open-component-model / MPAS

Repository for the Core of MPAS.
Apache License 2.0
1 stars 1 forks source link

build(deps): bump the go group across 1 directory with 27 updates #214

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps the go group with 11 updates in the / directory:

Package From To
github.com/containers/image/v5 5.23.0 5.30.0
github.com/cyphar/filepath-securejoin 0.2.4 0.2.5
github.com/fatih/color 1.15.0 1.16.0
github.com/fluxcd/flux2/v2 2.0.0-rc.3 2.2.3
github.com/mandelsoft/vfs 0.0.0-20230713123140-269aa4fb1338 0.4.3
github.com/open-component-model/git-controller 0.9.0 0.12.1
github.com/open-component-model/mpas-project-controller 0.4.0 0.6.1
github.com/open-component-model/ocm-e2e-framework 0.7.0 0.8.0
github.com/open-component-model/replication-controller 0.11.0 0.13.1
github.com/oras-project/oras-credentials-go 0.2.0 0.4.0
sigs.k8s.io/e2e-framework 0.2.0 0.3.0

Updates github.com/containers/image/v5 from 5.23.0 to 5.30.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.30.0

What's Changed

A fair number of improvements when working with zstd and zstd:chunked-compressed images.

Note that make install now installs policy.json and registries.d/default.yaml.

New Contributors

Full Changelog: https://github.com/containers/image/compare/v5.29.2...v5.30.0

v5.29.2

What's Changed

Full Changelog: https://github.com/containers/image/compare/v5.29.1...v5.29.2

v5.29.1

  • Add support for pushing an image with unknown digest

... (truncated)

Commits
  • b29bde5 Bump to v5.30.0
  • 3cc0bb4 Merge pull request #2328 from containers/renovate/github.com-containers-stora...
  • 169d6f5 fix(deps): update module github.com/containers/storage to v1.53.0
  • ed96328 Merge pull request #2330 from containers/renovate/golang.org-x-oauth2-0.x
  • d097f7f fix(deps): update module golang.org/x/oauth2 to v0.18.0
  • 5dbfa1c Merge pull request #2329 from containers/renovate/golang.org-x-crypto-0.x
  • 99369af fix(deps): update module golang.org/x/crypto to v0.21.0
  • b457769 Merge pull request #2326 from containers/renovate/go-openapi
  • 23e4c1d fix(deps): update go-openapi packages
  • faa4f4f Merge pull request #2325 from containers/renovate/github.com-stretchr-testify...
  • Additional commits viewable in compare view


Updates github.com/cyphar/filepath-securejoin from 0.2.4 to 0.2.5

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.2.5

This release makes some minor improvements to SecureJoin:

  • Some changes were made to how lexical components are handled during resolution. There is no change in behaviour, and both implementations are safe, however the newer implementation is much easier to reason about.

  • The error returned when a symlink loop has been detected will now reference the correct path. #10

Signed-off-by: Aleksa Sarai cyphar@cyphar.com

Commits
  • d861a11 VERSION: release v0.2.5
  • 87bc53a join: fix ELOOP error path
  • e9be397 join: don't allow .. and . in working path during resolution
  • 75cdbea gha: update Go versions
  • b69b737 VERSION: back to development
  • See full diff in compare view


Updates github.com/fatih/color from 1.15.0 to 1.16.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.16.0

What's Changed

Dependency updates

New Contributors

Full Changelog: https://github.com/fatih/color/compare/v1.15.0...v1.16.0

Commits
  • 0f9779e Merge pull request #213 from fatih/dependabot/go_modules/golang.org/x/sys-0.14.0
  • 0c78604 Bump golang.org/x/sys from 0.13.0 to 0.14.0
  • 96e0f73 Merge pull request #208 from fatih/dependabot/github_actions/actions/checkout-4
  • 4c66e32 Bump actions/checkout from 3 to 4
  • 2fb03d6 Merge pull request #202 from fatih/dependabot/github_actions/actions/setup-go-4
  • 8ba7bbd Bump actions/setup-go from 3 to 4
  • e3f97f3 Merge pull request #209 from fatih/dependabot/go_modules/golang.org/x/sys-0.13.0
  • e146575 Bump golang.org/x/sys from 0.10.0 to 0.13.0
  • d2d7a5e Merge pull request #212 from fatih/dependabot/go_modules/github.com/mattn/go-...
  • f3e45da Merge branch 'main' into dependabot/go_modules/github.com/mattn/go-isatty-0.0.20
  • Additional commits viewable in compare view


Updates github.com/fluxcd/flux2/v2 from 2.0.0-rc.3 to 2.2.3

Release notes

Sourced from github.com/fluxcd/flux2/v2's releases.

v2.2.3

Highlights

Flux v2.2.3 is a patch release which comes with various fixes and improvements. Users are encouraged to upgrade for the best experience.

:bulb: For upgrading to Flux v2.2, please see the procedure documented in 2.2.0.

This release updates the Kubernetes dependencies to v1.28.6 and various other dependencies to their latest version to patch upstream CVEs.

All controllers are built with Go 1.21.6 using Alpine Linux 3.19.1 base image.

[!NOTE] Due to breaking changes in Helm v3.14.0, the helm-controller version included in this patch release comes with Helm SDK v3.13.3. A preview build of the helm-controller with the latest Helm SDK is available at helm-controller#879.

Fixes:

  • Reconciling empty directories and directories without Kubernetes manifests no longer results in an error. This regressing bug was introduced with the kustomize-controller upgrade to Kustomize v5.3 and has been fixed in this patch release.
  • The regression due to which Roles and ClusterRoles with aggregated roles were continuous reconciled by kustomize-controller has been fixed.
  • Fix the Git revision displaying when notification-controller sends alerts to Grafana.
  • The HelmRelease status reporting has been improved by ensuring that the stale failure conditions get updated after failure recovery.

See the components changelog for a full list of bug fixes.

Components changelog

CLI Changelog

v2.2.2

Highlights

... (truncated)

Commits
  • 5346846 Merge pull request #4591 from fluxcd/backport-4589-to-release/v2.2.x
  • 1feda85 Update dependencies
  • e3cdb19 Merge pull request #4588 from fluxcd/backport-4583-to-release/v2.2.x
  • cb0cf95 Update toolkit components
  • 81f8bf8 Merge pull request #4587 from fluxcd/backport-4585-to-release/v2.2.x
  • aa4cad4 build(deps): bump the ci group with 3 updates
  • a3550cc Merge pull request #4577 from fluxcd/backport-4554-to-release/v2.2.x
  • 384d472 build(deps): bump the ci group with 3 updates
  • aabdd28 Merge pull request #4576 from fluxcd/backport-4575-to-release/v2.2.x
  • 297c0f0 Update dependencies to Kubernetes v1.28.6
  • Additional commits viewable in compare view


Updates github.com/fluxcd/go-git-providers from 0.18.1-0.20230706132206-211750e8915d to 0.19.3

Release notes

Sourced from github.com/fluxcd/go-git-providers's releases.

v0.19.3

CHANGELOG

  • PR #261 Adapt workflows
  • PR #260 build(deps): bump the ci group with 2 updates
  • PR #259 Updating dependencies and fix go-git CVE
  • PR #257 changing Soule info
  • PR #256 github: fix defer in for loop

v0.19.2

CHANGELOG

  • PR #254 Updating dependencies
  • PR #253 build(deps): bump the ci group with 1 update

v0.19.1

CHANGELOG

  • PR #252 build(deps): bump golang.org/x/net from 0.16.0 to 0.17.0

v0.19.0

CHANGELOG

  • PR #250 Validate user ref when creating user repository
  • PR #249 updating go and dependencies versions
  • PR #248 build(deps): bump the ci group with 1 update
  • PR #247 build(deps): bump the ci group with 2 updates
  • PR #246 build(deps): bump the ci group with 1 update
  • PR #244 build(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3
  • PR #243 build(deps): bump the ci group with 1 update
  • PR #242 ci: Group dependabot updates
  • PR #241 build(deps): bump actions/checkout from 3.5.3 to 3.6.0
  • PR #240 build(deps): bump actions/setup-go from 4.0.1 to 4.1.0
  • PR #238 Pin GitLab version in e2e tests
  • PR #237 fix panic when gitea commit object contains nil pointers
Commits


Updates github.com/fluxcd/kustomize-controller/api from 1.1.0 to 1.2.2

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.2.2

Changelog

v1.2.2 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.2.2
  • ghcr.io/fluxcd/kustomize-controller:v1.2.2

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.1

Changelog

v1.2.1 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.2.1
  • ghcr.io/fluxcd/kustomize-controller:v1.2.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.0

Changelog

v1.2.0 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.2.0
  • ghcr.io/fluxcd/kustomize-controller:v1.2.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.1.1

Changelog

... (truncated)

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.2.2

Release date: 2024-02-01

This patch release comes with various bug fixes and improvements.

Reconciling empty directories and directories without Kubernetes manifests no longer results in an error. This regressing bug was introduced with the controller upgrade to Kustomize v5.3 and has been fixed in this patch release.

The regression due to which the namespaced objects without a namespace specified resulted in not found error instead of namespace not specified has also been fixed. And the regression due to which Roles and ClusterRoles were reconciled over and over due to the normalization of Roles and ClusterRoles has also been fixed.

In addition, the Kubernetes dependencies have been updated to v1.28.6. Various other dependencies have also been updated to their latest version to patch upstream CVEs.

Lastly, the controller is now built with Go 1.21.

Improvements:

1.2.1

Release date: 2023-12-14

This patch release comes with improvements in logging to provide faster feedback on any HTTP errors encountered while fetching source artifacts.

In addition, the status condition messages are now trimmed to respect the size limit defined by the API.

... (truncated)

Commits
  • 7a5ae11 Merge pull request #1077 from fluxcd/release-v1.2.2
  • afb9e73 Release v1.2.2
  • e5072d5 Add changelog entry for v1.2.2
  • 115614b Merge pull request #1076 from fluxcd/backport-1075-to-release/v1.2.x
  • 00821eb Update source-controller dependency
  • 151e55b Merge pull request #1074 from fluxcd/backport-1072-to-release/v1.2.x
  • c575ac2 build(deps): bump the go-deps group with 1 update
  • e75aa5f Merge pull request #1070 from fluxcd/backport-1069-to-release/v1.2.x
  • ddeda85 build(deps): bump the ci group with 1 update
  • 04b1e54 Merge pull request #1068 from fluxcd/backport-1066-to-release/v1.2.x
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/apis/meta from 1.1.2 to 1.3.0

Commits
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • 30da897 Update dependencies
  • 63e3e9c Merge pull request #725 from fluxcd/dependabot/github_actions/ci-f38fbd1956
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/git from 0.11.0 to 0.17.0

Commits
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • 30da897 Update dependencies
  • 63e3e9c Merge pull request #725 from fluxcd/dependabot/github_actions/ci-f38fbd1956
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/git/gogit from 0.8.1 to 0.17.0

Commits
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • 30da897 Update dependencies
  • 63e3e9c Merge pull request #725 from fluxcd/dependabot/github_actions/ci-f38fbd1956
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/kustomize from 1.3.4 to 1.6.0

Commits
  • e5ca530 Merge pull request #728 from fluxcd/internal-deps
  • ac45fb6 Update internal dependencies
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/ssa from 0.28.2 to 0.36.0

Commits
  • 159b281 Merge pull request #755 from fluxcd/update-internal-deps-go1.22
  • f4ae8e8 Update internal dependencies
  • 288cd7a Merge pull request #752 from fluxcd/handle-in-cluster-annotation
  • 4971c85 Return a DiffTypeExclude when exclusion annotation is set in cluster
  • 46467e7 Merge pull request #754 from fluxcd/update-docker
  • 43f36aa Update docker dependencies
  • e350b5b Merge pull request #750 from fluxcd/update-deps-go-1.22
  • 3ad72d9 Update dependencies to Go 1.22 and Kubernetes 1.29.3
  • 6ad47ef Merge pull request #751 from fluxcd/disable-bitbucket-server-tests
  • 9ba119b Disable bitbucket-server e2e
  • Additional commits viewable in compare view


Updates github.com/fluxcd/source-controller/api from 1.1.0 to 1.2.4

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.2.4

Changelog

v1.2.4 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.2.4
  • ghcr.io/fluxcd/source-controller:v1.2.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.3

Changelog

v1.2.3 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.2.3
  • ghcr.io/fluxcd/source-controller:v1.2.3

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.2

Changelog

v1.2.2 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.2.2
  • ghcr.io/fluxcd/source-controller:v1.2.2

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.1

Changelog

... (truncated)

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.2.4

Release date: 2024-02-01

This patch release updates the Kubernetes dependencies to v1.28.6 and various other dependencies to their latest version to patch upstream CVEs.

Improvements:

1.2.3

Release date: 2023-12-14

This patch release updates the controller's Helm dependency to v3.13.3.

Improvements:

  • Update Helm to v3.13.3 #1325
  • helmrepo: Remove migration log/event #1324

1.2.2

Release date: 2023-12-11

This patch release addresses an issue with AWS ECR authentication introduced in v1.2.0.

In addition, a variety of dependencies have been updated. Including an update of the container base image to Alpine v3.19.

Fixes:

  • Address issue with authenticating towards AWS ECR #1318 #1321

Improvements:

  • Update dependencies #1314

... (truncated)

Commits
  • 3f131a1 Merge pull request #1363 from fluxcd/release-v1.2.4
  • 8fcdff7 Release v1.2.4
  • 2a57324 Add changelog entry for v1.2.4
  • a724e00 Merge pull request #1362 from fluxcd/backport-1361-to-release/v1.2.x
  • 6cf8879 build(deps): bump the go-deps group with 2 updates
  • fefee33 Merge pull request #1357 from fluxcd/backport-1355-to-release/v1.2.x
  • e3834d3 build(deps): bump the ci group with 3 updates
  • d6d8699 Merge pull request #1353 from fluxcd/backport-1352-to-release/v1.2.x
  • 0efba9a Update API to Kubernetes v1.28.4
  • 1a892fc build(deps): bump the go-deps group with 12 updates
  • Additional commits viewable in compare view


Updates github.com/go-logr/logr from 1.3.0 to 1.4.1

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.1

What's Changed

Full Changelog: https://github.com/go-logr/logr/compare/v1.4.0...v1.4.1

v1.4.0

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: https://github.com/go-logr/logr/compare/v1.3.0...v1.4.0

Commits
  • dcdc3f2 slogr: fix unintended API break in v0.8.0 (#253)
  • 5d88f52 funcr: Add LogInfoLevel Option to skip logging level in the info log (#240)
  • 177005d build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
  • e7f489a build(deps): bump github/codeql-action from 2.22.9 to 3.22.11
  • cf56c3b build(deps): bump actions/setup-go from 4 to 5
  • 2ad296e build(deps): bump github/codeql-action from 2.22.8 to 2.22.9
  • d55b4e2 Merge pull request #241 from thockin/master
  • 98ee9d9 Clean up slog testing and restore coverage
  • b228ba8 Break examples to new file
  • 6432877 Add benchmarks for slogSink
  • Additional commits viewable in compare view


Updates github.com/mandelsoft/vfs from 0.0.0-20230713123140-269aa4fb1338 to 0.4.3

Release notes

Sourced from github.com/mandelsoft/vfs's releases.

Windows Fix

Fix volume handling for path evaluation if used path is on another drive than the current working directory.

Support for is/fs.

This release adds support for the standard Go package io/fs.

Any instance of a VFS van no be mapped to such a filesystem access interface with vfs.AsIoFS(fs FileSystem) fs.ReadDirFS.

Additionally some fixes are included:

  • fix vfs.Exists catching underlying NotExist error correctly.
  • fix vfs.WlkFS

Support Relative Path Determination

No release notes provided.

Some Fixes

  • fix permission handling
  • fix cleanup up tempfs
  • fix windows path mapping
  • fix compile error on windows
  • add os flags and file mode

First Version

First version of a virtual filesystem for go. It supports various implementations

  • OS File Sytems
  • Memory File Systems
  • File Systems stored in yaml/json files
  • Layered File Systems

Based on those implementations file systems can be adapted by

  • Readonly File System View
  • Folder Folder as File System
  • Composable File Systems by Mounting others
  • File Systems supporting a Current Working Directory
  • Temp File System

The package provides interfaces that can be used to substitute OS related filesystem functions from packages os and ioutil.

Commits


Updates github.com/open-component-model/git-controller from 0.9.0 to 0.12.1

Release notes

Sourced from github.com/open-component-model/git-controller's releases.

v0.12.1

Release 0.12.1

  • fix: add the right version in the image overlay for the deployment (#145)
  • chore: remove personal information (#139)
github-actions[bot] commented 5 months ago

Mend Scan Summary: :x:

Repository: open-component-model/MPAS

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 2
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 0
LICENSE RISK HIGH 7
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report Mend UI

dependabot[bot] commented 5 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.