Skip to content

chore(deps): update go-openapi packages to v1 - #1229

Open
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/major-go-openapi
Open

chore(deps): update go-openapi packages to v1#1229
red-hat-konflux[bot] wants to merge 1 commit into
mainfrom
konflux/mintmaker/main/major-go-openapi

Conversation

@red-hat-konflux

@red-hat-konflux red-hat-konflux Bot commented Jul 10, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/go-openapi/jsonpointer v0.23.1 → v1.0.0 age confidence
github.com/go-openapi/jsonreference v0.21.6 → v1.0.1 age confidence

Release Notes

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v1.0.0

Compare Source

1.0.0 - 2026-07-07

Stable API pledge - no change from v0.24.0

Full Changelog: go-openapi/jsonpointer@v0.24.0...v1.0.0

2 commits in this release.

Documentation
People who contributed to this release

jsonpointer license terms

License

v0.24.0

Compare Source

0.24.0 - 2026-06-29

Full Changelog: go-openapi/jsonpointer@v0.23.2...v0.24.0

17 commits in this release.

Implemented enhancements
  • feat(jsonname): added new json name provider more respectful of go conventions for JSON (#​195) by @​fredbi ...
Refactor
  • refact: refactored the package into multiple specialized sub-packages by @​fredbi ...
  • refact loading, jsonutils, yamlutils utililities by @​fredbi ...
Documentation
Code quality
Testing
Miscellaneous tasks
  • chore: removed most remaining external dependencies by @​fredbi ...
Updates
  • build(deps): bump the go-openapi-dependencies group across 15 directories with 2 updates by @​dependabot[bot] ...
  • build(deps): bump the go-openapi-dependencies group across 15 directories with 2 updates by @​dependabot[bot] ...
Other (technical)
People who contributed to this release

jsonpointer license terms

License

v0.23.2

Compare Source

0.23.2 - 2026-06-26

Full Changelog: go-openapi/jsonpointer@v0.23.1...v0.23.2

13 commits in this release.

Implemented enhancements
  • feat(ci): added shared workflow for bot-pr monitoring by @​fredbi ...
Documentation
Miscellaneous tasks
Updates
People who contributed to this release

jsonpointer license terms

License

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v1.0.1

Compare Source

1.0.1 - 2026-08-25

Full Changelog: go-openapi/jsonreference@v1.0.0...v1.0.1

12 commits in this release.

Fixed bugs
  • fix: keep NormalizeURL's output parseable when dropping a default port by @​fredbi ...
Documentation
Performance
  • perf: replace the duplicate-slash regexp in NormalizeURL with a scan by @​fredbi ...
Miscellaneous tasks
Updates
Other (technical)
People who contributed to this release

jsonreference license terms

License

v1.0.0

Compare Source

1.0.0 - 2026-07-07

Stable API pledge - no change from v0.21.6

Full Changelog: go-openapi/jsonreference@v0.21.6...v1.0.0

10 commits in this release.

Documentation
Miscellaneous tasks
Updates
People who contributed to this release

jsonreference license terms

License

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 10, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 9:31 PM UTC · Completed 9:36 PM UTC
Commit: 58b0710 · View workflow run →

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 10, 2026 •
edited
Loading

Copy link
Copy Markdown

Looks good to me

Previous run

Review of PR #1229 — chore(deps): update go-openapi packages to v1

Verdict: ✅ Approve

Summary

This is a bot-generated (Renovate) dependency version bump updating two indirect go-openapi packages to their stable v1.0.0 releases, with corresponding go.sum hash updates and go mod tidy corrections.

Changes reviewed

Change Assessment
go-openapi/jsonpointer v0.23.1 → v1.0.0 (indirect) ✅ Safe — purely transitive dependency, not imported by any source file in this repo. v1.0.0 is a "stable API pledge" release with no API change from v0.24.0.
go-openapi/jsonreference v0.21.6 → v1.0.0 (indirect) ✅ Safe — same as above; transitive dependency through k8s.io/kube-openapi.
k8s.io/apimachinery promoted from indirect → direct ✅ Correct — exporters/kaexporter/collector.go directly imports k8s.io/apimachinery/pkg/apis/meta/v1. Version unchanged (v0.35.3). This is a go mod tidy correction.
gopkg.in/yaml.v3 // indirect marker removed ✅ Correct — exporters/kaexporter/config.go directly imports gopkg.in/yaml.v3. Version unchanged (v3.0.1). Another go mod tidy correction.
go-openapi/testify/v2 v2.5.1 → v2.6.0 (in go.sum only) ✅ Transitive test dependency of the go-openapi ecosystem; not imported by this repo.

Dimension results

Dimension Result
Correctness No issues — all changes are consistent with the import graph
Security No issues — no code, permissions, or secrets changes
Intent & coherence Mechanical dependency bump; authorization implicit
Style & conventions Mechanical change; early exit, no findings
Documentation currency No documentation impact
Cross-repo contracts No exported APIs affected

No findings above the reporting threshold.

Labels: Trivial dependency version bump with no code changes — minimal review effort needed.

Previous run (2)

Looks good to me

Previous run (3)

Review — approve

Reviewed: go.mod, go.sum (2 files, 10 changed lines)

Summary

Automated dependency update from MintMaker (Renovate) bumping two indirect go-openapi packages to their v1.0.0 stabilization releases:

Package Change Risk
go-openapi/jsonpointer v0.23.1 → v1.0.0 Low — release notes confirm "Stable API pledge, no change from v0.24.0"
go-openapi/jsonreference v0.21.6 → v1.0.0 Low — stabilization release, indirect dep
go-openapi/testify/v2 v2.5.1 → v2.6.0 Low — transitive bump in go.sum only

Both jsonpointer and jsonreference are indirect dependencies consumed via the Kubernetes client libraries (k8s.io/kube-openapi). The codebase does not import them directly. The v1.0.0 releases represent API stabilization milestones with no breaking changes from the preceding v0.24.0/v0.21.x series.

Additional go.mod cleanup (correct)

The PR also includes two go mod tidy corrections that fix pre-existing inaccuracies:

  • k8s.io/apimachinery moved from // indirect to direct — correctly reflects the direct import in exporters/kaexporter/collector.go
  • gopkg.in/yaml.v3 // indirect annotation removed — correctly reflects the direct import in exporters/kaexporter/config.go

These are not new dependencies or version changes; they fix the dependency classification to match actual usage.

Verdict

No correctness, security, or compatibility concerns. The changes are mechanical, low-risk, and improve dependency hygiene. CI checks should confirm compilation and test passage.

Previous run (4)

Review — approve

Verdict: Approve · No blocking findings

Summary

This is an automated dependency update from MintMaker (Renovate) that bumps github.com/go-openapi/jsonpointer from v0.23.1 to v1.0.0. Despite the major version increment, the v1.0.0 release notes explicitly state "Stable API pledge — no change from v0.24.0," so this is a stability declaration rather than a breaking change.

Changes reviewed

File What changed
go.mod go-openapi/jsonpointer v0.23.1 → v1.0.0; k8s.io/apimachinery promoted from indirect to direct; gopkg.in/yaml.v3 indirect annotation removed
go.sum Hash updates for jsonpointer v1.0.0 and transitive go-openapi/testify/v2 v2.5.1 → v2.6.0

Analysis

Correctness ✅

  • jsonpointer is only an indirect dependency — no Go source files in this repo import it. The update flows through k8s.io/kube-openapi and related libraries. Major version bump carries no API risk since upstream declares no changes.
  • The go.mod structural adjustments (k8s.io/apimachinery promoted to direct, gopkg.in/yaml.v3 indirect annotation removed) are correct: both packages are directly imported (kaexporter/collector.go imports k8s.io/apimachinery/pkg/apis/meta/v1, kaexporter/config.go imports gopkg.in/yaml.v3). These are likely go mod tidy side-effects.
  • Transitive bump of go-openapi/testify/v2 v2.5.1 → v2.6.0 is a minor version update with no breaking API expectations.

Security ✅

  • Updating to a newer, stable release is a positive signal. No new dependencies introduced.

Intent & coherence ✅

  • PR title accurately describes the primary change. The go mod tidy side-effects are benign and expected.

Style/conventions ✅

  • Standard Go module files. Commit message follows conventional commits format.

Documentation ✅

  • No documentation updates needed for a transitive dependency bump.

Cross-repo contracts ✅

  • No exported API or schema changes. This repo's consumers are unaffected.
Previous run (5)

Review

Verdict: approve

Summary

Automated dependency update from MintMaker (Renovate) bumping go-openapi/jsonreference from v0.21.6 to v1.0.0 and transitively go-openapi/jsonpointer from v0.23.1 to v1.0.0. Both v1.0.0 releases are explicit "stable API pledge" releases with no code changes from their prior versions — this is a semver graduation, not a functional change.

Changes reviewed

File Assessment
go.mod ✅ Version bumps for jsonpointer and jsonreference are correct. k8s.io/apimachinery correctly moved from indirect to direct — the project directly imports it in exporters/kaexporter/collector.go.
go.sum ✅ Hash updates for jsonpointer, jsonreference, and a transitive bump of go-openapi/testify/v2 v2.5.1 → v2.6.0. All consistent with the dependency graph.

Verification

  • API compatibility: Confirmed — upstream release notes for both jsonreference and jsonpointer v1.0.0 state no API changes from their prior versions.
  • Source impact: No Go source files import go-openapi packages directly; these are all transitive dependencies via k8s.io/kube-openapi.
  • k8s.io/apimachinery reclassification: Verified that exporters/kaexporter/collector.go directly imports k8s.io/apimachinery/pkg/apis/meta/v1, so the move from indirect to direct is correct (likely a go mod tidy correction).
  • No security concerns: Standard version bumps from well-known, trusted upstream packages.
Previous run (6)

Review

Outcome: Approve

Summary

This is a Renovate-automated dependency update that bumps two indirect go-openapi packages to their v1.0.0 stable releases and corrects the go.mod classification of k8s.io/apimachinery.

Changes reviewed

Package Change Risk
github.com/go-openapi/jsonpointer v0.23.1 → v1.0.0 Low — indirect dep; v1.0.0 is a "stable API pledge" with no breaking changes from v0.24.0
github.com/go-openapi/jsonreference v0.21.6 → v1.0.0 Low — indirect dep; same stability graduation pattern
github.com/go-openapi/testify/v2 v2.5.1 → v2.6.0 Negligible — transitive test dep, minor bump
k8s.io/apimachinery indirect → direct (same v0.35.3) None — corrects classification; package is directly imported in exporters/kaexporter/collector.go

Dimension results

  • Correctness: No concerns. Under Go module semantics, v0 → v1 shares the same import path (no /v2 suffix needed). Both packages are indirect — no .go file in this repo imports them directly. The k8s.io/apimachinery promotion from indirect to direct is correct since it is directly imported.
  • Security: No concerns. No source code, workflows, permission manifests, or secrets are touched.
  • Intent & coherence: Mechanical dependency update by Renovate bot. Authorization is implicit.
  • Style & conventions: Early exit — mechanical change follows existing patterns.
  • Documentation currency: No documentation impact.
  • Cross-repo contracts: No exported interfaces or API surfaces are modified.

No findings above the reporting threshold. Safe to merge.

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review fullsend-ai-review Bot added the ready-for-merge All reviewers approved — ready to merge label Jul 10, 2026
@red-hat-konflux red-hat-konflux Bot changed the title Update go-openapi packages to v1 Update go-openapi packages to v1 - autoclosed Jul 12, 2026
@red-hat-konflux red-hat-konflux Bot closed this Jul 12, 2026
@red-hat-konflux
red-hat-konflux Bot deleted the konflux/mintmaker/main/major-go-openapi branch July 12, 2026 17:28
@red-hat-konflux red-hat-konflux Bot changed the title Update go-openapi packages to v1 - autoclosed Update go-openapi packages to v1 Jul 12, 2026
@red-hat-konflux red-hat-konflux Bot reopened this Jul 12, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch 2 times, most recently from 1749de3 to 8b72bc4 Compare July 12, 2026 21:27
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 12, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 9:28 PM UTC · Completed 9:32 PM UTC
Commit: 58b0710 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge and removed ready-for-merge All reviewers approved — ready to merge labels Jul 12, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch from 8b72bc4 to dcf1e2c Compare July 16, 2026 20:18
@red-hat-konflux red-hat-konflux Bot changed the title Update go-openapi packages to v1 chore(deps): update go-openapi packages to v1 Jul 16, 2026
@red-hat-konflux

red-hat-konflux Bot commented Jul 16, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
github.com/prometheus/client_model v0.6.2 -> v0.6.2

@fullsend-ai-review

fullsend-ai-review Bot commented Jul 16, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 8:19 PM UTC · Completed 8:23 PM UTC
Commit: 58b0710 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge and removed ready-for-merge All reviewers approved — ready to merge labels Jul 16, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch from dcf1e2c to 3772397 Compare July 16, 2026 21:52
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 16, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 9:53 PM UTC · Completed 9:57 PM UTC
Commit: 58b0710 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge and removed ready-for-merge All reviewers approved — ready to merge labels Jul 16, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch from 3772397 to 0480e6c Compare July 19, 2026 21:15
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 19, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 9:16 PM UTC · Completed 9:24 PM UTC
Commit: 58b0710 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge and removed ready-for-merge All reviewers approved — ready to merge labels Jul 19, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch from 0480e6c to 412dcd5 Compare July 20, 2026 03:20
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 20, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 3:21 AM UTC · Completed 3:28 AM UTC
Commit: 58b0710 · View workflow run →

fullsend-ai-review[bot]

This comment was marked as outdated.

Sign in to view

@fullsend-ai-review fullsend-ai-review Bot added ready-for-merge All reviewers approved — ready to merge Review effort 1/5 and removed ready-for-merge All reviewers approved — ready to merge labels Jul 20, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch from 412dcd5 to a9fba92 Compare July 24, 2026 06:02
@fullsend-ai-review

fullsend-ai-review Bot commented Jul 24, 2026 •
edited
Loading

Copy link
Copy Markdown

🤖 Finished Review · ✅ Success · Started 6:03 AM UTC · Completed 6:10 AM UTC
Commit: 58b0710 · View workflow run →

@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch 3 times, most recently from ee7e72a to f02689e Compare August 3, 2026 16:51
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go-openapi packages to v1 chore(deps): update module github.com/go-openapi/jsonpointer to v1 Aug 3, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch 2 times, most recently from ab33838 to 284ce11 Compare August 4, 2026 01:51
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/go-openapi/jsonpointer to v1 chore(deps): update go-openapi packages to v1 Aug 4, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch from 284ce11 to 43fdaf8 Compare August 7, 2026 21:46
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go-openapi packages to v1 chore(deps): update module github.com/go-openapi/jsonpointer to v1 Aug 7, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch from 43fdaf8 to 0924a37 Compare August 8, 2026 01:51
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/go-openapi/jsonpointer to v1 chore(deps): update go-openapi packages to v1 Aug 8, 2026
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update go-openapi packages to v1 chore(deps): update module github.com/go-openapi/jsonpointer to v1 Aug 9, 2026
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch 2 times, most recently from db69bce to e321912 Compare August 10, 2026 05:27
@red-hat-konflux red-hat-konflux Bot changed the title chore(deps): update module github.com/go-openapi/jsonpointer to v1 chore(deps): update go-openapi packages to v1 Aug 10, 2026
@red-hat-konflux
chore(deps): update go-openapi packages to v1
ae364ce 
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
@red-hat-konflux
red-hat-konflux Bot force-pushed the konflux/mintmaker/main/major-go-openapi branch from e321912 to ae364ce Compare August 29, 2026 01:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

1 more reviewer
@fullsend-ai-review fullsend-ai-review[bot] fullsend-ai-review[bot] approved these changes
Reviewers whose approvals may not affect merge requirements

At least 2 approving reviews are required to merge this pull request.

Assignees

No one assigned

Labels

ready-for-merge All reviewers approved — ready to merge Review effort 1/5

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants