Skip to content

fix(deps): update dependencies (minor) - #115

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-updates
Open

fix(deps): update dependencies (minor)#115
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-updates

Conversation

@renovate

@renovate renovate Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
github.com/ironcore-dev/controller-utils v0.12.0v0.13.0 age confidence require minor
github.com/ironcore-dev/ironcore v0.4.3v0.5.0 age confidence require minor
golangci-lint v2.12.2v2.13.0 age confidence minor v2.13.1
google/osv-scanner-action v2.3.8v2.5.1 age confidence action minor
osv-scanner v2.4.0v2.5.1 age confidence minor

Release Notes

ironcore-dev/controller-utils (github.com/ironcore-dev/controller-utils)

v0.13.0

Compare Source

Changes

🚀 Features

🧰 Maintenance

ironcore-dev/ironcore (github.com/ironcore-dev/ironcore)

v0.5.0

Compare Source

Changes

⚠️ Breaking

  • Remove the deprecated image field @​Rohit-0505 (#​1498)
    • requires ceph-provider v0.5.0 or higher, if co-deployed

🚀 Features

🐛 Bug Fixes

🧰 Maintenance

golangci/golangci-lint (golangci-lint)

v2.13.0

Compare Source

Released on 2026-08-19

  1. Enhancements
    • 🎉 go1.27 support
  2. Bug fixes
    • fix: cache package facts
  3. Linters new features or changes
    • dupword: from 0.1.7 to 0.1.8 (new option skip-raw-strings)
    • errcheck: from 1.10.0 to 1.20.0
    • exhaustruct_v5: from 4.0.0 to 5.0.2 (new configuration)
    • exhaustruct: deprecated and replaced by exhaustruct_v5
    • fatcontext: from 0.9.0 to 0.10.0 (new options: check-loops, check-function-literals)
    • goconst: from 1.10.0 to 1.11.0 (new options: ignore-map-keys, exclude-types)
    • gofumpt: from 0.9.2 to 0.11.0 (new options: extra.group-params, extra.clothe-returns, extra.balance-calls)
    • gomoddirectives: from 0.8.0 to 0.9.0 (new option: replace-allow-all)
    • gosec: from 2.26.1 to 2.27.1
    • govet-modernize: from 0.44.0 to 0.49.0 (fmtappendf is removed. New analyzers atomictypes, embedlit, errorsastype, importcomment, reflecttypeassert, slicesclip, and slicesbackward. waitgroup is renamed waitgroupgo)
    • iface: from 1.4.3 to 1.5.0 (new analyzer: unusedmethod)
    • noinlineerr: from 1.0.5 to 1.0.6
    • nonamedreturns: from 1.0.6 to 1.0.8 (new option: allow-unused-named-returns)
    • recvcheck: from 0.2.0 to 0.3.0 (new default exclusions)
    • unparam: from 5beb8c8 to 3f964bc
  4. Linters bug fixes
    • clickhouse-go-linter: from 1.2.0 to 1.2.1
    • errname: from 1.1.1 to 1.1.2
    • exhaustruct: from 5.0.2 to 5.0.3
    • funcorder: add missing Function field
    • ginkgolinter: from 0.23.0 to 0.23.1
    • gocheckcompilerdirectives: from 1.3.0 to 1.4.0
    • gocritic: from 0.14.3 to 0.14.4
    • gomoddirectives: add missing IgnoreForbidden field
    • iface: from 1.4.2 to 1.4.3
    • mirror: from 1.3.0 to 1.3.3
    • nilnil: from 1.1.1 to 1.1.2
    • protogetter: from 0.3.20 to 0.3.21
google/osv-scanner-action (google/osv-scanner-action)

v2.5.1

Compare Source

This updates OSV-Scanner to v2.3.8.

What's Changed
Fixes:
  • Preserve package namespaces when querying osv.dev API (fixes #​2978).
  • Re-add support for the OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY environment variable (fixes #​2983).
  • Fix local vulnerability matching (--offline-vulnerabilities) not working when network capability is NetworkOnline.

Full Changelog: google/osv-scanner-action@v2.5.0...v2.5.1

v2.5.0

Compare Source

This updates OSV-Scanner to v2.5.0 as well as:

What's Changed

New Contributors

Full Changelog: google/osv-scanner-action@v2.3.8...v2.5.0

google/osv-scanner (osv-scanner)

v2.5.1

Compare Source

Fixes:
  • Preserve package namespaces when querying osv.dev API (fixes #​2978).
  • Re-add support for the OSV_SCANNER_LOCAL_DB_CACHE_DIRECTORY environment variable (fixes #​2983).
  • Fix local vulnerability matching (--offline-vulnerabilities) not working when network capability is NetworkOnline.

v2.5.0

Compare Source

Features & Refactors:
  • Full OSV-Scalibr pipeline: Migrated scanning, filtering, and matching in osv-scanner to use osv-scalibr end-to-end, so most plugins that's supported in osv-scalibr should be supported via the --experimental-plugins flag (#​2935).

  • New extractors and ecosystem support via osv-scalibr:

    • Add javascript/vsix extractor to support scanning VS Code extension (.vsix) packages.
    • Extend ecosystem mapping for:
      • SUSE
      • Azure Linux / Mariner
      • Alpaquita
      • Mageia
      • openSUSE Leap
      • Debian and Ubuntu PURL
  • PURL Type Resolution: Updated osvscannerjson extractor to map ecosystem names to valid PURL types (golang, gem, cargo, npm, etc.).

Fixes:
  • Bug #​2915 Fix issue where osv-scanner reported already-fixed advisories as unfixed for RHEL-family RPM packages (Red Hat, AlmaLinux, Rocky Linux) with epochs by sending epoch-qualified versions.
  • Fix Python requirements.txt extractor in osv-scalibr, specifically regular expressions used to extract package names and per-requirement options (Fixes #​2940, #​2931)
  • Fix NPM and Composer PURL generation in osv-scalibr, separating package namespace (scope) from package name

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 5am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added ok-to-helm PR is allowed to build an publish helm chart ok-to-image PR is allowed to run container build labels Aug 10, 2026
@renovate
renovate Bot enabled auto-merge August 10, 2026 01:40
@renovate

renovate Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 14 additional dependencies were updated

Details:

Package Change
k8s.io/api v0.36.2 -> v0.36.3
k8s.io/apimachinery v0.36.2 -> v0.36.3
k8s.io/apiserver v0.36.2 -> v0.36.3
k8s.io/client-go v0.36.2 -> v0.36.3
k8s.io/code-generator v0.36.2 -> v0.36.3
k8s.io/component-base v0.36.2 -> v0.36.3
github.com/go-logr/logr v1.4.3 -> v1.4.4
github.com/google/cel-go v0.27.0 -> v0.29.0
golang.org/x/sync v0.21.0 -> v0.22.0
golang.org/x/sys v0.46.0 -> v0.47.0
google.golang.org/grpc v1.82.0 -> v1.82.1
k8s.io/apiextensions-apiserver v0.36.0 -> v0.36.3
k8s.io/kms v0.36.2 -> v0.36.3
k8s.io/streaming v0.36.2 -> v0.36.3

@coveralls

coveralls commented Aug 10, 2026

Copy link
Copy Markdown

Coverage Report for CI Build 32608211342

Coverage remained the same at 39.576%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 566
Covered Lines: 224
Line Coverage: 39.58%
Coverage Strength: 0.98 hits per line

💛 - Coveralls

@renovate
renovate Bot force-pushed the renovate/all-minor-updates branch from 5c405d9 to ff7a599 Compare August 10, 2026 09:51
trevex
trevex previously approved these changes Aug 18, 2026

@trevex trevex left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

@renovate
renovate Bot force-pushed the renovate/all-minor-updates branch 2 times, most recently from a4f058a to 99886a1 Compare August 20, 2026 05:33
@renovate
renovate Bot force-pushed the renovate/all-minor-updates branch from 99886a1 to 863e2df Compare August 23, 2026 00:34
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ok-to-helm PR is allowed to build an publish helm chart ok-to-image PR is allowed to run container build

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants