Skip to content

STOR-2965: Rebase to v1.0.0 for OCP 5.0 - #18

Merged
openshift-merge-bot[bot] merged 77 commits into
openshift:mainfrom
RomanBednar:STOR-2965
Jun 25, 2026
Merged

openshift-merge-bot[bot] merged 77 commits into
openshift:mainfrom
RomanBednar:STOR-2965

Conversation

@RomanBednar

@RomanBednar RomanBednar commented Jun 9, 2026

Copy link
Copy Markdown

Upstream changelogs

Summary of changes

This rebase updates from v0.2.0 to v1.0.0 with the following major changes:

Breaking Changes

Notable Changes

Carried commits

Commit Message Decision Reason
3496a7b UPSTREAM: <carry>: Add OpenShift files cherry-pick Main carry: Dockerfile.openshift, OWNERS, .ci-operator.yaml, remove .github
6bdaa76 UPSTREAM: <carry>: ART consistency 4.22 squash Only modifies OpenShift-specific files (.ci-operator.yaml, Dockerfile.openshift)
e6ad6e8 UPSTREAM: <carry>: ART consistency 4.22 squash Only modifies OpenShift-specific files (.ci-operator.yaml, Dockerfile.openshift)

All three commits squashed into a single UPSTREAM: <carry>: Add OpenShift files commit.
Build references updated from OCP 4.22 to OCP 5.0 (golang-1.26, base-rhel9 5.0).

Diff to upstream: kubernetes-csi/external-snapshot-metadata@v1.0.0...RomanBednar:csi-external-snapshot-metadata:[STOR-2965](https://redhat.atlassian.net/browse/STOR-2965)

Previous rebase: #7

cc @openshift/storage

dependabot Bot and others added 30 commits November 21, 2025 16:32
Bumps [actions/checkout](https://github.com/actions/checkout) from 5 to 6.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
trivy.yaml should use the same go version as release tools, so it checks
for CVEs with the same go as we use to build images.

Add a step that parses the go version from prow.sh and stores it in
goversion file. Use the file in subsequent setup-go step.
8d1258c Merge pull request #286 from kubernetes-csi/dependabot/github_actions/actions/checkout-6
91e3598 Bump actions/checkout from 5 to 6
2941381 Merge pull request #285 from andyzhangx/patch-6
fa8b339 fix: upgrade to go1.24.9 to fix CVEs

git-subtree-dir: release-tools
git-subtree-split: 8d1258cce8062a7ff5de7e10b10f01bed3e9c677
…github_actions/actions/checkout-6

Bump actions/checkout from 5 to 6
Bumps the k8s-dependencies group with 2 updates in the / directory: [github.com/kubernetes-csi/csi-lib-utils](https://github.com/kubernetes-csi/csi-lib-utils) and [sigs.k8s.io/structured-merge-diff/v6](https://github.com/kubernetes-sigs/structured-merge-diff).


Updates `github.com/kubernetes-csi/csi-lib-utils` from 0.22.0 to 0.23.0
- [Release notes](https://github.com/kubernetes-csi/csi-lib-utils/releases)
- [Commits](kubernetes-csi/csi-lib-utils@v0.22.0...v0.23.0)

Updates `sigs.k8s.io/structured-merge-diff/v6` from 6.3.0 to 6.3.1
- [Release notes](https://github.com/kubernetes-sigs/structured-merge-diff/releases)
- [Changelog](https://github.com/kubernetes-sigs/structured-merge-diff/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/structured-merge-diff@v6.3.0...v6.3.1)

---
updated-dependencies:
- dependency-name: github.com/kubernetes-csi/csi-lib-utils
  dependency-version: 0.23.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: k8s-dependencies
- dependency-name: sigs.k8s.io/structured-merge-diff/v6
  dependency-version: 6.3.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
…go_modules/k8s-dependencies-20086aab2c

Bump the k8s-dependencies group across 1 directory with 2 updates
Refactors the Dockerfile to build the csi-snapshot-metadata binary
from source in the builder stage, similar to how grpc_health_probe
is obtained (via ADD from remote URL).

Changes to cmd/csi-snapshot-metadata/Dockerfile:
- Use golang:1.24-alpine as builder base (was alpine)
- Add TARGETOS and LDFLAGS build arguments
- Copy Go source files (go.mod, go.sum, cmd/, pkg/, client/, vendor/)
- Build binary in builder with cross-compilation support
- Copy built binary from builder (was copying from host filesystem)
- Remove obsolete binary ARG

Changes to release-tools/build.make:
- Replace --build-arg binary with --build-arg LDFLAGS
- Remove build-% dependency from push-multiarch-% target
  (Docker now builds from source, eliminating duplicate compilation)
- Fix manifest error detection to handle both error formats:
  - "manifest for ... not found" (docker.io)
  - "manifest unknown" (ghcr.io, quay.io)

Benefits:
- Self-contained builds (no external Makefile dependency for Docker)
- True cross-compilation via Docker buildx
- Consistent approach (both binaries prepared in builder stage)
- Easier for contributors (just docker/podman build)

Tested with multiarch build to ghcr.io (amd64, arm64).

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude <noreply@anthropic.com>
Per PR feedback, this refactors the build and health check approach:

- Remove Docker builder stage and grpc_health_probe binary
- Simplify Dockerfile to single-stage distroless image
- Build binary via Makefile, copy pre-built binary into container
- Add HTTP server enabled by default at :8080
- Add /health endpoint that tracks gRPC server readiness
- Add --disable-metrics flag to optionally disable metrics endpoint
- Update example deployment to use HTTP readinessProbe

The /health endpoint returns 200 OK when the CSI driver is validated
and ready to serve requests, or 503 Service Unavailable otherwise.
This replaces the need for the grpc_health_probe binary.

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
…alth-probe

feat: Add multiarch support to csi-snapshot-metadata Dockerfile
707a99e Merge pull request #291 from dfajmon/logcheck
a9d2b0f Bump logcheck to v0.10.0
d684663 Merge pull request #290 from dfajmon/go-1.25.5
55e527c Bump golang to 1.25.5
b12e407 Merge pull request #289 from nixpanic/k8s-v1.34
bbe5e54 Use Kubernetes v1.34 and Kind v0.30 by default
4e9eb2c Merge pull request #288 from gnufied/add-gnufied-for-csi-approver
064e260 Add myself as csi approver
c852fa7 Merge pull request #287 from andyzhangx/patch-7
bce16c1 fix: upgrade to go1.24.11 to fix CVE-2025-61727

git-subtree-dir: release-tools
git-subtree-split: 707a99ecae026a8faa36d60aa9ea88505b5865df
This patch adds a certificate watcher that hot reloads
any certificate updates.

This enhancement prevents the need to restart the sidecar to load
the new certificates.

Signed-off-by: Niraj Yadav <niryadav@redhat.com>
Signed-off-by: Niraj Yadav <niryadav@redhat.com>
…tcher

Implement a cert watcher to use new certificates without restarting
Bumps the k8s-dependencies group with 1 update: [github.com/kubernetes-csi/csi-lib-utils](https://github.com/kubernetes-csi/csi-lib-utils).


Updates `github.com/kubernetes-csi/csi-lib-utils` from 0.23.0 to 0.23.1
- [Release notes](https://github.com/kubernetes-csi/csi-lib-utils/releases)
- [Commits](kubernetes-csi/csi-lib-utils@v0.23.0...v0.23.1)

---
updated-dependencies:
- dependency-name: github.com/kubernetes-csi/csi-lib-utils
  dependency-version: 0.23.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
…go_modules/k8s-dependencies-83e6197774

Bump github.com/kubernetes-csi/csi-lib-utils from 0.23.0 to 0.23.1 in the k8s-dependencies group
Bumps the github-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.72.2` | `1.78.0` |
| [github.com/emicklei/go-restful/v3](https://github.com/emicklei/go-restful) | `3.12.2` | `3.13.0` |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.21.1` | `0.22.4` |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `0.21.0` | `0.21.4` |
| [github.com/go-openapi/swag](https://github.com/go-openapi/swag) | `0.23.1` | `0.25.4` |
| [github.com/google/gnostic-models](https://github.com/google/gnostic-models) | `0.7.0` | `0.7.1` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.66.1` | `0.67.5` |
| [github.com/prometheus/procfs](https://github.com/prometheus/procfs) | `0.16.1` | `0.19.2` |
| [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.9` | `1.0.10` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.60.0` | `0.64.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.11.0` | `0.14.0` |



Updates `google.golang.org/grpc` from 1.72.2 to 1.78.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.72.2...v1.78.0)

Updates `google.golang.org/protobuf` from 1.36.8 to 1.36.10

Updates `github.com/emicklei/go-restful/v3` from 3.12.2 to 3.13.0
- [Release notes](https://github.com/emicklei/go-restful/releases)
- [Changelog](https://github.com/emicklei/go-restful/blob/v3/CHANGES.md)
- [Commits](emicklei/go-restful@v3.12.2...v3.13.0)

Updates `github.com/go-openapi/jsonpointer` from 0.21.1 to 0.22.4
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](go-openapi/jsonpointer@v0.21.1...v0.22.4)

Updates `github.com/go-openapi/jsonreference` from 0.21.0 to 0.21.4
- [Release notes](https://github.com/go-openapi/jsonreference/releases)
- [Commits](go-openapi/jsonreference@v0.21.0...v0.21.4)

Updates `github.com/go-openapi/swag` from 0.23.1 to 0.25.4
- [Commits](go-openapi/swag@v0.23.1...v0.25.4)

Updates `github.com/google/gnostic-models` from 0.7.0 to 0.7.1
- [Commits](google/gnostic-models@v0.7.0...v0.7.1)

Updates `github.com/prometheus/common` from 0.66.1 to 0.67.5
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md)
- [Commits](prometheus/common@v0.66.1...v0.67.5)

Updates `github.com/prometheus/procfs` from 0.16.1 to 0.19.2
- [Release notes](https://github.com/prometheus/procfs/releases)
- [Commits](prometheus/procfs@v0.16.1...v0.19.2)

Updates `github.com/spf13/pflag` from 1.0.9 to 1.0.10
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.9...v1.0.10)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.60.0 to 0.64.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.60.0...zpages/v0.64.0)

Updates `go.opentelemetry.io/otel` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `go.opentelemetry.io/otel/metric` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `go.opentelemetry.io/otel/trace` from 1.38.0 to 1.39.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0)

Updates `golang.org/x/net` from 0.47.0 to 0.48.0
- [Commits](golang/net@v0.47.0...v0.48.0)

Updates `golang.org/x/oauth2` from 0.30.0 to 0.34.0
- [Commits](golang/oauth2@v0.30.0...v0.34.0)

Updates `golang.org/x/sys` from 0.38.0 to 0.39.0
- [Commits](golang/sys@v0.38.0...v0.39.0)

Updates `golang.org/x/term` from 0.37.0 to 0.38.0
- [Commits](golang/term@v0.37.0...v0.38.0)

Updates `golang.org/x/text` from 0.31.0 to 0.32.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.31.0...v0.32.0)

Updates `golang.org/x/time` from 0.11.0 to 0.14.0
- [Commits](golang/time@v0.11.0...v0.14.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20250528174236-200df99c418a to 0.0.0-20251202230838-ff82c1b0f217
- [Commits](https://github.com/googleapis/go-genproto/commits)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.78.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/emicklei/go-restful/v3
  dependency-version: 3.13.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.4
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 0.21.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/swag
  dependency-version: 0.25.4
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/google/gnostic-models
  dependency-version: 0.7.1
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/common
  dependency-version: 0.67.5
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/prometheus/procfs
  dependency-version: 0.19.2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.10
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.64.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.48.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.34.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/term
  dependency-version: 0.38.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.32.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/time
  dependency-version: 0.14.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20251202230838-ff82c1b0f217
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
…go_modules/github-dependencies-d5b7cd299a

Bump the github-dependencies group across 1 directory with 21 updates
This commit updates certs and k8s tls secret used for e2e test
with expiry set to 365 days.
Earlier certs had validity of 60 days which were expired.

Signed-off-by: Praveen M <m.praveen@ibm.com>
…e-certs-and-tls-secret

test: update test certs and k8s tls secret
Signed-off-by: Praveen M <m.praveen@ibm.com>
…nstall

tools: move lister and verifier to tools/
Introspect SubjectAccessReview requests to validate that correct
arguments are being sent, including user information and resource
attributes. This ensures the authorizer properly propagates all
fields when making authorization decisions.
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.65.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.40.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.40.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.40.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/net
  dependency-version: 0.49.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.35.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.40.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/term
  dependency-version: 0.39.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.33.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20260128011058-8636f8732409
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
…ify-sar-authorizer-test

test: add request introspection to SAR authorizer test
…go_modules/github-dependencies-c358a6c4e5

bump the github-dependencies group across 1 directory with 10 updates
dependabot Bot and others added 13 commits March 9, 2026 18:18
Bumps the github-dependencies group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.79.1` | `1.79.2` |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.22.4` | `0.22.5` |
| [github.com/go-openapi/jsonreference](https://github.com/go-openapi/jsonreference) | `0.21.4` | `0.21.5` |
| [go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.65.0` | `0.67.0` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.42.0` |
| [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.42.0` |
| [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.42.0` |
| [go.yaml.in/yaml/v2](https://github.com/yaml/go-yaml) | `2.4.3` | `2.4.4` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.35.0` | `0.36.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.41.0` | `0.42.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.14.0` | `0.15.0` |
| [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20260128011058-8636f8732409` | `0.0.0-20260226221140-a57be14db171` |


Updates `google.golang.org/grpc` from 1.79.1 to 1.79.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.1...v1.79.2)

Updates `github.com/go-openapi/jsonpointer` from 0.22.4 to 0.22.5
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](go-openapi/jsonpointer@v0.22.4...v0.22.5)

Updates `github.com/go-openapi/jsonreference` from 0.21.4 to 0.21.5
- [Release notes](https://github.com/go-openapi/jsonreference/releases)
- [Commits](go-openapi/jsonreference@v0.21.4...v0.21.5)

Updates `go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc` from 0.65.0 to 0.67.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.65.0...zpages/v0.67.0)

Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0)

Updates `go.opentelemetry.io/otel/metric` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0)

Updates `go.opentelemetry.io/otel/trace` from 1.40.0 to 1.42.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.42.0)

Updates `go.yaml.in/yaml/v2` from 2.4.3 to 2.4.4
- [Commits](yaml/go-yaml@v2.4.3...v2.4.4)

Updates `golang.org/x/oauth2` from 0.35.0 to 0.36.0
- [Commits](golang/oauth2@v0.35.0...v0.36.0)

Updates `golang.org/x/sys` from 0.41.0 to 0.42.0
- [Commits](golang/sys@v0.41.0...v0.42.0)

Updates `golang.org/x/time` from 0.14.0 to 0.15.0
- [Commits](golang/time@v0.14.0...v0.15.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20260128011058-8636f8732409 to 0.0.0-20260226221140-a57be14db171
- [Commits](https://github.com/googleapis/go-genproto/commits)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-version: 1.79.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/go-openapi/jsonreference
  dependency-version: 0.21.5
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc
  dependency-version: 0.67.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/metric
  dependency-version: 1.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: go.yaml.in/yaml/v2
  dependency-version: 2.4.4
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.36.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/sys
  dependency-version: 0.42.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: golang.org/x/time
  dependency-version: 0.15.0
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-version: 0.0.0-20260226221140-a57be14db171
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
…go_modules/k8s-dependencies-492cc578d2

build(deps): bump k8s.io/klog/v2 from 2.130.1 to 2.140.0 in the k8s-dependencies group
…go_modules/github-dependencies-f9daedfaa7

build(deps): bump the github-dependencies group with 12 updates
Signed-off-by: Prasad Ghangal <prasad.ghangal@gmail.com>
119a53c Merge pull request #294 from andyzhangx/patch-10
7c9aa9b fix: upgrade to go1.25.7 to fix CVE-2026-25679

git-subtree-dir: release-tools
git-subtree-split: 119a53c3cce0c04fd422514252ea62c6ff4e3548
Signed-off-by: Prasad Ghangal <prasad.ghangal@gmail.com>
Downgrade Go version to 1.25.8 to fix image push CI
This commit combines the following changes:
- Remove .github files (workflows, templates, dependabot.yaml)
- Add .ci-operator.yaml
- Add Dockerfile.openshift
- Update OWNERS to use openshift-storage-maintainers
- Update OWNERS_ALIASES with OpenShift maintainers list
- ART image consistency updates for CI
@openshift-ci-robot openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Jun 9, 2026
@openshift-ci-robot

openshift-ci-robot commented Jun 9, 2026

Copy link
Copy Markdown

@RomanBednar: This pull request references STOR-2965 which is a valid jira issue.

Warning: The referenced jira issue has an invalid target version for the target branch this PR targets: expected the story to target the "5.0.0" version, but no target version was set.

Details

In response to this:

Upstream changelogs

Summary of changes

This rebase updates from v0.2.0 to v1.0.0 with the following major changes:

Breaking Changes

Notable Changes

Carried commits

Commit Message Decision Reason
3496a7b UPSTREAM: <carry>: Add OpenShift files cherry-pick Main carry: Dockerfile.openshift, OWNERS, .ci-operator.yaml, remove .github
6bdaa76 UPSTREAM: <carry>: ART consistency 4.22 squash Only modifies OpenShift-specific files (.ci-operator.yaml, Dockerfile.openshift)
e6ad6e8 UPSTREAM: <carry>: ART consistency 4.22 squash Only modifies OpenShift-specific files (.ci-operator.yaml, Dockerfile.openshift)

All three commits squashed into a single UPSTREAM: <carry>: Add OpenShift files commit.
Build references updated from OCP 4.22 to OCP 5.0 (golang-1.26, base-rhel9 5.0).

Diff to upstream: kubernetes-csi/external-snapshot-metadata@v1.0.0...RomanBednar:csi-external-snapshot-metadata:[STOR-2965](https://redhat.atlassian.net/browse/STOR-2965)

Previous rebase: #7

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci
openshift-ci Bot requested review from dfajmon and rhrmo June 9, 2026 15:39
@openshift-ci

openshift-ci Bot commented Jun 9, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: RomanBednar

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Jun 9, 2026
@RomanBednar

Copy link
Copy Markdown
Author

/verified by CI

@openshift-ci-robot openshift-ci-robot added the verified Signifies that the PR passed pre-merge verification criteria label Jun 23, 2026
@openshift-ci-robot

Copy link
Copy Markdown

@RomanBednar: This PR has been marked as verified by CI.

Details

In response to this:

/verified by CI

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@openshift-ci-robot

openshift-ci-robot commented Jun 25, 2026

Copy link
Copy Markdown

@RomanBednar: This pull request references STOR-2965 which is a valid jira issue.

Details

In response to this:

Upstream changelogs

Summary of changes

This rebase updates from v0.2.0 to v1.0.0 with the following major changes:

Breaking Changes

Notable Changes

Carried commits

Commit Message Decision Reason
3496a7b UPSTREAM: <carry>: Add OpenShift files cherry-pick Main carry: Dockerfile.openshift, OWNERS, .ci-operator.yaml, remove .github
6bdaa76 UPSTREAM: <carry>: ART consistency 4.22 squash Only modifies OpenShift-specific files (.ci-operator.yaml, Dockerfile.openshift)
e6ad6e8 UPSTREAM: <carry>: ART consistency 4.22 squash Only modifies OpenShift-specific files (.ci-operator.yaml, Dockerfile.openshift)

All three commits squashed into a single UPSTREAM: <carry>: Add OpenShift files commit.
Build references updated from OCP 4.22 to OCP 5.0 (golang-1.26, base-rhel9 5.0).

Diff to upstream: kubernetes-csi/external-snapshot-metadata@v1.0.0...RomanBednar:csi-external-snapshot-metadata:[STOR-2965](https://redhat.atlassian.net/browse/STOR-2965)

Previous rebase: #7

cc @openshift/storage

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

@dfajmon

dfajmon commented Jun 25, 2026

Copy link
Copy Markdown

/lgtm

@openshift-ci openshift-ci Bot added the lgtm Indicates that a PR is ready to be merged. label Jun 25, 2026
@openshift-ci

openshift-ci Bot commented Jun 25, 2026

Copy link
Copy Markdown

@RomanBednar: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@openshift-merge-bot
openshift-merge-bot Bot merged commit 239703c into openshift:main Jun 25, 2026
6 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved Indicates a PR has been approved by an approver from all required OWNERS files. jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. lgtm Indicates that a PR is ready to be merged. verified Signifies that the PR passed pre-merge verification criteria

Projects

None yet

Development

Successfully merging this pull request may close these issues.