Skip to content

Build(deps): Bump cloud.google.com/go/iam from 1.5.3 to 1.6.0 #1065

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
dependabot wants to merge 1 commit into from
Closed

Build(deps): Bump cloud.google.com/go/iam from 1.5.3 to 1.6.0 #1065

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
50 changes: 25 additions & 25 deletions go.mod
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,15 +1,15 @@
module github.com/openshift-online/ocm-cli

go 1.24.13
go 1.25.0
Copy link
Copy Markdown

@coderabbitai coderabbitai Bot Mar 30, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Verify Go version pins across common project automation files.
# Expected: all references align with 1.25.x (or intentionally allow it).

fd -HI 'go\.mod|go\.work|Dockerfile|Containerfile|Makefile|\.tool-versions|\.github/workflows' . \
  | xargs -r rg -n --no-heading -e 'go 1\.' -e 'go-version' -e 'golang:' -e 'GOLANG_VERSION' -e 'GO_VERSION'

Repository: openshift-online/ocm-cli

Length of output: 140

🏁 Script executed:

#!/bin/bash
# Check for CI/workflow files and their Go version specifications

echo "=== Checking for .github/workflows ==="
find .github/workflows -type f 2>/dev/null | head -20

echo -e "\n=== Checking for Dockerfile or Containerfile ==="
fd -HI '(Dockerfile|Containerfile)' . | head -20

echo -e "\n=== Checking for .tool-versions if not found above ==="
[ -f .tool-versions ] && cat .tool-versions || echo "No .tool-versions file"

echo -e "\n=== Checking workflow files for go-version or go: patterns ==="
if [ -d .github/workflows ]; then
  cat .github/workflows/*.{yml,yaml} 2>/dev/null | grep -i -E '(go.*version|uses:.*setup-go|golang)' | head -20
fi

Repository: openshift-online/ocm-cli

Length of output: 689

🏁 Script executed:

#!/bin/bash
# Check Dockerfile for Go version
echo "=== Dockerfile content ==="
cat ./docker/Dockerfile | head -30

echo -e "\n=== Detailed workflow version breakdown ==="
echo "check-pull-request.yaml Go versions:"
grep -n 'go-version' .github/workflows/check-pull-request.yaml || echo "No go-version found"

echo -e "\npublish-release.yaml Go versions:"
grep -n 'go-version' .github/workflows/publish-release.yaml || echo "No go-version found"

Repository: openshift-online/ocm-cli

Length of output: 1413

Update CI workflows to Go 1.25.0 before merging

go.mod specifies go 1.25.0, but CI workflows are pinned to earlier versions:

  • .github/workflows/check-pull-request.yaml: lines 51 and 77 use go-version: 1.22 and 1.23
  • .github/workflows/publish-release.yaml: line 45 uses go-version: 1.23

CI jobs will fail during build with the module dependency requirements. Update all workflow go-version values to 1.25.0, or revert go.mod to align with current CI pins.

🤖 Prompt for AI Agents 
Verify each finding against the current code and only fix it if needed.

In `@go.mod` at line 3, go.mod declares go 1.25.0 but CI workflows are pinned to
older Go versions; open go.mod and the workflow files check-pull-request.yaml
and publish-release.yaml and either update all go-version entries in those
workflows to "1.25.0" to match go.mod or change the go directive in go.mod back
to the lower version used in CI; ensure every occurrence of go-version in both
check-pull-request.yaml and publish-release.yaml is consistent with the go.mod
setting before merging.


require (
cloud.google.com/go/iam v1.5.3
cloud.google.com/go/iam v1.6.0
cloud.google.com/go/storage v1.58.0
github.com/AlecAivazis/survey/v2 v2.3.7
github.com/MicahParks/jwkset v0.11.0
github.com/golang-jwt/jwt/v4 v4.5.2
github.com/golang/glog v1.2.5
github.com/googleapis/gax-go/v2 v2.16.0
github.com/googleapis/gax-go/v2 v2.18.0
github.com/hashicorp/go-version v1.8.0
github.com/m1/go-generate-password v0.2.0
github.com/mitchellh/go-homedir v1.1.0
Expand All @@ -25,10 +25,10 @@ require (
github.com/spf13/pflag v1.0.10
gitlab.com/c0b/go-ordered-json v0.0.0-20201030195603-febf46534d5a
go.uber.org/mock v0.6.0
golang.org/x/term v0.39.0
golang.org/x/text v0.33.0
google.golang.org/api v0.257.0
google.golang.org/grpc v1.77.0
golang.org/x/term v0.41.0
golang.org/x/text v0.35.0
google.golang.org/api v0.272.0
google.golang.org/grpc v1.79.3
gopkg.in/yaml.v3 v3.0.1
k8s.io/apimachinery v0.34.3
)
Expand All @@ -37,7 +37,7 @@ require (
al.essio.dev/pkg/shellescape v1.6.0 // indirect
cel.dev/expr v0.25.1 // indirect
cloud.google.com/go v0.123.0 // indirect
cloud.google.com/go/auth v0.18.0 // indirect
cloud.google.com/go/auth v0.18.2 // indirect
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
cloud.google.com/go/compute/metadata v0.9.0 // indirect
cloud.google.com/go/monitoring v1.24.3 // indirect
Expand Down Expand Up @@ -97,7 +97,7 @@ require (
github.com/google/pprof v0.0.0-20251206212654-f1b79c6b8239 // indirect
github.com/google/s2a-go v0.1.9 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.3.7 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.3.14 // indirect
github.com/gorilla/css v1.0.1 // indirect
github.com/gsterjov/go-libsecret v0.0.0-20161001094733-a6f4afe4910c // indirect
github.com/inconshreveable/mousetrap v1.1.0 // indirect
Expand Down Expand Up @@ -132,24 +132,24 @@ require (
go.opentelemetry.io/contrib/detectors/gcp v1.39.0 // indirect
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.64.0 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.64.0 // indirect
go.opentelemetry.io/otel v1.39.0 // indirect
go.opentelemetry.io/otel/metric v1.39.0 // indirect
go.opentelemetry.io/otel/sdk v1.39.0 // indirect
go.opentelemetry.io/otel/sdk/metric v1.39.0 // indirect
go.opentelemetry.io/otel/trace v1.39.0 // indirect
go.opentelemetry.io/otel v1.40.0 // indirect
go.opentelemetry.io/otel/metric v1.40.0 // indirect
go.opentelemetry.io/otel/sdk v1.40.0 // indirect
go.opentelemetry.io/otel/sdk/metric v1.40.0 // indirect
go.opentelemetry.io/otel/trace v1.40.0 // indirect
go.yaml.in/yaml/v2 v2.4.3 // indirect
go.yaml.in/yaml/v3 v3.0.4 // indirect
golang.org/x/crypto v0.47.0 // indirect
golang.org/x/mod v0.32.0 // indirect
golang.org/x/net v0.49.0 // indirect
golang.org/x/oauth2 v0.34.0 // indirect
golang.org/x/sync v0.19.0 // indirect
golang.org/x/sys v0.40.0 // indirect
golang.org/x/time v0.14.0 // indirect
golang.org/x/tools v0.41.0 // indirect
google.golang.org/genproto v0.0.0-20251213004720-97cd9d5aeac2 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20251213004720-97cd9d5aeac2 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20251213004720-97cd9d5aeac2 // indirect
golang.org/x/crypto v0.49.0 // indirect
golang.org/x/mod v0.33.0 // indirect
golang.org/x/net v0.52.0 // indirect
golang.org/x/oauth2 v0.36.0 // indirect
golang.org/x/sync v0.20.0 // indirect
golang.org/x/sys v0.42.0 // indirect
golang.org/x/time v0.15.0 // indirect
golang.org/x/tools v0.42.0 // indirect
google.golang.org/genproto v0.0.0-20260217215200-42d3e9bedb6d // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20260316180232-0b37fe3546d5 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260311181403-84a4fc48630c // indirect
google.golang.org/protobuf v1.36.11 // indirect
gopkg.in/inf.v0 v0.9.1 // indirect
k8s.io/klog/v2 v2.130.1 // indirect
Expand Down
Loading
Loading