chore(deps): upgrade Go and third-party dependencies#1075
Merged
Conversation
Bump Go version and align third-party dependency versions
to latest compatible releases.
Notable changes:
- Go version: 1.25.6 → 1.25.9
- k8s.io/{api,apimachinery,client-go,cli-runtime}: 0.34→0.35
- sigs.k8s.io/controller-runtime: 0.21.0 → 0.22.4
- opencontainers/runc removed; replaced by standalone
opencontainers/cgroups module (cgroup/manager_linux.go migrated)
- libbpfgo: v0.5.1-libbpf-1.2 → v0.9.2-libbpf-1.5.1
- vishvananda/netlink: pseudo-version → v1.3.1
- Regenerated K8SClientMock for new client.Client.Apply method
- Patched containerd vendor for runtime-spec v1.3.0 LinuxPids.Limit
Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
🎉 All green!❄️ No new flaky tests detected 🎯 Code Coverage (details) 🔗 Commit SHA: 8001679 | Docs | Datadog PR Page | Give us feedback! |
- Revert libbpfgo to v0.5.1-libbpf-1.2 to match the libbpf version available in the Docker build image (libbpf 1.2); v0.9.x requires BPF_MAP_TYPE_ARENA introduced in libbpf 1.4+ - Downgrade runtime-spec to v1.1.0 (what containerd v1.7.30 requires); v1.3.0 changed LinuxPids.Limit to *int64, breaking the vendored containerd code - Regenerate LICENSE-3rdparty.csv for new/removed packages Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
diyarab
approved these changes
May 5, 2026
Change save/upload logs steps from `if: failure()` to `if: always()` so they run even when the e2e-test job is cancelled by the 45-minute timeout. Add diagnostics for chaos pods, events, and pod descriptions to debug why target injection is stuck at NotInjected on this branch. This is a temporary debug commit to gather logs and should be reverted once the root cause is found. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
vishvananda/netlink v1.3.0 changed how default routes are decoded. Previously, default routes had `route.Dst == nil`; now they always carry an explicit zero-IP destination with a /0 mask. The injector's DefaultRoutes() check `route.Dst == nil && route.Gw != nil` was therefore matching nothing post-upgrade, causing every network disruption injection to fail with "error getting default route: not found" and leaving targets stuck at NotInjected in e2e tests. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
clairecng
reviewed
May 13, 2026
clairecng
reviewed
May 13, 2026
Contributor
clairecng
left a comment
clairecng
left a comment
There was a problem hiding this comment.
has this been deployed on staging + tested?
clairecng
approved these changes
May 13, 2026
diyarab
approved these changes
May 15, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What does this PR do?
Upgrades Go version and third-party dependencies to their latest compatible versions. Also migrates the `cgroup` package off the vendored `runc/libcontainer/cgroups` onto the now-standalone `github.com/opencontainers/cgroups` module, removing the direct dependency on `opencontainers/runc` entirely.
Code Quality Checklist
Testing
Notable changes
Collateral fixes required by the upgrades:
Intentionally not upgraded: