Skip to content

chore(deps): bump the go group with 27 updates #565

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Closed
dependabot wants to merge 5 commits into from
Closed

chore(deps): bump the go group with 27 updates #565

dependabot wants to merge 5 commits into from

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 8, 2024 •
edited
Loading

Bumps the go group with 27 updates:

Package From To
cuelang.org/go 0.9.0 0.11.0
github.com/Masterminds/semver/v3 3.2.1 3.3.1
github.com/containers/image/v5 5.31.0 5.33.0
github.com/cyphar/filepath-securejoin 0.2.5 0.3.4
github.com/fluxcd/helm-controller/api 1.0.1 1.1.0
github.com/fluxcd/kustomize-controller/api 1.3.0 1.4.0
github.com/fluxcd/pkg/apis/event 0.9.0 0.11.0
github.com/fluxcd/pkg/apis/meta 1.5.0 1.6.1
github.com/fluxcd/pkg/http/fetch 0.11.0 0.13.0
github.com/fluxcd/pkg/kustomize 1.11.0 1.14.0
github.com/fluxcd/pkg/runtime 0.47.1 0.50.0
github.com/fluxcd/pkg/tar 0.7.0 0.8.1
github.com/fluxcd/source-controller/api 1.3.0 1.4.1
github.com/mandelsoft/vfs 0.4.3 0.4.4
github.com/onsi/gomega 1.33.1 1.36.0
github.com/stretchr/testify 1.9.0 1.10.0
github.com/tetratelabs/wazero 1.7.2 1.8.2
golang.org/x/exp 0.0.0-20240604190554-fc45aab8b7f8 0.0.0-20241009180824-f66d83c29e7c
helm.sh/helm/v3 3.15.1 3.16.3
k8s.io/apimachinery 0.30.1 0.31.3
k8s.io/client-go 0.30.1 0.31.3
sigs.k8s.io/controller-runtime 0.18.4 0.19.3
sigs.k8s.io/e2e-framework 0.2.0 0.5.0
sigs.k8s.io/kustomize/api 0.17.2 0.18.0
github.com/mikefarah/yq/v4 4.44.1 4.44.6
k8s.io/api 0.30.1 0.31.3
k8s.io/apiextensions-apiserver 0.30.1 0.31.3

Updates cuelang.org/go from 0.9.0 to 0.11.0

Updates github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.1

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.3.1

What's Changed

Full Changelog: Masterminds/semver@v3.3.0...v3.3.1

v3.3.0

What's Changed

New Contributors

Full Changelog: Masterminds/semver@v3.2.1...v3.3.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

Changelog

3.3.0 (2024-08-27)

Added

Changed

  • #241: Simplify StrictNewVersion parsing (thanks @​grosser)
  • Testing support up through Go 1.23
  • Minimum version set to 1.21 as this is what's tested now
  • Fuzz testing now supports caching
Commits
  • 1558ca3 Merge pull request #253 from mattfarina/fix-bad-versions
  • 252dd61 Fix for allowing some version that were invalid
  • e6e3d4d Merge pull request #249 from mattfarina/update-changelog-3.3.0
  • e80c4ea Updating changelog for 3.3.0
  • 80427ad Merge pull request #248 from mattfarina/bump-min-version
  • b610837 bumping min version in go.mod based on what's tested
  • a4cccd8 Merge pull request #246 from mattfarina/bump-go-1.23
  • 7c178cf Updating the testing version of Go used
  • 29f94c1 Merge pull request #241 from grosser/grosser/validate
  • 2cf1b16 Merge pull request #245 from mattfarina/remove-vert
  • Additional commits viewable in compare view

Updates github.com/containers/image/v5 from 5.31.0 to 5.33.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.33.0

What's Changed

... (truncated)

Commits
  • c3a2029 Bump to c/image v5.33.0
  • 04d69d5 Bump to c/storage v1.56.0
  • 59417ae Merge pull request #2609 from mtrmac/copy-resolve-destination
  • 6ba898f HACK: Only return an image ID from ReportResolvedReference for c/storage
  • 125f862 Return a precise reference to the created image when writing to containers-st...
  • 91d22b2 Introduce private.ImageDestination.CommitWithOptions
  • 831269d Rename an options variable to imgOptions
  • ba2a4ae Merge pull request #2616 from containers/renovate/golang.org-x-exp-digest
  • 6bcb929 fix(deps): update golang.org/x/exp digest to f66d83c
  • 228de93 Merge pull request #2615 from containers/renovate/github.com-containers-stora...
  • Additional commits viewable in compare view

Updates github.com/cyphar/filepath-securejoin from 0.2.5 to 0.3.4

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.3.4

This release primarily includes a fix that blocked using filepath-securejoin in Kubernetes.

  • Previously, some testing mocks we had resulted in us doing import "testing" in non-_test.go code, which made some downstreams like Kubernetes unhappy. This has been fixed. (#32)

Thanks to all of the contributors who made this release possible:

Signed-off-by: Aleksa Sarai [email protected]

v0.3.3

This release primarily includes fixes for spurious errors we hit when checking that directories created by MkdirAll "look right". Upon further consideration, these checks were fundamentally buggy and didn't offer any practical protection anyway.

  • The mode and owner verification logic in MkdirAll has been removed. This was originally intended to protect against some theoretical attacks but upon further consideration these protections don't actually buy us anything and they were causing spurious errors with more complicated filesystem setups.
  • The "is the created directory empty" logic in MkdirAll has also been removed. This was not causing us issues yet, but some pseudofilesystems (such as cgroup) create non-empty directories and so this logic would've been wrong for such cases.

Thanks to all of the contributors who made this release possible:

Signed-off-by: Aleksa Sarai [email protected]

v0.3.2

This release includes a few fixes for MkdirAll when dealing with S_ISUID and S_ISGID, to solve a regression runc hit when switching to MkdirAll.

  • Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return an explicit error saying that those bits are ignored by mkdirat(2). In the past a different error was returned, but since the silent ignoring behaviour is codified in the man pages a more explicit error seems apt. While silently ignoring these bits would be the most compatible option, it could lead to users thinking their code sets these bits when it doesn't. Programs that need to deal with compatibility can mask the bits themselves. (#23, #25)

... (truncated)

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.3.4] - 2024-10-09

Fixed

  • Previously, some testing mocks we had resulted in us doing import "testing" in non-_test.go code, which made some downstreams like Kubernetes unhappy. This has been fixed. (#32)

[0.3.3] - 2024-09-30

Fixed

  • The mode and owner verification logic in MkdirAll has been removed. This was originally intended to protect against some theoretical attacks but upon further consideration these protections don't actually buy us anything and they were causing spurious errors with more complicated filesystem setups.
  • The "is the created directory empty" logic in MkdirAll has also been removed. This was not causing us issues yet, but some pseudofilesystems (such as cgroup) create non-empty directories and so this logic would've been wrong for such cases.

[0.3.2] - 2024-09-13

Changed

  • Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return an explicit error saying that those bits are ignored by mkdirat(2). In the past a different error was returned, but since the silent ignoring behaviour is codified in the man pages a more explicit error seems apt. While silently ignoring these bits would be the most compatible option, it could lead to users thinking their code sets these bits when it doesn't. Programs that need to deal with compatibility can mask the bits themselves. (#23, #25)

Fixed

  • If a directory has S_ISGID set, then all child directories will have S_ISGID set when created and a different gid will be used for any inode created under the directory. Previously, the "expected owner and mode" validation in securejoin.MkdirAll did not correctly handle this. We now correctly handle this case. (#24, #25)

[0.3.1] - 2024-07-23

Changed

  • By allowing Open(at)InRoot to opt-out of the extra work done by MkdirAll to do the necessary "partial lookups", Open(at)InRoot now does less work for both implementations (resulting in a many-fold decrease in the number of operations for openat2, and a modest improvement for non-openat2) and is far more guaranteed to match the correct openat2(RESOLVE_IN_ROOT) behaviour.
  • We now use readlinkat(fd, "") where possible. For Open(at)InRoot this effectively just means that we no longer risk getting spurious errors during rename races. However, for our hardened procfs handler, this in theory should prevent mount attacks from tricking us when doing magic-link readlinks (even

... (truncated)

Commits
  • fd16ade VERSION: release v0.3.4
  • 00e0710 godoc: update package documentation
  • 0cd6be1 README: fix reference to open_tree kernel requirements
  • 205046f README: add pkg.go.dev badge
  • ecb1b8e tests: procfs: clean up mock test hook
  • 3ec6eed CHANGELOG: mention #32 fix
  • 86e6182 merge #32 into cyphar/filepath-securejoin:main
  • 6864912 Isolate the testing import in test code
  • 4348fee openat: remove unused function
  • d0c7d67 merge #31 into cyphar/filepath-securejoin:main
  • Additional commits viewable in compare view

Updates github.com/fluxcd/helm-controller/api from 1.0.1 to 1.1.0

Release notes

Sourced from github.com/fluxcd/helm-controller/api's releases.

v1.1.0

Changelog

v1.1.0 changelog

Container images

  • docker.io/fluxcd/helm-controller:v1.1.0
  • ghcr.io/fluxcd/helm-controller:v1.1.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/helm-controller/api's changelog.

1.1.0

Release date: 2024-09-26

This minor release comes with various bug fixes and improvements.

The chart values schema validation can now be disabled for install and upgrade actions by setting disableSchemaValidation under .spec.install and .spec.upgrade of a HelmRelease object.

HelmReleases that result in failure during uninstall will now be retried until the uninstall succeeds without any error. See handling failed uninstall docs for various remediations based on the cause of the failure.

helm-controller in sharded deployment configuration now supports cross-shard dependency check. This allows a HelmRelease to depend on other HelmReleases managed by different controller shards.

In addition, the Kubernetes dependencies have been updated to v1.31.1, Helm has been updated to v3.16.1 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.23.

Fixes:

  • fix: remove digest check to never ignore helm uninstall errors #1024
  • Allow overwriting inline values with targetPath #1060
  • Fix incorrect use of format strings with the conditions package #1025
  • Re-enable logging json patch on StatusDrifted #1010
  • Ignore 'v' version prefix in OCI artifact and Helm chart #990
  • doc: fix HelmRelease default value for .spec.upgrade.crds #986

Improvements:

  • Allow cross-shard dependency check #1070
  • Add disableSchemaValidation to Helm install/upgrade actions #1068
  • Update Helm to v3.16.1 and enable the adoption of existing resources #1062
  • Build with Go 1.23 #1049
  • Various dependency updates

... (truncated)

Commits
  • 44247e2 Merge pull request #1074 from fluxcd/release-v1.1.0
  • d1a931a Release v1.1.0
  • 037bc86 Add changelog entry for v1.1.0
  • b0010b0 Merge pull request #1070 from fluxcd/deps-api-reader
  • 72ec296 Allow cross-shard dependency check
  • c71258e Merge pull request #1073 from fluxcd/update-sc
  • e3ab7ce Update source-controller to v1.4.1
  • 2e3efaf Merge pull request #1072 from fluxcd/dependabot/github_actions/ci-74c3fc3a14
  • 2932347 Bump the ci group across 1 directory with 2 updates
  • 18d2406 Merge pull request #1071 from fluxcd/deps-update
  • Additional commits viewable in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.3.0 to 1.4.0

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.4.0

Changelog

v1.4.0 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.4.0
  • ghcr.io/fluxcd/kustomize-controller:v1.4.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.4.0

Release date: 2024-09-27

This minor release comes with various bug fixes and improvements.

kustomize-controller in sharded deployment configuration now supports cross-shard dependency check. This allows a Kustomization to depend on other Kustomizations managed by different controller shards.

In addition, the Kubernetes dependencies have been updated to v1.31.1 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.23.

Fixes:

  • Fix incorrect use of format strings with the conditions package. #1198

Improvements:

Commits
  • 527ec3e Merge pull request #1254 from fluxcd/release-v1.4.0
  • cecc445 Release v1.4.0
  • 02ab2eb Add changelog entry for v1.4.0
  • 72ae7db Merge pull request #1253 from fluxcd/update-bucketv1
  • 3d87349 Update Bucket API to v1
  • 1d1a06b Merge pull request #1251 from fluxcd/update-sc
  • 8e39f7b Update source-controller to v1.4.1
  • 0d28f0f Merge pull request #1248 from fluxcd/deps-api-reader
  • 1899e6c Merge pull request #1250 from fluxcd/dependabot/github_actions/ci-74c3fc3a14
  • 0add02b Merge pull request #1249 from fluxcd/deps-update
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/event from 0.9.0 to 0.11.0

Commits
  • a5896a6 git/internal/e2e: update dependencies
  • 00f6465 git/gogit: update dependencies
  • acf35bd git: update dependencies
  • eda77cf ssh: update dependencies
  • 41b3167 Merge pull request #504 from fluxcd/misc-update-deps
  • 9a579c9 ssa: update dependencies
  • 5185f64 http/fetch: update dependencies
  • 3caadb0 oci/tests: update dependencies
  • 6f300e8 oci: update dependencies
  • 527a993 Merge pull request #503 from fluxcd/kustomize-update-deps
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/meta from 1.5.0 to 1.6.1

Commits
  • c8165af Merge pull request #809 from fluxcd/k8s-1.31.1
  • 18924bf Update controller-gen to v0.16.1
  • 735a85b Update dependencies
  • 62475f1 Merge pull request #789 from dipti-pai/pkg-azure-git-wi-auth
  • 1686996 Support Azure OIDC authentication
  • a2a7a01 Merge pull request #808 from matheuscscp/oci-auth-proxy
  • 8b5c43a Add proxy support for oci/auth login
  • d467d6e Merge pull request #807 from fluxcd/dependabot/github_actions/ci-6f7028051e
  • a6b58a7 build(deps): bump the ci group with 2 updates
  • f0eb8aa Merge pull request #806 from fluxcd/dependabot/github_actions/ci-fc48fdf541
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/http/fetch from 0.11.0 to 0.13.0

Commits
  • 04a0963 Merge pull request #597 from fluxcd/tag-verification
  • 0f40956 git: add support for lightweight tags
  • 320d78f git/gogit: add tag info to commit if refname points to an annotated tag
  • 5658f3b git/gogit: add tag info to commit when checking out via semver
  • 75c942d git/gogit: add tag info to commit when checking out via tag
  • fba7100 git: add support for linking a parent tag to a commit
  • 540f61e Merge pull request #631 from mihaiandreiratoiu/feature/gov-arm
  • 174a5e9 Ops: Update azure cloud token auth
  • 5eb935a Merge pull request #632 from fluxcd/disable-azure-ci-jobs
  • 1330800 Disable azure CI jobs
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/kustomize from 1.11.0 to 1.14.0

Commits
  • 3431579 Merge pull request #831 from fluxcd/distribution-v3.0.0-rc.1
  • ca4bf2d Update internal Git dependencies
  • bd582bc Merge pull request #830 from fluxcd/int-update
  • bf70554 Update internal dependencies
  • b83bd25 Merge pull request #817 from fluxcd/refactor-cache
  • a29e42f cache: Return ErrNotFound error from Get()
  • 72d6f8c oci: Remove cache from auth and int tests code
  • 061b9ac cache: Allow setting cache metrics prefix
  • a961051 Simplify the cache
  • 9e2947d Merge pull request #829 from fluxcd/helm-v3.16.3
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.47.1 to 0.50.0

Commits
  • 3431579 Merge pull request #831 from fluxcd/distribution-v3.0.0-rc.1
  • ca4bf2d Update internal Git dependencies
  • bd582bc Merge pull request #830 from fluxcd/int-update
  • bf70554 Update internal dependencies
  • b83bd25 Merge pull request #817 from fluxcd/refactor-cache
  • a29e42f cache: Return ErrNotFound error from Get()
  • 72d6f8c oci: Remove cache from auth and int tests code
  • 061b9ac cache: Allow setting cache metrics prefix
  • a961051 Simplify the cache
  • 9e2947d Merge pull request #829 from fluxcd/helm-v3.16.3
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/tar from 0.7.0 to 0.8.1

Commits
  • 68b676d Merge pull request #621 from fluxcd/update-runtime-deps
  • 8026a27 runtime: update dependencies
  • e8edd75 Merge pull request #620 from fluxcd/update-deps
  • 5e21e50 helmtestserver: update dependencies
  • a7213f0 Merge pull request #619 from fluxcd/enable-codeql-quality
  • 79175a1 ci: enable security-and-quality CodeQL query
  • bfb6c67 Merge pull request #617 from fluxcd/fix-git-flake
  • 0ac59bc git/internal/e2e: address flake for clone tests
  • 79df79e Merge pull request #618 from fluxcd/remove-dep-rand-seed
  • d998987 *: remove deprecated rand.Seed calls
  • Additional commits viewable in compare view

Updates github.com/fluxcd/source-controller/api from 1.3.0 to 1.4.1

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.4.1

Changelog

v1.4.1 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.4.1
  • ghcr.io/fluxcd/source-controller:v1.4.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.4.0

Changelog

v1.4.0 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.4.0
  • ghcr.io/fluxcd/source-controller:v1.4.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.4.1

Release date: 2024-09-26

This patch release comes with a fix to the GitRepository API to keep it backwards compatible by removing the default value for .spec.provider field when not set in the API. The controller will internally consider an empty value for the provider as the generic provider.

Fix:

  • GitRepo: Remove provider default value from API #1626

1.4.0

Release date: 2024-09-25

This minor release promotes the Bucket API to GA, and comes with new features, improvements and bug fixes.

Bucket

The Bucket API has been promoted from v1beta2 to v1 (GA). The v1 API is backwards compatible with v1beta2.

Bucket API now supports proxy through the field .spec.proxySecretRef and custom TLS client certificate and CA through the field .spec.certSecretRef.

Bucket API now also supports specifying a custom STS configuration through the field .spec.sts. This is currently only supported for the providers generic and aws. When specifying a custom STS configuration one must specify which STS provider to use. For the generic bucket provider we support the ldap STS provider, and for the aws bucket provider we support the aws STS provider. For the aws STS provider, one may use the default main STS endpoint, or the regional STS endpoints, or even an interface endpoint.

OCIRepository

OCIRepository API now supports proxy through the field .spec.proxySecretRef.

Warning: Proxy is not supported for cosign keyless verification.

GitRepository

GitRepository API now supports OIDC authentication for Azure DevOps repositories through the field .spec.provider using the value azure. See the docs for details here.

In addition, the Kubernetes dependencies have been updated to v1.31.1, Helm has been updated to v3.16.1 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.23.

Fixes:

  • helm: Use the default transport pool to preserve proxy settings #1490
  • Fix incorrect use of format strings with the conditions package. #1529
  • Fix HelmChart local dependency resolution for name-based path #1539

... (truncated)

Commits
  • 50035c6 Merge pull request #1628 from fluxcd/release-v1.4.1
  • c2b6b39 Release v1.4.1
  • a2658ba Add changelog entry for v1.4.1
  • a485ed4 Merge pull request #1627 from fluxcd/backport-1626-to-release/v1.4.x
  • 0e4f558 GitRepo: Remove provider default value from API
  • e6e2b15 Merge pull request #1620 from fluxcd/release-v1.4.0

@dependabot
chore(deps): bump the go group with 27 updates
f99df3d 
Bumps the go group with 27 updates:

| Package | From | To |
| --- | --- | --- |
| cuelang.org/go | `0.9.0` | `0.11.0` |
| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.2.1` | `3.3.1` |
| [github.com/containers/image/v5](https://github.com/containers/image) | `5.31.0` | `5.33.0` |
| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.2.5` | `0.3.4` |
| [github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller) | `1.0.1` | `1.1.0` |
| [github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller) | `1.3.0` | `1.4.0` |
| [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) | `0.9.0` | `0.11.0` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.5.0` | `1.6.1` |
| [github.com/fluxcd/pkg/http/fetch](https://github.com/fluxcd/pkg) | `0.11.0` | `0.13.0` |
| [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.11.0` | `1.14.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.47.1` | `0.50.0` |
| [github.com/fluxcd/pkg/tar](https://github.com/fluxcd/pkg) | `0.7.0` | `0.8.1` |
| [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) | `1.3.0` | `1.4.1` |
| [github.com/mandelsoft/vfs](https://github.com/mandelsoft/vfs) | `0.4.3` | `0.4.4` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.33.1` | `1.36.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.9.0` | `1.10.0` |
| [github.com/tetratelabs/wazero](https://github.com/tetratelabs/wazero) | `1.7.2` | `1.8.2` |
| [golang.org/x/exp](https://github.com/golang/exp) | `0.0.0-20240604190554-fc45aab8b7f8` | `0.0.0-20241009180824-f66d83c29e7c` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.15.1` | `3.16.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.30.1` | `0.31.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.30.1` | `0.31.3` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.18.4` | `0.19.3` |
| [sigs.k8s.io/e2e-framework](https://github.com/kubernetes-sigs/e2e-framework) | `0.2.0` | `0.5.0` |
| [sigs.k8s.io/kustomize/api](https://github.com/kubernetes-sigs/kustomize) | `0.17.2` | `0.18.0` |
| [github.com/mikefarah/yq/v4](https://github.com/mikefarah/yq) | `4.44.1` | `4.44.6` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.30.1` | `0.31.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.30.1` | `0.31.3` |


Updates `cuelang.org/go` from 0.9.0 to 0.11.0

Updates `github.com/Masterminds/semver/v3` from 3.2.1 to 3.3.1
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](Masterminds/semver@v3.2.1...v3.3.1)

Updates `github.com/containers/image/v5` from 5.31.0 to 5.33.0
- [Release notes](https://github.com/containers/image/releases)
- [Commits](containers/image@v5.31.0...v5.33.0)

Updates `github.com/cyphar/filepath-securejoin` from 0.2.5 to 0.3.4
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.2.5...v0.3.4)

Updates `github.com/fluxcd/helm-controller/api` from 1.0.1 to 1.1.0
- [Release notes](https://github.com/fluxcd/helm-controller/releases)
- [Changelog](https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/helm-controller@v1.0.1...v1.1.0)

Updates `github.com/fluxcd/kustomize-controller/api` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/fluxcd/kustomize-controller/releases)
- [Changelog](https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/kustomize-controller@v1.3.0...v1.4.0)

Updates `github.com/fluxcd/pkg/apis/event` from 0.9.0 to 0.11.0
- [Commits](fluxcd/pkg@git/v0.9.0...git/v0.11.0)

Updates `github.com/fluxcd/pkg/apis/meta` from 1.5.0 to 1.6.1
- [Commits](fluxcd/pkg@apis/meta/v1.5.0...apis/meta/v1.6.1)

Updates `github.com/fluxcd/pkg/http/fetch` from 0.11.0 to 0.13.0
- [Commits](fluxcd/pkg@git/v0.11.0...git/v0.13.0)

Updates `github.com/fluxcd/pkg/kustomize` from 1.11.0 to 1.14.0
- [Commits](fluxcd/pkg@kustomize/v1.11.0...kustomize/v1.14.0)

Updates `github.com/fluxcd/pkg/runtime` from 0.47.1 to 0.50.0
- [Commits](fluxcd/pkg@runtime/v0.47.1...runtime/v0.50.0)

Updates `github.com/fluxcd/pkg/tar` from 0.7.0 to 0.8.1
- [Commits](fluxcd/pkg@git/v0.7.0...ssh/v0.8.1)

Updates `github.com/fluxcd/source-controller/api` from 1.3.0 to 1.4.1
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.3.0...v1.4.1)

Updates `github.com/mandelsoft/vfs` from 0.4.3 to 0.4.4
- [Release notes](https://github.com/mandelsoft/vfs/releases)
- [Commits](mandelsoft/vfs@v0.4.3...v0.4.4)

Updates `github.com/onsi/gomega` from 1.33.1 to 1.36.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.33.1...v1.36.0)

Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.9.0...v1.10.0)

Updates `github.com/tetratelabs/wazero` from 1.7.2 to 1.8.2
- [Release notes](https://github.com/tetratelabs/wazero/releases)
- [Commits](wazero/wazero@v1.7.2...v1.8.2)

Updates `golang.org/x/exp` from 0.0.0-20240604190554-fc45aab8b7f8 to 0.0.0-20241009180824-f66d83c29e7c
- [Commits](https://github.com/golang/exp/commits)

Updates `helm.sh/helm/v3` from 3.15.1 to 3.16.3
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.15.1...v3.16.3)

Updates `k8s.io/apimachinery` from 0.30.1 to 0.31.3
- [Commits](kubernetes/apimachinery@v0.30.1...v0.31.3)

Updates `k8s.io/client-go` from 0.30.1 to 0.31.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.30.1...v0.31.3)

Updates `sigs.k8s.io/controller-runtime` from 0.18.4 to 0.19.3
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.18.4...v0.19.3)

Updates `sigs.k8s.io/e2e-framework` from 0.2.0 to 0.5.0
- [Release notes](https://github.com/kubernetes-sigs/e2e-framework/releases)
- [Changelog](https://github.com/kubernetes-sigs/e2e-framework/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/e2e-framework@v0.2.0...v0.5.0)

Updates `sigs.k8s.io/kustomize/api` from 0.17.2 to 0.18.0
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.17.2...api/v0.18.0)

Updates `github.com/mikefarah/yq/v4` from 4.44.1 to 4.44.6
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@v4.44.1...v4.44.6)

Updates `k8s.io/api` from 0.30.1 to 0.31.3
- [Commits](kubernetes/api@v0.30.1...v0.31.3)

Updates `k8s.io/apiextensions-apiserver` from 0.30.1 to 0.31.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.30.1...v0.31.3)

---
updated-dependencies:
- dependency-name: cuelang.org/go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/Masterminds/semver/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/containers/image/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/helm-controller/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/kustomize-controller/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/apis/event
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/apis/meta
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/http/fetch
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/kustomize
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/tar
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mandelsoft/vfs
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/tetratelabs/wazero
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/exp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/e2e-framework
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/kustomize/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mikefarah/yq/v4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner December 8, 2024 15:40
@dependabot dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Dec 8, 2024
@github-actions
Copy link

github-actions bot commented Dec 8, 2024

Mend Scan Summary: ❌

Repository: open-component-model/ocm-controller

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 4
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 1
LICENSE RISK HIGH 9
RESTRICTED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report
Mend UI

@github-actions
Copy link

github-actions bot commented Dec 9, 2024

Mend Scan Summary: ❌

Repository: open-component-model/ocm-controller

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 4
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 1
LICENSE RISK HIGH 9
RESTRICTED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report
Mend UI

@github-actions
Copy link

github-actions bot commented Dec 9, 2024

Mend Scan Summary: ❌

Repository: open-component-model/ocm-controller

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 4
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 1
LICENSE RISK HIGH 9
RESTRICTED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report
Mend UI

@hilmarf hilmarf added this to the 2024-Q4 milestone Dec 9, 2024
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 15, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Dec 15, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go-d614c0bd40 branch December 15, 2024 15:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

kind/chore chore, maintenance, etc. kind/dependency dependency update, etc.

Projects

OCM Backlog Board
Status: 🔒Closed

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

2 participants

@hilmarf