Repository navigation
chore(deps): update golang - #20
Conversation
scality-renovate
Bot
added
dependencies
Dependency Bump EvaluationVersion change: Go 1.26.5 -> 1.26.6 (patch) Changes (Go 1.26.6, released 2026-08-13): Security fixes (7):
Bug fixes (5): compiler correctness (prove bug, MIPS spill/miscompile), runtime SIGSEGV under high panic load. Breaking changes: None Security concerns: None negative -- this bump fixes 7 security issues. Merging promptly is recommended. Impact on codebase: This project does not directly import the most critical affected packages ( CI status: Checks are in progress (build, generate, lint, test, test-e2e). Merge once CI is green. Recommendation: SAFE TO MERGE (once CI passes) -- Claude Code |
b8b94eb to
2b18803
Compare
scality-renovate
Bot
changed the title
2b18803 to
438bbf4
Compare
scality-renovate
Bot
changed the title
217ffdf to
63d5f5b
Compare
63d5f5b to
091801e
Compare
scality-renovate
Bot
changed the title
091801e to
7cc5933
Compare
scality-renovate
Bot
changed the title
Dependency Bump EvaluationUpdated for head Version change:
Semver bump type: minor (kustomize: patch) Changes:
Breaking changes: None for this codebase. Security concerns: None found. All changes are build tooling from upstream projects. Go 1.27.3 brings current stdlib fixes into the shipped binary. No runtime module in Impact on codebase:
Recommendation: REVIEW REQUIRED Notes:
— Claude Code |
7cc5933 to
4620f25
Compare
scality-renovate
Bot
changed the title
4620f25 to
46071b5
Compare
scality-renovate
Bot
changed the title
46071b5 to
140116b
Compare
scality-renovate
Bot
changed the title
140116b to
7256b6d
Compare
scality-renovate
Bot
changed the title
fabb8f8 to
1cc7160
Compare
1cc7160 to
1ae8d32
Compare
The golang group bumps GOLANGCI_LINT_VERSION in the Makefile, but the binary the CI runs is built from .custom-gcl.yml, which Renovate does not track. v2.12.2 cannot read the export data of Go 1.27. Also disable modernize/embedlit, new with Go 1.27: it would rewrite tests and the controller, which belongs in its own change.
The golang group bumps controller-gen, which writes its version in the CRD annotations. Only that annotation changes.
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
| module github.com/scality/node-warden-operator | ||
|
|
||
| go 1.26.5 | ||
| go 1.27.3 |
There was a problem hiding this comment.
The minimum Go version is now 1.27.3, but the devcontainer still uses mcr.microsoft.com/devcontainers/go:1.26-trixie (.devcontainer/Dockerfile:1), and CONTRIBUTING.md:11 still says "Go 1.26+". Bump the devcontainer base image to 1.27-trixie. Then change the doc to "Go 1.27+" so it doesn't go stale.
The golang group moves go.mod to 1.27.3 but not the devcontainer base image, which Renovate does not group with Go here. Align it and the minimum version in CONTRIBUTING.md.
This PR contains the following updates:
1.26.5→1.27.31.26→1.27v2.14.0→v2.15.0v0.21.0→v0.23.0v5.8.1→v5.8.3Release Notes
golangci/golangci-lint
v2.15.0Compare Source
Released on 2026-10-16
errcheck: from 1.20.0 to 1.30.0exhaustive: from 0.13.0 to 0.15.0 (gocognit: from 1.2.1 to 1.3.0golines: from 0.15.0 to 0.16.0govet-modernize: from 0.50.0 to 0.52.0loggercheck: from 0.12.0 to 0.13.0predeclared: from 0.2.2 to 0.3.0wrapcheck: from 2.12.0 to 2.13.0bidichk: from 0.3.3 to 0.3.4canonicalheader: froma25c71ctoe18e5c5gofumpt: improve deprecation logsgosec: improve concurrency default valueiface: from 1.5.1 to 1.5.3paralleltest: from 1.0.15 to 1.0.16revive: from 1.17.0 to 1.17.1revive: the rulescontext-keys-type,errorf,modifies-value-receiver,range-val-address,string-of-int,time-equal,time-naming,unexported-return,unhandled-error,var-declarationare working (less randomly).rowserrcheck: fromc5f79b8toe0740d5staticcheck: from 0.8.1 to 0.8.2revive)exhaustivelinter:explicit-exhaustive-switchandexplicit-exhaustive-maphave been replaced byexplicit-exhaustive.checkthe valuemaphas been replaced bymapliteral.ignore-enum-members(string) has been replaced byignore-constants(slice).ignore-enum-types(string) has been replaced byignore-types(slice).kubernetes-sigs/controller-tools
v0.23.0Compare Source
This is an additional minor release independent of the Kubernetes release cadence to deliver
#1474 because this bug fix is a breaking change so it was not possible to backport it.
What's Changed
Dependency bumps
Full Changelog: kubernetes-sigs/controller-tools@v0.22.0...v0.23.0
v0.22.0Compare Source
What's Changed
oneOfmarkers by @HadrienPatte in #1408encoding.TextMarshalertypes as CRD map keys by @HadrienPatte in #1419omitzeroinOneOfconstraint validation by @HadrienPatte in #1375Misc
envtest
Dependency bumps
New Contributors
Full Changelog: kubernetes-sigs/controller-tools@v0.21.0...v0.22.0
kubernetes-sigs/kustomize
v5.8.3Compare Source
This release eliminates dependencies and compressed blobs that were an issue when bumping kustomize-in-kubectl.
No functional changes in kustomize.
chore
#6310: chore: bump to Go 1.27 and latest kube-openapi
#6318: Update kyaml to v0.21.3
#6320: Update cmd/config to v0.21.3
#6321: Update api to v0.21.3
v5.8.2Compare Source
Introduction
In this release, we implemented refactoring to update dependencies and add new features.
This release adds the
kustomize edit add configurationandkustomize edit remove componentcommands. #6037 #6083The built-in OpenAPI schema is now loaded from a pre-compiled bundle embedded in the binary. #6190
The schema itself is still based on Kubernetes v1.21.2, so the output of
kustomize buildis not expected to change. If you notice any difference, please file an issue.Feature
#6037: feat: add support for 'kustomize edit add configuration' command
#6083: Add kustomize edit remove component command
fix
#6263: fix: report an error when the fetched openapi schema is not JSON
Dependencies
#6075: update go 1.25.7
#6078: bump go-git and x/crypt
#6085: update otel lib to v1.40.0
#6134: drop 'go-spew' dependencies and update dependencies
#6138: bump k8s.io/kube-openapi, drop github.com/mailru/easyjson
#6186: bump/go v1.26.5
#6187: update vuln dependencies at 2026/07
#6236: chore: bump stretch/testify pkg to remove old yaml dependencies
#6248: build(deps): bump golang.org/x/text from 0.38.0 to 0.41.0
#6249: build(deps): bump go.yaml.in/yaml/v2 from 2.4.2 to 2.4.4
#6251: build(deps): bump github.com/go-errors/errors from 1.4.2 to 1.5.1
#6254: build(deps): bump github.com/google/gnostic-models from 0.7.0 to 0.7.1
#6255: build(deps): bump google.golang.org/protobuf from 1.36.11 to 1.36.12
#6256: build(deps): bump golang.org/x/sys from 0.45.0 to 0.47.0
#6266: build(deps): bump golang.org/x/text from 0.41.0 to 0.42.0
#6267: build(deps): bump golang.org/x/sys from 0.47.0 to 0.48.0
#6273: bump go-git, kin-openapi and k8s.io
chore
#6190: chore: refactor read scheme to openapi from kubernetes api definition
#6274: build: use the golangci-lint v2 with release binary
#6305: Update kyaml to v0.21.2
#6306: Update cmd/config to v0.21.2
#6307: Update api to v0.21.2
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Mend Renovate CLI.