[scality-renovate]

This PR contains the following updates:

Package	Type	Update	Change
go (source)	golang	patch	1.27.2 → 1.27.3
golang (source)	stage	digest	8201530 → 6f1acc8
golangci/golangci-lint		minor	v2.14.0 → v2.15.0
golangci/golangci-lint	uses-with	minor	v2.14.0 → v2.15.0
kubernetes-sigs/controller-tools		minor	v0.22.0 → v0.23.0

---

Release Notes

golangci/golangci-lint

v2.15.0

Compare Source

Released on 2026-10-16

1. Linters new features or changes
   • errcheck: from 1.20.0 to 1.30.0
   • exhaustive: from 0.13.0 to 0.15.0 (⚠️ changes)
   • gocognit: from 1.2.1 to 1.3.0
   • golines: from 0.15.0 to 0.16.0
   • govet-modernize: from 0.50.0 to 0.52.0
   • loggercheck: from 0.12.0 to 0.13.0
   • predeclared: from 0.2.2 to 0.3.0
   • wrapcheck: from 2.12.0 to 2.13.0
2. Linters bug fixes
   • bidichk: from 0.3.3 to 0.3.4
   • canonicalheader: from a25c71c to e18e5c5
   • gofumpt: improve deprecation logs
   • gosec: improve concurrency default value
   • iface: from 1.5.1 to 1.5.3
   • paralleltest: from 1.0.15 to 1.0.16
   • revive: from 1.17.0 to 1.17.1
   • revive: the rules context-keys-type, errorf, modifies-value-receiver, range-val-address, string-of-int, time-equal, time-naming, unexported-return, unhandled-error, var-declaration are working (less randomly).
   • rowserrcheck: from c5f79b8 to e0740d5
   • staticcheck: from 0.8.1 to 0.8.2
3. Bug fixes
   • fix: compute custom version hash with module versions
   • fix: env vars loading (related to revive)

⚠️ Changes of the exhaustive linter:

• The replaced options still exists, and partially works, but they are deprecated.
• The options explicit-exhaustive-switch and explicit-exhaustive-map have been replaced by explicit-exhaustive.
• The check the value map has been replaced by mapliteral.
• The option ignore-enum-members (string) has been replaced by ignore-constants (slice).
• The option ignore-enum-types (string) has been replaced by ignore-types (slice).
• New report messages.
• The linter is a now a "slow" linter.

kubernetes-sigs/controller-tools

v0.23.0

Compare Source

This is an additional minor release independent of the Kubernetes release cadence to deliver
#​1474 because this bug fix is a breaking change so it was not possible to backport it.

What's Changed

• ✨ Add option to omit controller-gen version in generated output by @​pedjak in #​1437
• 🐛 Fix +listType marker not working on type alias fields by @​sivchari in #​1359
• 🐛 Inject min boundaries for +k8s:required on strings, maps, and slices by @​lalitc375 in #​1458
• 🐛 crd: support Kubernetes declarative validation bounds by @​kannon92 in #​1474

Dependency bumps

• 🌱 Bump github.com/onsi/gomega from 1.43.1 to 1.44.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1480
• 🌱 Bump golang.org/x/tools from 0.50.0 to 0.51.0 in the all-go-mod-patch-and-minor group by @​dependabot[bot] in #​1487
• 🌱 Bump golangci-lint to v2.14.0 and enable promlinter, reassign linters by @​dongjiang1989 in #​1488
• 🌱 Bump sigs.k8s.io/controller-runtime from v0.24.0 to v0.25.0 by @​dongjiang1989 in #​1476
• 🌱 Bump softprops/action-gh-release from 3.0.2 to 3.0.3 in the all-github-actions group by @​dependabot[bot] in #​1475
• 🌱 Bump the all-go-mod-patch-and-minor group across 1 directory with 3 updates by @​dependabot[bot] in #​1478

Full Changelog: kubernetes-sigs/controller-tools@v0.22.0...v0.23.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

Dependency Bump Evaluation

PR updates 4 dependencies across go.mod, Dockerfile, Makefile, and .github/workflows/pre-merge.yaml.

1. Go 1.27.2 → 1.27.3 (patch)

Breaking changes: None
Security concerns: None — Go patch releases contain bug fixes and security patches
Impact on codebase: go.mod version directive updated; Docker base image digest updated to match

2. golangci/golangci-lint v2.14.0 → v2.15.0 (minor)

Changes:

• Linter version bumps: errcheck 1.20.0→1.30.0, revive 1.17.0→1.17.1, staticcheck 0.8.1→0.8.2, and others
• ⚠️ exhaustive linter options renamed/deprecated
• Bug fixes for revive rules, gosec concurrency defaults, env vars loading

Breaking changes: exhaustive linter option deprecations — does not affect this project (linter is not enabled in .golangci.yml)
Security concerns: None — dev-time linting tool, not a runtime dependency
Impact on codebase: The project uses errcheck, revive, staticcheck, and govet, all of which received updates. The errcheck jump (1.20.0→1.30.0) is the largest and could surface new lint findings. The revive bug fix makes several rules work more consistently, which could also flag previously-missed issues. CI lint check will validate.

3. kubernetes-sigs/controller-tools v0.22.0 → v0.23.0 (minor)

Changes:

• Bug fix: +listType marker on type alias fields
• Bug fix: +k8s:required injects min boundaries on strings, maps, slices
• New: option to omit controller-gen version in generated output
• Support for Kubernetes declarative validation bounds

Breaking changes: The +k8s:required boundary injection is noted as a breaking bugfix (could not be backported). This could change generated CRD validation schemas if the project uses +k8s:required markers on string/map/slice fields.
Security concerns: None — build-time code generation tool
Impact on codebase: Used for CRD and deepcopy generation. The go-generate CI check passed successfully, indicating generated code is consistent.

CI Status

• ✅ go-generate — SUCCESS
• ✅ test-e2e — SUCCESS
• ✅ renovate/stability-days — SUCCESS
• 🔄 build, lint, test — IN PROGRESS

Overall Assessment

Recommendation: SAFE TO MERGE (once CI is green)

All changes are to build/dev tooling, not runtime dependencies. The exhaustive breaking change is irrelevant (linter not enabled). The errcheck and revive updates could surface new lint findings — the running lint CI check will confirm compatibility. The controller-tools +k8s:required bugfix may affect generated CRDs but go-generate already passed.

— Claude Code