search

mondoohq / mondoo-operator

☸️ Mondoo Client Kubernetes Operator
https://mondoo.com
Other
34 stars 13 forks source link

Bump the gomodupdates group across 1 directory with 9 updates #1143

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps the gomodupdates group with 6 updates in the / directory:

Package From To
github.com/cert-manager/cert-manager 1.14.5 1.15.1
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring 0.74.0 0.75.0
github.com/rs/zerolog 1.32.0 1.33.0
github.com/spf13/cobra 1.8.0 1.8.1
go.mondoo.com/cnquery/v11 11.5.0 11.10.0
go.mondoo.com/cnspec/v11 11.5.0 11.10.0

Updates github.com/cert-manager/cert-manager from 1.14.5 to 1.15.1

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.15.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

🔗 See v1.15.0 for more information about cert-manager 1.15 and read-before-upgrade info.

📜 Changes since v1.15.0

Bug or Regression

  • BUGFIX: fix issue that caused Vault issuer to not retry signing when an error was encountered. (#7111, @​inteon)

Other (Cleanup or Flake)

v1.15.0

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

cert-manager 1.15 promotes several features to beta, including GatewayAPI support (ExperimentalGatewayAPISupport), the ability to provide a subject in the Certificate that will be used literally in the CertificateSigningRequest (LiteralCertificateSubject) and the outputting of additional certificate formats (AdditionalCertificateOutputFormats).

[!NOTE]

The cmctl binary have been moved to https://github.com/cert-manager/cmctl/releases. For the startupapicheck Job you should update references to point at quay.io/jetstack/cert-manager-startupapicheck

[!NOTE]

From this release, the Helm chart will no longer uninstall the CRDs when the chart is uninstalled. If you want the CRDs to be removed on uninstall use crds.keep=false when installing the Helm chart.

Community

Thanks again to all open-source contributors with commits in this release, including: @​Pionerd, @​SgtCoDFish, @​ThatsMrTalbot, @​andrey-dubnik, @​bwaldrep, @​eplightning, @​erikgb, @​findnature, @​gplessis, @​import-shiburin, @​inteon, @​jkroepke, @​lunarwhite, @​mangeshhambarde, @​pwhitehead-splunk & @​rodrigorfk, @​wallrj.

Thanks also to the following cert-manager maintainers for their contributions during this release: @​SgtCoDFish, @​SpectralHiss, @​ThatsMrTalbot, @​hawksight, @​inteon, @​maelvls & @​wallrj.

Equally thanks to everyone who provided feedback, helped users and raised issues on GitHub and Slack and joined our meetings!

Thanks also to the CNCF, which provides resources and support, and to the AWS open source team for being good community members and for their maintenance of the PrivateCA Issuer.

In addition, massive thanks to Venafi for contributing developer time and resources towards the continued maintenance of cert-manager projects.

Changes by Kind

Feature

  • GatewayAPI support has graduated to Beta. Add the --enable-gateway-api flag to enable the integration. (#6961, @​ThatsMrTalbot)
  • Add support to specify a custom key alias in a JKS Keystore (#6807, @​bwaldrep)
  • Add the ability to communicate with Vault via mTLS when strict client certificates is enabled at Vault server side (#6614, @​rodrigorfk)
  • Added option to provide additional audiences in the service account auth section for vault (#6718, @​andrey-dubnik)

... (truncated)

Commits
  • 5b04ec6 Merge pull request #7130 from SgtCoDFish/release-1.15-bump-http-lib
  • 7936ff0 [release-1.15] Bump go-retryablehttp to address CVE-2024-6104
  • 3da4f98 Merge pull request #7111 from inteon/release-1.15_vault_bugfix
  • db2a8f5 add testcase
  • c680694 only retry when encountering a Vault non-InvalidData error
  • c91273a BUGFIX: retry signing when encountering transient error
  • d95c635 Merge pull request #7092 from ThatsMrTalbot/chore/update-azidentity-1.6.0
  • 48bf30a chore: updating github.com/Azure/azure-sdk-for-go/sdk/azidentity to address C...
  • 9b53314 Merge pull request #7091 from cert-manager-bot/cherry-pick-7090-to-release-1.15
  • 7ec86d2 feat: normalize azure errors
  • Additional commits viewable in compare view


Updates github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.74.0 to 0.75.0

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.75.0 / 2024-06-26

  • [CHANGE] Global limits over enforced limits when no user limits are set. #6608
  • [CHANGE/BUGFIX] Use a separate port number (8081) for the init container. #6635
  • [FEATURE] Add source field in pagerdutyConfigs in AlertManangerConfig CRD. #6427
  • [FEATURE] Add DockerSwarm Service Discovery support in the ScrapeConfig CRD. #6633
  • [FEATURE] Add Linode Service Discovery support in the ScrapeConfig CRD. #6586
  • [FEATURE] Add PuppetDB Service Discovery support in the ScrapeConfig CRD. #6651
  • [FEATURE] Add LightSail Service Discovery support in the ScrapeConfig CRD. #6660
  • [FEATURE] Add OVHCloud Service Discovery support in the ScrapeConfig CRD. #6689
  • [FEATURE] Add extra metric relabelings to scrape classes. #6492
  • [FEATURE] Add jobName field to ScrapeConfig CRD. #6618
  • [FEATURE] Add automatic memory limit handling using the flag -auto-gomemlimit-ratio. #6591
  • [FEATURE] Add support for ProxyConfig in Prometheus RemoteWrite and RemoteRead specs. #6512
  • [ENHANCEMENT] Add automatic GOMAXPROCS to admission webhook. #6599
  • [ENHANCEMENT] Add prometheus_operator_feature_gate_info metric. #6655
  • [BUGFIX] Fix reloading Alertmanager when notification templates change. #6607
  • [BUGFIX] Fix PrometheusAgent reconciliation for the statefulset changes. #6615
  • [BUGFIX] Fix readiness/liveness probes for config-reloader when listenLocal is set to true. #6698
Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.75.0 / 2024-06-26

  • [CHANGE] Global limits over enforced limits when no user limits are set. #6608
  • [CHANGE/BUGFIX] Use a separate port number (8081) for the init container. #6635
  • [FEATURE] Add source field in pagerdutyConfigs in AlertManangerConfig CRD. #6427
  • [FEATURE] Add DockerSwarm Service Discovery support in the ScrapeConfig CRD. #6633
  • [FEATURE] Add Linode Service Discovery support in the ScrapeConfig CRD. #6586
  • [FEATURE] Add PuppetDB Service Discovery support in the ScrapeConfig CRD. #6651
  • [FEATURE] Add LightSail Service Discovery support in the ScrapeConfig CRD. #6660
  • [FEATURE] Add OVHCloud Service Discovery support in the ScrapeConfig CRD. #6689
  • [FEATURE] Add extra metric relabelings to scrape classes. #6492
  • [FEATURE] Add jobName field to ScrapeConfig CRD. #6618
  • [FEATURE] Add automatic memory limit handling using the flag -auto-gomemlimit-ratio. #6591
  • [FEATURE] Add support for ProxyConfig in Prometheus RemoteWrite and RemoteRead specs. #6512
  • [ENHANCEMENT] Add automatic GOMAXPROCS to admission webhook. #6599
  • [ENHANCEMENT] Add prometheus_operator_feature_gate_info metric. #6655
  • [BUGFIX] Fix reloading Alertmanager when notification templates change. #6607
  • [BUGFIX] Fix PrometheusAgent reconciliation for the statefulset changes. #6615
  • [BUGFIX] Fix readiness/liveness probes for config-reloader when listenLocal is set to true. #6698
Commits
  • 79c225b Merge pull request #6709 from slashpai/cut-0.75.0
  • 21e69ff chore: cut 0.75.0
  • 91df221 Merge pull request #6707 from slashpai/cut-0.75.0
  • cb79b96 feat(xds): Add OVHcloud service discovery to the ScrapeConfig CRD (#6689)
  • 87e3b56 chore: bump go dependencies before release
  • ad006f4 Merge pull request #6706 from prometheus-operator/dependabot/go_modules/githu...
  • 31fa37d build(deps): bump github.com/go-test/deep from 1.1.0 to 1.1.1
  • 1050a64 chore: optimize get secret key from store (#6700)
  • 3322ed8 Continue #6688: Refactor common test code between Prometheus modes (#6694)
  • 24ea585 Refactor the common implementation code (not including tests) between Prometh...
  • Additional commits viewable in compare view


Updates github.com/rs/zerolog from 1.32.0 to 1.33.0

Commits


Updates github.com/spf13/cobra from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.1

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation

... (truncated)

Commits


Updates go.mondoo.com/cnquery/v11 from 11.5.0 to 11.10.0

Release notes

Sourced from go.mondoo.com/cnquery/v11's releases.

v11.10.0

What's Changed

New Contributors

Full Changelog: https://github.com/mondoohq/cnquery/compare/v11.9.1...v11.10.0

v11.9.1

What's Changed

Full Changelog: https://github.com/mondoohq/cnquery/compare/v11.9.0...v11.9.1

v11.9.0

What's Changed

... (truncated)

Commits
  • 1253f6c ✨ extend google workspace apps resource with admin data (#4286)
  • 41f1991 🎉 os-11.2.14 (#4292)
  • ca01623 🐛 fix readdirnames for docker scans (#4291)
  • 004ef9c 🧹 Update deps for cnquery and providers 20240624 (#4290)
  • f4f5bac ✨ add google workspace calendar and acl resources (#4282)
  • 398cd85 Collect the IAM role of the EKS cluster (#4289)
  • 66e1ef3 🧹 increase sleep time for iam GetCredentialReport retries (#4287)
  • 4aeb5ad 🧹 Allow retrying fetching of Azure managed identity credential. (#4288)
  • 70a57d5 🎉 azure-11.0.20 (#4285)
  • 1eb0adb 🐛 Do not use parent connection for azure provider. (#4284)
  • Additional commits viewable in compare view


Updates go.mondoo.com/cnspec/v11 from 11.5.0 to 11.10.0

Release notes

Sourced from go.mondoo.com/cnspec/v11's releases.

v11.10.0

What's Changed

Full Changelog: https://github.com/mondoohq/cnspec/compare/v11.9.1...v11.10.0

v11.9.1

What's Changed

New Contributors

Full Changelog: https://github.com/mondoohq/cnspec/compare/v11.9.0...v11.9.1

v11.9.0

What's Changed

Full Changelog: https://github.com/mondoohq/cnspec/compare/v11.8.0...v11.9.0

v11.8.0

What's Changed

Full Changelog: https://github.com/mondoohq/cnspec/compare/v11.7.3...v11.8.0

v11.7.3

What's Changed

Full Changelog: https://github.com/mondoohq/cnspec/compare/v11.7.2...v11.7.3

v11.7.2

What's Changed

... (truncated)

Commits


Updates go.mondoo.com/mondoo-go from 0.0.0-20240516194133-d6612b90fe7c to 0.0.0-20240611114249-2c3b9b20e67a

Commits


Updates github.com/google/go-containerregistry from 0.19.1 to 0.19.2

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.19.2

What's Changed

New Contributors

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.19.1...v0.19.2

Commits


Updates google.golang.org/protobuf from 1.34.1 to 1.34.2

Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | github.com/google/go-containerregistry | [>= 0.15.a, < 0.16] |

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
github-actions[bot] commented 3 months ago

Test Results

0 files   -   5  0 suites   - 51   0s :stopwatch: - 2h 37m 33s 0 tests  - 316  0 :white_check_mark:  - 316  0 :zzz: ±0  0 :x: ±0  0 runs   - 385  0 :white_check_mark:  - 385  0 :zzz: ±0  0 :x: ±0 

Results for commit e2f96d27. ± Comparison against base commit d9b484d1.

dependabot[bot] commented 3 months ago

Superseded by #1144.