Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 1, 2025

Bumps the oc-mirror-v2-version-updates group with 4 updates in the / directory: github.com/google/go-containerregistry, github.com/operator-framework/operator-registry, github.com/vbauerster/mpb/v8 and helm.sh/helm/v3.

Updates github.com/google/go-containerregistry from 0.20.6 to 0.20.7

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.7

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.20.6...v0.20.7

Commits
  • e075f20 go mod tidy on dependabot update (#2171)
  • 45aacf4 Bump the actions group across 1 directory with 3 updates (#2170)
  • 073b936 Update dependencies and deprecate DockerVersion field (#2164)
  • 390dacd Bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /cmd/krane (#2163)
  • ca44d47 Bump golang.org/x/crypto from 0.38.0 to 0.45.0 in /pkg/authn/k8schain (#2162)
  • 999cc1f Bump github.com/docker/docker (#2161)
  • d1809c8 Build artifacts for riscv64 (#2159)
  • 7471efd Bump the auxiliary-deps group across 3 directories with 4 updates (#2156)
  • 2bb5bb0 Bump the actions group with 5 updates (#2155)
  • 16371c1 Remove manual vendor setting for dependabot (#2151)
  • Additional commits viewable in compare view

Updates github.com/operator-framework/operator-registry from 1.50.0 to 1.61.0

Release notes

Sourced from github.com/operator-framework/operator-registry's releases.

v1.61.0

What's Changed

New Contributors

Full Changelog: operator-framework/operator-registry@v1.60.0...v1.61.0

v1.60.0

Notice

This release bumps k8s to 1.34

What's Changed

New Contributors

Full Changelog: operator-framework/operator-registry@v1.59.0...v1.60.0

v1.59.0

What's Changed

... (truncated)

Commits

Updates github.com/spf13/pflag from 1.0.9 to 1.0.10

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.10

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.9...v1.0.10

Commits
  • 0491e57 Merge pull request #448 from thaJeztah/fix_go_version
  • 72abab1 Merge pull request #447 from thaJeztah/fix_deprecation_comment
  • 7e4dfb1 Test on Go 1.12
  • 18a9d17 move Func, BoolFunc, tests as they require go1.21
  • c5b9e98 remove uses of errors.Is, which requires go1.13
  • 45a4873 fix deprecation comment for (FlagSet.)ParseErrorsWhitelist
  • See full diff in compare view

Updates github.com/vbauerster/mpb/v8 from 8.10.2 to 8.11.2

Release notes

Sourced from github.com/vbauerster/mpb/v8's releases.

v8.11.2

Full Changelog: vbauerster/mpb@v8.10.2...v8.11.2

Commits
  • 3304512 v8.11.2
  • 71a23ab go get -u
  • a6ad7a7 minor: comment
  • 68f7b23 refactoring heapManager: no need to for extra goroutine
  • 641f03b refactoring heapManager: no need for h_end case
  • b4bd98c bar EwmaIncr: no need for sync.WaitGroup
  • 8c0512d minor: simplify with cmp.Or
  • 1bfd334 heapManager.push without select
  • 7e8fe0b make sure hm doesn't leak any goroutine on render error
  • 3f7e31c v8.11.1
  • Additional commits viewable in compare view

Updates go.podman.io/common from 0.65.0 to 0.66.0

Commits
  • 8163ca7 Bump common to v0.66.0
  • 71fe077 Bump storage to v1.61.0, image to v5.38.0 in common
  • 8cf3807 Bump image to v5.38.0
  • 18b0272 Vendor storage v1.61.0
  • 4364199 Bump storage to v1.61.0
  • c4c5e00 Merge pull request #369 from mtrmac/certs-port
  • c4983f3 Merge pull request #394 from rhatdan/artifact
  • 8e706a4 Allow artifact add to override org.opencontainers.image.title annotation
  • aa970d2 Merge pull request #392 from baude/addlibartifact
  • 7e74b4c common: add libartifact
  • Additional commits viewable in compare view

Updates go.podman.io/image/v5 from 5.37.0 to 5.38.0

Commits
  • 8cf3807 Bump image to v5.38.0
  • 18b0272 Vendor storage v1.61.0
  • 4364199 Bump storage to v1.61.0
  • c4c5e00 Merge pull request #369 from mtrmac/certs-port
  • c4983f3 Merge pull request #394 from rhatdan/artifact
  • 8e706a4 Allow artifact add to override org.opencontainers.image.title annotation
  • aa970d2 Merge pull request #392 from baude/addlibartifact
  • 7e74b4c common: add libartifact
  • c305063 Merge pull request #386 from flouthoc/fix-workflow
  • 046d2c6 opendownstream-PR: improve PR description
  • Additional commits viewable in compare view

Updates go.podman.io/storage from 1.60.0 to 1.61.0

Commits
  • 4364199 Bump storage to v1.61.0
  • c4c5e00 Merge pull request #369 from mtrmac/certs-port
  • c4983f3 Merge pull request #394 from rhatdan/artifact
  • 8e706a4 Allow artifact add to override org.opencontainers.image.title annotation
  • aa970d2 Merge pull request #392 from baude/addlibartifact
  • 7e74b4c common: add libartifact
  • c305063 Merge pull request #386 from flouthoc/fix-workflow
  • 046d2c6 opendownstream-PR: improve PR description
  • a3b0f19 Merge pull request #383 from containers/renovate/golang.org-x-crypto-0.x
  • 1d7f3ac fix(deps): update module golang.org/x/crypto to v0.43.0
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.41.0 to 0.44.0

Commits
  • 122a78f go.mod: update golang.org/x dependencies
  • c0531f9 all: eliminate vet diagnostics
  • 0997000 all: fix some comments
  • 017a1aa chacha20poly1305: panic on dst and additionalData overlap
  • cf29fa9 sha3: make it mostly a wrapper around crypto/sha3
  • 0b7aa0c ssh: use reflect.TypeFor instead of reflect.TypeOf
  • 1faea29 all: fix some typos in comment
  • 627cb89 go.mod: update golang.org/x dependencies
  • dca4914 acme: fix autocert TestHTTPHandlerDefaultFallback
  • 1336e21 x509roots/fallback: update bundle
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.34.0 to 0.37.0

Commits
  • 1231d54 go.mod: update golang.org/x dependencies
  • 3475bc8 term: fix some comments
  • 3a0828a go.mod: update golang.org/x dependencies
  • 1a11b45 go.mod: update golang.org/x dependencies
  • d862cd5 all: upgrade go directive to at least 1.24.0 [generated]
  • See full diff in compare view

Updates helm.sh/helm/v3 from 3.18.6 to 3.19.2

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.19.2 is a patch release. It is a rebuild of the v3.19.1 release with no code changes.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.2. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.3 and 4.0.1 are the next patch releases and will be on December 10, 2025
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • [backport] fix: get-helm-3 script use helm3-latest-version 8766e718a0119851f10ddbe4577593a45fadf544 (George Jenkins)

Helm v3.19.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.1. The common platform binaries are here:

... (truncated)

Commits
  • 8766e71 [backport] fix: get-helm-3 script use helm3-latest-version
  • 4f953c2 chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29
  • 6801f4d jsonschema: warn and ignore unresolved URN $ref to match v3.18.4
  • 2f619be Avoid "panic: interface conversion: interface {} is nil"
  • 8112d47 Fix helm pull untar dir check with repo urls
  • 5dff7ce Fix deprecation warning
  • 2dad4d2 chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10
  • a833710 Add timeout flag to repo add and update flags
  • 3f5d2e2 Merge pull request #31407 from dirkmueller/release-3.19
  • 2e12c81 chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.33.4 to 0.34.1

Commits
  • 77c9e29 Update dependencies to v0.34.1 tag
  • 133a39c Merge remote-tracking branch 'origin/master' into release-1.34
  • fd087be clarify that staging repos are automatically published
  • ff163ef add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • 5ec86fc link to what a staging repository is
  • 08c5dee docs: clarify that this is a staging repository and not for direct contributions
  • ba64d0b Update prerelease lifecycle to v1.34
  • 25f849c Merge pull request #132522 from sunya-ch/KEP-5075-PR
  • baa1eb1 KEP-5075: generated codes from make update
  • 740b2c9 KEP-5075: API updates
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.33.4 to 0.34.1

Commits
  • b72d93d Merge remote-tracking branch 'origin/master' into release-1.34
  • cd8b91c clarify that staging repos are automatically published
  • 8c59599 add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • ec3cea5 link to what a staging repository is
  • e4db694 docs: clarify that this is a staging repository and not for direct contributions
  • 04507a3 Merge pull request #132942 from thockin/kyaml
  • 50e39b1 Merge pull request #132935 from benluddy/cbor-bump-custom-marshalers
  • 7d108e8 Re-vendor sigs.k8s.io/yaml @ v1.6.0
  • 58c4eb0 Merge pull request #133130 from ylink-lfs/chore/residual_boolptr_removal
  • 38a24e6 chore: residual boolptr and intptr removal
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.33.4 to 0.34.1

Commits
  • d033c49 Update dependencies to v0.34.1 tag
  • 97396af Merge remote-tracking branch 'origin/master' into release-1.34
  • 5f737f3 clarify that staging repos are automatically published
  • 0b8655b add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • c00384c link to what a staging repository is
  • b53b1f8 docs: clarify that this is a staging repository and not for direct contributions
  • 42e6182 KEP-5075: generated codes from make update
  • da11948 Merge pull request #130653 from yliaog/master
  • 3b7d818 extended resource backed by DRA: codegen
  • bb11581 Merge pull request #130160 from KobayashiD27/dra-device-binding-conditions
  • Additional commits viewable in compare view

Updates k8s.io/kubectl from 0.33.4 to 0.34.0

Commits
  • d0412c1 Update dependencies to v0.34.0 tag
  • a8c040b Merge remote-tracking branch 'origin/master' into release-1.34
  • 4d28f5c clarify that staging repos are automatically published
  • 3962f40 add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • af99d1e special case that kubectl staging repo is currently used to track issues, and...
  • 4f56b5e link to what a staging repository is
  • 9fb3eee docs: clarify that this is a staging repository and not for direct contributions
  • 8185d35 Merge pull request #132942 from thockin/kyaml
  • 80ffc39 Merge pull request #131549 from carlory/KEP-3751-GA
  • 3f6dbad Merge pull request #132935 from benluddy/cbor-bump-custom-marshalers
  • Additional commits viewable in compare view

Updates github.com/docker/cli from 28.3.3+incompatible to 29.0.3+incompatible

Commits
  • 511dad6 Merge pull request #6667 from thaJeztah/use_format
  • 11f24b8 Merge pull request #6668 from robmry/builttime-format
  • d84396d image ls: allow custom format in cli config
  • 6751cd1 docker version: restore top-level BuildTime to RFC3339Nano
  • 8108357 Merge pull request #6662 from dvdksn/doc-update-http-proxy-link
  • 3a84258 chore: update link/linktext to dockerd proxy config
  • eedd969 Merge pull request #6659 from vvoland/fix-system-version
  • dd2c493 cli/command/system: Fix missing components in version output
  • 67cef77 Merge pull request #6658 from vvoland/img-list-all-dangling
  • 207bf52 image/tree: Only show untagged images when --all flag is used
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…5 updates

Bumps the oc-mirror-v2-version-updates group with 4 updates in the / directory: [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry), [github.com/operator-framework/operator-registry](https://github.com/operator-framework/operator-registry), [github.com/vbauerster/mpb/v8](https://github.com/vbauerster/mpb) and [helm.sh/helm/v3](https://github.com/helm/helm).


Updates `github.com/google/go-containerregistry` from 0.20.6 to 0.20.7
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Commits](google/go-containerregistry@v0.20.6...v0.20.7)

Updates `github.com/operator-framework/operator-registry` from 1.50.0 to 1.61.0
- [Release notes](https://github.com/operator-framework/operator-registry/releases)
- [Commits](operator-framework/operator-registry@v1.50.0...v1.61.0)

Updates `github.com/spf13/pflag` from 1.0.9 to 1.0.10
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.9...v1.0.10)

Updates `github.com/vbauerster/mpb/v8` from 8.10.2 to 8.11.2
- [Release notes](https://github.com/vbauerster/mpb/releases)
- [Commits](vbauerster/mpb@v8.10.2...v8.11.2)

Updates `go.podman.io/common` from 0.65.0 to 0.66.0
- [Commits](containers/container-libs@common/v0.65.0...common/v0.66.0)

Updates `go.podman.io/image/v5` from 5.37.0 to 5.38.0
- [Commits](containers/container-libs@image/v5.37.0...image/v5.38.0)

Updates `go.podman.io/storage` from 1.60.0 to 1.61.0
- [Commits](containers/container-libs@storage/v1.60.0...storage/v1.61.0)

Updates `golang.org/x/crypto` from 0.41.0 to 0.44.0
- [Commits](golang/crypto@v0.41.0...v0.44.0)

Updates `golang.org/x/term` from 0.34.0 to 0.37.0
- [Commits](golang/term@v0.34.0...v0.37.0)

Updates `helm.sh/helm/v3` from 3.18.6 to 3.19.2
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.18.6...v3.19.2)

Updates `k8s.io/api` from 0.33.4 to 0.34.1
- [Commits](kubernetes/api@v0.33.4...v0.34.1)

Updates `k8s.io/apimachinery` from 0.33.4 to 0.34.1
- [Commits](kubernetes/apimachinery@v0.33.4...v0.34.1)

Updates `k8s.io/client-go` from 0.33.4 to 0.34.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.33.4...v0.34.1)

Updates `k8s.io/kubectl` from 0.33.4 to 0.34.0
- [Commits](kubernetes/kubectl@v0.33.4...v0.34.0)

Updates `github.com/docker/cli` from 28.3.3+incompatible to 29.0.3+incompatible
- [Commits](docker/cli@v28.3.3...v29.0.3)

---
updated-dependencies:
- dependency-name: github.com/google/go-containerregistry
  dependency-version: 0.20.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: github.com/operator-framework/operator-registry
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: github.com/vbauerster/mpb/v8
  dependency-version: 8.11.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: go.podman.io/common
  dependency-version: 0.66.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: go.podman.io/image/v5
  dependency-version: 5.38.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: go.podman.io/storage
  dependency-version: 1.61.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: golang.org/x/crypto
  dependency-version: 0.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: golang.org/x/term
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.19.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: k8s.io/api
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: k8s.io/kubectl
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: oc-mirror-v2-version-updates
- dependency-name: github.com/docker/cli
  dependency-version: 29.0.3+incompatible
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: oc-mirror-v2-version-updates
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 1, 2025
@openshift-ci openshift-ci bot requested review from aguidirh and r4f4 December 1, 2025 05:51
@openshift-ci
Copy link

openshift-ci bot commented Dec 1, 2025

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign aguidirh for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Dec 1, 2025
@openshift-ci
Copy link

openshift-ci bot commented Dec 1, 2025

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a github.com member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

@r4f4
Copy link
Contributor

r4f4 commented Dec 1, 2025

/ok-to-test

@openshift-ci openshift-ci bot added ok-to-test Indicates a non-member PR verified by an org member that is safe to test. and removed needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. labels Dec 1, 2025
@openshift-ci
Copy link

openshift-ci bot commented Dec 1, 2025

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/lint 88c2452 link true /test lint
ci/prow/images 88c2452 link true /test images
ci/prow/integration 88c2452 link true /test integration
ci/prow/sanity 88c2452 link true /test sanity
ci/prow/unit 88c2452 link true /test unit
ci/prow/okd-scos-images 88c2452 link true /test okd-scos-images

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code ok-to-test Indicates a non-member PR verified by an org member that is safe to test.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant