Skip to content

chore(deps): bump claircore to pick up Maven search fix - #22838

Open
kovayur wants to merge 1 commit into
masterfrom
yury/bump-claircore
Open

kovayur wants to merge 1 commit into
masterfrom
yury/bump-claircore

Conversation

@kovayur

@kovayur kovayur commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

Description

Bump github.com/quay/claircore to d0a54f247510 (quay/claircore#2023), which switches Maven SHA1 lookups from the legacy search.maven.org Solr index to central.sonatype.com.

Ticket: ROX-36398

User-facing documentation

Testing and quality

  • the change is production ready: the change is GA, or otherwise the functionality is gated by a feature flag
  • CI results are inspected

Automated testing

  • added unit tests
  • added e2e tests
  • added regression tests
  • added compatibility tests
  • modified existing tests

How I validated my change

change me!

Bump github.com/quay/claircore to d0a54f247510 (quay/claircore#2023),
which switches Maven SHA1 lookups from the legacy search.maven.org
Solr index to central.sonatype.com.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
@openshift-ci

openshift-ci Bot commented Sep 15, 2026

Copy link
Copy Markdown

Skipping CI for Draft Pull Request.
If you want CI signal for your change, please convert it to an actual PR.
You can still manually trigger a test run with /test all

@kovayur
kovayur marked this pull request as ready for review September 15, 2026 07:27
@kovayur
kovayur requested a review from a team as a code owner September 15, 2026 07:27
@coderabbitai

coderabbitai Bot commented Sep 15, 2026

Copy link
Copy Markdown
Contributor

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Central YAML (base), Organization UI (inherited)

Review profile: CHILL

Plan: Advanced

Run ID: 24b9f87b-4a0c-4e35-ba88-8be804dca254

📥 Commits

Reviewing files that changed from the base of the PR and between 116d16d and 8039d56.

⛔ Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
📒 Files selected for processing (1)
  • go.mod

Included review availability: Your plan provides up to 4 included reviews per hour; 3 remain after this review.


📝 Summary

Summary by CodeRabbit

  • Chores
    • Updated internal dependencies and supporting libraries to newer versions.
    • No user-facing features or behavior changes were identified.

Walkthrough

The pull request updates direct and indirect Go module versions in go.mod. No dependencies are added or removed, and no exported entities change.

Changes

Go dependency updates

Layer / File(s) Summary
Module version bumps
go.mod
Direct dependencies and indirect dependencies use updated versions, including Claircore, CEL, OpenTelemetry, and modernc modules.

Priority: ⬇️ Low

Estimated code review effort: 1 (Trivial) | ~5 minutes

Change: Other

Suggested reviewers: janisz

Merge Risk: ⚪ Minimal · up to 8039d

The dependency version updates introduce no supported merge-blocking risk.

🚥 Pre-merge checks | ✅ 4 | ❌ 1

❌ Failed checks (1 warning)

Check name Status Explanation Resolution
Description check ⚠️ Warning The description explains the dependency change, related issue, and ticket, and it includes the required template sections. However, the validation section still contains the placeholder "change me!", … Replace the "change me!" placeholder with the actual validation performed. Mark the applicable testing and quality checkboxes, and explain why tests were added, modified, or not needed. Confirm the documentation and CI status.
✅ Passed checks (4 passed)
Check name Status Explanation
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
Title check ✅ Passed The title clearly identifies the dependency bump and its purpose: picking up the Claircore Maven search fix.
Full details: Description check

Explanation

The description explains the dependency change, related issue, and ticket, and it includes the required template sections. However, the validation section still contains the placeholder "change me!", and all testing and quality checkboxes remain unchecked without explanations.

  • Fix all pre-merge checks with AI
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch yury/bump-claircore

Comment @coderabbitai help to get the list of available commands.

@github-actions

Copy link
Copy Markdown
Contributor

🚀 Build Images Ready

Images are ready for commit 8039d56. To use with deploy scripts:

export MAIN_IMAGE_TAG=5.0.x-300-g8039d56e29

@openshift-ci

openshift-ci Bot commented Sep 15, 2026

Copy link
Copy Markdown

@kovayur: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/gke-ui-e2e-tests 8039d56 link true /test gke-ui-e2e-tests
ci/prow/gke-nongroovy-e2e-tests 8039d56 link true /test gke-nongroovy-e2e-tests
ci/prow/gke-qa-e2e-tests 8039d56 link false /test gke-qa-e2e-tests
ci/prow/ocp-4-12-nongroovy-e2e-tests 8039d56 link false /test ocp-4-12-nongroovy-e2e-tests
ci/prow/ocp-4-22-nongroovy-e2e-tests 8039d56 link false /test ocp-4-22-nongroovy-e2e-tests

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant