Repository navigation
chore(deps): update go - #245
Open
bootc-bot[bot] wants to merge 1 commit into
Open
bootc-bot[bot] wants to merge 1 commit into
bootc-bot[bot] wants to merge 1 commit into
Conversation
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
Collaborator
|
This PR requires some manual fix |
alicefr
added a commit
that referenced
this pull request
Oct 19, 2026
Renovate PR #245 bumped indirect k8s ecosystem deps (kube-openapi, kustomize) to versions that pulled in structured-merge-diff/v7, incompatible with k8s v0.37.1 which uses v6. Bump only the non-k8s direct deps (AWS SDK, prometheus, go-containerregistry, gomega, fsnotify) and let go mod tidy resolve compatible indirect versions. Ref: #245 Assisted-by: AI Signed-off-by: Alice Frosi <[email protected]>
Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com> Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>
bootc-bot
Bot
force-pushed
the
bootc-renovate/go
branch
from
October 19, 2026 10:29
ef11731 to
e6d7c16
Compare
This branch has not been deployed
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
faa5f7b→51075c6v1.0.0→v2.0.1v1.0.2→v1.0.3v29.7.2+incompatible→v29.9.1+incompatiblev0.9.3→v0.9.10v3.13.0→v3.14.0v2.9.1→v2.9.6v1.4.2→v1.5.1v1.0.0→v1.0.2v1.0.0→v1.0.3v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.7.0→v0.7.1v1.20.1→v1.20.3v0.72.0→v0.72.1v1.9.4→v1.10.2v1.27.1→v1.28.0v2.4.4→v3.0.5v0.59.0→v0.61.0v0.23.0→v0.24.0v0.48.0→v0.49.0v0.46.0→v0.47.0v0.42.0→v0.43.0v0.15.0→v0.16.0v2.4.0→v3.0.1v4.13.0→v5.9.11d427ff9→ca3452abe93311→cf1189d2d32026→11ed52ev0.21.1→v0.21.3v0.21.1→v0.21.3v6.4.2→v7.0.0Release Notes
MakeNowJust/heredoc (github.com/MakeNowJust/heredoc)
v2.0.1Compare Source
Version 2.0.1
Fixes
importpath for Go modulesv2.0.0Compare Source
Version 2.0.0
Breaking Changes
chai2010/gettext-go (github.com/chai2010/gettext-go)
v1.0.3Compare Source
docker/cli (github.com/docker/cli)
v29.9.1+incompatibleCompare Source
v29.9.0+incompatibleCompare Source
v29.8.2+incompatibleCompare Source
v29.8.1+incompatibleCompare Source
v29.8.0+incompatibleCompare Source
docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)
v0.9.10Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.9...v0.9.10
v0.9.9Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.8...v0.9.9
v0.9.8Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.7...v0.9.8
v0.9.7Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.6...v0.9.7
v0.9.6Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.5...v0.9.6
v0.9.5Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.4...v0.9.5
v0.9.4Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.3...v0.9.4
emicklei/go-restful (github.com/emicklei/go-restful/v3)
v3.14.0Compare Source
fxamacker/cbor (github.com/fxamacker/cbor/v2)
v2.9.6Compare Source
v2.9.6 fixes 12 bugs, including an important fix for apps that decode CBOR maps into Go maps, and has one behavior change. API is unchanged but more errors are detected.
Most of these bugs were identified while improving tests and reviewing code for an upcoming release.
Tests and fuzz tests were extended.
Upgrading to v2.9.6 from all prior versions is recommended.
🐞 Important Fix
For use cases outside the "not affected by this bug" list below, decoding a CBOR null or undefined map key or value (including
55799(null)) into a Go map whose key or value type is of bool, integer, float, or string kind kept the previous map entry's key or value (instead of the zero value). See PR #855 for details.Not affected by this bug:
map[any]any, and intoany(with unchangedDefaultMapType).Decoding CBOR null or undefined into an interface that holds a value now sets it to nil, matching encoding/json (v1 and v2). Previously, the interface kept its value (PR #827), which was not the intended behavior.
🛠 Bug fixes
Some of these bugs could only be triggered by incorrect usage in user apps, such as invalid struct tags or an unsupported DefaultByteStringType setting, etc. None of these bugs were reported by a project affected by them.
Decoding
Encoding
📖 Documentation
Full Changelog: fxamacker/cbor@v2.9.4...v2.9.6
v2.9.5Compare Source
This version was tagged from the default branch by mistake and is retracted.
Use v2.9.6 (https://github.com/fxamacker/cbor/releases/tag/v2.9.6) instead.
v2.9.4Compare Source
This release fixes potential panics when decoding a CBOR map whose key decodes to an uncomparable Go value under certain conditions.
Not affected: user apps that don't register tag types and don't use map key types that are either named empty interfaces (e.g.
type MyAny any) or contain interfaces.These potential panics can be encountered when one of these two conditions is met:
TagSetinterface) that is an array or struct with uncomparable orinterface{}element or field type, orThis was identified while improving tests and reviewing code for an upcoming release.
Tests and fuzz tests were extended to cover this bug.
Upgrading to v2.9.4 is recommended.
What's Changed
Full Changelog: fxamacker/cbor@v2.9.3...v2.9.4
v2.9.3Compare Source
This release fixes a potential panic when decoding into a
time.Timefrom a CBOR byte string, map, or array under certain conditions.Not affected: standard CBOR time data (RFC 8949 tag 0 or tag 1), and decoders configured with
timeTag = DecTagRequired.Upgrading to v2.9.3 is recommended.
The panic stack trace was publicly reported on 2026-08-17, and the fix was released the same day. Fuzz testing was extended to cover this class of bug, and fuzzing of v2.9.3 is ongoing.
What's Changed
Full Changelog: fxamacker/cbor@v2.9.2...v2.9.3
v2.9.2Compare Source
This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.
Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).
The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.
This release passed fuzz tests (billions of execs) and it is production quality.
What's Changed
CI / GitHub Actions and Docs
🔎 Details...
Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2
go-errors/errors (github.com/go-errors/errors)
v1.5.1Compare Source
v1.5.0Compare Source
go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)
v1.0.2Compare Source
1.0.2 - 2026-09-24
Full Changelog: go-openapi/jsonpointer@v1.0.1...v1.0.2
7 commits in this release.
Fixed bugs
Documentation
Code quality
Updates
Other (technical)
People who contributed to this release
jsonpointer license terms
v1.0.1Compare Source
1.0.1 - 2026-09-04
Full Changelog: go-openapi/jsonpointer@v1.0.0...v1.0.1
14 commits in this release.
Documentation
Miscellaneous tasks
Updates
People who contributed to this release
jsonpointer license terms
go-openapi/jsonreference (github.com/go-openapi/jsonreference)
v1.0.3Compare Source
1.0.3 - 2026-09-25
Full Changelog: go-openapi/jsonreference@v1.0.2...v1.0.3
4 commits in this release.
Fixed bugs
Security
Updates
People who contributed to this release
jsonreference license terms
v1.0.2Compare Source
1.0.2 - 2026-09-04
Full Changelog: go-openapi/jsonreference@v1.0.1...v1.0.2
4 commits in this release.
Refactor
Documentation
Updates
People who contributed to this release
jsonreference license terms
v1.0.1Compare Source
1.0.1 - 2026-08-25
Full Changelog: go-openapi/jsonreference@v1.0.0...v1.0.1
12 commits in this release.
Fixed bugs
Documentation
Performance
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release
jsonreference license terms
go-openapi/swag (github.com/go-openapi/swag)
v0.29.2Compare Source
0.29.2 - 2026-09-04
Full Changelog: go-openapi/swag@v0.29.1...v0.29.2
8 commits in this release.
Documentation
Miscellaneous tasks
Updates
People who contributed to this release
swag license terms
Per-module changes
cmdutils (0.29.2)
Miscellaneous tasks
conv (0.29.2)
Miscellaneous tasks
Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.