Skip to content

Build(deps): Bump google.golang.org/api from 0.257.0 to 0.276.0#1098

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/api-0.276.0
Open

Build(deps): Bump google.golang.org/api from 0.257.0 to 0.276.0#1098
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/google.golang.org/api-0.276.0

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 20, 2026

Bumps google.golang.org/api from 0.257.0 to 0.276.0.

Release notes

Sourced from google.golang.org/api's releases.

v0.276.0

0.276.0 (2026-04-14)

Features

v0.275.0

0.275.0 (2026-04-07)

Features

v0.274.0

0.274.0 (2026-04-02)

Features

v0.273.1

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

v0.273.0

0.273.0 (2026-03-23)

Features

v0.272.0

0.272.0 (2026-03-16)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.276.0 (2026-04-14)

Features

0.275.0 (2026-04-07)

Features

0.274.0 (2026-04-02)

Features

0.273.1 (2026-03-31)

Bug Fixes

  • Merge duplicate x-goog-request-params header (#3547) (2008108)

0.273.0 (2026-03-23)

Features

0.272.0 (2026-03-16)

Features

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.257.0 to 0.276.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.257.0...v0.276.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-version: 0.276.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Apr 20, 2026
@coderabbitai
Copy link
Copy Markdown

coderabbitai Bot commented Apr 20, 2026

Summary by CodeRabbit

  • Chores
    • Upgraded Go toolchain to version 1.25.0
    • Updated core dependencies including Google Cloud libraries, authentication systems, and monitoring packages to latest versions for improved stability and compatibility

Walkthrough

Updated Go toolchain version from 1.24.13 to 1.25.0 in go.mod. Bumped multiple direct and indirect dependencies including Google Cloud libraries, OpenTelemetry packages, and Go ecosystem modules to newer versions, with google.golang.org/genproto modules updated from 2025-12 to 2026-03/2026-04 builds.

Changes

Cohort / File(s) Summary
Dependency Updates
go.mod
Updated Go toolchain directive to 1.25.0. Bumped direct dependencies: github.com/googleapis/gax-go/v2, golang.org/x/term, golang.org/x/text, google.golang.org/api, and google.golang.org/grpc. Updated indirect dependencies for Google Cloud auth, OpenTelemetry instrumentation, and transitive Go ecosystem modules. Updated google.golang.org/genproto pseudo-versions to 2026-03/2026-04 builds.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~10 minutes

🚥 Pre-merge checks | ✅ 3
✅ Passed checks (3 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately describes the main change: bumping google.golang.org/api from 0.257.0 to 0.276.0, which aligns with the primary dependency update shown in the changeset.
Description check ✅ Passed The description is directly related to the changeset, providing detailed release notes, changelog, and commits for the google.golang.org/api version update being applied.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch dependabot/go_modules/google.golang.org/api-0.276.0

Comment @coderabbitai help to get the list of available commands and usage tips.

@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Apr 20, 2026

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign miguelhbrito for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci Bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Apr 20, 2026
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented Apr 20, 2026

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a openshift-online member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Copy link
Copy Markdown

@coderabbitai coderabbitai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents
Verify each finding against the current code and only fix it if needed.

Inline comments:
In `@go.mod`:
- Line 3: CI workflows still pin older Go versions; update all references of the
go-version/matrix entries in the GitHub workflow files that configure
actions/setup-go (e.g., the go-version key and any matrix entries in the
publish-release and check-pull-request workflows) from 1.22/1.23 to 1.25.0 so
they match go.mod; ensure both the single go-version values and any matrix items
are changed to "1.25.0" and run a quick CI lint to validate the YAML.
🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

  • Push a commit to this branch (recommended)
  • Create a new PR with the fixes

ℹ️ Review info
⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: 2528ac2d-560a-4c70-abad-b1be6800bd72

📥 Commits

Reviewing files that changed from the base of the PR and between f80645d and 00575c5.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

Comment thread go.mod
module github.com/openshift-online/ocm-cli

go 1.24.13
go 1.25.0
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
# Read-only verification: find Go version pins across CI/build/release config.
set -euo pipefail

echo "== go.mod/go.work directives =="
fd -HI '^(go\.mod|go\.work)$' -t f | xargs -r -I{} sh -c 'echo "--- {}"; sed -n "1,40p" "{}" | rg -n "^(go|toolchain)\s+" || true'

echo
echo "== CI/workflow/build files mentioning Go versions =="
rg -n --hidden --glob '!**/.git/**' --glob '!**/vendor/**' \
  '(setup-go|go-version|GOVERSION|GO_VERSION|golang:|go1\.[0-9]+(\.[0-9]+)?)' \
  .github/ Makefile Dockerfile\* \*.mk \*.yaml \*.yml 2>/dev/null || true

echo
echo "Expected: all version pins are >= 1.25 (or this bump should be split/adjusted)."

Repository: openshift-online/ocm-cli

Length of output: 692


Update CI workflows to match the Go 1.25.0 requirement in go.mod.

The go.mod change to go 1.25.0 introduces a version mismatch with CI pipelines:

  • .github/workflows/publish-release.yaml is pinned to Go 1.23
  • .github/workflows/check-pull-request.yaml is pinned to Go 1.22 and 1.23

This will cause CI failures. Update all workflow go-version pins to 1.25.0 to match the module requirement.

🤖 Prompt for AI Agents
Verify each finding against the current code and only fix it if needed.

In `@go.mod` at line 3, CI workflows still pin older Go versions; update all
references of the go-version/matrix entries in the GitHub workflow files that
configure actions/setup-go (e.g., the go-version key and any matrix entries in
the publish-release and check-pull-request workflows) from 1.22/1.23 to 1.25.0
so they match go.mod; ensure both the single go-version values and any matrix
items are changed to "1.25.0" and run a quick CI lint to validate the YAML.

@openshift-ci openshift-ci Bot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label May 13, 2026
@openshift-ci
Copy link
Copy Markdown

openshift-ci Bot commented May 13, 2026

PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants