Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the go-dependencies group with 6 updates #1265

Merged
merged 2 commits into from
Jan 10, 2024
Merged

Bump the go-dependencies group with 6 updates #1265

merged 2 commits into from
Jan 10, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 8, 2024 •
edited
Loading

Bumps the go-dependencies group with 6 updates:

Package From To
github.com/GoogleContainerTools/kaniko 1.17.0 1.19.2
github.com/docker/go-connections 0.4.0 0.5.0
github.com/google/go-containerregistry 0.16.1 0.17.0
github.com/google/uuid 1.4.0 1.5.0
golang.org/x/sync 0.5.0 0.6.0
golang.org/x/sys 0.15.0 0.16.0

Updates github.com/GoogleContainerTools/kaniko from 1.17.0 to 1.19.2

Release notes

Sourced from github.com/GoogleContainerTools/kaniko's releases.

v1.19.2 Release 2023-12-19

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.19.2
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.19.2-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.19.2-slim

[!IMPORTANT]
The v1.19.2 patch release resolves the AWS ECR authentication issue present in v1.19.0 and v1.19.1. The fix was validated by users in GoogleContainerTools/kaniko#2882 and is available in this release.

v1.19.2 Changes:

  • fix: resolve integration test issue issue where container-diff cannot pull OCI images properly from registry #2918
  • fix: also update github.com/awslabs/amazon-ecr-credential-helper to resolve issues with AWS ECR authentication (resolves #2882) #2908
  • chore: update gcr and acr cred helpers #2910
  • chore(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 #2911
  • chore(deps): bump google.golang.org/api from 0.152.0 to 0.154.0 #2912
  • chore(deps): bump cloud.google.com/go/storage from 1.35.1 to 1.36.0 #2913
  • chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 #2914
  • chore(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 #2915

v1.19.1 Changes Fixes:

  • fix: reproducing and fixing warmer issue when layer already cached #2892 #2893
  • fix: resolve aws-sdk-go-v2 lib compat issues causing ECR failures #2885

v1.19.0 Changes (feat + fix only, omitting dependency updates) feat: add a retry with result function (GoogleContainerTools/kaniko#2837) GoogleContainerTools/kaniko#2853 feat: add a retry with result function GoogleContainerTools/kaniko#2837 feat: support https URLs for digest-file GoogleContainerTools/kaniko#2811 fix: create intermediate directories in COPY with correct uid and gid GoogleContainerTools/kaniko#2795 fix: makefile container-diff on darwin GoogleContainerTools/kaniko#2842 fix: print error to stderr instead of stdout before exiting GoogleContainerTools/kaniko#2823 fix: resolve issue with copy_multistage_test.go and broken ioutil import GoogleContainerTools/kaniko#2879 fix: resolve warmer memory leak. GoogleContainerTools/kaniko#2763 fix: skip the /kaniko directory when copying root GoogleContainerTools/kaniko#2863

Huge thank you for this release towards our contributors:

... (truncated)

Changelog

Sourced from github.com/GoogleContainerTools/kaniko's changelog.

v1.19.2 Release 2023-12-19

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.19.2
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.19.2-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.19.2-slim
  • chore: update gcr and acr cred helpers #2910
  • chore(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 #2911
  • chore(deps): bump google.golang.org/api from 0.152.0 to 0.154.0 #2912
  • chore(deps): bump cloud.google.com/go/storage from 1.35.1 to 1.36.0 #2913
  • chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 #2914
  • chore(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 #2915
  • fix: resolve integration test issue issue where container-diff cannot pull OCI images properly from registry #2918
  • fix: also update github.com/awslabs/amazon-ecr-credential-helper to resolve issues with AWS ECR authentication (resolves #2882) #2908

Huge thank you for this release towards our contributors:

  • Aaron Prindle
  • dependabot[bot]
  • Patrick Decat

v1.19.1 Release 2023-12-15

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.19.1
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.19.1-debug

The slim executor images which don't contain any authentication binaries are available at:

</tr></table>

... (truncated)

Commits
  • e994fad chore(release): release v1.19.2 (#2919)
  • dd752d9 chore: update gcr and docker cred helpers (#2910)
  • 6489eef chore(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 (#2911)
  • 6bbdb63 chore(deps): bump google.golang.org/api from 0.152.0 to 0.154.0 (#2912)
  • d42538b chore(deps): bump cloud.google.com/go/storage from 1.35.1 to 1.36.0 (#2913)
  • 701bde3 chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#2914)
  • fcc3a3e chore(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#2915)
  • a5456d3 fix: resolve integration test issue issue where container-diff cannot pull OC...
  • a946b82 fix: also update github.com/awslabs/amazon-ecr-credential-helper to resolve i...
  • 8d40aa9 chore(release): release v1.19.1 (#2905)
  • Additional commits viewable in compare view

Updates github.com/docker/go-connections from 0.4.0 to 0.5.0

Commits
  • fa09c95 Merge pull request #108 from thaJeztah/carry_6
  • 7a67a58 Swap CloseRead and CloseWrite
  • 481d3d2 Merge pull request #107 from thaJeztah/drop_legacy_go
  • 9548f9f tlsconfig: remove deprecated io/ioutil
  • c564c21 drop support for go1.17 and older
  • 7cbebcf gha: update actions
  • 2cf423f tlsconfig: move allTLSVersions var
  • dca283b tlsconfig: drop support for go1.12 and older
  • 21876c5 tlsconfig: drop support for go1.6 and older
  • 4d174db tlsconfig: drop support for go1.4 and older
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.16.1 to 0.17.0

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.17.0

What's Changed

Full Changelog: google/go-containerregistry@v0.16.1...v0.17.0

Commits

Updates github.com/google/uuid from 1.4.0 to 1.5.0

Release notes

Sourced from github.com/google/uuid's releases.

v1.5.0

1.5.0 (2023-12-12)

Features

  • Validate UUID without creating new UUID (#141) (9ee7366)
Changelog

Sourced from github.com/google/uuid's changelog.

1.5.0 (2023-12-12)

Features

  • Validate UUID without creating new UUID (#141) (9ee7366)
Commits

Updates golang.org/x/sync from 0.5.0 to 0.6.0

Commits

Updates golang.org/x/sys from 0.15.0 to 0.16.0

Commits
  • 0829ab1 windows: add SetFileValidData
  • 32cdffc unix: don't redefine constants already defined in glibc headers
  • f0c7190 unix: remove extra trailing newlines in zsyscall_openbsd_*.go
  • 5ff87d7 unix: add Netfilter and NFTables constants
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot requested a review from a team as a code owner January 8, 2024 23:36
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 8, 2024
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-dependencies-f0b7ee473b branch from 05bc4f2 to 1c29c12 Compare January 10, 2024 17:03
@dependabot
Bump the go-dependencies group with 6 updates
21cf66b 
Bumps the go-dependencies group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/GoogleContainerTools/kaniko](https://github.com/GoogleContainerTools/kaniko) | `1.17.0` | `1.19.2` |
| [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.4.0` | `0.5.0` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.16.1` | `0.17.0` |
| [github.com/google/uuid](https://github.com/google/uuid) | `1.4.0` | `1.5.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.5.0` | `0.6.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.15.0` | `0.16.0` |


Updates `github.com/GoogleContainerTools/kaniko` from 1.17.0 to 1.19.2
- [Release notes](https://github.com/GoogleContainerTools/kaniko/releases)
- [Changelog](https://github.com/GoogleContainerTools/kaniko/blob/main/CHANGELOG.md)
- [Commits](GoogleContainerTools/kaniko@v1.17.0...v1.19.2)

Updates `github.com/docker/go-connections` from 0.4.0 to 0.5.0
- [Commits](docker/go-connections@v0.4.0...v0.5.0)

Updates `github.com/google/go-containerregistry` from 0.16.1 to 0.17.0
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.16.1...v0.17.0)

Updates `github.com/google/uuid` from 1.4.0 to 1.5.0
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](google/uuid@v1.4.0...v1.5.0)

Updates `golang.org/x/sync` from 0.5.0 to 0.6.0
- [Commits](golang/sync@v0.5.0...v0.6.0)

Updates `golang.org/x/sys` from 0.15.0 to 0.16.0
- [Commits](golang/sys@v0.15.0...v0.16.0)

---
updated-dependencies:
- dependency-name: github.com/GoogleContainerTools/kaniko
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/docker/go-connections
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/google/go-containerregistry
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sync
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot force-pushed the dependabot/go_modules/go-dependencies-f0b7ee473b branch from 1c29c12 to 21cf66b Compare January 10, 2024 17:05
@natalieparellano
Merge branch 'main' into dependabot/go_modules/go-dependencies-f0b7ee…
2ee7cf0 
…473b

Signed-off-by: Natalie Arellano <narellano@vmware.com>
@natalieparellano natalieparellano merged commit 2548af4 into main Jan 10, 2024
10 checks passed
@natalieparellano natalieparellano deleted the dependabot/go_modules/go-dependencies-f0b7ee473b branch January 10, 2024 20:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@natalieparellano natalieparellano natalieparellano approved these changes

Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@natalieparellano