chore(deps): update module github.com/invopop/jsonschema to v0.14.0#3423
Conversation
forking-renovate
Bot
added
the
dependencies
ℹ️ Artifact update noticeFile name: cli/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
|
/gcbrun |
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates several dependencies in cli/go.mod, including upgrades for jsonschema and jsonparser, and a transition from wk8/go-ordered-map to pb33f/ordered-map. Feedback was provided regarding the introduction of go.yaml.in/yaml/v4 v4.0.0-rc.2 as an indirect dependency, noting potential supply chain risks and stability issues associated with its release candidate status and non-standard import path.
| go.opentelemetry.io/proto/otlp v1.7.1 // indirect | ||
| go.yaml.in/yaml/v2 v2.4.2 // indirect | ||
| go.yaml.in/yaml/v3 v3.0.4 // indirect | ||
| go.yaml.in/yaml/v4 v4.0.0-rc.2 // indirect |
There was a problem hiding this comment.
The addition of go.yaml.in/yaml/v4 v4.0.0-rc.2 as an indirect dependency is concerning. This package uses a non-standard import path (go.yaml.in instead of the official gopkg.in) and is currently in a release candidate state. While it appears to be a dependency of pb33f/ordered-map, using an experimental and non-canonical version of a core library like YAML introduces potential supply chain risks and stability concerns. It is recommended to investigate if this dependency can be replaced with a stable, official version of the YAML package (e.g., gopkg.in/yaml.v3).
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
818b6e5 to
c48b60a
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
c48b60a to
3bc6596
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
3bc6596 to
acfdf27
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
acfdf27 to
5dfe958
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
5dfe958 to
5a4f032
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
5a4f032 to
68bb0e2
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
68bb0e2 to
cff6138
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
cff6138 to
40d3ac7
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
40d3ac7 to
08a0e65
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
08a0e65 to
dd225e4
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
dd225e4 to
0f012b2
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
0f012b2 to
b85d912
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
b85d912 to
50f63a0
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
50f63a0 to
209deb3
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
209deb3 to
bbc7b87
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
bbc7b87 to
1222e54
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
1222e54 to
d70eba4
Compare
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
d70eba4 to
21bc907
Compare
|
/gcbrun |
2 participants
This PR contains the following updates:
v0.13.0→v0.14.0Release Notes
invopop/jsonschema (github.com/invopop/jsonschema)
v0.14.0Compare Source
What's Changed
New Contributors
Full Changelog: invopop/jsonschema@v0.13.0...v0.14.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.