search

open-component-model / ocm

Open Component Model (Software Bill of Delivery) Toolset
https://ocm.software
Apache License 2.0
34 stars 23 forks source link

Bump the go group with 35 updates #679

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 7 months ago

Bumps the go group with 35 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.21.2 1.25.2
github.com/aws/aws-sdk-go-v2/config 1.19.1 1.27.4
github.com/aws/aws-sdk-go-v2/credentials 1.13.43 1.17.4
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.11.33 1.16.6
github.com/aws/aws-sdk-go-v2/service/ecr 1.20.2 1.27.1
github.com/aws/aws-sdk-go-v2/service/s3 1.40.0 1.51.1
github.com/containerd/containerd 1.7.11 1.7.13
github.com/containers/image/v5 5.21.1 5.29.2
github.com/docker/go-connections 0.4.0 0.5.0
github.com/fluxcd/pkg/ssa 0.24.1 0.36.0
github.com/go-logr/logr 1.3.0 1.4.1
github.com/go-openapi/strfmt 0.21.7 0.22.1
github.com/go-openapi/swag 0.22.4 0.22.9
github.com/goccy/go-yaml 1.9.5 1.11.3
github.com/hashicorp/vault-client-go 0.4.2 0.4.3
github.com/klauspost/compress 1.17.2 1.17.3
github.com/mittwald/go-helm-client 0.12.3 0.12.8
github.com/onsi/ginkgo/v2 2.9.4 2.15.0
github.com/onsi/gomega 1.27.6 1.31.1
github.com/sigstore/cosign/v2 2.2.1 2.2.3
github.com/sigstore/rekor 1.3.3 1.3.4
github.com/sigstore/sigstore 1.7.5 1.8.1
github.com/stretchr/testify 1.8.4 1.9.0
github.com/tonglil/buflogr 1.0.1 1.1.1
golang.org/x/exp 0.0.0-20231006140011-7918f672742d 0.0.0-20240103183307-be819d1f06fc
golang.org/x/net 0.17.0 0.20.0
golang.org/x/oauth2 0.13.0 0.16.0
helm.sh/helm/v3 3.12.2 3.14.2
k8s.io/api 0.28.4 0.29.0
k8s.io/apiextensions-apiserver 0.27.2 0.29.0
k8s.io/apimachinery 0.28.4 0.29.0
k8s.io/cli-runtime 0.27.2 0.29.0
k8s.io/client-go 0.28.4 0.29.0
sigs.k8s.io/cli-utils 0.34.0 0.35.0
sigs.k8s.io/controller-runtime 0.14.4 0.16.3

Updates github.com/aws/aws-sdk-go-v2 from 1.21.2 to 1.25.2

Commits


Updates github.com/aws/aws-sdk-go-v2/config from 1.19.1 to 1.27.4

Commits


Updates github.com/aws/aws-sdk-go-v2/credentials from 1.13.43 to 1.17.4

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/credentials's changelog.

Release (2023-02-03)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/autoscaling: v1.26.2
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/cloudformation: v1.26.2
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/cloudsearch: v1.14.1
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.25.2
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/docdb: v1.20.2
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.84.1
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/elasticache: v1.26.2
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/elasticbeanstalk: v1.15.1
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing: v1.15.2
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2: v1.19.3
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/iam: v1.19.2
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/neptune: v1.19.2
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/proton: v1.20.0
    • Feature: Add new GetResourcesSummary API
  • github.com/aws/aws-sdk-go-v2/service/rds: v1.40.2
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/redshift: v1.27.2
    • Documentation: Corrects descriptions of the parameters for the API operations RestoreFromClusterSnapshot, RestoreTableFromClusterSnapshot, and CreateCluster.
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/ses: v1.15.1
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/sns: v1.20.1
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/sqs: v1.20.2
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.
  • github.com/aws/aws-sdk-go-v2/service/sts: v1.18.3
    • Dependency Update: Upgrade smithy to 1.27.2 and correct empty query list serialization.

Release (2023-02-02)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/appconfig: v1.16.0

... (truncated)

Commits
  • 3f28b51 Release 2023-02-03
  • 6e8d17f Regenerated Clients
  • 60dbdbb Update endpoints model
  • 212910a Update API model
  • eb8cb66 Upgrade smithy to 1.27.2, correct query empty list serialization
  • 24db9f5 Update processcreds.CredentialProcessResponse visibility to public (#1921)
  • bd3003e dependency: upgrade smithy to 1.27.2 and correct query empty list serialization
  • 0d94f22 Release 2023-02-02
  • 2eec85e Regenerated Clients
  • 4ca6e32 Update endpoints model
  • Additional commits viewable in compare view


Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.11.33 to 1.16.6

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/feature/s3/manager's changelog.

Release (2022-06-29)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2: v1.16.6
    • Bug Fix: Fix aws/signer/v4 to not double sign Content-Length header. Fixes #1728. Thanks to @​matelang for creating the issue and PR.
  • github.com/aws/aws-sdk-go-v2/service/appstream: v1.17.0
    • Feature: Includes support for StreamingExperienceSettings in CreateStack and UpdateStack APIs
  • github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2: v1.18.7
    • Documentation: This release adds two attributes for ALB. One, helps to preserve the host header and the other helps to modify, preserve, or remove the X-Forwarded-For header in the HTTP request.
  • github.com/aws/aws-sdk-go-v2/service/emr: v1.19.0
    • Feature: This release introduces additional optional parameter "Throughput" to VolumeSpecification to enable user to configure throughput for gp3 ebs volumes.
  • github.com/aws/aws-sdk-go-v2/service/medialive: v1.21.0
    • Feature: This release adds support for automatic renewal of MediaLive reservations at the end of each reservation term. Automatic renewal is optional. This release also adds support for labelling accessibility-focused audio and caption tracks in HLS outputs.
  • github.com/aws/aws-sdk-go-v2/service/redshiftserverless: v1.2.0
    • Feature: Add new API operations for Amazon Redshift Serverless, a new way of using Amazon Redshift without needing to manually manage provisioned clusters. The new operations let you interact with Redshift Serverless resources, such as create snapshots, list VPC endpoints, delete resource policies, and more.
  • github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.34.0
    • Feature: This release adds: UpdateFeatureGroup, UpdateFeatureMetadata, DescribeFeatureMetadata APIs; FeatureMetadata type in Search API; LastModifiedTime, LastUpdateStatus, OnlineStoreTotalSizeBytes in DescribeFeatureGroup API.
  • github.com/aws/aws-sdk-go-v2/service/translate: v1.14.0
    • Feature: Added ListLanguages API which can be used to list the languages supported by Translate.

Release (2022-06-28)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/datasync: v1.18.0
    • Feature: AWS DataSync now supports Amazon FSx for NetApp ONTAP locations.
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.47.0
    • Feature: This release adds a new spread placement group to EC2 Placement Groups: host level spread, which spread instances between physical hosts, available to Outpost customers only. CreatePlacementGroup and DescribePlacementGroups APIs were updated with a new parameter: SpreadLevel to support this feature.
  • github.com/aws/aws-sdk-go-v2/service/finspacedata: v1.12.0
    • Feature: Release new API GetExternalDataViewAccessDetails
  • github.com/aws/aws-sdk-go-v2/service/polly: v1.16.0
    • Feature: Add 4 new neural voices - Pedro (es-US), Liam (fr-CA), Daniel (de-DE) and Arthur (en-GB).

Release (2022-06-24.2)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/emrcontainers: v1.13.7
    • Bug Fix: Fixes bug with incorrect modeled timestamp format

Release (2022-06-23)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/lookoutequipment: v1.14.0
    • Feature: This release adds visualizations to the scheduled inference results. Users will be able to see interference results, including diagnostic results from their running inference schedulers.
  • github.com/aws/aws-sdk-go-v2/service/mediaconvert: v1.25.1
    • Documentation: AWS Elemental MediaConvert SDK has released support for automatic DolbyVision metadata generation when converting HDR10 to DolbyVision.
  • github.com/aws/aws-sdk-go-v2/service/mgn: v1.15.0
    • Feature: New and modified APIs for the Post-Migration Framework

... (truncated)

Commits


Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.20.2 to 1.27.1

Commits


Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.40.0 to 1.51.1

Commits


Updates github.com/containerd/containerd from 1.7.11 to 1.7.13

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.13

Welcome to the v1.7.13 release of containerd!

The thirteenth patch release for containerd 1.7 updates the runc binary in the release builds to address CVE-2024-21626

Notable Updates

  • Update runc binary to v1.1.12 (GHSA-xr7r-f8xq-vfvv)
  • Update seccomp profile for new syscalls added since Linux 5.16 (#9693)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Derek McGowan
  • Akihiro Suda
  • Evan Lezar
  • Paweł Gronowski
  • Phil Estes
  • Wei Fu

Changes

  • Prepare v1.7.13 and update runc to v1.1.12 (#9724)
  • [release/1.7] seccomp: kernel 6.7 (#9693)
  • [release/1.7] Update container-device-interface to v0.6.2 (#9685)
    • 14628d4aa Update container-device-interface to v0.6.2
  • [release/1.7] content: Add InfoReaderProvider (#9658)

Dependency Changes

  • tags.cncf.io/container-device-interface v0.6.2 new
  • tags.cncf.io/container-device-interface/specs-go v0.6.0 new

Previous release can be found at v1.7.12

containerd 1.7.12

Welcome to the v1.7.12 release of containerd!

... (truncated)

Commits
  • 7c3aca7 Merge pull request #9724 from dmcgowan/prepare-v1.7.13
  • b97e611 Prepare release notes for v1.7.13
  • 2e7fa14 Update runc binary to v1.1.12
  • cbda56b Merge pull request #9693 from k8s-infra-cherrypick-robot/cherry-pick-9684-to-...
  • 1bed378 seccomp: kernel 6.7
  • 1944259 Merge pull request #9685 from elezar/dependency-update-container-device-inter...
  • 14628d4 Update container-device-interface to v0.6.2
  • 8c780b7 Merge pull request #9658 from vvoland/contentprovider-1.7
  • 8364779 content: Add InfoReaderProvider
  • 71909c1 Merge pull request #9632 from dmcgowan/prepare-v1.7.12
  • Additional commits viewable in compare view


Updates github.com/containers/image/v5 from 5.21.1 to 5.29.2

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.29.2

What's Changed

Full Changelog: https://github.com/containers/image/compare/v5.29.1...v5.29.2

v5.29.1

  • Add support for pushing an image with unknown digest

v5.29.0

What's Changed

... (truncated)

Commits
  • b799d82 [release-5.29] Bump to v5.29.2
  • 6cbd4f4 [release-5.29] backport Docker Daemon fix #2260
  • 2f0d9ae Merge pull request #2262 from mtrmac/5.29-skopeo-reverse
  • ef8a7a5 Use a stable Skopeo branch for testing the stable c/image branch
  • d8bbff8 Merge pull request #2253 from mtrmac/releasing-5.29.1
  • 540136f Bump to v5.29.2-dev
  • f7fbc0a Release 5.29.1
  • 1b5932f Merge pull request #2252 from mheon/backport_2209_529
  • 47bac8f Add support for pushing image with unknown digest
  • 041e291 Merge pull request #2251 from mtrmac/5.29-dest-branch
  • Additional commits viewable in compare view


Updates github.com/docker/go-connections from 0.4.0 to 0.5.0

Commits
  • fa09c95 Merge pull request #108 from thaJeztah/carry_6
  • 7a67a58 Swap CloseRead and CloseWrite
  • 481d3d2 Merge pull request #107 from thaJeztah/drop_legacy_go
  • 9548f9f tlsconfig: remove deprecated io/ioutil
  • c564c21 drop support for go1.17 and older
  • 7cbebcf gha: update actions
  • 2cf423f tlsconfig: move allTLSVersions var
  • dca283b tlsconfig: drop support for go1.12 and older
  • 21876c5 tlsconfig: drop support for go1.6 and older
  • 4d174db tlsconfig: drop support for go1.4 and older
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/ssa from 0.24.1 to 0.36.0

Commits
  • e5ca530 Merge pull request #728 from fluxcd/internal-deps
  • ac45fb6 Update internal dependencies
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • Additional commits viewable in compare view


Updates github.com/go-logr/logr from 1.3.0 to 1.4.1

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.1

What's Changed

Full Changelog: https://github.com/go-logr/logr/compare/v1.4.0...v1.4.1

v1.4.0

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: https://github.com/go-logr/logr/compare/v1.3.0...v1.4.0

Commits
  • dcdc3f2 slogr: fix unintended API break in v0.8.0 (#253)
  • 5d88f52 funcr: Add LogInfoLevel Option to skip logging level in the info log (#240)
  • 177005d build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
  • e7f489a build(deps): bump github/codeql-action from 2.22.9 to 3.22.11
  • cf56c3b build(deps): bump actions/setup-go from 4 to 5
  • 2ad296e build(deps): bump github/codeql-action from 2.22.8 to 2.22.9
  • d55b4e2 Merge pull request #241 from thockin/master
  • 98ee9d9 Clean up slog testing and restore coverage
  • b228ba8 Break examples to new file
  • 6432877 Add benchmarks for slogSink
  • Additional commits viewable in compare view


Updates github.com/go-openapi/strfmt from 0.21.7 to 0.22.1

Commits
  • 6729407 chore(linting): fixed unnessary use of fmt.Errorf
  • 59dbfa2 Bump the other-dependencies group with 1 update
  • f7d57e2 Bump the development-dependencies group with 1 update
  • 83a372a ci: remove paths-ignore
  • cd1244b Bump the development-dependencies group with 1 update
  • cf8eef5 chore(ci): prevents duplicate workflow runs
  • 8631c72 Bump the other-dependencies group with 1 update (#116)
  • 6007e88 Bump the development-dependencies group with 3 updates
  • fae44d9 ci(dependencies): automate dependencies updates
  • 740a7c6 fix(uuid): UUID regexes to support all-or-none '-' separator
  • Additional commits viewable in compare view


Updates github.com/go-openapi/swag from 0.22.4 to 0.22.9

Commits
  • a05020e Bump actions/setup-go from 4 to 5
  • 8ce930b Bump actions/checkout from 3 to 4
  • 76c9b7c Updated dependabot frequency to monthly
  • e181373 Added dependabot
  • 216b00a refreshed go.mod
  • 01194a0 perf(mangling): optimized the processing of initialisms
  • b3e7a53 fix(mangling): fixed name mangling when special chars are substituted
  • 0ddf107 fix(ci): muted warnings in CI runs due to cache conflicts
  • 11b0957 fix(yaml): make MarshalYAML deterministic
  • 3f60c98 fix(yaml): handled null values from JSON
  • Additional commits viewable in compare view


Updates github.com/goccy/go-yaml from 1.9.5 to 1.11.3

Release notes

Sourced from github.com/goccy/go-yaml's releases.

1.11.3

What's Changed

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.11.2...v1.11.3

1.11.2

What's Changed

New Contributors

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.11.1...v1.11.2

1.11.1

What's Changed

New Contributors

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.11.0...v1.11.1

1.11.0

What's Changed

Full Changelog: https://github.com/goccy/go-yaml/compare/v1.10.1...v1.11.0

1.10.1

What's Changed

  • Quote YAML 1.1 bools at encoding time for compatibility with other legacy parsers by @​mumoshu in goccy/go-yaml#354
  • Update CI b... _Description has been truncated_
github-actions[bot] commented 7 months ago

Mend Scan Summary: :x:

Repository: open-component-model/ocm

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 0
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 0
HIGH RISK LICENSES 9
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report Mend UI

ocmbot[bot] commented 7 months ago

Integration Tests for 09b2145b01600d10efeb209333b18498b4d55200 run with result: Success ✅!

ocmbot[bot] commented 7 months ago

Integration Tests for 09b2145b01600d10efeb209333b18498b4d55200 run with result: Success ✅!

morri-son commented 7 months ago

@mandelsoft, wollen wir mal wagen, das Ding zu merken?