Skip to content

Bump github.com/operator-framework/api from 0.37.0 to 0.45.0 - #1

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/operator-framework/api-0.44.0
Open

Bump github.com/operator-framework/api from 0.37.0 to 0.45.0#1
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/operator-framework/api-0.44.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/operator-framework/api from 0.37.0 to 0.45.0.

Release notes

Sourced from github.com/operator-framework/api's releases.

v0.45.0

What's Changed

Full Changelog: operator-framework/api@v0.44.0...v0.45.0

v0.44.0

What's Changed

Full Changelog: operator-framework/api@v0.43.0...v0.44.0

v0.43.0

What's Changed

New Contributors

Full Changelog: operator-framework/api@v0.42.0...v0.43.0

v0.42.0

What's Changed

... (truncated)

Commits
  • 72d46e1 Bump actions/setup-go from 6 to 7 (#506)
  • c4902de Bump github.com/google/cel-go from 0.29.1 to 0.29.2 (#505)
  • 132f449 Bump github.com/google/cel-go from 0.28.1 to 0.29.1 (#504)
  • 23c932a Bump golang.org/x/net from 0.54.0 to 0.55.0 (#503)
  • 3c29466 Bump actions/cache from 5 to 6 (#502)
  • 492d6ba pkg/manifests: fix dropped walk errors (#495)
  • 2b39c44 Bump actions/checkout from 6 to 7 (#501)
  • 5adf634 Bump the k8s-dependencies group with 4 updates (#500)
  • 887f161 Bump the k8s-dependencies group across 1 directory with 5 updates (#498)
  • 52c4c32 Bump codecov/codecov-action from 6 to 7 (#499)
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 1, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/operator-framework/api-0.44.0 branch 2 times, most recently from 858da76 to d0fbe22 Compare July 10, 2026 16:13
@openshift-ci

openshift-ci Bot commented Jul 10, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign akrog for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@umago

umago commented Jul 14, 2026

Copy link
Copy Markdown
Collaborator

/ok-to-test

@umago

umago commented Jul 14, 2026

Copy link
Copy Markdown
Collaborator

/retest

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/operator-framework/api-0.44.0 branch from d0fbe22 to 9a8d429 Compare July 14, 2026 12:33
Akrog added a commit to Akrog/lightspeed-operator that referenced this pull request Jul 22, 2026
Job govulncheck is failing with the following error.

```
Vulnerability openstack-k8s-operators#1: GO-2026-5970
    Infinite loop on invalid input in golang.org/x/text
  More info: https://pkg.go.dev/vuln/GO-2026-5970
  Module: golang.org/x/text
    Found in: golang.org/x/text@v0.37.0
    Fixed in: golang.org/x/text@v0.39.0
```

This commit updates the text dependency and transitive version bumps of
other dependencies.
@dependabot dependabot Bot changed the title Bump github.com/operator-framework/api from 0.37.0 to 0.44.0 Bump github.com/operator-framework/api from 0.37.0 to 0.45.0 Jul 28, 2026
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/operator-framework/api-0.44.0 branch from 9a8d429 to 646602d Compare July 28, 2026 07:43
Akrog added a commit to Akrog/lightspeed-operator that referenced this pull request Jul 28, 2026
Job govulncheck is failing with the following error.

```
Vulnerability openstack-k8s-operators#1: GO-2026-5970
    Infinite loop on invalid input in golang.org/x/text
  More info: https://pkg.go.dev/vuln/GO-2026-5970
  Module: golang.org/x/text
    Found in: golang.org/x/text@v0.37.0
    Fixed in: golang.org/x/text@v0.39.0
```

This commit updates the text dependency and transitive version bumps of
other dependencies.
Akrog added a commit to Akrog/lightspeed-operator that referenced this pull request Jul 28, 2026
Error is:

```
Vulnerability openstack-k8s-operators#1: GO-2026-6061
    Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2
    transport server implementation in google.golang.org/grpc
  More info: https://pkg.go.dev/vuln/GO-2026-6061
  Module: google.golang.org/grpc
    Found in: google.golang.org/grpc@v1.78.0
    Fixed in: google.golang.org/grpc@v1.82.1
    Example traces found:
      openstack-k8s-operators#1: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.NewHTTP2Client
      openstack-k8s-operators#2: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.http2Client.Close
      openstack-k8s-operators#3: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.http2Client.GracefulClose
```
Akrog added a commit to Akrog/lightspeed-operator that referenced this pull request Jul 28, 2026
Error is:

```
Vulnerability openstack-k8s-operators#1: GO-2026-6061
    Vulnerabilities in the xDS RBAC authorization engine and the HTTP/2
    transport server implementation in google.golang.org/grpc
  More info: https://pkg.go.dev/vuln/GO-2026-6061
  Module: google.golang.org/grpc
    Found in: google.golang.org/grpc@v1.78.0
    Fixed in: google.golang.org/grpc@v1.82.1
    Example traces found:
      openstack-k8s-operators#1: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.NewHTTP2Client
      openstack-k8s-operators#2: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.http2Client.Close
      openstack-k8s-operators#3: test/utils/utils.go:113:21: utils.LoadImageToKindClusterWithName calls exec.Command, which eventually calls transport.http2Client.GracefulClose
```
Bumps [github.com/operator-framework/api](https://github.com/operator-framework/api) from 0.37.0 to 0.45.0.
- [Release notes](https://github.com/operator-framework/api/releases)
- [Changelog](https://github.com/operator-framework/api/blob/master/RELEASE.md)
- [Commits](operator-framework/api@v0.37.0...v0.45.0)

---
updated-dependencies:
- dependency-name: github.com/operator-framework/api
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/operator-framework/api-0.44.0 branch from 646602d to c151ade Compare July 28, 2026 16:09
@openshift-ci

openshift-ci Bot commented Jul 28, 2026

Copy link
Copy Markdown

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/openstack-lightspeed-kuttl-4-18 9a8d429 link true /test openstack-lightspeed-kuttl-4-18
ci/prow/ci-index-openstack-lightspeed-bundle c151ade link true /test ci-index-openstack-lightspeed-bundle
ci/prow/images c151ade link true /test images
ci/prow/openstack-lightspeed-kuttl-4-20 c151ade link true /test openstack-lightspeed-kuttl-4-20

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code ok-to-test

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant