Skip to content

🌱 Bump the all-go-mod-patch-and-minor group across 1 directory with 14 updates#250

Closed
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/hack/tools/all-go-mod-patch-and-minor-eb41b89533
Closed

🌱 Bump the all-go-mod-patch-and-minor group across 1 directory with 14 updates#250
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/go_modules/hack/tools/all-go-mod-patch-and-minor-eb41b89533

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Feb 16, 2026

Bumps the all-go-mod-patch-and-minor group with 8 updates in the /hack/tools directory:

Package From To
cloud.google.com/go/storage 1.50.0 1.60.0
github.com/onsi/gomega 1.36.2 1.39.1
github.com/spf13/pflag 1.0.6 1.0.10
github.com/valyala/fastjson 1.6.4 1.6.7
k8s.io/api 0.32.2 0.32.12
k8s.io/apiextensions-apiserver 0.32.2 0.32.12
sigs.k8s.io/controller-runtime 0.20.2 0.20.4
sigs.k8s.io/controller-tools 0.17.0 0.20.1

Updates cloud.google.com/go/storage from 1.50.0 to 1.60.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage 1.60.0

1.60.0 (2026-02-10)

Features

  • adding support for max-retry-duration for all api other than resumable-upload (#13749) (31c352bd)

  • support checksum validation in resumable json uploads (#13573) (337ca078)

  • Added a new field ComposeObjectRequest.delete_source_objects field (PiperOrigin-RevId: 863087065) (611f2392)

Bug Fixes

Documentation

  • Updated documentation for BidiReadObject, ReadObjectRequest, and ObjectContexts (PiperOrigin-RevId: 863087065) (611f2392)

storage 1.59.2

1.59.2 (2026-01-28)

Bug Fixes

  • deadlock in event loop while coordinating channels (#13652) (ff6c8e78)

storage 1.59.1

1.59.1 (2026-01-14)

Bug Fixes

storage 1.59.0

1.59.0 (2026-01-09)

Features

  • add default checksums for appendable writer (excludes appendable takeover writer) (#13379) (647baf32)

Bug Fixes

... (truncated)

Commits

Updates github.com/google/go-cmp from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/google/go-cmp's releases.

v0.7.0

New API:

  • (#367) Support compare functions with SortSlices and SortMaps

Panic messaging:

  • (#370) Detect proto.Message types when failing to export a field
Commits

Updates github.com/onsi/gomega from 1.36.2 to 1.39.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.39.1

1.39.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

v1.39.0

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

v1.38.3

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

v1.38.2

1.38.2

  • roll back to go 1.23.0 [c404969]

v1.38.1

1.38.1

Fixes

Numerous minor fixes and dependency bumps

v1.38.0

1.38.0

Features

  • gstruct handles extra unexported fields [4ee7ed0]

Fixes

  • support [] in IgnoringTopFunction function signatures (#851) [36bbf72]

Maintenance

  • Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846) [529d408]
  • Fix typo [acd1f55]
  • Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835) [bae65a0]
  • Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842) [8dda91f]
  • Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843) [212d812]
  • Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839) [59bd7f9]
  • Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834) [328c729]
  • Bump uri from 1.0.2 to 1.0.3 in /docs (#826) [9a798a1]
  • Bump golang.org/x/net from 0.37.0 to 0.39.0 (#841) [04a72c6]

... (truncated)

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.39.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

1.38.2

  • roll back to go 1.23.0 [c404969]

1.38.1

Fixes

Numerous minor fixes and dependency bumps

1.38.0

Features

  • gstruct handles extra unexported fields [4ee7ed0]

Fixes

  • support [] in IgnoringTopFunction function signatures (#851) [36bbf72]

Maintenance

  • Bump golang.org/x/net from 0.40.0 to 0.41.0 (#846) [529d408]
  • Fix typo [acd1f55]
  • Bump google.golang.org/protobuf from 1.36.5 to 1.36.6 (#835) [bae65a0]
  • Bump nokogiri from 1.18.4 to 1.18.8 in /docs (#842) [8dda91f]
  • Bump golang.org/x/net from 0.39.0 to 0.40.0 (#843) [212d812]
  • Bump github.com/onsi/ginkgo/v2 from 2.23.3 to 2.23.4 (#839) [59bd7f9]
  • Bump nokogiri from 1.18.1 to 1.18.4 in /docs (#834) [328c729]
  • Bump uri from 1.0.2 to 1.0.3 in /docs (#826) [9a798a1]
  • Bump golang.org/x/net from 0.37.0 to 0.39.0 (#841) [04a72c6]

1.37.0

Features

  • add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

1.36.3

... (truncated)

Commits

Updates github.com/spf13/pflag from 1.0.6 to 1.0.10

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.10

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

v1.0.9

What's Changed

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

v1.0.7

What's Changed

... (truncated)

Commits
  • 0491e57 Merge pull request #448 from thaJeztah/fix_go_version
  • 72abab1 Merge pull request #447 from thaJeztah/fix_deprecation_comment
  • 7e4dfb1 Test on Go 1.12
  • 18a9d17 move Func, BoolFunc, tests as they require go1.21
  • c5b9e98 remove uses of errors.Is, which requires go1.13
  • 45a4873 fix deprecation comment for (FlagSet.)ParseErrorsWhitelist
  • 1043857 Merge pull request #446 from spf13/fix-backwards-compat
  • 7412009 fix: Restore ParseErrorsWhitelist name for now
  • b9c16fa Merge pull request #444 from spf13/reset-args-even-if-empty
  • 40abc49 Merge pull request #443 from spf13/silence-errhelp
  • Additional commits viewable in compare view

Updates github.com/valyala/fastjson from 1.6.4 to 1.6.7

Commits

Updates golang.org/x/oauth2 from 0.26.0 to 0.35.0

Commits
  • 89ff2e1 google: add safer credentials JSON loading options.
  • acc3815 endpoints: fix %q verb use with wrong type
  • f28b0b5 all: fix some comments
  • fd15e0f x/oauth2: populate RetrieveError from DeviceAuth
  • 792c877 oauth2: use strings.Builder instead of bytes.Buffer
  • 014cf77 all: upgrade go directive to at least 1.24.0 [generated]
  • 3c76ce5 endpoints: correct Naver OAuth2 endpoint URLs
  • cf14319 oauth2: fix expiration time window check
  • 32d34ef internal: include clientID in auth style cache key
  • 2d34e30 oauth2: replace a magic number with AuthStyleUnknown
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.221.0 to 0.265.0

Release notes

Sourced from google.golang.org/api's releases.

v0.265.0

0.265.0 (2026-02-04)

Features

v0.264.0

0.264.0 (2026-01-29)

Features

v0.263.0

0.263.0 (2026-01-27)

Features

v0.262.0

0.262.0 (2026-01-22)

Features

Bug Fixes

  • internaloption: Add WithTelemetryAttributes (#3442) (2a5c807)

v0.261.0

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.265.0 (2026-02-04)

Features

0.264.0 (2026-01-29)

Features

0.263.0 (2026-01-27)

Features

0.262.0 (2026-01-22)

Features

Bug Fixes

  • internaloption: Add WithTelemetryAttributes (#3442) (2a5c807)

0.261.0 (2026-01-20)

Features

... (truncated)

Commits

Updates k8s.io/api from 0.32.2 to 0.32.12

Commits

Updates k8s.io/apiextensions-apiserver from 0.32.2 to 0.32.12

Commits

Updates k8s.io/apimachinery from 0.32.2 to 0.32.12

Commits

Updates k8s.io/client-go from 0.32.2 to 0.32.12

Commits
  • 4cbd4f7 Update dependencies to v0.32.12 tag
  • 55b810f Merge pull request #134591liggitt/automated-cherry-pick-of-#134588
  • 7e6bf40 Remove invalid SAN certificate construction
  • See full diff in compare view

Updates sigs.k8s.io/controller-runtime from 0.20.2 to 0.20.4

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.20.4

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.20.3...v0.20.4

v0.20.3

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.20.2...v0.20.3

Commits
  • 0f7927c Merge pull request #3179 from alvaroaleman/lowpdefault
  • 9951869 🌱 TypedRequestForOwner: Decrease priority when unchanged
  • c7d5d83 Fix godoc of TypedEventHandler
  • 2062f3a 🌱 Remove redundant WithLowPriorityWhenUnchanged in builder
  • 2af3164 🌱 Followups to default low priority in mappers
  • 29debb1 🌱 Handlers: Use low priority when object is unchanged and priority q
  • 5355658 🐛Implement priorityqueue as default on handlers if using priorityqueue interf...
  • 3156ace Merge pull request #3175 from k8s-infra-cherrypick-robot/cherry-pick-3166-to-...
  • 4ae5f39 add version.version to tools/setup-envtest to show installed version
  • 833f208 Merge pull request #3173 from k8s-infra-cherrypick-robot/cherry-pick-3167-to-...
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-tools from 0.17.0 to 0.20.1

Release notes

Sourced from sigs.k8s.io/controller-tools's releases.

v0.20.1

What's Changed

Full Changelog: kubernetes-sigs/controller-tools@v0.20.0...v0.20.1

v0.20.0

What's Changed

Misc

envtest

Dependency bumps

... (truncated)

Commits
  • 5d9089d Merge pull request #1336 from k8s-infra-cherrypick-robot/cherry-pick-1331-to-...
  • 852a7e7 update test case
  • bb8ed8a support nested pointer to type-aliased slices
  • 60c448e Merge pull request #1319 from sbueringer/pr-promo-envtest-1.35
  • b7d3668 Promotion of envtest release for Kubernetes v1.35.0
  • b5f217f Merge pull request #1317 from dongjiang1989/envtest-v1.35.0-rc.1
  • 3cbb76e Merge pull request #1318 from sbueringer/pr-bump-1.35
  • 52f5e83 add envtest version
  • 10c819c Adjust to changes in validation error messages
  • 9f6a8ba Adjust generated ApplyConfigurations to v0.35
  • Additional commits viewable in compare view

Updates sigs.k8s.io/yaml from 1.4.0 to 1.6.0

Release notes

Sourced from sigs.k8s.io/yaml's releases.

v1.6.0

What's Changed

v1.5.0

Full Changelog: kubernetes-sigs/yaml@v1.4.0...v1.5.0

Commits
  • 048d724 Merge pull request #132 from thockin/master
  • 23c836c Bolster tests, mostly in error-handling
  • 2e3340b Add compact output tests
  • 4a4f539 Add test case for tabs in multi-line strings
  • 13509ad Change which methods get a newline and fix tests
  • 59c2c43 Add compact mode so KYAML can be used in more places
  • abc1add kyaml: Implement escaping closer to YAML spec
  • 7749171 Add a yamlfmt cmd
  • a932007 Add KYAML support
  • 0f318dc Merge pull request #134 from kubernetes-sigs/forgot-to-add-redirects-for-cons...
  • Additional commits viewable in compare view
Description has been truncated

…4 updates

Bumps the all-go-mod-patch-and-minor group with 8 updates in the /hack/tools directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.50.0` | `1.60.0` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.36.2` | `1.39.1` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.6` | `1.0.10` |
| [github.com/valyala/fastjson](https://github.com/valyala/fastjson) | `1.6.4` | `1.6.7` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.32.2` | `0.32.12` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.32.2` | `0.32.12` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.20.2` | `0.20.4` |
| [sigs.k8s.io/controller-tools](https://github.com/kubernetes-sigs/controller-tools) | `0.17.0` | `0.20.1` |



Updates `cloud.google.com/go/storage` from 1.50.0 to 1.60.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v1.50.0...spanner/v1.60.0)

Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](google/go-cmp@v0.6.0...v0.7.0)

Updates `github.com/onsi/gomega` from 1.36.2 to 1.39.1
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.36.2...v1.39.1)

Updates `github.com/spf13/pflag` from 1.0.6 to 1.0.10
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.6...v1.0.10)

Updates `github.com/valyala/fastjson` from 1.6.4 to 1.6.7
- [Commits](valyala/fastjson@v1.6.4...v1.6.7)

Updates `golang.org/x/oauth2` from 0.26.0 to 0.35.0
- [Commits](golang/oauth2@v0.26.0...v0.35.0)

Updates `google.golang.org/api` from 0.221.0 to 0.265.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.221.0...v0.265.0)

Updates `k8s.io/api` from 0.32.2 to 0.32.12
- [Commits](kubernetes/api@v0.32.2...v0.32.12)

Updates `k8s.io/apiextensions-apiserver` from 0.32.2 to 0.32.12
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.32.2...v0.32.12)

Updates `k8s.io/apimachinery` from 0.32.2 to 0.32.12
- [Commits](kubernetes/apimachinery@v0.32.2...v0.32.12)

Updates `k8s.io/client-go` from 0.32.2 to 0.32.12
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.32.2...v0.32.12)

Updates `sigs.k8s.io/controller-runtime` from 0.20.2 to 0.20.4
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.20.2...v0.20.4)

Updates `sigs.k8s.io/controller-tools` from 0.17.0 to 0.20.1
- [Release notes](https://github.com/kubernetes-sigs/controller-tools/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-tools/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-tools@v0.17.0...v0.20.1)

Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/yaml@v1.4.0...v1.6.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-version: 1.60.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/google/go-cmp
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/valyala/fastjson
  dependency-version: 1.6.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: google.golang.org/api
  dependency-version: 0.265.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/api
  dependency-version: 0.32.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.32.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.32.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: k8s.io/client-go
  dependency-version: 0.32.12
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.20.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: sigs.k8s.io/controller-tools
  dependency-version: 0.20.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 16, 2026

Labels

The following labels could not be found: area/dependency. Please create it before Dependabot can add it to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@spectro-prow
Copy link

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
To complete the pull request process, please assign after the PR has been reviewed.
You can assign the PR to them by writing /assign in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@spectro-prow
Copy link

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a spectrocloud member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Copy link

@bulwark-spectrocloud bulwark-spectrocloud bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ GoVulnCheck scan found vulnerabilities:

  1. GO-2025-3754
    • Module: github.com/cloudflare/circl
    • Found in: v1.3.7
    • Fixed in: v1.6.1
    • Example Traces:
      1. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ed448.init
      2. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ecc.init
      3. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ed25519.init
      4. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls ed25519.init
      5. cmd/clusterctl/internal/test/fake_github.go:24:2: test.init calls github.init, which eventually calls x25519.init

Please review these findings and fix the issues before merging.

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Feb 23, 2026

Superseded by #254.

@dependabot dependabot bot closed this Feb 23, 2026
@dependabot dependabot bot deleted the dependabot/go_modules/hack/tools/all-go-mod-patch-and-minor-eb41b89533 branch February 23, 2026 12:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant