chore(deps): Bump the misc-dependencies group across 3 directories with 27 updates

[dependabot]

Bumps the misc-dependencies group with 13 updates in the / directory:

Package	From	To
github.com/fsnotify/fsnotify	1.9.0	1.10.1
github.com/fxamacker/cbor/v2	2.9.1	2.9.2
github.com/go-logr/logr	1.4.3	1.4.4
github.com/go-openapi/jsonpointer	0.22.5	1.0.0
github.com/go-openapi/jsonreference	0.21.5	1.0.0
github.com/go-openapi/swag	0.25.5	0.28.0
github.com/pelletier/go-toml/v2	2.3.0	2.4.3
go.yaml.in/yaml/v3	3.0.4	3.0.5
golang.org/x/mod	0.37.0	0.38.0
golang.org/x/net	0.56.0	0.57.0
golang.org/x/tools	0.47.0	0.48.0
github.com/onsi/ginkgo/v2	2.28.1	2.32.0
github.com/Masterminds/semver/v3	3.4.0	3.5.0

Bumps the misc-dependencies group with 11 updates in the /tests/e2e directory:

Package	From	To
github.com/fxamacker/cbor/v2	2.9.1	2.9.2
github.com/go-logr/logr	1.4.3	1.4.4
github.com/go-openapi/jsonpointer	0.22.5	1.0.0
github.com/go-openapi/jsonreference	0.21.5	1.0.0
github.com/go-openapi/swag	0.25.5	0.28.0
go.yaml.in/yaml/v3	3.0.4	3.0.5
golang.org/x/mod	0.37.0	0.38.0
golang.org/x/net	0.56.0	0.57.0
golang.org/x/tools	0.47.0	0.48.0
github.com/onsi/ginkgo/v2	2.28.1	2.32.0
github.com/Masterminds/semver/v3	3.4.0	3.5.0

Bumps the misc-dependencies group with 8 updates in the /tests/integration directory:

Package	From	To
github.com/fsnotify/fsnotify	1.9.0	1.10.1
github.com/fxamacker/cbor/v2	2.9.1	2.9.2
github.com/go-logr/logr	1.4.3	1.4.4
github.com/go-openapi/jsonpointer	0.22.5	1.0.0
github.com/go-openapi/jsonreference	0.21.5	1.0.0
github.com/go-openapi/swag	0.25.5	0.28.0
go.yaml.in/yaml/v3	3.0.4	3.0.5
golang.org/x/net	0.56.0	0.57.0

Updates github.com/fsnotify/fsnotify from 1.9.0 to 1.10.1

Release notes

Sourced from github.com/fsnotify/fsnotify's releases.

v1.10.1

Changes and fixes

• inotify: don't remove sibling watches sharing a path prefix (#754)

• inotify, windows: don't rename sibling watches sharing a path prefix (#755)

#754: fsnotify/fsnotify#754 #755: fsnotify/fsnotify#755

v1.10.0

This version of fsnotify needs Go 1.23.

Changes and fixes

• inotify: improve initialization error message (#731)

• inotify: send Rename event if recursive watch is renamed (#696)

• inotify: avoid copying event buffers when reading names (#741)

• kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)

• kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)

• windows: fix nil pointer dereference in remWatch (#736)

• windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

#696: fsnotify/fsnotify#696 #709: fsnotify/fsnotify#709 #731: fsnotify/fsnotify#731 #736: fsnotify/fsnotify#736 #740: fsnotify/fsnotify#740 #741: fsnotify/fsnotify#741 #748: fsnotify/fsnotify#748 #749: fsnotify/fsnotify#749

Changelog

Sourced from github.com/fsnotify/fsnotify's changelog.

1.10.1 2026-05-04

Changes and fixes

• inotify: don't remove sibling watches sharing a path prefix (#754)

• inotify, windows: don't rename sibling watches sharing a path prefix (#755)

#754: fsnotify/fsnotify#754 #755: fsnotify/fsnotify#755

1.10.0 2026-04-30

This version of fsnotify needs Go 1.23.

Changes and fixes

• inotify: improve initialization error message (#731)

• inotify: send Rename event if recursive watch is renamed (#696)

• inotify: avoid copying event buffers when reading names (#741)

• kqueue: skip dangling symlinks (ENOENT) in watchDirectoryFiles, so a bad entry no longer aborts Watcher.Add for the whole directory (#748)

• kqueue: drop watches directly in Close() to fix a file descriptor leak when recycling watchers (#740)

• windows: fix nil pointer dereference in remWatch (#736)

• windows: lock watch field updates against concurrent WatchList to fix a race introduced in v1.9.0 (#709, #749)

#696: fsnotify/fsnotify#696 #709: fsnotify/fsnotify#709 #731: fsnotify/fsnotify#731 #736: fsnotify/fsnotify#736 #740: fsnotify/fsnotify#740 #741: fsnotify/fsnotify#741 #748: fsnotify/fsnotify#748 #749: fsnotify/fsnotify#749

Commits

• 76b01a6 Release 1.10.1
• fec150b Update changelog
• 162b421 inotify, windows: don't rename sibling watches sharing a path prefix (#755)
• 224257f inotify: don't remove sibling watches sharing a path prefix (#754)
• e0c956c windows: document directory Write events and stabilize tests (#745)
• 8d01d7b Release 1.10.0
• 602284e Update changelog
• 7f03e59 kqueue: skip ENOENT entries in watchDirectoryFiles (#748)
• dab9dde windows: lock watch field updates against concurrent WatchList (#709) (#749)
• eadf267 kqueue: drop watches directly in Close() instead of going through remove() (#...
• Additional commits viewable in compare view

Updates github.com/fxamacker/cbor/v2 from 2.9.1 to 2.9.2

Release notes

Sourced from github.com/fxamacker/cbor/v2's releases.

v2.9.2

This release refactors and hardens the streaming encoder by adding stricter checks for encoding CBOR indefinite-length data. Other changes include minor bugfixes, defensive checks, and more tests.

Projects that don't use CBOR indefinite-length data may also want to upgrade (summary of prior releases).

The stricter checks in the encoder prevent improper use of the library and bad inputs from producing malformed CBOR indefinite-length data that would be rejected by the decoder.

This release passed fuzz tests (billions of execs) and it is production quality.

What's Changed

• Reject encoding indefinite-length map with odd item count by @​fxamacker in fxamacker/cbor#764
• Reject encoding indefinite-length data item as a chunk inside indefinite-length byte string or text string by @​fxamacker in fxamacker/cbor#765
• Make TagSet.Remove a no-op when contentType is nil by @​fxamacker in fxamacker/cbor#766
• Refactor indefinite-length encoding and improve chunk validation during encoding by @​fxamacker in fxamacker/cbor#767
• Add more tests, fix a nit in unreachable panic message, update docs & ci by @​fxamacker in fxamacker/cbor#768

CI / GitHub Actions and Docs

• Bump actions/setup-go from 6.3.0 to 6.4.0 by @​dependabot[bot] in fxamacker/cbor#760
• Bump github/codeql-action from 4.34.1 to 4.35.1 by @​dependabot[bot] in fxamacker/cbor#761
• Bump github/codeql-action from 4.35.1 to 4.35.2 by @​dependabot[bot] in fxamacker/cbor#763
• Update README for v2.9.2 release by @​fxamacker in fxamacker/cbor#769

Full Changelog: fxamacker/cbor@v2.9.1...v2.9.2

Commits

• 45589ab Merge pull request #769 from fxamacker/fxamacker/update-readme-release-status
• 8e98ea5 Update README for v2.9.2 release
• e501aca Merge pull request #768 from fxamacker/fxamacker/update-docs
• e6af0aa Merge pull request #767 from fxamacker/fxamacker/refactor-indefinite-length-e...
• 57f1601 Merge pull request #766 from fxamacker/fxamacker/no-opt-to-remove-nil-type-in...
• 0cdb674 Fix indefinite-length string chunk validation
• c0db60f Improve GitHub Workflow code coverage regex
• 63937fe Fix panic message to print the unrecognized tag
• f0352a5 Add more tests
• 0c20a0f Refactor encoding of indefinite-length data item
• Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.4

What's Changed

• drop +build tags by @​pohly in go-logr/logr#401
• CI: avoid floating dependencies, fix issues by @​pohly in go-logr/logr#432
• Bump to Go 1.26 by @​thockin in go-logr/logr#445
• funcr: bound slog.Group nesting depth to prevent stack overflow by @​martinholovsky in go-logr/logr#447
• funcr: Handle and test recursive values by @​thockin in go-logr/logr#446

New Contributors

• @​martinholovsky made their first contribution in go-logr/logr#447

Full Changelog: go-logr/logr@v1.4.3...v1.4.4

Commits

• 96a9aba Fix lint
• 51c6302 Better implementation of pointer recursion checking
• c667114 funcr: Handle and test recursive values
• f7ffadb Add benchmark for pointer args
• e2a3c8e funcr: bound slog.Group nesting depth to prevent stack overflow
• 2886d2b build(deps): bump actions/setup-go from 6.5.0 to 7.0.0
• 0b40896 build(deps): bump github/codeql-action/upload-sarif
• 77f671b Bump to Go 1.26
• cce283f build(deps): bump golangci/golangci-lint-action from 9.2.1 to 9.3.0
• 3832a11 build(deps): bump github/codeql-action/upload-sarif
• Additional commits viewable in compare view

Updates github.com/go-openapi/jsonpointer from 0.22.5 to 1.0.0

Release notes

Sourced from github.com/go-openapi/jsonpointer's releases.

v1.0.0

1.0.0 - 2026-07-07

Stable API pledge - no change from v0.24.0

Full Changelog: go-openapi/jsonpointer@v0.24.0...v1.0.0

2 commits in this release.

---

Documentation

• doc: announce v1.0.0 by @​fredbi in #144 ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #143 ...

---

People who contributed to this release

• @​fredbi

---

jsonpointer license terms

v0.24.0

0.24.0 - 2026-06-29

Full Changelog: go-openapi/jsonpointer@v0.23.2...v0.24.0

17 commits in this release.

---

Implemented enhancements

• feat(jsonname): added new json name provider more respectful of go conventions for JSON (#195) by @​fredbi ...

... (truncated)

Commits

• 94e8608 doc: announce v1.0.0 (#144)
• 67f7036 doc: updated contributors file
• 933d263 doc: announced dependencies reshuffle for v0.24.0 (#142)
• 3663b09 Merge pull request #141 from fredbi/import/jsonname
• ae73433 chore: wired the local jsonname package & relinted
• 5667aac build(deps): bump the go-openapi-dependencies group across 15 directories wit...
• d138cf8 feat(jsonname): added new json name provider more respectful of go convention...
• e8f76b3 build(deps): bump the go-openapi-dependencies group across 15 directories wit...
• 1106664 test: upgraded tests to use generics (#176)
• c86da87 test: upgraded to go-openapi/testify@v2.3.0 (#175)
• Additional commits viewable in compare view

Updates github.com/go-openapi/jsonreference from 0.21.5 to 1.0.0

Release notes

Sourced from github.com/go-openapi/jsonreference's releases.

v1.0.0

1.0.0 - 2026-07-07

Stable API pledge - no change from v0.21.6

Full Changelog: go-openapi/jsonreference@v0.21.6...v1.0.0

10 commits in this release.

---

Documentation

• doc: announce v1.0.0 by @​fredbi in #108 ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #106 ...
• ci: post README announcements to discord + bump ci-workflows to v0.4.0 by @​fredbi in #104 ...
• doc: updated contributors file by @​bot-go-openapi[bot] in #101 ...
• doc: remove unused links in README by @​fredbi ...

Miscellaneous tasks

• chore(ci): run contributors workflow monthly instead of weekly by @​fredbi in #103 ...

Updates

• build(deps): bump github.com/go-openapi/jsonpointer from 0.23.1 to 0.24.0 in the go-openapi-dependencies group by @​dependabot[bot] in #107 ...
• build(deps): bump github.com/go-openapi/testify/v2 from 2.5.1 to 2.6.0 in the go-openapi-dependencies group by @​dependabot[bot] in #105 ...
• build(deps): bump the development-dependencies group with 8 updates by @​dependabot[bot] in #102 ...
• build(deps): bump the development-dependencies group with 8 updates by @​dependabot[bot] in #100 ...

---

People who contributed to this release

• @​fredbi

---

jsonreference license terms

... (truncated)

Commits

• edb350b doc: announce v1.0.0 (#108)
• ee066a0 build(deps): bump github.com/go-openapi/jsonpointer
• baa407a doc: updated contributors file
• bb78ae3 build(deps): bump github.com/go-openapi/testify/v2
• 23a0dfe ci: post README announcements to discord + bump ci-workflows to v0.4.0 (#104)
• d4d1eb2 chore(ci): run contributors workflow monthly instead of weekly (#103)
• 830a670 build(deps): bump the development-dependencies group with 8 updates
• 0873ec0 doc: updated contributors file
• 938b954 build(deps): bump the development-dependencies group with 8 updates
• f4dadab doc: remove unused links in README
• Additional commits viewable in compare view

Updates github.com/go-openapi/swag from 0.25.5 to 0.28.0

Release notes

Sourced from github.com/go-openapi/swag's releases.

v0.28.0

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

---

Implemented enhancements

• feat(conv): add support for AppendXXX formatting of numbers by @​fredbi in #229 ...

Miscellaneous tasks

• chore: prepare release v0.28.0 by @​bot-go-openapi[bot] in #230 ...

Updates

• build(deps): bump the development-dependencies group with 9 updates by @​dependabot[bot] in #228 ...

---

People who contributed to this release

• @​fredbi

---

swag license terms

Per-module changes

---

conv (0.28.0)

Implemented enhancements

... (truncated)

Commits

• e3df199 chore: prepare release v0.28.0
• fd5a309 feat(conv): add support for AppendXXX formatting of numbers (#229)
• 785bef3 build(deps): bump the development-dependencies group with 9 updates
• 179769d chore: prepare release v0.27.3
• 1d10f1e fix: rooted path should also work on windows (#226)
• c0c66d9 chore: prepare release v0.27.2
• b0d2d9d fix(loading): resolve absolute in-root paths under WithRoot (#224)
• c8a41f7 chore: prepare release v0.27.1
• 221c895 chore: more go.mod replace missing
• c110f25 Merge pull request #222 from fredbi/chore/fix-deps
• Additional commits viewable in compare view

Updates github.com/go-openapi/swag/cmdutils from 0.25.5 to 0.28.0

Release notes

Sourced from github.com/go-openapi/swag/cmdutils's releases.

v0.28.0

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

---

Implemented enhancements

• feat(conv): add support for AppendXXX formatting of numbers by @​fredbi in #229 ...

Miscellaneous tasks

• chore: prepare release v0.28.0 by @​bot-go-openapi[bot] in #230 ...

Updates

• build(deps): bump the development-dependencies group with 9 updates by @​dependabot[bot] in #228 ...

---

People who contributed to this release

• @​fredbi

---

swag license terms

Per-module changes

---

conv (0.28.0)

Implemented enhancements

... (truncated)

Commits

• e3df199 chore: prepare release v0.28.0
• fd5a309 feat(conv): add support for AppendXXX formatting of numbers (#229)
• 785bef3 build(deps): bump the development-dependencies group with 9 updates
• 179769d chore: prepare release v0.27.3
• 1d10f1e fix: rooted path should also work on windows (#226)
• c0c66d9 chore: prepare release v0.27.2
• b0d2d9d fix(loading): resolve absolute in-root paths under WithRoot (#224)
• c8a41f7 chore: prepare release v0.27.1
• 221c895 chore: more go.mod replace missing
• c110f25 Merge pull request #222 from fredbi/chore/fix-deps
• Additional commits viewable in compare view

Updates github.com/go-openapi/swag/conv from 0.25.5 to 0.28.0

Release notes

Sourced from github.com/go-openapi/swag/conv's releases.

v0.28.0

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

---

Implemented enhancements

• feat(conv): add support for AppendXXX formatting of numbers by @​fredbi in #229 ...

Miscellaneous tasks

• chore: prepare release v0.28.0 by @​bot-go-openapi[bot] in #230 ...

Updates

• build(deps): bump the development-dependencies group with 9 updates by @​dependabot[bot] in #228 ...

---

People who contributed to this release

• @​fredbi

---

swag license terms

Per-module changes

---

conv (0.28.0)

Implemented enhancements

... (truncated)

Commits

• e3df199 chore: prepare release v0.28.0
• fd5a309 feat(conv): add support for AppendXXX formatting of numbers (#229)
• 785bef3 build(deps): bump the development-dependencies group with 9 updates
• 179769d chore: prepare release v0.27.3
• 1d10f1e fix: rooted path should also work on windows (#226)
• c0c66d9 chore: prepare release v0.27.2
• b0d2d9d fix(loading): resolve absolute in-root paths under WithRoot (#224)
• c8a41f7 chore: prepare release v0.27.1
• 221c895 chore: more go.mod replace missing
• c110f25 Merge pull request #222 from fredbi/chore/fix-deps
• Additional commits viewable in compare view

Updates github.com/go-openapi/swag/fileutils from 0.25.5 to 0.28.0

Release notes

Sourced from github.com/go-openapi/swag/fileutils's releases.

v0.28.0

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

---

Implemented enhancements

• feat(conv): add support for AppendXXX formatting of numbers by @​fredbi in #229 ...

Miscellaneous tasks

• chore: prepare release v0.28.0 by @​bot-go-openapi[bot] in #230 ...

Updates

• build(deps): bump the development-dependencies group with 9 updates by @​dependabot[bot] in #228 ...

---

People who contributed to this release

• @​fredbi

---

swag license terms

Per-module changes

---

conv (0.28.0)

Implemented enhancements

... (truncated)

Commits

• e3df199 chore: prepare release v0.28.0
• fd5a309 feat(conv): add support for AppendXXX formatting of numbers (#229)
• 785bef3 build(deps): bump the development-dependencies group with 9 updates
• 179769d chore: prepare release v0.27.3
• 1d10f1e fix: rooted path should also work on windows (#226)
• c0c66d9 chore: prepare release v0.27.2
• b0d2d9d fix(loading): resolve absolute in-root paths under WithRoot (#224)
• c8a41f7 chore: prepare release v0.27.1
• 221c895 chore: more go.mod replace missing
• c110f25 Merge pull request #222 from fredbi/chore/fix-deps
• Additional commits viewable in compare view

Updates github.com/go-openapi/swag/jsonutils from 0.25.5 to 0.28.0

Release notes

Sourced from github.com/go-openapi/swag/jsonutils's releases.

v0.28.0

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

---

Implemented enhancements

• feat(conv): add support for AppendXXX formatting of numbers by @​fredbi in #229 ...

Miscellaneous tasks

• chore: prepare release v0.28.0 by @​bot-go-openapi[bot] in #230 ...

Updates

• build(deps): bump the development-dependencies group with 9 updates by @​dependabot[bot] in #228 ...

---

People who contributed to this release

• @​fredbi

---

swag license terms

Per-module changes

---

conv (0.28.0)

Implemented enhancements

... (truncated)

Commits

• e3df199 chore: prepare release v0.28.0
• fd5a309 feat(conv): add support for AppendXXX formatting of numbers (#229)
• 785bef3 build(deps): bump the development-dependencies group with 9 updates
• 179769d chore: prepare release v0.27.3
• 1d10f1e fix: rooted path should also work on windows (#226)
• c0c66d9 chore: prepare release v0.27.2
• b0d2d9d fix(loading): resolve absolute in-root paths under WithRoot (#224)
• c8a41f7 chore: prepare release v0.27.1
• 221c895 chore: more go.mod replace missing
• c110f25 Merge pull request #222 from fredbi/chore/fix-deps
• Additional commits viewable in compare view

Updates github.com/go-openapi/swag/loading from 0.25.5 to 0.28.0

Release notes

Sourced from github.com/go-openapi/swag/loading's releases.

v0.28.0

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

---

Implemented enhancements

• feat(conv): add support for AppendXXX formatting of numbers by @​fredbi in #229 ...

Miscellaneous tasks

• chore: prepare release v0.28.0 by @​bot-go-openapi[bot] in #230 ...

Updates

• build(deps): bump the development-dependencies group with 9 updates by @​dependabot[bot] in #228 ...

---

People who contributed to this release

• @​fredbi

---

swag license terms

Per-module changes

---

conv (0.28.0)

Implemented enhancements

... (truncated)

Commits

• e3df199 chore: prepare release v0.28.0
• fd5a309 feat(conv): add support for AppendXXX formatting of numbers (#229)
• 785bef3 build(deps): bump the development-dependencies group with 9 updates
• 179769d chore: prepare release v0.27.3
• 1d10f1e fix: rooted path should also work on windows (#226)
• c0c66d9 chore: prepare release v0.27.2
• b0d2d9d fix(loading): resolve absolute in-root paths under WithRoot (#224)
• c8a41f7 chore: prepare release v0.27.1
• 221c895 chore: more go.mod replace missing
• c110f25 Merge pull request #222 from fredbi/chore/fix-deps
• Additional commits viewable in compare view

Updates github.com/go-openapi/swag/mangling from 0.25.5 to 0.28.0

Release notes

Sourced from github.com/go-openapi/swag/mangling's releases.

v0.28.0

0.28.0 - 2026-07-27

Full Changelog: go-openapi/swag@v0.27.3...v0.28.0

3 commits in this release.

---

Implemented enhancements

• feat(conv): add support for AppendXXX formatting of numbers by @​fredbi in #229 ...

Miscellaneous tasks

• chore: prepare release v0.28.0 by @​bot-go-openapi[bot] in #230 ...

Updates

• build(deps): bump the development-dependencies group with 9 updates by @​dependabot[bot] in #228 ...

---

People who contributed to this release

• @​fredbi

---

swag license terms

Per-module changes

---

conv (0.28.0)

Implemented enhancements

... (truncated)

Commits

• e3df199 chore: prepare release v0.28.0
• fd5a309 feat(conv): add support for AppendXXX formatting of numbers (#229)
• 785bef3 build(deps): bump the development-dependencies group with 9 updates
• 179769d chore: prepare release v0.27.3
• 1d10f1e fix: rooted path should also work on windows (#226)
• c0c66d9 chore: prepare release v0.27.2
• b0d2d9d fix(loading): resolve absolute in-root paths under WithRoot (#224)
• c8a41f7 chore: prepare release v0.27.1
• ...

  Description has been truncated

[kubernetes-prow]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[kubernetes-prow]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign kmala for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment