Skip to content

chore(deps): update github.com/go-json-experiment/json digest to b6187a3 (9.3)#5797

Merged
elastic-renovate-prod[bot] merged 1 commit into
9.3from
renovate/9.3-github.com-go-json-experiment-json-digest
Apr 30, 2026
Merged

chore(deps): update github.com/go-json-experiment/json digest to b6187a3 (9.3)#5797
elastic-renovate-prod[bot] merged 1 commit into
9.3from
renovate/9.3-github.com-go-json-experiment-json-digest

Conversation

@elastic-renovate-prod
Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
github.com/go-json-experiment/json indirect digest 4849db3 -> b6187a3

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Configuration

📅 Schedule: Branch creation - "* 1 * * 1-5" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@elastic-renovate-prod elastic-renovate-prod Bot added backport-skip dependencies Pull requests that update a dependency file renovate labels Apr 30, 2026
@elastic-renovate-prod elastic-renovate-prod Bot requested a review from a team as a code owner April 30, 2026 22:32
@elastic-renovate-prod elastic-renovate-prod Bot added renovate-auto-approve Team:Security-Cloud Services Security Data Experience - Cloud Services team. labels Apr 30, 2026
@elastic-renovate-prod elastic-renovate-prod Bot added this pull request to the merge queue Apr 30, 2026
Merged via the queue into 9.3 with commit de6a3a2 Apr 30, 2026
4 of 12 checks passed
@elastic-renovate-prod elastic-renovate-prod Bot deleted the renovate/9.3-github.com-go-json-experiment-json-digest branch April 30, 2026 22:33
olegsu added a commit that referenced this pull request May 1, 2026
## Summary

Reverts Renovate PR #5797 which bumped
`github.com/go-json-experiment/json` from
`v0.0.0-20251027170946-4849db3c2f7e` to
`v0.0.0-20260430182902-b6187a392ed4`.

The new version **removed the `SkipFunc` exported symbol**, breaking all
packaging builds on 9.3:

```
trivy@v0.66.0/pkg/x/json/json.go:109:16: undefined: json.SkipFunc
```

**Root cause:** The CI cross-build uses `GOFLAGS=-mod=readonly` which
bypasses `vendor/` and resolves to the new broken version from the
module cache. `trivy v0.66.0` (used on 9.3) calls `json.SkipFunc` from
this package.

**Fix:** Pins `go-json-experiment/json` back to
`v0.0.0-20251027170946-4849db3c2f7e` — the version that has `SkipFunc`
and is proven stable. This matches what the `9.4` branch uses.

## Test plan

- [ ] Packaging build (`mage package`) passes on linux/amd64
- [ ] Packaging build passes on linux/arm64

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport-skip dependencies Pull requests that update a dependency file renovate renovate-auto-approve Team:Security-Cloud Services Security Data Experience - Cloud Services team.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants