Update go modules (main) (minor) by red-hat-konflux[bot] · Pull Request #3285 · conforma/cli

red-hat-konflux · 2026-05-11T03:00:37Z

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Type	Update	Pending
4d63.com/gocheckcompilerdirectives	`v1.3.0` → `v1.4.0`	indirect	minor
cloud.google.com/go/auth	`v0.20.0` → `v0.22.0`	indirect	minor	`v0.23.0`
cloud.google.com/go/firestore	`v1.21.0` → `v1.24.0`	indirect	minor	`v1.25.0`
cloud.google.com/go/iam	`v1.11.0` → `v1.12.0`	indirect	minor	`v1.13.0`
cloud.google.com/go/kms	`v1.31.0` → `v1.33.0`	indirect	minor
cloud.google.com/go/longrunning	`v1.0.0` → `v1.2.0`	indirect	minor
cloud.google.com/go/monitoring	`v1.25.0` → `v1.30.0`	indirect	minor
cloud.google.com/go/storage	`v1.62.0` → `v1.64.0`	indirect	minor
cuelang.org/go	`v0.16.0` → `v0.17.1`	indirect	minor
cuelang.org/go	`v0.16.0` → `v0.17.1`	require	minor
dev.gaijin.team/go/golib	`v0.6.0` → `v0.8.1`	indirect	minor
github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider	`v0.15.0` → `v0.20.0`	indirect	minor
github.com/Azure/azure-sdk-for-go/sdk/azcore	`v1.21.1` → `v1.22.0`	indirect	minor
github.com/Azure/azure-sdk-for-go/sdk/azidentity	`v1.13.1` → `v1.14.0`	indirect	minor
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys	`v1.4.0` → `v1.5.0`	indirect	minor
github.com/AzureAD/microsoft-authentication-library-for-go	`v1.6.0` → `v1.8.0`	indirect	minor
github.com/CycloneDX/cyclonedx-go	`v0.10.0` → `v0.11.0`	indirect	minor
github.com/CycloneDX/cyclonedx-go	`v0.10.0` → `v0.11.0`	require	minor
github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp	`v1.32.0` → `v1.35.0`	indirect	minor
github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric	`v0.55.0` → `v0.59.0`	indirect	minor
github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping	`v0.55.0` → `v0.59.0`	indirect	minor
github.com/IBM/sarama	`v1.45.2` → `v1.60.1`	indirect	minor
github.com/Masterminds/semver/v3	`v3.4.0` → `v3.5.0`	indirect	minor
github.com/Microsoft/go-winio	`ad3df93` → `7561016`	indirect	digest
github.com/ProtonMail/go-crypto	`v1.3.0` → `v1.4.1`	indirect	minor
github.com/ThalesIgnite/crypto11	`v1.2.5` → `v1.6.8`	indirect	minor
github.com/alecthomas/chroma/v2	`v2.23.1` → `v2.27.0`	indirect	minor
github.com/alessio/shellescape	`v1.4.2` → `v1.6.0`	indirect	minor
github.com/alibabacloud-go/tea	`v1.2.2` → `v1.5.3`	indirect	minor
github.com/aliyun/credentials-go	`v1.3.9` → `v1.4.12`	indirect	minor
github.com/anchore/go-struct-converter	`v0.1.0` → `v0.2.1`	indirect	minor
github.com/aws/aws-sdk-go-v2	`v1.42.0` → `v1.43.4`	indirect	minor
github.com/aws/aws-sdk-go-v2/service/ecr	`v1.55.3` → `v1.60.4`	indirect	minor
github.com/aws/aws-sdk-go-v2/service/ecrpublic	`v1.38.10` → `v1.41.4`	indirect	minor
github.com/aws/aws-sdk-go-v2/service/kms	`v1.51.1` → `v1.55.4`	indirect	minor
github.com/aws/aws-sdk-go-v2/service/s3	`v1.97.3` → `v1.106.5`	indirect	minor	`v1.107.0`
github.com/aws/aws-sdk-go-v2/service/signin	`v1.0.11` → `v1.5.4`	indirect	minor
github.com/aws/aws-sdk-go-v2/service/sso	`v1.30.17` → `v1.33.4`	indirect	minor
github.com/bmatcuk/doublestar/v4	`v4.6.1` → `v4.10.0`	indirect	minor
github.com/bombsimon/wsl/v5	`v5.6.0` → `v5.8.0`	indirect	minor
github.com/charmbracelet/x/ansi	`v0.10.1` → `v0.11.7`	indirect	minor
github.com/clipperhouse/displaywidth	`v0.10.0` → `v0.11.0`	indirect	minor
github.com/clipperhouse/uax29/v2	`v2.6.0` → `v2.7.0`	indirect	minor
github.com/conforma/go-containerregistry	`ae5f0ae` → `f9eefe1`	replace	digest
github.com/containerd/typeurl/v2	`v2.2.3` → `v2.3.0`	indirect	minor
github.com/coreos/go-oidc/v3	`v3.19.0` → `v3.20.0`	indirect	minor
github.com/cucumber/godog	`v0.15.0` → `v0.16.0`	require	minor
github.com/cyphar/filepath-securejoin	`v0.6.1` → `v0.7.0`	indirect	minor
github.com/daixiang0/gci	`v0.13.7` → `v0.14.0`	require	minor
github.com/dgraph-io/ristretto/v2	`v2.2.0` → `v2.4.2`	indirect	minor
github.com/digitorus/pkcs7	`3a137a8` → `ffadbf3`	indirect	digest
github.com/digitorus/timestamp	`220c5c2` → `c455327`	indirect	digest
github.com/dlclark/regexp2	`v1.11.5` → `v1.12.0`	indirect	minor
github.com/docker/cli	`v29.5.3+incompatible` → `v29.7.2+incompatible`	indirect	minor
github.com/docker/go-connections	`v0.7.0` → `v0.8.1`	indirect	minor
github.com/felixge/httpsnoop	`v1.0.4` → `v1.1.0`	indirect	minor
github.com/gdamore/tcell/v2	`v2.9.0` → `v2.13.10`	indirect	minor
github.com/go-ole/go-ole	`v1.2.6` → `v1.3.0`	indirect	minor
github.com/go-openapi/jsonpointer	`v0.23.1` → `v0.24.0`	indirect	minor
github.com/go-openapi/loads	`v0.24.0` → `v0.25.0`	indirect	minor
github.com/go-openapi/runtime	`v0.32.4` → `v0.33.0`	indirect	minor
github.com/go-openapi/runtime	`v0.32.4` → `v0.33.0`	require	minor
github.com/go-openapi/runtime/server-middleware	`v0.30.0` → `v0.33.0`	indirect	minor
github.com/go-openapi/strfmt	`v0.26.4` → `v0.27.0`	indirect	minor
github.com/go-openapi/strfmt	`v0.26.4` → `v0.27.0`	require	minor
github.com/go-openapi/swag	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/go-openapi/swag/cmdutils	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/go-openapi/swag/conv	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/go-openapi/swag/fileutils	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/go-openapi/swag/jsonname	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/go-openapi/swag/jsonutils	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/go-openapi/swag/loading	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/go-openapi/swag/mangling	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/go-openapi/swag/netutils	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/go-openapi/swag/stringutils	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/go-openapi/swag/typeutils	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/go-openapi/swag/yamlutils	`v0.26.1` → `v0.28.0`	indirect	minor
github.com/goccy/go-yaml	`v1.18.0` → `v1.19.2`	indirect	minor
github.com/golangci/dupl	`f665c8d` → `c99c5cf`	indirect	digest
github.com/golangci/gofmt	`d62b90e` → `e7be49a`	indirect	digest
github.com/golangci/golangci-lint/v2	`v2.11.4` → `v2.12.2`	require	minor
github.com/google/cel-go	`v0.28.0` → `v0.30.0`	indirect	minor	`v0.31.0`
github.com/google/flatbuffers	`v25.2.10+incompatible` → `v25.12.19+incompatible`	indirect	minor
github.com/google/go-containerregistry/pkg/authn/k8schain	`7a66278` → `7b32099`	indirect	digest
github.com/google/go-containerregistry/pkg/authn/kubernetes	`098045d` → `7b32099`	indirect	digest
github.com/google/go-querystring	`v1.1.0` → `v1.2.0`	indirect	minor
github.com/google/pprof	`545e8a4` → `ef3492d`	indirect	digest
github.com/google/safetext	`5a72de7` → `1fb717a`	indirect	digest
github.com/googleapis/gax-go/v2	`v2.22.0` → `v2.23.0`	indirect	minor
github.com/grpc-ecosystem/grpc-gateway/v2	`v2.29.0` → `v2.30.0`	indirect	minor
github.com/hashicorp/hcl/v2	`v2.23.0` → `v2.24.0`	indirect	minor
github.com/hashicorp/vault/api	`v1.22.0` → `v1.23.0`	indirect	minor
github.com/huandu/go-sqlbuilder	`v1.39.1` → `v1.42.1`	indirect	minor
github.com/in-toto/archivista	`v0.10.0` → `v0.11.1`	indirect	minor
github.com/in-toto/attestation	`v1.1.2` → `v1.2.0`	indirect	minor
github.com/in-toto/go-witness	`v0.9.1` → `v0.12.0`	indirect	minor
github.com/in-toto/in-toto-golang	`v0.10.0` → `v0.11.0`	indirect	minor
github.com/jedisct1/go-minisign	`661be99` → `a09352b`	indirect	digest
github.com/jgautheron/goconst	`v1.8.2` → `v1.11.0`	indirect	minor
github.com/kevinburke/ssh_config	`v1.2.0` → `v1.6.0`	indirect	minor
github.com/kisielk/errcheck	`v1.10.0` → `v1.20.0`	indirect	minor
github.com/klauspost/compress	`v1.18.6` → `v1.19.2`	indirect	minor
github.com/klauspost/cpuid/v2	`v2.3.0` → `v2.4.0`	indirect	minor
github.com/ldez/gomoddirectives	`v0.8.0` → `v0.9.0`	indirect	minor
github.com/lestrrat-go/dsig	`v1.0.0` → `v1.3.0`	indirect	minor
github.com/lestrrat-go/jwx/v3	`v3.0.13` → `v3.2.0`	indirect	minor
github.com/letsencrypt/boulder	`v0.20260309.0` → `v0.20260804.0`	indirect	minor
github.com/lib/pq	`v1.11.2` → `v1.12.3`	indirect	minor
github.com/lucasb-eyer/go-colorful	`v1.3.0` → `v1.4.1`	indirect	minor
github.com/lufia/plan9stats	`39d0f17` → `341c2f0`	indirect	digest
github.com/lufia/plan9stats	`b1d8f4d` → `341c2f0`	indirect	digest
github.com/magiconair/properties	`v1.8.10` → `v1.18.11`	indirect	minor
github.com/manuelarte/funcorder	`v0.5.0` → `v0.6.0`	indirect	minor
github.com/maruel/natural	`v1.1.1` → `v1.3.0`	indirect	minor
github.com/moby/buildkit	`v0.29.0` → `v0.32.2`	indirect	minor
github.com/moby/go-archive	`v0.2.0` → `v0.3.3`	indirect	minor
github.com/moby/sys/sequential	`v0.6.0` → `v0.7.0`	indirect	minor
github.com/montanaflynn/stats	`v0.7.1` → `v0.12.2`	indirect	minor
github.com/olekukonko/errors	`v1.2.0` → `v1.3.0`	indirect	minor
github.com/open-policy-agent/conftest	`v0.68.2` → `v0.69.0`	require	minor
github.com/open-policy-agent/opa	`v1.15.2` → `v1.19.0`	indirect	minor
github.com/open-policy-agent/opa	`v1.15.2` → `v1.19.0`	require	minor
github.com/pelletier/go-toml/v2	`v2.3.0` → `v2.4.3`	indirect	minor
github.com/pkg/diff	`20ebb0f` → `4e6772a`	require	digest
github.com/planetscale/vtprotobuf	`0393e58` → `8ae5a48`	indirect	digest
github.com/power-devops/perfstat	`5aafc22` → `8845660`	indirect	digest
github.com/power-devops/perfstat	`82ca368` → `8845660`	indirect	digest
github.com/prometheus/client_golang	`v1.23.2` → `v1.24.1`	indirect	minor
github.com/prometheus/common	`v0.68.0` → `v0.70.1`	indirect	minor
github.com/prometheus/procfs	`v0.20.1` → `v0.21.1`	indirect	minor
github.com/protocolbuffers/txtpbfmt	`a481f6a` → `1fd8a60`	indirect	digest
github.com/raeperd/recvcheck	`v0.2.0` → `v0.3.0`	indirect	minor
github.com/rogpeppe/go-internal	`v1.14.1` → `v1.16.0`	indirect	minor
github.com/sagikazarmark/locafero	`v0.11.0` → `v0.12.0`	indirect	minor
github.com/securego/gosec/v2	`v2.24.8-0.20260309165252-619ce2117e08` → `v2.28.0`	indirect	minor
github.com/shirou/gopsutil/v3	`v3.23.12` → `v3.24.5`	indirect	minor
github.com/shoenig/go-m1cpu	`v0.1.6` → `v0.2.2`	indirect	minor
github.com/sigstore/cosign/v3	`v3.0.4` → `v3.1.3`	require	minor
github.com/sigstore/rekor-tiles/v2	`v2.0.1` → `v2.3.0`	indirect	minor
github.com/sigstore/rekor-tiles/v2	`v2.2.2-0.20260601073857-5d098a2b6443` → `v2.3.0`	indirect	minor
github.com/sigstore/sigstore-go	`v1.1.4` → `v1.3.0`	indirect	minor
github.com/sigstore/sigstore-go	`v1.2.1` → `v1.3.0`	require	minor
github.com/sigstore/timestamp-authority/v2	`v2.0.3` → `v2.1.3`	indirect	minor
github.com/sigstore/timestamp-authority/v2	`v2.0.4` → `v2.1.3`	indirect	minor
github.com/sourcegraph/go-diff	`v0.7.0` → `v0.8.0`	indirect	minor
github.com/spiffe/go-spiffe/v2	`v2.6.0` → `v2.8.1`	indirect	minor
github.com/tektoncd/chains	`v0.26.2` → `v0.29.0`	require	minor
github.com/tektoncd/cli	`v0.44.1` → `v0.46.0`	require	minor
github.com/tektoncd/triggers	`v0.35.0` → `v0.37.0`

✂ Note

PR body was truncated to here.

red-hat-konflux · 2026-05-11T03:00:39Z

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: acceptance/go.sum

Command failed: go get -t ./...
go: github.com/alessio/shellescape@v1.6.1: parsing go.mod:
	module declares its path as: al.essio.dev/pkg/shellescape
	        but was required as: github.com/alessio/shellescape

File name: go.sum

Command failed: go get -t ./...
go: github.com/ThalesIgnite/crypto11@v1.6.8: parsing go.mod:
	module declares its path as: github.com/eclipse-keypont/crypto11
	        but was required as: github.com/ThalesIgnite/crypto11

File name: tools/go.sum

Command failed: go get -t ./...
go: github.com/ThalesIgnite/crypto11@v1.6.8: parsing go.mod:
	module declares its path as: github.com/eclipse-keypont/crypto11
	        but was required as: github.com/ThalesIgnite/crypto11

fullsend-ai-review · 2026-08-27T03:20:59Z

🤖 Finished Review · ✅ Success · Started 3:20 AM UTC · Completed 3:32 AM UTC

Commit: 87c4a29 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.92

fullsend-ai-review · 2026-08-28T02:41:53Z

🤖 Finished Review · ✅ Success · Started 2:41 AM UTC · Completed 2:55 AM UTC

Commit: 87c4a29 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.67

fullsend-ai-review · 2026-08-29T02:29:35Z

🤖 Finished Review · ✅ Success · Started 2:29 AM UTC · Completed 2:39 AM UTC

Commit: 87c4a29 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $2.59

fullsend-ai-review · 2026-08-30T02:49:38Z

🤖 Finished Review · ✅ Success · Started 2:49 AM UTC · Completed 3:01 AM UTC

Commit: 87c4a29 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.70

fullsend-ai-review · 2026-09-06T02:26:46Z

🤖 Finished Review · ✅ Success · Started 2:26 AM UTC · Completed 2:38 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $7.22

fullsend-ai-review · 2026-09-06T02:37:44Z

Risk Assessment: moderate (2/5)

Details

Routine Renovate bot minor Go module bump across 5 lockfile/manifest files with no protected paths, security-sensitive files, or CI changes touched; only elevated signal is the large blast radius from touching 5 dependency files simultaneously.

Previous run

Risk Assessment: moderate (2/5)

Details

Renovate bot dependency bump across 5 go.mod/go.sum files elevates the change-size and dependency-files sub-scores (Tier 1 avg ~2.0), but no protected paths, no CI or security-sensitive changes, low recent churn, and stable history keep Tier 2 low (~1.6), yielding a composite of 2 (moderate).

Previous run (2)

Risk Assessment: moderate (2/5)

Details

Renovate bot-authored Go module minor-version bump touching only 4 go.mod files + 1 go.sum (~1152 lines); change-size composite is elevated by 'large' blast radius and >=2 dependency files, but no protected paths, no security-sensitive files, no CI/workflow changes, tests unaffected, bot author, and Tier 2 shows only low-to-moderate recent churn on lockfiles that routinely co-change, yielding weighted composite ~1.89 -> moderate (2).

fullsend-ai-review · 2026-09-07T03:15:37Z

🤖 Finished Review · ✅ Success · Started 3:15 AM UTC · Completed 3:21 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $1.36

fullsend-ai-review · 2026-09-08T03:05:06Z

🤖 Finished Review · ✅ Success · Started 3:05 AM UTC · Completed 3:18 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $6.84

fullsend-ai-review · 2026-09-08T03:39:09Z

🤖 Finished Review · ✅ Success · Started 3:39 AM UTC · Completed 3:50 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $7.69

coderabbitai · 2026-09-11T02:46:37Z

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: e17958ce-a19d-4d41-a9c3-8a6b4e0458ca

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

_{Comment @coderabbitai help to get the list of available commands.}

fullsend-ai-review · 2026-09-11T02:47:49Z

🤖 Finished Review · ✅ Success · Started 2:47 AM UTC · Completed 2:55 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $2.54

fullsend-ai-review · 2026-09-11T02:57:04Z

🤖 Review · ⚠️ Cancelled · Started 2:57 AM UTC · Ended 3:02 AM UTC

Commit: cd01138 · View workflow run →

fullsend-ai-review · 2026-09-11T03:03:22Z

🤖 Finished Review · ✅ Success · Started 3:03 AM UTC · Completed 3:13 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $4.21

fullsend-ai-review · 2026-09-12T02:07:58Z

🤖 Finished Review · ❌ Failure (post-script /home/runner/work/.fullsend/.fullsend/.fullsend-cache/resources/sha256/21644e0238d0b83db763fa138c412322223b0ba4a919a542b839e11b6a3d62e7/scripts/post-review.sh failed: exit status 1) · Started 2:07 AM UTC · Completed 2:14 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $2.96

fullsend-ai-review · 2026-09-12T02:15:36Z

🤖 Review · ⚠️ Cancelled · Started 2:15 AM UTC · Ended 2:22 AM UTC

Commit: cd01138 · View workflow run →

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

fullsend-ai-review · 2026-09-12T02:23:32Z

🤖 Finished Review · ✅ Success · Started 2:23 AM UTC · Completed 2:31 AM UTC

Commit: cd01138 · View workflow run →

Runtime: claude · Model: opus → claude-opus-4-7 · Effort: high · Cost: $3.26

fullsend-ai-review

See the review comment for full details.

fullsend-ai-review · 2026-09-12T02:31:04Z


 // Maybe less important in acceptance, but it seems sensible to use the fork here too
-replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry v0.21.8-0.20260626175242-ae5f0ae7a0b0
+replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry f9eefe19c7b2


[critical] invalid-module-version

The replace directive rewrites github.com/conforma/go-containerregistry with a bare 12-character commit SHA f9eefe19c7b2 instead of a valid Go module version (semver or pseudo-version vX.Y.Z-YYYYMMDDHHMMSS-COMMIT12). The Go toolchain will reject this: go build, go mod tidy, and go mod verify will fail with an invalid-version error. On main, this line is ... conforma/go-containerregistry v0.21.8-0.20260626175242-ae5f0ae7a0b0.

Suggested fix: Replace with the canonical pseudo-version, e.g. replace github.com/google/go-containerregistry => github.com/conforma/go-containerregistry v0.21.8-0.<YYYYMMDDHHMMSS>-f9eefe19c7b2, then run go mod tidy in acceptance/ so go.sum matches.

fullsend-ai-review · 2026-09-12T02:31:04Z

 	github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c // indirect
 	github.com/BurntSushi/toml v1.6.0 // indirect
-	github.com/Microsoft/go-winio v0.6.3-0.20251027160822-ad3df93bed29 // indirect
+	github.com/Microsoft/go-winio 75610162e7da // indirect


[critical] invalid-module-version

github.com/Microsoft/go-winio 75610162e7da // indirect — bare 12-char commit SHA where a Go module version is required. Not a valid semver or pseudo-version; the Go toolchain will reject this. acceptance/go.sum still references the previous valid pseudo-version v0.6.3-0.20251027160822-ad3df93bed29, so the module is inconsistent between go.mod and go.sum regardless.

Suggested fix: Rewrite as a canonical pseudo-version, e.g. github.com/Microsoft/go-winio v0.6.3-0.<YYYYMMDDHHMMSS>-75610162e7da // indirect, then re-run go mod tidy in acceptance/.

fullsend-ai-review · 2026-09-12T02:31:04Z

+	github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.61.0 // indirect
 	github.com/KeisukeYamashita/go-vcl v0.4.0 // indirect
-	github.com/Microsoft/go-winio v0.6.3-0.20251027160822-ad3df93bed29 // indirect
+	github.com/Microsoft/go-winio 75610162e7da // indirect


[critical] invalid-module-version

github.com/Microsoft/go-winio 75610162e7da // indirect — bare 12-char commit SHA where a Go module version is required. Not a valid semver or pseudo-version; the Go toolchain will reject this. go.sum still contains the previous valid pseudo-version v0.6.3-0.20251027160822-ad3df93bed29.

Suggested fix: Rewrite as github.com/Microsoft/go-winio v0.6.3-0.<YYYYMMDDHHMMSS>-75610162e7da // indirect, then run go mod tidy at the repo root.

fullsend-ai-review · 2026-09-12T02:31:04Z

 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
-	github.com/power-devops/perfstat v0.0.0-20240221224432-82ca36839d55 // indirect
+	github.com/planetscale/vtprotobuf 8ae5a48058df // indirect


[critical] invalid-module-version

github.com/planetscale/vtprotobuf 8ae5a48058df // indirect — bare 12-char commit SHA where a Go module version is required. Not a valid semver or pseudo-version; the Go toolchain will reject this. go.sum still contains the previous valid pseudo-version v0.6.1-0.20240319094008-0393e58bdf10.

Suggested fix: Rewrite as github.com/planetscale/vtprotobuf v0.6.1-0.<YYYYMMDDHHMMSS>-8ae5a48058df // indirect, then run go mod tidy at the repo root.

fullsend-ai-review · 2026-09-12T02:31:04Z

 	github.com/Masterminds/squirrel v1.5.4 // indirect
 	github.com/Masterminds/vcs v1.13.3 // indirect
-	github.com/Microsoft/go-winio v0.6.3-0.20251027160822-ad3df93bed29 // indirect
+	github.com/Microsoft/go-winio 75610162e7da // indirect


[critical] invalid-module-version

github.com/Microsoft/go-winio 75610162e7da // indirect — same invalid bare-SHA syntax as go.mod and acceptance/go.mod. Toolchain will reject; tools/go.sum is not in sync with this line either.

Suggested fix: Rewrite as github.com/Microsoft/go-winio v0.6.3-0.<YYYYMMDDHHMMSS>-75610162e7da // indirect and run go mod tidy in tools/.

fullsend-ai-review · 2026-09-12T02:31:04Z

 	github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
 	github.com/pkg/errors v0.9.1 // indirect
-	github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10 // indirect
+	github.com/planetscale/vtprotobuf 8ae5a48058df // indirect


[critical] invalid-module-version

github.com/planetscale/vtprotobuf 8ae5a48058df // indirect — same invalid bare-SHA syntax. Toolchain will reject.

Suggested fix: Rewrite as github.com/planetscale/vtprotobuf v0.6.1-0.<YYYYMMDDHHMMSS>-8ae5a48058df // indirect and run go mod tidy in tools/.

red-hat-konflux Bot added main renovate labels May 11, 2026

github-actions Bot added the size: XXL label May 11, 2026

red-hat-konflux Bot force-pushed the konflux/mintmaker/main-main/go-modules branch 25 times, most recently from ff4d004 to 5f37272 Compare May 19, 2026 02:50

red-hat-konflux Bot force-pushed the konflux/mintmaker/main-main/go-modules branch from 5f37272 to c8f3087 Compare May 20, 2026 03:38

This comment was marked as outdated.

Sign in to view

Update go modules

4cb4e20

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

fullsend-ai-review Bot suggested changes Sep 12, 2026

View reviewed changes

Uh oh!

Conversation

red-hat-konflux Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

red-hat-konflux Bot commented May 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: acceptance/go.sum

File name: go.sum

File name: tools/go.sum

Uh oh!

This comment was marked as outdated.

Uh oh!

fullsend-ai-review Bot commented Aug 27, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

fullsend-ai-review Bot commented Aug 28, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

fullsend-ai-review Bot commented Aug 29, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

fullsend-ai-review Bot commented Aug 30, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

fullsend-ai-review Bot commented Sep 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

fullsend-ai-review Bot commented Sep 6, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

fullsend-ai-review Bot commented Sep 7, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

fullsend-ai-review Bot commented Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

fullsend-ai-review Bot commented Sep 8, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

coderabbitai Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review skipped

Uh oh!

fullsend-ai-review Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

This comment was marked as outdated.

Uh oh!

fullsend-ai-review Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

fullsend-ai-review Bot commented Sep 11, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

This comment was marked as outdated.

Uh oh!

fullsend-ai-review Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Uh oh!

fullsend-ai-review Bot commented Sep 12, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

red-hat-konflux Bot commented May 11, 2026 •

edited

Loading

red-hat-konflux Bot commented May 11, 2026 •

edited

Loading

fullsend-ai-review Bot commented Aug 27, 2026 •

edited

Loading

fullsend-ai-review Bot commented Aug 28, 2026 •

edited

Loading

fullsend-ai-review Bot commented Aug 29, 2026 •

edited

Loading

fullsend-ai-review Bot commented Aug 30, 2026 •

edited

Loading

fullsend-ai-review Bot commented Sep 6, 2026 •

edited

Loading

fullsend-ai-review Bot commented Sep 6, 2026 •

edited

Loading

fullsend-ai-review Bot commented Sep 7, 2026 •

edited

Loading

fullsend-ai-review Bot commented Sep 8, 2026 •

edited

Loading

fullsend-ai-review Bot commented Sep 8, 2026 •

edited

Loading

coderabbitai Bot commented Sep 11, 2026 •

edited

Loading

fullsend-ai-review Bot commented Sep 11, 2026 •

edited

Loading

fullsend-ai-review Bot commented Sep 11, 2026 •

edited

Loading

fullsend-ai-review Bot commented Sep 11, 2026 •

edited

Loading

fullsend-ai-review Bot commented Sep 12, 2026 •

edited

Loading

fullsend-ai-review Bot commented Sep 12, 2026 •

edited

Loading

fullsend-ai-review Bot commented Sep 12, 2026 •

edited

Loading