chore(deps): bump github.com/openshift-online/rosa-hyperfleet-api/clientset from 0.0.0-20260825215224-aaca052bcde7 to 0.1.7

[dependabot]

Bumps github.com/openshift-online/rosa-hyperfleet-api/clientset from 0.0.0-20260825215224-aaca052bcde7 to 0.1.7.

Commits

• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

• Chores
  • Updated an internal API dependency to a stable released version.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign typeid for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift-online/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: f29f7c0e-aadd-481c-a33d-7e1e9df4fe8f

📥 Commits

Reviewing files that changed from the base of the PR and between 82b3f74 and fd743c5.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

Included review availability: Your plan provides up to 12 included reviews per hour; 8 remain after this review.

---

Walkthrough

The pull request updates the direct rosa-hyperfleet-api/clientset dependency in go.mod from an unreleased pseudo-version to v0.1.7.

Changes

Dependency update

Layer / File(s)	Summary
Update Hyperfleet API client version go.mod	The direct github.com/openshift-online/rosa-hyperfleet-api/clientset requirement now uses v0.1.7.

Estimated code review effort: 1 (Trivial) | ~2 minutes

Merge Risk: ⚪ Minimal · up to fd743

This PR only updates a Go clientset dependency version, with no actionable merge-blocking risk remaining beyond normal checks and review.

Suggested reviewers: cdoan1, typeid

🚥 Pre-merge checks | ✅ 11

✅ Passed checks (11 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title clearly identifies the dependency and the version update from the unreleased pseudo-version to v0.1.7. It accurately summarizes the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0…
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No-Weak-Crypto	✅ Passed	No weak-crypto issue is introduced. The PR changes only the clientset version and checksums. The parent pseudo-version and v0.1.7 have identical source files and module metadata. The clientset uses SH…
Container-Privileges	✅ Passed	The pull request changes only go.mod and go.sum to update a Go dependency. The diff introduces no container or Kubernetes manifest changes and contains none of the checked privilege settings. The …
No-Sensitive-Data-In-Logs	✅ Passed	No sensitive-data logging was introduced. The PR changes only the clientset version in go.mod and its checksums in go.sum. The old pseudo-version and v0.1.7 archives contain the same 30 files with no …
No-Hardcoded-Secrets	✅ Passed	PASS. The pull request changes only go.mod and go.sum. The added go.mod value is the version v0.1.7. The added go.sum values are h1: module checksums that decode to 32-byte digests, not cr…
No-Injection-Vectors	✅ Passed	PASS: The pull request changes only the clientset version in go.mod and the corresponding checksums in go.sum; it adds no application code or injection sink. The cached v0.1.7 clientset source…
Ai-Attribution	✅ Passed	The check passes. The pull request range contains only commit fd743c5, a Dependabot dependency update. Its message mentions no AI tool and contains only a Signed-off-by trailer. The authored PR descri…

Full details: Docstring Coverage

Explanation

No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check. Docstring coverage is scoped to functions touched by this diff. Analyzed 0 functions across 0 files. (1 skipped: 1 unsupported.)

Full details: No-Weak-Crypto

Explanation

No weak-crypto issue is introduced. The PR changes only the clientset version and checksums. The parent pseudo-version and v0.1.7 have identical source files and module metadata. The clientset uses SHA-256 for SigV4 body hashing and has no MD5, SHA-1, DES, 3DES, RC4, Blowfish, ECB, custom crypto, or secret comparison implementation. The repository's existing SHA-1 OIDC thumbprint code is unchanged and therefore is not caused by this PR.

Full details: Container-Privileges

Explanation

The pull request changes only go.mod and go.sum to update a Go dependency. The diff introduces no container or Kubernetes manifest changes and contains none of the checked privilege settings. The repository has an existing privileged: true setting in docker-compose.localstack.yaml, but it is unchanged by this pull request and includes comments explaining the local socket access and root user requirement. Therefore, the pull request does not introduce a flagged condition.

Full details: No-Sensitive-Data-In-Logs

Explanation

No sensitive-data logging was introduced. The PR changes only the clientset version in go.mod and its checksums in go.sum. The old pseudo-version and v0.1.7 archives contain the same 30 files with no source differences, and their module manifests are identical. The dependency source has no logging calls that output credentials, tokens, PII, hostnames, or customer data.

Full details: No-Hardcoded-Secrets

Explanation

PASS. The pull request changes only go.mod and go.sum. The added go.mod value is the version v0.1.7. The added go.sum values are h1: module checksums that decode to 32-byte digests, not credentials. No added line contains an API key, token, password, secret variable assignment, or URL with embedded credentials. No source or configuration file changed.

Full details: No-Injection-Vectors

Explanation

PASS: The pull request changes only the clientset version in go.mod and the corresponding checksums in go.sum; it adds no application code or injection sink. The cached v0.1.7 clientset source contains no os.system, eval, exec, unsafe YAML load, SQL concatenation, pickle.loads, or dangerouslySetInnerHTML patterns. Its inspected code performs HTTP client setup, URL rewriting, and AWS request signing, with no stated custom-check failure condition.

Full details: Ai-Attribution

Explanation

The check passes. The pull request range contains only commit fd743c5, a Dependabot dependency update. Its message mentions no AI tool and contains only a Signed-off-by trailer. The authored PR description also does not mention AI use. A Co-Authored-By trailer naming Claude exists only in the earlier, unchanged commit f7b76ed, so it is not introduced by this pull request.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch dependabot/go_modules/github.com/openshift-online/rosa-hyperfleet-api/clientset-0.1.7

---

_{Comment @coderabbitai help to get the list of available commands.}