Skip to content

🌱 Bump the all-go-mod-patch-and-minor group across 1 directory with 8 updates#362

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-go-mod-patch-and-minor-b5f5f3b680
Closed

🌱 Bump the all-go-mod-patch-and-minor group across 1 directory with 8 updates#362
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/all-go-mod-patch-and-minor-b5f5f3b680

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github May 18, 2026

Bumps the all-go-mod-patch-and-minor group with 6 updates in the / directory:

Package From To
github.com/ionos-cloud/sdk-go/v6 6.3.4 6.3.7
github.com/jarcoal/httpmock 1.4.0 1.4.1
github.com/onsi/ginkgo/v2 2.23.4 2.29.0
github.com/spf13/pflag 1.0.7 1.0.10
sigs.k8s.io/cluster-api 1.8.12 1.13.2
sigs.k8s.io/cluster-api/test 1.8.12 1.13.2

Updates github.com/ionos-cloud/sdk-go/v6 from 6.3.4 to 6.3.7

Release notes

Sourced from github.com/ionos-cloud/sdk-go/v6's releases.

v6.3.7

What's Changed

  • Add SafeStatusCode() and SafeLocation() helpers to APIResponse for nil-safe access
  • Add DEBUG logs in callAPI for request failures, retries, rate limiting (429), and retry exhaustion

Full Changelog: ionos-cloud/sdk-go@v6.3.6...v6.3.7

v6.3.6

What's Changed

New Contributors

Full Changelog: ionos-cloud/sdk-go@v6.3.5...v6.3.6

v6.3.5

Full Changelog: ionos-cloud/sdk-go@v6.3.4...v6.3.5

Commits
  • 4830623 auto-generated version 6.3.7
  • 196bbb1 auto-generated version 6.3.6
  • 801ec64 Merge pull request #41 from ionos-cloud/fix-vulnerability-in-issue-creation-w...
  • d168869 Fix vulnerability in issue creation workflow
  • a6b3bb0 auto-generated version 6.3.5
  • See full diff in compare view

Updates github.com/jarcoal/httpmock from 1.4.0 to 1.4.1

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.4.1

What's Changed

New Contributors

Full Changelog: jarcoal/httpmock@v1.4.0...v1.4.1

Commits
  • 314d58a fix: protect all body-related methods with mutext
  • e482896 fix: avoid data race when closing body
  • c977145 test: also test with go v1.25 and use golangci-lint v2.4.0
  • See full diff in compare view

Updates github.com/onsi/ginkgo/v2 from 2.23.4 to 2.29.0

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.29.0

2.29.0

GinkgoHelperGo makes it easier to write test helpers that need to run in goroutines. Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.

ginkgo outline now includes entries defined in DescribeTableSubtree

v2.28.3

2.28.3

Maintenance

Bump all dependencies

v2.28.2

2.28.2

  • Add ArtifactDir() to support Go 1.26 testing.TB interface [f3a36b6]
  • Implement shell completion [94151c8]
  • Add asan CLI option mirroring msan implementation [4d21dbb]
  • Bump uri from 1.0.3 to 1.0.4 in /docs (#1630) [c102161]
  • fix aspect ratio [9619647]
  • update logos [5779304]

v2.28.1

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

v2.28.0

2.28.0

Ginkgo's SemVer filter now supports filtering multiple components by SemVer version:

It("should work in a specific version range (1.0.0, 2.0.0) and third-party dependency redis in [8.0.0, ~)", SemVerConstraint(">= 3.2.0"), ComponentSemVerConstraint("redis", ">= 8.0.0") func() {
    // This test will only run when version is between 1.0.0 (exclusive) and 2.0.0 (exclusive) and redis version is >= 8.0.0
})

can be filtered in or out with an invocation like:

ginkgo --sem-ver-filter="2.1.1, redis=8.2.0"

Huge thanks to @​Icarus9913 for working on this!

v2.27.5

2.27.5

... (truncated)

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.29.0

GinkgoHelperGo makes it easier to write test helpers that need to run in goroutines. Specifically, it makes managing the failure state and capturing failure panics correctly straightforward.

ginkgo outline now includes entries defined in DescribeTableSubtree

2.28.3

Maintenance

Bump all dependencies

2.28.2

  • Add ArtifactDir() to support Go 1.26 testing.TB interface [f3a36b6]
  • Implement shell completion [94151c8]
  • Add asan CLI option mirroring msan implementation [4d21dbb]
  • Bump uri from 1.0.3 to 1.0.4 in /docs (#1630) [c102161]
  • fix aspect ratio [9619647]
  • update logos [5779304]

2.28.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

2.28.0

Ginkgo's SemVer filter now supports filtering multiple components by SemVer version:

It("should work in a specific version range (1.0.0, 2.0.0) and third-party dependency redis in [8.0.0, ~)", SemVerConstraint(">= 3.2.0"), ComponentSemVerConstraint("redis", ">= 8.0.0") func() {
    // This test will only run when version is between 1.0.0 (exclusive) and 2.0.0 (exclusive) and redis version is >= 8.0.0
})

can be filtered in or out with an invocation like:

ginkgo --sem-ver-filter="2.1.1, redis=8.2.0"

Huge thanks to @​Icarus9913 for working on this!

2.27.5

Fixes

Don't make a new formatter for each GinkgoT(); that's just silly and uses precious memory

2.27.4

Fixes

... (truncated)

Commits
  • 04b5bcb v2.29.0
  • 124232a docs: GinkgoHelperGo
  • ad9cee8 feat: GinkgoHelperGo, with integration tests
  • 9e56a0a chore: refactor devcontainer for better maintenance
  • 3d235a9 chore: ignore internal/tmp_*/ integration suite temporary dirs
  • 782666a feat: devcontainer configuration with local pkgsite and GH pages
  • 009dd04 Support DescribeTableSubtree in ginkgo outline
  • 5de9c15 v2.28.3
  • 7e2fa19 bump dependencies
  • 1a81912 v2.28.2
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.38.0 to 1.40.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.40.0

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

v1.39.1

1.39.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

v1.39.0

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

v1.38.3

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

v1.38.2

1.38.2

  • roll back to go 1.23.0 [c404969]

v1.38.1

1.38.1

Fixes

Numerous minor fixes and dependency bumps

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.40.0

We're adopting a new release strategy to minimize dependency bloat in projects that consume Gomega. It is a limitation of the go mod toolchain that test subdependencies of your project's direct dependencies get pulled in as indirect dependencies. In the case of Gomega, this ends up pulling in all of Ginkgo into your go.mod even if you are only using Gomega (Gomega uses Ginkgo for its own tests).

Going forward, releases will strip out all tests, tidy up the go.mod and then push this stripped down version to a new master-lite branch. These stripped-down versions will receive the vx.y.z git tag and will be picked up by the go toolchain.

Please open an issue if this new release process causes unexpected changes for your projects.

1.39.1

Update all dependencies. This auto-updated the required version of Go to 1.24, consistent with the fact that Go 1.23 has been out of support for almost six months.

1.39.0

Features

Add MatchErrorStrictly which only passes if errors.Is(actual, expected) returns true. MatchError, by contrast, will fallback to string comparison.

1.38.3

Fixes

make string formatitng more consistent for users who use format.Object directly

1.38.2

  • roll back to go 1.23.0 [c404969]

1.38.1

Fixes

Numerous minor fixes and dependency bumps

Commits

Updates github.com/spf13/pflag from 1.0.7 to 1.0.10

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.10

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

v1.0.9

What's Changed

Full Changelog: spf13/pflag@v1.0.8...v1.0.9

v1.0.8

⚠️ Breaking Change

This version, while only a patch bump, includes a (very minor) breaking change: the flag.ParseErrorsWhitelist struct and corresponding FlagSet.parseErrorsWhitelist field have been renamed to ParseErrorsAllowlist.

This should result in compilation errors in any code that uses these fields, which can be fixed by adjusting the names at call sites. There is no change in semantics or behavior of the struct or field referred to by these names. If your code compiles without errors after bumping to/past v1.0.8, you are not affected by this change.

The breaking change was reverted in v1.0.9, by means of re-introducing the old names with deprecation warnings. The plan is still to remove them in a future release, so if your code does depend on the old names, please change them to use the new names at your earliest convenience.

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.7...v1.0.8

Commits
  • 0491e57 Merge pull request #448 from thaJeztah/fix_go_version
  • 72abab1 Merge pull request #447 from thaJeztah/fix_deprecation_comment
  • 7e4dfb1 Test on Go 1.12
  • 18a9d17 move Func, BoolFunc, tests as they require go1.21
  • c5b9e98 remove uses of errors.Is, which requires go1.13
  • 45a4873 fix deprecation comment for (FlagSet.)ParseErrorsWhitelist
  • 1043857 Merge pull request #446 from spf13/fix-backwards-compat
  • 7412009 fix: Restore ParseErrorsWhitelist name for now
  • b9c16fa Merge pull request #444 from spf13/reset-args-even-if-empty
  • 40abc49 Merge pull request #443 from spf13/silence-errhelp
  • Additional commits viewable in compare view

Updates sigs.k8s.io/cluster-api from 1.8.12 to 1.13.2

Release notes

Sourced from sigs.k8s.io/cluster-api's releases.

v1.13.2

👌 Kubernetes version support

  • Management Cluster: v1.32.x -> v1.36.x
  • Workload Cluster: v1.30.x -> v1.36.x

More information about version support can be found here

Changes since v1.13.1

📈 Overview

  • 10 new commits merged
  • 2 bugs fixed 🐛

🐛 Bug Fixes

  • Devtools: Fix Tilt kube-state-metrics deployment (#13678)
  • KCP: Fix KCP in-place update with InfraMachine webhooks with immutability validation (#13643)

🌱 Others

  • CI: Make it possible to exclude CVEs with govulncheck (#13671)
  • Dependency: Bump envtest 1.36 (#13658)
  • Dependency: Bumping corefile-migration to v1.0.32 (#13635)
  • Dependency: Go bump to 1.25.10 (#13666)
  • e2e: Start testing K8s 1.37 (#13638)
  • KCP: Add kubeadm cluster role (#13670)
  • KCP: KCP cleanup etcd members not started after a machine is remediated (#13688)

📖 Additionally, there has been 1 contribution to our documentation and book. (#13621)

Dependencies

Added

Nothing has changed.

Changed

Removed

Nothing has changed.

Thanks to all our contributors! 😊

v1.13.1

👌 Kubernetes version support

  • Management Cluster: v1.32.x -> v1.36.x
  • Workload Cluster: v1.30.x -> v1.36.x

More information about version support can be found here

Changes since v1.13.0

... (truncated)

Commits
  • ebd807c Merge pull request #13688 from k8s-infra-cherrypick-robot/cherry-pick-13685-t...
  • 9b814bc Address comments
  • f777b26 KCP cleanup etcd members not started after a machine is remediated
  • e218cef Merge pull request #13678 from k8s-infra-cherrypick-robot/cherry-pick-13677-t...
  • 502f5d5 Fix Tilt kube-state-metrics deployment
  • 0dcbb67 Merge pull request #13671 from k8s-infra-cherrypick-robot/cherry-pick-13669-t...
  • 05b6caf Make it possible to exclude CVEs with govulncheck
  • 8a163c9 Merge pull request #13670 from k8s-infra-cherrypick-robot/cherry-pick-13664-t...
  • bc5e594 Add kubeadm cluster role
  • 33bc5c1 Merge pull request #13666 from irapandey/go-bump
  • Additional commits viewable in compare view

Updates sigs.k8s.io/cluster-api/test from 1.8.12 to 1.13.2

Release notes

Sourced from sigs.k8s.io/cluster-api/test's releases.

v1.13.2

👌 Kubernetes version support

  • Management Cluster: v1.32.x -> v1.36.x
  • Workload Cluster: v1.30.x -> v1.36.x

More information about version support can be found here

Changes since v1.13.1

📈 Overview

  • 10 new commits merged
  • 2 bugs fixed 🐛

🐛 Bug Fixes

  • Devtools: Fix Tilt kube-state-metrics deployment (#13678)
  • KCP: Fix KCP in-place update with InfraMachine webhooks with immutability validation (#13643)

🌱 Others

  • CI: Make it possible to exclude CVEs with govulncheck (#13671)
  • Dependency: Bump envtest 1.36 (#13658)
  • Dependency: Bumping corefile-migration to v1.0.32 (#13635)
  • Dependency: Go bump to 1.25.10 (#13666)
  • e2e: Start testing K8s 1.37 (#13638)
  • KCP: Add kubeadm cluster role (#13670)
  • KCP: KCP cleanup etcd members not started after a machine is remediated (#13688)

📖 Additionally, there has been 1 contribution to our documentation and book. (#13621)

Dependencies

Added

Nothing has changed.

Changed

Removed

Nothing has changed.

Thanks to all our contributors! 😊

v1.13.1

👌 Kubernetes version support

  • Management Cluster: v1.32.x -> v1.36.x
  • Workload Cluster: v1.30.x -> v1.36.x

More information about version support can be found here

Changes since v1.13.0

... (truncated)

Commits
  • ebd807c Merge pull request #13688 from k8s-infra-cherrypick-robot/cherry-pick-13685-t...
  • 9b814bc Address comments
  • f777b26 KCP cleanup etcd members not started after a machine is remediated
  • e218cef Merge pull request #13678 from k8s-infra-cherrypick-robot/cherry-pick-13677-t...
  • 502f5d5 Fix Tilt kube-state-metrics deployment
  • 0dcbb67 Merge pull request #13671 from k8s-infra-cherrypick-robot/cherry-pick-13669-t...
  • 05b6caf Make it possible to exclude CVEs with govulncheck
  • 8a163c9 Merge pull request #13670 from k8s-infra-cherrypick-robot/cherry-pick-13664-t...
  • bc5e594 Add kubeadm cluster role
  • 33bc5c1 Merge pull request #13666 from irapandey/go-bump
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.18.7 to 0.23.3

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.23.3

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.2...v0.23.3

v0.23.2

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.1...v0.23.2

v0.23.1

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.23.0...v0.23.1

v0.23.0

🔆 Highlights

⚠️ Breaking changes

✨ Features

... (truncated)

Commits
  • f9589b9 Merge pull request #3469 from k8s-infra-cherrypick-robot/cherry-pick-3468-to-...
  • 25615ad Ensure DefaulterRemoveUnknownOrOmitableFields is still working even if object...
  • 8122a62 Merge pull request #3467 from k8s-infra-cherrypick-robot/cherry-pick-3463-to-...
  • 35093c6 Reduce memory usage of default webhooks
  • 4dbfa5c [release-0.23] 🐛 Fix fake client's SSA status patch resource version check (#...
  • f52bbb8 Merge pull request #3437 from k8s-infra-cherrypick-robot/cherry-pick-3430-to-...
  • 4f41337 Merge pull request #3438 from k8s-infra-cherrypick-robot/cherry-pick-3434-to-...
  • e29a1b9 seedling: Test cache reader waits for cache sync
  • 83c8dc3 bug: Fakeclient: Fix status apply if existing object has managedFields set
  • bf6bcd5 Merge pull request #3436 from k8s-infra-cherrypick-robot/cherry-pick-3431-to-...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

… updates

Bumps the all-go-mod-patch-and-minor group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/ionos-cloud/sdk-go/v6](https://github.com/ionos-cloud/sdk-go) | `6.3.4` | `6.3.7` |
| [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock) | `1.4.0` | `1.4.1` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.23.4` | `2.29.0` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.7` | `1.0.10` |
| [sigs.k8s.io/cluster-api](https://github.com/kubernetes-sigs/cluster-api) | `1.8.12` | `1.13.2` |
| [sigs.k8s.io/cluster-api/test](https://github.com/kubernetes-sigs/cluster-api) | `1.8.12` | `1.13.2` |



Updates `github.com/ionos-cloud/sdk-go/v6` from 6.3.4 to 6.3.7
- [Release notes](https://github.com/ionos-cloud/sdk-go/releases)
- [Changelog](https://github.com/ionos-cloud/sdk-go/blob/master/docs/CHANGELOG.md)
- [Commits](ionos-cloud/sdk-go@v6.3.4...v6.3.7)

Updates `github.com/jarcoal/httpmock` from 1.4.0 to 1.4.1
- [Release notes](https://github.com/jarcoal/httpmock/releases)
- [Commits](jarcoal/httpmock@v1.4.0...v1.4.1)

Updates `github.com/onsi/ginkgo/v2` from 2.23.4 to 2.29.0
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.23.4...v2.29.0)

Updates `github.com/onsi/gomega` from 1.38.0 to 1.40.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.38.0...v1.40.0)

Updates `github.com/spf13/pflag` from 1.0.7 to 1.0.10
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.7...v1.0.10)

Updates `sigs.k8s.io/cluster-api` from 1.8.12 to 1.13.2
- [Release notes](https://github.com/kubernetes-sigs/cluster-api/releases)
- [Commits](kubernetes-sigs/cluster-api@v1.8.12...v1.13.2)

Updates `sigs.k8s.io/cluster-api/test` from 1.8.12 to 1.13.2
- [Release notes](https://github.com/kubernetes-sigs/cluster-api/releases)
- [Commits](kubernetes-sigs/cluster-api@v1.8.12...v1.13.2)

Updates `sigs.k8s.io/controller-runtime` from 0.18.7 to 0.23.3
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.18.7...v0.23.3)

---
updated-dependencies:
- dependency-name: github.com/ionos-cloud/sdk-go/v6
  dependency-version: 6.3.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/jarcoal/httpmock
  dependency-version: 1.4.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.29.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: sigs.k8s.io/cluster-api
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: sigs.k8s.io/cluster-api/test
  dependency-version: 1.13.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.23.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added the area/dependency Issues or PRs related to dependency changes label May 18, 2026
@sonarqubecloud
Copy link
Copy Markdown

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github May 20, 2026

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 20, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/all-go-mod-patch-and-minor-b5f5f3b680 branch May 20, 2026 00:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/dependency Issues or PRs related to dependency changes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants