🚨 Update go modules (main) (major)

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/santhosh-tekuri/jsonschema/v5	v5.3.1 → v6.0.3
sigs.k8s.io/kustomize/kustomize/v4	v4.5.7 → v5.8.1

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

santhosh-tekuri/jsonschema (github.com/santhosh-tekuri/jsonschema/v5)

v6.0.3

Compare Source

v6.0.2

Compare Source

v6.0.1

Compare Source

Bug Fixes:

• fix/schema: field RecursiveRef misspelled
• fix/schema: missing Deprecated field

check https://redirect.github.com/santhosh-tekuri/jsonschema/discussions/172 to see notes for migrating from v5 to v6

v6.0.0

Compare Source

Improvements

• mixed dialect support
• custom $vocabulary support
• sermver format
• support for localisation for ValidationError
• command jv
  • support stdin
  • --insecure and --cacert flag
  • --quiet flag

check https://redirect.github.com/santhosh-tekuri/jsonschema/discussions/172 to see notes for migrating from v5 to v6

kubernetes-sigs/kustomize (sigs.k8s.io/kustomize/kustomize/v4)

v5.8.0

IMPORTANT NOTICE: REGRESSION

Due to the new features introduced in this release, a regression has occurred in the functionality that propagates namespaces to child kustomizations.
We are currently preparing a patch release, so please refrain from making changes to this version.

#​6031 (comment)

Highlights

implements to replacements value in the structured data

Now, We can edit yaml/json in yaml manifests with replacements transformer.
See #​5679

For example

## source
apiVersion: v1
kind: ConfigMap
metadata:
  name: source-configmap
data:
  HOSTNAME: www.example.com
---
apiVersion: v1
kind: ConfigMap
metadata:
  name: target-configmap
data:
  config.json: |-
    {"config": {
      "id": "42",
      "hostname": "REPLACE_TARGET_HOSTNAME"
    }}

## replacement
replacements:
- source:
    kind: ConfigMap
    name: source-configmap
    fieldPath: data.HOSTNAME
  targets:
  - select:
      kind: ConfigMap
      name: target-configmap
    fieldPaths:
    - data.config\.json.config.hostname

fix: Propagate Namespace correctly to Helm

The long-standing bug where kustomize's namespace transformer did not pass namespaces to helmCharts has been fixed.
See #​5940

For example

## define namespace
namespace: any-namespace

helmCharts:
- name: minecraft
  repo: https://kubernetes-charts.storage.googleapis.com
  version: v1.2.0
  # namespace: any-namespace   ## propagates without additional namespace specific
  valuesFile: values.yaml

Feature

#​5679: implements to replacements value in the structured data
#​5863: Add regex support for Replacement selectors
#​5930: feat: add PatchArgs API type to populate patch options

fix

#​5940: fix: Propagate Namespace correctly to Helm
#​5971: fix: performance recession when propagating namespace to helm
#​5942: fix fnplugin storagemounts validation
#​5958: fix: make AbsorbAll conflict error more verbose
#​5961: refactor: nested format string
#​5967: Fix infinite loop in HTTP client by validating URLs before requests
#​5985: fix(kyaml/yaml): minor nil safety fix for RNode.Content etc
#​5991: Fix duplicate key error when adding multiple labels with --without-selector

Dependencies

#​5962: chore: update dependencies from security alert
#​5959: update go 1.24.6

chore

#​6007: Update kyaml to v0.21.0
#​6008: Update cmd/config to v0.21.0
#​6009: Update api to v0.21.0

v5.7.1

This release introduces code to replace the shlex library used for parsing arguments in the exec plugin.
If any existing manifests become corrupted, please file an issue. discussion: kubernetes/kubernetes#132593 (comment)

Dependencies

#​5943: drop shlex dependency

Chore

#​5948: Update kyaml to v0.20.1
#​5949: Update cmd/config to v0.20.1
#​5950: Update api to v0.20.1

v5.7.0

Feature

#​5630: Add static value source for replacement
#​5921: feat: Add images suport for Image Volumes
#​5771: fix: Allow patches with empty files with multiple newlines or comments
#​5865: feat(helm): allow the use of devel alias for helmcharts

fix

#​5846: fix: Get version from the BuildInfo.Main.Version if not found in deps and build flag
#​5859: fix: Don't panic on multiple $patch: delete strategic merge patches in a single patch file
#​5877: fix: make private one field in replacements transformer struct that had a missing JSON tag

Dependencies

#​5847: replace deplecated package github.com/google/shlex with github.com/carapace-sh/carapace-shlex
#​5873: Bump to github.com/spf13/viper v1.20.0
#​5931: Drop usage of forked copies of goyaml.v2 and goyaml.v3

chore

#​5882: Set Git messages to English for TestRemoteLoad_LocalProtocol
#​5934: Update kyaml to v0.20.0
#​5935: Update cmd/config to v0.20.0
#​5936: Update api to v0.20.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • Between 12:00 AM and 03:59 AM (* 0-3 * * *)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 24 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.23 -> 1.24.0
github.com/go-errors/errors	v1.0.1 -> v1.4.2
github.com/go-logr/logr	v1.3.0 -> v1.4.2
github.com/go-openapi/jsonpointer	v0.19.6 -> v0.21.0
github.com/go-openapi/swag	v0.22.3 -> v0.23.0
github.com/google/gnostic-models	v0.6.8 -> v0.6.9
github.com/google/uuid	v1.3.0 -> v1.6.0
github.com/spf13/cobra	v1.8.0 -> v1.9.1
github.com/spf13/pflag	v1.0.6-0.20210604193023-d5e0c0615ace -> v1.0.6
github.com/xlab/treeprint	v1.1.0 -> v1.2.0
golang.org/x/crypto	v0.21.0 -> v0.40.0
golang.org/x/mod	v0.16.0 -> v0.26.0
golang.org/x/net	v0.23.0 -> v0.42.0
golang.org/x/sys	v0.18.0 -> v0.35.0
golang.org/x/text	v0.14.0 -> v0.28.0
golang.org/x/tools	v0.19.0 -> v0.35.0
google.golang.org/protobuf	v1.33.0 -> v1.36.5
k8s.io/klog/v2	v2.110.1 -> v2.130.1
k8s.io/kube-openapi	v0.0.0-20231010175941-2dd684a91f00 -> v0.0.0-20241212222426-2c72e554b1e7
k8s.io/utils	v0.0.0-20230726121419-3b25d923346b -> v0.0.0-20240711033017-18e509b52bc8
sigs.k8s.io/kustomize/api	v0.12.1 -> v0.21.0
sigs.k8s.io/kustomize/cmd/config	v0.10.9 -> v0.21.0
sigs.k8s.io/kustomize/kyaml	v0.13.9 -> v0.21.0
sigs.k8s.io/structured-merge-diff/v4	v4.4.1 -> v4.4.2
sigs.k8s.io/yaml	v1.4.0 -> v1.5.0

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.

Flag	Coverage Δ
unit-tests	0.96% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[renovate]

ℹ️ Artifact update notice

File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 24 additional dependencies were updated
• The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=5 days

Details:

Package	Change
go	1.23 -> 1.24.0
github.com/go-errors/errors	v1.0.1 -> v1.4.2
github.com/go-logr/logr	v1.3.0 -> v1.4.2
github.com/go-openapi/jsonpointer	v0.19.6 -> v0.21.0
github.com/go-openapi/swag	v0.22.3 -> v0.23.0
github.com/google/gnostic-models	v0.6.8 -> v0.6.9
github.com/google/uuid	v1.3.0 -> v1.6.0
github.com/spf13/cobra	v1.8.0 -> v1.9.1
github.com/spf13/pflag	v1.0.6-0.20210604193023-d5e0c0615ace -> v1.0.6
github.com/xlab/treeprint	v1.1.0 -> v1.2.0
golang.org/x/crypto	v0.21.0 -> v0.40.0
golang.org/x/mod	v0.16.0 -> v0.26.0
golang.org/x/net	v0.23.0 -> v0.42.0
golang.org/x/sys	v0.18.0 -> v0.35.0
golang.org/x/text	v0.14.0 -> v0.28.0
golang.org/x/tools	v0.19.0 -> v0.35.0
google.golang.org/protobuf	v1.33.0 -> v1.36.5
k8s.io/klog/v2	v2.110.1 -> v2.130.1
k8s.io/kube-openapi	v0.0.0-20231010175941-2dd684a91f00 -> v0.0.0-20241212222426-2c72e554b1e7
k8s.io/utils	v0.0.0-20230726121419-3b25d923346b -> v0.0.0-20240711033017-18e509b52bc8
sigs.k8s.io/kustomize/api	v0.12.1 -> v0.21.1
sigs.k8s.io/kustomize/cmd/config	v0.10.9 -> v0.21.1
sigs.k8s.io/kustomize/kyaml	v0.13.9 -> v0.21.1
sigs.k8s.io/structured-merge-diff/v4	v4.4.1 -> v4.4.2
sigs.k8s.io/yaml	v1.4.0 -> v1.5.0

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Advanced

Run ID: bab5bcd4-0769-4817-99f6-c441ab931f74

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}