Skip to content

Conversation

@JiriCtvrtka
Copy link

PMM-14577

dependabot bot and others added 30 commits March 22, 2024 10:02
Bumps the development-dependencies group with 1 update: [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata).


Updates `dependabot/fetch-metadata` from 1 to 2
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@v1...v2)

---
updated-dependencies:
- dependency-name: dependabot/fetch-metadata
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the development-dependencies group with 1 update: [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action).


Updates `golangci/golangci-lint-action` from 4 to 5
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@v4...v5)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the development-dependencies group with 1 update: [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action).


Updates `golangci/golangci-lint-action` from 5 to 6
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@v5...v6)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the development-dependencies group with 1 update: [codecov/codecov-action](https://github.com/codecov/codecov-action).


Updates `codecov/codecov-action` from 4 to 5
- [Release notes](https://github.com/codecov/codecov-action/releases)
- [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md)
- [Commits](codecov/codecov-action@v4...v5)

---
updated-dependencies:
- dependency-name: codecov/codecov-action
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.9.0 to 1.10.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.9.0...v1.10.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
…es/github.com/stretchr/testify-1.10.0

Bump github.com/stretchr/testify from 1.9.0 to 1.10.0
* updated linter config
* fixed linting errors

Signed-off-by: Frederic BIDON <[email protected]>
Signed-off-by: Frederic BIDON <[email protected]>
Bumps the go-openapi-dependencies group with 2 updates: [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) and [github.com/go-openapi/swag](https://github.com/go-openapi/swag).


Updates `github.com/go-openapi/jsonpointer` from 0.21.0 to 0.21.1
- [Commits](go-openapi/jsonpointer@v0.21.0...v0.21.1)

Updates `github.com/go-openapi/swag` from 0.23.0 to 0.23.1
- [Commits](go-openapi/swag@v0.23.0...v0.23.1)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Fixed broken test coverage upload to codecov with codecov-action@v5.

    * fixed tokenless upload (now supported with codecov v5)
    * fixed flags for codecov
    * fixed coverage for windows (now use bash instead of powershell)

Signed-off-by: Frederic BIDON <[email protected]>
Bumps the development-dependencies group with 1 update: [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action).


Updates `golangci/golangci-lint-action` from 7 to 8
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@v7...v8)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: '8'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Frédéric BIDON <[email protected]>
Bumps the go-openapi-dependencies group with 1 update: [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer).


Updates `github.com/go-openapi/jsonpointer` from 0.21.1 to 0.21.2
- [Commits](go-openapi/jsonpointer@v0.21.1...v0.21.2)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.21.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the development-dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 4 to 5
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v4...v5)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '5'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the development-dependencies group with 1 update: [github.com/stretchr/testify](https://github.com/stretchr/testify).


Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
go-openapi has introduced a new API to better insulate dependencies.

We move to the new modules, even though at this stage this doesn't
change our indirect dependencies.

Signed-off-by: Frederic BIDON <[email protected]>
Bumps the development-dependencies group with 1 update: [actions/setup-go](https://github.com/actions/setup-go).


Updates `actions/setup-go` from 5 to 6
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@v5...v6)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the go-openapi-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) | `0.24.0` | `0.25.0` |
| [github.com/go-openapi/swag/jsonname](https://github.com/go-openapi/swag) | `0.24.0` | `0.25.0` |
| [github.com/go-openapi/swag/jsonutils](https://github.com/go-openapi/swag) | `0.24.0` | `0.25.0` |
| [github.com/go-openapi/swag/loading](https://github.com/go-openapi/swag) | `0.24.0` | `0.25.0` |
| [github.com/go-openapi/swag/stringutils](https://github.com/go-openapi/swag) | `0.24.0` | `0.25.0` |


Updates `github.com/go-openapi/swag/conv` from 0.24.0 to 0.25.0
- [Commits](go-openapi/swag@v0.24.0...v0.25.0)

Updates `github.com/go-openapi/swag/jsonname` from 0.24.0 to 0.25.0
- [Commits](go-openapi/swag@v0.24.0...v0.25.0)

Updates `github.com/go-openapi/swag/jsonutils` from 0.24.0 to 0.25.0
- [Commits](go-openapi/swag@v0.24.0...v0.25.0)

Updates `github.com/go-openapi/swag/loading` from 0.24.0 to 0.25.0
- [Commits](go-openapi/swag@v0.24.0...v0.25.0)

Updates `github.com/go-openapi/swag/stringutils` from 0.24.0 to 0.25.0
- [Commits](go-openapi/swag@v0.24.0...v0.25.0)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/swag/conv
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonname
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonutils
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/loading
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/stringutils
  dependency-version: 0.25.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-openapi-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: Frederic BIDON <[email protected]>
Signed-off-by: Oleksandr Redko <[email protected]>
Bumps the development-dependencies group with 1 update: [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action).


Updates `golangci/golangci-lint-action` from 8 to 9
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@v8...v9)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-version: '9'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
dependabot bot and others added 19 commits November 21, 2025 09:03
Bumps the go-openapi-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/jsonpointer](https://github.com/go-openapi/jsonpointer) | `0.22.1` | `0.22.3` |
| [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) | `0.25.1` | `0.25.3` |
| [github.com/go-openapi/swag/jsonname](https://github.com/go-openapi/swag) | `0.25.1` | `0.25.3` |
| [github.com/go-openapi/swag/jsonutils](https://github.com/go-openapi/swag) | `0.25.1` | `0.25.3` |
| [github.com/go-openapi/swag/loading](https://github.com/go-openapi/swag) | `0.25.1` | `0.25.3` |
| [github.com/go-openapi/swag/stringutils](https://github.com/go-openapi/swag) | `0.25.1` | `0.25.3` |


Updates `github.com/go-openapi/jsonpointer` from 0.22.1 to 0.22.3
- [Release notes](https://github.com/go-openapi/jsonpointer/releases)
- [Commits](go-openapi/jsonpointer@v0.22.1...v0.22.3)

Updates `github.com/go-openapi/swag/conv` from 0.25.1 to 0.25.3
- [Commits](go-openapi/swag@v0.25.1...v0.25.3)

Updates `github.com/go-openapi/swag/jsonname` from 0.25.1 to 0.25.3
- [Commits](go-openapi/swag@v0.25.1...v0.25.3)

Updates `github.com/go-openapi/swag/jsonutils` from 0.25.1 to 0.25.3
- [Commits](go-openapi/swag@v0.25.1...v0.25.3)

Updates `github.com/go-openapi/swag/loading` from 0.25.1 to 0.25.3
- [Commits](go-openapi/swag@v0.25.1...v0.25.3)

Updates `github.com/go-openapi/swag/stringutils` from 0.25.1 to 0.25.3
- [Commits](go-openapi/swag@v0.25.1...v0.25.3)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/jsonpointer
  dependency-version: 0.22.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/conv
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonname
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonutils
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/loading
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/stringutils
  dependency-version: 0.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the go-openapi-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/go-openapi/swag/conv](https://github.com/go-openapi/swag) | `0.25.3` | `0.25.4` |
| [github.com/go-openapi/swag/jsonname](https://github.com/go-openapi/swag) | `0.25.3` | `0.25.4` |
| [github.com/go-openapi/swag/jsonutils](https://github.com/go-openapi/swag) | `0.25.3` | `0.25.4` |
| [github.com/go-openapi/swag/loading](https://github.com/go-openapi/swag) | `0.25.3` | `0.25.4` |
| [github.com/go-openapi/swag/stringutils](https://github.com/go-openapi/swag) | `0.25.3` | `0.25.4` |


Updates `github.com/go-openapi/swag/conv` from 0.25.3 to 0.25.4
- [Commits](go-openapi/swag@v0.25.3...v0.25.4)

Updates `github.com/go-openapi/swag/jsonname` from 0.25.3 to 0.25.4
- [Commits](go-openapi/swag@v0.25.3...v0.25.4)

Updates `github.com/go-openapi/swag/jsonutils` from 0.25.3 to 0.25.4
- [Commits](go-openapi/swag@v0.25.3...v0.25.4)

Updates `github.com/go-openapi/swag/loading` from 0.25.3 to 0.25.4
- [Commits](go-openapi/swag@v0.25.3...v0.25.4)

Updates `github.com/go-openapi/swag/stringutils` from 0.25.3 to 0.25.4
- [Commits](go-openapi/swag@v0.25.3...v0.25.4)

---
updated-dependencies:
- dependency-name: github.com/go-openapi/swag/conv
  dependency-version: 0.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonname
  dependency-version: 0.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/jsonutils
  dependency-version: 0.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/loading
  dependency-version: 0.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
- dependency-name: github.com/go-openapi/swag/stringutils
  dependency-version: 0.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-openapi-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Bumps the development-dependencies group with 1 update: [actions/checkout](https://github.com/actions/checkout).


Updates `actions/checkout` from 5 to 6
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v5...v6)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: '6'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: github-actions[bot] <41898282+github-actions[bot]@users.noreply.github.com>
Signed-off-by: Frédéric BIDON <[email protected]>
Bumps the development-dependencies group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [go-openapi/ci-workflows/.github/workflows/auto-merge.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/bump-release.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/codeql.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/contributors.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/go-test.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/scanner.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |
| [go-openapi/ci-workflows/.github/workflows/release.yml](https://github.com/go-openapi/ci-workflows) | `0.1.1` | `0.1.2` |


Updates `go-openapi/ci-workflows/.github/workflows/auto-merge.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](go-openapi/ci-workflows@d0b5019...9e70984)

Updates `go-openapi/ci-workflows/.github/workflows/bump-release.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](go-openapi/ci-workflows@d0b5019...9e70984)

Updates `go-openapi/ci-workflows/.github/workflows/codeql.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](go-openapi/ci-workflows@d0b5019...9e70984)

Updates `go-openapi/ci-workflows/.github/workflows/contributors.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](go-openapi/ci-workflows@d0b5019...9e70984)

Updates `go-openapi/ci-workflows/.github/workflows/go-test.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](go-openapi/ci-workflows@d0b5019...9e70984)

Updates `go-openapi/ci-workflows/.github/workflows/scanner.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](go-openapi/ci-workflows@d0b5019...9e70984)

Updates `go-openapi/ci-workflows/.github/workflows/release.yml` from 0.1.1 to 0.1.2
- [Release notes](https://github.com/go-openapi/ci-workflows/releases)
- [Commits](go-openapi/ci-workflows@d0b5019...9e70984)

---
updated-dependencies:
- dependency-name: go-openapi/ci-workflows/.github/workflows/auto-merge.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/bump-release.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/codeql.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/contributors.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/go-test.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/scanner.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
- dependency-name: go-openapi/ci-workflows/.github/workflows/release.yml
  dependency-version: 0.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: development-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@JiriCtvrtka JiriCtvrtka force-pushed the PMM-14577-CVEs-fix branch 2 times, most recently from 7f333b5 to 9a279fe Compare December 19, 2025 16:32
@codecov-commenter
Copy link

codecov-commenter commented Dec 19, 2025

⚠️ Please install the 'codecov app svg image' to ensure uploads and comments are reliably processed by Codecov.

Codecov Report

✅ All modified and coverable lines are covered by tests.
⚠️ Please upload report for BASE (master@be44553). Learn more about missing BASE report.

Additional details and impacted files
@@            Coverage Diff            @@
##             master       #6   +/-   ##
=========================================
  Coverage          ?   66.92%           
=========================================
  Files             ?       29           
  Lines             ?     2352           
  Branches          ?        0           
=========================================
  Hits              ?     1574           
  Misses            ?      616           
  Partials          ?      162           
Flag Coverage Δ
oldstable 66.92% <ø> (?)
stable 66.92% <ø> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

5 participants