Skip to content

chore(deps): Combine Dependabot updates - #142

Merged
Bruno Borges (brunoborges) merged 2 commits into
mainfrom
brunoborges-combine-dependabot-prs
Sep 30, 2026
Merged

Bruno Borges (brunoborges) merged 2 commits into
mainfrom
brunoborges-combine-dependabot-prs

Conversation

@brunoborges

@brunoborges Bruno Borges (brunoborges) commented Sep 30, 2026 •

Copy link
Copy Markdown
Member

Summary

Combines all open Dependabot PRs into one:

Third-party notices:

  • Regenerated maven-plugin/src/main/resources/META-INF/NOTICE.txt for Jackson 2.22.3 (scripts/generate-notice.sh --update).
  • Go notices (CLI, operator, admission, provisioner) are generated at build time from go.mod (see docs/third-party-notices.md), so there are no checked-in files to update. site/NOTICE.txt and legal/CONTAINER-LEGAL-NOTICE.txt are unaffected.

Closes #131, closes #132, closes #133, closes #134, closes #135, closes #136

Validation

  • cd core && go build ./... && go vet ./... && go test ./...: passed
  • cd kubernetes && go build ./... && go test ./...: passed
  • cd maven-plugin && scripts/generate-notice.sh --update && scripts/generate-notice.sh --check: passed (Maven 3.9.9, JDK 25)
  • ./scripts/generate-go-notice.sh core … ./cmd/brewlet and ./scripts/generate-go-notice.sh kubernetes … ./cmd/manager: passed; output lists the bumped versions
  • The full Maven plugin build (mvn verify) was not run locally, so CI covers it.

Compatibility and operations

core/go.mod directive changes from go 1.26 to go 1.26.0, because golang.org/x/sys v0.48.0 requires it (go mod tidy enforces it). Otherwise none.

Checklist

  • Tests cover changed behavior.
  • Documentation is updated when needed.
  • No credentials, proprietary data, or unrelated generated files are included.

- go.yaml.in/yaml/v3 3.0.4 -> 3.0.5 in /core (#136)
- golang.org/x/sys 0.47.0 -> 0.48.0 in /core (#134)
- k8s.io/api, apimachinery, client-go 0.37.0 -> 0.37.1 in /kubernetes (#133, #135, #131)
- jackson-databind 2.22.2 -> 2.22.3 in /maven-plugin (#132)

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
@brunoborges
Bruno Borges (brunoborges) merged commit 22cd1d2 into main Sep 30, 2026
3 checks passed
@brunoborges
Bruno Borges (brunoborges) deleted the brunoborges-combine-dependabot-prs branch September 30, 2026 21:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant