Skip to content

Update module github.com/google/cel-go to v0.30.0 - #240

Merged
openshift-merge-bot[bot] merged 1 commit into
mainfrom
konflux/mintmaker/main/go-module-minorpatch-updates
Aug 3, 2026
Merged

Update module github.com/google/cel-go to v0.30.0#240
openshift-merge-bot[bot] merged 1 commit into
mainfrom
konflux/mintmaker/main/go-module-minorpatch-updates

Conversation

@red-hat-konflux-kflux-prd-rh02

@red-hat-konflux-kflux-prd-rh02 red-hat-konflux-kflux-prd-rh02 Bot commented Aug 3, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/google/cel-go v0.29.2v0.30.0 age confidence

Release Notes

google/cel-go (github.com/google/cel-go)

v0.30.0

Compare Source

What's Changed

New Contributors

Full Changelog: cel-expr/cel-go@v0.29.2...v0.29.3


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.


Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

@openshift-ci
openshift-ci Bot requested review from tirthct and vkareh August 3, 2026 00:02
@coderabbitai

coderabbitai Bot commented Aug 3, 2026

Copy link
Copy Markdown
📝 Walkthrough

Summary by CodeRabbit

  • Chores
    • Updated an indirect dependency to improve compatibility and maintenance.

Walkthrough

The indirect github.com/google/cel-go dependency changes from v0.29.2 to v0.30.0 in go.mod. No exported or public entities change. No CVE or CWE is identified in the provided change data.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: vkareh, tirthct

🚥 Pre-merge checks | ✅ 11
✅ Passed checks (11 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Sec-02: Secrets In Log Output ✅ Passed CWE-532 check passes: the PR changes only go.mod/go.sum, and no non-test production log call includes a token, password, credential, or secret value.
No Hardcoded Secrets ✅ Passed Only go.mod and go.sum changed. Added values are a dependency version and two 32-byte Go checksum hashes; no credential literals or credential URLs (CWE-798).
No Weak Cryptography ✅ Passed The PR changes only cel-go dependency versions and checksums; no changed or tracked Go source uses MD5, DES, RC4, SHA-1, ECB, custom crypto, or secret comparisons.
No Injection Vectors ✅ Passed The patch changes only cel-go dependency entries and checksums; no new CWE-78, CWE-79, CWE-89, or CWE-502 injection sink is introduced.
No Privileged Containers ✅ Passed Only go.mod/go.sum changed. Dockerfile USER root is documented for make installation and switches to non-root; production Helm defaults enforce non-root and no prohibited flags appear.
No Pii Or Sensitive Data In Logs ✅ Passed The PR changes only go.mod and go.sum; the parent diff contains no Go source or logging changes that could expose PII or customer data.
Title check ✅ Passed The title clearly and concisely identifies the dependency update from github.com/google/cel-go to v0.30.0.
Description check ✅ Passed The description directly documents the github.com/google/cel-go dependency update and its release changes.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch konflux/mintmaker/main/go-module-minorpatch-updates
✨ Simplify code
  • Create PR with simplified code
  • Commit simplified code in branch konflux/mintmaker/main/go-module-minorpatch-updates

Comment @coderabbitai help to get the list of available commands.

@coderabbitai coderabbitai Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🧹 Nitpick comments (1)
go.mod (1)

72-72: 🎯 Functional Correctness | 🔵 Trivial | ⚡ Quick win

Add focused CEL compatibility coverage.

Cover nested resource/condition() access, default timestamp(ref_time) comparisons, and expression-size limits. Do not treat non-RFC3339 values as Evaluate inputs; JSON decoding rejects them before evaluation. Concurrent evaluation is outside the current sequential Sentinel call path.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@go.mod` at line 72, Add focused CEL compatibility tests for the dependency
version declared near github.com/google/cel-go, covering nested
resource/condition() access, default timestamp(ref_time) comparisons, and
expression-size limits. Keep inputs RFC3339-valid because JSON decoding occurs
before Evaluate, and omit concurrent-evaluation coverage since the Sentinel call
path is sequential.
🤖 Prompt for all review comments with AI agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@go.mod`:
- Line 72: Add focused CEL compatibility tests for the dependency version
declared near github.com/google/cel-go, covering nested resource/condition()
access, default timestamp(ref_time) comparisons, and expression-size limits.
Keep inputs RFC3339-valid because JSON decoding occurs before Evaluate, and omit
concurrent-evaluation coverage since the Sentinel call path is sequential.

ℹ️ Review info
⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: 40d0cf5a-b569-435c-a02a-dfc250460eb5

📥 Commits

Reviewing files that changed from the base of the PR and between 4adc9fb and 250ea4b.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum, !**/go.sum
📒 Files selected for processing (1)
  • go.mod
🔗 Linked repositories identified

CodeRabbit considers these linked repositories for cross-repo context during reviews:

@hyperfleet-ci-bot

Copy link
Copy Markdown

Risk Score: 0 — risk/low

Signal Detail Points
PR size 6 lines +0
Sensitive paths none +0

Computed by hyperfleet-risk-scorer

Signed-off-by: red-hat-konflux-kflux-prd-rh02 <190377777+red-hat-konflux-kflux-prd-rh02[bot]@users.noreply.github.com>
@red-hat-konflux-kflux-prd-rh02
red-hat-konflux-kflux-prd-rh02 Bot force-pushed the konflux/mintmaker/main/go-module-minorpatch-updates branch from 250ea4b to 1ab68b4 Compare August 3, 2026 12:03
@red-hat-konflux-kflux-prd-rh02 red-hat-konflux-kflux-prd-rh02 Bot changed the title Update go module minor/patch updates to v0.30.0 Update module github.com/google/cel-go to v0.30.0 Aug 3, 2026
@rafabene

rafabene commented Aug 3, 2026

Copy link
Copy Markdown
Member

/lgtm

@openshift-ci

openshift-ci Bot commented Aug 3, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: rafabene

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved label Aug 3, 2026
@openshift-merge-bot
openshift-merge-bot Bot merged commit f5a57e4 into main Aug 3, 2026
10 checks passed
@red-hat-konflux-kflux-prd-rh02
red-hat-konflux-kflux-prd-rh02 Bot deleted the konflux/mintmaker/main/go-module-minorpatch-updates branch August 3, 2026 16:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant