SovereignCloudStack / cluster-stack-operator

The SCS Cluster Stack Operator takes care of life cycle management, configuration and provider specific tasks of Kubernetes clusters created with SCS Cluster Stacks
https://scs.community/
Apache License 2.0
7 stars 3 forks source link

:seedling: Update Builder Image group #236

Open cluster-stack-bot[bot] opened 2 days ago

cluster-stack-bot[bot] commented 2 days ago

This PR contains the following updates:

Package Type Update Change
docker.io/aquasec/trivy (source) stage minor 0.51.4 -> 0.53.0
docker.io/library/alpine stage patch 3.20.0 -> 3.20.1
golangci/golangci-lint patch v1.59.0 -> v1.59.1
helm/helm minor v3.14.1 -> v3.15.2

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

aquasecurity/trivy (docker.io/aquasec/trivy) ### [`v0.53.0`](https://togithub.com/aquasecurity/trivy/blob/HEAD/CHANGELOG.md#0530-2024-07-01) [Compare Source](https://togithub.com/aquasecurity/trivy/compare/v0.52.2...v0.53.0) ##### ⚠ BREAKING CHANGES - **k8s:** node-collector dynamic commands support ([#​6861](https://togithub.com/aquasecurity/trivy/issues/6861)) - add clean subcommand ([#​6993](https://togithub.com/aquasecurity/trivy/issues/6993)) - **aws:** Remove aws subcommand ([#​6995](https://togithub.com/aquasecurity/trivy/issues/6995)) ##### Features - add clean subcommand ([#​6993](https://togithub.com/aquasecurity/trivy/issues/6993)) ([8d0ae1f](https://togithub.com/aquasecurity/trivy/commit/8d0ae1f5de72d92a043dcd6b7c164d30e51b6047)) - Add local ImageID to SARIF metadata ([#​6522](https://togithub.com/aquasecurity/trivy/issues/6522)) ([f144e91](https://togithub.com/aquasecurity/trivy/commit/f144e912d34234f00b5a13b7a11a0019fa978b27)) - add memory cache backend ([#​7048](https://togithub.com/aquasecurity/trivy/issues/7048)) ([55ccd06](https://togithub.com/aquasecurity/trivy/commit/55ccd06df43f6ff28685f46d215ccb70f55916d2)) - **aws:** Remove aws subcommand ([#​6995](https://togithub.com/aquasecurity/trivy/issues/6995)) ([979e118](https://togithub.com/aquasecurity/trivy/commit/979e118a9e0ca8943bef9143f492d7eb1fd4d863)) - **conda:** add licenses support for `environment.yml` files ([#​6953](https://togithub.com/aquasecurity/trivy/issues/6953)) ([654217a](https://togithub.com/aquasecurity/trivy/commit/654217a65485ca0a07771ea61071977894eb4920)) - **dart:** use first version of constraint for dependencies using SDK version ([#​6239](https://togithub.com/aquasecurity/trivy/issues/6239)) ([042d6b0](https://togithub.com/aquasecurity/trivy/commit/042d6b08c283105c258a3dda98983b345a5305c3)) - **image:** Set User-Agent header for Trivy container registry requests ([#​6868](https://togithub.com/aquasecurity/trivy/issues/6868)) ([9b31697](https://togithub.com/aquasecurity/trivy/commit/9b31697274c8743d6e5a8f7a1a05daf60cd15910)) - **java:** add support for `maven-metadata.xml` files for remote snapshot repositories. ([#​6950](https://togithub.com/aquasecurity/trivy/issues/6950)) ([1f8fca1](https://togithub.com/aquasecurity/trivy/commit/1f8fca1fc77b989bb4e3ba820b297464dbdd825f)) - **java:** add support for sbt projects using sbt-dependency-lock ([#​6882](https://togithub.com/aquasecurity/trivy/issues/6882)) ([f18d035](https://togithub.com/aquasecurity/trivy/commit/f18d035ae13b281c96aa4ed69ca32e507d336e66)) - **k8s:** node-collector dynamic commands support ([#​6861](https://togithub.com/aquasecurity/trivy/issues/6861)) ([8d618e4](https://togithub.com/aquasecurity/trivy/commit/8d618e48a2f1b60c2e4c49cdd9deb8eb45c972b0)) - **misconf:** add metadata to Cloud schema ([#​6831](https://togithub.com/aquasecurity/trivy/issues/6831)) ([02d5404](https://togithub.com/aquasecurity/trivy/commit/02d540478d495416b50d7e8b187ff9f5bba41f45)) - **misconf:** add support for AWS::EC2::SecurityGroupIngress/Egress ([#​6755](https://togithub.com/aquasecurity/trivy/issues/6755)) ([55fa610](https://togithub.com/aquasecurity/trivy/commit/55fa6109cd0463fd3221aae41ca7b1d8c44ad430)) - **misconf:** API Gateway V1 support for CloudFormation ([#​6874](https://togithub.com/aquasecurity/trivy/issues/6874)) ([8491469](https://togithub.com/aquasecurity/trivy/commit/8491469f0b35bd9df706a433669f5b62239d4ef3)) - **misconf:** support of selectors for all providers for Rego ([#​6905](https://togithub.com/aquasecurity/trivy/issues/6905)) ([bc3741a](https://togithub.com/aquasecurity/trivy/commit/bc3741ae2c68cdd00fc0aef7e51985568b2eb78a)) - **php:** add installed.json file support ([#​4865](https://togithub.com/aquasecurity/trivy/issues/4865)) ([edc556b](https://togithub.com/aquasecurity/trivy/commit/edc556b85e3554c31e19b1ece189effb9ba2be12)) - **plugin:** add support for nested archives ([#​6845](https://togithub.com/aquasecurity/trivy/issues/6845)) ([622c67b](https://togithub.com/aquasecurity/trivy/commit/622c67b7647f94d0a0ca3acf711d8f847cdd8d98)) - **sbom:** migrate to `CycloneDX v1.6` ([#​6903](https://togithub.com/aquasecurity/trivy/issues/6903)) ([09e50ce](https://togithub.com/aquasecurity/trivy/commit/09e50ce6a82073ba62f1732d5aa0cd2701578693)) ##### Bug Fixes - **c:** don't skip conan files from `file-patterns` and scan `.conan2` cache dir ([#​6949](https://togithub.com/aquasecurity/trivy/issues/6949)) ([38b35dd](https://togithub.com/aquasecurity/trivy/commit/38b35dd3c804027e7a6e6a9d3c87b7ac333896c5)) - **cli:** show info message only when --scanners is available ([#​7032](https://togithub.com/aquasecurity/trivy/issues/7032)) ([e9fc3e3](https://togithub.com/aquasecurity/trivy/commit/e9fc3e3397564512038ddeca2adce0efcb3f93c5)) - **cyclonedx:** trim non-URL info for `advisory.url` ([#​6952](https://togithub.com/aquasecurity/trivy/issues/6952)) ([417212e](https://togithub.com/aquasecurity/trivy/commit/417212e0930aa52a27ebdc1b9370d2943ce0f8fa)) - **debian:** take installed files from the origin layer ([#​6849](https://togithub.com/aquasecurity/trivy/issues/6849)) ([089b953](https://togithub.com/aquasecurity/trivy/commit/089b953462260f01c40bdf588b2568ae0ef658bc)) - **image:** parse `image.inspect.Created` field only for non-empty values ([#​6948](https://togithub.com/aquasecurity/trivy/issues/6948)) ([0af5730](https://togithub.com/aquasecurity/trivy/commit/0af5730cbe56686417389c2fad643c1bdbb33999)) - **license:** return license separation using separators `,`, `or`, etc. ([#​6916](https://togithub.com/aquasecurity/trivy/issues/6916)) ([52f7aa5](https://togithub.com/aquasecurity/trivy/commit/52f7aa54b520a90a19736703f8ea63cc20fab104)) - **misconf:** fix caching of modules in subdirectories ([#​6814](https://togithub.com/aquasecurity/trivy/issues/6814)) ([0bcfedb](https://togithub.com/aquasecurity/trivy/commit/0bcfedbcaa9bbe30ee5ecade5b98e9ce3cc54c9b)) - **misconf:** fix parsing of engine links and frameworks ([#​6937](https://togithub.com/aquasecurity/trivy/issues/6937)) ([ec68c9a](https://togithub.com/aquasecurity/trivy/commit/ec68c9ab4580d057720179173d58734402c92af4)) - **misconf:** handle source prefix to ignore ([#​6945](https://togithub.com/aquasecurity/trivy/issues/6945)) ([c3192f0](https://togithub.com/aquasecurity/trivy/commit/c3192f061d7e84eaf38df8df7c879dc00b4ca137)) - **misconf:** parsing numbers without fraction as int ([#​6834](https://togithub.com/aquasecurity/trivy/issues/6834)) ([8141a13](https://togithub.com/aquasecurity/trivy/commit/8141a137ba50b553a9da877d95c7ccb491d041c6)) - **nodejs:** fix infinite loop when package link from `package-lock.json` file is broken ([#​6858](https://togithub.com/aquasecurity/trivy/issues/6858)) ([cf5aa33](https://togithub.com/aquasecurity/trivy/commit/cf5aa336e660e4c98481ebf8d15dd4e54c38581e)) - **nodejs:** fix infinity loops for `pnpm` with cyclic imports ([#​6857](https://togithub.com/aquasecurity/trivy/issues/6857)) ([7d083bc](https://togithub.com/aquasecurity/trivy/commit/7d083bc890eccc3bf32765c6d7e922cab2e2ef94)) - **plugin:** respect `--insecure` ([#​7022](https://togithub.com/aquasecurity/trivy/issues/7022)) ([3d02a31](https://togithub.com/aquasecurity/trivy/commit/3d02a31b44924f9e2495aae087f7ca9de3314db4)) - **purl:** add missed os types ([#​6955](https://togithub.com/aquasecurity/trivy/issues/6955)) ([2d85a00](https://togithub.com/aquasecurity/trivy/commit/2d85a003b22298d1101f84559f7c6b470f2b3909)) - **python:** compare pkg names from `poetry.lock` and `pyproject.toml` in lowercase ([#​6852](https://togithub.com/aquasecurity/trivy/issues/6852)) ([faa9d92](https://togithub.com/aquasecurity/trivy/commit/faa9d92cfeb8d924deda2dac583b6c97099c08d9)) - **sbom:** don't overwrite `srcEpoch` when decoding SBOM files ([#​6866](https://togithub.com/aquasecurity/trivy/issues/6866)) ([04af59c](https://togithub.com/aquasecurity/trivy/commit/04af59c2906bcfc7f7970b4e8f45a90f04313170)) - **sbom:** fix panic when scanning SBOM file without root component into SBOM format ([#​7051](https://togithub.com/aquasecurity/trivy/issues/7051)) ([3d4ae8b](https://togithub.com/aquasecurity/trivy/commit/3d4ae8b5be94cd9b00badeece8d86c2258b2cd90)) - **sbom:** take pkg name from `purl` for maven pkgs ([#​7008](https://togithub.com/aquasecurity/trivy/issues/7008)) ([a76e328](https://togithub.com/aquasecurity/trivy/commit/a76e3286c413de3dec55394fb41dd627dfee37ae)) - **sbom:** use `purl` for `bitnami` pkg names ([#​6982](https://togithub.com/aquasecurity/trivy/issues/6982)) ([7eabb92](https://togithub.com/aquasecurity/trivy/commit/7eabb92ec2e617300433445718be07ac74956454)) - **sbom:** use package UIDs for uniqueness ([#​7042](https://togithub.com/aquasecurity/trivy/issues/7042)) ([14d71ba](https://togithub.com/aquasecurity/trivy/commit/14d71ba63c39e51dd4179ba2d6002b46e1816e90)) - **secret:** `Asymmetric Private Key` shouldn't start with space ([#​6867](https://togithub.com/aquasecurity/trivy/issues/6867)) ([bb26445](https://togithub.com/aquasecurity/trivy/commit/bb26445e3df198df77930329f532ac5ab7a67af2)) - **suse:** Add SLES 15.6 and Leap 15.6 ([#​6964](https://togithub.com/aquasecurity/trivy/issues/6964)) ([5ee4e9d](https://togithub.com/aquasecurity/trivy/commit/5ee4e9d30ea814f60fd5705361cabf2e83a47a78)) - use embedded when command path not found ([#​7037](https://togithub.com/aquasecurity/trivy/issues/7037)) ([137c916](https://togithub.com/aquasecurity/trivy/commit/137c9164238ffd989a0c5ed24f23a55bbf341f6e)) ### [`v0.52.2`](https://togithub.com/aquasecurity/trivy/releases/tag/v0.52.2) [Compare Source](https://togithub.com/aquasecurity/trivy/compare/v0.52.1...v0.52.2) #### Changelog - [`8709d4f`](https://togithub.com/aquasecurity/trivy/commit/8709d4f9c) release: v0.52.2 \[release/v0.52] ([#​6896](https://togithub.com/aquasecurity/trivy/issues/6896)) - [`a4b8ad7`](https://togithub.com/aquasecurity/trivy/commit/a4b8ad767) ci: use `ubuntu-latest-m` runner \[backport: release/v0.52] ([#​6933](https://togithub.com/aquasecurity/trivy/issues/6933)) - [`2b711bc`](https://togithub.com/aquasecurity/trivy/commit/2b711bc26) chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 \[backport: release/v0.52] ([#​6919](https://togithub.com/aquasecurity/trivy/issues/6919)) - [`191d31e`](https://togithub.com/aquasecurity/trivy/commit/191d31ef8) test: bump docker API to 1.45 \[backport: release/v0.52] ([#​6922](https://togithub.com/aquasecurity/trivy/issues/6922)) - [`3f5874c`](https://togithub.com/aquasecurity/trivy/commit/3f5874c8a) ci: bump `github.com/goreleaser/goreleaser` to `v2.0.0` \[backport: release/v0.52] ([#​6893](https://togithub.com/aquasecurity/trivy/issues/6893)) - [`8f8c76a`](https://togithub.com/aquasecurity/trivy/commit/8f8c76a2a) fix(debian): take installed files from the origin layer \[backport: release/v0.52] ([#​6892](https://togithub.com/aquasecurity/trivy/issues/6892)) ### [`v0.52.1`](https://togithub.com/aquasecurity/trivy/releases/tag/v0.52.1) [Compare Source](https://togithub.com/aquasecurity/trivy/compare/v0.52.0...v0.52.1) #### Changelog - [`a3caf06`](https://togithub.com/aquasecurity/trivy/commit/a3caf0658) release: v0.52.1 \[release/v0.52] ([#​6877](https://togithub.com/aquasecurity/trivy/issues/6877)) - [`01dbb42`](https://togithub.com/aquasecurity/trivy/commit/01dbb42ae) fix(nodejs): fix infinite loop when package link from `package-lock.json` file is broken \[backport: release/v0.52] ([#​6888](https://togithub.com/aquasecurity/trivy/issues/6888)) - [`f186d22`](https://togithub.com/aquasecurity/trivy/commit/f186d22bf) fix(sbom): don't overwrite `srcEpoch` when decoding SBOM files \[backport: release/v0.52] ([#​6881](https://togithub.com/aquasecurity/trivy/issues/6881)) - [`093c0ae`](https://togithub.com/aquasecurity/trivy/commit/093c0ae02) fix(python): compare pkg names from `poetry.lock` and `pyproject.toml` in lowercase \[backport: release/v0.52] ([#​6878](https://togithub.com/aquasecurity/trivy/issues/6878)) - [`6bfda76`](https://togithub.com/aquasecurity/trivy/commit/6bfda7602) Merge pull request [#​6879](https://togithub.com/aquasecurity/trivy/issues/6879) from aquasecurity/backport-pr-6864-to-release/v0.52 - [`53850c8`](https://togithub.com/aquasecurity/trivy/commit/53850c8b2) docs: explain how VEX is applied ([#​6864](https://togithub.com/aquasecurity/trivy/issues/6864)) - [`2211962`](https://togithub.com/aquasecurity/trivy/commit/221196202) Merge pull request [#​6875](https://togithub.com/aquasecurity/trivy/issues/6875) from aquasecurity/backport-pr-6857-to-release/v0.52 - [`a614b69`](https://togithub.com/aquasecurity/trivy/commit/a614b693d) fix(nodejs): fix infinity loops for `pnpm` with cyclic imports ([#​6857](https://togithub.com/aquasecurity/trivy/issues/6857)) ### [`v0.52.0`](https://togithub.com/aquasecurity/trivy/blob/HEAD/CHANGELOG.md#0520-2024-06-03) [Compare Source](https://togithub.com/aquasecurity/trivy/compare/v0.51.4...v0.52.0) ##### Features - Add Julia language analyzer support ([#​5635](https://togithub.com/aquasecurity/trivy/issues/5635)) ([fecafb1](https://togithub.com/aquasecurity/trivy/commit/fecafb1fc5bb129c7485342a0775f0dd8bedd28e)) - add support for plugin index ([#​6674](https://togithub.com/aquasecurity/trivy/issues/6674)) ([26faf8f](https://togithub.com/aquasecurity/trivy/commit/26faf8f3f04b1c5f9f81c03ffc6b2008732207e2)) - **misconf:** Add support for deprecating a check ([#​6664](https://togithub.com/aquasecurity/trivy/issues/6664)) ([88702cf](https://togithub.com/aquasecurity/trivy/commit/88702cfd5918b093defc5b5580f7cbf16f5f2417)) - **misconf:** add Terraform 'removed' block to schema ([#​6640](https://togithub.com/aquasecurity/trivy/issues/6640)) ([b7a0a13](https://togithub.com/aquasecurity/trivy/commit/b7a0a131a03ed49c08d3b0d481bc9284934fd6e1)) - **misconf:** register builtin Rego funcs from trivy-checks ([#​6616](https://togithub.com/aquasecurity/trivy/issues/6616)) ([7c22ee3](https://togithub.com/aquasecurity/trivy/commit/7c22ee3df5ee51beb90e44428a99541b3d19ab98)) - **misconf:** resolve tf module from OpenTofu compatible registry ([#​6743](https://togithub.com/aquasecurity/trivy/issues/6743)) ([ac74520](https://togithub.com/aquasecurity/trivy/commit/ac7452009bf7ca0fa8ee1de8807c792eabad405a)) - **misconf:** support for VPC resources for inbound/outbound rules ([#​6779](https://togithub.com/aquasecurity/trivy/issues/6779)) ([349caf9](https://togithub.com/aquasecurity/trivy/commit/349caf96bc3dd81551d488044f1adfdb947f39fb)) - **misconf:** support symlinks inside of Helm archives ([#​6621](https://togithub.com/aquasecurity/trivy/issues/6621)) ([4eae37c](https://togithub.com/aquasecurity/trivy/commit/4eae37c52b035b3576361c12f70d3d9517d0a73c)) - **nodejs:** add v9 pnpm lock file support ([#​6617](https://togithub.com/aquasecurity/trivy/issues/6617)) ([1e08648](https://togithub.com/aquasecurity/trivy/commit/1e0864842e32a709941d4b4e8f521602bcee684d)) - **plugin:** specify plugin version ([#​6683](https://togithub.com/aquasecurity/trivy/issues/6683)) ([d6dc567](https://togithub.com/aquasecurity/trivy/commit/d6dc56732babbc9d7f788c280a768d8648aa093d)) - **python:** add license support for `requirement.txt` files ([#​6782](https://togithub.com/aquasecurity/trivy/issues/6782)) ([29615be](https://togithub.com/aquasecurity/trivy/commit/29615be85e8bfeaf5a0cd51829b1898c55fa4274)) - **python:** add line number support for `requirement.txt` files ([#​6729](https://togithub.com/aquasecurity/trivy/issues/6729)) ([2bc54ad](https://togithub.com/aquasecurity/trivy/commit/2bc54ad2752aba5de4380cb92c13b09c0abefd73)) - **report:** Include licenses and secrets filtered by rego to ModifiedFindings ([#​6483](https://togithub.com/aquasecurity/trivy/issues/6483)) ([fa3cf99](https://togithub.com/aquasecurity/trivy/commit/fa3cf993eace4be793f85907b42365269c597b91)) - **vex:** improve relationship support in CSAF VEX ([#​6735](https://togithub.com/aquasecurity/trivy/issues/6735)) ([a447f6b](https://togithub.com/aquasecurity/trivy/commit/a447f6ba94b6f8b14177dc5e4369a788e2020d90)) - **vex:** support non-root components for products in OpenVEX ([#​6728](https://togithub.com/aquasecurity/trivy/issues/6728)) ([9515695](https://togithub.com/aquasecurity/trivy/commit/9515695d45e9b5c20890e27e21e3ab45bfd4ce5f)) ##### Bug Fixes - clean up golangci lint configuration ([#​6797](https://togithub.com/aquasecurity/trivy/issues/6797)) ([62de6f3](https://togithub.com/aquasecurity/trivy/commit/62de6f3feba6e4c56ad3922441d5b0f150c3d6b7)) - **cli:** always output fatal errors to stderr ([#​6827](https://togithub.com/aquasecurity/trivy/issues/6827)) ([c2b9132](https://togithub.com/aquasecurity/trivy/commit/c2b9132a7e933a68df4cc0eb86aab23719ded1b5)) - close APKINDEX archive file ([#​6672](https://togithub.com/aquasecurity/trivy/issues/6672)) ([5caf437](https://togithub.com/aquasecurity/trivy/commit/5caf4377f3a7fcb1f6e1a84c67136ae62d100be3)) - close settings.xml ([#​6768](https://togithub.com/aquasecurity/trivy/issues/6768)) ([9c3e895](https://togithub.com/aquasecurity/trivy/commit/9c3e895fcb0852c00ac03ed21338768f76b5273b)) - close testfile ([#​6830](https://togithub.com/aquasecurity/trivy/issues/6830)) ([aa0c413](https://togithub.com/aquasecurity/trivy/commit/aa0c413814e8915b38d2285c6a8ba5bc3f0705b4)) - **conda:** add support `pip` deps for `environment.yml` files ([#​6675](https://togithub.com/aquasecurity/trivy/issues/6675)) ([150a773](https://togithub.com/aquasecurity/trivy/commit/150a77313e980cd63797a89a03afcbc97b285f38)) - **go:** add only non-empty root modules for `gobinaries` ([#​6710](https://togithub.com/aquasecurity/trivy/issues/6710)) ([c96f2a5](https://togithub.com/aquasecurity/trivy/commit/c96f2a5b3de820da37e14594dd537c3b0949ae9c)) - **go:** include only `.version`|`.ver` (no prefixes) ldflags for `gobinaries` ([#​6705](https://togithub.com/aquasecurity/trivy/issues/6705)) ([afb4f9d](https://togithub.com/aquasecurity/trivy/commit/afb4f9dc4730671ba004e1734fa66422c4c86dad)) - Golang version parsing from binaries w/GOEXPERIMENT ([#​6696](https://togithub.com/aquasecurity/trivy/issues/6696)) ([696f2ae](https://togithub.com/aquasecurity/trivy/commit/696f2ae0ecdd4f90303f41249924a09ace70dd78)) - include packages unless it is not needed ([#​6765](https://togithub.com/aquasecurity/trivy/issues/6765)) ([56dbe1f](https://togithub.com/aquasecurity/trivy/commit/56dbe1f6768fe67fbc1153b74fde0f83eaa1b281)) - **misconf:** don't shift ignore rule related to code ([#​6708](https://togithub.com/aquasecurity/trivy/issues/6708)) ([39a746c](https://togithub.com/aquasecurity/trivy/commit/39a746c77837f873e87b81be40676818030f44c5)) - **misconf:** skip Rego errors with a nil location ([#​6638](https://togithub.com/aquasecurity/trivy/issues/6638)) ([a2c522d](https://togithub.com/aquasecurity/trivy/commit/a2c522ddb229f049999c4ce74ef75a0e0f9fdc62)) - **misconf:** skip Rego errors with a nil location ([#​6666](https://togithub.com/aquasecurity/trivy/issues/6666)) ([a126e10](https://togithub.com/aquasecurity/trivy/commit/a126e1075a44ef0e40c0dc1e214d1c5955f80242)) - node-collector high and critical cves ([#​6707](https://togithub.com/aquasecurity/trivy/issues/6707)) ([ff32deb](https://togithub.com/aquasecurity/trivy/commit/ff32deb7bf9163c06963f557228260b3b8c161ed)) - **plugin:** initialize logger ([#​6836](https://togithub.com/aquasecurity/trivy/issues/6836)) ([728e77a](https://togithub.com/aquasecurity/trivy/commit/728e77a7261dc3fcda1e61e79be066c789bbba0c)) - **python:** add package name and version validation for `requirements.txt` files. ([#​6804](https://togithub.com/aquasecurity/trivy/issues/6804)) ([ea3a124](https://togithub.com/aquasecurity/trivy/commit/ea3a124fc7162c30c7f1a59bdb28db0b3c8bb86d)) - **report:** hide empty tables if all vulns has been filtered ([#​6352](https://togithub.com/aquasecurity/trivy/issues/6352)) ([3d388d8](https://togithub.com/aquasecurity/trivy/commit/3d388d8552ef42d4d54176309a38c1879008527b)) - **sbom:** fix panic for `convert` mode when scanning json file derived from sbom file ([#​6808](https://togithub.com/aquasecurity/trivy/issues/6808)) ([f92ea09](https://togithub.com/aquasecurity/trivy/commit/f92ea096856c7c262b05bd4d31c62689ebafac82)) - use of specified context to obtain cluster name ([#​6645](https://togithub.com/aquasecurity/trivy/issues/6645)) ([39ebed4](https://togithub.com/aquasecurity/trivy/commit/39ebed45f8c218509d264bd3f3ca548fc33d2b3a)) ##### Performance Improvements - **misconf:** parse rego input once ([#​6615](https://togithub.com/aquasecurity/trivy/issues/6615)) ([67c6b1d](https://togithub.com/aquasecurity/trivy/commit/67c6b1d473999003d682bdb42657bbf3a4a69a9c))
golangci/golangci-lint (golangci/golangci-lint) ### [`v1.59.1`](https://togithub.com/golangci/golangci-lint/blob/HEAD/CHANGELOG.md#v1591) [Compare Source](https://togithub.com/golangci/golangci-lint/compare/v1.59.0...v1.59.1) 1. Updated linters - `go-errorlint`: from 1.5.1 to 1.5.2 - `gomnd`: deprecated configuration compatibility - `intrange`: add `style` preset - `misspell`: from 0.5.1 to 0.6.0 - `sloglint`: from 0.7.0 to 0.7.1 - `testifylint`: from 1.3.0 to 1.3.1 - `unparam`: bump to HEAD - `usestdlibvars`: from 1.25.0 to 1.26.0 2. Fixes - SARIF: init empty result slice - SARIF: issue column >= 1 3. Documentation - update `revive` configuration
helm/helm (helm/helm) ### [`v3.15.2`](https://togithub.com/helm/helm/releases/tag/v3.15.2): Helm v3.15.2 [Compare Source](https://togithub.com/helm/helm/compare/v3.15.1...v3.15.2) Helm v3.15.2 is a security (patch) release. Users are strongly recommended to update to this release. The community keeps growing, and we'd love to see you there! - Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com): - for questions and just to hang out - for discussing PRs, code, and bugs - Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom.us/j/696660622) - Test, debug, and contribute charts: [ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0) #### Installation and Upgrading Download Helm v3.15.2. The common platform binaries are here: - [MacOS amd64](https://get.helm.sh/helm-v3.15.2-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.2-darwin-amd64.tar.gz.sha256sum) / e99a9266a5328cb575d81ef10247911f42d9e90c76ef6eef154c5c535565658b) - [MacOS arm64](https://get.helm.sh/helm-v3.15.2-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.2-darwin-arm64.tar.gz.sha256sum) / 30143dabc1da9d32c7d6c589fad04b1f1ecc73841393d5823fa21c5d7f5bf8f6) - [Linux amd64](https://get.helm.sh/helm-v3.15.2-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.2-linux-amd64.tar.gz.sha256sum) / 2694b91c3e501cff57caf650e639604a274645f61af2ea4d601677b746b44fe2) - [Linux arm](https://get.helm.sh/helm-v3.15.2-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.2-linux-arm.tar.gz.sha256sum) / 2b28fda1d8c6f087011bc7ec820051a13409dadce8385529f306476632e24e85) - [Linux arm64](https://get.helm.sh/helm-v3.15.2-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.2-linux-arm64.tar.gz.sha256sum) / adcf07b08484b52508e5cbc8b5f4b0b0db50342f7bc487ecd88b8948b680e6a7) - [Linux i386](https://get.helm.sh/helm-v3.15.2-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.2-linux-386.tar.gz.sha256sum) / 8e0bb5a08c7c227a8e285026b6283726ddc0e1f406e2af4d4d600fa1dd85c21e) - [Linux ppc64le](https://get.helm.sh/helm-v3.15.2-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.2-linux-ppc64le.tar.gz.sha256sum) / 9d95528fb797f6429f7f9b6dee0cf87bf8c71f6470e1db4a51e844c169c285a3) - [Linux s390x](https://get.helm.sh/helm-v3.15.2-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.2-linux-s390x.tar.gz.sha256sum) / 5b42bc3d08fd0ffaf4f9ed810f28464f52ec4ea431b809c7179071d76f3d6f16) - [Linux riscv64](https://get.helm.sh/helm-v3.15.2-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.2-linux-riscv64.tar.gz.sha256sum) / 2998bae9971a55f862c21bff337c325cb6a44f28ef76e11bffc93d16989e11e6) - [Windows amd64](https://get.helm.sh/helm-v3.15.2-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v3.15.2-windows-amd64.zip.sha256sum) / cbf40b79fa2a7dbd6e24201f8660b56261d10d6e7b5cadc3ff78100fb45b3c69) This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E ` and can be found at [@​mattfarina](https://togithub.com/mattfarina) [keybase account](https://keybase.io/mattfarina). Please use the attached signatures for verifying this release using `gpg`. The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3) on any system with `bash`. #### What's Next - 3.15.3 will contain only bug fixes and be released on July 10, 2024. - 3.16.0 is the next feature release and will be on September 11, 2024. #### Changelog - fix: wrong cli description [`1a500d5`](https://togithub.com/helm/helm/commit/1a500d5625419a524fdae4b33de351cc4f58ec35) (yyzxw) - fix typo in load_plugins.go [`70b225c`](https://togithub.com/helm/helm/commit/70b225c9abc014cfeb73f7c9f506b0e73e912b61) (yxxhero) - fix docs of DeployedAll [`b3640f1`](https://togithub.com/helm/helm/commit/b3640f196a2cf77136ab01295bffe76fa184991d) (Daniel Strobusch) - Bump github.com/docker/docker [`46e2ba0`](https://togithub.com/helm/helm/commit/46e2ba0341d43e19493b2f90c86126da8ad8a64e) (dependabot\[bot]) - bump oras minor version [`fb311d3`](https://togithub.com/helm/helm/commit/fb311d331f66f7f9153b5d0c7aa07a77bc9528ca) (Austin Abro) - feat(load.go): add warning on requirements.lock [`23552a7`](https://togithub.com/helm/helm/commit/23552a7de6f45aacec47bc2bfe70de02b9d7ab70) (Aaron U'Ren) ### [`v3.15.1`](https://togithub.com/helm/helm/releases/tag/v3.15.1): Helm v3.15.1 [Compare Source](https://togithub.com/helm/helm/compare/v3.15.0...v3.15.1) Helm v3.15.1 is a patch release. The Helm application source is the same as 3.15.0. The 3.15.0 builds stated the wrong version when running `helm version`. Instead of the release number it had the release candidate version which pointed to the same revision of the source. The community keeps growing, and we'd love to see you there! - Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com): - for questions and just to hang out - for discussing PRs, code, and bugs - Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom.us/j/696660622) - Test, debug, and contribute charts: [ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0) #### Installation and Upgrading Download Helm v3.15.1. The common platform binaries are here: - [MacOS amd64](https://get.helm.sh/helm-v3.15.1-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.1-darwin-amd64.tar.gz.sha256sum) / 5fdc60e090d183113f9fa0ae9dd9d12f0c1462b9ded286370f84e340f84bd676) - [MacOS arm64](https://get.helm.sh/helm-v3.15.1-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.1-darwin-arm64.tar.gz.sha256sum) / 4b04ede5ab9bb226c9b198c94ce12818f0b0e302193defd66970b45fc341f6e7) - [Linux amd64](https://get.helm.sh/helm-v3.15.1-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.1-linux-amd64.tar.gz.sha256sum) / 7b20e7791c04ea71e7fe0cbe11f1a8be4a55a692898b57d9db28f3b0c1d52f11) - [Linux arm](https://get.helm.sh/helm-v3.15.1-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.1-linux-arm.tar.gz.sha256sum) / fa7a8b472c8f311ac618a231218511efeafad306781d11ad68976e0461074b0e) - [Linux arm64](https://get.helm.sh/helm-v3.15.1-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.1-linux-arm64.tar.gz.sha256sum) / b4c5519b18f01dd2441f5e09497913dc1da1a1eec209033ae792a8d45b9e0e86) - [Linux i386](https://get.helm.sh/helm-v3.15.1-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.1-linux-386.tar.gz.sha256sum) / 4f8cb966bac96a186f0790a7c4528dd0278664f82fba3643aa4b37f98cf9e76b) - [Linux ppc64le](https://get.helm.sh/helm-v3.15.1-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.1-linux-ppc64le.tar.gz.sha256sum) / 0bfe2ff8b29c1f26b0484261c0fe0d041188b2e1aa5da8e461e44083bbf655a3) - [Linux s390x](https://get.helm.sh/helm-v3.15.1-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.1-linux-s390x.tar.gz.sha256sum) / 4a5314689787332d010ae782a6c00804fb83a53238f7ff7c9837c3f797ff1473) - [Linux riscv64](https://get.helm.sh/helm-v3.15.1-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.1-linux-riscv64.tar.gz.sha256sum) / 1c49f1213c68649842c81e1806c518661aa2e466aa1c6bf1d0ac3710f554a563) - [Windows amd64](https://get.helm.sh/helm-v3.15.1-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v3.15.1-windows-amd64.zip.sha256sum) / 8ebe6d353f0fbc7e51861a676ba1c14af9efb3443ae2c78eb91946a756b93a9a) This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E ` and can be found at [@​mattfarina](https://togithub.com/mattfarina) [keybase account](https://keybase.io/mattfarina). Please use the attached signatures for verifying this release using `gpg`. The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3) on any system with `bash`. #### What's Next - 3.15.2 is the next patch release and will be on June 12, 2024. - 3.16.0 is the next feature release and will be on September 11, 2024. #### Changelog - Fixing build issue where wrong version is used [`e211f2a`](https://togithub.com/helm/helm/commit/e211f2aa62992bd72586b395de50979e31231829) (Matt Farina) ### [`v3.15.0`](https://togithub.com/helm/helm/releases/tag/v3.15.0): Helm v3.15.0 [Compare Source](https://togithub.com/helm/helm/compare/v3.14.4...v3.15.0) Helm v3.15.0 is a feature release. Users are encouraged to upgrade for the best experience. The community keeps growing, and we'd love to see you there! - Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com): - for questions and just to hang out - for discussing PRs, code, and bugs - Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom.us/j/696660622) - Test, debug, and contribute charts: [ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0) #### Notable Changes - Opt-in to hiding secrets when running dry-run for install and upgrade - Added robustness to wait checks #### Installation and Upgrading Download Helm v3.15.0. The common platform binaries are here: - [MacOS amd64](https://get.helm.sh/helm-v3.15.0-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.0-darwin-amd64.tar.gz.sha256sum) / ccaee03af72e5dc168ae9b9e3267e2b461b0ebb7a77849048f4567286158777d) - [MacOS arm64](https://get.helm.sh/helm-v3.15.0-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.0-darwin-arm64.tar.gz.sha256sum) / 020df10fd29b0791f39aa5719d2926a995f78c1a2a7487923ca26485a0565909) - [Linux amd64](https://get.helm.sh/helm-v3.15.0-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.0-linux-amd64.tar.gz.sha256sum) / a74747ac40777b86d3ff6f1be201504bba65ca46cd68b5fe25d3c394d0dcf745) - [Linux arm](https://get.helm.sh/helm-v3.15.0-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.0-linux-arm.tar.gz.sha256sum) / 614d53ab1192667facce7e8d4e884ff067e5684199a7e5223e8808abc43e927f) - [Linux arm64](https://get.helm.sh/helm-v3.15.0-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.0-linux-arm64.tar.gz.sha256sum) / c3b0281fca4c030548211dd6e9b032ee0a9fc53eab614f6acbaff631682ce808) - [Linux i386](https://get.helm.sh/helm-v3.15.0-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.0-linux-386.tar.gz.sha256sum) / 8a267c7527e3c13602feea7432209c8931f6eecd4bff5ded398d70791c74a5b7) - [Linux ppc64le](https://get.helm.sh/helm-v3.15.0-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.0-linux-ppc64le.tar.gz.sha256sum) / bcec19cdad95cae99edce046ccd8090f275e63381ccb6accb4304819fc26e004) - [Linux s390x](https://get.helm.sh/helm-v3.15.0-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.0-linux-s390x.tar.gz.sha256sum) / a3030533cceedaca4af8fb7661c7154c578ad770279bb6003e1ecd810c72077a) - [Linux riscv64](https://get.helm.sh/helm-v3.15.0-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.15.0-linux-riscv64.tar.gz.sha256sum) / 468dc90d119b2faa91036747c559285a744ed7beb8b7d74b83878da6c13e0560) - [Windows amd64](https://get.helm.sh/helm-v3.15.0-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v3.15.0-windows-amd64.zip.sha256sum) / 23f0ee9fc93d325ddbc4dfdac97c83bc00c7784016541045756cf9abb36f21dc) This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E ` and can be found at [@​mattfarina](https://togithub.com/mattfarina) [keybase account](https://keybase.io/mattfarina). Please use the attached signatures for verifying this release using `gpg`. The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3) on any system with `bash`. #### What's Next - 3.15.1 is the next patch release and will be on June 12, 2024. - 3.16.0 is the next feature release and will be on September 11, 2024. #### Changelog - Updating to k8s 1.30 [`c4e37b3`](https://togithub.com/helm/helm/commit/c4e37b39dbb341cb3f716220df9f9d306d123a58) (Matt Farina) - bump version to v3.15.0 [`d7afa3b`](https://togithub.com/helm/helm/commit/d7afa3b6b432c09a02cd07342e908ba5bed34940) (Matt Farina) - bump version to [`7743467`](https://togithub.com/helm/helm/commit/774346777c5b311251d8252cd470d56bdd23a403) (Matt Farina) - Fix namespace on kubeconfig error [`214fb6e`](https://togithub.com/helm/helm/commit/214fb6eff393f1c17890d45e9eaee86f6b37ea17) (Calvin Krist) - Update testdata PKI with keys that have validity until 3393 (Fixes [#​12880](https://togithub.com/helm/helm/issues/12880)) [`1b75d48`](https://togithub.com/helm/helm/commit/1b75d48189c2484cb5904f7996933d8d85315adb) (Dirk Müller) - chore(deps): bump golang.org/x/net from 0.17.0 to 0.23.0 [`dac23c8`](https://togithub.com/helm/helm/commit/dac23c82ce3bc05b6e72a1571bea48e424494fb0) (dependabot\[bot]) - chore(deps): bump github/codeql-action from 3.24.7 to 3.24.10 [`167d576`](https://togithub.com/helm/helm/commit/167d57676d22ea10fa7869e6f85c6fe2e46b3292) (dependabot\[bot]) - chore: remove repetitive words [`dd37787`](https://togithub.com/helm/helm/commit/dd37787ffd25419cf5f76222e682fbba47d289eb) (deterclosed) - Modified how created annotation is populated based on package creation time [`0a69a0d`](https://togithub.com/helm/helm/commit/0a69a0dea6b1dcebaaf5d5b67c9a56eade463a71) (Andrew Block) - chore(deps): bump github.com/docker/docker [`aaaf112`](https://togithub.com/helm/helm/commit/aaaf1128d2dd2ce3e119472cae0bd9da3d62eb89) (dependabot\[bot]) - chore(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 [`7f53529`](https://togithub.com/helm/helm/commit/7f53529a701830dd86d78e932e83e4f7a928e9df) (dependabot\[bot]) - Enabling hide secrets on install and upgrade dry run [`25c4738`](https://togithub.com/helm/helm/commit/25c473834e0cbb905fc8a524709fd4d5362dab11) (Matt Farina) - chore(deps): bump github/codeql-action from 3.24.6 to 3.24.7 [`ff94e93`](https://togithub.com/helm/helm/commit/ff94e9319104a58321444d7d4656917147058936) (dependabot\[bot]) - Fixing all the linting errors [`d58d7b3`](https://togithub.com/helm/helm/commit/d58d7b376265338e059ff11c71267b5a6cf504c3) (Robert Sirchia) - Add a note about --dry-run displaying secrets [`a23dd9e`](https://togithub.com/helm/helm/commit/a23dd9e3b756c12cfdaa1b2c3a023c92530c0d0a) (Matt Farina) - chore(deps): bump golang.org/x/term from 0.15.0 to 0.18.0 [`275f2ab`](https://togithub.com/helm/helm/commit/275f2ab43b86072a601d036acc6d7eb2bb501b08) (dependabot\[bot]) - Updating .gitignore [`8b424ba`](https://togithub.com/helm/helm/commit/8b424baea1e40a352acf549395e6498e63ac0aa2) (Robert Sirchia) - chore(deps): bump github/codeql-action from 3.24.5 to 3.24.6 [`e22d881`](https://togithub.com/helm/helm/commit/e22d881495fcfee6b1c4afa1d12627f3e28b54e6) (dependabot\[bot]) - chore(deps): bump github/codeql-action from 3.24.3 to 3.24.5 [`4f200fa`](https://togithub.com/helm/helm/commit/4f200fa74f4b1bc8ad7261afb30ae7e2a8f0f546) (dependabot\[bot]) - Some fixes [`764557c`](https://togithub.com/helm/helm/commit/764557c470533fa57aad99f865c9ff75a64d4163) (Matt Farina) - chore(deps): bump github/codeql-action from 3.23.1 to 3.24.3 [`5bc97b9`](https://togithub.com/helm/helm/commit/5bc97b9c4eff3d2968d3c74c64b25052140558d6) (dependabot\[bot]) - chore(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 [`e6db0ec`](https://togithub.com/helm/helm/commit/e6db0ec933582a0de2f55f8f2f1ef693739eedc0) (dependabot\[bot]) - add error messages [`8d19bcb`](https://togithub.com/helm/helm/commit/8d19bcb78aaeb489eba4ed1d68894e59c8f55876) (George Jenkins) - Fix: Ignore alias validation error for index load [`68294fd`](https://togithub.com/helm/helm/commit/68294fdae0deba2464805067228790e025207ebd) (George Jenkins) - validation fix [`8e6a514`](https://togithub.com/helm/helm/commit/8e6a5149d2e2e3beffa51d53048b2fed90d8c529) (Matt Farina) - bug: add proxy support for oci getter [`94c1dea`](https://togithub.com/helm/helm/commit/94c1deae6d5a43491c5a4e8444ecd8273a8122a1) (Ricardo Maraschini) - chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 [`cbab6d6`](https://togithub.com/helm/helm/commit/cbab6d6227969435df516dcdfcc6d29808aff094) (dependabot\[bot]) - chore(deps): bump github/codeql-action from 3.23.0 to 3.23.1 [`de332ae`](https://togithub.com/helm/helm/commit/de332ae396e1414cdc6923456cbe8a4b3af74c4e) (dependabot\[bot]) - chore(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 [`a2dd34b`](https://togithub.com/helm/helm/commit/a2dd34b3f2fe4eb8350ba168fb0943cf4ac990f9) (dependabot\[bot]) - Update architecture detection method [`57a1bb8`](https://togithub.com/helm/helm/commit/57a1bb80e5829f20125447b2734469d97858960c) (weidongkl) - chore(deps): bump github/codeql-action from 3.22.11 to 3.23.0 [`8cab7c1`](https://togithub.com/helm/helm/commit/8cab7c17f4163a5fc609f4a2f7fcdce796a4b870) (dependabot\[bot]) - chore(deps): bump github.com/DATA-DOG/go-sqlmock from 1.5.0 to 1.5.2 [`5f9533f`](https://togithub.com/helm/helm/commit/5f9533fef733c514f24a6f33f130efa6ea775c58) (dependabot\[bot]) - Improve release action [`4790bb9`](https://togithub.com/helm/helm/commit/4790bb9bcc224abee8a41f0bd8cac5880f605877) (George Jenkins) - chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 [`f980ad3`](https://togithub.com/helm/helm/commit/f980ad319c12774787c89ffaaef0f7fea0633bb3) (dependabot\[bot]) - Fix grammatical error [`c25736c`](https://togithub.com/helm/helm/commit/c25736c894ed1058c75b68fca0094c8fd953e131) (Matt Carr) - Updated for review comments [`d2cf8c6`](https://togithub.com/helm/helm/commit/d2cf8c66f1775783edbc150d1a509f58e769e75e) (MichaelMorris) - Add robustness to wait status checks [`fc74964`](https://togithub.com/helm/helm/commit/fc74964f8a039ce209966b70fa7ba0fc7ea36a9e) (MichaelMorris) - refactor: create a helper for checking if a release is uninstalled [`f908379`](https://togithub.com/helm/helm/commit/f908379f1f8e3d764b0a52dcba2d234490fc0ffc) (Alex Petrov) - fix: reinstall previously uninstalled chart with --keep-history [`9e198fa`](https://togithub.com/helm/helm/commit/9e198fa89d3c798dec1012bb4dff7107e22700d7) (Alex Petrov) ### [`v3.14.4`](https://togithub.com/helm/helm/releases/tag/v3.14.4): Helm v3.14.4 [Compare Source](https://togithub.com/helm/helm/compare/v3.14.3...v3.14.4) Helm v3.14.4 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience. The community keeps growing, and we'd love to see you there! - Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com): - for questions and just to hang out - for discussing PRs, code, and bugs - Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom.us/j/696660622) - Test, debug, and contribute charts: [ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0) #### Installation and Upgrading Download Helm v3.14.4. The common platform binaries are here: - [MacOS amd64](https://get.helm.sh/helm-v3.14.4-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.4-darwin-amd64.tar.gz.sha256sum) / 73434aeac36ad068ce2e5582b8851a286dc628eae16494a26e2ad0b24a7199f9) - [MacOS arm64](https://get.helm.sh/helm-v3.14.4-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.4-darwin-arm64.tar.gz.sha256sum) / 61e9c5455f06b2ad0a1280975bf65892e707adc19d766b0cf4e9006e3b7b4b6c) - [Linux amd64](https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.4-linux-amd64.tar.gz.sha256sum) / a5844ef2c38ef6ddf3b5a8f7d91e7e0e8ebc39a38bb3fc8013d629c1ef29c259) - [Linux arm](https://get.helm.sh/helm-v3.14.4-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.4-linux-arm.tar.gz.sha256sum) / 962297c944c06e1f275111a6e3d80e37c9e9e8fed967d4abec8efcf7fc9fb260) - [Linux arm64](https://get.helm.sh/helm-v3.14.4-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.4-linux-arm64.tar.gz.sha256sum) / 113ccc53b7c57c2aba0cd0aa560b5500841b18b5210d78641acfddc53dac8ab2) - [Linux i386](https://get.helm.sh/helm-v3.14.4-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.4-linux-386.tar.gz.sha256sum) / 2cb3ff032be1c39b7199b324d58d0ae05bc4fe49b9be6aa2fcbeb3fc03f1f9e7) - [Linux ppc64le](https://get.helm.sh/helm-v3.14.4-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.4-linux-ppc64le.tar.gz.sha256sum) / d0d625b43f6650ad376428520b2238baa2400bfedb43b2e0f24ad7247f0f59b5) - [Linux s390x](https://get.helm.sh/helm-v3.14.4-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.4-linux-s390x.tar.gz.sha256sum) / a5750d0cb1ba34ce84ab3be6382a14617130661d15dd2aa1b36630b293437936) - [Linux riscv64](https://get.helm.sh/helm-v3.14.4-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.4-linux-riscv64.tar.gz.sha256sum) / 925782b159392d52df5ebab88e04e695217325894c6a32a9a779e865b7e32411) - [Windows amd64](https://get.helm.sh/helm-v3.14.4-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v3.14.4-windows-amd64.zip.sha256sum) / 0b951db3eadd92dfe336b5a9ddb0640e5cd70d39abdbd7d3125e9fb59b22b669) This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E ` and can be found at [@​mattfarina](https://togithub.com/mattfarina) [keybase account](https://keybase.io/mattfarina). Please use the attached signatures for verifying this release using `gpg`. The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3) on any system with `bash`. #### What's Next - 3.15.0 is the next feature release and will be on May 08, 2024. #### Changelog - refactor: create a helper for checking if a release is uninstalled [`81c902a`](https://togithub.com/helm/helm/commit/81c902a123462fd4052bc5e9aa9c513c4c8fc142) (Alex Petrov) - fix: reinstall previously uninstalled chart with --keep-history [`5a11c76`](https://togithub.com/helm/helm/commit/5a11c768386dab08ff026fb1001e592ab0a033f8) (Alex Petrov) - chore: remove repetitive words [`fb3d880`](https://togithub.com/helm/helm/commit/fb3d8805f017d898f9e88667829c21874a8f6166) (deterclosed) - chore(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 [`01ac4a2`](https://togithub.com/helm/helm/commit/01ac4a2c36d49e691982f85f4243fe449876fb5d) (dependabot\[bot]) - chore(deps): bump github.com/docker/docker [`138602d`](https://togithub.com/helm/helm/commit/138602da27a6ba67564d298e7b07f5624a341b88) (dependabot\[bot]) - bug: add proxy support for oci getter [`aa7d953`](https://togithub.com/helm/helm/commit/aa7d95333d5fbc1ea9ed20cc56f011c068e004be) (Ricardo Maraschini) ### [`v3.14.3`](https://togithub.com/helm/helm/releases/tag/v3.14.3): Helm v3.14.3 [Compare Source](https://togithub.com/helm/helm/compare/v3.14.2...v3.14.3) Helm v3.14.3 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience. The community keeps growing, and we'd love to see you there! - Join the discussion in [Kubernetes Slack](https://kubernetes.slack.com): - for questions and just to hang out - for discussing PRs, code, and bugs - Hang out at the Public Developer Call: Thursday, 9:30 Pacific via [Zoom](https://zoom.us/j/696660622) - Test, debug, and contribute charts: [ArtifactHub/packages](https://artifacthub.io/packages/search?kind=0) #### Installation and Upgrading Download Helm v3.14.3. The common platform binaries are here: - [MacOS amd64](https://get.helm.sh/helm-v3.14.3-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.3-darwin-amd64.tar.gz.sha256sum) / 4d5d01a94c7d6b07e71690dc1988bf3229680284c87f4242d28c6f1cc99653be) - [MacOS arm64](https://get.helm.sh/helm-v3.14.3-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.3-darwin-arm64.tar.gz.sha256sum) / dff794152b62b7c1a9ff615d510f8657bcd7a3727c668e0d9d4955f70d5f7573) - [Linux amd64](https://get.helm.sh/helm-v3.14.3-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.3-linux-amd64.tar.gz.sha256sum) / 3c90f24e180f8c207b8a18e5ec82cb0fa49858a7a0a86e4ed52a98398681e00b) - [Linux arm](https://get.helm.sh/helm-v3.14.3-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.3-linux-arm.tar.gz.sha256sum) / d4ff88f02d6731ec5dbde86a67bf391e673d0d9e87901727fbf62372aff106ec) - [Linux arm64](https://get.helm.sh/helm-v3.14.3-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.3-linux-arm64.tar.gz.sha256sum) / 85e1573e76fa60af14ba7e9ec75db2129b6884203be866893fa0b3f7e41ccd5e) - [Linux i386](https://get.helm.sh/helm-v3.14.3-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.3-linux-386.tar.gz.sha256sum) / af89e5df5cd21efe4dcaa478b19aaf17d22820716f93c1f098b00f1b7cfe1905) - [Linux ppc64le](https://get.helm.sh/helm-v3.14.3-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.3-linux-ppc64le.tar.gz.sha256sum) / aab121ca470e2a502cda849a9b3e92eeb9a32e213b0f0a79a95a04e375d26ce7) - [Linux s390x](https://get.helm.sh/helm-v3.14.3-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.3-linux-s390x.tar.gz.sha256sum) / d64fa8aced3244b549377741dc4e2db8109e5270c0723c11b547a9da5f99ad43) - [Linux riscv64](https://get.helm.sh/helm-v3.14.3-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.3-linux-riscv64.tar.gz.sha256sum) / f9f4e68bf43632f5df29e6c9fa760813d7e3537ed91d838cfdc2f103f8442b33) - [Windows amd64](https://get.helm.sh/helm-v3.14.3-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v3.14.3-windows-amd64.zip.sha256sum) / 369c6db1c114ef2a00793e9a587db6d7b2c72a23e37fd905c8deb78e9a8f7af6) This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E ` and can be found at [@​mattfarina](https://togithub.com/mattfarina) [keybase account](https://keybase.io/mattfarina). Please use the attached signatures for verifying this release using `gpg`. The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3) on any system with `bash`. #### What's Next - 3.14.4 will contain only bug fixes and be released on April 10, 2024. - 3.15.0 is the next feature release and will be on May 08, 2024. #### Changelog - Add a note about --dry-run displaying secrets [`f03cc04`](https://togithub.com/helm/helm/commit/f03cc04caaa8f6d7c3e67cf918929150cf6f3f12) (Matt Farina) - add error messages [`1a7330f`](https://togithub.com/helm/helm/commit/1a7330fe3802beeb3f897a1c701d8a4b9c1316c5) (George Jenkins) - Fix: Ignore alias validation error for index load [`d6acc00`](https://togithub.com/helm/helm/commit/d6acc0027dca47dec40ccdd66febd0c8bcf4813f) (George Jenkins) - chore(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 [`b2738fb`](https://togithub.com/helm/helm/commit/b2738fb782d149ffa4748cb0ee78d674986d04b0) (dependabot\[bot]) - chore(deps): bump github.com/DATA-DOG/go-sqlmock from 1.5.0 to 1.5.2 [`5b0847e`](https://togithub.com/helm/helm/commit/5b0847e0e763e98bcbf8a12e8f9c5f7c11d123a1) (dependabot\[bot]) - Update architecture detection method [`7e18c39`](https://togithub.com/helm/helm/commit/7e18c39f0753c73e4660f3796f01f5b33f2552b5) (weidongkl) ### [`v3.14.2`](https://togithub.com/helm/helm/releases/tag/v3.14.2): Helm v3.14.2 [Compare Source](https://togithub.com/helm/helm/compare/v3.14.1...v3.14.2) Helm v3.14.2 is a security (patch) release. Users are strongly recommended to update to this release. A Helm contributor discovered uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content. Jakub Ciolek with AlphaSense discovered the vulnerability. #### Installation and Upgrading Download Helm v3.14.2. The common platform binaries are here: - [MacOS amd64](https://get.helm.sh/helm-v3.14.2-darwin-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-darwin-amd64.tar.gz.sha256sum) / 64c633ae194bde77b7e7b7936a2814a7417817dc8b7bb7d270bd24a7a17b8d12) - [MacOS arm64](https://get.helm.sh/helm-v3.14.2-darwin-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-darwin-arm64.tar.gz.sha256sum) / ff502fd39b06497fa3d5a51ec2ced02b9fcfdb0e9a948d315fb1b2f13ddc39fb) - [Linux amd64](https://get.helm.sh/helm-v3.14.2-linux-amd64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-amd64.tar.gz.sha256sum) / 0885a501d586c1e949e9b113bf3fb3290b0bbf74db9444a1d8c2723a143006a5) - [Linux arm](https://get.helm.sh/helm-v3.14.2-linux-arm.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-arm.tar.gz.sha256sum) / b70fb6fa2cdf0a5c782320c9d7e7b155fcaec260169218c98316bb3cf0d431d9) - [Linux arm64](https://get.helm.sh/helm-v3.14.2-linux-arm64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-arm64.tar.gz.sha256sum) / c65d6a9557bb359abc2c0d26670de850b52327dc3976ad6f9e14c298ea3e1b61) - [Linux i386](https://get.helm.sh/helm-v3.14.2-linux-386.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-386.tar.gz.sha256sum) / 0e08cd56cc952ab4646c57c5ec7cde2412c39373aec3df659a14597dd9874461) - [Linux ppc64le](https://get.helm.sh/helm-v3.14.2-linux-ppc64le.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-ppc64le.tar.gz.sha256sum) / f3bc8582ff151e619cd285d9cdf9fef1c5733ee5522d8bed2ef680ef07f87223) - [Linux s390x](https://get.helm.sh/helm-v3.14.2-linux-s390x.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-s390x.tar.gz.sha256sum) / 7bda34aa26638e5116b31385f3b781172572175bf4c1ae00c87d8b154458ed94) - [Linux riscv64](https://get.helm.sh/helm-v3.14.2-linux-riscv64.tar.gz) ([checksum](https://get.helm.sh/helm-v3.14.2-linux-riscv64.tar.gz.sha256sum) / f6278facd3e2e6af52a5f6d038f2149428d115ba2b4523edbe5889d1170e9203) - [Windows amd64](https://get.helm.sh/helm-v3.14.2-windows-amd64.zip) ([checksum](https://get.helm.sh/helm-v3.14.2-windows-amd64.zip.sha256sum) / aa094e435da74ad574f96924c37ecd0c75f0be707ac604ef97ed6021d6bc0784) This release was signed with ` 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E ` and can be found at [@​mattfarina](https://togithub.com/mattfarina) [keybase account](https://keybase.io/mattfarina). Please use the attached signatures for verifying this release using `gpg`. The [Quickstart Guide](https://helm.sh/docs/intro/quickstart/) will get you going from there. For **upgrade instructions** or detailed installation notes, check the [install guide](https://helm.sh/docs/intro/install/). You can also use a [script to install](https://raw.githubusercontent.com/helm/helm/main/scripts/get-helm-3) on any system with `bash`. #### What's Next - 3.14.3 will contain only bug fixes and be released on March 13, 2024. - 3.15.0 is the next feature release and will be on May 08, 2024.

Configuration

📅 Schedule: Branch creation - "on the first day of the month" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.