search

open-component-model / ocm

Open Component Model (Software Bill of Delivery Toolset)
https://ocm.software
Apache License 2.0
32 stars 23 forks source link

Bump the go group with 34 updates #724

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps the go group with 34 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.25.2 1.26.1
github.com/aws/aws-sdk-go-v2/config 1.27.4 1.27.11
github.com/aws/aws-sdk-go-v2/credentials 1.17.4 1.17.11
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.16.6 1.16.15
github.com/aws/aws-sdk-go-v2/service/ecr 1.27.1 1.27.4
github.com/aws/aws-sdk-go-v2/service/s3 1.51.1 1.53.1
github.com/containerd/containerd 1.7.13 1.7.15
github.com/containers/image/v5 5.29.2 5.30.0
github.com/cyberphone/json-canonicalization 0.0.0-20231011164504-785e29786b46 0.0.0-20231217050601-ba74d44ecf5f
github.com/distribution/reference 0.5.0 0.6.0
github.com/docker/cli 24.0.7+incompatible 25.0.3+incompatible
github.com/docker/docker 24.0.9+incompatible 25.0.3+incompatible
github.com/fluxcd/pkg/ssa 0.36.0 0.38.0
github.com/go-openapi/strfmt 0.22.1 0.22.2
github.com/go-openapi/swag 0.22.9 0.22.10
github.com/klauspost/compress 1.17.4 1.17.7
github.com/mittwald/go-helm-client 0.12.8 0.12.9
github.com/onsi/ginkgo/v2 2.15.0 2.17.1
github.com/onsi/gomega 1.31.1 1.32.0
github.com/opencontainers/image-spec 1.1.0-rc5 1.1.0
github.com/sigstore/cosign/v2 2.2.3 2.2.4
github.com/sigstore/rekor 1.3.4 1.3.6
github.com/sigstore/sigstore 1.8.1 1.8.3
github.com/ulikunitz/xz 0.5.11 0.5.12
golang.org/x/exp 0.0.0-20240103183307-be819d1f06fc 0.0.0-20240222234643-814bf88cf225
golang.org/x/net 0.20.0 0.22.0
golang.org/x/oauth2 0.16.0 0.19.0
helm.sh/helm/v3 3.14.3 3.14.4
k8s.io/api 0.29.0 0.29.3
k8s.io/apiextensions-apiserver 0.29.0 0.29.3
k8s.io/apimachinery 0.29.0 0.29.3
k8s.io/cli-runtime 0.29.0 0.29.3
k8s.io/client-go 0.29.0 0.29.3
sigs.k8s.io/controller-runtime 0.16.3 0.17.2

Updates github.com/aws/aws-sdk-go-v2 from 1.25.2 to 1.26.1

Commits


Updates github.com/aws/aws-sdk-go-v2/config from 1.27.4 to 1.27.11

Commits


Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.4 to 1.17.11

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/credentials's changelog.

Release (2022-11-10)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/autoscaling: v1.24.1
    • Documentation: This release adds a new price capacity optimized allocation strategy for Spot Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling, EC2 Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability and Spot Instance price.
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.70.0
    • Feature: This release adds a new price capacity optimized allocation strategy for Spot Instances to help customers optimize provisioning of Spot Instances via EC2 Auto Scaling, EC2 Fleet, and Spot Fleet. It allocates Spot Instances based on both spare capacity availability and Spot Instance price.
  • github.com/aws/aws-sdk-go-v2/service/ecs: v1.19.0
    • Feature: This release adds support for task scale-in protection with updateTaskProtection and getTaskProtection APIs. UpdateTaskProtection API can be used to protect a service managed task from being terminated by scale-in events and getTaskProtection API to get the scale-in protection status of a task.
  • github.com/aws/aws-sdk-go-v2/service/elasticsearchservice: v1.17.0
    • Feature: Amazon OpenSearch Service now offers managed VPC endpoints to connect to your Amazon OpenSearch Service VPC-enabled domain in a Virtual Private Cloud (VPC). This feature allows you to privately access OpenSearch Service domain without using public IPs or requiring traffic to traverse the Internet.
  • github.com/aws/aws-sdk-go-v2/service/resourceexplorer2: v1.0.1
    • Documentation: Text only updates to some Resource Explorer descriptions.
  • github.com/aws/aws-sdk-go-v2/service/scheduler: v1.0.0
    • Release: New AWS service client module
    • Feature: AWS introduces the new Amazon EventBridge Scheduler. EventBridge Scheduler is a serverless scheduler that allows you to create, run, and manage tasks from one central, managed service.

Release (2022-11-09)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/connect: v1.35.0
    • Feature: This release adds new fields SignInUrl, UserArn, and UserId to GetFederationToken response payload.
  • github.com/aws/aws-sdk-go-v2/service/connectcases: v1.1.0
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.69.0
    • Feature: Amazon EC2 Trn1 instances, powered by AWS Trainium chips, are purpose built for high-performance deep learning training. u-24tb1.112xlarge and u-18tb1.112xlarge High Memory instances are purpose-built to run large in-memory databases.
  • github.com/aws/aws-sdk-go-v2/service/groundstation: v1.14.0
    • Feature: This release adds the preview of customer-provided ephemeris support for AWS Ground Station, allowing space vehicle owners to provide their own position and trajectory information for a satellite.
  • github.com/aws/aws-sdk-go-v2/service/mediapackagevod: v1.19.0
    • Feature: This release adds "IncludeIframeOnlyStream" for Dash endpoints.
  • github.com/aws/aws-sdk-go-v2/service/transcribestreaming: v1.7.0
    • Feature: This will release hi-IN and th-TH

Release (2022-11-08)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/acm: v1.16.0
    • Feature: Support added for requesting elliptic curve certificate key algorithm types P-256 (EC_prime256v1) and P-384 (EC_secp384r1).
  • github.com/aws/aws-sdk-go-v2/service/billingconductor: v1.1.0
    • Feature: This release adds the Recurring Custom Line Item feature along with a new API ListCustomLineItemVersions.
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.68.0
    • Feature: This release enables sharing of EC2 Placement Groups across accounts and within AWS Organizations using Resource Access Manager
  • github.com/aws/aws-sdk-go-v2/service/fms: v1.20.0
    • Feature: AWS Firewall Manager now supports importing existing AWS Network Firewall firewalls into Firewall Manager policies.
  • github.com/aws/aws-sdk-go-v2/service/lightsail: v1.24.0
    • Feature: This release adds support for Amazon Lightsail to automate the delegation of domains registered through Amazon Route 53 to Lightsail DNS management and to automate record creation for DNS validation of Lightsail SSL/TLS certificates.
  • github.com/aws/aws-sdk-go-v2/service/opensearch: v1.11.0

... (truncated)

Commits


Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.6 to 1.16.15

Commits


Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.27.1 to 1.27.4

Commits


Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.51.1 to 1.53.1

Commits


Updates github.com/containerd/containerd from 1.7.13 to 1.7.15

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.15

Welcome to the v1.7.15 release of containerd!

The fifteenth patch release for containerd 1.7 contains various fixes; one for a regression introduced in v1.7.14 in the way process exits were handled.

Highlights

  • Adds mediatype to OCI index record on export (#9990)

Runtime

  • Fix runc shim to only defer init process exits (#10037)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Derek McGowan
  • Phil Estes
  • Austin Vazquez
  • Laura Brehm
  • Sebastiaan van Stijn
  • Talon

Changes

  • Prepare for v1.7.15 release (#10039)
  • Fix runc shim to only defer init process exits (#10037)
    • 21df46766 runc-shim: only defer init process exits
  • Fix compile from version control system (source) use case (#10012)
    • 2a054213e Fix compile from version control system (source) use case
  • Adds mediatype to OCI index record on export (#9990)
    • 6605c47a4 adds mediatype to oci index record
  • vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 (#9975)
    • e6d91d843 vendor: github.com/golang/protobuf v1.5.4
    • 2d136c5f5 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
    • a1a7af7a3 build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0

Dependency Changes

  • github.com/golang/protobuf v1.5.3 -> v1.5.4
  • google.golang.org/protobuf v1.31.0 -> v1.33.0

... (truncated)

Commits
  • 926c958 Merge pull request #10039 from estesp/prep-1.7.15
  • 4d4759b Prep v1.7.15 release
  • 52fc8ab Merge pull request #10037 from laurazard/backport-1.7-exec-fix
  • 21df467 runc-shim: only defer init process exits
  • 0dcf21c Merge pull request #10012 from austinvazquez/release-1.7-fix-offline-compilation
  • 2a05421 Fix compile from version control system (source) use case
  • ec5222f Merge pull request #9990 from daghack/oci-add-mediatype-1.7
  • 6605c47 adds mediatype to oci index record
  • be5ec97 Merge pull request #9975 from thaJeztah/1.7_bump_protobuf
  • e6d91d8 vendor: github.com/golang/protobuf v1.5.4
  • Additional commits viewable in compare view


Updates github.com/containers/image/v5 from 5.29.2 to 5.30.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.30.0

What's Changed

A fair number of improvements when working with zstd and zstd:chunked-compressed images.

Note that make install now installs policy.json and registries.d/default.yaml.

New Contributors

Full Changelog: https://github.com/containers/image/compare/v5.29.2...v5.30.0

Commits
  • b29bde5 Bump to v5.30.0
  • 3cc0bb4 Merge pull request #2328 from containers/renovate/github.com-containers-stora...
  • 169d6f5 fix(deps): update module github.com/containers/storage to v1.53.0
  • ed96328 Merge pull request #2330 from containers/renovate/golang.org-x-oauth2-0.x
  • d097f7f fix(deps): update module golang.org/x/oauth2 to v0.18.0
  • 5dbfa1c Merge pull request #2329 from containers/renovate/golang.org-x-crypto-0.x
  • 99369af fix(deps): update module golang.org/x/crypto to v0.21.0
  • b457769 Merge pull request #2326 from containers/renovate/go-openapi
  • 23e4c1d fix(deps): update go-openapi packages
  • faa4f4f Merge pull request #2325 from containers/renovate/github.com-stretchr-testify...
  • Additional commits viewable in compare view


Updates github.com/cyberphone/json-canonicalization from 0.0.0-20231011164504-785e29786b46 to 0.0.0-20231217050601-ba74d44ecf5f

Commits


Updates github.com/distribution/reference from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/distribution/reference's releases.

v0.6.0

What's Changed

New Contributors

Full Changelog: https://github.com/distribution/reference/compare/v0.5.0...v0.6.0

Commits
  • ff14faf Merge pull request #9 from ozairasim/exclude-domain-from-name-length-validation
  • 2a66312 Merge pull request #10 from xrstf/patch-1
  • 094e717 fix typo in readme
  • aaca75e Exclude domain from name length check
  • 8507c7f Merge pull request #7 from thaJeztah/cleanup_splitDockerDomain
  • 89ee7ec refactor splitDockerDomain to include more documentation
  • a3fb784 Merge pull request #5 from thaJeztah/rm_deprecated
  • 4894124 remove deprecated SplitHostname
  • See full diff in compare view


Updates github.com/docker/cli from 24.0.7+incompatible to 25.0.3+incompatible

Commits
  • 4debf41 Merge pull request #4857 from thaJeztah/25.0_backport_codecov-action-4
  • 5e6ce1b Merge pull request #4856 from thaJeztah/25.0_backport_plugin-socket-tests
  • 5428301 build(deps): Bump codecov/codecov-action from 3 to 4
  • 1cbc218 tests: add plugin-socket-compatibility tests
  • 2f6b5ad scripts: don't hardcode architecture in e2e script
  • d8e07c9 tests: add tests for cli-plugins/socket
  • 5f1b610 Merge pull request #4841 from thaJeztah/25.0_vendor_docker_25.0.2
  • c105cd3 Merge pull request #4837 from dvdksn/25.0_docs_backport_linode_volume_plugin
  • 62b2963 vendor: github.com/docker/docker v25.0.2
  • 71f2b0d vendor: github.com/docker/docker v25.0.1
  • Additional commits viewable in compare view


Updates github.com/docker/docker from 24.0.9+incompatible to 25.0.3+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v25.0.3

25.0.3

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • containerd image store: Fix a bug where docker image history would fail if a manifest wasn't found in the content store. moby/moby#47348

  • Ensure that a generated MAC address is not restored when a container is restarted, but a configured MAC address is preserved. moby/moby#47304

    Note

    • Containers created with Docker Engine version 25.0.0 may have duplicate MAC addresses. They must be re-created.
    • Containers with user-defined MAC addresses created with Docker Engine versions 25.0.0 or 25.0.1 receive new MAC addresses when started using Docker Engine version 25.0.2. They must also be re-created.
  • Fix docker save <image>@<digest> producing an OCI archive with index without manifests. moby/moby#47294
  • Fix a bug preventing bridge networks from being created with an MTU higher than 1500 on RHEL and CentOS 7. moby/moby#47308, moby/moby#47311
  • Fix a bug where containers are unable to communicate over an internal network. moby/moby#47303
  • Fix a bug where the value of the ipv6 daemon option was ignored. moby/moby#47310
  • Fix a bug where trying to install a pulling using a digest revision would cause a panic. moby/moby#47323
  • Fix a potential race condition in the managed containerd supervisor. moby/moby#47313
  • Fix an issue with the journald log driver preventing container logs from being followed correctly with systemd version 255. moby/moby47243
  • seccomp: Update the builtin seccomp profile to include syscalls added in kernel v5.17 - v6.7 to align the profile with the profile used by containerd. moby/moby#47341
  • Windows: Fix cache not being used when building images based on Windows versions older than the host's version. moby/moby#47307, moby/moby#47337

Packaging updates

v25.0.2

25.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains security fixes for the following CVEs affecting Docker Engine and its components.

CVE Component Fix version Severity

... (truncated)

Commits
  • f417435 Merge pull request #47348 from rumpl/25.0_backport-history-config
  • acd023d c8d: Use the same logic to get the present images
  • 7a075ca Merge pull request #47344 from thaJeztah/25.0_backport_seccomp_updates
  • aff7177 Merge pull request #47337 from vvoland/cache-fix-older-windows-25
  • ed7c263 seccomp: add futex_wake syscall (kernel v6.7, libseccomp v2.5.5)
  • 74e3b4f seccomp: add futex_wait syscall (kernel v6.7, libseccomp v2.5.5)
  • 4cc0416 seccomp: add futex_requeue syscall (kernel v6.7, libseccomp v2.5.5)
  • f9f9e7f seccomp: add map_shadow_stack syscall (kernel v6.6, libseccomp v2.5.5)
  • 5fb4eb9 seccomp: add fchmodat2 syscall (kernel v6.6, libseccomp v2.5.5)
  • 67e9aa6 seccomp: add cachestat syscall (kernel v6.5, libseccomp v2.5.5)
  • Additional commits viewable in compare view


Updates github.com/fluxcd/pkg/ssa from 0.36.0 to 0.38.0

Commits


Updates github.com/go-openapi/strfmt from 0.22.1 to 0.22.2

Commits
  • be4ecdf updated dependencies
  • e949e33 fix(ci): remove dependency-type from dependabot groups
  • 5238521 Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  • See full diff in compare view


Updates github.com/go-openapi/swag from 0.22.9 to 0.22.10

Commits
  • 5e655d8 fix(ci): remove dependency-type from dependabot groups
  • 54f3f80 chore(lint): relinted
  • 4896833 Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  • 6b32215 Bump the development-dependencies group with 1 update
  • db91acc ci: remove paths-ignores
  • fec0b4e Bump the development-dependencies group with 1 update
  • 14fcae4 chore(ci): prevents duplicate workflow runs
  • d33767c Bump the development-dependencies group with 1 update
  • c877230 ci(dependencies): automate dependencies updates
  • See full diff in compare view


Updates github.com/klauspost/compress from 1.17.4 to 1.17.7

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.7

What's Changed

Full Changelog: https://github.com/klauspost/compress/compare/v1.17.6...v1.17.7

v1.17.6

What's Changed

Full Changelog: https://github.com/klauspost/compress/compare/v1.17.5...v1.17.6

v1.17.5

What's Changed

New Contributors

Full Changelog: https://github.com/klauspost/compress/compare/v1.17.4...v1.17.5

Commits


Updates github.com/mittwald/go-helm-client from 0.12.8 to 0.12.9

Release notes

Sourced from github.com/mittwald/go-helm-client's releases.

v0.12.9

What's Changed

New Contributors

Full Changelog: https://github.com/mittwald/go-helm-client/compare/v0.12.8...v0.12.9

Commits


Updates github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.17.1

2.17.1

Fixes

  • If the user sets --seed=0, make sure all parallel nodes get the same seed [af0330d]

v2.17.0

2.17.0

Features

  • add --github-output for nicer output i... _Description has been truncated_
github-actions[bot] commented 4 months ago

Mend Scan Summary: :x:

Repository: open-component-model/ocm

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 0
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 2
HIGH RISK LICENSES 9
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report Mend UI

ocmbot[bot] commented 4 months ago

Integration Tests for 4a026dee1b4622715e4ca089e60f4d966731695b run with result: Success ✅!

dependabot[bot] commented 4 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.