open-component-model / ocm

Open Component Model (Software Bill of Delivery) Toolset
https://ocm.software
Apache License 2.0
34 stars 23 forks source link

Bump the go group with 34 updates #668

Closed dependabot[bot] closed 8 months ago

dependabot[bot] commented 8 months ago

Bumps the go group with 34 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.21.2 1.25.0
github.com/aws/aws-sdk-go-v2/config 1.19.1 1.27.0
github.com/aws/aws-sdk-go-v2/credentials 1.13.43 1.17.0
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.11.33 1.16.2
github.com/aws/aws-sdk-go-v2/service/ecr 1.20.2 1.26.0
github.com/aws/aws-sdk-go-v2/service/s3 1.40.0 1.50.1
github.com/containerd/containerd 1.7.11 1.7.13
github.com/containers/image/v5 5.21.1 5.29.2
github.com/docker/go-connections 0.4.0 0.5.0
github.com/fluxcd/pkg/ssa 0.24.1 0.36.0
github.com/go-logr/logr 1.3.0 1.4.1
github.com/go-openapi/strfmt 0.21.7 0.22.0
github.com/go-openapi/swag 0.22.4 0.22.9
github.com/goccy/go-yaml 1.9.5 1.11.3
github.com/hashicorp/vault-client-go 0.4.2 0.4.3
github.com/klauspost/compress 1.17.2 1.17.3
github.com/mittwald/go-helm-client 0.12.3 0.12.7
github.com/onsi/ginkgo/v2 2.9.4 2.15.0
github.com/onsi/gomega 1.27.6 1.31.1
github.com/sigstore/cosign/v2 2.2.1 2.2.3
github.com/sigstore/rekor 1.3.3 1.3.4
github.com/sigstore/sigstore 1.7.5 1.8.1
github.com/tonglil/buflogr 1.0.1 1.1.1
golang.org/x/exp 0.0.0-20231006140011-7918f672742d 0.0.0-20240103183307-be819d1f06fc
golang.org/x/net 0.17.0 0.20.0
golang.org/x/oauth2 0.13.0 0.16.0
helm.sh/helm/v3 3.12.2 3.13.3
k8s.io/api 0.28.4 0.29.0
k8s.io/apiextensions-apiserver 0.27.2 0.29.0
k8s.io/apimachinery 0.28.4 0.29.0
k8s.io/cli-runtime 0.27.2 0.29.0
k8s.io/client-go 0.28.4 0.29.0
sigs.k8s.io/cli-utils 0.34.0 0.35.0
sigs.k8s.io/controller-runtime 0.14.4 0.16.3

Updates github.com/aws/aws-sdk-go-v2 from 1.21.2 to 1.25.0

Commits


Updates github.com/aws/aws-sdk-go-v2/config from 1.19.1 to 1.27.0

Commits


Updates github.com/aws/aws-sdk-go-v2/credentials from 1.13.43 to 1.17.0

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/credentials's changelog.

Release (2022-10-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2: v1.17.0
    • Feature: Adds aws.IsCredentialsProvider for inspecting CredentialProvider types when needing to determine if the underlying implementation type matches a target type. This resolves an issue where CredentialsCache could mask AnonymousCredentials providers, breaking downstream detection logic.
  • github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider: v1.21.0
    • Feature: This release adds a new "DeletionProtection" field to the UserPool in Cognito. Application admins can configure this value with either ACTIVE or INACTIVE value. Setting this field to ACTIVE will prevent a user pool from accidental deletion.
  • github.com/aws/aws-sdk-go-v2/service/eventbridge: v1.16.16
    • Bug Fix: The SDK client has been updated to utilize the aws.IsCredentialsProvider function for determining if aws.AnonymousCredentials has been configured for the CredentialProvider.
  • github.com/aws/aws-sdk-go-v2/service/s3: v1.29.0
    • Feature: S3 on Outposts launches support for automatic bucket-style alias. You can use the automatic access point alias instead of an access point ARN for any object-level operation in an Outposts bucket.
    • Bug Fix: The SDK client has been updated to utilize the aws.IsCredentialsProvider function for determining if aws.AnonymousCredentials has been configured for the CredentialProvider.
  • github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.49.0
    • Feature: CreateInferenceRecommenderjob API now supports passing endpoint details directly, that will help customers to identify the max invocation and max latency they can achieve for their model and the associated endpoint along with getting recommendations on other instances.
  • github.com/aws/aws-sdk-go-v2/service/sts: v1.17.0
    • Feature: Add presign functionality for sts:AssumeRole operation

Release (2022-10-20)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/devopsguru: v1.20.0
    • Feature: This release adds information about the resources DevOps Guru is analyzing.
  • github.com/aws/aws-sdk-go-v2/service/globalaccelerator: v1.15.0
    • Feature: Global Accelerator now supports AddEndpoints and RemoveEndpoints operations for standard endpoint groups.
  • github.com/aws/aws-sdk-go-v2/service/resiliencehub: v1.7.0
    • Feature: In this release, we are introducing support for regional optimization for AWS Resilience Hub applications. It also includes a few documentation updates to improve clarity.
  • github.com/aws/aws-sdk-go-v2/service/rum: v1.7.0
    • Feature: CloudWatch RUM now supports Extended CloudWatch Metrics with Additional Dimensions

Release (2022-10-19)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging: v1.11.6
    • Documentation: Documentation updates for Chime Messaging SDK
  • github.com/aws/aws-sdk-go-v2/service/cloudtrail: v1.19.0
    • Feature: This release includes support for exporting CloudTrail Lake query results to an Amazon S3 bucket.
  • github.com/aws/aws-sdk-go-v2/service/configservice: v1.27.0
    • Feature: This release adds resourceType enums for AppConfig, AppSync, DataSync, EC2, EKS, Glue, GuardDuty, SageMaker, ServiceDiscovery, SES, Route53 types.
  • github.com/aws/aws-sdk-go-v2/service/connect: v1.33.0
    • Feature: This release adds API support for managing phone numbers that can be used across multiple AWS regions through telephony traffic distribution.
  • github.com/aws/aws-sdk-go-v2/service/managedblockchain: v1.13.0
    • Feature: Adding new Accessor APIs for Amazon Managed Blockchain
  • github.com/aws/aws-sdk-go-v2/service/s3: v1.28.0
    • Feature: Updates internal logic for constructing API endpoints. We have added rule-based endpoints and internal model parameters.

... (truncated)

Commits


Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.33 to 1.16.2

Commits


Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.20.2 to 1.26.0

Commits


Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.40.0 to 1.50.1

Commits


Updates github.com/containerd/containerd from 1.7.11 to 1.7.13

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.13

Welcome to the v1.7.13 release of containerd!

The thirteenth patch release for containerd 1.7 updates the runc binary in the release builds to address CVE-2024-21626

Notable Updates

  • Update runc binary to v1.1.12 (GHSA-xr7r-f8xq-vfvv)
  • Update seccomp profile for new syscalls added since Linux 5.16 (#9693)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Derek McGowan
  • Akihiro Suda
  • Evan Lezar
  • Paweł Gronowski
  • Phil Estes
  • Wei Fu

Changes

  • Prepare v1.7.13 and update runc to v1.1.12 (#9724)
  • [release/1.7] seccomp: kernel 6.7 (#9693)
  • [release/1.7] Update container-device-interface to v0.6.2 (#9685)
    • 14628d4aa Update container-device-interface to v0.6.2
  • [release/1.7] content: Add InfoReaderProvider (#9658)

Dependency Changes

  • tags.cncf.io/container-device-interface v0.6.2 new
  • tags.cncf.io/container-device-interface/specs-go v0.6.0 new

Previous release can be found at v1.7.12

containerd 1.7.12

Welcome to the v1.7.12 release of containerd!

... (truncated)

Commits
  • 7c3aca7 Merge pull request #9724 from dmcgowan/prepare-v1.7.13
  • b97e611 Prepare release notes for v1.7.13
  • 2e7fa14 Update runc binary to v1.1.12
  • cbda56b Merge pull request #9693 from k8s-infra-cherrypick-robot/cherry-pick-9684-to-...
  • 1bed378 seccomp: kernel 6.7
  • 1944259 Merge pull request #9685 from elezar/dependency-update-container-device-inter...
  • 14628d4 Update container-device-interface to v0.6.2
  • 8c780b7 Merge pull request #9658 from vvoland/contentprovider-1.7
  • 8364779 content: Add InfoReaderProvider
  • 71909c1 Merge pull request #9632 from dmcgowan/prepare-v1.7.12
  • Additional commits viewable in compare view


Updates github.com/containers/image/v5 from 5.21.1 to 5.29.2

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.29.2

What's Changed

Full Changelog: https://github.com/containers/image/compare/v5.29.1...v5.29.2

v5.29.1

  • Add support for pushing an image with unknown digest

v5.29.0

What's Changed

... (truncated)

Commits
  • b799d82 [release-5.29] Bump to v5.29.2
  • 6cbd4f4 [release-5.29] backport Docker Daemon fix #2260
  • 2f0d9ae Merge pull request #2262 from mtrmac/5.29-skopeo-reverse
  • ef8a7a5 Use a stable Skopeo branch for testing the stable c/image branch
  • d8bbff8 Merge pull request #2253 from mtrmac/releasing-5.29.1
  • 540136f Bump to v5.29.2-dev
  • f7fbc0a Release 5.29.1
  • 1b5932f Merge pull request #2252 from mheon/backport_2209_529
  • 47bac8f Add support for pushing image with unknown digest
  • 041e291 Merge pull request #2251 from mtrmac/5.29-dest-branch
  • Additional commits viewable in compare view


Updates github.com/docker/go-connections from 0.4.0 to 0.5.0

Commits
  • fa09c95 Merge pull request #108 from thaJeztah/carry_6
  • 7a67a58 Swap CloseRead and CloseWrite
  • 481d3d2 Merge pull request #107 from thaJeztah/drop_legacy_go
  • 9548f9f tlsconfig: remove deprecated io/ioutil
  • c564c21 drop support for go1.17 and older
  • 7cbebcf gha: update actions
  • 2cf423f tlsconfig: move allTLSVersions var
  • dca283b tlsconfig: drop support for go1.12 and older
  • 21876c5 tlsconfig: drop support for go1.6 and older
  • 4d174db tlsconfig: drop support for go1.4 and older
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/ssa from 0.24.1 to 0.36.0

Commits
  • e5ca530 Merge pull request #728 from fluxcd/internal-deps
  • ac45fb6 Update internal dependencies
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • Additional commits viewable in compare view


Updates github.com/go-logr/logr from 1.3.0 to 1.4.1

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.1

What's Changed

Full Changelog: https://github.com/go-logr/logr/compare/v1.4.0...v1.4.1

v1.4.0

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: https://github.com/go-logr/logr/compare/v1.3.0...v1.4.0

Commits
  • dcdc3f2 slogr: fix unintended API break in v0.8.0 (#253)
  • 5d88f52 funcr: Add LogInfoLevel Option to skip logging level in the info log (#240)
  • 177005d build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
  • e7f489a build(deps): bump github/codeql-action from 2.22.9 to 3.22.11
  • cf56c3b build(deps): bump actions/setup-go from 4 to 5
  • 2ad296e build(deps): bump github/codeql-action from 2.22.8 to 2.22.9
  • d55b4e2 Merge pull request #241 from thockin/master
  • 98ee9d9 Clean up slog testing and restore coverage
  • b228ba8 Break examples to new file
  • 6432877 Add benchmarks for slogSink
  • Additional commits viewable in compare view


Updates github.com/go-openapi/strfmt from 0.21.7 to 0.22.0

Commits
  • 740a7c6 fix(uuid): UUID regexes to support all-or-none '-' separator
  • 03a91f9 ci: fixed cache warning in ci;fixed code coverage on all sub packages
  • c62b808 updated dependencies
  • 60116ba Merge pull request #110 from go-openapi/bump-deps
  • e659c66 clear lint warnings
  • ae6aace bump deps including mongo
  • ab8ec8f doc: fixed typo in link to badge in README
  • 20380e4 Merge pull request #108 from fredbi/refact/linting
  • dcfda72 chore: relint
  • 447abe8 Merge pull request #107 from carlv-stripe/master
  • Additional commits viewable in compare view


Updates github.com/go-openapi/swag from 0.22.4 to 0.22.9

Commits
  • a05020e Bump actions/setup-go from 4 to 5
  • 8ce930b Bump actions/checkout from 3 to 4
  • 76c9b7c Updated dependabot frequency to monthly
  • e181373 Added dependabot
  • 216b00a refreshed go.mod
  • 01194a0 perf(mangling): optimized the processing of initialisms
  • b3e7a53 fix(mangling): fixed name mangling when special chars are substituted
  • 0ddf107 fix(ci): muted warnings in CI runs due to cache conflicts
  • 11b0957 fix(yaml): make MarshalYAML deterministic
  • 3f60c98 fix(yaml): handled null values from JSON
  • Additional commits viewable in compare view


Updates github.com/goccy/go-yaml from 1.9.5 to 1.11.3

Release notes

Sourced from github.com/goccy/go-yaml's releases.

1.11.3

What's Changed

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.11.2...v1.11.3

1.11.2

What's Changed

New Contributors

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.11.1...v1.11.2

1.11.1

What's Changed

New Contributors

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.11.0...v1.11.1

1.11.0

What's Changed

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.10.1...v1.11.0

1.10.1

What's Changed

... (truncated)

Changelog

Sourced from github.com/goccy/go-yaml's changelog.

1.11.2 - 2023-09-15

Fix bugs

  • Fix quoted comments ( #370 )
  • Fix handle of space at start or last ( #376 )
  • Fix sequence with comment ( #390 )

1.11.1 - 2023-09-14

Fix bugs

  • Handle \r in a double-quoted string the same as \n ( #372 )
  • Replace loop with n.Values = append(n.Values, target.Values...) ( #380 )
  • Skip encoding an inline field if it is null ( #386 )
  • Fix comment parsing with null value ( #388 )

1.11.0 - 2023-04-03

Features

  • Supports dynamically switch encode and decode processing for a given type

1.10.1 - 2023-03-28

Features

  • Quote YAML 1.1 bools at encoding time for compatibility with other legacy parsers
  • Add support of 32-bit architecture

Fix bugs

  • Don't trim all space characters in block style sequence
  • Support strings starting with @

1.10.0 - 2023-03-01

Fix bugs

Reversible conversion of comments was not working in various cases, which has been corrected. Breaking Change exists in the comment map interface. However, if you are dealing with CommentMap directly, there is no problem.

1.9.8 - 2022-12-19

Fix feature

  • Append new line at the end of file ( #329 )

Fix bugs

... (truncated)

Commits


Updates github.com/hashicorp/vault-client-go from 0.4.2 to 0.4.3

Release notes

Sourced from github.com/hashicorp/vault-client-go's releases.

v0.4.3

0.4.3 (diff) - 2023-12-28

Fixed

  • Fixed error parsing for errors with non-standard response bodies (#247).

See the full CHANGELOG.md

Changelog

Sourced from github.com/hashicorp/vault-client-go's changelog.

[0.4.3][] ([diff][0.4.3-diff]) - 2023-12-15

Fixed

  • Fixed error parsing for errors with non-standard response bodies (
github-actions[bot] commented 8 months ago

Mend Scan Summary: :x:

Repository: open-component-model/ocm

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 0
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 0
HIGH RISK LICENSES 9
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 1

Detailed Logs: mend-scan-> Generate Report Mend UI

ocmbot[bot] commented 8 months ago

Integration Tests for 2ddf3fea1d80d4f45abc9859e3005940cfd5e84e run with result: Success ✅!

dependabot[bot] commented 8 months ago

Superseded by #671.