Skip to content

Update go dependencies (major) - #3490

Open
renovate[bot] wants to merge 3 commits into
mainfrom
renovate/major-go-dependencies
Open

Update go dependencies (major)#3490
renovate[bot] wants to merge 3 commits into
mainfrom
renovate/major-go-dependencies

Conversation

@renovate

@renovate renovate Bot commented Sep 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Change Age Confidence
github.com/gobwas/glob v0.2.3 → v1.0.0 age confidence
github.com/imdario/mergo v0.3.16 → v1.0.2 age confidence
gopkg.in/yaml.v2 v2.4.0 → v3.0.1 age confidence
helm.sh/helm/v3 v3.22.0 → v4.3.1 age confidence

Release Notes

gobwas/glob (github.com/gobwas/glob)

v1.0.0

Compare Source

What's Changed
New Contributors

Full Changelog: gobwas/glob@v0.2.3...v1.0.0

imdario/mergo (github.com/imdario/mergo)

v1.0.2

Compare Source

What's Changed

  • Drops gopkg.in/yaml.v3, only used for loading fixtures. Thanks @​trim21 for bringing to my attention (#​262) that this library is no longer maintained.

Full Changelog: darccio/mergo@v1.0.1...v1.0.2

v1.0.1

Compare Source

What's Changed

New Contributors

Full Changelog: darccio/mergo@v1.0.0...v1.0.1

v1.0.0: 1.0.0 released with new module URL: dario.cat/mergo

Compare Source

This PR is a release containing 0.3.15 features but changing the module URL to dario.cat/mergo.

What's Changed

Full Changelog: darccio/mergo@v0.3.16...v1.0.0

go-yaml/yaml (gopkg.in/yaml.v2)

v3.0.1

Compare Source

v3.0.0

Compare Source

helm/helm (helm.sh/helm/v3)

v4.3.1: Helm v4.3.1

Compare Source

Helm v4.3.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Notable Changes
Installation and Upgrading

Download Helm v4.3.1. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 4.3.2 and 3.22.2 are the next patch releases scheduled for November 11, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)
Changelog
  • chore(deps): bump otlploghttp and stdoutlog to v0.21.0 c0d08d0 (Terry Howe)
  • chore(deps): bump the k8s-io group across 1 directory with 7 updates 0c0146e (dependabot[bot])
  • fix: bump golang.org/x/net to v0.61.0 (#​32758) dd91731 (Terry Howe)
  • fix(linters): update golangci-lint to v2.14.0 (#​32744) 3a376b2 (Ruslan Shaydullin)
  • fix(action): wait for CRD establishment under HookOnlyStrategy (#​32672) 5fed6a5 (Pujitha Paladugu)
  • chore(deps): bump sigs.k8s.io/controller-runtime from 0.25.1 to 0.25.2 (#​32726) b227bf4 (dependabot[bot])
  • chore(deps): bump sigs.k8s.io/kustomize/kyaml from 0.21.1 to 0.21.2 (#​32715) af79b8e (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc ab6b245 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp (#​32665) 0f20617 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc (#​32664) e26e158 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/exporters/otlp/otlptrace (#​32663) 23ab1c5 (dependabot[bot])
  • chore(deps): bump go.opentelemetry.io/otel/sdk from 1.44.0 to 1.45.0 (#​32662) 8303180 (dependabot[bot])

v4.3.0: Helm v4.3.0

Compare Source

Helm v4.3.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

Installation and Upgrading

Download Helm v4.3.0. The common platform binaries are here:

This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @​scottrigby keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 4.3.1 and 3.22.1 are the next patch releases scheduled for October 14, 2026
  • 4.4.0 is the next minor release scheduled for January 13, 2027. There will be no further Helm 3 minor releases (see https://helm.sh/blog/helm-v3-end-of-life)

Changelog

  • chore(deps): bump google.golang.org/grpc from 1.82.1 to 1.83.1 bec5b06 (dependabot[bot])
  • chore(deps): bump the k8s-io group across 1 directory with 6 updates d0d42e7 (dependabot[bot])
  • bump version to 4.3 (#​32605) 7328f42 (Scott Rigby)
  • chore: Fix independent-merge lint issues ca6681c (George Jenkins)
  • refactor(repo): Use byte buffer to build index file (#​32579) 37752b7 (Tom Wieczorek)
  • chore: fix gofumpt extra-rules (#​32486) 28e64bd (Matthieu MOREL)
  • Remove deprecated internal/chart/v3/ code (#​32365) 4dfbaa4 (George Jenkins)
  • fix(template): regression - route registry messages to stderr in template and show (#​32217) 9a3c040 (Aaron Mark)
  • refactor: remove per-file decompression size limit (#​31748) 11e2010 (Benoit Tigeot)
  • Updating the Go version b5b498b (Matt Farina)
  • Updating the Go version 6d1f67c (Matt Farina)
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#​32574) 0f4decb (dependabot[bot])
  • chore(deps): bump the k8s-io group with 7 updates (#​32572) fb19300 (dependabot[bot])
  • fix: correct 'doest not match' in readiness debug logs 6888b0a (MsfPablo)
  • fix(provenance): support GnuPG keybox (pubring.kbx) keyrings (#​32281) 67d54fd (Ruslan Shaydullin)
  • chore(deps): bump github.com/stretchr/testify from 1.12.0 to 1.12.1 (#​32562) e9b85e4 (dependabot[bot])
  • chore(deps): bump the github-actions group across 1 directory with 4 updates (#​32556) c000a40 (dependabot[bot])
  • chore(deps): bump github.com/stretchr/testify from 1.11.1 to 1.12.0 (#​32555) bafdcde (dependabot[bot])
  • chore(deps): bump golang.org/x/crypto from 0.54.0 to 0.55.0 (#​32545) 2a29f17 (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.40.0 to 0.41.0 (#​32543) edb94f8 (dependabot[bot])
  • test(loader): cover 8192-byte EOF boundary for LoadValues fd4ed49 (Dean Chen)
  • fix(loader): do not drop values files ending at a 4096-byte boundary 601445e (Dean Chen)
  • chore(deps): bump the github-actions group with 4 updates (#​32523) f3d68cd (dependabot[bot])
  • fix: bump go.opentelemetry.io/otel to v1.44.0 for GO-2026-5158 (#​32521) a0c2f6d (Terry Howe)
  • chore(deps): bump github.com/santhosh-tekuri/jsonschema/v6 (#​32514) f8a308c (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates 47eb219 (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates (#​32508) ae877c8 (dependabot[bot])
  • test(action): poll for the interrupted install goroutine instead of a zero-margin sleep (#​32328) a8ab76e (Nikolaus Schuetz)
  • chore(deps): bump actions/stale in the github-actions group (#​32487) ac1c687 (dependabot[bot])
  • test(package): fix errorlint + exact path match in lock test e923167 (Ilya Kiselev)
  • fix(chart): normalize StampModTimes timestamp + Chart.lock test 3c3be92 (Ilya Kiselev)
  • chore(deps): bump go.yaml.in/yaml/v3 from 3.0.4 to 3.0.5 ce27485 (dependabot[bot])
  • fix(scripts): clarify cache-busting behavior bc0114c (Solomon Wakhungu)
  • chore: fix gofumpt issues 24bbb46 (Matthieu MOREL)
  • fix(scripts): address cache-busting review feedback bbaf420 (Solomon Wakhungu)
  • Make golangci-lint happy f3edb83 (MrJack)
  • Added missing import 94a3315 (MrJack)
  • Readded "unicode/utf8" 500f02d (MrJack)
  • Potential fix for pull request finding f1ede7c (MrJack)
  • Apply suggestions from code review 4fcc4e4 (MrJack)
  • refactor(rollback): validate description length before cluster reachability check 91520a7 (MrJack)
  • refactor(test): reuse existing rollback.txt golden file e73dfab (MrJack)
  • Removed extra space in rollback-with-description.txt b177a8e (MrJack)
  • Enhance rune count in pkg/cmd/rollback.go and pkg/action/rollback.go a92611c (MrJack)
  • Use rune count to count properly multi-byte UTF-8 characters 8a34f3b (MrJack)
  • Enhanced rollback description length cb91040 (MrJack)
  • Changed if construction e69e424 (MrJack)
  • Set 256 as limit for maxDescriptionLength. 256 comes from MAX value for key and value b606955 (MrJack)
  • feat(rollback): add --description flag to provide rollback reason f8180e6 (MrJack)
  • Update resource_test.go 622f16b (Matthieu MOREL)
  • Update labels_test.go 61d99a8 (Matthieu MOREL)
  • Update chartrepo_test.go 532eabf (Matthieu MOREL)
  • Update show_test.go bfca068 (Matthieu MOREL)
  • Update rollback_test.go b59dfd3 (Matthieu MOREL)
  • Potential fix for pull request finding a27f3a0 (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 1 828d01a (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 3 9a2be11 (Matthieu MOREL)
  • chore(pkg): refactor: finer tests conversions to testify part 2 4d9c03f (Matthieu MOREL)
  • chore(internal): refactor: finer tests conversions to testify part 1 5142ca8 (Matthieu MOREL)
  • chore(deps): bump the k8s-io group across 1 directory with 7 updates (#​32459) 8f74dce (dependabot[bot])
  • chore(deps): bump ossf/scorecard-action in the github-actions group (#​32458) 050d3e9 (dependabot[bot])
  • chore(deps): bump the github-actions group with 4 updates ea7c838 (dependabot[bot])
  • chore(deps): bump google.golang.org/grpc from 1.80.0 to 1.82.1 fe3f98b (dependabot[bot])
  • chore(deps): bump actions/labeler from 6.2.0 to 7.0.0 (#​32441) ed246e2 (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#​32440) 5223cea (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.1 to 4.37.2 a0f954e (dependabot[bot])
  • chore(deps): bump github/codeql-action/init from 4.37.1 to 4.37.2 cdccef4 (dependabot[bot])
  • chore(deps): bump github/codeql-action/analyze from 4.37.1 to 4.37.2 065d3a6 (dependabot[bot])
  • chore: group github-actions dependabot updates cd4c5d3 (Terry Howe)
  • chore(pkg): refactor: convert tests to testify assert/require part 19 33c2839 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 22 0b1aa55 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 21 a934b82 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 20 1d4665e (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 18 fb8a62b (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 16 0fa9f7d (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 17 4073566 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 15 7173365 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 14 dc66ee7 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 13 aae82bf (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 12 a3fa28a (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 11 dc3e3a5 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 10 2f5a33f (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 9 13d1edc (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 8 e5f0e07 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 7 ca1767b (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 2 0daa77f (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 1 d4ec8e9 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 6 0844b3b (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 5 3ff05c8 (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 4 658a8fa (Matthieu MOREL)
  • chore(pkg): refactor: convert tests to testify assert/require part 3 df2d013 (Matthieu MOREL)
  • chore(deps): bump actions/checkout from 7.0.0 to 7.0.1 (#​32411) 8c7f3a1 (dependabot[bot])
  • chore(internal): refactor: convert tests to testify assert/require part 4 (#​32408) 6c45810 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 3 668e7e5 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 5 f1d5979 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 6 f3402c1 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 1 ba31ca0 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 2 615a299 (Matthieu MOREL)
  • fix: pass registry client to downloader.Manager in upgrade 0604d8f (Gates Wang)
  • perf: enable concurrent status computation to prevent multi-minute delays (#​32043) 3bcf965 (Zhaofeng Miao)
  • remove legacy import comments from remaining packages (#​31933) 82be04d (Abhay Chaurasiya)
  • Potential fix for pull request finding c2fda5a (Terry Howe)
  • fix: enhance error handling and improve test assertions (#​32352) a2b1a60 (Matthieu MOREL)
  • fix(scripts): add cache-busting to get-helm-3 version check 5a30c7a (Solomon Wakhungu)
  • chore(deps): bump github/codeql-action init and analyze to 4.37.1 0563162 (Terry Howe)
  • chore(deps): bump github/codeql-action/upload-sarif (#​32378) 06b9586 (dependabot[bot])
  • chore(deps): bump actions/setup-go from 6.5.0 to 7.0.0 (#​32376) a494169 (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.37.0 to 4.37.1 eeb37ed (dependabot[bot])
  • chore: Add AI Vendor specific paths to .gitignore 8cd3a48 (George Jenkins)
  • ci: auto-label PRs targeting main with v4.x 9f3c89a (Benoit Tigeot)
  • fix: 'gocritic: filepathJoin path seperator' lint error 96a25ab (George Jenkins)
  • chore(internal): refactor: convert tests to testify assert/require part 3 caac755 (Matthieu MOREL)
  • feat: honor SOURCE_DATE_EPOCH for chart archives (#​32162) ad93b7d (Lohit Kolluri)
  • Fix missing conflict retry with server-side apply (#​32088) aa1ae3a (Jakub Jaruszewski)
  • chore: fix elseif and ifElseChain issues from gocritic (#​32289) a02a571 (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 2 f280d9c (Matthieu MOREL)
  • chore(internal): refactor: convert tests to testify assert/require part 1 d72b28e (Matthieu MOREL)
  • fix(ci): pin govulncheck-action to the v1.1.0 release (#​32304) 68977ec (秀吉)
  • ci: track GitHub Actions updates on dev-v3 via Dependabot b963afa (Terry Howe)
  • chore(deps): bump actions/stale from 10.3.0 to 10.4.0 (#​32330) fb53c00 (dependabot[bot])
  • chore(deps): bump github.com/mattn/go-shellwords from 1.0.13 to 1.0.14 (#​32334) dad026a (dependabot[bot])
  • chore(deps): bump oras.land/oras-go/v2 from 2.6.1 to 2.6.2 (#​32333) 84e63e5 (dependabot[bot])
  • Address review comments 73c1fb2 (Matheus Pimenta)
  • Fix vanishing empty lines bfebbb7 (Matheus Pimenta)
  • fix: add missing https:// to Oracle link in ADOPTERS.md (#​32324) 7b9a5c8 (Akanksha Trehun)
  • fix: remove trailing whitespace in .golangci.yml (#​32325) cfa3b24 (Akanksha Trehun)
  • fix(Makefile): update outdated .sha256 comment for Helm v4 (#​32323) a91e9f6 (Akanksha Trehun)
  • feat(linters): add new revive rules for better code quality 16787d6 (Matthieu MOREL)
  • refactor: enable several checks from gocritic 9662fdd (Matthieu MOREL)
  • fix(linters): update golangci-lint to 2.12.2 7bfcdb0 (Matthieu MOREL)
  • chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0 8118a4d (Terry Howe)
  • chore(deps): bump golang.org/x/crypto from 0.53.0 to 0.54.0 0fc3b93 (Terry Howe)
  • chore(deps): bump github/codeql-action/analyze from 4.36.2 to 4.37.0 71901a4 (Terry Howe)
  • chore(deps): bump github/codeql-action/init from 4.36.2 to 4.37.0 (#​32313) a71eb99 (dependabot[bot])
  • chore(deps): bump github/codeql-action/autobuild from 4.36.2 to 4.37.0 (#​32305) ea52bdf (dependabot[bot])
  • chore(deps): bump golang.org/x/text from 0.39.0 to 0.40.0 (#​32309) a242855 (dependabot[bot])
  • chore(deps): bump github/codeql-action/upload-sarif (#​32311) f25f955 (dependabot[bot])
  • Potential fix for pull request finding ed651de (Benoit Tigeot)
  • fix(ci): resolve Node 20 deprecation in govulncheck ca24a55 (Benoit Tigeot)
  • chore(deps): bump golang.org/x/text from 0.38.0 to 0.39.0 e3fbe2e (dependabot[bot])
  • chore: fix emptyStringTest, nestingReduce and singleCaseSwitch checks issues from gocritic 96b315f (Matthieu MOREL)
  • Update pkg/cmd/history_test.go c1569ea (Matthieu MOREL)
  • test: replace assert.Equal with require.EqualError for improved error handling 65077c1 (Matthieu MOREL)
  • test: replace assert.Contains with assert.ErrorContains for better error handling 4ade4a5 (Matthieu MOREL)
  • chore: fix several checks issues from testifylint f34ad6c (Matthieu MOREL)
  • test(cli): use t.Cleanup for resetEnv with t.Setenv 47bde11 (LarytheLord)
  • test(cli): isolate user-agent rest config test from host kubeconfig 9b30076 (LarytheLord)
  • chore: fix several checks issues from gocritic 07259ec (Matthieu MOREL)
  • fix(engine): prevent Files.Lines panic on empty file 143631f (Mahesh Sadupalli)
  • Potential fix for pull request finding d539556 (kimsungmin1)
  • chore(deps): bump github/codeql-action/upload-sarif e9eda8c (dependabot[bot])
  • fix(registry): resolve golangci-lint issues in token-auth tests 503acff (kimsm28)
  • chore: go mod tidy after rebase on main 4e9ca06 (kimsm28)
  • fix(registry): use plain-http registry in token-auth scope test 3cbee7e (kimsm28)
  • Update pkg/registry/client.go 26ada49 (Terry Howe)
  • test: improve client_scope_test.go to avoid data races and brittle assertions 9b7a70f (kimsm28)
  • fix typos in withScopeHint function comment ee181f4 (kimsm28)
  • fix registry test failures by adjusting DockerRegistryHost and auth server listener management 1f0a728 (kimsm28)
  • fix variable naming requestUrl -> requestURL 8883c9c (kimsm28)
  • fix typo, remove unnecessary code, fix to avoid to use the assertion in http hanlder 530e728 (kimsm28)
  • change suite.Nil, suite.NotNill to more proper function(suite.NoError, suite.Error) 26e5071 (kimsungmin1)
  • change client_scope_test.go to use httptest 8c8d6e3 (kimsungmin1)
  • fix typo 9d77ccd (kimsungmin1)
  • remove freeport dependency fc743b2 (kimsungmin1)
  • add newline in license header 319e06c (kimsungmin1)
  • fix scope when helm push to a registry that use token auth 301e3a1 (kimsungmin1)
  • chore(deps): bump github.com/fluxcd/cli-utils from 1.2.1 to 1.2.2 5a9b8a7 (dependabot[bot])
  • chore(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 f76136d (dependabot[bot])
  • Potential fix for pull request finding 144246c (George Jenkins)
  • chore(deps): bump actions/setup-go from 6.4.0 to 6.5.0 07faec5 (dependabot[bot])
  • Apply suggestions 61bba7c (Will Noble)
  • Properly format the extra field in gzipped packages d887779 (Will Noble)
  • refactor(internal): convert tests to testify assert/require addbab2 (George Jenkins)
  • refactor(internal/release): convert tests to testify assert/require 7ab295f (George Jenkins)
  • refactor(pkg/release): convert tests to testify assert/require 4cce0e9 (George Jenkins)
  • refactor(pkg/registry): convert tests to testify assert/require 8b0a167 (George Jenkins)
  • refactor(internal): convert tests to testify assert/require 3ce02c5 (George Jenkins)
  • refactor(repotest): convert tests to testify assert/require b42faba (George Jenkins)
  • chore: enable contextcheck, fatcontext and noctx linters 34cfdfd (Matthieu MOREL)
  • chore(deps): bump github.com/cyphar/filepath-securejoin a0c7d1e (dependabot[bot])
  • chore(deps): bump actions/checkout from 6.0.3 to 7.0.0 5848047 (dependabot[bot])
  • test: use assert.Empty for zero-length assertions in validate_test c36e4d5 (Terry Howe)
  • docs: fix typo in helm version command description dd442c0 (s3onghyun)
  • chore(deps): bump the k8s-io group across 1 directory with 7 updates fa68e6c (dependabot[bot])
  • chore(deps): bump actions/checkout from 6.0.2 to 6.0.3 3d2ff2a (dependabot[bot])
  • refactor(pkg/strvals): convert tests to testify assert/require daa045d (George Jenkins)
  • refactor(pkg/cli): convert tests to testify assert/require 16b0760 (George Jenkins)
  • Revert "fix(kube): prevent spurious early exit in WaitForDelete during informer sync" d3bd091 (George Jenkins)
  • Update pkg/ignore/rules_test.go 9ad5620 (George Jenkins)
  • docs: improve CONTRIBUTING.md wording fa9cb49 (devShaik010)
  • refactor(pkg): convert tests to testify assert/require f4d713a (George Jenkins)
  • refactor(cmd/helm): convert tests to testify assert/require ed76a36 (George Jenkins)
  • chore: rename savedErr to clear its specific purpose 9c1d5a3 (Jeaeun Kim)
  • chore: fix lint 99baa2e (Jeaeun Kim)
  • chore: store err separately for clarity ea847fe (Jeaeun Kim)
  • chore: Improve error reporting for helm template --debug with --show-only [2014946](ht

[!IMPORTANT]
✂ PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 6am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot requested a review from a team September 21, 2026 01:14
@renovate renovate Bot added dependencies Pull requests that update a dependency file qa/skip-qa labels Sep 21, 2026
@renovate

renovate Bot commented Sep 21, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor Author

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
go: github.com/imdario/mergo@v1.0.2: parsing go.mod:
	module declares its path as: dario.cat/mergo
	        but was required as: github.com/imdario/mergo

@datadog-prod-us1-3

datadog-prod-us1-3 Bot commented Sep 21, 2026 •
edited by datadog-datadog-prod-us1 Bot
Loading

Copy link
Copy Markdown

Pipelines

✨ Unblock PR with BitsAI

❌ Errors

Your PR has failed checks. Please review the issues below and take necessary action before merging.

🚦 4 Pipeline jobs failed

DataDog/datadog-operator | build_and_test — 🔧 Needs a code fix, caused by this PR

View more details · View in GitLab

DataDog/datadog-operator | prepare_e2e_plugins — 🔧 Needs a code fix, caused by this PR

View more details · View in GitLab

validation | build — 🔧 Needs a code fix, caused by this PR

View more details · View in GitHub Actions

View all 4 failed jobs.

Useful? React with 👍 / 👎

This comment will be updated automatically if new data arrives.
🔗 Commit SHA: f642025 | Docs | View more details | Give us feedback!

chatgpt-codex-connector[bot]
chatgpt-codex-connector Bot reviewed Sep 21, 2026
View reviewed changes

@chatgpt-codex-connector chatgpt-codex-connector Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 9d2ab2c716

ℹ️ About Codex in GitHub

Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you

  • Open a pull request for review
  • Mark a draft as ready
  • Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".

Comment thread go.mod Outdated
go.uber.org/zap v1.28.0
gopkg.in/DataDog/dd-trace-go.v1 v1.74.8
gopkg.in/yaml.v2 v2.4.0
gopkg.in/DataDog/dd-trace-go.v2 v2.10.1

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 21, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Retain the tracer v1 requirement until imports are migrated

When building the manager, cmd/main.go:23 still imports gopkg.in/DataDog/dd-trace-go.v1/profiler; the newly required .v2 module is a distinct major-version path and cannot provide that package. A clean go build therefore has no direct requirement for the imported tracer package. Either retain v1 or migrate the import and profiler API to v2, then synchronize the module files.

AGENTS.md reference: AGENTS.md:L24-L26

Useful? React with 👍 / 👎.

Comment thread go.mod Outdated
Comment on lines 23 to 24
gopkg.in/yaml.v3 v3.0.1
gopkg.in/yaml.v3 v3.0.1

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 21, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Keep yaml.v2 required while source files still import it

Several root-module packages still import gopkg.in/yaml.v2 (for example internal/controller/datadogagent/object/configmap/configmap.go:11), while this replacement removes its only direct requirement and duplicates the already-present yaml.v3 entry on the next line. go mod tidy will restore v2 as a direct dependency and remove the duplicate, causing the repository's tidy-and-diff validation to fail; migrate all v2 imports first or retain the v2 requirement.

AGENTS.md reference: AGENTS.md:L24-L26

Useful? React with 👍 / 👎.

Comment thread go.mod Outdated
google.golang.org/grpc v1.83.2
google.golang.org/protobuf v1.36.12
helm.sh/helm/v3 v3.21.4
helm.sh/helm/v4 v4.3.0

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 21, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Retain Helm v3 until all Helm imports are migrated

The kubectl and YAML-mapper packages still import helm.sh/helm/v3 throughout the root module, including cmd/kubectl-datadog/autoscaling/cluster/common/helm/helm.go:13-17. Helm v4 uses a distinct module path, so requiring only /v4 does not provide those /v3 packages and the affected binaries cannot build from this module graph. Keep v3 or migrate all imports and API usage before changing this requirement.

AGENTS.md reference: AGENTS.md:L24-L26

Useful? React with 👍 / 👎.

Comment thread go.mod
github.com/Masterminds/semver/v3 v3.5.0
github.com/go-logr/logr v1.4.4
github.com/gobwas/glob v0.2.3
github.com/gobwas/glob v1.0.0

@chatgpt-codex-connector chatgpt-codex-connector Bot Sep 21, 2026

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Commit checksums for the upgraded modules

No corresponding go.sum changes were committed: it still contains github.com/gobwas/glob v0.2.3 and none of the newly selected versions. In the inspected GitLab validation, make update-golang runs module tidying before git diff --exit-code, so a clean CI checkout will modify the sums and fail even after the import-path issues are resolved. Run the repository's dependency synchronization and commit the resulting module metadata.

AGENTS.md reference: AGENTS.md:L24-L26

Useful? React with 👍 / 👎.

@renovate
renovate Bot force-pushed the renovate/major-go-dependencies branch 3 times, most recently from 87e664a to b6af028 Compare September 28, 2026 09:18
@renovate
renovate Bot force-pushed the renovate/major-go-dependencies branch 3 times, most recently from 8ecc482 to 5d059f8 Compare October 7, 2026 15:37
@renovate
renovate Bot force-pushed the renovate/major-go-dependencies branch from 5d059f8 to 785d5f7 Compare October 13, 2026 16:13
@levan-m levan-m mentioned this pull request Oct 14, 2026
Merged
@levan-m
levan-m requested review from a team as code owners November 2, 2026 20:36
@renovate
renovate Bot force-pushed the renovate/major-go-dependencies branch from eaa63dd to 80479ed Compare November 2, 2026 20:38
@levan-m @claude
fix(deps): migrate to helm v4, mergo v1, and fix API breakages
e64aa7c 
Re-apply code migration that was wiped by a Renovate force-push:
- helm.sh/helm/v3 -> v4 import paths across cmd/yaml-mapper and cmd/kubectl-datadog
- helm.go: migrate Wait->WaitStrategy, release.Status->release/common.Status, actionConfig.Init (drop log.Printf arg)
- github.com/imdario/mergo -> dario.cat/mergo (module renamed at v1)
- gobwas/glob v1: glob.Glob -> *glob.Pattern
- Remove stale github.com/imdario/mergo go.mod direct dep
- go mod tidy, make sync, test/e2e tidy
- LICENSE-3rdparty.csv: add helm v4 + transitive deps, remove v3/stale entries

Environment: Datadog workspace

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
@renovate

renovate Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@levan-m @claude
revert: remove test/e2e go.mod/go.sum changes from helm v4 migration
f642025 
test/e2e does not import helm and should not have helm.sh/helm/v4 as an
indirect dep. The previous commit ran go mod tidy in test/e2e via make
sync which added helm v4 transitively (through the replace directive to
the root module). Helm v4 forces otel/log v0.21.0 which is incompatible
with otelslog@v0.18.0 used by pulumi, breaking make lint-e2e.

Restoring test/e2e/go.mod and test/e2e/go.sum to pre-fix state (same as
the Renovate branch commit 80479ed) so the lint_e2e CI job is not
triggered and the otel version conflict is avoided.

Environment: Datadog workspace

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@chatgpt-codex-connector chatgpt-codex-connector[bot] chatgpt-codex-connector[bot] left review comments

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file qa/skip-qa team/container-autoscaling team/container-platform team/logs-cloudprem

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@levan-m