Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 2, 2025

Bumps the prod-dependencies group with 9 updates in the / directory:

Package From To
github.com/docker/cli 28.1.1+incompatible 28.2.2+incompatible
github.com/go-logr/logr 1.4.2 1.4.3
github.com/google/go-containerregistry 0.20.3 0.20.5
github.com/onsi/gomega 1.36.3 1.37.0
github.com/operator-framework/api 0.30.0 0.31.0
github.com/operator-framework/operator-manifest-tools 0.8.0 0.9.0
k8s.io/api 0.32.3 0.33.1
k8s.io/client-go 0.32.3 0.33.1
sigs.k8s.io/controller-runtime 0.20.4 0.21.0

Updates github.com/docker/cli from 28.1.1+incompatible to 28.2.2+incompatible

Commits
  • e6534b4 Merge pull request #6116 from vvoland/vendor-docker
  • 5c3128e vendor: github.com/docker/docker v28.2.2-dev (45873be4ae3f)
  • 879ac3f Merge pull request #6110 from thaJeztah/bump_engine
  • 92fa1e1 vendor: github.com/docker/docker 0e2cc22d36ae (v28.2-dev)
  • 4bec3a6 Merge pull request #6114 from thaJeztah/deprecate_non_compliant_registries
  • a007d1a Merge pull request #6113 from thaJeztah/config_suppress_err
  • bbfbd54 docs: deprecated: fallback for non-OCI-compliant registries is removed
  • 2d21e1f cli/config/configfile: explicitly ignore error
  • bc9be0b Merge pull request #6112 from thaJeztah/bump_tools
  • 3fe7dc5 Dockerfile: update compose to v2.36.2
  • Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.4.2 to 1.4.3

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.3

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

Commits
  • 38a1c47 build(deps): bump github/codeql-action from 3.28.17 to 3.28.18
  • f08bedd build(deps): bump actions/setup-go from 5.4.0 to 5.5.0
  • 6295e99 build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0
  • 028840d build(deps): bump github/codeql-action from 3.28.15 to 3.28.17
  • 511e5fa Merge pull request #367 from go-logr/dependabot/github_actions/github/codeql-...
  • d806463 build(deps): bump github/codeql-action from 3.28.13 to 3.28.15
  • 158c311 Merge pull request #366 from thockin/master
  • c79ddb3 Update to support golangci-lint v2
  • 20a64ba build(deps): bump github/codeql-action from 3.28.12 to 3.28.13
  • 0385e14 Add comments around slog exceptions
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.20.3 to 0.20.5

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.5

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.5

v0.20.4 - Not usable as a go module

🚨 This release was published to the Go module proxy and then re-tagged with a different commit. This means it's not usable as a Go module (google/go-containerregistry#2107) -- please us v0.20.5 instead.

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.4

Commits

Updates github.com/onsi/gomega from 1.36.3 to 1.37.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.37.0

1.37.0

Features

  • add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]
Changelog

Sourced from github.com/onsi/gomega's changelog.

1.37.0

Features

  • add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]
Commits

Updates github.com/operator-framework/api from 0.30.0 to 0.31.0

Release notes

Sourced from github.com/operator-framework/api's releases.

v0.31.0

What's Changed

Full Changelog: operator-framework/api@v0.30.0...v0.31.0

Commits
  • 436783b make grpcPodConfig.extractContent.cacheDir an optional field (#421)
  • e9b2ef9 Bump golang.org/x/net from 0.36.0 to 0.38.0 (#422)
  • dbda0e3 Bump sigs.k8s.io/controller-runtime in the k8s-dependencies group (#420)
  • a4e879b group k8s and golang.org/x dependencies (#419)
  • f670646 Bump k8s.io/apiextensions-apiserver from 0.32.2 to 0.32.3 (#418)
  • 5e8eab6 Bump golang.org/x/net from 0.34.0 to 0.36.0 (#414)
  • 78ed98e Bump sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.3 (#413)
  • See full diff in compare view

Updates github.com/operator-framework/operator-manifest-tools from 0.8.0 to 0.9.0

