[v0.65.x] Bump Golang 1.25.7 + Migrate ytt dependency#1109
Merged
devanshuVmware merged 4 commits intocarvel-dev:v0.65.xfrom Feb 16, 2026
Merged
[v0.65.x] Bump Golang 1.25.7 + Migrate ytt dependency#1109devanshuVmware merged 4 commits intocarvel-dev:v0.65.xfrom
devanshuVmware merged 4 commits intocarvel-dev:v0.65.xfrom
Conversation
Migrate ytt dependency from legacy github.com/k14s/ytt (v0.36.0) to the official carvel.dev/ytt repository (v0.52.2). The k14s namespace is deprecated and ytt has been moved under the Carvel organization. This update includes: - Update go.mod to use carvel.dev/ytt v0.52.2 - Update Go version from 1.24.9 to 1.24.11 (required by ytt) - Update import paths in overlay_contract_v1_mod.go - Update import paths in wait_rule_contract_v1.go - Adapt to ytt API changes (ReadFileFunc -> ReadFilesFunc) - Regenerate go.sum and vendor directory API Compatibility: The ytt v0.52.2 API changed ReadFileFunc to ReadFilesFunc with a different signature. Updated both files to wrap file content in []*files.File instead of returning []byte. Version v0.52.2 selected for: - Go 1.24 compatibility (matches kapp's Go 1.24.11) - Latest stable release with recent CVE fixes - No breaking changes from v0.36.0 (aside from API signature) Signed-off-by: Siegfried Kiermayer <siegfried.kiermayer@sap.com> (cherry picked from commit 32a9c80)
Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com> Update golang, vendir, ytt Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com> (cherry picked from commit bf34177)
Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com> Add new-from-rev Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com> (cherry picked from commit 7e611e4)
Signed-off-by: Unnati Mishra <unnati.mishra@broadcom.com> (cherry picked from commit 9ec503e)
devanshuVmware
approved these changes
Feb 16, 2026
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
3 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
What this PR does / why we need it:
This PR adds few cherry-picks from develop branch to v0.65.x branch in order to fix CVEs and include some commits.
List of cherry-picks
Migrate ytt dependency to carvel.dev/ytt
Bump golang + golangci-lint
Remove exlude dirs to fix golangci-lint + Add new-from-rev
Update golang to 1.25.7
Which issue(s) this PR fixes:
Fixes #
Does this PR introduce a user-facing change?
Additional Notes for your reviewer:
Review Checklist:
a link to that PR
change
Additional documentation e.g., Proposal, usage docs, etc.: