Update go modules (main) (minor)#3131
Conversation
ℹ️ Artifact update noticeFile name: acceptance/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: tools/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: tools/kubectl/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
b7bbfdc to
02074a5
Compare
ae12a07 to
b6bcb99
Compare
eb3bd95 to
50d854b
Compare
|
🤖 Finished Review · ✅ Success · Started 8:03 PM UTC · Completed 8:12 PM UTC |
![fullsend-ai-review[bot]](https://avatars.githubusercontent.com/in/3478501?s=60&v=4){kind=small}
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 1:29 AM UTC · Completed 1:35 AM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 1:43 AM UTC · Completed 1:48 AM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 5:34 PM UTC · Completed 5:39 PM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 10:18 AM UTC · Completed 10:29 AM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 3:02 PM UTC · Completed 3:13 PM UTC |
|
🤖 Finished Review · ✅ Success · Started 5:50 PM UTC · Completed 6:00 PM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 8:53 PM UTC · Completed 9:02 PM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 1:12 AM UTC · Completed 1:22 AM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 7:59 AM UTC · Completed 8:06 AM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 9:49 PM UTC · Completed 9:56 PM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 2:02 AM UTC · Completed 2:09 AM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 8:42 AM UTC · Completed 8:53 AM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 1:57 PM UTC · Completed 2:05 PM UTC |
This comment was marked as outdated.
This comment was marked as outdated.
Sorry, something went wrong.
|
🤖 Finished Review · ✅ Success · Started 4:49 AM UTC · Completed 5:01 AM UTC |
| golang.org/x/exp v0.0.0-20260410095643-746e56fc9e2f | ||
| golang.org/x/net v0.56.0 // indirect | ||
| golang.org/x/sync v0.21.0 | ||
| github.com/testcontainers/testcontainers-go v0.43.0 // using unreleased version that contains the fix in https://github.com/testcontainers/testcontainers-go/pull/2899 |
There was a problem hiding this comment.
[low] stale-reference
The inline comment on testcontainers-go says using unreleased version but v0.43.0 is an official release. The comment is stale and should be removed.
Suggested fix: Remove the stale comment from the testcontainers-go dependency line in go.mod.
| // gocloud.dev >= v0.44.0 removed the docstore/awsdynamodb package, which | ||
| // tektoncd/chains (via tektoncd/cli) still imports | ||
| replace gocloud.dev => gocloud.dev v0.43.0 | ||
| replace gocloud.dev => gocloud.dev v0.46.0 |
There was a problem hiding this comment.
[low] stale-reference
The replace directive for gocloud.dev changed target from v0.43.0 to v0.46.0, but the comment still explains the pin to v0.43.0 was needed because v0.44.0+ removed the docstore/awsdynamodb package. Since tektoncd/chains v0.28.1 no longer requires that package (build succeeds), the comment and possibly the replace directive are stale.
Suggested fix: Update or remove the stale comment above the gocloud.dev replace directive. Consider whether the replace directive is still needed.
This PR contains the following updates:
v0.16.0→v0.17.1v0.10.0→v0.11.0ae5f0ae→f9eefe1v0.13.7→v0.14.0v0.26.4→v0.27.0v2.11.4→v2.12.2e7eb2ec→dd8c9b1v1.15.2→v1.18.220ebb0f→4e6772av3.0.4→v3.1.2v0.26.2→v0.28.1v0.44.1→v0.45.1v0.34.0→v0.43.0v0.34.0→v0.43.0v1.11.0→v1.16.0v0.43.0→v0.46.0a2b48b6→7ba6f82746e56f→764159dv0.21.0→v0.22.0v0.38.0→v0.40.0v1.12.1→v1.13.05883c5e→d427ff9v1.34.2→v1.36.3v0.26.0→v0.32.0v0.20.1→v0.21.1v0.20.1→v0.21.1Release Notes
cue-lang/cue (cuelang.org/go)
v0.17.1Compare Source
Evaluator
Fix several regressions introduced in
v0.17.0: a panic when evaluating some disjunctions (#4419), and spuriousinvalid interpolation(#4420),field not allowed(#4423), andstructural cycle(#4430) errors involving comprehensions orselfreferences.Fix two regressions introduced in
v0.17.0where evaluation could hang (#4421, #4422), as well as two long-standing hangs on self-referencing configurations (#2766, #4231).cmd/cueFix a panic in
cue exp gengotypes, a regression introduced inv0.17.0, when a definition references a definition from another package via embedding (#4436).Module replacements are now subject to minimum-version selection like any other dependency.
cue mod tidynow normalizes a fully-pinned replacement to its major version and records the target as a regular dependency.Full list of changes since v0.17.0
fc6c0b29c720d08ead2d9f81f772993c44e1cd5e1fed51952e69e621459016af89ebec6176fb53017156f6f05bb04d57ab63994d50ba71cab72d5b4f82d498e0b974d7d5a557f6bc350v0.17.0Compare Source
Changes which may break some users are marked below with:⚠️
Language
The active
tryexperiment renames the newfallbackkeyword, used withforcomprehensions, tootherwise.fallbackcontinues to be accepted for now, but is rewritten to the new form.The active
aliasv2experiment now allows~(X)as an alternative to~Xfor the single postfix alias form.~Xis also rewritten as~(X)for the sake of consistency and clarity.Language versions
v0.17.0and later allow omitting commas in multi-line lists. Just like a newline after a struct field implies a comma, a newline after a list element now implies a comma as well.Language versions
v0.17.0and later allow a newline or a comma before the closing bracket of an index expression, matching how lists and func arguments allow omitting trailing commas.The language spec is tweaked to make
$a valid identifier, which was already allowed by the parser and evaluator.div,mod,quo, andremoperators has been removed. Since late 2020, these infix forms have been undocumented and rewritten bycue fixto the new function calls.The new
shortcircuitexperimentThis release introduces the
shortcircuitexperiment, which changes the&&and||operators to not evaluate the right operand if the left operand alone determines the result.This matches the behavior already documented in the CUE spec and is consistent with most mainstream languages, but for the sake of a smooth transition for end users, we are rolling out this change via an experiment.
You can try this experiment via the
@experiment(shortcircuit)file attribute. To mimic the old behavior with the experiment, you can use a hidden field:Evaluator
Comprehensions
The comprehension algorithm now waits to run a comprehension's body until the fields it reads have a concrete value, rather than trying to produce its fields up front. This resolves a number of long-standing bugs, most notably the last known regressions from
evalv2, where a comprehension that should have resolved instead failed as an incomplete value or a cycle.This design also greatly simplifies upcoming evaluator work, such as introducing new builtins to replace comparing values to bottom, as well as the design of
evalv4.Other changes
The evaluator no longer deduplicates errors just by position, which was causing some useful errors from disjunctions or standard library calls to be dropped incorrectly.
Several long-standing cycle-detection bugs have been fixed, such as self-referential uses of
matchNandmatchIf, self-feeding disjunctions, and comprehensions that read aletbinding which refers back to the comprehension's own fields.Fixed a bug where the same package imported via different qualified import paths (e.g.
foo.com/bar@v0orfoo.com/bar:baz) did not share the same hidden field namespace.Resolving an unversioned import from a dependency module now respects that module's own default major version, instead of always using the main module's default.
Fix a number of issues where
cue defcould produce invalid CUE output, such as due to name conflicts.Fix an evaluator regression where embedded disjunctions across packages may not correctly apply closedness.
Fix an evaluator bug where
cue.Context.BuildExprofclose({})did not actually result in a closed struct.Fix a bug where some calls to standard library functions or validators did not include the "error in call to pkg.Func" error context, or included it twice.
A few changes to the evaluator should reduce allocated objects by up to 16%, reducing GC overhead and memory usage.
To ease the transition into the new formatter we plan to release with v0.18,
CUE_EXPERIMENT=formatv2=0is now allowed as a no-op.A number of other bugs, panics, and hangs have been resolved as well.
cmd/cueModule replaces
CUE now supports substituting a module dependency with a local directory or a different remote module during development - for example while testing a fix to a dependency before it is published, or to replace a dependency with a fork including improvements.
This configuration lives in
cue.mod/local-module.cue, which is excluded when publishing to registries.cue mod editandcue mod tidygain support for maintaining this file.We have also published a how-to guide on replacing a dependency with a local module.
Read the full design doc in the proposal, or read the
cue.mod/local-module.cuereference docs.Other changes
The new global
-Cor--chdirflag runscuefrom the given working directory.Command input parsing is improved so that CUE packages can come after data files, such as
cue vet -c data.yaml ./schema.cue import --with-contextnow ensures thatdatarepresents the original raw input data, and not its interpretation like JSON Schema.cue import --pathnow skips over null values in an input stream, such as empty documents in a YAML file.Fix a bug where the flag
cue export --pathwas ignored when the inputs were pure CUE.The new
cue exp gengotypes --outfileflag controls the output file path when generating a single package.cue vet -d/--schemanow supports hidden fields, and correctly reports an error when the command inputs are CUE only.cue fixandcue trimno longer change file modification times when no changes are necessary.A
$CUE_CACHE_DIRdirectory is no longer required when loading CUE without external dependencies.The "filetypes" lookup tables now use a more compact encoding, saving about 150KiB in binary size for
cmd/cueas well as Go API users.LSP server
Add an initial version of organize-imports, which sorts the existing imports and removes unneeded imports. It is not yet capable of suggesting missing imports.
Wait for a short period of inactivity before sending diagnostics to the editor. This "debounce" means that a user typing incomplete CUE syntax will not be distracted with syntax errors as much.
The
aliasv2experiment is now fully supported.The
renamefunction is fixed to distinguish between field names and aliases.Improve field name analysis in general so that fields with multiple aliases (e.g.
v=[k=string]: _) are properly supported.Improve attribute handling for file-level embedded attributes, and to attach attributes within expressions to the correct struct.
Treat conjunctions (
&) and disjunctions (|) the same way for goto-definition. With the cursor on a path, it returns all results that the path MAY resolve to. With the cursor on a field declaration name, it returns all results that the path constructed from the field's name, and its field's name (and so on) MAY resolve to.Special-case
closefunction calls so that paths can resolve through fields within the argument toclose.Encodings
#character, shortening names and ensuring compatibility with the wider JSON Schema ecosystem. This required deprecatingencoding/jsonschema.GenerateConfig.NameFuncin favor ofNamesFunc.The JSON Schema encoder is improved to support
list.UniqueItemsand standalone validators, to usemaxItemsandminItemsinstead ofmaxLengthandminLengthfor lists with prefix elements, and to generatedescriptionkeywords for doc comments.Several closedness bugs in the JSON Schema encoder have been fixed, ensuring that the generated JSON Schema behaves the same way as the original CUE definition.
The JSON Schema decoder is improved to better handle the
prefixItemskeyword.The ProtoBuf decoder now resolves relative references following the usual scoping rules, instead of always resolving them against the top-level scope.
Standard library
Add
time.ToUnixandtime.ToUnixNano, which convert anRFC3339Nanotime value into seconds or nanoseconds since the Unix epoch, complementing the existingUnixbuiltin.strconv.FormatFloatnow accepts a string format parameter, likeFormatFloat(3.14, "e", 4, 64).list.MatchNnow shows what expected value it's matching against when it fails.The
netIP APIs now consistently return an error on invalid input types.Go API
Using
cue.Values concurrently is now fully supported, which required deprecatingcue.Value.Context. If you encounter any races or bugs, please report them via the issue tracker.cue/loadnow supports loading from anio/fs.FS, as outlined in proposal #4285. Loading file embeds throughConfig.OverlayandConfig.FSis supported now as well.cue/ast/astutildeprecatesSanitizein favor of the newSanitizeFilesAPI, given thatSanitizeon a single file cannot know if another file in the same package shadows builtin names likeself.Add
Path.CompareandSelector.Compare, providing allocation-free total ordering suitable forslices.SortFunc.Clarify that
cue/formatindents with a tab width of 4 by default.A new fuzzer has been introduced in the
cuepackage, checking that the parser doesn't crash and that its results are consistent with the rest of the Go APIs likecue/literal. So far, it has already resulted in seventeen bug fixes.The
cue.Interpreteroption API has been deprecated in favor ofcue.WithInjection, which is a better name going forward.cue/ast.File.Imports, deprecated in mid 2025 in favor ofcue/ast.File.ImportSpecs, is now removed.cue.InstancemethodsLookup,LookupDef,LookupField, andFillare now removed.modconfig.Registryinterface is changed to report default major versions, which is required for resolving unversioned imports against each dependency module's own defaults. Clients that implement or wrap the interface will need to update. The new interface is future-proofed for upcoming modules changes.Full list of changes since v0.16.0
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](https://redirect.github.com/cue-lang/cue/commit/58f23567823673ab8b94bConfiguration
📅 Schedule: (UTC)
* 0-3 * * *)🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.