search

hashicorp / vault-secrets-operator

The Vault Secrets Operator (VSO) allows Pods to consume Vault secrets natively from Kubernetes Secrets.
https://hashicorp.com
Other
471 stars 102 forks source link

Bump the gomod-backward-compatible group across 1 directory with 16 updates #942

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps the gomod-backward-compatible group with 13 updates in the / directory:

Package From To
cloud.google.com/go/compute/metadata 0.5.0 0.5.2
github.com/Masterminds/sprig/v3 3.2.3 3.3.0
github.com/gruntwork-io/terratest 0.47.0 0.47.2
github.com/hashicorp/hcp-sdk-go 0.110.0 0.115.0
github.com/hashicorp/vault/api 1.13.0 1.15.0
github.com/hashicorp/vault/sdk 0.13.0 0.14.0
github.com/onsi/gomega 1.34.1 1.34.2
github.com/prometheus/client_golang 1.20.3 1.20.4
golang.org/x/crypto 0.26.0 0.27.0
google.golang.org/api 0.192.0 0.199.0
k8s.io/apiextensions-apiserver 0.30.3 0.31.1
sigs.k8s.io/controller-runtime 0.18.4 0.19.0
nhooyr.io/websocket 1.8.11 1.8.17

Updates cloud.google.com/go/compute/metadata from 0.5.0 to 0.5.2

Release notes

Sourced from cloud.google.com/go/compute/metadata's releases.

compute/metadata: v0.5.2

0.5.2 (2024-09-20)

Bug Fixes

  • compute/metadata: Close Response Body for failed request (#10891) (e91d45e)
Changelog

Sourced from cloud.google.com/go/compute/metadata's changelog.

Changes

0.115.1 (2024-08-13)

Bug Fixes

  • cloud.google.com/go: Bump google.golang.org/grpc@v1.64.1 (8ecc4e9)

0.115.0 (2024-06-12)

Features

Bug Fixes

  • internal/postprocessor: Use approved image tag (#10341) (a388fe5)

0.114.0 (2024-05-23)

Features

  • civil: Add Compare method to Date, Time, and DateTime (#10193) (c2920d7)

Bug Fixes

  • internal/postprocessor: Add scopes to all appropriate commit lines (#10192) (c21399b)

0.113.0 (2024-05-08)

Features

  • civil: Add Compare method to Date, Time, and DateTime (#10010) (34455c1)

Bug Fixes

  • all: Bump x/net to v0.24.0 (#10000) (ba31ed5)
  • debugger: Add internaloption.WithDefaultEndpointTemplate (3b41408)
  • internal/aliasfix: Handle import paths correctly (#10097) (fafaf0d)
  • rpcreplay: Properly unmarshal dynamic message (#9774) (53ccb20), refs #9773

Documentation

... (truncated)

Commits
  • 71a92e3 chore(main): release auth 0.5.2 (#10422)
  • 3266763 fix(auth): fetch initial token when CachedTokenProviderOptions.DisableAutoRef...
  • 9eb4d2a chore(internal/protoveneer): generate support functions (#10416)
  • eba8727 doc(storage): add example for retention (#10413)
  • 1068ca8 testing(bigquery): fix legacy trace test (#10411)
  • d6c543c chore: update gapic-generator-go to 0.44.0 (#10402)
  • 5cb0c26 feat(spanner): add support of checking row not found errors from ReadRow and ...
  • 1d28ac6 chore(internal/protoveneer): doc for fields (#10352)
  • 2003148 feat(aiplatform): add enum value MALFORMED_FUNCTION_CALL to `.google.cloud.ai...
  • ad8792d chore: release main (#10399)
  • Additional commits viewable in compare view


Updates github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0

Release notes

Sourced from github.com/Masterminds/sprig/v3's releases.

v3.3.0

What's Changed

New Contributors

Full Changelog: https://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0

Changelog

Sourced from github.com/Masterminds/sprig/v3's changelog.

Release 3.3.0 (2024-08-29)

Added

Changed

  • #407: Removed duplicate documentation (functions were documentated in 2 places)
  • #290: Corrected copy/paster oops in math documentation (thanks @​zzhu41)
  • #369: Corrected template reference in docs (thanks @​chey)
  • #375: Added link to URL documenation (thanks @​carlpett)
  • #406: Updated the mergo dependency which had a breaking change (which was accounted for)
  • #376: Fixed documentation error (thanks @​jheyduk)
  • #404: Updated dependency tree
  • #391: Fixed misspelling (thanks @​chrishalbert)
  • #405: Updated Go versions used in testing
Commits
  • e708470 Merge pull request #408 from mattfarina/update-changelog-3.3
  • 8fc4354 Updating the changelog for the 3.3.0 release
  • cb81a32 Merge pull request #407 from mattfarina/remove-dup-math-functions
  • 2637693 Removing duplicate documentation
  • 06b9a87 Merge pull request #290 from zzhu41/patch-1
  • e663ec6 Merge pull request #369 from chey/patch-1
  • bb2f73f Merge pull request #375 from carlpett/patch-1
  • f07659e Merge pull request #400 from itzik-elayev/master
  • 98b35c1 Add closing bracket
  • 7a88928 Merge pull request #406 from mattfarina/update-mergo
  • Additional commits viewable in compare view


Updates github.com/gruntwork-io/terratest from 0.47.0 to 0.47.2

Release notes

Sourced from github.com/gruntwork-io/terratest's releases.

v0.47.2

Modules affected

  • ssh
  • terraform

Description

  • Updated logging line in ssh module
  • Refined terraform output by removing unnecessary info lines
  • Update rexml dependency

Related links

Full Changelog: https://github.com/gruntwork-io/terratest/compare/v0.47.1...v0.47.2

v0.47.1

Modules affected

  • aws
  • retry

Description

Special thanks

Special thanks to the following users for their contribution!

... (truncated)

Commits
  • cf38360 Merge pull request #1445 from gruntwork-io/fix/json-output-error
  • bb1a781 fix: cleaning the output received from terragrunt - remove info line
  • fc19428 Merge pull request #1437 from gruntwork-io/dependabot/bundler/docs/rexml-3.3.6
  • 5069b5e Merge pull request #1440 from gruntwork-io/fix/ssh-logs
  • 1a1a8c1 Merge pull request #1438 from roysha1/master
  • e01ef3d fix: move the logging line
  • 5eca5da update go-getter
  • b83ccf4 Bump rexml from 3.3.3 to 3.3.6 in /docs
  • f9d5fb2 Merge pull request #1436 from gruntwork-io/fix-circle-ci
  • 05ddb3d Fix circle ci
  • Additional commits viewable in compare view


Updates github.com/hashicorp/hcp-sdk-go from 0.110.0 to 0.115.0

Release notes

Sourced from github.com/hashicorp/hcp-sdk-go's releases.

v0.115.0 (October 02, 2024)

v0.114.0 (September 24, 2024)

v0.113.0 (September 18, 2024)

v0.112.0 (September 11, 2024)

DEPRECATIONS:

  • Remove cloud-vault-scanning-proxy client. [GH-268]

v0.111.0 (September 04, 2024)

Changelog

Sourced from github.com/hashicorp/hcp-sdk-go's changelog.

v0.115.0 (October 02, 2024)

v0.114.0 (September 24, 2024)

v0.113.0 (September 18, 2024)

v0.112.0 (September 11, 2024)

DEPRECATIONS:

  • Remove cloud-vault-scanning-proxy client. [GH-268]

v0.111.0 (September 04, 2024)

Commits


Updates github.com/hashicorp/vault/api from 1.13.0 to 1.15.0

Release notes

Sourced from github.com/hashicorp/vault/api's releases.

v1.15.0

1.15.0

September 27, 2023

SECURITY:

  • secrets/transit: fix a regression that was honoring nonces provided in non-convergent modes during encryption. [GH-22852]

CHANGES:

  • auth/alicloud: Update plugin to v0.16.0 [GH-22646]
  • auth/azure: Update plugin to v0.16.0 [GH-22277]
  • auth/azure: Update plugin to v0.16.1 [GH-22795]
  • auth/azure: Update plugin to v0.16.2 [GH-23060]
  • auth/cf: Update plugin to v0.15.1 [GH-22758]
  • auth/gcp: Update plugin to v0.16.1 [GH-22612]
  • auth/jwt: Update plugin to v0.17.0 [GH-22678]
  • auth/kerberos: Update plugin to v0.10.1 [GH-22797]
  • auth/kubernetes: Update plugin to v0.17.0 [GH-22709]
  • auth/kubernetes: Update plugin to v0.17.1 [GH-22879]
  • auth/ldap: Normalize HTTP response codes when invalid credentials are provided [GH-21282]
  • auth/oci: Update plugin to v0.14.2 [GH-22805]
  • core (enterprise): Ensure Role Governing Policies are only applied down the namespace hierarchy
  • core/namespace (enterprise): Introduce the concept of high-privilege namespace (administrative namespace), which will have access to some system backend paths that were previously only accessible in the root namespace. [GH-21215]
  • core: Bump Go version to 1.21.1.
  • database/couchbase: Update plugin to v0.9.3 [GH-22854]
  • database/couchbase: Update plugin to v0.9.4 [GH-22871]
  • database/elasticsearch: Update plugin to v0.13.3 [GH-22696]
  • database/mongodbatlas: Update plugin to v0.10.1 [GH-22655]
  • database/redis-elasticache: Update plugin to v0.2.2 [GH-22584]
  • database/redis-elasticache: Update plugin to v0.2.3 [GH-22598]
  • database/redis: Update plugin to v0.2.2 [GH-22654]
  • database/snowflake: Update plugin to v0.9.0 [GH-22516]
  • events: Log level for processing an event dropped from info to debug. [GH-22997]
  • events: data_path will include full data path of secret, including name. [GH-22487]
  • replication (enterprise): Switch to non-deprecated gRPC field for resolver target host
  • sdk/logical/events: EventSender interface method is now SendEvent instead of Send. [GH-22487]
  • secrets/ad: Update plugin to v0.16.1 [GH-22856]
  • secrets/alicloud: Update plugin to v0.15.1 [GH-22533]
  • secrets/azure: Update plugin to v0.16.2 [GH-22799]
  • secrets/azure: Update plugin to v0.16.3 [GH-22824]
  • secrets/gcp: Update plugin to v0.17.0 [GH-22746]
  • secrets/gcpkms: Update plugin to v0.15.1 [GH-22757]
  • secrets/keymgmt: Update plugin to v0.9.3
  • secrets/kubernetes: Update plugin to v0.6.0 [GH-22823]
  • secrets/kv: Update plugin to v0.16.1 [GH-22716]
  • secrets/mongodbatlas: Update plugin to v0.10.1 [GH-22748]
  • secrets/openldap: Update plugin to v0.11.2 [GH-22734]
  • secrets/terraform: Update plugin to v0.7.3 [GH-22907]

... (truncated)

Changelog

Sourced from github.com/hashicorp/vault/api's changelog.

1.15.0

September 27, 2023

SECURITY:

  • secrets/transit: fix a regression that was honoring nonces provided in non-convergent modes during encryption. This vulnerability, CVE-2023-4680, is fixed in Vault 1.14.3, 1.13.7, and 1.12.11. [GH-22852, HSEC-2023-28]
  • sentinel (enterprise): Sentinel RGP policies allowed for cross-namespace denial-of-service. This vulnerability, CVE-2023-3775, is fixed in Vault Enterprise 1.15.0, 1.14.4, and 1.13.8.[HSEC-2023-29]

CHANGES:

  • auth/alicloud: Update plugin to v0.16.0 [GH-22646]
  • auth/azure: Update plugin to v0.16.0 [GH-22277]
  • auth/azure: Update plugin to v0.16.1 [GH-22795]
  • auth/azure: Update plugin to v0.16.2 [GH-23060]
  • auth/cf: Update plugin to v0.15.1 [GH-22758]
  • auth/gcp: Update plugin to v0.16.1 [GH-22612]
  • auth/jwt: Update plugin to v0.17.0 [GH-22678]
  • auth/kerberos: Update plugin to v0.10.1 [GH-22797]
  • auth/kubernetes: Update plugin to v0.17.0 [GH-22709]
  • auth/kubernetes: Update plugin to v0.17.1 [GH-22879]
  • auth/ldap: Normalize HTTP response codes when invalid credentials are provided [GH-21282]
  • auth/oci: Update plugin to v0.14.2 [GH-22805]
  • core (enterprise): Ensure Role Governing Policies are only applied down the namespace hierarchy
  • core/namespace (enterprise): Introduce the concept of high-privilege namespace (administrative namespace), which will have access to some system backend paths that were previously only accessible in the root namespace. [GH-21215]
  • core: Bump Go version to 1.21.1.
  • database/couchbase: Update plugin to v0.9.3 [GH-22854]
  • database/couchbase: Update plugin to v0.9.4 [GH-22871]
  • database/elasticsearch: Update plugin to v0.13.3 [GH-22696]
  • database/mongodbatlas: Update plugin to v0.10.1 [GH-22655]
  • database/redis-elasticache: Update plugin to v0.2.2 [GH-22584]
  • database/redis-elasticache: Update plugin to v0.2.3 [GH-22598]
  • database/redis: Update plugin to v0.2.2 [GH-22654]
  • database/snowflake: Update plugin to v0.9.0 [GH-22516]
  • events: Log level for processing an event dropped from info to debug. [GH-22997]
  • events: data_path will include full data path of secret, including name. [GH-22487]
  • replication (enterprise): Switch to non-deprecated gRPC field for resolver target host
  • sdk/logical/events: EventSender interface method is now SendEvent instead of Send. [GH-22487]
  • secrets/ad: Update plugin to v0.16.1 [GH-22856]
  • secrets/alicloud: Update plugin to v0.15.1 [GH-22533]
  • secrets/azure: Update plugin to v0.16.2 [GH-22799]
  • secrets/azure: Update plugin to v0.16.3 [GH-22824]
  • secrets/gcp: Update plugin to v0.17.0 [GH-22746]
  • secrets/gcpkms: Update plugin to v0.15.1 [GH-22757]
  • secrets/keymgmt: Update plugin to v0.9.3
  • secrets/kubernetes: Update plugin to v0.6.0 [GH-22823]
  • secrets/kv: Update plugin to v0.16.1 [GH-22716]
  • secrets/mongodbatlas: Update plugin to v0.10.1 [GH-22748]
  • secrets/openldap: Update plugin to v0.11.2 [GH-22734]
  • secrets/terraform: Update plugin to v0.7.3 [GH-22907]

... (truncated)

Commits
  • b4d0727 backport of commit 771470c28f099c2af5342c76d94716d45aa6887e (#23012)
  • f8da51c backport of commit 88ed074287d99da0e298589c5236fa094f770b08 (#23263)
  • 9e00b34 backport of commit ac9f411949b57669884157a6b6239cb586023175 (#23259)
  • 20af1eb backport of commit 036cbcebd9c5669edbb4519c68cc56f8b83f12d6 (#23258)
  • 99b916a backport of commit 8924f9592d9ff6013c11d5459c376a90908a3c4c (#23257)
  • 4e439e0 backport of commit 1d61aeb8aebc96eecbb6a35e10bd914b4d0f41f4 (#23249)
  • 565427a backport of commit 1e76ad42ef4221cb8a58e050d2edbfc552a878a0 (#23247)
  • 6fafd52 backport: Support mlock and custom tmpdir for containerized plugins (#23215) ...
  • d3927bc Backport UI: Add pagination to new PKI (#23238)
  • 5603003 backport of commit 68dd82c902ecf4487d9c17729527da9befb81a7f (#23246)
  • Additional commits viewable in compare view


Updates github.com/hashicorp/vault/sdk from 0.13.0 to 0.14.0

Changelog

Sourced from github.com/hashicorp/vault/sdk's changelog.

Previous versions

1.18.0-rc1

September 18, 2024

CHANGES:

  • activity (enterprise): filter all fields in client count responses by the request namespace [GH-27790]
  • activity (enterprise): remove deprecated fields distinct_entities and non_entity_tokens [GH-27830]
  • activity log: Deprecated the field "default_report_months". Instead, the billing start time will be used to determine the start time when querying the activity log endpoints. [GH-27350]
  • activity log: Deprecates the current_billing_period field for /sys/internal/counters/activity. The default start time will automatically be set the billing period start date. [GH-27426]
  • activity: The activity export API now requires the sudo ACL capability. [GH-27846]
  • activity: The activity export API now responds with a status of 204 instead 400 when no data exists within the time range specified by start_time and end_time. [GH-28064]
  • activity: The startTime will be set to the start of the current billing period by default. The endTime will be set to the end of the current month. This applies to /sys/internal/counters/activity, /sys/internal/counters/activity/export, and the vault operator usage command that utilizes /sys/internal/counters/activity. [GH-27379]
  • api: Update backoff/v3 to backoff/v4.3.0 [GH-26868]
  • auth/alicloud: Update plugin to v0.19.0 [GH-28263]
  • auth/azure: Update plugin to v0.19.0 [GH-28294]
  • auth/cf: Update plugin to v0.18.0 [GH-27724]
  • auth/cf: Update plugin to v0.19.0 [GH-28266]
  • auth/gcp: Update plugin to v0.19.0 [GH-28366]
  • auth/jwt: Update plugin to v0.21.0 [GH-27498]
  • auth/jwt: Update plugin to v0.22.0 [GH-28349]
  • auth/kerberos: Update plugin to v0.13.0 [GH-28264]
  • auth/kubernetes: Update plugin to v0.20.0 [GH-28289]
  • auth/oci: Update plugin to v0.17.0 [GH-28307]
  • cli: The undocumented -dev-three-node and -dev-four-cluster CLI options have been removed. [GH-27578]
  • consul-template: updated to version 0.39.1 [GH-27799]
  • core(enterprise): Updated the following two control group related errors responses to respond with response code 400 instead of 500: control group: could not find token, and control group: token is not a valid control group token.
  • core: Bump Go version to 1.22.7
  • database/couchbase: Update plugin to v0.12.0 [GH-28327]
  • database/elasticsearch: Update plugin to v0.16.0 [GH-28277]
  • database/mongodbatlas: Update plugin to v0.13.0 [GH-28268]
  • database/redis-elasticache: Update plugin to v0.5.0 [GH-28293]
  • database/redis: Update plugin to v0.4.0 [GH-28404]
  • database/snowflake: Update plugin to v0.12.0 [GH-28275]
  • sdk: Upgrade to go-secure-stdlib/plugincontainer@v0.4.0, which also bumps github.com/docker/docker to v26.1.5+incompatible [GH-28269]
  • secrets/ad: Update plugin to v0.19.0 [GH-28361]
  • secrets/alicloud: Update plugin to v0.18.0 [GH-28271]
  • secrets/azure: Update plugin to v0.19.2 [GH-27652]
  • secrets/azure: Update plugin to v0.20.0 [GH-28267]
  • secrets/gcp: Update plugin to v0.20.0 [GH-28324]
  • secrets/gcpkms: Update plugin to v0.18.0 [GH-28300]
  • secrets/gcpkms: Update plugin to v0.19.0 [GH-28360]
  • secrets/kubernetes: Update plugin to v0.9.0 [GH-28287]

... (truncated)

Commits


Updates github.com/onsi/gomega from 1.34.1 to 1.34.2

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.34.2

1.34.2

Require Go 1.22+

Maintenance

  • bump ginkgo as well [c59c6dc]
  • bump to go 1.22 - remove x/exp dependency [8158b99]
Changelog

Sourced from github.com/onsi/gomega's changelog.

1.34.2

Require Go 1.22+

Maintenance

  • bump ginkgo as well [c59c6dc]
  • bump to go 1.22 - remove x/exp dependency [8158b99]
Commits


Updates github.com/prometheus/client_golang from 1.20.3 to 1.20.4

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.20.4

  • [BUGFIX] histograms: Fix a possible data race when appending exemplars vs metrics gather. #1623
Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

  • [BUGFIX] histograms: Fix possible data race when appending exemplars vs metrics gather. #1623
Commits
  • 05fcde9 Merge pull request #1623 from krajorama/data-race-in-histogram-write
  • 209f4c0 Add changelog
  • 1e398cc native histogram: Fix race between Write and addExemplar
  • See full diff in compare view


Updates golang.org/x/crypto from 0.26.0 to 0.27.0

Commits
  • c9da6b9 all: fix printf(var) mistakes detected by latest printf checker
  • b35ab4f go.mod: update golang.org/x dependencies
  • bcb0f91 internal/poly1305: Port sum_amd64.s to Avo
  • 7eace71 chacha20poly1305: Avo port of chacha20poly1305_amd64.s
  • 620dfbc salsa20/salsa: Port salsa20_amd64.s to Avo
  • 82942cf blake2b: port blake2b_amd64.s to Avo
  • 0484c26 blake2b: port blake2bAVX2_amd64.s to Avo
  • 38ed1bc blake2s: port blake2s_amd64.s to Avo
  • 38a0b5d argon2: Avo port of blamka_amd64.s
  • bf5f14f x509roots/fallback: update bundle
  • Additional commits viewable in compare view


Updates google.golang.org/api from 0.192.0 to 0.199.0

Release notes

Sourced from google.golang.org/api's releases.

v0.199.0

0.199.0 (2024-09-25)

Features

v0.198.0

0.198.0 (2024-09-19)

Features

v0.197.0

0.197.0 (2024-09-10)

Features

Bug Fixes

  • transport: Set UniverseDomain in http.NewClient for new auth (#2773) (140d0a5)

v0.196.0

0.196.0 (2024-09-03)

... (truncated)

Changelog

Sourced from google.golang.org/api's changelog.

0.199.0 (2024-09-25)

Features

  • all: Auto-regenerate discovery clients (#2791) (bd9630a)
  • all: Auto-regenerate discovery clients (#2793) (ac7c6de)
  • all: Auto-regenerate discovery clients (#2794) (d0e0dc3)
  • all: Auto-regenerate discovery clients (#2796) (
    benashz commented 1 month ago

    @dependabot ignore github.com/hashicorp/vault/api

dependabot[bot] commented 1 month ago

OK, I won't notify you about github.com/hashicorp/vault/api again, unless you unignore it.

benashz commented 1 month ago

@dependabot recreate

dependabot[bot] commented 1 month ago

Looks like these dependencies are updatable in another way, so this is no longer needed.