Release notes

Sourced from github.com/operator-framework/operator-manifest-tools's releases.

v0.9.0

What's Changed

Full Changelog: operator-framework/operator-manifest-tools@v0.8.0...v0.9.0

Commits
  • e7a47a9 Merge pull request #80 from acornett21/main
  • e7ac928 updating dependencies to support k8s 1.32
  • af42b0c Merge pull request #69 from operator-framework/dependabot/go_modules/github.c...
  • 41019a7 chore(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0
  • aef413e Merge pull request #68 from operator-framework/dependabot/go_modules/github.c...
  • 8952876 chore(deps): bump github.com/google/go-containerregistry
  • da31960 Merge pull request #70 from operator-framework/dependabot/go_modules/github.c...
  • b10852d chore(deps): bump github.com/onsi/gomega from 1.36.1 to 1.36.2
  • 64f3b4f chore(deps): bump github.com/onsi/gomega from 1.32.0 to 1.36.1 (#66)
  • 1b5f123 chore(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 (#62)
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.32.3 to 0.33.1

Commits
  • 04f698e Update dependencies to v0.33.1 tag
  • 16cedc7 Merge pull request #131088 from atiratree/rename-terminating-replicas-fg
  • dc88679 Merge pull request #131103 from ahrtr/etcd_sdk_20250328
  • 4a456a2 bump etcd 3.5.21 sdk
  • 96e38c9 rename DeploymentPodReplacementPolicy FG to DeploymentReplicaSetTerminatingRe...
  • c21a017 Merge pull request #129970 from mortent/AddResourceV1beta2API
  • d0673db Run make update
  • 118546d Merge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...
  • f9401a3 Merge pull request #130797 from jm-franc/configurable-tolerance
  • 9b3e544 Generated UPDATE_COMPATIBILITY_FIXTURE_DATA
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.32.3 to 0.33.1

Commits
  • 173776a Merge pull request #131708tigrato/automated-cherry-pick-of-#131702
  • a3d1fde fix: fixes a possible panic in NewYAMLToJSONDecoder
  • 955939f bump etcd 3.5.21 sdk
  • e8a77bd Merge pull request #130910 from googs1025/fix/datarace
  • 7e8c77e Merge pull request #130906 from serathius/streaming-validation
  • 27fd396 flake: fix data race for func TestBackoff_Step
  • 8bcc6f1 Update kube-openapi and integrate streaming tags validation
  • 6ce776c Merge pull request #130857 from thockin/kk_small_vg_diffs
  • f2c94d6 Comment on origin and JSON schema
  • b63ba07 Use origin in validateFalse's own test
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.32.3 to 0.33.1

Commits
  • e7397e5 Update dependencies to v0.33.1 tag
  • ecbbb06 bump etcd 3.5.21 sdk
  • 2086688 Merge pull request #129970 from mortent/AddResourceV1beta2API
  • dba34c7 Run make update
  • e359642 Merge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...
  • 3bf0a05 Merge pull request #130797 from jm-franc/configurable-tolerance
  • 7a03a3b Generated files
  • 1676beb Refresh autogenerated files following the configurable tolerance updates.
  • 387edb8 Merge pull request #130967 from aojea/listers
  • 21dc3b4 benchmark to show inefficient linear search lookup
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.20.4 to 0.21.0

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.21.0

Highlights

  • Bump to Kubernetes v1.33 libraries
  • Improvements for priority queue (#2374)
  • envtest now has an option to download envtest binaries (can be used to replace setup-envtest depending on use case)
  • Metric improvements: native histograms, all Go runtime metrics are enabled now
  • Various bug fixes
  • New reviewers: @​troy0820, @​JoelSpeed!!

⚠️ Breaking Changes

  • Bump to k8s.io/* v0.33.0 and Go 1.24 (#3104 #3142 #3161 #3204 #3215)
  • config: Stop enabling client-side ratelimiter by default (#3119)
    • Previous behavior can be preserved by setting QPS 20 and Burst 30 on the rest.Config
  • controller: NewUnmanaged/NewTypedUnmanaged: Stop requiring a manager (#3141)
  • reconcile: Deprecate Result.Requeue (#3107)

✨ New Features

  • controller: priority queue:
    • Add debug logging for the state of the priority queue (#3075)
    • Add priority label to queue depth metric (#3156)
    • Leverage IsInInitialList (#3162)
    • Remove redundant WithLowPriorityWhenUnchanged in builder (#3168)
    • Retain the priority after Reconcile (#3167)
    • Set priority automatically in handlers (#3111 #3152 #3160 #3174)
  • envtest: Add Environment.KubeConfig field (#2278)
  • envtest: Add option to download envtest binaries (#3135 #3137)
  • events: Add IsInInitialList to TypedCreateEvent (#3162)
  • log/zap: Enable panic log level (#3186)
  • logging: Adopt WarningHandlerWithContext (#3176)
  • logging: Improve logging by adopting contextual logging (#3149)
  • metrics: Adopt native histograms (#3165)
  • metrics: Expose all Go runtime metrics (#3070)

🐛 Bug Fixes

  • apiutil: restmapper: Respect preferred version (#3151)
  • builder: webhook: Fix custom path for webhook conflicts (#3102)
  • cache: Clone maps to prevent data races when concurrently creating caches using the same options (#3078)
  • cache: Stop accumulating lists in multi-namespace cache implementation (#3195)
  • cache: List out of global cache when present and necessary (#3126)
  • client: Return error if pagination is used with the cached client (#3134)
  • controller: Support WaitForSync in TypedSyncingSource (#3084)
  • controller: priority queue: Fix behavior of rate limit option in priorityqueue.AddWithOpts (#3103)
  • controller: priority queue: Yet another queue_depth metric fix (#3085)
  • controllerutil: CreateOrUpdate: Avoid panic when the MutateFn is nil (#2828)
  • envtest: Fix nil pointer exception in Stop() (#3153)
  • fake client: Fix data races when writing to the scheme (#3143)

... (truncated)

Commits
  • 71f7db5 Merge pull request #3225 from troy0820/troy0820/prepare-for-0.21-release
  • 52d8779 update README with go version
  • ab37f74 Merge pull request #3223 from troy0820/troy0820/return-warnings-on-webhooks
  • 250a88f return warnings on webhooks
  • 85ee7a9 Merge pull request #3217 from kubernetes-sigs/dependabot/github_actions/all-g...
  • 81f1fae 🌱 Bump the all-github-actions group across 1 directory with 3 updates
  • d9a2274 Merge pull request #3187 from dongjiang1989/update-golangci-lint-v2
  • 9c38211 update golangci-lint to v2
  • 9b5f6a7 Merge pull request #3208 from troy0820/troy0820/api-machinery-marshal
  • b3278df use sigs.k8s.io/json to unmarshal in fakeclient
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 2, 2025
@openshift-ci openshift-ci bot requested review from acornett21 and jomkz June 2, 2025 22:35
@openshift-ci openshift-ci bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Jun 2, 2025
Copy link

openshift-ci bot commented Jun 2, 2025

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a redhat-openshift-ecosystem member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@dcibot
Copy link

dcibot commented Jun 2, 2025

@acornett21 acornett21 added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jun 3, 2025
@acornett21
Copy link
Contributor

This failure appears to be do to the k8s 1.24 update, I see the same/similar failure in

@acornett21
Copy link
Contributor

@tkrishtop
Copy link
Contributor

from change #1273:

DCI job is failing because this PR still uses 1.23 Golang in the Dockerfile.
To fix the issue, this PR should be merged first: #1276
cc: @nsilla

@acornett21
Copy link
Contributor

@tkrishtop The first #1276 isn't the only PR needed, there needs to be changes in the linked PR's for library changes in operator-framework, since K8's changed how some of their library functions work.

@openshift-ci openshift-ci bot removed the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jun 5, 2025
@dependabot dependabot bot force-pushed the dependabot/go_modules/prod-dependencies-9d0dad5686 branch from 6124471 to 400e723 Compare June 5, 2025 14:24
@dcibot
Copy link

dcibot commented Jun 5, 2025

@dependabot dependabot bot force-pushed the dependabot/go_modules/prod-dependencies-9d0dad5686 branch from 400e723 to 3ce0f87 Compare June 16, 2025 23:49
@dcibot
Copy link

dcibot commented Jun 17, 2025

@acornett21
Copy link
Contributor

@dependabot rebase

Bumps the prod-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/docker/cli](https://github.com/docker/cli) | `28.1.1+incompatible` | `28.2.2+incompatible` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.2` | `1.4.3` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.20.3` | `0.20.5` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.36.3` | `1.37.0` |
| [github.com/operator-framework/api](https://github.com/operator-framework/api) | `0.30.0` | `0.31.0` |
| [github.com/operator-framework/operator-manifest-tools](https://github.com/operator-framework/operator-manifest-tools) | `0.8.0` | `0.9.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.32.3` | `0.33.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.32.3` | `0.33.1` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.20.4` | `0.21.0` |



Updates `github.com/docker/cli` from 28.1.1+incompatible to 28.2.2+incompatible
- [Commits](docker/cli@v28.1.1...v28.2.2)

Updates `github.com/go-logr/logr` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.2...v1.4.3)

Updates `github.com/google/go-containerregistry` from 0.20.3 to 0.20.5
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.20.3...v0.20.5)

Updates `github.com/onsi/gomega` from 1.36.3 to 1.37.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.36.3...v1.37.0)

Updates `github.com/operator-framework/api` from 0.30.0 to 0.31.0
- [Release notes](https://github.com/operator-framework/api/releases)
- [Changelog](https://github.com/operator-framework/api/blob/master/RELEASE.md)
- [Commits](operator-framework/api@v0.30.0...v0.31.0)

Updates `github.com/operator-framework/operator-manifest-tools` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/operator-framework/operator-manifest-tools/releases)
- [Changelog](https://github.com/operator-framework/operator-manifest-tools/blob/main/.goreleaser.yml)
- [Commits](operator-framework/operator-manifest-tools@v0.8.0...v0.9.0)

Updates `k8s.io/api` from 0.32.3 to 0.33.1
- [Commits](kubernetes/api@v0.32.3...v0.33.1)

Updates `k8s.io/apimachinery` from 0.32.3 to 0.33.1
- [Commits](kubernetes/apimachinery@v0.32.3...v0.33.1)

Updates `k8s.io/client-go` from 0.32.3 to 0.33.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.32.3...v0.33.1)

Updates `sigs.k8s.io/controller-runtime` from 0.20.4 to 0.21.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.20.4...v0.21.0)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-version: 28.2.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.20.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/operator-framework/api
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/operator-framework/operator-manifest-tools
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.33.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/prod-dependencies-9d0dad5686 branch from 3ce0f87 to 5690a56 Compare June 23, 2025 16:39
@acornett21
Copy link
Contributor

/ok-to-test

@openshift-ci openshift-ci bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Jun 23, 2025
@coveralls
Copy link

Coverage Status

coverage: 83.272%. remained the same
when pulling 5690a56 on dependabot/go_modules/prod-dependencies-9d0dad5686
into f98470c on main.

@dcibot
Copy link

dcibot commented Jun 23, 2025

@acornett21
Copy link
Contributor

/retest

@acornett21
Copy link
Contributor

check workload preflight-green

@dcibot
Copy link

dcibot commented Jun 24, 2025

@openshift-ci openshift-ci bot added the lgtm Indicates that a PR is ready to be merged. label Jun 24, 2025
Copy link

openshift-ci bot commented Jun 24, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: acornett21, dependabot[bot]

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jun 24, 2025
@acornett21 acornett21 merged commit 329a4f3 into main Jun 24, 2025
6 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/prod-dependencies-9d0dad5686 branch June 24, 2025 18:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. dependencies Pull requests that update a dependency file go Pull requests that update Go code lgtm Indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants