search

kubernetes-csi / external-attacher

Sidecar container that watches Kubernetes VolumeAttachment objects and triggers ControllerPublish/Unpublish against a CSI endpoint
Apache License 2.0
169 stars 187 forks source link

Bump the github-dependencies group across 1 directory with 7 updates #575

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps the github-dependencies group with 5 updates in the / directory:

Package From To
github.com/container-storage-interface/spec 1.9.0 1.10.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.52.0 0.53.0
golang.org/x/net 0.26.0 0.27.0
golang.org/x/oauth2 0.21.0 0.22.0
golang.org/x/time 0.5.0 0.6.0

Updates github.com/container-storage-interface/spec from 1.9.0 to 1.10.0

Release notes

Sourced from github.com/container-storage-interface/spec's releases.

v1.10.0

What's Changed

Breaking changes/Deprecations

  • None

Additions

Clarifications/Corrections/Fixes

  • None

Dependencies

New Contributors

Full Changelog: https://github.com/container-storage-interface/spec/compare/v1.9.0...v1.10.0

v1.10.0-rc1

No release notes provided.

Commits
  • 21be3f8 Merge pull request #566 from saad-ali/protoBufTo133
  • 1bc2caf Bump google.golang.org/protobuf from 1.32.0 to 1.33.0
  • adb2b16 Merge pull request #564 from container-storage-interface/dependabot/go_module...
  • 811799a Bump golang.org/x/net from 0.10.0 to 0.23.0
  • 9674d35 Merge pull request #559 from container-storage-interface/dependabot/go_module...
  • 2696773 Added the SnapshotMetadata service. (#551)
  • 1f2bf8a Bump google.golang.org/grpc from 1.57.0 to 1.57.1
  • abf6346 update protoc and related (#552)
  • 886cd48 Merge pull request #555 from saad-ali/release19bump
  • 5855142 Bump master version to 1.10 for next release
  • See full diff in compare view


Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.52.0 to 0.53.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's releases.

Release v1.28.0/v0.53.0/v0.22.0/v0.8.0/v0.3.0/v0.1.0

Overview

Added

  • Add the new go.opentelemetry.io/contrib/detectors/azure/azurevm package to provide a resource detector for Azure VMs. (#5422)
  • Add support to configure views when creating MeterProvider using the config package. (#5654)
  • The go.opentelemetry.io/contrib/config add support to configure periodic reader interval and timeout. (#5661)
  • Add log support for the autoexport package. (#5733)
  • Add support for disabling the old runtime metrics using the OTEL_GO_X_DEPRECATED_RUNTIME_METRICS=false environment variable. (#5747)
  • Add support for signal-specific protocols environment variables (OTEL_EXPORTER_OTLP_TRACES_PROTOCOL, OTEL_EXPORTER_OTLP_LOGS_PROTOCOL, OTEL_EXPORTER_OTLP_METRICS_PROTOCOL) in go.opentelemetry.io/contrib/exporters/autoexport. (#5816)
  • The go.opentelemetry.io/contrib/processors/minsev module is added. This module provides and experimental logging processor with a configurable threshold for the minimum severity records must have to be recorded. (#5817)
  • The go.opentelemetry.io/contrib/processors/baggagecopy module. This module is a replacement of go.opentelemetry.io/contrib/processors/baggage/baggagetrace. (#5824)

Changed

  • Improve performance of go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
  • Improve performance of go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
  • Update go.opentelemetry.io/contrib/config to latest released configuration schema which introduces breaking changes where Attributes is now a map[string]interface{}. (#5758)
  • Upgrade all dependencies of go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0. (#5847)

Fixed

  • Custom attributes targeting metrics recorded by the go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are not ignored anymore. (#5129)
  • The double setup in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace/example that caused duplicate traces. (#5564)
  • The superfluous response.WriteHeader call in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp when the response writer is flushed. (#5634)
  • Use c.FullPath() method to set http.route attribute in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#5734)
  • Out-of-bounds panic in case of invalid span ID in go.opentelemetry.io/contrib/propagators/b3. (#5754)

Deprecated

  • The go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5550. (#5645)
  • The go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5552. (#5646)
  • The go.opentelemetry.io/contrib/samplers/aws/xray package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5554. (#5647)
  • The go.opentelemetry.io/contrib/processors/baggage/baggagetrace package is deprecated. Use the added go.opentelemetry.io/contrib/processors/baggagecopy package instead. (#5824)
    • Use baggagecopy.NewSpanProcessor as a replacement for baggagetrace.New.
      • NewSpanProcessor accepts a Fitler function type that selects which baggage members are added to a span.
      • NewSpanProcessor returns a *baggagecopy.SpanProcessor instead of a trace.SpanProcessor interface. The returned type still implements the interface.

#5550: open-telemetry/opentelemetry-go-contrib#5550 #5552: open-telemetry/opentelemetry-go-contrib#5552 #5554: open-telemetry/opentelemetry-go-contrib#5554

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's changelog.

[1.28.0/0.53.0/0.22.0/0.8.0/0.3.0/0.1.0] - 2024-07-02

Added

  • Add the new go.opentelemetry.io/contrib/detectors/azure/azurevm package to provide a resource detector for Azure VMs. (#5422)
  • Add support to configure views when creating MeterProvider using the config package. (#5654)
  • The go.opentelemetry.io/contrib/config add support to configure periodic reader interval and timeout. (#5661)
  • Add log support for the autoexport package. (#5733)
  • Add support for disabling the old runtime metrics using the OTEL_GO_X_DEPRECATED_RUNTIME_METRICS=false environment variable. (#5747)
  • Add support for signal-specific protocols environment variables (OTEL_EXPORTER_OTLP_TRACES_PROTOCOL, OTEL_EXPORTER_OTLP_LOGS_PROTOCOL, OTEL_EXPORTER_OTLP_METRICS_PROTOCOL) in go.opentelemetry.io/contrib/exporters/autoexport. (#5816)
  • The go.opentelemetry.io/contrib/processors/minsev module is added. This module provides and experimental logging processor with a configurable threshold for the minimum severity records must have to be recorded. (#5817)
  • The go.opentelemetry.io/contrib/processors/baggagecopy module. This module is a replacement of go.opentelemetry.io/contrib/processors/baggage/baggagetrace. (#5824)

Changed

  • Improve performance of go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
  • Improve performance of go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
  • Update go.opentelemetry.io/contrib/config to latest released configuration schema which introduces breaking changes where Attributes is now a map[string]interface{}. (#5758)
  • Upgrade all dependencies of go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0. (#5847)

Fixed

  • Custom attributes targeting metrics recorded by the go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are not ignored anymore. (#5129)
  • The double setup in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace/example that caused duplicate traces. (#5564)
  • The superfluous response.WriteHeader call in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp when the response writer is flushed. (#5634)
  • Use c.FullPath() method to set http.route attribute in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#5734)
  • Out-of-bounds panic in case of invalid span ID in go.opentelemetry.io/contrib/propagators/b3. (#5754)

Deprecated

  • The go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5550. (#5645)
  • The go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5552. (#5646)
  • The go.opentelemetry.io/contrib/samplers/aws/xray package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5554. (#5647)
  • The go.opentelemetry.io/contrib/processors/baggage/baggagetrace package is deprecated. Use the added go.opentelemetry.io/contrib/processors/baggagecopy package instead. (#5824)
    • Use baggagecopy.NewSpanProcessor as a replacement for baggagetrace.New.
      • NewSpanProcessor accepts a Fitler function type that selects which baggage members are added to a span.
      • NewSpanProcessor returns a *baggagecopy.SpanProcessor instead of a trace.SpanProcessor interface. The returned type still implements the interface.

#5550: open-telemetry/opentelemetry-go-contrib#5550 #5552: open-telemetry/opentelemetry-go-contrib#5552 #5554: open-telemetry/opentelemetry-go-contrib#5554

Commits
  • af75717 Release v1.28.0/v0.53.0/v0.22.0/v0.8.0/v0.3.0/v0.1.0 (#5847)
  • b6a9271 fix(deps): update module github.com/aws/aws-sdk-go to v1.54.13 (#5843)
  • 66306fe Add @​XSAM and @​dmathieu as repository maintainers (#5838)
  • f783d1f Upgrade Go versions in CI (#5845)
  • d6e791c fix(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.58.0 (...
  • efde831 Remove otelmongo deprecation while we onboard a Code Owner (#5840)
  • 32d3e6a fix(deps): update module google.golang.org/grpc to v1.65.0 (#5837)
  • 1ce0d1c Revert toolchain addition to autoexport (#5841)
  • 53f34f2 fix(deps): update module cloud.google.com/go/compute/metadata to v0.4.0 (#5835)
  • 56e279e fix(deps): update module github.com/aws/aws-sdk-go to v1.54.12 (#5834)
  • Additional commits viewable in compare view


Updates golang.org/x/net from 0.26.0 to 0.27.0

Commits
  • e2310ae go.mod: update golang.org/x dependencies
  • 77708f7 quic: skip tests which depend on unimplemented UDP functions on Plan 9
  • 9617c63 http2: avoid Transport hang with Connection: close and AllowHTTP
  • See full diff in compare view


Updates golang.org/x/oauth2 from 0.21.0 to 0.22.0

Commits


Updates golang.org/x/sys from 0.21.0 to 0.22.0

Commits
  • faed7ec unix: add PthreadChdir and PthreadFchdir on darwin
  • c892bb7 unix: fix MmapPtr test failing on OpenBSD
  • a0ef40a unix: fix MremapPtr test failing on NetBSD
  • daa2394 unix: add unsafe mmap, munmap, mremap
  • 7670087 windows: add GetAce Windows API
  • 348425a windows/svc: do not pass theService to windows.RegisterServiceCtrlHandlerEx
  • See full diff in compare view


Updates golang.org/x/term from 0.21.0 to 0.22.0

Commits


Updates golang.org/x/time from 0.5.0 to 0.6.0

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
k8s-ci-robot commented 3 months ago

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-csi member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes-sigs/prow](https://github.com/kubernetes-sigs/prow/issues/new?title=Prow%20issue:) repository.
k8s-ci-robot commented 3 months ago

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot] Once this PR has been reviewed and has the lgtm label, please assign jsafrane for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/kubernetes-csi/external-attacher/blob/master/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
k8s-ci-robot commented 3 months ago

@dependabot[bot]: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-kubernetes-csi-external-attacher-unit e297b9e46a5046eee68bbdba1ce5af1427e94fb7 link true /test pull-kubernetes-csi-external-attacher-unit

Full PR test history. Your PR dashboard. Please help us cut down on flakes by linking to an open issue when you hit one in your PR.

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes-sigs/prow](https://github.com/kubernetes-sigs/prow/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
dependabot[bot] commented 3 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.