search

Azure / draft

A day 0 tool for getting your app on k8s fast
MIT License
561 stars 63 forks source link

Bump the go-deps group across 1 directory with 5 updates #397

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps the go-deps group with 4 updates in the / directory: github.com/Azure/azure-sdk-for-go/sdk/azidentity, github.com/open-policy-agent/gatekeeper/v3, golang.org/x/mod and helm.sh/helm/v3.

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.8.0

1.8.0 (2024-10-08)

Other Changes

  • AzurePipelinesCredential sets an additional OIDC request header so that it receives a 401 instead of a 302 after presenting an invalid system access token
  • Allow logging of debugging headers for AzurePipelinesCredential and include them in error messages

sdk/azidentity/v1.8.0-beta.3

1.8.0-beta.3 (2024-09-17)

Features Added

  • Added ObjectID type for ManagedIdentityCredentialOptions.ID

Other Changes

  • Removed redundant content from error messages

sdk/azidentity/v1.8.0-beta.2

1.8.0-beta.2 (2024-08-06)

Breaking Changes

  • NewManagedIdentityCredential now returns an error when a user-assigned identity is specified on a platform whose managed identity API doesn't support that. ManagedIdentityCredential.GetToken() formerly logged a warning in these cases. Returning an error instead prevents the credential authenticating an unexpected identity, causing a client to act with unexpected privileges. The affected platforms are:
    • Azure Arc
    • Azure ML (when a resource ID is specified; client IDs are supported)
    • Cloud Shell
    • Service Fabric

Other Changes

  • If DefaultAzureCredential receives a non-JSON response when probing IMDS before attempting to authenticate a managed identity, it continues to the next credential in the chain instead of immediately returning an error.

sdk/azidentity/v1.8.0-beta.1

1.8.0-beta.1 (2024-07-17)

Features Added

  • Restored persistent token caching feature

Breaking Changes

These changes affect only code written against a beta version such as v1.7.0-beta.1

  • Redesigned the persistent caching API. Encryption is now required in all cases and persistent cache construction is separate from credential construction. The PersistentUserAuthentication example in the package docs has been updated to demonstrate the new API.

... (truncated)

Commits


Updates github.com/open-policy-agent/gatekeeper/v3 from 3.16.3 to 3.17.1

Release notes

Sourced from github.com/open-policy-agent/gatekeeper/v3's releases.

v3.17.1

Bug Fixes

Chores

v3.17.0

Notable Changes

Features

Bug Fixes

Documentation

Continuous Integration

Chores

... (truncated)

Commits
  • e8d5d49 chore: Prepare v3.17.1 release (#3539)
  • 766b53b fix: liniting error in gatekeeper-controller-manager-poddisruptionbudget.yaml...
  • 0cb7ef2 fix: vap error logging for rego only templates, cherry-pick (#3520) (#3525)
  • d01aa68 chore: Prepare v3.17.0 release (#3509)
  • a5e097d chore: Prepare v3.17.0-rc.1 release (#3496)
  • 916f838 fix: fixing error reporting for templates without CEL, cherry-pick (#3493) (#...
  • 3f9ba17 chore: Prepare v3.17.0-rc.0 release (#3490)
  • e23e53e chore: bump golang from af9b40f to 39b7e6e in /build/tooling (#3488)
  • b222d13 chore: Removing setting alpha flags for vap/vapb generation unless explicitly...
  • 5ef6d32 chore: bump github.com/docker/docker from 26.1.4+incompatible to 26.1.5+incom...
  • Additional commits viewable in compare view


Updates golang.org/x/exp from 0.0.0-20240416160154-fe59bbe5cc7f to 0.0.0-20240719175910-8a7402abbf56

Commits


Updates golang.org/x/mod from 0.20.0 to 0.21.0

Commits
  • 46a3137 zip: set GIT_DIR in test when using bare repositories
  • 3afcd4e go.mod: set go version to 1.22.0
  • b1d336c go.mod: update required go version to go1.22
  • See full diff in compare view


Updates helm.sh/helm/v3 from 3.14.4 to 3.16.1

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm 3.16.1

Helm v3.16.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

This release fixes a regression that is in 3.16.0.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.16.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.16.2 is the next patch release and will be on October 09, 2024
  • 3.17.0 is the next feature release and will be on January 15, 2025

Changelog

  • bumping version to 1.22.7 5a5449dc42be07001fd5771d56429132984ab3ab (Robert Sirchia)
  • Merge pull request #13327 from mattfarina/revert-11726 2cbf7fc005885cb46b60ebfcd03ff09890e43be1 (Joe Julian)

Helm v3.16.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs

... (truncated)

Commits
  • 5a5449d bumping version to 1.22.7
  • 2cbf7fc Merge pull request #13327 from mattfarina/revert-11726
  • 0d439e1 bump version to v3.16.0
  • 1ac6fce Merge pull request #13290 from helm/dependabot/go_modules/github.com/rubenv/s...
  • a585fdb Merge pull request #13291 from helm/dependabot/go_modules/github.com/cyphar/f...
  • 0d12150 Bump github.com/cyphar/filepath-securejoin from 0.2.5 to 0.3.1
  • b1f9f0c Bump github.com/rubenv/sql-migrate from 1.6.1 to 1.7.0
  • d66d435 Merge pull request #13276 from helm/dependabot/go_modules/github.com/evanphx/...
  • c1ed2e2 Merge pull request #13286 from mattfarina/bump-sprig
  • 2dc73d8 Merge pull request #13281 from giuliocalzolari/timestamp
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 1 month ago

Superseded by #401.