build(deps): bump the misc-dependencies group across 1 directory with 10 updates#7817
Closed
dependabot[bot] wants to merge 1 commit intomainfrom
Closed
build(deps): bump the misc-dependencies group across 1 directory with 10 updates#7817dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
dependabot
Bot
added
area/ci-tooling
|
Pipeline controller notification For optional jobs, comment This repository is configured in: LGTM mode |
Contributor
Walkthroughgo.mod dependency versions were updated across multiple families: etcd (3.6.7→3.6.8), Google APIs and gRPC, OpenTelemetry (→v1.39.0), kubevirt/CDI APIs, cel/expr, gax/gcloud-related packages, genproto pseudo-versions, and yaml.v3, plus several indirect bumps. No exported APIs changed. Changes
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches
🧪 Generate unit tests (beta)
Comment |
Contributor
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
Contributor
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: dependabot[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
hypershift-jira-solve-ci Bot
pushed a commit
to hypershift-community/hypershift
that referenced
this pull request
Mar 2, 2026
… 10 updates Bumps etcd from 3.6.7 to 3.6.8, google.golang.org/api from 0.258.0 to 0.269.0, gopkg.in/ini.v1 from 1.67.0 to 1.67.1, kubevirt.io/api from 1.7.0 to 1.7.1, kubevirt.io/containerized-data-importer-api from 1.63.1 to 1.64.0. PR: openshift#7817 Co-Authored-By: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
hypershift-jira-solve-ci Bot
pushed a commit
to hypershift-community/hypershift
that referenced
this pull request
Mar 2, 2026
openshift-merge-robot
added
the
needs-rebase
Contributor
|
rebase DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
dependabot
Bot
force-pushed
the
dependabot/go_modules/misc-dependencies-07bbdea3be
branch
from
a0be82f to
c9af7c0
Compare
openshift-merge-robot
removed
the
needs-rebase
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@go.mod`:
- Line 285: Update the go.opentelemetry.io/otel/sdk dependency from v1.39.0 to
v1.40.0 (or later) in go.mod and ensure the related modules
go.opentelemetry.io/otel, go.opentelemetry.io/otel/metric, and
go.opentelemetry.io/otel/trace are aligned to the same v1.40.x release line;
after changing the version entry for go.opentelemetry.io/otel/sdk, refresh
module metadata (e.g., run go get/update and go mod tidy) so go.sum is updated
and the PATH hijacking vulnerability is resolved.
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: 8901b573-c871-467e-b137-4d6eac974221
⛔ Files ignored due to path filters (19)
go.sumis excluded by!**/*.sumvendor/cel.dev/expr/BUILD.bazelis excluded by!**/vendor/**,!vendor/**vendor/cel.dev/expr/MODULE.bazelis excluded by!**/vendor/**,!vendor/**vendor/cel.dev/expr/checked.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/eval.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/explain.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/syntax.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/value.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/CHANGES.mdis excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/credentials/detect.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/credentials/filetypes.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/credentials/internal/gdch/gdch.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/httptransport/httptransport.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/credsfile/credsfile.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/credsfile/filetype.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/credsfile/parse.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/internal.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/jwt/jwt.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/version.gois excluded by!**/vendor/**,!vendor/**
📒 Files selected for processing (1)
go.mod
| go.opentelemetry.io/otel/sdk v1.38.0 // indirect | ||
| go.opentelemetry.io/otel/trace v1.38.0 // indirect | ||
| go.opentelemetry.io/otel/metric v1.39.0 // indirect | ||
| go.opentelemetry.io/otel/sdk v1.39.0 // indirect |
Contributor
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "Checking OSV for go.opentelemetry.io/otel/sdk@1.39.0 ..."
