chore: manual go mod dependency upgrades#6328
Merged
Merged
Conversation
Signed-off-by: Kent Rancourt <kent.rancourt@gmail.com>
kargo-governance-bot
Bot
added
needs/area
✅ Deploy Preview for docs-kargo-io ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
krancour
added
priority/high
Codecov Report❌ Patch coverage is
Additional details and impacted files@@ Coverage Diff @@
## main #6328 +/- ##
==========================================
- Coverage 58.05% 58.05% -0.01%
==========================================
Files 499 499
Lines 41748 41753 +5
==========================================
Hits 24238 24238
- Misses 16050 16055 +5
Partials 1460 1460 ☔ View full report in Codecov by Sentry. 🚀 New features to boost your workflow:
|
jacobboykin
approved these changes
May 24, 2026
Collaborator
|
Backport failed for Please cherry-pick the changes locally and resolve any conflicts. git fetch origin release-1.10
git worktree add -d .worktree/backport-6328-to-release-1.10 origin/release-1.10
cd .worktree/backport-6328-to-release-1.10
git switch --create backport-6328-to-release-1.10
git cherry-pick -x 9b482518e7db1305b85b35a88acee70f45dc0568 |
4 tasks
Contributor
|
Manual backport opened as #6368. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
4 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Ever since Kubernetes decided not to permit resource types to be serialized as protocol buffers, we've been unable to upgrade any Kubernetes modules beyond
v0.34.x. This limitation was the direct impetus for the transition away from our gRPC-based API and toward our new RESTful API, which will be fully completed in v1.12.0.In the meantime, dependabot has made weekly attempts to upgrade us to new minor versions of all dependencies. These are upgrades we could take mixed with dozens that we cannot. It's led to a lot of dependabot PRs being closed unmerged. We've accepted all PRs upgrading patch versions of all dependencies, but unfortunately, for many modules, bug fixes and security fixes may sometimes land in a minor release and older minors haven't been patched back far enough to have made a difference for us. So...
This is a one-time, manual bump of all newer minor versions of dependencies that we can accept (nothing k8s-related) to get us caught up.