chore(deps): update module github.com/cenkalti/backoff/v5 to v7

[red-hat-konflux-kflux-prd-rh02]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/cenkalti/backoff/v5	v5.0.3 → v7.0.0

---

Warning

Some dependencies could not be looked up. Check the warning logs for more information.

---

Release Notes

cenkalti/backoff (github.com/cenkalti/backoff/v5)

v7.0.0

Compare Source

v6.0.1

Compare Source

v6.0.0

Compare Source

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

To execute skipped test pipelines write comment /ok-to-test.

---

Documentation

Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.

[red-hat-konflux-kflux-prd-rh02]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: mod upgrade --mod-name=github.com/cenkalti/backoff/v5 -t=7
could not load package: err: exit status 1: stderr: go: inconsistent vendoring in /tmp/renovate/repos/github/centos-automotive-suite/automotive-dev-operator:
	github.com/cenkalti/backoff/v7@v7.0.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt

	To ignore the vendor directory, use -mod=readonly or -mod=mod.
	To sync the vendor directory, run:
		go mod vendor

[ambient-code]

Automated Review Summary

PR: chore(deps): update module github.com/cenkalti/backoff/v5 to v7

Checks performed:

1. go.mod modification? Yes — updates github.com/cenkalti/backoff from v5 to v7. This is a major version bump (different Go module path: /v5 → /v7). The PR updates go.mod but does not update the vendor directory — it still contains the v5 vendor files while go.mod references v7. This causes the inconsistent vendoring error.

2. CI status: ❌ All checks failing. Root cause:

   go: inconsistent vendoring:
     github.com/cenkalti/backoff/v7@v7.0.0: is explicitly required in go.mod, but not marked as explicit in vendor/modules.txt
     github.com/cenkalti/backoff/v5@v5.0.3: is marked as explicit in vendor/modules.txt, but not explicitly required in go.mod
   

   The PR is incomplete — the vendor directory was not re-generated after the major version bump.

3. k8s version bump? No.

Assessment: ⚠️ Incomplete PR — the backoff major version bump from v5 to v7 requires running go mod vendor to update vendor/ and vendor/modules.txt. Additionally, since this is an indirect dependency, it's worth checking whether any callers in our codebase import cenkalti/backoff/v5 directly (they don't appear to, it's pulled in transitively). The vendor directory needs regeneration for this PR to be mergeable.

Note: The renovate/artifacts status check also shows FAILURE, confirming the vendor update was missed.

[ambient-code]

Follow-up: This PR cannot be fixed by an additional commit from this review — it needs the Renovate bot to re-run with artifacts update enabled, or a manual go mod tidy && go mod vendor commit on the PR branch. The vendor mismatch is the sole blocker.