chore(deps): update module github.com/hashicorp/golang-lru to v2

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/hashicorp/golang-lru	v0.6.0 → v2.0.7

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

hashicorp/golang-lru (github.com/hashicorp/golang-lru)

v2.0.7: golang-lru 2.0.7

Compare Source

What's Changed

• expirable LRU: fix so that Get/Peek cannot return an ok and empty value by @​irenarindos in #​156
• add a Resize method to 2Q by @​veloting in #​151

New Contributors

• @​irenarindos made their first contribution in #​156
• @​veloting made their first contribution in #​151

Full Changelog: hashicorp/golang-lru@v2.0.6...v2.0.7

v2.0.6: golang-lru 2.0.6

Compare Source

This release removes calling the eviction callback when the Add method is called with an item that is already in the cache (#​154); it reverts PR #​135 which caused issue #​141.

What's Changed

• [COMPLIANCE] Add Copyright and License Headers by @​hashicorp-copywrite in #​149
• Revert #​135 and add tests for eviction callback by @​mgaffney in #​154

Full Changelog: hashicorp/golang-lru@v2.0.5...v2.0.6

v2.0.5: Add expirable LRU

Compare Source

This release adds an expirable LRU package.

v2.0.4: Add eviction callback on replace

Compare Source

This release encompasses #​135

v2.0.3: Add Values() and separate ARC

Compare Source

This release adds the Values() method on caches and removes ARC from the main module so that it does not need to be imported along with the rest of the module for those concerned around its patent status.

The code/API is the same, but is now found at github.com/hashicorp/golang-lru/arc/v2.

v2.0.2: Reduce memory usage

Compare Source

Minor fixes to reduce some memory usage

v2.0.1

Compare Source

v2.0.0: Generics

Compare Source

This release adds support for generics, and bumps the package version appropriately.

v1.0.2: Last release of v0/v1 code base

Compare Source

This release is the same as v0.6.0. It allows projects depending on the v0 code to upgrade safely to v1. This is the last release of v0/v1 code. Dependent projects should upgrade to v2.

v1.0.1: Pointer to v0/v2

This is a placeholder tag to instruct people to explicitly use v0 tags or use the v2 module.

---

Configuration

📅 Schedule: (in timezone UTC)

• Branch creation
  • Between 02:00 AM and 04:59 AM, Monday through Friday (* 2-4 * * 1-5)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[coderabbitai]

Note

Reviews paused

It looks like this branch is under active development. To avoid overwhelming you with review comments due to an influx of new commits, CodeRabbit has automatically paused this review. You can configure this behavior by changing the reviews.auto_review.auto_pause_after_reviewed_commits setting.

Use the following commands to manage reviews:

• @coderabbitai resume to resume automatic reviews.
• @coderabbitai review to trigger a single review.

Use the checkboxes below for quick actions:

• ▶️ Resume reviews
• 🔍 Trigger review

Walkthrough

go.mod downgrades the indirect github.com/hashicorp/golang-lru dependency to v0.5.4 and adds github.com/hashicorp/golang-lru/v2 at v2.0.7.

Changes

Go module dependency updates

Layer / File(s)	Summary
Indirect LRU requirements go.mod	Downgrades github.com/hashicorp/golang-lru from v0.6.0 to v0.5.4 and adds github.com/hashicorp/golang-lru/v2 at v2.0.7.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Suggested reviewers: clcollins, zmird-r

---

Important

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

❌ Failed checks (1 error)

Check name	Status	Explanation	Resolution
Ote Binary Stdout Contract	❌ Error	fips.go's init() prints to stdout, and Makefile enables fips_enabled by default, so the main binary violates the JSON-only stdout contract.	Send the FIPS banner to stderr (or remove it) and ensure all process-level setup stays off stdout; this issue is unrelated to the go.mod bump.

✅ Passed checks (14 passed)

Check name	Status	Explanation
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Stable And Deterministic Test Names	✅ Passed	Only go.mod/go.sum changed; no test files or Ginkgo titles were added or modified.
Test Structure And Quality	✅ Passed	Only go.mod and go.sum changed; no Ginkgo test code was added or modified, so the test-structure check is not applicable.
Microshift Test Compatibility	✅ Passed	PR only updates go.mod/go.sum dependency versions; no Ginkgo e2e tests or OpenShift API usages were added.
Single Node Openshift (Sno) Test Compatibility	✅ Passed	Only go.mod and go.sum changed; no new Ginkgo e2e tests were added, so the SNO compatibility check is not applicable.
Topology-Aware Scheduling Compatibility	✅ Passed	Only go.mod/go.sum changed; no manifests, controllers, or scheduling constraints were modified, so topology-aware scheduling is unaffected.
Ipv6 And Disconnected Network Test Compatibility	✅ Passed	No Ginkgo e2e tests or networking code were added; only go.mod/go.sum dependency updates are present.
No-Weak-Crypto	✅ Passed	PR only changes go.mod/go.sum for golang-lru versions; no source files or crypto APIs were added, and the diff scan found no weak-crypto usage.
Container-Privileges	✅ Passed	PR only updates go.mod/go.sum for golang-lru; no container/K8s manifests or privilege settings were changed.
No-Sensitive-Data-In-Logs	✅ Passed	PR only changes go.mod dependency versions; no logging code or sensitive-data exposure was added.
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly reflects the main change: upgrading golang-lru to v2.

✨ Finishing Touches

📝 Generate docstrings

• Create stacked PR
• Commit on current branch

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/master/github.com-hashicorp-golang-lru-2.x

---

_{Comment @coderabbitai help to get the list of available commands.}

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 67.61%. Comparing base (1e20666) to head (f3975fd).
⚠️ Report is 6 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master     #577   +/-   ##
=======================================
  Coverage   67.61%   67.61%           
=======================================
  Files           8        8           
  Lines        1124     1124           
=======================================
  Hits          760      760           
  Misses        330      330           
  Partials       34       34           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign bmeng for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign bmeng for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[nephomaniac]

/retest

[openshift-ci]

@red-hat-konflux[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/validate	f3975fd	link	true	/test validate

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[nephomaniac]

This change is a downgrade (golang-lru v0.6.0 → v0.5.4), not an upgrade. Mintmaker appears confused. Close.