chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5 - #581
chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5#581red-hat-konflux[bot] wants to merge 1 commit into
Conversation
WalkthroughChangesJSON Patch dependency update
Estimated code review effort: 1 (Trivial) | ~2 minutes Suggested reviewers: 🚥 Pre-merge checks | ✅ 15✅ Passed checks (15 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
ced95ad to
c9db6f4
Compare
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
c9db6f4 to
399c6b6
Compare
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
Inline comments:
In `@go.mod`:
- Line 149: Add the missing v5.9.11 module and go.mod checksum entries for
gopkg.in/evanphx/json-patch.v5 to go.sum, matching the versions declared in
go.mod.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository YAML (base), Central YAML (inherited)
Review profile: CHILL
Plan: Enterprise
Run ID: 555162b1-6e3a-4b10-a9ed-029559e8d229
📒 Files selected for processing (1)
go.mod
| google.golang.org/grpc v1.82.0 // indirect | ||
| google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect | ||
| gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect | ||
| gopkg.in/evanphx/json-patch.v5 v5.9.11 // indirect |
There was a problem hiding this comment.
🗄️ Data Integrity & Integration | 🟡 Minor | ⚡ Quick win
🧩 Analysis chain
🏁 Script executed:
#!/usr/bin/env bash
set -euo pipefail
tmp="$(mktemp -d)"
trap 'rm -rf "$tmp"' EXIT
cp go.mod go.sum "$tmp/"
(
cd "$tmp"
go mod download gopkg.in/evanphx/json-patch.v5@v5.9.11
)
grep -Eq '^gopkg\.in/evanphx/json-patch\.v5 v5\.9\.11 h1:' "$tmp/go.sum"
grep -Eq '^gopkg\.in/evanphx/json-patch\.v5 v5\.9\.11/go\.mod h1:' "$tmp/go.sum"Repository: openshift/configure-alertmanager-operator
Length of output: 179
🏁 Script executed:
set -euo pipefail
printf '%s\n' '--- go.mod dependency ---'
nl -ba go.mod | sed -n '144,152p'
printf '%s\n' '--- go.sum entries ---'
rg -n '^gopkg\.in/evanphx/json-patch\.v5 ' go.sum || true
printf '%s\n' '--- tracked status ---'
git status --short go.mod go.sumRepository: openshift/configure-alertmanager-operator
Length of output: 245
🏁 Script executed:
set -euo pipefail
printf '%s\n' '--- go.mod dependency ---'
sed -n '144,152p' go.mod
printf '%s\n' '--- go.sum entries ---'
rg -n '^gopkg\.in/evanphx/json-patch\.v5 ' go.sum || true
printf '%s\n' '--- tracked status ---'
git status --short go.mod go.sumRepository: openshift/configure-alertmanager-operator
Length of output: 778
🏁 Script executed:
set -euo pipefail
tmp="$(mktemp -d)"
trap 'rm -rf "$tmp"' EXIT
cp go.mod go.sum "$tmp/"
cd "$tmp"
printf '%s\n' '--- read-only resolution ---'
if GOFLAGS=-mod=readonly go mod download gopkg.in/evanphx/json-patch.v5@v5.9.11; then
echo 'read-only resolution succeeded'
else
echo 'read-only resolution failed'
fi
printf '%s\n' '--- module checksums generated in isolated copy ---'
go mod download -json gopkg.in/evanphx/json-patch.v5@v5.9.11Repository: openshift/configure-alertmanager-operator
Length of output: 1024
🏁 Script executed:
set -euo pipefail
tmp="$(mktemp -d)"
trap 'rm -rf "$tmp"' EXIT
cp go.mod go.sum "$tmp/"
mkdir "$tmp/modcache"
cd "$tmp"
printf '%s\n' '--- read-only resolution with an empty module cache ---'
if GOMODCACHE="$tmp/modcache" GOPROXY=https://proxy.golang.org GOSUMDB=sum.golang.org GOFLAGS=-mod=readonly \
go mod download gopkg.in/evanphx/json-patch.v5@v5.9.11; then
echo 'read-only resolution succeeded'
else
echo 'read-only resolution failed'
fi
printf '%s\n' '--- repository go.sum remains unchanged ---'
test "$(rg -c '^gopkg\.in/evanphx/json-patch\.v5 ' "$OLDPWD/go.sum" || true)" = 0
echo 'no v5 checksum entries'Repository: openshift/configure-alertmanager-operator
Length of output: 1915
🏁 Script executed:
set -euo pipefail
tmp="$(mktemp -d)"
trap 'chmod -R u+w "$tmp" 2>/dev/null || true; rm -rf "$tmp"' EXIT
mkdir "$tmp/modcache"
cat >"$tmp/go.mod" <<'EOF'
module checksum-probe
go 1.24
require gopkg.in/evanphx/json-patch.v5 v5.9.11
EOF
cat >"$tmp/main.go" <<'EOF'
package main
import _ "gopkg.in/evanphx/json-patch.v5"
func main() {}
EOF
cd "$tmp"
printf '%s\n' '--- read-only package resolution without go.sum ---'
if GOMODCACHE="$tmp/modcache" GOPROXY=https://proxy.golang.org GOSUMDB=sum.golang.org GOFLAGS=-mod=readonly \
go list ./...; then
echo 'package resolution succeeded'
else
echo 'package resolution failed'
fiRepository: openshift/configure-alertmanager-operator
Length of output: 275
Add the v5.9.11 checksums to go.sum.
go.mod declares gopkg.in/evanphx/json-patch.v5 v5.9.11, but go.sum has no entries for this module. Add both module and go.mod checksums:
gopkg.in/evanphx/json-patch.v5 v5.9.11 h1:OMPeiLomOQwe8+Ku4nwXsdOmrRw2vGUpP3XgLj3ojNw=
gopkg.in/evanphx/json-patch.v5 v5.9.11/go.mod h1:/kvTRh1TVm5wuM6OkHxqXtE/1nUZZpihg29RtuIyfvk=
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.
In `@go.mod` at line 149, Add the missing v5.9.11 module and go.mod checksum
entries for gopkg.in/evanphx/json-patch.v5 to go.sum, matching the versions
declared in go.mod.
Sources: Path instructions, MCP tools
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: red-hat-konflux[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
/retest |
|
@red-hat-konflux[bot]: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
|
Module path change (json-patch v4 → v5) on an indirect dep. Upstream transitive deps haven't migrated — will break the build. |
This PR contains the following updates:
v4.13.0→v5.9.11Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
evanphx/json-patch (gopkg.in/evanphx/json-patch.v4)
v5.9.11Compare Source
What's Changed
Full Changelog: evanphx/json-patch@v5.9.10...v5.9.11
v5.9.10Compare Source
What's Changed
New Contributors
Full Changelog: evanphx/json-patch@v5.9.0...v5.9.10
v5.9.0Compare Source
What's Changed
Full Changelog: evanphx/json-patch@v5.8.1...v5.9.0
v5.8.1: Fix API breakageCompare Source
This PR fixes Operation containing a reference to internal/json and breaking the ability to manually compose one. This restores that ability using a type alias.
Full Changelog: evanphx/json-patch@v5.8.0...v5.8.1
v5.8.0: Blargh Phixs and EmpathyprovementsCompare Source
This release fixes a few stray panics, addresses large number accuracy, and improves performance!
What's Changed
Full Changelog: evanphx/json-patch@v5.7.0...v5.8.0
v5.7.0: The 2023 ReleaseCompare Source
What's Changed
New Contributors
Full Changelog: evanphx/json-patch@v5.6.0...v5.7.0
v5.6.0: Bug fixesCompare Source
What's Changed
New Contributors
Full Changelog: evanphx/json-patch@v5.5.0...v5.6.0
v5.5.0: Better null handlingCompare Source
This incorporates a few fixes related to how nulls are handles in array's and objects.
v5.3.0: Fix zero sized document crashCompare Source
This fixes a crash bug where submitted an empty slice as the document would panic.
v5.2.0Compare Source
v5.1.0Compare Source
v5.0.0: Proper Go modules releaseCompare Source
This release has a proper /v5 directory, unlike the previous releases that did not have a /v4 dir. Thanks to @BenTheElder for getting this sorted out!
Configuration
📅 Schedule: (in timezone UTC)
* 2-4 * * 1-5)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.