kubernetes-csi / external-resizer

Sidecar container that watches Kubernetes PersistentVolumeClaims objects and triggers controller side expansion operation against a CSI endpoint
Apache License 2.0
119 stars 120 forks source link

Bump the github-dependencies group with 24 updates #386

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps the github-dependencies group with 24 updates:

Package From To
golang.org/x/oauth2 0.14.0 0.19.0
golang.org/x/term 0.14.0 0.19.0
github.com/cespare/xxhash/v2 2.2.0 2.3.0
github.com/emicklei/go-restful/v3 3.11.0 3.12.0
github.com/evanphx/json-patch 5.6.0+incompatible 5.9.0+incompatible
github.com/go-logr/logr 1.3.0 1.4.1
github.com/go-logr/zapr 1.2.3 1.3.0
github.com/go-openapi/jsonpointer 0.19.6 0.21.0
github.com/go-openapi/jsonreference 0.20.2 0.21.0
github.com/go-openapi/swag 0.22.3 0.23.0
github.com/google/uuid 1.4.0 1.6.0
github.com/prometheus/client_golang 1.16.0 1.19.0
github.com/prometheus/client_model 0.4.0 0.5.0
github.com/prometheus/common 0.44.0 0.48.0
github.com/prometheus/procfs 0.10.1 0.12.0
github.com/spf13/cobra 1.7.0 1.8.0
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.44.0 0.49.0
go.opentelemetry.io/otel 1.19.0 1.24.0
go.opentelemetry.io/otel/metric 1.19.0 1.24.0
go.opentelemetry.io/otel/trace 1.19.0 1.24.0
go.uber.org/zap 1.19.0 1.26.0
golang.org/x/net 0.18.0 0.21.0
golang.org/x/sys 0.14.0 0.19.0
golang.org/x/time 0.3.0 0.5.0

Updates golang.org/x/oauth2 from 0.14.0 to 0.19.0

Commits
  • d0e617c google: add Credentials.UniverseDomainProvider
  • 3c9c1f6 oauth2/google: fix the logic of sts 0 value of expires_in
  • 5a05c65 oauth2/google: fix remove content-type header from idms get requests
  • 3a6776a appengine: drop obsolete code for AppEngine envs <=Go 1.11
  • 85231f9 go.mod: update golang.org/x dependencies
  • 34a7afa google/externalaccount: add Config.UniverseDomain
  • 95bec95 google/externalaccount: moves externalaccount package out of internal and exp...
  • ebe81ad go.mod: update golang.org/x dependencies
  • adffd94 google/internal/externalaccount: update serviceAccountImpersonationRE to supp...
  • deefa7e google/downscope: add DownscopingConfig.UniverseDomain to support TPC
  • Additional commits viewable in compare view


Updates golang.org/x/term from 0.14.0 to 0.19.0

Commits
  • 5b15d26 go.mod: update golang.org/x dependencies
  • c5eaf76 go.mod: update golang.org/x dependencies
  • 353276a go.mod: update golang.org/x dependencies
  • ae94145 go.mod: update golang.org/x dependencies
  • ee66497 go.mod: update golang.org/x dependencies
  • See full diff in compare view


Updates github.com/cespare/xxhash/v2 from 2.2.0 to 2.3.0

Commits
  • 998dce2 Add initial support for custom seeds
  • 21fc82b feat: add badger to the projects using this package on README.md
  • 66b1409 feat: add ristretto to the Projects using this package on README.md
  • fe2f6e8 Update Go versions for GH action
  • See full diff in compare view


Updates github.com/emicklei/go-restful/v3 from 3.11.0 to 3.12.0

Changelog

Sourced from github.com/emicklei/go-restful/v3's changelog.

