Skip to content

chore(deps): update go dependencies#684

Open
red-hat-konflux[bot] wants to merge 1 commit into
release-1.4from
konflux/mintmaker/release-1.4/go-deps
Open

chore(deps): update go dependencies#684
red-hat-konflux[bot] wants to merge 1 commit into
release-1.4from
konflux/mintmaker/release-1.4/go-deps

Conversation

@red-hat-konflux
Copy link
Copy Markdown

@red-hat-konflux red-hat-konflux Bot commented May 12, 2026

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
cloud.google.com/go/longrunning indirect major v0.13.0v1.0.0
github.com/apache/beam/sdks/v2 require minor v2.72.0v2.73.0
github.com/avast/retry-go/v4 indirect major v4.7.0v5.0.0
github.com/cheggaaa/pb/v3 indirect patch v3.1.6v3.1.7
github.com/clipperhouse/uax29/v2 indirect minor v2.2.0v2.7.0
github.com/fxamacker/cbor/v2 indirect patch v2.9.1v2.9.2
github.com/google/go-licenses/v2 require patch v2.0.0-alpha.1v2.0.1
github.com/grpc-ecosystem/go-grpc-middleware require major v1.4.0v2.3.3
github.com/jackc/pgx/v4 indirect major v4.18.3v5.9.2
github.com/jhump/protoreflect/v2 indirect patch v2.0.0-beta.1v2.0.0-beta.2
github.com/olekukonko/tablewriter indirect major v0.0.5v1.1.4
go.etcd.io/etcd/api/v3 indirect patch v3.6.10v3.6.11
go.etcd.io/etcd/client/pkg/v3 indirect patch v3.6.10v3.6.11
go.etcd.io/etcd/client/v3 require patch v3.6.10v3.6.11
go.etcd.io/etcd/etcdctl/v3 require patch v3.6.10v3.6.11
go.etcd.io/etcd/etcdutl/v3 indirect patch v3.6.10v3.6.11
go.etcd.io/etcd/pkg/v3 indirect patch v3.6.10v3.6.11
go.etcd.io/etcd/server/v3 require patch v3.6.10v3.6.11
go.etcd.io/etcd/tests/v3 indirect patch v3.6.10v3.6.11
go.etcd.io/etcd/v3 require patch v3.6.10v3.6.11
go.uber.org/zap indirect minor v1.27.1v1.28.0
go.yaml.in/yaml/v2 indirect major v2.4.4v3.0.4
google.golang.org/api require minor v0.278.0v0.279.0
gopkg.in/evanphx/json-patch.v4 indirect major v4.13.0v5.9.11
gopkg.in/yaml.v2 require major v2.4.0v3.0.1
k8s.io/api require minor v0.35.4v0.36.1
k8s.io/apimachinery require minor v0.35.4v0.36.1
k8s.io/client-go require minor v0.35.4v0.36.1
k8s.io/kube-openapi indirect digest da4e56fef417d0

Warning

Some dependencies could not be looked up. Check the warning logs for more information.


Release Notes

apache/beam (github.com/apache/beam/sdks/v2)

v2.73.0: Beam 2.73.0 release

Compare Source

We are happy to present the new 2.73.0 release of Beam.
This release includes both improvements and new functionality.
See the download page for this release.

For more information on changes in 2.73.0, check out the detailed release notes.

Highlights

I/Os
  • DebeziumIO (Java): added OffsetRetainer interface and FileSystemOffsetRetainer implementation to persist and restore CDC offsets across pipeline restarts, and exposed withStartOffset / withOffsetRetainer on DebeziumIO.Read and the cross-language ReadBuilder (#​28248).
New Features / Improvements
  • (Python) Added BigQuery CDC streaming source (#​37724)
  • Added ADKAgentModelHandler for running Google Agent Development Kit (ADK) agents (Python) (#​37917).
  • (Python) Added exception chaining to preserve error context in CloudSQLEnrichmentHandler, processes utilities, and core transforms (#​37422).
  • (Python) Added a pipeline option --experiments=pip_no_build_isolation to disable build isolation when installing dependencies in the runtime environment (#​37331).
  • (Go) Added OrderedListState support to the Go SDK stateful DoFn API (#​37629).
  • Added support for large pipeline options via a file (Python) (#​37370).
  • Supported infer schema from dataclass (Python) (#​22085). Default coder for typehint-ed (or set with_output_type) for non-frozen dataclasses changed to RowCoder. To preserve the old behavior (fast primitive coder), explicitly register the type with FastPrimitiveCoder.
  • Updates minimum Go version to 1.26.1 (#​37897).
  • (Python) Added image embedding support in apache_beam.ml.rag package (#​37628).
  • (Python) Added support for Python version 3.14 (#​37247).
Breaking Changes
  • The Python SDK container's boot.go now passes pipeline options through a file instead of the PIPELINE_OPTIONS environment variable. If a user pairs a new Python SDK container with an older SDK version (which does not support the file-based approach), the pipeline options will not be recognized and the pipeline will fail. Users must ensure their SDK and container versions are synchronized (#​37370).
  • Python DoFn.with_exception_handling now respects user DoFn typehints. This can break update compatibility if coders change. It can also break pipeline compilation if existing typehints are incorrect. To update safely sepcify the pipeline option --update_compatibility_version=2.72.0. To fix typehints replace any incorrect typehints that were previously ignored (#​37590)
Bugfixes
  • Fixed ProcessManager not reaping child processes, causing zombie process accumulation on long-running Flink deployments (Java) (#​37930).
Security Fixes

List of Contributors

According to git shortlog, the following people contributed to the 2.73.0 release. Thank you to all contributors!

Abdelrahman Ibrahim, Ahmed Abualsaud, Alex Malao, Alexander Nieuwenhuijse, Andres Tiko, Andrew Crites, Arun Pandian, Bentsi Leviav, Bruno Volpato, Chamikara Jayalath, Chandra Kiran Bolla, Danny McCormick, Deji Ibrahim, Derrick Williams, Elia LIU, Esmelealem, Hannes Gustafsson, Jack McCluskey, Joey Tran, Kenneth Knowles, M Junaid Shaukat, Mansi Singh, Matej Aleksandrov, Mathijs Deelen, Mattie Fu, Praneet Nadella, Radek Stankiewicz, Radosław Stankiewicz, Reuven Lax, RuiLong J., S. Veyrié, Sakthivel Subramanian, Sam Whittle, Shubham Thakur, Shunping Huang, Subramanya V, Tarun Annapareddy, Tobias Kaymak, Valentyn Tymofieiev, Vitaly Terentyev, XQ Hu, Yi Hu, ZIHAN DAI, claudevdm, kishorepola, parveensania

avast/retry-go (github.com/avast/retry-go/v4)

v5.0.0

Compare Source

What's Changed

New Contributors

Full Changelog: avast/retry-go@4.7.0...v5.0.0

cheggaaa/pb (github.com/cheggaaa/pb/v3)

v3.1.7

Compare Source

clipperhouse/uax29 (github.com/clipperhouse/uax29/v2)

v2.7.0

Compare Source

v2.6.0

Compare Source

v2.5.0

Compare Source

What's Changed

Breaking change

The returned iterator type from FromString() and FromBytes() is now a pointer. This will not present a problem if you are just using it in the typical way, which is assigning to a local variable and iterating.

If you are embedding this iterator into another object, and therefore declaring its type, this change might break your compilation. You’ll need to change to a pointer type. Apologies if so — this seems like a small enough change that a v3 would be a bit much.

New Contributors

Full Changelog: clipperhouse/uax29@v2.4.0...v2.5.0

v2.4.0

Compare Source

Adds Unicode 16 support

What's Changed

Full Changelog: clipperhouse/uax29@v2.3.0...v2.4.0

v2.3.1

Compare Source

v2.3.0

Compare Source

fxamacker/cbor (github.com/fxamacker/cbor/v2)

v2.9.2

Compare Source

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed
  • Reject encoding indefinite-length map with odd item count by @​fxamacker in #​764
  • Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @​fxamacker in #​765
  • Make TagSet.Remove a no-op when contentType is nil by @​fxamacker in #​766
  • Refactor indefinite-length encoding and improve chunk validation during encoding by @​fxamacker in #​767
  • Add more tests, fix a nit in unreachable panic message, update docs & ci by @​fxamacker in #​768
CI / GitHub Actions and Docs
🔎 Details...

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

google/go-licenses (github.com/google/go-licenses/v2)

v2.0.1

Compare Source

What's Changed

New Contributors

Full Changelog: google/go-licenses@v2.0.0...v2.0.1

v2.0.0

Compare Source

This is a re-release of v2.0.0-alpha.1

What's Changed

New Contributors

Full Changelog: google/go-licenses@v1.6.0...v2.0.0

grpc-ecosystem/go-grpc-middleware (github.com/grpc-ecosystem/go-grpc-middleware)

v2.3.3

Compare Source

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.2...v2.3.3

v2.3.2

Compare Source

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.1...v2.3.2

v2.3.1

Compare Source

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.3.0...v2.3.1

v2.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.2.0...v2.3.0

v2.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.1.0...v2.2.0

v2.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.0.1...v2.1.0

v2.0.1

Compare Source

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.0.0...v2.0.1

v2.0.0

Compare Source

This is the first stable release of the new v2 release branch 🎉

Many of the interceptors have been rewritten from scratch and the project has been upgraded to use the Go Protobuf v2 API.

See the project README for details and migration guide. Thanks to all contributors who made this possible! 💪🏽

What's Changed


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux Bot force-pushed the konflux/mintmaker/release-1.4/go-deps branch from 962162f to 2efd0c6 Compare May 13, 2026 02:57
@red-hat-konflux
Copy link
Copy Markdown
Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.25.9 -> 1.26.0

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants