Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the go group with 17 updates #1127

Merged
merged 2 commits into from
Nov 25, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 24, 2024

Bumps the go group with 17 updates:

Package From To
github.com/Masterminds/semver/v3 3.3.0 3.3.1
github.com/aws/aws-sdk-go-v2 1.32.4 1.32.5
github.com/aws/aws-sdk-go-v2/config 1.28.4 1.28.5
github.com/aws/aws-sdk-go-v2/credentials 1.17.45 1.17.46
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.17.38 1.17.40
github.com/aws/aws-sdk-go-v2/service/ecr 1.36.5 1.36.6
github.com/aws/aws-sdk-go-v2/service/s3 1.67.0 1.68.0
github.com/containerd/containerd 1.7.23 1.7.24
github.com/onsi/ginkgo/v2 2.21.0 2.22.0
github.com/sigstore/rekor 1.3.6 1.3.7
github.com/stretchr/testify 1.9.0 1.10.0
k8s.io/api 0.31.2 0.31.3
k8s.io/apiextensions-apiserver 0.31.2 0.31.3
k8s.io/apimachinery 0.31.2 0.31.3
k8s.io/cli-runtime 0.31.2 0.31.3
k8s.io/client-go 0.31.2 0.31.3
sigs.k8s.io/controller-runtime 0.19.1 0.19.2

Updates github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.3.1

What's Changed

Full Changelog: Masterminds/semver@v3.3.0...v3.3.1

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

Changelog

Commits
  • 1558ca3 Merge pull request #253 from mattfarina/fix-bad-versions
  • 252dd61 Fix for allowing some version that were invalid
  • See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.32.4 to 1.32.5

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.28.4 to 1.28.5

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.45 to 1.17.46

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.38 to 1.17.40

Commits

Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.36.5 to 1.36.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.67.0 to 1.68.0

Commits

Updates github.com/containerd/containerd from 1.7.23 to 1.7.24

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.24

Welcome to the v1.7.24 release of containerd!

The twenty-fourth patch release for containerd 1.7 contains various fixes and updates.

Highlights

  • Update runc binary to 1.2.2 (#11027)
  • Fix "invalid metric type" error message for cgroup v1 (#10814)

Container Runtime Interface (CRI)

  • Update the container exit log to info level (#11007)

Image Distribution

  • Fix retry logic and concurrency issue with http fallback (#11032)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Derek McGowan
  • Phil Estes
  • Akhil Mohan
  • Akihiro Suda
  • Maksym Pavlenko
  • Austin Vazquez
  • Samuel Karp
  • Benjamin Peterson
  • Davanum Srinivas
  • Iceber Gu
  • Mike Brown
  • Sebastiaan van Stijn
  • Tõnis Tiigi
  • ningmingxiao

Changes

  • Prepare release notes for v1.7.24 (#11036)
    • 936f8e2de Prepare release notes for v1.7.24
  • Update the container exit log to info level (#11007)
  • Fix retry logic and concurrency issue with http fallback (#11032)
    • 10af0d60f Adds a mutex to protect fallback host
    • e426ec51b Use unix and windows specific connection error checks

... (truncated)

Commits
  • 88bf19b Merge pull request #11036 from samuelkarp/prepare-1.7.24
  • 8170354 Merge pull request #11007 from ningmingxiao/1.7.x
  • 47ff8e2 add info of exited event
  • 936f8e2 Prepare release notes for v1.7.24
  • 80fda60 Merge pull request #11032 from vvoland/httpfallback-backports-1.7
  • 921b05c Merge pull request #10913 from austinvazquez/cherry-pick-3cc2343de020fa448138...
  • b47e5e0 Merge pull request #11027 from k8s-infra-cherrypick-robot/cherry-pick-11022-t...
  • 10af0d6 Adds a mutex to protect fallback host
  • e426ec5 Use unix and windows specific connection error checks
  • 49c9f30 Allow fallback across default ports
  • Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.22.0

2.22.0

Features

  • Add label to serial nodes [0fcaa08]

This allows serial tests to be filtered using the label-filter

Maintenance

Various doc fixes

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.22.0

Features

  • Add label to serial nodes [0fcaa08]

This allows serial tests to be filtered using the label-filter

Maintenance

Various doc fixes

Commits

Updates github.com/sigstore/rekor from 1.3.6 to 1.3.7

Release notes

Sourced from github.com/sigstore/rekor's releases.

v1.3.7

Changelog

Please see https://github.com/sigstore/rekor/blob/main/CHANGELOG.md for changes included in this release.

Thanks for all contributors!

Changelog

Sourced from github.com/sigstore/rekor's changelog.

v1.3.7

New Features

  • log request body on 500 error to aid debugging (#2283)
  • Add support for signing with Tink keyset (#2228)
  • Add public key hash check in Signed Note verification (#2214)
  • update Trillian TLS configuration (#2202)
  • Add TLS support for Trillian server (#2164)
  • Replace docker-compose with plugin if available (#2153)
  • Add flags to backfill script (#2146)
  • Unset DisableKeepalive for backfill HTTP client (#2137)
  • Add script to delete indexes from Redis (#2120)
  • Run CREATE statement in backfill script (#2109)
  • Add MySQL support to backfill script (#2081)
  • Run e2e tests on mysql and redis index backends (#2079)

Bug Fixes

  • remove unneeded value in log message (#2282)
  • Add error message when computing consistency proof (#2278)
  • fix validation error handling on API (#2217)
  • fix error in pretty-printed inclusion proof from verify subcommand (#2210)
  • Fix index scripts (#2203)
  • fix failing sharding test
  • Better error handling in backfill script (#2148)
  • Batch entries in cleanup script (#2158)
  • Add missing workflow for index cleanup test (#2121)
  • hashedrekord: fix schema $id (#2092)

Contributors

  • Aditya Sirish
  • Bob Callaway
  • Colleen Murphy
  • cpanato
  • Firas Ghanmi
  • Hayden B
  • Hojoung (Brian) Jang
  • William Woodruff
Commits
  • 4caadbc changelog for v1.3.7 (#2284)
  • 9fddf00 log request body on 500 error to aid debugging (#2283)
  • 92584b7 remove unneeded value in log message (#2282)
  • 56ea4b5 Add error message when computing consistency proof (#2278)
  • 3eb84f9 build(deps): Bump the all group with 2 updates
  • 28aa29c build(deps): Bump google/cloud-sdk from 500.0.0 to 501.0.0
  • d7e2d1d build(deps): Bump codecov/codecov-action from 4.6.0 to 5.0.2
  • a018e78 build(deps): Bump google.golang.org/api from 0.205.0 to 0.206.0
  • 38d5f67 build(deps): Bump golang from d56c3e0 to 73f06be
  • ded5cd1 build(deps): Bump google.golang.org/api from 0.204.0 to 0.205.0
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.9.0 to 1.10.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.10.0

What's Changed

Functional Changes

Fixes

Documantation, Build & CI

New Contributors

... (truncated)

Commits
  • 89cbdd9 Merge pull request #1626 from arjun-1/fix-functional-options-diff-indirect-calls
  • 07bac60 Merge pull request #1667 from sikehish/flaky
  • 716de8d Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI
  • 118fb83 NotSame should fail if args are not pointers #1661 (#1664)
  • 7d99b2b attempt 2
  • 05f87c0 more similar
  • ea7129e better fmt
  • a1b9c9e Merge pull request #1663 from ybrustin/master
  • 8302de9 Merge branch 'master' into master
  • 89352f7 Merge pull request #1518 from hendrywiranto/adjust-readme-remove-v2
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.31.2 to 0.31.3

Commits

Updates k8s.io/apiextensions-apiserver from 0.31.2 to 0.31.3

Commits

Updates k8s.io/apimachinery from 0.31.2 to 0.31.3

Commits

Updates k8s.io/cli-runtime from 0.31.2 to 0.31.3

Commits

Updates k8s.io/client-go from 0.31.2 to 0.31.3

Commits

Updates sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.2

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.19.2

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.19.1...v0.19.2

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 17 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.3.0` | `3.3.1` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.32.4` | `1.32.5` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.28.4` | `1.28.5` |
| [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.17.45` | `1.17.46` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.38` | `1.17.40` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.36.5` | `1.36.6` |
| [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.67.0` | `1.68.0` |
| [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.23` | `1.7.24` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.21.0` | `2.22.0` |
| [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.3.6` | `1.3.7` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.9.0` | `1.10.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.31.2` | `0.31.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.31.2` | `0.31.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.31.2` | `0.31.3` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.31.2` | `0.31.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.31.2` | `0.31.3` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.19.1` | `0.19.2` |


Updates `github.com/Masterminds/semver/v3` from 3.3.0 to 3.3.1
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](Masterminds/semver@v3.3.0...v3.3.1)

Updates `github.com/aws/aws-sdk-go-v2` from 1.32.4 to 1.32.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.32.4...v1.32.5)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.28.4 to 1.28.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.28.4...config/v1.28.5)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.45 to 1.17.46
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.45...credentials/v1.17.46)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.38 to 1.17.40
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.38...credentials/v1.17.40)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.36.5 to 1.36.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ecr/v1.36.5...service/ecr/v1.36.6)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.67.0 to 1.68.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.67.0...service/s3/v1.68.0)

Updates `github.com/containerd/containerd` from 1.7.23 to 1.7.24
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.7.23...v1.7.24)

Updates `github.com/onsi/ginkgo/v2` from 2.21.0 to 2.22.0
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.21.0...v2.22.0)

Updates `github.com/sigstore/rekor` from 1.3.6 to 1.3.7
- [Release notes](https://github.com/sigstore/rekor/releases)
- [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md)
- [Commits](sigstore/rekor@v1.3.6...v1.3.7)

Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.9.0...v1.10.0)

Updates `k8s.io/api` from 0.31.2 to 0.31.3
- [Commits](kubernetes/api@v0.31.2...v0.31.3)

Updates `k8s.io/apiextensions-apiserver` from 0.31.2 to 0.31.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.31.2...v0.31.3)

Updates `k8s.io/apimachinery` from 0.31.2 to 0.31.3
- [Commits](kubernetes/apimachinery@v0.31.2...v0.31.3)

Updates `k8s.io/cli-runtime` from 0.31.2 to 0.31.3
- [Commits](kubernetes/cli-runtime@v0.31.2...v0.31.3)

Updates `k8s.io/client-go` from 0.31.2 to 0.31.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.31.2...v0.31.3)

Updates `sigs.k8s.io/controller-runtime` from 0.19.1 to 0.19.2
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.19.1...v0.19.2)

---
updated-dependencies:
- dependency-name: github.com/Masterminds/semver/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/sigstore/rekor
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/cli-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner November 24, 2024 08:21
Copy link
Contributor

github-actions bot commented Nov 24, 2024

Mend Scan Summary: ❌

Repository: open-component-model/ocm

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 4
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 2
HIGH RISK LICENSES 10
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report
Mend UI

@hilmarf hilmarf added this to the 2024-Q4 milestone Nov 25, 2024
@hilmarf hilmarf enabled auto-merge (squash) November 25, 2024 07:19
@hilmarf hilmarf merged commit bd14400 into main Nov 25, 2024
19 of 20 checks passed
@hilmarf hilmarf deleted the dependabot/go_modules/go-f2277c9b72 branch November 25, 2024 07:33
@hilmarf hilmarf added the kind/dependency dependency update, etc. label Nov 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/dependency dependency update, etc. size/m Medium
Projects
Status: 🔒Closed
Development

Successfully merging this pull request may close these issues.

1 participant