Update go modules (release-v0.8) (patch) by renovate[bot] · Pull Request #3669 · conforma/cli

renovate · 2026-10-31T03:38:34Z

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
cuelang.org/go	`v0.16.0` → `v0.16.1`
github.com/conforma/crds/api	`v0.1.7` → `v0.1.41`
github.com/conforma/go-containerregistry	`v0.20.7-0.20251103083939-3459088e4bae` → `v0.20.7`
github.com/conforma/go-containerregistry	`v0.20.7-0.20250703195040-6f40a3734728` → `v0.20.7`
github.com/gkampitakis/go-snaps	`v0.5.19` → `v0.5.25`
github.com/go-git/go-billy/v5	`v5.9.0` → `v5.9.2`
github.com/go-git/go-git/v5	`v5.19.2` → `v5.19.3`
github.com/go-openapi/runtime	`v0.32.4` → `v0.32.6`
github.com/google/go-containerregistry	`v0.21.7` → `v0.21.9`
github.com/mattn/go-isatty	`v0.0.20` → `v0.0.24`
github.com/package-url/packageurl-go	`v0.1.3` → `v0.1.7`
github.com/secure-systems-lab/go-securesystemslib	`v0.11.0` → `v0.11.1`
github.com/sigstore/cosign/v3	`v3.0.4` → `v3.0.6`
github.com/sigstore/rekor	`v1.5.3` → `v1.5.5`
github.com/sigstore/sigstore	`v1.10.8` → `v1.10.11`
github.com/sirupsen/logrus	`v1.10.1` → `v1.10.2`
github.com/tektoncd/chains	`v0.26.2` → `v0.26.10`
github.com/tektoncd/cli	`v0.44.1` → `v0.44.2`
k8s.io/api	`v0.36.3` → `v0.36.5`
k8s.io/api	`v0.36.0` → `v0.36.5`
k8s.io/apiextensions-apiserver	`v0.35.4` → `v0.35.9`
k8s.io/apimachinery	`v0.36.3` → `v0.36.5`
k8s.io/apimachinery	`v0.36.0` → `v0.36.5`
k8s.io/client-go	`v0.36.3` → `v0.36.5`
k8s.io/client-go	`v0.36.0` → `v0.36.5`
k8s.io/kubernetes	`v1.34.2` → `v1.34.12`
k8s.io/kubernetes	`v1.34.3` → `v1.34.12`
oras.land/oras-go/v2	`v2.6.2` → `v2.6.4`
sigs.k8s.io/kustomize/api	`v0.21.1` → `v0.21.3`
sigs.k8s.io/kustomize/kustomize/v5	`v5.8.1` → `v5.8.3`
sigs.k8s.io/kustomize/kyaml	`v0.21.1` → `v0.21.3`

Release Notes

cue-lang/cue (cuelang.org/go)

`v0.16.1`

Compare Source

Language

The fallback keyword in the aliasv2 experiment is replaced by otherwise, which is clearer. cue fmt or cue fix can be used to rewrite existing code.

Evaluator

Fix a regression where the compiler could add comments to the input AST value, which could lead to increased memory usage.

Fix a bug where exporting certain schemas could result in "cannot have both alias and field in same scope" errors.

`cmd/cue`

Fix a panic which could occur when using non-label expressions in the --path flag.

Teach cue login to give helpful errors when used with OCI registries which don't support the OAuth2 device flow.

Go API

Fix a regression where cue.Context.Encode could panic on custom marshaler types with pointer receivers.

Full list of changes since v0.16.0

internal/cueversion: bump to v0.16.1 by @mvdan in 6d609d7
internal/ci: build releases with Go 1.26.2 by @mvdan in cedf4c8
update all golang.org/x/... dependencies by @mvdan in b4efeef
all: rename fallback keyword to otherwise by @mpvl in f813811
lsp/cache: improve rename by @cuematthew in 8e47027
integration/workspace: add test showing bad behaviour by @cuematthew in a5e0ef5
cmd/cue: suggest docker/podman login when OAuth2 device flow is unsupported by @mvdan in c169605
cmd/cue: add testscript for cue login when device code endpoint is unsupported by @mvdan in d7c882a
cmd/cue: clarify how to authenticate with standard OCI registries by @mvdan in 2613edf
internal/core/compile: avoid mutating AST by @rogpeppe in e4b0516
internal/core/export: fix alias/field name conflict in pattern constraints by @mvdan in 1e46409
internal/core/export: add regression test for alias/field name conflict by @mvdan in 1654f66
pkg: fix godoc mistakes across several packages by @mvdan in eae9aaf
internal/core/convert: fix panic when encoding pointer-receiver marshalers by @mvdan in 8e39aec
cmd/cue: return an error for non-label --path expressions instead of panicking by @mvdan in 5a55849
encoding: add godoc hints for cue/ast result types by @mvdan in 682c663

conforma/crds (github.com/conforma/crds/api)

`v0.1.41`: API Release api/v0.1.41

What's Changed

Update github/codeql-action action to v4.39.1 (main) by @renovate[bot] in #66

Full Changelog: conforma/crds@api/v0.1.40...api/v0.1.41

`v0.1.40`: API Release api/v0.1.40

What's Changed

Update conforma/github-workflows digest to 9e47833 (main) by @renovate[bot] in #65

Full Changelog: conforma/crds@api/v0.1.39...api/v0.1.40

`v0.1.39`: API Release api/v0.1.39

What's Changed

Update step-security/harden-runner action to v2.22.2 (main) by @renovate[bot] in #64

Full Changelog: conforma/crds@api/v0.1.38...api/v0.1.39

`v0.1.38`: API Release api/v0.1.38

What's Changed

Update github/codeql-action action to v4.39.0 (main) by @renovate[bot] in #63

Full Changelog: conforma/crds@api/v0.1.37...api/v0.1.38

`v0.1.37`: API Release api/v0.1.37

What's Changed

Update CRD dependencies for Go 1.26.7 by @st3penta in #59

New Contributors

@st3penta made their first contribution in #59

Full Changelog: conforma/crds@api/v0.1.36...api/v0.1.37

`v0.1.36`: API Release api/v0.1.36

What's Changed

Update ossf/scorecard-action action to v2.5.0 (main) by @renovate[bot] in #58

Full Changelog: conforma/crds@api/v0.1.35...api/v0.1.36

`v0.1.35`: API Release api/v0.1.35

What's Changed

Update conforma/github-workflows digest to ff1126b (main) by @renovate[bot] in #57

Full Changelog: conforma/crds@api/v0.1.34...api/v0.1.35

`v0.1.34`: API Release api/v0.1.34

What's Changed

Guard schema deployment against fork execution by @robnester-rh in #56

Full Changelog: conforma/crds@api/v0.1.33...api/v0.1.34

`v0.1.33`: API Release api/v0.1.33

What's Changed

Update github/codeql-action action to v4.38.3 (main) by @renovate[bot] in #55

Full Changelog: conforma/crds@api/v0.1.32...api/v0.1.33

`v0.1.32`: API Release api/v0.1.32

What's Changed

Update module github.com/buger/jsonparser to v1.1.2 [SECURITY] (main) by @renovate[bot] in #46

Full Changelog: conforma/crds@api/v0.1.31...api/v0.1.32

`v0.1.31`: API Release api/v0.1.31

What's Changed

Guard release workflow against fork execution by @robnester-rh in #45

Full Changelog: conforma/crds@api/v0.1.30...api/v0.1.31

`v0.1.30`: API Release api/v0.1.30

What's Changed

Update github actions (main) (patch) by @renovate[bot] in #44

Full Changelog: conforma/crds@api/v0.1.29...api/v0.1.30

`v0.1.29`: API Release api/v0.1.29

What's Changed

Update conforma/github-workflows digest to 51213ed (main) by @renovate[bot] in #43

Full Changelog: conforma/crds@api/v0.1.28...api/v0.1.29

`v0.1.28`: API Release api/v0.1.28

What's Changed

Update Go dependencies with patched releases by @robnester-rh in #41

Full Changelog: conforma/crds@api/v0.1.27...api/v0.1.28

`v0.1.27`: API Release api/v0.1.27

What's Changed

Update step-security/harden-runner action to v2.22.0 (main) by @renovate[bot] in #42

Full Changelog: conforma/crds@api/v0.1.26...api/v0.1.27

`v0.1.26`: API Release api/v0.1.26

What's Changed

Update conforma/github-workflows digest to ec01494 (main) by @renovate[bot] in #40

Full Changelog: conforma/crds@api/v0.1.25...api/v0.1.26

`v0.1.25`: API Release api/v0.1.25

What's Changed

Update github/codeql-action action to v4.38.2 (main) by @renovate[bot] in #39

Full Changelog: conforma/crds@api/v0.1.24...api/v0.1.25

`v0.1.24`: API Release api/v0.1.24

What's Changed

Update github/codeql-action action to v4.38.1 (main) by @renovate[bot] in #38

Full Changelog: conforma/crds@api/v0.1.23...api/v0.1.24

`v0.1.23`: API Release api/v0.1.23

What's Changed

Remove unnecessary secrets: inherit from auto-merge caller by @robnester-rh in #37

Full Changelog: conforma/crds@api/v0.1.22...api/v0.1.23

`v0.1.22`: API Release api/v0.1.22

What's Changed

Update codecov/codecov-action action to v7.1.1 (main) by @renovate[bot] in #36

Full Changelog: conforma/crds@api/v0.1.21...api/v0.1.22

`v0.1.21`: API Release api/v0.1.21

What's Changed

Update codecov/codecov-action action to v7.1.0 (main) by @renovate[bot] in #35

Full Changelog: conforma/crds@api/v0.1.20...api/v0.1.21

`v0.1.20`: API Release api/v0.1.20

What's Changed

Add Codecov configuration (80% patch coverage, informational) by @eedri in #33

New Contributors

@eedri made their first contribution in #33

Full Changelog: conforma/crds@api/v0.1.19...api/v0.1.20

`v0.1.19`: API Release api/v0.1.19

What's Changed

🚨 Update github actions (main) (major) by @renovate[bot] in #18

Full Changelog: conforma/crds@api/v0.1.18...api/v0.1.19

`v0.1.18`: API Release api/v0.1.18

What's Changed

Update github/codeql-action action to v3.38.0 (main) by @renovate[bot] in #34

Full Changelog: conforma/crds@api/v0.1.17...api/v0.1.18

`v0.1.17`: API Release api/v0.1.17

What's Changed

Update conforma/github-workflows digest to 837d70f (main) by @renovate[bot] in #32

Full Changelog: conforma/crds@api/v0.1.16...api/v0.1.17

`v0.1.16`: API Release api/v0.1.16

What's Changed

feat(KONFLUX-15176): add SECURITY.md for CRA by @nmars in #28

New Contributors

@nmars made their first contribution in #28

Full Changelog: conforma/crds@api/v0.1.15...api/v0.1.16

`v0.1.15`: API Release api/v0.1.15

What's Changed

Update github actions (main) (patch) by @renovate[bot] in #30

Full Changelog: conforma/crds@api/v0.1.14...api/v0.1.15

`v0.1.14`: API Release api/v0.1.14

What's Changed

Pin conforma/github-workflows action to cd705e8 (main) by @renovate[bot] in #29

Full Changelog: conforma/crds@api/v0.1.13...api/v0.1.14

`v0.1.13`: API Release api/v0.1.13

What's Changed

chore: add CODEOWNERS designating the devs team as code owners by @robnester-rh in #31

Full Changelog: conforma/crds@api/v0.1.12...api/v0.1.13

`v0.1.12`: API Release api/v0.1.12

What's Changed

Update github actions (main) (minor) by @renovate[bot] in #16
Update github actions (main) (patch) by @renovate[bot] in #27

Full Changelog: conforma/crds@api/v0.1.11...api/v0.1.12

`v0.1.11`: API Release api/v0.1.11

What's Changed

feat: add Codecov coverage reporting by @robnester-rh in #26

Full Changelog: conforma/crds@api/v0.1.10...api/v0.1.11

`v0.1.10`: API Release api/v0.1.10

What's Changed

docs: add CLAUDE.md for AI coding assistants by @joejstuart in #25

New Contributors

@joejstuart made their first contribution in #25

Full Changelog: conforma/crds@api/v0.1.9...api/v0.1.10

`v0.1.9`: API Release api/v0.1.9

What's Changed

Track reference.adoc for website generation by @robnester-rh in #24

Full Changelog: conforma/crds@api/v0.1.8...api/v0.1.9

`v0.1.8`: API Release api/v0.1.8

What's Changed

Fix reference doc links to use local reference.adoc by @robnester-rh in #23

Full Changelog: conforma/crds@api/v0.1.7...api/v0.1.8

conforma/go-containerregistry (github.com/conforma/go-containerregistry)

`v0.20.7`

Compare Source

gkampitakis/go-snaps (github.com/gkampitakis/go-snaps)

`v0.5.25`

Compare Source

What's Changed

fix: recognise snapshot labels that contain " - " by @youdie006 in #163

New Contributors

@youdie006 made their first contribution in #163

Full Changelog: gkampitakis/go-snaps@v0.5.24...v0.5.25

`v0.5.24`

Compare Source

`v0.5.23`

Compare Source

What's Changed

Fix Skipf test format for Go vet by @HNO3Miracle in #160
feat: support labeling snapshots by @G-Rath in #152

New Contributors

@HNO3Miracle made their first contribution in #160

Full Changelog: gkampitakis/go-snaps@v0.5.22...v0.5.23

`v0.5.22`

Compare Source

What's Changed

Enhance README with additional Any matcher example by @MoritzHeld in #157
fix: create snapshot files with 0644 instead of os.ModePerm by @gkampitakis in #159

New Contributors

@MoritzHeld made their first contribution in #157

Full Changelog: gkampitakis/go-snaps@v0.5.21...v0.5.22

`v0.5.21`

Compare Source

What's Changed

support nested arrays in json matchers by @gkampitakis in #145

Full Changelog: gkampitakis/go-snaps@v0.5.20...v0.5.21

`v0.5.20`

Compare Source

What's Changed

feat: support setting serializer on config by @gkampitakis in #154

Full Changelog: gkampitakis/go-snaps@v0.5.19...v0.5.20

go-git/go-billy (github.com/go-git/go-billy/v5)

`v5.9.2`

Compare Source

What's Changed

build: Update module golang.org/x/net to v0.55.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #216
build: Update module golang.org/x/text to v0.39.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #230
build: Update module golang.org/x/net to v0.56.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #229

Full Changelog: go-git/go-billy@v5.9.0...v5.9.2

`v5.9.1`

Compare Source

What's Changed

build: Update module golang.org/x/net to v0.55.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #216
build: Update module golang.org/x/text to v0.39.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #230
build: Update module golang.org/x/net to v0.56.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #229

Full Changelog: go-git/go-billy@v5.9.0...v5.9.1

go-git/go-git (github.com/go-git/go-git/v5)

`v5.19.3`

Compare Source

What's Changed

[v5] git: repository, Ensure commondir is closed. by @arcaven in #2285
config: read repositoryformatversion in unmarshalCore by @c-tonneslan in #2167
build: Update module github.com/go-git/go-git/v5 to v5.19.2 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #2304
[v5] plumbing: revlist, Skip path validation in the object walk by @r0h1tb in #2305
build: Update module golang.org/x/crypto to v0.55.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #2348
[v5] plumbing: transport/http, Contain credentials across redirects by @hiddeco in #2358
build: Fix workflows for Go 1.27 (v5) by @pjbgf in #2364
plumbing: format/packfile, Stop running TestChecksumMismatch and TestMalformedPack in parallel by @akashchamp in #2421
build: Update module golang.org/x/crypto to v0.56.0 [SECURITY] (releases/v5.x) by @go-git-renovate[bot] in #2357
plumbing: format/packfile, Break cyclic delta chains instead of recur… by @jgoosens in #2340
build: Drop Go 1.25 by @pjbgf in #2451
build: Update module github.com/go-git/go-billy/v5 to v5.9.2 (releases/v5.x) by @go-git-renovate[bot] in #2467
build: Bump pjbgf/sha1cd to v0.7.0 by @pjbgf in #2468

New Contributors

@arcaven made their first contribution in #2285
@c-tonneslan made their first contribution in #2167
@r0h1tb made their first contribution in #2305
@akashchamp made their first contribution in #2421
@jgoosens made their first contribution in #2340

Full Changelog: go-git/go-git@v5.19.2...v5.19.3

go-openapi/runtime (github.com/go-openapi/runtime)

`v0.32.6`

Compare Source

0.32.6 - 2026-07-21

Full Changelog: go-openapi/runtime@v0.32.5...v0.32.6

4 commits in this release.

Miscellaneous tasks

chore: prepare release v0.32.6 by @bot-go-openapi[bot] in #505 ...
chore: updated dependencies (go-openapi updates) by @fredbi in #504 ...

Updates

build(deps): bump the go-openapi-dependencies group across 3 directories with 1 update by @dependabot[bot] in #503 ...
build(deps): bump actions/setup-go from 6.5.0 to 7.0.0 in the development-dependencies group by @dependabot[bot] in #502 ...

People who contributed to this release

@fredbi

runtime license terms

Per-module changes

client-middleware/opentracing (0.32.6)

Miscellaneous tasks

chore: prepare release v0.32.6 by @bot-go-openapi[bot] in #505 ...
chore: updated dependencies (go-openapi updates) by @fredbi in #504 ...

Updates

build(deps): bump the go-openapi-dependencies group across 3 directories with 1 update by @dependabot[bot] in #503 ...

docs/examples (0.32.6)

Miscellaneous tasks

chore: prepare release v0.32.6 by @bot-go-openapi[bot] in #505 ...

Updates

build(deps): bump the go-openapi-dependencies group across 3 directories with 1 update by @dependabot[bot] in #503 ...

`v0.32.5`

Compare Source

0.32.5 - 2026-07-16

Full Changelog: go-openapi/runtime@v0.32.4...v0.32.5

10 commits in this release.

Documentation

doc: updated contributors file by @bot-go-openapi[bot] in #497 ...
ci: post README announcements to discord + bump ci-workflows to v0.4.0 by @fredbi in #494 ...
doc: updated contributors file by @bot-go-openapi[bot] in #492 ...

Miscellaneous tasks

chore: prepare release v0.32.5 by @bot-go-openapi[bot] in #501 ...
chore(ci): run contributors workflow monthly instead of weekly by @fredbi in #493 ...

Updates

build(deps): bump golang.org/x/sync from 0.21.0 to 0.22.0 in the golang-org-dependencies group across 1 directory by @dependabot[bot] in #499 ...
build(deps): bump the go-openapi-dependencies group across 3 directories with 7 updates by @dependabot[bot] in #498 ...
build(deps): bump the go-openapi-dependencies group across 4 directories with 2 updates by @dependabot[bot] in #496 ...
build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in the development-dependencies group by @dependabot[bot] in #495 ...

Other (technical)

middleware: set http.Request.Pattern to the matched route by @delthas in #500 ...

People who contributed to this release

New Contributors

@delthas made their first contribution
in #500

runtime license terms

Per-module changes

client-middleware/opentracing (0.32.5)

Miscellaneous tasks

chore: prepare release v0.32.5 by @bot-go-openapi[bot] in #501 ...

Updates

build

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- Between 12:00 AM and 03:59 AM (* 0-3 * * *)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-10-31T03:38:39Z

ℹ️ Artifact update notice

File name: acceptance/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

52 additional dependencies were updated
The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=5 days

Details:

Package	Change
`go`	`1.26.7` -> `1.27.0`
`github.com/go-openapi/strfmt`	`v0.26.4` -> `v0.27.3`
`github.com/coreos/go-oidc/v3`	`v3.19.0` -> `v3.21.0`
`github.com/fxamacker/cbor/v2`	`v2.9.0` -> `v2.9.1`
`github.com/gkampitakis/ciinfo`	`v0.3.2` -> `v0.3.4`
`github.com/go-chi/chi/v5`	`v5.4.0` -> `v5.5.0`
`github.com/go-jose/go-jose/v4`	`v4.1.4` -> `v4.1.5`
`github.com/go-openapi/analysis`	`v0.25.2` -> `v1.0.0`
`github.com/go-openapi/errors`	`v0.22.8` -> `v0.22.9`
`github.com/go-openapi/jsonpointer`	`v0.23.1` -> `v1.0.1`
`github.com/go-openapi/jsonreference`	`v0.21.6` -> `v1.0.2`
`github.com/go-openapi/loads`	`v0.24.0` -> `v0.25.3`
`github.com/go-openapi/runtime`	`v0.32.4` -> `v0.33.3`
`github.com/go-openapi/runtime/server-middleware`	`v0.30.0` -> `v0.33.3`
`github.com/go-openapi/spec`	`v0.22.6` -> `v1.0.1`
`github.com/go-openapi/swag/conv`	`v0.27.0` -> `v0.29.2`
`github.com/go-openapi/swag/fileutils`	`v0.26.1` -> `v0.29.2`
`github.com/go-openapi/swag/jsonutils`	`v0.26.1` -> `v0.29.2`
`github.com/go-openapi/swag/loading`	`v0.26.1` -> `v0.29.1`
`github.com/go-openapi/swag/mangling`	`v0.26.1` -> `v0.29.1`
`github.com/go-openapi/swag/stringutils`	`v0.26.1` -> `v0.29.2`
`github.com/goccy/go-yaml`	`v1.18.0` -> `v1.19.2`
`github.com/google/cel-go`	`v0.28.0` -> `v0.29.2`
`github.com/google/gnostic-models`	`v0.7.0` -> `v0.7.1`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.29.0` -> `v2.30.0`
`github.com/maruel/natural`	`v1.1.1` -> `v1.3.0`
`github.com/oklog/ulid/v2`	`v2.1.1` -> `v2.1.2`
`github.com/pjbgf/sha1cd`	`v0.6.0` -> `v0.7.0`
`github.com/prometheus/client_model`	`v0.6.2` -> `v0.6.3`
`github.com/sigstore/protobuf-specs`	`v0.5.1` -> `v0.5.2`
`github.com/tidwall/gjson`	`v1.18.0` -> `v1.19.0`
`go.opentelemetry.io/otel`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/exporters/stdout/stdouttrace`	`v1.43.0` -> `v1.45.0`
`go.opentelemetry.io/otel/metric`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/sdk`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/trace`	`v1.45.0` -> `v1.47.0`
`golang.org/x/crypto`	`v0.57.0` -> `v0.58.0`
`golang.org/x/net`	`v0.58.0` -> `v0.61.0`
`golang.org/x/oauth2`	`v0.36.0` -> `v0.37.0`
`golang.org/x/sync`	`v0.23.0` -> `v0.24.0`
`golang.org/x/sys`	`v0.48.0` -> `v0.49.0`
`golang.org/x/term`	`v0.46.0` -> `v0.47.0`
`golang.org/x/text`	`v0.42.0` -> `v0.43.0`
`golang.org/x/time`	`v0.15.0` -> `v0.16.0`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260803160001-6ac0973c030d` -> `v0.0.0-20260928230214-8a89bd6388cc`
`k8s.io/apiextensions-apiserver`	`v0.35.4` -> `v0.37.1`
`k8s.io/kube-openapi`	`v0.0.0-20260319004828-5883c5ee87b9` -> `v0.0.0-20261001230523-97fa35140926`
`k8s.io/utils`	`v0.0.0-20260319190234-28399d86e0b5` -> `v0.0.0-20260626114624-be93311217bd`
`sigs.k8s.io/controller-runtime`	`v0.19.0` -> `v0.25.2`
`sigs.k8s.io/structured-merge-diff/v6`	`v6.3.2` -> `v6.4.2`

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

90 additional dependencies were updated
The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=5 days

Details:

Package	Change
`go`	`1.26.7` -> `1.27`
`golang.org/x/net`	`v0.58.0` -> `v0.61.0`
`golang.org/x/sync`	`v0.23.0` -> `v0.24.0`
`k8s.io/kube-openapi`	`v0.0.0-20260319004828-5883c5ee87b9` -> `v0.0.0-20260721132016-d427ff9ee9ad`
`cloud.google.com/go/auth`	`v0.20.0` -> `v0.24.1-0.20261001053825-dbc26066f70a`
`cloud.google.com/go/auth/oauth2adapt`	`v0.2.8` -> `v0.3.0`
`cloud.google.com/go/compute/metadata`	`v0.9.0` -> `v0.10.0`
`cloud.google.com/go/iam`	`v1.11.0` -> `v1.14.0`
`cloud.google.com/go/monitoring`	`v1.25.0` -> `v1.30.0`
`cloud.google.com/go/storage`	`v1.62.2` -> `v1.64.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp`	`v1.33.0` -> `v1.34.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric`	`v0.55.0` -> `v0.57.0`
`github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping`	`v0.55.0` -> `v0.57.0`
`github.com/aws/aws-sdk-go-v2`	`v1.43.8` -> `v1.47.3`
`github.com/aws/aws-sdk-go-v2/config`	`v1.32.39` -> `v1.33.9`
`github.com/aws/aws-sdk-go-v2/credentials`	`v1.19.38` -> `v1.20.9`
`github.com/aws/aws-sdk-go-v2/feature/ec2/imds`	`v1.18.39` -> `v1.20.3`
`github.com/aws/aws-sdk-go-v2/internal/configsources`	`v1.4.39` -> `v1.5.6`
`github.com/aws/aws-sdk-go-v2/internal/endpoints/v2`	`v2.7.39` -> `v2.8.6`
`github.com/aws/aws-sdk-go-v2/internal/v4a`	`v1.4.40` -> `v1.5.6`
`github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding`	`v1.13.18` -> `v1.13.21`
`github.com/aws/aws-sdk-go-v2/service/internal/presigned-url`	`v1.13.39` -> `v1.14.6`
`github.com/aws/aws-sdk-go-v2/service/signin`	`v1.5.8` -> `v1.10.4`
`github.com/aws/aws-sdk-go-v2/service/sso`	`v1.33.8` -> `v1.38.4`
`github.com/aws/aws-sdk-go-v2/service/ssooidc`	`v1.38.8` -> `v1.43.4`
`github.com/aws/aws-sdk-go-v2/service/sts`	`v1.45.8` -> `v1.51.4`
`github.com/aws/smithy-go`	`v1.27.10` -> `v1.28.5`
`github.com/coreos/go-oidc/v3`	`v3.19.0` -> `v3.21.0`
`github.com/fxamacker/cbor/v2`	`v2.9.0` -> `v2.9.1`
`github.com/gkampitakis/ciinfo`	`v0.3.2` -> `v0.3.4`
`github.com/go-chi/chi/v5`	`v5.4.0` -> `v5.5.0`
`github.com/go-git/go-billy/v5`	`v5.9.0` -> `v5.9.2`
`github.com/go-jose/go-jose/v4`	`v4.1.4` -> `v4.1.5`
`github.com/go-openapi/analysis`	`v0.25.2` -> `v1.0.0`
`github.com/go-openapi/errors`	`v0.22.8` -> `v0.22.9`
`github.com/go-openapi/jsonpointer`	`v0.23.1` -> `v1.0.1`
`github.com/go-openapi/jsonreference`	`v0.21.6` -> `v1.0.2`
`github.com/go-openapi/loads`	`v0.24.0` -> `v0.25.3`
`github.com/go-openapi/runtime/server-middleware`	`v0.30.0` -> `v0.33.3`
`github.com/go-openapi/spec`	`v0.22.6` -> `v1.0.1`
`github.com/go-openapi/swag`	`v0.26.1` -> `v0.28.0`
`github.com/go-openapi/swag/cmdutils`	`v0.26.1` -> `v0.29.2`
`github.com/go-openapi/swag/conv`	`v0.27.0` -> `v0.29.2`
`github.com/go-openapi/swag/fileutils`	`v0.26.1` -> `v0.29.2`
`github.com/go-openapi/swag/jsonutils`	`v0.26.1` -> `v0.29.2`
`github.com/go-openapi/swag/loading`	`v0.26.1` -> `v0.29.1`
`github.com/go-openapi/swag/mangling`	`v0.26.1` -> `v0.29.1`
`github.com/go-openapi/swag/netutils`	`v0.26.1` -> `v0.28.0`
`github.com/go-openapi/swag/stringutils`	`v0.26.1` -> `v0.29.2`
`github.com/go-openapi/swag/typeutils`	`v0.27.0` -> `v0.29.2`
`github.com/go-openapi/swag/yamlutils`	`v0.26.1` -> `v0.29.1`
`github.com/go-openapi/validate`	`v0.26.0` -> `v1.0.0`
`github.com/goccy/go-yaml`	`v1.18.0` -> `v1.19.2`
`github.com/google/cel-go`	`v0.28.0` -> `v0.29.2`
`github.com/google/s2a-go`	`v0.1.9` -> `v0.1.11`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.16` -> `v0.3.22`
`github.com/googleapis/gax-go/v2`	`v2.22.0` -> `v2.26.2`
`github.com/grpc-ecosystem/grpc-gateway/v2`	`v2.29.0` -> `v2.30.0`
`github.com/maruel/natural`	`v1.1.1` -> `v1.3.0`
`github.com/oklog/ulid/v2`	`v2.1.1` -> `v2.1.2`
`github.com/olekukonko/tablewriter`	`v1.1.4` -> `v1.1.5`
`github.com/pjbgf/sha1cd`	`v0.6.0` -> `v0.7.0`
`github.com/prometheus/client_model`	`v0.6.2` -> `v0.6.3`
`github.com/sigstore/protobuf-specs`	`v0.5.1` -> `v0.5.2`
`github.com/spiffe/go-spiffe/v2`	`v2.7.0` -> `v2.8.1`
`github.com/tidwall/gjson`	`v1.18.0` -> `v1.19.0`
`gitlab.com/gitlab-org/api/client-go`	`v1.11.0` -> `v1.46.0`
`go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc`	`v0.70.0` -> `v0.72.0`
`go.opentelemetry.io/otel`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/exporters/stdout/stdouttrace`	`v1.42.0` -> `v1.45.0`
`go.opentelemetry.io/otel/metric`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/sdk`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/sdk/metric`	`v1.45.0` -> `v1.47.0`
`go.opentelemetry.io/otel/trace`	`v1.45.0` -> `v1.47.0`
`golang.org/x/crypto`	`v0.57.0` -> `v0.58.0`
`golang.org/x/oauth2`	`v0.36.0` -> `v0.37.0`
`golang.org/x/sys`	`v0.48.0` -> `v0.49.0`
`golang.org/x/term`	`v0.46.0` -> `v0.47.0`
`golang.org/x/time`	`v0.15.0` -> `v0.16.0`
`golang.org/x/tools`	`v0.49.0` -> `v0.51.0`
`google.golang.org/api`	`v0.286.0` -> `v0.301.0`
`google.golang.org/genproto`	`v0.0.0-20260406210006-6f92a3bedf2d` -> `v0.0.0-20260715232425-e75dac1f907d`
`google.golang.org/genproto/googleapis/api`	`v0.0.0-20260803160001-6ac0973c030d` -> `v0.0.0-20260928230214-8a89bd6388cc`
`google.golang.org/genproto/googleapis/rpc`	`v0.0.0-20260803160001-6ac0973c030d` -> `v0.0.0-20260928230214-8a89bd6388cc`
`google.golang.org/grpc`	`v1.83.2` -> `v1.84.0`
`k8s.io/utils`	`v0.0.0-20260319190234-28399d86e0b5` -> `v0.0.0-20260626114624-be93311217bd`
`sigs.k8s.io/controller-runtime`	`v0.19.0` -> `v0.25.2`
`sigs.k8s.io/release-utils`	`v0.12.4` -> `v0.12.5`
`sigs.k8s.io/structured-merge-diff/v6`	`v6.3.3` -> `v6.4.2`

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

32 additional dependencies were updated
The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=5 days

Details:

Package	Change
`go`	`1.26.7` -> `1.27.0`
`cloud.google.com/go/compute/metadata`	`v0.9.0` -> `v0.9.1`
`cloud.google.com/go/kms`	`v1.31.0` -> `v1.33.0`
`cloud.google.com/go/longrunning`	`v1.0.0` -> `v1.2.0`
`github.com/Azure/azure-sdk-for-go/sdk/azcore`	`v1.21.1` -> `v1.22.0`
`github.com/aws/aws-sdk-go-v2/service/kms`	`v1.52.0` -> `v1.54.0`
`github.com/coreos/go-oidc/v3`	`v3.19.0` -> `v3.20.0`
`github.com/go-openapi/jsonpointer`	`v0.23.1` -> `v1.0.0`
`github.com/go-openapi/jsonreference`	`v0.21.6` -> `v1.0.0`
`github.com/go-openapi/swag/conv`	`v0.27.0` -> `v0.27.1`
`github.com/go-openapi/swag/jsonutils`	`v0.26.1` -> `v0.27.1`
`github.com/go-openapi/swag/typeutils`	`v0.27.0` -> `v0.27.1`
`github.com/google/cel-go`	`v0.28.0` -> `v0.29.2`
`github.com/google/gnostic-models`	`v0.7.0` -> `v0.7.1`
`github.com/google/go-containerregistry`	`v0.21.7` -> `v0.21.9`
`github.com/googleapis/enterprise-certificate-proxy`	`v0.3.16` -> `v0.3.17`
`github.com/googleapis/gax-go/v2`	`v2.22.0` -> `v2.23.0`
`github.com/hashicorp/vault/api`	`v1.22.0` -> `v1.23.0`
`github.com/in-toto/go-witness`	`v0.9.1` -> `v0.9.2`
`github.com/jellydator/ttlcache/v3`	`v3.4.0` -> `v3.4.1`
`github.com/secure-systems-lab/go-securesystemslib`	`v0.11.0` -> `v0.11.1`
`github.com/sigstore/cosign/v2`	`v2.6.2` -> `v2.6.5`
`github.com/sigstore/sigstore`	`v1.10.8` -> `v1.10.9`
`github.com/sigstore/sigstore/pkg/signature/kms/aws`	`v1.10.8` -> `v1.10.9`
`github.com/sigstore/sigstore/pkg/signature/kms/azure`	`v1.10.8` -> `v1.10.9`
`github.com/sigstore/sigstore/pkg/signature/kms/gcp`	`v1.10.8` -> `v1.10.9`
`github.com/sigstore/sigstore/pkg/signature/kms/hashivault`	`v1.10.8` -> `v1.10.9`
`google.golang.org/api`	`v0.286.0` -> `v0.287.1`
`k8s.io/kube-openapi`	`v0.0.0-20260319004828-5883c5ee87b9` -> `v0.0.0-20261001230523-97fa35140926`
`k8s.io/utils`	`v0.0.0-20260319190234-28399d86e0b5` -> `v0.0.0-20260626114624-be93311217bd`
`sigs.k8s.io/kustomize/api`	`v0.21.1` -> `v0.21.3`
`sigs.k8s.io/kustomize/cmd/config`	`v0.21.1` -> `v0.21.3`
`sigs.k8s.io/kustomize/kyaml`	`v0.21.1` -> `v0.21.3`

coderabbitai · 2026-10-31T03:38:43Z

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

Run configuration

Source mode: Auto
Repository: Unavailable
Branch: Unavailable
File: No configuration file from this repository applied
Commit: Unavailable
Layers: Organization UI
Review profile: CHILL
Plan: Enterprise
Run ID: 824d11e6-a30f-45f1-96ad-58c5a4377ac5

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

Trigger review

fullsend-ai-review · 2026-10-31T03:40:36Z

🤖 Finished Review · ✅ Success · Started 3:40 AM UTC · Completed 3:51 AM UTC

Commit: 73d08df · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.58

fullsend-ai-review · 2026-10-31T03:51:36Z