chore(deps): update module github.com/invopop/jsonschema to v0.14.0 - #3423
Open
renovate-bot wants to merge 1 commit into
Open
Conversation
forking-renovate
Bot
added
the
dependencies
ℹ️ Artifact update noticeFile name: cli/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
Collaborator
|
/gcbrun |
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
Contributor
There was a problem hiding this comment.
Code Review
This pull request updates several dependencies in cli/go.mod, including upgrades for jsonschema and jsonparser, and a transition from wk8/go-ordered-map to pb33f/ordered-map. Feedback was provided regarding the introduction of go.yaml.in/yaml/v4 v4.0.0-rc.2 as an indirect dependency, noting potential supply chain risks and stability issues associated with its release candidate status and non-standard import path.
| go.opentelemetry.io/proto/otlp v1.7.1 // indirect | ||
| go.yaml.in/yaml/v2 v2.4.2 // indirect | ||
| go.yaml.in/yaml/v3 v3.0.4 // indirect | ||
| go.yaml.in/yaml/v4 v4.0.0-rc.2 // indirect |
Contributor
There was a problem hiding this comment.
The addition of go.yaml.in/yaml/v4 v4.0.0-rc.2 as an indirect dependency is concerning. This package uses a non-standard import path (go.yaml.in instead of the official gopkg.in) and is currently in a release candidate state. While it appears to be a dependency of pb33f/ordered-map, using an experimental and non-canonical version of a core library like YAML introduces potential supply chain risks and stability concerns. It is recommended to investigate if this dependency can be replaced with a stable, official version of the YAML package (e.g., gopkg.in/yaml.v3).
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 15, 2026 23:27
818b6e5 to
c48b60a
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 16, 2026 01:22
c48b60a to
3bc6596
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 16, 2026 04:14
3bc6596 to
acfdf27
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 16, 2026 04:46
acfdf27 to
5dfe958
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 16, 2026 04:55
5dfe958 to
5a4f032
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 16, 2026 05:13
5a4f032 to
68bb0e2
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 18, 2026 19:29
68bb0e2 to
cff6138
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 18, 2026 22:43
cff6138 to
40d3ac7
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 19, 2026 17:45
40d3ac7 to
08a0e65
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 19, 2026 18:05
08a0e65 to
dd225e4
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 19, 2026 18:11
dd225e4 to
0f012b2
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
May 19, 2026 21:43
0f012b2 to
b85d912
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 6, 2026 23:54
bf79e55 to
28dd215
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 7, 2026 15:09
28dd215 to
8782787
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 7, 2026 15:33
8782787 to
9eb1eaf
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 27, 2026 22:33
9eb1eaf to
9ae1fa3
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 27, 2026 23:05
9ae1fa3 to
103359c
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 30, 2026 22:50
103359c to
80da3fc
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 30, 2026 23:08
80da3fc to
4852b56
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 30, 2026 23:36
4852b56 to
92c17a4
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 30, 2026 23:47
92c17a4 to
5ac30a5
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 31, 2026 01:29
5ac30a5 to
f969ccc
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 31, 2026 17:51
f969ccc to
1ff37d6
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 31, 2026 19:24
1ff37d6 to
b73e22f
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 31, 2026 19:38
b73e22f to
a4e36f7
Compare
Collaborator
|
/gcbrun |
renovate-bot
force-pushed
the
renovate/cli-github.com-invopop-jsonschema-0.x
branch
from
July 31, 2026 21:15
a4e36f7 to
bcb4c49
Compare
Collaborator
|
/gcbrun |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.13.0→v0.14.0Release Notes
invopop/jsonschema (github.com/invopop/jsonschema)
v0.14.0Compare Source
What's Changed
New Contributors
Full Changelog: invopop/jsonschema@v0.13.0...v0.14.0
Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR was generated by Mend Renovate. View the repository job log.