Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps(deps): update all non-major dependencies #107

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 14, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/kubescape/kubevuln v0.3.33 -> v0.3.53 age adoption passing confidence
github.com/kubescape/storage v0.0.111 -> v0.0.149 age adoption passing confidence
github.com/onsi/ginkgo/v2 v2.20.2 -> v2.22.2 age adoption passing confidence
github.com/onsi/gomega v1.34.2 -> v1.36.2 age adoption passing confidence
github.com/validator-labs/validator v0.1.0 -> v0.1.16 age adoption passing confidence
k8s.io/api v0.31.0 -> v0.32.0 age adoption passing confidence
k8s.io/apimachinery v0.31.0 -> v0.32.0 age adoption passing confidence
k8s.io/client-go v0.31.0 -> v0.32.0 age adoption passing confidence
sigs.k8s.io/cluster-api v1.8.2 -> v1.9.3 age adoption passing confidence
sigs.k8s.io/controller-runtime v0.19.0 -> v0.19.4 age adoption passing confidence

Release Notes

kubescape/kubevuln (github.com/kubescape/kubevuln)

v0.3.53

Compare Source

Overview

This PR changes the behavior so that:

  1. Scan ID will be saved in the annotations instead of labels (label value is limited to 63 chars)
  2. Add timestamp annotation to the summary, so that it will get updated on every scan request

v0.3.52

Compare Source

What's Changed

Full Changelog: kubescape/kubevuln@v0.3.51...v0.3.52

v0.3.51

Compare Source

What's Changed

Full Changelog: kubescape/kubevuln@v0.3.49...v0.3.51

v0.3.49

Compare Source

What's Changed

Full Changelog: kubescape/kubevuln@v0.3.48...v0.3.49

v0.3.48

Compare Source

v0.3.46

Compare Source

Bumps golang.org/x/crypto from 0.27.0 to 0.31.0.

Commits
  • b4f1988 ssh: make the public key cache a 1-entry FIFO cache
  • 7042ebc openpgp/clearsign: just use rand.Reader in tests
  • 3e90321 go.mod: update golang.org/x dependencies
  • 8c4e668 x509roots/fallback: update bundle
  • 6018723 go.mod: update golang.org/x dependencies
  • 71ed71b README: don't recommend go get
  • 750a45f sha3: add MarshalBinary, AppendBinary, and UnmarshalBinary
  • 36b1725 sha3: avoid trailing permutation
  • 80ea76e sha3: fix padding for long cSHAKE parameters
  • c17aa50 sha3: avoid buffer copy
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

v0.3.41

Compare Source

v0.3.39

Compare Source

Overview

v0.3.38

Compare Source

v0.3.36

Compare Source

Bumps github.com/containers/common from 0.59.0 to 0.60.4.

Release notes

Sourced from github.com/containers/common's releases.

v0.60.4

What's Changed

Full Changelog: https://github.com/containers/common/compare/v0.60.3...v0.60.4

v0.60.3

What's Changed

Full Changelog: https://github.com/containers/common/compare/v0.60.2...v0.60.3

v0.60.2

What's Changed

Full Changelog: https://github.com/containers/common/compare/v0.60.1...v0.60.2

v0.60.1

What's Changed

Full Changelog: https://github.com/containers/common/compare/v0.60.0...v0.60.1

v0.60.0

What's Changed

... (truncated)

Commits
  • d31fcd2 Bump to v0.60.4
  • e7db065 pkg/subscriptions: use securejoin for the container path
  • 91f5148 Merge pull request #​2170 from Luap99/v0.60
  • 8264002 Bump to v0.60.3
  • 2776f6b pkg/netns: remove NewNSWithName()
  • 8a5b951 pkg/netns: add NewNSFrom()
  • 50870e9 pkg/netns: ensure makeNetnsDir is race free
  • 322f2c2 pkg/netns: split out makeNetnsDir logic
  • 52c82b1 Merge pull request #​2127 from TomSweeneyRedHat/dev/tsweeney/v0.60.2
  • 1961b2d [v0.60] Bump c/common to v0.60.2
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

v0.3.34

Compare Source

kubescape/storage (github.com/kubescape/storage)

v0.0.149

Compare Source

v0.0.148

Compare Source

What's Changed

Full Changelog: kubescape/storage@v0.0.146...v0.0.148

v0.0.146

Compare Source

v0.0.145

Compare Source

Bumps golang.org/x/crypto from 0.27.0 to 0.31.0.

