NO-ISSUE: Synchronize From Upstream Repositories by openshift-bot · Pull Request #1316 · openshift/operator-framework-olm

openshift-bot · 2026-06-05T00:03:57Z

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date	Commit	Author	Message
2026-06-04 13:49:04	operator-framework/operator-lifecycle-manager@f9e42f3	dependabot[bot]	🌱 Bump github.com/prometheus/common from 0.67.5 to 0.68.1 (#3843)
2026-06-05 08:18:47	operator-framework/operator-lifecycle-manager@614fad4	Todd Short	Update to golang-1.26.3 (#3844)
2026-06-05 16:28:54	operator-framework/operator-lifecycle-manager@72750c8	Todd Short	Update api and operator-registry dependencies (#3845)
2026-06-04 10:33:06	operator-framework/operator-registry@b1c9736	dependabot[bot]	Bump github.com/grpc-ecosystem/grpc-health-probe from 0.4.50 to 0.4.52 (#1998)
2026-06-04 10:38:45	operator-framework/operator-registry@2e03f89	dependabot[bot]	Bump github.com/docker/cli (#1999)
2026-06-05 08:13:15	operator-framework/operator-registry@9c948cd	Todd Short	Update to golang-1.26.3 (#2001)
2026-06-05 15:40:31	operator-framework/operator-registry@e9534a9	Todd Short	Update to operator-framework/api@v0.43.0 (#2003)
2026-03-31 20:35:11	operator-framework/api@d6b839a	Francesco Giudici	Add fgiudici as reviewer (#483)
2026-04-03 15:59:10	operator-framework/api@8ad4692	dependabot[bot]	Bump codecov/codecov-action from 5 to 6 (#484)
2026-04-13 11:32:03	operator-framework/api@3ee3c44	dependabot[bot]	Bump go.podman.io/image/v5 from 5.39.1 to 5.39.2 (#485)
2026-04-13 11:35:08	operator-framework/api@a88e830	dependabot[bot]	Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.43.0 (#486)
2026-04-14 06:45:57	operator-framework/api@3bd6129	Jordan Keister	remove idle maintainers (#487)
2026-04-14 06:48:45	operator-framework/api@ee38ad0	dependabot[bot]	Bump github.com/google/cel-go from 0.27.0 to 0.28.0 (#488)
2026-04-22 20:27:35	operator-framework/api@b530c5b	dependabot[bot]	Bump the k8s-dependencies group with 4 updates (#489)
2026-05-19 09:45:59	operator-framework/api@3acdcf5	dependabot[bot]	Bump github.com/google/cel-go from 0.28.0 to 0.28.1 (#492)
2026-05-26 07:45:09	operator-framework/api@755d5d1	dependabot[bot]	Bump go.podman.io/image/v5 from 5.39.2 to 5.40.0 (#494)
2026-06-02 19:47:00	operator-framework/api@da918bd	Lars Lehtonen	fix(pkg/validation/internal): check nil pointers before dereference (#493)
2026-06-05 07:14:47	operator-framework/api@b1290de	Todd Short	Update to golang-1.26.3 (#497)
2026-06-05 14:17:52	operator-framework/api@86d7ced	Sebastien Tardif	fix: stop emitting false-positive deprecated-API warnings for RBAC rules (#496)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/assign @openshift/openshift-team-operator-runtime

Summary by CodeRabbit

Chores
- Upgraded Go toolchain to version 1.26.3
- Updated operator framework, Kubernetes, and other key dependencies to latest patch versions
Bug Fixes
- Fixed potential nil reference errors in bundle validation functions
- Refined Kubernetes API removal detection to accurately identify only fully removed resources, improving validation accuracy

openshift-ci-robot · 2026-06-05T00:04:01Z

@openshift-bot: This pull request explicitly references no jira issue.

Details

In response to this:

The staging/ and vendor/ directories have been synchronized from the upstream repositories, pulling in the following commits:

Date Commit Author Message

2026-06-04 13:49:04 operator-framework/operator-lifecycle-manager@f9e42f3 dependabot[bot] 🌱 Bump github.com/prometheus/common from 0.67.5 to 0.68.1 (#3843)

This pull request is expected to merge without any human intervention. If tests are failing here, changes must land upstream to fix any issues so that future downstreaming efforts succeed.

/assign @openshift/openshift-team-operator-runtime

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the openshift-eng/jira-lifecycle-plugin repository.

coderabbitai · 2026-06-05T00:04:12Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: f66b7a42-6499-486a-9821-e2b1cf02eed6

📥 Commits

Reviewing files that changed from the base of the PR and between 89e4524 and dbd1a2a.

⛔ Files ignored due to path filters (54)

go.sum is excluded by !**/*.sum
staging/api/go.sum is excluded by !**/*.sum
staging/operator-lifecycle-manager/go.sum is excluded by !**/*.sum
staging/operator-registry/go.sum is excluded by !**/*.sum
vendor/github.com/google/cel-go/cel/BUILD.bazel is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/cel/env.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/cel/fieldpaths.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/cel/inlining.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/cel/library.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/cel/options.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/cel/program.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/cel/prompt.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/cel/templates/authoring.tmpl is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/checker/checker.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/checker/cost.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/checker/env.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/checker/options.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/ast/ast.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/ast/conversion.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/decls/decls.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/doc.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/env/BUILD.bazel is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/env/env.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/env/io.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/overloads/overloads.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/stdlib/standard.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/types/err.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/types/list.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/types/object.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/types/optional.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/types/pb/file.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/types/pb/pb.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/types/pb/type.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/types/provider.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/common/types/ref/provider.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/ext/BUILD.bazel is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/ext/costs.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/ext/formatting.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/ext/formatting_v2.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/ext/lists.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/ext/native.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/ext/regex.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/ext/sets.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/ext/strings.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/interpreter/attributes.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/interpreter/interpretable.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/google/cel-go/parser/parser.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/operator-framework/api/pkg/validation/internal/community.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/operator-framework/api/pkg/validation/internal/operatorhub.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/operator-framework/api/pkg/validation/internal/operatorhubv2.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/operator-framework/api/pkg/validation/internal/removed_apis.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/common/expfmt/openmetrics_create.go is excluded by !**/vendor/**, !vendor/**
vendor/github.com/prometheus/common/model/metric.go is excluded by !**/vendor/**, !vendor/**
vendor/modules.txt is excluded by !**/vendor/**, !vendor/**

📒 Files selected for processing (11)

go.mod
staging/api/.github/workflows/go.yaml
staging/api/OWNERS
staging/api/go.mod
staging/api/pkg/validation/internal/community.go
staging/api/pkg/validation/internal/operatorhub.go
staging/api/pkg/validation/internal/operatorhubv2.go
staging/api/pkg/validation/internal/removed_apis.go
staging/api/pkg/validation/internal/removed_apis_test.go
staging/operator-lifecycle-manager/go.mod
staging/operator-registry/go.mod

🚧 Files skipped from review as they are similar to previous changes (10)

staging/api/pkg/validation/internal/community.go
staging/api/.github/workflows/go.yaml
staging/api/pkg/validation/internal/operatorhubv2.go
staging/api/pkg/validation/internal/operatorhub.go
staging/api/OWNERS
staging/api/go.mod
go.mod
staging/operator-lifecycle-manager/go.mod
staging/operator-registry/go.mod
staging/api/pkg/validation/internal/removed_apis.go

Walkthrough

This PR aligns the operator-framework-olm repository with ART (AppStudio Red Team) metadata by upgrading Go from 1.25.7 to 1.26.3 across all modules and synchronizing dependency versions. Additionally, it fixes nil dereference bugs in bundle validation, refines removed Kubernetes API warnings to focus on fully deprecated resources, and updates CI tooling.

Changes

Go Toolchain Alignment and Code Validation Fixes

Layer / File(s)	Summary
Nil dereference fixes in bundle validation `staging/api/pkg/validation/internal/community.go`, `staging/api/pkg/validation/internal/operatorhub.go`, `staging/api/pkg/validation/internal/operatorhubv2.go`	Three bundle validation functions fixed to initialize `ManifestResult` empty and defer `bundle.Name` assignment until after nil checks, preventing nil dereference when `bundle` is `nil`.
Narrowed removed APIs warning scope for v1.25 `staging/api/pkg/validation/internal/removed_apis.go`, `staging/api/pkg/validation/internal/removed_apis_test.go`	Removed APIs warning logic refined to focus only on Kubernetes resources fully removed from their API group with no stable replacement; `deprecatedGroupResource` replaced with narrowed `removedGroupResource` set; test expectations updated to expect warning only for `podsecuritypolicies`.
Root module Go version and dependencies `go.mod`	Root `go.mod` Go toolchain updated from 1.25.7 to 1.26.3; direct dependencies `grpc-health-probe`, `operator-framework/api`, and `operator-framework/operator-registry` bumped; indirect dependencies updated for docker/cli, google/cel-go, prometheus/common, and yaml/v2.
OLM staging module Go version and dependencies `staging/operator-lifecycle-manager/go.mod`	`staging/operator-lifecycle-manager/go.mod` Go toolchain updated to 1.26.3; direct dependencies for `operator-framework/api`, `operator-framework/operator-registry`, and `prometheus/common` bumped; indirect dependencies updated.
API staging module Go version and Kubernetes dependencies `staging/api/go.mod`	`staging/api/go.mod` Go toolchain updated to 1.26.3; direct Podman, genproto, and Kubernetes module dependencies bumped; indirect dependencies updated for OpenTelemetry and other modules.
Operator-registry staging module dependencies `staging/operator-registry/go.mod`	Direct dependencies updated for `docker/cli`, `grpc-health-probe`, and `operator-framework/api`; indirect dependencies for google/cel-go and golang.org/x/net bumped.
CI workflow and team configuration updates `staging/api/.github/workflows/go.yaml`, `staging/api/OWNERS`	Codecov GitHub Action updated from v5 to v6; `staging/api/OWNERS` reviewers list updated by removing `anik120` and `exdx` and adding `fgiudici`.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Suggested labels

lgtm, verified

🚥 Pre-merge checks | ✅ 13 | ❌ 2

❌ Failed checks (2 warnings)

Check name	Status	Explanation	Resolution
Docstring Coverage	⚠️ Warning	Docstring coverage is 37.50% which is insufficient. The required threshold is 80.00%.	Write docstrings for the functions missing them to satisfy the coverage threshold.
Microshift Test Compatibility	⚠️ Warning	New Ginkgo tests use configv1.ClusterOperator (unavailable on MicroShift) without [Skipped:MicroShift] or [apigroup:...] protection labels.	Add [apigroup:config.openshift.io] tags or [Skipped:MicroShift] labels to incompatible tests in staging/operator-lifecycle-manager/pkg/controller/operators/openshift/.

✅ Passed checks (13 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The PR title accurately describes the main change—synchronizing staging and vendor directories from upstream repositories with dependency updates and bug fixes.
Linked Issues check	✅ Passed	The PR successfully addresses issue `#493` by synchronizing Go toolchain to 1.26.3 and updating dependencies to align with ART's metadata, ensuring CI testing reflects production builds.
Out of Scope Changes check	✅ Passed	All changes are directly related to upstream synchronization: dependency updates, Go version bump to 1.26.3, nil-pointer fixes, and maintainer list updates align with the stated PR objectives.
Stable And Deterministic Test Names	✅ Passed	No Ginkgo test files were modified in this PR. The only modified test file uses standard Go testing with static, deterministic test names.
Test Structure And Quality	✅ Passed	This PR contains no Ginkgo tests; the codebase uses only standard Go testing with table-driven test patterns. The check is inapplicable as the PR does not introduce or modify Ginkgo test code.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	This PR synchronizes existing tests from upstream operator-framework repositories. The tests are pre-existing, not newly developed in this PR, so the SNO compatibility check is not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	PR contains only dependency updates, CI changes, metadata updates, and validation fixes. No deployment manifests, operator code, or controllers with scheduling constraints are added.
Ote Binary Stdout Contract	✅ Passed	PR contains dependency updates and validator fixes with no modifications to process-level code (main, init, TestMain, suite setup, or top-level initializers) that would violate OTE stdout contract.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	No new Ginkgo e2e tests were added in this PR. The only test file modified (removed_apis_test.go) is a standard Go unit test using the testing package, not Ginkgo. The check does not apply.
No-Weak-Crypto	✅ Passed	No weak cryptography patterns detected. PR contains only dependency bumps, nil-check safety improvements, and validation logic updates with no crypto-related code changes.
Container-Privileges	✅ Passed	PR updates dependencies and validation code, not container manifests. All 6 deployments have allowPrivilegeEscalation: false; no privileged/hostPID/hostNetwork/hostIPC settings found.
No-Sensitive-Data-In-Logs	✅ Passed	PR changes include dependency updates and bug fixes. No logging exposes sensitive data: fmt.Println logs type-conversion errors; fmt.Sprintf builds Kubernetes API messages only.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

openshift-ci · 2026-06-05T00:04:30Z

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: openshift-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

DOWNSTREAM_OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci · 2026-06-05T00:04:31Z

[APPROVALNOTIFIER] This PR is APPROVED

Approval requirements bypassed by manually added approval.

This pull-request has been approved by: openshift-bot

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

DOWNSTREAM_OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci · 2026-06-06T00:08:05Z

New changes are detected. LGTM label has been removed.

Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.67.5 to 0.68.1. - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/CHANGELOG.md) - [Commits](prometheus/common@v0.67.5...v0.68.1) --- updated-dependencies: - dependency-name: github.com/prometheus/common dependency-version: 0.68.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: f9e42f35ce2ca14e019bdd86261e0fe7d7234b93

Signed-off-by: Todd Short <tshort@redhat.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: 614fad4e4b9a6b4d87e639e2638ec2be3c362efa

Update to: * github.com/operator-framework/operator-registry@v1.71.0 * github.com/operator-framework/api@v0.43.0 Signed-off-by: Todd Short <tshort@redhat.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: 72750c855e6828eae15f65d79592f2498cd5c1fd

…2 (#1998) Bumps [github.com/grpc-ecosystem/grpc-health-probe](https://github.com/grpc-ecosystem/grpc-health-probe) from 0.4.50 to 0.4.52. - [Release notes](https://github.com/grpc-ecosystem/grpc-health-probe/releases) - [Commits](grpc-ecosystem/grpc-health-probe@v0.4.50...v0.4.52) --- updated-dependencies: - dependency-name: github.com/grpc-ecosystem/grpc-health-probe dependency-version: 0.4.52 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: operator-registry Upstream-commit: b1c97368d55465f7a1d57095ac8c4daa2ec94bdf

Bumps [github.com/docker/cli](https://github.com/docker/cli) from 29.5.2+incompatible to 29.5.3+incompatible. - [Commits](docker/cli@v29.5.2...v29.5.3) --- updated-dependencies: - dependency-name: github.com/docker/cli dependency-version: 29.5.3+incompatible dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: operator-registry Upstream-commit: 2e03f899a2e05f9918241baa14a446f4d7d7fd15

Signed-off-by: Todd Short <tshort@redhat.com> Upstream-repository: operator-registry Upstream-commit: 9c948cdd1ab7331ccd63d3d2866cee72f6cce934

Signed-off-by: Todd Short <tshort@redhat.com> Upstream-repository: operator-registry Upstream-commit: e9534a9c63fd6a34a1b6523274b2172e8a718fec

Signed-off-by: Francesco Giudici <fgiudici@redhat.com> Upstream-repository: api Upstream-commit: d6b839ad38af8735d50a35c16608b509ec1b38b7

Bumps [codecov/codecov-action](https://github.com/codecov/codecov-action) from 5 to 6. - [Release notes](https://github.com/codecov/codecov-action/releases) - [Changelog](https://github.com/codecov/codecov-action/blob/main/CHANGELOG.md) - [Commits](codecov/codecov-action@v5...v6) --- updated-dependencies: - dependency-name: codecov/codecov-action dependency-version: '6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: api Upstream-commit: 8ad46923e7cf7a8b66f7b5b647288bb652497c12

Bumps [go.podman.io/image/v5](https://github.com/containers/container-libs) from 5.39.1 to 5.39.2. - [Release notes](https://github.com/containers/container-libs/releases) - [Commits](podman-container-tools/container-libs@image/v5.39.1...image/v5.39.2) --- updated-dependencies: - dependency-name: go.podman.io/image/v5 dependency-version: 5.39.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: api Upstream-commit: 3ee3c444ecf273f3d143971a9c351cb4dd69f9d5

Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) from 1.40.0 to 1.43.0. - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.43.0) --- updated-dependencies: - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.43.0 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: api Upstream-commit: a88e8308b944f22420cc47c1e7de2e78ae67bdb0

Signed-off-by: grokspawn <jordan@nimblewidget.com> Upstream-repository: api Upstream-commit: 3bd61295080f082de7d5602b7b676f01267149df

Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.27.0 to 0.28.0. - [Release notes](https://github.com/google/cel-go/releases) - [Commits](google/cel-go@v0.27.0...v0.28.0) --- updated-dependencies: - dependency-name: github.com/google/cel-go dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: api Upstream-commit: ee38ad0af11ea2230ea5647003a273178c52b3b5

Bumps the k8s-dependencies group with 4 updates: [k8s.io/api](https://github.com/kubernetes/api), [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver), [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) and [k8s.io/client-go](https://github.com/kubernetes/client-go). Updates `k8s.io/api` from 0.35.3 to 0.35.4 - [Commits](kubernetes/api@v0.35.3...v0.35.4) Updates `k8s.io/apiextensions-apiserver` from 0.35.3 to 0.35.4 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.35.3...v0.35.4) Updates `k8s.io/apimachinery` from 0.35.3 to 0.35.4 - [Commits](kubernetes/apimachinery@v0.35.3...v0.35.4) Updates `k8s.io/client-go` from 0.35.3 to 0.35.4 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.35.3...v0.35.4) --- updated-dependencies: - dependency-name: k8s.io/api dependency-version: 0.35.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: k8s-dependencies - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.35.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: k8s-dependencies - dependency-name: k8s.io/apimachinery dependency-version: 0.35.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: k8s-dependencies - dependency-name: k8s.io/client-go dependency-version: 0.35.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: k8s-dependencies ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: api Upstream-commit: b530c5bf46763e047d877a1d0b16b79dbebea6f2

Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.28.0 to 0.28.1. - [Release notes](https://github.com/google/cel-go/releases) - [Commits](google/cel-go@v0.28.0...v0.28.1) --- updated-dependencies: - dependency-name: github.com/google/cel-go dependency-version: 0.28.1 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: api Upstream-commit: 3acdcf590a04cc70699347065dd7269161471e49

Bumps [go.podman.io/image/v5](https://github.com/containers/container-libs) from 5.39.2 to 5.40.0. - [Release notes](https://github.com/containers/container-libs/releases) - [Commits](podman-container-tools/container-libs@image/v5.39.2...image/v5.40.0) --- updated-dependencies: - dependency-name: go.podman.io/image/v5 dependency-version: 5.40.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Upstream-repository: api Upstream-commit: 755d5d18962479cfb7db2c9e16d2c5a750dfd109

…penshift#493) Upstream-repository: api Upstream-commit: da918bd4375d1a7bc5abe4fb4f72158da37f6ced

Signed-off-by: Todd Short <tshort@redhat.com> Upstream-repository: api Upstream-commit: b1290def0d494bb14e1f272951fd7889f9dec2db

…les (openshift#496) * fix: stop emitting false-positive deprecated-API warnings for RBAC rules RBAC PolicyRules only specify apiGroups and resources, not versions. The deprecatedGroupResource map was flagging any RBAC rule that referenced a group+resource combination where a beta version had been removed, even when a stable version still exists in the same group. This produced false-positive warnings for operators that use stable APIs like batch/v1 CronJob, autoscaling/v2 HPA, events.k8s.io/v1 Event, policy/v1 PDB, discovery.k8s.io/v1 EndpointSlice, and node.k8s.io/v1 RuntimeClass. Remove these entries from the deprecatedGroupResource map since RBAC rules for them are valid. Keep only PodSecurityPolicy, which was entirely removed in v1.25 with no stable replacement in the policy group. The deprecatedGvk check (for actual versioned manifests in the bundle) is unaffected and continues to correctly flag deprecated objects. Fixes openshift#378 Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca> * refactor: rename deprecatedGroupResource to removedGroupResource Rename identifiers to match actual semantics: this map tracks resources entirely removed from their API group, not merely deprecated. Renames deprecatedGroupResource -> removedGroupResource and warnIfDeprecated -> warnIfRemoved. Suggested-by: Copilot Requested-by: perdasilva Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca> --------- Signed-off-by: Sebastien Tardif <sebtardif@ncf.ca> Upstream-repository: api Upstream-commit: 86d7cedb27dc0ec9a67903e4cf6ea18b31c80562

openshift-ci · 2026-06-09T00:08:36Z

New changes are detected. LGTM label has been removed.

openshift-ci · 2026-06-09T04:08:32Z

@openshift-bot: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/okd-scos-images	`dbd1a2a`	link	true	`/test okd-scos-images`
ci/prow/images	`dbd1a2a`	link	true	`/test images`
ci/prow/periodics-images	`dbd1a2a`	link	true	`/test periodics-images`

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

openshift-bot added approved Indicates a PR has been approved by an approver from all required OWNERS files. lgtm Indicates that a PR is ready to be merged. labels Jun 5, 2026

openshift-ci-robot added the jira/valid-reference Indicates that this PR references a valid Jira ticket of any type. label Jun 5, 2026

openshift-ci Bot requested review from ankitathomas and fgiudici June 5, 2026 00:04

openshift-bot force-pushed the synchronize-upstream branch from b870604 to 89e4524 Compare June 6, 2026 00:07

openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jun 6, 2026

openshift-bot added the lgtm Indicates that a PR is ready to be merged. label Jun 7, 2026

dependabot Bot and others added 17 commits June 9, 2026 00:03

Update to golang-1.26.3 (#3844)

8c3e13f

Signed-off-by: Todd Short <tshort@redhat.com> Upstream-repository: operator-lifecycle-manager Upstream-commit: 614fad4e4b9a6b4d87e639e2638ec2be3c362efa

Update to golang-1.26.3 (#2001)

cde058c

Signed-off-by: Todd Short <tshort@redhat.com> Upstream-repository: operator-registry Upstream-commit: 9c948cdd1ab7331ccd63d3d2866cee72f6cce934

Update to operator-framework/api@v0.43.0 (#2003)

6440930

Signed-off-by: Todd Short <tshort@redhat.com> Upstream-repository: operator-registry Upstream-commit: e9534a9c63fd6a34a1b6523274b2172e8a718fec

Add fgiudici as reviewer (openshift#483)

1e62b52

Signed-off-by: Francesco Giudici <fgiudici@redhat.com> Upstream-repository: api Upstream-commit: d6b839ad38af8735d50a35c16608b509ec1b38b7

remove idle maintainers (openshift#487)

5e4610c

Signed-off-by: grokspawn <jordan@nimblewidget.com> Upstream-repository: api Upstream-commit: 3bd61295080f082de7d5602b7b676f01267149df

fix(pkg/validation/internal): check nil pointers before dereference (o…

aba1b7c

…penshift#493) Upstream-repository: api Upstream-commit: da918bd4375d1a7bc5abe4fb4f72158da37f6ced

tmshort and others added 2 commits June 9, 2026 00:07

Update to golang-1.26.3 (openshift#497)

cb845c5

Signed-off-by: Todd Short <tshort@redhat.com> Upstream-repository: api Upstream-commit: b1290def0d494bb14e1f272951fd7889f9dec2db

openshift-bot force-pushed the synchronize-upstream branch from 89e4524 to dbd1a2a Compare June 9, 2026 00:08

openshift-ci Bot removed the lgtm Indicates that a PR is ready to be merged. label Jun 9, 2026

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

NO-ISSUE: Synchronize From Upstream Repositories#1316

NO-ISSUE: Synchronize From Upstream Repositories#1316
openshift-bot wants to merge 19 commits into
openshift:mainfrom
openshift-bot:synchronize-upstream

openshift-bot commented Jun 5, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

openshift-ci-robot commented Jun 5, 2026

Uh oh!

coderabbitai Bot commented Jun 5, 2026 •

edited

Loading

❌ Failed checks (2 warnings)

Uh oh!

openshift-ci Bot commented Jun 5, 2026

Uh oh!

openshift-ci Bot commented Jun 5, 2026

Uh oh!

openshift-ci Bot commented Jun 6, 2026

Uh oh!

openshift-ci Bot commented Jun 9, 2026

Uh oh!

openshift-ci Bot commented Jun 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

Conversation

openshift-bot commented Jun 5, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary by CodeRabbit

Uh oh!

openshift-ci-robot commented Jun 5, 2026

Uh oh!

coderabbitai Bot commented Jun 5, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Suggested labels

❌ Failed checks (2 warnings)

Uh oh!

openshift-ci Bot commented Jun 5, 2026

Uh oh!

openshift-ci Bot commented Jun 5, 2026

Uh oh!

openshift-ci Bot commented Jun 6, 2026

Uh oh!

openshift-ci Bot commented Jun 9, 2026

Uh oh!

openshift-ci Bot commented Jun 9, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

7 participants

openshift-bot commented Jun 5, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Jun 5, 2026 •

edited

Loading