Skip to content

chore(deps): bump golang.org/x/tools from 0.41.0 to 0.42.0 - #1771

Merged
gambol99 merged 1 commit into
developfrom
dependabot/go_modules/develop/golang.org/x/tools-0.42.0
Feb 12, 2026
Merged

chore(deps): bump golang.org/x/tools from 0.41.0 to 0.42.0#1771
gambol99 merged 1 commit into
developfrom
dependabot/go_modules/develop/golang.org/x/tools-0.42.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Feb 10, 2026

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/tools from 0.41.0 to 0.42.0.

Commits
  • 009367f go.mod: update golang.org/x dependencies
  • 2182926 go/ast/inspector: add Cursor.ParentEdge{Kind,Index} methods
  • 27020ac internal/server: add module upgrade pathway after vulncheck scanning
  • c4ec0f5 internal/server: list vulnerabilities within vulncheck prompt
  • 80d1715 gopls/internal/protocol: add document uri field type
  • 0e23509 gopls/doc: update link to Acme LSP plugin
  • 7b3ed75 gopls/internal/server: respect SemanticTokens option during initialization
  • fddd4a6 gopls/filecache: prevent premature CAS file eviction
  • e3a69ff gopls/internal/golang: refactor.inline.variable: add parens
  • 955d132 gopls/internal/golang: migrate pkgdoc to cursor
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot
chore(deps): bump golang.org/x/tools from 0.41.0 to 0.42.0
0d779ff 
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.41.0 to 0.42.0.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 10, 2026
@dependabot
dependabot Bot requested a review from gambol99 as a code owner February 10, 2026 03:07
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 10, 2026
@gambol99
gambol99 merged commit f55144b into develop Feb 12, 2026
10 checks passed
@gambol99
gambol99 deleted the dependabot/go_modules/develop/golang.org/x/tools-0.42.0 branch February 12, 2026 17:43
gambol99 pushed a commit that referenced this pull request Sep 17, 2026
@dependabot @gambol99
chore(deps): bump golang.org/x/tools from 0.41.0 to 0.42.0 (#1771)
311fe6c 
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.41.0 to 0.42.0.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
gambol99 pushed a commit that referenced this pull request Sep 17, 2026
@dependabot @gambol99
chore(deps): bump golang.org/x/tools from 0.41.0 to 0.42.0 (#1771)
61fb626 
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.41.0 to 0.42.0.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
gambol99 pushed a commit that referenced this pull request Sep 17, 2026
@mrsheepuk @dependabot
chore(deps): consolidate outstanding dependency updates for single-pa…
ddba48f 
…ss testing (#1797)

* Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.279.2 to 1.280.0 (#1756)

Dependabot couldn't find the original pull request head commit, 34300db.

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.280.0 to 1.281.0 (#1759)

chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2

Bumps [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) from 1.280.0 to 1.281.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/ec2/v1.280.0...service/ec2/v1.281.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-version: 1.281.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/onsi/ginkgo/v2 from 2.27.5 to 2.28.1 (#1766)

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.27.5 to 2.28.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.27.5...v2.28.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.28.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.281.0 to 1.285.0 (#1764)

chore(deps): bump github.com/aws/aws-sdk-go-v2/service/ec2

Bumps [github.com/aws/aws-sdk-go-v2/service/ec2](https://github.com/aws/aws-sdk-go-v2) from 1.281.0 to 1.285.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/ec2/v1.281.0...service/ec2/v1.285.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ec2
  dependency-version: 1.285.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/onsi/gomega from 1.39.0 to 1.39.1 (#1765)

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.39.0 to 1.39.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.39.0...v1.39.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.39.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/aws/aws-sdk-go-v2/service/eks from 1.77.0 to 1.77.1 (#1770)

chore(deps): bump github.com/aws/aws-sdk-go-v2/service/eks

Bumps [github.com/aws/aws-sdk-go-v2/service/eks](https://github.com/aws/aws-sdk-go-v2) from 1.77.0 to 1.77.1.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.77.0...service/s3/v1.77.1)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/eks
  dependency-version: 1.77.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump golang.org/x/oauth2 from 0.34.0 to 0.35.0 (#1769)

Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.34.0 to 0.35.0.
- [Commits](golang/oauth2@v0.34.0...v0.35.0)

---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
  dependency-version: 0.35.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump k8s.io/cli-runtime from 0.35.0 to 0.35.1 (#1773)

Bumps [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) from 0.35.0 to 0.35.1.
- [Commits](kubernetes/cli-runtime@v0.35.0...v0.35.1)

---
updated-dependencies:
- dependency-name: k8s.io/cli-runtime
  dependency-version: 0.35.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/aws/aws-sdk-go-v2/service/eks from 1.77.1 to 1.79.0 (#1772)

chore(deps): bump github.com/aws/aws-sdk-go-v2/service/eks

Bumps [github.com/aws/aws-sdk-go-v2/service/eks](https://github.com/aws/aws-sdk-go-v2) from 1.77.1 to 1.79.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.77.1...service/s3/v1.79.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/eks
  dependency-version: 1.79.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump golang.org/x/tools from 0.41.0 to 0.42.0 (#1771)

Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.41.0 to 0.42.0.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.41.0...v0.42.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump docker/build-push-action from 6.18.0 to 6.19.2 (#1777)

Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.18.0 to 6.19.2.
- [Release notes](https://github.com/docker/build-push-action/releases)
- [Commits](docker/build-push-action@v6.18.0...v6.19.2)

---
updated-dependencies:
- dependency-name: docker/build-push-action
  dependency-version: 6.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/aws/aws-sdk-go-v2/service/eks from 1.79.0 to 1.80.0 (#1776)

chore(deps): bump github.com/aws/aws-sdk-go-v2/service/eks

Bumps [github.com/aws/aws-sdk-go-v2/service/eks](https://github.com/aws/aws-sdk-go-v2) from 1.79.0 to 1.80.0.
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.79.0...service/s3/v1.80.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/eks
  dependency-version: 1.80.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump k8s.io/code-generator from 0.35.0 to 0.35.1 (#1775)

Bumps [k8s.io/code-generator](https://github.com/kubernetes/code-generator) from 0.35.0 to 0.35.1.
- [Commits](kubernetes/code-generator@v0.35.0...v0.35.1)

---
updated-dependencies:
- dependency-name: k8s.io/code-generator
  dependency-version: 0.35.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump github.com/aws/smithy-go from 1.24.0 to 1.24.1 (#1778)

Bumps [github.com/aws/smithy-go](https://github.com/aws/smithy-go) from 1.24.0 to 1.24.1.
- [Release notes](https://github.com/aws/smithy-go/releases)
- [Changelog](https://github.com/aws/smithy-go/blob/main/CHANGELOG.md)
- [Commits](aws/smithy-go@v1.24.0...v1.24.1)

---
updated-dependencies:
- dependency-name: github.com/aws/smithy-go
  dependency-version: 1.24.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump docker/metadata-action from 5.10.0 to 6.0.0 (#1786)

Bumps [docker/metadata-action](https://github.com/docker/metadata-action) from 5.10.0 to 6.0.0.
- [Release notes](https://github.com/docker/metadata-action/releases)
- [Commits](docker/metadata-action@v5.10.0...v6.0.0)

---
updated-dependencies:
- dependency-name: docker/metadata-action
  dependency-version: 6.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump go modules and clear outstanding security advisories

Consolidates the outstanding dependency updates against develop so they can be
tested as a single change set (the go_modules PRs all rewrite go.mod/go.sum and
vendor/ and cannot be merged independently without conflicts).

Dependabot batch:
- github.com/aws/aws-sdk-go-v2/service/ec2 v1.285.0 => v1.294.0
- github.com/aws/aws-sdk-go-v2 v1.41.1 => v1.41.5 (raised from v1.41.3 by the
  security sweep below)
- github.com/aws/smithy-go v1.24.1 => v1.24.2
- sigs.k8s.io/controller-runtime v0.22.4 => v0.23.3
- go.opentelemetry.io/otel{,/metric,/trace} v1.39.0 => v1.44.0
- go.opentelemetry.io/otel{,/sdk/metric} v1.39.0 => v1.44.0

Security advisories cleared (minimum fixed versions, staying on the go1.25
toolchain):
- golang.org/x/crypto v0.48.0 => v0.55.0 (7 critical advisories)
- google.golang.org/grpc v1.78.0 => v1.83.2 (4 advisories, 1 critical)
- golang.org/x/net v0.50.0 => v0.58.0
- github.com/hashicorp/go-getter v1.8.4 => v1.8.6 (direct dependency)
- github.com/go-jose/go-jose/v4 v4.1.3 => v4.1.4
- github.com/aws/aws-sdk-go-v2/service/s3 v1.95.0 => v1.97.3
- github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.7.4 => v1.7.8
- go.mongodb.org/mongo-driver v1.17.4 => v1.17.7

The otel bump goes to v1.44.0 rather than the v1.40.0 dependabot proposed, as
1.40.0 is still inside two open advisory ranges (otel <= 1.40.0, otel/sdk
<= 1.42.0). go-getter v1.8.6 requires go 1.25.8, which raises the go directive
from 1.25.0 to 1.25.8 (the redundant toolchain pin is dropped).

Regenerated with `go get`, `go mod tidy` and `go mod vendor`.

* refactor(webhooks): adapt to the controller-runtime 0.23 admission API

controller-runtime 0.23 deprecates the runtime.Object shaped webhook
interfaces, which `make golangci-lint` (staticcheck SA1019) rejects.

- admission.CustomValidator/CustomDefaulter => admission.Validator[T]/Defaulter[T]
  with the concrete resource type, so the type assertion is done by the type
  system rather than at request time
- admission.WithCustomValidator/WithCustomDefaulter => WithValidator/WithDefaulter
  (the resource object is now derived from T)
- drop the now impossible "expected a X, but got: Y" test cases; the mismatch
  can no longer be constructed
- mgr.GetEventRecorderFor is deprecated in favour of the events.k8s.io backed
  mgr.GetEventRecorder. That migration changes event RBAC and the Eventf call
  sites, so it is deliberately deferred here and the 8 call sites carry a scoped
  //nolint:staticcheck with a TODO instead. Behaviour is unchanged.

* chore(ci): bump docker and artifact action majors

- docker/login-action v3 => v4 (images.yaml)
- docker/build-push-action v6.19.2 => v7.0.0 (e2e.yaml, images.yaml)
- docker/setup-buildx-action v3 => v4 (e2e.yaml; images.yaml already on v4.3.0)
- actions/upload-artifact v6 => v7 (e2e.yaml)
- actions/download-artifact v7 => v8 (e2e.yaml)

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@gambol99 gambol99 Awaiting requested review from gambol99 gambol99 is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@gambol99