fix(deps): update go packages #423

red-hat-konflux · 2025-12-06T00:46:41Z

This PR contains the following updates:

Package	Change	Type	Update
github.com/go-openapi/jsonpointer	`v0.22.3` -> `v0.22.4`	indirect	patch
github.com/go-openapi/jsonreference	`v0.21.3` -> `v0.21.4`	indirect	patch
github.com/golang-jwt/jwt/v4	`v4.5.2` -> `v5.3.0`	indirect	major
github.com/google/go-github/v75	`v75.0.0` -> `v81.0.0`	indirect	major
github.com/google/go-querystring	`v1.1.0` -> `v1.2.0`	indirect	minor
github.com/google/pprof	`4902fdd` -> `d7df1bf`	indirect	digest
github.com/grpc-ecosystem/grpc-gateway/v2	`v2.27.3` -> `v2.27.4`	indirect	patch
github.com/klauspost/compress	`v1.18.1` -> `v1.18.2`	indirect	patch
github.com/konflux-ci/application-api	`d24742e` -> `555a927`	require	digest
github.com/onsi/ginkgo/v2	`v2.27.2` -> `v2.27.4`	require	patch
github.com/onsi/gomega	`v1.38.2` -> `v1.39.0`	require	minor
github.com/prometheus/common	`v0.67.4` -> `v0.67.5`	indirect	patch
github.com/spf13/cobra	`v1.10.1` -> `v1.10.2`	indirect	patch
github.com/tektoncd/pipeline	`v1.6.0` -> `v1.7.0`	require	minor
gitlab.com/gitlab-org/api/client-go	`v1.3.0` -> `v1.11.0`	require	minor
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`v0.63.0` -> `v0.64.0`	indirect	minor
go.opentelemetry.io/otel	`v1.38.0` -> `v1.39.0`	indirect	minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace	`v1.38.0` -> `v1.39.0`	indirect	minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	`v1.38.0` -> `v1.39.0`	indirect	minor
go.opentelemetry.io/otel/metric	`v1.38.0` -> `v1.39.0`	indirect	minor
go.opentelemetry.io/otel/sdk	`v1.38.0` -> `v1.39.0`	indirect	minor
go.opentelemetry.io/otel/trace	`v1.38.0` -> `v1.39.0`	indirect	minor
go.yaml.in/yaml/v2	`v2.4.3` -> `v3.0.4`	indirect	major
golang.org/x/exp	`87e1e73` -> `944ab1f`	indirect	digest
golang.org/x/mod	`v0.30.0` -> `v0.32.0`	indirect	minor
golang.org/x/net	`v0.47.0` -> `v0.48.0`	indirect	minor
golang.org/x/oauth2	`v0.33.0` -> `v0.34.0`	require	minor
golang.org/x/sync	`v0.18.0` -> `v0.19.0`	indirect	minor
golang.org/x/sys	`v0.38.0` -> `v0.40.0`	indirect	minor
golang.org/x/term	`v0.37.0` -> `v0.39.0`	indirect	minor
golang.org/x/text	`v0.31.0` -> `v0.33.0`	indirect	minor
golang.org/x/tools	`v0.39.0` -> `v0.40.0`	indirect	minor
gomodules.xyz/jsonpatch/v2	`v2.5.0` -> `v3.0.1`	indirect	major
google.golang.org/api	`v0.256.0` -> `v0.259.0`	indirect	minor
google.golang.org/genproto/googleapis/api	`79d6a2a` -> `0a764e5`	indirect	digest
google.golang.org/genproto/googleapis/rpc	`79d6a2a` -> `0a764e5`	indirect	digest
google.golang.org/grpc	`v1.77.0` -> `v1.78.0`	indirect	minor
google.golang.org/protobuf	`v1.36.10` -> `v1.36.11`	indirect	patch
gopkg.in/evanphx/json-patch.v4	`v4.13.0` -> `v5.9.11`	indirect	major
gopkg.in/yaml.v2	`v2.4.0` -> `v3.0.1`	indirect	major
k8s.io/api	`v0.34.2` -> `v0.35.0`	require	minor
k8s.io/apiextensions-apiserver	`v0.34.2` -> `v0.35.0`	indirect	minor
k8s.io/apimachinery	`v0.34.2` -> `v0.35.0`	require	minor
k8s.io/apiserver	`v0.34.2` -> `v0.35.0`	indirect	minor
k8s.io/client-go	`v0.34.2` -> `v0.35.0`	require	minor
k8s.io/component-base	`v0.34.2` -> `v0.35.0`	indirect	minor
k8s.io/utils	`bc988d5` -> `914a6e7`	require	digest
knative.dev/pkg	`b7bbf4b` -> `51874fe`	replace	digest
knative.dev/pkg	`e853b1d` -> `51874fe`	require	digest

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

Release Notes

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

`v0.22.4`

Compare Source

0.22.4 - 2025-12-06

Full Changelog: go-openapi/jsonpointer@v0.22.3...v0.22.4

1 commits in this release.

Miscellaneous tasks

ci: aligned CI to use shared workflows by @fredbi in #91 ...

People who contributed to this release

@fredbi

jsonpointer license terms

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

`v0.21.4`

Compare Source

0.21.4 - 2025-12-08

Full Changelog: go-openapi/jsonreference@v0.21.3...v0.21.4

1 commits in this release.

Documentation

doc: updated contributors file by @bot-go-openapi[bot] in #64 ...

People who contributed to this release

@bot-go-openapi[bot]

New Contributors

@bot-go-openapi[bot] made their first contribution
in #64

jsonreference license terms

golang-jwt/jwt (github.com/golang-jwt/jwt/v4)

`v5.3.0`

Compare Source

This release is almost identical to to v5.2.3 but now correctly indicates Go 1.21 as minimum requirement.

What's Changed

Create CODEOWNERS by @oxisto in #449
Bump Go version to indicate correct minimum requirement by @oxisto in #452

Full Changelog: golang-jwt/jwt@v5.2.3...v5.3.0

`v5.2.3`

Compare Source

What's Changed

Bump GitHub workflows and Go versions by @mfridman in #438
Implementing validation of multiple audiences by @oxisto in #433
Bump golangci/golangci-lint-action from 7 to 8 by @dependabot[bot] in #440
replaced interface{} to any by @aachex in #445
Fix bug in validation of multiple audiences by @sfinnman-cotn in #441

New Contributors

@aachex made their first contribution in #445
@sfinnman-cotn made their first contribution in #441

Full Changelog: golang-jwt/jwt@v5.2.2...v5.2.3

`v5.2.2`

Compare Source

What's Changed

Fixed GHSA-mh63-6h87-95cp by @mfridman
Fixed some typos by @Ashikpaul in #382
build: add go1.22 to ci workflows by @mfridman in #383
Bump golangci/golangci-lint-action from 4 to 5 by @dependabot in #387
Bump golangci/golangci-lint-action from 5 to 6 by @dependabot in #389
chore: bump ci tests to include go1.23 by @mfridman in #405
Fix jwt -show by @AlexanderYastrebov in #406
docs: typo by @kvii in #407
Update SECURITY.md by @oxisto in #416
Update jwt.Parse example to use jwt.WithValidMethods by @mattt in #425

New Contributors

@Ashikpaul made their first contribution in #382
@kvii made their first contribution in #407
@mattt made their first contribution in #425

Full Changelog: golang-jwt/jwt@v5.2.1...v5.2.2

`v5.2.1`

Compare Source

What's Changed

chore: remove unnecessary conversions from tests by @estensen in #370
Trivial: Typo fix for ECDSA error message by @tjs-cinemo in #373
Fix incorrect error return by @ss49919201 in #371

New Contributors

@tjs-cinemo made their first contribution in #373
@ss49919201 made their first contribution in #371

Full Changelog: golang-jwt/jwt@v5.2.0...v5.2.1

`v5.2.0`

Compare Source

What's Changed

Exported NewValidator by @oxisto in #349
Improve ErrInvalidKeyType error messages by @Laurin-Notemann in #361
Update MIGRATION_GUIDE.md by @jbarham in #363

New Contributors

@Laurin-Notemann made their first contribution in #361
@jbarham made their first contribution in #363

Full Changelog: golang-jwt/jwt@v5.1.0...v5.2.0

`v5.1.0`

Compare Source

What's Changed

Using jwt's native ErrInvalidType instead of json.UnsupportedTypeError by @oxisto in #316
Fix typos in comments and test names by @alexandear in #317
Format: add whitespaces, remove empty lines by @alexandear in #319
Refactor example: use io.ReadAll instead of io.Copy by @alexandear in #320
Refactor code by using switch instead of if-else by @alexandear in #318
A quick way to validate token string by @dcalsky in #302
Refactor: remove unnecessary []byte conversion to string by @alexandear in #330
Refactor: compare strings with strings.EqualFold by @alexandear in #329
Avoid use of json.NewDecoder by @craigpastro in #313
Update ParseUnverified godoc by @duhaesbaert in #341
Update ci workflows (add go1.21) by @mfridman in #345
Bump actions/checkout from 3 to 4 by @dependabot in #346
Key rotation with VerificationKeySet by @mfridman in #344
Add explicit ClaimsValidator implementation check for custom claims by @epelc in #343
feat: allow making exp claim required by @tareksha in #351
Add error handling to examples by @craigpastro in #312

New Contributors

@alexandear made their first contribution in #317
@dcalsky made their first contribution in #302
@craigpastro made their first contribution in #313
@duhaesbaert made their first contribution in #341
@epelc made their first contribution in #343
@tareksha made their first contribution in #351

Full Changelog: golang-jwt/jwt@v5.0.0...v5.1.0

`v5.0.0`

Compare Source

🚀 New Major Version `v5` 🚀

It's finally here, the release you have been waiting for! We don't take breaking changes lightly, but the changes outlined below were necessary to address some of the challenges of the previous API. A big thanks for @mfridman for all the reviews, all contributors for their commits and of course @dgrijalva for the original code. I hope we kept some of the spirit of your original v4 branch alive in the approach we have taken here.
~@oxisto, on behalf of @golang-jwt/maintainers

Version v5 contains a major rework of core functionalities in the jwt-go library. This includes support for several validation options as well as a re-design of the Claims interface. Lastly, we reworked how errors work under the hood, which should provide a better overall developer experience.

Starting from v5.0.0, the import path will be:

"github.com/golang-jwt/jwt/v5"

For most users, changing the import path should suffice. However, since we intentionally changed and cleaned some of the public API, existing programs might need to be updated. The following sections describe significant changes and corresponding updates for existing programs.

Parsing and Validation Options

Under the hood, a new validator struct takes care of validating the claims. A long awaited feature has been the option to fine-tune the validation of tokens. This is now possible with several ParserOption functions that can be appended to most Parse functions, such as ParseWithClaims. The most important options and changes are:

Added WithLeeway to support specifying the leeway that is allowed when validating time-based claims, such as exp or nbf.
Changed default behavior to not check the iat claim. Usage of this claim is OPTIONAL according to the JWT RFC. The claim itself is also purely informational according to the RFC, so a strict validation failure is not recommended. If you want to check for sensible values in these claims, please use the WithIssuedAt parser option.
Added WithAudience, WithSubject and WithIssuer to support checking for expected aud, sub and iss.
Added WithStrictDecoding and WithPaddingAllowed options to allow previously global settings to enable base64 strict encoding and the parsing of base64 strings with padding. The latter is strictly speaking against the standard, but unfortunately some of the major identity providers issue some of these incorrect tokens. Both options are disabled by default.

Changes to the `Claims` interface

Complete Restructuring

Previously, the claims interface was satisfied with an implementation of a Valid() error function. This had several issues:

The different claim types (struct claims, map claims, etc.) then contained similar (but not 100 % identical) code of how this validation was done. This lead to a lot of (almost) duplicate code and was hard to maintain
It was not really semantically close to what a "claim" (or a set of claims) really is; which is a list of defined key/value pairs with a certain semantic meaning.

Since all the validation functionality is now extracted into the validator, all VerifyXXX and Valid functions have been removed from the Claims interface. Instead, the interface now represents a list of getters to retrieve values with a specific meaning. This allows us to completely decouple the validation logic with the underlying storage representation of the claim, which could be a struct, a map or even something stored in a database.

type Claims interface {
	GetExpirationTime() (*NumericDate, error)
	GetIssuedAt() (*NumericDate, error)
	GetNotBefore() (*NumericDate, error)
	GetIssuer() (string, error)
	GetSubject() (string, error)
	GetAudience() (ClaimStrings, error)
}

Supported Claim Types and Removal of `StandardClaims`

The two standard claim types supported by this library, MapClaims and RegisteredClaims both implement the necessary functions of this interface. The old StandardClaims struct, which has already been deprecated in v4 is now removed.

Users using custom claims, in most cases, will not experience any changes in the behavior as long as they embedded RegisteredClaims. If they created a new claim type from scratch, they now need to implemented the proper getter functions.

Migrating Application Specific Logic of the old `Valid`

Previously, users could override the Valid method in a custom claim, for example to extend the validation with application-specific claims. However, this was always very dangerous, since once could easily disable the standard validation and signature checking.

In order to avoid that, while still supporting the use-case, a new ClaimsValidator interface has been introduced. This interface consists of the Validate() error function. If the validator sees, that a Claims struct implements this interface, the errors returned to the Validate function will be appended to the regular standard validation. It is not possible to disable the standard validation anymore (even only by accident).

Usage examples can be found in example_test.go, to build claims structs like the following.

// MyCustomClaims includes all registered claims, plus Foo.
type MyCustomClaims struct {
	Foo string `json:"foo"`
	jwt.RegisteredClaims
}

// Validate can be used to execute additional application-specific claims
// validation.
func (m MyCustomClaims) Validate() error {
	if m.Foo != "bar" {
		return errors.New("must be foobar")
	}

	return nil
}

Changes to the `Token` and `Parser` struct

The previously global functions DecodeSegment and EncodeSegment were moved to the Parser and Token struct respectively. This will allow us in the future to configure the behavior of these two based on options supplied on the parser or the token (creation). This also removes two previously global variables and moves them to parser options WithStrictDecoding and WithPaddingAllowed.

In order to do that, we had to adjust the way signing methods work. Previously they were given a base64 encoded signature in Verify and were expected to return a base64 encoded version of the signature in Sign, both as a string. However, this made it necessary to have DecodeSegment and EncodeSegment global and was a less than perfect design because we were repeating encoding/decoding steps for all signing methods. Now, Sign and Verify operate on a decoded signature as a []byte, which feels more natural for a cryptographic operation anyway. Lastly, Parse and SignedString take care of the final encoding/decoding part.

In addition to that, we also changed the Signature field on Token from a string to []byte and this is also now populated with the decoded form. This is also more consistent, because the other parts of the JWT, mainly Header and Claims were already stored in decoded form in Token. Only the signature was stored in base64 encoded form, which was redundant with the information in the Raw field, which contains the complete token as base64.

type Token struct {
	Raw       string                 // Raw contains the raw token
	Method    SigningMethod          // Method is the signing method used or to be used
	Header    map[string]interface{} // Header is the first segment of the token in decoded form
	Claims    Claims                 // Claims is the second segment of the token in decoded form
	Signature []byte                 // Signature is the third segment of the token in decoded form
	Valid     bool                   // Valid specifies if the token is valid
}

Most (if not all) of these changes should not impact the normal usage of this library. Only users directly accessing the Signature field as well as developers of custom signing methods should be affected.

What's Changed

Added GitHub Actions Markdown by @oxisto in #260
Remove StandardClaims in favor of RegisteredClaims by @oxisto in #235
Adding more coverage by @oxisto in #268
More consistent way of handling validation errors by @oxisto in #274
New Validation API by @oxisto in #236
v5 Pre-Release by @oxisto in #234
no need for string slice and call to strings.join by @moneszarrugh in #115
Update MIGRATION_GUIDE.md by @liam-verta in #289
Moving DecodeSegement to Parser by @oxisto in #278
Adjusting the error checking example by @oxisto in #270
add documentation to hmac Verify & Sign to detail why string is not an advisable input for key by @dillonstreator in #249
Add golangci-lint by @mfridman in #279
Added dependabot updates for GitHub actions by @oxisto in #298
Bump actions/checkout from 2 to 3 by @dependabot in #299
Bump actions/setup-go from 3 to 4 by @dependabot in #300
Added coverage reporting by @oxisto in #304
Last Documentation cleanups for v5 release by @oxisto in #291
enable jwt.ParsePublicKeyFromPEM to parse PKCS1 Public Key by @twocs in #120

New Contributors

@moneszarrugh made their first contribution in #115
@liam-verta made their first contribution in #289
@dillonstreator made their first contribution in #249
@dependabot made their first contribution in #299
@twocs made their first contribution in #120

Full Changelog: golang-jwt/jwt@v4.5.0...v5.0.0

google/go-github (github.com/google/go-github/v75)

`v81.0.0`

Compare Source

This release contains the following breaking API changes:

fix!: Change Org usage report Quantity to float64 (#3862)
BREAKING CHANGE: UsageItem.Quantity is now type float64.
chore!: Remove PullRequestRuleParameters.AutomaticCopilotCodeReviewEnabled field (#3866)
BREAKING CHANGE: PullRequestRuleParameters.AutomaticCopilotCodeReviewEnabled is now removed.
feat!: Implement Enterprise SCIM - Provision Groups & Users (#3852)
BREAKING CHANGE: SCIMEnterpriseDisplayReference.Ref is now of type *string.
fix!: Change copilot_code_review field names to match GitHub API (#3874)
BREAKING CHANGE: CopilotCodeReviewRuleParameters.ReviewNewPushes is now ReviewOnPush.
fix!: Add support for missing attributes in ProjectsV2 API (#3888)
BREAKING CHANGE: AddProjectItemOptions fields have changed types.
feat!: Use omitzero for BypassActors to support handling empty arrays (#3891)
BREAKING CHANGE: UpdateRepositoryRulesetClearBypassActor, UpdateRepositoryRulesetClearBypassActor, UpdateRulesetClearBypassActor, and UpdateRulesetNoBypassActor have been removed as they are no longer needed.

...and the following additional changes:

Bump go-github from v79 to v80 in /scrape (#3855)
feat: Add support for Enterprise Team APIs (#3861)
feat: Implement Enterprise SCIM - Set Groups or Users (#3858)
build(deps): Bump golang.org/x/term from 0.37.0 to 0.38.0 in /example (#3865)
build(deps): Bump golang.org/x/sync from 0.18.0 to 0.19.0 in /tools (#3864)
build(deps): Bump actions/checkout from 6.0.0 to 6.0.1 in the actions group (#3863)
feat: Add advanced_search parameter to SearchOptions (#3868)
feat: Implement Enterprise SCIM - Delete Groups or Users (#3856)
feat: Add support for copilot_code_review rule type (#3857)
feat: Add support for Enterprise Team Members APIs (#3873)
chore: Simplify JSON marshaling for RepositoryRulesetRules (#3875)
feat: Add support for Enterprise Team Organizations APIs (#3876)
docs: Clarify CreateTree semantics and TreeEntry usage (#3877)
docs: Reformulate deprecation notice for Commits field in PushEvent (#3880)
build(deps): Bump actions/cache from 4.3.0 to 5.0.1 in the actions group (#3883)
build(deps): Bump golang.org/x/net from 0.47.0 to 0.48.0 in /scrape (#3882)
build(deps): Bump codecov/codecov-action from 5.5.1 to 5.5.2 (#3884)
build(deps): Bump golang.org/x/crypto from 0.45.0 to 0.46.0 in /example (#3885)
chore: Rename 'opt' to 'opts' in multiple methods (#3887)
feat: Add support for remaining Codespaces APIs (#3886)
feat: Handle omitzero in structfield linter (#3881)
feat: Implement Enterprise SCIM - Get a Group or User (#3889)
feat: Add support for Codespace Machines APIs (#3890)
feat: Add support for URL custom property value type (#3879)
feat: Add UploadReleaseAssetFromRelease convenience helper (#3851)
Update openapi_operations.yaml (#3895)
feat: Add support for Codespaces organizations APIs (#3892)
feat: Add support for Copilot usage metrics reports API (#3893)
feat: GetSignaturesProtectedBranch returns ErrBranchNotProtected when branch is not protected (#3896)
Bump version of go-github to v81.0.0 (#3899)

`v80.0.0`

Compare Source

This release contains the following breaking API changes:

feat!: Implement Enterprise SCIM - EnterpriseService.ListProvisionedSCIMUsers (#3839)
BREAKING CHANGE: ListProvisionedSCIMGroupsEnterpriseOptions optional fields are now pointers.

...and the following additional changes:

Bump go-github from v78 to v79 in /scrape (#3828)
build(deps): Bump github.com/PuerkitoBio/goquery from 1.10.3 to 1.11.0 in /scrape (#3833)
build(deps): Bump actions/checkout from 5.0.0 to 5.0.1 in the actions group (#3834)
build(deps): Bump golang.org/x/crypto from 0.43.0 to 0.44.0 in /example (#3835)
build(deps): Bump github.com/alecthomas/kong from 1.12.1 to 1.13.0 in /tools (#3837)
feat: Add support for Enterprise GitHub App Installation APIs (#3830)
Add ParentIssueURL field to Issue struct (#3841)
build(deps): Bump golang.org/x/crypto from 0.44.0 to 0.45.0 in /example (#3842)
build(deps): Bump the actions group with 2 updates (#3844)
Add custom structfield linter to check struct field names and tags ([#3843](https://red

Configuration

📅 Schedule: Branch creation - Only on Sunday and Saturday ( * * * * 0,6 ) (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

red-hat-konflux · 2025-12-06T00:46:42Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: downloading github.com/onsi/ginkgo/v2 v2.27.4
go: downloading k8s.io/apimachinery v0.35.0
go: downloading sigs.k8s.io/controller-runtime v0.22.4
go: downloading github.com/konflux-ci/application-api v0.0.0-20251210122215-555a927cf6d9
go: downloading gitlab.com/gitlab-org/api/client-go v1.11.0
go: downloading k8s.io/api v0.35.0
go: downloading k8s.io/utils v0.0.0-20260108192941-914a6e750570
go: downloading github.com/dchest/uniuri v1.2.0
go: downloading github.com/google/go-cmp v0.7.0
go: downloading github.com/jarcoal/httpmock v1.4.1
go: downloading github.com/tektoncd/pipeline v1.7.0
go: downloading k8s.io/client-go v0.35.0
go: downloading github.com/onsi/gomega v1.39.0
go: downloading github.com/bradleyfalzon/ghinstallation/v2 v2.17.0
go: downloading golang.org/x/oauth2 v0.34.0
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading knative.dev/pkg v0.0.0-20260104220430-51874fe86fcb
go: downloading k8s.io/apiextensions-apiserver v0.35.0
go: downloading k8s.io/apiserver v0.35.0
go: downloading gomodules.xyz/jsonpatch/v2 v2.5.0
go: downloading github.com/evanphx/json-patch/v5 v5.9.11
go: downloading github.com/go-logr/zapr v1.3.0
go: downloading go.uber.org/zap v1.27.1
go: downloading github.com/golang-jwt/jwt/v4 v4.5.2
go: downloading github.com/google/go-github/v75 v75.0.0
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading sigs.k8s.io/randfill v1.0.0
go: downloading k8s.io/klog/v2 v2.130.1
go: downloading k8s.io/kube-openapi v0.0.0-20251125145642-4e65d59e963e
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.1
go: downloading gopkg.in/inf.v0 v0.9.1
go: downloading sigs.k8s.io/yaml v1.6.0
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading github.com/prometheus/common v0.67.5
go: downloading github.com/prometheus/procfs v0.19.2
go: downloading golang.org/x/sys v0.40.0
go: downloading google.golang.org/protobuf v1.36.11
go: downloading github.com/hashicorp/go-cleanhttp v0.5.2
go: downloading github.com/google/go-querystring v1.2.0
go: downloading github.com/hashicorp/go-retryablehttp v0.7.8
go: downloading golang.org/x/time v0.14.0
go: downloading github.com/google/cel-go v0.26.1
go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
go: downloading github.com/fsnotify/fsnotify v1.9.0
go: downloading k8s.io/component-base v0.35.0
go: downloading go.uber.org/multierr v1.11.0
go: downloading github.com/json-iterator/go v1.1.12
go: downloading go.yaml.in/yaml/v2 v2.4.3
go: downloading github.com/Masterminds/semver/v3 v3.4.0
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading golang.org/x/net v0.48.0
go: downloading go.yaml.in/yaml/v3 v3.0.4
go: downloading github.com/google/gnostic-models v0.7.1
go: downloading github.com/spf13/pflag v1.0.10
go: downloading golang.org/x/term v0.39.0
go: downloading golang.org/x/sync v0.19.0
go: downloading github.com/fxamacker/cbor/v2 v2.9.0
go: downloading github.com/go-task/slim-sprig/v3 v3.0.0
go: downloading golang.org/x/tools v0.40.0
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/blang/semver/v4 v4.0.0
go: downloading go.opentelemetry.io/otel/trace v1.39.0
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading github.com/google/btree v1.1.3
go: downloading github.com/emicklei/go-restful/v3 v3.13.0
go: downloading github.com/go-openapi/jsonreference v0.21.4
go: downloading go.opentelemetry.io/otel v1.39.0
go: downloading github.com/go-openapi/swag v0.25.4
go: downloading cel.dev/expr v0.25.1
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20251222181119-0a764e51fe1b
go: downloading github.com/google/pprof v0.0.0-20260106004452-d7df1bf2cac7
go: downloading gopkg.in/evanphx/json-patch.v4 v4.13.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading github.com/go-openapi/jsonpointer v0.22.4
go: downloading google.golang.org/grpc v1.78.0
go: downloading sigs.k8s.io/apiserver-network-proxy/konnectivity-client v0.34.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.39.0
go: downloading go.opentelemetry.io/otel/sdk v1.39.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.39.0
go: downloading github.com/go-openapi/swag/cmdutils v0.25.4
go: downloading github.com/go-openapi/swag/conv v0.25.4
go: downloading github.com/go-openapi/swag/fileutils v0.25.4
go: downloading github.com/go-openapi/swag/jsonname v0.25.4
go: downloading github.com/go-openapi/swag/jsonutils v0.25.4
go: downloading github.com/go-openapi/swag/loading v0.25.4
go: downloading github.com/go-openapi/swag/mangling v0.25.4
go: downloading github.com/go-openapi/swag/netutils v0.25.4
go: downloading github.com/go-openapi/swag/stringutils v0.25.4
go: downloading github.com/go-openapi/swag/typeutils v0.25.4
go: downloading github.com/go-openapi/swag/yamlutils v0.25.4
go: downloading github.com/stoewer/go-strcase v1.3.1
go: downloading github.com/antlr4-go/antlr/v4 v4.13.1
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20251222181119-0a764e51fe1b
go: downloading golang.org/x/text v0.33.0
go: downloading go.opentelemetry.io/otel/metric v1.39.0
go: downloading golang.org/x/exp v0.0.0-20251219203646-944ab1f22d93
go: downloading github.com/spf13/cobra v1.10.2
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading go.opentelemetry.io/proto/otlp v1.9.0
go: downloading github.com/cenkalti/backoff/v5 v5.0.3
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.27.4
go: downloading github.com/inconshreveable/mousetrap v1.1.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading golang.org/x/mod v0.32.0
go: downloading github.com/google/go-github/v76 v76.0.0
go: downloading github.com/google/go-github v17.0.0+incompatible
go: github.com/konflux-ci/mintmaker/cmd/manager imports
	github.com/tektoncd/pipeline/pkg/apis/pipeline/v1 imports
	github.com/tektoncd/pipeline/pkg/apis/config imports
	knative.dev/pkg/metrics: cannot find module providing package knative.dev/pkg/metrics

snyk-io · 2025-12-06T00:46:52Z

✅ Snyk checks have passed. No issues have been found so far.

Status	Scanner	Critical	High	Medium	Low	Total (0)
✅	Open Source Security	0	0	0	0	0 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot requested a review from a team as a code owner December 6, 2025 00:46

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-updates branch 4 times, most recently from e47222a to c0fffba Compare December 13, 2025 00:43

red-hat-konflux bot changed the title ~~fix(deps): update go packages (major)~~ fix(deps): update go packages Dec 13, 2025

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-updates branch 5 times, most recently from 147d0ae to 6037ffc Compare December 20, 2025 00:44

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-updates branch 7 times, most recently from abb3d6d to 3ef99f6 Compare December 27, 2025 04:49

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-updates branch 6 times, most recently from b6261fe to 5fbd787 Compare January 3, 2026 20:54

red-hat-konflux bot changed the title ~~fix(deps): update go packages~~ fix(deps): update go packages (major) Jan 3, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-updates branch from 5fbd787 to 0e9c8b1 Compare January 4, 2026 00:42

red-hat-konflux bot changed the title ~~fix(deps): update go packages (major)~~ fix(deps): update go packages Jan 4, 2026

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-updates branch from 0e9c8b1 to 0099d1a Compare January 4, 2026 04:48

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-updates branch 6 times, most recently from 5e44909 to 0dc8331 Compare January 10, 2026 04:49

fix(deps): update go packages

6ec3348

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-updates branch from 0dc8331 to 6ec3348 Compare January 10, 2026 09:02

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update go packages #423

fix(deps): update go packages #423

red-hat-konflux bot commented Dec 6, 2025 •

edited

Loading

Uh oh!

red-hat-konflux bot commented Dec 6, 2025 •

edited

Loading

Uh oh!

snyk-io bot commented Dec 6, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

fix(deps): update go packages #423

Are you sure you want to change the base?

fix(deps): update go packages #423

Conversation

red-hat-konflux bot commented Dec 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

0.22.4 - 2025-12-06

Miscellaneous tasks

People who contributed to this release

0.21.4 - 2025-12-08

Documentation

People who contributed to this release

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

🚀 New Major Version v5 🚀

Parsing and Validation Options

Changes to the Claims interface

Complete Restructuring

Supported Claim Types and Removal of StandardClaims

Migrating Application Specific Logic of the old Valid

Changes to the Token and Parser struct

What's Changed

New Contributors

Configuration

Documentation

Uh oh!

red-hat-konflux bot commented Dec 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

snyk-io bot commented Dec 6, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

✅ Snyk checks have passed. No issues have been found so far.

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

red-hat-konflux bot commented Dec 6, 2025 •

edited

Loading

🚀 New Major Version `v5` 🚀

Changes to the `Claims` interface

Supported Claim Types and Removal of `StandardClaims`

Migrating Application Specific Logic of the old `Valid`

Changes to the `Token` and `Parser` struct

red-hat-konflux bot commented Dec 6, 2025 •

edited

Loading

snyk-io bot commented Dec 6, 2025 •

edited

Loading