Skip to content

chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5 - #581

Open
red-hat-konflux[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gopkg.in-evanphx-json-patch.v4-5.x
Open

chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5#581
red-hat-konflux[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/gopkg.in-evanphx-json-patch.v4-5.x

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jun 26, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
gopkg.in/evanphx/json-patch.v4 v4.13.0v5.9.11 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

evanphx/json-patch (gopkg.in/evanphx/json-patch.v4)

v5.9.11

Compare Source

What's Changed

Full Changelog: evanphx/json-patch@v5.9.10...v5.9.11

v5.9.10

Compare Source

What's Changed

New Contributors

Full Changelog: evanphx/json-patch@v5.9.0...v5.9.10

v5.9.0

Compare Source

What's Changed

Full Changelog: evanphx/json-patch@v5.8.1...v5.9.0

v5.8.1: Fix API breakage

Compare Source

This PR fixes Operation containing a reference to internal/json and breaking the ability to manually compose one. This restores that ability using a type alias.

Full Changelog: evanphx/json-patch@v5.8.0...v5.8.1

v5.8.0: Blargh Phixs and Empathyprovements

Compare Source

This release fixes a few stray panics, addresses large number accuracy, and improves performance!

What's Changed

Full Changelog: evanphx/json-patch@v5.7.0...v5.8.0

v5.7.0: The 2023 Release

Compare Source

What's Changed

New Contributors

Full Changelog: evanphx/json-patch@v5.6.0...v5.7.0

v5.6.0: Bug fixes

Compare Source

What's Changed

New Contributors

Full Changelog: evanphx/json-patch@v5.5.0...v5.6.0

v5.5.0: Better null handling

Compare Source

This incorporates a few fixes related to how nulls are handles in array's and objects.

v5.3.0: Fix zero sized document crash

Compare Source

This fixes a crash bug where submitted an empty slice as the document would panic.

v5.2.0

Compare Source

v5.1.0

Compare Source

v5.0.0: Proper Go modules release

Compare Source

This release has a proper /v5 directory, unlike the previous releases that did not have a /v4 dir. Thanks to @​BenTheElder for getting this sorted out!


Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • Between 02:00 AM and 04:59 AM, Monday through Friday (* 2-4 * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux Bot added area/dependency Issues or PRs related to dependency changes major-update manual-review-required ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Jun 26, 2026
@coderabbitai

coderabbitai Bot commented Jun 26, 2026

Copy link
Copy Markdown

Walkthrough

Changes

JSON Patch dependency update

Layer / File(s) Summary
Update JSON Patch dependency
go.mod
The indirect dependency changes from gopkg.in/evanphx/json-patch.v4 v4.13.0 to gopkg.in/evanphx/json-patch.v5 v5.9.11.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: aliceh, xiaoyu74

🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed The PR changes only one go.mod dependency line; no Ginkgo test files or test-title expressions are added or modified.
Test Structure And Quality ✅ Passed The PR changes only one indirect dependency line in go.mod; it adds no Ginkgo test code, so the test-structure requirements are not applicable.
Microshift Test Compatibility ✅ Passed The pull request changes only one indirect go.mod dependency; it adds no Ginkgo tests or MicroShift-sensitive API references.
Single Node Openshift (Sno) Test Compatibility ✅ Passed The commit changes only go.mod, updating an indirect dependency; it adds no Ginkgo e2e tests or multi-node assumptions.
Topology-Aware Scheduling Compatibility ✅ Passed The commit changes only the indirect dependency in go.mod; it adds or modifies no deployment manifests, operator code, controllers, or scheduling constraints.
Ote Binary Stdout Contract ✅ Passed The commit changes only go.mod; the osde2e package has no process-level stdout writes. The root operator's FIPS init is not part of the OTE test binary.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed The commit changes only the indirect dependency line in go.mod; no Go, Ginkgo, e2e, or test files were added or modified.
No-Weak-Crypto ✅ Passed The PR changes only one indirect go.mod dependency; no weak algorithms, crypto operations, or secret/token comparisons appear in the diff or cached v5 module.
Container-Privileges ✅ Passed The PR changes only one go.mod dependency line; no container/Kubernetes manifests or privilege settings are changed, and scans found no prohibited true/root/SYS_ADMIN declarations.
No-Sensitive-Data-In-Logs ✅ Passed The only PR change is an indirect dependency version in go.mod; it adds no logging statements or sensitive-data output.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely describes the dependency update from gopkg.in/evanphx/json-patch.v4 to v5.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/master/gopkg.in-evanphx-json-patch.v4-5.x

Comment @coderabbitai help to get the list of available commands.

@openshift-ci
openshift-ci Bot requested review from aliceh and xiaoyu74 June 26, 2026 04:22
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5 chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5 - autoclosed Jul 12, 2026
@red-hat-konflux red-hat-konflux Bot closed this Jul 12, 2026
@red-hat-konflux
red-hat-konflux Bot deleted the konflux/mintmaker/master/gopkg.in-evanphx-json-patch.v4-5.x branch July 12, 2026 08:08
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5 - autoclosed chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5 Jul 13, 2026
@red-hat-konflux red-hat-konflux Bot reopened this Jul 13, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/gopkg.in-evanphx-json-patch.v4-5.x branch 2 times, most recently from ced95ad to c9db6f4 Compare July 13, 2026 04:19
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/gopkg.in-evanphx-json-patch.v4-5.x branch from c9db6f4 to 399c6b6 Compare August 4, 2026 04:18

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Inline comments:
In `@go.mod`:
- Line 149: Add the missing v5.9.11 module and go.mod checksum entries for
gopkg.in/evanphx/json-patch.v5 to go.sum, matching the versions declared in
go.mod.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 555162b1-6e3a-4b10-a9ed-029559e8d229

📥 Commits

Reviewing files that changed from the base of the PR and between 1e20666 and 399c6b6.

📒 Files selected for processing (1)
  • go.mod

Comment thread go.mod
google.golang.org/grpc v1.82.0 // indirect
google.golang.org/protobuf v1.36.12-0.20260120151049-f2248ac996af // indirect
gopkg.in/evanphx/json-patch.v4 v4.13.0 // indirect
gopkg.in/evanphx/json-patch.v5 v5.9.11 // indirect

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟡 Minor | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/usr/bin/env bash
set -euo pipefail

tmp="$(mktemp -d)"
trap 'rm -rf "$tmp"' EXIT

cp go.mod go.sum "$tmp/"

(
  cd "$tmp"
  go mod download gopkg.in/evanphx/json-patch.v5@v5.9.11
)

grep -Eq '^gopkg\.in/evanphx/json-patch\.v5 v5\.9\.11 h1:' "$tmp/go.sum"
grep -Eq '^gopkg\.in/evanphx/json-patch\.v5 v5\.9\.11/go\.mod h1:' "$tmp/go.sum"

Repository: openshift/configure-alertmanager-operator

Length of output: 179


🏁 Script executed:

set -euo pipefail
printf '%s\n' '--- go.mod dependency ---'
nl -ba go.mod | sed -n '144,152p'
printf '%s\n' '--- go.sum entries ---'
rg -n '^gopkg\.in/evanphx/json-patch\.v5 ' go.sum || true
printf '%s\n' '--- tracked status ---'
git status --short go.mod go.sum

Repository: openshift/configure-alertmanager-operator

Length of output: 245


🏁 Script executed:

set -euo pipefail
printf '%s\n' '--- go.mod dependency ---'
sed -n '144,152p' go.mod
printf '%s\n' '--- go.sum entries ---'
rg -n '^gopkg\.in/evanphx/json-patch\.v5 ' go.sum || true
printf '%s\n' '--- tracked status ---'
git status --short go.mod go.sum

Repository: openshift/configure-alertmanager-operator

Length of output: 778


🏁 Script executed:

set -euo pipefail
tmp="$(mktemp -d)"
trap 'rm -rf "$tmp"' EXIT
cp go.mod go.sum "$tmp/"
cd "$tmp"

printf '%s\n' '--- read-only resolution ---'
if GOFLAGS=-mod=readonly go mod download gopkg.in/evanphx/json-patch.v5@v5.9.11; then
  echo 'read-only resolution succeeded'
else
  echo 'read-only resolution failed'
fi

printf '%s\n' '--- module checksums generated in isolated copy ---'
go mod download -json gopkg.in/evanphx/json-patch.v5@v5.9.11

Repository: openshift/configure-alertmanager-operator

Length of output: 1024


🏁 Script executed:

set -euo pipefail
tmp="$(mktemp -d)"
trap 'rm -rf "$tmp"' EXIT
cp go.mod go.sum "$tmp/"
mkdir "$tmp/modcache"
cd "$tmp"

printf '%s\n' '--- read-only resolution with an empty module cache ---'
if GOMODCACHE="$tmp/modcache" GOPROXY=https://proxy.golang.org GOSUMDB=sum.golang.org GOFLAGS=-mod=readonly \
  go mod download gopkg.in/evanphx/json-patch.v5@v5.9.11; then
  echo 'read-only resolution succeeded'
else
  echo 'read-only resolution failed'
fi

printf '%s\n' '--- repository go.sum remains unchanged ---'
test "$(rg -c '^gopkg\.in/evanphx/json-patch\.v5 ' "$OLDPWD/go.sum" || true)" = 0
echo 'no v5 checksum entries'

Repository: openshift/configure-alertmanager-operator

Length of output: 1915


🏁 Script executed:

set -euo pipefail
tmp="$(mktemp -d)"
trap 'chmod -R u+w "$tmp" 2>/dev/null || true; rm -rf "$tmp"' EXIT
mkdir "$tmp/modcache"
cat >"$tmp/go.mod" <<'EOF'
module checksum-probe

go 1.24

require gopkg.in/evanphx/json-patch.v5 v5.9.11
EOF
cat >"$tmp/main.go" <<'EOF'
package main

import _ "gopkg.in/evanphx/json-patch.v5"

func main() {}
EOF
cd "$tmp"

printf '%s\n' '--- read-only package resolution without go.sum ---'
if GOMODCACHE="$tmp/modcache" GOPROXY=https://proxy.golang.org GOSUMDB=sum.golang.org GOFLAGS=-mod=readonly \
  go list ./...; then
  echo 'package resolution succeeded'
else
  echo 'package resolution failed'
fi

Repository: openshift/configure-alertmanager-operator

Length of output: 275


Add the v5.9.11 checksums to go.sum.

go.mod declares gopkg.in/evanphx/json-patch.v5 v5.9.11, but go.sum has no entries for this module. Add both module and go.mod checksums:

gopkg.in/evanphx/json-patch.v5 v5.9.11 h1:OMPeiLomOQwe8+Ku4nwXsdOmrRw2vGUpP3XgLj3ojNw=
gopkg.in/evanphx/json-patch.v5 v5.9.11/go.mod h1:/kvTRh1TVm5wuM6OkHxqXtE/1nUZZpihg29RtuIyfvk=
🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` at line 149, Add the missing v5.9.11 module and go.mod checksum
entries for gopkg.in/evanphx/json-patch.v5 to go.sum, matching the versions
declared in go.mod.

Sources: Path instructions, MCP tools

@openshift-ci

openshift-ci Bot commented Aug 4, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign cdoan1 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@nephomaniac

Copy link
Copy Markdown
Contributor

/retest

@openshift-ci

openshift-ci Bot commented Aug 13, 2026

Copy link
Copy Markdown
Contributor

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/osd-gcp-e2e 399c6b6 link true /test osd-gcp-e2e
ci/prow/images 399c6b6 link true /test images
ci/prow/coverage 399c6b6 link true /test coverage
ci/prow/validate 399c6b6 link true /test validate
ci/prow/lint 399c6b6 link true /test lint
ci/prow/test 399c6b6 link true /test test
ci/prow/rosa-sts-e2e 399c6b6 link true /test rosa-sts-e2e

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@nephomaniac

Copy link
Copy Markdown
Contributor

Module path change (json-patch v4 → v5) on an indirect dep. Upstream transitive deps haven't migrated — will break the build.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependency Issues or PRs related to dependency changes major-update manual-review-required ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant