Repository navigation
fix(deps): update go - #280
Closed
bootc-bot[bot] wants to merge 1 commit into
Closed
bootc-bot[bot] wants to merge 1 commit into
bootc-bot[bot] wants to merge 1 commit into
Conversation
Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com> Signed-off-by: bootc-bot[bot] <225049296+bootc-bot[bot]@users.noreply.github.com>
Contributor
Author
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
HarshwardhanPatil07
added a commit
to HarshwardhanPatil07/infra
that referenced
this pull request
Nov 2, 2026
Independent indirect updates can break coupled Kubernetes libraries, as in bootc-dev/bootc-operator#280 where kube-openapi introduced incompatible structured-merge-diff schema types and required a newer Go version. Let direct dependencies determine transitive versions, filter updates against the project Go requirement, and tidy the resulting module graph. Assisted-by: AI Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
HarshwardhanPatil07
added a commit
to HarshwardhanPatil07/infra
that referenced
this pull request
Nov 2, 2026
Independent indirect updates can break coupled libraries and block otherwise compatible direct updates in a shared Go PR, as seen in bootc-dev/bootc-operator#280. Keep indirect updates visible for review in a separate group while filtering Go versions and tidying module changes. Assisted-by: AI Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
HarshwardhanPatil07
added a commit
to HarshwardhanPatil07/bootc-operator
that referenced
this pull request
Nov 2, 2026
Include the remaining non-Kubernetes dependency updates from Renovate PR bootc-dev#280 after verifying them with Go 1.26.10 and the existing Kubernetes dependency graph. Keep Kubernetes ecosystem versions unchanged to avoid the incompatible structured-merge-diff/v7 transition. Ref: bootc-dev#280 Assisted-by: AI Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
Merged
HarshwardhanPatil07
added a commit
to HarshwardhanPatil07/bootc-operator
that referenced
this pull request
Nov 3, 2026
Update the direct AWS SDK dependencies from Renovate PR bootc-dev#280 and let go mod tidy resolve their required indirect dependencies. Retain the existing Kubernetes ecosystem versions to avoid the incompatible structured-merge-diff/v7 transition. Ref: bootc-dev#280 Assisted-by: AI Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
HarshwardhanPatil07
added a commit
to HarshwardhanPatil07/bootc-operator
that referenced
this pull request
Nov 3, 2026
Include the remaining non-Kubernetes dependency updates from Renovate PR bootc-dev#280 after verifying them with Go 1.26.10 and the existing Kubernetes dependency graph. Keep Kubernetes ecosystem versions unchanged to avoid the incompatible structured-merge-diff/v7 transition. Ref: bootc-dev#280 Assisted-by: AI Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
alicefr
pushed a commit
that referenced
this pull request
Nov 3, 2026
Update the direct AWS SDK dependencies from Renovate PR #280 and let go mod tidy resolve their required indirect dependencies. Retain the existing Kubernetes ecosystem versions to avoid the incompatible structured-merge-diff/v7 transition. Ref: #280 Assisted-by: AI Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
alicefr
pushed a commit
that referenced
this pull request
Nov 3, 2026
Include the remaining non-Kubernetes dependency updates from Renovate PR #280 after verifying them with Go 1.26.10 and the existing Kubernetes dependency graph. Keep Kubernetes ecosystem versions unchanged to avoid the incompatible structured-merge-diff/v7 transition. Ref: #280 Assisted-by: AI Signed-off-by: HarshwardhanPatil07 <harshpat@redhat.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Note
This PR body was truncated due to platform limits.
This PR contains the following updates:
faa5f7b→51075c6v1.0.0→v2.0.1v1.47.3→v1.47.5v1.33.9→v1.33.13v1.20.9→v1.20.13v1.20.3→v1.20.5v1.5.6→v1.5.8v2.8.6→v2.8.8v1.5.6→v1.5.8v1.78.4→v1.79.2v1.339.0→v1.343.0v1.13.21→v1.13.23v1.14.6→v1.14.8v1.10.4→v1.12.1v1.38.4→v1.39.1v1.43.4→v1.44.1v1.51.4→v1.51.6v1.28.5→v1.28.7v1.0.2→v1.0.3v29.7.2+incompatible→v29.9.2+incompatiblev0.9.3→v0.9.12v3.13.0→v3.14.0v2.9.1→v2.10.0v1.4.2→v1.5.1v1.0.0→v1.0.2v1.0.0→v1.0.3v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.27.1→v0.29.2v0.7.0→v0.7.1v1.20.1→v1.20.3v0.72.0→v0.73.1v0.22.0→v0.23.0v1.9.4→v1.10.2v1.27.1→v1.28.0v2.4.4→v3.0.6v3.0.5→v3.0.6v0.60.0→v0.62.0v0.23.0→v0.24.0v0.48.0→v0.49.0v0.46.0→v0.47.0v0.42.0→v0.43.0v0.15.0→v0.16.0v2.4.0→v3.0.1v4.13.0→v5.9.11v0.37.1→v0.37.2v0.37.1→v0.37.2v0.37.1→v0.37.2v0.37.1→v0.37.2v0.37.1→v0.37.2v0.37.1→v0.37.2d427ff9→ca3452av0.37.1→v0.37.2be93311→ca04ba52d32026→11ed52ev0.21.1→v0.21.3v0.21.1→v0.21.3v6.4.2→v7.0.1Release Notes
MakeNowJust/heredoc (github.com/MakeNowJust/heredoc)
v2.0.1Compare Source
Version 2.0.1
Fixes
importpath for Go modulesv2.0.0Compare Source
Version 2.0.0
Breaking Changes
aws/smithy-go (github.com/aws/smithy-go)
v1.28.7Compare Source
General Highlights
Module Highlights
github.com/aws/smithy-go: v1.28.7EOFerror when deserializing a JSON union that contains a member not modeled by the client and whose value is notnull.v1.28.6Compare Source
General Highlights
Module Highlights
github.com/aws/smithy-go: v1.28.6chai2010/gettext-go (github.com/chai2010/gettext-go)
v1.0.3Compare Source
docker/cli (github.com/docker/cli)
v29.9.2+incompatibleCompare Source
v29.9.1+incompatibleCompare Source
v29.9.0+incompatibleCompare Source
v29.8.2+incompatibleCompare Source
v29.8.1+incompatibleCompare Source
v29.8.0+incompatibleCompare Source
docker/docker-credential-helpers (github.com/docker/docker-credential-helpers)
v0.9.12Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.11...v0.9.12
v0.9.11Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.10...v0.9.11
v0.9.10Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.9...v0.9.10
v0.9.9Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.8...v0.9.9
v0.9.8Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.7...v0.9.8
v0.9.7Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.6...v0.9.7
v0.9.6Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.5...v0.9.6
v0.9.5Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.4...v0.9.5
v0.9.4Compare Source
What's Changed
Full Changelog: docker/docker-credential-helpers@v0.9.3...v0.9.4
emicklei/go-restful (github.com/emicklei/go-restful/v3)
v3.14.0Compare Source
fxamacker/cbor (github.com/fxamacker/cbor/v2)
v2.10.0Compare Source
v2.10 speeds up encoding by up to 2.88× and decoding by up to 1.87× with zero memory regressions (B/op, allocs/op), reduces memory use, adds the
toindefarraystruct tag option, and fixes bugs. The Contributing Guidelines, Security Policy, and templates were extensively updated.Encoding sorted nested maps of dynamic JSON-like data to CBOR drops from 70 allocs/op to 1 and from 7.2 KiB/op to 4.0 KiB/op in the benchmarks below. Encoding
time.Time,big.Int,TagandMarshalervalues, and decoding intotime.Time,big.IntandTag, use 1 to 2 fewer allocs/op (20% to 50% fewer).This release does not use Go's
unsafepackage. Performance in user apps depends on configuration and data.Tests were refactored and coverage increased to 97.7%. Fuzz tests (not yet public) were also extended. Internal checklists and procedures were updated to reduce potential mistakes.
Performance and Benchmarks
Across all 215 benchmarks, there are zero memory regressions (B/op, allocs/op). Just one benchmark showed a speed dip:
Marshal/struct_many_flds_all_omitempty_all_empty/mapis ~4-5% slower, but only when a struct has 32 fields that are bothomitzeroand empty (same scenario with an 8-field struct is now faster).Benchmarks ran with Go 1.26.10 on linux/amd64 (benchstat n=10, p=0.000):
CBOR Speedup by Data Type
¹ 2.54× speedup (-60.64%) when decoding into a named
[]bytetype that has methods.² For addressable values (reached through a pointer, struct field, slice element or map value).
³ Only when every field is omitempty and empty: 7.6 ns slower for a 32-field struct, 2.37 ns faster for an 8-field struct. This is the only performance regression in all 215 benchmarks.
CBOR Encoding Reflection-Free Speedup
PR #870 optimized common types:
int,int64,uint,uint64,float64,bool,string,nil,[]byte,[]any,map[any]any,map[string]any, andmap[string]string.v2.9.6 → v2.10
ΔSec/op
ΔB/op
ΔAllocs/op
SortBytewiseLexical. Memory improvements are from #774 and #860.Upgrade Notes
Marshalconfigured to useTagsForbiddenreturns an error for abig.Intoutside [-2^64, 2^64-1], andEncModecreation returns an error for settings that would emit tags ifTagsForbiddenis also set (#868).Decoderadvances past well-formed data items rejected byDecOptionsvalue or serialization restrictions (e.g.NaN,IndefLength), andSkipskips them without an error (#872).Marshalconfigured to emit text-based time returns an error fortime.Timeoutside RFC 3339 limits (#873).TinyGo (experimental)
TinyGo support for v2.10.0 is available in tag
tinygo-beta/v2.10.0-tinygo0.42(branchfeature/cbor-tinygo-beta). It requires TinyGo 0.42.0 or newer. It is experimental and not fuzz tested. For details, see TinyGo (https://github.com/fxamacker/cbor#tinygo) in the README.What's Changed
⭐ Features
🚀 Optimizations
🛠 Improvements
🐞 Bug Fixes
🧪 Testing
📖 Documentation
📖 Contributing Guidelines, Security Policy, and Templates
CI / GitHub Actions
🔎 Details
Other Changes
Ported from release-2.9
Already released in v2.9.3 through v2.9.6.
🔎 Details
Configuration
📅 Schedule: (in timezone UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.