chore(deps): update go dependencies - #24
Open
red-hat-konflux[bot] wants to merge 1 commit into
Open
Conversation
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
from
July 19, 2026 01:32
842d7a2 to
456d19d
Compare
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #24 +/- ##
=======================================
Coverage 72.73% 72.73%
=======================================
Files 28 28
Lines 2611 2611
=======================================
Hits 1899 1899
Misses 398 398
Partials 314 314
Flags with carried forward coverage won't be shown. Click here to find out more. ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
from
July 19, 2026 13:37
456d19d to
e7fcbc8
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
from
July 19, 2026 17:41
e7fcbc8 to
e626642
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
from
July 20, 2026 19:30
e626642 to
7bbb18d
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
from
July 27, 2026 19:02
7bbb18d to
a11ee3e
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
from
July 27, 2026 21:58
a11ee3e to
86c5b8e
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
from
August 1, 2026 18:20
86c5b8e to
442afdf
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
12 times, most recently
from
August 8, 2026 21:39
463dbc8 to
dee610b
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
from
August 11, 2026 03:45
dee610b to
5df066e
Compare
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
2 times, most recently
from
August 13, 2026 02:15
57f7a63 to
2738fa6
Compare
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
red-hat-konflux
Bot
force-pushed
the
konflux/mintmaker/main/go-deps
branch
from
August 14, 2026 03:12
2738fa6 to
9d1505f
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.3.0→v7.0.0v5.0.3→v7.0.0v0.21.7→v0.21.9v1.0.1-vault-7→v2.24.0v1.22.0→v1.23.0v3.4.0→v3.4.1v1.10.8→v1.10.9v1.2.2→v1.3.0v1.10.8→v1.10.9v0.56.0→v0.57.0v0.58.0925bb5d→ec0a776v1.36.11→v1.36.12Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
cenkalti/backoff (github.com/cenkalti/backoff/v4)
v7.0.0Compare Source
v6.0.1Compare Source
v6.0.0Compare Source
v5.0.3Compare Source
v5.0.2Compare Source
v5.0.1Compare Source
v5.0.0Compare Source
google/go-containerregistry (github.com/google/go-containerregistry)
v0.21.9Compare Source
What's Changed
Full Changelog: google/go-containerregistry@v0.21.8...v0.21.9
v0.21.8Compare Source
The artifacts attached to this release are missing SLSA provenance, see #2390.
What's Changed
New Contributors
Full Changelog: google/go-containerregistry@v0.21.7...v0.21.8
hashicorp/hcl (github.com/hashicorp/hcl)
v2.24.0Compare Source
Enhancements
gohcl. (#703)Bugs Fixed
v2.23.0Compare Source
Bugs Fixed
v2.22.0Compare Source
Enhancements
v2.21.0Compare Source
Enhancements
ParseTraversalPartial, which allows traversals that include the splat ([*]) index operator. (#673)for_each, and will transfer those marks (as much as technically possible) to values in the generated blocks. (#679)Bugs Fixed
v2.20.1Compare Source
Bugs Fixed
ExprSyntaxErrorwhen an invalid namespaced function is encountered during parsing (#668)Internal
v2.20.0Compare Source
Enhancements
Bugs Fixed
iteratoris invalid return this error instead of consequential errors (#656)v2.19.1Compare Source
What's Changed
Full Changelog: hashicorp/hcl@v2.19.0...v2.19.1
v2.19.0Compare Source
Enhancements
dynblock.Expandnow supports an optional hook for calling applications to check and potentially veto (by returning error diagnostics) particularfor_eachvalues. The behavior is unchanged for callers that don't set the new option. (#634)Bugs Fixed
v2.18.1Compare Source
Bugs Fixed
v2.18.0Compare Source
Enhancements
HCL now uses the tables from Unicode 15 when performing string normalization and character segmentation. HCL was previously using the Unicode 13 tables.
For calling applications where consistent Unicode support is important, consider also upgrading to Go 1.21 at the same time as adopting HCL v2.18.0 so that the standard library unicode tables (used for case folding, etc) will also be from Unicode 15.
v2.17.1Compare Source
Enhancements
https://at the start of a URL known to use that scheme. (#617)Bugs Fixed
anykeyword, avoiding an incorrect panic at runtime. (#625)v2.17.0Compare Source
Enhancements
HCL now uses a newer version of the upstream
ctylibrary which has improved treatment of unknown values: it can now track additional optional information that reduces the range of an unknown value, which allows some operations against unknown values to return known or partially-known results. (#590)Note: This change effectively passes on
cty's notion of backward compatibility whereby unknown values can become "more known" in later releases. In particular, if your caller is usingcty.Value.RawEqualsin its tests against the results of operations with unknown values then you may see those tests begin failing after upgrading, due to the values now being more "refined".If so, you should review the refinements with consideration to the
ctyrefinements docs and update your expected results to match only if the reported refinements seem correct for the given situation. TheRawEqualsmethod is intended only for making exact value comparisons in test cases, so main application code should not use it; useEqualsinstead for real logic, which will take refinements into account automatically.v2.16.2Compare Source
Bugs Fixed
v2.16.1Compare Source
Bugs Fixed
Range.EndforFunctionCallwith incomplete argument (#588)v2.16.0Compare Source
Enhancements
ext/typeexpr: Modify the
Defaultsfunctionality to implement additional flexibility. HCL will now upcast lists and sets into tuples, and maps into objects, when applying default values if the applied defaults cause the elements within a target collection to have differing types. Previously, this would have resulted in a panic, now HCL will return a modified overall type. (#574)Users should return to the advice provided by v2.14.0, and apply the go-cty convert functionality after setting defaults on a given
cty.Value, rather than before.hclfmt: Avoid rewriting unchanged files. (#576)
hclsyntax: Simplify the AST for certain string expressions. (#584)
Bugs Fixed
formatSpaces. (#511)v2.15.0Compare Source
Bugs Fixed
Enhancements
Defaultsstruct and associated functions can apply additional and more flexible 'unsafe' conversions (examples include tuples into collections such as lists and sets, and additional safety around null and dynamic values). (#564)cty.Value, rather than after, if they require a specificcty.Type. (#564)v2.14.1Compare Source
Bugs Fixed
v2.14.0Compare Source
Enhancements
TypeConstraint. Attributes can be wrapped in the specialoptional(…)modifier, allowing the attribute to be omitted while still meeting the type constraint. For more information, cty's documentation on conversion between object types. (#549)TypeConstraintWithDefaults. In this mode, theoptional(…)modifier accepts a second argument which can be used as the default value for omitted object attributes. The function returns both acty.Typeand associatedDefaults, the latter of which has anApplymethod to apply defaults to a given value. (#549)v2.13.0Compare Source
Enhancements
hcl.Diagnosticnow has an additional fieldExtrawhich is intended for carrying arbitrary supporting data ("extra information") related to the diagnostic message, intended to allow diagnostic renderers to optionally tailor the presentation of messages for particular situations. (#539)errorvalue without any post-processing. (#539)Bugs Fixed
hclwrite.Formatruns concurrently with itself. (#534)v2.12.0Compare Source
Enhancements
TokensForTuple,TokensForObject, andTokensForFunctionCallallow for more easily constructing the three constructs which are supported for static analysis and which HCL-based languages typically use in contexts where an expression is used only for its syntax, and not evaluated to produce a real value. For example, these new functions together are sufficient to construct all valid type constraint expressions from the Type Expressions Extension, which is the basis of variable type constraints in the Terraform language at the time of writing. (#502)IsJSONExpressionandIsJSONBodyto determine if a given expression or body was created by the JSON syntax parser. In normal situations it's better not to worry about what syntax a particular expression/body originated in, but this can be useful in some trickier cases where an application needs to shim for backwards-compatibility or for static analysis that needs to have special handling of the JSON syntax's embedded expression/template conventions. (#524)Bugs Fixed
v2.11.1Compare Source
Bugs Fixed
v2.11.0Compare Source
Enhancements
Bugs Fixed
v2.10.1Compare Source
function.ArgErrorwhose argument index is out of range for the length of the arguments. Previously this would often lead to a panic, but now it'll return a less-precice error message instead. Functions that return out-of-bounds argument indices still ought to be fixed so that the resulting error diagnostics can be as precise as possible. (#472)hcl.Indexandhcl.GetAttr. These are part of the implementation of indexing and attribute lookup in the native syntax expression language too, so the new error messages will apply to problems using those operators. (#474)v2.10.0Compare Source
Enhancements
${...}template interpolation sequences will now produce an extra hint message about the need to escape as$${when trying to include interpolation syntax for other languages like shell scripting, AWS IAM policies, etc. (#462)v2.9.1Compare Source
Bugs Fixed
v2.9.0Compare Source
Enhancements
v2.8.2Compare Source
Bugs Fixed
forexpression marked conditional. (#438)v2.8.1Compare Source
Bugs Fixed
v2.8.0Compare Source
Enhancements
Bugs Fixed
(and)tokens when an expression is surrounded by parentheses. Previously it would incorrectly recognize those tokens as being extraneous tokens outside of the expression. (#426)!(unary boolean "not") operator and its subsequent operand. (#403)v2.7.2Compare Source
Bugs Fixed
null[*]was previously always returning an unknown value, even though the rules for[*]normally call for it to return an empty tuple when applied to a null. As well as being a surprising result, it was particularly problematic because it violated the rule that a calling application may assume that an expression result will always be known unless the application itself introduces unknown values via the evaluation context.null[*]will now produce an empty tuple. (#416)v2.7.1Compare Source
Bugs Fixed
v2.7.0Compare Source
Enhancements
ParseWithStartPos, which allows overriding the starting position for parsing in case the given JSON bytes are a fragment of a larger document, such as might happen when decoding withencoding/jsoninto ajson.RawMessage. (#389)ParseExpression, which allows parsing a JSON string directly in expression mode, whereas previously it was only possible to parse a JSON string in body mode. (#381)Blocktype now supportsSetTypeandSetLabels, allowing surgical changes to the type and labels of an existing block without having to reconstruct the entire block. (#340)Bugs Fixed
v2.6.0Compare Source
Enhancements
Spec,ValidateSpec, which allows custom validation of values at decode-time. (#387)Bugs Fixed
v2.5.1Compare Source
Bugs Fixed
foo.*) (#374)v2.5.0Compare Source
Enhancements
v2.4.0Compare Source
Enhancements
Bugs Fixed
v2.3.0Compare Source
Enhancements
tryandcanto include in yourhcl.EvalContextwhen evaluating expressions, which allow users to make decisions based on the success of expressions. (#330)convertwhich you can include in yourhcl.EvalContextwhen evaluating expressions, allowing users to convert values to specific type constraints using the type constraint expression syntax. (#330)ctycapsule typetypeexpr.TypeConstraintTypewhich, when used as either a type constraint for a function parameter or as a type constraint for ahcldecattribute specification will cause the given expression to be interpreted as a type constraint expression rather than a value expression. (#330)hcldecattribute specifications. (#330)ctycapsuletypescustomdecode.ExpressionTypeandcustomdecode.ExpressionClosureTypewhich, when used as either a type constraint for a function parameter or as a type constraint for ahcldecattribute specification will cause the given expression (and, for the closure type, also thehcl.EvalContextit was evaluated in) to be captured for later analysis, rather than immediately evaluated. (#330)v2.2.0Compare Source
Enhancements
AttrSpecorBlockAttrsSpec) now captures expression evaluation metadata in any errors it produces during type conversions, allowing for better feedback in calling applications that are able to make use of this metadata when printing diagnostic messages. (#329)Bugs Fixed
IndexExpr,SplatExpr, andRelativeTraversalExprwill now report a source range that covers all of their child expression nodes. Previously they would report only the operator part, such as["foo"],[*], or.foo, which was problematic for callers using source ranges for code analysis. (#328)v2.1.0Compare Source
Enhancements
json.Unmarshalin the Go standard library.Bugs Fixed
Body.Blocksmethod was returing the blocks in an indefined order, rather than preserving the order of declaration in the source input. (#313)TokensForTraversalfunction (and thus in turn theBody.SetAttributeTraversalmethod) was not correctly handling index steps in traversals, and thus producing invalid results. (#319)v2.0.0Compare Source
Initial release of HCL 2, which is a new implementating combining the HCL 1
language with the HIL expression language to produce a single language
supporting both nested configuration structures and arbitrary expressions.
HCL 2 has an entirely new Go library API and so is not a drop-in upgrade
relative to HCL 1. It's possible to import both versions of HCL into a single
program using Go's semantic import versioning mechanism:
Prior to v2.0.0 there was not a curated changelog. Consult the git history
from the latest v1.x.x tag for information on the changes to HCL 1.
jellydator/ttlcache (github.com/jellydator/ttlcache/v3)
v3.4.1Compare Source
What's Changed
New Contributors
Full Changelog: jellydator/ttlcache@v3.4.0...v3.4.1
sigstore/sigstore (github.com/sigstore/sigstore)
v1.10.9Compare Source
What's Changed
Note: #2369 deprecates the TUF client. Use the TUF client from sigstore-go instead: https://github.com/sigstore/sigstore-go/tree/main/pkg/tuf
Full Changelog: sigstore/sigstore@v1.10.8...v1.10.9
sigstore/sigstore-go (github.com/sigstore/sigstore-go)
v1.3.0Compare Source
What's Changed
New Contributors
Full Changelog: sigstore/sigstore-go@v1.2.2...v1.3.0
protocolbuffers/protobuf-go (google.golang.org/protobuf)
v1.36.12Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.36.11...v1.36.12
User-visible changes:
CL/812620: defval: support hex and octal default values for numeric fields
CL/737480: reflect/protodesc: add missing IsProto3Optional initialization
CL/735401: internal/descfmt: replace uses of MethodByName with direct calls when possible
CL/735120: encoding/protojson: fix google.protobuf.Empty serialization
CL/734761: encoding/prototext: implement recursion limit
CL/734760: encoding/protodelim: error out when size exceeds math.MaxInt
CL/734280: internal/descfmt: fix dce with Go 1.26 by not calling MethodByName for Methods
CL/733841: encoding/protojson: reject non-numeric ints/floats
CL/729461: compiler/protogen: introduce and expose feature resoluton to protogen
Maintenance:
CL/810580: types: update to the protobuf version (35.1)
CL/735620: types: regenerate using latest protobuf v33.3 release
CL/737460: compiler/protogen: document --go_opt in addition to --go_out
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.