search

kubernetes-csi / external-snapshotter

Sidecar container that watches Kubernetes Snapshot CRD objects and triggers CreateSnapshot/DeleteSnapshot against a CSI endpoint.
Apache License 2.0
501 stars 374 forks source link

Bump the github-dependencies group across 1 directory with 14 updates #1165

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps the github-dependencies group with 6 updates in the / directory:

Package From To
github.com/prometheus/client_golang 1.20.2 1.20.4
github.com/prometheus/common 0.55.0 0.59.1
google.golang.org/grpc 1.65.0 1.67.0
github.com/klauspost/compress 1.17.9 1.17.10
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc 0.54.0 0.55.0
golang.org/x/oauth2 0.22.0 0.23.0

Updates github.com/prometheus/client_golang from 1.20.2 to 1.20.4

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.20.4

  • [BUGFIX] histograms: Fix a possible data race when appending exemplars vs metrics gather. #1623

v1.20.3

  • [BUGFIX] histograms: Fix possible data race when appending exemplars. #1608
Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

  • [BUGFIX] histograms: Fix possible data race when appending exemplars vs metrics gather. #1623

1.20.3 / 2024-09-05

  • [BUGFIX] histograms: Fix possible data race when appending exemplars. #1608
Commits
  • 05fcde9 Merge pull request #1623 from krajorama/data-race-in-histogram-write
  • 209f4c0 Add changelog
  • 1e398cc native histogram: Fix race between Write and addExemplar
  • ef2f87e Merge pull request #1620 from prometheus/arthursens/prepare-1.20.3
  • 937ac63 Add changelog entry for 1.20.3
  • 6e9914d Merge pull request #1608 from krajorama/index-out-of-range-native-histogram-e...
  • d6b8c89 Update comments with more explanations
  • 504566f Use simplified solution from #1609 for the data race
  • dc8e9a4 fix: native histogram: Simplify and fix addExemplar
  • dc819ce Use a trivial solution to #1605
  • Additional commits viewable in compare view


Updates github.com/prometheus/common from 0.55.0 to 0.59.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.59.1

What's Changed

Full Changelog: https://github.com/prometheus/common/compare/v0.59.0...v0.59.1

v0.59.0

What's Changed

Full Changelog: https://github.com/prometheus/common/compare/v0.58.0...v0.59.0

v0.58.0

What's Changed

Full Changelog: https://github.com/prometheus/common/compare/v0.57.0...v0.58.0

v0.57.0

What's Changed

New Contributors

Full Changelog: https://github.com/prometheus/common/compare/v0.56.0...v0.57.0

v0.56.0

What's Changed

... (truncated)

Commits
  • be8a747 fix(utf8): Fix multiple metric name inside braces validation (#691)
  • bf4843e Merge pull request #690 from ywwg/owilliams/default-escaping
  • 01da226 Change the default escape method to UnderscoreEscaping
  • 4f8e8f4 expfmt: Add WithEscapingScheme to help construct Formats (#688)
  • b1880d0 Merge pull request #687 from roidelapluie/checkheader
  • 334963d Change the logic for SetDirectory
  • d64a747 Remove secret file existence check in Validate for headers
  • 06c2425 Bump golang.org/x/net from 0.27.0 to 0.28.0 (#685)
  • 4606c0a Bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (#684)
  • d98411b Merge pull request #683 from tjhop/docs/promslog-README
  • Additional commits viewable in compare view


Updates google.golang.org/grpc from 1.65.0 to 1.67.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.67.0

Bug Fixes

  • ringhash: when used with multiple EDS priorities, fix bug that could prevent a higher priority from recovering from transient failure. (#7364)

Behavior Changes

  • In accordance with RFC 7540, clients and servers will now reject TLS connections that don't support ALPN. This can be disabled by setting the environment variable GRPC_ENFORCE_ALPN_ENABLED to false (case insensitive). Please file a bug if you encounter any issues with this behavior. The environment variable to revert this behavior will be removed in an upcoming release. (#7535)

Release 1.66.2

Dependencies

  • Remove unintentional dependency on the testing package (#7579)
  • Remove unintentional dependency on the flate package (#7595)

Bug Fixes

  • client: fix a bug that prevented memory reuse after handling unary RPCs (#7571)

Release 1.66.0

New Features

  • metadata: stabilize ValueFromIncomingContext (#7368)
  • client: stabilize the WaitForStateChange and GetState methods, which were previously experimental. (#7425)
  • xds: Implement ADS flow control mechanism (#7458)
  • balancer/rls: Add metrics for data cache and picker internals (#7484, #7495)
  • xds: LRS load reports now include the total_issued_requests field. (#7544)

Bug Fixes

  • grpc: Clients now return status code INTERNAL instead of UNIMPLEMENTED when the server uses an unsupported compressor. This is consistent with the gRPC compression spec. (#7461)
  • transport: Fix a bug which could result in writes busy looping when the underlying conn.Write returns errors (#7394)
  • client: fix race that could lead to orphaned connections and associated resources. (#7390)
  • xds: use locality from the connected address for load reporting with pick_first (#7378)
    • without this fix, if a priority contains multiple localities with pick_first, load was reported for the wrong locality
  • client: prevent hanging during ClientConn.Close() when the network is unreachable (#7540)

Performance Improvements

  • transport: double buffering is avoided when using an http connect proxy and the target server waits for client to send the first message. (#7424)
  • codec: Implement a new Codec which uses buffer recycling for encoded message (#7356)
    • introduce a mem package to facilitate buffer reuse (#7432)

... (truncated)

Commits


Updates github.com/klauspost/compress from 1.17.9 to 1.17.10

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.10

What's Changed

New Contributors

Full Changelog: https://github.com/klauspost/compress/compare/v1.17.9...v1.17.10

Commits


Updates go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc from 0.54.0 to 0.55.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's releases.

Release v1.30.0/v0.55.0/v0.24.0/v0.10.0/v0.5.0/v0.3.0/v0.2.0

Overview

Added

  • Add NewProducer to go.opentelemetry.io/contrib/instrumentation/runtime, which allows collecting the go.schedule.duration histogram metric from the Go runtime. (#5991)
  • Add gRPC protocol support for OTLP log exporter in go.opentelemetry.io/contrib/exporters/autoexport. (#6083)

Removed

Fixed

  • Superfluous call to WriteHeader when flushing after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6074)
  • Superfluous call to WriteHeader when writing the response body after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6055)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc's changelog.

[1.30.0/0.55.0/0.24.0/0.10.0/0.5.0/0.3.0/0.2.0] - 2024-09-10

Added

  • Add NewProducer to go.opentelemetry.io/contrib/instrumentation/runtime, which allows collecting the go.schedule.duration histogram metric from the Go runtime. (#5991)
  • Add gRPC protocol support for OTLP log exporter in go.opentelemetry.io/contrib/exporters/autoexport. (#6083)

Removed

Fixed

  • Superfluous call to WriteHeader when flushing after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6074)
  • Superfluous call to WriteHeader when writing the response body after setting a status code in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#6055)
Commits
  • 4ccc9c6 Release v1.30.0/v0.55.0/v0.24.0/v0.10.0/v0.5.0/v0.3.0/v0.2.0 (#6106)
  • d312469 fix(deps): update module github.com/golangci/golangci-lint to v1.61.0 (#6101)
  • 5425de9 Fix gosec lint issues (#6107)
  • 774b20e chore(deps): update kubernetes packages to v0.31.0 (#5926)
  • 38e6e1e chore(deps): update github.com/lufia/plan9stats digest to 873cd01 (#6098)
  • 9309161 fix(deps): update module google.golang.org/grpc to v1.66.1 (#6103)
  • 9a46844 fix(deps): update module github.com/aws/aws-sdk-go-v2/service/dynamodb to v1....
  • f43f59e fix(deps): update golang.org/x/exp digest to 701f63a (#6099)
  • 53b99ae feat: add grpc support for log autoexport (#6083)
  • 23e6f6c chore(deps): update module github.com/go-playground/validator/v10 to v10.22.1...
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/otel from 1.29.0 to 1.30.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.30.0/0.52.0/0.6.0/0.0.9] 2024-09-09

Added

  • Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environments in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#5739)
  • The WithResource option for NewMeterProvider now merges the provided resources with the ones from environment variables. (#5773)
  • The WithResource option for NewLoggerProvider now merges the provided resources with the ones from environment variables. (#5773)
  • Add UTF-8 support to go.opentelemetry.io/otel/exporters/prometheus. (#5755)

Fixed

  • Fix memory leak in the global MeterProvider when identical instruments are repeatedly created. (#5754)
  • Fix panic on instruments creation when setting meter provider. (#5758)
  • Fix an issue where SetMeterProvider in go.opentelemetry.io/otel might miss the delegation for instruments and registries. (#5780)

Removed

Commits
  • ed4fc75 Release v1.30.0/v0.52.0/v0.6.0/v0.0.9 (#5797)
  • cdd2dbb Drop support for Go 1.21 in dice example (#5800)
  • e9ac0d2 fix(deps): update module google.golang.org/grpc to v1.66.1 (#5798)
  • 4cc9fee fix(deps): update golang.org/x/exp digest to 701f63a (#5795)
  • 71b341f Add utf8 support to the prometheus exporter (#5755)
  • 506a9ba Fix typos (#5763)
  • b37e8a9 SetMeterProvider might miss the delegation for instruments and registries (...
  • 9e1b015 fix(metric, log): merge explicit resource with environment variables (#5773)
  • 8dca9cc Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE envi...
  • fb7cc02 fix(deps): update module github.com/prometheus/client_golang to v1.20.3 (#5788)
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/otel/metric from 1.29.0 to 1.30.0

Changelog

Sourced from go.opentelemetry.io/otel/metric's changelog.

[1.30.0/0.52.0/0.6.0/0.0.9] 2024-09-09

Added

  • Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environments in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#5739)
  • The WithResource option for NewMeterProvider now merges the provided resources with the ones from environment variables. (#5773)
  • The WithResource option for NewLoggerProvider now merges the provided resources with the ones from environment variables. (#5773)
  • Add UTF-8 support to go.opentelemetry.io/otel/exporters/prometheus. (#5755)

Fixed

  • Fix memory leak in the global MeterProvider when identical instruments are repeatedly created. (#5754)
  • Fix panic on instruments creation when setting meter provider. (#5758)
  • Fix an issue where SetMeterProvider in go.opentelemetry.io/otel might miss the delegation for instruments and registries. (#5780)

Removed

Commits
  • ed4fc75 Release v1.30.0/v0.52.0/v0.6.0/v0.0.9 (#5797)
  • cdd2dbb Drop support for Go 1.21 in dice example (#5800)
  • e9ac0d2 fix(deps): update module google.golang.org/grpc to v1.66.1 (#5798)
  • 4cc9fee fix(deps): update golang.org/x/exp digest to 701f63a (#5795)
  • 71b341f Add utf8 support to the prometheus exporter (#5755)
  • 506a9ba Fix typos (#5763)
  • b37e8a9 SetMeterProvider might miss the delegation for instruments and registries (...
  • 9e1b015 fix(metric, log): merge explicit resource with environment variables (#5773)
  • 8dca9cc Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE envi...
  • fb7cc02 fix(deps): update module github.com/prometheus/client_golang to v1.20.3 (#5788)
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/otel/trace from 1.29.0 to 1.30.0

Changelog

Sourced from go.opentelemetry.io/otel/trace's changelog.

[1.30.0/0.52.0/0.6.0/0.0.9] 2024-09-09

Added

  • Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE environments in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. (#5739)
  • The WithResource option for NewMeterProvider now merges the provided resources with the ones from environment variables. (#5773)
  • The WithResource option for NewLoggerProvider now merges the provided resources with the ones from environment variables. (#5773)
  • Add UTF-8 support to go.opentelemetry.io/otel/exporters/prometheus. (#5755)

Fixed

  • Fix memory leak in the global MeterProvider when identical instruments are repeatedly created. (#5754)
  • Fix panic on instruments creation when setting meter provider. (#5758)
  • Fix an issue where SetMeterProvider in go.opentelemetry.io/otel might miss the delegation for instruments and registries. (#5780)

Removed

Commits
  • ed4fc75 Release v1.30.0/v0.52.0/v0.6.0/v0.0.9 (#5797)
  • cdd2dbb Drop support for Go 1.21 in dice example (#5800)
  • e9ac0d2 fix(deps): update module google.golang.org/grpc to v1.66.1 (#5798)
  • 4cc9fee fix(deps): update golang.org/x/exp digest to 701f63a (#5795)
  • 71b341f Add utf8 support to the prometheus exporter (#5755)
  • 506a9ba Fix typos (#5763)
  • b37e8a9 SetMeterProvider might miss the delegation for instruments and registries (...
  • 9e1b015 fix(metric, log): merge explicit resource with environment variables (#5773)
  • 8dca9cc Support OTEL_EXPORTER_OTLP_LOGS_INSECURE and OTEL_EXPORTER_OTLP_INSECURE envi...
  • fb7cc02 fix(deps): update module github.com/prometheus/client_golang to v1.20.3 (#5788)
  • Additional commits viewable in compare view


Updates golang.org/x/net from 0.28.0 to 0.29.0

Commits
  • 35b4aba go.mod: update golang.org/x dependencies
  • 9bf379f websocket: fix printf(var) mistake detected by latest printf checker
  • See full diff in compare view


Updates golang.org/x/oauth2 from 0.22.0 to 0.23.0

Commits


Updates golang.org/x/sys from 0.24.0 to 0.25.0

Commits
  • a43b625 windows: add SIO_UDP_NETRESET constant
  • ed67b15 windows: add console codepage api
  • 9cb830b unix: add missing import to syscall_hurd.go
  • 71132f5 unix: add POLLRDHUP to FreeBSD
  • 3283fc3 cpu: add support for detecting RISC-V extensions
  • 29e55b2 unix: use os.Executable rather than os.Args[0] in tests
  • a8c5219 unix: rename XDPUmemReg field back to Size
  • 59665e5 unix: add Connectx for darwin
  • a0c72ef unix: add f_flag member flags on z/OS
  • c64c51d unix: update riscv64 hwprobe to Linux kernel 6.10
  • Additional commits viewable in compare view


Updates golang.org/x/term from 0.23.0 to 0.24.0

Commits
  • 2f7b0dd go.mod: update golang.org/x dependencies
  • f867b76 x/term: set missing VIRTUAL_TERMINAL_INPUT flag on Windows
  • See full diff in compare view


Updates golang.org/x/text from 0.17.0 to 0.18.0

Commits
  • 1e3e9fd all: rename Example test functions to prevent vet errors
  • See full diff in compare view


Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20240822170219-fc7c04adadcd to 0.0.0-20240903143218-8af14fe29dc1

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group ... _Description has been truncated_
k8s-ci-robot commented 1 month ago

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot] Once this PR has been reviewed and has the lgtm label, please assign saad-ali for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/kubernetes-csi/external-snapshotter/blob/master/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
k8s-ci-robot commented 1 month ago

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a kubernetes-csi member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes-sigs/prow](https://github.com/kubernetes-sigs/prow/issues/new?title=Prow%20issue:) repository.
dependabot[bot] commented 1 month ago

Looks like these dependencies are updatable in another way, so this is no longer needed.