Skip to content

Conversation

red-hat-konflux[bot]
Copy link
Contributor

@red-hat-konflux red-hat-konflux bot commented Oct 6, 2025

This PR contains the following updates:

Package Change Age Confidence
github.com/cyphar/filepath-securejoin v0.4.1 -> v0.5.0 age confidence
github.com/go-git/go-git/v5 v5.16.2 -> v5.16.3 age confidence
github.com/go-jose/go-jose/v4 v4.1.2 -> v4.1.3 age confidence
github.com/hashicorp/terraform-exec v0.23.0 -> v0.24.0 age confidence
github.com/hashicorp/terraform-json v0.26.0 -> v0.27.2 age confidence
github.com/kevinburke/ssh_config v1.2.0 -> v1.4.0 age confidence
github.com/pjbgf/sha1cd v0.4.0 -> v0.5.0 age confidence
github.com/skeema/knownhosts v1.3.1 -> v1.3.2 age confidence
github.com/stretchr/testify v1.10.0 -> v1.11.1 age confidence
github.com/zclconf/go-cty v1.16.3 -> v1.17.0 age confidence
golang.org/x/crypto v0.41.0 -> v0.43.0 age confidence
golang.org/x/net v0.43.0 -> v0.46.0 age confidence
golang.org/x/sys v0.35.0 -> v0.37.0 age confidence
golang.org/x/text v0.28.0 -> v0.30.0 age confidence
golang.org/x/time v0.12.0 -> v0.14.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

cyphar/filepath-securejoin (github.com/cyphar/filepath-securejoin)

v0.5.0

Compare Source

This is our first release of github.com/cyphar/filepath-securejoin,
containing a full implementation with a coverage of 93.5% (the only missing
cases are the error cases, which are hard to mocktest at the moment).

go-git/go-git (github.com/go-git/go-git/v5)

v5.16.3

Compare Source

What's Changed

  • internal: Expand regex to fix build [5.x] by @​baloo in #​1644
  • build: raise timeouts for windows CI tests and disable CIFuzz [5.x] by @​baloo in #​1646
  • plumbing: support commits extra headers, support jujutsu signed commit [5.x] by @​baloo in #​1633

Full Changelog: go-git/go-git@v5.16.2...v5.16.3

go-jose/go-jose (github.com/go-jose/go-jose/v4)

v4.1.3

Compare Source

This release drops Go 1.23 support as that Go release is no longer supported. With that, we can drop x/crypto and no longer have any external dependencies in go-jose outside of the standard library!

This release fixes a bug where a critical b64 header was ignored if in an unprotected header. It is now rejected instead of ignored.

What's Changed

Full Changelog: go-jose/go-jose@v4.1.2...v4.1.3

hashicorp/terraform-exec (github.com/hashicorp/terraform-exec)

v0.24.0

Compare Source

ENHANCEMENTS:

  • Implement QueryJSON and introduce new way for consuming Terraform's structured logging (#​539)

INTERNAL:

  • bump actions/setup-go from 5.5.0 to 6.0.0 (#​536)

v0.23.1

Compare Source

BUG FIXES:

  • Avoid closing stdio pipes early on graceful (SIGINT-based) cancellation (#​527)
    • This enables correct handling of graceful cancellation for recent versions of Terraform (1.1+). Older versions should use SetEnableLegacyPipeClosing(true) to avoid hanging on cancellation.

INTERNAL:

  • bump github.com/cloudflare/circl from 1.6.0 to 1.6.1 (#​524)
  • bump github.com/hashicorp/terraform-json from 0.24.0 to 0.26.0 (#​520 & #​529)
  • bump github.com/zclconf/go-cty from 1.16.2 to 1.16.4 (#​522 & #​532)
  • bump golang.org/x/net from 0.36.0 to 0.38.0 (#​515)
hashicorp/terraform-json (github.com/hashicorp/terraform-json)

v0.27.2

Compare Source

NOTES / BUG FIXES

  • UnmarshalLogMessage to use json.Number (instead of default float64) (#​178)
    • This avoids precision related problems when decoding numbers in JSON data. This would impact only 0.27.1 consumers.

v0.27.1

Compare Source

What's Changed

ENHANCEMENTS

Full Changelog: hashicorp/terraform-json@v0.27.0...v0.27.1

v0.27.0

Compare Source

What's Changed

ENHANCEMENTS
INTERNAL

New Contributors

Full Changelog: hashicorp/terraform-json@v0.26.0...v0.27.0

kevinburke/ssh_config (github.com/kevinburke/ssh_config)

v1.4.0

Compare Source

pjbgf/sha1cd (github.com/pjbgf/sha1cd)

v0.5.0

Compare Source

What's Changed

Full Changelog: pjbgf/sha1cd@v0.4.0...v0.5.0

skeema/knownhosts (github.com/skeema/knownhosts)

v1.3.2

Compare Source

stretchr/testify (github.com/stretchr/testify)

v1.11.1

Compare Source

This release fixes #​1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

Compare Source

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Fixes
Documentation, Build & CI

New Contributors

Full Changelog: stretchr/testify@v1.10.0...v1.11.0

zclconf/go-cty (github.com/zclconf/go-cty)

v1.17.0

Compare Source

cty now requires Go 1.23 or later.

  • cty.Value.Elements offers a modern iter.Seq2-based equivalent of cty.Value.ElementIterator.

  • cty.DeepValues offers a modern iter.Seq2-based equivalent of cty.Walk.

  • cty.Value.WrangleMarksDeep allows inspecting and modifying individual marks throughout a possibly-nested data structure.

    Having now got some experience using marks more extensively in some callers, it's become clear that it's often necessary for different subsystems to be able to collaborate using independent marks without upsetting each other's assumptions. Today that tends to be achieved using hand-written transforms either with cty.Transform or cty.Value.UnmarkDeepWithPaths/cty.Value.MarkWithPaths, both of which can be pretty expensive even in the common case where there are no marks present at all.

    This new function allows inspecting and transforming marks with far less overhead, by creating new values only for parts of a structure that actually need to change and by reusing (rather than recreating) the "payloads" of the values being modified when we know that only the marks have changed.

  • cty.ValueMarksOfType and cty.ValueMarksOfTypeDeep make it easier to use type-based rather than value-based mark schemes, where different values of a common type are used to track a specific kind of relationship with multiple external values.

  • cty.Value.HasMarkDeep provides a "deep" version of the existing cty.Value.HasMark, searching throughout a possibly-nested structure for any values that have the given mark.

  • cty.Value.UnmarkDeep and cty.Value.UnmarkDeepWithPaths are now implemented in terms of cty.Value.WrangleMarksDeep, so they benefit from its reduced overhead. In particular they avoid reconstructing a data structure that contains no marked values at all.

  • cty.Value.MarkWithPaths now has a fast path when it's given a zero-length PathValueMarks, in which case it just returns the value it was given with no modifications.

v1.16.4

Compare Source


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/all-minor-patch-gomod branch 7 times, most recently from d09a00e to d90b8a5 Compare October 9, 2025 04:09
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/all-minor-patch-gomod branch from d90b8a5 to 889b24e Compare October 15, 2025 00:10
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/main/all-minor-patch-gomod branch from 889b24e to 81d4ac5 Compare October 15, 2025 04:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants