search

open-component-model / ocm

Open Component Model (Software Bill of Delivery Toolset)
https://ocm.software
Apache License 2.0
31 stars 19 forks source link

Bump the go group with 11 updates #778

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps the go group with 11 updates:

Package From To
github.com/aws/aws-sdk-go-v2/config 1.27.15 1.27.16
github.com/aws/aws-sdk-go-v2/credentials 1.17.15 1.17.16
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.16.20 1.16.21
github.com/aws/aws-sdk-go-v2/service/ecr 1.28.2 1.28.3
github.com/aws/aws-sdk-go-v2/service/s3 1.54.2 1.54.3
github.com/containers/image/v5 5.30.1 5.31.0
github.com/go-logr/logr 1.4.1 1.4.2
github.com/onsi/ginkgo/v2 2.17.3 2.19.0
golang.org/x/exp 0.0.0-20240222234643-814bf88cf225 0.0.0-20240506185415-9bf2ced13842
helm.sh/helm/v3 3.15.0 3.15.1
sigs.k8s.io/controller-runtime 0.18.2 0.18.3

Updates github.com/aws/aws-sdk-go-v2/config from 1.27.15 to 1.27.16

Commits


Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.15 to 1.17.16

Commits


Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.20 to 1.16.21

Commits


Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.28.2 to 1.28.3

Commits


Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.54.2 to 1.54.3

Commits


Updates github.com/containers/image/v5 from 5.30.1 to 5.31.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.31.0

What's Changed

... (truncated)

Commits
  • b5a7587 Bump c/image to v5.31.0
  • 21ac79b Merge pull request #2428 from mtrmac/als-toc-fixes
  • 45f4f23 Don't completely ignore already-computed image size if we see an ALS layer
  • 27516f3 Don't modify a storage.Layer returned by c/storage
  • c2327e4 Don't unnecessarily trust the ALS FUSE server about the TOC digest
  • db02dee Merge pull request #2426 from containers/renovate/github.com-containers-stora...
  • 6db27e1 fix(deps): update module github.com/containers/storage to v1.54.0
  • cf26b3c Merge pull request #2416 from ktock/store-tocdigest-id
  • 52101a0 getSize: allow unknown uncompressed size
  • ebbd025 Enable to pass TOCDigest to Additional Layer Store
  • Additional commits viewable in compare view


Updates github.com/go-logr/logr from 1.4.1 to 1.4.2

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.2

What's Changed

Dependencies:

Full Changelog: https://github.com/go-logr/logr/compare/v1.4.1...v1.4.2

Commits
  • 1205f42 Merge pull request #295 from go-logr/dependabot/github_actions/actions/checko...
  • ccedcbd Merge pull request #294 from go-logr/dependabot/github_actions/github/codeql-...
  • bead577 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
  • a492d95 build(deps): bump github/codeql-action from 3.25.4 to 3.25.5
  • 19ad07c build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
  • 1c97a21 build(deps): bump actions/checkout from 4.1.4 to 4.1.5
  • f70c5b5 build(deps): bump github/codeql-action from 3.25.3 to 3.25.4
  • 4ade8d3 build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1
  • 88d98bd Merge pull request #289 from go-logr/dependabot/github_actions/golangci/golan...
  • 432cd86 Merge pull request #288 from go-logr/dependabot/github_actions/actions/setup-...
  • Additional commits viewable in compare view


Updates github.com/onsi/ginkgo/v2 from 2.17.3 to 2.19.0

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.19.0

2.19.0

Features

Label Sets allow for more expressive and flexible label filtering.

v2.18.0

2.18.0

Features

  • Add --slience-skips and --force-newlines [f010b65]
  • fail when no tests were run and --fail-on-empty was set [d80eebe]

Fixes

  • Fix table entry context edge case [42013d6]

Maintenance

  • Bump golang.org/x/tools from 0.20.0 to 0.21.0 (#1406) [fcf1fd7]
  • Bump github.com/onsi/gomega from 1.33.0 to 1.33.1 (#1399) [8bb14fd]
  • Bump golang.org/x/net from 0.24.0 to 0.25.0 (#1407) [04bfad7]
Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.19.0

Features

Label Sets allow for more expressive and flexible label filtering.

2.18.0

Features

  • Add --slience-skips and --force-newlines [f010b65]
  • fail when no tests were run and --fail-on-empty was set [d80eebe]

Fixes

  • Fix table entry context edge case [42013d6]

Maintenance

  • Bump golang.org/x/tools from 0.20.0 to 0.21.0 (#1406) [fcf1fd7]
  • Bump github.com/onsi/gomega from 1.33.0 to 1.33.1 (#1399) [8bb14fd]
  • Bump golang.org/x/net from 0.24.0 to 0.25.0 (#1407) [04bfad7]
Commits
  • 28fb5d6 v2.19.0
  • e31f03a fix another typo
  • 966a28c Fix typos in label sets docs
  • cd231fd Label sets allow for more expressive label filtering
  • eb27ca8 v2.18.0
  • f010b65 Add --slience-skips and --force-newlines
  • 42013d6 Fix table entry context edge case
  • 9e234ea always rebuild and run ginkgo in makefile
  • 5ce8355 add --fail-on-empty to recommended CI flags in docs
  • 3ffbf8b add makefile
  • Additional commits viewable in compare view


Updates golang.org/x/exp from 0.0.0-20240222234643-814bf88cf225 to 0.0.0-20240506185415-9bf2ced13842

Commits


Updates helm.sh/helm/v3 from 3.15.0 to 3.15.1

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.15.1 is a patch release. The Helm application source is the same as 3.15.0. The 3.15.0 builds stated the wrong version when running helm version. Instead of the release number it had the release candidate version which pointed to the same revision of the source.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.15.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.15.2 is the next patch release and will be on June 12, 2024.
  • 3.16.0 is the next feature release and will be on September 11, 2024.

Changelog

  • Fixing build issue where wrong version is used e211f2aa62992bd72586b395de50979e31231829 (Matt Farina)
Commits


Updates sigs.k8s.io/controller-runtime from 0.18.2 to 0.18.3

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.18.3

What's Changed

Full Changelog: https://github.com/kubernetes-sigs/controller-runtime/compare/v0.18.2...v0.18.3

Commits
  • be2f383 Merge pull request #2840 from sbueringer/pr-bump-k8s
  • 4720d17 Bump k8s.io/* to v0.30.1
  • aa9ed14 Merge pull request #2837 from sbueringer/pr-setup-envtest-ct-rel-0.18
  • 35d7bbd default --use-deprecated-gcs to true
  • ce4e4f5 some more deprecations
  • 56dcc14 setup-envtest: allow downloading envtest binaries from controller-tools
  • See full diff in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
github-actions[bot] commented 2 months ago

Mend Scan Summary: :x:

Repository: open-component-model/ocm

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 0
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 4
HIGH RISK LICENSES 9
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report Mend UI

ocmbot[bot] commented 2 months ago

Integration Tests for edaf5ea83b12bc43788a766fdb0294dec66f3b9d run with result: Success ✅!

ocmbot[bot] commented 2 months ago

Integration Tests for 84b9231805d321cdb805cc5b5ade82af3b72a47a run with result: Success ✅!

ocmbot[bot] commented 2 months ago

Integration Tests for 0c499cf271c21bca7fe2c7a1c1982d2038e07edb run with result: Success ✅!