Skip to content

chore(deps): consolidate 3 Go patch dependency updates - #643

Closed
platex-rehor-bot wants to merge 1 commit into
RedHatInsights:masterfrom
platex-rehor-bot:chore/consolidate-go-deps-patch-20260910
Closed

platex-rehor-bot wants to merge 1 commit into
RedHatInsights:masterfrom
platex-rehor-bot:chore/consolidate-go-deps-patch-20260910

Conversation

@platex-rehor-bot

Copy link
Copy Markdown
Contributor

Summary

Consolidates 3 Go patch-level dependency updates from red-hat-konflux[bot] into a single PR:

Skipped PRs (not included in this batch)

PR Reason
#641 golang.org/x/sys v0.47.0 → v0.48.0 — minor bump, separate PR
#633 aws-sdk-go-v2 monorepo v1.45.1 → v1.46.0 — minor bump, separate PR
#629 goldmark v1 → v2 — invalid, would remove CVE-2026-5160 mitigation (replace targets v1, no transitive dep on v2)
#635 Go toolchain v1.27.0 → v1.27.1 — only modifies .github/workflows/, out of scope
#636 json-yaml-validate action v5.0.1 — only modifies .github/workflows/, out of scope

Test plan

  • CI passes (go build, go test, linting)
  • go.mod and go.sum are consistent
  • CVE-2026-5160 replace directive still present and updated

🤖 Generated with Claude Code

Updates:
- github.com/google/pprof: digest → 6331bc6 (RedHatInsights#642)
- github.com/prometheus/client_model: v0.6.2 → v0.6.3 (RedHatInsights#632)
- github.com/yuin/goldmark: v1.8.5 → v1.8.6 (replace directive, RedHatInsights#637)

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@platex-rehor-bot
platex-rehor-bot deleted the chore/consolidate-go-deps-patch-20260910 branch September 10, 2026 11:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant