open-component-model / ocm

Open Component Model (Software Bill of Delivery Toolset)
https://ocm.software
Apache License 2.0
32 stars 23 forks source link

Bump the go group with 31 updates #714

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps the go group with 31 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.25.2 1.26.1
github.com/aws/aws-sdk-go-v2/config 1.27.4 1.27.10
github.com/aws/aws-sdk-go-v2/credentials 1.17.4 1.17.10
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.16.6 1.16.14
github.com/aws/aws-sdk-go-v2/service/ecr 1.27.1 1.27.4
github.com/aws/aws-sdk-go-v2/service/s3 1.51.1 1.53.1
github.com/containerd/containerd 1.7.13 1.7.14
github.com/containers/image/v5 5.29.2 5.30.0
github.com/cyberphone/json-canonicalization 0.0.0-20231011164504-785e29786b46 0.0.0-20231217050601-ba74d44ecf5f
github.com/distribution/reference 0.5.0 0.6.0
github.com/docker/cli 24.0.7+incompatible 25.0.3+incompatible
github.com/docker/docker 24.0.7+incompatible 25.0.3+incompatible
github.com/go-openapi/strfmt 0.22.1 0.22.2
github.com/go-openapi/swag 0.22.9 0.22.10
github.com/klauspost/compress 1.17.4 1.17.7
github.com/mittwald/go-helm-client 0.12.8 0.12.9
github.com/onsi/ginkgo/v2 2.15.0 2.17.1
github.com/onsi/gomega 1.31.1 1.32.0
github.com/opencontainers/image-spec 1.1.0-rc5 1.1.0
github.com/sigstore/rekor 1.3.4 1.3.5
github.com/sigstore/sigstore 1.8.1 1.8.2
golang.org/x/exp 0.0.0-20240103183307-be819d1f06fc 0.0.0-20240222234643-814bf88cf225
golang.org/x/net 0.20.0 0.22.0
golang.org/x/oauth2 0.16.0 0.18.0
helm.sh/helm/v3 3.14.2 3.14.3
k8s.io/api 0.29.0 0.29.3
k8s.io/apiextensions-apiserver 0.29.0 0.29.3
k8s.io/apimachinery 0.29.0 0.29.3
k8s.io/cli-runtime 0.29.0 0.29.3
k8s.io/client-go 0.29.0 0.29.3
sigs.k8s.io/controller-runtime 0.16.3 0.17.2

Updates github.com/aws/aws-sdk-go-v2 from 1.25.2 to 1.26.1

Commits


Updates github.com/aws/aws-sdk-go-v2/config from 1.27.4 to 1.27.10

Commits


Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.4 to 1.17.10

Commits


Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.6 to 1.16.14

Commits


Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.27.1 to 1.27.4

Commits


Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.1 to 1.53.1

Commits


Updates github.com/containerd/containerd from 1.7.13 to 1.7.14

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.14

Welcome to the v1.7.14 release of containerd!

The fourteenth patch release for containerd 1.7 contains various fixes and updates.

Highlights

  • Update builds to use go 1.21.8 (#9933)
  • Fix various timing issues with docker pusher (#9921)
  • Register imagePullThroughput and count with MiB (#9855)
  • Move high volume event logs to Trace level (#9823)

Container Runtime Interface (CRI)

  • Handle pod transition states gracefully while listing pod stats (#9905)

Runtime

  • Update runc-shim to process exec exits before init (#9928)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Wei Fu
  • Derek McGowan
  • Maksym Pavlenko
  • Krisztian Litkey
  • Akihiro Suda
  • Justin Chadwell
  • Sebastiaan van Stijn
  • Phil Estes
  • Kirtana Ashok
  • Akhil Mohan
  • Austin Vazquez
  • Etienne Champetier
  • Jordan Liggitt
  • Kohei Tokunaga
  • Mike Brown
  • Samuel Karp
  • Davanum Srinivas
  • Edgar Lee
  • Henry Wang
  • James Sturtevant
  • Laura Brehm
  • Nashwan Azhari
  • Robbie Buxton
  • Robert-André Mauchin
  • Shukui Yang

... (truncated)

Commits
  • dcf2847 Merge pull request #9953 from dmcgowan/prepare-v1.7.14
  • 1babe6b Prepare release notes for v1.7.14
  • 9138da4 Merge pull request #9951 from austinvazquez/release-1.7-backport-use-matrix-g...
  • a9bbbef Use the Go toolchain in CI matrix to build binaries
  • 17cbd50 Merge pull request #9933 from AkihiroSuda/go-1.21.8-1.7
  • 4c825b3 Merge pull request #9938 from akhilerm/cherry-pick-9777-1.7
  • 39caf53 Move inline PS scripts into files
  • 5613fae Merge pull request #9944 from dmcgowan/1.7-skip-oom-test
  • 1ca9a64 update to go 1.21.8, 1.22.1
  • 630226b Disable OOM set score unpriv test temporarily
  • Additional commits viewable in compare view


Updates github.com/containers/image/v5 from 5.29.2 to 5.30.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.30.0

What's Changed

A fair number of improvements when working with zstd and zstd:chunked-compressed images.

Note that make install now installs policy.json and registries.d/default.yaml.

New Contributors

Full Changelog: https://github.com/containers/image/compare/v5.29.2...v5.30.0

Commits
  • b29bde5 Bump to v5.30.0
  • 3cc0bb4 Merge pull request #2328 from containers/renovate/github.com-containers-stora...
  • 169d6f5 fix(deps): update module github.com/containers/storage to v1.53.0
  • ed96328 Merge pull request #2330 from containers/renovate/golang.org-x-oauth2-0.x
  • d097f7f fix(deps): update module golang.org/x/oauth2 to v0.18.0
  • 5dbfa1c Merge pull request #2329 from containers/renovate/golang.org-x-crypto-0.x
  • 99369af fix(deps): update module golang.org/x/crypto to v0.21.0
  • b457769 Merge pull request #2326 from containers/renovate/go-openapi
  • 23e4c1d fix(deps): update go-openapi packages
  • faa4f4f Merge pull request #2325 from containers/renovate/github.com-stretchr-testify...
  • Additional commits viewable in compare view


Updates github.com/cyberphone/json-canonicalization from 0.0.0-20231011164504-785e29786b46 to 0.0.0-20231217050601-ba74d44ecf5f

Commits


Updates github.com/distribution/reference from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/distribution/reference's releases.

v0.6.0

What's Changed

New Contributors

Full Changelog: https://github.com/distribution/reference/compare/v0.5.0...v0.6.0

Commits
  • ff14faf Merge pull request #9 from ozairasim/exclude-domain-from-name-length-validation
  • 2a66312 Merge pull request #10 from xrstf/patch-1
  • 094e717 fix typo in readme
  • aaca75e Exclude domain from name length check
  • 8507c7f Merge pull request #7 from thaJeztah/cleanup_splitDockerDomain
  • 89ee7ec refactor splitDockerDomain to include more documentation
  • a3fb784 Merge pull request #5 from thaJeztah/rm_deprecated
  • 4894124 remove deprecated SplitHostname
  • See full diff in compare view


Updates github.com/docker/cli from 24.0.7+incompatible to 25.0.3+incompatible

Commits
  • 4debf41 Merge pull request #4857 from thaJeztah/25.0_backport_codecov-action-4
  • 5e6ce1b Merge pull request #4856 from thaJeztah/25.0_backport_plugin-socket-tests
  • 5428301 build(deps): Bump codecov/codecov-action from 3 to 4
  • 1cbc218 tests: add plugin-socket-compatibility tests
  • 2f6b5ad scripts: don't hardcode architecture in e2e script
  • d8e07c9 tests: add tests for cli-plugins/socket
  • 5f1b610 Merge pull request #4841 from thaJeztah/25.0_vendor_docker_25.0.2
  • c105cd3 Merge pull request #4837 from dvdksn/25.0_docs_backport_linode_volume_plugin
  • 62b2963 vendor: github.com/docker/docker v25.0.2
  • 71f2b0d vendor: github.com/docker/docker v25.0.1
  • Additional commits viewable in compare view


Updates github.com/docker/docker from 24.0.7+incompatible to 25.0.3+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v25.0.3

25.0.3

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

What's Changed

  • [25.0 backport] pkg/ioutils: Make subsequent Close attempts noop moby/moby#47222
  • [25.0 backport] Fix HasResource inverted boolean error - vendor swarmkit v2.0.0-20240125134710-dcda100a8261 moby/moby#47225
  • [25.0 backport] gha: update actions to account for node 16 deprecation moby/moby#47291
  • [25.0 backport] docs: remove dead links from api verison history moby/moby#47296
  • [25.0 backport] Assert temp output directory is not an empty string moby/moby#47298
  • [25.0 backport] api: Document version in /build moby/moby#47295
  • [25.0 backport] De-flake TestSwarmClusterRotateUnlockKey moby/moby#47201
  • [25.0 backport] Add internal n/w bridge to firewalld docker zone moby/moby#47303
  • [25.0 backport] Only restore a configured MAC addr on restart. moby/moby#47304
  • [25.0 backport] Revert "daemon: automatically set network EnableIPv6 if needed" moby/moby#47310
  • [25.0 backport] libnet: bridge: ignore EINVAL when configuring bridge MTU moby/moby#47311
  • [25.0 backport] logger/journald: fix tailing logs with systemd 255 moby/moby#47243
  • [25.0 backport] add more //go:build directives to prevent downgrading to go1.16 language moby/moby#47220
  • [25.0 backport] libcontainerd/supervisor: fix data race moby/moby#47313
  • [25.0 backport] plugins: Fix panic when fetching by digest moby/moby#47323
  • [25.0 backport] Dockerfile: update docker-cli to v25.0.2, docker compose v2.24.5 moby/moby#47316
  • [25.0 backport] image/save: Fix untagged images not present in index.json moby/moby#47294
  • [25.0 backport] Dockerfile: update RootlessKit to v2.0.1 moby/moby#47334
  • [25.0 backport] image/cache: Ignore Build and Revision on Windows moby/moby#47337
  • [25.0 backport] profiles/seccomp: add syscalls for kernel v5.17 - v6.6, match containerd's profile moby/moby#47344
  • [25.0 backport] c8d: Use the same logic to get the present images moby/moby#47348

Full Changelog: https://github.com/moby/moby/compare/v25.0.2...v25.0.3

v25.0.2

25.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains security fixes for the following CVEs affecting Docker Engine and its components.

CVE Component Fix version Severity

... (truncated)

Commits
  • f417435 Merge pull request #47348 from rumpl/25.0_backport-history-config
  • acd023d c8d: Use the same logic to get the present images
  • 7a075ca Merge pull request #47344 from thaJeztah/25.0_backport_seccomp_updates
  • aff7177 Merge pull request #47337 from vvoland/cache-fix-older-windows-25
  • ed7c263 seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5)
  • 74e3b4f seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5)
  • 4cc0416 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5)
  • f9f9e7f seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5)
  • 5fb4eb9 seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5)
  • 67e9aa6 seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5)
  • Additional commits viewable in compare view


Updates github.com/go-openapi/strfmt from 0.22.1 to 0.22.2

Commits
  • be4ecdf updated dependencies
  • e949e33 fix(ci): remove dependency-type from dependabot groups
  • 5238521 Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  • See full diff in compare view


Updates github.com/go-openapi/swag from 0.22.9 to 0.22.10

Commits
  • 5e655d8 fix(ci): remove dependency-type from dependabot groups
  • 54f3f80 chore(lint): relinted
  • 4896833 Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  • 6b32215 Bump the development-dependencies group with 1 update
  • db91acc ci: remove paths-ignores
  • fec0b4e Bump the development-dependencies group with 1 update
  • 14fcae4 chore(ci): prevents duplicate workflow runs
  • d33767c Bump the development-dependencies group with 1 update
  • c877230 ci(dependencies): automate dependencies updates
  • See full diff in compare view


Updates github.com/klauspost/compress from 1.17.4 to 1.17.7

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.7

What's Changed

Full Changelog: https://github.com/klauspost/compress/compare/v1.17.6...v1.17.7

v1.17.6

What's Changed

Full Changelog: https://github.com/klauspost/compress/compare/v1.17.5...v1.17.6

v1.17.5

What's Changed

New Contributors

Full Changelog: https://github.com/klauspost/compress/compare/v1.17.4...v1.17.5

Commits


Updates github.com/mittwald/go-helm-client from 0.12.8 to 0.12.9

Release notes

Sourced from github.com/mittwald/go-helm-client's releases.

v0.12.9

What's Changed

New Contributors

Full Changelog: https://github.com/mittwald/go-helm-client/compare/v0.12.8...v0.12.9

Commits


Updates github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.17.1

2.17.1

Fixes

  • If the user sets --seed=0, make sure all parallel nodes get the same seed [af0330d]

v2.17.0

2.17.0

Features

  • add --github-output for nicer output in github actions [e8a2056]

Maintenance

  • fix typo in core_dsl.go [977bc6f]
  • Fix typo in docs [e297e7b]

v2.16.0

2.16.0

Features

  • add SpecContext to reporting nodes

Fixes

  • merge coverages instead of combining them (#1329) (#1340) [23f0cc5]
  • core_dsl: disable Getwd() with environment variable (#1357) [cd418b7]

Maintenance

  • docs/index.md: Typo [2cebe8d]
  • fix docs [06de431]
  • chore: test with Go 1.22 (#1352) [898cba9]
  • Bump golang.org/x/tools from 0.16.1 to 0.17.0 (#1336) [17ae120]
  • Bump golang.org/x/sys from 0.15.0 to 0.16.0 (#1327) [5a179ed]
  • Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 (#1321) [a1e6b69]
  • Bump github-pages and jekyll-feed in /docs (#1351) [d52951d]
  • Fix docs for handling failures in goroutines (#1339) [4471b2e]
Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.17.1

Fixes

  • If the user sets --seed=0, make sure all parallel nodes get the same seed [af0330d]

2.17.0

Features

  • add --github-output for nicer output in github actions [e8a2056]

Maintenance

  • fix typo in core_dsl.go [977bc6f]
  • Fix typo in docs [e297e7b]

2.16.0

Features

  • add SpecContext to reporting nodes

Fixes

  • merge coverages instead of combining them (#1329) (#1340) [23f0cc5]
  • core_dsl: disable Getwd() with environment variable (#1357) [cd418b7]

Maintenance

  • docs/index.md: Typo [2cebe8d]
  • fix docs [06de431]
  • chore: test with Go 1.22 (#1352) [898cba9]
  • Bump golang.org/x/tools from 0.16.1 to 0.17.0 (#1336) [17ae120]
  • Bump golang.org/x/sys from 0.15.0 to 0.16.0 (#1327) [5a179ed]
  • Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 (#1321) [a1e6b69]
  • Bump github-pages and jekyll-feed in /docs (#1351) [d52951d]
  • Fix docs for handling failures in goroutines (#1339) [4471b2e]
Commits


Updates github.com/onsi/gomega from 1.31.1 to 1.32.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.32.0

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

Commits
  • 4379951 v1.32.0
  • a350b95 Maintain source backwards compatibility
  • a6c8875 Fix failing test
  • 436a197 Migrate github.com/golang/protobuf to google.golang.org/protobuf
  • 32ef35e chore: test with Go 1.22 (#733)
  • a0d0387 Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717)
  • b71e477 Bump github-pages and jekyll-feed in /docs (#732)
  • f460154 docs: fix typo and broken anchor link to gstruct
  • a2862e4 docs: fix HaveEach matcher signature
  • See full diff in compare view


Updates github.com/opencontainers/image-spec from 1.1.0-rc5 to 1.1.0

Release notes

Sourced from github.com/opencontainers/image-spec's releases.

v1.1.0

Vote Passed [+7-0] - https://groups.google.com/a/opencontainers.org/g/dev/c/Cnk6H9C4aag Release PR : opencontainers/image-spec#1... _Description has been truncated_

github-actions[bot] commented 5 months ago

Mend Scan Summary: :x:

Repository: open-component-model/ocm

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 0
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 2
HIGH RISK LICENSES 9
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report Mend UI

ocmbot[bot] commented 5 months ago

Integration Tests for c4c81c576d1390c1a594b0783bded6265f8dc0e8 run with result: Success ✅!

dependabot[bot] commented 5 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.