Bump the gomod-dependencies group across 1 directory with 2 updates

Bumps the gomod-dependencies group with 2 updates in the /tools directory: github.com/estesp/manifest-tool/v2 and github.com/golangci/golangci-lint.

Updates github.com/estesp/manifest-tool/v2 from 2.0.8 to 2.1.6

Release notes

Sourced from github.com/estesp/manifest-tool/v2's releases.

manifest-tool 2.1.6

Welcome to the v2.1.6 release of manifest-tool!

This is a small release that captures vendor updates and Go toolchain updates that fix various CVEs. The alpine images are also refreshed to the latest release of Alpine Linux 3.19.

Please report bugs to the issue tracker at https://github.com/estesp/manifest-tool/issues.

manifest-tool 2.1.5

Welcome to the v2.1.5 release of manifest-tool!

The v2.1.5 release adds a fix to bring the build-time version changes from v2.1.4 into the cross-built binaries that are used for the release tarball.

Also, the Go version used for CI and release builds was updated to v1.21.5 and the vendoring of containerd was updated to the latest version in the v1.7 line, v1.7.11.

If you do find bugs, please report them to the GitHub issue tracker for manifest-tool.

Please report bugs to the issue tracker at https://github.com/estesp/manifest-tool/issues.

manifest-tool 2.1.4

Welcome to the v2.1.4 release of manifest-tool!

The v2.1.4 release includes a fix that should allow it to be vendored by other projects with a more recent Docker version and work properly.

This is also the first release where the version hardcoding is removed and the release scripts/Makefile will properly set the version based on the git tag information.

Thanks to @tricktron for a contribution to make versioning not dependent on my potentially weak memory of what to do during the release process!

If you do find bugs, please report them to the GitHub issue tracker for manifest-tool.

Please report bugs to the issue tracker at https://github.com/estesp/manifest-tool/issues.

manifest-tool 2.1.3

Welcome to the v2.1.3 release of manifest-tool!

NOTE: v2.1.3 is a quick re-spin of v2.1.x to handle a timeout during the GH Actions release script run

The v2.1.3 release includes several new features and is now

... (truncated)

Commits

d96ae95 Merge pull request #252 from estesp/dependabot/go_modules/v2/google.golang.or...
4fe92d6 Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /v2
830e596 Merge pull request #251 from estesp/update-vendors
45fbbef Update install of git-validation script
57d3567 Update Go to 1.22.1
67720b6 Update vendors
29c4cb6 Merge pull request #247 from yarikoptic/enh-codespell
06d3e14 [DATALAD RUNCMD] run codespell throughout fixing typo automagically
c9a3359 Ignore vendored code
51b99ff Add rudimentary codespell config
Additional commits viewable in compare view

Updates github.com/golangci/golangci-lint from 1.52.2 to 1.59.0

Release notes

Sourced from github.com/golangci/golangci-lint's releases.

v1.59.0

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! :heart:

For key updates, see the changelog.

Changelog

4f5251d3 Support Sarif output (#4723)

73110df2 build(deps): bump github.com/Antonboom/testifylint from 1.2.0 to 1.3.0 (#4729)

62c83ccd build(deps): bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0 (#4746)

0cb14183 build(deps): bump github.com/go-critic/go-critic from 0.11.3 to 0.11.4 (#4738)

e14ae4b7 build(deps): bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0 (#4745)

2059b18a build(deps): bump github.com/securego/gosec/v2 from 2.20.0 to 5f0084eb01a9 (#4748)

be1bb6db build(deps): bump go-simpler.org/sloglint from 0.6.0 to 0.7.0 (#4718)

08deff42 feat: add warning about disabled and deprecated linters (level 2) (#4742)

b99d5295 feat: allow the analysis of generated files (#4740)

867adaf9 feat: deprecate github-actions format (#4726)

4beae6a9 fix: remove errcheck defaults (#4734)

v1.58.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! :heart:

For key updates, see the changelog.

Changelog

7c87a9e6 build(deps): bump github.com/Antonboom/nilnil from 0.1.8 to 0.1.9 (#4716)

3fbc2f52 build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#4725)

8fe47a93 build(deps): bump github.com/lasiar/canonicalheader from 1.0.6 to 1.1.1 (#4715)

8c4cfb61 build(deps): bump github.com/securego/gosec/v2 from 2.19.0 to 2.20.0 (#4724)

35eaf609 build(deps): bump go-simpler.org/musttag from 0.12.1 to 0.12.2 (#4710)

7f6606a7 build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (#4722)

v1.58.1

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! :heart:

For key updates, see the changelog.

Changelog

dc281531 build(deps): bump github.com/4meepo/tagalign from 1.3.3 to 1.3.4 (#4705)

... (truncated)

Changelog

Sourced from github.com/golangci/golangci-lint's changelog.

v1.59.0

Enhancements

Add SARIF output format

Allow the analysis of generated files (issues.exclude-generated: disable)

Updated linters

errcheck: fix deprecation warning

go-critic: from 0.11.3 to 0.11.4

gosec: from 2.20.0 to 5f0084eb01a9 (fix G601 and G113 performance issues)

sloglint: from 0.6.0 to 0.7.0 (new option forbidden-keys)

testifylint: from 1.2.0 to 1.3.0 (new checker negative-positive and new option go-require.ignore-http-handlers)

Misc.

️️⚠️ Deprecate github-action output format

️️⚠️ Deprecate issues.exclude-generated-strict option (replaced by issues.exclude-generated: strict)

️️⚠️ Add warning about disabled and deprecated linters (level 2)

v1.58.2

Updated linters

canonicalheader: from 1.0.6 to 1.1.1

gosec: from 2.19.0 to 2.20.0

musttag: from 0.12.1 to 0.12.2

nilnil: from 0.1.8 to 0.1.9

Documentation

Improve integrations and install pages

v1.58.1

Updated linters

tagalign: from 1.3.3 to 1.3.4

protogetter: from 0.3.5 to 0.3.6

gochecknoinits: fix analyzer name

Fixes

Restores previous gihub-actions output format (removes GitHub Action problem matchers)

v1.58.0

New linters

fatcontext: https://github.com/Crocmagnon/fatcontext

canonicalheader: https://github.com/lasiar/canonicalheader

Updated linters

copyloopvar: from 1.0.10 to 1.1.0 (ignore-alias is replaced by check-alias with the opposite behavior)

decorder: from 0.4.1 to 0.4.2

errname: from 0.1.12 to 0.1.13

errorlint: from 1.4.8 to 1.5.1 (new options allowed-errors and allowed-errors-wildcard)

execinquery: deprecate linter ⚠️

gci: from 0.12.3 to 0.13.4 (new section localModule)

gocritic: from 0.11.2 to 0.11.3

spancheck: from 0.5.3 to 0.6.1

goerr113 is replaced by err113 ⚠️

... (truncated)

Commits

2059b18 build(deps): bump github.com/securego/gosec/v2 from 2.20.0 to 5f0084eb01a9 (#...
95ca3c3 dev: fix badges
495321c dev: improve issue chooser (#4747)
62c83cc build(deps): bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0 (#4746)
e14ae4b build(deps): bump github.com/hashicorp/go-version from 1.6.0 to 1.7.0 (#4745)
010b4f8 chore: use global security policy
b99d529 feat: allow the analysis of generated files (#4740)
08deff4 feat: add warning about disabled and deprecated linters (level 2) (#4742)
b9868e1 chore: add html to the JSONSchema (#4737)
0cb1418 build(deps): bump github.com/go-critic/go-critic from 0.11.3 to 0.11.4 (#4738)
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions

kubernetes-sigs / ip-masq-agent