Skip to content

chore(deps): update go-openapi packages to v1 - #590

Open
red-hat-konflux[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/major-go-openapi
Open

chore(deps): update go-openapi packages to v1#590
red-hat-konflux[bot] wants to merge 1 commit into
masterfrom
konflux/mintmaker/master/major-go-openapi

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jul 13, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/go-openapi/jsonpointer v0.24.0 → v1.0.0 age confidence
github.com/go-openapi/jsonreference v0.21.6 → v1.0.1 age confidence

Release Notes

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v1.0.0

Compare Source

1.0.0 - 2026-07-07

Stable API pledge - no change from v0.24.0

Full Changelog: go-openapi/jsonpointer@v0.24.0...v1.0.0

2 commits in this release.

Documentation
People who contributed to this release

jsonpointer license terms

License

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v1.0.1

Compare Source

1.0.1 - 2026-08-25

Full Changelog: go-openapi/jsonreference@v1.0.0...v1.0.1

12 commits in this release.

Fixed bugs
  • fix: keep NormalizeURL's output parseable when dropping a default port by @​fredbi ...
Documentation
Performance
  • perf: replace the duplicate-slash regexp in NormalizeURL with a scan by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release

jsonreference license terms

License

v1.0.0

Compare Source

1.0.0 - 2026-07-07

Stable API pledge - no change from v0.21.6

Full Changelog: go-openapi/jsonreference@v0.21.6...v1.0.0

10 commits in this release.

Documentation
Miscellaneous tasks
Updates
People who contributed to this release

jsonreference license terms

License

Configuration

📅 Schedule: (in timezone UTC)

  • Branch creation
    • Between 02:00 AM and 04:59 AM, Monday through Friday (* 2-4 * * 1-5)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Summary by CodeRabbit

  • Chores
    • Updated supporting components to newer versions.
    • No user-facing functionality changes.

@red-hat-konflux red-hat-konflux Bot added area/dependency Issues or PRs related to dependency changes major-update manual-review-required ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Jul 13, 2026
@coderabbitai

coderabbitai Bot commented Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: cc65cb40-97e7-4a0d-939c-7c3e4c4a1aa2

📥 Commits

Reviewing files that changed from the base of the PR and between fbe1e0f and 99324b9.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

Included review availability: Your plan provides up to 12 included reviews per hour; 9 remain after this review.

Walkthrough

The Go module manifest updates the indirect jsonpointer and jsonreference dependencies to v1.0.0 and v1.0.1.

Changes

OpenAPI dependency updates

Layer / File(s) Summary
Update indirect OpenAPI modules
go.mod		 Updates github.com/go-openapi/jsonpointer to v1.0.0 and github.com/go-openapi/jsonreference to v1.0.1.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to 99324

This PR updates Go dependency versions without any identified merge-blocking correctness, security, availability, or deployment risk. It is merge-ready after normal checks and review.

Suggested reviewers: robotmaxtron, zmird-r

🚥 Pre-merge checks | ✅ 15
✅ Passed checks (15 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and concisely identifies the dependency update from pre-v1 go-openapi packages to v1 releases, which matches the main changes.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed PASS: The pull request changes only dependency versions and checksums in go.mod and go.sum. It changes no test files, Ginkgo declarations, or test titles. Therefore, it introduces no unstable or d…
Test Structure And Quality ✅ Passed PASS: The pull request changes only go.mod and go.sum. The exact commit diff contains no Ginkgo test, fixture, cleanup, timeout, or assertion changes. All repository Go test sources are unchanged …
Microshift Test Compatibility ✅ Passed PASS — The pull request changes only go.mod and go.sum dependency entries. The diff adds no Ginkgo tests or other test changes, so the MicroShift test compatibility check is not applicable.
Single Node Openshift (Sno) Test Compatibility ✅ Passed The custom check applies only when the pull request adds or changes Ginkgo e2e tests. The diff against origin/master changes only go.mod and go.sum for dependency versions and adds no test files, Go f…
Topology-Aware Scheduling Compatibility ✅ Passed PASS: The pull request changes only dependency versions and checksums in go.mod and go.sum. The diff contains no deployment manifests, operator code, controllers, or scheduling constraints. Theref…
Ote Binary Stdout Contract ✅ Passed The pull request changes only dependency metadata in go.mod and go.sum. No main, init, Ginkgo setup, or other process-level code changed. The repository has a pre-existing fmt.Println in `fi…
Ipv6 And Disconnected Network Test Compatibility ✅ Passed PASS: The pull request changes only dependency metadata in go.mod and go.sum. The diff adds no test files and no Ginkgo constructs such as It(), Describe(), Context(), or When(). Therefore…
No-Weak-Crypto ✅ Passed PASS: The PR changes only dependency versions and checksums in go.mod and go.sum. The selected jsonpointer v1.0.0 and jsonreference v1.0.1 source contains JSON pointer/reference and URL-normal…
Container-Privileges ✅ Passed PASS: The PR changes only go.mod and go.sum. The diff updates Go dependency versions and checksums; it does not modify a container or Kubernetes manifest and contains none of privileged, hostPID, host…
No-Sensitive-Data-In-Logs ✅ Passed PASS: The pull request changes only dependency versions in go.mod and checksum entries in go.sum. It adds no logging code, log arguments, or sensitive-data literals. Existing logging call sites ar…
Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: Stable And Deterministic Test Names

Explanation

PASS: The pull request changes only dependency versions and checksums in go.mod and go.sum. It changes no test files, Ginkgo declarations, or test titles. Therefore, it introduces no unstable or dynamic test name under this check.

Full details: Test Structure And Quality

Explanation

PASS: The pull request changes only go.mod and go.sum. The exact commit diff contains no Ginkgo test, fixture, cleanup, timeout, or assertion changes. All repository Go test sources are unchanged from the parent commit, so this test-structure check has no introduced failure to flag.

Full details: Single Node Openshift (Sno) Test Compatibility

Explanation

The custom check applies only when the pull request adds or changes Ginkgo e2e tests. The diff against origin/master changes only go.mod and go.sum for dependency versions and adds no test files, Go files, or Ginkgo constructs. Therefore, the pull request introduces no SNO multi-node test assumption.

Full details: Topology-Aware Scheduling Compatibility

Explanation

PASS: The pull request changes only dependency versions and checksums in go.mod and go.sum. The diff contains no deployment manifests, operator code, controllers, or scheduling constraints. Therefore, the topology-aware scheduling check does not apply.

Full details: Ote Binary Stdout Contract

Explanation

The pull request changes only dependency metadata in go.mod and go.sum. No main, init, Ginkgo setup, or other process-level code changed. The repository has a pre-existing fmt.Println in fips.go:init, but that code is unchanged and therefore cannot cause a pull-request failure under the causality requirement. The upgraded packages are indirect dependencies, with no added stdout writes.

Full details: Ipv6 And Disconnected Network Test Compatibility

Explanation

PASS: The pull request changes only dependency metadata in go.mod and go.sum. The diff adds no test files and no Ginkgo constructs such as It(), Describe(), Context(), or When(). Therefore, this check has no applicable IPv4 or external-connectivity test failure.

Full details: No-Weak-Crypto

Explanation

PASS: The PR changes only dependency versions and checksums in go.mod and go.sum. The selected jsonpointer v1.0.0 and jsonreference v1.0.1 source contains JSON pointer/reference and URL-normalization code, with no MD5, SHA1, DES, RC4, 3DES, Blowfish, ECB, custom cryptography, or secret comparisons. No weak-crypto API appears on added lines.

Full details: Container-Privileges

Explanation

PASS: The PR changes only go.mod and go.sum. The diff updates Go dependency versions and checksums; it does not modify a container or Kubernetes manifest and contains none of privileged, hostPID, hostNetwork, hostIPC, SYS_ADMIN, or allowPrivilegeEscalation settings. The operator deployment uses the restricted-v2 SCC, and the production Dockerfile sets USER 1001. No stated privilege failure was introduced.

Full details: No-Sensitive-Data-In-Logs

Explanation

PASS: The pull request changes only dependency versions in go.mod and checksum entries in go.sum. It adds no logging code, log arguments, or sensitive-data literals. Existing logging call sites are unchanged, so this pull request does not introduce logging that exposes sensitive data.

✨ Finishing Touches 💡 1
🛠️ Fix failing CI checks 💡
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/master/major-go-openapi

Comment @coderabbitai help to get the list of available commands.

@openshift-ci
openshift-ci Bot requested review from robotmaxtron and zmird-r July 13, 2026 04:18
@codecov

codecov Bot commented Jul 13, 2026 •
edited
Loading

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.61%. Comparing base (2cd5a7c) to head (99324b9).

Additional details and impacted files

Impacted file tree graph

@@           Coverage Diff           @@
##           master     #590   +/-   ##
=======================================
  Coverage   67.61%   67.61%           
=======================================
  Files           8        8           
  Lines        1124     1124           
=======================================
  Hits          760      760           
  Misses        330      330           
  Partials       34       34
🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/major-go-openapi branch from 0441433 to b3a9514 Compare July 15, 2026 04:09
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/major-go-openapi branch 2 times, most recently from fbe1e0f to ff4f3fa Compare August 10, 2026 04:14
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go-openapi packages to v1 chore(deps): update module github.com/go-openapi/jsonpointer to v1 Aug 10, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/major-go-openapi branch from ff4f3fa to acb6f85 Compare August 11, 2026 04:51
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/go-openapi/jsonpointer to v1 chore(deps): update go-openapi packages to v1 Aug 11, 2026
@red-hat-konflux
chore(deps): update go-openapi packages to v1
99324b9 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/master/major-go-openapi branch from acb6f85 to 99324b9 Compare August 31, 2026 04:19
@openshift-ci

openshift-ci Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign joshbranham for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci

openshift-ci Bot commented Aug 31, 2026

Copy link
Copy Markdown
Contributor

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/validate 99324b9 link true /test validate
ci/prow/rosa-sts-e2e 99324b9 link true /test rosa-sts-e2e

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@nephomaniac

nephomaniac commented Sep 2, 2026

Copy link
Copy Markdown
Contributor

Major version bump (go-openapi v0 → v1) on indirect deps. Requires rebase and build validation.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@robotmaxtron robotmaxtron Awaiting requested review from robotmaxtron
@zmird-r zmird-r Awaiting requested review from zmird-r

Assignees

No one assigned

Labels

area/dependency Issues or PRs related to dependency changes major-update manual-review-required ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@nephomaniac