[v3.12.0] - 2024-03-11

  • add Flush method #529 (#538)
  • fix: Improper handling of empty POST requests (#543)

[v3.11.3] - 2024-01-09

  • better not have 2 tags on one commit

[v3.11.1, v3.11.2] - 2024-01-09

  • fix by restoring custom JSON handler functions (Mike Beaumont #540)
Commits


Updates github.com/evanphx/json-patch from 5.6.0+incompatible to 5.9.0+incompatible

Release notes

Sourced from github.com/evanphx/json-patch's releases.

v5.9.0

What's Changed

Full Changelog: https://github.com/evanphx/json-patch/compare/v5.8.1...v5.9.0

Fix API breakage

This PR fixes Operation containing a reference to internal/json and breaking the ability to manually compose one. This restores that ability using a type alias.

Full Changelog: https://github.com/evanphx/json-patch/compare/v5.8.0...v5.8.1

Blargh Phixs and Empathyprovements

This release fixes a few stray panics, addresses large number accuracy, and improves performance!

What's Changed

Full Changelog: https://github.com/evanphx/json-patch/compare/v5.7.0...v5.8.0

The 2023 Release

What's Changed

New Contributors

Full Changelog: https://github.com/evanphx/json-patch/compare/v5.6.0...v5.7.0

Commits
  • b7a4e4a Merge pull request #202 from evanphx/f-html-escape
  • 7eef36c Guard using options to avoid a crash bug
  • 1bcbd0f Merge pull request #201 from evanphx/b-null
  • 9d7ba23 Add option to control if the output is HTMLEscaped
  • 009bc56 Validate that the partialDoc is decoded correctly
  • b82b685 Use a type alias for RawMessage to avoid breaking the public API of Operation
  • 05c9526 Merge pull request #197 from evanphx/f-perf
  • 7a438a6 Minor simplifications
  • 2a122d1 More optimizations
  • 174e1d7 Add MergePatch benchmark
  • Additional commits viewable in compare view


Updates github.com/go-logr/logr from 1.3.0 to 1.4.1

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.1

What's Changed

Full Changelog: https://github.com/go-logr/logr/compare/v1.4.0...v1.4.1

v1.4.0

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: https://github.com/go-logr/logr/compare/v1.3.0...v1.4.0

Commits
  • dcdc3f2 slogr: fix unintended API break in v0.8.0 (#253)
  • 5d88f52 funcr: Add LogInfoLevel Option to skip logging level in the info log (#240)
  • 177005d build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
  • e7f489a build(deps): bump github/codeql-action from 2.22.9 to 3.22.11
  • cf56c3b build(deps): bump actions/setup-go from 4 to 5
  • 2ad296e build(deps): bump github/codeql-action from 2.22.8 to 2.22.9
  • d55b4e2 Merge pull request #241 from thockin/master
  • 98ee9d9 Clean up slog testing and restore coverage
  • b228ba8 Break examples to new file
  • 6432877 Add benchmarks for slogSink
  • Additional commits viewable in compare view


Updates github.com/go-logr/zapr from 1.2.3 to 1.3.0

Release notes

Sourced from github.com/go-logr/zapr's releases.

v1.3.0

This release adds support for slog. zapr implements slogr.SlogSink and therefore can be used through slogr.NewSlogHandler as backend for slog.

What's Changed


New Contributors

Full Changelog: https://github.com/go-logr/zapr/compare/v1.2.4...v1.3.0

v1.2.4

What's Changed

New Contributors

Full Changelog: https://github.com/go-logr/zapr/compare/v1.2.3...v1.2.4

Commits
  • 78b8af5 Merge pull request #60 from pohly/slog
  • ae27dfc support slog + logr 1.3.0
  • 6684601 Merge pull request #71 from go-logr/dependabot/go_modules/github.com/go-logr/...
  • 4d152a1 Bump github.com/go-logr/logr from 1.2.4 to 1.3.0
  • 191bfc4 Merge pull request #61 from pohly/linting
  • fe8a3cc Merge pull request #70 from go-logr/dependabot/go_modules/go.uber.org/zap-1.26.0
  • 575b337 Bump go.uber.org/zap from 1.25.0 to 1.26.0
  • 437f574 Merge pull request #64 from go-logr/dependabot/go_modules/go.uber.org/zap-1.25.0
  • 203c517 Merge pull request #69 from go-logr/dependabot/github_actions/actions/checkout-4
  • 2aef912 Bump actions/checkout from 3 to 4
  • Additional commits viewable in compare view


Updates github.com/go-openapi/jsonpointer from 0.19.6 to 0.21.0

Commits
  • 8b546b9 chore(go): go-openapi requires go.1.20 across the board
  • 5d6253e updated dependencies
  • 8e6deda chore(lint): relinted
  • 9352cad fix(ci): remove dependency-type from dependabot groups
  • e344ef7 Bump the development-dependencies group with 1 update
  • e0c759b ci: remove paths-ignore
  • f9d3b1b Bump the development-dependencies group with 1 update
  • 92c7c39 chore(ci): prevents duplicate workflow runs
  • 5767083 ci: regroup & auto-approve all github actions updates
  • b635cd3 ci: auto-merge dependabot PRs
  • Additional commits viewable in compare view


Updates github.com/go-openapi/jsonreference from 0.20.2 to 0.21.0

Commits
  • c5fa756 chore(go): go-openapi requires go.1.20 across the board
  • 12387f8 updated dependencies
  • 5aeffa5 fix(ci): remove dependency-type from dependabot groups
  • 95a16b7 Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  • 6a06213 Bump the development-dependencies group with 1 update
  • aad9db7 ci: remove paths-ignore
  • eef6c6a Bump the development-dependencies group with 1 update
  • 7c2c0ac chore(ci): prevents duplicate workflow runs
  • 19d90a5 ci: regroup & auto-approve all github actions updates
  • 6dced31 ci(dependencies): automate dependencies updates
  • Additional commits viewable in compare view


Updates github.com/go-openapi/swag from 0.22.3 to 0.23.0

Commits
  • 53e32e8 chore(go): go-openapi requires go.1.20 across the board
  • 5e655d8 fix(ci): remove dependency-type from dependabot groups
  • 54f3f80 chore(lint): relinted
  • 4896833 Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  • 6b32215 Bump the development-dependencies group with 1 update
  • db91acc ci: remove paths-ignores
  • fec0b4e Bump the development-dependencies group with 1 update
  • 14fcae4 chore(ci): prevents duplicate workflow runs
  • d33767c Bump the development-dependencies group with 1 update
  • c877230 ci(dependencies): automate dependencies updates
  • Additional commits viewable in compare view


Updates github.com/google/uuid from 1.4.0 to 1.6.0

Release notes

Sourced from github.com/google/uuid's releases.

v1.6.0

1.6.0 (2024-01-16)

Features

Bug Fixes

v1.5.0

1.5.0 (2023-12-12)

Features

  • Validate UUID without creating new UUID (#141) (9ee7366)
Changelog

Sourced from github.com/google/uuid's changelog.

1.6.0 (2024-01-16)

Features

Bug Fixes

1.5.0 (2023-12-12)

Features

  • Validate UUID without creating new UUID (#141) (9ee7366)
Commits


Updates github.com/prometheus/client_golang from 1.16.0 to 1.19.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.19.0

What's Changed

The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See prometheus/client_golang#1448 for more details). If your project uses client_golang and you want to use prometheus/common v0.48.0 or higher, please update client_golang to v1.19.0.

  • [CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). #1445 #1449
  • [FEATURE] collectors: Add version collector. #1422 #1427

New Contributors

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.18.0...v1.19.0

v1.18.0

What's Changed

  • [FEATURE] promlint: Allow creation of custom metric validations. #1311
  • [FEATURE] Go programs using client_golang can be built in wasip1 OS. #1350
  • [BUGFIX] histograms: Add timer to reset ASAP after bucket limiting has happened. #1367
  • [BUGFIX] testutil: Fix comparison of metrics with empty Help strings. #1378
  • [ENHANCEMENT] Improved performance of MetricVec.WithLabelValues(...). #1360

New Contributors

Full Changelog: https://github.com/prometheus/client_golang/compare/v1.17.0...v1.18.0

v1.17.0

What's Changed

  • [CHANGE] Minimum required go version is now 1.19 (we also test client_golang against new 1.21 version). #1325
  • [FEATURE] Add support for Created Timestamps in Counters, Summaries and Historams. #1313
  • [ENHANCEMENT] Enable detection of a native histogram without observations. #1314

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.19.0 / 2023-02-27

The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See prometheus/client_golang#1448 for more details). If your project uses client_golang and you want to use prometheus/common v0.48.0 or higher, please update client_golang to v1.19.0.

  • [CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). #1445 #1449
  • [FEATURE] collectors: Add version collector. #1422 #1427

1.18.0 / 2023-12-22

  • [FEATURE] promlint: Allow creation of custom metric validations. #1311
  • [FEATURE] Go programs using client_golang can be built in wasip1 OS. #1350
  • [BUGFIX] histograms: Add timer to reset ASAP after bucket limiting has happened. #1367
  • [BUGFIX] testutil: Fix comparison of metrics with empty Help strings. #1378
  • [ENHANCEMENT] Improved performance of MetricVec.WithLabelValues(...). #1360

1.17.0 / 2023-09-27

  • [CHANGE] Minimum required go version is now 1.19 (we also test client_golang against new 1.21 version). #1325
  • [FEATURE] Add support for Created Timestamps in Counters, Summaries and Historams. #1313
  • [ENHANCEMENT] Enable detection of a native histogram without observations. #1314
Commits
  • 77d4003 Add 1.19.0 changelog (#1451)
  • 14259fa Merge pull request #1448 from ywwg/owilliams/content-negotiation
  • 6d03920 deps: bump prometheus/common version
  • 353395b Remove support for go 1.19 (#1449)
  • 9dd5d2a Merge pull request #1445 from kavu/add_go122_metrics_test
  • c906a5e Add support for Go 1.22
  • 7ac9036 Merge pull request #1440 from prometheus/dependabot/github_actions/github-act...
  • 8c7e30f Merge pull request #1441 from prometheus/dependabot/go_modules/tutorial/whats...
  • 08769f8 Bump github.com/prometheus/common in /tutorial/whatsup
  • 83d5940 Bump the github-actions group with 2 updates
  • Additional commits viewable in compare view


Updates github.com/prometheus/client_model from 0.4.0 to 0.5.0

Release notes

Sourced from github.com/prometheus/client_model's releases.

v0.5.0 / 2023-10-03

What's Changed

New Contributors

Full Changelog: https://github.com/prometheus/client_model/compare/v0.4.0...v0.5.0

Commits
  • 1c92cad Merge pull request #72 from prometheus/repo_sync
  • 58db340 Update common Prometheus files
  • cbe84de Merge pull request #71 from prometheus/superq/update_build
  • 568c466 Update Go
  • baaa038 Merge pull request #70 from prometheus/repo_sync
  • 185bafb Update common Prometheus files
  • 7b38251 Merge pull request #69 from prometheus/repo_sync
  • 4dbcf4e Update common Prometheus files
  • cfbcccb Merge pull request #67 from prometheus/beorn7/histogram
  • 2a367b9 histogram: Add a doc comment about when to add a no-op span
  • Additional commits viewable in compare view


Updates github.com/prometheus/common from 0.44.0 to 0.48.0

Release notes

Sourced from github.com/prometheus/common's releases.

v0.48.0

This release will require changes of code that relies on direct access to content-type format strings. See the PR linked below for work-arounds. Please file an issue if your use case doesn't work anymore.

What's Changed

Full Changelog: https://github.com/prometheus/common/compare/v0.47.0...v0.48.0

v0.47.0

What's Changed

New Contributors

Full Changelog: https://github.com/prometheus/common/compare/v0.46.0...v0.47.0

v0.46.0

What's Changed

k8s-ci-robot commented 3 months ago

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot] Once this PR has been reviewed and has the lgtm label, please assign saad-ali for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/kubernetes-csi/external-resizer/blob/master/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
dependabot[bot] commented 3 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.