search

fluxcd / source-controller

The GitOps Toolkit source management component
https://fluxcd.io
Apache License 2.0
231 stars 183 forks source link

build(deps): bump the go-deps group across 1 directory with 8 updates #1510

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps the go-deps group with 7 updates in the / directory:

Package From To
github.com/cyphar/filepath-securejoin 0.2.4 0.2.5
github.com/minio/minio-go/v7 7.0.70 7.0.71
github.com/notaryproject/notation-core-go 1.0.2 1.0.3
github.com/notaryproject/notation-go 1.1.0 1.1.1
github.com/prometheus/client_golang 1.19.0 1.19.1
github.com/sigstore/sigstore 1.8.3 1.8.4
google.golang.org/api 0.177.0 0.184.0

Updates github.com/cyphar/filepath-securejoin from 0.2.4 to 0.2.5

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.2.5

This release makes some minor improvements to SecureJoin:

  • Some changes were made to how lexical components are handled during resolution. There is no change in behaviour, and both implementations are safe, however the newer implementation is much easier to reason about.

  • The error returned when a symlink loop has been detected will now reference the correct path. #10

Signed-off-by: Aleksa Sarai cyphar@cyphar.com

Commits
  • d861a11 VERSION: release v0.2.5
  • 87bc53a join: fix ELOOP error path
  • e9be397 join: don't allow .. and . in working path during resolution
  • 75cdbea gha: update Go versions
  • b69b737 VERSION: back to development
  • See full diff in compare view


Updates github.com/minio/minio-go/v7 from 7.0.70 to 7.0.71

Release notes

Sourced from github.com/minio/minio-go/v7's releases.

Bugfix Release

What's Changed

Full Changelog: https://github.com/minio/minio-go/compare/v7.0.70...v7.0.71

Commits


Updates github.com/notaryproject/notation-core-go from 1.0.2 to 1.0.3

Release notes

Sourced from github.com/notaryproject/notation-core-go's releases.

v1.0.3

Vote PASSED [+4 -0]: #205

What's Changed

Full Changelog: https://github.com/notaryproject/notation-core-go/compare/v1.0.2...v1.0.3

Commits
  • 4211b09 build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0 (#204)
  • 6f8b75c build(deps): bump actions/stale from 8 to 9 (#195)
  • ff5e5b8 build(deps): bump apache/skywalking-eyes from a790ab8dd23a7f861c18bd6aaa9b012...
  • f624dfd build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 (#200)
  • 356b30e fix: leaf certificate validation (#202)
  • 9f13c9e fix(ci): update codecov token (#199)
  • 66ff8c2 chore: org maintainers update (#196)
  • 807a338 bump: bump up golang version to v1.21 (#194)
  • 9a2ff9e chore: add GitHub action for stale issues and PRs (#174)
  • 93218d9 build(deps): bump golang.org/x/crypto from 0.18.0 to 0.21.0 (#193)
  • Additional commits viewable in compare view


Updates github.com/notaryproject/notation-go from 1.1.0 to 1.1.1

Release notes

Sourced from github.com/notaryproject/notation-go's releases.

v1.1.1

Vote PASSED [+4 -0]: #412

What's Changed

Full Changelog: https://github.com/notaryproject/notation-go/compare/v1.1.0...v1.1.1

Commits
  • 94a0e13 revert: "feat: add support for signing blob (#379)" (#411)
  • 1a5b3e3 ci: enable ci for release branch (#409)
  • 254dfcd bump: bump up notation-core-go v1.0.3 (#407)
  • b7fde51 fix: error message for dangling reference index (#402)
  • b8508d0 test: improve test coverage to 80% (#405)
  • 5e98995 build(deps): bump golang.org/x/crypto from 0.22.0 to 0.23.0 (#403)
  • 378ee83 build(deps): bump golang.org/x/crypto from 0.21.0 to 0.22.0 (#396)
  • a901939 build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.7 to 3.4.8 (#399)
  • 97a5a86 build(deps): bump github.com/go-ldap/ldap/v3 from 3.4.6 to 3.4.7 (#395)
  • 442ece7 build(deps): bump golang.org/x/mod from 0.16.0 to 0.17.0 (#397)
  • Additional commits viewable in compare view


Updates github.com/prometheus/client_golang from 1.19.0 to 1.19.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.19.1

What's Changed

  • Security patches for golang.org/x/sys and google.golang.org/protobuf

New Contributors

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.19.0...v1.19.1

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

Commits


Updates github.com/sigstore/sigstore from 1.8.3 to 1.8.4

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.8.4

What's Changed

New Contributors

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.8.3...v1.8.4

Commits
  • 5cd937f build(deps): Bump github.com/hashicorp/vault/api
  • 96fc144 build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates
  • 2b99005 build(deps): Bump the all group in /pkg/signature/kms/aws with 3 updates
  • fa5d64b sync go mod
  • 186a1e5 build(deps): Bump the all group across 1 directory with 4 updates
  • 1ba2030 Fix Hashicorp Vault KMS to use PKCS1 v1.5
  • ec88c0b ---
  • bbe51a7 ---
  • 1d8a874 ---
  • acb4db4 build(deps): Bump golangci/golangci-lint-action from 5.3.0 to 6.0.1
  • Additional commits viewable in compare view


Updates golang.org/x/crypto from 0.22.0 to 0.23.0

Commits
  • 905d78a go.mod: update golang.org/x dependencies
  • ebb717d ssh: validate key type in SSH_MSG_USERAUTH_PK_OK response
  • 0da2a6a openpgp: fix function name in comment
  • 5defcc1 sha3: fix Sum results for SHAKE functions on s390x
  • See full diff in compare view


Updates google.golang.org/api from 0.177.0 to 0.184.0

Release notes

Sourced from google.golang.org/api's releases.

v0.184.0

0.184.0 (2024-06-12)

Features

Bug Fixes

  • cba: Update credsNewAuth to support oauth2 over mTLS (#2610) (953f728)

v0.183.0

0.183.0 (2024-06-04)

Features

Bug Fixes

v0.182.0

0.182.0 (2024-05-28)

Features

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.184.0 (2024-06-12)

Features

Bug Fixes

  • cba: Update credsNewAuth to support oauth2 over mTLS (#2610) (953f728)

0.183.0 (2024-06-04)

Features

Bug Fixes

0.182.0 (2024-05-28)

Features

0.181.0 (2024-05-16)

... (truncated)

Commits
  • 66c2e4a chore(main): release 0.184.0 (#2628)
  • 7fccba6 feat(all): auto-regenerate discovery clients (#2624)
  • 953f728 fix(cba): Update credsNewAuth to support oauth2 over mTLS (#2610)
  • ebc44d1 feat: support structpb.Struct as req/resp (#2632)
  • 56d0d59 chore: remove some nil clients (#2631)
  • e760319 chore(gensupport): merge x-goog-api-client vals into a single header (#2612)
  • bec8b5c chore(all): update all (#2630)
  • 643675b Revert "feat: regen cloudcommerceprocurement v1 from updated discovery file (...
  • 7e30ed2 feat: regen cloudcommerceprocurement v1 from updated discovery file (#2627)
  • 8a7c0e1 chore: bump auth dep (#2621)
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 2 weeks ago

Superseded by #1518.