Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 13, 2025

Bumps the go group with 7 updates:

Package From To
github.com/fluxcd/pkg/apis/event 0.17.0 0.18.0
github.com/fluxcd/pkg/apis/meta 1.13.0 1.15.0
github.com/fluxcd/pkg/http/fetch 0.16.0 0.17.0
github.com/fluxcd/pkg/kustomize 1.18.0 1.19.0
github.com/fluxcd/pkg/runtime 0.63.0 0.67.0
github.com/fluxcd/pkg/tar 0.12.0 0.13.0
github.com/mikefarah/yq/v4 4.45.4 4.46.1

Updates github.com/fluxcd/pkg/apis/event from 0.17.0 to 0.18.0

Commits
  • 288cd7a Merge pull request #752 from fluxcd/handle-in-cluster-annotation
  • 4971c85 Return a DiffTypeExclude when exclusion annotation is set in cluster
  • 46467e7 Merge pull request #754 from fluxcd/update-docker
  • 43f36aa Update docker dependencies
  • e350b5b Merge pull request #750 from fluxcd/update-deps-go-1.22
  • 3ad72d9 Update dependencies to Go 1.22 and Kubernetes 1.29.3
  • 6ad47ef Merge pull request #751 from fluxcd/disable-bitbucket-server-tests
  • 9ba119b Disable bitbucket-server e2e
  • e8f9e40 Merge pull request #723 from gdasson/main
  • 5c27146 Adding common "reason" constants
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/meta from 1.13.0 to 1.15.0

Commits
  • 9e79277 Merge pull request #968 from cappyzawa/feat/runtime-secrets-pointer-based-api
  • 9ee2d52 runtime/secrets: migrate to Secret pointer-based APIs
  • e04986e Merge pull request #967 from fluxcd/bump-pkg
  • 59d65f6 Prepare for release
  • 607f4b2 Merge pull request #966 from fluxcd/update-deps-1.33.2
  • c895e9f Update dependencies to Kubernetes v1.33.2
  • 6c8e4c1 Merge pull request #962 from dgunzy/fix/ignore-paths-diff
  • 1649a3c Add ignorepaths to scan manifests to fix --ignore-paths flag
  • 0749484 Merge pull request #965 from fluxcd/oci-insecure-transport
  • 647e479 oci: Add insecure option to retry transport
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/http/fetch from 0.16.0 to 0.17.0

Commits
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • 30da897 Update dependencies
  • 63e3e9c Merge pull request #725 from fluxcd/dependabot/github_actions/ci-f38fbd1956
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/kustomize from 1.18.0 to 1.19.0

Commits
  • 9e79277 Merge pull request #968 from cappyzawa/feat/runtime-secrets-pointer-based-api
  • 9ee2d52 runtime/secrets: migrate to Secret pointer-based APIs
  • e04986e Merge pull request #967 from fluxcd/bump-pkg
  • 59d65f6 Prepare for release
  • 607f4b2 Merge pull request #966 from fluxcd/update-deps-1.33.2
  • c895e9f Update dependencies to Kubernetes v1.33.2
  • 6c8e4c1 Merge pull request #962 from dgunzy/fix/ignore-paths-diff
  • 1649a3c Add ignorepaths to scan manifests to fix --ignore-paths flag
  • 0749484 Merge pull request #965 from fluxcd/oci-insecure-transport
  • 647e479 oci: Add insecure option to retry transport
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.63.0 to 0.67.0

Commits
  • f30f3eb Merge pull request #972 from fluxcd/tools
  • da8d033 tools: Introduce CLI tools for helping with Flux development tasks
  • a380426 Merge pull request #971 from fluxcd/secrets-gha
  • 6d156d8 runtime/secrets: Add server-side apply helper
  • 022e548 runtime/secrets: Standardise key names
  • ddfc64b runtime/secrets: Add MakeSSHSecret
  • 18c2741 runtime/secrets: Add MakeGitHubAppSecret
  • 856b04d Merge pull request #970 from cappyzawa/add-client-based-secret-variants
  • 14d994d runtime/secrets: separate API reading from Secret conversion
  • c929dfc runtime/secrets: add client-based API variants
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/tar from 0.12.0 to 0.13.0

Commits
  • 04a0963 Merge pull request #597 from fluxcd/tag-verification
  • 0f40956 git: add support for lightweight tags
  • 320d78f git/gogit: add tag info to commit if refname points to an annotated tag
  • 5658f3b git/gogit: add tag info to commit when checking out via semver
  • 75c942d git/gogit: add tag info to commit when checking out via tag
  • fba7100 git: add support for linking a parent tag to a commit
  • 540f61e Merge pull request #631 from mihaiandreiratoiu/feature/gov-arm
  • 174a5e9 Ops: Update azure cloud token auth
  • 5eb935a Merge pull request #632 from fluxcd/disable-azure-ci-jobs
  • 1330800 Disable azure CI jobs
  • Additional commits viewable in compare view

Updates github.com/mikefarah/yq/v4 from 4.45.4 to 4.46.1

Release notes

Sourced from github.com/mikefarah/yq/v4's releases.

v4.46.1 - INI support + bug fixes

  • Added INI support
  • Fixed 'add' operator when piped in with no data #2378, #2383, #2384
  • Fixed delete after slice problem (bad node path) #2387 Thanks @​antoinedeschenes
  • Fixed yq small build Thanks @​imzue
  • Switched to YAML org supported go-yaml!
  • Bumped dependencies
Changelog

Sourced from github.com/mikefarah/yq/v4's changelog.

4.46.1:

  • Added INI support
  • Fixed 'add' operator when piped in with no data #2378, #2383, #2384
  • Fixed delete after slice problem (bad node path) #2387 Thanks @​antoinedeschenes
  • Fixed yq small build Thanks @​imzue
  • Switched to YAML org supported go-yaml!
  • Bumped dependencies
Commits
  • 1187c95 Bumping version
  • 08d3789 Preparing release
  • 6a5e95a Merge branch 'imzue-build-small-yq'
  • 221a5b1 Adding tinygo to project words
  • c10bfe0 Switching to YAML org supported go-yaml
  • 99f88df Switching to YAML org supported go-yaml
  • 7696723 Add more build tags to reduce binary size
  • a9f7cc1 Add TinyGo build example
  • 384d227 Add yq_noini tag to build-small-yq
  • 25365a0 Fix compilation errors when building build-small-yq
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) | `0.17.0` | `0.18.0` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.13.0` | `1.15.0` |
| [github.com/fluxcd/pkg/http/fetch](https://github.com/fluxcd/pkg) | `0.16.0` | `0.17.0` |
| [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.18.0` | `1.19.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.63.0` | `0.67.0` |
| [github.com/fluxcd/pkg/tar](https://github.com/fluxcd/pkg) | `0.12.0` | `0.13.0` |
| [github.com/mikefarah/yq/v4](https://github.com/mikefarah/yq) | `4.45.4` | `4.46.1` |


Updates `github.com/fluxcd/pkg/apis/event` from 0.17.0 to 0.18.0
- [Commits](fluxcd/pkg@git/v0.17.0...git/v0.18.0)

Updates `github.com/fluxcd/pkg/apis/meta` from 1.13.0 to 1.15.0
- [Commits](fluxcd/pkg@apis/meta/v1.13.0...apis/meta/v1.15.0)

Updates `github.com/fluxcd/pkg/http/fetch` from 0.16.0 to 0.17.0
- [Commits](fluxcd/pkg@git/v0.16.0...git/v0.17.0)

Updates `github.com/fluxcd/pkg/kustomize` from 1.18.0 to 1.19.0
- [Commits](fluxcd/pkg@kustomize/v1.18.0...kustomize/v1.19.0)

Updates `github.com/fluxcd/pkg/runtime` from 0.63.0 to 0.67.0
- [Commits](fluxcd/pkg@runtime/v0.63.0...runtime/v0.67.0)

Updates `github.com/fluxcd/pkg/tar` from 0.12.0 to 0.13.0
- [Commits](fluxcd/pkg@git/v0.12.0...git/v0.13.0)

Updates `github.com/mikefarah/yq/v4` from 4.45.4 to 4.46.1
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@v4.45.4...v4.46.1)

---
updated-dependencies:
- dependency-name: github.com/fluxcd/pkg/apis/event
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/apis/meta
  dependency-version: 1.15.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/http/fetch
  dependency-version: 0.17.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/kustomize
  dependency-version: 1.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-version: 0.67.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/tar
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mikefarah/yq/v4
  dependency-version: 4.46.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Jul 13, 2025
@dependabot dependabot bot requested a review from a team as a code owner July 13, 2025 15:12
@dependabot dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Jul 13, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 20, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jul 20, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/go-0d57cfb8d3 branch July 20, 2025 16:00
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

kind/chore chore, maintenance, etc. kind/dependency dependency update, etc.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant