Skip to content

Bump google.golang.org/api from 0.257.0 to 0.269.0#1027

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/api-0.269.0
Closed

Bump google.golang.org/api from 0.257.0 to 0.269.0#1027
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/api-0.269.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Mar 2, 2026

Bumps google.golang.org/api from 0.257.0 to 0.269.0.

Release notes

Sourced from google.golang.org/api's releases.

v0.269.0

0.269.0 (2026-02-24)

Features

Bug Fixes

  • generator: Handle preview version pkg name (#3511) (2a249ce)

v0.268.0

0.268.0 (2026-02-23)

Features

v0.267.0

0.267.0 (2026-02-17)

Features

v0.266.0

0.266.0 (2026-02-10)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.269.0 (2026-02-24)

Features

Bug Fixes

  • generator: Handle preview version pkg name (#3511) (2a249ce)

0.268.0 (2026-02-23)

Features

0.267.0 (2026-02-17)

Features

0.266.0 (2026-02-10)

Features

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 2, 2026
@openshift-ci openshift-ci Bot requested a review from rcampos2029 March 2, 2026 08:58
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Mar 2, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign rcampos2029 for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Mar 2, 2026

Walkthrough

Bump Go toolchain from go1.24.13 to go1.25.0 and update direct and indirect dependency versions in go.mod; no public API or exported-symbol changes reported.

Changes

Cohort / File(s) Summary
Go Dependency Management
go.mod
Upgrade Go toolchain (go1.24.13 → go1.25.0). Update direct deps: github.com/googleapis/gax-go/v2 v2.16.0→v2.17.0, golang.org/x/term v0.39.0→v0.40.0, golang.org/x/text v0.33.0→v0.34.0, google.golang.org/api v0.257.0→v0.269.0, google.golang.org/grpc v1.77.0→v1.79.1. Update indirect/transitive deps: cloud.google.com/go/auth v0.18.0→v0.18.2, googleapis enterprise-certificate-proxy v0.3.7→v0.3.12, golang.org/x/crypto v0.47.0→v0.48.0, golang.org/x/net v0.49.0→v0.50.0, golang.org/x/oauth2 v0.34.0→v0.35.0, golang.org/x/sys v0.40.0→v0.41.0, and updated google.golang.org/genproto pseudo-versions (various).

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately summarizes the main change: bumping the google.golang.org/api dependency from 0.257.0 to 0.269.0, which is the primary focus of the changeset.
Description check ✅ Passed The description is directly related to the changeset, providing Dependabot release notes, changelog entries, and commits for the google.golang.org/api version bump from 0.257.0 to 0.269.0.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Post copyable unit tests in a comment
  • Commit unit tests in branch dependabot/go_modules/google.golang.org/api-0.269.0

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Mar 2, 2026
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Mar 2, 2026

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift-online member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@go.mod`:
- Line 3: go.mod currently declares "go 1.25.0" which conflicts with CI that
only tests Go 1.22–1.23; either update the CI matrices to include Go 1.25 or
downgrade the module version to the lowest tested version. Fix option A: add
"1.25" to the Go version lists in the workflow files referenced
(check-pull-request.yaml and publish-release.yaml) so CI covers 1.22, 1.23, and
1.25; or Fix option B: change the go directive in go.mod from 1.25.0 back to
1.22 to match the existing CI matrix. Ensure the chosen change is applied
consistently across go.mod and the GitHub Actions workflow matrices.

ℹ️ Review info

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Cache: Disabled due to data retention organization setting

Knowledge base: Disabled due to Reviews -> Disable Knowledge Base setting

📥 Commits

Reviewing files that changed from the base of the PR and between bf148ad and 4411e06.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

Comment thread go.mod
module github.com/openshift-online/ocm-cli

go 1.24.6
go 1.25.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Verify whether repository tooling and CI are aligned with Go 1.25.0

set -euo pipefail

echo "== go.mod directive =="
rg -n '^go\s+[0-9]+\.[0-9]+(\.[0-9]+)?$' go.mod

echo
echo "== CI / workflow Go versions =="
fd -H -t f '.*\.(yml|yaml)$' .github/workflows 2>/dev/null | xargs -r rg -n 'go-version|setup-go|golang:|GOTOOLCHAIN|GO_VERSION' || echo "No matches found"

echo
echo "== Docker/Container Go base images =="
fd -H -t f 'Dockerfile.*|Dockerfile' . 2>/dev/null | xargs -r rg -n 'golang:[0-9]+\.[0-9]+' || echo "No matches found"

echo
echo "== Makefile / scripts pinned Go versions =="
fd -H -t f 'Makefile|.*\.mk|.*\.sh' . 2>/dev/null | xargs -r rg -n '1\.24|1\.25|GO_VERSION|GOTOOLCHAIN|go[[:space:]]+test|go[[:space:]]+build' || echo "No matches found"

Repository: openshift-online/ocm-cli

Length of output: 834


🏁 Script executed:

#!/bin/bash
# Check recent commits and PR description for context

echo "== Recent commits touching go.mod =="
git log --oneline -10 -- go.mod 2>/dev/null || echo "Git history unavailable"

echo
echo "== Full go.mod first 20 lines =="
head -20 go.mod

Repository: openshift-online/ocm-cli

Length of output: 843


Resolve Go version mismatch: go.mod declares 1.25.0 but CI tests only 1.22–1.23

Line 3 sets go 1.25.0 as the module minimum, yet CI workflows test only against Go 1.22 and 1.23. This violates Go module semantics—the declared minimum must match the lowest tested version. Either:

  1. Add Go 1.25 to the CI test matrix (check-pull-request.yaml and publish-release.yaml), or
  2. Revert go.mod to go 1.22 (the actual minimum tested version)

This change appears unintentional; the commit bumps google.golang.org/api dependency only.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@go.mod` at line 3, go.mod currently declares "go 1.25.0" which conflicts with
CI that only tests Go 1.22–1.23; either update the CI matrices to include Go
1.25 or downgrade the module version to the lowest tested version. Fix option A:
add "1.25" to the Go version lists in the workflow files referenced
(check-pull-request.yaml and publish-release.yaml) so CI covers 1.22, 1.23, and
1.25; or Fix option B: change the go directive in go.mod from 1.25.0 back to
1.22 to match the existing CI matrix. Ensure the chosen change is applied
consistently across go.mod and the GitHub Actions workflow matrices.

@openshift-merge-robot openshift-merge-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Mar 3, 2026
@openshift-merge-robot
Copy link
Copy Markdown
Collaborator

rebase

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.257.0 to 0.269.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.257.0...v0.269.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.269.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/google.golang.org/api-0.269.0 branch from 4411e06 to 50eb178 Compare March 3, 2026 22:24
@openshift-merge-robot openshift-merge-robot removed the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Mar 3, 2026
Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

♻️ Duplicate comments (1)
go.mod (1)

3-3: ⚠️ Potential issue | 🟠 Major

Go version mismatch: go.mod declares 1.25.0 but CI likely tests older versions

The Go toolchain has been bumped to 1.25.0, but this may be inconsistent with the CI test matrix which likely tests against Go 1.22 and 1.23 only. This mismatch violates Go module semantics where the declared minimum version should match the lowest tested version.

Either add Go 1.25 to the CI workflow matrices, or revert the go directive to match the minimum version actually tested in CI. This change appears incidental to the google.golang.org/api dependency bump and may be unintentional.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@go.mod` at line 3, The go.mod "go" directive was bumped to 1.25.0 but CI
likely still tests older Go versions; either update CI workflows to include Go
1.25 in the matrix, or revert the go.mod directive back to the minimum Go
version supported by CI (e.g., 1.22 or 1.23) so the declared module version
matches the lowest tested version; locate and modify the "go 1.25.0" directive
in go.mod or update the CI matrix entries that reference tested Go versions to
include 1.25.0 accordingly.
🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Duplicate comments:
In `@go.mod`:
- Line 3: The go.mod "go" directive was bumped to 1.25.0 but CI likely still
tests older Go versions; either update CI workflows to include Go 1.25 in the
matrix, or revert the go.mod directive back to the minimum Go version supported
by CI (e.g., 1.22 or 1.23) so the declared module version matches the lowest
tested version; locate and modify the "go 1.25.0" directive in go.mod or update
the CI matrix entries that reference tested Go versions to include 1.25.0
accordingly.

ℹ️ Review info

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro

Cache: Disabled due to data retention organization setting

Knowledge base: Disabled due to Reviews -> Disable Knowledge Base setting

📥 Commits

Reviewing files that changed from the base of the PR and between 4411e06 and 50eb178.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot Bot commented on behalf of github Mar 16, 2026

Superseded by #1050.

@dependabot dependabot Bot closed this Mar 16, 2026
@dependabot dependabot Bot deleted the dependabot/go_modules/google.golang.org/api-0.269.0 branch March 16, 2026 08:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant