055: internal_gengo: use unsafe.StringData() to avoid a descriptor copy
CL/638135: internal_gengo: store raw descriptor in .rodata section

v1.36.3

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.2...v1.36.3

Bug fixes:
CL/642575: reflect/protodesc: fix panic when wor


Configuration

📅 Schedule: Branch creation - "after 5am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot added the dependencies Pull requests that update a dependency file label Apr 27, 2025
@openshift-ci
Copy link

openshift-ci bot commented Apr 27, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign jpinsonneau for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link

openshift-ci bot commented Apr 27, 2025

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a netobserv member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@jotak jotak closed this Apr 28, 2025
@jotak jotak deleted the konflux/mintmaker/release-1.8/go-modules branch July 8, 2025 16:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file needs-ok-to-test

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant