Bump the go_modules group across 2 directories with 11 updates#1406
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the go_modules group across 2 directories with 11 updates#1406dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go_modules group with 7 updates in the /tests/e2e directory: | Package | From | To | | --- | --- | --- | | [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.6.0` | `1.6.3` | | [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.1.1` | `4.1.4` | | [github.com/microsoft/kiota-http-go](https://github.com/microsoft/kiota-http-go) | `1.5.2` | `1.5.5` | | [github.com/moby/spdystream](https://github.com/moby/spdystream) | `0.5.0` | `0.5.1` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.41.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.37.0` | `1.43.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.75.1` | `1.79.3` | Bumps the go_modules group with 4 updates in the /tests/integration directory: [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go), [github.com/distribution/distribution/v3](https://github.com/distribution/distribution), [github.com/containerd/containerd](https://github.com/containerd/containerd) and [github.com/go-git/go-git/v5](https://github.com/go-git/go-git). Updates `github.com/cloudflare/circl` from 1.6.0 to 1.6.3 - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.6.0...v1.6.3) Updates `github.com/go-jose/go-jose/v4` from 4.1.1 to 4.1.4 - [Release notes](https://github.com/go-jose/go-jose/releases) - [Commits](go-jose/go-jose@v4.1.1...v4.1.4) Updates `github.com/microsoft/kiota-http-go` from 1.5.2 to 1.5.5 - [Release notes](https://github.com/microsoft/kiota-http-go/releases) - [Changelog](https://github.com/microsoft/kiota-http-go/blob/main/CHANGELOG.md) - [Commits](microsoft/kiota-http-go@v1.5.2...v1.5.5) Updates `github.com/moby/spdystream` from 0.5.0 to 0.5.1 - [Release notes](https://github.com/moby/spdystream/releases) - [Commits](moby/spdystream@v0.5.0...v0.5.1) Updates `go.opentelemetry.io/otel` from 1.37.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.41.0) Updates `go.opentelemetry.io/otel/sdk` from 1.37.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.43.0) Updates `google.golang.org/grpc` from 1.75.1 to 1.79.3 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.75.1...v1.79.3) Updates `go.opentelemetry.io/otel/sdk` from 1.42.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.37.0...v1.43.0) Updates `github.com/distribution/distribution/v3` from 3.1.0 to 3.1.1 - [Release notes](https://github.com/distribution/distribution/releases) - [Commits](distribution/distribution@v3.1.0...v3.1.1) Updates `github.com/containerd/containerd` from 1.7.25 to 1.7.29 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v1.7.25...v1.7.29) Updates `github.com/go-git/go-git/v5` from 5.13.1 to 5.19.0 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.13.1...v5.19.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.42.0 to 1.43.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.42.0...v1.43.0) --- updated-dependencies: - dependency-name: github.com/cloudflare/circl dependency-version: 1.6.3 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/go-jose/go-jose/v4 dependency-version: 4.1.4 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/microsoft/kiota-http-go dependency-version: 1.5.5 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/moby/spdystream dependency-version: 0.5.1 dependency-type: indirect dependency-group: go_modules - dependency-name: go.opentelemetry.io/otel dependency-version: 1.41.0 dependency-type: indirect dependency-group: go_modules - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.43.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-version: 1.79.3 dependency-type: indirect dependency-group: go_modules - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.43.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/distribution/distribution/v3 dependency-version: 3.1.1 dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/containerd/containerd dependency-version: 1.7.29 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.0 dependency-type: indirect dependency-group: go_modules - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp dependency-version: 1.43.0 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
WalkthroughTwo test module files were updated with Go version 1.25.0 and refreshed dependency versions, including OpenTelemetry, gRPC, protobuf, cloud provider libraries, and infrastructure components across e2e and integration test suites. ChangesTest Infrastructure Dependency Updates
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes 🚥 Pre-merge checks | ✅ 12✅ Passed checks (12 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: dependabot[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
openshift-ci
Bot
added
the
needs-ok-to-test
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@tests/e2e/go.mod`:
- Line 3: Align all Go module and Docker base image versions to 1.25: update the
root go.mod "go" directive to 1.25 (matching the tests/e2e change), and update
the Go version tags in the project Dockerfile and Dockerfile.tests-extension to
the 1.25 base images; also bump the go directives in v1/go.mod and
tests/integration/image-builders/release/go.mod to 1.25, run go mod tidy in each
module and rebuild the test images to ensure no version mismatches remain with
the CI golang-1.25 environment.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml
Review profile: CHILL
Plan: Enterprise
Run ID: 3d173e49-8907-4506-a25b-029b7fd6f1e5
⛔ Files ignored due to path filters (2)
tests/e2e/go.sumis excluded by!**/*.sumtests/integration/go.sumis excluded by!**/*.sum
📒 Files selected for processing (2)
tests/e2e/go.modtests/integration/go.mod
| module github.com/openshift/oc-mirror-tests-extension | ||
|
|
||
| go 1.24.6 | ||
| go 1.25.0 |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
# Read-only verification: find Go version pins/usages in repo config and docs.
set -euo pipefail
echo "== Files likely to pin Go versions =="
fd -HI '(^|/)(go\.mod|go\.work|\.tool-versions|\.go-version|Dockerfile|Dockerfile\..*|Makefile|README\.md|.*\.ya?ml)$'
echo
echo "== go.mod/go.work directives =="
rg -nP '^\s*go\s+[0-9]+\.[0-9]+(\.[0-9]+)?\s*$|^\s*toolchain\s+go[0-9]+\.[0-9]+(\.[0-9]+)?\s*$' --iglob 'go.mod' --iglob 'go.work'
echo
echo "== GitHub Actions setup-go pins =="
rg -nP 'setup-go|go-version|golang:' --iglob '*.yml' --iglob '*.yaml'
echo
echo "== Docker/Makefile/version strings referencing Go =="
rg -nP 'go1\.[0-9]+|golang:1\.[0-9]+|GO_VERSION|GOVERSION' --iglob 'Dockerfile*' --iglob 'Makefile' --iglob '*.mk' --iglob '*.yml' --iglob '*.yaml' --iglob '*.sh'Repository: openshift/oc-mirror
Length of output: 22883
🏁 Script executed:
# Check GitHub Actions workflows
find .github/workflows -name '*.yml' -o -name '*.yaml' 2>/dev/null | head -20Repository: openshift/oc-mirror
Length of output: 45
🏁 Script executed:
# Search for any go-version references in CI files
rg 'go-version|go_version|GOVERSION|GO_VERSION' --iglob '*.yml' --iglob '*.yaml' -A 2 -B 2Repository: openshift/oc-mirror
Length of output: 45
🏁 Script executed:
# Check Dockerfiles for Go version pins
rg 'golang:|FROM.*go|GO_VERSION' --iglob 'Dockerfile*' -B 1 -A 1Repository: openshift/oc-mirror
Length of output: 2165
🏁 Script executed:
# Check Makefile for Go-related targets
rg -n 'GO|go.*version' Makefile --iglob 'Makefile' --iglob '*.mk'Repository: openshift/oc-mirror
Length of output: 2669
🏁 Script executed:
# List .github/workflows files
find .github/workflows -type f 2>/dev/nullRepository: openshift/oc-mirror
Length of output: 45
🏁 Script executed:
# Check if any workflow references tests/e2e or coordinates multi-module builds
rg 'tests/e2e|tests/integration|working-directory' .github/workflows/ -A 2 -B 2Repository: openshift/oc-mirror
Length of output: 122
🏁 Script executed:
# Check .ci-operator.yaml to understand CI setup
cat -n .ci-operator.yaml | head -100Repository: openshift/oc-mirror
Length of output: 197
🏁 Script executed:
# List all .yml/.yaml files in root to find CI config
fd -HI '\.(yml|yaml)$' . --maxdepth 1Repository: openshift/oc-mirror
Length of output: 139
🏁 Script executed:
# Check if there's any CI documentation
find . -name 'CONTRIBUTING*' -o -name 'CI*' -o -name '*ci*' -type f -maxdepth 2 2>/dev/null | head -20Repository: openshift/oc-mirror
Length of output: 121
Verify and align all Go module versions and Dockerfiles to 1.25 before merging.
CI's build root uses Go 1.25 (golang-1.25-openshift-4.22), but bumping tests/e2e to 1.25.0 while root go.mod remains at 1.24.3 creates version inconsistencies that will break builds. Additional mismatches found:
- Root go.mod: 1.24.3 (conflicts with CI)
- Root Dockerfile: 1.23.5 (severely outdated)
- Dockerfile.tests-extension: 1.24 (incompatible with 1.25 modules)
- v1/go.mod: 1.24.0
- tests/integration/image-builders/release/go.mod: 1.23.0
tests/e2e/go.mod upgrade to 1.25.0 is correct, but the root module and build tooling must also be updated to 1.25 to maintain consistency with the CI environment. Without this, tests importing root modules will fail due to version mismatches.
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@tests/e2e/go.mod` at line 3, Align all Go module and Docker base image
versions to 1.25: update the root go.mod "go" directive to 1.25 (matching the
tests/e2e change), and update the Go version tags in the project Dockerfile and
Dockerfile.tests-extension to the 1.25 base images; also bump the go directives
in v1/go.mod and tests/integration/image-builders/release/go.mod to 1.25, run go
mod tidy in each module and rebuild the test images to ensure no version
mismatches remain with the CI golang-1.25 environment.
Contributor
|
/ok-to-test |
openshift-ci
Bot
added
ok-to-test
|
@dependabot[bot]: all tests passed! Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go_modules group with 7 updates in the /tests/e2e directory:
1.6.01.6.34.1.14.1.41.5.21.5.50.5.00.5.11.37.01.41.01.37.01.43.01.75.11.79.3Bumps the go_modules group with 4 updates in the /tests/integration directory: go.opentelemetry.io/otel/sdk, github.com/distribution/distribution/v3, github.com/containerd/containerd and github.com/go-git/go-git/v5.
Updates
github.com/cloudflare/circlfrom 1.6.0 to 1.6.3Release notes
Sourced from github.com/cloudflare/circl's releases.
... (truncated)
Commits
24ae53cRelease CIRCL v1.6.3581020bRename method to oddMultiplesProjective.12209a4Removing unused cmov for jacobian points.fcba359ecc/p384: use of complete projective formulas for scalar multiplication.5e1bae8ecc/p384: handle point doubling in point addition with Jacobian coordinates.3416046Check opts for nil value.a763d47Release CIRCL v1.6.23c70bf9Bump x/crypto x/sys dependencies.3f0f15bRevert to using package-declared HPKE errors for shortkem instead of standard...23491bdAdding generic Power2Round method.Updates
github.com/go-jose/go-jose/v4from 4.1.1 to 4.1.4Release notes
Sourced from github.com/go-jose/go-jose/v4's releases.
Commits
0e59876Merge commit from forkddffdbcBump actions/checkout from 5 to 6 (#213)5348b9aReject JWS with an unprotected critical b64 header (#210)9153a5eBump actions/setup-python from 5 to 6 (#208)2126e17Bump actions/setup-go from 5 to 6 (#209)9860c65Bump actions/checkout from 4 to 5 (#206)14239fdRemove Go 1.23 support (#205)a16e158Update CI to run on Go 1.24 and 1.25 (#204)a1565a4testutils/assert: remove True, Nil, NotNil (#202)3a80e13jwe: accept non-pointer JSONWebKey in Recipient (#200)Updates
github.com/microsoft/kiota-http-gofrom 1.5.2 to 1.5.5Release notes
Sourced from github.com/microsoft/kiota-http-go's releases.
Changelog
Sourced from github.com/microsoft/kiota-http-go's changelog.
Commits
c6133feMerge pull request #223 from microsoft/release-please--branches--main--compon...cb68231chore(main): release 1.5.5fba6ba4Merge pull request #221 from microsoft/cobando/fix-redirect-vulnerability39fa46cupdating scrub func to use 2 instead of 3 paramsce4f0dcadding port conditione68b9e1adding senstive headers scrub functionf950250Merge pull request #220 from microsoft/ci/release-please-dispatch849a4eeci: adds workflow dispatch to release please7bdff1cMerge pull request #218 from microsoft/dependabot/github_actions/dependabot/f...85d1657chore(deps): bump dependabot/fetch-metadata from 2.4.0 to 2.5.0Updates
github.com/moby/spdystreamfrom 0.5.0 to 0.5.1Release notes
Sourced from github.com/moby/spdystream's releases.
Commits
c59e5d7Merge pull request #109 from thaJeztah/use_ioutil2fd0155use ioutil.Discard for go1.13 compatibilityef6121fMerge commit from fork241cec9compare with signed Int for 32-bit Arm21c3864Add options to customize limitsacf9b45spdy: update godoc for MaxDataLengtheb63605spdy: limit header-size and header-count2f21da4spdy: fix header block byte accounting5976b66spdy: enforce 24-bit frame length limitscf0ec5dGuard against oversized SPDY framesUpdates
go.opentelemetry.io/otelfrom 1.37.0 to 1.41.0Changelog
Sourced from go.opentelemetry.io/otel's changelog.
... (truncated)
Commits
4575a97Release 1.41.0/0.63.0/0.17.0/0.0.15 (#7977)66fc10dfix: add error handling for insecure HTTP endpoints with TLS client configura...76e6eecchore(deps): update github/codeql-action action to v4.32.5 (#7980)0d50f90Revert "Generate semconv/v1.40.0" (#7978)c38a4a5Generate semconv/v1.40.0 (#7929)0f1a224chore(deps): update module github.com/securego/gosec/v2 to v2.23.0 (#7899)c79ebf4chore(deps): update module github.com/daixiang0/gci to v0.14.0 (#7973)f758157chore(deps): update module github.com/sonatard/noctx to v0.5.0 (#7968)92a1164fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to d566b...3cd7c27chore(deps): update module github.com/protonmail/go-crypto to v1.4.0 (#7969)Updates
go.opentelemetry.io/otel/sdkfrom 1.37.0 to 1.43.0Changelog
Sourced from go.opentelemetry.io/otel/sdk's changelog.
... (truncated)
Commits
9276201Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)61b8c94chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)97a086echore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)5e363delimit response body size for OTLP HTTP exporters (#8108)35214b6Use an absolute path when calling bsd kenv (#8113)290024cfix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)e70658efix: support getBody in otelploghttp (#8096)4afe468fix(deps): update googleapis to 9d38bb4 (#8117)b9ca729chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (#8115)69472ecchore(deps): update fossas/fossa-action action to v1.9.0 (#8118)Updates
google.golang.org/grpcfrom 1.75.1 to 1.79.3Release notes
Sourced from google.golang.org/grpc's releases.
... (truncated)
Commits
dda86dbChange version to 1.79.3 (#8983)72186f1grpc: enforce strict path checking for incoming requests on the server (#8981)97ca352Changing version to 1.79.3-dev (#8954)8902ab6Change the version to release 1.79.2 (#8947)a928670Cherry-pick #8874 to v1.79.x (#8904)06df363Change version to 1.79.2-dev (#8903)782f2deChange version to 1.79.1 (#8902)850eccbChange version to 1.79.1-dev (#8851)765ff05Change version to 1.79.0 (#8850)68804beCherry pick #8864 to v1.79.x (#8896)Updates
go.opentelemetry.io/otel/sdkfrom 1.42.0 to 1.43.0Changelog
Sourced from go.opentelemetry.io/otel/sdk's changelog.
... (truncated)
Commits
9276201Release v1.43.0 / v0.65.0 / v0.19.0 (#8128)61b8c94chore(deps): update module github.com/mattn/go-runewidth to v0.0.22 (#8131)97a086echore(deps): update github.com/golangci/dupl digest to c99c5cf (#8122)5e363delimit response body size for OTLP HTTP exporters (#8108)35214b6Use an absolute path when calling bsd kenv (#8113)290024cfix(deps): update module google.golang.org/grpc to v1.80.0 (#8121)e70658efix: support getBody in otelploghttp (#8096)4afe468fix(deps): update googleapis to 9d38bb4 (#8117)b9ca729chore(deps): update module github.com/go-git/go-git/v5 to v5.17.2 (