Skip to content

chore(deps): update cli deps - #3526

Open
renovate-bot wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/cli-deps
Open

renovate-bot wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/cli-deps

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending Age Confidence
cft/developer-tools minor 1.26 → 1.28 age confidence
cloud.google.com/go/asset require minor v1.22.1 → v1.30.1 age confidence
cloud.google.com/go/storage require minor v1.60.0 → v1.70.0 age confidence
github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test require minor v0.17.3 → v0.18.0 age confidence
github.com/fatih/color require minor v1.18.0 → v1.19.0 age confidence
github.com/gammazero/workerpool require minor v1.1.3 → v1.3.0 age confidence
github.com/google/go-github/v81 require major v81.0.0 → v93.0.0 age confidence
github.com/gruntwork-io/terratest require major v0.50.0 → v1.0.1 age confidence
github.com/hashicorp/hcl/v2 require minor v2.24.0 → v2.25.0 age confidence
github.com/hashicorp/terraform-config-inspect require digest 225c06e → 75d64de age confidence
github.com/hashicorp/terraform-json require minor v0.27.2 → v0.29.0 age confidence
github.com/invopop/jsonschema require minor v0.13.0 → v0.14.0 age confidence
github.com/jedib0t/go-pretty/v6 require minor v6.7.8 → v6.8.3 age confidence
github.com/open-policy-agent/opa require minor v1.12.2 → v1.22.1 v1.22.4 (+2) age confidence
github.com/stretchr/testify require minor v1.11.1 → v1.12.1 age confidence
github.com/zclconf/go-cty require minor v1.17.0 → v1.19.0 v1.20.0 age confidence
go (source) toolchain minor 1.24.13 → 1.26.10 1.26.11 age confidence
golang.org/x/oauth2 require minor v0.35.0 → v0.37.0 v0.38.0 age confidence
golang.org/x/text require minor v0.34.0 → v0.43.0 v0.44.0 age confidence
golangci/golangci-lint minor 2.12.2 → 2.15.0 age confidence
google.golang.org/api require minor v0.267.0 → v0.311.0 v0.313.0 (+1) age confidence
google.golang.org/protobuf require patch v1.36.11 → v1.36.12 age confidence

Release Notes

googleapis/google-cloud-go (cloud.google.com/go/asset)

v1.30.1: container: v1.30.1

Bug Fixes
  • container: Enable universe domain resolution options (fd1d569)

v1.30.0: container: v1.30.0

Features
  • container: Add fields desired_in_transit_encryption_config and in_transit_encryption_config (af2f8b4)

v1.29.0: kms: v1.29.0

v1.29.0 (2026-04-13)

v1.28.0: video: v1.28.0

v1.28.0 (2026-04-02)

v1.27.0: firestore: v1.27.0

Features
Bug Fixes
Performance Improvements
  • firestore: Modernize sorting, string building, and path comparisons (#​20692) (39da6d0)

v1.26.0: monitoring: v1.26.0

v1.26.0 (2026-04-09)

v1.25.0: monitoring: v1.25.0

v1.25.0 (2026-04-02)

v1.24.0: batch: v1.24.0

Features

v1.23.0: firestore: v1.23.0

Features
Bug Fixes
GoogleCloudPlatform/cloud-foundation-toolkit (github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test)

v0.18.0: infra/blueprint-test: v0.18.0

Features
  • Support for dispatching to isolated projects/service accounts (#​3201) (6a4fa54)
Bug Fixes

v0.17.9: infra/blueprint-test: v0.17.9

Bug Fixes
  • deps: bump the go_modules group across 2 directories with 1 update (#​3160) (27f38c2)
  • deps: update github.com/hashicorp/terraform-config-inspect digest to e8a84ee (#​3131) (f754099)
  • deps: update module github.com/hashicorp/terraform-json to v0.26.0 (#​3170) (c70eb96)
  • deps: update module github.com/stretchr/testify to v1.11.0 (#​3172) (bdf28b1)
  • deps: update module golang.org/x/mod to v0.27.0 (#​3162) (abcf06b)
  • deps: update module sigs.k8s.io/kustomize/kyaml to v0.20.1 (#​3118) (0ebb5eb)

