[konflux-agent] Fix: sync go.sum with go.mod dependency bumps (PR #1669)

[raptorsun]

Auto-fix by Konflux Agent

Fixes build failure in #1669.

Original PR: #1669
Failed PipelineRun: lightspeed-operator-on-pull-request-hkk6k

Root Cause

PR #1669 bumped two dependencies in go.mod but did not update go.sum:

• github.com/openshift/api: v0.0.0-20260420151639-34e60874783e → v0.0.0-20260424174501-4f63a40a2970
• google.golang.org/protobuf: v1.36.11 → v1.36.12-0.20260120151049-f2248ac996af

During the hermetic Konflux build, go mod download (run with cachi2's env that enables -mod=mod) tried to update go.sum with the new checksums. This failed with:

go: updating go.sum: open /workspace/go.sum: permission denied

Both linux/x86_64 and linux/arm64 builds failed with the same error at Dockerfile step 7.

Changes

• Ran go mod tidy to sync go.sum with the updated go.mod
• Only go.sum changed: 4 lines replaced (checksums for the 2 new dependency versions)

Validation

• go mod tidy completed without errors
• go build ./cmd/... ./internal/... ./api/... succeeded
• Unit tests in internal/controller/watchers and internal/tls pass

---

This PR was automatically created by konflux-agent to fix a build failure. Please review the changes and merge if correct.

Summary by CodeRabbit

• Chores
  • Updated Go module dependencies to latest versions.

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 1ce044ae-0c42-4caf-9606-28065f64130c

📥 Commits

Reviewing files that changed from the base of the PR and between f5ea3b0 and 69621ae.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum, !go.sum

📒 Files selected for processing (1)

• go.mod

---

📝 Walkthrough

Walkthrough

Two Go module dependencies are updated to newer versions in go.mod: github.com/openshift/api to a commit pseudo-version dated 2026-04-24, and google.golang.org/protobuf (indirect) to a newer v1.36.12 pseudo-version. These are isolated version bumps with no code logic changes.

Changes

Dependency Updates

Layer / File(s)	Summary
Go module dependency versions go.mod	github.com/openshift/api is bumped to a newer commit pseudo-version, and google.golang.org/protobuf (indirect) is updated from v1.36.11 to a newer pseudo-version.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Suggested reviewers

• bparees

🚥 Pre-merge checks | ✅ 5

✅ Passed checks (5 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The pull request title accurately reflects the main change: syncing go.sum with go.mod dependency bumps, which is the primary purpose of this fix.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests

⚔️ Resolve merge conflicts

• Resolve merge conflict in branch konflux-agent/fix-pr1669-gosum-sync

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

@raptorsun: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/ci-index-lightspeed-bundle-test	69621ae	link	true	/test ci-index-lightspeed-bundle-test
ci/prow/bundle-e2e-4-21	69621ae	link	true	/test bundle-e2e-4-21
ci/prow/security	69621ae	link	true	/test security
ci/prow/unit	69621ae	link	true	/test unit
ci/prow/images	69621ae	link	true	/test images
ci/prow/fips-image-scan-operator	69621ae	link	true	/test fips-image-scan-operator
ci/prow/generate	69621ae	link	true	/test generate

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign blublinsky for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[raptorsun]

/hold
test only