Skip to content

fix(deps): update go-dependencies #72

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

red-hat-konflux[bot]
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Aug 3, 2025

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/emicklei/go-restful/v3 v3.12.1 -> v3.13.0 age confidence indirect minor
github.com/fxamacker/cbor/v2 v2.7.0 -> v2.9.0 age confidence indirect minor
github.com/go-logr/logr v1.4.2 -> v1.4.3 age confidence indirect patch
github.com/go-openapi/jsonpointer v0.21.1 -> v0.21.2 age confidence indirect patch
github.com/google/gnostic-models v0.6.9 -> v0.7.0 age confidence indirect minor
github.com/onsi/gomega v1.37.0 -> v1.38.0 age confidence require minor
github.com/spf13/pflag v1.0.5 -> v1.0.7 age confidence indirect patch
golang.org/x/net v0.38.0 -> v0.43.0 age confidence indirect minor
golang.org/x/oauth2 v0.28.0 -> v0.30.0 age confidence indirect minor
golang.org/x/sys v0.33.0 -> v0.35.0 age confidence indirect minor
golang.org/x/term v0.32.0 -> v0.34.0 age confidence indirect minor
golang.org/x/text v0.25.0 -> v0.28.0 age confidence indirect minor
golang.org/x/time v0.9.0 -> v0.12.0 age confidence indirect minor
golang.org/x/tools v0.31.0 -> v0.36.0 age confidence indirect minor
google.golang.org/protobuf v1.36.5 -> v1.36.7 age confidence indirect patch
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v4.13.0 age confidence indirect minor
k8s.io/api v0.33.2 -> v0.33.4 age confidence require patch
k8s.io/apiextensions-apiserver v0.32.0 -> v0.33.4 age confidence indirect minor
k8s.io/apimachinery v0.33.2 -> v0.33.4 age confidence require patch
k8s.io/client-go v0.33.2 -> v0.33.4 age confidence require patch
k8s.io/kube-openapi c8a335a -> d7b6acb age confidence indirect digest
sigs.k8s.io/gateway-api v1.1.0 -> v1.3.0 age confidence indirect minor
sigs.k8s.io/json cfa47c3 -> 2d32026 age confidence indirect digest
sigs.k8s.io/structured-merge-diff/v4 v4.6.0 -> v4.7.0 age confidence indirect minor
sigs.k8s.io/yaml v1.4.0 -> v1.6.0 age confidence indirect minor

Release Notes

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.13.0

Compare Source

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)

v3.12.2

Compare Source

  • allow empty payloads in post,put,patch, issue #​580 ( thanks @​liggitt, Jordan Liggitt)
fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.0

Compare Source

v2.9.0 adds new features, refactors tests, and improves docs. New features improve interoperability/transcoding between CBOR & JSON.

v2.9.0 passed fuzz tests and is production quality. However, the new TextUnmarshaler feature will continue being fuzz tested a bit longer due to recent changes. The recent changes are limited and don't affect other parts of the codec that passed ~2 billion execs fuzzing.

What's Changed

Docs

CI

🔎 Details

Special Thanks

Many thanks to @​benluddy for adding these new features! 🎉

  • Add opt-in support for encoding.TextMarshaler and encoding.TextUnmarshaler to encode and decode from CBOR text string.
  • Add opt-in support for json.Marshaler and json.Unmarshaler via user-provided transcoding function.

New Contributors

Full Changelog: fxamacker/cbor@v2.8.0...v2.9.0

v2.8.0

Compare Source

v2.8.0 adds omitzero struct tag option, fixes and deprecates 3 functions, and bumps requirements to go 1.20+.

Many thanks to @​liggitt for contributing the omitzero support!

The "omitzero" option omits zero values from encoding, matching stdlib encoding/json behavior.
When specified in the cbor tag, the option is always honored.
When specified in the json tag, the option is honored when building with Go 1.24+.

This release fixes 3 functions (when called directly by user apps) to use same error handling on bad input as cbor.Unmarshal():

  • RawTag.UnmarshalCBOR() (thanks @​thomas-fossati for reporting this!)
  • ByteString.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

This release also deprecates those 3 functions because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

What's Changed

Other Changes
🔍 Details

New Contributors

Full Changelog: fxamacker/cbor@v2.7.0...v2.8.0

v2.7.1

Compare Source

v2.7.1 fixes 3 functions (when called directly by user apps) to use same error handling on bad inputs as cbor.Unmarshal():

  • ByteString.UnmarshalCBOR()
  • RawTag.UnmarshalCBOR()
  • SimpleValue.UnmarshalCBOR()

The above 3 fixed functions are deprecated because they were initially created for internal use. Please use Unmarshal() or UnmarshalFirst() instead.

To preserve backward compatibility, the deprecated functions were added to fuzz tests and will not be removed in v2.x.

Before Upgrading to v2.7.1

v2.8.0 is being fuzz tested and will be released later today. It adds support for omitzero struct tag option.

v2.7.1 is the last version to support go 1.17-1.19. v2.8.0 and newer releases will require go 1.20+.

What's Changed

Special Thanks

Thanks @​thomas-fossati for reporting the bug in RawTag.UnmarshalCBOR() when it is called directly by user apps providing bad input data!

Full Changelog: fxamacker/cbor@v2.7.0...v2.7.1

go-logr/logr (github.com/go-logr/logr)

v1.4.3

Compare Source

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.21.2

Compare Source

google/gnostic-models (github.com/google/gnostic-models)

v0.7.0

Compare Source

onsi/gomega (github.com/onsi/gomega)

v1.38.0

Compare Source

1.38.0

Features
  • gstruct handles extra unexported fields [4ee7ed0]
Fixes
  • support [] in IgnoringTopFunction function signatures (#​851) [36bbf72]
Maintenance
spf13/pflag (github.com/spf13/pflag)

v1.0.7

Compare Source

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.6...v1.0.7

v1.0.6

Compare Source

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.5...v1.0.6

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.7

Compare Source

Maintenance / optimizations:

CL/683955: encoding/protowire: micro-optimize SizeVarint (-20% on Intel)
CL/674055: internal/impl: remove unnecessary atomic access for non-lazy lists
CL/674015: impl: remove unnecessary nil check from presence.Present
CL/673495: types/descriptorpb: regenerate using latest protobuf v31 release
CL/670516: cmd/protoc-gen-go: centralize presence and lazy logic into filedesc
CL/670515: internal: move usePresenceForField to internal/filedesc
CL/670275: internal/impl: clean up usePresenceForField() (no-op)

v1.36.6

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.5...v1.36.6

User-visible changes:
CL/657895: internal_gengo: generate a const string literal for the raw descriptor
CL/653536: proto: Add CloneOf[M Message](m M) M

Maintenance:
CL/649135: all: set Go language version to Go 1.22
CL/654955: types/descriptorpb: regenerate using latest protobuf v30 release

evanphx/json-patch (gopkg.in/evanphx/json-patch.v4)

v4.13.0

Compare Source

Remove github.com/pkg/errors dependency

kubernetes/api (k8s.io/api)

v0.33.4

Compare Source

v0.33.3

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.33.4

Compare Source

v0.33.3

Compare Source

v0.33.2

Compare Source

v0.33.1

Compare Source

v0.33.0

Compare Source

v0.32.8

Compare Source

v0.32.7

Compare Source

v0.32.6

Compare Source

v0.32.5

Compare Source

v0.32.4

Compare Source

v0.32.3

Compare Source

v0.32.2

Compare Source

v0.32.1

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.33.4

Compare Source

v0.33.3

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.33.4

Compare Source

v0.33.3

Compare Source

kubernetes-sigs/gateway-api (sigs.k8s.io/gateway-api)

v1.3.0

Compare Source

Changes since v1.3.0-rc.2

Changes since v1.2.1

Noteworthy Changes for Implementors

This section is intended to be a guide for API changes that might inspire or require implementation changes.
None of these API changes represent breaking changes.

OverlappingTLSConfig for Connection Coalescing

A new OverlappingTLSConfig condition has been added to Gateway Listeners to indicate situations where
Connection Coalescing could be problematic. The Gateway specification for handling Hostname and SNI matching for HTTPS
requests has been clarified and now recommends that implementations return 421 HTTP code responses in certain cases.

Move BackendTLSPolicy SubjectAltNames from Core to Extended
  • The SubjectAltNames field of BackendTLSPolicy changed from Core to Extended feature. (#​3591,@​mlavacca)
The backendRef filter must send traffic to the correct backends when weighted routing is configured
  • A new conformance test was added to ensure backendRef filters don't affect weighted routing. (#​3604,@​dprotaso)
Clarify reasons for certain object status conditions
  • Set proper reason for Gateway parametersRef Accepted condition when parametersRef is invalid. (#​3579,@​mlavacca)
  • Improve GatewayClass GatewayClassReasonInvalidParameters reason description. (#​3553,@​mlavacca)
BackendTLSPolicy
GRPCRoute
Gateway.Spec.Addresses changes

A new type GatewaySpecAddress replaces GatewayAddress. In GatewayAddress the Value field was required. In
GatewaySpecAddress the Value field is optional. When the Value is unspecified, if an implementation supports that,
it SHOULD automatically assign an address. If an implementation does not support an empty Value, it MUST set the
Programmed condition in status to false with a reason of "AddressNotAssigned". The Addresses field in
Gateway.Spec has changed from type []GatewayAddress to []GatewaySpecAddress.

Standard Channel Additions and Changes

The Standard channel is Gateway API's set of maximally-stable install files.
Only features with the best testing and support are added to the standard
channel. This channel should be considered GA or stable, and future changes will
be fully backwards compatible.

Percentage-Based Request Mirroring 🎉

This feature enhances the existing request mirroring feature
by allowing users to specify a percentage of requests to be mirrored in both HTTPRoute
and GRPCRoute objects.

This feature has graduated to Standard and is now considered GA or Stable.

This feature's name for conformance tests (and GatewayClass status reporting) is
HTTPRouteRequestPercentageMirror.

This feature's status is Extended, meaning that it is optional for
implementations to support. If you're using Experimental Channel, you can refer
to the supportedFeatures field in the status of any GatewayClass.

Relevant PRs:

Experimental Channel Additions and Changes

The Experimental Channel is Gateway API's channel for testing out changes and
gaining confidence with them before allowing them to go to Standard.

This channel may include features that are changed or removed later!

New experimental resources now start with "X"

This release introduces 2 new experimental resources:

  • XBackendTrafficPolicy
  • XListenerSet

Both of these resources are described in more detail below. As you may notice,
these resource names start with X and are part of an effort to distinguish
experimental channel resources from standard channel resources.

In addition to the separate names, these resources are also part of the
x-k8s.io API group instead of k8s.io, as a further effort to signal the
experimental nature of these resources.

In practice this means two things:

  1. These resources can coexist with standard channel resources
  2. Migrating to standard channel will require recreating these resources with
    the standard channel names and API Group (both lacking the "x" prefix)

For more context on this change, refer to the related discussion.

CORS (Cross Origin Resource Sharing) Filter

GEP-1767 describes how to add
configuration of CORS filters on HTTPRoute objects, and in this release, this change
has moved to Experimental.

Please see the GEP reference document or the API reference for the details.

This feature has graduated to Experimental and should now be used for testing
and verification purposes only. Experimental features may be changed or removed
in a future version.

This feature does not currently have a feature name defined.

This feature's status is Extended, meaning that it is optional for
implementations to support.

As there is no feature name or conformance testing available for this feature
yet, please check your implementation's documentation to see if it is supported.

Relevant PRs:

XListenerSets (Standard Mechanism to Merge Gateways)

GEP-1713 defines a new mechanism to merge listeners into a single
Gateway, and in this release, this change has moved to Experimental. Following a new naming convention, an
experimental object name is prefaced with an X, thus ListenerSet has changed to XListenerSet.
The object group name has changed from gateway.networking.k8s.io to gateway.networking.x-k8s.io.

Please see the GEP reference document or the API reference for the details.

This feature has graduated to Experimental and should now be used for testing
and verification purposes only. Experimental features may be changed or removed
in a future version.

This feature does not currently have a feature name defined.

This feature's status is Extended, meaning that it is optional for
implementations to support.

As there is no feature name or conformance testing available for this feature
yet, please check your implementation's documentation to see if it is supported.

Relevant PRs:

  • Clarified what it means for Gateway Listeners to be distinct (#​3477,@​youngnick)
  • GEP-1713: Standard Mechanism to Merge Multiple Gateways (#​3213),@​dprotaso)
  • Update GEP-1713 - Support attaching ListenerSets across namespaces (#​3632,@​dprotaso)
  • GEP-1713: Standard Mechanism to Merge Multiple Gateways - move GEP Link to Experimental (#​3664),@​gcs278)
  • Refactor codegen scripts to make it easier to ge

Configuration

📅 Schedule: Branch creation - "after 5am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

@red-hat-konflux red-hat-konflux bot requested a review from a team as a code owner August 3, 2025 08:06
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-dependencies branch 5 times, most recently from 50ff1b2 to bf6a95d Compare August 13, 2025 16:14
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-dependencies branch 2 times, most recently from c5718a7 to 5ec2543 Compare August 17, 2025 12:17
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@yftacherzog yftacherzog force-pushed the konflux/mintmaker/main/go-dependencies branch from 5ec2543 to 983b2d4 Compare August 19, 2025 12:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants