Skip to content

build(deps): bump the misc-dependencies group across 1 directory with 9 updates - #8400

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/misc-dependencies-80b231deb5
Closed

build(deps): bump the misc-dependencies group across 1 directory with 9 updates#8400
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/misc-dependencies-80b231deb5

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the misc-dependencies group with 8 updates in the / directory:

Package From To
go.etcd.io/etcd/api/v3 3.6.10 3.6.11
go.etcd.io/etcd/client/pkg/v3 3.6.10 3.6.11
go.etcd.io/etcd/client/v3 3.6.10 3.6.11
go.etcd.io/etcd/server/v3 3.6.10 3.6.11
go.uber.org/zap 1.27.1 1.28.0
google.golang.org/api 0.269.0 0.277.0
kubevirt.io/api 1.7.1 1.8.2
kubevirt.io/containerized-data-importer-api 1.64.0 1.65.0

Updates go.etcd.io/etcd/api/v3 from 3.6.10 to 3.6.11

Release notes

Sourced from go.etcd.io/etcd/api/v3's releases.

v3.6.11

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • ec166e2 version: bump up to 3.6.11
  • d671fd0 Merge pull request #21685 from ahrtr/20260429_auth_3.6
  • 633de82 Fix the 'read via PrevKv' and 'Put with lease' in TXN bypass rbac check issue
  • fbbd0a1 Add an integration test to reproduce the issue of PutWithLease in a TXN bypas...
  • 3fe5746 Add an integration test case to reproduce the read via PrevKv bypass rbac che...
  • 16a8a36 Merge pull request #21681 from ahrtr/20260428_auth_refactor
  • c387fa5 Get all Put related auth check into a separate function 'checkPutAuth'
  • 20e6f23 move function CheckTxnAuth from package txn to apply
  • 7d4b175 Merge pull request #21667 from ahrtr/20260426_add_member
  • bc2482b Merge pull request #21668 from ahrtr/20260426_dep_3.6
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/pkg/v3 from 3.6.10 to 3.6.11

Release notes

Sourced from go.etcd.io/etcd/client/pkg/v3's releases.

v3.6.11

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • ec166e2 version: bump up to 3.6.11
  • d671fd0 Merge pull request #21685 from ahrtr/20260429_auth_3.6
  • 633de82 Fix the 'read via PrevKv' and 'Put with lease' in TXN bypass rbac check issue
  • fbbd0a1 Add an integration test to reproduce the issue of PutWithLease in a TXN bypas...
  • 3fe5746 Add an integration test case to reproduce the read via PrevKv bypass rbac che...
  • 16a8a36 Merge pull request #21681 from ahrtr/20260428_auth_refactor
  • c387fa5 Get all Put related auth check into a separate function 'checkPutAuth'
  • 20e6f23 move function CheckTxnAuth from package txn to apply
  • 7d4b175 Merge pull request #21667 from ahrtr/20260426_add_member
  • bc2482b Merge pull request #21668 from ahrtr/20260426_dep_3.6
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/client/v3 from 3.6.10 to 3.6.11

Release notes

Sourced from go.etcd.io/etcd/client/v3's releases.

v3.6.11

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • ec166e2 version: bump up to 3.6.11
  • d671fd0 Merge pull request #21685 from ahrtr/20260429_auth_3.6
  • 633de82 Fix the 'read via PrevKv' and 'Put with lease' in TXN bypass rbac check issue
  • fbbd0a1 Add an integration test to reproduce the issue of PutWithLease in a TXN bypas...
  • 3fe5746 Add an integration test case to reproduce the read via PrevKv bypass rbac che...
  • 16a8a36 Merge pull request #21681 from ahrtr/20260428_auth_refactor
  • c387fa5 Get all Put related auth check into a separate function 'checkPutAuth'
  • 20e6f23 move function CheckTxnAuth from package txn to apply
  • 7d4b175 Merge pull request #21667 from ahrtr/20260426_add_member
  • bc2482b Merge pull request #21668 from ahrtr/20260426_dep_3.6
  • Additional commits viewable in compare view

Updates go.etcd.io/etcd/server/v3 from 3.6.10 to 3.6.11

Release notes

Sourced from go.etcd.io/etcd/server/v3's releases.

v3.6.11

Please check out CHANGELOG for a full list of changes. And make sure to read upgrade guide before upgrading etcd (there may be breaking changes).

For installation guides, please check out play.etcd.io and operating etcd. Latest support status for common architectures and operating systems can be found at supported platforms.

Linux
ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-linux-amd64.tar.gz -o /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
tar xzvf /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz -C /tmp/etcd-download-test --strip-components=1 --no-same-owner
rm -f /tmp/etcd-${ETCD_VER}-linux-amd64.tar.gz
/tmp/etcd-download-test/etcd --version
/tmp/etcd-download-test/etcdctl version
/tmp/etcd-download-test/etcdutl version
start a local etcd server
/tmp/etcd-download-test/etcd
write,read to etcd
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 put foo bar
/tmp/etcd-download-test/etcdctl --endpoints=localhost:2379 get foo

macOS (Darwin)
ETCD_VER=v3.6.11
choose either URL
GOOGLE_URL=https://storage.googleapis.com/etcd
GITHUB_URL=https://github.com/etcd-io/etcd/releases/download
DOWNLOAD_URL=${GOOGLE_URL}
rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
rm -rf /tmp/etcd-download-test && mkdir -p /tmp/etcd-download-test
curl -L ${DOWNLOAD_URL}/${ETCD_VER}/etcd-${ETCD_VER}-darwin-amd64.zip -o /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
unzip /tmp/etcd-${ETCD_VER}-darwin-amd64.zip -d /tmp && rm -f /tmp/etcd-${ETCD_VER}-darwin-amd64.zip
mv /tmp/etcd-${ETCD_VER}-darwin-amd64/* /tmp/etcd-download-test && rm -rf mv /tmp/etcd-${ETCD_VER}-darwin-amd64
</tr></table>

... (truncated)

Commits
  • ec166e2 version: bump up to 3.6.11
  • d671fd0 Merge pull request #21685 from ahrtr/20260429_auth_3.6
  • 633de82 Fix the 'read via PrevKv' and 'Put with lease' in TXN bypass rbac check issue
  • fbbd0a1 Add an integration test to reproduce the issue of PutWithLease in a TXN bypas...
  • 3fe5746 Add an integration test case to reproduce the read via PrevKv bypass rbac che...
  • 16a8a36 Merge pull request #21681 from ahrtr/20260428_auth_refactor
  • c387fa5 Get all Put related auth check into a separate function 'checkPutAuth'
  • 20e6f23 move function CheckTxnAuth from package txn to apply
  • 7d4b175 Merge pull request #21667 from ahrtr/20260426_add_member
  • bc2482b Merge pull request #21668 from ahrtr/20260426_dep_3.6
  • Additional commits viewable in compare view

Updates go.uber.org/zap from 1.27.1 to 1.28.0

Release notes

Sourced from go.uber.org/zap's releases.

v1.28.0

Enhancements:

  • #1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.

#1534: uber-go/zap#1534

Changelog

Sourced from go.uber.org/zap's changelog.

1.28.0 (27 Apr 2026)

Enhancements:

  • #1534[]: Add zapcore.CheckPreWriteHook and CheckedEntry.Before method for transforming entries before they are written to any Cores.
Commits
  • 5b81b37 release v1.28.0 (#1547)
  • 0ab0d5a zapcore: Add PreWriteHook for transforming entries before write (#1534)
  • d278c59 [chore] CI: test on Go 1.26 (#1535)
  • 16fb16b chore(dep): replace archived gopkg.in/yaml.v3 with officially maintained go.y...
  • See full diff in compare view

Updates google.golang.org/api from 0.269.0 to 0.277.0

Release notes

Sourced from google.golang.org/api's releases.

v0.277.0

0.277.0 (2026-04-29)

Features

Bug Fixes

  • idtoken: Avoid double impersonation in tokenSourceFromBytes (#3576) (75172cf), refs #2301

v0.276.0

0.276.0 (2026-04-14)

Features

v0.275.0

0.275.0 (2026-04-07)

Features

v0.274.0

0.274.0 (2026-04-02)

Features

v0.273.1

0.273.1 (2026-03-31)

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.277.0 (2026-04-29)

Features

Bug Fixes

  • idtoken: Avoid double impersonation in tokenSourceFromBytes (#3576) (75172cf), refs #2301

0.276.0 (2026-04-14)

Features

0.275.0 (2026-04-07)

Features

0.274.0 (2026-04-02)

Features

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

... (truncated)

Commits
  • dd598a6 chore(main): release 0.277.0 (#3568)
  • b208a86 chore(all): update all (#3573)
  • 0c219d9 feat(all): auto-regenerate discovery clients (#3581)
  • 75172cf fix(idtoken): avoid double impersonation in tokenSourceFromBytes (#3576)
  • 2de1a5a feat(all): auto-regenerate discovery clients (#3580)
  • 60b0784 chore(deps): bump github.com/go-git/go-git/v5 from 5.17.1 to 5.18.0 in /inter...
  • bc6990e feat(all): auto-regenerate discovery clients (#3579)
  • 8be033e feat(all): auto-regenerate discovery clients (#3578)
  • ce68c87 feat(all): auto-regenerate discovery clients (#3577)
  • de49bb5 feat(all): auto-regenerate discovery clients (#3575)
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.79.3 to 1.80.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.80.0

Behavior Changes

  • balancer: log a warning if a balancer is registered with uppercase letters, as balancer names should be lowercase. In a future release, balancer names will be treated as case-insensitive; see #5288 for details. (#8837)
  • xds: update resource error handling and re-resolution logic (#8907)
    • Re-resolve all LOGICAL_DNS clusters simultaneously when re-resolution is requested.
    • Fail all in-flight RPCs immediately upon receipt of listener or route resource errors, instead of allowing them to complete.

Bug Fixes

  • xds: support the LB policy configured in LOGICAL_DNS cluster resources instead of defaulting to pick_first. (#8733)
  • credentials/tls: perform per-RPC authority validation against the leaf certificate instead of the entire peer certificate chain. (#8831)
  • xds: enabling A76 ring hash endpoint keys no longer causes EDS resources with invalid proxy metadata to be NACKed when HTTP CONNECT (gRFC A86) is disabled. (#8875)
  • xds: validate that the sum of endpoint weights in a locality does not exceed the maximum uint32 value. (#8899)
  • xds: fix incorrect proto field access in the weighted round robin (WRR) configuration where blackout_period was used instead of weight_expiration_period. (#8915)
  • xds/rbac: handle addresses with ports in IP matchers. (#8990)

New Features

  • ringhash: enable gRFC A76 (endpoint hash keys and request hash headers) by default. (#8922)

Performance Improvements

  • credentials/alts: pool write buffers to reduce memory allocations and usage. (#8919)
  • grpc: enable the use of pooled write buffers for buffering HTTP/2 frame writes by default. This reduces memory usage when connections are idle. Use the WithSharedWriteBuffer dial option or the SharedWriteBuffer server option to disable this feature. (#8957)
  • xds/priority: stop caching child LB policies removed from the configuration. This will help reduce memory and cpu usage when localities are constantly switching between priorities. (#8997)
  • mem: add a faster tiered buffer pool; use the experimental mem.NewBinaryTieredBufferPool function to create such pools. (#8775)
Commits

Updates kubevirt.io/api from 1.7.1 to 1.8.2

Commits
  • acdbd8f api update by KubeVirt Prow build 2046233570401325056
  • 9c91a08 api update by KubeVirt Prow build 2045306888865714176
  • fc239a1 api update by KubeVirt Prow build 2045301765569515520
  • effaa54 api update by KubeVirt Prow build 2045301796598976512
  • 34bd79d api update by KubeVirt Prow build 2044798765096767488
  • 6a36e5a api update by KubeVirt Prow build 2044400633120821248
  • 32b0844 api update by KubeVirt Prow build 2039213807464615936
  • e1f0279 api update by KubeVirt Prow build 2037334441394704384
  • c71383f api update by KubeVirt Prow build 2037261570177765376
  • be4758e api update by KubeVirt Prow build 2037261629120319488
  • Additional commits viewable in compare view

Updates kubevirt.io/containerized-data-importer-api from 1.64.0 to 1.65.0

Commits
  • 9827e95 containerized-data-importer-api update by KubeVirt Prow build 203902605866513...
  • 18a5d1f containerized-data-importer-api update by KubeVirt Prow build 203469373313542...
  • e03152c containerized-data-importer-api update by KubeVirt Prow build 203246576458111...
  • 0e3694c containerized-data-importer-api update by KubeVirt Prow build 203133743240996...
  • 9080750 containerized-data-importer-api update by KubeVirt Prow build 200396036716783...
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Summary by CodeRabbit

  • Chores
    • Updated project dependencies to latest stable versions for improved stability and security.

@dependabot
build(deps): bump the misc-dependencies group across 1 directory with…
bb10f24 
… 9 updates

Bumps the misc-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [go.etcd.io/etcd/api/v3](https://github.com/etcd-io/etcd) | `3.6.10` | `3.6.11` |
| [go.etcd.io/etcd/client/pkg/v3](https://github.com/etcd-io/etcd) | `3.6.10` | `3.6.11` |
| [go.etcd.io/etcd/client/v3](https://github.com/etcd-io/etcd) | `3.6.10` | `3.6.11` |
| [go.etcd.io/etcd/server/v3](https://github.com/etcd-io/etcd) | `3.6.10` | `3.6.11` |
| [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.1` | `1.28.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.269.0` | `0.277.0` |
| [kubevirt.io/api](https://github.com/kubevirt/api) | `1.7.1` | `1.8.2` |
| [kubevirt.io/containerized-data-importer-api](https://github.com/kubevirt/containerized-data-importer-api) | `1.64.0` | `1.65.0` |



Updates `go.etcd.io/etcd/api/v3` from 3.6.10 to 3.6.11
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.10...v3.6.11)

Updates `go.etcd.io/etcd/client/pkg/v3` from 3.6.10 to 3.6.11
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.10...v3.6.11)

Updates `go.etcd.io/etcd/client/v3` from 3.6.10 to 3.6.11
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.10...v3.6.11)

Updates `go.etcd.io/etcd/server/v3` from 3.6.10 to 3.6.11
- [Release notes](https://github.com/etcd-io/etcd/releases)
- [Commits](etcd-io/etcd@v3.6.10...v3.6.11)

Updates `go.uber.org/zap` from 1.27.1 to 1.28.0
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.27.1...v1.28.0)

Updates `google.golang.org/api` from 0.269.0 to 0.277.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.269.0...v0.277.0)

Updates `google.golang.org/grpc` from 1.79.3 to 1.80.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.79.3...v1.80.0)

Updates `kubevirt.io/api` from 1.7.1 to 1.8.2
- [Commits](kubevirt/api@v1.7.1...v1.8.2)

Updates `kubevirt.io/containerized-data-importer-api` from 1.64.0 to 1.65.0
- [Commits](kubevirt/containerized-data-importer-api@v1.64.0...v1.65.0)

---
updated-dependencies:
- dependency-name: go.etcd.io/etcd/api/v3
  dependency-version: 3.6.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: misc-dependencies
- dependency-name: go.etcd.io/etcd/client/pkg/v3
  dependency-version: 3.6.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: misc-dependencies
- dependency-name: go.etcd.io/etcd/client/v3
  dependency-version: 3.6.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: misc-dependencies
- dependency-name: go.etcd.io/etcd/server/v3
  dependency-version: 3.6.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: misc-dependencies
- dependency-name: go.uber.org/zap
  dependency-version: 1.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: misc-dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.277.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: misc-dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: misc-dependencies
- dependency-name: kubevirt.io/api
  dependency-version: 1.8.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: misc-dependencies
- dependency-name: kubevirt.io/containerized-data-importer-api
  dependency-version: 1.65.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: misc-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added area/ci-tooling Indicates the PR includes changes for CI or tooling ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels May 2, 2026
@openshift-merge-bot

openshift-merge-bot Bot commented May 2, 2026

Copy link
Copy Markdown
Contributor

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

@coderabbitai

coderabbitai Bot commented May 2, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor
📝 Walkthrough

Walkthrough

The go.mod file was updated to bump multiple Go module dependencies to newer versions. Key upgrades include etcd packages (v3.6.10 → v3.6.11), go.uber.org/zap (v1.27.1 → v1.28.0), google.golang.org/api (v0.269.0 → v0.277.0), google.golang.org/grpc (v1.79.3 → v1.80.0), and various golang.org/x packages. Additionally, kubevirt.io packages, OpenTelemetry contrib instrumentation libraries, and indirect Google Cloud dependencies were updated. No replace directives were changed.

🚥 Pre-merge checks | ✅ 11 | ❌ 1

❌ Failed checks (1 inconclusive)

Check name Status Explanation Resolution
Title check ❓ Inconclusive The title describes a dependency update with generic placeholder language ('misc-dependencies') rather than specific changes; while it relates to the changeset, it lacks clarity about what the actual updates are. Replace 'misc-dependencies group' with more specific terms like 'etcd, zap, google.golang.org, kubevirt dependencies' to make the primary changes clearer to someone scanning history.
✅ Passed checks (11 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names ✅ Passed This PR contains only dependency updates to go.mod and go.sum files with no test code changes, making the Ginkgo test name stability check inapplicable.
Test Structure And Quality ✅ Passed This PR only modifies go.mod for dependency bumps with no test code changes, making the Ginkgo test quality check not applicable.
Microshift Test Compatibility ✅ Passed This PR only updates Go module dependencies in go.mod and does not add any new Ginkgo e2e tests, making the custom check not applicable.
Single Node Openshift (Sno) Test Compatibility ✅ Passed PR is a dependency-only update with no new Ginkgo e2e tests added; SNO test compatibility check is not applicable.
Topology-Aware Scheduling Compatibility ✅ Passed This pull request exclusively updates Go module dependencies in go.mod by bumping versions of packages like etcd, zap, Google Cloud libraries, gRPC, and KubeVirt APIs with no deployment manifests, operator code, or controller definitions added or modified.
Ote Binary Stdout Contract ✅ Passed PR only updates Go module dependencies with version bumps; no source code modifications, so OTE Binary Stdout Contract cannot be violated.
Ipv6 And Disconnected Network Test Compatibility ✅ Passed Pull request updates Go module dependencies only, with no new tests added, so the IPv4 assumption and connectivity check is not applicable.
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
📝 Generate docstrings
  • Create stacked PR
  • Commit on current branch
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/go_modules/misc-dependencies-80b231deb5

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci

openshift-ci Bot commented May 2, 2026

Copy link
Copy Markdown
Contributor

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@openshift-ci

openshift-ci Bot commented May 2, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign cblecker for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci
openshift-ci Bot requested review from enxebre and sdminonne May 2, 2026 12:33
@openshift-ci

openshift-ci Bot commented May 2, 2026

Copy link
Copy Markdown
Contributor

@dependabot[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@hypershift-jira-solve-ci

hypershift-jira-solve-ci Bot commented May 2, 2026

Copy link
Copy Markdown
Contributor

I have all the evidence needed. Here's the analysis:

Test Failure Analysis Complete

Job Information

Test Failure Analysis

Error

Error: load packages in root "/home/runner/_work/hypershift/hypershift/api": err: exit status 1: stderr: go: inconsistent vendoring in /home/runner/_work/hypershift/hypershift/api:
	golang.org/x/net@v0.53.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	golang.org/x/text@v0.36.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
	golang.org/x/net@v0.51.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
	golang.org/x/text@v0.35.0: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod

make: *** [Makefile:251: hypershift-api] Error 1

Summary

The make generate update step fails because controller-gen cannot load the api/ submodule due to a version mismatch between api/go.mod and api/vendor/modules.txt. The PR bumps golang.org/x/net (v0.51.0→v0.53.0) and golang.org/x/text (v0.35.0→v0.36.0) in the root go.mod and vendors them in the root vendor/ directory, but does not update api/go.mod or api/vendor/. During CI, the Makefile update target runs api-deps (vendors api/ with its current versions), then workspace-sync (runs go work sync which bumps api/go.mod to match root), but never re-vendors api/ after the sync — leaving api/go.mod at v0.53.0/v0.36.0 while api/vendor/modules.txt still references v0.51.0/v0.35.0.

Root Cause

The root cause is a missing re-vendor of the api/ submodule after go work sync, combined with the Dependabot PR not updating the api/ submodule's dependencies.

Here is the exact sequence that causes the failure in make generate update:

  1. api-deps (Makefile:528–534) runs cd api && go mod tidy && go mod vendor — this successfully vendors api/ using its current go.mod which has golang.org/x/net@v0.51.0 and golang.org/x/text@v0.35.0.

  2. workspace-sync (Makefile:536–538) runs cd hack/workspace && go work sync — this synchronizes api/go.mod to match the root module's dependency versions, bumping golang.org/x/net to v0.53.0 and golang.org/x/text to v0.36.0 inside api/go.mod. Critically, this does NOT re-run go mod vendor in api/, so api/vendor/modules.txt still references the old versions.

  3. deps (Makefile:521–526) runs go mod tidy && go mod vendor for the root module only, not for api/.

  4. api → hypershift-api (Makefile:251) runs controller-gen object:headerFile="hack/boilerplate.go.txt" paths="./api/..." which tries to load Go packages from the api/ directory. Go detects that api/go.mod requires golang.org/x/net@v0.53.0 but api/vendor/modules.txt marks golang.org/x/net@v0.51.0 as explicit — this is an inconsistent vendoring state, and Go refuses to proceed.

The Makefile update target ordering is api-deps workspace-sync deps api ..., which means api/ is vendored before go work sync modifies its go.mod, and never re-vendored afterward. Normally this isn't a problem because the root and api/ modules share the same transitive dependency versions. But when a dependency bump like this Dependabot PR changes transitive deps in root only, go work sync propagates those bumps to api/go.mod without corresponding api/vendor/ updates.

The fix requires either:

  • Adding api/go.mod, api/go.sum, and api/vendor/ changes to the PR (run cd api && go mod tidy && go mod vendor locally after the root module changes), OR
  • Changing the Makefile update target to re-run api-deps after workspace-sync (e.g., update: api-deps workspace-sync deps api-deps api ...)
Recommendations

  1. Immediate fix for this PR: Run the following commands locally and commit the results:

    cd api
go mod tidy
go mod vendor

    This will update api/go.mod, api/go.sum, and api/vendor/ to include the new golang.org/x/net@v0.53.0 and golang.org/x/text@v0.36.0 versions, matching what go work sync would produce.

  2. Longer-term fix for the Makefile: Consider reordering the update target from:

    update: api-deps workspace-sync deps api ...

    to:

    update: api-deps workspace-sync api-deps deps api ...

    This ensures api/vendor/ is re-synced after go work sync modifies api/go.mod. Alternatively, move workspace-sync before the first api-deps call.

  3. Dependabot configuration: Configure Dependabot to also update the api/ submodule directory in .github/dependabot.yml, or add a post-update script that runs cd api && go mod tidy && go mod vendor after root module updates.

Evidence
Evidence Detail
Failed step Run make generate update → hypershift-api target (Makefile:251)
Failed command controller-gen object:headerFile="hack/boilerplate.go.txt" paths="./api/..."
Error type go: inconsistent vendoring in .../api
Mismatched dep 1 golang.org/x/net — go.mod says v0.53.0, vendor/modules.txt says v0.51.0
Mismatched dep 2 golang.org/x/text — go.mod says v0.36.0, vendor/modules.txt says v0.35.0
PR changed root go.mod golang.org/x/net v0.51.0→v0.53.0, golang.org/x/text v0.35.0→v0.36.0
PR did NOT change api/go.mod, api/go.sum, api/vendor/* (zero files under api/ modified)
Makefile target order update: api-deps workspace-sync deps api ... — api-deps runs before workspace-sync
workspace-sync effect go work sync bumps api/go.mod to match root, but doesn't re-vendor api/
Root cause mechanism go work sync writes new versions to api/go.mod after api/vendor/ was already created

@hypershift-jira-solve-ci hypershift-jira-solve-ci Bot mentioned this pull request May 4, 2026
Merged
@dependabot @github

dependabot Bot commented on behalf of github May 5, 2026

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 5, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/misc-dependencies-80b231deb5 branch May 5, 2026 11:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@enxebre enxebre Awaiting requested review from enxebre
@sdminonne sdminonne Awaiting requested review from sdminonne

Assignees

No one assigned

Labels

area/ci-tooling Indicates the PR includes changes for CI or tooling ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants