From 7f711abf7232e86d7c18e84d0f596a05368268b8 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:20:28 +0100 Subject: [PATCH 01/14] Bump @clr/ui from 16.3.1 to 16.3.2 in /dashboard (#7427) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [@clr/ui](https://github.com/vmware-clarity/ng-clarity) from 16.3.1 to 16.3.2.
Release notes

Sourced from @​clr/ui's releases.

v16.3.2

16.3.2 (2024-02-02)

Bug Fixes

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@clr/ui&package-manager=npm_and_yarn&previous-version=16.3.1&new-version=16.3.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- dashboard/package.json | 2 +- dashboard/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/dashboard/package.json b/dashboard/package.json index 4b449df67e9..ae8ec6a4c44 100644 --- a/dashboard/package.json +++ b/dashboard/package.json @@ -31,7 +31,7 @@ "@cds/city": "^1.1.0", "@cds/core": "^6.9.2", "@cds/react": "^6.9.2", - "@clr/ui": "^16.3.1", + "@clr/ui": "^16.3.2", "@connectrpc/connect": "^1.2.0", "@connectrpc/connect-web": "^1.2.0", "@paciolan/remote-component": "^2.13.0", diff --git a/dashboard/yarn.lock b/dashboard/yarn.lock index 19a91827aa2..4b3753f86c9 100644 --- a/dashboard/yarn.lock +++ b/dashboard/yarn.lock @@ -1272,10 +1272,10 @@ "@cds/city" "^1.1.0" modern-normalize "^1.1.0" -"@clr/ui@^16.3.1": - version "16.3.1" - resolved "https://registry.yarnpkg.com/@clr/ui/-/ui-16.3.1.tgz#d9a9bf6dcf72da18be6a2d82b0f02740f2943406" - integrity sha512-khEPdf7Ib5xVzTD2+6i13WKSJkW5wo2gl/Pr7/rTdr0G/A5JUlTnMYLH38uA+Slkz8zbw1eA7VypdOx+tbYStQ== +"@clr/ui@^16.3.2": + version "16.3.2" + resolved "https://registry.yarnpkg.com/@clr/ui/-/ui-16.3.2.tgz#6cd8bb66e50f3bf61b45c58d939285ab1591fa4a" + integrity sha512-BvKPqgTr27cAiGbxeqrZnk5MEy+VMjOQ5bCodhnHme1M/eCNA++Zyc4FivqtKoHGCwEkeh8CbkWWsAA9uOND5A== "@cnakazawa/watch@^1.0.3": version "1.0.4" From 86baac736735522f0697d023707ee66870b86753 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:20:41 +0100 Subject: [PATCH 02/14] Bump prettier from 3.2.4 to 3.2.5 in /dashboard (#7428) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [prettier](https://github.com/prettier/prettier) from 3.2.4 to 3.2.5.
Release notes

Sourced from prettier's releases.

3.2.5

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.2.5

diff

Support Angular inline styles as single template literal (#15968 by @​sosukesuzuki)

Angular v17 supports single string inline styles.

// Input
@Component({
  template: `<div>...</div>`,
  styles: `h1 { color: blue; }`,
})
export class AppComponent {}

// Prettier 3.2.4
@​Component({
template: &lt;div&gt;...&lt;/div&gt;,
styles: h1 { color: blue; },
})
export class AppComponent {}


// Prettier 3.2.5
@​Component({
template: &lt;div&gt;...&lt;/div&gt;,
styles: h1 { color: blue; },
})
export class AppComponent {}

Unexpected embedded formatting for Angular template (#15969 by @​JounQin)

Computed template should not be considered as Angular component template

// Input
const template = "foobar";

@​Component({
[template]: &lt;h1&gt;{{ hello
}}&lt;/h1&gt;,
})
export class AppComponent {}
</tr></table>

... (truncated)

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=prettier&package-manager=npm_and_yarn&previous-version=3.2.4&new-version=3.2.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- dashboard/package.json | 2 +- dashboard/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/dashboard/package.json b/dashboard/package.json index ae8ec6a4c44..db213e0f64b 100644 --- a/dashboard/package.json +++ b/dashboard/package.json @@ -113,7 +113,7 @@ "npm-run-all": "^4.1.5", "postcss": "^8.4.33", "postcss-scss": "^4.0.9", - "prettier": "^3.2.4", + "prettier": "^3.2.5", "react-dom": "^17.0.2", "react-scripts": "^5.0.1", "react-test-renderer": "^17.0.2", diff --git a/dashboard/yarn.lock b/dashboard/yarn.lock index 4b3753f86c9..14dad191b2a 100644 --- a/dashboard/yarn.lock +++ b/dashboard/yarn.lock @@ -11704,10 +11704,10 @@ prettier-linter-helpers@^1.0.0: dependencies: fast-diff "^1.1.2" -prettier@^3.2.4: - version "3.2.4" - resolved "https://registry.yarnpkg.com/prettier/-/prettier-3.2.4.tgz#4723cadeac2ce7c9227de758e5ff9b14e075f283" - integrity sha512-FWu1oLHKCrtpO1ypU6J0SbK2d9Ckwysq6bHj/uaCP26DxrPpppCLQRGVuqAxSTvhF00AcvDRyYrLNW7ocBhFFQ== +prettier@^3.2.5: + version "3.2.5" + resolved "https://registry.yarnpkg.com/prettier/-/prettier-3.2.5.tgz#e52bc3090586e824964a8813b09aba6233b28368" + integrity sha512-3/GWa9aOC0YeD7LUfvOG2NiDyhOWRvt1k+rcKhOuYnMY24iiCphgneUfJDyFXd6rZCAnuLBv6UeAULtrhT/F4A== pretty-bytes@^5.3.0, pretty-bytes@^5.4.1: version "5.6.0" From 5a2a1a06453bc976b56d340e73ecaa24abdac941 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:20:50 +0100 Subject: [PATCH 03/14] Bump prettier from 3.2.4 to 3.2.5 in /integration (#7430) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [prettier](https://github.com/prettier/prettier) from 3.2.4 to 3.2.5.
Release notes

Sourced from prettier's releases.

3.2.5

🔗 Changelog

Changelog

Sourced from prettier's changelog.

3.2.5

diff

Support Angular inline styles as single template literal (#15968 by @​sosukesuzuki)

Angular v17 supports single string inline styles.

// Input
@Component({
  template: `<div>...</div>`,
  styles: `h1 { color: blue; }`,
})
export class AppComponent {}

// Prettier 3.2.4
@​Component({
template: &lt;div&gt;...&lt;/div&gt;,
styles: h1 { color: blue; },
})
export class AppComponent {}


// Prettier 3.2.5
@​Component({
template: &lt;div&gt;...&lt;/div&gt;,
styles: h1 { color: blue; },
})
export class AppComponent {}

Unexpected embedded formatting for Angular template (#15969 by @​JounQin)

Computed template should not be considered as Angular component template

// Input
const template = "foobar";

@​Component({
[template]: &lt;h1&gt;{{ hello
}}&lt;/h1&gt;,
})
export class AppComponent {}
</tr></table>

... (truncated)

Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=prettier&package-manager=npm_and_yarn&previous-version=3.2.4&new-version=3.2.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- integration/package.json | 2 +- integration/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/integration/package.json b/integration/package.json index 59e94f48eaf..14c9fc75273 100644 --- a/integration/package.json +++ b/integration/package.json @@ -14,6 +14,6 @@ "axios": "^1.6.7" }, "devDependencies": { - "prettier": "^3.2.4" + "prettier": "^3.2.5" } } diff --git a/integration/yarn.lock b/integration/yarn.lock index 87617f97572..8b86a521a86 100644 --- a/integration/yarn.lock +++ b/integration/yarn.lock @@ -80,10 +80,10 @@ playwright@1.41.2: optionalDependencies: fsevents "2.3.2" -prettier@^3.2.4: - version "3.2.4" - resolved "https://registry.yarnpkg.com/prettier/-/prettier-3.2.4.tgz#4723cadeac2ce7c9227de758e5ff9b14e075f283" - integrity sha512-FWu1oLHKCrtpO1ypU6J0SbK2d9Ckwysq6bHj/uaCP26DxrPpppCLQRGVuqAxSTvhF00AcvDRyYrLNW7ocBhFFQ== +prettier@^3.2.5: + version "3.2.5" + resolved "https://registry.yarnpkg.com/prettier/-/prettier-3.2.5.tgz#e52bc3090586e824964a8813b09aba6233b28368" + integrity sha512-3/GWa9aOC0YeD7LUfvOG2NiDyhOWRvt1k+rcKhOuYnMY24iiCphgneUfJDyFXd6rZCAnuLBv6UeAULtrhT/F4A== proxy-from-env@^1.1.0: version "1.1.0" From 2bced5d99ecc9aa020a87fd476ac65d88b51d549 Mon Sep 17 00:00:00 2001 From: "github-actions[bot]" <41898282+github-actions[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:21:09 +0100 Subject: [PATCH 04/14] Sync chart with bitnami/kubeapps chart (version 14.3.3) (#7431) ### Description of the change This is an automatic PR for synchronizing the changes performed externally at the [bitnami/kubeapps official chart](https://github.com/bitnami/charts/tree/main/bitnami/kubeapps) to the Kubeapps development version. ### Benefits The Kubeapps [development chart](https://github.com/vmware-tanzu/kubeapps/tree/main/chart/kubeapps) will get the newest changes, including image version updates and other updates. ### Possible drawbacks Although unlikely, some changes implemented by the Bitnami team may not be 100% compatible with the current Kubeapps version. ### Applicable issues N/A ### Additional information This PR is marked as a draft until a Kubeapps maintainer manually reviews it. --------- Signed-off-by: kubeapps-bot Signed-off-by: Antonio Gamez Diaz Co-authored-by: kubeapps-bot Co-authored-by: Antonio Gamez Diaz --- chart/kubeapps/Chart.lock | 8 ++++---- chart/kubeapps/Chart.yaml | 18 +++++++++--------- chart/kubeapps/README.md | 2 +- chart/kubeapps/values.yaml | 4 ++-- 4 files changed, 16 insertions(+), 16 deletions(-) diff --git a/chart/kubeapps/Chart.lock b/chart/kubeapps/Chart.lock index 1d0db11bbea..fd86f09b228 100644 --- a/chart/kubeapps/Chart.lock +++ b/chart/kubeapps/Chart.lock @@ -1,12 +1,12 @@ dependencies: - name: redis repository: oci://registry-1.docker.io/bitnamicharts - version: 18.9.0 + version: 18.12.0 - name: postgresql repository: oci://registry-1.docker.io/bitnamicharts - version: 13.4.2 + version: 13.4.4 - name: common repository: oci://registry-1.docker.io/bitnamicharts version: 2.14.1 -digest: sha256:8e3bca1e89c1636d458f26344cfda867f26cabcecd3c31c4e38918fc7e442181 -generated: "2024-01-27T19:39:01.29349326Z" +digest: sha256:ca023ab4f20b7a77e612af0ce3d62ba092f82f4007706b05ffe27fa432a0c677 +generated: "2024-02-03T00:30:46.579772593Z" diff --git a/chart/kubeapps/Chart.yaml b/chart/kubeapps/Chart.yaml index 1c872880199..8d43bf477c5 100644 --- a/chart/kubeapps/Chart.yaml +++ b/chart/kubeapps/Chart.yaml @@ -6,21 +6,21 @@ annotations: licenses: Apache-2.0 images: | - name: kubeapps-apis - image: docker.io/bitnami/kubeapps-apis:2.9.0-debian-11-r18 + image: docker.io/bitnami/kubeapps-apis:2.9.0-debian-11-r20 - name: kubeapps-apprepository-controller - image: docker.io/bitnami/kubeapps-apprepository-controller:2.9.0-debian-11-r17 + image: docker.io/bitnami/kubeapps-apprepository-controller:2.9.0-debian-11-r19 - name: kubeapps-asset-syncer - image: docker.io/bitnami/kubeapps-asset-syncer:2.9.0-debian-11-r18 + image: docker.io/bitnami/kubeapps-asset-syncer:2.9.0-debian-11-r20 - name: kubeapps-oci-catalog - image: docker.io/bitnami/kubeapps-oci-catalog:2.9.0-debian-11-r9 + image: docker.io/bitnami/kubeapps-oci-catalog:2.9.0-debian-11-r12 - name: kubeapps-pinniped-proxy - image: docker.io/bitnami/kubeapps-pinniped-proxy:2.9.0-debian-11-r13 + image: docker.io/bitnami/kubeapps-pinniped-proxy:2.9.0-debian-11-r16 - name: kubeapps-dashboard - image: docker.io/bitnami/kubeapps-dashboard:2.9.0-debian-11-r21 + image: docker.io/bitnami/kubeapps-dashboard:2.9.0-debian-11-r22 - name: nginx - image: docker.io/bitnami/nginx:1.25.3-debian-11-r5 + image: docker.io/bitnami/nginx:1.25.3-debian-11-r7 - name: oauth2-proxy - image: docker.io/bitnami/oauth2-proxy:7.5.1-debian-11-r15 + image: docker.io/bitnami/oauth2-proxy:7.5.1-debian-11-r17 apiVersion: v2 appVersion: DEVEL dependencies: @@ -52,4 +52,4 @@ maintainers: name: kubeapps sources: - https://github.com/bitnami/charts/tree/main/bitnami/kubeapps -version: 14.3.3-dev +version: 14.3.4-dev diff --git a/chart/kubeapps/README.md b/chart/kubeapps/README.md index a5242c76062..891bb200947 100644 --- a/chart/kubeapps/README.md +++ b/chart/kubeapps/README.md @@ -1166,4 +1166,4 @@ Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and -limitations under the License. +limitations under the License. \ No newline at end of file diff --git a/chart/kubeapps/values.yaml b/chart/kubeapps/values.yaml index 1fb110e4145..13bad7daee6 100644 --- a/chart/kubeapps/values.yaml +++ b/chart/kubeapps/values.yaml @@ -208,7 +208,7 @@ frontend: image: registry: docker.io repository: bitnami/nginx - tag: 1.25.3-debian-11-r5 + tag: 1.25.3-debian-11-r7 digest: "" ## Specify a imagePullPolicy ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent' @@ -1214,7 +1214,7 @@ authProxy: image: registry: docker.io repository: bitnami/oauth2-proxy - tag: 7.5.1-debian-11-r15 + tag: 7.5.1-debian-11-r17 digest: "" ## Specify a imagePullPolicy ## Defaults to 'Always' if image tag is 'latest', else set to 'IfNotPresent' From 5502fcb715de41f688892caa66f7802139b30860 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:21:25 +0100 Subject: [PATCH 05/14] Bump github.com/fluxcd/helm-controller/api from 0.37.3 to 0.37.4 (#7432) Bumps [github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller) from 0.37.3 to 0.37.4.
Release notes

Sourced from github.com/fluxcd/helm-controller/api's releases.

v0.37.4

Changelog

v0.37.4 changelog

Container images

  • docker.io/fluxcd/helm-controller:v0.37.4
  • ghcr.io/fluxcd/helm-controller:v0.37.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/helm-controller/api's changelog.

0.37.4

Release date: 2024-02-05

This prerelease comes with improvements in the HelmRelease status reporting. After recovering from a reconciliation failure, sometimes the status may show stale conditions which could be misleading. This has been fixed by ensuring that the stale failure conditions get updated after failure recovery.

Improvements:

  • Remove stale Ready=False conditions value to show more accurate status #884
  • Dependency update #886
Commits
  • 0114b20 Merge pull request #887 from fluxcd/release-v0.37.4
  • 48781f2 Release v0.37.4
  • 0bd797a Merge pull request #884 from fluxcd/update-stale-ready-condition
  • 59c577a Remove stale Ready=False conditions values
  • d370e73 Merge pull request #886 from fluxcd/dependabot/github_actions/ci-bb3c355948
  • 1c61870 build(deps): bump the ci group with 4 updates
  • See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | github.com/fluxcd/helm-controller/api | [>= 0.35.0.a, < 0.35.1] |
[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/fluxcd/helm-controller/api&package-manager=go_modules&previous-version=0.37.3&new-version=0.37.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- go.mod | 2 +- go.sum | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/go.mod b/go.mod index 7736670e4b5..2c6cdc971da 100644 --- a/go.mod +++ b/go.mod @@ -17,7 +17,7 @@ require ( github.com/disintegration/imaging v1.6.2 github.com/distribution/reference v0.5.0 github.com/docker/cli v25.0.2+incompatible - github.com/fluxcd/helm-controller/api v0.37.3 + github.com/fluxcd/helm-controller/api v0.37.4 github.com/fluxcd/pkg/apis/meta v1.3.0 github.com/fluxcd/pkg/oci v0.35.0 github.com/fluxcd/pkg/version v0.2.2 diff --git a/go.sum b/go.sum index a3a21e8900c..325b28074f8 100644 --- a/go.sum +++ b/go.sum @@ -254,8 +254,8 @@ github.com/fatih/color v1.15.0 h1:kOqh6YHBtK8aywxGerMG2Eq3H6Qgoqeo13Bk2Mv/nBs= github.com/fatih/color v1.15.0/go.mod h1:0h5ZqXfHYED7Bhv2ZJamyIOUej9KtShiJESRwBDUSsw= github.com/felixge/httpsnoop v1.0.4 h1:NFTV2Zj1bL4mc9sqWACXbQFVBBg2W3GPvqp8/ESS2Wg= github.com/felixge/httpsnoop v1.0.4/go.mod h1:m8KPJKqk1gH5J9DgRY2ASl2lWCfGKXixSwevea8zH2U= -github.com/fluxcd/helm-controller/api v0.37.3 h1:9h4Syu4vOFpFWdK7f/hdBOgipa4VjyihIqZH/OHdBaY= -github.com/fluxcd/helm-controller/api v0.37.3/go.mod h1:KFdP5Lbrc4Vv+Jt4xRj6UUo3qiwdBqBPl1xiiAnBe9c= +github.com/fluxcd/helm-controller/api v0.37.4 h1:rkBMqYXexyf1s5BS8QpxGi691DsCi+yugIFCM5fNKLU= +github.com/fluxcd/helm-controller/api v0.37.4/go.mod h1:KFdP5Lbrc4Vv+Jt4xRj6UUo3qiwdBqBPl1xiiAnBe9c= github.com/fluxcd/pkg/apis/acl v0.1.0 h1:EoAl377hDQYL3WqanWCdifauXqXbMyFuK82NnX6pH4Q= github.com/fluxcd/pkg/apis/acl v0.1.0/go.mod h1:zfEZzz169Oap034EsDhmCAGgnWlcWmIObZjYMusoXS8= github.com/fluxcd/pkg/apis/kustomize v1.3.0 h1:qvB46CfaOWcL1SyR2RiVWN/j7/035D0OtB1ltLN7rgI= From 67c8fc4550f2e5fb51aa65081fdf1a4a7ae6b601 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:23:26 +0100 Subject: [PATCH 06/14] Bump @testing-library/jest-dom from 6.4.1 to 6.4.2 in /dashboard (#7433) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [@testing-library/jest-dom](https://github.com/testing-library/jest-dom) from 6.4.1 to 6.4.2.
Release notes

Sourced from @​testing-library/jest-dom's releases.

v6.4.2

6.4.2 (2024-02-05)

Bug Fixes

  • Remove errant export of GetByRoleMatcher, fixing type checking in some TS configurations (#575) (a93c0c4)
Commits
  • a93c0c4 fix: Remove errant export of GetByRoleMatcher, fixing type checking in some T...
  • c5c4e8d docs: add Dennis273 as a contributor for code (#581)
  • 978e3d4 docs: add kryops as a contributor for bug, code, and test (#580)
  • 73ad847 docs: add SteKoe as a contributor for bug, and code (#579)
  • d829ed9 docs: add jakeboone02 as a contributor for code, and test (#578)
  • 16499cf docs: add fpapado as a contributor for code, doc, and test (#573)
  • See full diff in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=@testing-library/jest-dom&package-manager=npm_and_yarn&previous-version=6.4.1&new-version=6.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- dashboard/package.json | 2 +- dashboard/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/dashboard/package.json b/dashboard/package.json index db213e0f64b..dbfdb058504 100644 --- a/dashboard/package.json +++ b/dashboard/package.json @@ -80,7 +80,7 @@ "@craco/craco": "^7.1.0", "@formatjs/cli": "^6.2.7", "@reduxjs/toolkit": "^1.9.7", - "@testing-library/jest-dom": "^6.4.1", + "@testing-library/jest-dom": "^6.4.2", "@testing-library/react": "^12.1.5", "@testing-library/user-event": "^14.5.2", "@types/enzyme": "^3.10.18", diff --git a/dashboard/yarn.lock b/dashboard/yarn.lock index 14dad191b2a..fb9a5d51938 100644 --- a/dashboard/yarn.lock +++ b/dashboard/yarn.lock @@ -2763,10 +2763,10 @@ lz-string "^1.5.0" pretty-format "^27.0.2" -"@testing-library/jest-dom@^6.4.1": - version "6.4.1" - resolved "https://registry.yarnpkg.com/@testing-library/jest-dom/-/jest-dom-6.4.1.tgz#1b0cc222c3a59f9cba2cc7947dc5fadc01210a37" - integrity sha512-Z7qMM3J2Zw5H/nC2/5CYx5YcuaD56JmDFKNIozZ89VIo6o6Y9FMhssics4e2madEKYDNEpZz3+glPGz0yWMOag== +"@testing-library/jest-dom@^6.4.2": + version "6.4.2" + resolved "https://registry.yarnpkg.com/@testing-library/jest-dom/-/jest-dom-6.4.2.tgz#38949f6b63722900e2d75ba3c6d9bf8cffb3300e" + integrity sha512-CzqH0AFymEMG48CpzXFriYYkOjk6ZGPCLMhW9e9jg3KMCn5OfJecF8GtGW7yGfR/IgCe3SX8BSwjdzI6BBbZLw== dependencies: "@adobe/css-tools" "^4.3.2" "@babel/runtime" "^7.9.2" From 2e19cfb7fc12e01512079352a731953af36281c4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:23:47 +0100 Subject: [PATCH 07/14] Bump swagger-ui-react from 5.11.2 to 5.11.3 in /dashboard (#7439) MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Bumps [swagger-ui-react](https://github.com/swagger-api/swagger-ui) from 5.11.2 to 5.11.3.
Release notes

Sourced from swagger-ui-react's releases.

Swagger UI v5.11.3 Released!

5.11.3 (2024-02-07)

Bug Fixes

Commits
  • 4404857 chore(release): cut the v5.11.3 release
  • a88bed5 fix(spec): render response body for non-200 responses (#9555)
  • 6362bc3 chore(deps-dev): bump postcss from 8.4.33 to 8.4.34 (#9553)
  • 4a2c86d chore(deps-dev): bump prettier from 3.2.4 to 3.2.5 (#9552)
  • 5dce8d5 chore(deps-dev): bump @​babel/eslint-parser from 7.23.9 to 7.23.10 (#9546)
  • 12d1f6b chore(deps-dev): bump mini-css-extract-plugin from 2.7.7 to 2.8.0 (#9547)
  • 41fc61a chore(deps-dev): bump sass-loader from 14.0.0 to 14.1.0 (#9543)
  • a51bf6d chore(deps-dev): bump postcss-loader from 8.0.0 to 8.1.0 (#9541)
  • e90a4d8 chore(deps-dev): bump lint-staged from 15.2.0 to 15.2.1 (#9538)
  • f05e5b2 chore(deps-dev): bump css-loader from 6.9.1 to 6.10.0 (#9537)
  • Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=swagger-ui-react&package-manager=npm_and_yarn&previous-version=5.11.2&new-version=5.11.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- dashboard/package.json | 2 +- dashboard/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/dashboard/package.json b/dashboard/package.json index dbfdb058504..0772a9b867e 100644 --- a/dashboard/package.json +++ b/dashboard/package.json @@ -68,7 +68,7 @@ "remark-breaks": "^3.0.3", "remark-gfm": "^3.0.1", "rxjs": "^7.8.1", - "swagger-ui-react": "^5.11.2", + "swagger-ui-react": "^5.11.3", "typesafe-actions": "^5.1.0", "yaml": "^2.3.4" }, diff --git a/dashboard/yarn.lock b/dashboard/yarn.lock index fb9a5d51938..11a9f68eae1 100644 --- a/dashboard/yarn.lock +++ b/dashboard/yarn.lock @@ -13987,10 +13987,10 @@ swagger-client@^3.25.0: traverse "~0.6.6" undici "^5.24.0" -swagger-ui-react@^5.11.2: - version "5.11.2" - resolved "https://registry.yarnpkg.com/swagger-ui-react/-/swagger-ui-react-5.11.2.tgz#00d6f08b106e345c9236ad39e151948577b98a23" - integrity sha512-J7QevDccLZYXV1OkplfWPdgW17MVbFozcwmfWX6Ob+XwukXGjPC5XY9EqhZiwRQd02MfZX9uQLKp4kPrlibAGA== +swagger-ui-react@^5.11.3: + version "5.11.3" + resolved "https://registry.yarnpkg.com/swagger-ui-react/-/swagger-ui-react-5.11.3.tgz#193f8bb2031bfe56c555b44db5b887a3c8ea1696" + integrity sha512-2hkNNIthFbcz19aNhvKEJTrZfI+uSrC1llPzBVZFBOBYnS3SDqnwRn8Nqk0/pnqTGbM3cYcNW+u1r4fwSEpTxA== dependencies: "@babel/runtime-corejs3" "^7.23.8" "@braintree/sanitize-url" "=7.0.0" From 3b6c96ec07b23b11bf4160a8a1067105a4f6fe7d Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:23:52 +0100 Subject: [PATCH 08/14] Bump ts-proto from 1.167.2 to 1.167.3 in /dashboard (#7426) Bumps [ts-proto](https://github.com/stephenh/ts-proto) from 1.167.2 to 1.167.3.
Release notes

Sourced from ts-proto's releases.

v1.167.3

1.167.3 (2024-02-03)

Bug Fixes

  • ensure default service streaming methods compile when middleware methods are enabled (#996) (a9e975b)
Changelog

Sourced from ts-proto's changelog.

1.167.3 (2024-02-03)

Bug Fixes

  • ensure default service streaming methods compile when middleware methods are enabled (#996) (a9e975b)
Commits
  • f27bb8b chore(release): 1.167.3 [skip ci]
  • a9e975b fix: ensure default service streaming methods compile when middleware methods...
  • 8dc2b5e docs: Add Payload & Ctx to NestJS readme.
  • See full diff in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ts-proto&package-manager=npm_and_yarn&previous-version=1.167.2&new-version=1.167.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- dashboard/package.json | 2 +- dashboard/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/dashboard/package.json b/dashboard/package.json index 0772a9b867e..c6c55ab7c42 100644 --- a/dashboard/package.json +++ b/dashboard/package.json @@ -127,7 +127,7 @@ "stylelint-config-standard-scss": "^13.0.0", "stylelint-scss": "^6.1.0", "ts-jest": "^29.1.2", - "ts-proto": "^1.167.2", + "ts-proto": "^1.167.3", "typescript": "^5.3.3" }, "resolutions": { diff --git a/dashboard/yarn.lock b/dashboard/yarn.lock index 11a9f68eae1..3cf340bb3e1 100644 --- a/dashboard/yarn.lock +++ b/dashboard/yarn.lock @@ -14400,10 +14400,10 @@ ts-proto-descriptors@1.15.0: long "^5.2.3" protobufjs "^7.2.4" -ts-proto@^1.167.2: - version "1.167.2" - resolved "https://registry.yarnpkg.com/ts-proto/-/ts-proto-1.167.2.tgz#1dae6c1befb9a2da4aa90dbfb3721d34c644ce94" - integrity sha512-7y/BLjiUZphgCe+SZBEG20DP94VK7BHpHcl5fkeN8lRCeABNIsiI54FkUQ8pe7PsHLVpFKqMO5aRLx74FX+4iA== +ts-proto@^1.167.3: + version "1.167.3" + resolved "https://registry.yarnpkg.com/ts-proto/-/ts-proto-1.167.3.tgz#7c1f603daaf86271a7c2e79496cc10f4f013ac6e" + integrity sha512-quBKTeIgqhTGKXl5JN7HHZjLwrdMaNIoQ0+X11PqNLVRqTlnEzfiCUXM6HOW4pZa6PD5+qSyKOEGaTa3kS7Glg== dependencies: case-anything "^2.1.13" protobufjs "^7.2.4" From ed1cecc308d06da2fd72bb16457f54afc4408450 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:24:01 +0100 Subject: [PATCH 09/14] Bump golang.org/x/net from 0.20.0 to 0.21.0 (#7441) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.20.0 to 0.21.0.
Commits
  • 73d21fd go.mod: update golang.org/x dependencies
  • 643fd16 html: fix SOLIDUS '/' handling in attribute parsing
  • 73e4b50 dns/dnsmessage: allow name compression for SRV resource parsing
  • b2208d0 internal/quic/qlog: fix typo
  • 0d0b98c http2: avoid goroutine starvation in TestServer_Push_RejectAfterGoAway
  • 07e05fd http2: remove suspicious uint32->v conversion in frame code
  • 26b646e quic: avoid deadlock in Endpoint.Close
  • See full diff in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/net&package-manager=go_modules&previous-version=0.20.0&new-version=0.21.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- go.mod | 8 ++++---- go.sum | 16 ++++++++-------- 2 files changed, 12 insertions(+), 12 deletions(-) diff --git a/go.mod b/go.mod index 2c6cdc971da..b235510c07a 100644 --- a/go.mod +++ b/go.mod @@ -43,7 +43,7 @@ require ( github.com/vmware-tanzu/carvel-kapp v0.60.0 github.com/vmware-tanzu/carvel-kapp-controller v0.50.0 github.com/vmware-tanzu/carvel-vendir v0.36.1 - golang.org/x/net v0.20.0 + golang.org/x/net v0.21.0 golang.org/x/sync v0.6.0 google.golang.org/genproto/googleapis/api v0.0.0-20240125205218-1f4bbc51befe google.golang.org/grpc v1.61.0 @@ -213,12 +213,12 @@ require ( go.opentelemetry.io/otel/trace v1.21.0 // indirect go.starlark.net v0.0.0-20230726094710-7dadff395006 // indirect go.uber.org/multierr v1.11.0 // indirect - golang.org/x/crypto v0.18.0 // indirect + golang.org/x/crypto v0.19.0 // indirect golang.org/x/exp v0.0.0-20230905200255-921286631fa9 // indirect golang.org/x/image v0.10.0 // indirect golang.org/x/oauth2 v0.16.0 // indirect - golang.org/x/sys v0.16.0 // indirect - golang.org/x/term v0.16.0 // indirect + golang.org/x/sys v0.17.0 // indirect + golang.org/x/term v0.17.0 // indirect golang.org/x/text v0.14.0 // indirect golang.org/x/time v0.5.0 // indirect gomodules.xyz/jsonpatch/v2 v2.4.0 // indirect diff --git a/go.sum b/go.sum index 325b28074f8..84379a08294 100644 --- a/go.sum +++ b/go.sum @@ -882,8 +882,8 @@ golang.org/x/crypto v0.0.0-20200622213623-75b288015ac9/go.mod h1:LzIPMQfyMNhhGPh golang.org/x/crypto v0.0.0-20210817164053-32db794688a5/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.0.0-20210921155107-089bfa567519/go.mod h1:GvvjBRRGRdwPK5ydBHafDWAxML/pGHZbMvKqRZ5+Abc= golang.org/x/crypto v0.3.0/go.mod h1:hebNnKkNXi2UzZN1eVRvBB7co0a+JxK6XbPiWVs/3J4= -golang.org/x/crypto v0.18.0 h1:PGVlW0xEltQnzFZ55hkuX5+KLyrMYhHld1YHO4AKcdc= -golang.org/x/crypto v0.18.0/go.mod h1:R0j02AL6hcrfOiy9T4ZYp/rcWeMxM3L6QYxlOuEG1mg= +golang.org/x/crypto v0.19.0 h1:ENy+Az/9Y1vSrlrvBSyna3PITt4tiZLf7sgCjZBX7Wo= +golang.org/x/crypto v0.19.0/go.mod h1:Iy9bg/ha4yyC70EfRS8jz+B6ybOBKMaSxLj6P6oBDfU= golang.org/x/exp v0.0.0-20190121172915-509febef88a4/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190306152737-a1d7652674e8/go.mod h1:CJ0aWSM057203Lf6IL+f9T1iT9GByDxfZKAQTCR3kQA= golang.org/x/exp v0.0.0-20190510132918-efd6b22b2522/go.mod h1:ZjyILWgesfNpC6sMxTJOJm9Kp84zZh5NQWvqDGG3Qr8= @@ -976,8 +976,8 @@ golang.org/x/net v0.0.0-20210813160813-60bc85c4be6d/go.mod h1:9nx3DQGgdP8bBQD5qx golang.org/x/net v0.0.0-20220722155237-a158d28d115b/go.mod h1:XRhObCWvk6IyKnWLug+ECip1KBveYUHfp+8e9klMJ9c= golang.org/x/net v0.2.0/go.mod h1:KqCZLdyyvdV855qA2rE3GC2aiw5xGR5TEjj8smXukLY= golang.org/x/net v0.6.0/go.mod h1:2Tu9+aMcznHK/AK1HMvgo6xiTLG5rD5rZLDS+rp2Bjs= -golang.org/x/net v0.20.0 h1:aCL9BSgETF1k+blQaYUBx9hJ9LOGP3gAVemcZlf1Kpo= -golang.org/x/net v0.20.0/go.mod h1:z8BVo6PvndSri0LbOE3hAn0apkU+1YvI6E70E9jsnvY= +golang.org/x/net v0.21.0 h1:AQyQV4dYCvJ7vGmJyKki9+PBdyvhkSd8EIx/qb0AYv4= +golang.org/x/net v0.21.0/go.mod h1:bIjVDfnllIU7BJ2DNgfnXvpSvtn8VRwhlsaeUTyUS44= golang.org/x/oauth2 v0.0.0-20180821212333-d2e6202438be/go.mod h1:N/0e6XlmueqKjAGxoOufVs8QHGRruUQn6yWY3a++T0U= golang.org/x/oauth2 v0.0.0-20190226205417-e64efc72b421/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= golang.org/x/oauth2 v0.0.0-20190604053449-0f29369cfe45/go.mod h1:gOpvHmFTYa4IltrdGE7lF6nIHvwfUNPOp7c8zoXwtLw= @@ -1096,16 +1096,16 @@ golang.org/x/sys v0.1.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.2.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg= -golang.org/x/sys v0.16.0 h1:xWw16ngr6ZMtmxDyKyIgsE93KNKz5HKmMa3b8ALHidU= -golang.org/x/sys v0.16.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= +golang.org/x/sys v0.17.0 h1:25cE3gD+tdBA7lp7QfhuV+rJiE9YXTcS3VG1SqssI/Y= +golang.org/x/sys v0.17.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA= golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1/go.mod h1:bj7SfCRtBDWHUb9snDiAeCFNEtKQo2Wmx5Cou7ajbmo= golang.org/x/term v0.0.0-20210927222741-03fcf44c2211/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.0.0-20220411215600-e5f449aeb171/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.0.0-20220526004731-065cf7ba2467/go.mod h1:jbD1KX2456YbFQfuXm/mYQcufACuNUgVhRMnK/tPxf8= golang.org/x/term v0.2.0/go.mod h1:TVmDHMZPmdnySmBfhjOoOdhjzdE1h4u1VwSiw2l1Nuc= golang.org/x/term v0.5.0/go.mod h1:jMB1sMXY+tzblOD4FWmEbocvup2/aLOaQEp7JmGp78k= -golang.org/x/term v0.16.0 h1:m+B6fahuftsE9qjo0VWp2FW0mB3MTJvR0BaMQrq0pmE= -golang.org/x/term v0.16.0/go.mod h1:yn7UURbUtPyrVJPGPq404EukNFxcm/foM+bV/bfcDsY= +golang.org/x/term v0.17.0 h1:mkTF7LCd6WGJNL3K1Ad7kwxNfYAW6a8a8QqtMblp/4U= +golang.org/x/term v0.17.0/go.mod h1:lLRBjIVuehSbZlaOtGMbcMncT+aqLLLmKrsjNrUguwk= golang.org/x/text v0.0.0-20170915032832-14c0d48ead0c/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.0/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= golang.org/x/text v0.3.1-0.20180807135948-17ff2d5776d2/go.mod h1:NqM8EUOU14njkJ3fqMW+pc6Ldnwhi/IjpwHt7yyuwOQ= From 9d9d9e2fd5bad90b514eb6dce1d88bebfde1fc2c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:24:21 +0100 Subject: [PATCH 10/14] Bump monaco-editor from 0.45.0 to 0.46.0 in /dashboard (#7442) Bumps [monaco-editor](https://github.com/microsoft/monaco-editor) from 0.45.0 to 0.46.0.
Changelog

Sourced from monaco-editor's changelog.

[0.46.0]

  • Bug fixes
Commits
  • 2100736 Adds changed lockfile
  • c2040c4 Update version to 0.46.0
  • 3284441 fixes website CI failure
  • 8617a8a Disables parcel build
  • fd84f54 Update esbuild
  • 21db3ae Sorts version numbers
  • 73b47d4 Fixes parameter labels
  • 9488e7e Removes parcel smoke test, as it replaces process with {}
  • b0330f8 Fixes monaco-editor nightly build (needed for verification)
  • 6c7087b Adds publishMonacoEditorCore and publishMonacoEditor options to nightly pipel...
  • Additional commits viewable in compare view

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=monaco-editor&package-manager=npm_and_yarn&previous-version=0.45.0&new-version=0.46.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- dashboard/package.json | 2 +- dashboard/yarn.lock | 8 ++++---- 2 files changed, 5 insertions(+), 5 deletions(-) diff --git a/dashboard/package.json b/dashboard/package.json index c6c55ab7c42..018435c236b 100644 --- a/dashboard/package.json +++ b/dashboard/package.json @@ -46,7 +46,7 @@ "lodash": "^4.17.21", "lodash-es": "^4.17.21", "modern-normalize": "^2.0.0", - "monaco-editor": "^0.45.0", + "monaco-editor": "^0.46.0", "prop-types": "^15.8.1", "protobufjs": "^7.2.6", "qs": "^6.11.2", diff --git a/dashboard/yarn.lock b/dashboard/yarn.lock index 3cf340bb3e1..0ec0fee5e1b 100644 --- a/dashboard/yarn.lock +++ b/dashboard/yarn.lock @@ -10303,10 +10303,10 @@ monaco-editor-webpack-plugin@^7.1.0: dependencies: loader-utils "^2.0.2" -monaco-editor@^0.45.0: - version "0.45.0" - resolved "https://registry.yarnpkg.com/monaco-editor/-/monaco-editor-0.45.0.tgz#6939123a6254aea9fea2d647697f846306dd4448" - integrity sha512-mjv1G1ZzfEE3k9HZN0dQ2olMdwIfaeAAjFiwNprLfYNRSz7ctv9XuCT7gPtBGrMUeV1/iZzYKj17Khu1hxoHOA== +monaco-editor@^0.46.0: + version "0.46.0" + resolved "https://registry.yarnpkg.com/monaco-editor/-/monaco-editor-0.46.0.tgz#013e453fd2408997e4fe0bf67b36a80a24bc7bcc" + integrity sha512-ADwtLIIww+9FKybWscd7OCfm9odsFYHImBRI1v9AviGce55QY8raT+9ihH8jX/E/e6QVSGM+pKj4jSUSRmALNQ== moo@^0.5.0: version "0.5.2" From 1187193c9d99377b5ae234a264aef509eb6a129f Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:24:29 +0100 Subject: [PATCH 11/14] Bump tonic-build from 0.10.2 to 0.11.0 in /cmd/oci-catalog (#7444) Bumps [tonic-build](https://github.com/hyperium/tonic) from 0.10.2 to 0.11.0.
Changelog

Sourced from tonic-build's changelog.

(2024-02-08)

BREAKING CHANGES:

  • Removed NamedService from the transport module, please import it via tonic::server::NamedService.
  • MSRV bumped to 1.70.

Features

  • Added zstd compression support.
  • Added connection timeout for connecto_with_connector_lazy.
  • Upgrade rustls to v0.22
  • Feature gate server implementation for tonic-reflection.
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=tonic-build&package-manager=cargo&previous-version=0.10.2&new-version=0.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- cmd/oci-catalog/Cargo.lock | 4 ++-- cmd/oci-catalog/Cargo.toml | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/cmd/oci-catalog/Cargo.lock b/cmd/oci-catalog/Cargo.lock index a2931120012..5d4489a61d7 100644 --- a/cmd/oci-catalog/Cargo.lock +++ b/cmd/oci-catalog/Cargo.lock @@ -1418,9 +1418,9 @@ dependencies = [ [[package]] name = "tonic-build" -version = "0.10.2" +version = "0.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "9d021fc044c18582b9a2408cd0dd05b1596e3ecdb5c4df822bb0183545683889" +checksum = "be4ef6dd70a610078cb4e338a0f79d06bc759ff1b22d2120c2ff02ae264ba9c2" dependencies = [ "prettyplease", "proc-macro2", diff --git a/cmd/oci-catalog/Cargo.toml b/cmd/oci-catalog/Cargo.toml index 873a46ef623..2e4fa0f0c11 100644 --- a/cmd/oci-catalog/Cargo.toml +++ b/cmd/oci-catalog/Cargo.toml @@ -25,7 +25,7 @@ tonic-health = "0.10" url = "2.5" [build-dependencies] -tonic-build = "0.10" +tonic-build = "0.11" [dev-dependencies] rstest = "0.18.2" From 1c6038cfb8a7a0f87d0460feadc73f89d0d23569 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:24:40 +0100 Subject: [PATCH 12/14] Bump clap from 4.4.18 to 4.5.0 in /cmd/oci-catalog (#7446) Bumps [clap](https://github.com/clap-rs/clap) from 4.4.18 to 4.5.0.
Changelog

Sourced from clap's changelog.

[4.5.0] - 2024-02-08

Compatibility

  • Update MSRV to 1.74
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=clap&package-manager=cargo&previous-version=4.4.18&new-version=4.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- cmd/oci-catalog/Cargo.lock | 20 ++++++++++---------- cmd/oci-catalog/Cargo.toml | 2 +- 2 files changed, 11 insertions(+), 11 deletions(-) diff --git a/cmd/oci-catalog/Cargo.lock b/cmd/oci-catalog/Cargo.lock index 5d4489a61d7..1778429b8ac 100644 --- a/cmd/oci-catalog/Cargo.lock +++ b/cmd/oci-catalog/Cargo.lock @@ -226,9 +226,9 @@ checksum = "baf1de4339761588bc0619e3cbc0120ee582ebb74b53b4efbf79117bd2da40fd" [[package]] name = "clap" -version = "4.4.18" +version = "4.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1e578d6ec4194633722ccf9544794b71b1385c3c027efe0c55db226fc880865c" +checksum = "80c21025abd42669a92efc996ef13cfb2c5c627858421ea58d5c3b331a6c134f" dependencies = [ "clap_builder", "clap_derive", @@ -236,9 +236,9 @@ dependencies = [ [[package]] name = "clap_builder" -version = "4.4.18" +version = "4.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4df4df40ec50c46000231c914968278b1eb05098cf8f1b3a518a95030e71d1c7" +checksum = "458bf1f341769dfcf849846f65dffdf9146daa56bcd2a47cb4e1de9915567c99" dependencies = [ "anstream", "anstyle", @@ -248,9 +248,9 @@ dependencies = [ [[package]] name = "clap_derive" -version = "4.4.7" +version = "4.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "cf9804afaaf59a91e75b022a30fb7229a7901f60c755489cc61c9b423b836442" +checksum = "307bc0538d5f0f83b8248db3087aa92fe504e4691294d0c96c0eabc33f47ba47" dependencies = [ "heck", "proc-macro2", @@ -260,9 +260,9 @@ dependencies = [ [[package]] name = "clap_lex" -version = "0.6.0" +version = "0.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "702fc72eb24e5a1e48ce58027a675bc24edd52096d5397d4aea7c6dd9eca0bd1" +checksum = "98cc8fbded0c607b7ba9dd60cd98df59af97e84d24e49c8557331cfc26d301ce" [[package]] name = "colorchoice" @@ -1246,9 +1246,9 @@ checksum = "6980e8d7511241f8acf4aebddbb1ff938df5eebe98691418c4468d0b72a96a67" [[package]] name = "strsim" -version = "0.10.0" +version = "0.11.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "73473c0e59e6d5812c5dfe2a064a6444949f089e20eec9a2e5506596494e4623" +checksum = "5ee073c9e4cd00e28217186dbe12796d692868f432bf2e97ee73bed0c56dfa01" [[package]] name = "syn" diff --git a/cmd/oci-catalog/Cargo.toml b/cmd/oci-catalog/Cargo.toml index 2e4fa0f0c11..a982bca4eef 100644 --- a/cmd/oci-catalog/Cargo.toml +++ b/cmd/oci-catalog/Cargo.toml @@ -10,7 +10,7 @@ edition = "2021" # See more keys and their definitions at https://doc.rust-lang.org/cargo/reference/manifest.html [dependencies] -clap = { version = "4.4", features = ["derive", "env"] } +clap = { version = "4.5", features = ["derive", "env"] } env_logger = "0.11" futures-core = "0.3" log = "0.4" From 8a0b11c3a944fc30e492d275f853749b4b7861e4 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:24:51 +0100 Subject: [PATCH 13/14] Bump clap from 4.4.18 to 4.5.0 in /cmd/pinniped-proxy (#7447) Bumps [clap](https://github.com/clap-rs/clap) from 4.4.18 to 4.5.0.
Changelog

Sourced from clap's changelog.

[4.5.0] - 2024-02-08

Compatibility

  • Update MSRV to 1.74
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=clap&package-manager=cargo&previous-version=4.4.18&new-version=4.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- cmd/pinniped-proxy/Cargo.lock | 26 ++++++++++++++++---------- cmd/pinniped-proxy/Cargo.toml | 2 +- 2 files changed, 17 insertions(+), 11 deletions(-) diff --git a/cmd/pinniped-proxy/Cargo.lock b/cmd/pinniped-proxy/Cargo.lock index 68db0a4b895..9cfb3c8e0fa 100644 --- a/cmd/pinniped-proxy/Cargo.lock +++ b/cmd/pinniped-proxy/Cargo.lock @@ -248,9 +248,9 @@ dependencies = [ [[package]] name = "clap" -version = "4.4.18" +version = "4.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "1e578d6ec4194633722ccf9544794b71b1385c3c027efe0c55db226fc880865c" +checksum = "80c21025abd42669a92efc996ef13cfb2c5c627858421ea58d5c3b331a6c134f" dependencies = [ "clap_builder", "clap_derive", @@ -258,21 +258,21 @@ dependencies = [ [[package]] name = "clap_builder" -version = "4.4.18" +version = "4.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "4df4df40ec50c46000231c914968278b1eb05098cf8f1b3a518a95030e71d1c7" +checksum = "458bf1f341769dfcf849846f65dffdf9146daa56bcd2a47cb4e1de9915567c99" dependencies = [ "anstream", "anstyle", "clap_lex", - "strsim", + "strsim 0.11.0", ] [[package]] name = "clap_derive" -version = "4.4.7" +version = "4.5.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "cf9804afaaf59a91e75b022a30fb7229a7901f60c755489cc61c9b423b836442" +checksum = "307bc0538d5f0f83b8248db3087aa92fe504e4691294d0c96c0eabc33f47ba47" dependencies = [ "heck", "proc-macro2", @@ -282,9 +282,9 @@ dependencies = [ [[package]] name = "clap_lex" -version = "0.6.0" +version = "0.7.0" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "702fc72eb24e5a1e48ce58027a675bc24edd52096d5397d4aea7c6dd9eca0bd1" +checksum = "98cc8fbded0c607b7ba9dd60cd98df59af97e84d24e49c8557331cfc26d301ce" [[package]] name = "colorchoice" @@ -381,7 +381,7 @@ dependencies = [ "ident_case", "proc-macro2", "quote", - "strsim", + "strsim 0.10.0", "syn 2.0.48", ] @@ -1855,6 +1855,12 @@ version = "0.10.0" source = "registry+https://github.com/rust-lang/crates.io-index" checksum = "73473c0e59e6d5812c5dfe2a064a6444949f089e20eec9a2e5506596494e4623" +[[package]] +name = "strsim" +version = "0.11.0" +source = "registry+https://github.com/rust-lang/crates.io-index" +checksum = "5ee073c9e4cd00e28217186dbe12796d692868f432bf2e97ee73bed0c56dfa01" + [[package]] name = "syn" version = "1.0.109" diff --git a/cmd/pinniped-proxy/Cargo.toml b/cmd/pinniped-proxy/Cargo.toml index 39ee56d7751..1d79517f296 100644 --- a/cmd/pinniped-proxy/Cargo.toml +++ b/cmd/pinniped-proxy/Cargo.toml @@ -36,7 +36,7 @@ tokio = { version = "1", features = ["full"] } tokio-native-tls = "0.3" url = "2.5" http = "0.2.11" -clap = { version = "4.4", features = ["derive", "env"] } +clap = { version = "4.5", features = ["derive", "env"] } [features] default = ["v1_27"] From 56d6155c43ccd912b2a6339f3ad4ac68a821f00e Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 9 Feb 2024 09:25:28 +0100 Subject: [PATCH 14/14] Bump trycmd from 0.14.20 to 0.14.21 in /cmd/pinniped-proxy (#7448) Bumps [trycmd](https://github.com/assert-rs/trycmd) from 0.14.20 to 0.14.21.
Changelog

Sourced from trycmd's changelog.

[0.14.21] - 2024-02-08

Internal

  • Update toml_edit
Commits

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=trycmd&package-manager=cargo&previous-version=0.14.20&new-version=0.14.21)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) ---
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> --- cmd/pinniped-proxy/Cargo.lock | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/cmd/pinniped-proxy/Cargo.lock b/cmd/pinniped-proxy/Cargo.lock index 9cfb3c8e0fa..3d44f915aa0 100644 --- a/cmd/pinniped-proxy/Cargo.lock +++ b/cmd/pinniped-proxy/Cargo.lock @@ -1804,9 +1804,9 @@ checksum = "e6ecd384b10a64542d77071bd64bd7b231f4ed5940fba55e98c3de13824cf3d7" [[package]] name = "snapbox" -version = "0.4.16" +version = "0.4.17" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "73145a30df4935f50a7b13c1882bce7d194d7071ad0bcc36e7cacbf9ef16e3ec" +checksum = "4b831b6e80fbcd2889efa75b185d24005f85981431495f995292b25836519d84" dependencies = [ "anstream", "anstyle", @@ -1826,9 +1826,9 @@ dependencies = [ [[package]] name = "snapbox-macros" -version = "0.3.7" +version = "0.3.8" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "78ccde059aad940984ff696fe8c280900f7ea71a6fb45fce65071a3f2c40b667" +checksum = "e1c4b838b05d15ab22754068cb73500b2f3b07bf09d310e15b27f88160f1de40" dependencies = [ "anstream", ] @@ -2091,9 +2091,9 @@ dependencies = [ [[package]] name = "toml_edit" -version = "0.21.1" +version = "0.22.4" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "6a8534fd7f78b5405e860340ad6575217ce99f38d4d5c8f2442cb5ecb50090e1" +checksum = "0c9ffdf896f8daaabf9b66ba8e77ea1ed5ed0f72821b398aba62352e95062951" dependencies = [ "indexmap", "serde", @@ -2201,9 +2201,9 @@ checksum = "e421abadd41a4225275504ea4d6566923418b7f05506fbc9c0fe86ba7396114b" [[package]] name = "trycmd" -version = "0.14.20" +version = "0.14.21" source = "registry+https://github.com/rust-lang/crates.io-index" -checksum = "b7ad3a033f38ca4d9eedf36ba792622027119c61b62b57970c5bed42cfd0c40d" +checksum = "d41014f614932fff67cd3b780e0eb0ecb14e698a831a0e555ef2a5137be968d5" dependencies = [ "glob", "humantime",