[dependabot]

Bumps the misc-dependencies group with 2 updates in the /hack/tools directory: github.com/golangci/golangci-lint/v2 and github.com/mikefarah/yq/v4.

Updates github.com/golangci/golangci-lint/v2 from 2.11.4 to 2.12.2

Release notes

Sourced from github.com/golangci/golangci-lint/v2's releases.

v2.12.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

• 0b01827ae79a0cb92002b4b39867d133cef4c05c build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 in /pkg/golinters/ginkgolinter/testdata in the linter-testdata group across 1 directory (#6559)
• 1a0697fc84d7f1376c8d8b1ebe20d9331c3d221f build(deps): bump github.com/pelletier/go-toml/v2 from 2.3.0 to 2.3.1 (#6548)
• f11cfe0f968601fb4cf40c704ca18e97b49282dd build(deps): bump github.com/ryancurrah/gomodguard/v2 from 2.1.0 to 2.1.3 (#6549)
• fb2c2411a7e6b05778c097c971e4017d2a6ef5c9 build(deps): bump github.com/shirou/gopsutil/v4 from 4.26.3 to 4.26.4 (#6547)
• 9a10710cd9d198dbda7ebdf39f7be4c659bc20c9 build(deps): bump github.com/uudashr/iface from 1.4.1 to 1.4.2 (#6557)
• 81e8f81bbb341152bb21dc516981cb4c30712088 gomodguard: fix blocked configuration (#6561)

v2.12.1

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

[!IMPORTANT] If you are using the install script from the master branch: https://raw.githubusercontent.com/golangci/golangci-lint/master/install.sh This branch is not used anymore, we are using main.

We recommend using https://golangci-lint.run/install.sh as URL to install golangci-lint.

https://golangci-lint.run/docs/welcome/install/local/#binaries

• 35b2189782a6a059489289257e6523550167cb64 fix: install.sh script (#6539)
• 3a006ab284f52a5aac0a7daa77ae683e43fb7b69 gomodguard: fix panic with migration suggestion (#6542)

v2.12.0

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

... (truncated)

Changelog

Sourced from github.com/golangci/golangci-lint/v2's changelog.

v2.12.2

Released on 2026-05-06

1. Linters bug fixes
   • gomodguard_v2: fix blocked configuration
   • gomodguard_v2: from 2.1.0 to 2.1.3
   • iface: from 1.4.1 to 1.4.2

v2.12.1

Released on 2026-05-01

1. Linters bug fixes
   • gomodguard_v2: fix panic with migration suggestion
2. Misc.
   • fix install.sh script (if you are still using an URL based on the branch master, please update to use https://golangci-lint.run/install.sh)

v2.12.0

Released on 2026-05-01

1. New linters
   • Add clickhouselint linter https://github.com/ClickHouse/clickhouse-go-linter
2. Linters new features or changes
   • dupl: from f665c8d69b32 to c99c5cf5c202 (extended detection)
   • funcorder: from 0.5.0 to 0.6.0 (new option: function)
   • goconst: add an option to ignore strings from tests
   • goconst: from 1.8.2 to 1.10.0 (extended detection)
   • gomodguard_v2: from 1.4.1 to 2.1.0 (major version with new configuration)
   • gosec: from 619ce2117e08 to 2.26.1 (new checks: G124, G708, G709, G710)
   • govet: add inline analyzer
   • makezero: from 2.1.0 to 2.2.1 (support slice type aliases)
   • paralleltest: expose checkcleanup option
   • sloglint: from 0.11.1 to 0.12.0 (new options: allowed-keys, custom-funcs)
   • wsl_v5: from 5.6.0 to 5.8.0 (new option: cuddle-max-statements; new checks: after-decl, after-defer, after-expr, after-go, cuddle-group)
3. Linters bug fixes
   • forbidigo: from 2.3.0 to 2.3.1
   • godot: from 1.5.4 to 1.5.6
   • govet-modernize: from 0.43.0 to 0.44.0
   • ireturn: from 0.4.0 to 0.4.1
   • rowserrcheck: from 1.1.1 to c5f79b8
4. Misc.
   • Decrease cache entropy
   • Embed the JSON schema in the binary
   • Filter env vars when cloning the repository with the custom command

Commits

• c0d3ddc chore: prepare release
• 41f8dfb dev: keep only JSONSchema (#6564)
• 81e8f81 gomodguard: fix blocked configuration (#6561)
• 9a10710 build(deps): bump github.com/uudashr/iface from 1.4.1 to 1.4.2 (#6557)
• 0b01827 build(deps): bump github.com/onsi/ginkgo/v2 from 2.28.1 to 2.28.2 in /pkg/gol...
• 18bc4bf docs: update GitHub Action assets (#6554)
• 54a04eb dev: update Hugo (#6553)
• 0e8093b docs: update documentation assets (#6552)
• b665704 dev: workaround for post-release trigger (#6551)
• 006d012 dev: update documentation theme (#6550)
• Additional commits viewable in compare view

Updates github.com/mikefarah/yq/v4 from 4.44.5 to 4.53.3

Release notes

Sourced from github.com/mikefarah/yq/v4's releases.

v4.53.3

• Add --ini-preserve-quotes flag for INI round-trip quote preservation (#2728) Thanks @​toller892!
• Fix: reset INI decoder state on init (#2719) Thanks @​xieby1!
• Fix: decode properties array bracket paths (#2693) Thanks @​cyphercodes!
• Fix: preserve floats with trailing zero when encoding YAML to JSON (#2701) Thanks @​ChrisJr404!
• Fix: JSON to TOML root scope and null handling (#2689) Thanks @​LovesAsuna!
• Fix: reset TOML decoder finished flag on Init for multi-doc evaluation (#2704) Thanks @​terminalchai!
• Fix: reset TOML decoder between files when evaluating all at once (#2685) Thanks @​terminalchai!
• Fix: preserve TOML inline table array scope (#2694) Thanks @​cyphercodes!
• Fix: preserve empty TOML arrays in tables (#2686) Thanks @​cyphercodes!
• Fix: TOML encoder uses inline tables for YAML FlowStyle mappings (#2687)
• Fix nested inline YAML merge explode (#2699) Thanks @​cyphercodes!
• Fix repeatString overflow test on 32-bit platforms (#2680) Thanks @​jandubois!
• Bumped dependencies

v4.53.2

• Releases and tags now signed and immutable!
• Add system(command; args) operator (disabled by default) (#2640)
• TOML encoder: prefer readable table sections over inline tables (#2649)
• Fix TOML encoder to quote keys containing special characters (#2648)
• Add string slicing support (#2639)
• Fix findInArray misuse on MappingNodes in equality and contains (#2645) Thanks @​jandubois!
• Fix panic on negative slice indices that underflow after adjustment (#2646) Thanks @​jandubois!
• Fix stack overflow from circular alias in traverse (#2647) Thanks @​jandubois!
• Fix panic and OOM in repeatString for large repeat counts (#2644) Thanks @​jandubois!
• Bumped dependencies

v4.52.5

• Fix: reset TOML decoder state between files (#2634) thanks @​terminalchai
• Fix: preserve original filename when using --front-matter (#2613) thanks @​cobyfrombrooklyn-bot
• Fix typo in filename (#2611) thanks @​alexandear
• Bumped dependencies

v4.52.4

• Dropping windows/arm - no longer supported in cross-compile
• Fixing comments in TOML arrays (#2592)
• Bumped dependencies

v4.52.2

• Fixed bad instructions file breaking go-install (#2587) Thanks @​theyoprst
• Fixed TOML table scope after comments (#2588) Thanks @​tomers
• Multiply uses a readonly context (#2558)
• Fixed merge globbing wildcards in keys (#2564)
• Fixing TOML subarray parsing issue (#2581)

v4.52.1 - TOML roundtrip and more!

• TOML encoder support - you can now roundtrip! #1364
• Parent now supports negative indices, and added a 'root' command for referencing the top level document
• Fixed scalar encoding for HCL
• Add --yaml-compact-seq-indent / -c flag for compact sequence indentation (#2583) Thanks @​jfenal

... (truncated)

Changelog

Sourced from github.com/mikefarah/yq/v4's changelog.

4.53.3:

• Add --ini-preserve-quotes flag for INI round-trip quote preservation (#2728) Thanks @​toller892!
• Fix: reset INI decoder state on init (#2719) Thanks @​xieby1!
• Fix: decode properties array bracket paths (#2693) Thanks @​cyphercodes!
• Fix: preserve floats with trailing zero when encoding YAML to JSON (#2701) Thanks @​ChrisJr404!
• Fix: JSON to TOML root scope and null handling (#2689) Thanks @​LovesAsuna!
• Fix: reset TOML decoder finished flag on Init for multi-doc evaluation (#2704) Thanks @​terminalchai!
• Fix: reset TOML decoder between files when evaluating all at once (#2685) Thanks @​terminalchai!
• Fix: preserve TOML inline table array scope (#2694) Thanks @​cyphercodes!
• Fix: preserve empty TOML arrays in tables (#2686) Thanks @​cyphercodes!
• Fix: TOML encoder uses inline tables for YAML FlowStyle mappings (#2687)
• Fix nested inline YAML merge explode (#2699) Thanks @​cyphercodes!
• Fix repeatString overflow test on 32-bit platforms (#2680) Thanks @​jandubois!
• Bumped dependencies

4.53.2:

• Fixing release process

4.53.1:

• Releases and tags now signed and immutable!
• Add system(command; args) operator (disabled by default) (#2640)
• TOML encoder: prefer readable table sections over inline tables (#2649)
• Fix TOML encoder to quote keys containing special characters (#2648)
• Add string slicing support (#2639)
• Fix findInArray misuse on MappingNodes in equality and contains (#2645) Thanks @​jandubois!
• Fix panic on negative slice indices that underflow after adjustment (#2646) Thanks @​jandubois!
• Fix stack overflow from circular alias in traverse (#2647) Thanks @​jandubois!
• Fix panic and OOM in repeatString for large repeat counts (#2644) Thanks @​jandubois!
• Bumped dependencies

4.52.5:

• Fix: reset TOML decoder state between files (#2634) thanks @​terminalchai
• Fix: preserve original filename when using --front-matter (#2613) thanks @​cobyfrombrooklyn-bot
• Fix typo in filename (#2611) thanks @​alexandear
• Bumped dependencies

4.52.4:

• Dropping windows/arm - no longer supported in cross-compile

4.52.3:

• Fixing comments in TOML arrays (#2592)
• Bumped dependencies

4.52.2:

• Fixed bad instructions file breaking go-install (#2587) Thanks @​theyoprst
• Fixed TOML table scope after comments (#2588) Thanks @​tomers
• Multiply uses a readonly context (#2558)
• Fixed merge globbing wildcards in keys (#2564)

... (truncated)

Commits

• 1b9b4ac Bumping version
• 9b67d65 Portable bump version
• f8850c0 Preparting release
• c5a3423 Refining
• 196a99e Agent disclosure
• fa99bf1 Merging agents
• 7111761 docs: add AGENTS.md with Cursor Cloud development instructions (#2735)
• 0cb1bbe Fixing test
• 8fc8eed Minor doc update
• 7620a72 fix: reset INI decoder state on init (#2719)
• Additional commits viewable in compare view

Updates golang.org/x/mod from 0.35.0 to 0.36.0

Commits

• 643da9b go.mod: update golang.org/x dependencies
• ccc3cdf zip: include 'but content has correct sum' note in TestVCS
• ab30318 zip: update zip hashes for new flate compression
• See full diff in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[openshift-merge-bot]

Pipeline controller notification
This repo is configured to use the pipeline controller. Second-stage tests will be triggered either automatically or after lgtm label is added, depending on the repository configuration. The pipeline controller will automatically detect which contexts are required and will utilize /test Prow commands to trigger the second stage.

For optional jobs, comment /test ? to see a list of all defined jobs. To trigger manually all jobs from second stage use /pipeline required command.

This repository is configured in: LGTM mode

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

📝 Walkthrough

Walkthrough

The hack/tools/go.mod file updates pinned tooling dependencies: github.com/golangci/golangci-lint/v2 → v2.12.2, github.com/mikefarah/yq/v4 → v4.53.2, and golang.org/x/mod → v0.36.0. Many indirect tooling dependencies were refreshed with version bumps, charm.land/lipgloss/v2 and go.yaml.in/yaml/v4 were added, and gopkg.in/op/go-logging.v1 was removed. Existing replace directives were left unchanged.

Possibly related PRs

• openshift/hypershift#8481: Also modifies hack/tools/go.mod and bumps golang.org/x/mod (related dependency alignment).

Suggested reviewers

• sjenning
• clebs

---

Important

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

❌ Failed checks (1 error)

Check name	Status	Explanation	Resolution
Stable And Deterministic Test Names	❌ Error	PR introduces 13+ unstable Ginkgo test names using dynamic values (workload.Name, featureSet) in two test files, violating deterministic test name requirements.	Replace fmt.Sprintf-based test names with static descriptive strings; move dynamic values to test setup/assertions, not titles. Example: change It(fmt.Sprintf("test %s", name)) to It("should validate workload requirements").

✅ Passed checks (11 passed)

Check name	Status	Explanation
Title check	✅ Passed	The PR title accurately describes the main change: bumping three dependencies (golangci-lint, yq, and golang.org/x/mod) in the misc-dependencies group within the hack/tools directory.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Test Structure And Quality	✅ Passed	PR modifies only hack/tools/go.mod (dependency versions); custom check reviews Ginkgo test code quality. Since no test files are modified, check is not applicable and passes.
Microshift Test Compatibility	✅ Passed	This PR only bumps build tool dependencies in hack/tools/go.mod (golangci-lint, yq, golang.org/x/mod). No new Ginkgo e2e tests are added, so the MicroShift test compatibility check is not applicable.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	No new Ginkgo e2e tests added; PR only updates build tool dependencies in hack/tools/go.mod. SNO compatibility check not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	PR only updates Go module versions in hack/tools/go.mod; does not modify deployment manifests, operator code, or controllers, so topology-aware scheduling check does not apply.
Ote Binary Stdout Contract	✅ Passed	PR only updates hack/tools/go.mod development dependencies; no runtime code changes that could violate OTE stdout contract.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	PR only bumps Go module dependencies in hack/tools/go.mod. No new Ginkgo e2e tests added, so IPv6/disconnected compatibility check is not applicable.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/hack/tools/misc-dependencies-18a5f88f7e

---

_{Comment @coderabbitai help to get the list of available commands.}

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign jparrill for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

rebase

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

rebase

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[coderabbitai]

🧹 Nitpick comments (1)

hack/tools/go.mod (1)

301-301: ⚡ Quick win

Verify intentional use of an RC dependency on Line 301.

go.yaml.in/yaml/v4 v4.0.0-rc.4 is a release-candidate build. Please confirm this is required by upstream tooling (and not an avoidable pre-release pull-in), or prefer a stable tag if available.

For the Go module "go.yaml.in/yaml/v4":
1) What is the latest stable (non-RC) release?
2) Is v4.0.0-rc.4 required by github.com/mikefarah/yq/v4 v4.53.2 or github.com/golangci/golangci-lint/v2 v2.12.2?
3) Are there known compatibility/security notes for using v4.0.0-rc.4 in tooling contexts?

🤖 Prompt for AI Agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@hack/tools/go.mod` at line 301, The go.mod entry "go.yaml.in/yaml/v4
v4.0.0-rc.4" is a release-candidate; verify whether that RC is intentionally
required by upstream tooling and if a stable release exists—use go mod graph or
go list -m all to see which module pulls it in (check transitive graph for
github.com/mikefarah/yq/v4 and github.com/golangci/golangci-lint/v2), determine
the latest non-RC tag for go.yaml.in/yaml/v4, and if a stable version is
available prefer that by updating the dependency or adding an explicit replace
in hack/tools/go.mod to the stable tag; if the RC is truly required, add a
comment documenting why (which tool requires v4.0.0-rc.4) and note any
compatibility/security considerations.

🤖 Prompt for all review comments with AI agents

Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

Nitpick comments:
In `@hack/tools/go.mod`:
- Line 301: The go.mod entry "go.yaml.in/yaml/v4 v4.0.0-rc.4" is a
release-candidate; verify whether that RC is intentionally required by upstream
tooling and if a stable release exists—use go mod graph or go list -m all to see
which module pulls it in (check transitive graph for github.com/mikefarah/yq/v4
and github.com/golangci/golangci-lint/v2), determine the latest non-RC tag for
go.yaml.in/yaml/v4, and if a stable version is available prefer that by updating
the dependency or adding an explicit replace in hack/tools/go.mod to the stable
tag; if the RC is truly required, add a comment documenting why (which tool
requires v4.0.0-rc.4) and note any compatibility/security considerations.

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: Repository YAML (base), Central YAML (inherited)

Review profile: CHILL

Plan: Enterprise

Run ID: fdd788e9-4361-4e6b-bc93-2c6ca70c5bec

📥 Commits

Reviewing files that changed from the base of the PR and between d65a74a and 37e9bb6.

⛔ Files ignored due to path filters (171)

• hack/tools/go.sum is excluded by !**/*.sum
• hack/tools/vendor/charm.land/lipgloss/v2/.editorconfig is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/.gitattributes is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/.gitignore is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/.golangci.yml is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/.goreleaser.yml is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/LICENSE is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/README.md is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/Taskfile.yaml is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/UPGRADE_GUIDE_V2.md is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/align.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/ansi_unix.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/ansi_windows.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/blending.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/borders.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/canvas.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/color.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/get.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/join.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/layer.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/lipgloss.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/position.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/query.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/ranges.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/runes.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/set.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/size.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/style.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/terminal.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/unset.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/whitespace.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/wrap.go is excluded by !**/vendor/**
• hack/tools/vendor/charm.land/lipgloss/v2/writer.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/ClickHouse/clickhouse-go-linter/LICENSE is excluded by !**/vendor/**
• hack/tools/vendor/github.com/ClickHouse/clickhouse-go-linter/internal/util/util.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/ClickHouse/clickhouse-go-linter/passes/chbatchclose/chbatchclose.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/ClickHouse/clickhouse-go-linter/passes/chrowserr/chrowserr.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/Masterminds/semver/v3/.gitignore is excluded by !**/vendor/**
• hack/tools/vendor/github.com/Masterminds/semver/v3/.golangci.yml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/Masterminds/semver/v3/constraints.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/Masterminds/semver/v3/version.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/a8m/envsubst/parse/parse.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/agext/levenshtein/.gitignore is excluded by !**/vendor/**
• hack/tools/vendor/github.com/agext/levenshtein/.travis.yml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/agext/levenshtein/DCO is excluded by !**/vendor/**
• hack/tools/vendor/github.com/agext/levenshtein/LICENSE is excluded by !**/vendor/**
• hack/tools/vendor/github.com/agext/levenshtein/MAINTAINERS is excluded by !**/vendor/**
• hack/tools/vendor/github.com/agext/levenshtein/NOTICE is excluded by !**/vendor/**
• hack/tools/vendor/github.com/agext/levenshtein/README.md is excluded by !**/vendor/**
• hack/tools/vendor/github.com/agext/levenshtein/levenshtein.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/agext/levenshtein/params.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/COPYING is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/Dockerfile is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/README.md is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/formatters/svg/font_liberation_mono.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/ampl.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/erb.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/gas.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/gettext.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/graphql.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/javascript.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/json.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/lateralus.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/lua.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/luau.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/materialize_sql_dialect.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/meson.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/mysql.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/php.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/scdoc.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/spade.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/typescript.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/embedded/xml.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/lexers/erb.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/regexp.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/styles/api.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/styles/compat.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/styles/darcula.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/styles/github-dark.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/styles/kanagawa-dragon.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/styles/kanagawa-lotus.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/styles/kanagawa-wave.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/styles/solarized-light.xml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/tokentype_enumer.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/chroma/v2/types.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/participle/v2/lexer/simple.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/participle/v2/lexer/stateful.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/alecthomas/participle/v2/lexer/text_scanner.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/apparentlymart/go-textseg/v15/LICENSE is excluded by !**/vendor/**
• hack/tools/vendor/github.com/apparentlymart/go-textseg/v15/textseg/all_tokens.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/apparentlymart/go-textseg/v15/textseg/emoji_table.rl is excluded by !**/vendor/**
• hack/tools/vendor/github.com/apparentlymart/go-textseg/v15/textseg/generate.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/apparentlymart/go-textseg/v15/textseg/grapheme_clusters.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/apparentlymart/go-textseg/v15/textseg/grapheme_clusters.rl is excluded by !**/vendor/**
• hack/tools/vendor/github.com/apparentlymart/go-textseg/v15/textseg/grapheme_clusters_table.rl is excluded by !**/vendor/**
• hack/tools/vendor/github.com/apparentlymart/go-textseg/v15/textseg/tables.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/apparentlymart/go-textseg/v15/textseg/unicode2ragel.rb is excluded by !**/vendor/**
• hack/tools/vendor/github.com/apparentlymart/go-textseg/v15/textseg/utf8_seqs.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/ashanbrown/forbidigo/v2/forbidigo/patterns.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/ashanbrown/makezero/v2/makezero/makezero.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/aymanbagabas/go-osc52/v2/README.md is excluded by !**/vendor/**
• hack/tools/vendor/github.com/aymanbagabas/go-osc52/v2/osc52.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/bombsimon/wsl/v5/.golangci.yml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/bombsimon/wsl/v5/CHECKS.md is excluded by !**/vendor/**
• hack/tools/vendor/github.com/bombsimon/wsl/v5/README.md is excluded by !**/vendor/**
• hack/tools/vendor/github.com/bombsimon/wsl/v5/analyzer.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/bombsimon/wsl/v5/config.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/bombsimon/wsl/v5/cursor.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/bombsimon/wsl/v5/wsl.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/butuzov/ireturn/analyzer/analyzer.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/butuzov/ireturn/analyzer/internal/config/new.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/butuzov/ireturn/analyzer/std.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/colorprofile/.golangci.yml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/colorprofile/README.md is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/colorprofile/env.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/colorprofile/env_windows.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/colorprofile/profile.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/colorprofile/writer.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/lipgloss/ansi_unix.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/lipgloss/ansi_windows.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/lipgloss/color.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/lipgloss/renderer.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/.gitattributes is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/.golangci.yml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/.goreleaser.yml is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/LICENSE is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/README.md is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/TUTORIAL.md is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/border.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/buffer.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/cancelreader_other.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/cancelreader_windows.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/cell.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/cursor.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/decoder.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/doc.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/environ.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/event.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/key.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/key_table.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/layout.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/logger.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/mouse.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/styled.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/tabstop.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_bsdly.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_bsdly_other.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_other.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_reader.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_reader_other.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_reader_windows.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_renderer.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_renderer_hardscroll.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_renderer_hashmap.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_tabdly.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_tabdly_other.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_unix.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/terminal_windows.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/tty.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/tty_other.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/tty_unix.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/tty_windows.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/utils.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/uv.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/winch.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/winch_other.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/ultraviolet/winch_unix.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/x/ansi/cursor.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/x/ansi/inband.go is excluded by !**/vendor/**
• hack/tools/vendor/github.com/charmbracelet/x/ansi/kitty/decoder.go is excluded by !**/vendor/**

📒 Files selected for processing (1)

• hack/tools/go.mod

[openshift-ci]

@dependabot[bot]: all tests passed!

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[openshift-ci]

rebase

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[hypershift-jira-solve-ci]

Now I have the complete picture. Let me compile the final report.

Test Failure Analysis Complete

Job Information

• Prow Job: tide (merge automation)
• Build ID: N/A (tide is a merge controller, not a test job)
• PR: #8463 — build(deps): bump the misc-dependencies group across 1 directory with 3 updates
• Author: dependabot[bot]
• Branch: dependabot/go_modules/hack/tools/misc-dependencies-18a5f88f7e
• State: error — merge blocked

Test Failure Analysis

Error

tide: Not mergeable. PR has a merge conflict.
GitHub mergeable_state: dirty, mergeable: false, rebaseable: false

Summary

This is not a test failure — it is a merge conflict preventing tide from merging the PR. The PR was created by Dependabot on 2026-05-08 to bump golangci-lint/v2 (2.11.4→2.12.2) and mikefarah/yq/v4 (2.44.5→2.53.3) in hack/tools/go.mod. Since then, at least three commits on main have modified the same hack/tools/go.mod file, creating irreconcilable textual conflicts that GitHub cannot auto-resolve. All four first-stage Prow CI jobs (images, okd-scos-images, security, verify-deps) passed successfully; the seven second-stage e2e jobs are blocked waiting on pipeline conditions (which require lgtm/merge readiness), not failing.

Root Cause

The root cause is a git merge conflict in hack/tools/go.mod (and likely hack/tools/go.sum and vendor files) between the PR branch and main.

Three commits merged to main after the PR was created (2026-05-08) that modified hack/tools/go.mod:

1. b5b49323 (2026-05-11) — build(deps): bump github.com/go-git/go-git/v5 in /hack/tools — Added go-git/v5 v5.19.1 as a direct dependency and gomega v1.39.1. These lines don't exist in the PR branch.

2. c5c1341e (2026-05-19) — build(deps): bump github.com/go-git/go-git/v5 in /hack/tools — Further go-git updates to the same file.

3. eef4e28a (2026-06-19) — feat(hypershift-operator): add CRD schema breaking changes checker — Added new direct dependencies k8s.io/apiextensions-apiserver v0.34.2, sigs.k8s.io/crdify v0.6.0, and github.com/onsi/gomega v1.39.1 to hack/tools/go.mod.

The PR branch diverges from main on the require block structure: main has 21 direct dependencies while the PR branch has only 17 (missing go-git, gomega, apiextensions-apiserver, and crdify). Both branches also modify overlapping transitive dependency versions (e.g., charmbracelet/*, golang.org/x/*), making the conflict non-trivially resolvable by git.

The needs-rebase label was first applied on 2026-05-14 (after the first go-git merge), and Prow has posted three separate "rebase" comments (2026-05-14, 2026-05-20, 2026-06-23). Dependabot has not automatically rebased the PR because the conflicts require manual resolution of the go.mod dependency graph.

Recommendations

1. Close this PR — It is stale (created 2026-05-08, now 46 days old) and superseded by ongoing dependency management. The weekly dependabot-triage periodic job (PR #8784, merged 2026-06-23) already consolidates dependabot updates on a weekly cadence.

2. Let the next dependabot-triage cycle handle it — The periodic dependabot-triage job will pick up any pending dependency bumps (including golangci-lint and yq) and create a fresh consolidation PR against the current main branch, avoiding merge conflicts.

3. If the bumps are urgent, manually rebase by running:

   # On the dependabot branch
   git fetch origin main
   git rebase origin/main
   # Resolve hack/tools/go.mod conflicts, then:
   cd hack/tools && go mod tidy && go mod vendor
   git add . && git rebase --continue

   However, given the automated weekly consolidation process, manual intervention is not recommended.

4. Alternatively, trigger a fresh Dependabot PR by commenting @dependabot recreate on the PR, which will close this one and open a new PR based on the current main.

Evidence

Evidence	Detail
Tide status	error: Not mergeable. PR has a merge conflict.
GitHub merge state	mergeable: false, mergeable_state: dirty, rebaseable: false
PR label	needs-rebase (applied 2026-05-14, reapplied 2026-05-20 and 2026-06-23)
Conflicting file	hack/tools/go.mod — PR has 17 direct deps, main has 21 (4 added post-PR)
Conflicting commit 1	b5b49323 (2026-05-11): added go-git/v5 as direct dep
Conflicting commit 2	c5c1341e (2026-05-19): further go-git/v5 bump
Conflicting commit 3	eef4e28a (2026-06-19): added apiextensions-apiserver, crdify, gomega
CI job results	All 4 first-stage jobs passed (images, okd-scos-images, security, verify-deps)
Blocked e2e jobs	7 second-stage jobs pending on pipeline conditions (not failures)
PR age	46 days (created 2026-05-08)
Weekly consolidation	PR #8784 merged 2026-06-23, handles dependabot updates on weekly cadence

---

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.