Skip to content

chore(deps): update non-k8s-go-dependencies (major)#215

Open
red-hat-konflux[bot] wants to merge 1 commit intooadp-1.5from
konflux/mintmaker/oadp-1.5/major-non-k8s-go-dependencies
Open

chore(deps): update non-k8s-go-dependencies (major)#215
red-hat-konflux[bot] wants to merge 1 commit intooadp-1.5from
konflux/mintmaker/oadp-1.5/major-non-k8s-go-dependencies

Conversation

@red-hat-konflux
Copy link
Copy Markdown
Contributor

@red-hat-konflux red-hat-konflux bot commented Mar 17, 2026

This PR contains the following updates:

Package Change Age Confidence
github.com/hashicorp/go-hclog v0.14.1 -> v1.6.3 age confidence
github.com/kubernetes-csi/external-snapshotter/client/v7 v7.0.0 -> v8.4.0 age confidence
github.com/openshift/velero v0.10.2-0.20250514165055-8fbcf3a8da11 -> v1.2.0 age confidence
go.yaml.in/yaml/v2 v2.4.2 -> v3.0.4 age confidence
gomodules.xyz/jsonpatch/v2 v2.5.0 -> v3.0.1 age confidence
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v5.9.11 age confidence

Release Notes

hashicorp/go-hclog (github.com/hashicorp/go-hclog)

v1.6.3: Optional JSON escaping

Compare Source

What's Changed

New Contributors

Full Changelog: hashicorp/go-hclog@v1.6.2...v1.6.3

v1.6.2: Fix level syncing

Compare Source

What's Changed

  • Conside if the level is to be used separately from if the levels should be calculated by @​evanphx in #​137

Full Changelog: hashicorp/go-hclog@v1.6.1...v1.6.2

v1.6.1: Fix forcing color

Compare Source

What's Changed

Full Changelog: hashicorp/go-hclog@v1.6.0...v1.6.1

v1.6.0: New level inheritance mode

Compare Source

This release adds the ability to have sub-loggers arrange themselves into a tree and sync the level changes downward in the tree.

What's Changed

New Contributors

Full Changelog: hashicorp/go-hclog@v1.5.0...v1.6.0

v1.5.0: Better color and sublogger mods

Compare Source

What's Changed

New Contributors

Full Changelog: hashicorp/go-hclog@v1.4.0...v1.5.0

v1.4.0: Add GetLevel

Compare Source

What it says on the tin, add GetLevel to the Logger interface.

What's Changed

Full Changelog: hashicorp/go-hclog@v1.3.1...v1.4.0

v1.3.1: Improved multi line output rendering

Compare Source

What's Changed

  • When rendering multiple line output, still quote the individual lines by @​evanphx in #​119

Full Changelog: hashicorp/go-hclog@v1.3.0...v1.3.1

v1.3.0: Field Colorization

Compare Source

This version adds the ability to colorize fields for improved readability.

What's Changed

New Contributors

Full Changelog: hashicorp/go-hclog@v1.2.2...v1.3.0

v1.2.2: Minor formatting fix

Compare Source

What's Changed

Full Changelog: hashicorp/go-hclog@v1.2.1...v1.2.2

v1.2.1: testify/go.yaml fix

Compare Source

This bumps the version of testify and go.yaml that are referenced by go-hclog to fix a security issue in go.yaml.

v1.2.0: More Restrained Color

Compare Source

What's Changed

New Contributors

Full Changelog: hashicorp/go-hclog@v1.1.0...v1.2.0

v1.1.0: Time and Infer improvements

Compare Source

What's Changed

New Contributors

Full Changelog: hashicorp/go-hclog@v0.17...v1.1.0

v1.0.0: Stable Release

Compare Source

This release represents the stable API for go-hclog. It is being used across the fleet of HashiCorp projects and tools, as well as across the Go service landscape.

v0.16.2

Compare Source

IMPROVEMENTS

  • add Quote type to enable safe concise output of untrusted strings #​96

BUG FIXES

  • Fix slicing of WARN when detecting log levels #​94

v0.16.1: Add ability to remove wrappers from file:line

Compare Source

v0.16.0: Improve hclogvet and plaintext rendering

Compare Source

v0.15.0

Compare Source

  • Add new level Off, which provides a level for filtering all output.
  • Add LoggerOptions.IndependentLevels, allowing sub-loggers to set their level independently from the parent.
kubernetes-csi/external-snapshotter (github.com/kubernetes-csi/external-snapshotter/client/v7)

v8.4.0

Compare Source

Overall Status

Volume snapshotting has been a GA feature since Kubernetes v1.20.

Supported CSI Spec Versions

1.0-1.12

Minimum Kubernetes version

1.25

Recommended Minimum Kubernetes version

1.25

Container

docker pull registry.k8s.io/sig-storage/snapshot-controller:v8.4.0
docker pull registry.k8s.io/sig-storage/csi-snapshotter:v8.4.0
docker pull registry.k8s.io/sig-storage/snapshot-conversion-webhook:v8.4.0

Changes by Kind

API Change

Feature

  • The number of worker threads in the snapshot-controller and csi-snapshotter is now configurable via the worker-threads flag. (#​282, @​huffmanca)

Other (Cleanup or Flake)

  • Several VolumeGroupSnapshot, VolumeGroupSnapshotClass and VolumeGroupSnapshotContent fields are now immutable. The v1beta1 VolumeGroupSnapshot API is now marked as deprecated. (#​1337, @​leonardoce)
  • Update kubernetes dependencies to v1.34.0 (#​1330, @​dobsonj)

Uncategorized

Full Changelog

https://github.com/kubernetes-csi/external-snapshotter/blob/v8.4.0/CHANGELOG/CHANGELOG-8.4.md

v8.2.0

Compare Source

Overall Status

Volume snapshotting has been a GA feature since Kubernetes v1.20.

Supported CSI Spec Versions

1.0-1.11

Minimum Kubernetes version

1.25

Recommended Minimum Kubernetes version

1.25

Container

docker pull registry.k8s.io/sig-storage/snapshot-controller:v8.2.0
docker pull registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0

Changes by Kind

API Change

  • VolumeGroupSnapshot, VolumeGroupSnapshotContent, and VolumeGroupSnapshotClass
    are now available in v1beta1 version. The support for the v1alpha1 version have been removed. (#​1150, @​leonardoce)

Other (Cleanup or Flake)

  • Move the logic of creating individual VolumeSnapshot and VolumeSnapshotContent resources for dynamically created VolumeGroupSnapshot from csi-snapshotter sidecar to snapshot-controller. (#​1171, @​leonardoce)

Uncategorized

  • The enable-volume-group-snapshots flag has been replaced by feature-gates flag.
    Enable feature gate to enable volumegroupsnapshot, i.e., --feature-gates=CSIVolumeGroupSnapshot=true.
    By default the feature gate is disabled (#​1194, @​yati1998)
  • The validation webhook was deprecated in v8.0.0 and it is now removed.
    The validation webhook would prevent creating multiple default volume snapshot classes and multiple default volume group snapshot classes for the same CSI driver. With the removal of the validation webhook, an error will still be raised when dynamically provisioning a VolumeSnapshot or VolumeGroupSnapshot when multiple default volume snapshot classes or multiple default volume group snapshot classes for the same CSI driver exist. (#​1186, @​yati1998)
  • Use v1.11.0 version of CSI spec (#​1209, @​yati1998)

Full Changelog

https://github.com/kubernetes-csi/external-snapshotter/blob/v8.2.0/CHANGELOG/CHANGELOG-8.2.md

v8.0.0

Compare Source

Overall Status

Volume snapshotting has been a GA feature since Kubernetes v1.20.

Supported CSI Spec Versions

1.0-1.9

Minimum Kubernetes version

1.25

Recommended Minimum Kubernetes version

1.25

Container

docker pull registry.k8s.io/sig-storage/snapshot-controller:v8.0.0
docker pull registry.k8s.io/sig-storage/csi-snapshotter:v8.0.0
docker pull registry.k8s.io/sig-storage/snapshot-validation-webhook:v8.0.0

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

  • The validating logic for VolumeSnapshots, VolumeSnapshotContents, VolumeGroupSnapshots, and
    VolumeGroupSnapshotContents has been replaced by CEL validation rules. The validating webhook
    is now only being used for VolumeSnapshotClasses and VolumeGroupSnapshotClasses to ensure
    that there's at most one class per CSI Driver. The validation webhook is deprecated and will be removed in the next release. (#​1091, @​leonardoce)

Changes by Kind

API Change

Feature

  • Adds support for ListSnapshots secrets (#​252, @​bells17)
  • Adds validation rules into CRDs. Minimum required Kubernetes version is 1.25 for these validation rules. (#​1073, @​cici37)
  • Link the snapshotted PVCs and the corresponding PVs in VolumeGroupSnapshot and VolumeGroupSnapshotContent to make restoring data easier. (#​1069, @​leonardoce)

Full Changelog

https://github.com/kubernetes-csi/external-snapshotter/blob/v8.0.0/CHANGELOG/CHANGELOG-8.0.md

openshift/velero (github.com/openshift/velero)

v1.2.0

Compare Source

v1.1.0

Compare Source

yaml/go-yaml (go.yaml.in/yaml/v2)

v3.0.4

Compare Source

v3.0.3

Compare Source

v3.0.2

Compare Source

v3.0.1

Compare Source

v3.0.0

Compare Source

v2.4.4

Compare Source

v2.4.3

Compare Source

gomodules/jsonpatch (gomodules.xyz/jsonpatch/v2)

v3.0.1

Compare Source

This release uses our forked gomodules/orderedmap library. Our forked version has 2 major changes:

  • Uses *OrderedMap instead of OrderedMap inside nested orderedmaps.
  • I ported unstructured helpers from Kubernetes to work with orderedmaps.

v3.0.0

Compare Source

This release uses iancoleman/orderedmap to generate predictable patch. This is very useful if the generated patch is checked into a VCS like git.

evanphx/json-patch (gopkg.in/evanphx/json-patch.v4)

v5.9.11

Compare Source

What's Changed

Full Changelog: evanphx/json-patch@v5.9.10...v5.9.11

v5.9.10

Compare Source

What's Changed

New Contributors

Full Changelog: evanphx/json-patch@v5.9.0...v5.9.10

v5.9.0

Compare Source

What's Changed

Full Changelog: evanphx/json-patch@v5.8.1...v5.9.0

v5.8.1: Fix API breakage

Compare Source

This PR fixes Operation containing a reference to internal/json and breaking the ability to manually compose one. This restores that ability using a type alias.

Full Changelog: evanphx/json-patch@v5.8.0...v5.8.1

v5.8.0: Blargh Phixs and Empathyprovements

Compare Source

This release fixes a few stray panics, addresses large number accuracy, and improves performance!

What's Changed

Full Changelog: evanphx/json-patch@v5.7.0...v5.8.0

v5.7.0: The 2023 Release

Compare Source

What's Changed

New Contributors

Full Changelog: evanphx/json-patch@v5.6.0...v5.7.0

v5.6.0: Bug fixes

Compare Source

What's Changed

New Contributors

Full Changelog: evanphx/json-patch@v5.5.0...v5.6.0

v5.5.0: Better null handling

Compare Source

This incorporates a few fixes related to how nulls are handles in array's and objects.

v5.3.0: Fix zero sized document crash

Compare Source

This fixes a crash bug where submitted an empty slice as the document would panic.

v5.2.0

Compare Source

v5.1.0

Compare Source

v5.0.0: Proper Go modules release

Compare Source

This release has a proper /v5 directory, unlike the previous releases that did not have a /v4 dir. Thanks to @​BenTheElder for getting this sorted out!

v4.13.0

Compare Source

Remove github.com/pkg/errors dependency


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@red-hat-konflux red-hat-konflux bot added area/ci-tooling ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Mar 17, 2026
@red-hat-konflux
Copy link
Copy Markdown
Contributor Author

red-hat-konflux bot commented Mar 17, 2026

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -t ./...
go: downloading sigs.k8s.io/controller-runtime v0.20.4
go: downloading k8s.io/apimachinery v0.34.2
go: downloading k8s.io/api v0.34.2
go: downloading github.com/openshift/velero v1.2.0
go: downloading k8s.io/client-go v0.34.2
go: downloading k8s.io/apiextensions-apiserver v0.34.2
go: downloading k8s.io/utils v0.0.0-20250604170112-4c0f3b243397
go: downloading gopkg.in/evanphx/json-patch.v4 v4.12.0
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.0
go: downloading sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8
go: downloading k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b
go: downloading github.com/prometheus/client_golang v1.22.0
go: downloading go.yaml.in/yaml/v2 v2.4.2
go: downloading github.com/prometheus/common v0.65.0
go: downloading google.golang.org/protobuf v1.36.7
go: downloading github.com/spf13/pflag v1.0.7
go: downloading google.golang.org/grpc v1.72.1
go: downloading github.com/kopia/kopia v0.10.7
go: downloading github.com/spf13/cobra v1.9.1
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20250303144028-a0af3efb3deb
go: github.com/openshift/hypershift-oadp-plugin/pkg/common imports
	github.com/vmware-tanzu/velero/pkg/apis/velero/v2alpha1: cannot find module providing package github.com/vmware-tanzu/velero/pkg/apis/velero/v2alpha1

@coderabbitai
Copy link
Copy Markdown

coderabbitai bot commented Mar 17, 2026

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: a003d80c-e112-424f-846d-dda3b4adb600

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

  • 🔍 Trigger review
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/oadp-1.5/major-non-k8s-go-dependencies

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci openshift-ci bot requested review from kaovilai and sjenning March 17, 2026 20:43
@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Mar 17, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign bryan-cox for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Mar 17, 2026

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux red-hat-konflux bot force-pushed the konflux/mintmaker/oadp-1.5/major-non-k8s-go-dependencies branch from 672d643 to a070b6e Compare March 31, 2026 16:39
@openshift-ci
Copy link
Copy Markdown

openshift-ci bot commented Mar 31, 2026

@red-hat-konflux[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/verify a070b6e link true /test verify
ci/prow/unit a070b6e link true /test unit
ci/prow/build a070b6e link true /test build

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/ci-tooling ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants