fix(deps): update all dependencies#445
Conversation
|
Reviewer's guide (collapsed on small PRs)Reviewer's GuideThis PR updates several OpenAPI- and YAML-related Go dependencies in go.mod to newer minor/patch versions, aligning kin-openapi and its transitive tooling (jsonpointer, swag/jsonname, oasdiff/yaml, oasdiff/yaml3, speakeasy/jsonpath, speakeasy/openapi-overlay) with their latest releases without any application code changes. File-Level Changes
Tips and commandsInteracting with Sourcery
Customizing Your ExperienceAccess your dashboard to:
Getting Help
|
cab024e to
8b5200d
Compare
8b5200d to
06c65e8
Compare
06c65e8 to
ee13140
Compare
ee13140 to
f28523d
Compare
9e7991e to
a58885b
Compare
a58885b to
e9af819
Compare
1c9cff8 to
b741019
Compare
b741019 to
1fb9925
Compare
1fb9925 to
e2c779f
Compare
e2c779f to
3c10517
Compare
3c10517 to
9122a0a
Compare
|
Note Reviews pausedIt looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the Use the following commands to manage reviews:
Use the checkboxes below for quick actions:
WalkthroughBuilder stage in the Dockerfile now uses a different Changes
Estimated code review effort🎯 1 (Trivial) | ⏱️ ~3 minutes 🚥 Pre-merge checks | ✅ 4 | ❌ 1❌ Failed checks (1 warning)
✅ Passed checks (4 passed)
✏️ Tip: You can configure your own custom pre-merge checks in the settings. ✨ Finishing Touches📝 Generate docstrings
🧪 Generate unit tests (beta)
Comment |
There was a problem hiding this comment.
Actionable comments posted: 1
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.
Inline comments:
In `@go.mod`:
- Line 6: The go.mod dependency bump to github.com/getkin/kin-openapi may change
OpenAPI parsing/codegen; run "make generate" locally, compare the generated
output against pkg/generated/api.go, and if they differ, commit the regenerated
pkg/generated/api.go (or update the OpenAPI spec) so the generated code matches
the new kin-openapi behavior; additionally add a CI workflow step that runs
"make generate" and fails the job when pkg/generated/api.go differs (i.e.,
detect git diff) to prevent future drift.
🪄 Autofix (Beta)
Fix all unresolved CodeRabbit comments on this PR:
- Push a commit to this branch (recommended)
- Create a new PR with the fixes
ℹ️ Review info
⚙️ Run configuration
Configuration used: Organization UI
Review profile: CHILL
Plan: Enterprise
Run ID: e9f49e6b-e571-4310-80a6-aae028fc6a97
📒 Files selected for processing (2)
Dockerfilego.mod
|
|
||
| require ( | ||
| github.com/getkin/kin-openapi v0.133.0 | ||
| github.com/getkin/kin-openapi v0.135.0 |
There was a problem hiding this comment.
🧩 Analysis chain
🏁 Script executed:
#!/bin/bash
set -euo pipefail
# Check where oapi-codegen is configured/used
fd -HI "oapi-codegen.yaml|Makefile|makefile|*.yml|*.yaml|*.sh" | xargs -r rg -n --no-heading "oapi-codegen|openapi.gen.go|spec/openapi.yaml"
# Check whether generated artifact exists in repo
fd -HI "openapi.gen.go"
# Check if CI workflows enforce generation freshness
fd -HI ".github/workflows" | xargs -r rg -n --no-heading "oapi-codegen|openapi.gen.go|git diff --exit-code|generated"Repository: RedHatInsights/quickstarts
Length of output: 438
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== Searching for oapi-codegen configuration files ==="
fd -HI -t f -g "oapi-codegen.yaml" -o -g "oapi-codegen.yml" -o -g "Makefile" -o -g "makefile"
echo -e "\n=== Searching for generated OpenAPI file ==="
fd -HI -t f "openapi.gen.go"
echo -e "\n=== Searching for references to oapi-codegen in project files ==="
rg -t yaml -t toml -t sh "oapi-codegen" --max-count 20
echo -e "\n=== Checking CI workflows directory ==="
fd -HI -t f -p ".github/workflows"
echo -e "\n=== Searching for git diff checks in CI (codegen verification pattern) ==="
fd -HI -t d ".github" | head -1 | xargs -r rg "git diff|--exit-code|generated" || echo "No matches or directory not found"Repository: RedHatInsights/quickstarts
Length of output: 258
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== Listing all files in repo (first 100 lines) ==="
git ls-files | head -100
echo -e "\n=== Searching for files with 'openapi' in name ==="
git ls-files | grep -i openapi || echo "No matches"
echo -e "\n=== Searching for .github/workflows files ==="
git ls-files | grep ".github/workflows" || echo "No workflow files"
echo -e "\n=== Searching for oapi-codegen or codegen references in all files ==="
rg "oapi-codegen" --max-count 10 || echo "No oapi-codegen references"
echo -e "\n=== Searching for go.mod to confirm kin-openapi presence ==="
cat go.mod | head -15Repository: RedHatInsights/quickstarts
Length of output: 7459
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== Searching for generated files in pkg/generated/ ==="
git ls-files | grep "pkg/generated" || echo "No generated files in git"
echo -e "\n=== Checking .gitignore for generated directory ==="
cat .gitignore | grep -i "generated\|pkg" || echo "No matches"
echo -e "\n=== Reading .github/workflows/security.yaml ==="
cat .github/workflows/security.yaml
echo -e "\n=== Checking if pkg/generated directory exists ==="
find . -type d -name "generated" 2>/dev/null || echo "Directory not found"
echo -e "\n=== Checking Makefile for codegen-related targets ==="
cat Makefile | grep -A 5 -B 2 "oapi-codegen\|codegen"Repository: RedHatInsights/quickstarts
Length of output: 3397
🏁 Script executed:
#!/bin/bash
set -euo pipefail
echo "=== Content of oapi-codegen.yaml ==="
cat oapi-codegen.yamlRepository: RedHatInsights/quickstarts
Length of output: 360
Verify codegen drift risk after the kin-openapi bump
Line 6 upgrades github.com/getkin/kin-openapi, which can change OpenAPI parsing/codegen behavior. Please verify that pkg/generated/api.go remains in sync. Currently no CI guard enforces fresh generation after dependency changes—consider adding a workflow step to run make generate and fail if pkg/generated/api.go differs from the spec.
🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.
In `@go.mod` at line 6, The go.mod dependency bump to
github.com/getkin/kin-openapi may change OpenAPI parsing/codegen; run "make
generate" locally, compare the generated output against pkg/generated/api.go,
and if they differ, commit the regenerated pkg/generated/api.go (or update the
OpenAPI spec) so the generated code matches the new kin-openapi behavior;
additionally add a CI workflow step that runs "make generate" and fails the job
when pkg/generated/api.go differs (i.e., detect git diff) to prevent future
drift.
9122a0a to
87c5a1a
Compare
87c5a1a to
fbb248e
Compare
c4269ea to
5a82cdb
Compare
5a82cdb to
82004cc
Compare
c220316 to
ea29669
Compare
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
ea29669 to
3aa283b
Compare
This PR contains the following updates:
v1.9.0→v1.10.0v0.133.0→v0.137.0v0.22.4→v0.23.1v0.25.4→v0.26.0v1.9.3→v1.10.0v5.9.1→v5.9.2v0.0.0-20250309154309-f31be36b4037→v0.0.9v0.0.0-20250309153720-d2182401db90→v0.0.12v1.39.1→v1.40.0v0.6.2→v0.6.3v0.10.2→v0.10.31.25.8-1776213685→1.25.9-17770430461.25.8-1776370298→1.25.9-1777043046Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
fsnotify/fsnotify (github.com/fsnotify/fsnotify)
v1.10.0Compare Source
This version of fsnotify needs Go 1.23.
Changes and fixes
inotify: improve initialization error message (#731)
inotify: send Rename event if recursive watch is renamed (#696)
inotify: avoid copying event buffers when reading names (#741)
kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)
kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)
windows: fix nil pointer dereference in remWatch (#736)
windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)
getkin/kin-openapi (github.com/getkin/kin-openapi)
v0.137.0Compare Source
What's Changed
cc4f8d9by @fenollp in #1161Full Changelog: getkin/kin-openapi@v0.136.0...v0.137.0
v0.136.0Compare Source
What's Changed
New Contributors
Full Changelog: getkin/kin-openapi@v0.135.0...v0.136.0
v0.135.0Compare Source
What's Changed
New Contributors
Full Changelog: getkin/kin-openapi@v0.134.0...v0.135.0
v0.134.0Compare Source
What's Changed
New Contributors
Full Changelog: getkin/kin-openapi@v0.133.0...v0.134.0
go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)
v0.23.1Compare Source
0.23.1 - 2026-04-18
Full Changelog: go-openapi/jsonpointer@v0.23.0...v0.23.1
5 commits in this release.
Fixed bugs
Documentation
Updates
People who contributed to this release
jsonpointer license terms
v0.23.0Compare Source
0.23.0 - 2026-04-15
Support for known limitations
Full Changelog: go-openapi/jsonpointer@v0.22.5...v0.23.0
16 commits in this release.
Implemented enhancements
"-"array suffix is now supported by @fredbi in #121 ...Fixed bugs
Documentation
Miscellaneous tasks
Updates
People who contributed to this release
New Contributors
in #118
jsonpointer license terms
v0.22.5Compare Source
0.22.5 - 2026-03-02
Full Changelog: go-openapi/jsonpointer@v0.22.4...v0.22.5
15 commits in this release.
Documentation
Code quality
Miscellaneous tasks
Updates
People who contributed to this release
New Contributors
in #97
jsonpointer license terms
go-openapi/swag (github.com/go-openapi/swag/jsonname)
v0.26.0Compare Source
0.26.0 - 2026-04-15
Full Changelog: go-openapi/swag@v0.25.5...v0.26.0
14 commits in this release.
Implemented enhancements
Documentation
Code quality
Miscellaneous tasks
Updates
People who contributed to this release
swag license terms
Per-module changes
cmdutils (0.26.0)
Miscellaneous tasks
conv (0.26.0)
Miscellaneous tasks
Updates
fileutils (0.26.0)
Miscellaneous tasks
Updates
jsonname (0.26.0)
Implemented enhancements
Miscellaneous tasks
Updates
jsonutils/adapters/easyjson (0.26.0)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration/benchmarks (0.26.0)
Miscellaneous tasks
Updates
jsonutils/adapters/testintegration (0.26.0)
Miscellaneous tasks
Updates
jsonutils/fixtures_test (0.26.0)
Miscellaneous tasks
Updates
jsonutils (0.26.0)
Miscellaneous tasks
Updates
loading (0.26.0)
Miscellaneous tasks
Updates
mangling (0.26.0)
Miscellaneous tasks
Updates
netutils (0.26.0)
Miscellaneous tasks
Updates
stringutils (0.26.0)
Miscellaneous tasks
Updates
typeutils (0.26.0)
Miscellaneous tasks
Updates
yamlutils (0.26.0)
Miscellaneous tasks
Updates
v0.25.5Compare Source
0.25.5 - 2026-03-02
Full Changelog: go-openapi/swag@v0.25.4...v0.25.5
16 commits in this release.
Documentation
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.