Skip to content

chore(deps): update go dependencies#355

Open
red-hat-konflux[bot] wants to merge 1 commit into
release-1.4from
konflux/mintmaker/release-1.4/go-deps
Open

chore(deps): update go dependencies#355
red-hat-konflux[bot] wants to merge 1 commit into
release-1.4from
konflux/mintmaker/release-1.4/go-deps

Conversation

@red-hat-konflux
Copy link
Copy Markdown

@red-hat-konflux red-hat-konflux Bot commented May 12, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
cloud.google.com/go/longrunning indirect major v0.13.0v1.0.0
github.com/Masterminds/semver/v3 indirect minor v3.4.0v3.5.0
github.com/aws/aws-sdk-go indirect patch v1.55.7v1.55.8
github.com/aws/aws-sdk-go-v2/service/kms indirect minor v1.51.1v1.52.0
github.com/cenkalti/backoff/v4 indirect major v4.3.0v5.0.3
github.com/go-chi/chi require major v4.1.2+incompatiblev5.2.5
github.com/go-openapi/runtime indirect minor v0.29.5v0.31.0
github.com/go-openapi/runtime require minor v0.29.5v0.31.0
github.com/go-playground/validator/v10 require patch v10.30.1v10.30.2
github.com/google/go-containerregistry indirect patch v0.21.5v0.21.6
github.com/googleapis/enterprise-certificate-proxy indirect patch v0.3.15v0.3.16
github.com/hashicorp/hcl indirect major v1.0.1-vault-7v2.24.0
github.com/letsencrypt/boulder indirect minor v0.20260420.0v0.20260518.0
github.com/pelletier/go-toml/v2 indirect minor v2.2.4v2.3.1
github.com/sigstore/sigstore require patch v1.10.5v1.10.6
github.com/sigstore/sigstore/pkg/signature/kms/aws require patch v1.10.5v1.10.6
github.com/sigstore/sigstore/pkg/signature/kms/azure require patch v1.10.5v1.10.6
github.com/sigstore/sigstore/pkg/signature/kms/gcp require patch v1.10.5v1.10.6
github.com/sigstore/sigstore/pkg/signature/kms/hashivault require patch v1.10.5v1.10.6
github.com/tink-crypto/tink-go-awskms/v2 require major v2.1.0v3.0.0
github.com/tink-crypto/tink-go-hcvault/v2 require minor v2.4.0v2.5.0
github.com/urfave/negroni require major v1.0.0v3.1.1
go.step.sm/crypto require minor v0.79.0v0.81.0
go.uber.org/zap require minor v1.27.1v1.28.0
go.yaml.in/yaml/v2 indirect major v2.4.3v3.0.4
google.golang.org/api indirect minor v0.278.0v0.280.0
google.golang.org/genproto indirect digest 3700d41aa98bba
google.golang.org/genproto/googleapis/api indirect digest 3700d41aa98bba
google.golang.org/genproto/googleapis/rpc indirect digest 3700d41aa98bba
google.golang.org/grpc indirect patch v1.81.0v1.81.1
gopkg.in/yaml.v2 indirect major v2.4.0v3.0.1

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

Masterminds/semver (github.com/Masterminds/semver/v3)

v3.5.0

Compare Source

What's Changed

New Contributors

Full Changelog: Masterminds/semver@v3.4.0...v3.5.0

aws/aws-sdk-go (github.com/aws/aws-sdk-go)

v1.55.8

Compare Source

SDK Features
  • Mark the module and all packages as deprecated.
    • This SDK has entered end-of-support.
aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/service/kms)

v1.52.0

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/apigateway: v1.37.0
    • Feature: API Gateway now supports response streaming and new security policies for REST APIs and custom domain names.
  • github.com/aws/aws-sdk-go-v2/service/apigatewayv2: v1.33.0
    • Feature: Support for API Gateway portals and portal products.
  • github.com/aws/aws-sdk-go-v2/service/backup: v1.54.0
    • Feature: Amazon GuardDuty Malware Protection now supports AWS Backup, extending malware detection capabilities to EC2, EBS, and S3 backups.
  • github.com/aws/aws-sdk-go-v2/service/bcmpricingcalculator: v1.10.0
    • Feature: Add GroupSharingPreference, CostCategoryGroupSharingPreferenceArn, and CostCategoryGroupSharingPreferenceEffectiveDate to Bill Estimate. Add GroupSharingPreference and CostCategoryGroupSharingPreferenceArn to Bill Scenario.
  • github.com/aws/aws-sdk-go-v2/service/bedrockruntime: v1.44.0
    • Feature: This release includes support for Search Results.
  • github.com/aws/aws-sdk-go-v2/service/billing: v1.9.0
    • Feature: Added name filtering support to ListBillingViews API through the new names parameter to efficiently filter billing views by name.
  • github.com/aws/aws-sdk-go-v2/service/billingconductor: v1.27.0
    • Feature: This release adds support for Billing Transfers, enabling management of billing transfers with billing groups on AWS Billing Conductor.
  • github.com/aws/aws-sdk-go-v2/service/cloudtrail: v1.54.0
    • Feature: AWS CloudTrail now supports Insights for data events, expanding beyond management events to automatically detect unusual activity on data plane operations.
  • github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.60.0
    • Feature: Adding support for ocsf version 1.5, add optional parameter MappingVersion
  • github.com/aws/aws-sdk-go-v2/service/connectcampaignsv2: v1.9.0
    • Feature: This release added support for ring timer configuration for campaign calls.
  • github.com/aws/aws-sdk-go-v2/service/costexplorer: v1.60.0
    • Feature: Add support for COST_CATEGORY, TAG, and LINKED_ACCOUNT AWS managed cost anomaly detection monitors
  • github.com/aws/aws-sdk-go-v2/service/costoptimizationhub: v1.21.0
    • Feature: Release ListEfficiencyMetrics API
  • github.com/aws/aws-sdk-go-v2/service/datazone: v1.48.0
    • Feature: Amazon DataZone now supports business metadata (readme and metadata forms) at the individual attribute (column) level, a new rule type for glossary terms, and the ability to update the owner of the root domain unit.
  • github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.53.0
    • Feature: Extended Global Secondary Index (GSI) composite keys to support up to 8 attributes.
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.272.0
    • Feature: This launch adds support for two new features: Regional NAT Gateway and IPAM Policies. IPAM policies offers customers central control for public IPv4 assignments across AWS services. Regional NAT is a single NAT Gateway that automatically expands across AZs in a VPC to maintain high availability.
  • github.com/aws/aws-sdk-go-v2/service/ecr: v1.53.0
    • Feature: Add support for ECR archival storage class and Inspector org policy for scanning
  • github.com/aws/aws-sdk-go-v2/service/ecs: v1.68.0
    • Feature: Added support for Amazon ECS Managed Instances infrastructure optimization configuration.
  • github.com/aws/aws-sdk-go-v2/service/emr: v1.56.0
    • Feature: Add CloudWatch Logs integration for Spark driver, executor and step logs
  • github.com/aws/aws-sdk-go-v2/service/fsx: v1.64.0
    • Feature: Adding File Server Resource Manager configuration to FSx Windows
  • github.com/aws/aws-sdk-go-v2/service/guardduty: v1.68.0
    • Feature: Add support for scanning and viewing scan results for backup resource types
  • github.com/aws/aws-sdk-go-v2/service/health: v1.35.0
    • Feature: Adds actionability and personas properties to Health events exposed through DescribeEvents, DescribeEventsForOrganization, DescribeEventDetails, and DescribeEventTypes APIs. Adds filtering by actionabilities and personas in EventFilter, OrganizationEventFilter, EventTypeFilter.
  • github.com/aws/aws-sdk-go-v2/service/iam: v1.52.0
    • Feature: Added the EnableOutboundWebIdentityFederation, DisableOutboundWebIdentityFederation and GetOutboundWebIdentityFederationInfo APIs for the IAM outbound federation feature.
  • github.com/aws/aws-sdk-go-v2/service/inspector2: v1.45.0
    • Feature: This release introduces BLOCKED_BY_ORGANIZATION_POLICY error code and IMAGE_ARCHIVED scanStatusReason. BLOCKED_BY_ORGANIZATION_POLICY error code is returned when an operation is blocked by an AWS Organizations policy. IMAGE_ARCHIVED scanStatusReason is returned when an Image is archived in ECR.
  • github.com/aws/aws-sdk-go-v2/service/invoicing: v1.8.0
    • Feature: Add support for adding Billing transfers in Invoice configuration
  • github.com/aws/aws-sdk-go-v2/service/lambda: v1.82.0
    • Feature: Added support for creating and invoking Tenant Isolated functions in AWS Lambda APIs.
  • github.com/aws/aws-sdk-go-v2/service/mediaconnect: v1.46.0
    • Feature: This release adds support for global routing in AWS Elemental MediaConnect. You can now use router inputs and router outputs to manage global video and audio routing workflows both within the AWS-Cloud and over the public internet.
  • github.com/aws/aws-sdk-go-v2/service/medialive: v1.87.0
    • Feature: MediaLive is adding support for MediaConnect Router by supporting a new input type called MEDIACONNECT_ROUTER. This new input type will provide seamless encrypted transport between MediaConnect Router and your MediaLive channel.
  • github.com/aws/aws-sdk-go-v2/service/networkfirewall: v1.58.0
    • Feature: Partner Managed Rulegroup feature support
  • github.com/aws/aws-sdk-go-v2/service/networkflowmonitor: v1.11.0
    • Feature: Added new enum value (AWS::EKS::Cluster) for type field under MonitorLocalResource
  • github.com/aws/aws-sdk-go-v2/service/partnercentralchannel: v1.0.0
    • Release: New AWS service client module
    • Feature: Initial GA launch of Partner Central Channel
  • github.com/aws/aws-sdk-go-v2/service/route53: v1.60.0
    • Feature: Add dual-stack endpoint support for Route53
  • github.com/aws/aws-sdk-go-v2/service/rum: v1.30.0
    • Feature: CloudWatch RUM now supports mobile application monitoring for Android and iOS platforms
  • github.com/aws/aws-sdk-go-v2/service/s3: v1.91.0
    • Feature: Adds support for blocking SSE-C writes to general purpose buckets.
  • github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.224.0
    • Feature: Added support for enhanced metrics for SageMaker AI Endpoints. This features provides Utilization Metrics at instance and container granularity and also provides easy configuration of metric publish frequency from 10 sec -> 5 mins
  • github.com/aws/aws-sdk-go-v2/service/secretsmanager: v1.40.0
    • Feature: Adds support to create, update, retrieve, rotate, and delete managed external secrets.
  • github.com/aws/aws-sdk-go-v2/service/sfn: v1.40.0
    • Feature: Adds support to TestState for mocked results and exceptions, along with additional inspection data.
  • github.com/aws/aws-sdk-go-v2/service/signin: v1.0.0
    • Release: New AWS service client module
    • Feature: AWS Sign-In manages authentication for AWS services. This service provides secure authentication flows for accessing AWS resources from the console and developer tools. This release adds the CreateOAuth2Token API, which can be used to fetch OAuth2 access tokens and refresh tokens from Sign-In.
  • github.com/aws/aws-sdk-go-v2/service/sts: v1.41.0
    • Feature: IAM now supports outbound identity federation via the STS GetWebIdentityToken API, enabling AWS workloads to securely authenticate with external services using short-lived JSON Web Tokens.
  • github.com/aws/aws-sdk-go-v2/service/transcribestreaming: v1.33.0
    • Feature: This release adds support for additional locales in AWS transcribe streaming.
cenkalti/backoff (github.com/cenkalti/backoff/v4)

v5.0.3

Compare Source

v5.0.2

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

go-chi/chi (github.com/go-chi/chi)

v5.2.5

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.2.3...v5.2.5

v5.2.4

Compare Source

v5.2.3

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.2.2...v5.2.3

v5.2.2

Compare Source

What's Changed

Security fix

  • Fixes GHSA-vrw8-fxc6-2r93 - "Host Header Injection Leads to Open Redirect in RedirectSlashes" commit
    • a lower-severity Open Redirect that can't be exploited in browser or email client, as it requires manipulation of a Host header
    • reported by Anuraag Baishya, @​anuraagbaishya. Thank you!

New Contributors

Full Changelog: go-chi/chi@v5.2.1...v5.2.2

v5.2.1

Compare Source

⚠️ Chi supports Go 1.20+

Starting this release, we will now support the four most recent major versions of Go. See #​963 for related discussion.

What's Changed

Full Changelog: go-chi/chi@v5.2.0...v5.2.1

v5.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.1.0...v5.2.0

v5.1.0

Compare Source

What's Changed

  • middleware: add Discard method to WrapResponseWriter by @​patrislav in #​926
    • Adds Discard() method to the middleware.WrapResponseWriter interface. This is technically an API breaking change. However after some discussion at #​926 (comment), we decided to move forward, and release as minor version, as we don't expect anyone to rely on this interface / implement it externally.

New Contributors

Full Changelog: go-chi/chi@v5.0.14...v5.1.0

v5.0.14

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.0.12...v5.0.14

v5.0.13

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.0.12...v5.0.13

v5.0.12

Compare Source

v5.0.11

Compare Source

v5.0.10

Compare Source

v5.0.9

Compare Source

v5.0.8

Compare Source

v5.0.7

Compare Source

v5.0.6

Compare Source

v5.0.5

Compare Source

v5.0.4

Compare Source

v5.0.3

Compare Source

v5.0.2

Compare Source

v5.0.1

Compare Source

v5.0.0

Compare Source

v4.1.3

Compare Source

go-openapi/runtime (github.com/go-openapi/runtime)

v0.31.0

Compare Source

0.31.0 - 2026-05-17

Full Changelog: go-openapi/runtime@v0.30.0...v0.31.0

33 commits in this release.


Implemented enhancements
  • feat(client): TLS diagnostic mode for Runtime.Trace by @​fredbi ...
  • feat(client): add Runtime.Trace for connection-level diagnostics by @​fredbi ...
Fixed bugs
Documentation
Code quality
Testing
Miscellaneous tasks
Security
  • test(security): fuzz targets for BindForm parse + filename cap by @​fredbi ...
  • test(security): fuzz targets for header-parsing surface by @​fredbi ...
  • fix(negotiate/header): reject q-values greater than 1 by @​fredbi ...
  • docs(security): document constant-time-comparison contract for auth callbacks by @​fredbi in #​457 ...
  • feat(runtime): BindForm helper for multipart/urlencoded body binding by @​fredbi in #​446 ...
Updates
Other (technical)

People who contributed to this release

New Contributors

runtime license terms

License

Per-module changes


client-middleware/opentracing (0.31.0)

Code quality
Miscellaneous tasks

docs/examples (0.31.0)

Documentation
Code quality
Miscellaneous tasks
Security
  • docs(security): document constant-time-comparison contract for auth callbacks by @​fredbi in #​457 ...

server-middleware (0.31.0)

Documentation
Code quality
Security
  • test(security): fuzz targets for header-parsing surface by @​fredbi ...
  • fix(negotiate/header): reject q-values greater than 1 by @​fredbi ...
Other (technical)

v0.30.0

Compare Source

0.30.0 - 2026-05-13

Long awaited fixes and additions

  • Fixed most long standing issues.

  • Added standalone middleware module (swagger UI, serve spec).

  • Improved content negotiation.

  • Context-aware request submission

Full Changelog: go-openapi/runtime@v0.29.5...v0.30.0

33 commits in this release.


Implemented enhancements
  • feat(client): honor context cancellation in multipart upload goroutine by @​fredbi ...
  • feat(client): introduce SubmitContext by @​fredbi ...
  • feat: extract media type match validation to separate package by @​fredbi ...
  • feat(mediatype): typed media-type and symmetric Accept negotiation by @​fredbi ...
Fixed bugs

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux
Copy link
Copy Markdown
Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.9 -> 1.26.0

@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 14 times, most recently from 4be28f7 to 04d8754 Compare May 19, 2026 20:49
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch 3 times, most recently from 6de3f37 to f67bd5f Compare May 20, 2026 23:07
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch from f67bd5f to b4ccfe3 Compare May 21, 2026 02:40
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants