Skip to content

bump github.com/hashicorp/go-version to v1.7.0 and github.com/google/go-containerregistry to v0.20.8#450

Open
gobiganesan1509 wants to merge 1 commit into
carvel-dev:developfrom
gobiganesan1509:bump-go-version-n-go-containerregistry
Open

bump github.com/hashicorp/go-version to v1.7.0 and github.com/google/go-containerregistry to v0.20.8#450
gobiganesan1509 wants to merge 1 commit into
carvel-dev:developfrom
gobiganesan1509:bump-go-version-n-go-containerregistry

Conversation

@gobiganesan1509

Copy link
Copy Markdown

bump github.com/hashicorp/go-version to v1.7.0 and github.com/google/go-containerregistry to v0.20.8

Update direct dependencies:

  • github.com/hashicorp/go-version: v1.2.1 -> v1.7.0
  • github.com/google/go-containerregistry: v0.20.6 -> v0.20.8

Transitive dependency updates pulled in:

  • github.com/containerd/stargz-snapshotter/estargz: v0.16.3 -> v0.18.2
  • github.com/docker/cli: v29.2.0 -> v29.2.1
  • github.com/klauspost/compress: v1.18.0 -> v1.18.4
  • github.com/vbatts/tar-split: v0.12.1 -> v0.12.2
  • golang.org/x/oauth2: v0.30.0 -> v0.35.0

Copilot AI review requested due to automatic review settings June 5, 2026 13:06
@carvel-bot carvel-bot added this to Carvel Jun 5, 2026

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Note

Copilot was unable to run its full agentic suite in this review.

Updates Go module dependencies (and vendored metadata) to newer patch/minor versions.

Changes:

  • Bumped several direct/indirect Go dependencies (e.g., go-containerregistry, x/oauth2, stargz/estargz, docker/cli, go-version, klauspost/compress).
  • Regenerated go.sum for the updated module versions.
  • Updated vendor/modules.txt to reflect the new vendored module versions.

Reviewed changes

Copilot reviewed 1 out of 63 changed files in this pull request and generated no comments.

File Description
vendor/modules.txt Updates vendored module version listings and recorded module Go versions.
go.mod Bumps dependency versions (direct + indirect).
go.sum Updates checksums to match bumped dependencies.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

…go-containerregistry to v0.20.8

Update direct dependencies:
- github.com/hashicorp/go-version: v1.2.1 -> v1.7.0
- github.com/google/go-containerregistry: v0.20.6 -> v0.20.8

Transitive dependency updates pulled in:
- github.com/containerd/stargz-snapshotter/estargz: v0.16.3 -> v0.18.2
- github.com/docker/cli: v29.2.0 -> v29.2.1
- github.com/klauspost/compress: v1.18.0 -> v1.18.4
- github.com/vbatts/tar-split: v0.12.1 -> v0.12.2
- golang.org/x/oauth2: v0.30.0 -> v0.35.0

Update go.sum and vendor directory accordingly.

Signed-off-by: Gobi Ganesan <gobi.ganesan1509@gmail.com>
Co-authored-by: Cursor <cursoragent@cursor.com>
@gobiganesan1509 gobiganesan1509 force-pushed the bump-go-version-n-go-containerregistry branch from 677b49c to b15964f Compare June 5, 2026 13:14
@aroradaman aroradaman closed this Jun 8, 2026
@github-project-automation github-project-automation Bot moved this to Closed in Carvel Jun 8, 2026
@aroradaman aroradaman reopened this Jun 8, 2026
@github-project-automation github-project-automation Bot moved this from Closed to In Progress in Carvel Jun 8, 2026
@aroradaman

Copy link
Copy Markdown
Member

Closed and opened the PR again to re-trigger the struck tests.

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Copilot reviewed 1 out of 63 changed files in this pull request and generated no new comments.

@joaopapereira joaopapereira left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@joaopapereira

Copy link
Copy Markdown
Member

bot 100% sure what is wrong with this. do you mind force pushing or something to generate a new git SHA to see if it makes it pass?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: In Progress

Development

Successfully merging this pull request may close these issues.

5 participants