Skip to content

chore(deps): bump the go-dependencies group across 1 directory with 21 updates#756

Merged
AlexKantor87 merged 7 commits intomainfrom
dependabot/go_modules/go-dependencies-4e1c500cd6
Apr 1, 2026
Merged

chore(deps): bump the go-dependencies group across 1 directory with 21 updates#756
AlexKantor87 merged 7 commits intomainfrom
dependabot/go_modules/go-dependencies-4e1c500cd6

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Apr 1, 2026

Bumps the go-dependencies group with 16 updates in the / directory:

Package From To
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.18.0 1.21.0
github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry 0.2.2 0.2.3
github.com/andygrunwald/go-jira 1.16.0 1.17.0
github.com/aws/aws-sdk-go-v2 1.36.3 1.41.5
github.com/aws/aws-sdk-go-v2/config 1.29.14 1.32.13
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.17.72 1.22.11
github.com/aws/aws-sdk-go-v2/service/ecs 1.54.6 1.75.0
github.com/aws/aws-sdk-go-v2/service/lambda 1.71.2 1.88.5
github.com/containers/image/v5 5.34.3 5.36.2
github.com/go-git/go-git/v5 5.17.1 5.17.2
github.com/go-playground/validator/v10 10.26.0 10.30.2
github.com/open-policy-agent/opa 1.13.2 1.15.1
github.com/zalando/go-keyring 0.2.6 0.2.8
golang.org/x/oauth2 0.34.0 0.36.0
k8s.io/kubernetes 1.35.0 1.35.3
sigs.k8s.io/kind 0.11.1 0.31.0

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.18.0 to 1.21.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.21.0

1.21.0 (2026-01-12)

Features Added

  • Added runtime/datetime package which provides specialized time type wrappers for serializing and deserializing time values in various formats used by Azure services.

Other Changes

  • Aligned cloud.AzureGovernment and cloud.AzureChina audience values with Azure CLI
Commits

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.9.0 to 1.10.1

Commits

Updates github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry from 0.2.2 to 0.2.3

Commits

Updates github.com/andygrunwald/go-jira from 1.16.0 to 1.17.0

Release notes

Sourced from github.com/andygrunwald/go-jira's releases.

v1.17.0

This is a maintenance release, but there are two important changes:

  • github.com/golang-jwt/jwt/v4 has been updated because of a security issue, see CVE-2025-30204
  • Minimum Go version has been raised from v1.15 to v1.21, due to an update of github.com/google/go-cmp

What's Changed

  • Replace ioutil.ReadFile with os.ReadFile
  • Replace ioutil.ReadAll with io.ReadAll
  • upgraded static v2022.1 => v2023.1
  • go fmt issue.go, metaissue.go, sprint.go
  • Github Actions: Upgrade dominikh/staticcheck-action from v1.2 to v1.4
  • Github Actions: Upgrade actions/setup-go from v3 to v6
  • Github Actions: Upgrade actions/checkout from v3 to v5
  • go mod tidy
  • upgraded github.com/google/go-cmp v0.5.8 => v0.7.0
  • upgraded go 1.15 => 1.21
  • upgraded github.com/golang-jwt/jwt/v4 v4.4.2 => v4.5.2

All these changes have been made by @​andygrunwald in andygrunwald/go-jira#735

Full Changelog: andygrunwald/go-jira@v1.16.1...v1.17.0

v1.16.1

This release is shipping a fix for the deprecation of the GET /rest/api/2/search endpoint. See Deprecation of JQL search and Evaluate expression endpoints / 31 October 2024.

If you are using a Jira Cloud-hosted instance and are using either IssueService.Search() or IssueService.SearchWithContext(), there is a high likelihood that these functions will no longer work for you due to deprecation and removal by Atlassian.

This release introduces IssueService.SearchV2JQL() and IssueService.SearchV2JQLWithContext() with a very similar function signature. To get the same results as with IssueService.Search() or IssueService.SearchWithContext(), you may need to configure a Fields list in the options parameter. Please see Search for issues using JQL enhanced search (GET) for further instructions.

What's Changed

New Contributors

Full Changelog: andygrunwald/go-jira@v1.16.0...v1.16.1

Changelog

Sourced from github.com/andygrunwald/go-jira's changelog.

1.17.0 (2025-09-16)

All changes in #735.

Breaking Changes

  • Minimum Go version increased from 1.15 to 1.21 (due to google/go-cmp dependency update)

Security

  • Updated github.com/golang-jwt/jwt/v4 v4.4.2 to v4.5.2 (CVE-2025-30204)

Maintenance

  • Replaced deprecated ioutil.ReadFile with os.ReadFile
  • Replaced deprecated ioutil.ReadAll with io.ReadAll
  • Replaced deprecated ioutil.Discard with io.Discard
  • Upgraded staticcheck v2022.1 to v2023.1
  • Code formatting updates (issue.go, metaissue.go, sprint.go)

Dependencies

  • github.com/google/go-cmp v0.5.8 to v0.7.0
  • github.com/golang-jwt/jwt/v4 v4.4.2 to v4.5.2

CI/CD

  • Upgraded actions/checkout from v3 to v5
  • Upgraded actions/setup-go from v3 to v6
  • Upgraded dominikh/staticcheck-action from v1.2 to v1.4

1.16.1 (2025-09-13)

Features

  • Added IssueService.SearchV2JQL() and IssueService.SearchV2JQLWithContext() to handle Atlassian's deprecation of GET /rest/api/2/search endpoint (effective October 31, 2024) (#725)

New contributor: @​conor-naranjo

Commits
  • 93f28dd Merge pull request #735 from andygrunwald/v1.17.0-dev-upgrade-dependencies
  • 00778a6 Replace ioutil.Discard with io.Discard
  • 44e617e Replace ioutil.ReadFile with os.ReadFile
  • 546b61f Replace ioutil.ReadAll with io.ReadAll
  • 79978f0 upgraded static v2022.1 => v2023.1
  • 463a8a0 go fmt sprint.go
  • e0ea06f go fmt metaissue.go
  • 2095c75 go fmt issue.go
  • 3d9306e Github Actions: Upgrade dominikh/staticcheck-action from v1.2 to v1.4
  • ead0c0c Github Actions: Upgrade actions/setup-go from v3 to v6
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.36.3 to 1.41.5

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.29.14 to 1.32.13

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.67 to 1.19.13

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.72 to 1.22.11

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecs from 1.54.6 to 1.75.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/lambda from 1.71.2 to 1.88.5

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.79.2 to 1.98.0

Commits

Updates github.com/aws/smithy-go from 1.22.3 to 1.24.2

Release notes

Sourced from github.com/aws/smithy-go's releases.

v1.22.4

Release (2025-06-16)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/smithy-go: v1.22.4
    • Bug Fix: Fix CBOR serd empty check for string and enum fields
Commits

Updates github.com/containers/image/v5 from 5.34.3 to 5.36.2

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.36.2

What's Changed

Full Changelog: containers/image@v5.36.1...v5.36.2

v5.36.1

What's Changed

Full Changelog: containers/image@v5.36.0...v5.36.1

v5.36.0

What's Changed

... (truncated)

Commits
  • d464a25 Bump to v5.36.2
  • 50a6b67 Merge pull request #2943 from TomSweeneyRedHat/dev/tsweeney/backport_2938
  • d3eb538 [release-5.36] rekor: do not cancel http context
  • 6ed8326 Merge pull request #2920 from TomSweeneyRedHat/dev/tsweeney/v5.36.1
  • f6ca2da [release-5.36] Bump to c/image v5.36.1
  • d18da19 [release-5.36] Bump c/storage to v1.59.1
  • ae0c9f3 Merge pull request #2913 from TomSweeneyRedHat/dev/tsweeney/cherrypick2907
  • 40d1027 [release-5.36] Update the CI image, to match Skopeo's updated test code
  • 08ce6b4 Bump to c/image v5.36.0
  • b5e2b66 Bump to c/storage v1.59.0
  • Additional commits viewable in compare view

Updates github.com/docker/docker from 28.0.4+incompatible to 28.3.2+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

28.3.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • Fix --use-api-socket not working correctly when targeting a remote daemon. docker/cli#6157
  • Fix stray "otel error" logs being printed if debug logging is enabled. docker/cli#6160
  • Quote SSH arguments when connecting to a remote daemon over an SSH connection to avoid unexpected expansion. docker/cli#6147
  • Warn when DOCKER_AUTH_CONFIG is set during docker login and docker logout. docker/cli#6163

Packaging updates

28.3.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Packaging updates

28.3.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

New

... (truncated)

Commits

Updates github.com/go-git/go-git/v5 from 5.17.1 to 5.17.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.17.2

What's Changed

⚠️ This release fixes a bug (go-git/go-git#1942) that blocked some users from upgrading to v5.17.1. Thanks @​pskrbasu for reporting it. 🙇

Full Changelog: go-git/go-git@v5.17.1...v5.17.2

Commits
  • 45ae193 Merge pull request #1944 from go-git/fix-perms
  • fda4f74 storage: filesystem/dotgit, Skip writing pack files that already exist on disk
  • 2212dc7 Merge pull request #1941 from go-git/renovate/releases/v5.x-go-github.com-go-...
  • ebb2d7d build: Update module github.com/go-git/go-git/v5 to v5.17.1 [SECURITY]
  • See full diff in compare view

Updates github.com/go-playground/validator/v10 from 10.26.0 to 10.30.2

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

v10.30.2

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.1...v10.30.2

Release 10.30.1

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.30.0...v10.30.1

Release 10.30.0

What's Changed

New Contributors

... (truncated)

Commits
  • b9258bd fix(fqdn): allow hyphens in last domain label (#1548)
  • b9f1d79 feat: add postcode patterns for Colombia (CO) and British Virgin Islands (VG)...
  • 7fa9599 chore(deps): bump golang.org/x/crypto from 0.48.0 to 0.49.0 (#1546)
  • 8ca29ec chore(deps): bump golang.org/x/text from 0.34.0 to 0.35.0 (#1545)
  • 5e1bedf docs: add Valuer interface documentation and example (#1540)
  • 42927a0 feat: implement ValidatorValuer interface feature (#1416)

@dependabot
chore(deps): bump the go-dependencies group across 1 directory with 2…
3138ad8 
…1 updates

Bumps the go-dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.18.0` | `1.21.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry](https://github.com/Azure/azure-sdk-for-go) | `0.2.2` | `0.2.3` |
| [github.com/andygrunwald/go-jira](https://github.com/andygrunwald/go-jira) | `1.16.0` | `1.17.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.36.3` | `1.41.5` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.29.14` | `1.32.13` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.72` | `1.22.11` |
| [github.com/aws/aws-sdk-go-v2/service/ecs](https://github.com/aws/aws-sdk-go-v2) | `1.54.6` | `1.75.0` |
| [github.com/aws/aws-sdk-go-v2/service/lambda](https://github.com/aws/aws-sdk-go-v2) | `1.71.2` | `1.88.5` |
| [github.com/containers/image/v5](https://github.com/containers/image) | `5.34.3` | `5.36.2` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.17.1` | `5.17.2` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.26.0` | `10.30.2` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.13.2` | `1.15.1` |
| [github.com/zalando/go-keyring](https://github.com/zalando/go-keyring) | `0.2.6` | `0.2.8` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.34.0` | `0.36.0` |
| [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) | `1.35.0` | `1.35.3` |
| [sigs.k8s.io/kind](https://github.com/kubernetes-sigs/kind) | `0.11.1` | `0.31.0` |



Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.18.0 to 1.21.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.18.0...sdk/azcore/v1.21.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.9.0 to 1.10.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.9.0...sdk/azidentity/v1.10.1)

Updates `github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry` from 0.2.2 to 0.2.3
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/internal/v0.2.2...sdk/internal/v0.2.3)

Updates `github.com/andygrunwald/go-jira` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/andygrunwald/go-jira/releases)
- [Changelog](https://github.com/andygrunwald/go-jira/blob/main/CHANGELOG.md)
- [Commits](andygrunwald/go-jira@v1.16.0...v1.17.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.36.3 to 1.41.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.36.3...v1.41.5)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.29.14 to 1.32.13
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.29.14...config/v1.32.13)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.67 to 1.19.13
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.67...credentials/v1.19.13)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.72 to 1.22.11
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@feature/s3/manager/v1.17.72...service/mq/v1.22.11)

Updates `github.com/aws/aws-sdk-go-v2/service/ecs` from 1.54.6 to 1.75.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ecs/v1.54.6...service/s3/v1.75.0)

Updates `github.com/aws/aws-sdk-go-v2/service/lambda` from 1.71.2 to 1.88.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/rds/v1.71.2...service/s3/v1.88.5)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.79.2 to 1.98.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.79.2...service/s3/v1.98.0)

Updates `github.com/aws/smithy-go` from 1.22.3 to 1.24.2
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.22.3...v1.24.2)

Updates `github.com/containers/image/v5` from 5.34.3 to 5.36.2
- [Release notes](https://github.com/containers/image/releases)
- [Commits](containers/image@v5.34.3...v5.36.2)

Updates `github.com/docker/docker` from 28.0.4+incompatible to 28.3.2+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v28.0.4...v28.3.2)

Updates `github.com/go-git/go-git/v5` from 5.17.1 to 5.17.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.17.1...v5.17.2)

Updates `github.com/go-playground/validator/v10` from 10.26.0 to 10.30.2
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.26.0...v10.30.2)

Updates `github.com/open-policy-agent/opa` from 1.13.2 to 1.15.1
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.13.2...v1.15.1)

Updates `github.com/zalando/go-keyring` from 0.2.6 to 0.2.8
- [Release notes](https://github.com/zalando/go-keyring/releases)
- [Commits](zalando/go-keyring@v0.2.6...v0.2.8)

Updates `golang.org/x/oauth2` from 0.34.0 to 0.36.0
- [Commits](golang/oauth2@v0.34.0...v0.36.0)

Updates `k8s.io/kubernetes` from 1.35.0 to 1.35.3
- [Release notes](https://github.com/kubernetes/kubernetes/releases)
- [Commits](kubernetes/kubernetes@v1.35.0...v1.35.3)

Updates `sigs.k8s.io/kind` from 0.11.1 to 0.31.0
- [Release notes](https://github.com/kubernetes-sigs/kind/releases)
- [Commits](kubernetes-sigs/kind@v0.11.1...v0.31.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry
  dependency-version: 0.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/andygrunwald/go-jira
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.41.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-version: 1.22.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecs
  dependency-version: 1.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/lambda
  dependency-version: 1.88.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.24.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/containers/image/v5
  dependency-version: 5.36.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/docker/docker
  dependency-version: 28.3.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/zalando/go-keyring
  dependency-version: 0.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/kubernetes
  dependency-version: 1.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/kind
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 1, 2026
@claude
Copy link
Copy Markdown
Contributor

claude bot commented Apr 1, 2026 •
edited
Loading

Claude finished @mbevc1's task in 3m 31s —— View job

Review: Dependabot dependency bump (21 updates)

  • Phase 1: Static analysis — go build ./..., go vet ./..., go mod tidy all pass cleanly
  • Phase 2: Code review of changed files
  • Phase 3: Post review findings

Static Analysis Results

All three checks pass:

  • go build ./... — compiles successfully
  • go vet ./... — no issues
  • go mod tidy — no drift (go.mod/go.sum unchanged)

My earlier review comment about build failures with transfermanager was based on the intermediate commits — the final state on this branch does compile correctly. Apologies for the noise.

Code Review

internal/aws/aws.go — S3 manager → transfermanager migration

The migration from the deprecated feature/s3/manager to feature/s3/transfermanager (v0.1.13) looks correct:

  • s3manager.NewDownloader(client) → transfermanager.New(client) — correct constructor
  • *s3manager.Downloader → *transfermanager.Client — correct type
  • downloader.Download(ctx, file, &s3.GetObjectInput{...}) → downloader.DownloadObject(ctx, &transfermanager.DownloadObjectInput{...}) with WriterAt field — correct new API
  • The nil check on result.ContentLength before logging is a good defensive addition since the new API returns a pointer

One concern: The transfermanager package is at v0.1.13 — a pre-v1 version, meaning its API is not yet stable and could have breaking changes in future updates. This is worth being aware of for future dependency bumps, though it's the official AWS replacement for the deprecated s3/manager so it's the right direction.

internal/kube/kube_test.go — kind v0.11.1 → v0.31.0

The ExportKubeConfig call now passes a third boolean argument (false). This matches the signature change in sigs.k8s.io/kind v0.31.0 which added an internal parameter to control whether internal cluster IPs are used. The comment is helpful. Build confirms correctness.

go.mod / go.sum

Standard dependency updates. The net deletion of ~680 lines in go.sum is expected — newer dependency versions consolidate transitive dependencies. No unexpected new direct dependencies introduced.

Notable Dependency Updates

  • go-jira v1.17.0: Patches CVE-2025-30204 (JWT vulnerability) and bumps minimum Go to 1.21
  • go-git v5.17.2: Fixes a bug that blocked some users from upgrading to v5.17.1
  • sigs.k8s.io/kind v0.11.1 → v0.31.0: Major version jump — the ExportKubeConfig API change is handled correctly
  • aws-sdk-go-v2: Multiple sub-packages updated; the s3/manager → s3/transfermanager migration is the significant breaking change

Summary

The PR looks good. All static checks pass, the two manual code changes (transfermanager migration and kind API update) are correct, and the dependency updates include important security patches. The only thing to monitor is that transfermanager is pre-v1 and may have future API changes.

Verdict: Approve (noting I cannot submit a formal GitHub approval)

@mbevc1 mbevc1 self-assigned this Apr 1, 2026
@mbevc1 mbevc1 closed this Apr 1, 2026
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Apr 1, 2026

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@mbevc1 mbevc1 reopened this Apr 1, 2026
claude[bot]
claude bot reviewed Apr 1, 2026
View reviewed changes
Comment thread internal/kube/kube_test.go Outdated
mbevc1 and others added 2 commits April 1, 2026 10:49
@mbevc1
fix: replace deprecated s3manager
bfec0b5
@mbevc1 @claude
Update internal/kube/kube_test.go
fb83676 
Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
claude[bot]
claude bot reviewed Apr 1, 2026
View reviewed changes
Comment thread internal/aws/aws.go
@AlexKantor87 AlexKantor87 merged commit e0e22b9 into main Apr 1, 2026
24 of 25 checks passed
@AlexKantor87 AlexKantor87 deleted the dependabot/go_modules/go-dependencies-4e1c500cd6 branch April 1, 2026 13:45
github-actions bot pushed a commit that referenced this pull request Apr 1, 2026
@AlexKantor87 @dependabot
@mbevc1 @claude
Release: chore(deps): bump the go-dependencies group across 1 directo…
4aae591 
…ry with 21 updates (#756)

* chore(deps): bump the go-dependencies group across 1 directory with 21 updates

Bumps the go-dependencies group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.18.0` | `1.21.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry](https://github.com/Azure/azure-sdk-for-go) | `0.2.2` | `0.2.3` |
| [github.com/andygrunwald/go-jira](https://github.com/andygrunwald/go-jira) | `1.16.0` | `1.17.0` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.36.3` | `1.41.5` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.29.14` | `1.32.13` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.72` | `1.22.11` |
| [github.com/aws/aws-sdk-go-v2/service/ecs](https://github.com/aws/aws-sdk-go-v2) | `1.54.6` | `1.75.0` |
| [github.com/aws/aws-sdk-go-v2/service/lambda](https://github.com/aws/aws-sdk-go-v2) | `1.71.2` | `1.88.5` |
| [github.com/containers/image/v5](https://github.com/containers/image) | `5.34.3` | `5.36.2` |
| [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.17.1` | `5.17.2` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.26.0` | `10.30.2` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.13.2` | `1.15.1` |
| [github.com/zalando/go-keyring](https://github.com/zalando/go-keyring) | `0.2.6` | `0.2.8` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.34.0` | `0.36.0` |
| [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) | `1.35.0` | `1.35.3` |
| [sigs.k8s.io/kind](https://github.com/kubernetes-sigs/kind) | `0.11.1` | `0.31.0` |



Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.18.0 to 1.21.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.18.0...sdk/azcore/v1.21.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.9.0 to 1.10.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.9.0...sdk/azidentity/v1.10.1)

Updates `github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry` from 0.2.2 to 0.2.3
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/internal/v0.2.2...sdk/internal/v0.2.3)

Updates `github.com/andygrunwald/go-jira` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/andygrunwald/go-jira/releases)
- [Changelog](https://github.com/andygrunwald/go-jira/blob/main/CHANGELOG.md)
- [Commits](andygrunwald/go-jira@v1.16.0...v1.17.0)

Updates `github.com/aws/aws-sdk-go-v2` from 1.36.3 to 1.41.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.36.3...v1.41.5)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.29.14 to 1.32.13
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.29.14...config/v1.32.13)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.67 to 1.19.13
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.67...credentials/v1.19.13)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.72 to 1.22.11
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@feature/s3/manager/v1.17.72...service/mq/v1.22.11)

Updates `github.com/aws/aws-sdk-go-v2/service/ecs` from 1.54.6 to 1.75.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ecs/v1.54.6...service/s3/v1.75.0)

Updates `github.com/aws/aws-sdk-go-v2/service/lambda` from 1.71.2 to 1.88.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/rds/v1.71.2...service/s3/v1.88.5)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.79.2 to 1.98.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.79.2...service/s3/v1.98.0)

Updates `github.com/aws/smithy-go` from 1.22.3 to 1.24.2
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.22.3...v1.24.2)

Updates `github.com/containers/image/v5` from 5.34.3 to 5.36.2
- [Release notes](https://github.com/containers/image/releases)
- [Commits](containers/image@v5.34.3...v5.36.2)

Updates `github.com/docker/docker` from 28.0.4+incompatible to 28.3.2+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v28.0.4...v28.3.2)

Updates `github.com/go-git/go-git/v5` from 5.17.1 to 5.17.2
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.17.1...v5.17.2)

Updates `github.com/go-playground/validator/v10` from 10.26.0 to 10.30.2
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.26.0...v10.30.2)

Updates `github.com/open-policy-agent/opa` from 1.13.2 to 1.15.1
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v1.13.2...v1.15.1)

Updates `github.com/zalando/go-keyring` from 0.2.6 to 0.2.8
- [Release notes](https://github.com/zalando/go-keyring/releases)
- [Commits](zalando/go-keyring@v0.2.6...v0.2.8)

Updates `golang.org/x/oauth2` from 0.34.0 to 0.36.0
- [Commits](golang/oauth2@v0.34.0...v0.36.0)

Updates `k8s.io/kubernetes` from 1.35.0 to 1.35.3
- [Release notes](https://github.com/kubernetes/kubernetes/releases)
- [Commits](kubernetes/kubernetes@v1.35.0...v1.35.3)

Updates `sigs.k8s.io/kind` from 0.11.1 to 0.31.0
- [Release notes](https://github.com/kubernetes-sigs/kind/releases)
- [Commits](kubernetes-sigs/kind@v0.11.1...v0.31.0)

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.21.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.10.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/containers/azcontainerregistry
  dependency-version: 0.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/andygrunwald/go-jira
  dependency-version: 1.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-version: 1.41.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-version: 1.32.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-version: 1.19.13
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-version: 1.22.11
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecs
  dependency-version: 1.75.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/lambda
  dependency-version: 1.88.5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-version: 1.98.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.24.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/containers/image/v5
  dependency-version: 5.36.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/docker/docker
  dependency-version: 28.3.2+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/go-git/go-git/v5
  dependency-version: 5.17.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/go-playground/validator/v10
  dependency-version: 10.30.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/open-policy-agent/opa
  dependency-version: 1.15.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/zalando/go-keyring
  dependency-version: 0.2.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: k8s.io/kubernetes
  dependency-version: 1.35.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: sigs.k8s.io/kind
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>

* fix: add missing kubeconfig internal argument

* fix: replace deprecated s3manager

* Update internal/kube/kube_test.go

Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>

* fix: refactor to work with transfermanager

* fix: transfermanager constructor typo

* fix: transfermanager constructor values

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Marko Bevc <marko@kosli.com>
Co-authored-by: claude[bot] <209825114+claude[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@claude claude[bot] claude[bot] left review comments

@mbevc1 mbevc1 mbevc1 approved these changes

@AlexKantor87 AlexKantor87 AlexKantor87 approved these changes

Assignees

@mbevc1 mbevc1

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@mbevc1 @AlexKantor87