v0.17.8: infra/blueprint-test: v0.17.8

Bug Fixes

v0.17.7: infra/blueprint-test: v0.17.7

Bug Fixes

v0.17.6: infra/blueprint-test: v0.17.6

Bug Fixes

v0.17.5: infra/blueprint-test: v0.17.5

Bug Fixes
  • bpt-golden: drop parallel for resource consumption (#​2826) (e23c35e)
  • deps: update module github.com/otiai10/copy to v1.14.1 (#​2791) (0db58df)
  • deps: update module sigs.k8s.io/kustomize/kyaml to v0.19.0 (#​2807) (247e2a2)

v0.17.4: infra/blueprint-test: v0.17.4

Bug Fixes
  • deps: update module github.com/gruntwork-io/terratest to v0.48.1 (#​2764) (982c73e)
  • deps: Update module golang.org/x/net to v0.33.0 (#​2784) (b2655aa)
fatih/color (github.com/fatih/color)

v1.19.0

Compare Source

What's Changed

New Contributors

Full Changelog: fatih/color@v1.18.0...v1.19.0

gammazero/workerpool (github.com/gammazero/workerpool)

v1.3.0

Compare Source

workerpool v1.3.0

This release adds DoWait, fixes a data race between Do and Stop, and fixes several pacer pause bugs. There are no breaking API changes. The minimum Go version is still 1.26.

New

  • DoWait enqueues a task and waits for it to be executed. Unlike SubmitWait, it returns an error instead of panicking:

    • It returns ErrStopped if the worker pool is already stopped.
    • It returns ErrStopped if Stop abandons the task before it runs, instead of blocking forever.
    • With StopWait, the queued task runs before DoWait returns.

    (#​104)

Behavior changes

  • SubmitWait panics instead of hanging when Stop abandons its task. SubmitWait now wraps DoWait and panics with its error. Previously, if Stop was called while a SubmitWait task was still queued, SubmitWait blocked forever. It now panics with ErrStopped. Use DoWait if tasks may be submitted while the pool is stopping. (#​104)
  • pacer.Pause may wait up to one pacing delay. Pause now waits for any caller already in Next to be released before it takes effect. This is what makes Pause reliable (see Fixes), and it never waits more than one delay.

Fixes

  • Do no longer races with Stop. Do sent on the internal task queue while Stop could be closing it, which the race detector reports. Do is now safe to call concurrently with Stop or StopWait: a task submitted while the pool is stopping is either accepted or rejected with ErrStopped. There is no measurable performance cost. (#​103)
  • Stopped no longer blocks while a Pause is waiting for an earlier pause. (#​103)
  • WaitingQueueSize uses a 64-bit counter. The waiting queue is unbounded, and the count previously used 32 bits. (#​103)
  • pacer.Pause now stops tasks from being released. Previously, the first task after Pause could still be released. After Pause returns, no paced task starts until Resume. (#​100)
  • pacer.Pause no longer waits behind every queued task. With many callers waiting in Next, Pause used to wait for all of them to be released first. It now waits for at most one. (#​100)
  • pacer.Resume does nothing when the pacer is not paused. Previously it blocked forever. (#​101)

Documentation

  • Submit and SubmitWait are documented as panicking wrappers around Do and DoWait, for code where submitting to a stopped pool is a programming error. They are not deprecated. (#​104)
  • ErrStopped, calling Do during Stop, and tasks that panic are now documented. (#​103)
  • The README and pacer examples use Do (#​104), and the README install instructions are updated (#​102).
  • Package doc headings use Go doc comment syntax. (#​102)

Tests

  • The pacer tests and TestDoConcurrentStop run under testing/synctest, so they no longer wait in real time. (#​100, #​104)

Full Changelog: gammazero/workerpool@v1.2.2...v1.3.0

v1.2.2

Compare Source

What's Changed

Full Changelog: gammazero/workerpool@v1.2.1...v1.2.2

v1.2.1

Compare Source

What's Changed

Full Changelog: gammazero/workerpool@v1.2.0...v1.2.1

v1.2.0

Compare Source

What's Changed

  • Update deque to v1.2.1
  • Update tests to use testing/synctest to check for goroutine leaks
  • Function Do returns error if called on stopped workerpool

Full Changelog: gammazero/workerpool@v1.1.3...v1.2.0

google/go-github (github.com/google/go-github/v81)

v93.0.0

Compare Source

This release contains the following breaking API changes:

  • feat!: Support reason in UsersService.Unsuspend (#​4614)
    BREAKING CHANGE: UsersService.Unsuspend now takes an UnsuspendUserRequest body argument.
  • refactor!: Pass repository creation by value (#​4616)
    BREAKING CHANGE: RepositoriesService.Create now requires a CreateRepositoryRequest value instead of a *Repository.
  • refactor!: Rename LockIssueOptions, PullRequestBranchUpdateOptions, and UserSuspendOptions to ...Request and pass them by value (#​4612)
    BREAKING CHANGE: LockIssueOptions, PullRequestBranchUpdateOptions, and UserSuspendOptions are renamed to LockIssueRequest, UpdatePullRequestBranchRequest, and SuspendUserRequest and are passed by value to IssuesService.Lock, PullRequestsService.UpdateBranch, and UsersService.Suspend; LockIssueRequest.LockReason is now *string.
  • refactor!: Pass the Projects v2 item body types by value and rename them to ...Request (#​4609)
    BREAKING CHANGE: AddProjectItemOptions and UpdateProjectItemOptions are renamed to AddProjectItemRequest and UpdateProjectItemRequest and passed by value; AddProjectItemRequest.Type is no longer a pointer; UpdateProjectItemOptions.Archived is removed.
  • refactor!: Rename RepositoryCreateForkOptions and RepositoryAddCollaboratorOptions to ...Request and pass them by value (#​4607)
    BREAKING CHANGE: RepositoryCreateForkOptions and RepositoryAddCollaboratorOptions are renamed to CreateForkRequest and AddCollaboratorRequest; RepositoriesService.CreateFork and RepositoriesService.AddCollaborator now take them by value instead of by pointer; CreateForkRequest.Organization, CreateForkRequest.Name, CreateForkRequest.DefaultBranchOnly and AddCollaboratorRequest.Permission are now pointers.
  • refactor!: Pass the Teams body types by value and rename them to ...Request (#​4606)
    BREAKING CHANGE: TeamAddTeamMembershipOptions, TeamAddTeamRepoOptions and TeamProjectOptions are renamed to AddTeamMembershipRequest, AddTeamRepoRequest and AddTeamProjectRequest; TeamsService.AddTeamMembershipByID, AddTeamMembershipBySlug, AddTeamRepoByID, AddTeamRepoBySlug, AddTeamProjectByID and AddTeamProjectBySlug now take them by value instead of by pointer; AddTeamMembershipRequest.Role and AddTeamRepoRequest.Permission are now *string.
  • refactor!: Pass the secret scanning body types by value and rename them to ...Request (#​4548)
    BREAKING CHANGE: SecretScanningAlertUpdateOptions and SecretScanningPatternConfigsUpdateOptions are renamed to UpdateSecretScanningAlertRequest and UpdateSecretScanningPatternConfigsRequest; SecretScanningService.UpdateAlert, UpdatePatternConfigsForEnterprise and UpdatePatternConfigsForOrg now take them by value; UpdateSecretScanningAlertRequest.State is now *string.
  • fix!: Match request body fields to the OpenAPI schemas (#​4581)
    BREAKING CHANGE: Many required request body fields are now passed by value.
  • fix!: Send credentials only to configured origins (#​4564)
    BREAKING CHANGE: Credentials are sent only to a client's configured API and upload origins — every other destination, including a redirect hop, goes out unauthenticated. A request body aimed outside those origins is refused. BasicAuthTransport and UnauthenticatedRateLimitedTransport gained AllowedOrigins, which GitHub Enterprise users must set.
  • refactor!: Pass org invitation requests by value (#​4551)
    BREAKING CHANGE: OrganizationsService.CreateOrgInvitation now takes CreateOrgInvitationRequest (by value); CreateOrgInvitationRequest.TeamID is now TeamIDs.

