Bump the gomod-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the gomod-dependencies group with 2 updates in the /tools directory: github.com/estesp/manifest-tool/v2 and github.com/golangci/golangci-lint.

Updates github.com/estesp/manifest-tool/v2 from 2.0.8 to 2.1.7

Release notes

Sourced from github.com/estesp/manifest-tool/v2's releases.

manifest-tool 2.1.7

Welcome to the v2.1.7 release of manifest-tool!

This is a small release that captures vendor updates and Go toolchain updates that fix various CVEs. The alpine images are also refreshed to the latest release of Alpine Linux 3.19.2.

Please report bugs to the issue tracker at https://github.com/estesp/manifest-tool/issues.

manifest-tool 2.1.6

Welcome to the v2.1.6 release of manifest-tool!

This is a small release that captures vendor updates and Go toolchain updates that fix various CVEs. The alpine images are also refreshed to the latest release of Alpine Linux 3.19.

Please report bugs to the issue tracker at https://github.com/estesp/manifest-tool/issues.

manifest-tool 2.1.5

Welcome to the v2.1.5 release of manifest-tool!

The v2.1.5 release adds a fix to bring the build-time version changes from v2.1.4 into the cross-built binaries that are used for the release tarball.

Also, the Go version used for CI and release builds was updated to v1.21.5 and the vendoring of containerd was updated to the latest version in the v1.7 line, v1.7.11.

If you do find bugs, please report them to the GitHub issue tracker for manifest-tool.

Please report bugs to the issue tracker at https://github.com/estesp/manifest-tool/issues.

manifest-tool 2.1.4

Welcome to the v2.1.4 release of manifest-tool!

The v2.1.4 release includes a fix that should allow it to be vendored by other projects with a more recent Docker version and work properly.

This is also the first release where the version hardcoding is removed and the release scripts/Makefile will properly set the version based on the git tag information.

Thanks to @​tricktron for a contribution to make versioning not dependent on my potentially weak memory of what to do during the release process!

If you do find bugs, please report them to the GitHub issue tracker for manifest-tool.

Please report bugs to the issue tracker at https://github.com/estesp/manifest-tool/issues.

... (truncated)

Commits

• 51f8b03 Merge pull request #259 from estesp/update-vendors
• b92fca1 Merge pull request #258 from jasonwbarnett/patch-2
• ff6ae59 Update vendors and Go version
• a97e6e9 Update README.md
• ac7231a Merge pull request #257 from estesp/update-vendors
• c704426 Update vendors and Go version
• cf0a1bc Merge pull request #256 from BoleynSu/patch-1
• 81b6142 pusher: Set media type for oci index
• 8b310e9 Merge pull request #255 from estesp/dependabot/go_modules/v2/github.com/docke...
• 37b8b83 Bump github.com/docker/docker in /v2
• Additional commits viewable in compare view

Updates github.com/golangci/golangci-lint from 1.52.2 to 1.61.0

Release notes

Sourced from github.com/golangci/golangci-lint's releases.

v1.61.0

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

• e9a872629d4feda79d2fff23ddc1f410faff163e build(deps): bump github.com/Abirdcfly/dupword from 0.0.14 to 0.1.1 (#4954)
• 2813c451edd6b75098372dbb269ffed8df3a4ec6 build(deps): bump github.com/Crocmagnon/fatcontext from 0.4.0 to 0.5.2 (#4971)
• 48251f274a1e09fae524271662a30a47f4ddb242 build(deps): bump github.com/ckaznocha/intrange from 0.1.2 to 0.2.0 (#4996)
• 726b8153cac6c04238264b189f5b05ec059f9330 build(deps): bump github.com/daixiang0/gci from 0.13.4 to 0.13.5 (#4975)
• 2fcfe26fdb368ae0930bac909a0573277a6d2226 build(deps): bump github.com/go-viper/mapstructure/v2 from 2.0.0 to 2.1.0 (#4910)
• 5fa1b681e4518b09be4ebdbe635e044cf729b8a1 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.2 to 2.2.3 (#4955)
• a6fc686d733f339619b02de65ef4c782848eaff0 build(deps): bump github.com/quasilyte/go-ruleguard to 0fe6f58b47b1 (#4949)
• 57fa4dad326cd24b71fccd3fb9b8fc8a2788c994 build(deps): bump github.com/ryancurrah/gomodguard from 1.3.3 to 1.3.5 (#4992)
• 6e5dc28f52b76181f5c4f5c7d37dab20e09f59d1 build(deps): bump github.com/securego/gosec/v2 from 2.20.1-0.20240826145712-bcec04e78483 to 2.21.0 (#4981)
• dd069d5578f3fb9eb298e5d397697c368a0e85f7 build(deps): bump github.com/securego/gosec/v2 from 2.21.0 to 2.21.1 (#4982)
• a1d6c560de1a193a0c68ffed68cd5928ef39e884 build(deps): bump github.com/securego/gosec/v2 from 2.21.1 to 2.21.2 (#4997)
• 98b685cc0d3dcc956eb30bd7557c4c2ecf369f54 build(deps): bump github.com/securego/gosec/v2 from ab3f6c1c83a0 to bcec04e78483 (#4960)
• bfc52476dd7b0b5111bcc17f7e2c103cfc0a15e0 build(deps): bump github.com/tetafro/godot from 1.4.16 to 1.4.17 (#4993)
• 04c19e6f4f8b04dae083c2923457bc911303d177 build(deps): bump golang.org/x/oauth2 from 0.22.0 to 0.23.0 in /scripts/gen_github_action_config in the all group (#4977)
• e905c7a3e260abe5b984e532925dfa30ffe60a5b build(deps): bump peter-evans/create-pull-request from 6 to 7 in the all group (#4978)
• 2881c7178b62e75ac33df7747c40fabc75c62e2b build(deps): bump the all group across 4 directories with 8 updates (#4979)
• 0275389a64bd88fd37eb5f46993a8523ce4bf2f0 feat: add junit-xml-extended format (#4918)
• a6bd868cf0c575d7a7e6d87007cd510394c30d86 feat: exclude Swagger Codegen files (#4967)
• 54d089d1064eb700aafade61cdb00e452fdbf5da fix: improve runtime version parsing (#4961)
• bf4a66a07d618628f6a26609404cb5c608e99ff8 gosec: disable G407 (#4983)
• 3797ed90c38b8471c54f003ab9ac72492c1143ec nolintlint: remove empty line in unused directive replacement (#4973)

v1.60.3

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

• c2e095c022a97360f7fff5d49fbc11f273be929a build(deps): bump github.com/securego/gosec/v2 from 81cda2f91fbe to ab3f6c1c83a0 (#4943)
• f0c190436343e51e6b4dc98a368cf7bae0e5f33a feat: check that Go version use to build is greater or equals to the Go version of the project (#4938)

v1.60.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

... (truncated)

Changelog

Sourced from github.com/golangci/golangci-lint's changelog.

v1.61.0

1. Enhancements
   • Add junit-xml-extended format
   • Exclude Swagger Codegen files by default
2. Updated linters
   • dupword: from 0.0.14 to 0.1.1
   • fatcontext: from 0.4.0 to 0.5.2
   • gci: from 0.13.4 to 0.13.5 (new option no-lex-order)
   • go-ruleguard: from 0.4.2 to 0fe6f58b47b1 (fix panic with custom linters)
   • godot: from 1.4.16 to 1.4.17
   • gomodguard: from 1.3.3 to 1.3.5
   • gosec: disable temporarily G407
   • gosec: from ab3f6c1c83a0 to 2.21.2 (partially fix G115)
   • intrange: from 0.1.2 to 0.2.0
   • nolintlint: remove the empty line in the directive replacement
3. Misc.
   • Improve runtime version parsing
4. Documentation
   • Add additional info about typecheck

v1.60.3

1. Updated linters
   • gosec: from 81cda2f91fbe to ab3f6c1c83a0 (fix G115 false positives)
2. Misc.
   • Check that the Go version use to build is greater or equals to the Go version of the project

v1.60.2

1. Updated linters

• gofmt: update to HEAD (go1.22)
• gofumpt: from 0.6.0 to 0.7.0
• gosec: fix G602 analyzer
• gosec: from 5f0084eb01a9 to 81cda2f91fbe (adds G115, G405, G406, G506, G507)
• staticcheck: from 0.5.0 to 0.5.1
• staticcheck: propagate Go version
• wrapcheck: from 2.8.3 to 2.9.0
• ⚠️ exportloopref: deprecation

v1.60.1

1. Updated linters
   • errorlint: from 1.5.2 to 1.6.0
   • exhaustruct: from 3.2.0 to 3.3.0 (recognize custom error values in return)
   • fatcontext: from 0.2.2 to 0.4.0 (fix false positives for context stored in structs)
   • gocognit: from 1.1.2 to 1.1.3
   • gomodguard: from 1.3.2 to 1.3.3
   • govet (printf): report non-constant format, no args
   • lll: advertise max line length instead of just reporting failure

... (truncated)

Commits

• a1d6c56 build(deps): bump github.com/securego/gosec/v2 from 2.21.1 to 2.21.2 (#4997)
• 48251f2 build(deps): bump github.com/ckaznocha/intrange from 0.1.2 to 0.2.0 (#4996)
• bfc5247 build(deps): bump github.com/tetafro/godot from 1.4.16 to 1.4.17 (#4993)
• 57fa4da build(deps): bump github.com/ryancurrah/gomodguard from 1.3.3 to 1.3.5 (#4992)
• d302a30 dev: fix nancy
• 24e6645 docs: add additionnal info about typecheck (#4985)
• bf4a66a gosec: disable G407 (#4983)
• dd069d5 build(deps): bump github.com/securego/gosec/v2 from 2.21.0 to 2.21.1 (#4982)
• 2813c45 build(deps): bump github.com/Crocmagnon/fatcontext from 0.4.0 to 0.5.2 (#4971)
• e9a8726 build(deps): bump github.com/Abirdcfly/dupword from 0.0.14 to 0.1.1 (#4954)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[k8s-ci-robot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign mrhohn for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment