chore(deps): update security updates by NumaryBot · Pull Request #429 · formancehq/operator

NumaryBot · 2026-03-20T03:09:55Z

This PR contains the following updates:

Package	Type	Update	Change
github.com/Azure/go-ansiterm	indirect	digest	`306776e` -> `faa5f7b`
github.com/aws/aws-sdk-go-v2	indirect	patch	`v1.41.2` -> `v1.41.4`
github.com/aws/aws-sdk-go-v2/config	indirect	patch	`v1.32.10` -> `v1.32.12`
github.com/aws/aws-sdk-go-v2/credentials	indirect	patch	`v1.19.10` -> `v1.19.12`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	patch	`v1.18.18` -> `v1.18.20`
github.com/aws/aws-sdk-go-v2/feature/rds/auth	indirect	patch	`v1.6.18` -> `v1.6.20`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	patch	`v1.4.18` -> `v1.4.20`
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2	indirect	patch	`v2.7.18` -> `v2.7.20`
github.com/aws/aws-sdk-go-v2/internal/ini	indirect	patch	`v1.8.4` -> `v1.8.6`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	patch	`v1.13.5` -> `v1.13.7`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	patch	`v1.13.18` -> `v1.13.20`
github.com/aws/aws-sdk-go-v2/service/signin	indirect	patch	`v1.0.6` -> `v1.0.8`
github.com/aws/aws-sdk-go-v2/service/sso	indirect	patch	`v1.30.11` -> `v1.30.13`
github.com/aws/aws-sdk-go-v2/service/ssooidc	indirect	patch	`v1.35.15` -> `v1.35.17`
github.com/aws/aws-sdk-go-v2/service/sts	indirect	patch	`v1.41.7` -> `v1.41.9`
github.com/aws/smithy-go	indirect	patch	`v1.24.1` -> `v1.24.2`
github.com/evanphx/json-patch	indirect	minor	`v4.12.0+incompatible` -> `v4.13.0+incompatible`
github.com/formancehq/go-libs/v2	require	patch	`v2.2.3` -> `v2.2.4`
github.com/formancehq/operator/v3	require	minor	`v3.0.0-00010101000000-000000000000` -> `v3.8.3`
github.com/go-errors/errors	indirect	minor	`v1.4.2` -> `v1.5.1`
github.com/go-openapi/jsonpointer	indirect	minor	`v0.21.2` -> `v0.22.5`
github.com/go-openapi/jsonreference	indirect	patch	`v0.21.0` -> `v0.21.5`
github.com/go-openapi/swag	indirect	minor	`v0.23.1` -> `v0.25.5`
github.com/google/gnostic-models	indirect	patch	`v0.7.0` -> `v0.7.1`
github.com/google/pprof	indirect	digest	`c008609` -> `a15ffb7`
github.com/gookit/color	indirect	minor	`v1.5.4` -> `v1.6.0`
github.com/mailru/easyjson	indirect	patch	`v0.9.0` -> `v0.9.2`
github.com/mattn/go-runewidth	indirect	patch	`v0.0.16` -> `v0.0.21`
github.com/moby/term	indirect	patch	`v0.5.0` -> `v0.5.2`
github.com/onsi/ginkgo/v2	require	minor	`v2.23.4` -> `v2.28.1`
github.com/onsi/gomega	require	minor	`v1.38.0` -> `v1.39.1`
github.com/prometheus/common	indirect	patch	`v0.67.2` -> `v0.67.5`
github.com/prometheus/procfs	indirect	minor	`v0.17.0` -> `v0.20.1`
github.com/pterm/pterm	require	patch	`v0.12.81` -> `v0.12.83`
github.com/sirupsen/logrus	indirect	patch	`v1.9.3` -> `v1.9.4`
github.com/spf13/cobra	require	minor	`v1.9.1` -> `v1.10.2`
github.com/stoewer/go-strcase	require	patch	`v1.3.0` -> `v1.3.1`
github.com/uptrace/bun	indirect	patch	`v1.2.17` -> `v1.2.18`
github.com/uptrace/bun/dialect/pgdialect	indirect	patch	`v1.2.17` -> `v1.2.18`
github.com/uptrace/bun/extra/bunotel	indirect	patch	`v1.2.17` -> `v1.2.18`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.65.0` -> `v0.67.0`
go.opentelemetry.io/contrib/propagators/b3	indirect	minor	`v1.40.0` -> `v1.42.0`
go.opentelemetry.io/otel	indirect	minor	`v1.40.0` -> `v1.42.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace	indirect	minor	`v1.40.0` -> `v1.42.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc	indirect	minor	`v1.40.0` -> `v1.42.0`
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	indirect	minor	`v1.40.0` -> `v1.42.0`
go.opentelemetry.io/otel/exporters/stdout/stdouttrace	indirect	minor	`v1.40.0` -> `v1.42.0`
go.opentelemetry.io/otel/log	indirect	minor	`v0.16.0` -> `v0.18.0`
go.opentelemetry.io/otel/metric	indirect	minor	`v1.40.0` -> `v1.42.0`
go.opentelemetry.io/otel/sdk	indirect	minor	`v1.40.0` -> `v1.42.0`
go.opentelemetry.io/otel/trace	indirect	minor	`v1.40.0` -> `v1.42.0`
go.opentelemetry.io/proto/otlp	indirect	minor	`v1.9.0` -> `v1.10.0`
go.uber.org/zap	indirect	patch	`v1.27.0` -> `v1.27.1`
go.yaml.in/yaml/v2	indirect	patch	`v2.4.3` -> `v2.4.4`
golang.org/x/mod	indirect	minor	`v0.29.0` -> `v0.34.0`
golang.org/x/mod	require	minor	`v0.29.0` -> `v0.34.0`
golang.org/x/net	indirect	minor	`v0.51.0` -> `v0.52.0`
golang.org/x/net	indirect	minor	`v0.47.0` -> `v0.52.0`
golang.org/x/oauth2	indirect	minor	`v0.33.0` -> `v0.36.0`
golang.org/x/sync	indirect	minor	`v0.19.0` -> `v0.20.0`
golang.org/x/sync	indirect	minor	`v0.18.0` -> `v0.20.0`
golang.org/x/sys	indirect	minor	`v0.41.0` -> `v0.42.0`
golang.org/x/sys	indirect	minor	`v0.38.0` -> `v0.42.0`
golang.org/x/term	indirect	minor	`v0.37.0` -> `v0.41.0`
golang.org/x/text	indirect	minor	`v0.34.0` -> `v0.35.0`
golang.org/x/text	indirect	minor	`v0.31.0` -> `v0.35.0`
golang.org/x/time	indirect	minor	`v0.14.0` -> `v0.15.0`
golang.org/x/tools	indirect	minor	`v0.38.0` -> `v0.43.0`
gomodules.xyz/jsonpatch/v2	indirect	minor	`v2.4.0` -> `v2.5.0`
google.golang.org/genproto/googleapis/api	indirect	digest	`2f722ef` -> `d00831a`
google.golang.org/genproto/googleapis/rpc	indirect	digest	`2f722ef` -> `d00831a`
google.golang.org/protobuf	indirect	patch	`v1.36.10` -> `v1.36.11`
k8s.io/api	indirect	minor	`v0.34.2` -> `v0.35.3`
k8s.io/api	require	minor	`v0.34.2` -> `v0.35.3`
k8s.io/apiextensions-apiserver	require	minor	`v0.34.1` -> `v0.35.3`
k8s.io/apimachinery	require	minor	`v0.34.2` -> `v0.35.3`
k8s.io/cli-runtime	require	minor	`v0.33.5` -> `v0.35.3`
k8s.io/client-go	require	minor	`v0.34.2` -> `v0.35.3`
k8s.io/klog/v2	indirect	minor	`v2.130.1` -> `v2.140.0`
k8s.io/kube-openapi	indirect	digest	`d7b6acb` -> `5883c5e`
k8s.io/utils	indirect	digest	`0af2bda` -> `28399d8`
k8s.io/utils	require	digest	`0af2bda` -> `28399d8`
sigs.k8s.io/controller-runtime	indirect	minor	`v0.22.4` -> `v0.23.3`
sigs.k8s.io/controller-runtime	require	minor	`v0.22.4` -> `v0.23.3`
sigs.k8s.io/kustomize/api	indirect	minor	`v0.19.0` -> `v0.21.1`
sigs.k8s.io/kustomize/kyaml	indirect	minor	`v0.19.0` -> `v0.21.1`
sigs.k8s.io/structured-merge-diff/v6	indirect	patch	`v6.3.0` -> `v6.3.2`

Release Notes

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

`v1.41.4`

Compare Source

`v1.41.3`

Compare Source

aws/smithy-go (github.com/aws/smithy-go)

`v1.24.2`: Release (2026-02-27)

Compare Source

Release (2026-02-27)

General Highlights

Dependency Update: Bump minimum go version to 1.24.

evanphx/json-patch (github.com/evanphx/json-patch)

`v4.13.0+incompatible`

Compare Source

formancehq/go-libs (github.com/formancehq/go-libs/v2)

`v2.2.4`

Compare Source

formancehq/operator (github.com/formancehq/operator/v3)

`v3.8.3`

Compare Source

Changelog

Other work

4dd86ce: chore(deps): update module google.golang.org/grpc to v1.79.3 [security] (#427) (@NumaryBot)
f318a09: chore: release v3.8.3 (#428) (@sylr)

What to do next?

Read the documentation
Join our GitHub Discussions

`v3.8.2`

Compare Source

Changelog

New Features

5ca2ea3: feat(settings): enrich container env vars from Settings (#426) (@sylr)

What to do next?

Read the documentation
Join our GitHub Discussions

`v3.8.1`

Compare Source

What's Changed

fix(core): prevent panic on nil spec in unstructured type assertions by @flemzord in https://github.com/formancehq/operator/pull/416
feat(databases): pass through arbitrary PostgreSQL query params by @flemzord in https://github.com/formancehq/operator/pull/415
fix(kubectl-stacks): use PersistentFlags so config flags propagate to subcommands by @flemzord in https://github.com/formancehq/operator/pull/417
fix(core): improve removeAllModulesOwnedObjects safety and observability by @flemzord in https://github.com/formancehq/operator/pull/419
fix: make .envrc compatible with nix-direnv, allowing shell caching by @fguery in https://github.com/formancehq/operator/pull/422
fix(databases): filter awsRole from PostgreSQL query params pass-through by @flemzord in https://github.com/formancehq/operator/pull/424
chore(helm): add chart tree paths to sources by @Dav-14 in https://github.com/formancehq/operator/pull/420

New Contributors

@fguery made their first contribution in https://github.com/formancehq/operator/pull/422

Full Changelog: v3.8.0...v3.8.1

`v3.8.0`

Compare Source

Changelog

New Features

eb8d126: feat(auth): add AUTH_ISSUERS env var via auth.issuers setting (#413) (@sylr)
31623e0: feat(gateway): support multiple hosts in ingress (#392) (@sylr)
85b8776: feat(ledger): add worker settings for async block hasher and pipelines (#393) (@flemzord)
9b5ee6a: feat(licence): opt-in licence management via --licence-secret flag (#410) (@flemzord)
413c4c8: feat(stacks): add NetworkPolicy micro-segmentation controlled by Settings (#396) (@flemzord)

Other work

62d6c48: chore(deps): update module golang.org/x/net to v0.51.0 [security] (#414) (@NumaryBot)

What to do next?

Read the documentation
Join our GitHub Discussions

`v3.7.2`

Compare Source

Changelog

New Features

dc7d03f: feat: rename transactions module to transactionplane (#411) (@paul-nicolas)

Bug fixes

95100f4: fix(deploy): operator utils is not updated on staging (#408) (@Dav-14)

What to do next?

Read the documentation
Join our GitHub Discussions

`v3.7.1`

Compare Source

Changelog

Other work

0b61909: fix(operator-utils): fix missing bind env (#407) (@paul-nicolas)

What to do next?

Read the documentation
Join our GitHub Discussions

`v3.7.0`

Compare Source

Changelog

New Features

5611515: feat: add transactions module (#394) (@paul-nicolas)
f0c8cc2: feat: upgrade helm (#406) (@paul-nicolas)

Full Changelog: v3.6.1...v3.6.2

`v3.6.1`

Compare Source

Changelog

Other work

cfda521: build: tune build (#403) (@sylr)

What to do next?

Read the documentation
Join our GitHub Discussions

`v3.6.0`

Compare Source

Changelog

New Features

41fd4ad: feat: add external-dns/dnsenpoint generation for the gateway (#364) (@sylr)

Bug fixes

f331b1d: fix(ci): override helm chart version with commit SHA during CI builds (#397) (@Dav-14)
4ae306a: fix(gateway): use CRD spec fields to detect DNSEndpoint availability (#388) (@sylr)
a2c5191: fix(resourcereferences): use API reader to avoid typed/unstructured cache race (#390) (@sylr)
0b59bed: fix(tests): reset settings slice in application test to prevent flakiness (#389) (@sylr)
eb143ff: fix: return err instead of nil (#391) (@sylr)

Other work

5263038: chore(deps): update module filippo.io/edwards25519 to v1.1.1 [security] (#395) (@NumaryBot)
2bee0b3: chore(deps): update module go.opentelemetry.io/otel/sdk to v1.40.0 [security] (#398) (@NumaryBot)
9dcb335: chore: rename go module to github.com/formancehq/operator/v3 (#402) (@sylr)

What to do next?

Read the documentation
Join our GitHub Discussions

`v3.5.1`

Compare Source

What's Changed

feat(payment): rollout on hashMapAnnotations change by @Dav-14 in https://github.com/formancehq/operator/pull/386

Full Changelog: v3.5.0...v3.5.1

`v3.5.0`

Compare Source

What's Changed

chore: update nix deps by @sylr in https://github.com/formancehq/operator/pull/384
feat(crds): add configurable annotations by @Dav-14 in https://github.com/formancehq/operator/pull/385

Full Changelog: v3.4.0...v3.5.0

`v3.4.0`

Compare Source

Changelog

New Features

d25df15: feat(payments): add function to delete all payment deployments on version upgrade (#374) (@flemzord)

Bug fixes

e04dbba: fix(gateway): fix Caddyfile audit config and metrics deprecation (#381) (@flemzord)
4851b3f: fix(orchestrations): add brokers.Watch to trigger reconciliation on broker changes (#379) (@flemzord)
3b5724b: fix(webhooks): add brokers.Watch to trigger reconciliation on broker changes (#378) (@flemzord)
2170472: fix: add missing readiness probe (#377) (@Azorlogh)

Other work

88c0e57: chore(deps): update module github.com/go-chi/chi/v5 to v5.2.4 [security] (#382) (@NumaryBot)
960e360: chore(helm): bump chart and app versions to 3.4.0 in CRDs and operator (@flemzord)
16c53b0: chore: Security Update (#376) (@flemzord)

What to do next?

Read the documentation
Join our GitHub Discussions

`v3.3.1`

Compare Source

Changelog

Bug fixes

f8217dd: fix(broker): add WithWatchSettings to trigger reconciliation on settings changes (#373) (@flemzord)

Other work

d5edd77: chore: remove obsolete code (#370) (@gfyrag)

What to do next?

Read the documentation
Join our GitHub Discussions

`v3.3.0`

Compare Source

Changelog

New Features

b15fc33: feat(gateway): add idle-timeout setting for client connections (#371) (@flemzord)
ba6b8e6: feat: add termination-grace-period-seconds setting (#369) (@sylr)

Other work

b87763d: chore(nats): upgrade nats-box docker image to v0.19.2 (#368) (@sylr)

What to do next?

Read the documentation
Join our GitHub Discussions

`v3.2.0`

Compare Source

Changelog

Other work

38e4fca: chore(deps): update module golang.org/x/crypto to v0.45.0 [security] (#363) (@NumaryBot)
d13127e: feat/en 519 add numspcript interpreter flags (#366) (@Dav-14)

What to do next?

Read the documentation
Join our GitHub Discussions

`v3.1.0`

Compare Source

Changelog

New Features

4cb8083: feat: add setting gateway.caddyfile.trusted-proxies (#361) (@sylr)
78d9699: feat: add setting to set services' trafficDistribution property (#351) (@sylr)
640b8ff: feat: add setting to use semconv metrics name (#352) (@sylr)

Bug fixes

9f6d89b: fix: add defer directive to prevent duplicate CORS headers (#356) (@flemzord)

Other work

203f7cf: chore(deps): update module golang.org/x/crypto to v0.43.0 [security] (#359) (@NumaryBot)
7ca79c0: chore: enabled scopes verification by default (#360) (@gfyrag)
db13f71: chore: fix deploy job on staging (#357) (@sylr)
08bb50d: chore: fix missing earthly command (#358) (@sylr)
6038ecc: chore: fix tailscale not working with dns on shipfox runners (@sylr)
b66cee9: chore: tune deploy job (@sylr)
f464f7e: chore: upgrade to go 1.25 (#355) (@sylr)
b17cda4: release: prepare v3.1.0 (#362) (@flemzord)

What to do next?

Read the documentation
Join our GitHub Discussions

go-errors/errors (github.com/go-errors/errors)

`v1.5.1`

Compare Source

`v1.5.0`

Compare Source

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

`v0.22.5`

Compare Source

0.22.5 - 2026-03-02

Full Changelog: go-openapi/jsonpointer@v0.22.4...v0.22.5

15 commits in this release.

Documentation

doc: updated contributors file by @bot-go-openapi[bot] in #97 ...
doc: announced new discord channel by @fredbi in #96 ...
doc: updated contributors file by @bot-go-openapi[bot] in #92 ...

Code quality

chore: doc, test, lint update by @fredbi in #105 ...

Miscellaneous tasks

ci: upgraded bump-release workflow (new input format) by @fredbi in #106 ...
ci: updated workflows by @fredbi in #95 ...
chore: fixed missing license headers in new files by @fredbi in #94 ...
ci: removed duplicate workflow remaining after refactoring by @fredbi in #93 ...

Updates

chore(deps): bump github.com/go-openapi/testify/v2 from 2.3.0 to 2.4.0 in the go-openapi-dependencies group by @dependabot[bot] in #104 ...
chore(deps): bump github.com/go-openapi/testify/v2 from 2.2.0 to 2.3.0 in the go-openapi-dependencies group by @dependabot[bot] in #102 ...
chore(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #103 ...
chore(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #101 ...
chore(deps): bump github.com/go-openapi/testify/v2 from 2.1.8 to 2.2.0 in the go-openapi-dependencies group by @dependabot[bot] in #100 ...
chore(deps): bump github.com/go-openapi/testify/v2 from 2.0.2 to 2.1.8 in the go-openapi-dependencies group by @dependabot[bot] in #98 ...
chore(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #99 ...

People who contributed to this release

New Contributors

@bot-go-openapi[bot] made their first contribution
in #97

jsonpointer license terms

`v0.22.4`

Compare Source

0.22.4 - 2025-12-06

Full Changelog: go-openapi/jsonpointer@v0.22.3...v0.22.4

1 commits in this release.

Miscellaneous tasks

ci: aligned CI to use shared workflows by @fredbi in #91 ...

People who contributed to this release

@fredbi

jsonpointer license terms

`v0.22.3`

Compare Source

0.22.3 - 2025-11-17

Full Changelog: go-openapi/jsonpointer@v0.22.2...v0.22.3

8 commits in this release.

Documentation

doc: updated contributors file by @github-actions[bot] in #76 ...
doc: automated a record of all-time contributors by @fredbi in #75 ...
doc: release badge in README by @fredbi in #73 ...

Code quality

docs: added maintainer's doc and style guide by @fredbi in #77 ...
doc: improved documentation by @fredbi in #70 ...
chore(lint): more linting by @fredbi in #71 ...

Miscellaneous tasks

test: added tests for edge cases by @fredbi in #74 ...
ci: run fuzz test in ci by @fredbi in #72 ...

People who contributed to this release

New Contributors

@github-actions[bot] made their first contribution
in #76

jsonpointer license terms

`v0.22.2`

Compare Source

0.22.2 - 2025-11-14

Full Changelog: go-openapi/jsonpointer@v0.22.1...v0.22.2

12 commits in this release.

Documentation

ci: fixed typo by @fredbi ...
docs: fixed typo in NOTICE by @fredbi in #62 ...
Licensing: added NOTICE by @fredbi in #61 ...

Code quality

chore(lint): code quality by @fredbi in #64 ...

Testing

test: added fuzz test for parsing by @fredbi in #69 ...
test: improved test coverage by @fredbi in #68 ...

Miscellaneous tasks

ci: fixed sarif file by @fredbi ...
chore(deps): removed indirect test dependencies by @fredbi in #60 ...

Security

ci: added govulscan security scanner tool by @fredbi in #67 ...
doc: added examples to document simple use cases by @fredbi in #65 ...
ci: added workflows by @fredbi in #63 ...

Updates

chore(deps): bump the development-dependencies group with 5 updates by @dependabot[bot] in #66 ...

People who contributed to this release

@fredbi

jsonpointer license terms

`v0.22.1`

Compare Source

`v0.22.0`

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

`v0.21.5`

Compare Source

0.21.5 - 2026-03-02

Full Changelog: go-openapi/jsonreference@v0.21.4...v0.21.5

14 commits in this release.

Documentation

doc: updated contributors file by @bot-go-openapi[bot] in #71 ...
doc: announced new discord channel by @fredbi in #70 ...
doc: added basic usage in readme and testable examples by @fredbi in #69 ...
doc: fixed copy-paste errors with jsonpointer by @fredbi in #67 ...

Code quality

chore: doc, lint, tests by @fredbi in #79 ...

Testing

test: added fuzz test for reference parser by @fredbi in #68 ...

Miscellaneous tasks

ci: remove duplicate release worflow by @fredbi in #66 ...

Updates

build(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #78 ...
build(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #76 ...
build(deps): bump github.com/go-openapi/testify/v2 from 2.1.8 to 2.2.0 in the go-openapi-dependencies group by @dependabot[bot] in #75 ...
build(deps): bump github.com/go-openapi/testify/v2 from 2.1.1 to 2.1.8 in the go-openapi-dependencies group by @dependabot[bot] in #74 ...
build(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #73 ...
build(deps): bump github.com/go-openapi/testify/v2 from 2.0.2 to 2.1.1 in the go-openapi-dependencies group by @dependabot[bot] in #72 ...
build(deps): bump the development-dependencies group with 7 updates by @dependabot[bot] in #65 ...

People who contributed to this release

@fredbi

jsonreference license terms

`v0.21.4`

Compare Source

0.21.4 - 2025-12-08

Full Changelog: go-openapi/jsonreference@v0.21.3...v0.21.4

1 commits in this release.

Documentation

doc: updated contributors file by @bot-go-openapi[bot] in #64 ...

People who contributed to this release

@bot-go-openapi[bot]

New Contributors

@bot-go-openapi[bot] made their first contribution
in #64

jsonreference license terms

[![License][license-bad

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

NumaryBot · 2026-03-20T03:09:59Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Command failed: just pre-commit
go mod tidy
go: downloading github.com/formancehq/go-libs/v2 v2.2.4
go: downloading golang.org/x/mod v0.34.0
go: downloading k8s.io/api v0.35.3
go: downloading k8s.io/apimachinery v0.35.3
go: downloading sigs.k8s.io/controller-runtime v0.23.3
go: downloading k8s.io/apiextensions-apiserver v0.35.3
go: downloading k8s.io/client-go v0.35.3
go: downloading sigs.k8s.io/external-dns v0.20.0
go: downloading github.com/iancoleman/strcase v0.3.0
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/stretchr/testify v1.11.1
go: downloading k8s.io/utils v0.0.0-20260319190234-28399d86e0b5
go: downloading github.com/google/go-cmp v0.7.0
go: downloading sigs.k8s.io/yaml v1.6.0
go: downloading k8s.io/klog/v2 v2.140.0
go: downloading k8s.io/kube-openapi v0.0.0-20260319004828-5883c5ee87b9
go: downloading sigs.k8s.io/structured-merge-diff/v6 v6.3.2
go: downloading github.com/evanphx/json-patch/v5 v5.9.11
go: downloading github.com/evanphx/json-patch v4.13.0+incompatible
go: downloading github.com/onsi/ginkgo/v2 v2.28.1
go: downloading github.com/onsi/gomega v1.39.1
go: downloading github.com/stoewer/go-strcase v1.3.1
go: downloading github.com/go-logr/logr v1.4.3
go: downloading github.com/google/uuid v1.6.0
go: downloading github.com/fxamacker/cbor/v2 v2.9.0
go: downloading github.com/imdario/mergo v0.3.16
go: downloading github.com/go-logr/zapr v1.3.0
go: downloading go.uber.org/zap v1.27.1
go: downloading github.com/prometheus/client_golang v1.23.2
go: downloading golang.org/x/time v0.15.0
go: downloading github.com/spf13/pflag v1.0.10
go: downloading sigs.k8s.io/json v0.0.0-20250730193827-2d320260d730
go: downloading go.yaml.in/yaml/v2 v2.4.4
go: downloading github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc
go: downloading github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
go: downloading github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822
go: downloading golang.org/x/net v0.52.0
go: downloading gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
go: downloading github.com/google/gofuzz v1.2.0
go: downloading gopkg.in/evanphx/json-patch.v4 v4.13.0
go: downloading go.yaml.in/yaml/v3 v3.0.4
go: downloading go.uber.org/goleak v1.3.0
go: downloading gomodules.xyz/jsonpatch/v2 v2.5.0
go: downloading github.com/sirupsen/logrus v1.9.4
go: downloading go.uber.org/multierr v1.11.0
go: downloading github.com/prometheus/client_model v0.6.2
go: downloading github.com/prometheus/common v0.67.5
go: downloading github.com/klauspost/compress v1.18.0
go: downloading google.golang.org/protobuf v1.36.11
go: downloading github.com/fsnotify/fsnotify v1.9.0
go: downloading golang.org/x/oauth2 v0.36.0
go: downloading github.com/google/gnostic-models v0.7.1
go: downloading github.com/google/btree v1.1.3
go: downloading github.com/modern-go/reflect2 v1.0.3-0.20250322232337-35a7c28c31ee
go: downloading github.com/go-openapi/jsonreference v0.21.5
go: downloading github.com/go-openapi/swag v0.25.5
go: downloading golang.org/x/term v0.41.0
go: downloading github.com/stretchr/objx v0.5.2
go: downloading golang.org/x/sys v0.42.0
go: downloading github.com/gkampitakis/go-snaps v0.5.15
go: downloading github.com/joshdk/go-junit v1.0.0
go: downloading github.com/mfridman/tparse v0.18.0
go: downloading github.com/Masterminds/semver/v3 v3.4.0
go: downloading github.com/kr/pretty v0.3.1
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/prometheus/procfs v0.20.1
go: downloading github.com/kylelemons/godebug v1.1.0
go: downloading golang.org/x/sync v0.20.0
go: downloading github.com/go-openapi/jsonpointer v0.22.5
go: downloading github.com/go-openapi/testify/v2 v2.4.0
go: downloading golang.org/x/text v0.35.0
go: downloading github.com/go-openapi/swag/cmdutils v0.25.5
go: downloading github.com/go-openapi/swag/conv v0.25.5
go: downloading github.com/go-openapi/swag/fileutils v0.25.5
go: downloading github.com/go-openapi/swag/jsonname v0.25.5
go: downloading github.com/go-openapi/swag/jsonutils v0.25.5
go: downloading github.com/go-openapi/swag/loading v0.25.5
go: downloading github.com/go-openapi/swag/mangling v0.25.5
go: downloading github.com/go-openapi/swag/netutils v0.25.5
go: downloading github.com/go-openapi/swag/stringutils v0.25.5
go: downloading github.com/go-openapi/swag/typeutils v0.25.5
go: downloading github.com/go-openapi/swag/yamlutils v0.25.5
go: downloading github.com/go-task/slim-sprig/v3 v3.0.0
go: downloading golang.org/x/tools v0.43.0
go: downloading github.com/gkampitakis/ciinfo v0.3.2
go: downloading github.com/gkampitakis/go-diff v1.3.2
go: downloading github.com/goccy/go-yaml v1.18.0
go: downloading github.com/maruel/natural v1.1.1
go: downloading github.com/tidwall/gjson v1.18.0
go: downloading github.com/tidwall/pretty v1.2.1
go: downloading github.com/kr/text v0.2.0
go: downloading github.com/rogpeppe/go-internal v1.14.1
go: downloading github.com/go-openapi/testify/enable/yaml/v2 v2.4.0
go: downloading github.com/go-openapi/swag/jsonutils/fixtures_test v0.25.5
go: downloading github.com/emicklei/go-restful/v3 v3.13.0
go: downloading github.com/google/pprof v0.0.0-20260302011040-a15ffb7f9dcc
go: downloading github.com/tidwall/sjson v1.2.5
go: downloading github.com/tidwall/match v1.1.1
cd ./tools/kubectl-stacks && go mod tidy
go: downloading github.com/pterm/pterm v0.12.83
go: downloading github.com/spf13/cobra v1.10.2
go: downloading k8s.io/cli-runtime v0.35.3
go: downloading github.com/inconshreveable/mousetrap v1.1.0
go: downloading atomicgo.dev/cursor v0.2.0
go: downloading atomicgo.dev/keyboard v0.2.9
go: downloading atomicgo.dev/schedule v0.1.0
go: downloading github.com/gookit/color v1.6.0
go: downloading github.com/lithammer/fuzzysearch v1.1.8
go: downloading github.com/mattn/go-runewidth v0.0.21
go: downloading github.com/MarvinJWendt/testza v0.5.2
go: downloading github.com/liggitt/tabwriter v0.0.0-20181228230101-89fcab3d43de
go: downloading github.com/moby/term v0.5.2
go: downloading sigs.k8s.io/kustomize/api v0.21.1
go: downloading github.com/gregjones/httpcache v0.0.0-20190611155906-901d90724c79
go: downloading sigs.k8s.io/kustomize/kyaml v0.21.1
go: downloading github.com/peterbourgon/diskv v2.0.1+incompatible
go: downloading github.com/containerd/console v1.0.5
go: downloading github.com/clipperhouse/uax29/v2 v2.7.0
go: downloading github.com/kr/text v0.1.0
go: downloading github.com/xo/terminfo v0.0.0-20220910002029-abceb7e1c41e
go: downloading github.com/gookit/assert v0.1.1
go: downloading github.com/creack/pty v1.1.18
go: downloading atomicgo.dev/assert v0.0.2
go: downloading github.com/klauspost/cpuid/v2 v2.2.3
go: downloading github.com/Azure/go-ansiterm v0.0.0-20250102033503-faa5f7b0171c
go: downloading golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56
go: downloading github.com/sergi/go-diff v1.4.0
go: downloading github.com/blang/semver/v4 v4.0.0
go: downloading github.com/go-errors/errors v1.5.1
go: downloading github.com/monochromegane/go-gitignore v0.0.0-20200626010858-205db1a8cc00
go: downloading github.com/xlab/treeprint v1.2.0
cd ./tools/utils && go mod tidy
go: downloading github.com/ThreeDotsLabs/watermill v1.5.1
go: downloading github.com/hashicorp/go-hclog v1.6.3
go: downloading github.com/uptrace/opentelemetry-go-extra/otellogrus v0.3.2
go: downloading github.com/riandyrn/otelchi v0.12.2
go: downloading go.opentelemetry.io/otel v1.42.0
go: downloading go.opentelemetry.io/otel/trace v1.42.0
go: downloading go.uber.org/dig v1.19.0
go: downloading go.uber.org/fx v1.24.0
go: downloading github.com/jackc/pgx/v5 v5.8.0
go: downloading github.com/uptrace/bun v1.2.18
go: downloading github.com/xo/dburl v0.24.2
go: downloading github.com/aws/aws-sdk-go-v2 v1.41.4
go: downloading github.com/aws/aws-sdk-go-v2/config v1.32.12
go: downloading github.com/aws/aws-sdk-go-v2/feature/rds/auth v1.6.20
go: downloading github.com/go-sql-driver/mysql v1.9.3
go: downloading github.com/uptrace/bun/dialect/pgdialect v1.2.18
go: downloading github.com/uptrace/bun/extra/bunotel v1.2.18
go: downloading github.com/uptrace/opentelemetry-go-extra/otelutil v0.3.2
go: downloading go.opentelemetry.io/otel/sdk v1.42.0
go: downloading go.opentelemetry.io/contrib/propagators/b3 v1.42.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.42.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.42.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.42.0
go: downloading go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.42.0
go: downloading github.com/mattn/go-colorable v0.1.14
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading github.com/go-chi/chi/v5 v5.2.5
go: downloading github.com/lithammer/shortuuid/v3 v3.0.7
go: downloading github.com/oklog/ulid v1.3.1
go: downloading github.com/ory/dockertest/v3 v3.11.0
go: downloading github.com/onsi/ginkgo/v2 v2.22.1
go: downloading github.com/aws/smithy-go v1.24.2
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.19.12
go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.18.20
go: downloading github.com/aws/aws-sdk-go-v2/internal/ini v1.8.6
go: downloading github.com/aws/aws-sdk-go-v2/service/signin v1.0.8
go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.30.13
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.35.17
go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.41.9
go: downloading filippo.io/edwards25519 v1.2.0
go: downloading github.com/uptrace/opentelemetry-go-extra/otelsql v0.3.2
go: downloading go.opentelemetry.io/otel/metric v1.42.0
go: downloading go.opentelemetry.io/otel/log v0.18.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0
go: downloading github.com/go-logr/stdr v1.2.2
go: downloading go.opentelemetry.io/proto/otlp v1.10.0
go: downloading go.opentelemetry.io/otel/sdk/metric v1.42.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20260319201613-d00831a3d3e7
go: downloading google.golang.org/grpc v1.79.3
go: downloading github.com/jackc/pgpassfile v1.0.0
go: downloading github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761
go: downloading github.com/jackc/puddle/v2 v2.2.2
go: downloading github.com/tmthrgd/go-hex v0.0.0-20190904060850-447a3041c3bc
go: downloading github.com/jinzhu/inflection v1.0.0
go: downloading github.com/puzpuzpuz/xsync/v3 v3.5.1
go: downloading github.com/vmihailenco/msgpack/v5 v5.4.1
go: downloading github.com/cenkalti/backoff/v4 v4.3.0
go: downloading github.com/Microsoft/go-winio v0.6.2
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.4.20
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.13.7
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.13.20
go: downloading go.opentelemetry.io/auto/sdk v1.2.1
go: downloading github.com/cenkalti/backoff/v5 v5.0.3
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0
go: downloading github.com/docker/cli v27.3.1+incompatible
go: downloading github.com/vmihailenco/tagparser/v2 v2.0.0
go: downloading github.com/opencontainers/runc v1.1.14
go: downloading github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5
go: downloading github.com/moby/term v0.5.0
go: downloading github.com/opencontainers/image-spec v1.1.0
go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.7.20
go: downloading github.com/golang/protobuf v1.5.4
go: downloading github.com/docker/go-connections v0.5.0
go: downloading github.com/containerd/continuity v0.4.3
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20260319201613-d00831a3d3e7
go: downloading golang.org/x/tools v0.42.0
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161
go: downloading github.com/google/pprof v0.0.0-20241210010833-40e02aabc2ad
go: downloading gonum.org/v1/gonum v0.16.0
go: downloading dario.cat/mergo v1.0.1
go: downloading github.com/docker/docker v27.5.1+incompatible
go: downloading github.com/go-viper/mapstructure/v2 v2.2.1
go: downloading github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510
go: downloading github.com/xeipuuv/gojsonschema v1.2.0
go: downloading github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415
go: downloading github.com/moby/docker-image-spec v1.3.1
go: downloading github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb
golangci-lint run --fix --timeout 5m
error: Recipe `lint` failed on line 11 with exit code 1

coderabbitai · 2026-03-20T03:10:04Z

Important

Review skipped

Review was skipped due to path filters

⛔ Files ignored due to path filters (6)

go.mod is excluded by !**/*.mod
go.sum is excluded by !**/*.sum, !**/*.sum
tools/kubectl-stacks/go.mod is excluded by !**/*.mod
tools/kubectl-stacks/go.sum is excluded by !**/*.sum, !**/*.sum
tools/utils/go.mod is excluded by !**/*.mod
tools/utils/go.sum is excluded by !**/*.sum, !**/*.sum

CodeRabbit blocks several paths by default. You can override this behavior by explicitly including those paths in the path filters. For example, including **/dist/** will override the default block on the dist directory, by removing the pattern from both the lists.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Run ID: 400c5f01-8cfd-4044-b5ac-5f1b7825fa5c

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

🔍 Trigger review

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch renovate/security

📝 Coding Plan

Generate coding plan for human review comments

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

flemzord · 2026-03-20T07:06:15Z

Closed automatically: bulk NumaryBot security cleanup

chore(deps): update security updates

2c656c4

NumaryBot requested a review from a team as a code owner March 20, 2026 03:09

NumaryBot added the security label Mar 20, 2026

NumaryBot requested a review from a team March 20, 2026 03:09

flemzord approved these changes Mar 20, 2026

View reviewed changes

flemzord closed this Mar 20, 2026

NumaryBot deleted the renovate/security branch March 20, 2026 07:18

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): update security updates#429

chore(deps): update security updates#429
NumaryBot wants to merge 1 commit intomainfrom
renovate/security

NumaryBot commented Mar 20, 2026

Uh oh!

NumaryBot commented Mar 20, 2026

Uh oh!

coderabbitai bot commented Mar 20, 2026

Review skipped

Uh oh!

flemzord commented Mar 20, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

NumaryBot commented Mar 20, 2026

Release Notes

v1.24.2: Release (2026-02-27)

Release (2026-02-27)

General Highlights

Changelog

Other work

What to do next?

Changelog

New Features

What to do next?

What's Changed

New Contributors

Changelog

New Features

Other work

What to do next?

Changelog

New Features

Bug fixes

What to do next?

Changelog

Other work

What to do next?

Changelog

New Features

What to do next?

What's Changed

Changelog

Other work

What to do next?

Changelog

New Features

Bug fixes

Other work

What to do next?

What's Changed

What's Changed

Changelog

New Features

Bug fixes

Other work

What to do next?

Changelog

Bug fixes

Other work

What to do next?

Changelog

New Features

Other work

What to do next?

Changelog

Other work

What to do next?

Changelog

New Features

Bug fixes

Other work

What to do next?

0.22.5 - 2026-03-02

Documentation

Code quality

Miscellaneous tasks

Updates

People who contributed to this release

New Contributors

0.22.4 - 2025-12-06

Miscellaneous tasks

People who contributed to this release

0.22.3 - 2025-11-17

Documentation

Code quality

Miscellaneous tasks

People who contributed to this release

New Contributors

0.22.2 - 2025-11-14

Documentation

Code quality

Testing

`v1.24.2`: Release (2026-02-27)