Bump github.com/google/cel-go from 0.26.0 to 0.29.0 #1

Closed

dependabot[bot] wants to merge 1 commit from dependabot/go_modules/github.com/google/cel-go-0.29.0 into main

dependabot[bot] commented

2026-09-29 13:08:47 +00:00

(Migrated from github.com)

Bumps github.com/google/cel-go from 0.26.0 to 0.29.0.

Commits

fa16799 avoid repeated construction of cost tracker (#1357)
ea3d5c0 feat(ext): add json encoder (#1340)
a4d0d64 startsWith / endsWith runtime cost agreement with checked cost (#1351)
d4efa77 Ensure receiver and global matches cost estimates agree (#1350)
13cff33 ext/lists: add max size check to genRange() to prevent OOM (#1310)
f0ffa7e Execution frame integration with updated IntepretableV2 (#1344)
f1ec2f6 guard int32/uint32 map key narrowing in qualifyInternal (#1337)
258e7c8 Managed execution frame with async call foundations (#1316)
14f6746 validate offset on empty-string path in indexOf and lastIndexOf (#1335)
783267d reject out-of-range minutes in timezone offset parsing (#1336)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [github.com/google/cel-go](https://github.com/google/cel-go) from 0.26.0 to 0.29.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/google/cel-go/commit/fa16799e423d709cfb1a20c10c1db7dc6e640e55"><code>fa16799</code></a> avoid repeated construction of cost tracker (<a href="https://redirect.github.com/google/cel-go/issues/1357">#1357</a>)</li> <li><a href="https://github.com/google/cel-go/commit/ea3d5c059bf6a1739d4a2ff30f925a8adffdb4ea"><code>ea3d5c0</code></a> feat(ext): add json encoder (<a href="https://redirect.github.com/google/cel-go/issues/1340">#1340</a>)</li> <li><a href="https://github.com/google/cel-go/commit/a4d0d643deeea6408654de2ec9944895d23f36a5"><code>a4d0d64</code></a> startsWith / endsWith runtime cost agreement with checked cost (<a href="https://redirect.github.com/google/cel-go/issues/1351">#1351</a>)</li> <li><a href="https://github.com/google/cel-go/commit/d4efa7716addf9d7f0e080311359b9711c6f1222"><code>d4efa77</code></a> Ensure receiver and global matches cost estimates agree (<a href="https://redirect.github.com/google/cel-go/issues/1350">#1350</a>)</li> <li><a href="https://github.com/google/cel-go/commit/13cff33f367085ae4ce20ddd472cbc41bd477682"><code>13cff33</code></a> ext/lists: add max size check to genRange() to prevent OOM (<a href="https://redirect.github.com/google/cel-go/issues/1310">#1310</a>)</li> <li><a href="https://github.com/google/cel-go/commit/f0ffa7e32eef67fad74d72b1fe0f422f0c10d65c"><code>f0ffa7e</code></a> Execution frame integration with updated IntepretableV2 (<a href="https://redirect.github.com/google/cel-go/issues/1344">#1344</a>)</li> <li><a href="https://github.com/google/cel-go/commit/f1ec2f6fe571afa8a226933c1bc51078b4f2d985"><code>f1ec2f6</code></a> guard int32/uint32 map key narrowing in qualifyInternal (<a href="https://redirect.github.com/google/cel-go/issues/1337">#1337</a>)</li> <li><a href="https://github.com/google/cel-go/commit/258e7c89f4c3facbc8be8f7c6bc3f932684283c3"><code>258e7c8</code></a> Managed execution frame with async call foundations (<a href="https://redirect.github.com/google/cel-go/issues/1316">#1316</a>)</li> <li><a href="https://github.com/google/cel-go/commit/14f6746a286f198c2a976749331b7bf4aa2d4bd2"><code>14f6746</code></a> validate offset on empty-string path in indexOf and lastIndexOf (<a href="https://redirect.github.com/google/cel-go/issues/1335">#1335</a>)</li> <li><a href="https://github.com/google/cel-go/commit/783267d0a5f2f94396e4ec90a109127bf9754591"><code>783267d</code></a> reject out-of-range minutes in timezone offset parsing (<a href="https://redirect.github.com/google/cel-go/issues/1336">#1336</a>)</li> <li>Additional commits viewable in <a href="https://github.com/google/cel-go/compare/v0.26.0...v0.29.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/cel-go&package-manager=go_modules&previous-version=0.26.0&new-version=0.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/mikluko/nats-operator/network/alerts). </details>

mikluko commented

2026-09-29 14:29:28 +00:00

(Migrated from github.com)

Renovate owns Go module updates in this repository; closing the Dependabot pull request.

dependabot[bot] commented

2026-09-29 14:29:31 +00:00

(Migrated from github.com)

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting `@dependabot ignore this major version` or `@dependabot ignore this minor version`. If you change your mind, just re-open this PR and I'll resolve any conflicts on it.