search

open-component-model / MPAS

Repository for the Core of MPAS.
Apache License 2.0
1 stars 1 forks source link

build(deps): bump the go group with 25 updates #196

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 7 months ago

Bumps the go group with 25 updates:

Package From To
github.com/containers/image/v5 5.23.0 5.29.2
github.com/fatih/color 1.15.0 1.16.0
github.com/fluxcd/flux2/v2 2.0.0-rc.3 2.2.3
github.com/fluxcd/go-git-providers 0.18.1-0.20230706132206-211750e8915d 0.19.3
github.com/fluxcd/kustomize-controller/api 1.1.0 1.2.2
github.com/fluxcd/pkg/apis/meta 1.1.2 1.3.0
github.com/fluxcd/pkg/git 0.11.0 0.17.0
github.com/fluxcd/pkg/git/gogit 0.8.1 0.17.0
github.com/fluxcd/pkg/kustomize 1.3.4 1.6.0
github.com/fluxcd/pkg/ssa 0.28.2 0.36.0
github.com/fluxcd/source-controller/api 1.1.0 1.2.4
github.com/go-logr/logr 1.3.0 1.4.1
github.com/mandelsoft/vfs 0.0.0-20230713123140-269aa4fb1338 0.4.3
github.com/open-component-model/git-controller 0.9.0 0.11.1
github.com/open-component-model/mpas-project-controller 0.4.0 0.5.0
github.com/open-component-model/ocm 0.4.1 0.7.0
github.com/open-component-model/ocm-controller 0.16.1 0.18.1
github.com/open-component-model/ocm-e2e-framework 0.7.0 0.7.1
github.com/open-component-model/replication-controller 0.11.0 0.12.2
github.com/oras-project/oras-credentials-go 0.2.0 0.4.0
github.com/stretchr/testify 1.8.4 1.9.0
golang.org/x/term 0.15.0 0.16.0
k8s.io/utils 0.0.0-20230726121419-3b25d923346b 0.0.0-20231127182322-b307cd553661
oras.land/oras-go/v2 2.3.0 2.4.0
sigs.k8s.io/e2e-framework 0.2.0 0.3.0

Updates github.com/containers/image/v5 from 5.23.0 to 5.29.2

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.29.2

What's Changed

Full Changelog: https://github.com/containers/image/compare/v5.29.1...v5.29.2

v5.29.1

  • Add support for pushing an image with unknown digest

v5.29.0

What's Changed

... (truncated)

Commits
  • b799d82 [release-5.29] Bump to v5.29.2
  • 6cbd4f4 [release-5.29] backport Docker Daemon fix #2260
  • 2f0d9ae Merge pull request #2262 from mtrmac/5.29-skopeo-reverse
  • ef8a7a5 Use a stable Skopeo branch for testing the stable c/image branch
  • d8bbff8 Merge pull request #2253 from mtrmac/releasing-5.29.1
  • 540136f Bump to v5.29.2-dev
  • f7fbc0a Release 5.29.1
  • 1b5932f Merge pull request #2252 from mheon/backport_2209_529
  • 47bac8f Add support for pushing image with unknown digest
  • 041e291 Merge pull request #2251 from mtrmac/5.29-dest-branch
  • Additional commits viewable in compare view


Updates github.com/fatih/color from 1.15.0 to 1.16.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.16.0

What's Changed

Dependency updates

New Contributors

Full Changelog: https://github.com/fatih/color/compare/v1.15.0...v1.16.0

Commits
  • 0f9779e Merge pull request #213 from fatih/dependabot/go_modules/golang.org/x/sys-0.14.0
  • 0c78604 Bump golang.org/x/sys from 0.13.0 to 0.14.0
  • 96e0f73 Merge pull request #208 from fatih/dependabot/github_actions/actions/checkout-4
  • 4c66e32 Bump actions/checkout from 3 to 4
  • 2fb03d6 Merge pull request #202 from fatih/dependabot/github_actions/actions/setup-go-4
  • 8ba7bbd Bump actions/setup-go from 3 to 4
  • e3f97f3 Merge pull request #209 from fatih/dependabot/go_modules/golang.org/x/sys-0.13.0
  • e146575 Bump golang.org/x/sys from 0.10.0 to 0.13.0
  • d2d7a5e Merge pull request #212 from fatih/dependabot/go_modules/github.com/mattn/go-...
  • f3e45da Merge branch 'main' into dependabot/go_modules/github.com/mattn/go-isatty-0.0.20
  • Additional commits viewable in compare view


Updates github.com/fluxcd/flux2/v2 from 2.0.0-rc.3 to 2.2.3

Release notes

Sourced from github.com/fluxcd/flux2/v2's releases.

v2.2.3

Highlights

Flux v2.2.3 is a patch release which comes with various fixes and improvements. Users are encouraged to upgrade for the best experience.

:bulb: For upgrading to Flux v2.2, please see the procedure documented in 2.2.0.

This release updates the Kubernetes dependencies to v1.28.6 and various other dependencies to their latest version to patch upstream CVEs.

All controllers are built with Go 1.21.6 using Alpine Linux 3.19.1 base image.

[!NOTE] Due to breaking changes in Helm v3.14.0, the helm-controller version included in this patch release comes with Helm SDK v3.13.3. A preview build of the helm-controller with the latest Helm SDK is available at helm-controller#879.

Fixes:

  • Reconciling empty directories and directories without Kubernetes manifests no longer results in an error. This regressing bug was introduced with the kustomize-controller upgrade to Kustomize v5.3 and has been fixed in this patch release.
  • The regression due to which Roles and ClusterRoles with aggregated roles were continuous reconciled by kustomize-controller has been fixed.
  • Fix the Git revision displaying when notification-controller sends alerts to Grafana.
  • The HelmRelease status reporting has been improved by ensuring that the stale failure conditions get updated after failure recovery.

See the components changelog for a full list of bug fixes.

Components changelog

CLI Changelog

v2.2.2

Highlights

... (truncated)

Commits
  • 5346846 Merge pull request #4591 from fluxcd/backport-4589-to-release/v2.2.x
  • 1feda85 Update dependencies
  • e3cdb19 Merge pull request #4588 from fluxcd/backport-4583-to-release/v2.2.x
  • cb0cf95 Update toolkit components
  • 81f8bf8 Merge pull request #4587 from fluxcd/backport-4585-to-release/v2.2.x
  • aa4cad4 build(deps): bump the ci group with 3 updates
  • a3550cc Merge pull request #4577 from fluxcd/backport-4554-to-release/v2.2.x
  • 384d472 build(deps): bump the ci group with 3 updates
  • aabdd28 Merge pull request #4576 from fluxcd/backport-4575-to-release/v2.2.x
  • 297c0f0 Update dependencies to Kubernetes v1.28.6
  • Additional commits viewable in compare view


Updates github.com/fluxcd/go-git-providers from 0.18.1-0.20230706132206-211750e8915d to 0.19.3

Release notes

Sourced from github.com/fluxcd/go-git-providers's releases.

v0.19.3

CHANGELOG

  • PR #261 Adapt workflows
  • PR #260 build(deps): bump the ci group with 2 updates
  • PR #259 Updating dependencies and fix go-git CVE
  • PR #257 changing Soule info
  • PR #256 github: fix defer in for loop

v0.19.2

CHANGELOG

  • PR #254 Updating dependencies
  • PR #253 build(deps): bump the ci group with 1 update

v0.19.1

CHANGELOG

  • PR #252 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0

v0.19.0

CHANGELOG

  • PR #250 Validate user ref when creating user repository
  • PR #249 updating go and dependencies versions
  • PR #248 build(deps): bump the ci group with 1 update
  • PR #247 build(deps): bump the ci group with 2 updates
  • PR #246 build(deps): bump the ci group with 1 update
  • PR #244 build(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3
  • PR #243 build(deps): bump the ci group with 1 update
  • PR #242 ci: Group dependabot updates
  • PR #241 build(deps): bump actions/checkout from 3.5.3 to 3.6.0
  • PR #240 build(deps): bump actions/setup-go from 4.0.1 to 4.1.0
  • PR #238 Pin GitLab version in e2e tests
  • PR #237 fix panic when gitea commit object contains nil pointers
Commits


Updates github.com/fluxcd/kustomize-controller/api from 1.1.0 to 1.2.2

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.2.2

Changelog

v1.2.2 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.2.2
  • ghcr.io/fluxcd/kustomize-controller:v1.2.2

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.1

Changelog

v1.2.1 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.2.1
  • ghcr.io/fluxcd/kustomize-controller:v1.2.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.0

Changelog

v1.2.0 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.2.0
  • ghcr.io/fluxcd/kustomize-controller:v1.2.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.1.1

Changelog

... (truncated)

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.2.2

Release date: 2024-02-01

This patch release comes with various bug fixes and improvements.

Reconciling empty directories and directories without Kubernetes manifests no longer results in an error. This regressing bug was introduced with the controller upgrade to Kustomize v5.3 and has been fixed in this patch release.

The regression due to which the namespaced objects without a namespace specified resulted in not found error instead of namespace not specified has also been fixed. And the regression due to which Roles and ClusterRoles were reconciled over and over due to the normalization of Roles and ClusterRoles has also been fixed.

In addition, the Kubernetes dependencies have been updated to v1.28.6. Various other dependencies have also been updated to their latest version to patch upstream CVEs.

Lastly, the controller is now built with Go 1.21.

Improvements:

1.2.1

Release date: 2023-12-14

This patch release comes with improvements in logging to provide faster feedback on any HTTP errors encountered while fetching source artifacts.

In addition, the status condition messages are now trimmed to respect the size limit defined by the API.

... (truncated)

Commits
  • 7a5ae11 Merge pull request #1077 from fluxcd/release-v1.2.2
  • afb9e73 Release v1.2.2
  • e5072d5 Add changelog entry for v1.2.2
  • 115614b Merge pull request #1076 from fluxcd/backport-1075-to-release/v1.2.x
  • 00821eb Update source-controller dependency
  • 151e55b Merge pull request #1074 from fluxcd/backport-1072-to-release/v1.2.x
  • c575ac2 build(deps): bump the go-deps group with 1 update
  • e75aa5f Merge pull request #1070 from fluxcd/backport-1069-to-release/v1.2.x
  • ddeda85 build(deps): bump the ci group with 1 update
  • 04b1e54 Merge pull request #1068 from fluxcd/backport-1066-to-release/v1.2.x
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/apis/meta from 1.1.2 to 1.3.0

Commits
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • 30da897 Update dependencies
  • 63e3e9c Merge pull request #725 from fluxcd/dependabot/github_actions/ci-f38fbd1956
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/git from 0.11.0 to 0.17.0

Commits
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • 30da897 Update dependencies
  • 63e3e9c Merge pull request #725 from fluxcd/dependabot/github_actions/ci-f38fbd1956
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/git/gogit from 0.8.1 to 0.17.0

Commits
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • 30da897 Update dependencies
  • 63e3e9c Merge pull request #725 from fluxcd/dependabot/github_actions/ci-f38fbd1956
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/kustomize from 1.3.4 to 1.6.0

Commits
  • e5ca530 Merge pull request #728 from fluxcd/internal-deps
  • ac45fb6 Update internal dependencies
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/ssa from 0.28.2 to 0.36.0

Commits
  • e5ca530 Merge pull request #728 from fluxcd/internal-deps
  • ac45fb6 Update internal dependencies
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • Additional commits viewable in compare view


Updates github.com/fluxcd/source-controller/api from 1.1.0 to 1.2.4

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.2.4

Changelog

v1.2.4 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.2.4
  • ghcr.io/fluxcd/source-controller:v1.2.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.3

Changelog

v1.2.3 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.2.3
  • ghcr.io/fluxcd/source-controller:v1.2.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.2

Changelog

v1.2.2 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.2.2
  • ghcr.io/fluxcd/source-controller:v1.2.2

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.1

Changelog

... (truncated)

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.2.4

Release date: 2024-02-01

This patch release updates the Kubernetes dependencies to v1.28.6 and various other dependencies to their latest version to patch upstream CVEs.

Improvements:

1.2.3

Release date: 2023-12-14

This patch release updates the controller's Helm dependency to v3.13.3.

Improvements:

  • Update Helm to v3.13.3 #1325
  • helmrepo: Remove migration log/event #1324

1.2.2

Release date: 2023-12-11

This patch release addresses an issue with AWS ECR authentication introduced in v1.2.0.

In addition, a variety of dependencies have been updated. Including an update of the container base image to Alpine v3.19.

Fixes:

  • Address issue with authenticating towards AWS ECR #1318 #1321

Improvements:

  • Update dependencies #1314

... (truncated)

Commits
  • 3f131a1 Merge pull request #1363 from fluxcd/release-v1.2.4
  • 8fcdff7 Release v1.2.4
  • 2a57324 Add changelog entry for v1.2.4
  • a724e00 Merge pull request #1362 from fluxcd/backport-1361-to-release/v1.2.x
  • 6cf8879 build(deps): bump the go-deps group with 2 updates
  • fefee33 Merge pull request #1357 from fluxcd/backport-1355-to-release/v1.2.x
  • e3834d3 build(deps): bump the ci group with 3 updates
  • d6d8699 Merge pull request #1353 from fluxcd/backport-1352-to-release/v1.2.x
  • 0efba9a Update API to Kubernetes v1.28.4
  • 1a892fc build(deps): bump the go-deps group with 12 updates
  • Additional commits viewable in compare view


Updates github.com/go-logr/logr from 1.3.0 to 1.4.1

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.1

What's Changed

Full Changelog: https://github.com/go-logr/logr/compare/v1.4.0...v1.4.1

v1.4.0

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: https://github.com/go-logr/logr/compare/v1.3.0...v1.4.0

Commits
  • dcdc3f2 slogr: fix unintended API break in v0.8.0 (#253)
  • 5d88f52 funcr: Add LogInfoLevel Option to skip logging level in the info log (#240)
  • 177005d build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
  • e7f489a build(deps): bump github/codeql-action from 2.22.9 to 3.22.11
  • cf56c3b build(deps): bump actions/setup-go from 4 to 5
  • 2ad296e build(deps): bump github/codeql-action from 2.22.8 to 2.22.9
  • d55b4e2 Merge pull request #241 from thockin/master
  • 98ee9d9 Clean up slog testing and restore coverage
  • b228ba8 Break examples to new file
  • 6432877 Add benchmarks for slogSink
  • Additional commits viewable in compare view


Updates github.com/mandelsoft/vfs from 0.0.0-20230713123140-269aa4fb1338 to 0.4.3

Release notes

Sourced from github.com/mandelsoft/vfs's releases.

Windows Fix

Fix volume handling for path evaluation if used path is on another drive than the current working directory.

Support for is/fs.

This release adds support for the standard Go package io/fs.

Any instance of a VFS van no be mapped to such a filesystem access interface with vfs.AsIoFS(fs FileSystem) fs.ReadDirFS.

Additionally some fixes are included:

  • fix vfs.Exists catching underlying NotExist error correctly.
  • fix vfs.WlkFS

Support Relative Path Determination

No release notes provided.

Some Fixes

  • fix permission handling
  • fix cleanup up tempfs
  • fix windows path mapping
  • fix compile error on windows
  • add os flags and file mode

First Version

First version of a virtual filesystem for go. It supports various implementations

  • OS File Sytems
  • Memory File Systems
  • File Systems stored in yaml/json files
  • Layered File Systems

Based on those implementations file systems can be adapted by

  • Readonly File System View
  • Folder Folder as File System
  • Composable File Systems by Mounting others
  • File Systems supporting a Current Working Directory
  • Temp File System

The package provides interfaces that can be used to substitute OS related filesystem functions from packages os and ioutil.

Commits


Updates github.com/open-component-model/git-controller from 0.9.0 to 0.11.1

Release notes

Sourced from

github-actions[bot] commented 7 months ago

Mend Scan Summary: :x:

Repository: open-component-model/MPAS

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 0
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 0
LICENSE RISK HIGH 7
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report Mend UI

dependabot[bot] commented 7 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.

  • © Githubissues.
  • Githubissues is a development platform for aggregating issues.