fix(deps): update go dependencies - #494
Open
red-hat-konflux[bot] wants to merge 1 commit into
Open
red-hat-konflux[bot] wants to merge 1 commit into
red-hat-konflux[bot] wants to merge 1 commit into
Conversation
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
red-hat-konflux
Bot
changed the title
auto-merge was automatically disabled
September 15, 2026 00:52
Pull request was closed
red-hat-konflux
Bot
changed the title
Contributor
Author
ℹ️ Artifact update noticeFile name: dev-proxy/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: proxy/executor/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.25.2→v0.25.3v0.20.0→v0.23.2v1.4.5→v1.4.7v2.26.1→v2.27.0v1.2.0→v1.6.1v2.11.3→v2.11.4v0.25.3→v0.25.4v1.6.3→v1.6.5v3.18.0→v3.21.0v1.7.8→v1.7.9v0.0.19→v0.0.20v2.1.1→v2.8.0v1.0.4→v1.1.0v2.9.2→v2.9.4v5.3.0→v5.3.2v4.1.4→v4.1.5v1.4.3→v1.4.4v1.10.0→v1.10.1v0.28.1→v0.30.0v0.1.9→v0.1.10v0.3.16→v0.3.22v2.22.0→v2.24.1v2.29.0→v2.30.0v1.5.0→v1.6.0v5.9.2→v5.11.0v1.18.6→v1.20.0v2.3.0→v2.4.0v0.0.22→v0.0.24v1.1.72→v1.1.73v4.1.27→v4.1.30v0.12.0→v0.15.0v1.23.2→v1.24.1v0.6.2→v0.6.3v0.70.1→v0.71.0v0.68.0→v0.71.0v0.21.1→v0.22.0v0.20.1→v0.22.0v0.59.1→v0.62.0v1.9.4→v1.10.2v1.10.3→v1.11.1v0.25.0→v0.26.0v0.2.1→v0.2.3v1.8.2→v1.8.6v1.4.3→v1.5.0v0.69.0→v0.71.0v0.69.0→v0.71.0v0.69.0→v0.71.0v0.69.0→v0.71.0v1.44.0→v1.46.0v1.44.0→v1.46.0v1.44.0→v1.46.0v1.44.0→v1.46.0v1.44.0→v1.46.0v0.20.0→v0.22.0v0.20.0→v0.22.0v1.44.0→v1.46.0v1.44.0→v1.46.0v1.44.0→v1.46.0v1.44.0→v1.46.0v1.44.0→v1.46.0v0.66.0→v0.68.0v0.20.0→v0.22.0v1.44.0→v1.46.0v1.44.0→v1.46.0v0.20.0→v0.22.0v1.44.0→v1.46.0v1.44.0→v1.46.0v0.20.0→v0.22.0v1.44.0→v1.46.0v1.44.0→v1.46.0v1.10.0→v1.11.0v0.81.1→v0.91.0v3.0.4→v3.0.5v0.53.0→v0.57.0v0.36.0→v0.41.0v0.58.0→v0.59.0v0.56.0→v0.59.0v0.36.0→v0.37.0v0.21.0→v0.23.0v0.47.0→v0.48.0v0.46.0→v0.48.0v0.44.0→v0.46.0v0.41.0→v0.42.0v0.38.0→v0.42.0v0.15.0→v0.16.0v0.45.0→v0.50.0v0.285.0→v0.298.0v1.81.1→v1.83.2v1.36.11→v1.36.12Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
cel-expr/cel-spec (cel.dev/expr)
v0.25.3Compare Source
What's Changed
New Contributors
Full Changelog: cel-expr/cel-spec@v0.25.2...v0.25.3
googleapis/google-cloud-go (cloud.google.com/go/auth)
v0.23.0Compare Source
v0.22.0Compare Source
bigtable:
bigquery:
datastore:
dlp:
which is now out of beta.
firestore:
iam:
profiler:
pubsub:
redis:
spanner:
speech:
storage:
v0.21.0Compare Source
bigquery:
firestore:
whose Exists method returns false. DocumentRef.Get and Transaction.Get
return the non-nil DocumentSnapshot in addition to a NotFound error.
DocumentRef.GetAll and Transaction.GetAll return a non-nil
DocumentSnapshot instead of nil.
DocumentIterator.
notification of updates. See https://cloud.google.com/firestore/docs/query-data/listen.
spanner:
CommitTimestamp, which supports inserting the commit timestamp of atransaction into a column.
DeRuina/timberjack (github.com/DeRuina/timberjack)
v1.4.7Compare Source
Bug Fixes
v1.4.6Compare Source
Performance
alecthomas/chroma (github.com/alecthomas/chroma/v2)
v2.27.0Compare Source
Changelog
a6d00fefix(html): make mode class output opt-in via WithModeClassesf52d015chore: some house-keepingf08a9abchore: add fmt + test to BUILD.bit6da8f88fix(yaml): comments can be key-values (#1289)67785a4chore(deps): update all non-major dependencies (#1285)d9dd73fAdd templ XML lexer (#1283)effffdbchore(deps): update all non-major dependencies (#1280)03236a4support for PostScript font files (#1282)e10d532Fix YAML slash comments with colons (#1278)buger/jsonparser (github.com/buger/jsonparser)
v1.6.1Compare Source
Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)
Performance — gjson-style fast-skip in hot loops
Ported gjson's
>'\\'fast-skip trick to three inner loops in parser.go:stringEndConfigtail,blockEndConfig, andsearchKeysConfig. The trickuses a single unsigned comparison (
byte > 0x5C) to skip all non-structuralbytes in bulk, reducing per-byte branch overhead.
Zero allocations maintained on all paths.
Benchmarks — now includes gjson and sonic
Added tidwall/gjson (15.5k⭐, path-based
parser like jsonparser) and bytedance/sonic
(9.6k⭐, SIMD-accelerated deserializer) to the benchmark suite.
Final leaderboard (large payload):
jsonparser is the fastest across all payload sizes and the only zero-allocation parser.
v1.6.0Compare Source
Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)
New API —
AppendAppend(data, value, keys...)— appendsvalueto the end of the JSON array addressed bykeys. Addresses the top-level value whenkeysis empty; auto-vivifies a missing keyed path as a single-element array. ReturnsMalformedArrayErrorwhen the addressed value is not an array. Traced to SYS-REQ-009, SYS-REQ-110.Known issues — all resolved (zero open)
ParseInt("-")now returns an error instead of(0, nil). One-line sign-only guard inbytes.go:parseInt(after stripping the sign byte, an empty remainder returns(0, false, false)).Setwith an array-index path component under an object parent (and vice-versa) now auto-coerces the container type instead of emitting malformed JSON. (Disposition already set tofixedin v1.5.x.)Seton a top-level array-index beyond length now appends at the array's end (matching nested-array behavior under SYS-REQ-110) instead of returningKeyPathNotFoundError. Also cleans up trailing commas in malformed arrays.Zero open known issues. Every previously shipped known issue is now resolved and covered by ReqProof L3 Assurance.
v1.5.1Compare Source
Covered by ReqProof — L3 Assurance (123 requirements, 0 errors, 0 warnings)
Performance — 6.1x large-payload speedup
stringEndConfigwas scanning the ENTIRE remaining parent document for backslashes (bytes.IndexByte(data, '\\')) instead of just the string body. On a 24kb large payload this walked tens of KB per string. Now bounded todata[:firstQuote](the string body only). 128µs → 22µs (5.8x).bytes.IndexBytecalls (quote + backslash) with a single inline 8-byte SWAR (SIMD-Within-A-Register) loop that checks for both characters simultaneously. 22µs → 21µs (additional 8%).encoding/jsonbenchmark no longer uses ffjson-generated methods (the #126 ffjson measurement bug was fixed in v1.3.1).Updated benchmark results (Apple M4 Max, Go 1.26.3, median of 5 runs)
All jsonparser results: 0 bytes allocated, 0 allocations.
v1.5.0Compare Source
Covered by ReqProof — L3 Assurance
v1.5.0 extends the formal-verification coverage to 123 requirements (0 errors, 0 warnings) across all new APIs. Every new function is traced via source annotations, tested with MC/DC witnesses, and covered by the structure-aware fuzzer.
Config struct — opt-in lenient parsing (#160, #115)
AllowSingleQuotes— accept'key':'value'alongside"key":"value"(JavaScript/Python-style). The same escape rules apply inside single-quoted strings.AllowUnknownEscapes— pass through unknown escape sequences (\`,\x) literally instead of erroring.Get,GetString,Set,Delete,ArrayEach,ObjectEach.Streaming ReaderParser (#132, #257)
io.Reader— no need to load the entire document into memory.Get,GetString,ArrayEach.Name aliases (#66)
Canonical
EachXxxpattern added alongside existingXxxEachnames:EachArrayArrayEachEachObjectObjectEachEachArrayErrArrayEachErrEachArrayWildcardArrayEachWildcardEachKey,EachKeyErr,EachKeyWildcardalready matched the pattern. All old names remain functional.Proof
v1.4.0Compare Source
Covered by ReqProof — L3 Assurance
v1.4.0 adds 9 new backward-compatible APIs, each traced to a formal requirement and verified with MC/DC coverage. 121 requirements, 0 errors, 0 warnings.
New APIs
Iteration with error/break control — resolves #53, #129, #176, #230, #255, #262
ArrayEachErr— callback returnserrorto stop early (io.EOF= graceful stop)EachKeyErr— same pattern for EachKeySafe string handling — resolves #144, #158, #218, #270
Escape(s string) []byte— RFC 8259 string escaping (inverse ofUnescape)SetString(data, val, keys...)— Set with auto-quoted valueContainer accessors — resolves #175, #261, #271
GetArrayLen/GetObjectLen— count elements without a callbackGetUint64— uint64 variant ofGetIntDelete found signal — resolves #229
DeleteFound(data, keys...) ([]byte, bool)— returns whether the key was foundWildcard paths — resolves #112
EachKeyWildcard,ArrayEachWildcard,SetWildcard—[*]path componentJSONPath compiled paths — resolves #234, #251
ParsePath("$.users[0].name")→[]stringpathCompilePath+CompiledPath— pre-compile and reuse with Get/Set/DeleteFixes
Proof
v1.3.1Compare Source
Covered by ReqProof — L3 Assurance
v1.3.1 fixes 3 bugs that escaped the initial proof review, with new proof gates to prevent recurrence.
Bug fixes
SetandDeleteno longer corrupt the caller's input[]bytewhen the slice has spare capacity. All mutation paths now allocate a fresh buffer.EachKeynow descends into terminal array-index paths consistently withGet.Proof strengthening
no_input_mutation+assertInputUnchangedgateapi_consistency+ differential gatev1.3.0Compare Source
Formally verified by ReqProof
jsonparser v1.3.0 is the first Go library proven to L3 assurance by ReqProof, a git-native requirements-engineering and formal-verification platform. The entire codebase is now covered by:
encoding/jsondifferential harnesses.Configuration
📅 Schedule: (UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.