edgelesssys / constellation

Constellation is the first Confidential Kubernetes. Constellation shields entire Kubernetes clusters from the (cloud) infrastructure using confidential computing.
GNU Affero General Public License v3.0
903 stars 47 forks source link

deps: update Go dependencies #3199

Closed renovate[bot] closed 1 week ago

renovate[bot] commented 1 week ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
cloud.google.com/go/kms v1.17.1 -> v1.18.0 age adoption passing confidence
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.6.0 -> v1.7.0 age adoption passing confidence
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/network/armnetwork/v5 v5.1.1 -> v5.2.0 age adoption passing confidence
github.com/aws/aws-sdk-go v1.54.5 -> v1.54.8 age adoption passing confidence
github.com/aws/aws-sdk-go-v2/service/autoscaling v1.41.1 -> v1.42.0 age adoption passing confidence
github.com/aws/aws-sdk-go-v2/service/ec2 v1.165.1 -> v1.166.0 age adoption passing confidence
github.com/siderolabs/talos/pkg/machinery v1.7.4 -> v1.7.5 age adoption passing confidence
github.com/sigstore/sigstore v1.8.4 -> v1.8.5 age adoption passing confidence
google.golang.org/api v0.185.0 -> v0.186.0 age adoption passing confidence

[!WARNING] Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

aws/aws-sdk-go (github.com/aws/aws-sdk-go) ### [`v1.54.8`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1548-2024-06-25) [Compare Source](https://togithub.com/aws/aws-sdk-go/compare/v1.54.7...v1.54.8) \=== ##### Service Client Updates - `service/autoscaling`: Updates service API and documentation - Doc only update for Auto Scaling's TargetTrackingMetricDataQuery - `service/ec2`: Updates service API - This release is for the launch of the new u7ib-12tb.224xlarge, R8g, c7gn.metal and mac2-m1ultra.metal instance types - `service/networkmanager`: Updates service API and documentation - `service/workspaces-thin-client`: Updates service API and documentation ### [`v1.54.7`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1547-2024-06-24) [Compare Source](https://togithub.com/aws/aws-sdk-go/compare/v1.54.6...v1.54.7) \=== ##### Service Client Updates - `service/bedrock-runtime`: Updates service API - `service/customer-profiles`: Updates service API and documentation - `service/ec2`: Updates service API - Fix EC2 multi-protocol info in models. - `service/qbusiness`: Updates service API and documentation - `service/ssm`: Updates service API - Add sensitive trait to SSM IPAddress property for CloudTrail redaction - `service/workspaces-web`: Updates service API and documentation ### [`v1.54.6`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1546-2024-06-20) [Compare Source](https://togithub.com/aws/aws-sdk-go/compare/v1.54.5...v1.54.6) \=== ##### Service Client Updates - `service/bedrock-runtime`: Updates service API and documentation - `service/codeartifact`: Updates service API and documentation - `service/compute-optimizer`: Updates service API and documentation - `service/cost-optimization-hub`: Updates service API, documentation, and waiters - `service/dynamodb`: Updates service API, documentation, waiters, paginators, and examples - Doc-only update for DynamoDB. Fixed Important note in 6 Global table APIs - CreateGlobalTable, DescribeGlobalTable, DescribeGlobalTableSettings, ListGlobalTables, UpdateGlobalTable, and UpdateGlobalTableSettings. - `service/glue`: Updates service paginators - Fix Glue paginators for Jobs, JobRuns, Triggers, Blueprints and Workflows. - `service/ivs-realtime`: Updates service API, documentation, and waiters - `service/sagemaker`: Updates service API and documentation - Adds support for model references in Hub service, and adds support for cross-account access of Hubs - `service/securityhub`: Updates service API and documentation
siderolabs/talos (github.com/siderolabs/talos/pkg/machinery) ### [`v1.7.5`](https://togithub.com/siderolabs/talos/releases/tag/v1.7.5) [Compare Source](https://togithub.com/siderolabs/talos/compare/v1.7.4...v1.7.5) #### [Talos 1.7.5](https://togithub.com/siderolabs/talos/releases/tag/v1.7.5) (2024-06-21) Welcome to the v1.7.5 release of Talos! Please try out the release binaries and report any issues at https://github.com/siderolabs/talos/issues. ##### Component Updates Linux: 6.6.33 Flannel: 0.25.3 Containerd: 1.7.18 Talos is built with Go 1.22.4. ##### Contributors - Andrey Smirnov - Noel Georgi - Dmitriy Matrenichev - Marcel Richter ##### Changes
7 commits

- [@​`4773162`](https://togithub.com/siderolabs/talos/commit/47731624e) release(v1.7.5): prepare release - [@​`6d6751f`](https://togithub.com/siderolabs/talos/commit/6d6751f6a) feat: update Linux to 6.6.33, Go to 1.22.4 - [@​`2c4aa73`](https://togithub.com/siderolabs/talos/commit/2c4aa7342) chore: fix our dns server implementation - [@​`8ad20a6`](https://togithub.com/siderolabs/talos/commit/8ad20a6c1) fix: initial assignment of Hetzner Cloud Alias IP - [@​`90c3a02`](https://togithub.com/siderolabs/talos/commit/90c3a0244) feat: update Flannel to v0.25.3 - [@​`b14fe39`](https://togithub.com/siderolabs/talos/commit/b14fe3973) fix: downgrade Azure IMDS required version - [@​`fa6c852`](https://togithub.com/siderolabs/talos/commit/fa6c85259) fix: decrease maximum negative ttl for dns responses

##### Changes from siderolabs/extras
1 commit

- [siderolabs/extras@`7c627a8`](https://togithub.com/siderolabs/extras/commit/7c627a8) feat: update Go to 1.22.4

##### Changes from siderolabs/pkgs
4 commits

- [siderolabs/pkgs@`c58ed7f`](https://togithub.com/siderolabs/pkgs/commit/c58ed7f) feat: bump Go to 1.22.4 - [siderolabs/pkgs@`ab5d66b`](https://togithub.com/siderolabs/pkgs/commit/ab5d66b) feat: update Linux to 6.6.33 - [siderolabs/pkgs@`0e1002e`](https://togithub.com/siderolabs/pkgs/commit/0e1002e) feat: enable SCTP support - [siderolabs/pkgs@`e04adee`](https://togithub.com/siderolabs/pkgs/commit/e04adee) feat: update containerd to 1.7.18

##### Changes from siderolabs/tools
1 commit

- [siderolabs/tools@`6c94771`](https://togithub.com/siderolabs/tools/commit/6c94771) feat: update Go to 1.22.4

##### Dependency Changes - **github.com/docker/docker** v26.0.0 -> v26.0.2 - **github.com/miekg/dns** v1.1.58 -> v1.1.59 - **github.com/siderolabs/extras** v1.7.0-1-gbb76755 -> v1.7.0-2-g7c627a8 - **github.com/siderolabs/pkgs** v1.7.0-17-ga201d27 -> v1.7.0-21-gc58ed7f - **github.com/siderolabs/talos/pkg/machinery** v1.7.4 -> v1.7.5 - **github.com/siderolabs/tools** v1.7.0-2-g345db93 -> v1.7.0-3-g6c94771 - **google.golang.org/grpc** v1.62.1 -> v1.63.2 Previous release can be found at [v1.7.4](https://togithub.com/siderolabs/talos/releases/tag/v1.7.4) #### Images ghcr.io/siderolabs/flannel:v0.25.3 ghcr.io/siderolabs/install-cni:v1.7.0-2-g7c627a8 registry.k8s.io/coredns/coredns:v1.11.1 gcr.io/etcd-development/etcd:v3.5.13 registry.k8s.io/kube-apiserver:v1.30.1 registry.k8s.io/kube-controller-manager:v1.30.1 registry.k8s.io/kube-scheduler:v1.30.1 registry.k8s.io/kube-proxy:v1.30.1 ghcr.io/siderolabs/kubelet:v1.30.1 ghcr.io/siderolabs/installer:v1.7.5 registry.k8s.io/pause:3.8
sigstore/sigstore (github.com/sigstore/sigstore) ### [`v1.8.5`](https://togithub.com/sigstore/sigstore/releases/tag/v1.8.5) [Compare Source](https://togithub.com/sigstore/sigstore/compare/v1.8.4...v1.8.5) Major are dependencies updates ##### What's Changed - build(deps): Bump google.golang.org/api from 0.181.0 to 0.182.0 in /pkg/signature/kms/gcp in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1741](https://togithub.com/sigstore/sigstore/pull/1741) - build(deps): Bump github.com/sigstore/sigstore from 1.8.3 to 1.8.4 in /test/fuzz in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1743](https://togithub.com/sigstore/sigstore/pull/1743) - build(deps): Bump hashicorp/vault from 1.16.2 to 1.16.3 in /test/e2e in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1742](https://togithub.com/sigstore/sigstore/pull/1742) - build(deps): Bump github.com/aws/aws-sdk-go from 1.53.10 to 1.53.14 in /pkg/signature/kms/aws in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1740](https://togithub.com/sigstore/sigstore/pull/1740) - build(deps): Bump actions/dependency-review-action from 4.3.2 to 4.3.3 in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1746](https://togithub.com/sigstore/sigstore/pull/1746) - build(deps): Bump the all group in /pkg/signature/kms/azure with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1744](https://togithub.com/sigstore/sigstore/pull/1744) - build(deps): Bump the all group in /pkg/signature/kms/aws with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1745](https://togithub.com/sigstore/sigstore/pull/1745) - build(deps): Bump dexidp/dex from v2.39.1 to v2.40.0 in /test/e2e in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1748](https://togithub.com/sigstore/sigstore/pull/1748) - build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1749](https://togithub.com/sigstore/sigstore/pull/1749) - Update to latest letsencrypt/boulder. by [@​kommendorkapten](https://togithub.com/kommendorkapten) in [https://github.com/sigstore/sigstore/pull/1753](https://togithub.com/sigstore/sigstore/pull/1753) - build(deps): Bump actions/checkout from 4.1.6 to 4.1.7 in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1760](https://togithub.com/sigstore/sigstore/pull/1760) - build(deps): Bump the all group in /pkg/signature/kms/aws with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1759](https://togithub.com/sigstore/sigstore/pull/1759) - build(deps): Bump the all group in /test/e2e with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1758](https://togithub.com/sigstore/sigstore/pull/1758) - build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1756](https://togithub.com/sigstore/sigstore/pull/1756) - build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 in /pkg/signature/kms/azure in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1755](https://togithub.com/sigstore/sigstore/pull/1755) - build(deps): Bump github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7 in /pkg/signature/kms/hashivault by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1766](https://togithub.com/sigstore/sigstore/pull/1766) - build(deps): Bump the all group in /pkg/signature/kms/aws with 4 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1765](https://togithub.com/sigstore/sigstore/pull/1765) - build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1764](https://togithub.com/sigstore/sigstore/pull/1764) - build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.7.0 in /pkg/signature/kms/azure in the all group by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1762](https://togithub.com/sigstore/sigstore/pull/1762) - build(deps): Bump the all group across 1 directory with 6 updates by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/sigstore/sigstore/pull/1763](https://togithub.com/sigstore/sigstore/pull/1763) **Full Changelog**: https://github.com/sigstore/sigstore/compare/v1.8.4...v1.8.5
googleapis/google-api-go-client (google.golang.org/api) ### [`v0.186.0`](https://togithub.com/googleapis/google-api-go-client/releases/tag/v0.186.0) [Compare Source](https://togithub.com/googleapis/google-api-go-client/compare/v0.185.0...v0.186.0) ##### Features - **all:** Auto-regenerate discovery clients ([#​2641](https://togithub.com/googleapis/google-api-go-client/issues/2641)) ([72fb128](https://togithub.com/googleapis/google-api-go-client/commit/72fb1281b3bf8e70e160db39f173bf86ede9173f)) - **all:** Auto-regenerate discovery clients ([#​2644](https://togithub.com/googleapis/google-api-go-client/issues/2644)) ([20ffdd8](https://togithub.com/googleapis/google-api-go-client/commit/20ffdd800072046285b0900af690d05e2a6f9524)) - **all:** Auto-regenerate discovery clients ([#​2645](https://togithub.com/googleapis/google-api-go-client/issues/2645)) ([c1a7681](https://togithub.com/googleapis/google-api-go-client/commit/c1a768193e03af127f139d532782971275e06c18)) - **all:** Auto-regenerate discovery clients ([#​2648](https://togithub.com/googleapis/google-api-go-client/issues/2648)) ([1bac79d](https://togithub.com/googleapis/google-api-go-client/commit/1bac79d78d93ee98501f484b055ac9360cce3c21)) - **all:** Auto-regenerate discovery clients ([#​2649](https://togithub.com/googleapis/google-api-go-client/issues/2649)) ([695484b](https://togithub.com/googleapis/google-api-go-client/commit/695484ba67b06180d82a077f35b5e87681bdccd8)) - **all:** Auto-regenerate discovery clients ([#​2652](https://togithub.com/googleapis/google-api-go-client/issues/2652)) ([10c47f3](https://togithub.com/googleapis/google-api-go-client/commit/10c47f37506574b134d7e9d3b29b74aec389625f)) - **all:** Auto-regenerate discovery clients ([#​2653](https://togithub.com/googleapis/google-api-go-client/issues/2653)) ([bc370a7](https://togithub.com/googleapis/google-api-go-client/commit/bc370a705cf35e8ca19498f0a6200e91e2c8282b))

Configuration

πŸ“… Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

β™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

πŸ‘» Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.



This PR has been generated by Mend Renovate. View repository job log here.

renovate[bot] commented 1 week ago

β„Ή Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

Details:

Package Change
go 1.22.3 -> 1.22.4
cloud.google.com/go/auth v0.5.1 -> v0.6.0
github.com/google/go-containerregistry v0.19.1 -> v0.19.2
github.com/letsencrypt/boulder v0.0.0-20230907030200-6d76a0f91e1e -> v0.0.0-20240613153800-a69ba997609e
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0 -> v0.52.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 -> v0.52.0
go.opentelemetry.io/otel v1.24.0 -> v1.27.0
go.opentelemetry.io/otel/metric v1.24.0 -> v1.27.0
go.opentelemetry.io/otel/trace v1.24.0 -> v1.27.0
netlify[bot] commented 1 week ago

Deploy Preview for constellation-docs canceled.

Name Link
Latest commit 51d189fd961a9373a81092facddc1cc9e9f29bd9
Latest deploy log https://app.netlify.com/sites/constellation-docs/deploys/667c136526d2ba000801a087
renovate[bot] commented 1 week ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.