build(deps): bump the go-deps group across 1 directory with 25 updates - #2145
Open
dependabot[bot] wants to merge 1 commit into
Open
build(deps): bump the go-deps group across 1 directory with 25 updates#2145dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go-deps group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.6.1` | `0.7.0` | | [github.com/elazarl/goproxy](https://github.com/elazarl/goproxy) | `1.8.4` | `1.9.0` | | [github.com/fluxcd/cli-utils](https://github.com/fluxcd/cli-utils) | `1.2.1` | `1.2.3` | | [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) | `0.27.0` | `0.28.0` | | [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.30.0` | `1.31.0` | | [github.com/fluxcd/pkg/artifact](https://github.com/fluxcd/pkg) | `0.18.0` | `0.20.0` | | [github.com/fluxcd/pkg/auth](https://github.com/fluxcd/pkg) | `0.54.0` | `0.56.0` | | [github.com/fluxcd/pkg/helmtestserver](https://github.com/fluxcd/pkg) | `0.40.0` | `0.41.0` | | [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.110.0` | `0.111.0` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.9.0` | `5.9.1` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.19.1` | `5.19.2` | | [github.com/miekg/dns](https://github.com/miekg/dns) | `1.1.72` | `1.1.73` | | [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.2.0` | `7.3.0` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.23.2` | `1.24.1` | | [github.com/sigstore/cosign/v3](https://github.com/sigstore/cosign) | `3.0.6` | `3.1.3` | | [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.10.8` | `1.10.9` | | [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.4` | `1.10.2` | | [oras.land/oras-go/v2](https://github.com/oras-project/oras-go) | `2.6.1` | `2.6.2` | Updates `github.com/cyphar/filepath-securejoin` from 0.6.1 to 0.7.0 - [Release notes](https://github.com/cyphar/filepath-securejoin/releases) - [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md) - [Commits](cyphar/filepath-securejoin@v0.6.1...v0.7.0) Updates `github.com/elazarl/goproxy` from 1.8.4 to 1.9.0 - [Release notes](https://github.com/elazarl/goproxy/releases) - [Commits](elazarl/goproxy@v1.8.4...v1.9.0) Updates `github.com/fluxcd/cli-utils` from 1.2.1 to 1.2.3 - [Release notes](https://github.com/fluxcd/cli-utils/releases) - [Commits](fluxcd/cli-utils@v1.2.1...v1.2.3) Updates `github.com/fluxcd/pkg/apis/event` from 0.27.0 to 0.28.0 - [Commits](fluxcd/pkg@git/v0.27.0...git/v0.28.0) Updates `github.com/fluxcd/pkg/apis/meta` from 1.30.0 to 1.31.0 - [Commits](fluxcd/pkg@apis/meta/v1.30.0...apis/meta/v1.31.0) Updates `github.com/fluxcd/pkg/artifact` from 0.18.0 to 0.20.0 - [Commits](fluxcd/pkg@git/v0.18.0...git/v0.20.0) Updates `github.com/fluxcd/pkg/auth` from 0.54.0 to 0.56.0 - [Commits](fluxcd/pkg@oci/v0.54.0...oci/v0.56.0) Updates `github.com/fluxcd/pkg/helmtestserver` from 0.40.0 to 0.41.0 - [Commits](fluxcd/pkg@git/v0.40.0...git/v0.41.0) Updates `github.com/fluxcd/pkg/oci` from 0.68.0 to 0.69.0 - [Commits](fluxcd/pkg@oci/v0.68.0...oci/v0.69.0) Updates `github.com/fluxcd/pkg/runtime` from 0.110.0 to 0.111.0 - [Commits](fluxcd/pkg@runtime/v0.110.0...runtime/v0.111.0) Updates `github.com/go-git/go-billy/v5` from 5.9.0 to 5.9.1 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.9.0...v5.9.1) Updates `github.com/go-git/go-git/v5` from 5.19.1 to 5.19.2 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.19.1...v5.19.2) Updates `github.com/miekg/dns` from 1.1.72 to 1.1.73 - [Commits](miekg/dns@v1.1.72...v1.1.73) Updates `github.com/minio/minio-go/v7` from 7.2.0 to 7.3.0 - [Release notes](https://github.com/minio/minio-go/releases) - [Commits](minio/minio-go@v7.2.0...v7.3.0) Updates `github.com/onsi/gomega` from 1.41.0 to 1.42.1 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.41.0...v1.42.1) Updates `github.com/prometheus/client_golang` from 1.23.2 to 1.24.1 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.23.2...v1.24.1) Updates `github.com/sigstore/cosign/v3` from 3.0.6 to 3.1.3 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v3.0.6...v3.1.3) Updates `github.com/sigstore/rekor` from 1.5.2 to 1.5.3 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.5.2...v1.5.3) Updates `github.com/sigstore/sigstore` from 1.10.8 to 1.10.9 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.10.8...v1.10.9) Updates `github.com/sigstore/sigstore-go` from 1.2.0 to 1.2.2 - [Release notes](https://github.com/sigstore/sigstore-go/releases) - [Commits](sigstore/sigstore-go@v1.2.0...v1.2.2) Updates `github.com/sirupsen/logrus` from 1.9.4 to 1.10.2 - [Release notes](https://github.com/sirupsen/logrus/releases) - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md) - [Commits](sirupsen/logrus@v1.9.4...v1.10.2) Updates `golang.org/x/crypto` from 0.53.0 to 0.55.0 - [Commits](golang/crypto@v0.53.0...v0.55.0) Updates `golang.org/x/sync` from 0.21.0 to 0.22.0 - [Commits](golang/sync@v0.21.0...v0.22.0) Updates `google.golang.org/api` from 0.283.0 to 0.284.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.283.0...v0.284.0) Updates `oras.land/oras-go/v2` from 2.6.1 to 2.6.2 - [Release notes](https://github.com/oras-project/oras-go/releases) - [Changelog](https://github.com/oras-project/oras-go/blob/main/RELEASES.md) - [Commits](oras-project/oras-go@v2.6.1...v2.6.2) --- updated-dependencies: - dependency-name: github.com/cyphar/filepath-securejoin dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/elazarl/goproxy dependency-version: 1.9.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/cli-utils dependency-version: 1.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/apis/event dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/apis/meta dependency-version: 1.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/artifact dependency-version: 0.20.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/auth dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/helmtestserver dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/oci dependency-version: 0.69.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/runtime dependency-version: 0.111.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/go-git/go-billy/v5 dependency-version: 5.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/miekg/dns dependency-version: 1.1.73 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/minio/minio-go/v7 dependency-version: 7.3.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/onsi/gomega dependency-version: 1.42.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/prometheus/client_golang dependency-version: 1.24.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/sigstore/cosign/v3 dependency-version: 3.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/sigstore/rekor dependency-version: 1.5.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/sigstore/sigstore dependency-version: 1.10.9 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/sigstore/sigstore-go dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/sirupsen/logrus dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/crypto dependency-version: 0.55.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/sync dependency-version: 0.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: google.golang.org/api dependency-version: 0.284.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: oras.land/oras-go/v2 dependency-version: 2.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-deps group with 18 updates in the / directory:
0.6.10.7.01.8.41.9.01.2.11.2.30.27.00.28.01.30.01.31.00.18.00.20.00.54.00.56.00.40.00.41.00.110.00.111.05.9.05.9.15.19.15.19.21.1.721.1.737.2.07.3.01.23.21.24.13.0.63.1.31.10.81.10.91.9.41.10.22.6.12.6.2Updates
github.com/cyphar/filepath-securejoinfrom 0.6.1 to 0.7.0Release notes
Sourced from github.com/cyphar/filepath-securejoin's releases.
Changelog
Sourced from github.com/cyphar/filepath-securejoin's changelog.
Commits
8096a95VERSION: release v0.7.01324ccbmerge #101 into cyphar/filepath-securejoin:maindd8f0bbdeps: bump to cyphar.com/go-pathrs@v0.2.5c9a7725gha: bump golangci-lint to v2.122e968bdMerge pull request #91 from cyphar/dependabot/github_actions/actions/download...2879148Merge pull request #90 from cyphar/dependabot/github_actions/actions/upload-a...07b805bbuild(deps): bump actions/download-artifact from 6 to 78507844build(deps): bump actions/upload-artifact from 5 to 6daef0cfMerge pull request #89 from cyphar/dependabot/github_actions/actions/checkout-695f8ea4build(deps): bump actions/checkout from 5 to 6Updates
github.com/elazarl/goproxyfrom 1.8.4 to 1.9.0Release notes
Sourced from github.com/elazarl/goproxy's releases.
Commits
6225cd3Use Go standard library to check port (#795)5e44068HTTP/2 MITM Full Support (#785)a4bf432Stream MITM response bodies (#794)3f0ac0bFix unexpected scheme edge case in MITM (#793)d435b12Fix headers overwrite when there are no trailers (#791)5497631Remove redundant certificate Leaf set starting from Go 1.23 (#789)5ba11e8fix(https): coalesce the MITM response head into a single write (#787)Updates
github.com/fluxcd/cli-utilsfrom 1.2.1 to 1.2.3Release notes
Sourced from github.com/fluxcd/cli-utils's releases.
Commits
8155c12Merge pull request #39 from fluxcd/upgrade-k8s-1.362522108Upgrade to k8s 1.36.45620149Merge pull request #37 from fluxcd/upgrade-k8s-36.21e5951fUpgrade kubernetes to 1.36.294614cdMerge pull request #36 from fluxcd/upgrade-depse7fc06fUpgrade golang.org/x/net to v0.55.0Updates
github.com/fluxcd/pkg/apis/eventfrom 0.27.0 to 0.28.0Commits
00782edMerge pull request #917 from fluxcd/test-auth-providers3976c50[RFC-0010] Add tests for auth providers182841aMerge pull request #916 from fluxcd/cache-op-label1e41450Introduce operation label for cache event metricaa3cde9Merge pull request #909 from fluxcd/auth-azure9e0e8bc[RFC-0010] Add azure auth library7eae091Merge pull request #908 from fluxcd/auth-gcp9f68942Merge pull request #907 from fluxcd/auth-awsbb7cb58Merge pull request #906 from fluxcd/auth-core45fbfee[RFC-0010] Add gcp auth libraryUpdates
github.com/fluxcd/pkg/apis/metafrom 1.30.0 to 1.31.0Commits
b98e2b0Merge pull request #1251 from fluxcd/release-main2dfcb7cPrepare for releasedd6b016Merge pull request #1253 from fluxcd/upgrade-k8s-36.22d00796Upgrade kubernetes to 1.36.2827f6c3Merge pull request #1249 from fluxcd/upgrade-go-git-providersbe6d462Upgrade go-git-providers and go-github023a357Merge pull request #1248 from fluxcd/label-2.97e8856dAdd backport label for Flux 2.9ae10469Merge pull request #1246 from fluxcd/ks-always-subst2cd36cbkustomize: add tests for empty vars with strict sub and omitted withoutUpdates
github.com/fluxcd/pkg/artifactfrom 0.18.0 to 0.20.0Commits
be8df7eMerge pull request #801 from fluxcd/k8s-1.3176035f8Update Helm to v3.15.43f5cf4cBuild with Go 1.234b90241Update dependencies to Kubernetes v1.31.00e61a3bMerge pull request #799 from fluxcd/dependabot/github_actions/ci-9f4b007c5b6bf4badbuild(deps): bump the ci group with 4 updates968f190Merge pull request #795 from fluxcd/dependabot/github_actions/ci-8fa51b1870bce8cabbuild(deps): bump the ci group across 1 directory with 8 updates7d033c1Merge pull request #798 from fluxcd/cleanup-aws-nukee98ccfaworkflow: Set aws-nuke region for cleanupUpdates
github.com/fluxcd/pkg/authfrom 0.54.0 to 0.56.0Commits
bf02f0aMerge pull request #1026 from fluxcd/storage-refactoringe2dd3d1artifact: Refactor storage package structureee36d78Merge pull request #1025 from fluxcd/controller-runtime-v0.22.1b5ab5b9Prepare release6ce90c6Add the Artifact Management SDK to readmee4f3937Update controller-runtime to v0.22.19e2ac7dMerge pull request #1024 from fluxcd/dependabot/github_actions/ci-43e651404493ac531build(deps): bump the ci group across 1 directory with 5 updates24724beMerge pull request #1023 from fluxcd/runtime-env-vars85cb1e2runtime: Add environment variablesUpdates
github.com/fluxcd/pkg/helmtestserverfrom 0.40.0 to 0.41.0Commits
cde06a5Merge pull request #1079 from fluxcd/kube-v0.35.021a1946auth: Fix Azure auth test for China and US Gov clouds125d607Prepare for release4f26e76Update dependencies to Kubernetes v0.35.098667f8Merge pull request #1069 from fluxcd/helm-4.12aea89fUpgrade Helm to v4.1.04895944Merge pull request #1077 from fluxcd/ssa-custom-stage8a98478ssa: introduce custom apply stageUpdates
github.com/fluxcd/pkg/ocifrom 0.68.0 to 0.69.0Commits
c8dd701Merge pull request #1264 from fluxcd/release-main8893563Prepare for releasef604533Merge pull request #1262 from fluxcd/fix-flux2-598649c22f0oci: fix insecure not skipping tls verificationce58928Merge pull request #1256 from fluxcd/upgrade-gitlab4ed1f12git/internal/e2e: upgrade gitlab client to v2e2882a1Merge pull request #1260 from fluxcd/fix-flux2-59814ccc4a6kustomize: load builtin schemas after reset59c882fRevert "kustomize: support merging the input OpenAPI schemas with the built-i...f739e0eMerge pull request #1258 from fluxcd/fix-flux2-5972Updates
github.com/fluxcd/pkg/runtimefrom 0.110.0 to 0.111.0Commits
b98e2b0Merge pull request #1251 from fluxcd/release-main2dfcb7cPrepare for releasedd6b016Merge pull request #1253 from fluxcd/upgrade-k8s-36.22d00796Upgrade kubernetes to 1.36.2827f6c3Merge pull request #1249 from fluxcd/upgrade-go-git-providersbe6d462Upgrade go-git-providers and go-github023a357Merge pull request #1248 from fluxcd/label-2.97e8856dAdd backport label for Flux 2.9ae10469Merge pull request #1246 from fluxcd/ks-always-subst2cd36cbkustomize: add tests for empty vars with strict sub and omitted withoutUpdates
github.com/go-git/go-billy/v5from 5.9.0 to 5.9.1Release notes
Sourced from github.com/go-git/go-billy/v5's releases.
Commits
19ea4ddMerge pull request #229 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...8923518build: Update module golang.org/x/net to v0.56.0 [SECURITY]306e011Merge pull request #230 from go-git/renovate/releases/v5.x-go-golang.org-x-te...6108d3abuild: Update module golang.org/x/text to v0.39.0 [SECURITY]f135070Merge pull request #216 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...473e72cbuild: Update module golang.org/x/net to v0.55.0 [SECURITY]Updates
github.com/go-git/go-git/v5from 5.19.1 to 5.19.2Release notes
Sourced from github.com/go-git/go-git/v5's releases.
Commits
3eeb238Merge pull request #2277 from go-git/checkout-v5008a78fgit: worktree, make the filesystem wrapper a symlink-safe boundary2263fb5Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...77b7625build: Update module golang.org/x/text to v0.39.0 [SECURITY]85ea767Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...198675abuild: Update module golang.org/x/net to v0.56.0 [SECURITY]4a0e66dMerge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment3b306efstorage: dotgit, align reference-name safety with refname_is_safef3d0cc1storage: dotgit, reject path traversal in reference names979cfe9Merge pull request #2262 from joshblum/joshblum/to-slash-v5Updates
github.com/miekg/dnsfrom 1.1.72 to 1.1.73Commits
d854399Release 1.1.73aed10f4go.mod: add tool directive to replace tools.go76c682aFix gogen diff000bd62Bump the all group with 4 updates (#1726)24ce5efBump the all group with 4 updates (#1725)fa041eeBump the all group with 3 updates (#1723)3124152MD5: remove keytag calculation (#1724)d1539a7Bump the all group with 4 updates (#1713)cd05317Shorter v2 announcementce76cb6Bump the all group with 3 updates (#1703)Updates
github.com/minio/minio-go/v7from 7.2.0 to 7.3.0Release notes
Sourced from github.com/minio/minio-go/v7's releases.
Commits
ce0e323update lib version to v7.3.02f55211rdma: build against libs3rdma, and fix the size guard's off-by-one (#2283)1e3d492feat: propagate caller context through credential providers (#2275)e7b0801Add AIStor Lifecycle Compression (#2281)b15d168build(deps): bump golang.org/x/crypto from 0.51.0 to 0.52.0 (#2280)d1e1ecdfix: return delete-marker ObjectInfo from StatObject alongside the error (#2273)f230068fix: declare aws-chunked content encoding on streaming uploads (#2277)90530cfAdd end-to-end checksum verification on GetObject (#2272)a4c24f9build(deps): bump the actions group with 2 updates (#2279)28bece5rdma: reject buffers over the 4 GiB cuObject registration limit (#2278)Updates
github.com/onsi/gomegafrom 1.41.0 to 1.42.1Release notes
Sourced from github.com/onsi/gomega's releases.
Changelog
Sourced from github.com/onsi/gomega's changelog.
Commits
ced6c1cv1.42.12beb9fbv1.42.1 (full)006cd2cbump al lthe things35ca084v1.42.0d72697bv1.42.0 (full)1f95d86add a set of claude skills as a marketplace pluginUpdates
github.com/prometheus/client_golangfrom 1.23.2 to 1.24.1Release notes
Sourced from github.com/prometheus/client_golang's releases.
... (truncated)
Changelog
Sourced from github.com/prometheus/client_golang's changelog.