curl -sS https://api.osv.dev/v1/query \
-H 'content-type: application/json' \
-d '{
"package": {"name":"go.opentelemetry.io/otel/sdk","ecosystem":"Go"},
"version":"1.39.0"
}' | python3 <<'PY'
import json,sys
data=json.load(sys.stdin)
print("Vulns found:", len(data.get("vulns", [])))
for v in data.get("vulns", []):
print("-", v.get("id"), "|", v.get("summary","").strip())
for a in v.get("affected", []):
if a.get("package", {}).get("name") == "go.opentelemetry.io/otel/sdk":
for r in a.get("ranges", []):
if r.get("type") == "SEMVER":
print(" SEMVER events:", r.get("events", []))
PY
echo
echo "Current OTel versions in go.mod:"
rg -n 'go\.opentelemetry\.io/otel($|/metric|/sdk|/trace)' go.modRepository: openshift/hypershift
Length of output: 889
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== Current OTel versions in go.mod ==="
rg -n 'go\.opentelemetry\.io/otel' go.mod
echo
echo "=== Full go.mod around line 285 ==="
sed -n '275,295p' go.modRepository: openshift/hypershift
Length of output: 1623
🌐 Web query:
GO-2026-4394 GHSA-9h8m-3fm2-qjrq opentelemetry otel/sdk vulnerability
💡 Result:
GO-2026-4394 / GHSA-9h8m-3fm2-qjrq / CVE-2026-24051 is an arbitrary code execution (ACE) via local PATH hijacking issue in the OpenTelemetry Go SDK on macOS/Darwin. (github.com)
- Root cause:
sdk/resource/host_id.goruns theioregcommand by name (PATH search); a local attacker who can influencePATHcould cause a maliciousioregto be executed. (github.com) - Affected (Go modules):
go.opentelemetry.io/otel/sdk/resource: >= 1.21.0 and <= 1.39.0 (github.com)go.opentelemetry.io/otel/sdk: v1.21.0 before v1.40.0 (pkg.go.dev)
- Severity: High (CVSS 3.1: 7.0); AV:L/AC:H/PR:L/UI:N. (github.com)
- Fix: upgrade to v1.40.0 (patched by using the full path
/usr/sbin/ioreg). (github.com)
Citations:
- 1: GHSA-9h8m-3fm2-qjrq
- 2: GHSA-9h8m-3fm2-qjrq
- 3: GHSA-9h8m-3fm2-qjrq
- 4: https://pkg.go.dev/vuln/GO-2026-4394
- 5: GHSA-9h8m-3fm2-qjrq
- 6: GHSA-9h8m-3fm2-qjrq
Upgrade go.opentelemetry.io/otel/sdk to v1.40.0+ to fix high-severity PATH hijacking vulnerability.
go.opentelemetry.io/otel/sdk v1.39.0 (line 285) is affected by GO-2026-4394 / GHSA-9h8m-3fm2-qjrq (CVSS 7.0), a PATH hijacking issue on macOS/Darwin. Upgrade to v1.40.0 and keep go.opentelemetry.io/otel, go.opentelemetry.io/otel/metric, and go.opentelemetry.io/otel/trace aligned to the same release line.
🧰 Tools
🪛 OSV Scanner (2.3.3)
[HIGH] 285-285: go.opentelemetry.io/otel/sdk 1.39.0: OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking in go.opentelemetry.io/otel/sdk
(GO-2026-4394)
[HIGH] 285-285: go.opentelemetry.io/otel/sdk 1.39.0: OpenTelemetry Go SDK Vulnerable to Arbitrary Code Execution via PATH Hijacking
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In `@go.mod` at line 285, Update the go.opentelemetry.io/otel/sdk dependency from
v1.39.0 to v1.40.0 (or later) in go.mod and ensure the related modules
go.opentelemetry.io/otel, go.opentelemetry.io/otel/metric, and
go.opentelemetry.io/otel/trace are aligned to the same v1.40.x release line;
after changing the version entry for go.opentelemetry.io/otel/sdk, refresh
module metadata (e.g., run go get/update and go mod tidy) so go.sum is updated
and the PATH hijacking vulnerability is resolved.
This was referenced Mar 4, 2026
… 10 updates Bumps the misc-dependencies group with 9 updates in the / directory: | Package | From | To | | --- | --- | --- | | [go.etcd.io/etcd/api/v3](https://github.com/etcd-io/etcd) | `3.6.7` | `3.6.8` | | [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) | `3.6.7` | `3.6.8` | | [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.6.7` | `3.6.8` | | [go.etcd.io/etcd/server/v3](https://github.com/etcd-io/etcd) | `3.6.7` | `3.6.8` | | [go.etcd.io/etcd/tests/v3](https://github.com/etcd-io/etcd) | `3.6.7` | `3.6.8` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.258.0` | `0.269.0` | | gopkg.in/ini.v1 | `1.67.0` | `1.67.1` | | [kubevirt.io/api](https://github.com/kubevirt/api) | `1.7.0` | `1.7.1` | | [kubevirt.io/containerized-data-importer-api](https://github.com/kubevirt/containerized-data-importer-api) | `1.63.1` | `1.64.0` | Updates `go.etcd.io/etcd/api/v3` from 3.6.7 to 3.6.8 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.7...v3.6.8) Updates `go.etcd.io/etcd/client/pkg/v3` from 3.6.7 to 3.6.8 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.7...v3.6.8) Updates `go.etcd.io/etcd/client/v3` from 3.6.7 to 3.6.8 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.7...v3.6.8) Updates `go.etcd.io/etcd/server/v3` from 3.6.7 to 3.6.8 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.7...v3.6.8) Updates `go.etcd.io/etcd/tests/v3` from 3.6.7 to 3.6.8 - [Release notes](https://github.com/etcd-io/etcd/releases) - [Commits](etcd-io/etcd@v3.6.7...v3.6.8) Updates `google.golang.org/api` from 0.258.0 to 0.269.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.258.0...v0.269.0) Updates `google.golang.org/grpc` from 1.77.0 to 1.79.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.77.0...v1.79.1) Updates `gopkg.in/ini.v1` from 1.67.0 to 1.67.1 Updates `kubevirt.io/api` from 1.7.0 to 1.7.1 - [Commits](kubevirt/api@v1.7.0...v1.7.1) Updates `kubevirt.io/containerized-data-importer-api` from 1.63.1 to 1.64.0 - [Commits](kubevirt/containerized-data-importer-api@v1.63.1...v1.64.0) --- updated-dependencies: - dependency-name: go.etcd.io/etcd/api/v3 dependency-version: 3.6.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: misc-dependencies - dependency-name: go.etcd.io/etcd/client/pkg/v3 dependency-version: 3.6.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: misc-dependencies - dependency-name: go.etcd.io/etcd/client/v3 dependency-version: 3.6.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: misc-dependencies - dependency-name: go.etcd.io/etcd/server/v3 dependency-version: 3.6.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: misc-dependencies - dependency-name: go.etcd.io/etcd/tests/v3 dependency-version: 3.6.8 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: misc-dependencies - dependency-name: google.golang.org/api dependency-version: 0.269.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: misc-dependencies - dependency-name: google.golang.org/grpc dependency-version: 1.79.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: misc-dependencies - dependency-name: gopkg.in/ini.v1 dependency-version: 1.67.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: misc-dependencies - dependency-name: kubevirt.io/api dependency-version: 1.7.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: misc-dependencies - dependency-name: kubevirt.io/containerized-data-importer-api dependency-version: 1.64.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: misc-dependencies ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/go_modules/misc-dependencies-07bbdea3be
branch
from
c9af7c0 to
3fe06da
Compare
Contributor
There was a problem hiding this comment.
♻️ Duplicate comments (1)
go.mod (1)
283-288:⚠️ Potential issue | 🔴 CriticalUpgrade OpenTelemetry SDK from v1.39.0; current version is vulnerable.
go.opentelemetry.io/otel/sdk v1.39.0on Line 287 is flagged by OSV (GO-2026-4394/GHSA-9h8m-3fm2-qjrq). Please bump SDK tov1.40.0+and keepotel,otel/metric, andotel/traceon the same release line.Suggested go.mod update
- go.opentelemetry.io/otel v1.39.0 // indirect + go.opentelemetry.io/otel v1.40.0 // indirect ... - go.opentelemetry.io/otel/metric v1.39.0 // indirect - go.opentelemetry.io/otel/sdk v1.39.0 // indirect - go.opentelemetry.io/otel/trace v1.39.0 // indirect + go.opentelemetry.io/otel/metric v1.40.0 // indirect + go.opentelemetry.io/otel/sdk v1.40.0 // indirect + go.opentelemetry.io/otel/trace v1.40.0 // indirect#!/bin/bash set -euo pipefail echo "Check current OTel versions in go.mod:" rg -n 'go\.opentelemetry\.io/otel($|/metric|/sdk|/trace)' go.mod echo echo "Verify OSV status for otel/sdk version from go.mod:" ver=$(rg -n 'go\.opentelemetry\.io/otel/sdk v' go.mod | sed -E 's/.* v([^ ]+).*/\1/' | head -n1) curl -sS https://api.osv.dev/v1/query \ -H 'content-type: application/json' \ -d "{\"package\":{\"name\":\"go.opentelemetry.io/otel/sdk\",\"ecosystem\":\"Go\"},\"version\":\"${ver}\"}" \ | python3 -c 'import sys,json; d=json.load(sys.stdin); print("Version:", "'"${ver}"'"); print("Vulns:", len(d.get("vulns", []))); [print("-", v.get("id")) for v in d.get("vulns", [])]'🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed. In `@go.mod` around lines 283 - 288, The go.mod lists OpenTelemetry SDK and related modules at v1.39.0 which is vulnerable; update go.opentelemetry.io/otel/sdk to v1.40.0 or newer and align the companion modules (go.opentelemetry.io/otel, go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/trace and otlptrace packages) to the same compatible release line (e.g., v1.40.0+), then run go mod tidy to ensure dependency graph consistency and rebuild to verify no breakages.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Duplicate comments:
In `@go.mod`:
- Around line 283-288: The go.mod lists OpenTelemetry SDK and related modules at
v1.39.0 which is vulnerable; update go.opentelemetry.io/otel/sdk to v1.40.0 or
newer and align the companion modules (go.opentelemetry.io/otel,
go.opentelemetry.io/otel/metric, go.opentelemetry.io/otel/trace and otlptrace
packages) to the same compatible release line (e.g., v1.40.0+), then run go mod
tidy to ensure dependency graph consistency and rebuild to verify no breakages.
ℹ️ Review info
⚙️ Run configuration
Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml
Review profile: CHILL
Plan: Pro
Run ID: f669b75b-3ffe-4e92-9a03-2c05e6d24694
⛔ Files ignored due to path filters (67)
go.sumis excluded by!**/*.sumvendor/cel.dev/expr/BUILD.bazelis excluded by!**/vendor/**,!vendor/**vendor/cel.dev/expr/MODULE.bazelis excluded by!**/vendor/**,!vendor/**vendor/cel.dev/expr/checked.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/eval.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/explain.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/syntax.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cel.dev/expr/value.pb.gois excluded by!**/*.pb.go,!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/CHANGES.mdis excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/credentials/detect.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/credentials/filetypes.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/credentials/internal/gdch/gdch.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/httptransport/httptransport.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/credsfile/credsfile.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/credsfile/filetype.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/credsfile/parse.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/internal.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/jwt/jwt.gois excluded by!**/vendor/**,!vendor/**vendor/cloud.google.com/go/auth/internal/version.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/googleapis/gax-go/v2/CHANGES.mdis excluded by!**/vendor/**,!vendor/**vendor/github.com/googleapis/gax-go/v2/feature.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/googleapis/gax-go/v2/internal/version.gois excluded by!**/vendor/**,!vendor/**vendor/github.com/googleapis/gax-go/v2/invoke.gois excluded by!**/vendor/**,!vendor/**vendor/go.etcd.io/etcd/api/v3/version/version.gois excluded by!**/vendor/**,!vendor/**vendor/go.etcd.io/etcd/client/v3/naming/endpoints/endpoints.gois excluded by!**/vendor/**,!vendor/**vendor/go.etcd.io/etcd/server/v3/embed/config.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/.codespellignoreis excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/.golangci.ymlis excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/.lycheeignoreis excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/CHANGELOG.mdis excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/CONTRIBUTING.mdis excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/Makefileis excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/README.mdis excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/RELEASING.mdis excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/VERSIONING.mdis excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/attribute/encoder.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/attribute/hash.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/attribute/internal/xxhash/xxhash.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/attribute/set.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/attribute/type_string.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/baggage/baggage.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/dependencies.Dockerfileis excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/internal/global/meter.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/metric.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/metric/config.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/propagation/trace_context.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/internal/x/features.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/internal/x/x.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/resource/host_id_bsd.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/resource/host_id_linux.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/resource/host_id_unsupported.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/resource/host_id_windows.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/resource/os_release_unix.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/resource/os_unix.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/resource/os_unsupported.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/batch_span_processor.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/doc.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/internal/env/env.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/internal/observ/batch_span_processor.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/internal/observ/doc.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/internal/observ/simple_span_processor.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/internal/observ/tracer.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/internal/x/README.mdis excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/internal/x/x.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/provider.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/simple_span_processor.gois excluded by!**/vendor/**,!vendor/**vendor/go.opentelemetry.io/otel/sdk/trace/span.gois excluded by!**/vendor/**,!vendor/**
📒 Files selected for processing (1)
go.mod
Contributor
|
@dependabot[bot]: The following tests failed, say
Full PR test history. Your PR dashboard. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here. |
openshift-merge-robot
added
the
needs-rebase
Contributor
|
rebase DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
Member
|
/close |
Contributor
|
@bryan-cox: Closed this PR. DetailsIn response to this:
Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
Contributor
Author
|
This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests. To ignore these dependencies, configure ignore rules in dependabot.yml |
dependabot
Bot
deleted the
dependabot/go_modules/misc-dependencies-07bbdea3be
branch
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Rebasing might not happen immediately, so don't worry if this takes some time.
Note: if you make any changes to this PR yourself, they will take precedence over the rebase.
Bumps the misc-dependencies group with 9 updates in the / directory:
3.6.73.6.83.6.73.6.83.6.73.6.83.6.73.6.83.6.73.6.80.258.00.269.01.67.01.67.11.7.01.7.11.63.11.64.0Updates
go.etcd.io/etcd/api/v3from 3.6.7 to 3.6.8Release notes
Sourced from go.etcd.io/etcd/api/v3's releases.
... (truncated)
Commits
4e814e2version: bump up to 3.6.8d552466Merge pull request #21257 from nwnt/bump-3.6-to-gov1.24.32d3c79c[release-3.6] Bump go version to 1.24.13b17ff7eMerge pull request #21241 from ahrtr/20260203_metadata_3.6bf78336Remove the use of grpc-go's Metadata field451c7d5Merge pull request #21216 from ahrtr/20260130_go_3.6ef87996Bump go version to 1.24.11cb073abMerge pull request #21163 from ahrtr/20260119_snapshot_count_3.6e830821Keep the --snapshot-count flag45dbe3cMerge pull request #21161 from ahrtr/20260119_max_snapshots_3.6Updates
go.etcd.io/etcd/client/pkg/v3from 3.6.7 to 3.6.8Release notes
Sourced from go.etcd.io/etcd/client/pkg/v3's releases.
... (truncated)
Commits
4e814e2version: bump up to 3.6.8d552466Merge pull request #21257 from nwnt/bump-3.6-to-gov1.24.32d3c79c[release-3.6] Bump go version to 1.24.13b17ff7eMerge pull request #21241 from ahrtr/20260203_metadata_3.6bf78336Remove the use of grpc-go's Metadata field451c7d5Merge pull request #21216 from ahrtr/20260130_go_3.6ef87996Bump go version to 1.24.11cb073abMerge pull request #21163 from ahrtr/20260119_snapshot_count_3.6e830821Keep the --snapshot-count flag45dbe3cMerge pull request #21161 from ahrtr/20260119_max_snapshots_3.6Updates
go.etcd.io/etcd/client/v3from 3.6.7 to 3.6.8Release notes
Sourced from go.etcd.io/etcd/client/v3's releases.
... (truncated)
Commits
4e814e2version: bump up to 3.6.8d552466Merge pull request #21257 from nwnt/bump-3.6-to-gov1.24.32d3c79c[release-3.6] Bump go version to 1.24.13b17ff7eMerge pull request #21241 from ahrtr/20260203_metadata_3.6bf78336Remove the use of grpc-go's Metadata field451c7d5Merge pull request #21216 from ahrtr/20260130_go_3.6ef87996Bump go version to 1.24.11cb073abMerge pull request #21163 from ahrtr/20260119_snapshot_count_3.6e830821Keep the --snapshot-count flag45dbe3cMerge pull request #21161 from ahrtr/20260119_max_snapshots_3.6Updates
go.etcd.io/etcd/server/v3from 3.6.7 to 3.6.8Release notes
Sourced from go.etcd.io/etcd/server/v3's releases.
... (truncated)
Commits
4e814e2version: bump up to 3.6.8d552466Merge pull request #21257 from nwnt/bump-3.6-to-gov1.24.32d3c79c[release-3.6] Bump go version to 1.24.13b17ff7eMerge pull request #21241 from ahrtr/20260203_metadata_3.6bf78336Remove the use of grpc-go's Metadata field451c7d5Merge pull request #21216 from ahrtr/20260130_go_3.6ef87996Bump go version to 1.24.11cb073abMerge pull request #21163 from ahrtr/20260119_snapshot_count_3.6e830821Keep the --snapshot-count flag45dbe3cMerge pull request #21161 from ahrtr/20260119_max_snapshots_3.6Updates
go.etcd.io/etcd/tests/v3from 3.6.7 to 3.6.8Release notes
Sourced from go.etcd.io/etcd/tests/v3's releases.
... (truncated)
Commits
4e814e2version: bump up to 3.6.8d552466Merge pull request #21257 from nwnt/bump-3.6-to-gov1.24.32d3c79c[release-3.6] Bump go version to 1.24.13b17ff7eMerge pull request #21241 from ahrtr/20260203_metadata_3.6bf78336Remove the use of grpc-go's Metadata field451c7d5Merge pull request #21216 from ahrtr/20260130_go_3.6ef87996Bump go version to 1.24.11cb073abMerge pull request #21163 from ahrtr/20260119_snapshot_count_3.6e830821Keep the --snapshot-count flag45dbe3cMerge pull request #21161 from ahrtr/20260119_max_snapshots_3.6Updates
google.golang.org/apifrom 0.258.0 to 0.269.0Release notes
Sourced from google.golang.org/api's releases.
... (truncated)
Changelog
Sourced from google.golang.org/api's changelog.
... (truncated)
Commits
312ac01chore(main): release 0.268.1 (#3513)7565f1cfeat(all): auto-regenerate discovery clients (#3512)2a249cefix(generator): handle preview version pkg name (#3511)26ea889chore(all): update all (#3498)5b078d9chore(main): release 0.268.0 (#3503)20c1e0ffeat(all): auto-regenerate discovery clients (#3509)20fbcc1feat(all): auto-regenerate discovery clients (#3508)e9015ccfeat(all): auto-regenerate discovery clients (#3507)cc5baecfeat: update to go 1.26 (#3504)cda923afeat(all): auto-regenerate discovery clients (#3506)Updates
google.golang.org/grpcfrom 1.77.0 to 1.79.1Release notes
Sourced from google.golang.org/grpc's releases.
... (truncated)
Commits
782f2deChange version to 1.79.1 (#8902)850eccbChange version to 1.79.1-dev (#8851)765ff05Change version to 1.79.0 (#8850)68804beCherry pick #8864 to v1.79.x (#8896)0381eb6xds: Support:authorityheader rewriting for LOGICAL_DNS clusters (#8822)90f571dxds: remove references to ResolverState.Addresses (#8841)679565fxds: removeHashKeyfield fromxdsresource.Endpointstruct (#8844)bb2073dmem: Allow overriding the default buffer pool. (#8806)bd4444aFix flakyTestServer_RedundantUpdateSuppression. (#8839)623b3f0test: add regression test for RecvMsg() error shadowing #7510 (#8820)Updates
gopkg.in/ini.v1from 1.67.0 to 1.67.1Updates
kubevirt.io/apifrom 1.7.0 to 1.7.1Commits
1b0ce12api update by KubeVirt Prow build 20259714989796925447181296api update by KubeVirt Prow build 2025623327841718272b78eadcapi update by KubeVirt Prow build 20235637302094766080849955api update by KubeVirt Prow build 202310891507548569671b1caaapi update by KubeVirt Prow build 202188578242324480083b64c2api update by KubeVirt Prow build 2021523891029020672d7b35daapi update by KubeVirt Prow build 20212309739280834561626f7bapi update by KubeVirt Prow build 201954893576431616087e5611api update by KubeVirt Prow build 2019164436505300992fe5ef70api update by KubeVirt Prow build 2017196388718219264Updates
kubevirt.io/containerized-data-importer-apifrom 1.63.1 to 1.64.0Commits
1a95c6ccontainerized-data-importer-api update by KubeVirt Prow build 199851477366210...0b4e9b5containerized-data-importer-api update by KubeVirt Prow build 198980925953724...86cc2becontainerized-data-importer-api update by KubeVirt Prow build 198899711142894...53a8fcacontainerized-data-importer-api update by KubeVirt Prow build 198621978117852...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsSummary by CodeRabbit