Skip to content

Conversation

red-hat-konflux[bot]
Copy link

@red-hat-konflux red-hat-konflux bot commented Sep 25, 2025

This PR contains the following updates:

Package Type Update Change
cloud.google.com/go indirect minor v0.120.0 -> v0.123.0
cloud.google.com/go/auth indirect patch v0.16.0 -> v0.16.5
cloud.google.com/go/compute/metadata indirect minor v0.6.0 -> v0.9.0
cloud.google.com/go/iam indirect patch v1.5.0 -> v1.5.2
cloud.google.com/go/kms indirect minor v1.21.2 -> v1.23.0
cloud.google.com/go/longrunning indirect patch v0.6.6 -> v0.6.7
contrib.go.opencensus.io/exporter/ocagent indirect digest 05415f1 -> 7399e0f
cuelang.org/go indirect minor v0.12.1 -> v0.14.1
github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider indirect minor v0.14.0 -> v0.18.1
github.com/Azure/azure-sdk-for-go/sdk/azcore require minor v1.18.0 -> v1.19.1
github.com/Azure/azure-sdk-for-go/sdk/internal indirect patch v1.11.1 -> v1.11.2
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys indirect minor v1.3.1 -> v1.4.0
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal indirect minor v1.1.1 -> v1.2.0
github.com/Azure/go-autorest/autorest indirect patch v0.11.29 -> v0.11.30
github.com/Azure/go-autorest/autorest/adal indirect patch v0.9.23 -> v0.9.24
github.com/Azure/go-autorest/autorest/azure/auth indirect patch v0.5.12 -> v0.5.13
github.com/Azure/go-autorest/autorest/azure/cli indirect patch v0.4.6 -> v0.4.7
github.com/Azure/go-autorest/autorest/date indirect patch v0.3.0 -> v0.3.1
github.com/Azure/go-autorest/logger indirect patch v0.2.1 -> v0.2.2
github.com/Azure/go-autorest/tracing indirect patch v0.6.0 -> v0.6.1
github.com/AzureAD/microsoft-authentication-library-for-go indirect minor v1.4.2 -> v1.5.0
github.com/ThalesIgnite/crypto11 indirect minor v1.2.5 -> v1.6.0
github.com/alibabacloud-go/debug indirect patch v1.0.0 -> v1.0.1
github.com/alibabacloud-go/openapi-util indirect patch v0.1.0 -> v0.1.1
github.com/alibabacloud-go/tea indirect minor v1.2.1 -> v1.3.12
github.com/aws/aws-sdk-go-v2/credentials indirect minor v1.17.67 -> v1.18.16
github.com/aws/aws-sdk-go-v2/feature/ec2/imds indirect minor v1.16.30 -> v1.18.9
github.com/aws/aws-sdk-go-v2/internal/configsources indirect minor v1.3.34 -> v1.4.9
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding indirect minor v1.12.3 -> v1.13.1
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url indirect minor v1.12.15 -> v1.13.9
github.com/aws/smithy-go indirect minor v1.22.2 -> v1.23.0
github.com/awslabs/amazon-ecr-credential-helper/ecr-login require minor v0.9.1 -> v0.10.1
github.com/containerd/stargz-snapshotter/estargz indirect minor v0.16.3 -> v0.17.0
github.com/cyberphone/json-canonicalization indirect digest 785e297 -> 19d51d7
github.com/digitorus/pkcs7 indirect digest 3a137a8 -> ffadbf3
github.com/digitorus/timestamp indirect digest 220c5c2 -> c455327
github.com/docker/go-connections require minor v0.5.0 -> v0.6.0
github.com/fsnotify/fsnotify indirect minor v1.8.0 -> v1.9.0
github.com/go-logfmt/logfmt indirect minor v0.5.1 -> v0.6.0
github.com/go-logr/logr indirect patch v1.4.2 -> v1.4.3
github.com/go-openapi/analysis indirect minor v0.23.0 -> v0.24.0
github.com/go-openapi/errors indirect patch v0.22.1 -> v0.22.3
github.com/go-openapi/jsonpointer indirect minor v0.21.1 -> v0.22.1
github.com/go-openapi/jsonreference indirect patch v0.21.0 -> v0.21.2
github.com/go-openapi/loads indirect minor v0.22.0 -> v0.23.1
github.com/go-openapi/runtime indirect minor v0.28.0 -> v0.29.0
github.com/go-openapi/spec indirect minor v0.21.0 -> v0.22.0
github.com/go-openapi/strfmt indirect minor v0.23.0 -> v0.24.0
github.com/go-openapi/swag indirect minor v0.23.1 -> v0.25.1
github.com/go-openapi/validate indirect minor v0.24.0 -> v0.25.0
github.com/gobuffalo/flect indirect patch v1.0.2 -> v1.0.3
github.com/google/certificate-transparency-go indirect patch v1.3.1 -> v1.3.2
github.com/google/gnostic-models indirect minor v0.6.9 -> v0.7.0
github.com/google/go-containerregistry require patch v0.20.3 -> v0.20.6
github.com/google/go-containerregistry/pkg/authn/k8schain require digest dbcd01c -> 59a4b85
github.com/google/go-containerregistry/pkg/authn/kubernetes require digest dbcd01c -> 59a4b85
github.com/hashicorp/go-retryablehttp require patch v0.7.7 -> v0.7.8
github.com/hashicorp/vault/api indirect minor v1.16.0 -> v1.21.0
github.com/in-toto/attestation indirect patch v1.1.1 -> v1.1.2
github.com/jdolitsky/glog replace digest 78744e9 -> 9ef845f
github.com/jedisct1/go-minisign indirect digest 661be99 -> d2f9f49
github.com/letsencrypt/boulder require minor v0.0.0-20240620165639-de9c06129bec -> v0.20250929.0
github.com/mailru/easyjson indirect patch v0.9.0 -> v0.9.1
github.com/open-policy-agent/opa indirect minor v1.1.0 -> v1.9.0
github.com/prometheus/client_golang indirect minor v1.21.1 -> v1.23.2
github.com/prometheus/client_model indirect patch v0.6.1 -> v0.6.2
github.com/prometheus/common indirect minor v0.62.0 -> v0.66.1
github.com/prometheus/procfs indirect minor v0.15.1 -> v0.17.0
github.com/rcrowley/go-metrics indirect digest cf1acfc -> 65e299d
github.com/sagikazarmark/locafero indirect minor v0.7.0 -> v0.12.0
github.com/secure-systems-lab/go-securesystemslib indirect patch v0.9.0 -> v0.9.1
github.com/sigstore/protobuf-specs require minor v0.4.1 -> v0.5.0
github.com/sigstore/rekor require minor v1.3.10 -> v1.4.2
github.com/sigstore/scaffolding require patch v0.7.22 -> v0.7.25
github.com/sigstore/sigstore require patch v1.9.4 -> v1.9.5
github.com/sigstore/sigstore-go require patch v0.7.2 -> v0.7.3
github.com/sigstore/sigstore/pkg/signature/kms/aws require patch v1.9.4 -> v1.9.5
github.com/sigstore/sigstore/pkg/signature/kms/azure require patch v1.9.4 -> v1.9.5
github.com/sigstore/sigstore/pkg/signature/kms/gcp require patch v1.9.4 -> v1.9.5
github.com/sigstore/sigstore/pkg/signature/kms/hashivault require patch v1.9.4 -> v1.9.5
github.com/spf13/afero indirect minor v1.12.0 -> v1.15.0
github.com/spf13/cast indirect minor v1.7.1 -> v1.10.0
github.com/spf13/cobra require minor v1.9.1 -> v1.10.1
github.com/spf13/pflag indirect patch v1.0.6 -> v1.0.10
github.com/spf13/viper require minor v1.20.1 -> v1.21.0
github.com/stretchr/testify require minor v1.10.0 -> v1.11.1
github.com/vbatts/tar-split indirect minor v0.11.6 -> v0.12.1
gitlab.com/gitlab-org/api/client-go indirect minor v0.127.0 -> v0.148.1
go.mongodb.org/mongo-driver indirect minor v1.14.0 -> v1.17.4
go.opentelemetry.io/auto/sdk indirect minor v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc indirect minor v0.60.0 -> v0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp indirect minor v0.60.0 -> v0.63.0
go.uber.org/atomic indirect minor v1.9.0 -> v1.11.0
golang.org/x/crypto require minor v0.37.0 -> v0.42.0
golang.org/x/exp indirect digest 7e4ce0a -> df92998
golang.org/x/mod indirect minor v0.24.0 -> v0.28.0
golang.org/x/net require minor v0.39.0 -> v0.44.0
golang.org/x/oauth2 indirect minor v0.29.0 -> v0.31.0
golang.org/x/sync indirect minor v0.13.0 -> v0.17.0
golang.org/x/sys indirect minor v0.32.0 -> v0.36.0
golang.org/x/term indirect minor v0.31.0 -> v0.35.0
golang.org/x/text indirect minor v0.24.0 -> v0.29.0
golang.org/x/time require minor v0.11.0 -> v0.13.0
golang.org/x/tools indirect minor v0.32.0 -> v0.37.0
google.golang.org/api indirect minor v0.229.0 -> v0.251.0
google.golang.org/genproto indirect digest 207652e -> 57b25ae
google.golang.org/genproto/googleapis/api indirect digest 207652e -> 57b25ae
google.golang.org/genproto/googleapis/rpc indirect digest 207652e -> 57b25ae
k8s.io/api require minor v0.32.3 -> v0.34.1
k8s.io/apiextensions-apiserver indirect minor v0.27.6 -> v0.34.1
k8s.io/apimachinery require minor v0.32.3 -> v0.34.1
k8s.io/client-go require minor v0.32.3 -> v0.34.1
k8s.io/code-generator replace minor v0.29.4 -> v0.34.1
k8s.io/code-generator require minor v0.32.2 -> v0.34.1
k8s.io/gengo indirect digest 1244d31 -> ec3ebc5
k8s.io/kube-openapi replace digest 2dd684a -> 589584f
k8s.io/kube-openapi require digest 32ad38e -> 589584f
k8s.io/utils indirect digest 1f6e0b7 -> 0af2bda
knative.dev/hack require digest e89096d -> 1499de2
knative.dev/hack/schema require digest 0914314 -> 1499de2
knative.dev/pkg require digest 74c4be5 -> 1e71536
sigs.k8s.io/json indirect digest cfa47c3 -> 2d32026
sigs.k8s.io/release-utils require minor v0.11.1 -> v0.12.2
sigs.k8s.io/yaml require minor v1.4.0 -> v1.6.0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

googleapis/google-cloud-go (cloud.google.com/go)

v0.123.0

Compare Source

Features
Bug Fixes

v0.122.0

Compare Source

Features
Bug Fixes

v0.121.6

Compare Source

Bug Fixes
  • internal/librariangen: Fix Dockerfile permissions for go mod tidy (#​12704) (0e70a0b)

v0.121.5

Compare Source

Bug Fixes
  • internal/librariangen: Get README title from service config yaml (#​12676) (b3b8f70)
  • internal/librariangen: Update source_paths to source_roots in generate-request.json (#​12691) (2adb6f9)

v0.121.4

Compare Source

Bug Fixes
  • geminidataanalytics: Correct resource reference type for parent field in data_chat_service.proto (98ba6f0)
  • internal/postprocessor: Add git (#​12524) (82030ee)

v0.121.3

Compare Source

Documentation
  • impersonate: Address TODO in impersonate/example_test.go (#​12401) (dd096ec)

v0.121.2

Compare Source

Documentation

v0.121.1

Compare Source

Bug Fixes
  • civil: Add support for civil.Date, civil.Time and civil.DateTime arguments to their respective Scan methods (#​12240) (7127ce9), refs #​12060

v0.121.0

Compare Source

Features

v0.120.1

Compare Source

Bug Fixes
cue-lang/cue (cuelang.org/go)

v0.14.1

Compare Source

Evaluator

Fix three more regressions where evalv3 gave cycle errors and evalv2 did not.

Fix a regression where evalv3 was too strict with ellipses in certain situations, causing "field not allowed" regressions.

Fix a regression where errors in optional fields were not being ignored as intended.

Full list of changes since v0.14.0

v0.14.0

Compare Source

This release brings significant performance improvements, three language changes, and initial support for Kubernetes CRDs.

Changes which may break some users are marked below with: ⚠️

Evaluator

Performance

A particularly slow part of the new closedness algorithm has been rewritten for speed, resulting in improvements of up to 10x in wall times for some projects.

Significant progress has been made to the new evaluator's memory usage; a few large projects experiencing high memory usage on v0.13 now see reductions of up to 80%.

Various other optimizations and performance bug fixes have been made to the new evaluator, yielding speed-ups of 5-20% on a variety of CUE projects.

error builtin

A new error builtin is added to the language, which allows users to create custom error values with a specified message.

Don't simplify validators into concrete values

A new CUE_EXPERIMENT=keepvalidators experiment is introduced, already on by default, which prevents validators from being simplified into concrete values.

X == Y and == X

Firstly, there were several bug fixes related to ==. Most notably, [int] == [int] incorrectly resolved to true. It now correctly resolves to an error.

All other changes are enabled using the @experiment(structcmp) file-level attribute.
Enabling this experiment allows all CUE values to be compared for equality. This includes comparing structs.

The same experiment also allows a unary == to enforce that a value is a specific concrete value.

Other changes

⚠️ The file embedding experiment can no longer be disabled via CUE_EXPERIMENT=embed=0, having been introduced in CUE v0.10.0.

File embedding is now enabled when using the cue/cuecontext or cue/load APIs; earlier versions could not expose it via the Go API due to an import cycle.

⚠️ The topological field sorting experiment can no longer be disabled via CUE_EXPERIMENT=toposort=0, having been introduced in CUE v0.11.0.

⚠️ CUE_EXPERIMENT=cmdreferencepkg, introduced in v0.13.0 to require referencing tool packages to declare cue cmd tasks, is now on by default.

The new closedness algorithm has been adjusted to fix a number of "field not allowed" bugs, particularly in the form of regressions compared to the old evaluator.

A particularly slow part of the new closedness algorithm has been optimized, resulting in improvements of up to 10x in wall times for some projects.

cmd/cue

⚠️ cue def --strict jsonschema:, deprecated in favor of cue def jsonschema+strict: in v0.11.0, is no longer supported.

Two bugs have been fixed in the new cue trim algorithm where disjunctions could incorrectly select defaults or be treated as ambiguous.

Encodings

cue get crd introduces support for extracting Kubernetes Custom Resource Definitions (CRDs) as CUE definitions; see cue help get crd.

The new encoding/jsonschema.ExtractCRDs Go API exposes the extractor used by cue get crd.

The JSON Schema decoder has gained support for dependencies, bringing the pass rate for the official JSON Schema test suite up from 79% to 81%.

Go API

cue/load now provides module information via the new Instance.ModuleFile field.

⚠️ In order to support the above change, the mod/modfile.File.Format method has been moved to the function mod/modfile.Format: an API-breaking change but necessary to avoid a cyclic package dependency.

cue/parser gains a new Config API, which allows other packages like cue/load to properly apply the right parser options such as the CUE language version.

⚠️ In order to support the above change, the cue/parser.Config.ParseFile and cue/build.ParseFile signatures have now changed (incompatibly) to add a parser.Config argument, enabling the CUE language version to be passed through.

Fix an issue where cue.Value.Decode did not work with *math/big.Float types.

Full list of changes since v0.13.0

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch 17 times, most recently from a26bc21 to 0d9623a Compare October 1, 2025 04:30
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from 0d9623a to 6b8d53e Compare October 1, 2025 08:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants