search

open-component-model / ocm

Open Component Model (Software Bill of Delivery) Toolset
https://ocm.software
Apache License 2.0
34 stars 23 forks source link

Bump the go group with 27 updates #639

Closed dependabot[bot] closed 8 months ago

dependabot[bot] commented 8 months ago

Bumps the go group with 27 updates:

Package From To
github.com/go-logr/logr 1.3.0 1.4.1
github.com/hashicorp/vault-client-go 0.4.2 0.4.3
github.com/onsi/gomega 1.27.6 1.31.1
golang.org/x/net 0.19.0 0.20.0
k8s.io/apimachinery 0.28.4 0.29.1
github.com/aws/aws-sdk-go-v2 1.21.2 1.24.1
github.com/aws/aws-sdk-go-v2/config 1.19.1 1.26.6
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.11.33 1.15.15
github.com/aws/aws-sdk-go-v2/service/ecr 1.20.2 1.24.7
github.com/containerd/containerd 1.7.11 1.7.12
github.com/containers/image/v5 5.21.1 5.29.1
github.com/docker/go-connections 0.4.0 0.5.0
github.com/fluxcd/pkg/ssa 0.24.1 0.35.0
github.com/go-openapi/strfmt 0.21.7 0.22.0
github.com/go-openapi/swag 0.22.4 0.22.9
github.com/goccy/go-yaml 1.9.5 1.11.3
github.com/klauspost/compress 1.17.3 1.17.5
github.com/mittwald/go-helm-client 0.12.3 0.12.7
github.com/sigstore/cosign/v2 2.2.1 2.2.2
github.com/sigstore/sigstore 1.7.6 1.8.1
github.com/tonglil/buflogr 1.0.1 1.1.1
helm.sh/helm/v3 3.13.3 3.14.0
k8s.io/api 0.29.0 0.29.1
k8s.io/apiextensions-apiserver 0.29.0 0.29.1
k8s.io/cli-runtime 0.29.0 0.29.1
sigs.k8s.io/cli-utils 0.34.0 0.35.0
sigs.k8s.io/controller-runtime 0.16.3 0.17.0

Updates github.com/go-logr/logr from 1.3.0 to 1.4.1

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.1

What's Changed

Full Changelog: https://github.com/go-logr/logr/compare/v1.4.0...v1.4.1

v1.4.0

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: https://github.com/go-logr/logr/compare/v1.3.0...v1.4.0

Commits
  • dcdc3f2 slogr: fix unintended API break in v0.8.0 (#253)
  • 5d88f52 funcr: Add LogInfoLevel Option to skip logging level in the info log (#240)
  • 177005d build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
  • e7f489a build(deps): bump github/codeql-action from 2.22.9 to 3.22.11
  • cf56c3b build(deps): bump actions/setup-go from 4 to 5
  • 2ad296e build(deps): bump github/codeql-action from 2.22.8 to 2.22.9
  • d55b4e2 Merge pull request #241 from thockin/master
  • 98ee9d9 Clean up slog testing and restore coverage
  • b228ba8 Break examples to new file
  • 6432877 Add benchmarks for slogSink
  • Additional commits viewable in compare view


Updates github.com/hashicorp/vault-client-go from 0.4.2 to 0.4.3

Release notes

Sourced from github.com/hashicorp/vault-client-go's releases.

v0.4.3

0.4.3 (diff) - 2023-12-28

Fixed

  • Fixed error parsing for errors with non-standard response bodies (#247).

See the full CHANGELOG.md

Changelog

Sourced from github.com/hashicorp/vault-client-go's changelog.

[0.4.3][] ([diff][0.4.3-diff]) - 2023-12-15

Fixed

  • Fixed error parsing for errors with non-standard response bodies (#247).
Commits


Updates github.com/onsi/gomega from 1.27.6 to 1.31.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.31.1

1.31.1

Fixes

  • Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]
  • Update test in case keeping msg is desired [ad1a367]

Maintenance

  • Show how to import the format sub package [24e958d]
  • tidy up go.sum [26661b8]
  • bump dependencies [bde8f7a]

v1.31.0

1.31.0

Features

  • Async assertions include context cancellation cause if present [121c37f]

Maintenance

  • Bump minimum go version [dee1e3c]
  • docs: fix typo in example usage "occured" -> "occurred" [49005fe]
  • Bump actions/setup-go from 4 to 5 (#714) [f1c8757]
  • Bump github/codeql-action from 2 to 3 (#715) [9836e76]
  • Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.2 (#713) [54726f0]
  • Bump golang.org/x/net from 0.17.0 to 0.19.0 (#711) [df97ecc]
  • docs: fix HaveExactElement typo (#712) [a672c86]

v1.30.0

1.30.0

Features

  • BeTrueBecause and BeFalseBecause allow for better failure messages [4da4c7f]

Maintenance

  • Bump actions/checkout from 3 to 4 (#694) [6ca6e97]
  • doc: fix type on gleak go doc [f1b8343]

v1.29.0

1.29.0

Features

  • MatchError can now take an optional func(error) bool + description [2b39142]

v1.28.1

1.28.1

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.13.0 [635d196]
  • Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 [14f8859]
  • Bump golang.org/x/net from 0.14.0 to 0.17.0 [d8a6508]

... (truncated)

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.31.1

Fixes

  • Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]
  • Update test in case keeping msg is desired [ad1a367]

Maintenance

  • Show how to import the format sub package [24e958d]
  • tidy up go.sum [26661b8]
  • bump dependencies [bde8f7a]

1.31.0

Features

  • Async assertions include context cancellation cause if present [121c37f]

Maintenance

  • Bump minimum go version [dee1e3c]
  • docs: fix typo in example usage "occured" -> "occurred" [49005fe]
  • Bump actions/setup-go from 4 to 5 (#714) [f1c8757]
  • Bump github/codeql-action from 2 to 3 (#715) [9836e76]
  • Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.2 (#713) [54726f0]
  • Bump golang.org/x/net from 0.17.0 to 0.19.0 (#711) [df97ecc]
  • docs: fix HaveExactElement typo (#712) [a672c86]

1.30.0

Features

  • BeTrueBecause and BeFalseBecause allow for better failure messages [4da4c7f]

Maintenance

  • Bump actions/checkout from 3 to 4 (#694) [6ca6e97]
  • doc: fix type on gleak go doc [f1b8343]

1.29.0

Features

  • MatchError can now take an optional func(error) bool + description [2b39142]

1.28.1

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.13.0 [635d196]
  • Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 [14f8859]
  • Bump golang.org/x/net from 0.14.0 to 0.17.0 [d8a6508]
  • #703 doc(matchers): HaveEach() doc comment updated [2705bdb]
  • Minor typos (#699) [375648c]

1.28.0

... (truncated)

Commits
  • 762b171 v1.31.1
  • 26661b8 tidy up go.sum
  • bde8f7a bump dependencies
  • 24e958d Show how to import the format sub package
  • ad1a367 Update test in case keeping msg is desired
  • e0dd999 Inverted arguments order of FailureMessage of BeComparableToMatcher
  • ba8bba2 v1.31.0
  • 121c37f Async assertions include context cancellation cause if present
  • dee1e3c Bump minimum go version
  • 49005fe docs: fix typo in example usage "occured" -> "occurred"
  • Additional commits viewable in compare view


Updates golang.org/x/net from 0.19.0 to 0.20.0

Commits
  • cb5b10f go.mod: update golang.org/x dependencies
  • 689bbc7 quic: deflake TestStreamsCreateConcurrency
  • f12db26 internal/quic/cmd/interop: use wget --no-verbose in Dockerfile
  • c136d0c quic: avoid panic when PTO expires and implicitly-created streams exist
  • f9726a9 quic: fix packet size logging
  • c337daf quic: enable qlog output in tests
  • 2b416c3 quic/qlog: create log files with O_EXCL
  • 1e59a7e quic/qlog: correctly write negative durations
  • b0eb4d6 quic: compute pnum len from max ack received, not sent
  • b952594 quic: fix data race in connection close
  • Additional commits viewable in compare view


Updates k8s.io/apimachinery from 0.28.4 to 0.29.1

Commits


Updates github.com/aws/aws-sdk-go-v2 from 1.21.2 to 1.24.1

Commits


Updates github.com/aws/aws-sdk-go-v2/config from 1.19.1 to 1.26.6

Commits


Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.33 to 1.15.15

Commits


Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.20.2 to 1.24.7

Commits


Updates github.com/containerd/containerd from 1.7.11 to 1.7.12

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.12

Welcome to the v1.7.12 release of containerd!

The twelfth patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

  • Fix on dialer function for Windows (#9501)
  • Improve /etc/group handling when appending groups (#9544)
  • Update shim pidfile permissions to 0644 (#9548)
  • Update runc binary to v1.1.11 (#9596)
  • Allow import and export to reference missing content (#9600)
  • Remove runc import (#9605)
  • Update Go version to 1.20.13 (#9624)

Deprecation Warnings

  • Emit deprecation warning for containerd.io/restart.logpath label usage (#9567)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Akihiro Suda
  • Sebastiaan van Stijn
  • Wei Fu
  • Derek McGowan
  • Paweł Gronowski
  • Jaroslav Jindrak
  • Maksym Pavlenko
  • Samuel Karp
  • Anthony Nandaa
  • Bjorn Neergaard
  • Djordje Lukic
  • Kay Yan

Changes

  • [release/1.7] Prepare release notes for v1.7.12 (#9632)
    • 775d544fe Prepare release notes for v1.7.12
  • [release/1.7] update to go1.20.13, test go1.21.6 (#9624)
    • a5dc5b894 update to go1.20.13, test go1.21.6
  • [release/1.7] shim: Create pid-file and address with 0644 permissions (#9548)
    • 8d82242eb shim: Create address file with 0644 permissions
    • 260963a35 shim: Create pid-file with 0644 permissions

... (truncated)

Commits
  • 71909c1 Merge pull request #9632 from dmcgowan/prepare-v1.7.12
  • 775d544 Prepare release notes for v1.7.12
  • 4ebe8e2 Merge pull request #9624 from thaJeztah/1.7_update_golang_1.20.13
  • a5dc5b8 update to go1.20.13, test go1.21.6
  • 50e7359 Merge pull request #9548 from Dzejrou/1.7_fix_ignoring_umask
  • 5a675f2 Merge pull request #9602 from thaJeztah/1.7_backport_no_execabs
  • ccca466 Merge pull request #9605 from thaJeztah/1.7_backport_switch_moby_user
  • 9251072 remove github.com/opencontainers/runc dependency
  • 4e67213 vendor: github.com/cncf-tags/container-device-interface v0.6.1
  • e0ee0be go.mod: github.com/opencontainers/runtime-spec v1.1.0
  • Additional commits viewable in compare view


Updates github.com/containers/image/v5 from 5.21.1 to 5.29.1

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.29.1

  • Add support for pushing an image with unknown digest

v5.29.0

What's Changed

... (truncated)

Commits
  • f7fbc0a Release 5.29.1
  • 1b5932f Merge pull request #2252 from mheon/backport_2209_529
  • 47bac8f Add support for pushing image with unknown digest
  • 041e291 Merge pull request #2251 from mtrmac/5.29-dest-branch
  • 2f4085b Update DEST_BRANCH for the branch
  • 2ed5800 Bump to v5.29.1-dev
  • 93256e0 Bump to v5.29.0
  • 4c7278f Bump c/storage to v1.51.0
  • 199d256 Merge pull request #2185 from mtrmac/zstd-chunked-never-reuse
  • 3ebd43c HACK: Don't record zstd:chunked algorithm in the BIC at all
  • Additional commits viewable in compare view


Updates github.com/docker/go-connections from 0.4.0 to 0.5.0

Commits
  • fa09c95 Merge pull request #108 from thaJeztah/carry_6
  • 7a67a58 Swap CloseRead and CloseWrite
  • 481d3d2 Merge pull request #107 from thaJeztah/drop_legacy_go
  • 9548f9f tlsconfig: remove deprecated io/ioutil
  • c564c21 drop support for go1.17 and older
  • 7cbebcf gha: update actions
  • 2cf423f tlsconfig: move allTLSVersions var
  • dca283b tlsconfig: drop support for go1.12 and older
  • 21876c5 tlsconfig: drop support for go1.6 and older
  • 4d174db tlsconfig: drop support for go1.4 and older
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/ssa from 0.24.1 to 0.35.0

Commits
  • 91eda6e Merge pull request #694 from fluxcd/git-deps-up
  • 2a64584 Use gomega in sourceignore
  • 46577cd Update golang.org dependencies
  • e6b6af7 Merge pull request #685 from knutgoetz/chore/gogit/delete-gogiterror-function
  • cbc2172 Delete obsolete goGitError function
  • 02723c3 Merge pull request #693 from fluxcd/go-git-v5.10.1
  • 3715de1 Update go-git to v5.10.1
  • ce91255 Merge pull request #692 from fluxcd/ssa-nits
  • 8fc4505 ssa: prevent unnecessary DeepCopy
  • cc07605 Merge pull request #691 from fluxcd/jsondiff-include-obj
  • Additional commits viewable in compare view


Updates github.com/go-openapi/strfmt from 0.21.7 to 0.22.0

Commits
  • 740a7c6 fix(uuid): UUID regexes to support all-or-none '-' separator
  • 03a91f9 ci: fixed cache warning in ci;fixed code coverage on all sub packages
  • c62b808 updated dependencies
  • 60116ba Merge pull request #110 from go-openapi/bump-deps
  • e659c66 clear lint warnings
  • ae6aace bump deps including mongo
  • ab8ec8f doc: fixed typo in link to badge in README
  • 20380e4 Merge pull request #108 from fredbi/refact/linting
  • dcfda72 chore: relint
  • 447abe8 Merge pull request #107 from carlv-stripe/master
  • Additional commits viewable in compare view


Updates github.com/go-openapi/swag from 0.22.4 to 0.22.9

Commits
  • a05020e Bump actions/setup-go from 4 to 5
  • 8ce930b Bump actions/checkout from 3 to 4
  • 76c9b7c Updated dependabot frequency to monthly
  • e181373 Added dependabot
  • 216b00a refreshed go.mod
  • 01194a0 perf(mangling): optimized the processing of initialisms
  • b3e7a53 fix(mangling): fixed name mangling when special chars are substituted
  • 0ddf107 fix(ci): muted warnings in CI runs due to cache conflicts
  • 11b0957 fix(yaml): make MarshalYAML deterministic
  • 3f60c98 fix(yaml): handled null values from JSON
  • Additional commits viewable in compare view


Updates github.com/goccy/go-yaml from 1.9.5 to 1.11.3

Release notes

Sourced from github.com/goccy/go-yaml's releases.

1.11.3

What's Changed

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.11.2...v1.11.3

1.11.2

What's Changed

New Contributors

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.11.1...v1.11.2

1.11.1

What's Changed

New Contributors

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.11.0...v1.11.1

1.11.0

What's Changed

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.10.1...v1.11.0

1.10.1

What's Changed

... (truncated)

Changelog

Sourced from github.com/goccy/go-yaml's changelog.

1.11.2 - 2023-09-15

Fix bugs

  • Fix quoted comments ( #370 )
  • Fix handle of space at start or last ( #376 )
  • Fix sequence with comment ( #390 )

1.11.1 - 2023-09-14

Fix bugs

  • Handle \r in a double-quoted string the same as \n ( #372 )
  • Replace loop with n.Values = append(n.Values, target.Values...) ( #380 )
  • Skip encoding an inline field if it is null ( #386 )
  • Fix comment parsing with null value ( #388 )

1.11.0 - 2023-04-03

Features

  • Supports dynamically switch encode and decode processing for a given type

1.10.1 - 2023-03-28

Features

  • Quote YAML 1.1 bools at encoding time for compatibility with other legacy parsers
  • Add support of 32-bit architecture

Fix bugs

  • Don't trim all space characters in block style sequence
  • Support strings starting with @

1.10.0 - 2023-03-01

Fix bugs

Reversible conversion of comments was not working in various cases, which has been corrected. Breaking Change exists in the comment map interface. However, if you are dealing with CommentMap directly, there is no problem.

1.9.8 - 2022-12-19

Fix feature

  • Append new line at the end of file ( #329 )

Fix bugs

... (truncated)

Commits
  • 31fe1ba fix: remove any trailing empty lines if the block scalar has strip indicator ...
  • 0640a15 bump actions/setup-go v4 (#393)
  • c33fec6 apply go fmt with Go 1.21 (#394)... _Description has been truncated_
github-actions[bot] commented 8 months ago

Mend Scan Summary: :x:

Repository: open-component-model/ocm

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 0
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 0
LICENSE RISK HIGH 9
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 1

Detailed Logs: mend-scan-> Generate Report Mend UI

dependabot[bot] commented 8 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.