Skip to content

NO-JIRA: build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0 - #9125

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/google/cel-go-0.29.0
Open

NO-JIRA: build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0#9125
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/google/cel-go-0.29.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited by coderabbitai Bot
Loading

Copy link
Copy Markdown
Contributor

Bumps github.com/google/cel-go from 0.28.1 to 0.29.0.

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.29.0

What's Changed

New Features

Bug Fixes

Cost Tracking

Testing & Tooling

Documentation

Commits
  • fa16799 avoid repeated construction of cost tracker (#1357)
  • ea3d5c0 feat(ext): add json encoder (#1340)
  • a4d0d64 startsWith / endsWith runtime cost agreement with checked cost (#1351)
  • d4efa77 Ensure receiver and global matches cost estimates agree (#1350)
  • 13cff33 ext/lists: add max size check to genRange() to prevent OOM (#1310)
  • f0ffa7e Execution frame integration with updated IntepretableV2 (#1344)
  • f1ec2f6 guard int32/uint32 map key narrowing in qualifyInternal (#1337)
  • 258e7c8 Managed execution frame with async call foundations (#1316)
  • 14f6746 validate offset on empty-string path in indexOf and lastIndexOf (#1335)
  • 783267d reject out-of-range minutes in timezone offset parsing (#1336)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by CodeRabbit

  • Chores
    • Updated an internal dependency to the latest supported version.

@dependabot
build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0
9922427 
Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.28.1 to 0.29.0.
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](cel-expr/cel-go@v0.28.1...v0.29.0)

---
updated-dependencies:
- dependency-name: github.com/google/cel-go
  dependency-version: 0.29.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added area/ci-tooling Indicates the PR includes changes for CI or tooling ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Jul 27, 2026
@openshift-merge-bot

openshift-merge-bot Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

@coderabbitai

coderabbitai Bot commented Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor
📝 Walkthrough

Walkthrough

The pull request updates the direct github.com/google/cel-go dependency in go.mod from v0.28.1 to v0.29.0. No other module metadata or exported declarations change.

Suggested reviewers: bryan-cox

🚥 Pre-merge checks | ✅ 11
✅ Passed checks (11 passed)
Check name Status Explanation
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed No test files or Ginkgo titles were changed; the only matches were non-test symbols/comments in vendored cel-go code.
Test Structure And Quality ✅ Passed PASS: The PR only bumps cel-go and vendors library code; no Ginkgo test files were changed, so the test-quality check is not applicable.
Topology-Aware Scheduling Compatibility ✅ Passed Only cel-go dependency/vendor files changed; no deployment manifests, controllers, or scheduling logic were modified.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed PASS: The PR only bumps cel-go and vendors library code; no _test.go or e2e/Ginkgo files changed, so no new IPv4/external-connectivity test risk.
No-Weak-Crypto ✅ Passed Diff only bumps cel-go/vendor files; scans found no weak-crypto APIs or secret comparisons, and Blowfish appears only in vendor/modules.txt package listings.
Container-Privileges ✅ Passed PASS: The PR only bumps cel-go and updates vendored Go files; no changed Kubernetes/container manifests or privileged/securityContext fields appear in the diff.
No-Sensitive-Data-In-Logs ✅ Passed No new log statements were added; the cel-go bump only changes vendored code, with no logging of secrets/PII in the diff.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title clearly and accurately summarizes the dependency version bump in this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/go_modules/github.com/google/cel-go-0.29.0

Comment @coderabbitai help to get the list of available commands.

@openshift-ci
openshift-ci Bot requested review from enxebre and muraee July 27, 2026 13:59
@openshift-ci

openshift-ci Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci

openshift-ci Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign devguyio for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@mgencur

mgencur commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

/retitle NO-JIRA: build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0
/lgtm
/verified bypass

@openshift-ci openshift-ci Bot changed the title build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0 NO-JIRA: build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0 Jul 28, 2026
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Jul 28, 2026
@openshift-ci-robot

openshift-ci-robot commented Jul 28, 2026

Copy link
Copy Markdown

@dependabot[bot]: This pull request explicitly references no jira issue.

Details

In response to this:

Bumps github.com/google/cel-go from 0.28.1 to 0.29.0.

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.29.0

What's Changed

New Features

Bug Fixes

Cost Tracking

Testing & Tooling

Documentation

Commits
  • fa16799 avoid repeated construction of cost tracker (#1357)
  • ea3d5c0 feat(ext): add json encoder (#1340)
  • a4d0d64 startsWith / endsWith runtime cost agreement with checked cost (#1351)
  • d4efa77 Ensure receiver and global matches cost estimates agree (#1350)
  • 13cff33 ext/lists: add max size check to genRange() to prevent OOM (#1310)
  • f0ffa7e Execution frame integration with updated IntepretableV2 (#1344)
  • f1ec2f6 guard int32/uint32 map key narrowing in qualifyInternal (#1337)
  • 258e7c8 Managed execution frame with async call foundations (#1316)
  • 14f6746 validate offset on empty-string path in indexOf and lastIndexOf (#1335)
  • 783267d reject out-of-range minutes in timezone offset parsing (#1336)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by CodeRabbit

  • Chores
  • Updated an internal dependency to the latest supported version.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot

openshift-ci-robot commented Jul 28, 2026

Copy link
Copy Markdown

@mgencur: The verified label has been added.

Details

In response to this:

/retitle NO-JIRA: build(deps): bump github.com/google/cel-go from 0.28.1 to 0.29.0
/lgtm
/verified bypass

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Jul 28, 2026
@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jul 28, 2026
@openshift-merge-bot

openshift-merge-bot Bot commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

Scheduling tests matching the pipeline_run_if_changed or not excluded by pipeline_skip_if_only_changed parameters:
/test e2e-aks
/test e2e-aws
/test e2e-aws-upgrade-hypershift-operator
/test e2e-azure-v2-self-managed
/test e2e-kubevirt-aws-ovn-reduced
/test e2e-v2-aws
/test e2e-v2-gke
/test unit
/test verify

@cwbotbot

cwbotbot commented Jul 28, 2026 •
edited
Loading

Copy link
Copy Markdown

Test Results

e2e-aws

Failed Tests

Total failed tests: 5

  • TestCreateCluster
  • TestCreateCluster/Main
  • TestCreateCluster/Main/EnsureGlobalPullSecret
  • TestCreateCluster/Main/EnsureGlobalPullSecret/Check_if_the_on-disk_kubelet_config.json_matches_the_cluster_pull_secret
  • TestCreateCluster/Main/EnsureGlobalPullSecret/Wait_for_critical_DaemonSets_to_be_ready_-_first_check

e2e-aks

@mgencur

mgencur commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

/retest-required

@openshift-ci

openshift-ci Bot commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-aws 9922427 link true /test e2e-aws

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@enxebre enxebre Awaiting requested review from enxebre
@muraee muraee Awaiting requested review from muraee

Assignees

@mgencur mgencur

Labels

area/ci-tooling Indicates the PR includes changes for CI or tooling jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged. ok-to-test Indicates a non-member PR verified by an org member that is safe to test. verified Signifies that the PR passed pre-merge verification criteria

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

3 participants

@mgencur @openshift-ci-robot @cwbotbot