search

kubevirt / ssp-operator

Operator that deploys additional KubeVirt resources
Apache License 2.0
29 stars 47 forks source link

chore(deps): Bump the production-dependencies group across 1 directory with 11 updates #1049

Closed dependabot[bot] closed 3 weeks ago

dependabot[bot] commented 4 weeks ago

Bumps the production-dependencies group with 6 updates in the / directory:

Package From To
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring 0.75.2 0.76.0
github.com/prometheus/client_golang 1.19.1 1.20.0
k8s.io/apiextensions-apiserver 0.30.3 0.31.0
k8s.io/kube-aggregator 0.30.3 0.31.0
sigs.k8s.io/controller-runtime 0.18.5 0.19.0
google.golang.org/api 0.191.0 0.192.0

Updates github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.75.2 to 0.76.0

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

v0.76.0

0.76.0 / 2025-08-08

  • [CHANGE] Enhanced secret management in Prometheus and PrometheusAgent CRDs by switching the secrets field from atomic to listType: set, allowing independent handling of entries by different managers to prevent conflicts and improve deployment stability. #6762
  • [CHANGE] Add API-level validations to Kubernetes SD in the ScrapeConfig CRD. #6678
  • [FEATURE] Add TLS and Proxy settings to OAuth2 configuration for Prometheus and PrometheusAgent CRDs. #6735
  • [FEATURE] Add support for OAuth2 in the ScrapeConfig CRD. #6814
  • [FEATURE] Add scale subresource to the Alertmanger CRD. #6728
  • [FEATURE] Add Scaleway service discovery to the ScrapeConfig CRD. #6711
  • [FEATURE] Add serviceDiscoveryRole field to the Prometheus and PrometheusAgent CRDs to select between Endpoints (default) and EndpointSlice for discovering scrape and alerting targets. #6672
  • [ENHANCEMENT] Make the namespace field optional in the Alertmanager endpoints configuration of the Prometheus CRD, if not defined it will use the default namespace. #6338
  • [ENHANCEMENT] Add support to configure the TLS version for Prometheus, PrometheusAgent and Alertmanager CRDs. #6736
  • [ENHANCEMENT] Add -secret-label-selector argument to the operator to filter the Secrets being watched. #6731
  • [ENHANCEMENT] Add attachMetadata field to ScrapeClasses. #6756
  • [BUGFIX] Add support for all proxy settings in the Alertmanager configuration. #6818
Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.76.0 / 2025-08-08

[CHANGE] Enhanced secret management in Prometheus and PrometheusAgent CRDs by switching the secrets field from atomic to listType: set, allowing independent handling of entries by different managers to prevent conflicts and improve deployment stability. #6762 [CHANGE] Add API-level validations to Kubernetes SD in the ScrapeConfig CRD. #6678 [FEATURE] Add TLS and Proxy settings to OAuth2 configuration for Prometheus and PrometheusAgent CRDs. #6735 [FEATURE] Add support for OAuth2 in the ScrapeConfig CRD. #6814 [FEATURE] Add scale subresource to the Alertmanger CRD. #6728 [FEATURE] Add Scaleway service discovery to the ScrapeConfig CRD. #6711 [FEATURE] Add serviceDiscoveryRole field to the Prometheus and PrometheusAgent CRDs to select between Endpoints (default) and EndpointSlice for discovering scrape and alerting targets. #6672 [ENHANCEMENT] Make the namespace field optional in the Alertmanager endpoints configuration of the Prometheus CRD, if not defined it will use the default namespace. #6338 [ENHANCEMENT] Add support to configure the TLS version for Prometheus, PrometheusAgent and Alertmanager CRDs. #6736 [ENHANCEMENT] Add -secret-label-selector argument to the operator to filter the Secrets being watched. #6731 [ENHANCEMENT] Add attachMetadata field to ScrapeClasses. #6756 [BUGFIX] Add support for all proxy settings in the Alertmanager configuration. #6818

Commits
  • 022a289 Merge pull request #6834 from prometheus-operator/nicolas/prepare-0.76
  • e12ef9a Update CHANGELOG.md
  • 1565ea0 Update CHANGELOG.md
  • 2ea3a03 Update CHANGELOG.md
  • 7da8459 [CHORE] updating change log
  • 46076a5 [CHORE] generating templates 0.76
  • 6b6c773 [CHORE] upgrading prometheus
  • 6ad25e9 [CHORE] updating dependencies
  • a7a1ad6 Merge pull request #6827 from prometheus-operator/arthur-affiliation
  • 99f737f chore: replace go kit log in alertmanager package (#6828)
  • Additional commits viewable in compare view


Updates github.com/prometheus/client_golang from 1.19.1 to 1.20.0

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.20.0

Thanks everyone for contributions!

:warning: In this release we remove one (broken anyway, given Go runtime changes) metric and add three new (representing GOGC, GOMEMLIMIT and GOMAXPROCS flags) to the default collectors.NewGoCollector() collector. Given its popular usage, expect your binary to expose two additional metric.

Changes

  • [CHANGE] :warning: go-collector: Remove go_memstat_lookups_total metric which was always 0; Go runtime stopped sharing pointer lookup statistics. #1577
  • [FEATURE] :warning: go-collector: Add 3 default metrics: go_gc_gogc_percent, go_gc_gomemlimit_bytes and go_sched_gomaxprocs_threads as those are recommended by the Go team. #1559
  • [FEATURE] go-collector: Add more information to all metrics' HELP e.g. the exact runtime/metrics sourcing each metric (if relevant). #1568 #1578
  • [FEATURE] testutil: Add CollectAndFormat method. #1503
  • [FEATURE] histograms: Add support for exemplars in native histograms. #1471
  • [FEATURE] promhttp: Add experimental support for zstd on scrape, controlled by the request Accept-Encoding header. #1496
  • [FEATURE] api/v1: Add WithLimit parameter to all API methods that supports it. #1544
  • [FEATURE] prometheus: Add support for created timestamps in constant histograms and constant summaries. #1537
  • [FEATURE] process-collectors: Add network usage metrics: process_network_receive_bytes_total and process_network_transmit_bytes_total. #1555
  • [FEATURE] promlint: Add duplicated metric lint rule. #1472
  • [BUGFIX] promlint: Relax metric type in name linter rule. #1455
  • [BUGFIX] promhttp: Make sure server instrumentation wrapping supports new and future extra responseWriter methods. #1480
  • [BUGFIX] testutil: Functions using compareMetricFamilies are now failing if filtered metricNames are not in the input. #1424

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.20.0 / 2024-08-14

  • [CHANGE] :warning: go-collector: Remove go_memstat_lookups_total metric which was always 0; Go runtime stopped sharing pointer lookup statistics. #1577
  • [FEATURE] :warning: go-collector: Add 3 default metrics: go_gc_gogc_percent, go_gc_gomemlimit_bytes and go_sched_gomaxprocs_threads as those are recommended by the Go team. #1559
  • [FEATURE] go-collector: Add more information to all metrics' HELP e.g. the exact runtime/metrics sourcing each metric (if relevant). #1568 #1578
  • [FEATURE] testutil: Add CollectAndFormat method. #1503
  • [FEATURE] histograms: Add support for exemplars in native histograms. #1471
  • [FEATURE] promhttp: Add experimental support for zstd on scrape, controlled by the request Accept-Encoding header. #1496
  • [FEATURE] api/v1: Add WithLimit parameter to all API methods that supports it. #1544
  • [FEATURE] prometheus: Add support for created timestamps in constant histograms and constant summaries. #1537
  • [FEATURE] process-collectors: Add network usage metrics: process_network_receive_bytes_total and process_network_transmit_bytes_total. #1555
  • [FEATURE] promlint: Add duplicated metric lint rule. #1472
  • [BUGFIX] promlint: Relax metric type in name linter rule. #1455
  • [BUGFIX] promhttp: Make sure server instrumentation wrapping supports new and future extra responseWriter methods. #1480
  • [BUGFIX] testutil: Functions using compareMetricFamilies are now failing if filtered metricNames are not in the input. #1424

1.19.0 / 2024-02-27

The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See prometheus/client_golang#1448 for more details). If your project uses client_golang and you want to use prometheus/common v0.48.0 or higher, please update client_golang to v1.19.0.

  • [CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). #1445 #1449
  • [FEATURE] collectors: Add version collector. #1422 #1427

1.18.0 / 2023-12-22

  • [FEATURE] promlint: Allow creation of custom metric validations. #1311
  • [FEATURE] Go programs using client_golang can be built in wasip1 OS. #1350
  • [BUGFIX] histograms: Add timer to reset ASAP after bucket limiting has happened. #1367
  • [BUGFIX] testutil: Fix comparison of metrics with empty Help strings. #1378
  • [ENHANCEMENT] Improved performance of MetricVec.WithLabelValues(...). #1360

1.17.0 / 2023-09-27

  • [CHANGE] Minimum required go version is now 1.19 (we also test client_golang against new 1.21 version). #1325
  • [FEATURE] Add support for Created Timestamps in Counters, Summaries and Historams. #1313
  • [ENHANCEMENT] Enable detection of a native histogram without observations. #1314

1.16.0 / 2023-06-15

  • [BUGFIX] api: Switch to POST for LabelNames, Series, and QueryExemplars. #1252
  • [BUGFIX] api: Fix undefined execution order in return statements. #1260
  • [BUGFIX] native histograms: Fix bug in bucket key calculation. #1279
  • [ENHANCEMENT] Reduce constrainLabels allocations for all metrics. #1272
  • [ENHANCEMENT] promhttp: Add process start time header for scrape efficiency. #1278
  • [ENHANCEMENT] promlint: Improve metricUnits runtime. #1286

1.15.1 / 2023-05-3

  • [BUGFIX] Fixed promhttp.Instrument* handlers wrongly trying to attach exemplar to unsupported metrics (e.g. summary),
    causing panics. #1253

... (truncated)

Commits
  • 73b811c Cut 1.20.0 release. (#1580)
  • 7ce5089 gocollector: Attach original runtime/metrics metric name to help. (#1578)
  • 062300e Remove go_memstat_lookups_total; added runtime/metrics calculation to memstat...
  • aa3c00d Update common Prometheus files (#1576)
  • 3ad2722 Add default Go runtime metrics for /gc/gogc:percent, /gc/gomemlimit:bytes, /s...
  • 0715727 Update common Prometheus files (#1573)
  • 3634bd9 ci: daggerize test and lint pipelines (#1534)
  • 28b5e6e Merge pull request #1572 from prometheus/repo_sync
  • 8e18075 Update common Prometheus files
  • 46f77a9 Merge pull request #1571 from prometheus/dependabot/github_actions/github-act...
  • Additional commits viewable in compare view


Updates k8s.io/apiextensions-apiserver from 0.30.3 to 0.31.0

Commits


Updates k8s.io/apimachinery from 0.30.3 to 0.31.0

Commits
  • a8f449e Falls back to SPDY for gorilla/websocket https proxy error
  • 62791ec Merge pull request #125571 from liggitt/filter-auth-02-sar
  • cc2ba35 add field and label selectors to authorization attributes
  • ce76a8f generate
  • 35052c5 add subjectaccessreview field and label selectors
  • ab06869 Merge pull request #126105 from benluddy/cbor-framer
  • 429f4e4 Implement runtime.Framer for CBOR Sequences.
  • d7e1c53 Merge pull request #126018 from aroradaman/bump-k8s-utils
  • 07cb122 Merge pull request #125748 from benluddy/cbor-custom-marshalers
  • dd17456 bump k8s.io/utils
  • Additional commits viewable in compare view


Updates k8s.io/client-go from 0.30.3 to 0.31.0

Commits
  • 02a19c3 Update dependencies to v0.31.0 tag
  • 5e3e8ea informers: add comment that Start does not block
  • f71a5cc Call non-blocking informerFactory.Start synchronously to avoid races
  • 4536e5a Merge pull request #124012 from Jefftree/le-controller
  • 93c6a5b Merge pull request #126353 from liggitt/fix-vendor
  • 6a9911a revendor dependencies
  • fe54892 Merge pull request #126243 from SergeyKanzhelev/devicePluginFailures
  • 825f52e Change PingTime to be persistent
  • f45c451 fix ordering issue in candidates
  • 18dd587 feedback: leasecandidate clients
  • Additional commits viewable in compare view


Updates k8s.io/kube-aggregator from 0.30.3 to 0.31.0

Commits
  • ce70bea Update dependencies to v0.31.0 tag
  • f5edbf4 informers: add comment that Start does not block
  • 2433e7a Merge pull request #125661 from mjudeikis/mjudeikis/poststarthookctx.stopch.c...
  • d4566e5 Merge pull request #126149 from sttts/sttts-aggregator-availability-controlle...
  • 87f8e9e aggregator: split availability controller into local and remote part
  • 006e6b9 aggregator: make linter happy
  • 34c473f aggregator: (pre-)move availability controller
  • 8942dc0 aggregator: separate out status controller metrics
  • bb33e4e Merge pull request #125571 from liggitt/filter-auth-02-sar
  • 62b6dfb clean ctx
  • Additional commits viewable in compare view


Updates k8s.io/utils from 0.0.0-20240502163921-fe8a2dddb1d0 to 0.0.0-20240711033017-18e509b52bc8

Commits


Updates sigs.k8s.io/controller-runtime from 0.18.5 to 0.19.0

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.19.0

:warning: Deprecation Warnings

Please note that admission.Defaulter/Validator have been deprecated in favor of admission.CustomDefaulter/CustomValidator since v0.17 and will be removed with v0.20.

:warning: Breaking Changes

:sparkles: New Features

  • client: Add WithFieldValidation client (#2860 #2913)
  • controller & webhook: Recover panics per default & add panic metrics (#2905)
  • controllerutil: configure BlockOwnerDeletion when setting OwnerReference (#2847)
  • fake client: Add scale subresource logic (#2855)
  • predicate: Add missing generic version of ResourceVersionChangedPredicate (#2812)
  • setup-envtest: Download binaries from controller-tools releases instead of GCS (#2811)
  • setup-envtest: Publish setup-envtest binaries via release attachments (#2911)
  • workqueue: Add controller label to workqueue metrics (#2895)

:bug: Bug Fixes

  • apiutil.IsGVKNamespaced: Fix namespaced GVK check to use version (#2875)
  • cache: Fix label defaulting of byObject when namespaces are configured (#2805)
  • certwatcher: Recreate watcher if the file is unlinked and replaced (#2893)
  • manager: Fix log in AddMetricsServerExtraHandler (#2874)
  • manager: Quiet context.Canceled errors during shutdown (#2745)
  • manager: Reintroduce AddMetricsServerExtraHandler (#2813)
  • manager.Start: Prevent LeaderElector setup error from being swallowed (#2876)
  • source.Kind: String() should return correct type (#2806)

:seedling: Others

  • actions: Add action to approve actions if /ok-to-test is set (#2908)
  • controller: Add dynamic watcher tests (#2881)
  • dependabot: disable go module bumps, bump all actions in a single PR (#2856)
  • verify-modules: Verify go modules are in sync with upstream k/k (#2774)

:book: Additionally, there have been 5 contributions to our documentation. (#2830, #2849, #2863, #2894, #2899, #2910)

Dependencies

Added

  • cel.dev/expr: v0.15.0
  • github.com/antlr4-go/antlr/v4: v4.13.0

... (truncated)

Commits
  • b901db1 Merge pull request #2924 from lucacome/bump-deps
  • 0c7827e Bump k8s.io deps to v1.31.0
  • 9f5afec Merge pull request #2918 from sbueringer/pr-add-skip-name-validation
  • 96e8152 Merge pull request #2921 from kubernetes-sigs/dependabot/github_actions/all-g...
  • 8f5faff :seedling: Bump actions/upload-artifact in the all-github-actions group
  • 89bebe3 Add SkipNameValidation option
  • 7857623 Merge pull request #2911 from sbueringer/pr-publish-setup-envtest
  • fdc8bd7 Merge pull request #2913 from sbueringer/pr-test-cov-field-validation
  • 7dfd3bb Fix WithFieldValidation client
  • e882354 Merge pull request #2908 from sbueringer/pr-approve-action
  • Additional commits viewable in compare view


Updates github.com/google/pprof from 0.0.0-20240424215950-a892ee059fd6 to 0.0.0-20240525223248-4bfdf5a9a2af

Commits


Updates google.golang.org/api from 0.191.0 to 0.192.0

Release notes

Sourced from google.golang.org/api's releases.

v0.192.0

0.192.0 (2024-08-13)

Features

Bug Fixes

  • internal/cba: Update credsNewAuth path to use nil oauth2 client (#2731) (b457582)
Changelog

Sourced from google.golang.org/api's changelog.

0.192.0 (2024-08-13)

Features

Bug Fixes

  • internal/cba: Update credsNewAuth path to use nil oauth2 client (#2731) (b457582)
Commits


Updates k8s.io/apiserver from 0.30.3 to 0.31.0

Commits
  • 525dec2 Update dependencies to v0.31.0 tag
  • 78c69b6 Merge remote-tracking branch 'origin/master' into release-1.31
  • 1ebb228 Make object transformation concurrent to remove watch cache scalability issue...
  • 2f0f9ad Introduce ConcurrentWatchObjectDecode feature gate disabled by default
  • f36c496 Merge remote-tracking branch 'origin/master' into release-1.31
  • 078d9cb Merge pull request #126469 from serathius/beta2
  • 6fe68d6 Merge remote-tracking branch 'origin/master' into release-1.31
  • db03ef6 Merge pull request #126470 from benluddy/apiservingwithroutine-alpha-disabled
  • 19e03dd Move ConsistentListFromCache to Beta default again
  • c47cf43 Move APIServingWithRoutine to alpha and disabled by default.
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
kubevirt-bot commented 4 weeks ago

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: Once this PR has been reviewed and has the lgtm label, please assign lyarwood for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files: - **[OWNERS](https://github.com/kubevirt/ssp-operator/blob/main/OWNERS)** Approvers can indicate their approval by writing `/approve` in a comment Approvers can cancel approval by writing `/approve cancel` in a comment
sonarcloud[bot] commented 4 weeks ago

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

openshift-ci[bot] commented 4 weeks ago

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/images 630d95bb14a57e181f7a141ec05644a215ee91f6 link true /test images
ci/prow/e2e-functests 630d95bb14a57e181f7a141ec05644a215ee91f6 link true /test e2e-functests
ci/prow/e2e-single-node-functests 630d95bb14a57e181f7a141ec05644a215ee91f6 link true /test e2e-single-node-functests
ci/prow/unittests 630d95bb14a57e181f7a141ec05644a215ee91f6 link true /test unittests
ci/prow/e2e-upgrade-functests 630d95bb14a57e181f7a141ec05644a215ee91f6 link true /test e2e-upgrade-functests

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available [here](https://git.k8s.io/community/contributors/guide/pull-requests.md). If you have questions or suggestions related to my behavior, please file an issue against the [kubernetes-sigs/prow](https://github.com/kubernetes-sigs/prow/issues/new?title=Prow%20issue:) repository. I understand the commands that are listed [here](https://go.k8s.io/bot-commands).
dependabot[bot] commented 3 weeks ago

Looks like these dependencies are updatable in another way, so this is no longer needed.