Skip to content

Bump the other-go-modules group across 1 directory with 3 updates#261

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/other-go-modules-fc50529d77
Open

Bump the other-go-modules group across 1 directory with 3 updates#261
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/other-go-modules-fc50529d77

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 2, 2026 •
edited
Loading

Bumps the other-go-modules group with 3 updates in the / directory: github.com/BurntSushi/toml, github.com/samber/lo and helm.sh/helm/v3.

Updates github.com/BurntSushi/toml from 1.5.0 to 1.6.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.6.0

TOML 1.1 is now enabled by default. The TOML changelog has an overview of changes: https://github.com/toml-lang/toml/blob/main/CHANGELOG.md

Also two small fixes:

  • Encode large floats as exponent syntax so that round-tripping things like 5e+22 is correct.

  • Using duplicate array keys would not give an error:

    arr = [1]
arr = [2]

    This will now correctly give a "Key 'arr' has already been defined" error.

Commits
  • 5253492 Enable TOML 1.1 by default (#457)
  • e954445 Reject duplicate arrays (#455)
  • 6b16cbd Update toml-test test cases from upstream (#456)
  • 011fa2b Ensure constant format strings in wf calls
  • 4b439bf Remove itemNil
  • a473c12 Add test for out of range float64
  • b535ff8 Add some boring tests for lex.go
  • 6011ef0 Remove unreachable condition in lexTableNameStart
  • c8ca9e6 Remove unreachable condition
  • 1121f81 Make tomlv read from stdin
  • Additional commits viewable in compare view

Updates github.com/samber/lo from 1.52.0 to 1.53.0

Release notes

Sourced from github.com/samber/lo's releases.

v1.53.0

Announcing the latest release of lo with lots of good gifts! 🎁

🌊 First, a big thanks to @​d-enk for making lots of performance improvements in the recent weeks.

🧪 Second, this release introduces a new simd experimental package. If you run on an amd64 architecture and a recent CPU, you can perform very fast operations thanks to SIMD CPU instructions. -> Documentation: https://lo.samber.dev/docs/experimental/simd

💥 Third, this version adds *Err variants of many lo helpers (like MapErr, FlatMapErr, ReduceErr, etc.) whose callbacks can return an error and short-circuit execution when one occurs.

[!NOTE] The simd sub-package is considered not stable. We might break the initial API based on developers' feedback in the coming months.

Features & improvements

Deprecation

Performance improvements

... (truncated)

Commits

Updates helm.sh/helm/v3 from 3.18.4 to 3.20.2

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.20.2

v3.20.2

Helm v3.20.2 is a security patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Security fixes

  • GHSA-hr2v-4r36-88hr Helm Chart extraction output directory collapse via Chart.yaml name dot-segment

Installation and Upgrading

Download Helm v3.20.2. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026
  • 4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026

Changelog

  • fix: Chart dot-name path bug 8fb76d6ab555577e98e23b7500009537a471feee (George Jenkins)
  • fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 3a8927e275c50cecde273872dad2a5576bd46375 (Terry Howe)

Helm v3.20.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

... (truncated)

Commits
  • 8fb76d6 fix: Chart dot-name path bug
  • 3a8927e fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow
  • a2369ca chore(deps): bump the k8s-io group with 7 updates
  • 90e1056 add image index test
  • 911f2e9 fix pulling charts from OCI indices
  • 76dad33 Remove refactorring changes from coalesce_test.go
  • 45c12f7 Fix import
  • 26c6f19 Update pkg/chart/common/util/coalesce_test.go
  • 09f5129 Fix lint warning
  • 417deb2 Preserve nil values in chart already
  • Additional commits viewable in compare view

Summary by CodeRabbit

  • Chores
    • Updated Go language version to 1.25.0
    • Updated multiple primary dependencies including Helm and Kubernetes modules
    • Refreshed indirect dependencies across the project for consistency with upstream library updates

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Mar 2, 2026
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Mar 2, 2026

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Mar 2, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign nocturnalastro for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@dependabot dependabot Bot force-pushed the dependabot/go_modules/other-go-modules-fc50529d77 branch 2 times, most recently from e4ca626 to 5a97fb8 Compare March 11, 2026 17:54
@dependabot dependabot Bot force-pushed the dependabot/go_modules/other-go-modules-fc50529d77 branch from 5a97fb8 to fcbdf8d Compare March 20, 2026 17:54
@dependabot
Bump the other-go-modules group across 1 directory with 3 updates
ff167cc 
Bumps the other-go-modules group with 3 updates in the / directory: [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml), [github.com/samber/lo](https://github.com/samber/lo) and [helm.sh/helm/v3](https://github.com/helm/helm).


Updates `github.com/BurntSushi/toml` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/BurntSushi/toml/releases)
- [Commits](BurntSushi/toml@v1.5.0...v1.6.0)

Updates `github.com/samber/lo` from 1.52.0 to 1.53.0
- [Release notes](https://github.com/samber/lo/releases)
- [Commits](samber/lo@v1.52.0...v1.53.0)

Updates `helm.sh/helm/v3` from 3.18.4 to 3.20.2
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.18.4...v3.20.2)

---
updated-dependencies:
- dependency-name: github.com/BurntSushi/toml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-go-modules
- dependency-name: github.com/samber/lo
  dependency-version: 1.53.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-go-modules
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: other-go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/other-go-modules-fc50529d77 branch from fcbdf8d to ff167cc Compare May 12, 2026 22:31
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented May 12, 2026 •
edited
Loading

Walkthrough

This PR updates the Go version from 1.24.0 to 1.25.0 and refreshes direct dependencies including samber/lo, spf13/cobra, helm.sh/helm/v3, and multiple Kubernetes modules, along with a broad set of indirect transitive dependencies.

Changes

Dependency Version Updates

Layer / File(s) Summary
Go version and direct dependencies
go.mod (lines 3–21)		 Go version updated to 1.25.0. Direct dependencies upgraded: samber/lo (v1.52.0→v1.53.0), spf13/cobra (v1.10.1→v1.10.2), helm.sh/helm/v3 (v3.18.4→v3.20.2), and Kubernetes modules (k8s.io/api, k8s.io/apimachinery, k8s.io/client-go, kubectl) from v0.34.0→v0.35.1.
Indirect dependency upgrades
go.mod (lines 30–93)		 Indirect dependencies refreshed across Kubernetes internals (k8s.io/apiextensions-apiserver, k8s.io/component-base, k8s.io/component-helpers, k8s.io/kube-openapi, sigs.k8s.io/json), Go standard library extensions (golang.org/x/crypto, golang.org/x/net, golang.org/x/oauth2, golang.org/x/sync, golang.org/x/sys, golang.org/x/term, golang.org/x/text, golang.org/x/time), and other libraries (github.com/Masterminds/semver/v3, github.com/cyphar/filepath-securejoin, github.com/go-logr/logr, github.com/spf13/pflag, go.yaml.in/yaml/v2, google.golang.org/protobuf, github.com/santhosh-tekuri/jsonschema/v6).

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 11 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Title check ⚠️ Warning The title mentions updating the other-go-modules group with 3 updates, but the actual changeset includes significantly more than 3 updates—it upgrades Go version, multiple Kubernetes modules, and numerous indirect dependencies. Revise the title to accurately reflect the scope of changes, such as 'Upgrade Go to 1.25.0 and refresh dependencies including Kubernetes and Helm modules' or clarify which specific group the PR targets.
✅ Passed checks (11 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed PR contains only go.mod dependency version updates. No test files are modified and no Ginkgo tests exist in the codebase. Check is not applicable to this PR.
Test Structure And Quality ✅ Passed The custom check is not applicable. This repository does not use Ginkgo testing framework; it uses standard Go testing with testify. PR 261 only updates go.mod dependencies.
Microshift Test Compatibility ✅ Passed This PR only updates Go module dependencies in go.mod and go.sum. No new Ginkgo e2e tests are added. The custom check applies only when new Ginkgo tests are added, so it is not applicable to this PR.
Single Node Openshift (Sno) Test Compatibility ✅ Passed PR only updates go.mod dependencies. No Ginkgo e2e tests added. Repository uses standard Go testing, not Ginkgo. Check not applicable.
Topology-Aware Scheduling Compatibility ✅ Passed PR only updates go.mod dependencies (BurntSushi/toml, samber/lo, helm.sh/helm/v3). No deployment manifests, operator code, or controllers are modified. Check not applicable.
Ote Binary Stdout Contract ✅ Passed This check is not applicable to this PR. The repository produces standalone CLI tools, not OTE test extensions. Only OTE binaries need to comply with the stdout JSON contract.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed PR does not add any new Ginkgo e2e tests. Changes are limited to go.mod dependency updates and vendor directory updates. Existing test files are standard Go unit tests, not Ginkgo tests.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/go_modules/other-go-modules-fc50529d77

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 12, 2026

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/unit ff167cc link true /test unit
ci/prow/verify-deps ff167cc link true /test verify-deps
ci/prow/modtidy ff167cc link true /test modtidy
ci/prow/golint ff167cc link true /test golint

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@imiller0 imiller0 Awaiting requested review from imiller0

@nocturnalastro nocturnalastro Awaiting requested review from nocturnalastro

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants