Skip to content

Update go modules (release-v0.7) (minor)#1634

Open
renovate[bot] wants to merge 1 commit into
release-v0.7from
renovate/release-v0.7-go-modules
Open

Update go modules (release-v0.7) (minor)#1634
renovate[bot] wants to merge 1 commit into
release-v0.7from
renovate/release-v0.7-go-modules

Conversation

@renovate

@renovate renovate Bot commented Jan 20, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/conforma/cli v0.7.109v0.9.46 age adoption passing confidence
github.com/conforma/cli v0.7.95v0.9.46 age adoption passing confidence
github.com/cucumber/godog v0.13.0v0.15.1 age adoption passing confidence
github.com/google/addlicense v1.1.1v1.2.0 age adoption passing confidence
github.com/open-policy-agent/conftest v0.55.0v0.68.2 age adoption passing confidence
github.com/open-policy-agent/opa v0.68.0v0.70.0 age adoption passing confidence
github.com/styrainc/regal v0.29.2v0.41.1 age adoption passing confidence
github.com/tektoncd/cli v0.39.1v0.45.0 age adoption passing confidence
oras.land/oras v1.2.3v1.3.2 age adoption passing confidence

Release Notes

conforma/cli (github.com/conforma/cli)

v0.9.46

Compare Source

v0.9.44

Compare Source

v0.9.43

Compare Source

v0.9.42

Compare Source

v0.9.41

Compare Source

v0.9.40

Compare Source

v0.9.39

Compare Source

v0.9.38

Compare Source

v0.9.37

Compare Source

v0.9.36

Compare Source

v0.9.35

Compare Source

v0.9.34

Compare Source

v0.9.33

Compare Source

v0.9.32

Compare Source

v0.9.31

Compare Source

v0.9.30

Compare Source

v0.9.29

Compare Source

v0.9.27

Compare Source

v0.9.26

Compare Source

v0.9.25

Compare Source

v0.9.24

Compare Source

v0.9.23

Compare Source

v0.9.22

Compare Source

v0.9.19

Compare Source

v0.9.17

Compare Source

v0.9.16

Compare Source

v0.9.14

Compare Source

v0.9.13

Compare Source

v0.9.9

Compare Source

v0.9.2

Compare Source

v0.9.1

Compare Source

v0.8.129

Compare Source

v0.8.123

Compare Source

v0.8.122

Compare Source

v0.8.120

Compare Source

v0.8.108

Compare Source

v0.8.107

Compare Source

v0.8.105

Compare Source

v0.8.102

Compare Source

v0.8.100

Compare Source

v0.8.95

Compare Source

v0.8.92

Compare Source

v0.8.91

Compare Source

v0.8.90

Compare Source

v0.8.89

Compare Source

v0.8.88

Compare Source

v0.8.87

Compare Source

v0.8.86

Compare Source

v0.8.83

Compare Source

v0.8.80

Compare Source

v0.8.79

Compare Source

v0.8.77

Compare Source

v0.8.76

Compare Source

v0.8.75

Compare Source

v0.8.74

Compare Source

v0.8.73

Compare Source

v0.8.48

Compare Source

v0.8.47

Compare Source

v0.8.45

Compare Source

v0.8.44

Compare Source

v0.8.43

Compare Source

v0.8.42

Compare Source

v0.8.39

Compare Source

v0.8.36

Compare Source

v0.8.35

Compare Source

v0.8.34

Compare Source

v0.8.33

Compare Source

v0.8.32

Compare Source

v0.8.31

Compare Source

v0.8.29

Compare Source

v0.8.28

Compare Source

v0.8.25

Compare Source

v0.8.23

Compare Source

v0.8.22

Compare Source

v0.8.21

Compare Source

v0.8.18

Compare Source

v0.8.13

Compare Source

v0.8.12

Compare Source

v0.8.10

Compare Source

v0.8.9

Compare Source

v0.8.7

Compare Source

v0.8.6

Compare Source

v0.8.4

Compare Source

v0.8.2

Compare Source

v0.7.151

Compare Source

v0.7.150

Compare Source

v0.7.148

Compare Source

v0.7.143

Compare Source

v0.7.141

Compare Source

v0.7.140

Compare Source

v0.7.136

Compare Source

v0.7.135

Compare Source

v0.7.134

Compare Source

v0.7.132

Compare Source

v0.7.131

Compare Source

v0.7.130

Compare Source

v0.7.129

Compare Source

v0.7.128

Compare Source

v0.7.127

Compare Source

v0.7.123

Compare Source

v0.7.121

Compare Source

v0.7.118

Compare Source

v0.7.117

Compare Source

v0.7.114

Compare Source

v0.7.113

Compare Source

v0.7.110

Compare Source

cucumber/godog (github.com/cucumber/godog)

v0.15.1

Compare Source

Added
Changed
  • Replace deprecated ::set-output - (681 - nodeg)
Fixed
  • fix(errors): fix(errors): Fix expected Step argument count for steps with context.Context (679 - tigh-latte)
  • fix(formatter): On concurrent execution, execute formatter at end of Scenario - (645 - tigh-latte)
  • Pretty printing results now prints the line where the step is declared instead of the line where the handler is declared. (668 - spencerc)
  • Update honnef.co/go/tools/cmd/staticcheck version in Makefile by @​RezaZareiii in #​670
  • fix: verify dogT exists in the context before using it by @​cakoolen in #​692
  • fix: change bang to being in README by @​nahomEagleLion in #​687
  • Mark junit test cases as skipped if no pickle step results available by @​mrsheepuk in #​597
  • Print step declaration line instead of handler declaration line by @​SpencerC in #​668

v0.15.0

Compare Source

Added
  • Improved the type checking of step return types and improved the error messages - (647 - johnlon)
  • Ambiguous step definitions will now be detected when strict mode is activated - (636/(648 - johnlon)
  • Provide support for attachments / embeddings including a new example in the examples dir - (623 - johnlon)
Changed
  • Formatters now have a Close method and associated io.Writer changed to io.WriteCloser.

v0.14.1

Compare Source

Added
  • Provide testing.T-compatible interface on test context, allowing usage of assertion libraries such as testify's assert/require - (571 - mrsheepuk)
  • Created releasing guidelines - (608 - glibas)
Fixed

v0.14.0

Compare Source

Added
  • Improve ErrSkip handling, add test for Summary and operations order (584 - vearutop)
Fixed
  • Remove line overwriting for scenario outlines in cucumber formatter (605 - glibas)
  • Remove duplicate warning message (590 - vearutop)
  • updated base formatter to set a scenario as passed unless there exist (582 - roskee)
Changed
google/addlicense (github.com/google/addlicense)

v1.2.0

Compare Source

This is the first full release after a period of dormancy for the project. Support for several file types has been added, plus some internal cleanup.

What's Changed

New Contributors

Full Changelog: google/addlicense@v1.1.1...v1.2.0

open-policy-agent/conftest (github.com/open-policy-agent/conftest)

v0.68.2

Compare Source

Changelog

OPA Changes
Other Changes

v0.68.1

Compare Source

Changelog

Bug Fixes

v0.68.0

Compare Source

Changelog

New Features
Bug Fixes
OPA Changes
Other Changes

v0.67.1

Compare Source

Changelog

Bug Fixes
Other Changes

v0.67.0

Compare Source

Changelog

Bug Fixes
OPA Changes
Other Changes

v0.66.0

Compare Source

Changelog

OPA Changes
Other Changes

v0.65.0

Compare Source

Changelog

New Features
Bug Fixes
OPA Changes
Other Changes

v0.64.0

Compare Source

Changelog

New Features

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch from 6b8b3a9 to 356ee83 Compare January 20, 2026 05:03
@renovate

renovate Bot commented Jan 20, 2026

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: acceptance/go.sum
Command failed: go get -t ./...
go: module github.com/conforma/cli@v0.9.46 requires go >= 1.25.8; switching to go1.25.11
go: downloading github.com/google/go-containerregistry v0.21.5
go: downloading github.com/cespare/xxhash v1.1.0
go: downloading github.com/sigstore/timestamp-authority v1.2.2
go: downloading github.com/vektah/gqlparser v1.2.0
go: downloading github.com/containerd/containerd v1.7.27
go: downloading github.com/go-chi/chi v4.1.2+incompatible
go: downloading github.com/dgraph-io/ristretto v0.1.1
go: github.com/muhammadmuzzammil1998/jsonc@v1.0.0 used for two different module paths (github.com/muhammadmuzzammil1998/jsonc and muzzammil.xyz/jsonc)

File name: go.sum
Command failed: go get -t ./...
go: module github.com/conforma/cli@v0.9.46 requires go >= 1.25.8; switching to go1.25.11
go: module github.com/styrainc/regal@v0.41.1 requires go >= 1.26; switching to go1.26.4
go: github.com/styrainc/regal@v0.41.1: parsing go.mod:
	module declares its path as: github.com/open-policy-agent/regal
	        but was required as: github.com/styrainc/regal

@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch 5 times, most recently from e85d278 to 1de80e8 Compare January 29, 2026 05:41
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch 2 times, most recently from f0269a7 to 28461a8 Compare February 2, 2026 12:43
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch 4 times, most recently from cf6bb5e to cb12a04 Compare February 14, 2026 09:15
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch 2 times, most recently from 640ac05 to 602b0e4 Compare February 26, 2026 22:01
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch 5 times, most recently from 3ae6928 to d6fe4d7 Compare March 9, 2026 13:08
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch 4 times, most recently from 585cb2d to 836e5e7 Compare March 18, 2026 18:17
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch 2 times, most recently from 46d270a to 046b71f Compare March 24, 2026 01:52
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch 3 times, most recently from de88374 to 1671936 Compare May 20, 2026 21:53
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch 5 times, most recently from 066f704 to 7d6144f Compare June 3, 2026 17:05
@fullsend-ai-review

fullsend-ai-review Bot commented Jun 3, 2026

Copy link
Copy Markdown

Review

Findings

High

  • [API contract violation] go.mod — The root go.sum and acceptance/go.sum are not updated in this PR despite version changes in their respective go.mod files. The docs/go.sum is correctly updated, but the root module (which bumps 6 dependencies) and the acceptance module (which bumps 2 dependencies) are missing their go.sum updates. Without updated checksums, go build and go mod verify will fail for these modules.
    Remediation: Run go mod tidy in the root directory and in the acceptance/ directory to regenerate the go.sum files, and include those changes in this PR.

Low

  • [edge-case] go.mod — Several dependencies have large version jumps within the 0.x semver range (conforma/cli v0.7→v0.9, conftest v0.55→v0.68, regal v0.29→v0.41) where backward compatibility is not guaranteed. CI should validate that no breaking changes affect this project's usage of these tools.

Info

  • [sub-agent-failure] — The style-conventions sub-agent did not return findings: model unavailable. This dimension would have early-exited for a dependency version bump PR regardless.
Previous run

Review

Findings

Info

  • [scope-inferred] go.mod — No linked issue, but authorization is implicit: this is a mechanical Renovate bot dependency version bump. The requires-manual-review label is appropriately set. Notable version jumps include conforma/cli v0.7.x → v0.9.44 and conftest v0.55.0 → v0.68.2 — human reviewers should verify compatibility with the release-v0.7 branch.

  • [sub-agent-failure] N/A — The intent-coherence and style-conventions sub-agents did not return findings: model claude-sonnet-4-5@20250929 unavailable on this deployment. These are sonnet-tier dimensions; the correctness (opus) sub-agent completed successfully with no findings.

Previous run (2)

Review

Findings

Medium

  • [api-contract] go.mod — The PR updates go.mod in the root and acceptance/ directories but does not include corresponding go.sum changes. The root go.sum and acceptance/go.sum both exist in the repository but do not contain checksums for the newly required versions (e.g., conforma/cli v0.9.43). Without updated go.sum files, builds using -mod=readonly or go mod verify will fail. Only docs/go.sum is updated in this PR.
    Remediation: Run go mod tidy in both the root directory and acceptance/ directory, then include the updated go.sum files in the PR.

Info

  • [sub-agent-failure] N/A — The style-conventions sub-agent did not return findings: model claude-sonnet-4-5@20250929 unavailable on deployment.
  • [sub-agent-failure] N/A — The intent-coherence sub-agent did not return findings: model claude-sonnet-4-5@20250929 unavailable on deployment.
Previous run (3)

Review

Findings

Info

  • [api-contract] acceptance/go.mod:5 — The conforma/cli dependency jumps from v0.7.95 to v0.9.42 (two minor versions for a pre-1.0 module). However, the main branch already uses v0.9.2 with the same import paths (cmd/validate), confirming API compatibility. CI should validate the specific patch version.

  • [api-contract] go.mod:10 — Several significant version jumps: styrainc/regal v0.29.2→v0.41.1, conftest v0.55.0→v0.68.2, tektoncd/cli v0.39.1→v0.45.0. These are used as tooling dependencies (blank imports in tools.go and direct usage in regal.go). The main branch uses even newer versions of these packages, indicating compatibility. CI compilation will confirm.

  • [api-contract] docs/go.mod:5 — OPA v0.68.0→v0.70.0 with transitive switch from yaml.v2 to yaml.v3. The yaml.v3 dependency is indirect only (driven by OPA); no direct code imports either yaml package in the docs module.

  • [sub-agent-failure] N/A — The style-conventions sub-agent did not return findings: model claude-sonnet-4-5@20250929 unavailable on deployment. Given this is a dependency-only change with no code style to evaluate, the gap has no material impact.

Previous run (4)

Review

Findings

High

  • [api-contract] go.mod, acceptance/go.mod — The root go.mod bumps 6 direct dependencies and acceptance/go.mod bumps 2, but neither go.sum nor acceptance/go.sum are included in the changed file set. The docs/go.sum is correctly updated, making this omission inconsistent. Without updated checksums, go mod verify and builds will fail for the root and acceptance modules.
    Remediation: Run go mod tidy in both the root and acceptance/ directories and include the updated go.sum files in the PR.

Low

  • [edge-case] go.mod — Several version bumps cross multiple minor versions for pre-1.0 modules (conforma/cli v0.7→v0.9, conftest v0.55→v0.68, regal v0.29→v0.41, tektoncd/cli v0.39→v0.45). For pre-1.0 Go modules, minor version bumps can contain breaking changes. Verify CI passes with all tests green before merging.

  • [edge-case] docs/go.mod — The indirect dependency switches from gopkg.in/yaml.v2 to gopkg.in/yaml.v3, driven by the OPA v0.68→v0.70 upgrade. This is a safe transitive change — no code in docs/ directly imports yaml, and docs/go.sum is correctly updated.

Info

  • [sub-agent-failure] N/A — The style-conventions sub-agent did not return findings: model unavailable. This dimension is non-blocking for a go.mod-only dependency update.
Previous run (5)

Review

Findings

Low

  • [api-contract] go.mod — Root go.sum was not updated alongside go.mod direct dependency bumps (6 dependencies changed). The go.sum SHA is identical on the base branch and the PR head, meaning go mod tidy was not run for the root module. If CI runs with -mod=readonly, the build will fail due to missing checksums for the new dependency versions.

  • [api-contract] acceptance/go.modacceptance/go.sum was not updated alongside acceptance/go.mod changes (conforma/cli v0.7.95→v0.9.40, godog v0.13.0→v0.15.1). Same root cause — go mod tidy was not run for the acceptance module.

Info

  • [sub-agent-failure] N/A — The style-conventions sub-agent did not return findings: model unavailable. This dimension was not evaluated.

@fullsend-ai-review fullsend-ai-review Bot added the ready-for-merge All reviewers approved — ready to merge label Jun 3, 2026
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch from 7d6144f to 16f6859 Compare June 4, 2026 00:19

@fullsend-ai-review fullsend-ai-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the review comment for full details.

@fullsend-ai-review fullsend-ai-review Bot removed the ready-for-merge All reviewers approved — ready to merge label Jun 4, 2026
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch from 16f6859 to d81d15d Compare June 4, 2026 19:11
@fullsend-ai-review fullsend-ai-review Bot added the ready-for-merge All reviewers approved — ready to merge label Jun 4, 2026
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch from d81d15d to 85b21bb Compare June 5, 2026 18:49
@fullsend-ai-review fullsend-ai-review Bot added requires-manual-review Review requires human judgment and removed ready-for-merge All reviewers approved — ready to merge labels Jun 5, 2026
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch from 85b21bb to 4ebf3c0 Compare June 9, 2026 18:14
@fullsend-ai-review

fullsend-ai-review Bot commented Jun 9, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 6:16 PM UTC · Completed 6:23 PM UTC
Commit: 47d3320 · View workflow run →

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge and removed requires-manual-review Review requires human judgment labels Jun 9, 2026
@renovate renovate Bot force-pushed the renovate/release-v0.7-go-modules branch from 4ebf3c0 to 4f5f915 Compare June 13, 2026 02:02
@fullsend-ai-review

fullsend-ai-review Bot commented Jun 13, 2026

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 2:03 AM UTC · Completed 2:12 AM UTC
Commit: 47d3320 · View workflow run →

@fullsend-ai-review fullsend-ai-review Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

See the review comment for full details.

@fullsend-ai-review fullsend-ai-review Bot removed the ready-for-merge All reviewers approved — ready to merge label Jun 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants