Skip to content

Update go libraries#528

Open
desmax74 wants to merge 2 commits intotrustification:release/1.1.zfrom
desmax74:updateGoLibraries
Open

Update go libraries#528
desmax74 wants to merge 2 commits intotrustification:release/1.1.zfrom
desmax74:updateGoLibraries

Conversation

@desmax74
Copy link
Collaborator

@desmax74 desmax74 commented Jan 13, 2026

Summary by Sourcery

Update Go toolchain and core Kubernetes/operator dependencies to newer minor/patch versions.

Build:

  • Bump Go version to 1.25.3 and refresh a wide range of module dependencies, including Kubernetes libraries, controller-runtime, Helm, Prometheus, gRPC/protobuf, and golang.org/x packages.
  • Add new supporting modules (e.g. additional go-openapi subpackages, clipperhouse/uax29) and drop several no-longer-needed transitive dependencies from go.mod.

Signed-off-by: desmax74 <[email protected]>
@sourcery-ai
Copy link

sourcery-ai bot commented Jan 13, 2026

Reviewer's Guide

This PR updates the Go toolchain version and refreshes a broad set of direct and indirect dependencies, notably the Kubernetes and controller-runtime stack plus various supporting libraries, to newer compatible releases without making any application code changes.

Flow diagram for build process using updated go.mod and toolchain

flowchart TD
    A[Developer updates go.mod] --> B[Commit and push changes]
    B --> C[CI pipeline starts]
    C --> D[Use Go toolchain go 1.25.3]
    D --> E[Download updated direct dependencies]
    E --> F[Download updated indirect dependencies]
    F --> G[Run go mod tidy and vendor if configured]
    G --> H[Compile trusted-profile-analyzer-operator]
    H --> I[Run tests and linters]
    I --> J{All tests pass}
    J -- Yes --> K[Build and publish operator image]
    J -- No --> L[Fail pipeline and report issues]
Loading

File-Level Changes

Change Details Files
Bump Go toolchain and core Kubernetes/controller-runtime dependencies to newer minor versions.
  • Update Go version in go.mod from 1.24.4 to 1.25.3
  • Upgrade k8s.io/apimachinery and k8s.io/client-go from v0.34.0 to v0.35.0 to align with newer Kubernetes APIs
  • Upgrade sigs.k8s.io/controller-runtime from v0.21.0 to v0.22.4
go.mod
go.sum
Refresh Kubernetes ecosystem and Helm-related indirect dependencies for compatibility with the new Kubernetes version.
  • Upgrade k8s.io/api, apiextensions-apiserver, apiserver, cli-runtime, component-base, kubectl, kube-openapi, and utils from 0.34.x/older pseudo-versions to 0.35.0-equivalent or newer pseudo-versions
  • Bump helm.sh/helm/v3 from v3.19.0 to v3.19.4
  • Update sigs.k8s.io/kustomize/api and kyaml from v0.20.1 to v0.21.0
  • Update sigs.k8s.io/structured-merge-diff/v6 from v6.3.0 to v6.3.1
go.mod
go.sum
Update networking, serialization, and client-related libraries to their newer patch/minor releases and adjust transitive graph.
  • Bump golang.org/x/* modules (crypto, net, oauth2, sync, sys, term, text, time) to newer versions
  • Update Google RPC stack (google.golang.org/grpc, protobuf, genproto) to newer versions
  • Upgrade containerd-related modules and security/path handling libraries (containerd, platforms, filepath-securejoin)
  • Refresh JSON/OpenAPI-related libs (go-openapi/*, gnostic-models, json-patch variants, yaml libraries) and Prometheus client libraries
  • Add github.com/clipperhouse/uax29/v2 and additional github.com/go-openapi/swag submodules as new indirect dependencies and remove some older unused deps (e.g., gogo/protobuf, mailru/easyjson, moby/spdystream, mxk/go-flowrate, etc.)
go.mod
go.sum
Align miscellaneous utility and CLI libraries with latest patch releases.
  • Update BurntSushi/toml, klauspost/compress, emicklei/go-restful, mattn/go-runewidth, prometheus client libraries, rubenv/sql-migrate, spf13 cast/cobra/pflag, zap, and other small utilities to their latest minor/patch versions
  • Ensure versions of operator-related libraries and logging/metrics utilities remain compatible with the updated stack
go.mod
go.sum

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@desmax74 desmax74 marked this pull request as draft January 13, 2026 12:34
Copy link

@sourcery-ai sourcery-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey - I've left some high level feedback:

  • Several indirect dependencies (e.g., the many github.com/go-openapi/swag/* submodules) are now explicitly listed; consider running go mod tidy and only pinning indirects that are actually required to keep the file lean and easier to maintain.
  • Since core libraries like Kubernetes, controller-runtime, and golang.org/x/* have all been bumped together, it may be worth briefly noting in the PR description whether there were any required code changes or behavioral differences observed during upgrade to help future maintainers understand the impact.
Prompt for AI Agents
Please address the comments from this code review:

## Overall Comments
- Several indirect dependencies (e.g., the many `github.com/go-openapi/swag/*` submodules) are now explicitly listed; consider running `go mod tidy` and only pinning indirects that are actually required to keep the file lean and easier to maintain.
- Since core libraries like Kubernetes, controller-runtime, and `golang.org/x/*` have all been bumped together, it may be worth briefly noting in the PR description whether there were any required code changes or behavioral differences observed during upgrade to help future maintainers understand the impact.

Sourcery is free for open source - if you like our reviews please consider sharing them ✨
Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.

@desmax74 desmax74 marked this pull request as ready for review January 13, 2026 13:47
Signed-off-by: desmax74 <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant