Bump the gomod-dependencies group with 8 updates

[dependabot]

Bumps the gomod-dependencies group with 8 updates:

Package	From	To
github.com/gardener/gardener	1.86.1	1.88.0
github.com/gardener/gardener-extension-provider-openstack	1.38.2	1.39.0
github.com/gardener/machine-controller-manager	0.51.1	0.52.0
github.com/google/uuid	1.5.0	1.6.0
github.com/onsi/ginkgo/v2	2.14.0	2.15.0
github.com/onsi/gomega	1.30.0	1.31.1
golang.org/x/crypto	0.18.0	0.19.0
sigs.k8s.io/yaml	1.3.0	1.4.0

Updates github.com/gardener/gardener from 1.86.1 to 1.88.0

Release notes

Sourced from github.com/gardener/gardener's releases.

v1.88.0

[gardener/gardener]

⚠️ Breaking Changes

• [OPERATOR] The docker CRI is no longer supported for machine images in the CloudProfile. Docker CRI was already not supported for Shoots with Kubernetes versions >= v1.23, so adding this CRI is a no-op currently. Please remove all the usages of docker CRI from your CloudProfiles before upgrading to this version. by @​shafeeqes #9135
• [OPERATOR] The GA-ed WorkerlessShoots feature gate has been removed. by @​acumino #9094
• [OPERATOR] The GA-ed ContainerdRegistryHostsDir feature gate has been removed. by @​ialidzhikov #9058
• [DEPENDENCY] The Selector field of the github.com/gardener/gardener/pkg/extensions/webhook.{Webhook,Args} types is now renamed to NamespaceSelector. by @​ialidzhikov #9085

✨ New Features

• [OPERATOR] When SSH access is enabled for a shoot cluster, the gardener linux user is created during the bootstrapping process of a node. This allows human operators to more easily SSH into the worker nodes with this username independent of the underlying machine image or cloud provider. by @​oliver-goetz #9077
• [OPERATOR] It is now possible to define additional/custom permissions via RBAC for extensions access in the garden cluster. You can read all about it here. by @​rfranzke #9079
• [DEVELOPER] The prometheus-operator (and its related CustomResourceDefinitions) are now deployed by default to garden clusters (by gardener-operator) and to seed clusters (by gardenlet). In the future, it will take over management of the Prometheus and Alertmanager instances. by @​rfranzke #9067
• [USER] The gardener-node-agent health is now being considered during the health check of a Shoot and incorporated into the EveryNodeReady condition. by @​tobschli #9073

🐛 Bug Fixes

• [DEVELOPER] Fix: add snapshots repository to default "component prefixes" to fix wrong values generated into Component Descriptors by @​ccwienk #9109
• [DEVELOPER] Fix Istio ingress service.yaml for dual-stack setup and add test. by @​axel7born #9098
• [OPERATOR] A bug has been fixed which was preventing valitail systemd services on shoot workers from starting when the UseGardenerNodeAgent feature gate is enabled. by @​oliver-goetz #9149
• [OPERATOR] Cluster creation with highly available control planes and an infrastructure extension that uses dynamic node networks is no longer delayed by a failing VPN connection before the first reconciliation. by @​MichaelEischer #9075
• [USER] The kube-apiserver deployment is annotated to mark the completion of labeling the resources for encrytion so that this step is not repeated in case the "label removal" step fails and resources are partially without the label. by @​shafeeqes #9147

🏃 Others

• [DEVELOPER] There is now a new github.com/gardener/gardener/extensions/pkg/webhook.EnsureUnitWithName func that can be used to add/update unit to OperatingSystemConfig units. by @​ialidzhikov #9121
• [DEVELOPER] Gardener's ClientMap implementation was moved from an internal to the commonly accessible clientmap package. by @​timuthy #9101
• [DEVELOPER] gardener-node-agent is now enabled in provider-extensions setup. by @​oliver-goetz #9048
• [OPERATOR] On node machines gardener-node-init.service is disabled and stopped when gardener-node-agent is active. by @​oliver-goetz #9096
• [OPERATOR] Fluent-bit is now upgraded to v2.2.2 by @​nickytd #9120
• [OPERATOR] BackupEntrys and Shoots are now labelled with seed.gardener.cloud/<seed-name>=true where <seed-name> is the value of .spec.seedName or .status.seedName. This allows for server-side filtering when watching these resources by leveraging a label selector. by @​rfranzke #9089
• [OPERATOR] Seed namespaces in the garden cluster are now labelled with gardener.cloud/role=seed, and ServiceAccounts for extensions in the seed namespaces are labelled with controllerregistration.core.gardener.cloud/name=<controllerregistration-name>. by @​rfranzke #9079
• [OPERATOR] The following image is updated:
  • ci:component:github.com/gardener/alpine-conntrack: 3.19.0 -> 3.19.1 by @​gardener-robot-ci-3 #9090
• [OPERATOR] When upgrading a shoot control plane to multi-zonal high-availability there will no longer be an envoy filter left in the old istio ingress namespace by @​ScheererJ #9005
• [OPERATOR] Change dnsLookupFamily to ALL in vpn seed envoy config, to prevent unnecessary DNS lookups. by @​axel7born #9102
• [OPERATOR] nginx-ingress-controller image is updated to v1.9.6. by @​shafeeqes #9124
• [USER] It is now possible to read the cluster-identity ConfigMap in the kube-system namespace of the Garden cluster by @​petersutter #9056
• [DEPENDENCY] Utility functions QuantityPtr,ProtocolPtr,TimePtr and TimePtrDeref, extensionsv1alpha1.UnitCommandPtr and ValueExists are dropped. Use k8s.io/utils/ptr.To, k8s.io/utils/ptr.Deref and slices.Contains instead. by @​shafeeqes #9107

[gardener/ingress-default-backend]

🏃 Others

• [OPERATOR] ingress-default-backend has been migrated to Golang-based implementation. by @​acuminogardener/ingress-default-backend#32

[gardener/machine-controller-manager]

🐛 Bug Fixes

• [DEVELOPER] MCM restart happens properly in integration tests now. This fix will get activated, once this version is vendored in your mcm-provider by @​sssash18gardener/machine-controller-manager#879
• [OPERATOR] Fix for edge case of Node object deletion missed during machine termination. by @​elankathgardener/machine-controller-manager#887
• [OPERATOR] Removes node.machine.sapcloud.io/not-managed-by-mcm annotation from nodes managed by the MCM. by @​elankathgardener/machine-controller-manager#866

... (truncated)

Commits

• 193c91f Release v1.88.0
• de4393d Remove ConditionPathExists from valitail systemd unit (#9149)
• ebc92c2 [release-v1.88] Annotate kube-apiserver deployment after labeling the resou...
• 2ebd233 [release-v1.88] Allow docker CRI to be specified in the cloudprofile for on...
• 409b26e [release-v1.88] Drop remaining usages of docker CRI (#9135)
• 7654c94 Bump golang from 1.21.6 to 1.21.7 (#9130)
• 10632d7 Update tools (#9119)
• 56945b0 [GEP-24] Shoot OIDC Issuer (#9024)
• 483a626 Update nginx ingress image to v1.9.6 (#9124)
• 76704c3 Replace usages of deprecated pointer functions (#9107)
• Additional commits viewable in compare view

Updates github.com/gardener/gardener-extension-provider-openstack from 1.38.2 to 1.39.0

Release notes

Sourced from github.com/gardener/gardener-extension-provider-openstack's releases.

v1.39.0

[gardener/gardener-extension-provider-openstack]

⚠️ Breaking Changes

• [OPERATOR] CA and server certificates for the admission component are managed automatically. Passing custom certificates via Helm values is not supported anymore. by @​timuthy #704
• [OPERATOR] If operators specified machine image versions in their CloudProfile specific to the arm64 architecture, they should migrate to an architecture-based mapping in the CloudProfileConfig. by @​timebertt #690

✨ New Features

• [OPERATOR] The CloudProfileConfig allows specifying machine image mappings by architecture. With this, the OpenStack extension can support arm64 machine types. by @​timebertt #690
• [USER] The provider-openstack extension does now support shoot clusters with Kubernetes version 1.29. You should consider the Kubernetes release notes before upgrading to 1.29. by @​acumino #712

🏃 Others

• [OPERATOR] Bump github.com/gardener/gardener to 1.86.0. by @​timuthy #704
• [DEPENDENCY] Vendor gardener/gardener => v1.83.3 by @​kon-angelo #697
• [DEVELOPER] The vendor directory was removed in favor of the go mod cache. by @​timuthy #704
• [DEVELOPER] The code related to machine-controller-manager management has been cleaned up because gardenlet is responsible for it since gardener/gardener@v1.83. by @​AndreasBurger #711

[gardener/terraformer]

⚠️ Breaking Changes

• [OPERATOR] Change OCI Image Registry from GCR (eu.gcr.io/gardener-project) to Artifact-Registry (europe-docker.pkg.dev/gardener-project/releases). Users should update their references.
  by @​ccwienkgardener/terraformer#143

🏃 Others

• [OPERATOR] Terraform alicloud provider is updated to v1.213.0 by @​shaoyongfenggardener/terraformer#145

[gardener/machine-controller-manager]

🐛 Bug Fixes

• [DEVELOPER] MCM restart happens properly in integration tests now. This fix will get activated, once this version is vendored in your mcm-provider by @​sssash18gardener/machine-controller-manager#879
• [OPERATOR] Fix for edge case of Node object deletion missed during machine termination. by @​elankathgardener/machine-controller-manager#887

🏃 Others

• [DEVELOPER] Bump k8s.io/* deps to v0.28.2 by @​afritzlergardener/machine-controller-manager#858
• [OPERATOR] fixed IT for seed with k8s >= 1.27 as control cluster by @​piyuagrgardener/machine-controller-manager#869
• [OPERATOR] machine controller won't reconcile machine on non-spec update events by @​himanshu-kungardener/machine-controller-manager#877

📖 Documentation

• [DEVELOPER] Phase transition diagram for a machine object is added to FAQs by @​himanshu-kungardener/machine-controller-manager#886

Docker Images

• gardener-extension-admission-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/admission-openstack:v1.39.0
• gardener-extension-provider-openstack: europe-docker.pkg.dev/gardener-project/releases/gardener/extensions/provider-openstack:v1.39.0

Commits

• c1c9f18 Release v1.39.0
• 4f02cdc Merge pull request #716 from kon-angelo/fix-makefile-targets
• a11edca fix var override
• 0fecd55 fix targets
• b8d283c Support for Kubernetes v1.29 (#712)
• 07d9632 rm mcm management (#711)
• d8d71d2 Upgrade terraformer (#705)
• e3734e4 Upgrade machine-controller-manager (#706)
• 021dbe5 update csi-driver-nfs (#707)
• ad22812 update image rules (#708)
• Additional commits viewable in compare view

Updates github.com/gardener/machine-controller-manager from 0.51.1 to 0.52.0

Commits

• c50885b Release v0.52.0
• 4c2e31b security fix: removal of go-git (#896)
• 357c319 Added Architecture in NodeTemplate (#894)
• c73105b nil fix in MC.updateNodeToMachine (#893)
• See full diff in compare view

Updates github.com/google/uuid from 1.5.0 to 1.6.0

Release notes

Sourced from github.com/google/uuid's releases.

v1.6.0

1.6.0 (2024-01-16)

Features

• add Max UUID constant (#149) (c58770e)

Bug Fixes

• fix typo in version 7 uuid documentation (#153) (016b199)
• Monotonicity in UUIDv7 (#150) (a2b2b32)

Changelog

Sourced from github.com/google/uuid's changelog.

1.6.0 (2024-01-16)

Features

• add Max UUID constant (#149) (c58770e)

Bug Fixes

• fix typo in version 7 uuid documentation (#153) (016b199)
• Monotonicity in UUIDv7 (#150) (a2b2b32)

Commits

• 0f11ee6 chore(master): release 1.6.0 (#151)
• 16939da chore(tests): add strict monotonicity test case for uuid v7. (#154)
• 016b199 fix: fix typo in version 7 uuid documentation (#153)
• 1d8b6ea ci: set token permissions to github workflows (#143)
• a2b2b32 fix: Monotonicity in UUIDv7 (#150)
• c58770e feat: add Max UUID constant (#149)
• See full diff in compare view

Updates github.com/onsi/ginkgo/v2 from 2.14.0 to 2.15.0

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.15.0

2.15.0

Features

• JUnit reports now interpret Label(owner:X) and set owner to X. [8f3bd70]
• include cancellation reason when cancelling spec context [96e915c]

Fixes

• emit output of failed go tool cover invocation so users can try to debug things for themselves [c245d09]
• fix outline when using nodot in ginkgo v2 [dca77c8]
• Document areas where GinkgoT() behaves differently from testing.T [dbaf18f]
• bugfix(docs): use Unsetenv instead of Clearenv (#1337) [6f67a14]

Maintenance

• Bump to go 1.20 [4fcd0b3]

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.15.0

Features

• JUnit reports now interpret Label(owner:X) and set owner to X. [8f3bd70]
• include cancellation reason when cancelling spec context [96e915c]

Fixes

• emit output of failed go tool cover invocation so users can try to debug things for themselves [c245d09]
• fix outline when using nodot in ginkgo v2 [dca77c8]
• Document areas where GinkgoT() behaves differently from testing.T [dbaf18f]
• bugfix(docs): use Unsetenv instead of Clearenv (#1337) [6f67a14]

Maintenance

• Bump to go 1.20 [4fcd0b3]

Commits

• 7fa0190 v2.15.0
• c245d09 emit output of failed go tool cover invocation so users can try to debug thin...
• dca77c8 fix outline when using nodot inginkgo v2
• 96e915c include cancellation reason when cancelling spec context
• 4fcd0b3 Bump to go 1.20
• 732abbc clarify that last owner label wins
• 8f3bd70 JUnit reports now interpret Label(owner:X) and set owner to X.
• dbaf18f Document areas where GinkgoT() behaves differently from testing.T
• 6f67a14 bugfix(docs): use Unsetenv instead of Clearenv (#1337)
• See full diff in compare view

Updates github.com/onsi/gomega from 1.30.0 to 1.31.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.31.1

1.31.1

Fixes

• Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]
• Update test in case keeping msg is desired [ad1a367]

Maintenance

• Show how to import the format sub package [24e958d]
• tidy up go.sum [26661b8]
• bump dependencies [bde8f7a]

v1.31.0

1.31.0

Features

• Async assertions include context cancellation cause if present [121c37f]

Maintenance

• Bump minimum go version [dee1e3c]
• docs: fix typo in example usage "occured" -> "occurred" [49005fe]
• Bump actions/setup-go from 4 to 5 (#714) [f1c8757]
• Bump github/codeql-action from 2 to 3 (#715) [9836e76]
• Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.2 (#713) [54726f0]
• Bump golang.org/x/net from 0.17.0 to 0.19.0 (#711) [df97ecc]
• docs: fix HaveExactElement typo (#712) [a672c86]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.31.1

Fixes

• Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]
• Update test in case keeping msg is desired [ad1a367]

Maintenance

• Show how to import the format sub package [24e958d]
• tidy up go.sum [26661b8]
• bump dependencies [bde8f7a]

1.31.0

Features

• Async assertions include context cancellation cause if present [121c37f]

Maintenance

• Bump minimum go version [dee1e3c]
• docs: fix typo in example usage "occured" -> "occurred" [49005fe]
• Bump actions/setup-go from 4 to 5 (#714) [f1c8757]
• Bump github/codeql-action from 2 to 3 (#715) [9836e76]
• Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.2 (#713) [54726f0]
• Bump golang.org/x/net from 0.17.0 to 0.19.0 (#711) [df97ecc]
• docs: fix HaveExactElement typo (#712) [a672c86]

Commits

• 762b171 v1.31.1
• 26661b8 tidy up go.sum
• bde8f7a bump dependencies
• 24e958d Show how to import the format sub package
• ad1a367 Update test in case keeping msg is desired
• e0dd999 Inverted arguments order of FailureMessage of BeComparableToMatcher
• ba8bba2 v1.31.0
• 121c37f Async assertions include context cancellation cause if present
• dee1e3c Bump minimum go version
• 49005fe docs: fix typo in example usage "occured" -> "occurred"
• Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.18.0 to 0.19.0

Commits

• 405cb3b go.mod: update golang.org/x dependencies
• 913d3ae x509roots/fallback: update bundle
• See full diff in compare view

Updates sigs.k8s.io/yaml from 1.3.0 to 1.4.0

Release notes

Sourced from sigs.k8s.io/yaml's releases.

v1.4.0

• Adds a goyaml.v2 subpackage containing a fork of gopkg.in/yaml.v2 at v2.4.0
• Adds a goyaml.v3 subpackage containing a fork of gopkg.in/yaml.v3 at v3.0.1
• Adds an Encoder#CompactSeqIndent() encoder option to sigs.k8.io/goyaml.v3 to allow opting into indentation compatible with gopkg.in/yaml.v2

Commits

• c3772b5 Merge pull request #97 from liggitt/owners
• 604031b Update owners
• eead467 Merge pull request #76 from natasha41575/go-yaml-fork
• f2c0229 add test demonstrating consistency between yaml.v2 and yaml.v3
• 20d25fa update LICENSE, owners, and readmes
• a7b5665 exclude forked libs from golint
• b6d8b45 fix leading newline issue
• 330e1e5 make sequence style configurable
• 70ebea7 change import paths to forked yaml libs
• b96582b fork go-yaml v2 and v3
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[gardener-robot-ci-3]

Thank you @dependabot[bot] for your contribution. Before I can start building your PR, a member of the organization must set the required label(s) {'reviewed/ok-to-test'}. Once started, you can check the build status in the PR checks section below.

[gardener-robot]

@dependabot[bot] Thank you for your contribution.

[grolu]

/lgtm