chore(deps): update module cel.dev/expr to v0.25.2

[red-hat-konflux]

This PR contains the following updates:

Package	Change	Age	Confidence
cel.dev/expr	v0.25.1 → v0.25.2

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

google/cel-spec (cel.dev/expr)

v0.25.2

Compare Source

What's Changed

• Add conformance tests for (string).reverse() by @​jnthntatum in #​491
• Updates to the conformance tests for integer values in %e and %f format directives by @​TristonianJones in #​495
• Add automated BCR publishing on release tags by @​mmorel-35 in #​498
• Add clarification on scoping rules. by @​jnthntatum in #​506
• Networking extension conformance tests by @​TristonianJones in #​507
• Add conformance test cases for null assignability around repeated fields and maps by @​l46kok in #​510

New Contributors

• @​mmorel-35 made their first contribution in #​498

Full Changelog: cel-expr/cel-spec@v0.25.1...v0.25.2

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]
Once this PR has been reviewed and has the lgtm label, please assign miguelhbrito for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: Repository: openshift-online/coderabbit/.coderabbit.yaml

Review profile: CHILL

Plan: Enterprise

Run ID: 3d843490-75b3-4bc4-ace7-d6217ef481ae

📥 Commits

Reviewing files that changed from the base of the PR and between 542cc7b and 8d7cac6.

⛔ Files ignored due to path filters (1)

• go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go.mod

✅ Files skipped from review due to trivial changes (1)

• go.mod

---

Walkthrough

The PR updates the indirect Go module dependency cel.dev/expr from version v0.25.1 to v0.25.2 in go.mod. This is a patch-level version bump for a transitive dependency.

Changes

Dependency Update

Layer / File(s)	Summary
cel.dev/expr version bump go.mod	Indirect dependency cel.dev/expr is updated from v0.25.1 to v0.25.2.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Suggested labels

ok-to-test, lgtm, approved

Suggested reviewers

• rcampos2029
• miguelhbrito

---

Important

Pre-merge checks failed

Please resolve all errors before merging. Addressing warnings is optional.

❌ Failed checks (1 error)

Check name	Status	Explanation	Resolution
No-Sensitive-Data-In-Logs	❌ Error	The PR contains plaintext password logging in cmd/ocm/create/idp/htpasswd.go:63 which appends the actual generated password to a message string displayed via fmt.Printf at line 359-360 of cmd.go, e...	Remove the plaintext password from the message string on line 63 of htpasswd.go. Instead of including the password in the output message, only display instructions to retrieve it securely through the cluster console or omit the password...

✅ Passed checks (10 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: updating the cel.dev/expr module dependency from v0.25.1 to v0.25.2.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check	✅ Passed	Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check	✅ Passed	Check skipped because no linked issues were found for this pull request.
No-Weak-Crypto	✅ Passed	PR only updates cel.dev/expr dependency from v0.25.1 to v0.25.2. CEL is an expression language (not crypto-related). No weak cryptography patterns (MD5, SHA1, DES, RC4, etc.) found in codebase. Rel...
Container-Privileges	✅ Passed	PR only updates cel.dev/expr dependency in go.mod. Container/K8s manifests in the repo do not set privileged: true, hostPID, hostNetwork, hostIPC, SYS_ADMIN, or allowPrivilegeEscalation: true. The...
No-Hardcoded-Secrets	✅ Passed	No hardcoded secrets found. PR only updates go.mod/go.sum with cel.dev/expr v0.25.2; contains only legitimate module version declarations and standard Go checksum hashes.
No-Injection-Vectors	✅ Passed	PR only updates cel.dev/expr dependency version v0.25.1→v0.25.2 in go.mod. No injection vectors introduced; existing code uses safe patterns (yaml.Unmarshal from embedded assets, exec.Command with...
Ai-Attribution	✅ Passed	No AI tools mentioned in PR or commits. This is an automated dependency update by Renovate/MintMaker with standard bot attribution and no AI-specific trailers.

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch konflux/mintmaker/main/cel.dev-expr-0.x

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[openshift-ci]

Hi @red-hat-konflux[bot]. Thanks for your PR.

I'm waiting for a openshift-online member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.