Commits
  • b4f1988 ssh: make the public key cache a 1-entry FIFO cache
  • 7042ebc openpgp/clearsign: just use rand.Reader in tests
  • 3e90321 go.mod: update golang.org/x dependencies
  • 8c4e668 x509roots/fallback: update bundle
  • 6018723 go.mod: update golang.org/x dependencies
  • 71ed71b README: don't recommend go get
  • 750a45f sha3: add MarshalBinary, AppendBinary, and UnmarshalBinary
  • 36b1725 sha3: avoid trailing permutation
  • 80ea76e sha3: fix padding for long cSHAKE parameters
  • c17aa50 sha3: avoid buffer copy
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

v0.0.143

Compare Source

this will only work with https://github.com/kubescape/node-agent/pull/384/

v0.0.141

Compare Source

while this aligns with regular api-server behavior, we should test all our components in case we don't expect Create() to fail

v0.0.140

Compare Source

v0.0.139

Compare Source

v0.0.138

Compare Source

v0.0.137

Compare Source

v0.0.135

Compare Source

v0.0.132

Compare Source

Sorry, we do not accept changes directly against this repository. Please see
CONTRIBUTING.md for information on where and how to contribute instead.

v0.0.127

Compare Source

v0.0.123

Compare Source

v0.0.122

Compare Source

v0.0.121

Compare Source

v0.0.119

Compare Source

v0.0.118

Compare Source

Sorry, we do not accept changes directly against this repository. Please see
CONTRIBUTING.md for information on where and how to contribute instead.

v0.0.117

Compare Source

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.22.2

Compare Source

What's Changed

Full Changelog: onsi/ginkgo@v2.22.1...v2.22.2

v2.22.1

Compare Source

2.22.1

Fixes

Fix CSV encoding

Maintenance
  • ensure *.test files are gitignored so we don't accidentally commit compiled tests again [c88c634]
  • remove golang.org/x/net/context in favour of stdlib context [4df44bf]

v2.22.0

Compare Source

2.22.0

Features
  • Add label to serial nodes [0fcaa08]

This allows serial tests to be filtered using the label-filter

Maintenance

Various doc fixes

v2.21.0

Compare Source

2.21.0

Features
  • add support for GINKGO_TIME_FORMAT [a69eb39]
  • add GINKGO_NO_COLOR to disable colors via environment variables [bcab9c8]
Fixes
  • increase threshold in timeline matcher [e548367]
  • Fix the document by replacing SpecsThatWillBeRun with SpecsThatWillRun
    [c2c4d3c]
Maintenance
  • bump various dependencies [7e65a00]
onsi/gomega (github.com/onsi/gomega)

v1.36.2

Compare Source

Maintenance

v1.36.1

Compare Source

1.36.1

Fixes

v1.36.0

Compare Source

1.36.0

Features
  • new: make collection-related matchers Go 1.23 iterator aware [4c964c6]
Maintenance
  • Replace min/max helpers with built-in min/max [ece6872]
  • Fix some typos in docs [8e924d7]

v1.35.1

Compare Source

1.35.1

Fixes
  • Export EnforceDefaultTimeoutsWhenUsingContexts and DisableDefaultTimeoutsWhenUsingContext [ca36da1]

v1.35.0

Compare Source

1.35.0

Features
  • You can now call EnforceDefaultTimeoutsWhenUsingContexts() to have Eventually honor the default timeout when passed a context. (prior to this you had to expclility add a timeout) [e4c4265]
  • You can call StopTrying(message).Successfully() to abort a Consistently early without failure [eeca931]
Fixes
  • Stop memoizing the result of HaveField to avoid unexpected errors when used with async assertions. [3bdbc4e]
Maintenance
validator-labs/validator (github.com/validator-labs/validator)

v0.1.16

Compare Source

Bug Fixes
  • update plugin chart values with new metrics service targetPort (#​457) (c474d90)
Other
  • deps: bump golang.org/x/crypto from 0.30.0 to 0.31.0 (#​455) (a8c3422)
Dependency Updates

v0.1.15

Compare Source

Other
Dependency Updates

v0.1.14

Compare Source

Other
Dependency Updates

v0.1.13

Compare Source

Features
Other
Dependency Updates
  • deps: update actions/checkout digest to 11bd719 (#​430) (dcc37af)
  • deps: update actions/checkout digest to eef6144 (#​426) (ae9976f)
  • deps: update all non-major dependencies (#​437) (8a2fb74)
  • deps: update golang.org/x/exp digest to 2d47ceb (#​439) (4f2ffdf)
  • deps: update golang.org/x/exp digest to f66d83c (#​425) (edf709b)
  • deps: update kubernetes packages to v0.31.1 (#​388) (5459610)
  • deps: update kubernetes packages to v0.31.2 (#​431) (16f3c2a)
  • deps: update module buf.build/gen/go/spectrocloud/spectro-cleanup/connectrpc/go to v1.17.0-20240205164452-95dfd137cb54.1 (#​421) (274ba08)
  • deps: update module buf.build/gen/go/spectrocloud/spectro-cleanup/protocolbuffers/go to v1.35.1-20240205164452-95dfd137cb54.1 (#​428) (728bbf1)
  • deps: update module connectrpc.com/connect to v1.17.0 (#​420) (1425343)
  • deps: update module github.com/onsi/ginkgo/v2 to v2.21.0 (#​433) (d2dbcf0)
  • deps: update module github.com/onsi/gomega to v1.35.0 (#​434) (274b277)
  • deps: update module github.com/slack-go/slack to v0.15.0 (#​429) (2ce3b4b)
  • deps: update module github.com/validator-labs/validator-plugin-oci to v0.3.3 (#​396) (011d5bd)
  • deps: update module sigs.k8s.io/cluster-api to v1.8.3 (#​418) (735df90)
  • deps: update module sigs.k8s.io/cluster-api to v1.8.4 (#​427) (67fbcfc)
  • deps: update module sigs.k8s.io/controller-runtime to v0.19.0 (#​392) (1c87bd3)
  • deps: update module sigs.k8s.io/controller-runtime to v0.19.1 (#​432) (7b2f95a)
  • deps: update softprops/action-gh-release digest to e7a8f85 (#​435) (cb388ca)

v0.1.12

Compare Source

Other
Dependency Updates
Refactoring
  • Add BuildDefault validation rule result util code for all plugins to use (#​419) (a01093e)

v0.1.11

Compare Source

Features
Dependency Updates

v0.1.10

Compare Source

Other
Dependency Updates
  • deps: update module github.com/onsi/ginkgo/v2 to v2.20.2 (#​407) (a9f8f6b)
  • deps: update module github.com/onsi/gomega to v1.34.2 (#​408) (3043175)

v0.1.9

Compare Source

Bug Fixes
Other
Dependency Updates

v0.1.8

Compare Source

Features
Dependency Updates
  • deps: update module github.com/onsi/ginkgo/v2 to v2.20.1 (#​398) (baa9201)

v0.1.7

Compare Source

Refactoring

v0.1.6

Compare Source

Other

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner November 14, 2024 23:05
@renovate renovate bot requested a review from TylerGillson November 14, 2024 23:05
Copy link
Contributor Author

renovate bot commented Nov 14, 2024

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 56 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.22.5 -> 1.23.4
github.com/anchore/packageurl-go v0.1.1-0.20240312213626-055233e539b4 -> v0.1.1-0.20240507183024-848e011fc24f
github.com/anchore/stereoscope v0.0.3-0.20240423181235-8b297badafd5 -> v0.0.3
github.com/anchore/syft v1.3.0 -> v1.13.0
github.com/armosec/armoapi-go v0.0.416 -> v0.0.501
github.com/armosec/gojay v1.2.15 -> v1.2.17
github.com/armosec/utils-k8s-go v0.0.26 -> v0.0.30
github.com/briandowns/spinner v1.23.0 -> v1.23.1
github.com/containerd/containerd v1.7.18 -> v1.7.21
github.com/docker/cli v24.0.7+incompatible -> v27.1.1+incompatible
github.com/docker/docker v27.1.1+incompatible -> v27.3.1+incompatible
github.com/fatih/color v1.17.0 -> v1.18.0
github.com/gabriel-vasile/mimetype v1.4.3 -> v1.4.5
github.com/github/go-spdx/v2 v2.2.0 -> v2.3.2
github.com/gobuffalo/flect v1.0.2 -> v1.0.3
github.com/google/go-containerregistry v0.20.1 -> v0.20.2
github.com/google/pprof v0.0.0-20240827171923-fa2c70bbbfe5 -> v0.0.0-20241210010833-40e02aabc2ad
github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0 -> v2.22.0
github.com/kubescape/go-logger v0.0.22 -> v0.0.23
github.com/kubescape/k8s-interface v0.0.162 -> v0.0.178
github.com/pierrec/lz4/v4 v4.1.15 -> v4.1.21
github.com/prometheus/client_golang v1.19.1 -> v1.20.2
github.com/spf13/cast v1.6.0 -> v1.7.0
github.com/spf13/pflag v1.0.5 -> v1.0.6-0.20210604193023-d5e0c0615ace
github.com/stoewer/go-strcase v1.2.0 -> v1.3.0
github.com/stripe/stripe-go/v74 v74.28.0 -> v74.30.0
github.com/sylabs/squashfs v0.6.1 -> v1.0.0
github.com/uptrace/opentelemetry-go-extra/otelutil v0.2.2 -> v0.3.2
github.com/uptrace/opentelemetry-go-extra/otelzap v0.2.2 -> v0.3.2
github.com/uptrace/uptrace-go v1.18.0 -> v1.30.1
go.opentelemetry.io/contrib/instrumentation/runtime v0.44.0 -> v0.55.0
go.opentelemetry.io/otel v1.28.0 -> v1.30.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.28.0 -> v1.30.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.18.0 -> v1.30.0
go.opentelemetry.io/otel/metric v1.28.0 -> v1.30.0
go.opentelemetry.io/otel/sdk v1.28.0 -> v1.30.0
golang.org/x/crypto v0.26.0 -> v0.31.0
golang.org/x/exp v0.0.0-20240719175910-8a7402abbf56 -> v0.0.0-20241217172543-b2144cdd0a67
golang.org/x/net v0.28.0 -> v0.33.0
golang.org/x/oauth2 v0.21.0 -> v0.24.0
golang.org/x/sync v0.8.0 -> v0.10.0
golang.org/x/sys v0.24.0 -> v0.28.0
golang.org/x/term v0.23.0 -> v0.27.0
golang.org/x/text v0.17.0 -> v0.21.0
golang.org/x/time v0.5.0 -> v0.7.0
golang.org/x/tools v0.24.0 -> v0.28.0
google.golang.org/genproto/googleapis/api v0.0.0-20240528184218-531527333157 -> v0.0.0-20240903143218-8af14fe29dc1
google.golang.org/genproto/googleapis/rpc v0.0.0-20240701130421-f6361c86f094 -> v0.0.0-20240903143218-8af14fe29dc1
google.golang.org/grpc v1.65.0 -> v1.67.0
google.golang.org/protobuf v1.34.2 -> v1.36.1
k8s.io/apiextensions-apiserver v0.31.0 -> v0.31.3
k8s.io/apiserver v0.31.0 -> v0.31.3
k8s.io/component-base v0.31.0 -> v0.31.3
k8s.io/kube-openapi v0.0.0-20240228011516-70dd3763d340 -> v0.0.0-20241105132330-32ad38e42d3f
k8s.io/utils v0.0.0-20240711033017-18e509b52bc8 -> v0.0.0-20241104100929-3ea5e8cea738
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd -> v0.0.0-20241010143419-9aa6b5e7a4b3
sigs.k8s.io/structured-merge-diff/v4 v4.4.1 -> v4.4.2

@dosubot dosubot bot added the size:L This PR changes 100-499 lines, ignoring generated files. label Nov 14, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Nov 14, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Nov 19, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Nov 19, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Nov 21, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Nov 21, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Nov 21, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Nov 22, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Nov 22, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Dec 20, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Dec 20, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Dec 20, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Dec 23, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Dec 23, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Dec 24, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Dec 25, 2024
renovate-approve[bot]
renovate-approve bot previously approved these changes Dec 30, 2024
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 82e3b18 to e05b237 Compare January 8, 2025 22:30
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies go size:L This PR changes 100-499 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants