[scality-renovate]

This PR contains the following updates:

Package	Type	Update	Change	Pending
golang (source)	stage	patch	1.27.3-alpine → 1.27.4-alpine
mcr.microsoft.com/devcontainers/go	final	minor	1.26-trixie → 1.27-trixie
vektra/mockery		minor	v3.8.1 → v3.9.0	v3.9.1

mockery changes: run go generate ./... and commit the mocks if they differ.

---

Release Notes

vektra/mockery

v3.9.0

Compare Source

What's Changed

• Document migration from v2 directory-based commands by @​ac1982 in #​1190
• fix(migrate): report PackagePath and MockName template variables by @​ybai08 in #​1194
• Let generate: false exclude an interface even when all: true by @​thespags in #​1199
• Allow replace-type to cascade from parent configs by @​thespags in #​1197
• fix(migrate): carry v2 profile over to cpuprofile by @​ybai08 in #​1195
• v3: add memprofile option by @​ybai08 in #​1200
• Add resolve-internal-aliases to render public aliases of internal types by @​thespags in #​1198

New Contributors

• @​ac1982 made their first contribution in #​1190
• @​ybai08 made their first contribution in #​1194
• @​thespags made their first contribution in #​1199

Full Changelog: vektra/mockery@v3.8.1...v3.9.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • "before 9am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate CLI.

[github-actions]

Dependency Bump Evaluation

Version change:

• golang builder image (Dockerfile): 1.27.3-alpine -> 1.27.4-alpine
• mcr.microsoft.com/devcontainers/go (dev container): 1.26-trixie -> 1.27-trixie
• vektra/mockery (pre-merge CI): v3.8.1 -> v3.9.0

Semver bump type: patch (Go toolchain) / minor (devcontainer, mockery)

Changes:

• Go 1.27.4: security fixes in cgo, the go command, compiler, linker and net/http; bug fixes in runtime, crypto/tls, crypto/rsa, net, etc.
• Devcontainer moves to Go 1.27, which matches go 1.27.3 in go.mod (the 1.26 image was behind the module's required version).
• mockery v3.9.0: additive config options (memprofile, resolve-internal-aliases, replace-type cascading, generate: false with all: true) and migrate fixes. No change to generated output by default.

Breaking changes: None

Security concerns: None. This is a security-positive bump: the Go 1.27.4 fixes reach the shipped binary (compiler, linker, net/http used by client-go).

Impact on codebase: Only image tags and the CI tool version change, all digest-pinned. go.mod already requires Go 1.27.3, so the 1.27.4 builder is compatible. On the latest push (ecca718), the go-generate job passed again with mockery v3.9.0, so the committed mocks are unchanged and no regeneration is needed.

Recommendation: SAFE TO MERGE (once the pending build, lint and test checks are green)

Notes: Low risk. Re-evaluated after the PR was re-pushed (ecca718); the content matches the previous evaluation. The PR is not approved automatically because it was authored by scality-renovate[bot] and only pure dependabot PRs get auto-approval. Renovate lists mockery v3.9.1 as pending, so a follow-up bump will come.

— Claude Code