Skip to content

Conversation

@konflux-internal-p02
Copy link

@konflux-internal-p02 konflux-internal-p02 bot commented Oct 5, 2025

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/coreos/go-oidc/v3 v3.14.1 -> v3.16.0 age confidence require minor
github.com/go-jose/go-jose/v4 v4.1.1 -> v4.1.3 age confidence indirect patch
github.com/golang-jwt/jwt/v5 v5.2.3 -> v5.3.0 age confidence require minor
github.com/google/pprof 6e76a2b -> 5df77e3 age confidence indirect digest
github.com/onsi/ginkgo/v2 v2.23.4 -> v2.27.1 age confidence require minor
github.com/onsi/gomega v1.37.0 -> v1.38.2 age confidence require minor
github.com/prometheus/client_golang v1.22.0 -> v1.23.2 age confidence require minor
github.com/prometheus/common v0.65.0 -> v0.67.1 age confidence indirect minor
github.com/prometheus/procfs v0.17.0 -> v0.19.1 age confidence indirect minor
github.com/redis/go-redis/v9 v9.11.0 -> v9.16.0 age confidence require minor
github.com/sagikazarmark/locafero v0.9.0 -> v0.12.0 age confidence indirect minor
github.com/spf13/afero v1.14.0 -> v1.15.0 age confidence indirect minor
github.com/spf13/cast v1.9.2 -> v1.10.0 age confidence require minor
github.com/spf13/pflag v1.0.7 -> v1.0.10 age confidence require patch
github.com/spf13/viper v1.20.1 -> v1.21.0 age confidence require minor
github.com/stretchr/testify v1.10.0 -> v1.11.1 age confidence require minor
golang.org/x/crypto v0.40.0 -> v0.43.0 age confidence require minor
golang.org/x/net v0.42.0 -> v0.46.0 age confidence require minor
golang.org/x/oauth2 v0.30.0 -> v0.32.0 age confidence require minor
golang.org/x/sync v0.16.0 -> v0.17.0 age confidence require minor
golang.org/x/sys v0.34.0 -> v0.37.0 age confidence indirect minor
golang.org/x/text v0.27.0 -> v0.30.0 age confidence indirect minor
golang.org/x/tools v0.35.0 -> v0.38.0 age confidence indirect minor
google.golang.org/protobuf v1.36.6 -> v1.36.10 age confidence indirect patch

Release Notes

coreos/go-oidc (github.com/coreos/go-oidc/v3)

v3.16.0

Compare Source

What's Changed

  • refactor: Remove unused time injection from RemoteKeySet by @​ponimas in #​466
  • bump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net dependency by @​wardviaene in #​467

New Contributors

Full Changelog: coreos/go-oidc@v3.15.0...v3.16.0

v3.15.0

Compare Source

What's Changed

Full Changelog: coreos/go-oidc@v3.14.1...v3.15.0

go-jose/go-jose (github.com/go-jose/go-jose/v4)

v4.1.3

Compare Source

This release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop x/crypto and no longer have any external dependencies in go-jose outside of the standard library!

This release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.

What's Changed

Full Changelog: go-jose/go-jose@v4.1.2...v4.1.3

v4.1.2

Compare Source

What's Changed

go-jose v4.1.2 improves some documentation, errors, and removes the only 3rd-party dependency.

New Contributors

Full Changelog: go-jose/go-jose@v4.1.1...v4.1.2

golang-jwt/jwt (github.com/golang-jwt/jwt/v5)

v5.3.0

Compare Source

This release is almost identical to to v5.2.3 but now correctly indicates Go 1.21 as minimum requirement.

What's Changed

Full Changelog: golang-jwt/jwt@v5.2.3...v5.3.0

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.27.1

Compare Source

2.27.1

Fixes
  • Fix Ginkgo Reporter slice-bounds panic [606c1cb]
  • Bug Fix: Add GinkoTBWrapper.Attr() and GinkoTBWrapper.Output() [a6463b3]

v2.27.0

Compare Source

2.27.0

Features
Transforming Nodes during Tree Construction

This release adds support for NodeArgsTransformers that can be registered with AddTreeConstructionNodeArgsTransformer.

These are called during the tree construction phase as nodes are constructed and can modify the node strings and decorators. This enables frameworks built on top of Ginkgo to modify Ginkgo nodes and enforce conventions.

Learn more here.

Spec Prioritization

A new SpecPriority(int) decorator has been added. Ginkgo will honor priority when ordering specs, ensuring that higher priority specs start running before lower priority specs

Learn more here.

Maintenance

v2.26.0

Compare Source

2.26.0

Features

Ginkgo can now generate json-formatted reports that are compatible with the go test json format. Use ginkgo --gojson-report=report.go.json. This is not intended to be a replacement for Ginkgo's native json format which is more information rich and better models Ginkgo's test structure semantics.

v2.25.3

Compare Source

2.25.3

Fixes
  • emit --github-output group only for progress report itself [f01aed1]

v2.25.2

Compare Source

2.25.2

Fixes

Add github output group for progress report content

Maintenance

Bump Gomega

v2.25.1

Compare Source

2.25.1

Fixes
  • fix(types): ignore nameless nodes on FullText() [10866d3]
  • chore: fix some CodeQL warnings [2e42cff]

v2.25.0

Compare Source

2.25.0

AroundNode

This release introduces a new decorator to support more complex spec setup usecases.

AroundNode registers a function that runs before each individual node. This is considered a more advanced decorator.

Please read the docs for more information and some examples.

Allowed signatures:

  • AroundNode(func()) - func will be called before the node is run.
  • AroundNode(func(ctx context.Context) context.Context) - func can wrap the passed in context and return a new one which will be passed on to the node.
  • AroundNode(func(ctx context.Context, body func(ctx context.Context))) - ctx is the context for the node and body is a function that must be called to run the node. This gives you complete control over what runs before and after the node.

Multiple AroundNode decorators can be applied to a single node and they will run in the order they are applied.

Unlike setup nodes like BeforeEach and DeferCleanup, AroundNode is guaranteed to run in the same goroutine as the decorated node. This is necessary when working with lower-level libraries that must run on a single thread (you can call runtime.LockOSThread() in the AroundNode to ensure that the node runs on a single thread).

Since AroundNode allows you to modify the context you can also use AroundNode to implement shared setup that attaches values to the context.

If applied to a container, AroundNode will run before every node in the container. Including setup nodes like BeforeEach and DeferCleanup.

AroundNode can also be applied to RunSpecs to run before every node in the suite. This opens up new mechanisms for instrumenting individual nodes across an entire suite.

v2.24.0

Compare Source

2.24.0

Features

Specs can now be decorated with (e.g.) SemVerConstraint("2.1.0") and ginkgo --sem-ver-filter="2.1.1" will only run constrained specs that match the requested version. Learn more in the docs here! Thanks to @​Icarus9913 for the PR.

Fixes
Maintenance

Numerous dependency bumps and documentation fixes

onsi/gomega (github.com/onsi/gomega)

v1.38.2

Compare Source

1.38.2

v1.38.1

Compare Source

1.38.1

Fixes

Numerous minor fixes and dependency bumps

v1.38.0

Compare Source

1.38.0

Features
  • gstruct handles extra unexported fields [4ee7ed0]
Fixes
  • support [] in IgnoringTopFunction function signatures (#​851) [36bbf72]
Maintenance
prometheus/client_golang (github.com/prometheus/client_golang)

v1.23.2: - 2025-09-05

Compare Source

This release is made to upgrade to prometheus/common v0.66.1, which drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement). There are no functional changes.

All Changes

Full Changelog: prometheus/client_golang@v1.23.1...v1.23.2

v1.23.1: - 2025-09-04

Compare Source

This release is made to be compatible with a backwards incompatible API change in prometheus/common v0.66.0. There are no functional changes.

All Changes

Full Changelog: prometheus/client_golang@v1.23.0...v1.23.1

v1.23.0: - 2025-07-30

Compare Source

  • [CHANGE] Minimum required Go version is now 1.23, only the two latest Go versions are supported from now on. #​1812
  • [FEATURE] Add WrapCollectorWith and WrapCollectorWithPrefix #​1766
  • [FEATURE] Add exemplars for native histograms #​1686
  • [ENHANCEMENT] exp/api: Bubble up status code from writeResponse #​1823
  • [ENHANCEMENT] collector/go: Update runtime metrics for Go v1.23 and v1.24 #​1833
  • [BUGFIX] exp/api: client prompt return on context cancellation #​1729
All Changes * Update example test by @​SuperQ in https://github.com/prometheus/client_golang/pull/1770 * build(deps): bump golang.org/x/net from 0.34.0 to 0.36.0 in /tutorials/whatsup by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1776 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1771 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1778 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1779 * build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1782 * build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1781 * build(deps): bump github.com/prometheus/common from 0.62.0 to 0.63.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1783 * build(deps): bump google.golang.org/protobuf from 1.36.5 to 1.36.6 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1784 * build(deps): bump github.com/prometheus/procfs from 0.15.1 to 0.16.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1786 * chore: Upgrade golangci-lint to v2 by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1789 * build(deps): bump the github-actions group across 1 directory with 3 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1790 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1791 * Add `WrapCollectorWith` and `WrapCollectorWithPrefix` by @​colega in https://github.com/prometheus/client_golang/pull/1766 * feat(github-actions): add Go file change detection to golangci-lint workflow by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1794 * chore(ci): Fix flaky tests by @​kakkoyun in https://github.com/prometheus/client_golang/pull/1795 * build(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in /tutorials/whatsup by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1799 * test(registry): Add goleak-based goroutine leak detection by @​surinkim in https://github.com/prometheus/client_golang/pull/1797 * build(deps): bump go.uber.org/goleak from 1.2.0 to 1.3.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1806 * build(deps): bump the github-actions group with 2 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1804 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1809 * Add exemplars for native histograms by @​shivanthzen in https://github.com/prometheus/client_golang/pull/1686 * build(deps): bump golang.org/x/sys from 0.30.0 to 0.32.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1807 * build(deps): bump github.com/prometheus/client_model from 0.6.1 to 0.6.2 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1805 * build(deps): bump github.com/prometheus/procfs from 0.16.0 to 0.16.1 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1808 * build(deps): bump golang.org/x/net from 0.35.0 to 0.38.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1800 * Update supported Go versions by @​SuperQ in https://github.com/prometheus/client_golang/pull/1812 * Cleaup Go modules by @​SuperQ in https://github.com/prometheus/client_golang/pull/1813 * fix: client prompt return on context cancellation by @​umegbewe in https://github.com/prometheus/client_golang/pull/1729 * Simplify buf binary install by @​SuperQ in https://github.com/prometheus/client_golang/pull/1814 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1815 * build(deps): bump the github-actions group with 5 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1817 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1821 * exp/api: Bubble up status code from writeResponse by @​saswatamcode in https://github.com/prometheus/client_golang/pull/1823 * build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0 by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1827 * build(deps): bump github.com/prometheus/common from 0.64.0 to 0.65.0 in /exp by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1828 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1831 * Update runtime metrics for Go v1.23 and v1.24 by @​aknuds1 in https://github.com/prometheus/client_golang/pull/1833 * Fix `errNotImplemented` reference by @​aknuds1 in https://github.com/prometheus/client_golang/pull/1835 * build(deps): bump the github-actions group with 3 updates by @​dependabot[bot] in https://github.com/prometheus/client_golang/pull/1826 * Synchronize common files from prometheus/prometheus by @​prombot in https://github.com/prometheus/client_golang/pull/1832 * Cut v1.23.0-rc.0 by @​vesari in https://github.com/prometheus/client_golang/pull/1837 * cut v1.23.0-rc.1 by @​vesari in https://github.com/prometheus/client_golang/pull/1842

New Contributors

Full Changelog: prometheus/client_golang@v1.22.0...v1.23.0

prometheus/common (github.com/prometheus/common)

v0.67.1

Compare Source

v0.67.0

Compare Source

v0.66.1

Compare Source

This release has no functional changes, it just drops the dependencies github.com/grafana/regexp and go.uber.org/atomic and replaces gopkg.in/yaml.v2 with go.yaml.in/yaml/v2 (a drop-in replacement).

What's Changed

Full Changelog: prometheus/common@v1.20.99...v0.66.1

v0.66.0

Compare Source

⚠️ Breaking Changes ⚠️
  • A default-constructed TextParser will be invalid. It must have a valid scheme set, so users should use the NewTextParser function to create a valid TextParser. Otherwise parsing will panic with "Invalid name validation scheme requested: unset".
What's Changed
New Contributors
prometheus/procfs (github.com/prometheus/procfs)

v0.19.1

Compare Source

What's Changed

Full Changelog: prometheus/procfs@v0.19.0...v0.19.1

v0.19.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.18.0...v0.19.0

v0.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/procfs@v0.17.0...v0.18.0

redis/go-redis (github.com/redis/go-redis/v9)

v9.16.0: 9.16.0

Compare Source

🚀 Highlights

Maintenance Notifications Support

This release introduces comprehensive support for Redis maintenance notifications, enabling applications to handle server maintenance events gracefully. The new maintnotifications package provides:

  • RESP3 Push Notifications: Full support for Redis RESP3 protocol push notifications
  • Connection Handoff: Automatic connection migration during server maintenance with configurable retry policies and circuit breakers
  • Graceful Degradation: Configurable timeout relaxation during maintenance windows to prevent false failures
  • Event-Driven Architecture: Background workers with on-demand scaling for efficient handoff processing

For detailed usage examples and configuration options, see the maintenance notifications documentation.

✨ New Features

  • Trace Filtering: Add support for filtering traces for specific commands, including pipeline operations and dial operations (#​3519, #​3550)
    • New TraceCmdFilter option to selectively trace commands
    • Reduces overhead by excluding high-frequency or low-value commands from traces

🐛 Bug Fixes

  • Pipeline Error Handling: Fix issue where pipeline repeatedly sets the same error (#​3525)
  • Connection Pool: Ensure re-authentication does not interfere with connection handoff operations (#​3547)

🔧 Improvements

  • Hash Commands: Update hash command implementations (#​3523)
  • OpenTelemetry: Use metric.WithAttributeSet to avoid unnecessary attribute copying in redisotel (#​3552)

📚 Documentation

  • Cluster Client: Add explanation for why MaxRetries is disabled for ClusterClient (#​3551)

🧪 Testing & Infrastructure

  • E2E Testing: Upgrade E2E testing framework with improved reliability and coverage (#​3541)
  • Release Process: Improved resiliency of the release process (#​3530)

📦 Dependencies

  • Bump rojopolis/spellcheck-github-actions from 0.51.0 to 0.52.0 (#​3520)
  • Bump github/codeql-action from 3 to 4 (#​3544)

👥 Contributors

We'd like to thank all the contributors who worked on this release!

@​ndyakov, @​htemelski-redis, @​Sovietaced, @​Udhayarajan, @​boekkooi-impossiblecloud, @​Pika-Gopher, @​cxljs, @​huiyifyj, @​omid-h70


Full Changelog: redis/go-redis@v9.14.0...v9.16.0

v9.15.1: Retract v9.15.0 and v9.15.1

v9.14.1: 9.14.1

Compare Source

Changes

  • fix(otel): Add support for filtering traces for certain commands (#​3519)
  • fix(pool): remove conn from idleConns if present (#​3546)

Contributors

We'd like to thank all the contributors who worked on this release!

@​Sovietaced, @​ndyakov

v9.14.0: 9.14.0

Compare Source

Highlights

  • Added batch process method to the pipeline (#​3510)

Changes

🚀 New Features

  • Added batch process method to the pipeline (#​3510)

🐛 Bug Fixes

  • fix: SetErr on Cmd if the command cannot be queued correctly in multi/exec (#​3509)

🧰 Maintenance

  • Updates release drafter config to exclude dependabot (#​3511)
  • chore(deps): bump actions/setup-go from 5 to 6 (#​3504)

Contributors

We'd like to thank all the contributors who worked on this release!

@​elena-kolevska, @​htemelski-redis and @​ndyakov

v9.13.0: 9.13.0

Compare Source

Highlights

  • Pipeliner expose queued commands (#​3496)
  • Ensure that JSON.GET returns Nil response (#​3470)
  • Fixes on Read and Write buffer sizes and UniversalOptions

Changes

  • Pipeliner expose queued commands (#​3496)
  • fix(test): fix a timing issue in pubsub test (#​3498)
  • Allow users to enable read-write splitting in failover mode. (#​3482)
  • Set the read/write buffer size of the sentinel client to 4KiB (#​3476)

🚀 New Features

  • fix(otel): register wait metrics (#​3499)
  • Support subscriptions against cluster slave nodes (#​3480)
  • Add wait metrics to otel (#​3493)
  • Clean failing timeout implementation (#​3472)

🐛 Bug Fixes

  • Do not assume that all non-IP hosts are loopbacks (#​3085)
  • Ensure that JSON.GET returns Nil response (#​3470)

🧰 Maintenance

  • fix(otel): register wait metrics (#​3499)
  • fix(make test): Add default env in makefile (#​3491)
  • Update the introduction to running tests in README.md (#​3495)
  • test: Add comprehensive edge case tests for IncrByFloat command (#​3477)
  • Set the default read/write buffer size of Redis connection to 32KiB (#​3483)
  • Bumps test image to 8.2.1-pre (#​3478)
  • fix UniversalOptions miss ReadBufferSize and WriteBufferSize options (#​3485)
  • chore(deps): bump actions/checkout from 4 to 5 (#​3484)
  • Removes dry run for stale issues policy (#​3471)
  • Update otel metrics URL (#​3474)

Contributors

We'd like to thank all the contributors who worked on this release!

@​LINKIWI, @​cxljs, @​cybersmeashish, @​elena-kolevska, @​htemelski-redis, @​mwhooker, @​ndyakov, @​ofekshenawa, [@​suever](https:/


Configuration

📅 Schedule: Branch creation - "after 8am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

@konflux-internal-p02 konflux-internal-p02 bot force-pushed the konflux/mintmaker/konflux-poc-1/gomod branch from 527daf3 to 31fed36 Compare October 12, 2025 08:18
@konflux-internal-p02 konflux-internal-p02 bot force-pushed the konflux/mintmaker/konflux-poc-1/gomod branch 2 times, most recently from 79ed1ff to fc61797 Compare October 26, 2025 08:13
Signed-off-by: konflux-internal-p02 <170854209+konflux-internal-p02[bot]@users.noreply.github.com>
@konflux-internal-p02 konflux-internal-p02 bot force-pushed the konflux/mintmaker/konflux-poc-1/gomod branch from fc61797 to 527505b Compare October 26, 2025 12:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants