Skip to content

[deps] Dependency update: replicated - #791

Open
replicated-software-factory[bot] wants to merge 1 commit into
mainfrom
deps/replicated-updates-go
Open

replicated-software-factory[bot] wants to merge 1 commit into
mainfrom
deps/replicated-updates-go

Conversation

@replicated-software-factory

Copy link
Copy Markdown
Contributor

Summary

Broad Go dependency refresh on top of latest main (20cd2ca).

The previous cycle on this branch was fully superseded: after rebasing onto latest main, every prior commit was already upstream via #784–#786, so this PR contains a fresh update.

Direct changes:

  • github.com/go-git/go-git/v5 v5.19.2 → v5.19.3

Plus 64 indirect bumps, including:

  • AWS SDK v2 family (sts, s3, sns, sqs, dynamodb, ec2, iam, sso, ssooidc, signin, config, credentials, smithy-go, ...)
  • OpenTelemetry v1.46.0 → v1.47.0 and contrib instrumentation v0.71.0 → v0.72.0
  • google.golang.org/api v0.300.0 → v0.301.0, genproto refresh
  • fxamacker/cbor/v2 v2.9.4 → v2.9.6
  • shopspring/decimal v1.4.0 → v1.5.0
  • hashicorp/go-getter v1.8.9 → v1.8.10
  • spiffe/go-spiffe/v2 v2.8.2 → v2.9.0
  • pierrec/lz4/v4 v4.1.31 → v4.1.33
  • mattn/go-colorable, go-billy/v5 v5.9.1 → v5.9.2, Azure SDK azcore/internal, and more

Holds (carried over from #786)

  • k8s.io/kube-openapi held at v0.0.0-20260721132016-d427ff9ee9ad: the latest master commits require go ≥ 1.27.0 and this repo pins go 1.26.5.
  • github.com/gobwas/glob held at v0.2.3: v1.0.0 removes the glob.Glob API used by troubleshoot pkg/redact.

Verification

  • go mod tidy idempotent (matches the CI lint check)
  • gofmt -d -s . clean
  • go build ./... pass
  • go vet ./... pass
  • go test ./... (unit suite; pact/integration excluded per make test-unit): 15 packages ok, 0 failures

#786 feedback was reviewed before this update: Doomer reported no issues, the PR was approved, and no review comments are outstanding. The only recurring red CI on main is the "Dependabot Updates" workflow (Dependabot config related, not a Go dependency failure).

@doomer-ai

doomer-ai Bot commented Oct 7, 2026 •

Copy link
Copy Markdown

Doomer review
Review completed.

Doomer review: View on doomer.ai

Automatic approval: Enabled

Broad patch/minor refresh on top of latest main. Direct bump:
go-git/v5 v5.19.2 => v5.19.3, plus 64 indirect updates (AWS SDK
v2 family, OpenTelemetry 1.46 => 1.47, genproto, fxamacker/cbor,
shopspring/decimal 1.4 => 1.5, hashicorp/go-getter, spiffe/v2).

k8s.io/kube-openapi is held at v0.0.0-20260721132016-d427ff9ee9ad
because the latest master commits require go >= 1.27.0 and this
repo pins go 1.26.5. gobwas/glob is held at v0.2.3 because v1.0.0
removes the glob.Glob API used by troubleshoot pkg/redact.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants