-
Notifications
You must be signed in to change notification settings - Fork 95
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
chore(deps): bump the security group across 1 directory with 16 updates #1604
Merged
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the security group with 12 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/containers/image/v5](https://github.com/containers/image) | `5.32.1` | `5.32.2` | | [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.5` | `1.7.6` | | [github.com/vmware-tanzu/velero](https://github.com/vmware-tanzu/velero) | `1.14.0` | `1.14.1` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.28.0` | `1.29.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.28.0` | `1.29.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.30.3` | `0.31.0` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.30.3` | `0.31.0` | | [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.30.3` | `0.31.0` | | [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.18.5` | `0.19.0` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.15.3` | `3.15.4` | | [k8s.io/kubelet](https://github.com/kubernetes/kubelet) | `0.30.3` | `0.31.0` | | [k8s.io/metrics](https://github.com/kubernetes/metrics) | `0.30.3` | `0.31.0` | Updates `github.com/containers/image/v5` from 5.32.1 to 5.32.2 - [Release notes](https://github.com/containers/image/releases) - [Commits](containers/image@v5.32.1...v5.32.2) Updates `github.com/hashicorp/go-getter` from 1.7.5 to 1.7.6 - [Release notes](https://github.com/hashicorp/go-getter/releases) - [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml) - [Commits](hashicorp/go-getter@v1.7.5...v1.7.6) Updates `github.com/vmware-tanzu/velero` from 1.14.0 to 1.14.1 - [Release notes](https://github.com/vmware-tanzu/velero/releases) - [Changelog](https://github.com/vmware-tanzu/velero/blob/main/CHANGELOG.md) - [Commits](vmware-tanzu/velero@v1.14.0...v1.14.1) Updates `go.opentelemetry.io/otel` from 1.28.0 to 1.29.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.29.0) Updates `go.opentelemetry.io/otel/sdk` from 1.28.0 to 1.29.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.29.0) Updates `k8s.io/api` from 0.30.3 to 0.31.0 - [Commits](kubernetes/api@v0.30.3...v0.31.0) Updates `k8s.io/apiextensions-apiserver` from 0.30.3 to 0.31.0 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.30.3...v0.31.0) Updates `k8s.io/apimachinery` from 0.30.3 to 0.31.0 - [Commits](kubernetes/apimachinery@v0.30.3...v0.31.0) Updates `k8s.io/apiserver` from 0.30.3 to 0.31.0 - [Commits](kubernetes/apiserver@v0.30.3...v0.31.0) Updates `k8s.io/cli-runtime` from 0.30.3 to 0.31.0 - [Commits](kubernetes/cli-runtime@v0.30.3...v0.31.0) Updates `k8s.io/client-go` from 0.30.3 to 0.31.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.30.3...v0.31.0) Updates `sigs.k8s.io/controller-runtime` from 0.18.5 to 0.19.0 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.18.5...v0.19.0) Updates `helm.sh/helm/v3` from 3.15.3 to 3.15.4 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.15.3...v3.15.4) Updates `k8s.io/kubelet` from 0.30.3 to 0.31.0 - [Commits](kubernetes/kubelet@v0.30.3...v0.31.0) Updates `k8s.io/metrics` from 0.30.3 to 0.31.0 - [Commits](kubernetes/metrics@v0.30.3...v0.31.0) Updates `k8s.io/utils` from 0.0.0-20230726121419-3b25d923346b to 0.0.0-20240711033017-18e509b52bc8 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: github.com/containers/image/v5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/hashicorp/go-getter dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/vmware-tanzu/velero dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: go.opentelemetry.io/otel dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: go.opentelemetry.io/otel/sdk dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apiextensions-apiserver dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apimachinery dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apiserver dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/cli-runtime dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/client-go dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: sigs.k8s.io/controller-runtime dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: helm.sh/helm/v3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/kubelet dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/metrics dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/utils dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security ... Signed-off-by: dependabot[bot] <support@github.com>
ef37b2e
to
26bbc5f
Compare
Signed-off-by: Evans Mungai <evans@replicated.com>
* controller-gen to v0.16.2 * client-gen to v0.28.13 Signed-off-by: Evans Mungai <evans@replicated.com>
banjoh
approved these changes
Sep 3, 2024
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the security group with 12 updates in the / directory:
5.32.1
5.32.2
1.7.5
1.7.6
1.14.0
1.14.1
1.28.0
1.29.0
1.28.0
1.29.0
0.30.3
0.31.0
0.30.3
0.31.0
0.30.3
0.31.0
0.18.5
0.19.0
3.15.3
3.15.4
0.30.3
0.31.0
0.30.3
0.31.0
Updates
github.com/containers/image/v5
from 5.32.1 to 5.32.2Release notes
Sourced from github.com/containers/image/v5's releases.
