Skip to content

Update Go modules#2633

Open
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.11from
konflux/mintmaker/release-1.11/go-modules
Open

Update Go modules#2633
red-hat-konflux[bot] wants to merge 1 commit intorelease-1.11from
konflux/mintmaker/release-1.11/go-modules

Conversation

@red-hat-konflux
Copy link
Copy Markdown
Contributor

@red-hat-konflux red-hat-konflux bot commented Apr 7, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/bpfman/bpfman-operator v0.5.7-0.20250702114755-642adfde5e43v0.6.0 age confidence require minor
github.com/emicklei/go-restful/v3 v3.12.2v3.13.0 age confidence indirect minor
github.com/fxamacker/cbor/v2 v2.9.0v2.9.1 age confidence indirect patch
github.com/go-openapi/jsonpointer v0.21.1v0.22.5 age confidence indirect minor
github.com/go-openapi/jsonreference v0.21.0v0.21.5 age confidence indirect patch
github.com/go-openapi/swag v0.23.1v0.25.5 age confidence indirect minor
github.com/golang-jwt/jwt/v5 v5.3.0v5.3.1 age confidence indirect patch
github.com/google/cel-go v0.26.0v0.27.0 age confidence indirect minor
github.com/google/gnostic-models v0.7.0v0.7.1 age confidence indirect patch
github.com/google/pprof f64d9cf545e8a4 age confidence indirect digest
github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.3v2.28.0 age confidence indirect minor
github.com/mailru/easyjson v0.9.0v0.9.2 age confidence indirect patch
github.com/netobserv/flowlogs-pipeline v1.10.1-community.0.20260128081215-6575ca967373v1.11.3-community age confidence require minor
github.com/onsi/ginkgo/v2 v2.27.5v2.28.1 age confidence require minor
github.com/onsi/gomega v1.39.0v1.39.1 age confidence require patch
github.com/openshift/api 2cd5821f50e695 require digest
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.87.0v0.90.1 age confidence require minor
github.com/prometheus/procfs v0.17.0v0.20.1 age confidence indirect minor
github.com/stretchr/objx v0.5.2v0.5.3 age confidence indirect patch
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.62.0v0.68.0 age confidence indirect minor
go.opentelemetry.io/otel v1.39.0v1.43.0 age confidence indirect minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0v1.43.0 age confidence indirect minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0v1.43.0 age confidence indirect minor
go.opentelemetry.io/otel/sdk v1.39.0v1.43.0 age confidence indirect minor
go.opentelemetry.io/otel/trace v1.39.0v1.43.0 age confidence indirect minor
go.opentelemetry.io/proto/otlp v1.9.0v1.10.0 age confidence indirect minor
go.yaml.in/yaml/v2 v2.4.3v2.4.4 age confidence indirect patch
golang.org/x/exp b7579e27ab1446 age confidence indirect digest
golang.org/x/mod v0.32.0v0.34.0 age confidence indirect minor
golang.org/x/net v0.49.0v0.52.0 age confidence indirect minor
golang.org/x/oauth2 v0.34.0v0.36.0 age confidence indirect minor
golang.org/x/sync v0.19.0v0.20.0 age confidence indirect minor
golang.org/x/sys v0.40.0v0.42.0 age confidence indirect minor
golang.org/x/term v0.39.0v0.41.0 age confidence indirect minor
golang.org/x/text v0.33.0v0.35.0 age confidence indirect minor
golang.org/x/time v0.12.0v0.15.0 age confidence indirect minor
golang.org/x/tools v0.41.0v0.43.0 age confidence indirect minor
google.golang.org/genproto/googleapis/api ff82c1b6f92a3b age confidence indirect digest
google.golang.org/genproto/googleapis/rpc ff82c1b6f92a3b age confidence indirect digest
google.golang.org/grpc v1.79.3v1.80.0 age confidence indirect minor
k8s.io/api v0.35.0v0.35.3 age confidence require patch
k8s.io/apiextensions-apiserver v0.35.0v0.35.3 age confidence require patch
k8s.io/apimachinery v0.35.0v0.35.3 age confidence require patch
k8s.io/apiserver v0.35.0v0.35.3 age confidence indirect patch
k8s.io/client-go v0.35.0v0.35.3 age confidence require patch
k8s.io/component-base v0.35.0v0.35.3 age confidence indirect patch
k8s.io/klog/v2 v2.130.1v2.140.0 age confidence indirect minor
k8s.io/kube-aggregator v0.35.0v0.35.3 age confidence require patch
k8s.io/kube-openapi 589584f16be699 age confidence indirect digest
k8s.io/utils bc988d528399d8 age confidence require digest
sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.33.0v0.34.0 age confidence indirect minor
sigs.k8s.io/controller-runtime v0.22.4v0.23.3 age confidence require minor
sigs.k8s.io/structured-merge-diff/v6 v6.3.0v6.3.2 age confidence indirect patch

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

bpfman/bpfman-operator (github.com/bpfman/bpfman-operator)

v0.6.0

Compare Source

The v0.6.0 release is a minor release with significant changes to the bpfman-operator. The operator now supports the load/attach split introduced in bpfman v0.6.0, allowing finer-grained control over BPF programme lifecycle. A new Config custom resource has been added, enabling runtime configuration of operator and agent behaviour including component image overrides and health probe settings; the Config CR is now bootstrapped automatically by the operator on startup. The dependency on security-profiles-operator has been fully removed. Metrics collection has been decoupled from hostNetwork using a proxy DaemonSet, and kube-rbac-proxy has been replaced with controller-runtime's built-in TLS capabilities. Network interface autodiscovery with match and regex filtering has been added for TC, TCX, and XDP programmes. The operator now uses a native crictl implementation, removing the external dependency. BpfApplicationState spec fields have been moved to status, and ContainerSelector has been replaced with NetworkNamespaceSelector for network-attached programme types. Priority fields for TC, TCX, and XDP programmes have been changed from int32 to *int32. Build version information is now embedded in all binaries. OLM bundle deployment has been fixed for vanilla Kubernetes with runtime reconciliation of monitoring and RBAC resources. Container images have been switched from Docker Hub golang to Red Hat UBI go-toolset, and hard-coded imagePullPolicy values have been removed from deployment manifests. CI workflows have been updated to resolve Node.js 20 deprecation warnings and improve caching.

What's Changed

Full Changelog: bpfman/bpfman-operator@v0.5.6...v0.6.0

New Contributors

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.13.0

Compare Source

  • optimize performance of path matching in CurlyRouter ( thanks @​wenhuang, Wen Huang)
fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.1

Compare Source

This release includes important bugfixes, defensive checks, improved code quality, and more tests. Although not public, the fuzzer was also improved by adding more fuzz tests.

🐞 Bug fixes related to the keyasint feature

These changes only affect Go struct fields tagged with keyasint:

  • [Decoding] Reject integer keys that exceed math.MaxInt64 when decoding CBOR map to a struct with keyasint field (PR #​757)
  • [Decoding] Prevent string representation of an integer key from matching the struct field tagged by keyasint (PR #​757)
  • [Encoding & Decoding] Deduplicate struct fields with the same normalized keyasint tag values (PR #​757)
🐞 Other bug fixes and defensive checks

Some of the bugs fixed are related to decoding extreme values that cannot be encoded with this library. For example, the decoder checks if epoch time encoded as CBOR float value representing hundreds of billions of years overflows int64(seconds).

NOTE: It is generally good practice to avoid using floating point to store epoch time (even when not using CBOR).

  • [Decoding] Reject decoding epoch time encoded as floats that overflow int64 (PR #​753)
  • [Encoding] Return a cloned slice for an empty RawMessage from RawMessage.MarshalCBOR (PR #​753)
  • [Encoding] Reject encoding nil inside indefinite-length strings (PR #​750)
  • [Diagnostic] Accept valid U+FFFD replacement character (PR #​753)
What's Changed
CI / GitHub Actions and Docs
🔎 Details...

New Contributors

Full Changelog: fxamacker/cbor@v2.9.0...v2.9.1

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.22.5

Compare Source

0.22.5 - 2026-03-02

Full Changelog: go-openapi/jsonpointer@v0.22.4...v0.22.5

15 commits in this release.


Documentation
Code quality
Miscellaneous tasks
Updates

People who contributed to this release

New Contributors

jsonpointer license terms

License

v0.22.4

Compare Source

0.22.4 - 2025-12-06

Full Changelog: go-openapi/jsonpointer@v0.22.3...v0.22.4

1 commits in this release.


Miscellaneous tasks

People who contributed to this release

jsonpointer license terms

License

v0.22.3

Compare Source

0.22.3 - 2025-11-17

Full Changelog: go-openapi/jsonpointer@v0.22.2...v0.22.3

8 commits in this release.


Documentation
Code quality
Miscellaneous tasks

People who contributed to this release

New Contributors

jsonpointer license terms

License


Configuration

📅 Schedule: Branch creation - On day 7 of the month, every 3 months ( * * 7 */3 * ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux bot added the dependencies Pull requests that update a dependency file label Apr 7, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Apr 7, 2026

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: e05e5bfb-e82d-4892-8f16-7b2f91816e3f

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/release-1.11/go-modules

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Apr 7, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign mffiedler for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Apr 7, 2026

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a netobserv member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.11/go-modules branch from bfe69d0 to dc53e7c Compare April 7, 2026 09:41
@red-hat-konflux
Copy link
Copy Markdown
Contributor Author

red-hat-konflux bot commented Apr 7, 2026

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 2 additional dependencies were updated

Details:

Package Change
github.com/netobserv/netobserv-ebpf-agent v1.10.1-community -> v1.11.2-community.0.20260401090122-7004f087530d
go.opentelemetry.io/otel/metric v1.39.0 -> v1.43.0

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.11/go-modules branch from dc53e7c to fbd2912 Compare April 7, 2026 13:40
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/release-1.11/go-modules branch from fbd2912 to c05198c Compare April 7, 2026 17:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file needs-ok-to-test

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants