fix(deps): update all patch dependencies (patch)#34
Closed
alaudaa-renovate[bot] wants to merge 1 commit intomainfrom
Closed
fix(deps): update all patch dependencies (patch)#34alaudaa-renovate[bot] wants to merge 1 commit intomainfrom
alaudaa-renovate[bot] wants to merge 1 commit intomainfrom
Conversation
Contributor
Author
ℹ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
cad81e0 to
2eebec3
Compare
f33accf to
83dc78c
Compare
83dc78c to
33e535e
Compare
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.19.1->v0.19.3v4.13.0->v4.13.1v1.16.2->v1.16.5v2.0.5->v2.0.7v1.4.2->v1.4.3v0.21.1->v0.21.2v2.23.3->v2.23.4v0.6.1->v0.6.2v0.16.0->v0.16.1v3.1.2->v3.1.3v1.0.6->v1.0.7v1.3.0->v1.3.1v2.27.5->v2.27.7v1.0.60->v1.0.641.24.0->1.24.6v1.68.1->v1.68.2v1.36.6->v1.36.7Release Notes
google/cel-spec (cel.dev/expr)
v0.19.2Compare Source
What's Changed
Full Changelog: google/cel-spec@v0.19.1...v0.19.2
antlr4-go/antlr (github.com/antlr4-go/antlr/v4)
v4.13.1: Release 4.13.1Compare Source
The 4.13.1 release has:
using mutexes, when the user knows they will not use it with multiple
go routines. (Note, somewhat experimental)
Note that I did not remove the sort.Slices calls. They will not be experimental for long
and are implemented efficently. Please make a fork if you must use it without this
dependency. Maybe review whether you need to do so for the sake of one call.
cert-manager/cert-manager (github.com/cert-manager/cert-manager)
v1.16.5Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
This patch release addresses several vulnerabilities reported by the Trivy security scanner. It is built with the latest version of Go 1.23 and includes various dependency updates.
Changes since
v1.16.4:Bug or Regression
v1.23.8to fixCVE-2025-22871(#7706,@wallrj)github.com/golang-jwt/jwt/v5tov5.2.2to fixCVE-2025-30204(#7708,@wallrj)golang.org/x/netto fixCVE-2025-22872(#7707,@wallrj)go-josedependency to addressCVE-2025-27144(#7602,@SgtCoDFish)golang.org/x/netto addressCVE-2025-22870reported by Trivy (#7623,@SgtCoDFish)v1.16.4Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
This release is primarily intended to address a breaking change in Cloudflare's API which impacted ACME DNS-01 challenges using Cloudflare.
Many thanks to the community members who reported this issue!
Changes by Kind
Bug or Regression
v1.16.3Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
v1.16.3 is a patch release mainly focused around bumping dependencies to address reported CVEs: CVE-2024-45337 and CVE-2024-45338.
We don't believe that cert-manager is actually vulnerable; this release is instead intended to satisfy vulnerability scanners.
It also includes a bug fix to the new
renewBeforePercentagefield. If you were usingrenewBeforePercentage, see PR #7421 for more information.Changes
Bug
golang.org/x/netandgolang.org/x/cryptoto address CVE-2024-45337 and CVE-2024-45338 (#7485, @erikgb)renewBeforePercentageto comply with its spec (#7441, @cert-manager-bot)Other
cpuguy83/go-md2man (github.com/cpuguy83/go-md2man/v2)
v2.0.7Compare Source
What's Changed
Full Changelog: cpuguy83/go-md2man@v2.0.6...v2.0.7
v2.0.6Compare Source
What's Changed
New Contributors
Full Changelog: cpuguy83/go-md2man@v2.0.5...v2.0.6
go-logr/logr (github.com/go-logr/logr)
v1.4.3Compare Source
Minor release.
What's Changed
New Contributors
Full Changelog: go-logr/logr@v1.4.2...v1.4.3
go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)
v0.21.2Compare Source
onsi/ginkgo (github.com/onsi/ginkgo/v2)
v2.23.4Compare Source
2.23.4
Prior to this release Ginkgo would compute the incorrect number of available CPUs when running with
-pin a linux container. Thanks to @emirot for the fix!Features
2b9c428]Fixes
1f59d07]Maintenance
2d134d5]prometheus/client_model (github.com/prometheus/client_model)
v0.6.2Compare Source
What's Changed
Full Changelog: https://github.com/prometheus/client\_model/compare/v0.6.1...v0.6.2
prometheus/procfs (github.com/prometheus/procfs)
v0.16.1Compare Source
What's Changed
New Contributors
Full Changelog: prometheus/procfs@v0.16.0...v0.16.1
rafaeljusto/redigomock (github.com/rafaeljusto/redigomock/v3)
v3.1.3Compare Source
What's Changed
New Contributors
Full Changelog: rafaeljusto/redigomock@v3.1.2...v3.1.3
spf13/pflag (github.com/spf13/pflag)
v1.0.7Compare Source
What's Changed
New Contributors
Full Changelog: spf13/pflag@v1.0.6...v1.0.7
stoewer/go-strcase (github.com/stoewer/go-strcase)
v1.3.1: Release 1.3.1Compare Source
What's Changed
urfave/cli (github.com/urfave/cli/v2)
v2.27.7Compare Source
What's Changed
Full Changelog: urfave/cli@v2.27.6...v2.27.7
v2.27.6Compare Source
What's Changed
Full Changelog: urfave/cli@v2.27.5...v2.27.6
valkey-io/valkey-go (github.com/valkey-io/valkey-go)
v1.0.64: 1.0.64Compare Source
Changes
FieldValueItertoHsetexcommand builderCreateAndAliasIndextoom.Repositoryvalkeycompat(#61)Contributors
We'd like to thank all the contributors who worked on this release!
@SoulPancake, @XHanL, @rueian and @zeeshan-zomato
v1.0.63: 1.0.63Compare Source
Changes
Contributors
We'd like to thank all the contributors who worked on this release!
@Aakkash-Suresh, @Ryan2327, @arbhalerao, @ash2k, @dalaoqi, @davidlin-tv2, @mingdaoy, @rueian, @sugymt and @yhc9311
v1.0.62: 1.0.62Compare Source
Changes
Contributors
We'd like to thank all the contributors who worked on this release!
@PingXie, @jsoref, @nithinputhenveettil, @proost and @rueian
v1.0.61: 1.0.61Compare Source
Changes
WithOnSubscriptionHookfor the Receive method.AsXRangeSlicesandAsXReadSlicesforXRANGEandXREADcommands.Contributors
We'd like to thank all the contributors who worked on this release!
@atharva-navani16, @hono0130 and @rueian
golang/go (go)
v1.24.5grpc/grpc-go (google.golang.org/grpc)
v1.68.2: Release 1.68.2Compare Source
Dependencies
stats/opentelemetrymodule and instead add the experimental packages it contains directly into the maingoogle.golang.org/grpcmodule (#7936)protocolbuffers/protobuf-go (google.golang.org/protobuf)
v1.36.7Compare Source
Maintenance / optimizations:
CL/683955: encoding/protowire: micro-optimize SizeVarint (-20% on Intel)
CL/674055: internal/impl: remove unnecessary atomic access for non-lazy lists
CL/674015: impl: remove unnecessary nil check from presence.Present
CL/673495: types/descriptorpb: regenerate using latest protobuf v31 release
CL/670516: cmd/protoc-gen-go: centralize presence and lazy logic into filedesc
CL/670515: internal: move usePresenceForField to internal/filedesc
CL/670275: internal/impl: clean up usePresenceForField() (no-op)
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.