build(deps): bump helm.sh/helm/v4 from 4.1.4 to 4.2.0#3727
build(deps): bump helm.sh/helm/v4 from 4.1.4 to 4.2.0#3727dependabot[bot] wants to merge 1 commit into
Conversation
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit 075822e. Configure here.
| k8s.io/utils v0.0.0-20260319190234-28399d86e0b5 | ||
| oras.land/oras-go/v2 v2.6.0 | ||
| sigs.k8s.io/controller-runtime v0.23.3 | ||
| sigs.k8s.io/controller-runtime v0.24.0 |
There was a problem hiding this comment.
K8s replace directives pin v0.34.4 conflicting with v0.36.0 requirements
High Severity
The require section now lists k8s.io/api, k8s.io/apimachinery, k8s.io/client-go, k8s.io/kubectl, etc. at v0.36.0 (pulled in by helm.sh/helm/v4 v4.2.0 and sigs.k8s.io/controller-runtime v0.24.0), but the replace directives pin all k8s staging packages to v0.34.4. This means helm v4.2.0 and controller-runtime v0.24.0 source code—designed for k8s v1.36 client libraries—will be compiled against v0.34.4, a two-minor-version gap that is very likely to cause compilation failures or runtime incompatibilities if any new APIs from v0.35/v0.36 are referenced.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit 075822e. Configure here.
dependabot
Bot
force-pushed
the
dependabot/go_modules/helm.sh/helm/v4-4.2.0
branch
from
075822e to
6f5d13a
Compare
Bumps [helm.sh/helm/v4](https://github.com/helm/helm) from 4.1.4 to 4.2.0. - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v4.1.4...v4.2.0) --- updated-dependencies: - dependency-name: helm.sh/helm/v4 dependency-version: 4.2.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
force-pushed
the
dependabot/go_modules/helm.sh/helm/v4-4.2.0
branch
from
6f5d13a to
3f46384
Compare
|
Superseded by #3766. |
Bumps helm.sh/helm/v4 from 4.1.4 to 4.2.0.
Release notes
Sourced from helm.sh/helm/v4's releases.
... (truncated)
Commits
0646808Bump to version v4.2e23bf3abuild: Clean up Goreleaser change (#32098)ad18580Merge pull request #31343 from TerryHowe/chore-replace-mitchellh-gox-with-gor...b3a458fMerge pull request #31970 from isumitsolanki/fix/31965-decouple-cli-from-kubef60ab7cfix: add -extldflags -static to dist target to match build-cross64aa46fbuild: use goreleaser build with manual archive creationd199a1achore: remove build-cross dependency from test-acceptance8289940ci: add fetch-depth 0 to canary checkout for goreleaserc075022fix: address goreleaser build issues flagged in review04885ddfix: pass VERSION as GORELEASER_CURRENT_TAG to preserve v-prefix in archive n...