Bump the go-dependencies group across 1 directory with 8 updates

[dependabot]

Bumps the go-dependencies group with 2 updates in the / directory: github.com/BurntSushi/toml and github.com/GoogleContainerTools/kaniko.

Updates github.com/BurntSushi/toml from 1.3.2 to 1.4.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.4.0

This version requires Go 1.18

• Add toml.Marshal() (#405)

• Require 2-digit hour (#320)

• Wrap UnmarshalTOML() and UnmarshalText() return values in ParseError for position information (#398)

• Fix inline tables with dotted keys inside inline arrays (e.g. k=[{a.b=1}]) (#400)

Commits

• 1e2c053 Undeprecate PrimitiveDecode and MetaData.PrimitiveDecode()
• f8f7e48 Update toml-test
• 9a80667 Add -json flag to tomlv
• 3203540 fuzz: move fuzz_targets from oss-fuzz (#406)
• 77ce858 Add Marshal Function (#405)
• 0e879cb Fix panic when trying to set subkey for a value that's not a table
• c299e75 Update toml-test
• 4223137 Fix inline tables with dotted keys inside inline arrays (#400)
• 45e7e49 Update toml-test
• c320c2d Fix utf8.RuneError test
• Additional commits viewable in compare view

Updates github.com/GoogleContainerTools/kaniko from 1.21.1 to 1.23.2

Release notes

Sourced from github.com/GoogleContainerTools/kaniko's releases.

v1.23.2 Release 2024-07-09

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.23.2
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.23.2-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.23.2-slim

v1.23.2 is a patch release updating kaniko dependency version. See below for the specific deps that were updated.

Dependency Updates:

• chore(deps): bump github.com/moby/buildkit and github.com/docker/docker #3242
• chore(deps): bump docker/build-push-action from 6.1.0 to 6.3.0 #3236
• chore(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 #3235
• chore(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 #3237
• chore(deps): bump google.golang.org/api from 0.185.0 to 0.187.0 #3238
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.1 to 1.17.5 #3239
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.24 to 1.17.1 #3220
• chore(deps): bump docker/build-push-action from 6.0.0 to 6.1.0 #3218
• chore(deps): bump google.golang.org/api from 0.183.0 to 0.185.0 #3219
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.55.1 to 1.56.1 #3221
• chore(deps): bump docker/build-push-action from 5.3.0 to 6.0.0 #3212
• chore(deps): bump cloud.google.com/go/storage from 1.41.0 to 1.42.0 #3204
• chore(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 #3205
• chore(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 #3206
• chore(deps): bump imjasonh/setup-crane from 0.3 to 0.4 #3210
• chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 #3190
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.21 to 1.16.24 #3191
• chore(deps): bump google.golang.org/api from 0.182.0 to 0.183.0 #3192
• chore(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18 #3193
• chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.27.0 to 1.27.2 #3194

Huge thank you for this release towards our contributors:

• Aaron Prindle
• dependabot[bot]

v1.23.1 Release 2024-06-07

The executor images in this release are:

... (truncated)

Changelog

Sourced from github.com/GoogleContainerTools/kaniko's changelog.

v1.23.2 Release 2024-07-09

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.23.2
gcr.io/kaniko-project/executor:latest

The debug images are available at:

gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.23.2-debug

The slim executor images which don't contain any authentication binaries are available at:

gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.23.2-slim

• deps: bump github.com/moby/buildkit and github.com/docker/docker #3242
• chore(deps): bump docker/build-push-action from 6.1.0 to 6.3.0 #3236
• chore(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 #3235
• chore(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 #3237
• chore(deps): bump google.golang.org/api from 0.185.0 to 0.187.0 #3238
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.1 to 1.17.5 #3239
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.24 to 1.17.1 #3220
• chore(deps): bump docker/build-push-action from 6.0.0 to 6.1.0 #3218
• chore(deps): bump google.golang.org/api from 0.183.0 to 0.185.0 #3219
• chore(deps): bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.55.1 to 1.56.1 #3221
• chore(deps): bump docker/build-push-action from 5.3.0 to 6.0.0 #3212
• chore(deps): bump cloud.google.com/go/storage from 1.41.0 to 1.42.0 #3204
• chore(deps): bump github.com/spf13/cobra from 1.8.0 to 1.8.1 #3205
• chore(deps): bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 #3206
• chore(deps): bump imjasonh/setup-crane from 0.3 to 0.4 #3210
• chore(deps): bump golang.org/x/net from 0.25.0 to 0.26.0 #3190
• chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.21 to 1.16.24 #3191
• chore(deps): bump google.golang.org/api from 0.182.0 to 0.183.0 #3192
• chore(deps): bump github.com/containerd/containerd from 1.7.17 to 1.7.18 #3193
• chore(deps): bump github.com/aws/aws-sdk-go-v2 from 1.27.0 to 1.27.2 #3194

Huge thank you for this release towards our contributors:

• Aaron Prindle
• dependabot[bot]

v1.23.1 Release 2024-06-07

The executor images in this release are:

gcr.io/kaniko-project/executor:v1.23.1
</tr></table> 

... (truncated)

Commits

• 1ae9a84 chore(release): release v1.23.2 (#3243)
• 5283199 deps: bump github.com/moby/buildkit and github.com/docker/docker (#3242)
• 38f1ad8 chore(deps): bump docker/build-push-action from 6.1.0 to 6.3.0 (#3236)
• 1769774 chore(deps): bump docker/setup-qemu-action from 3.0.0 to 3.1.0 (#3235)
• 3dc85a1 chore(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 (#3237)
• 22dfb05 chore(deps): bump google.golang.org/api from 0.185.0 to 0.187.0 (#3238)
• c5d3495 chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager (#3239)
• d6aab15 chore(deps): bump github.com/aws/aws-sdk-go-v2/feature/s3/manager (#3220)
• 31f27d6 chore(deps): bump docker/build-push-action from 6.0.0 to 6.1.0 (#3218)
• a3e7508 chore(deps): bump google.golang.org/api from 0.183.0 to 0.185.0 (#3219)
• Additional commits viewable in compare view

Updates github.com/awslabs/amazon-ecr-credential-helper/ecr-login from 0.0.0-20231213181459-b0fcec718dc6 to 0.0.0-20240419161514-af205d85bb44

Commits

• See full diff in compare view

Updates github.com/containerd/containerd from 1.7.14 to 1.7.18

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.18

Welcome to the v1.7.18 release of containerd!

The eighteenth patch release for containerd 1.7 contains various updates along with an updated version of Go. Go 1.22.4 and 1.21.11 include a fix for a symlink time of check to time of use race condition during directory removal.

Highlights

• Update Go version to 1.21.11 (#10298)
• Remove uses of platforms.Platform alias (#10277)
• Migrate log imports to github.com/containerd/log (#10269)
• Migrate errdefs package to github.com/containerd/errdefs (#10266)
• Fix usage of "unknown" platform (#10261)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

• Derek McGowan
• Sebastiaan van Stijn
• Akhil Mohan
• Austin Vazquez
• Phil Estes

Changes

• Prepare release notes for v1.7.18 (#10301)
  • 9426aab62 Prepare release notes for v1.7.18
• Update Go version to 1.21.11 (#10298)
  • cdd3ea913 Update Go version to 1.21.11
• Remove uses of platforms.Platform alias (#10277)
  • 1e3c662d6 [release/1.7] remove uses of platforms.Platform alias
• Migrate log imports to github.com/containerd/log (#10269)
  • 0af6825b1 migrate logs imports to github.com/containerd/log module
• Migrate errdefs package to github.com/containerd/errdefs (#10266)
  • 308341a44 replace uses of github.com/containerd/containerd/errdefs
  • 47ff8cfce migrate errdefs package to github.com/containerd/errdefs module
• Fix usage of "unknown" platform (#10261)
  • f4d11912a core/image: fix usage of "unknown" platform
• Explicitly set release latest to true (#10265)
  • 5b0480009 Explicitly set release latest to true
  • d669b100d build(deps): bump softprops/action-gh-release from 1 to 2

Changes from containerd/errdefs

... (truncated)

Commits

• ae71819 Merge pull request #10301 from dmcgowan/prepare-v1.7.18
• 9426aab Prepare release notes for v1.7.18
• 1d324db Merge pull request #10298 from dmcgowan/1.7-update-go
• cdd3ea9 Update Go version to 1.21.11
• 0a137f0 Merge pull request #10277 from thaJeztah/1.7_backport_remove_use_of_platform_...
• 1e3c662 [release/1.7] remove uses of platforms.Platform alias
• 300a6de Merge pull request #10269 from thaJeztah/1.7_migrate_containerd_log
• 0af6825 migrate logs imports to github.com/containerd/log module
• be820ac Merge pull request #10266 from thaJeztah/1.7_migrate_to_errdefs_module
• 566c535 Merge pull request #10261 from k8s-infra-cherrypick-robot/cherry-pick-10257-t...
• Additional commits viewable in compare view

Updates github.com/docker/docker from 26.0.1+incompatible to 27.0.3+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v27.0.3

27.0.3

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 27.0.3 milestone
• moby/moby, 27.0.3 milestone
• Deprecated and removed features, see Deprecated Features.
• Changes to the Engine API, see API version history.

Bug fixes and enhancements

• Fix a regression that incorrectly reported a port mapping from a host IPv6 address to an IPv4-only container as an error. moby/moby#48090
• Fix a regression that caused duplicate subnet allocations when creating networks. moby/moby#48089
• Fix a regression resulting in "fail to register layer: failed to Lchown" errors when trying to pull an image with rootless enabled on a system that supports native overlay with user-namespaces. moby/moby#48086

v27.0.2

27.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 27.0.2 milestone
• moby/moby, 27.0.2 milestone
• Deprecated and removed features, see Deprecated Features.
• Changes to the Engine API, see API version history.

Bug fixes and enhancements

• Fix a regression that caused port numbers to be ignored when parsing a Docker registry URL. docker/cli#5197, docker/cli#5198

Removed

• api/types: deprecate ContainerJSONBase.Node field and ContainerNode type. These definitions were used by the standalone ("classic") Swarm API, but never implemented in the Docker Engine itself. moby/moby#48055

v27.0.1

27.0.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

• docker/cli, 27.0.0 milestone
• moby/moby, 27.0.0 milestone
• Deprecated and removed features, see Deprecated Features.
• Changes to the Engine API, see API version history.

New

• containerd image store: Add --platform flag to docker image push and improve the default behavior when not all platforms of the multi-platform image are available locally. docker/cli#4984, moby/moby#47679
• Add support to docker stack deploy for driver_opts in a service's networks. docker/cli#5125
• Consider additional /usr/local/libexec and /usr/libexec paths when looking up the userland proxy binaries by a name with a docker- prefix. moby/moby#47804

Bug fixes and enhancements

... (truncated)

Commits

• 662f78c Merge pull request #48090 from thaJeztah/27.0_backport_48067_fix_specific_ipv...
• b86d9bd Merge pull request #48086 from thaJeztah/27.0_backport_fix_rootless_pull
• 0dbc3ac Merge pull request #48087 from thaJeztah/27.0_backport_gofmt
• 276a648 Fix incorrect validation of port mapping
• 22aa07b Merge pull request #48089 from robmry/backport-27.0/48069_fix_overlapping_sub...
• 23b8b02 Fix duplicate subnet allocations
• bf222d6 fix some gofmt issues reported by goreportcard
• f8231b5 daemon/graphdriver/overlay2: set TarOptions.InUserNS for native differ
• b951474 pkg/archive: createTarFile: consistently use the same value for userns
• c5794e2 pkg/archive: handleTarTypeBlockCharFifo: don't discard EPERM errors
• Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.19.1 to 0.19.2

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.19.2

What's Changed

• Add JSON marshalling funcs for Digest. by @​wlynch in google/go-containerregistry#1915
• registry: Implement Range requests for blobs by @​jonjohnsonjr in google/go-containerregistry#1917
• Support podman auth file REGISTRY_AUTH_FILE. by @​zhaoyonghe in google/go-containerregistry#1914
• feat: crane mutate platform by @​joshwlewis in google/go-containerregistry#1919
• Add Context support to auth methods by @​jonjohnsonjr in google/go-containerregistry#1949
• Fix windows race condition when writing image with duplicate layers by @​dgannon991 in google/go-containerregistry#1921
• Add -O shorthand for --omit-digest-tags to crane. by @​smoser in google/go-containerregistry#1958

New Contributors

• @​wlynch made their first contribution in google/go-containerregistry#1915
• @​zhaoyonghe made their first contribution in google/go-containerregistry#1914
• @​joshwlewis made their first contribution in google/go-containerregistry#1919
• @​dgannon991 made their first contribution in google/go-containerregistry#1921
• @​smoser made their first contribution in google/go-containerregistry#1958

Full Changelog: google/go-containerregistry@v0.19.1...v0.19.2

Commits

• 1b4e407 Add -O shorthand for --omit-digest-tags to crane. (#1958)
• 3764db2 Fix windows race condition when writing image with duplicate layers (#1921)
• 39d1148 Add Context support to auth methods (#1949)
• ff385a9 feat: mutate platform (#1919)
• 98dd3e9 Support podman auth file REGISTRY_AUTH_FILE. (#1914)
• 051d642 registry: Implement Range requests for blobs (#1917)
• 0309184 Add JSON marshalling funcs for Digest. (#1915)
• See full diff in compare view

Updates github.com/moby/buildkit from 0.13.1 to 0.14.1

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.14.1

Welcome to the 0.14.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

• Talon Bowler
• Akihiro Suda
• Tõnis Tiigi
• Paweł Gronowski

Notable Changes

• Builtin Dockerfile frontend has been updated to v1.8.1 changelog
• Fix possible issue on pushing blobs with rewrite-timestamp=true option #5040
• Fix possible concurrency issue on handling HTTPS to HTTP fallbacks for insecure registries #5044

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.14.0

v0.14.0

Welcome to the 0.14.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

• Tõnis Tiigi
• CrazyMax
• Talon James Bowler
• Akihiro Suda
• Jonathan A. Sternberg
• Justin Chadwell
• David Karlsson
• Sebastiaan van Stijn
• Anthony Nandaa
• Erik Sipsma
• Aleksa Sarai
• Adam Perlin
• Shaun Thompson

... (truncated)

Commits

• eb864a8 Merge pull request #5053 from tonistiigi/v0.14.1-cherry-picks
• dedaef0 shell: handle empty string for var replacements
• b45ab30 Initialize build args from stage base
• e34c21a Consolidate instruction casing lint rules
• 050e3b6 Updates lint output to print detail instead of description
• 2bf5cbf util/resolver: Make httpFallback concurrent safe
• 49dd5f4 Adds 'WARNING' prefix to the rule check output and update lint
• 05bd56b Merge pull request #5040 from AkihiroSuda/cherrypick-5008-0.14
• 5a7352c Fix content not found with push=true,rewrite-timestamp=true
• 4d9a4e5 Merge pull request #5017 from crazy-max/fix-history-exporters
• Additional commits viewable in compare view

Updates golang.org/x/sys from 0.18.0 to 0.21.0

Commits

• 673e0f9 unix: skip ethtool driver test for busy interface
• 6943ab6 unix/linux: update glibc to 2.39
• 92f3ad6 unix: update to Linux kernel 6.9
• f34bb9f windows: add net user enum
• 6dfb94e unix: add types for SOCK_DIAG
• 7d69d98 unix: extend support for z/OS
• 7758090 cpu: add support for sve2 detection
• 9a28524 windows: drop go version tags for unsupported versions
• 27dc90b unix: update to Linux kernel 6.4
• cabba82 windows: use uint32 for serial comm flags for consistency
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.