Update go modules (main) (minor)#3131
Conversation
ℹ️ Artifact update noticeFile name: acceptance/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: tools/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: tools/kubectl/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
b7bbfdc to
02074a5
Compare
ae12a07 to
b6bcb99
Compare
eb3bd95 to
50d854b
Compare
676093d to
d25d458
Compare
eeb2d9c to
9c9a612
Compare
9f4d6ea to
6a3d6d6
Compare
|
ReviewFindingsMedium
Low
Previous runReviewFindingsLow
Info
Previous run (2)ReviewFindingsLow
Info
Previous run (3)ReviewFindingsLow
Info
|
| golang.org/x/benchmarks v0.0.0-20241115175113-a2b48b605b42 | ||
| golang.org/x/exp v0.0.0-20250911091902-df9299821621 | ||
| golang.org/x/net v0.53.0 // indirect | ||
| github.com/testcontainers/testcontainers-go v0.42.0 // using unreleased version that contains the fix in https://github.com/testcontainers/testcontainers-go/pull/2899 |
There was a problem hiding this comment.
[low] api-contract
testcontainers-go jumps from v0.34 (pseudo-version) to v0.42.0. The codebase uses deprecated patterns (GenericContainer, AutoRemove) in acceptance tests that were deprecated in v0.36+. CI verification is essential.
| golang.org/x/benchmarks v0.0.0-20241115175113-a2b48b605b42 | ||
| golang.org/x/exp v0.0.0-20250911091902-df9299821621 | ||
| golang.org/x/net v0.53.0 // indirect | ||
| github.com/testcontainers/testcontainers-go v0.42.0 // using unreleased version that contains the fix in https://github.com/testcontainers/testcontainers-go/pull/2899 |
There was a problem hiding this comment.
[low] pattern-inconsistency
The inline comment on testcontainers-go still says "using unreleased version" but v0.42.0 is a standard release. The comment should be removed or updated.
| github.com/mitchellh/go-wordwrap v1.0.1 | ||
| github.com/open-policy-agent/conftest v0.68.2 | ||
| github.com/open-policy-agent/opa v1.15.2 | ||
| github.com/open-policy-agent/opa v1.17.0 |
There was a problem hiding this comment.
[low] api-contract
OPA bumps from v1.15.2 to v1.17.0. The codebase uses some less-stable OPA internals (v1/ast/json) in internal/opa/inspect.go. Worth verifying via CI.
| golang.org/x/benchmarks v0.0.0-20241115175113-a2b48b605b42 | ||
| golang.org/x/exp v0.0.0-20250911091902-df9299821621 | ||
| golang.org/x/net v0.53.0 // indirect | ||
| github.com/testcontainers/testcontainers-go v0.42.0 // using unreleased version that contains the fix in https://github.com/testcontainers/testcontainers-go/pull/2899 |
There was a problem hiding this comment.
[low] pattern-inconsistency
The testcontainers-go dependency is updated from a pseudo-version to v0.42.0 (a released version), but the inline comment "// using unreleased version that contains the fix in testcontainers/testcontainers-go#2899" is preserved. This comment is now misleading since v0.42.0 is a proper release that includes the referenced fix.
Suggested fix: Remove or update the stale comment to reflect that v0.42.0 is a released version.
| golang.org/x/benchmarks v0.0.0-20241115175113-a2b48b605b42 | ||
| golang.org/x/exp v0.0.0-20250911091902-df9299821621 | ||
| golang.org/x/net v0.53.0 // indirect | ||
| github.com/testcontainers/testcontainers-go v0.42.0 // using unreleased version that contains the fix in https://github.com/testcontainers/testcontainers-go/pull/2899 |
There was a problem hiding this comment.
[low] pattern-inconsistency
The testcontainers-go dependency is updated to v0.42.0 (a released version), but the inline comment still reads '// using unreleased version that contains the fix in ...'. The comment is now stale and misleading.
Suggested fix: Remove or update the comment to reflect that v0.42.0 is a released version.
| @@ -3,17 +3,17 @@ module github.com/conforma/cli/tools | |||
| go 1.25.8 | |||
There was a problem hiding this comment.
[low] pattern-inconsistency
The Go version directive stays at go 1.25.8 while the other three go.mod files are bumped to go 1.26.0, breaking the codebase convention of keeping all modules at the same Go version.
Suggested fix: Bump tools/go.mod to go 1.26.0 for consistency, or add a comment explaining why it must stay at the older version.
This PR contains the following updates:
v0.10.0→v0.11.06f40a37→3459088v0.13.7→v0.14.0v0.29.2→v0.32.3v2.11.4→v2.12.2e7eb2ec→dd8c9b1v1.15.2→v1.17.020ebb0f→4e6772av0.10.0→v0.11.0v1.1.4→v1.2.0v0.26.2→v0.27.0v0.44.1→v0.45.0v0.34.0→v0.42.0v0.34.0→v0.42.0v1.11.0→v1.16.0a2b48b6→063a89bdf92998→c761662v0.36.0→v0.37.0v1.12.1→v1.13.0v0.35.4→v0.36.1v0.35.4→v0.36.1v0.35.4→v0.36.1v0.35.4→v0.36.1v2.130.1→v2.140.0589584f→aa012dfv1.34.2→v1.36.1v0.26.0→v0.32.0v0.20.1→v0.21.1v5.7.1→v5.8.1v0.20.1→v0.21.1Release Notes
CycloneDX/cyclonedx-go (github.com/CycloneDX/cyclonedx-go)
v0.11.0Compare Source
Changelog
Building and Packaging
32221d4: build(deps): bump actions/setup-go from 6.2.0 to 6.4.0 (#261) (@dependabot[bot])a42a4dd: build(deps): bump gitpod/workspace-go from08a7c68to00059ff(#255) (@dependabot[bot])9810ab9: build(deps): bump goreleaser/goreleaser-action from 6.4.0 to 7.2.1 (#263) (@dependabot[bot])Others
2cef056: Add comprehensive support for CycloneDX 1.7 specification (#257) (@alistair-mclean)3ed34da: Added 5 missing fields to match CycloneDX 1.6 spec: (#256) (@alistair-mclean)daixiang0/gci (github.com/daixiang0/gci)
v0.14.0Compare Source
AST Support is Coming!
See details in #241
Other Changes
New Contributors
Full Changelog: daixiang0/gci@v0.13.7...v0.14.0
go-openapi/runtime (github.com/go-openapi/runtime)
v0.32.3Compare Source
0.32.3 - 2026-06-02
Full Changelog: go-openapi/runtime@v0.32.2...v0.32.3
6 commits in this release.
Implemented enhancements
Documentation
Miscellaneous tasks
Updates
People who contributed to this release
runtime license terms
Per-module changes
client-middleware/opentracing (0.32.3)
Miscellaneous tasks
Updates
docs/examples (0.32.3)
Miscellaneous tasks
Updates
v0.32.2Compare Source
0.32.2 - 2026-05-27
Full Changelog: go-openapi/runtime@v0.32.1...v0.32.2
2 commits in this release.
Fixed bugs
Miscellaneous tasks
People who contributed to this release
runtime license terms
Per-module changes
client-middleware/opentracing (0.32.2)
Miscellaneous tasks
v0.32.1Compare Source
0.32.1 - 2026-05-25
Full Changelog: go-openapi/runtime@v0.32.0...v0.32.1
3 commits in this release.
Documentation
Code quality
Miscellaneous tasks
People who contributed to this release
runtime license terms
Per-module changes
client-middleware/opentracing (0.32.1)
Miscellaneous tasks
v0.32.0Compare Source
0.32.0 - 2026-05-25
Full Changelog: go-openapi/runtime@v0.31.0...v0.32.0
8 commits in this release.
Fixed bugs
Documentation
Code quality
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release
runtime license terms
Per-module changes
client-middleware/opentracing (0.32.0)
Miscellaneous tasks
Updates
docs/examples (0.32.0)
Miscellaneous tasks
Updates
server-middleware (0.32.0)
Updates
v0.31.0Compare Source
0.31.0 - 2026-05-17
Full Changelog: go-openapi/runtime@v0.30.0...v0.31.0
33 commits in this release.
Implemented enhancements
Fixed bugs
Ed25519key support by @fredbi in #452 ...Documentation
Code quality
Testing
Miscellaneous tasks
Security
Updates
Other (technical)
People who contributed to this release
New Contributors
in #451
runtime license terms
Per-module changes
client-middleware/opentracing (0.31.0)
Code quality
Miscellaneous tasks
docs/examples (0.31.0)
Documentation
Code quality
Miscellaneous tasks
Security
server-middleware (0.31.0)
Documentation
Code quality
Security
Other (technical)
v0.30.0Compare Source
0.30.0 - 2026-05-13
Long awaited fixes and additions
Fixed most long standing issues.
Added standalone middleware module (swagger UI, serve spec).
Improved content negotiation.
Context-aware request submission
Full Changelog: go-openapi/runtime@v0.29.5...v0.30.0
33 commits in this release.
Implemented enhancements
Fixed bugs
Refactor
Documentation
Configuration
📅 Schedule: (UTC)
* 0-3 * * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.