Skip to content

chore(deps): update infra/blueprint-test deps - #3530

Open
renovate-bot wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/infra-blueprint-test-deps
Open

renovate-bot wants to merge 1 commit into
GoogleCloudPlatform:mainfrom
renovate-bot:renovate/infra-blueprint-test-deps

Conversation

@renovate-bot

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence Type Update Pending
github.com/gruntwork-io/terratest v0.54.0 → v1.0.1 age confidence require major
github.com/hashicorp/terraform-config-inspect 813a975 → 75d64de age confidence require digest
github.com/hashicorp/terraform-json v0.27.2 → v0.29.0 age confidence require minor
github.com/mattn/go-shellwords v1.0.12 → v1.0.16 age confidence require patch
github.com/stretchr/testify v1.11.1 → v1.12.1 age confidence require minor
github.com/tidwall/gjson v1.18.0 → v1.20.0 age confidence require minor v1.20.2 (+1)
go (source) 1.24.11 → 1.26.10 age confidence toolchain minor 1.26.11
golang.org/x/mod v0.33.0 → v0.42.0 age confidence require minor v0.43.0
golangci/golangci-lint 2.8.0 → 2.15.0 age confidence minor
sigs.k8s.io/kustomize/kyaml v0.21.0 → v0.21.2 age confidence require patch

Release Notes

gruntwork-io/terratest (github.com/gruntwork-io/terratest)

v1.0.1

Compare Source

Highlights

This release starts the Terratest v1 maintenance phase. It is non-breaking and safe to upgrade to from any recent v1.x: nothing is removed or changed at runtime. The headline change is // Deprecated: annotations on the packages slated for removal in v2, each with inline guidance on the standard-library (or third-party) replacement.

Deprecated (removed in v2, not in this release):

  • modules/collections -> standard library slices
  • modules/environment -> os.Getenv at the call site
  • modules/git -> shell out to git with os/exec
  • modules/version-checker -> shell out to check a binary's version
  • modules/slack -> the github.com/slack-go/slack client directly

Each deprecated symbol's doc comment shows the concrete replacement.

v1 maintenance policy: security fixes only, delivered on the v1 branch, until 12 months after v2.0.0 reaches general availability. v2 ships under new /v2 module paths, so v1-pinned consumers are unaffected. This commit is the permanent v1 head; the long-lived v1 branch is cut from here. A v1-to-v2 import path map is included at docs/v2-import-map.md.

What's Changed

Full Changelog: gruntwork-io/terratest@v1.0.0...v1.0.1

v1.0.0

Compare Source

Terratest 1.0.0 is the first stable release of the project. From this release forward, Terratest follows semantic versioning: breaking changes are restricted to major releases, and renamed or replaced symbols stay around as deprecated aliases in the v1 line. See the v1.0 announcement post for the narrative; the notes below cover what shipped.

✨ Highlights

  • Context plumbing throughout. Every cloud-API helper now takes an explicit context.Context as its second argument. FooContext (fail-fast) and FooContextE (returns the error) are the canonical entrypoints; the bare Foo and FooE forms remain as deprecated aliases.
  • Mockable SDK clients. Most Azure and GCP helpers that previously hid SDK client construction now ship with a WithClient sibling that accepts an injected client. Drive Terratest against Azure's azfake server or a GCP test double for fast unit tests with zero credentials.
  • Modern, supported underlying SDKs. modules/azure migrated off Microsoft's archived "track 1" SDK onto sdk/resourcemanager; AWS S3 helpers moved off the deprecated s3/manager to s3/transfermanager.
  • Terragrunt v1.0 feature parity. The terragrunt module fully supports Terragrunt v1.0's CLI redesign with new wrappers and single-unit variants. Terragrunt-specific code is separated from modules/terraform into its own module.
  • Reliability fixes. EC2 list calls paginate, OPA policy downloads deduplicate, several panics on empty SDK responses are now errors.

⚠️ Breaking Changes

Azure SDK migration

modules/azure moved off the archived "track 1" Azure SDK onto the actively maintained sdk/resourcemanager. Users who import the underlying SDK directly need to update import paths, move field access under .Properties, and replace iterators with pagers. The release also dropped 8 deprecated Get*ClientE getters in favor of Create*ClientE, renamed 4 CreateNew*Client* factories (with deprecated aliases), fixed the NsgRuleSummary.SourceAdresssPrefixes typo, and changed GetVirtualMachineImage{,E} to return *VMImage. See the Azure migration guide for full mechanics.

AWS S3 uploader

The four NewS3Uploader* helpers now return *transfermanager.Client instead of *manager.Uploader. The call shape moves from uploader.Upload(ctx, &s3.PutObjectInput{...}) to client.UploadObject(ctx, &transfermanager.UploadObjectInput{...}). Types live under github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager.

GCP Pub/Sub

modules/gcp/pubsub.go moved from cloud.google.com/go/pubsub v1 to v2. Wrapper shapes are unchanged, but callers driving the underlying client directly switch from client.Topic("name") / client.Subscription("name") handles to TopicAdminClient / SubscriptionAdminClient calls that take fully qualified resource names.

Terragrunt module split

Terragrunt-specific helpers were removed from modules/terraform/ and modules/test-structure/ in favor of the dedicated modules/terragrunt/ package: TgApplyAll, TgDestroyAll, TgPlanAllExitCode, ValidateInputs, InitAndValidateInputs, AssertTgPlanAllExitCode, TgInvalidBinary, TerragruntDefaultPath, ExtraArgs.ValidateInputs, NewTerragruntValidationOptions, and the TG constant. Terragrunt stack output keys were also renamed. See the terragrunt module migration table.

Kubernetes kubeconfig handling

GetKubernetesClientFromOptionsContextE now logs the kubeconfig load error before falling back to in-cluster authentication; previously the fallback was silent. A new KubectlOptions.InClusterAuth = true opt-in skips kubeconfig loading entirely for callers who want fully explicit auth.

testing.TestingT adoption

Helper signatures consistently take testing.TestingT (an interface) instead of the concrete *testing.T. Calls from *testing.T are unaffected; callers that wrap or substitute the test handle may need updates.

✨ New Features

WithClient injection helpers across Azure and GCP

Most Azure and GCP helpers now ship with a *WithClient sibling that accepts a pre-built SDK client, enabling unit testing against Azure's azfake server, GCP test doubles, and similar fakes without standing up real cloud resources or providing credentials.

Terragrunt v1.0 feature parity

All terraform-passthrough commands use terragrunt run -- <command> and multi-unit functions use terragrunt run --all -- <command>. Generic Run / RunE provide an escape hatch. New command wrappers: Render, RenderJSON, Graph, HclValidate, OutputAllJson, plus single-unit variants for Init, Plan, Apply, Destroy, Validate, and OutputJson.

GCP Pub/Sub helpers

AssertTopicExists and AssertSubscriptionExists added to modules/gcp/pubsub.go. Thanks to @​Amit2465 for the contribution.

🔧 Code Quality & API Cleanup

  • Godoc and // Deprecated: annotations. A v1 documentation pass closed godoc gaps so the API surface renders cleanly on pkg.go.dev. Every renamed or replaced symbol carries a machine-readable // Deprecated: line so go vet, staticcheck, and IDE LSPs surface upgrade guidance automatically.
  • Strict golangci-lint v2 wired into pre-commit and CI across the project.
  • interface{} → any sweep across the codebase.
  • collections generics: functions are now generic; ListContains is deprecated in favor of slices.Contains.

🐛 Bug Fixes

  • EC2 list pagination: DescribeInstances and DescribeTags now paginate; previously capped silently at 1,000 results.
  • Concurrent OPA download deduplication: modules/opa/download_policy.go uses singleflight so concurrent calls for the same rulePath share a single download.
  • Empty-response panics → errors: RDS, IAM, OCI list calls, and several Azure SDK-response paths return typed errors on empty responses where they previously panicked on unchecked slice access.
  • ACM pagination: ACM list calls now paginate.
  • OCI nil-safety: ListVcns and related calls loop on OpcNextPage; image sort handles nil timestamps; nil-pointer guards added across the package.
  • SSH file-handle leak: SCPDirFromContextE closes file handles on each download.
  • OPA cache concurrency race: cache initialization is now race-free under concurrent test runs.
  • Azure NSG field name typo: NsgRuleSummary.SourceAdresssPrefixes renamed to SourceAddressPrefixes.

📦 Dependency Updates

  • AWS SDK v2 bumped across every service used by Terratest; s3/manager (deprecated) replaced with s3/transfermanager.
  • GCP SDKs current: cloud.google.com/go/storage 1.62, cloud.google.com/go/pubsub/v2 2.4, google.golang.org/api 0.276.
  • Azure migrated off azure-sdk-for-go v51 onto the actively maintained sdk/resourcemanager modules (compute, network, storage, keyvault, sql, servicebus, frontdoor, monitor, recoveryservices, and others).
  • mitchellh/go-homedir (archived) removed as a direct dependency in favor of os.UserHomeDir; denisenkom/go-mssqldb swapped for the Microsoft-maintained fork.
  • google.golang.org/grpc 1.80, github.com/docker/cli 29.x, go.opentelemetry.io/otel/sdk 1.43, github.com/jackc/pgx/v5 5.9.
  • OpenTofu pin updated to 1.11.6; Terragrunt baseline bumped to v1.0.2.

📖 Documentation Updates

⚙️ Process Updates

  • All CI moved from CircleCI to GitHub Actions.
  • Multi-arch (linux / darwin / windows × amd64 / arm64 / 386) build-and-release workflow with SHA256SUMS.
  • go-mod-tidy-check workflow added.

Full Changelog: gruntwork-io/terratest@v0.56.0...v1.0.0

v0.56.0

Compare Source

✨ New Features

CreateJobFromCronJob and CreateJobFromCronJobE added.

The CreateJobFromCronJob and CreateJobFromCronJobE functions support creating Kubernetes cron jobs in a given namespace. This mirrors the behavior of the kubectl create job ... --from=cronjob/... command and provides a native way to trigger and test CronJob configurations within Terratest.

Special thanks to @​steffas for contributing this feature.

🐛 Bug Fixes

Preserve existing instance metadata in SetMetadata

Updates the newMetadata function to properly copy existing metadata items before applying new key-value pairs. This resolves an issue introduced in v0.55.0 where functions like SetMetadata and AddSshKey were accidentally overwriting all existing instance metadata instead of merging the new values.

Plan output parsing for Terraform 1.14+ fixed

Removes the trailing period requirement from the planWithChangesRegexp regular expression used by GetResourceCount. This resolves parsing failures caused by Terraform 1.14's new Actions feature, which appends additional text (e.g., . Actions: N to invoke.) to the standard plan summary line.

Update CronJob to use the batch/v1 API

Updates the CronJob implementation under the hood to use the stable batch/v1 API instead of batch/v1beta1. This restores compatibility with modern Kubernetes clusters, as the older v1beta1 API was completely removed in Kubernetes 1.25.

📖 Documentation Updates

Homepage examples for Terragrunt updated

Examples relevant to Terragrunt have been fixed in the https://terragrunt.gruntwork.io site.

⚙️ Process Updates

Golang bumped to 1.26

The version of Golang in go.mod has been updated to 1.26.

What's Changed

New Contributors

Full Changelog: gruntwork-io/terratest@v0.55.0...v0.56.0

v0.55.0

Compare Source

What's Changed

Full Changelog: gruntwork-io/terratest@v0.54.0...v0.55.0

hashicorp/terraform-json (github.com/hashicorp/terraform-json)

v0.29.0

Compare Source

ENHANCEMENTS:

  • version: Allow parsing of a format_version field, added in Terraform 1.17 (#​208)
  • Add init_output log type for use when parsing logs from the init command (#​181)
  • logging: Add support for state migrate message types (#​210)
  • Add support for JSON output from workspace list command (#​198)
  • Enable parsing state_store_initialization_start JSON log message from init command (#​212)

BUG FIXES:

  • Avoid panic in (WorkspaceListOutput) CurrentWorkspace if no workspaces are listed (#​214)

v0.28.0

Compare Source

ENHANCEMENTS:

  • plan: Added "action_reason" data to resource changes described in a plan by @​renescheepers in #​200
  • provider schema: Added ability to parse state store schemas from a provider's schema by @​SarahFrench in #​190
    • This is related to an experimental feature that's still in development in Terraform core.
  • validate: Added Diagnostic.Address data to diagnostics returned when validating configuration by @​bbasata in #​204

INTERNAL:

  • test: Add tests for parsing logs from init commands, tests for parsing of RFC3339 timestamps with different levels of precision by @​SarahFrench in #​180
  • build(deps): bump actions/checkout from 5.0.0 to 6.0.0 in the github-actions-breaking group by @​dependabot[bot] in #​182
  • build(deps): bump actions/setup-go from 6.0.0 to 6.1.0 in the github-actions-backward-compatible group by @​dependabot[bot] in #​183
  • build(deps): bump github.com/hashicorp/go-version from 1.7.0 to 1.8.0 by @​dependabot[bot] in #​184
  • build(deps): bump actions/checkout from 6.0.0 to 6.0.1 in the github-actions-backward-compatible group by @​dependabot[bot] in #​186
  • build(deps): bump the github-actions-backward-compatible group across 1 directory with 2 updates by @​dependabot[bot] in #​189
  • Update copyright headers to IBM by @​radeksimko in #​192
  • build(deps): bump actions/setup-go from 6.2.0 to 6.3.0 in the github-actions-backward-compatible group by @​dependabot[bot] in #​194
  • build(deps): bump actions/setup-go from 6.3.0 to 6.4.0 in the github-actions-backward-compatible group by @​dependabot[bot] in #​195
  • build(deps): bump github.com/hashicorp/go-version from 1.8.0 to 1.9.0 by @​dependabot[bot] in #​196
  • build(deps): bump actions/checkout from 6.0.2 to 6.0.3 in the github-actions-backward-compatible group by @​dependabot[bot] in #​199
  • build(deps): bump actions/checkout from 6.0.3 to 7.0.0 in the github-actions-breaking group by @​dependabot[bot] in #​201
  • build(deps): bump actions/setup-go from 6.4.0 to 6.5.0 in the github-actions-backward-compatible group by @​dependabot[bot] in #​202

New Contributors

Full Changelog: hashicorp/terraform-json@v0.27.2...v0.28.0

v0.27.3

Compare Source

What's Changed

New Contributors

Full Changelog: hashicorp/terraform-json@v0.27.2...v0.27.3

mattn/go-shellwords (github.com/mattn/go-shellwords)

v1.0.16

Compare Source

v1.0.15

Compare Source

What's Changed

New Contributors

Full Changelog: mattn/go-shellwords@v1.0.14...v1.0.15

v1.0.14

Compare Source

v1.0.13

Compare Source

stretchr/testify (github.com/stretchr/testify)

v1.12.1

Compare Source

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

v1.12.0

Compare Source

What's Changed

Functional Changes
Fixes
Documentation, Build & CI

New Contributors

Full Changelog: stretchr/testify@v1.11.0...v1.12.0

What's Changed

[!IMPORTANT]
✂ PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate Bot added the dependencies Pull requests that update a dependency file label Nov 10, 2026
@forking-renovate

Copy link
Copy Markdown

ℹ️ Artifact update notice

File name: infra/blueprint-test/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 66 additional dependencies were updated

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=7 days

Details:

Package Change
filippo.io/edwards25519 v1.1.0 -> v1.1.1
github.com/aws/aws-sdk-go-v2 v1.32.5 -> v1.42.0
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.6.7 -> v1.7.9
github.com/aws/aws-sdk-go-v2/config v1.28.5 -> v1.32.16
github.com/aws/aws-sdk-go-v2/credentials v1.17.46 -> v1.19.15
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.20 -> v1.18.22
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.24 -> v1.4.29
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.24 -> v2.7.29
github.com/aws/aws-sdk-go-v2/internal/v4a v1.3.24 -> v1.4.23
github.com/aws/aws-sdk-go-v2/service/acm v1.30.6 -> v1.38.2
github.com/aws/aws-sdk-go-v2/service/autoscaling v1.51.0 -> v1.66.1
github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs v1.44.0 -> v1.69.1
github.com/aws/aws-sdk-go-v2/service/dynamodb v1.37.1 -> v1.57.2
github.com/aws/aws-sdk-go-v2/service/ec2 v1.193.0 -> v1.297.1
github.com/aws/aws-sdk-go-v2/service/ecr v1.36.6 -> v1.57.1
github.com/aws/aws-sdk-go-v2/service/ecs v1.52.0 -> v1.78.1
github.com/aws/aws-sdk-go-v2/service/iam v1.38.1 -> v1.53.8
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.1 -> v1.13.8
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.4.5 -> v1.9.14
github.com/aws/aws-sdk-go-v2/service/internal/endpoint-discovery v1.10.5 -> v1.11.22
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.5 -> v1.13.22
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.18.5 -> v1.19.22
github.com/aws/aws-sdk-go-v2/service/kms v1.37.6 -> v1.50.5
github.com/aws/aws-sdk-go-v2/service/lambda v1.69.0 -> v1.89.1
github.com/aws/aws-sdk-go-v2/service/rds v1.91.0 -> v1.118.1
github.com/aws/aws-sdk-go-v2/service/route53 v1.46.2 -> v1.62.6
github.com/aws/aws-sdk-go-v2/service/s3 v1.69.0 -> v1.99.1
github.com/aws/aws-sdk-go-v2/service/secretsmanager v1.34.6 -> v1.41.6
github.com/aws/aws-sdk-go-v2/service/sns v1.33.6 -> v1.39.16
github.com/aws/aws-sdk-go-v2/service/sqs v1.37.1 -> v1.42.26
github.com/aws/aws-sdk-go-v2/service/ssm v1.56.0 -> v1.68.5
github.com/aws/aws-sdk-go-v2/service/sso v1.24.6 -> v1.30.16
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.5 -> v1.35.20
github.com/aws/aws-sdk-go-v2/service/sts v1.33.1 -> v1.42.0
github.com/aws/smithy-go v1.22.1 -> v1.27.1
github.com/emicklei/go-restful/v3 v3.12.2 -> v3.13.0
github.com/go-errors/errors v1.5.0 -> v1.5.1
github.com/go-logr/logr v1.4.2 -> v1.4.3
github.com/go-openapi/jsonpointer v0.21.0 -> v1.0.0
github.com/go-openapi/jsonreference v0.20.2 -> v1.0.0
github.com/go-openapi/swag v0.23.0 -> v0.27.1
github.com/hashicorp/go-version v1.7.0 -> v1.9.0
github.com/jackc/pgx/v5 v5.7.1 -> v5.9.0
github.com/moby/spdystream v0.5.0 -> v0.5.1
github.com/spf13/pflag v1.0.6 -> v1.0.10
go.yaml.in/yaml/v2 v2.4.2 -> v2.4.4
go.yaml.in/yaml/v3 v3.0.4 -> v3.0.5
golang.org/x/crypto v0.47.0 -> v0.57.0
golang.org/x/net v0.49.0 -> v0.59.0
golang.org/x/oauth2 v0.27.0 -> v0.36.0
golang.org/x/sync v0.19.0 -> v0.23.0
golang.org/x/sys v0.40.0 -> v0.48.0
golang.org/x/term v0.39.0 -> v0.46.0
golang.org/x/text v0.33.0 -> v0.42.0
golang.org/x/time v0.9.0 -> v0.15.0
golang.org/x/tools v0.41.0 -> v0.51.0
google.golang.org/protobuf v1.36.5 -> v1.36.12
gopkg.in/evanphx/json-patch.v4 v4.12.0 -> v4.13.0
k8s.io/api v0.34.0 -> v0.36.2
k8s.io/apimachinery v0.34.0 -> v0.36.2
k8s.io/client-go v0.34.0 -> v0.36.2
k8s.io/klog/v2 v2.130.1 -> v2.140.0
k8s.io/kube-openapi v0.0.0-20250710124328-f3f2b991d03b -> v0.0.0-20260721132016-d427ff9ee9ad
k8s.io/utils v0.0.0-20250604170112-4c0f3b243397 -> v0.0.0-20260626114624-be93311217bd
sigs.k8s.io/json v0.0.0-20241014173422-cfa47c3a1cc8 -> v0.0.0-20250730193827-2d320260d730
sigs.k8s.io/structured-merge-diff/v6 v6.3.0 -> v6.4.1

@renovate-bot renovate-bot added the dependencies Pull requests that update a dependency file label Nov 10, 2026
@dpebot

dpebot commented Nov 10, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Go version to 1.26.0, the toolchain to go1.26.10, and upgrades various dependencies in go.mod and go.sum, alongside updating GOLANGCI_VERSION in the Makefile. Feedback on the changes highlights that Go 1.26.0 and toolchain go1.26.10 do not exist yet, which will cause toolchain resolution failures and break the build. A suggestion is provided to revert to Go 1.24.0.

Comment on lines +3 to +5
go 1.26.0

toolchain go1.24.11
toolchain go1.26.10

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

Go 1.26.0 and toolchain go1.26.10 do not exist yet (the latest stable version is Go 1.24). Specifying a non-existent Go version in go.mod will cause toolchain resolution failures and break the build/CI. Please revert this change or pin it to a valid, released Go version.

Suggested change
go 1.26.0
toolchain go1.24.11
toolchain go1.26.10
go 1.24.0
toolchain go1.24.11

@renovate-bot
renovate-bot force-pushed the renovate/infra-blueprint-test-deps branch from 7b8c853 to cf06241 Compare November 11, 2026 06:02
@dpebot

dpebot commented Nov 11, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

@renovate-bot
renovate-bot force-pushed the renovate/infra-blueprint-test-deps branch from cf06241 to 4d42b3d Compare November 12, 2026 17:27
@dpebot

dpebot commented Nov 12, 2026

Copy link
Copy Markdown
Collaborator

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants