[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/project-kessel/kessel-sdk-go	v1.13.0 → v1.13.1

---

Release Notes

project-kessel/kessel-sdk-go (github.com/project-kessel/kessel-sdk-go)

v1.13.1

Compare Source

What's Changed

• RHCLOUD-51807: adds agents guide update to enforce go doc comments by @​tonytheleg in #​94
• RHCLOUD-50303: add security.md, openssf, governance by @​akoserwal in #​87
• Update generated protobuf files by @​github-actions[bot] in #​97
• RHCLOUD-52588: reject OAuth2 credentials on insecure channel by @​platex-rehor-bot in #​104

Full Changelog: project-kessel/kessel-sdk-go@v1.13.0...v1.13.1

---

Configuration

📅 Schedule: (in timezone Europe/Prague)

• Branch creation
  • Between 03:00 AM and 10:59 AM, only on Monday (* 3-10 * * 1)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

Summary by Sourcery

Update the Go module dependencies to consume the latest Kessel SDK patch release and Go toolchain version.

Enhancements:

• Upgrade the Kessel SDK dependency to v1.13.1, including the corresponding module checksums.

Build:

• Update the declared Go toolchain version to 1.26.10.

[sourcery-ai]

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This dependency-only update moves the Kessel SDK to v1.13.1 and refreshes module metadata; the release includes regenerated protobufs, OAuth2 rejection on insecure channels, and repository governance/documentation updates. Review compatibility with existing Kessel client usage and the intentional Go version change before relying on automerge.

File-Level Changes

Change	Details	Files
Upgrade the Kessel SDK dependency and refresh its module checksums.	Change github.com/project-kessel/kessel-sdk-go from v1.13.0 to v1.13.1. Update go.sum entries for the dependency resolution. Review the Go toolchain directive change from 1.26.0 to 1.26.10, which is unrelated to the SDK version bump but affects build requirements.	go.mod go.sum

---

Tips and commands

Interacting with Sourcery

• Trigger a new review: Comment @sourcery-ai review on the pull request.
• Continue discussions: Reply directly to Sourcery's review comments.
• Generate a GitHub issue from a review comment: Ask Sourcery to create an
  issue from a review comment by replying to it. You can also reply to a
  review comment with @sourcery-ai issue to create an issue from it.
• Generate a pull request title: Write @sourcery-ai anywhere in the pull
  request title to generate a title at any time. You can also comment
  @sourcery-ai title on the pull request to (re-)generate the title at any time.
• Generate a pull request summary: Write @sourcery-ai summary anywhere in
  the pull request body to generate a PR summary at any time exactly where you
  want it. You can also comment @sourcery-ai summary on the pull request to
  (re-)generate the summary at any time.
• Generate reviewer's guide: Comment @sourcery-ai guide on the pull
  request to (re-)generate the reviewer's guide at any time.
• Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
  pull request to resolve all Sourcery comments. Useful if you've already
  addressed all the comments and don't want to see them anymore.
• Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
  request to dismiss all existing Sourcery reviews. Especially useful if you
  want to start fresh with a new review - don't forget to comment
  @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

• Enable or disable review features such as the Sourcery-generated pull request
  summary, the reviewer's guide, and others.
• Change the review language.
• Add, remove or edit custom review instructions.
• Adjust other review settings.

Getting Help

• Contact our support team for questions or feedback.
• Visit our documentation for detailed guides and information.
• Keep in touch with the Sourcery team by following us on X/Twitter, LinkedIn or GitHub.

[red-hat-konflux]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• The go directive was updated for compatibility reasons

Due to Go's usage of Minimal Version Selection (MVS), these packages have been updated to the minimum version available, so will still abide by minimumReleaseAge=3 days

Details:

Package	Change
go	1.26.0 -> 1.26.10

[sourcery-ai]

Hey - I've found 1 issue

Prompt for AI Agents

Please address the comments from this code review:

## Individual Comments

### Comment 1
<location path="go.mod" line_range="24" />
<code_context>
 	github.com/lib/pq v1.12.3
 	github.com/pkg/errors v0.9.1
 	github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2
-	github.com/project-kessel/kessel-sdk-go v1.13.0
+	github.com/project-kessel/kessel-sdk-go v1.13.1
 	github.com/prometheus/client_golang v1.25.0
</code_context>
<issue_to_address>
**Kessel checks return server errors**

When `KESSEL_AUTH_ENABLED` and `KESSEL_INSECURE` are both true, `setupClient` combines OAuth2 credentials with an insecure channel, so SDK v1.13.1's `Build()` returns an error; `hasPermissionKessel` returns HTTP 500 for Kessel-protected requests, and `TestSetupClient`'s success assertion fails.

Use a secure channel whenever OAuth2 authentication is enabled.
</issue_to_address>

Sourcery assessment

Approval pending. 1 finding to address first.

Blocking findings: go.mod:24

---

Sourcery is free for open source - if you like our reviews please consider sharing them ✨

• X
• Mastodon
• LinkedIn
• Facebook

[sourcery-ai]

🔴 Critical · Kessel checks return server errors

When KESSEL_AUTH_ENABLED and KESSEL_INSECURE are both true, setupClient combines OAuth2 credentials with an insecure channel, so SDK v1.13.1's Build() returns an error; hasPermissionKessel returns HTTP 500 for Kessel-protected requests, and TestSetupClient's success assertion fails.

Use a secure channel whenever OAuth2 authentication is enabled.

Prompt for AI agents

In `go.mod` at line 24:

**Kessel checks return server errors**

When `KESSEL_AUTH_ENABLED` and `KESSEL_INSECURE` are both true, `setupClient` combines OAuth2 credentials with an insecure channel, so SDK v1.13.1's `Build()` returns an error; `hasPermissionKessel` returns HTTP 500 for Kessel-protected requests, and `TestSetupClient`'s success assertion fails.

Use a secure channel whenever OAuth2 authentication is enabled.

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 60.14%. Comparing base (6d3658d) to head (5ac3882).
⚠️ Report is 4 commits behind head on master.

Additional details and impacted files

@@           Coverage Diff           @@
##           master    #2378   +/-   ##
=======================================
  Coverage   60.14%   60.14%           
=======================================
  Files         158      158           
  Lines       10161    10161           
=======================================
  Hits         6111     6111           
  Misses       3424     3424           
  Partials      626      626           

Flag	Coverage Δ
unittests	60.14% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.