chore(deps): update module gopkg.in/evanphx/json-patch.v4 to v5

[red-hat-konflux-kflux-prd-rh03]

This PR contains the following updates:

Package	Change	Age	Confidence
gopkg.in/evanphx/json-patch.v4	v4.13.0 → v5.9.11

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

evanphx/json-patch (gopkg.in/evanphx/json-patch.v4)

v5.9.11

Compare Source

What's Changed

• Export errBadJSONDoc and errBadJSONPatch errors by @​skitt in #​209

Full Changelog: evanphx/json-patch@v5.9.10...v5.9.11

v5.9.10

Compare Source

What's Changed

• Drop the reference to gopkg.in for v5 by @​skitt in #​203
• remove unmaintained errors pkg(github.com/pkg/errors) by @​koba1t in #​206

New Contributors

• @​skitt made their first contribution in #​203
• @​koba1t made their first contribution in #​206

Full Changelog: evanphx/json-patch@v5.9.0...v5.9.10

v5.9.0

Compare Source

What's Changed

• Validate that the partialDoc is decoded correctly by @​evanphx in #​201
• Add option to control if the output is HTMLEscaped by @​evanphx in #​202

Full Changelog: evanphx/json-patch@v5.8.1...v5.9.0

v5.8.1: Fix API breakage

Compare Source

This PR fixes Operation containing a reference to internal/json and breaking the ability to manually compose one. This restores that ability using a type alias.

Full Changelog: evanphx/json-patch@v5.8.0...v5.8.1

v5.8.0: Blargh Phixs and Empathyprovements

Compare Source

This release fixes a few stray panics, addresses large number accuracy, and improves performance!

What's Changed

• Compare strings after decoding them to handle unicode correctly. Fixes #​172 by @​evanphx in #​195
• Always use UseNumber() to avoid float64 lossyness by @​evanphx in #​194
• Handle null correctly when introduced by replace. Fixes #​171 by @​evanphx in #​196
• Handle from="" more properly. Fixes #​192 by @​evanphx in #​193
• Improve performance by @​evanphx in #​197

Full Changelog: evanphx/json-patch@v5.7.0...v5.8.0

v5.7.0: The 2023 Release

Compare Source

What's Changed

• Fix invalid sprintf by @​howardjohn in #​152
• Add CIFuzz GitHub action by @​DavidKorczynski in #​167
• README: Remove Travis by @​ohkinozomu in #​164
• Updated min supported version to go 1.18 by @​Neo2308 in #​181
• Added dependabot by @​Neo2308 in #​182
• Pre-flight DecodePatch validation: Issue #​177 by @​radwaretaltr in #​180
• Check if raw is a null pointer for findObject by @​JosieLi-Google in #​173
• Bump actions/checkout from 2 to 4 by @​dependabot in #​187
• Fix panic on test op by @​erickertz in #​158

New Contributors

• @​howardjohn made their first contribution in #​152
• @​DavidKorczynski made their first contribution in #​167
• @​ohkinozomu made their first contribution in #​164
• @​Neo2308 made their first contribution in #​181
• @​radwaretaltr made their first contribution in #​180
• @​JosieLi-Google made their first contribution in #​173
• @​dependabot made their first contribution in #​187
• @​erickertz made their first contribution in #​158

Full Changelog: evanphx/json-patch@v5.6.0...v5.7.0

v5.6.0: Bug fixes

Compare Source

What's Changed

• Function ensurePathExists should handle appending correctly by @​MarcelMue in #​148
• Fix partial negative indice support in v4 by @​zqzten in #​146

New Contributors

• @​MarcelMue made their first contribution in #​148
• @​zqzten made their first contribution in #​146

Full Changelog: evanphx/json-patch@v5.5.0...v5.6.0

v5.5.0: Better null handling

Compare Source

This incorporates a few fixes related to how nulls are handles in array's and objects.

v5.3.0: Fix zero sized document crash

Compare Source

This fixes a crash bug where submitted an empty slice as the document would panic.

v5.2.0

Compare Source

v5.1.0

Compare Source

v5.0.0: Proper Go modules release

Compare Source

This release has a proper /v5 directory, unlike the previous releases that did not have a /v4 dir. Thanks to @​BenTheElder for getting this sorted out!

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • Between 02:00 AM and 04:59 AM, Monday through Friday (* 2-4 * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci]

Hi @red-hat-konflux-kflux-prd-rh03[bot]. Thanks for your PR.

I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux-kflux-prd-rh03[bot]
Once this PR has been reviewed and has the lgtm label, please assign ajpantuso for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[fullsend-ai-retro]

🤖 Finished Retro · ✅ Success · Started 8:03 AM UTC · Completed 8:12 AM UTC

Commit: f2e50cb · View workflow run →

[fullsend-ai-retro]

Retro: PR #295 — Bot dependency update with zero agent interaction

PR #295 was an automated dependency update from MintMaker/Renovate (red-hat-konflux-kflux-prd-rh03[bot]) attempting a major version bump of gopkg.in/evanphx/json-patch from v4 to v5. The PR changed a single line in go.mod. All 7 required Prow CI checks failed (the major version bump requires corresponding go.sum updates and potentially code changes for API differences). No human ever reviewed or commented. The PR sat open for ~2 months (Jun 17 – Aug 14) before the bot autoclosed it.

Agent involvement: none. The fullsend routing logic correctly skipped the review agent because the bot author lacks triage permission on the repo — a deliberate security gate (ADR 0054). The only agent that ran was this retro, triggered by the PR close event. This retro itself is an instance of the waste pattern: a retro agent consuming compute to analyze a bot PR with zero prior agent interaction and zero human interaction, producing no actionable findings.

No new proposals filed — all candidate improvements are covered by existing open issues:

• Skip retro for zero-agent-involvement bot PRs: Covered by fullsend-ai/fullsend #5943, #5295, #3833, #4006, and 8+ additional issues. Meta-issue #5817 proposes consolidating these 22+ overlapping issues into a single design issue.
• Review agent routing for bot-authored PRs: Covered by #1371, #5757, #5777, and 12+ additional issues.
• Agent analysis of dependency update PRs: Covered by #4594 (verify multi-module Go dependency update completeness), #3049 (surface breaking-change warnings), #4293 (fast-path bot dependency PRs), and others.

This PR provides additional evidence for #5943 (skip retro dispatch for unmerged PRs with zero fullsend agent involvement) — the retro agent consumed compute to analyze a PR where there was nothing to analyze. Resolving that issue would have prevented this retro from running at all.

[openshift-ci]

@red-hat-konflux-kflux-prd-rh03[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/coverage	f2e50cb	link	true	/test coverage
ci/prow/lint	7a7cb23	link	true	/test lint
ci/prow/test	7a7cb23	link	true	/test test
ci/prow/validate	7a7cb23	link	true	/test validate
ci/prow/osd-gcp-e2e	f2e50cb	link	true	/test osd-gcp-e2e
ci/prow/images	7a7cb23	link	true	/test images

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.