...and the following additional changes:

  • chore: Bump version of go-github to v93.0.0 (#​4634)
  • chore: Consolidate Dependabot PRs (#​4633)
  • feat: Add support for stargazer count and history (#​4611)
  • build: Bump github.com/ProtonMail/go-crypto from 1.5.1 to 1.5.2 in /example (#​4608)
  • fix: Allow removing runner group networks (#​4541)
  • feat: Add actions policies endpoints (#​4604)
  • feat: Add Actions cache limits for an organization (#​4597)
  • feat: Add dismissal_restriction to PullRequestRuleParameters (#​4599)
  • feat: Add code coverage ruleset support (#​4603)
  • tools: Leave response struct fields out of the schemafields check (#​4592)
  • feat: Add org private registries permission scope (#​4591)
  • chore: Use local gcl to create custom gcl if on path (#​4600)
  • feat: Add required field on combined status responses (#​4586)
  • build: Bump github.com/ProtonMail/go-crypto from 1.4.1 to 1.5.1 in /example (#​4602)
  • feat: Add Agents variables API (#​4587)
  • feat: Add ListPublicEmails (#​4595)
  • build: Bump codecov/codecov-action from 7.0.0 to 7.1.1 (#​4593)
  • chore: Report stale entries in openapi_operations.yaml (#​4589)
  • chore: Update openapi_operations.yaml (#​4588)
  • chore: Update maintenance tooling (#​4580)
  • docs: Add Trung Huynh Chi to AUTHORS (#​4582)
  • feat: Check request body fields against OpenAPI (#​4576)
  • docs: Add Sushant Poudel to AUTHORS (#​4579)
  • docs: Fix go-githubauth GitHub App example (#​4578)
  • chore: Consolidate Dependabot PRs (#​4575)
  • feat: Support explicit custom property values (#​4561)
  • feat: Support Changes and Enterprise fields on ReleaseEvent (#​4558)
  • fix: Reject an upload URL whose host differs from the configured upload host (#​4556)
  • chore: Update dependencies (#​4557)
  • feat: Add asynchronous SBOM support (#​4543)
  • chore: Bump go-github from v91 to v92 in /scrape (#​4555)

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate-bot
renovate-bot requested review from a team and q2w as code owners November 10, 2026 21:39
@forking-renovate forking-renovate Bot added the dependencies Pull requests that update a dependency file label Nov 10, 2026
@forking-renovate

forking-renovate Bot commented Nov 10, 2026 •

Copy link
Copy Markdown

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: cli/go.sum
go: downloading github.com/fatih/color v1.19.0
go: downloading github.com/go-git/go-git/v5 v5.16.5
go: downloading google.golang.org/api v0.311.0
go: downloading github.com/stretchr/testify v1.12.1
go: downloading golang.org/x/oauth2 v0.37.0
go: downloading github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test v0.18.0
go: downloading github.com/gruntwork-io/terratest v1.0.1
go: downloading github.com/hashicorp/hcl/v2 v2.25.0
go: downloading github.com/hashicorp/terraform-config-inspect v0.0.0-20260904064934-75d64de68c31
go: downloading golang.org/x/text v0.43.0
go: downloading google.golang.org/protobuf v1.36.12
go: downloading github.com/hashicorp/terraform-json v0.29.0
go: downloading github.com/zclconf/go-cty v1.19.0
go: downloading github.com/invopop/jsonschema v0.14.0
go: downloading github.com/jedib0t/go-pretty/v6 v6.8.3
go: downloading github.com/open-policy-agent/opa v1.22.1
go: downloading cloud.google.com/go/asset v1.30.1
go: downloading cloud.google.com/go/storage v1.70.0
go: downloading github.com/gammazero/workerpool v1.3.0
go: downloading github.com/mattn/go-colorable v0.1.14
go: downloading golang.org/x/sys v0.49.0
go: downloading github.com/go-git/go-billy/v5 v5.6.2
go: downloading golang.org/x/term v0.47.0
go: downloading github.com/fsnotify/fsnotify v1.10.1
go: downloading github.com/go-viper/mapstructure/v2 v2.5.0
go: downloading github.com/googleapis/gax-go/v2 v2.27.0
go: downloading golang.org/x/time v0.16.0
go: downloading golang.org/x/tools v0.51.0
go: downloading go.yaml.in/yaml/v2 v2.4.4
go: downloading github.com/pb33f/ordered-map/v2 v2.3.1
go: downloading golang.org/x/mod v0.42.0
go: downloading github.com/mattn/go-runewidth v0.0.19
go: downloading golang.org/x/sync v0.24.0
go: downloading cloud.google.com/go/longrunning v1.3.0
go: downloading go.opentelemetry.io/otel/trace v1.47.0
go: downloading go.opentelemetry.io/otel v1.47.0
go: downloading google.golang.org/grpc v1.85.0
go: downloading cloud.google.com/go/accesscontextmanager v1.15.0
go: downloading cloud.google.com/go/iam v1.14.0
go: downloading cloud.google.com/go/orgpolicy v1.20.0
go: downloading cloud.google.com/go/osconfig v1.22.0
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20261012220534-4341edf3f941
go: downloading google.golang.org/genproto v0.0.0-20261012220534-4341edf3f941
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20261026165753-2ffab32bce7e
go: downloading cloud.google.com/go/auth v0.24.1
go: downloading cloud.google.com/go/compute/metadata v0.10.0
go: downloading github.com/GoogleCloudPlatform/opentelemetry-operations-go/exporter/metric v0.57.0
go: downloading go.opentelemetry.io/contrib/detectors/gcp v1.45.0
go: downloading go.opentelemetry.io/otel/metric v1.47.0
go: downloading go.opentelemetry.io/otel/sdk/metric v1.47.0
go: downloading go.opentelemetry.io/otel/sdk v1.47.0
go: downloading k8s.io/api v0.36.2
go: downloading k8s.io/apimachinery v0.36.2
go: downloading github.com/gammazero/deque v1.2.2
go: downloading golang.org/x/crypto v0.58.0
go: downloading github.com/cyphar/filepath-securejoin v0.4.1
go: downloading github.com/pjbgf/sha1cd v0.3.2
go: downloading go.yaml.in/yaml/v3 v3.0.5
go: downloading cloud.google.com/go/auth/oauth2adapt v0.3.1
go: downloading github.com/google/s2a-go v0.1.11
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.71.0
go: downloading golang.org/x/net v0.62.0
go: downloading github.com/go-openapi/strfmt v0.27.0
go: downloading github.com/google/go-querystring v1.2.0
go: downloading github.com/apparentlymart/go-textseg/v17 v17.0.1
go: downloading go.yaml.in/yaml/v4 v4.0.0-rc.2
go: downloading k8s.io/kube-openapi v0.0.0-20260317180543-43fb72c5454a
go: downloading github.com/clipperhouse/uax29/v2 v2.6.0
go: downloading github.com/gobwas/glob v1.0.0
go: downloading github.com/lestrrat-go/jwx/v3 v3.3.0
go: downloading github.com/vektah/gqlparser/v2 v2.5.58
go: downloading go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.70.0
go: downloading cloud.google.com/go/monitoring v1.30.0
go: downloading github.com/GoogleCloudPlatform/opentelemetry-operations-go/internal/resourcemapping v0.57.0
go: downloading github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.35.0
go: downloading go.opentelemetry.io/otel/log v1.47.0
go: downloading github.com/go-openapi/spec v0.22.9
go: downloading github.com/go-openapi/validate v0.26.1
go: downloading k8s.io/utils v0.0.0-20260210185600-b8788abfbbc2
go: downloading k8s.io/klog/v2 v2.140.0
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.2
go: downloading github.com/cloudflare/circl v1.6.1
go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.24
go: downloading github.com/felixge/httpsnoop v1.1.0
go: downloading github.com/go-openapi/errors v0.22.8
go: downloading github.com/oklog/ulid/v2 v2.1.1
go: downloading github.com/klauspost/compress v1.20.0
go: downloading github.com/go-openapi/jsonreference v1.0.0
go: downloading github.com/go-openapi/swag v0.28.0
go: downloading github.com/decred/dcrd/dcrec/secp256k1/v4 v4.4.1
go: downloading github.com/lestrrat-go/httprc/v3 v3.0.6
go: downloading github.com/lestrrat-go/dsig v1.4.0
go: downloading github.com/valyala/fastjson v1.6.10
go: downloading github.com/envoyproxy/go-control-plane/envoy v1.39.1-0.20260819172001-e6e3fd93e4be
go: downloading github.com/go-openapi/jsonpointer v1.0.0
go: downloading github.com/go-openapi/swag/jsonutils v0.28.0
go: downloading github.com/go-openapi/swag/loading v0.28.0
go: downloading github.com/go-openapi/swag/stringutils v0.28.0
go: downloading github.com/go-openapi/analysis v0.25.5
go: downloading github.com/go-openapi/loads v0.25.0
go: downloading github.com/go-openapi/swag/conv v0.28.0
go: downloading github.com/go-openapi/swag/fileutils v0.28.0
go: downloading k8s.io/client-go v0.36.2
go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
go: downloading github.com/go-openapi/swag/cmdutils v0.28.0
go: downloading github.com/go-openapi/swag/mangling v0.28.0
go: downloading github.com/go-openapi/swag/netutils v0.28.0
go: downloading github.com/go-openapi/swag/typeutils v0.28.0
go: downloading github.com/go-openapi/swag/yamlutils v0.28.0
go: downloading github.com/goccy/go-json v0.10.6
go: downloading github.com/sirupsen/logrus v1.10.2
go: downloading github.com/spiffe/go-spiffe/v2 v2.8.1
go: downloading github.com/prometheus/client_golang v1.24.1
go: downloading github.com/go-jose/go-jose/v4 v4.1.4
go: downloading cel.dev/expr v0.25.3
go: downloading github.com/prometheus/client_model v0.6.3
go: downloading github.com/prometheus/common v0.70.1
go: downloading github.com/prometheus/procfs v0.21.1
go: downloading github.com/go-openapi/swag/pools v0.28.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.46.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.46.0
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.30.0
go: downloading gopkg.in/evanphx/json-patch.v4 v4.13.0
go: downloading github.com/emicklei/go-restful/v3 v3.13.0
go: downloading github.com/google/go-github v17.0.0+incompatible
go: downloading k8s.io/api v0.37.2
go: github.com/GoogleCloudPlatform/cloud-foundation-toolkit/cli/scorecard imports
	github.com/GoogleCloudPlatform/config-validator/pkg/asset imports
	github.com/GoogleCloudPlatform/config-validator/pkg/gcv/configs imports
	k8s.io/kubectl/pkg/scheme imports
	k8s.io/api/scheduling/v1alpha1: cannot find module providing package k8s.io/api/scheduling/v1alpha1

@dpebot

dpebot commented Nov 10, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Go toolchain version and bumps several dependencies in cli/go.mod, as well as updating tool versions in cli/Makefile. However, two critical issues were identified: first, upgrading github.com/google/go-github to v93 is a major version change that requires updating the import paths in the Go source files to avoid compilation failures; second, the GOLANGCI_VERSION update to 2.15.0 is invalid as golangci-lint uses v1.x.y versioning, which will cause Docker image pull failures.

Comment thread cli/go.mod
github.com/google/go-cmp v0.7.0
github.com/google/go-github/v81 v81.0.0
github.com/gruntwork-io/terratest v0.50.0
github.com/google/go-github/v93 v93.0.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Updating github.com/google/go-github from v81 to v93 is a major version upgrade that changes the module path. Since no Go files are updated in this pull request to use the new import path github.com/google/go-github/v93, the compilation will fail. Please either include the import path updates in the Go source files or revert this dependency update.

Comment thread cli/Makefile
DOCKER_IMAGE_DEVELOPER_TOOLS := cft/developer-tools
REGISTRY_URL := gcr.io/cloud-foundation-cicd
GOLANGCI_VERSION := 2.12.2
GOLANGCI_VERSION := 2.15.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The golangci-lint tool uses v1.x.y versioning (e.g., v1.60.0). There are no official Docker image releases for golangci/golangci-lint with a v2.x.y tag (such as v2.15.0 or the previous v2.12.2). Running make docker_go_lint will fail to pull the image. Please update this to a valid golangci-lint version (e.g., 1.64.5 or another valid 1.x.y version).

@dpebot

dpebot commented Nov 10, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@dpebot

dpebot commented Nov 11, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@dpebot

dpebot commented Nov 12, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@dpebot

dpebot commented Nov 12, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants