Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the go group across 1 directory with 12 updates #155

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 2, 2024

Bumps the go group with 10 updates in the / directory:

Package From To
code.gitea.io/sdk/gitea 0.15.1 0.18.0
github.com/containers/image/v5 5.29.2 5.31.0
github.com/fluxcd/go-git-providers 0.15.0 0.20.1
github.com/fluxcd/pkg/apis/event 0.5.2 0.9.0
github.com/fluxcd/pkg/apis/meta 1.1.2 1.5.0
github.com/fluxcd/pkg/runtime 0.35.0 0.47.1
github.com/fluxcd/source-controller/api 1.1.0 1.3.0
github.com/go-logr/logr 1.4.1 1.4.2
github.com/open-component-model/ocm 0.8.0 0.10.0
github.com/open-component-model/ocm-controller 0.19.0 0.21.4

Updates code.gitea.io/sdk/gitea from 0.15.1 to 0.18.0

Updates github.com/containers/image/v5 from 5.29.2 to 5.31.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.31.0

What's Changed

... (truncated)

Commits
  • b5a7587 Bump c/image to v5.31.0
  • 21ac79b Merge pull request #2428 from mtrmac/als-toc-fixes
  • 45f4f23 Don't completely ignore already-computed image size if we see an ALS layer
  • 27516f3 Don't modify a storage.Layer returned by c/storage
  • c2327e4 Don't unnecessarily trust the ALS FUSE server about the TOC digest
  • db02dee Merge pull request #2426 from containers/renovate/github.com-containers-stora...
  • 6db27e1 fix(deps): update module github.com/containers/storage to v1.54.0
  • cf26b3c Merge pull request #2416 from ktock/store-tocdigest-id
  • 52101a0 getSize: allow unknown uncompressed size
  • ebbd025 Enable to pass TOCDigest to Additional Layer Store
  • Additional commits viewable in compare view

Updates github.com/fluxcd/go-git-providers from 0.15.0 to 0.20.1

Release notes

Sourced from github.com/fluxcd/go-git-providers's releases.

v0.20.1

CHANGELOG

  • PR #271 Update go-github to v61

v0.20.0

CHANGELOG

  • PR #270 Update dependencies to Go 1.22
  • PR #266 build(deps): bump the ci group with 2 updates
  • PR #265 Update Soule BA Affiliation
  • PR #263 Change Max's affiliation to Associmates
  • PR #262 Change Stefan Prodan's affiliation to ControlPlane

v0.19.3

CHANGELOG

  • PR #261 Adapt workflows
  • PR #260 build(deps): bump the ci group with 2 updates
  • PR #259 Updating dependencies and fix go-git CVE
  • PR #257 changing Soule info
  • PR #256 github: fix defer in for loop

v0.19.2

CHANGELOG

  • PR #254 Updating dependencies
  • PR #253 build(deps): bump the ci group with 1 update

v0.19.1

CHANGELOG

  • PR #252 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0

v0.19.0

CHANGELOG

  • PR #250 Validate user ref when creating user repository
  • PR #249 updating go and dependencies versions
  • PR #248 build(deps): bump the ci group with 1 update
  • PR #247 build(deps): bump the ci group with 2 updates
  • PR #246 build(deps): bump the ci group with 1 update
  • PR #244 build(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3
  • PR #243 build(deps): bump the ci group with 1 update
  • PR #242 ci: Group dependabot updates
  • PR #241 build(deps): bump actions/checkout from 3.5.3 to 3.6.0
  • PR #240 build(deps): bump actions/setup-go from 4.0.1 to 4.1.0
  • PR #238 Pin GitLab version in e2e tests
  • PR #237 fix panic when gitea commit object contains nil pointers

v0.18.0

CHANGELOG

v0.17.0

CHANGELOG

  • PR #236 Declare Gitea client test e2e

... (truncated)

Commits
  • 272285d Merge pull request #269 from fluxcd/retire-maintainers
  • 949a5e2 Merge pull request #271 from fluxcd/update-go-github-61
  • 5d5e8f0 update github.com/google/go-github to v61
  • 9435c30 Merge pull request #270 from fluxcd/go-1.22
  • 6a8bba0 Update dependencies to Go 1.22
  • 3caf1c5 Retire Simon and Yiannis
  • f66acf2 Merge pull request #266 from fluxcd/dependabot/github_actions/ci-0c39cf4907
  • 5ba0e70 build(deps): bump the ci group with 2 updates
  • df839c5 Merge pull request #265 from fluxcd/souleb-affiliation
  • 6bd8d84 Update Soule BA Affiliation
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/event from 0.5.2 to 0.9.0

Commits
  • 598e74e git: update dependencies
  • c28ef00 Merge pull request #463 from fluxcd/go-git-bc-tag
  • da9a7b7 go-git: transform revision for last observed tag
  • 0009fda Merge pull request #404 from fluxcd/commit-string-fmt
  • db0daab git: make LastObservedCommit backwards compatible
  • 3fb1b65 git: tidy code around digests
  • b097686 git: align tests and code with commit fmt change
  • 24a228c git: change Commit#String format
  • da2a476 Merge pull request #462 from fluxcd/event-digest-key
  • 7053ad7 apis/event: add MetaDigestKey
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/meta from 1.1.2 to 1.5.0

Commits
  • e32ccc2 Merge pull request #763 from fluxcd/kubernetes-1.30
  • 2b974af Update sigs.k8s.io/controller-tools to v0.15.0
  • 52c1fc5 Update sigs.k8s.io/controller-runtime to v0.18.0
  • c906252 Update dependencies to Kubernetes 1.30
  • 92c1348 Merge pull request #764 from fluxcd/dependabot/github_actions/ci-e44cfae560
  • ccb916a build(deps): bump the ci group with 3 updates
  • 6081556 Merge pull request #761 from fluxcd/kustomize-name-prefix-suffix
  • abf5675 kustomize: Add support for namePrefix and nameSuffix
  • 98d2522 Merge pull request #760 from fluxcd/dependabot/github_actions/ci-8f082d4f6d
  • efcd824 build(deps): bump docker/setup-buildx-action in the ci group
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.35.0 to 0.47.1

Commits
  • adcfcbe Merge pull request #769 from fluxcd/controller-runtime-v0.18.1
  • 0e74a82 Update runtime pkg docs
  • b329d92 Update dependencies to controller-runtime v0.18.1
  • d0bf8ed Merge pull request #768 from fluxcd/dependabot/github_actions/ci-b93eff89fb
  • 14f05d7 build(deps): bump actions/checkout from 4.1.3 to 4.1.4 in the ci group
  • 3790516 Merge pull request #767 from fluxcd/up-internal-deps
  • 37ea30c Update internal dependencies
  • e32ccc2 Merge pull request #763 from fluxcd/kubernetes-1.30
  • 2b974af Update sigs.k8s.io/controller-tools to v0.15.0
  • 52c1fc5 Update sigs.k8s.io/controller-runtime to v0.18.0
  • Additional commits viewable in compare view

Updates github.com/fluxcd/source-controller/api from 1.1.0 to 1.3.0

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.3.0

Changelog

v1.3.0 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.3.0
  • ghcr.io/fluxcd/source-controller:v1.3.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.5

Changelog

v1.2.5 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.2.5
  • ghcr.io/fluxcd/source-controller:v1.2.5

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.4

Changelog

v1.2.4 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.2.4
  • ghcr.io/fluxcd/source-controller:v1.2.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.3

Changelog

... (truncated)

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.3.0

Release date: 2024-05-03

This minor release promotes the Helm APIs to GA, and comes with new features, improvements and bug fixes.

HelmRepository

The HelmRepository API has been promoted from v1beta2 to v1 (GA). The v1 API is backwards compatible with v1beta2.

For HelmRepository of type oci, the .spec.insecure field allows connecting over HTTP to an insecure non-TLS container registry.

To upgrade from v1beta2, after deploying the new CRD and controller, set apiVersion: source.toolkit.fluxcd.io/v1 in the YAML files that contain HelmRepository definitions. Bumping the API version in manifests can be done gradually. It is advised not to delay this procedure as the beta versions will be removed after 6 months.

HelmChart

The HelmChart API have been promoted from v1beta2 to v1 (GA). The v1 API is backwards compatible with v1beta2, with the exception of the removal of the deprecated field .spec.valuesFile which was replaced with spec.valuesFiles.

The HelmChart API was extended with support for Notation signature verification of Helm OCI charts.

A new optional field .spec.ignoreMissingValuesFiles has been added, which allows the controller to ignore missing values files rather than failing to reconcile the HelmChart.

OCIRepository

The OCIRepository API was extended with support for Notation signature verification of OCI artifacts.

A new optional field .spec.ref.semverFilter has been added, which allows the controller to filter the tags based on regular expressions before applying the semver range. This allows picking the latest release candidate instead of the latest stable release.

In addition, the controller has been updated to Kubernetes v1.30.0, Helm v3.14.4, and various other dependencies to their latest version to patch upstream CVEs.

... (truncated)

Commits
  • a80a99b Merge pull request #1472 from fluxcd/release-v1.3.0
  • 70901f8 Release v1.3.0
  • 05ab8b1 Add changelog entry for v1.3.0
  • c9bf167 Merge pull request #1298 from fluxcd/phony-build
  • cc3d495 ci: Print controller logs after e2e run
  • 0bd5b95 Rename make target build to manager
  • edccfe9 Merge pull request #1470 from fluxcd/dependabot/github_actions/ci-b23e0286c6
  • 9ce2d61 build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 in the ci group
  • 16eeeef Merge pull request #1469 from fluxcd/dependabot/go_modules/go-deps-4411c5bc33
  • 8598b8d build(deps): bump google.golang.org/api
  • Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.12.0

What's Changed

New Contributors

Full Changelog: go-git/go-git@v5.11.0...v5.12.0

Commits
  • 302ddde Merge pull request #1060 from go-git/dependabot/go_modules/github.com/gliderl...
  • 6bba34d build: bump github.com/gliderlabs/ssh from 0.3.6 to 0.3.7
  • feaeb36 Merge pull request #937 from matejrisek/feature/rename-short-fields
  • 7959a42 Merge pull request #1052 from go-git/dependabot/go_modules/github.com/skeema/...
  • 4c17ce7 build: bump github.com/skeema/knownhosts from 1.2.1 to 1.2.2
  • 3f77e6f Merge pull request #1048 from pjbgf/fix-reset-validation
  • 6af38e0 Merge pull request #1047 from avoidalone/master
  • e6c3e58 Merge pull request #1044 from pjbgf/ff-merge
  • 04f7b23 *: fix some comments
  • f4f1a87 Merge pull request #971 from nodivbyzero/fix-177-diff-print-file-stats
  • Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.4.1 to 1.4.2

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.2

What's Changed

Dependencies:

Full Changelog: go-logr/logr@v1.4.1...v1.4.2

Commits
  • 1205f42 Merge pull request #295 from go-logr/dependabot/github_actions/actions/checko...
  • ccedcbd Merge pull request #294 from go-logr/dependabot/github_actions/github/codeql-...
  • bead577 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
  • a492d95 build(deps): bump github/codeql-action from 3.25.4 to 3.25.5
  • 19ad07c build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
  • 1c97a21 build(deps): bump actions/checkout from 4.1.4 to 4.1.5
  • f70c5b5 build(deps): bump github/codeql-action from 3.25.3 to 3.25.4
  • 4ade8d3 build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1
  • 88d98bd Merge pull request #289 from go-logr/dependabot/github_actions/golangci/golan...
  • 432cd86 Merge pull request #288 from go-logr/dependabot/github_actions/actions/setup-...
  • Additional commits viewable in compare view

Updates github.com/open-component-model/ocm from 0.8.0 to 0.10.0

Release notes

Sourced from github.com/open-component-model/ocm's releases.

v0.10.0

Release v0.10.0

  • externalize general go utilities in packages pkg{errors,exceptions,generics,finalizer} (#761)
  • Bump the go group with 12 updates (#768)
  • feat: add silent flag and fix dry run with prerequisites (#767)
  • let's get rid of reuse PendingDeprecationWarning (#765)
  • fix: stop ignoring most of the errors (#745)
  • feat: add uninstall command to the controller (#766)
  • Create codeql.yml (#764)
  • Npm/auth access (#757)
  • Bump the go group with 7 updates (#763)
  • Bump the ci group with 2 updates (#762)
  • Fix ocm issue 179, block in config yields invalid yaml (#734)
  • add cleanup to action for self hosted runner (#760)
  • add negative test for non-semver version (#759)
  • Don't Panik! (#758)
  • Bump the go group with 3 updates (#751)
  • Bump github.com/fluxcd/cli-utils from 0.36.0-flux.6 to 0.36.0-flux.7 (#752)

v0.9.0

Release v0.9.0

  • normalize order of used component lister results (#750)
  • eliminate dep from demo plugin to cli (#746)
  • Bump the go group across 1 directory with 3 updates (#748)
  • Bump github.com/fluxcd/cli-utils from 0.36.0-flux.5 to 0.36.0-flux.6 (#737)
  • change wording (#747)
  • Bump github.com/docker/cli from 25.0.5+incompatible to 26.1.0+incompatible (#743)
  • Bump github.com/docker/docker from 25.0.5+incompatible to 26.1.0+incompatible (#744)
  • eliminate lib to cli dependencies (#741)
  • enable http registries as ocm repositories (#676)
  • Rework object finalization (#703)
  • fix: do not create a new resource manager client (#742)
  • fix: remove all personal information from tests (#740)
  • incorporate VERSION file if built without make (#732)
  • Wget doc (#739)
  • add documentation for wget access (#733)
  • Bump the go group with 27 updates (#729)
  • Bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 (#722)
  • Bump the ci group with 2 updates (#723)
  • fast version list command (#728)
  • fix issue with create tempfile on MS Windows (#726)
  • modify add sources doc (#727)
  • align ca-cert opts + remove relation constraints for inputs (#725)
  • add metadata for hyperspace (#719)
  • readonly mode configurable for CVs (#711)
  • spec normalization for OCI based OCM repository spec (#710)
  • Bump the go_modules group group with 3 updates (#707)
  • Bump the ci group with 3 updates (#713)

... (truncated)

Commits
  • b8fea72 Release v0.10.0
  • 9a9be0b ReleaseNotes for v0.10.0
  • ccbbef5 externalize general go utilities in packages pkg{errors,exceptions,generics,f...
  • 7889729 Bump the go group with 12 updates (#768)
  • 850b785 feat: add silent flag and fix dry run with prerequisites (#767)
  • b44a489 let's get rid of reuse PendingDeprecationWarning (#765)
  • 7f589f7 fix: stop ignoring most of the errors (#745)
  • 8a4d919 feat: add uninstall command to the controller (#766)
  • e05a5a0 Create codeql.yml (#764)

Bumps the go group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| code.gitea.io/sdk/gitea | `0.15.1` | `0.18.0` |
| [github.com/containers/image/v5](https://github.com/containers/image) | `5.29.2` | `5.31.0` |
| [github.com/fluxcd/go-git-providers](https://github.com/fluxcd/go-git-providers) | `0.15.0` | `0.20.1` |
| [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) | `0.5.2` | `0.9.0` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.1.2` | `1.5.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.35.0` | `0.47.1` |
| [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) | `1.1.0` | `1.3.0` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.1` | `1.4.2` |
| [github.com/open-component-model/ocm](https://github.com/open-component-model/ocm) | `0.8.0` | `0.10.0` |
| [github.com/open-component-model/ocm-controller](https://github.com/open-component-model/ocm-controller) | `0.19.0` | `0.21.4` |



Updates `code.gitea.io/sdk/gitea` from 0.15.1 to 0.18.0

Updates `github.com/containers/image/v5` from 5.29.2 to 5.31.0
- [Release notes](https://github.com/containers/image/releases)
- [Commits](containers/image@v5.29.2...v5.31.0)

Updates `github.com/fluxcd/go-git-providers` from 0.15.0 to 0.20.1
- [Release notes](https://github.com/fluxcd/go-git-providers/releases)
- [Changelog](https://github.com/fluxcd/go-git-providers/blob/main/.goreleaser.yml)
- [Commits](fluxcd/go-git-providers@v0.15.0...v0.20.1)

Updates `github.com/fluxcd/pkg/apis/event` from 0.5.2 to 0.9.0
- [Commits](fluxcd/pkg@kustomize/v0.5.2...git/v0.9.0)

Updates `github.com/fluxcd/pkg/apis/meta` from 1.1.2 to 1.5.0
- [Commits](fluxcd/pkg@apis/meta/v1.1.2...apis/meta/v1.5.0)

Updates `github.com/fluxcd/pkg/runtime` from 0.35.0 to 0.47.1
- [Commits](fluxcd/pkg@oci/v0.35.0...runtime/v0.47.1)

Updates `github.com/fluxcd/source-controller/api` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.1.0...v1.3.0)

Updates `github.com/go-git/go-git/v5` from 5.11.0 to 5.12.0
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.12.0)

Updates `github.com/go-logr/logr` from 1.4.1 to 1.4.2
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.1...v1.4.2)

Updates `github.com/open-component-model/ocm` from 0.8.0 to 0.10.0
- [Release notes](https://github.com/open-component-model/ocm/releases)
- [Changelog](https://github.com/open-component-model/ocm/blob/main/.goreleaser.yaml)
- [Commits](open-component-model/ocm@v0.8.0...v0.10.0)

Updates `github.com/open-component-model/ocm-controller` from 0.19.0 to 0.21.4
- [Release notes](https://github.com/open-component-model/ocm-controller/releases)
- [Changelog](https://github.com/open-component-model/ocm-controller/blob/main/.goreleaser.yaml)
- [Commits](open-component-model/ocm-controller@v0.19.0...v0.21.4)

Updates `golang.org/x/oauth2` from 0.16.0 to 0.20.0
- [Commits](golang/oauth2@v0.16.0...v0.20.0)

---
updated-dependencies:
- dependency-name: code.gitea.io/sdk/gitea
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/containers/image/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/go-git-providers
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/apis/event
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/apis/meta
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/go-logr/logr
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/open-component-model/ocm
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/open-component-model/ocm-controller
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <[email protected]>
Copy link

github-actions bot commented Jun 2, 2024

Mend Scan Summary: ❌

Repository: open-component-model/git-controller

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 0
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 2
LICENSE RISK HIGH 8
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report
Mend UI

Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 9, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 9, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go-b647928d48 branch June 9, 2024 23:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/dependency dependency update, etc.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants