search

anchore / stereoscope

go library for processing container images and simulating a squash filesystem
Apache License 2.0
78 stars 43 forks source link

chore(deps): bump the go group across 1 directory with 8 updates #286

Closed dependabot[bot] closed 1 week ago

dependabot[bot] commented 2 weeks ago

Bumps the go group with 8 updates in the / directory:

Package From To
github.com/containerd/containerd 1.7.11 1.7.21
github.com/docker/cli 27.0.3+incompatible 27.2.0+incompatible
github.com/docker/docker 27.1.1+incompatible 27.2.0+incompatible
github.com/go-test/deep 1.0.8 1.1.1
github.com/google/go-containerregistry 0.19.2 0.20.2
github.com/sylabs/sif/v2 2.17.1 2.19.1
golang.org/x/crypto 0.25.0 0.26.0
github.com/docker/go-connections 0.4.0 0.5.0

Updates github.com/containerd/containerd from 1.7.11 to 1.7.21

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.21

Welcome to the v1.7.21 release of containerd!

The twenty-first patch release for containerd 1.7 contains various fixes and updates.

Highlights

  • Regenerate introspection UUID if state is empty (#10510)
  • Set stderr to empty string when using terminal on Windows (#10499)

Build and Release Toolchain

  • Move builds to Go 1.22 and add support for testing with 1.23 (#10596)

Container Runtime Interface (CRI)

  • Borrow latest wsstream from k8s v1.31.x to 1.7 (#10575)
  • Ensure the CRIAPIV1Alpha2 warning's lastOccurrence is accurate (#10571)
  • Make StopContainer idempotent (#10528)
  • Make StopPodSandbox idempotent (#10527)

Go client

  • Fix failed force deletion for tasks with PID 0 (#10523)

Runtime

  • Fix packaged runc reporting incorrect version (#10559)
  • Ensure /run/containerd gets created with correct perms (#10534)

Deprecations

  • Ensure the CRIAPIV1Alpha2 warning's lastOccurrence is accurate (#10571)
  • Update warnings for deprecated CRI config fields (#10512)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Davanum Srinivas
  • Samuel Karp
  • Sebastiaan van Stijn
  • Phil Estes
  • Maksym Pavlenko
  • Akhil Mohan
  • Chris Henzie
  • Derek McGowan
  • Kazuyoshi Kato

... (truncated)

Commits
  • 4727319 Merge pull request #10632 from chrishenzie/prepare-1.7.21
  • 975f279 Prepare release notes for v1.7.21
  • ddb856b Merge pull request #10633 from thaJeztah/1.7_downgrade_go_mod
  • d63bd84 go.mod: keep minimum go version at go1.21
  • 69ae5c0 Merge pull request #10596 from akhilerm/add-go-1.23-1.7
  • c760280 update golangci-lint to 1.60.1
  • 3b263d0 add go1.23.0, drop go1.21.x
  • ac7da2e Merge pull request #10590 from zhsj/bpo-10562-1.7
  • 09ca004 Fix TestNewBinaryIOCleanup on Go 1.23 and Linux 5.4
  • 716c7b7 Merge pull request #10575 from dims/borrow-latest-wsstream-from-k8s-v1.31.x-t...
  • Additional commits viewable in compare view


Updates github.com/docker/cli from 27.0.3+incompatible to 27.2.0+incompatible

Commits
  • 3ab4256 Merge pull request #5374 from vvoland/vendor-docker
  • 88a49df vendor: github.com/docker/docker 3ab5c7d0036c (v27.2.0-dev)
  • 5d17c29 Merge pull request #5372 from thaJeztah/27.x_backport_fix_linting_issues
  • 64b9e4c cli: rename args that collided with builtins (predeclard)
  • 4b71d0d e2e/global: fix n-constant format string in call (govet)
  • 002cfcd cli/command: fix n-constant format string in call (govet)
  • d8af781 cli/command/system: remove redundant nil-check (gosimple)
  • f042ddb Merge pull request #5371 from vvoland/vendor-docker
  • 8e94ed1 vendor: github.com/docker/docker b27de4ef1634 (v27.2.0-dev)
  • 7a82aee Merge pull request #5368 from dvdksn/27x_5360
  • Additional commits viewable in compare view


Updates github.com/docker/docker from 27.1.1+incompatible to 27.2.0+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v27.2.0

27.2.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

New

  • CLI: Add support for device-code flow login when authenticating to the official registry. docker/cli#5349
  • containerd image store: docker image ls now supports --tree flag that shows a multiplatform-aware image list. This is experimental and may change at any time without any backwards compatibility. docker/cli#5353

API

  • GET /images/json response now includes Manifests field, which contains information about the sub-manifests included in the image index. This includes things like platform-specific manifests and build attestations. The new field will only be populated if the request also sets the manifests query parameter to true.

[!WARNING]

This is experimental and may change at any time without any backward compatibility.

Bug fixes and enhancements

  • CLI: Fix issue with remote contexts over SSH where the CLI would allocate a pseudoterminal when connecting to the remote host, which causes issues in rare situations. docker/cli#5351
  • Fix an issue that prevented network creation with a --ip-range ending on a 64-bit boundary. moby/moby#48326
  • CLI: IPv6 addresses shown by docker ps in port bindings are now bracketed. docker/cli#5365
  • containerd image store: Fix early error exit from docker load in cases where unpacking the image would fail. moby/moby#48376
  • containerd image store: Fix the previous image not being persisted as dangling after docker pull. moby/moby#48380

Packaging updates

v27.2.0-rc.1

27.2.0-rc.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

... (truncated)

Commits
  • 3ab5c7d Merge pull request #48383 from vvoland/48382-27.x
  • 875e8ae vendor: github.com/containerd/containerd v1.7.21
  • 1900e4d Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only)
  • cd7746d Merge pull request #48380 from vvoland/48374-27.x
  • 2a13a38 Merge pull request #48376 from vvoland/48293-27.x
  • 9fd71f5 Merge pull request #48378 from corhere/backport-27.x/dockerd-manpage
  • ecd2b6f c8d/image: Add hostPlatformMatcher
  • d5b0342 man: support bringing your own go-md2man
  • 56c5c23 man: build dockerd man pages using make
  • 77b2eb5 Removed all mentions of "please" from docs and messages
  • Additional commits viewable in compare view


Updates github.com/go-test/deep from 1.0.8 to 1.1.1

Release notes

Sourced from github.com/go-test/deep's releases.

v1.1.1

What's Changed

New Contributors

Full Changelog: https://github.com/go-test/deep/compare/v1.1.0...v1.1.1

v1.1.0

New minor release, v1.1, that adds support for optional flags.

What's Changed

Full Changelog: https://github.com/go-test/deep/compare/v1.0.9...v1.1.0

v1.0.9

What's Changed

Full Changelog: https://github.com/go-test/deep/compare/v1.0.8...v1.0.9

Changelog

Sourced from github.com/go-test/deep's changelog.

v1.1.1 released 2024-06-23

  • Added NilPointersAreZero option: causes a nil pointer to be equal to a zero value (PR #61) (@​seveas)
  • Updated test matrix to go1.22, go1.21, and go1.20

v1.1.0 released 2022-12-09

  • Add optional flags: Equal(a, b, flags..) and FLAG_IGNORE_SLICE_ORDER (issue #28, PR #56) (@​alenkacz)

v1.0.9 released 2022-12-09

  • Fixed issue #45: Panic when comparing errors in unexported fields (PR #54) (@​seveas)
  • Fixed issue #46: Functions are handled differently from reflect.DeepEqual (PR #55) (@​countcb)
  • Updated test matrix to go1.17, go1.18, and go1.19 and moved testing to GitHub Actions
Commits
  • 9e863ff Release v1.1.1
  • dc5b2f6 Update SECURITY.md
  • 185886d Restore 100% test coverage (NilPointersAreZero case)
  • 47ae1b8 Merge pull request #61 from seveas/nil-pointers-are-zero
  • 93c35ac Merge branch 'master' into nil-pointers-are-zero
  • 2982c5c Update test matrix to latest 3 Go versions
  • 2b8252e Add an option to consider nil pointers to be equivalent to zero values
  • 95fb3b1 Merge pull request #58 from bartleyg/patch-1
  • 1127c84 fix copy pasta test
  • 7ff4e92 Update changelog for v1.1.0
  • Additional commits viewable in compare view


Updates github.com/google/go-containerregistry from 0.19.2 to 0.20.2

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.2

What's Changed

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.20.1...v0.20.2

v0.20.1

What's Changed

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.20.0...v0.20.1

v0.20.0

What's Changed

New Contributors

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.19.2...v0.20.0

Commits


Updates github.com/sylabs/sif/v2 from 2.17.1 to 2.19.1

Release notes

Sourced from github.com/sylabs/sif/v2's releases.

v2.19.1

What's Changed

Full Changelog: https://github.com/sylabs/sif/compare/v2.19.0...v2.19.1

v2.19.0

This release drops support for Go 1.21.

What's Changed

Full Changelog: https://github.com/sylabs/sif/compare/v2.18.0...v2.19.0

v2.18.0

What's Changed

Full Changelog: https://github.com/sylabs/sif/compare/v2.17.1...v2.18.0

Commits
  • 1ed3ce5 Merge pull request #384 from tri-adam/overflow-fix
  • 6f00aba fix: check descriptor capacity during SIF creation
  • c1fcc37 fix: correct the range check for descriptor IDs
  • fd8a090 Merge pull request #383 from tri-adam/golangci-lint-v1.60
  • d2a9ddc fix: address lint with golangci-lint v1.60
  • f4453b3 ci: remove deprecated exportloopref linter
  • dd77d01 chore: bump golangci-lint to v1.60
  • 518b3a3 build(deps): bump github.com/sigstore/sigstore from 1.8.4 to 1.8.8 (#381)
  • afa5a4e Merge pull request #382 from tri-adam/go-1.23
  • 9a07943 chore: bump module to Go 1.22
  • Additional commits viewable in compare view


Updates golang.org/x/crypto from 0.25.0 to 0.26.0

Commits
  • 5bcd010 go.mod: update golang.org/x dependencies
  • 3375612 ssh: add support for unpadded RSA signatures
  • bb80217 ssh: don't use dsa keys in integration tests
  • 6879722 ssh: remove go 1.21+ dependency on slices
  • e983fa2 sha3: Avo port of keccakf_amd64.s
  • 80fd972 LICENSE: update per Google Legal
  • f2bc3a6 x509roots/fallback/internal/goissue52287: delete
  • d66d9c3 x509roots/fallback: update bundle
  • See full diff in compare view


Updates github.com/docker/go-connections from 0.4.0 to 0.5.0

Commits
  • fa09c95 Merge pull request #108 from thaJeztah/carry_6
  • 7a67a58 Swap CloseRead and CloseWrite
  • 481d3d2 Merge pull request #107 from thaJeztah/drop_legacy_go
  • 9548f9f tlsconfig: remove deprecated io/ioutil
  • c564c21 drop support for go1.17 and older
  • 7cbebcf gha: update actions
  • 2cf423f tlsconfig: move allTLSVersions var
  • dca283b tlsconfig: drop support for go1.12 and older
  • 21876c5 tlsconfig: drop support for go1.6 and older
  • 4d174db tlsconfig: drop support for go1.4 and older
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 1 week ago

Superseded by #289.