deps: update module github.com/Azure/azure-sdk-for-go/sdk/azidentity to v1.6.0 [SECURITY]

edgelesssys / constellation

Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.

GNU Affero General Public License v3.0

903 stars 47 forks source link

deps: update module github.com/Azure/azure-sdk-for-go/sdk/azidentity to v1.6.0 [SECURITY] #3163

Closed renovate[bot] closed 3 weeks ago

renovate[bot] commented 3 weeks ago

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/Azure/azure-sdk-for-go/sdk/azidentity	`v1.5.2` -> `v1.6.0`

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

GitHub Vulnerability Alerts

CVE-2024-35255

Azure Identity Libraries and Microsoft Authentication Library Elevation of Privilege Vulnerability

Configuration

📅 Schedule: Branch creation - "" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

[ ] If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

renovate[bot] commented 3 weeks ago

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

7 additional dependencies were updated

Details:	Package	Change
`golang.org/x/crypto`	`v0.23.0` -> `v0.24.0`
`golang.org/x/sys`	`v0.20.0` -> `v0.21.0`
`golang.org/x/text`	`v0.15.0` -> `v0.16.0`
`golang.org/x/tools`	`v0.21.0` -> `v0.21.1-0.20240508182429-e35e4ccd0d2d`
`github.com/Azure/azure-sdk-for-go/sdk/internal`	`v1.6.0` -> `v1.8.0`
`golang.org/x/net`	`v0.25.0` -> `v0.26.0`
`golang.org/x/term`	`v0.20.0` -> `v0.21.0`

netlify[bot] commented 3 weeks ago

Deploy Preview for constellation-docs canceled.

Name	Link
Latest commit	865b3aee03401cf0ad7da8d085eb7111b962bdd4
Latest deploy log	https://app.netlify.com/sites/constellation-docs/deploys/6668d08181ceec0008843d32