search

mondoohq / mondoo-operator

☸️ Mondoo Client Kubernetes Operator
https://mondoo.com
Other
34 stars 13 forks source link

Bump the gomodupdates group across 1 directory with 10 updates #1152

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps the gomodupdates group with 6 updates in the / directory:

Package From To
github.com/cert-manager/cert-manager 1.14.5 1.15.1
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring 0.74.0 0.75.2
github.com/rs/zerolog 1.32.0 1.33.0
github.com/spf13/cobra 1.8.0 1.8.1
go.mondoo.com/cnquery/v11 11.5.0 11.14.1
go.mondoo.com/cnspec/v11 11.5.0 11.14.1

Updates github.com/cert-manager/cert-manager from 1.14.5 to 1.15.1

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.15.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

🔗 See v1.15.0 for more information about cert-manager 1.15 and read-before-upgrade info.

📜 Changes since v1.15.0

Bug or Regression

  • BUGFIX: fix issue that caused Vault issuer to not retry signing when an error was encountered. (#7111, @​inteon)

Other (Cleanup or Flake)

v1.15.0

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

cert-manager 1.15 promotes several features to beta, including GatewayAPI support (ExperimentalGatewayAPISupport), the ability to provide a subject in the Certificate that will be used literally in the CertificateSigningRequest (LiteralCertificateSubject) and the outputting of additional certificate formats (AdditionalCertificateOutputFormats).

[!NOTE]

The cmctl binary have been moved to https://github.com/cert-manager/cmctl/releases. For the startupapicheck Job you should update references to point at quay.io/jetstack/cert-manager-startupapicheck

[!NOTE]

From this release, the Helm chart will no longer uninstall the CRDs when the chart is uninstalled. If you want the CRDs to be removed on uninstall use crds.keep=false when installing the Helm chart.

Community

Thanks again to all open-source contributors with commits in this release, including: @​Pionerd, @​SgtCoDFish, @​ThatsMrTalbot, @​andrey-dubnik, @​bwaldrep, @​eplightning, @​erikgb, @​findnature, @​gplessis, @​import-shiburin, @​inteon, @​jkroepke, @​lunarwhite, @​mangeshhambarde, @​pwhitehead-splunk & @​rodrigorfk, @​wallrj.

Thanks also to the following cert-manager maintainers for their contributions during this release: @​SgtCoDFish, @​SpectralHiss, @​ThatsMrTalbot, @​hawksight, @​inteon, @​maelvls & @​wallrj.

Equally thanks to everyone who provided feedback, helped users and raised issues on GitHub and Slack and joined our meetings!

Thanks also to the CNCF, which provides resources and support, and to the AWS open source team for being good community members and for their maintenance of the PrivateCA Issuer.

In addition, massive thanks to Venafi for contributing developer time and resources towards the continued maintenance of cert-manager projects.

Changes by Kind

Feature

  • GatewayAPI support has graduated to Beta. Add the --enable-gateway-api flag to enable the integration. (#6961, @​ThatsMrTalbot)
  • Add support to specify a custom key alias in a JKS Keystore (#6807, @​bwaldrep)
  • Add the ability to communicate with Vault via mTLS when strict client certificates is enabled at Vault server side (#6614, @​rodrigorfk)
  • Added option to provide additional audiences in the service account auth section for vault (#6718, @​andrey-dubnik)

... (truncated)

Commits
  • 5b04ec6 Merge pull request #7130 from SgtCoDFish/release-1.15-bump-http-lib
  • 7936ff0 [release-1.15] Bump go-retryablehttp to address CVE-2024-6104
  • 3da4f98 Merge pull request #7111 from inteon/release-1.15_vault_bugfix
  • db2a8f5 add testcase
  • c680694 only retry when encountering a Vault non-InvalidData error
  • c91273a BUGFIX: retry signing when encountering transient error
  • d95c635 Merge pull request #7092 from ThatsMrTalbot/chore/update-azidentity-1.6.0
  • 48bf30a chore: updating github.com/Azure/azure-sdk-for-go/sdk/azidentity to address C...
  • 9b53314 Merge pull request #7091 from cert-manager-bot/cherry-pick-7090-to-release-1.15
  • 7ec86d2 feat: normalize azure errors
  • Additional commits viewable in compare view


Updates github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.74.0 to 0.75.2

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.75.2 / 2024-07-23

  • [BUGFIX] Avoid invalid alerting config with TLS. #6765

0.75.1 / 2024-07-02

  • [BUGFIX] Fix OVHCloud service discovery configs key error. #6723

0.75.0 / 2024-06-26

  • [CHANGE] Global limits over enforced limits when no user limits are set. #6608
  • [CHANGE/BUGFIX] Use a separate port number (8081) for the init container. #6635
  • [FEATURE] Add source field in pagerdutyConfigs in AlertManangerConfig CRD. #6427
  • [FEATURE] Add DockerSwarm Service Discovery support in the ScrapeConfig CRD. #6633
  • [FEATURE] Add Linode Service Discovery support in the ScrapeConfig CRD. #6586
  • [FEATURE] Add PuppetDB Service Discovery support in the ScrapeConfig CRD. #6651
  • [FEATURE] Add LightSail Service Discovery support in the ScrapeConfig CRD. #6660
  • [FEATURE] Add OVHCloud Service Discovery support in the ScrapeConfig CRD. #6689
  • [FEATURE] Add extra metric relabelings to scrape classes. #6492
  • [FEATURE] Add jobName field to ScrapeConfig CRD. #6618
  • [FEATURE] Add automatic memory limit handling using the flag -auto-gomemlimit-ratio. #6591
  • [FEATURE] Add support for ProxyConfig in Prometheus RemoteWrite and RemoteRead specs. #6512
  • [ENHANCEMENT] Add automatic GOMAXPROCS to admission webhook. #6599
  • [ENHANCEMENT] Add prometheus_operator_feature_gate_info metric. #6655
  • [BUGFIX] Fix reloading Alertmanager when notification templates change. #6607
  • [BUGFIX] Fix PrometheusAgent reconciliation for the statefulset changes. #6615
  • [BUGFIX] Fix readiness/liveness probes for config-reloader when listenLocal is set to true. #6698
Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.75.2 / 2024-07-23

  • [BUGFIX] Avoid invalid alerting config with TLS. #6765

0.75.1 / 2024-07-02

  • [BUGFIX] Fix OVHCloud service discovery configs key error. #6723

0.75.0 / 2024-06-26

  • [CHANGE] Global limits over enforced limits when no user limits are set. #6608
  • [CHANGE/BUGFIX] Use a separate port number (8081) for the init container. #6635
  • [FEATURE] Add source field in pagerdutyConfigs in AlertManangerConfig CRD. #6427
  • [FEATURE] Add DockerSwarm Service Discovery support in the ScrapeConfig CRD. #6633
  • [FEATURE] Add Linode Service Discovery support in the ScrapeConfig CRD. #6586
  • [FEATURE] Add PuppetDB Service Discovery support in the ScrapeConfig CRD. #6651
  • [FEATURE] Add LightSail Service Discovery support in the ScrapeConfig CRD. #6660
  • [FEATURE] Add OVHCloud Service Discovery support in the ScrapeConfig CRD. #6689
  • [FEATURE] Add extra metric relabelings to scrape classes. #6492
  • [FEATURE] Add jobName field to ScrapeConfig CRD. #6618
  • [FEATURE] Add automatic memory limit handling using the flag -auto-gomemlimit-ratio. #6591
  • [FEATURE] Add support for ProxyConfig in Prometheus RemoteWrite and RemoteRead specs. #6512
  • [ENHANCEMENT] Add automatic GOMAXPROCS to admission webhook. #6599
  • [ENHANCEMENT] Add prometheus_operator_feature_gate_info metric. #6655
  • [BUGFIX] Fix reloading Alertmanager when notification templates change. #6607
  • [BUGFIX] Fix PrometheusAgent reconciliation for the statefulset changes. #6615
  • [BUGFIX] Fix readiness/liveness probes for config-reloader when listenLocal is set to true. #6698
Commits


Updates github.com/rs/zerolog from 1.32.0 to 1.33.0

Commits


Updates github.com/spf13/cobra from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.1

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation

... (truncated)

Commits


Updates go.mondoo.com/cnquery/v11 from 11.5.0 to 11.14.1

Release notes

Sourced from go.mondoo.com/cnquery/v11's releases.

v11.14.1

What's Changed

Full Changelog: https://github.com/mondoohq/cnquery/compare/v11.14.0...v11.14.1

v11.14.0

What's Changed

Full Changelog: https://github.com/mondoohq/cnquery/compare/v11.13.2...v11.14.0

v11.13.2

What's Changed

Full Changelog: https://github.com/mondoohq/cnquery/compare/v11.13.1...v11.13.2

... (truncated)

Commits
  • dce4cfd 🎉 gitlab-11.1.14 (#4406)
  • aef6733 Pull in updated GitLab provider boilerplate (#4405)
  • 8860680 🎉 gitlab-11.1.13 (#4404)
  • 9541436 ⭐️ Adding the support to fetch the webhooks and the ssl config (Gitlab) (#4400)
  • e9d1830 ⭐️ Adding the support to list the files in a Project (Gitlab) (#4386)
  • 041461a 🎉 gitlab-11.1.12 (#4402)
  • 774af15 ⭐️ Adding support for fetching the code Owner Approval from Protected Branch ...
  • 6017da6 ⭐️ Adding the support to fetch the project members and their Roles (Gitlab) (...
  • e6e0016 ✨ Add labels to the reporter assets. (#4401)
  • e7dec11 ⭐️ add macos.systemExtensions as new resource (#4371)
  • Additional commits viewable in compare view


Updates go.mondoo.com/cnspec/v11 from 11.5.0 to 11.14.1

Release notes

Sourced from go.mondoo.com/cnspec/v11's releases.

v11.14.1

What's Changed

Full Changelog: https://github.com/mondoohq/cnspec/compare/v11.14.0...v11.14.1

v11.14.0

What's Changed

Full Changelog: https://github.com/mondoohq/cnspec/compare/v11.13.2...v11.14.0

v11.13.2

What's Changed

Full Changelog: https://github.com/mondoohq/cnspec/compare/v11.13.1...v11.13.2

v11.13.1

What's Changed

Full Changelog: https://github.com/mondoohq/cnspec/compare/v11.13.0...v11.13.1

v11.13.0

What's Changed

Full Changelog: https://github.com/mondoohq/cnspec/compare/v11.12.2...v11.13.0

... (truncated)

Commits


Updates go.mondoo.com/mondoo-go from 0.0.0-20240516194133-d6612b90fe7c to 0.0.0-20240716062427-ec95d879cbe7

Commits


Updates github.com/google/go-containerregistry from 0.19.1 to 0.20.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.1

What's Changed

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.20.0...v0.20.1

v0.20.0

What's Changed

New Contributors

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.19.2...v0.20.0

v0.19.2

What's Changed

New Contributors

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.19.1...v0.19.2

Commits


Updates google.golang.org/protobuf from 1.34.1 to 1.34.2

Updates k8s.io/utils from 0.0.0-20240502163921-fe8a2dddb1d0 to 0.0.0-20240711033017-18e509b52bc8

Commits


Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | github.com/google/go-containerregistry | [>= 0.15.a, < 0.16] |

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
github-actions[bot] commented 2 months ago

Test Results

0 files   -   7  0 suites   - 7   0s :stopwatch: - 5h 54m 48s 0 tests  -  23  0 :white_check_mark:  -  19  0 :zzz: ±0  0 :x:  - 4  0 runs   - 161  0 :white_check_mark:  - 157  0 :zzz: ±0  0 :x:  - 4 

Results for commit 83a8da94. ± Comparison against base commit e28adf95.

dependabot[bot] commented 2 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.