Skip to content

🌱 Bump the all-go-mod-patch-and-minor group across 3 directories with 12 updates #11973

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Mar 17, 2025
Merged

🌱 Bump the all-go-mod-patch-and-minor group across 3 directories with 12 updates #11973

merged 1 commit into from
Mar 17, 2025

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 16, 2025

Bumps the all-go-mod-patch-and-minor group with 5 updates in the / directory:

Package From To
github.com/spf13/viper 1.19.0 1.20.0
k8s.io/api 0.32.2 0.32.3
k8s.io/apiextensions-apiserver 0.32.2 0.32.3
k8s.io/cluster-bootstrap 0.32.2 0.32.3
golang.org/x/net 0.36.0 0.37.0

Bumps the all-go-mod-patch-and-minor group with 6 updates in the /hack/tools directory:

Package From To
github.com/spf13/viper 1.19.0 1.20.0
k8s.io/api 0.32.2 0.32.3
k8s.io/apiextensions-apiserver 0.32.2 0.32.3
k8s.io/cluster-bootstrap 0.32.2 0.32.3
cloud.google.com/go/storage 1.50.0 1.51.0
google.golang.org/api 0.224.0 0.226.0

Bumps the all-go-mod-patch-and-minor group with 5 updates in the /test directory:

Package From To
github.com/spf13/viper 1.19.0 1.20.0
k8s.io/api 0.32.2 0.32.3
k8s.io/apiextensions-apiserver 0.32.2 0.32.3
k8s.io/cluster-bootstrap 0.32.2 0.32.3
golang.org/x/net 0.36.0 0.37.0

Updates github.com/spf13/viper from 1.19.0 to 1.20.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.20.0

[!WARNING] This release includes a few minor breaking changes. Read the upgrade guide for details.

What's Changed

Exciting New Features 🎉

Enhancements 🚀

Bug Fixes 🐛

Breaking Changes 🛠

Dependency Updates ⬆️

... (truncated)

Commits
  • c038295 docs: add update instructions for 1.20
  • 9c07e0f build: disable unused linters
  • 48112d6 ci: add Go 1.24 to the test matrix
  • 66e3e28 build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  • 17b96ac New Logo
  • 8b223a4 build(deps): bump github.com/spf13/cast from 1.7.0 to 1.7.1
  • 91fd363 chore: update afero
  • e75c48f Fix issues reported by testifylint
  • a5ea569 build(deps): bump github/codeql-action from 3.27.7 to 3.27.9
  • 54f2089 build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0 in /remote
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.65.1 to 1.67.3

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.67.3

Dependencies

  • Remove the experimental stats/opentelemetry module and instead add the experimental packages it contains directly into the main google.golang.org/grpc module (#7935)

Release 1.67.2

Bug Fixes

  • credentials/alts: avoid SRV and TXT lookups for handshaker service to work around hangs caused by buggy versions of systemd-resolved. (#7861)

Release 1.67.1

Bug Fixes

  • transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. (#7667)
  • xds/server: Fix xDS Server memory leak. (#7681)

Release 1.67.0

Bug Fixes

  • ringhash: when used with multiple EDS priorities, fix bug that could prevent a higher priority from recovering from transient failure. (#7364)

Behavior Changes

  • In accordance with RFC 7540, clients and servers will now reject TLS connections that don't support ALPN. This can be disabled by setting the environment variable GRPC_ENFORCE_ALPN_ENABLED to false (case insensitive). Please file a bug if you encounter any issues with this behavior. The environment variable to revert this behavior will be removed in an upcoming release. (#7535)

Release 1.66.3

Bug Fixes

  • transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. (#7667)
  • xds/server: Fix xDS Server memory leak. (#7681)

Release 1.66.2

Dependencies

  • Remove unintentional dependency on the testing package (#7579)
  • Remove unintentional dependency on the flate package (#7595)

Bug Fixes

  • client: fix a bug that prevented memory reuse after handling unary RPCs (#7571)

Release 1.66.0

New Features

  • metadata: stabilize ValueFromIncomingContext (#7368)
  • client: stabilize the WaitForStateChange and GetState methods, which were previously experimental. (#7425)

... (truncated)

Commits

Updates k8s.io/api from 0.32.2 to 0.32.3

Commits

Updates k8s.io/apiextensions-apiserver from 0.32.2 to 0.32.3

Commits

Updates k8s.io/apimachinery from 0.32.2 to 0.32.3

Commits

Updates k8s.io/apiserver from 0.32.2 to 0.32.3

Commits

Updates k8s.io/client-go from 0.32.2 to 0.32.3

Commits

Updates k8s.io/cluster-bootstrap from 0.32.2 to 0.32.3

Commits

Updates k8s.io/component-base from 0.32.2 to 0.32.3

Commits

Updates golang.org/x/net from 0.36.0 to 0.37.0

Commits

Updates github.com/spf13/viper from 1.19.0 to 1.20.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.20.0

[!WARNING] This release includes a few minor breaking changes. Read the upgrade guide for details.

What's Changed

Exciting New Features 🎉

Enhancements 🚀

Bug Fixes 🐛

Breaking Changes 🛠

Dependency Updates ⬆️

... (truncated)

Commits
  • c038295 docs: add update instructions for 1.20
  • 9c07e0f build: disable unused linters
  • 48112d6 ci: add Go 1.24 to the test matrix
  • 66e3e28 build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.6
  • 17b96ac New Logo
  • 8b223a4 build(deps): bump github.com/spf13/cast from 1.7.0 to 1.7.1
  • 91fd363 chore: update afero
  • e75c48f Fix issues reported by testifylint
  • a5ea569 build(deps): bump github/codeql-action from 3.27.7 to 3.27.9
  • 54f2089 build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0 in /remote
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.32.2 to 0.32.3

Commits

Updates k8s.io/apiextensions-apiserver from 0.32.2 to 0.32.3

Commits

Updates k8s.io/apimachinery from 0.32.2 to 0.32.3

Commits

Updates k8s.io/apiserver from 0.32.2 to 0.32.3

Commits

Updates k8s.io/client-go from 0.32.2 to 0.32.3

Commits

Updates k8s.io/cluster-bootstrap from 0.32.2 to 0.32.3

Commits

Updates k8s.io/component-base from 0.32.2 to 0.32.3

Commits

Updates cloud.google.com/go/storage from 1.50.0 to 1.51.0

Commits
  • 2fb3eb7 chore(main): release spanner 1.51.0 (#8710)
  • ef872d8 chore: add support for running module dir tests in continuous (#8735)
  • 2105434 fix(bigtable): return cluster error for Update when populated (#8657)
  • deeb583 fix(profiler): migrate to protobuf-go v2 (#8730)
  • 2077158 test(bigtable): Run conformance tests for bigtable (#8658)
  • 3df0287 feat(storage): support MatchGlob for gRPC (#8670)
  • d21429e chore(storage): add invocation ID to gRPC calls (#8698)
  • 9aa4082 chore(github): remove unused OwlBot configuration (#8733)
  • 6cc6d70 chore: update sa for loading secrets (#8729)
  • fe554b5 chore: source secrets for tests (#8728)
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.224.0 to 0.226.0

Release notes

Sourced from google.golang.org/api's releases.

v0.226.0

0.226.0 (2025-03-13)

Features

v0.225.0

0.225.0 (2025-03-11)

Features

Bug Fixes

Changelog

Sourced from google.golang.org/api's changelog.

0.226.0 (2025-03-13)

Features

0.225.0 (2025-03-11)

Features

Bug Fixes

Commits

Updates google.golang.org/grpc from 1.70.0 to 1.71.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.67.3

Dependencies

  • Remove the experimental stats/opentelemetry module and instead add the experimental packages it contains directly into the main google.golang.org/grpc module (#7935)

Release 1.67.2

Bug Fixes

  • credentials/alts: avoid SRV and TXT lookups for handshaker service to work around hangs caused by buggy versions of systemd-resolved. (#7861)

Release 1.67.1

Bug Fixes

  • transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. (#7667)
  • xds/server: Fix xDS Server memory leak. (#7681)

Release 1.67.0

Bug Fixes

  • ringhash: when used with multiple EDS priorities, fix bug that could prevent a higher priority from recovering from transient failure. (#7364)

Behavior Changes

  • In accordance with RFC 7540, clients and servers will now reject TLS connections that don't support ALPN. This can be disabled by setting the environment variable GRPC_ENFORCE_ALPN_ENABLED to false (case insensitive). Please file a bug if you encounter any issues with this behavior. The environment variable to revert this behavior will be removed in an upcoming release. (#7535)

Release 1.66.3

Bug Fixes

  • transport: Fix a bug causing stream failures due to miscalculation of the flow control window in both clients and servers. (#7667)
  • xds/server: Fix xDS Server memory leak. (#7681)

Release 1.66.2

Dependencies

  • Remove unintentional dependency on the testing package (#7579)
  • Remove unintentional dependency on the flate package (#7595)

Bug Fixes

  • client: fix a bug that prevented memory reuse after handling unary RPCs (#7571)

Release 1.66.0

New Features

  • metadata: stabilize ValueFromIncomingContext (#7368)
  • client: stabilize the WaitForStateChange and GetState methods, which were previously experimental. (#7425)

... (truncated)

Commits

Updates github.com/spf13/viper from 1.19.0 to 1.20.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.20.0

[!WARNING] This release includes a few minor breaking changes. Read the upgrade guide for details.

What's Changed

Exciting New Features 🎉

Enhancements 🚀

Bug Fixes 🐛

Breaking Changes 🛠

Dependency Updates ⬆️

... (truncated)

Commits
  • c038295 docs: add update instructions for 1.20
  • 9c07e0f build: disable unused linters
  • 48112d6 ci: add Go 1.24 to the test matrix
  • 66e3e28 build(deps): bum...

    Description has been truncated

@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Mar 16, 2025
@k8s-ci-robot k8s-ci-robot added the cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. label Mar 16, 2025
@k8s-ci-robot
Copy link
Contributor

k8s-ci-robot commented Mar 16, 2025

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@k8s-ci-robot k8s-ci-robot added the size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. label Mar 16, 2025
sbueringer
sbueringer reviewed Mar 16, 2025
View reviewed changes
go.mod
github.com/google/uuid v1.6.0 // indirect
github.com/gorilla/websocket v1.5.3 // indirect
github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 // indirect
github.com/hashicorp/hcl v1.0.0 // indirect
Copy link
Member

@sbueringer sbueringer Mar 16, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Viper got rid of hcl, so now we can get rid of hcl (hcl was not great from a licensing perspective): #9181

Copy link
Contributor

@tuminoid tuminoid Mar 17, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Finally 👍

@sbueringer sbueringer mentioned this pull request Mar 16, 2025
Closed
3 tasks
@dependabot @sbueringer
🌱 Bump the all-go-mod-patch-and-minor group across 3 directories with…
4d56937 
… 12 updates

Bumps the all-go-mod-patch-and-minor group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.19.0` | `1.20.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.32.2` | `0.32.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.32.2` | `0.32.3` |
| [k8s.io/cluster-bootstrap](https://github.com/kubernetes/cluster-bootstrap) | `0.32.2` | `0.32.3` |
| [golang.org/x/net](https://github.com/golang/net) | `0.36.0` | `0.37.0` |

Bumps the all-go-mod-patch-and-minor group with 6 updates in the /hack/tools directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.19.0` | `1.20.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.32.2` | `0.32.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.32.2` | `0.32.3` |
| [k8s.io/cluster-bootstrap](https://github.com/kubernetes/cluster-bootstrap) | `0.32.2` | `0.32.3` |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.50.0` | `1.51.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.224.0` | `0.226.0` |

Bumps the all-go-mod-patch-and-minor group with 5 updates in the /test directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.19.0` | `1.20.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.32.2` | `0.32.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.32.2` | `0.32.3` |
| [k8s.io/cluster-bootstrap](https://github.com/kubernetes/cluster-bootstrap) | `0.32.2` | `0.32.3` |
| [golang.org/x/net](https://github.com/golang/net) | `0.36.0` | `0.37.0` |

Updates `github.com/spf13/viper` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.19.0...v1.20.0)

Updates `google.golang.org/grpc` from 1.65.1 to 1.67.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.65.1...v1.67.3)

Updates `k8s.io/api` from 0.32.2 to 0.32.3
- [Commits](kubernetes/api@v0.32.2...v0.32.3)

Updates `k8s.io/apiextensions-apiserver` from 0.32.2 to 0.32.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.32.2...v0.32.3)

Updates `k8s.io/apimachinery` from 0.32.2 to 0.32.3
- [Commits](kubernetes/apimachinery@v0.32.2...v0.32.3)

Updates `k8s.io/apiserver` from 0.32.2 to 0.32.3
- [Commits](kubernetes/apiserver@v0.32.2...v0.32.3)

Updates `k8s.io/client-go` from 0.32.2 to 0.32.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.32.2...v0.32.3)

Updates `k8s.io/cluster-bootstrap` from 0.32.2 to 0.32.3
- [Commits](kubernetes/cluster-bootstrap@v0.32.2...v0.32.3)

Updates `k8s.io/component-base` from 0.32.2 to 0.32.3
- [Commits](kubernetes/component-base@v0.32.2...v0.32.3)

Updates `golang.org/x/net` from 0.36.0 to 0.37.0
- [Commits](golang/net@v0.36.0...v0.37.0)

Updates `github.com/spf13/viper` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.19.0...v1.20.0)

Updates `k8s.io/api` from 0.32.2 to 0.32.3
- [Commits](kubernetes/api@v0.32.2...v0.32.3)

Updates `k8s.io/apiextensions-apiserver` from 0.32.2 to 0.32.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.32.2...v0.32.3)

Updates `k8s.io/apimachinery` from 0.32.2 to 0.32.3
- [Commits](kubernetes/apimachinery@v0.32.2...v0.32.3)

Updates `k8s.io/apiserver` from 0.32.2 to 0.32.3
- [Commits](kubernetes/apiserver@v0.32.2...v0.32.3)

Updates `k8s.io/client-go` from 0.32.2 to 0.32.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.32.2...v0.32.3)

Updates `k8s.io/cluster-bootstrap` from 0.32.2 to 0.32.3
- [Commits](kubernetes/cluster-bootstrap@v0.32.2...v0.32.3)

Updates `k8s.io/component-base` from 0.32.2 to 0.32.3
- [Commits](kubernetes/component-base@v0.32.2...v0.32.3)

Updates `cloud.google.com/go/storage` from 1.50.0 to 1.51.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.50.0...spanner/v1.51.0)

Updates `google.golang.org/api` from 0.224.0 to 0.226.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.224.0...v0.226.0)

Updates `google.golang.org/grpc` from 1.70.0 to 1.71.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.65.1...v1.67.3)

Updates `github.com/spf13/viper` from 1.19.0 to 1.20.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.19.0...v1.20.0)

Updates `google.golang.org/grpc` from 1.65.1 to 1.67.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.65.1...v1.67.3)

Updates `k8s.io/api` from 0.32.2 to 0.32.3
- [Commits](kubernetes/api@v0.32.2...v0.32.3)

Updates `k8s.io/apiextensions-apiserver` from 0.32.2 to 0.32.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.32.2...v0.32.3)

Updates `k8s.io/apimachinery` from 0.32.2 to 0.32.3
- [Commits](kubernetes/apimachinery@v0.32.2...v0.32.3)

Updates `k8s.io/apiserver` from 0.32.2 to 0.32.3
- [Commits](kubernetes/apiserver@v0.32.2...v0.32.3)

Updates `k8s.io/client-go` from 0.32.2 to 0.32.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.32.2...v0.32.3)

Updates `k8s.io/cluster-bootstrap` from 0.32.2 to 0.32.3
- [Commits](kubernetes/cluster-bootstrap@v0.32.2...v0.32.3)

Updates `k8s.io/component-base` from 0.32.2 to 0.32.3
- [Commits](kubernetes/component-base@v0.32.2...v0.32.3)

Updates `golang.org/x/net` from 0.36.0 to 0.37.0
- [Commits](golang/net@v0.36.0...v0.37.0)

---
updated-dependencies:
- dependency-name: github.com/spf13/viper
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/cluster-bootstrap
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: golang.org/x/net
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/spf13/viper
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/apiserver
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/cluster-bootstrap
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/component-base
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: cloud.google.com/go/storage
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/spf13/viper
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/cluster-bootstrap
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/component-base
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@sbueringer sbueringer force-pushed the dependabot/go_modules/all-go-mod-patch-and-minor-b63601eb1f branch from c7d5bbe to 4d56937 Compare March 16, 2025 10:35
@sbueringer
Copy link
Member

sbueringer commented Mar 16, 2025

dependabot would have set go toolchain to 1.24.1, so I had to get rid of it manually. Don't have time to investigate if there is a way that we can avoid that, let's keep an eye on it

/lgtm

/assign @chrischdi @fabriziopandini

@k8s-ci-robot k8s-ci-robot added the lgtm "Looks good to me", indicates that a PR is ready to be merged. label Mar 16, 2025
@k8s-ci-robot
Copy link
Contributor

k8s-ci-robot commented Mar 16, 2025

LGTM label has been added.

Git tree hash: 2ae6e1c6eae8c53a5c85826cc4976c78afd93e3d

@tuminoid
Copy link
Contributor

tuminoid commented Mar 17, 2025 •
edited
Loading

dependabot would have set go toolchain to 1.24.1, so I had to get rid of it manually. Don't have time to investigate if there is a way that we can avoid that, let's keep an eye on it

Go toolchain directive has been hot topic for long time in Go community: golang/go#65847
Latest development is that there is a patch being worked on that would remove this forced toolchain directive addition. I'm crossing my fingers it lands for Go 1.25 and we could stop this toolchain cleanup for good.

@sbueringer
Copy link
Member

sbueringer commented Mar 17, 2025

I'm mostly surprised that dependabot started to add it like 1-2 days ago. Wondering what changed

@tuminoid
Copy link
Contributor

tuminoid commented Mar 17, 2025 •
edited
Loading

I'm mostly surprised that dependabot started to add it like 1-2 days ago. Wondering what changed

Yeah noticing the same in Metal3, all of the dependabot bumps have it. But we have had plenty of these before as well tho. I'm suspecting the x/net related vulnerability fix from last week, as that basically made every repo bump to Go 1.23.7 and x/net that wants/suggests it. But, it is a bit fishy though that manual go tidy does not add it, so maybe there is something funky going on with the bot.

Generally, the mechnism is:

  1. you have version X (here 1.23.0) in your go directive
  2. you have version Y installed in your environment where go tidy is executed (here go 1.24.1)
  3. a dependency has toolchain/go directive higher than your repositorys go directive (say 1.23.7)

In these cases, it will add the toolchain directive, with Go version that is present in the environment doing the bump. Dependabot is clearly having the latest 1.24.1 as that is being added.

@sbueringer
Copy link
Member

sbueringer commented Mar 17, 2025 •
edited
Loading

Thx for the explanation! Wondering if we can configure dependabot to use another Go version and if the issue would then go away

(It was sort of fine for a while, but if we now have to fixup every single dependabot PR this will get very annoying quickly)

@tuminoid tuminoid mentioned this pull request Mar 17, 2025
Closed
1 task
@tuminoid
Copy link
Contributor

tuminoid commented Mar 17, 2025

Thx for the explanation! Wondering if we can configure dependabot to use another Go version and if the issue would then go away

I assume dependabot has to run the latest version as the modules can actually use the latest language features and it must be able to handle them.

(It was sort of fine for a while, but if we now have to fixup every single dependabot PR this will get very annoying quickly)

I agree, let's hope it is just temporary. Seems there is issue about it: dependabot/dependabot-core#11825

fabriziopandini
fabriziopandini reviewed Mar 17, 2025
View reviewed changes
Copy link
Member

@fabriziopandini fabriziopandini left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

/lgtm
/approve

@k8s-ci-robot
Copy link
Contributor

k8s-ci-robot commented Mar 17, 2025

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: fabriziopandini

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@k8s-ci-robot k8s-ci-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Mar 17, 2025
@k8s-ci-robot k8s-ci-robot merged commit 38ac239 into main Mar 17, 2025
19 checks passed
@k8s-ci-robot k8s-ci-robot added this to the v1.10 milestone Mar 17, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/all-go-mod-patch-and-minor-b63601eb1f branch March 17, 2025 08:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@sbueringer sbueringer sbueringer left review comments

@fabriziopandini fabriziopandini fabriziopandini left review comments

@enxebre enxebre Awaiting requested review from enxebre

@JoelSpeed JoelSpeed Awaiting requested review from JoelSpeed

+1 more reviewer

@tuminoid tuminoid tuminoid left review comments

Reviewers whose approvals may not affect merge requirements

Assignees

@chrischdi chrischdi

@sbueringer sbueringer

@fabriziopandini fabriziopandini

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. area/dependency Issues or PRs related to dependency changes cncf-cla: yes Indicates the PR's author has signed the CNCF CLA. lgtm "Looks good to me", indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. size/XL Denotes a PR that changes 500-999 lines, ignoring generated files.

Projects

None yet

Milestone

v1.10

Development

Successfully merging this pull request may close these issues.

6 participants

@k8s-ci-robot @sbueringer @tuminoid @fabriziopandini @chrischdi