Commits
0b425a4
Release 5.32.22a87b21
Support accepting multiple Rekor public keys95c0635
Add fieldKeyPaths
andKeyDatas
toprSigstoreSigned
d42de59
Split verifySigstorePayloadBlobSignature from VerifySigstorePayloada5ea016
Use loadBytesFromConfigSources in prSignedBy.isSignatureAuthorAccepted03550b4
Turn loadBytesFromDataOrPath into loadBytesFromConfigSourcesc0c8d34
Use InvalidPolicyFormatError for invalid sigstore options4bcaca1
Merge pull request #2511 from mtrmac/5.32-versionc94eadb
Fix the version number6a17c28
Merge pull request #2508 from mtrmac/5.32-zstdUpdates
github.com/hashicorp/go-getter
from 1.7.5 to 1.7.6Release notes
Sourced from github.com/hashicorp/go-getter's releases.
Commits
4f07d24
Merge pull request #501 from liamg/patch-18339301
add tests83fd927
Fix panic when s3 URL is invalidUpdates
github.com/vmware-tanzu/velero
from 1.14.0 to 1.14.1Release notes
Sourced from github.com/vmware-tanzu/velero's releases.
Commits
8afe3ce
Merge pull request #8124 from Lyndon-Li/release-1.146ae1582
change log for 1.14.169d950e
Merge pull request #8118 from blackpiglet/fix_cve_for_1.14fb146cd
Bump base image and golang version to fix CVEs.cd601ca
Merge pull request #8037 from mrnold/pod-volume-message-7857-1.1476a3ecc
Add changelog file.3dde086
Avoid wrapping failed PVB status with empty message.ebafe12
Merge pull request #8035 from shubham-pampattiwar/expose-pv-patch-max-timeout...fea6316
Expose PVPatchMaximumDuration timeout for custom configuration6ae34a1
Merge pull request #8016 from sseago/plugin-leak-1.14Updates
go.opentelemetry.io/otel
from 1.28.0 to 1.29.0Changelog
Sourced from go.opentelemetry.io/otel's changelog.
... (truncated)
Commits
6b1d94f
Release v1.29.0/v0.51.0/v0.5.0 (#5732)2a54df7
fix(deps): update module github.com/golangci/golangci-lint to v1.60.3 (#5730)4875735
fix(deps): update module github.com/golangci/golangci-lint to v1.60.2 (#5711)30fc407
fix(deps): update golang.org/x/exp digest to 9b4947d (#5729)9402143
fix(deps): update golang.org/x/exp digest to 778ce7b (#5728)bc48d69
chore(deps): update google.golang.org/genproto/googleapis/rpc digest to fc7c0...fe02ce7
chore(deps): update google.golang.org/genproto/googleapis/api digest to fc7c0...002c0a4
Movelog.Processor.Enabled
to independentFilterProcessor
interfaced type...fe6c67e
OpenCensus bridge to support TraceState (#5651)83ae9bd
Bugfix: OTLP exporters should not percent decode the key when parsing HEADERS...Updates
go.opentelemetry.io/otel/sdk
from 1.28.0 to 1.29.0Changelog
Sourced from go.opentelemetry.io/otel/sdk's changelog.
... (truncated)
Commits
6b1d94f
Release v1.29.0/v0.51.0/v0.5.0 (#5732)2a54df7
fix(deps): update module github.com/golangci/golangci-lint to v1.60.3 (#5730)4875735
fix(deps): update module github.com/golangci/golangci-lint to v1.60.2 (#5711)30fc407
fix(deps): update golang.org/x/exp digest to 9b4947d (#5729)9402143
fix(deps): update golang.org/x/exp digest to 778ce7b (#5728)bc48d69
chore(deps): update google.golang.org/genproto/googleapis/rpc digest to fc7c0...fe02ce7
chore(deps): update google.golang.org/genproto/googleapis/api digest to fc7c0...002c0a4
Movelog.Processor.Enabled
to independentFilterProcessor
interfaced type...fe6c67e
OpenCensus bridge to support TraceState (#5651)83ae9bd
Bugfix: OTLP exporters should not percent decode the key when parsing HEADERS...Updates
k8s.io/api
from 0.30.3 to 0.31.0Commits
2df39ff
Update dependencies to v0.31.0 tag382a091
update codegen and openapi1073c1e
regen clients6f8e3bd
Review feedback437d97a
Coordinated Leader Election Alpha API63e21d3
Merge pull request #126243 from SergeyKanzhelev/devicePluginFailuresca07d5a
generated files7192863
add AllocatedResourcesStatus field to ContainerStatusa789efa
Merge pull request #126281 from saschagrunert/oci-volume-docsf04ea0b
Merge pull request #126145 from carlory/kep-3751-apiUpdates
k8s.io/apiextensions-apiserver
from 0.30.3 to 0.31.0Commits
5682b3a
Update dependencies to v0.31.0 tag67f4a1d
informers: add comment that Start does not block647748e
Merge pull request #126353 from liggitt/fix-vendora9ee50f
revendor dependencies1ab7536
Merge pull request #126308 from cici37/hotFix4940c42
Allowing direct CEL reserved keyword usage in CRD (#126188)10c707f
Merge pull request #124061 from Jefftree/conversion-webhook-invalidca3bbcc94
Merge pull request #125661 from mjudeikis/mjudeikis/poststarthookctx.stopch.c...93b42bf
Update with stdlib errors876df11
Hot fix for panic on schema conversion. (#126167)Updates
k8s.io/apimachinery
from 0.30.3 to 0.31.0Commits
a8f449e
Falls back to SPDY for gorilla/websocket https proxy error62791ec
Merge pull request #125571 from liggitt/filter-auth-02-sarcc2ba35
add field and label selectors to authorization attributesce76a8f
generate35052c5
add subjectaccessreview field and label selectorsab06869
Merge pull request #126105 from benluddy/cbor-framer429f4e4
Implement runtime.Framer for CBOR Sequences.d7e1c53
Merge pull request #126018 from aroradaman/bump-k8s-utils07cb122
Merge pull request #125748 from benluddy/cbor-custom-marshalersdd17456
bump k8s.io/utilsUpdates
k8s.io/apiserver
from 0.30.3 to 0.31.0Commits
525dec2
Update dependencies to v0.31.0 tag78c69b6
Merge remote-tracking branch 'origin/master' into release-1.311ebb228
Make object transformation concurrent to remove watch cache scalability issue...2f0f9ad
Introduce ConcurrentWatchObjectDecode feature gate disabled by defaultf36c496
Merge remote-tracking branch 'origin/master' into release-1.31078d9cb
Merge pull request #126469 from serathius/beta26fe68d6
Merge remote-tracking branch 'origin/master' into release-1.31db03ef6
Merge pull request #126470 from benluddy/apiservingwithroutine-alpha-disabled19e03dd
Move ConsistentListFromCache to Beta default againc47cf43
Move APIServingWithRoutine to alpha and disabled by default.Updates
k8s.io/cli-runtime
from 0.30.3 to 0.31.0Commits
598cf84
Update dependencies to v0.31.0 tag86e7f90
revendor dependencies5f321dd
Merge pull request #125488 from pohly/dra-1.318b18255
DRA: bump API v1alpha2 -> v1alpha3094be53
Merge pull request #126018 from aroradaman/bump-k8s-utils8c0748c
bump k8s.io/utils80033e7
Merge pull request #125868 from soltysh/wait_for5e5ff2a
Expose WithError in FakeResourceFinder for testsf3a0798
Merge pull request #125922 from dims/update_otel_279b798b9
update OpenTelemetry dependencies and grpcUpdates
k8s.io/client-go
from 0.30.3 to 0.31.0Commits
02a19c3
Update dependencies to v0.31.0 tag5e3e8ea
informers: add comment that Start does not blockf71a5cc
Call non-blocking informerFactory.Start synchronously to avoid races4536e5a
Merge pull request #124012 from Jefftree/le-controller93c6a5b
Merge pull request #126353 from liggitt/fix-vendor6a9911a
revendor dependenciesfe54892
Merge pull request #126243 from SergeyKanzhelev/devicePluginFailures825f52e
Change PingTime to be persistentf45c451
fix ordering issue in candidates18dd587
feedback: leasecandidate clientsUpdates
sigs.k8s.io/controller-runtime
from 0.18.5 to 0.19.0Release notes
Sourced from sigs.k8s.io/controller-runtime's releases.
... (truncated)
Commits
b901db1
Merge pull request #2924 from lucacome/bump-deps0c7827e
Bump k8s.io deps to v1.31.09f5afec
Merge pull request #2918 from sbueringer/pr-add-skip-name-validation96e8152
Merge pull request #2921 from kubernetes-sigs/dependabot/github_actions/all-g...8f5faff
🌱 Bump actions/upload-artifact in the all-github-actions group89bebe3
Add SkipNameValidation option7857623
Merge pull request #2911 from sbueringer/pr-publish-setup-envtestfdc8bd7
Merge pull request #2913 from sbueringer/pr-test-cov-field-validation7dfd3bb
Fix WithFieldValidation cliente882354
Merge pull request #2908 from sbueringer/pr-approve-actionUpdates
helm.sh/helm/v3
from 3.15.3 to 3.15.4Release notes
Sourced from helm.sh/helm/v3's releases.