build(deps): bump github.com/openshift-online/ocm-cli from 1.0.10 to 1.0.11 by dependabot[bot] · Pull Request #891 · openshift/backplane-cli

dependabot · 2026-02-16T00:21:00Z

Bumps github.com/openshift-online/ocm-cli from 1.0.10 to 1.0.11.

Release notes

Sourced from github.com/openshift-online/ocm-cli's releases.

Release 1.0.11

Update CHANGES.md (#944)

chore | updating konflux pipeline refs (#947)

add validation retry for gcp service account file prompts (#948)

add authentication type on cluster describe (#949)

fix(deps): update module github.com/openshift-online/ocm-common to v0.0.34 (#938)

fix(deps): update module github.com/openshift-online/ocm-sdk-go to v0.1.486 (#945)

bump konflux references (#952)

Bump golang.org/x/crypto from 0.31.0 to 0.45.0 (#936)

fix(deps): update module github.com/openshift/rosa to v1.2.60 (#950)

Update dependencies.

chore(deps): update github.com/planetscale/vtprotobuf digest to ba97887

chore(deps): update aws-sdk-go-v2 monorepo

chore(deps): update module github.com/godbus/dbus/v5 to v5.2.2

chore(deps): update module github.com/sirupsen/logrus to v1.9.4

fix(deps): update module github.com/googleapis/gax-go/v2 to v2.16.0

chore(deps): update module github.com/prometheus/common to v0.67.5

chore(deps): update module golang.org/x/tools to v0.41.0

chore(deps): update module golang.org/x/sys to v0.40.0 (#965)

chore(deps): update konflux references (#962)

fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.5 (#960)

fix missing gcp credentials when using --service-account-file (#979)

[OCM-21962](https://issues.redhat.com/browse/OCM-21962) | feat: Support create/edit clusters with channel flag (#1003)

Changelog

Sourced from github.com/openshift-online/ocm-cli's changelog.

1.0.11 Feb 10 2026

Update CHANGES.md (#944)

chore | updating konflux pipeline refs (#947)

add validation retry for gcp service account file prompts (#948)

add authentication type on cluster describe (#949)

fix(deps): update module github.com/openshift-online/ocm-common to v0.0.34 (#938)

fix(deps): update module github.com/openshift-online/ocm-sdk-go to v0.1.486 (#945)

bump konflux references (#952)

Bump golang.org/x/crypto from 0.31.0 to 0.45.0 (#936)

fix(deps): update module github.com/openshift/rosa to v1.2.60 (#950)

Update dependencies.

chore(deps): update github.com/planetscale/vtprotobuf digest to ba97887

chore(deps): update aws-sdk-go-v2 monorepo

chore(deps): update module github.com/godbus/dbus/v5 to v5.2.2

chore(deps): update module github.com/sirupsen/logrus to v1.9.4

fix(deps): update module github.com/googleapis/gax-go/v2 to v2.16.0

chore(deps): update module github.com/prometheus/common to v0.67.5

chore(deps): update module golang.org/x/tools to v0.41.0

chore(deps): update module golang.org/x/sys to v0.40.0 (#965)

chore(deps): update konflux references (#962)

fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.5 (#960)

fix missing gcp credentials when using --service-account-file (#979)

[OCM-21962](https://issues.redhat.com/browse/OCM-21962) | feat: Support create/edit clusters with channel flag (#1003)

Commits

6758645 Release v1.0.11 (#1007)
9384236 [OCM-21962](https://issues.redhat.com/browse/OCM-21962) | feat: Support create/edit clusters with channel flag (#1003)
8cfd3ae fix missing gcp credentials when using --service-account-file (#979)
b464896 Merge pull request #810 from openshift-online/konflux/mintmaker/main/github.c...
c625fe9 Merge pull request #958 from openshift-online/konflux/mintmaker/main/github.c...
d3aab8f Merge pull request #957 from openshift-online/konflux/mintmaker/main/github.c...
707c063 Merge pull request #956 from openshift-online/konflux/mintmaker/main/github.c...
f4a651f Merge pull request #955 from openshift-online/konflux/mintmaker/main/aws-sdk-...
d0c3188 Merge pull request #954 from openshift-online/konflux/mintmaker/main/github.c...
6b5dc3f fix(deps): update module github.com/onsi/ginkgo/v2 to v2.27.5 (#960)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

Chores
- Bumped several direct dependencies, including CLI and core command libraries, and upgraded Kubernetes API machinery.
- Updated, added, and removed many indirect/transitive dependencies (Prometheus, serialization, crypto/encoding, and various Kubernetes-related libraries) to improve compatibility, security, and stability.
- No changes to public APIs or exported declarations.

openshift-ci · 2026-02-16T00:23:45Z

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

openshift-ci · 2026-02-16T00:23:51Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign typeid for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

coderabbitai · 2026-02-18T05:57:03Z

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

@coderabbitai resume to resume automatic reviews.
@coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

▶️ Resume reviews
🔍 Trigger review

Walkthrough

Updated go.mod to bump several direct dependencies (notably ocm-cli, spf13/cobra, k8s.io/apimachinery) and to add, remove, or upgrade numerous indirect/transitive modules; no exported/public API changes detected.

Changes

Cohort / File(s)	Summary
Dependency file `go.mod`	Updated direct requirements: `github.com/openshift-online/ocm-cli` v1.0.10→v1.0.11, `github.com/spf13/cobra` v1.10.1→v1.10.2, `k8s.io/apimachinery` v0.30.3→v0.34.3. Added/updated many indirect deps (e.g., `al.essio.dev/pkg/shellescape` v1.6.0, `fxamacker/cbor/v2` v2.9.0, `sigs.k8s.io/structured-merge-diff/v6` v6.3.0, and others). Multiple transitive version bumps, removals, and replacements across the module graph; no source or public API edits.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately reflects the primary change: bumping ocm-cli from v1.0.10 to v1.0.11, which is the main direct dependency update in the changeset.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Stable And Deterministic Test Names	✅ Passed	This PR only modifies go.mod and go.sum files for dependency updates and does not touch any test files or test definitions.
Test Structure And Quality	✅ Passed	This PR is an automated dependency update that only modifies go.mod and go.sum files. No test files were added, modified, or removed, so test code review is not applicable.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch dependabot/go_modules/github.com/openshift-online/ocm-cli-1.0.11

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

coderabbitai

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@go.mod`:
- Around line 33-36: Update the Kubernetes dependency set so all k8s.io modules
use the same minor version: change the k8s.io/apimachinery entry from v0.34.3 to
v0.30.3 to match k8s.io/api, k8s.io/cli-runtime, and k8s.io/client-go; ensure
go.mod is updated accordingly and run `go mod tidy` to reconcile module graph
and vendor files.

coderabbitai · 2026-02-18T06:05:23Z

go.mod

 	k8s.io/api v0.30.3
-	k8s.io/apimachinery v0.30.3
+	k8s.io/apimachinery v0.34.3
 	k8s.io/cli-runtime v0.30.3
 	k8s.io/client-go v0.30.3


⚠️ Potential issue | 🟠 Major

🧩 Analysis chain

🏁 Script executed:

cat go.mod | head -50

Repository: openshift/backplane-cli

Length of output: 1949

🏁 Script executed:

rg -n "k8s\.io" go.mod

Repository: openshift/backplane-cli

Length of output: 712

🌐 Web query:

kubernetes k8s.io version compatibility requirements apimachinery api client-go alignment

💡 Result:

Pin k8s.io/client-go, k8s.io/apimachinery, and k8s.io/api to the same Kubernetes minor (and ideally same patch) tag. These repos are synced from Kubernetes staging/ and are intended to be consumed as a matched set; mixing minors is a common cause of scheme/serialization/type and generated-client breakage. In particular, client-go explicitly depends on companion libs (apimachinery, api) and says they must be vendored in “correspondingly matching versions”. [1][2]

Recommended alignment rule (Go modules): use the matching semver tags:

Kubernetes v1.X.Y ↔ k8s.io/client-go v0.X.Y (and typically k8s.io/api v0.X.Y, k8s.io/apimachinery v0.X.Y). client-go publishes matching tags and explains that kubernetes-1.X.Y and v0.X.Y correspond to the same staged code. [1]

Do not rely on cross-version API compatibility guarantees for apimachinery (or other k8s.io/* staging libs). apimachinery states there are no compatibility guarantees and that branches track Kubernetes. Treat it as “must match Kubernetes/client-go”. [3]

Cluster compatibility is broader than library compatibility. client-go provides a “compatibility matrix” showing “exact match” vs “skew” behavior across Kubernetes versions, and notes older clients often work with newer clusters due to Kubernetes’ backward compatibility—but that’s separate from the requirement to keep the Go modules (api/apimachinery/client-go) aligned with each other. [1]

Practical requirement: pick one Kubernetes minor X and keep all k8s.io/{client-go,api,apimachinery} at v0.X.* (same X; preferably same patch *) to avoid mismatched generated types/schemes/negotiation code. [1][3]

Sources:
[1] kubernetes/client-go README (versioning + compatibility matrix + matching tags) (github.com)
[2] “Introducing client-go version 6” (client-go requires matching api/apimachinery versions) (kubernetes.io)
[3] pkg.go.dev k8s.io/apimachinery (explicitly: no compatibility guarantees; tracks Kubernetes) (pkg.go.dev)

Citations:

1: https://github.com/kubernetes/client-go?utm_source=openai

2: https://kubernetes.io/blog/2018/01/introducing-client-go-version-6/?utm_source=openai

3: https://pkg.go.dev/k8s.io/apimachinery?utm_source=openai

Kubernetes package version mismatch: align k8s.io/apimachinery with other k8s.io packages.

k8s.io/apimachinery v0.34.3 is misaligned with k8s.io/api v0.30.3, k8s.io/cli-runtime v0.30.3, and k8s.io/client-go v0.30.3. These packages are synced from Kubernetes staging/ and must be consumed as a matched set at the same minor version. Kubernetes explicitly documents that mixing minors is a common cause of scheme, serialization, and type conflicts. Update k8s.io/apimachinery to v0.30.3 to match the others.

🤖 Prompt for AI Agents

Verify each finding against the current code and only fix it if needed. In `@go.mod` around lines 33 - 36, Update the Kubernetes dependency set so all k8s.io modules use the same minor version: change the k8s.io/apimachinery entry from v0.34.3 to v0.30.3 to match k8s.io/api, k8s.io/cli-runtime, and k8s.io/client-go; ensure go.mod is updated accordingly and run `go mod tidy` to reconcile module graph and vendor files.

coderabbitai

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Duplicate comments:
In `@go.mod`:
- Around line 33-36: The go.mod shows a version mismatch: k8s.io/apimachinery is
at v0.34.3 while k8s.io/api, k8s.io/cli-runtime, and k8s.io/client-go are at
v0.30.3; update k8s.io/apimachinery to match the others (set k8s.io/apimachinery
to v0.30.3) or align all k8s.io/* modules to a consistent release (e.g., bump
the three v0.30.3 entries to v0.34.3 if you intend to use the newer API), then
run `go mod tidy` to ensure dependency graph consistency and rebuild to verify
no compatibility errors in code paths using k8s.io/apimachinery, k8s.io/api,
k8s.io/cli-runtime, and k8s.io/client-go.

coderabbitai

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Duplicate comments:
In `@go.mod`:
- Around line 33-36: Update the Kubernetes module versions so they match: change
k8s.io/apimachinery from v0.34.3 to v0.30.3 to align with k8s.io/api,
k8s.io/cli-runtime, and k8s.io/client-go; after updating the version in go.mod
run go mod tidy to reconcile the module graph and ensure dependencies are
consistent.

coderabbitai

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Duplicate comments:
In `@go.mod`:
- Around line 33-36: The go.mod currently lists k8s.io/apimachinery at v0.34.3
which conflicts with the other Kubernetes dependencies; update
k8s.io/apimachinery to v0.30.3 so all k8s.io packages use the same minor
version; modify the entry for k8s.io/apimachinery in go.mod to v0.30.3 and run
go mod tidy to ensure the dependency graph is consistent (look for the
k8s.io/apimachinery line in go.mod to locate the change).

Bumps [github.com/openshift-online/ocm-cli](https://github.com/openshift-online/ocm-cli) from 1.0.10 to 1.0.11. - [Release notes](https://github.com/openshift-online/ocm-cli/releases) - [Changelog](https://github.com/openshift-online/ocm-cli/blob/main/CHANGES.md) - [Commits](openshift-online/ocm-cli@v1.0.10...v1.0.11) --- updated-dependencies: - dependency-name: github.com/openshift-online/ocm-cli dependency-version: 1.0.11 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Duplicate comments:
In `@go.mod`:
- Around line 33-36: The go.mod currently has a version mismatch:
k8s.io/apimachinery is at v0.34.3 while k8s.io/api, k8s.io/cli-runtime and
k8s.io/client-go are at v0.30.3; update k8s.io/apimachinery to v0.30.3 (or
alternatively align all four to the same minor version) so the Kubernetes module
minor versions match, then run go mod tidy to refresh the dependency graph.

openshift-ci · 2026-02-23T04:30:49Z

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/coverage	`7592d6f`	link	true	`/test coverage`
ci/prow/images	`7592d6f`	link	true	`/test images`
ci/prow/test	`7592d6f`	link	true	`/test test`
ci/prow/build	`7592d6f`	link	true	`/test build`
ci/prow/lint	`7592d6f`	link	true	`/test lint`

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

dependabot bot added area/dependency Issues or PRs related to dependency changes ok-to-test Indicates a non-member PR verified by an org member that is safe to test. labels Feb 16, 2026

openshift-ci bot requested review from Tessg22 and wanghaoran1988 February 16, 2026 00:23

dependabot bot force-pushed the dependabot/go_modules/github.com/openshift-online/ocm-cli-1.0.11 branch from c1f3c3c to 7b0428f Compare February 18, 2026 05:56

coderabbitai bot reviewed Feb 18, 2026

View reviewed changes

dependabot bot force-pushed the dependabot/go_modules/github.com/openshift-online/ocm-cli-1.0.11 branch from 7b0428f to 91cdbed Compare February 23, 2026 03:00

coderabbitai bot reviewed Feb 23, 2026

View reviewed changes

dependabot bot force-pushed the dependabot/go_modules/github.com/openshift-online/ocm-cli-1.0.11 branch from 91cdbed to 405fd28 Compare February 23, 2026 03:36

coderabbitai bot reviewed Feb 23, 2026

View reviewed changes

dependabot bot force-pushed the dependabot/go_modules/github.com/openshift-online/ocm-cli-1.0.11 branch from 405fd28 to 613703a Compare February 23, 2026 04:01

coderabbitai bot reviewed Feb 23, 2026

View reviewed changes

dependabot bot force-pushed the dependabot/go_modules/github.com/openshift-online/ocm-cli-1.0.11 branch from 613703a to 7592d6f Compare February 23, 2026 04:23

coderabbitai bot reviewed Feb 23, 2026

View reviewed changes

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Comments

build(deps): bump github.com/openshift-online/ocm-cli from 1.0.10 to 1.0.11#891

build(deps): bump github.com/openshift-online/ocm-cli from 1.0.10 to 1.0.11#891
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/github.com/openshift-online/ocm-cli-1.0.11

dependabot bot commented on behalf of github Feb 16, 2026 •

edited by coderabbitai bot

Loading

Uh oh!

openshift-ci bot commented Feb 16, 2026

Uh oh!

openshift-ci bot commented Feb 16, 2026

Uh oh!

coderabbitai bot commented Feb 18, 2026 •

edited

Loading

Reviews paused

Uh oh!

coderabbitai bot left a comment

Uh oh!

coderabbitai bot Feb 18, 2026

Uh oh!

coderabbitai bot left a comment

Uh oh!

coderabbitai bot left a comment

Uh oh!

coderabbitai bot left a comment

Uh oh!

coderabbitai bot left a comment

Uh oh!

openshift-ci bot commented Feb 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Comments

Conversation

dependabot bot commented on behalf of github Feb 16, 2026 • edited by coderabbitai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release 1.0.11

1.0.11 Feb 10 2026

Summary by CodeRabbit

Uh oh!

openshift-ci bot commented Feb 16, 2026

Uh oh!

openshift-ci bot commented Feb 16, 2026

Uh oh!

coderabbitai bot commented Feb 18, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Reviews paused

Walkthrough

Changes

Estimated code review effort

Uh oh!

coderabbitai bot left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai bot Feb 18, 2026

Choose a reason for hiding this comment

Uh oh!

coderabbitai bot left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai bot left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai bot left a comment

Choose a reason for hiding this comment

Uh oh!

coderabbitai bot left a comment

Choose a reason for hiding this comment

Uh oh!

openshift-ci bot commented Feb 23, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github Feb 16, 2026 •

edited by coderabbitai bot

Loading

coderabbitai bot commented Feb 18, 2026 •

edited

Loading