Repository navigation
chore(deps): update module github.com/invopop/jsonschema to v0.14.0 - #3423
renovate-bot wants to merge 1 commit into
Conversation
forking-renovate
Bot
added
the
dependencies
ℹ️ Artifact update noticeFile name: cli/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by Details:
|
|
/gcbrun |
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates several dependencies in cli/go.mod, including upgrades for jsonschema and jsonparser, and a transition from wk8/go-ordered-map to pb33f/ordered-map. Feedback was provided regarding the introduction of go.yaml.in/yaml/v4 v4.0.0-rc.2 as an indirect dependency, noting potential supply chain risks and stability issues associated with its release candidate status and non-standard import path.
| go.opentelemetry.io/proto/otlp v1.7.1 // indirect | ||
| go.yaml.in/yaml/v2 v2.4.2 // indirect | ||
| go.yaml.in/yaml/v3 v3.0.4 // indirect | ||
| go.yaml.in/yaml/v4 v4.0.0-rc.2 // indirect |
There was a problem hiding this comment.
The addition of go.yaml.in/yaml/v4 v4.0.0-rc.2 as an indirect dependency is concerning. This package uses a non-standard import path (go.yaml.in instead of the official gopkg.in) and is currently in a release candidate state. While it appears to be a dependency of pb33f/ordered-map, using an experimental and non-canonical version of a core library like YAML introduces potential supply chain risks and stability concerns. It is recommended to investigate if this dependency can be replaced with a stable, official version of the YAML package (e.g., gopkg.in/yaml.v3).
818b6e5 to
c48b60a
Compare
|
/gcbrun |
c48b60a to
3bc6596
Compare
|
/gcbrun |
3bc6596 to
acfdf27
Compare
|
/gcbrun |
acfdf27 to
5dfe958
Compare
|
/gcbrun |
5dfe958 to
5a4f032
Compare
|
/gcbrun |
5a4f032 to
68bb0e2
Compare
|
/gcbrun |
68bb0e2 to
cff6138
Compare
|
/gcbrun |
cff6138 to
40d3ac7
Compare
|
/gcbrun |
40d3ac7 to
08a0e65
Compare
|
/gcbrun |
08a0e65 to
dd225e4
Compare
|
/gcbrun |
dd225e4 to
0f012b2
Compare
|
/gcbrun |
0f012b2 to
b85d912
Compare
|
/gcbrun |
80da3fc to
4852b56
Compare
|
/gcbrun |
4852b56 to
92c17a4
Compare
|
/gcbrun |
92c17a4 to
5ac30a5
Compare
|
/gcbrun |
5ac30a5 to
f969ccc
Compare
|
/gcbrun |
f969ccc to
1ff37d6
Compare
|
/gcbrun |
1ff37d6 to
b73e22f
Compare
|
/gcbrun |
b73e22f to
a4e36f7
Compare
|
/gcbrun |
a4e36f7 to
bcb4c49
Compare
|
/gcbrun |
bcb4c49 to
14128de
Compare
|
/gcbrun |
14128de to
e68d6ae
Compare
|
/gcbrun |
e68d6ae to
1048ee1
Compare
|
/gcbrun |
1048ee1 to
98b5bb3
Compare
|
/gcbrun |
98b5bb3 to
3afa54c
Compare
|
/gcbrun |
3afa54c to
1c306a0
Compare
|
/gcbrun |
This PR contains the following updates:
v0.13.0→v0.14.0Release Notes
invopop/jsonschema (github.com/invopop/jsonschema)
v0.14.0Compare Source
What's Changed
New Contributors
Full Changelog: invopop/jsonschema@v0.13.0...v0.14.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.