Bump github.com/openshift/backplane-cli from 0.11.0 to 0.11.1 - #950

#!/usr/bin/env bash
set -euo pipefail

rg -n --hidden -g '!.git/**' \
  -i 'sbom|spdx|cyclonedx|provenance|slsa|cosign|sigstore|attest' .

#!/usr/bin/env bash
set -euo pipefail

printf '%s\n' '--- go.mod ---'
cat -n go.mod

printf '%s\n' '--- changed go.mod ranges ---'
git diff --unified=3 -- go.mod

printf '%s\n' '--- workflow and build files ---'
git ls-files | grep -E '(^|/)(\.github/workflows/|Makefile$|Containerfile|Dockerfile|.*\.ya?ml$|.*\.json$|.*\.ya?ml$)' | sed -n '1,200p'

printf '%s\n' '--- repository metadata and release configuration ---'
git ls-files | grep -E '(^|/)(\.github/|\.gitlab/|release|build|hack|Makefile|Taskfile|\.goreleaser\.ya?ml$)' | sed -n '1,240p'

#!/usr/bin/env bash
set -euo pipefail

printf '%s\n' '--- go.mod ---'
cat -n go.mod

printf '%s\n' '--- changed go.mod ranges ---'
git diff --unified=3 -- go.mod

printf '%s\n' '--- workflow and build files ---'
git ls-files | grep -E '(^|/)(\.github/workflows/|Makefile$|Containerfile|Dockerfile|.*\.ya?ml$|.*\.json$)' | sed -n '1,200p'

printf '%s\n' '--- release configuration ---'
git ls-files | grep -Ei '(^|/)(\.github/|\.gitlab/|release|build|hack|Makefile|Taskfile|\.goreleaser\.ya?ml$)' | sed -n '1,240p'

#!/usr/bin/env bash
set -euo pipefail

for f in .github/workflows/release.yaml \
         .github/workflows/release-on-version-bump.yaml \
         .github/workflows/fullsend.yaml \
         .github/workflows/trigger_copr.yaml \
         .goreleaser.yml \
         Makefile; do
  printf '\n--- %s ---\n' "$f"
  cat -n "$f"
done

#!/usr/bin/env bash
set -euo pipefail

printf '%s\n' '--- dependency changes in the current commit ---'
git diff --unified=1 HEAD^ HEAD -- go.mod

printf '%s\n' '--- go.sum entries for the highlighted modules ---'
rg -n 'github.com/aws/aws-sdk-go-v2/service/sts|github.com/aws/smithy-go|github.com/openshift/backplane-cli' go.sum || true

printf '%s\n' '--- OSV results for highlighted modules ---'
python3 - <<'PY'
import json
import urllib.request

queries = [
    ("github.com/aws/aws-sdk-go-v2/service/sts", "v1.45.4"),
    ("github.com/aws/smithy-go", "v1.27.6"),
    ("github.com/openshift/backplane-cli", "v0.11.1"),
]
for module, version in queries:
    request = urllib.request.Request(
        "https://api.osv.dev/v1/query",
        data=json.dumps({"package": {"name": module, "ecosystem": "Go"}, "version": version}).encode(),
        headers={"Content-Type": "application/json"},
    )
    try:
        with urllib.request.urlopen(request, timeout=20) as response:
            data = json.load(response)
        vulns = data.get("vulns", [])
        print(module, version, "vulnerabilities:", len(vulns))
        for vuln in vulns:
            print(" ", vuln.get("id"), vuln.get("summary", ""))
    except Exception as exc:
        print(module, version, "OSV query failed:", exc)
PY

#!/usr/bin/env bash
set -euo pipefail

eventstream_version="$(
  go list -m -f '{{.Version}}' \
    github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream
)"

echo "Resolved EventStream version: ${eventstream_version}"

minimum="$(printf '%s\n' v1.7.8 "$eventstream_version" | sort -V | head -n1)"
if [[ "$minimum" != "v1.7.8" ]]; then
  echo "EventStream version is below the patched version" >&2
  exit 1
fi

govulncheck -mode=mod ./...

#!/usr/bin/env bash
set -euo pipefail

printf '%s\n' '--- go.mod AWS EventStream references ---'
rg -n -C 2 'github\.com/aws/aws-sdk-go-v2(/aws/protocol/eventstream)?' go.mod go.sum || true

printf '%s\n' '--- all EventStream references in tracked files ---'
rg -n 'aws/protocol/eventstream|eventstream' --glob '!go.sum' --glob '!vendor/**' . | head -200 || true

printf '%s\n' '--- OSV advisory ---'
curl -fsSL 'https://api.osv.dev/v1/vulns/GO-2026-5764' |
  python3 -c 'import json,sys; d=json.load(sys.stdin); print(json.dumps({"id":d.get("id"),"summary":d.get("summary"),"details":d.get("details"),"affected":d.get("affected"),"references":d.get("references")}, indent=2))'