search

open-component-model / ocm

Open Component Model (Software Bill of Delivery Toolset)
https://ocm.software
Apache License 2.0
29 stars 18 forks source link

Bump the go group with 11 updates #833

Closed dependabot[bot] closed 3 days ago

dependabot[bot] commented 1 week ago

Bumps the go group with 11 updates:

Package From To
github.com/aws/aws-sdk-go-v2 1.30.0 1.30.1
github.com/aws/aws-sdk-go-v2/config 1.27.21 1.27.23
github.com/aws/aws-sdk-go-v2/credentials 1.17.21 1.17.23
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.17.1 1.17.3
github.com/aws/aws-sdk-go-v2/service/ecr 1.29.1 1.30.1
github.com/aws/aws-sdk-go-v2/service/s3 1.56.1 1.57.1
github.com/docker/cli 27.0.1+incompatible 27.0.2+incompatible
github.com/docker/docker 27.0.1+incompatible 27.0.2+incompatible
github.com/go-test/deep 1.1.0 1.1.1
github.com/mittwald/go-helm-client 0.12.9 0.12.10
github.com/sigstore/sigstore 1.8.4 1.8.6

Updates github.com/aws/aws-sdk-go-v2 from 1.30.0 to 1.30.1

Commits


Updates github.com/aws/aws-sdk-go-v2/config from 1.27.21 to 1.27.23

Commits


Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.21 to 1.17.23

Commits


Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.1 to 1.17.3

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/feature/s3/manager's changelog.

Release (2022-12-15)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2: v1.17.3
    • Bug Fix: Unify logic between shared config and in finding home directory
  • github.com/aws/aws-sdk-go-v2/config: v1.18.5
    • Bug Fix: Unify logic between shared config and in finding home directory
  • github.com/aws/aws-sdk-go-v2/credentials: v1.13.5
    • Bug Fix: Unify logic between shared config and in finding home directory
  • github.com/aws/aws-sdk-go-v2/service/backupgateway: v1.8.0
    • Feature: This release adds support for VMware vSphere tags, enabling customer to protect VMware virtual machines using tag-based policies for AWS tags mapped from vSphere tags. This release also adds support for customer-accessible gateway-hypervisor interaction log and upload bandwidth rate limit schedule.
  • github.com/aws/aws-sdk-go-v2/service/connect: v1.40.0
    • Feature: Added support for "English - New Zealand" and "English - South African" to be used with Amazon Connect Custom Vocabulary APIs.
  • github.com/aws/aws-sdk-go-v2/service/ecs: v1.21.0
    • Feature: This release adds support for container port ranges in ECS, a new capability that allows customers to provide container port ranges to simplify use cases where multiple ports are in use in a container. This release updates TaskDefinition mutation APIs and the Task description APIs.
  • github.com/aws/aws-sdk-go-v2/service/eks: v1.26.0
    • Feature: Add support for Windows managed nodes groups.
  • github.com/aws/aws-sdk-go-v2/service/glue: v1.38.0
    • Feature: This release adds support for AWS Glue Crawler with native DeltaLake tables, allowing Crawlers to classify Delta Lake format tables and catalog them for query engines to query against.
  • github.com/aws/aws-sdk-go-v2/service/kinesis: v1.16.0
    • Feature: Added StreamARN parameter for Kinesis Data Streams APIs. Added a new opaque pagination token for ListStreams. SDKs will auto-generate Account Endpoint when accessing Kinesis Data Streams.
  • github.com/aws/aws-sdk-go-v2/service/location: v1.19.5
    • Documentation: This release adds support for a new style, "VectorOpenDataStandardLight" which can be used with the new data source, "Open Data Maps (Preview)".
  • github.com/aws/aws-sdk-go-v2/service/m2: v1.2.0
    • Feature: Adds an optional create-only KmsKeyId property to Environment and Application resources.
  • github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.57.0
    • Feature: SageMaker Inference Recommender now allows customers to load tests their models on various instance types using private VPC.
  • github.com/aws/aws-sdk-go-v2/service/securityhub: v1.26.0
    • Feature: Added new resource details objects to ASFF, including resources for AwsEc2LaunchTemplate, AwsSageMakerNotebookInstance, AwsWafv2WebAcl and AwsWafv2RuleGroup.
  • github.com/aws/aws-sdk-go-v2/service/translate: v1.16.0
    • Feature: Raised the input byte size limit of the Text field in the TranslateText API to 10000 bytes.

Release (2022-12-14)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.23.0
    • Feature: Adding support for Metrics Insights Alarms
  • github.com/aws/aws-sdk-go-v2/service/costexplorer: v1.24.0
    • Feature: This release supports percentage-based thresholds on Cost Anomaly Detection alert subscriptions.
  • github.com/aws/aws-sdk-go-v2/service/networkmanager: v1.16.0
    • Feature: Appliance Mode support for AWS Cloud WAN.
  • github.com/aws/aws-sdk-go-v2/service/redshiftdata: v1.17.0
    • Feature: This release adds a new --client-token field to ExecuteStatement and BatchExecuteStatement operations. Customers can now run queries with the additional client token parameter to ensures idempotency.
  • github.com/aws/aws-sdk-go-v2/service/sagemakermetrics: v1.0.1
    • Documentation: Update SageMaker Metrics documentation.

Release (2022-12-13)

... (truncated)

Commits


Updates github.com/aws/aws-sdk-go-v2/service/ecr from 1.29.1 to 1.30.1

Commits


Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.56.1 to 1.57.1

Commits


Updates github.com/docker/cli from 27.0.1+incompatible to 27.0.2+incompatible

Commits
  • 912c1dd Merge pull request #5202 from vvoland/vendor-docker
  • c97e809 vendor: github.com/docker/docker v27.0.2-dev (e953d76450b6)
  • 82bd815 Merge pull request #5201 from vvoland/vendor-docker
  • 8945848 vendor: github.com/docker/docker v27.0.2-dev (861fde8cc974)
  • b54897b Merge pull request #5199 from vvoland/v27.0-5191
  • cd56091 gha/e2e: Update latest version to 27.0
  • 9a101a9 Merge pull request #5198 from thaJeztah/27.0_backport_carry_fix_custom_ports
  • 50fae20 cli/config/credentials: ConvertToHostname: handle IP-addresses
  • 37533c2 Merge pull request #5197 from thaJeztah/27.0_backport_fix_custom_ports
  • 217971d re-introduced support for port numbers in docker registry URL
  • Additional commits viewable in compare view


Updates github.com/docker/docker from 27.0.1+incompatible to 27.0.2+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v27.0.2

27.0.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

Removed

  • api/types: deprecate ContainerJSONBase.Node field and ContainerNode type. These definitions were used by the standalone ("classic") Swarm API, but never implemented in the Docker Engine itself. moby/moby#48055
Commits
  • e953d76 Merge pull request #48060 from thaJeztah/27.0_backport_api_deprecate_Containe...
  • 861fde8 Merge pull request #48061 from thaJeztah/27_backport_bump_golangci_lint
  • 3557077 update golangci-lint to v1.59.1
  • c95b917 pkg/archive: reformat code to make #nosec comment work again
  • c0ff08a builder/remotecontext: reformat code to make #nosec comment work again
  • 4587688 api/types: deprecate ContainerJSONBase.Node, ContainerNode
  • See full diff in compare view


Updates github.com/go-test/deep from 1.1.0 to 1.1.1

Release notes

Sourced from github.com/go-test/deep's releases.

v1.1.1

What's Changed

New Contributors

Full Changelog: https://github.com/go-test/deep/compare/v1.1.0...v1.1.1

Changelog

Sourced from github.com/go-test/deep's changelog.

v1.1.1 released 2024-06-23

  • Added NilPointersAreZero option: causes a nil pointer to be equal to a zero value (PR #61) (@​seveas)
  • Updated test matrix to go1.22, go1.21, and go1.20
Commits
  • 9e863ff Release v1.1.1
  • dc5b2f6 Update SECURITY.md
  • 185886d Restore 100% test coverage (NilPointersAreZero case)
  • 47ae1b8 Merge pull request #61 from seveas/nil-pointers-are-zero
  • 93c35ac Merge branch 'master' into nil-pointers-are-zero
  • 2982c5c Update test matrix to latest 3 Go versions
  • 2b8252e Add an option to consider nil pointers to be equivalent to zero values
  • 95fb3b1 Merge pull request #58 from bartleyg/patch-1
  • 1127c84 fix copy pasta test
  • 7ff4e92 Update changelog for v1.1.0
  • See full diff in compare view


Updates github.com/mittwald/go-helm-client from 0.12.9 to 0.12.10

Release notes

Sourced from github.com/mittwald/go-helm-client's releases.

v0.12.10

What's Changed

Full Changelog: https://github.com/mittwald/go-helm-client/compare/v0.12.9...v0.12.10

Commits
  • e7c4238 Merge pull request #210 from tariq1890/bump-helm-import
  • 1b3237a bump helm.sh/helm/v3 version to v3.15.2
  • 6cb8534 lable releases when installing/upgrading charts (#196)
  • See full diff in compare view


Updates github.com/sigstore/sigstore from 1.8.4 to 1.8.6

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.8.6

What's Changed

New Contributors

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.8.5...v1.8.6

v1.8.5

Major are dependencies updates

What's Changed

Full Changelog: https://github.com/sigstore/sigstore/compare/v1.8.4...v1.8.5

Commits
  • 5d4e11e Bump goodkey, fix breakage (#1761)
  • 63cab17 sync go mod
  • 115c2b2 build(deps): Bump the all group across 1 directory with 6 updates
  • 8503e22 build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity
  • 39973a8 build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates
  • 58a8301 build(deps): Bump the all group in /pkg/signature/kms/aws with 4 updates
  • 71ace11 build(deps): Bump github.com/hashicorp/go-retryablehttp
  • b777e4b build(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity
  • 5ea648c build(deps): Bump the all group in /pkg/signature/kms/gcp with 2 updates
  • a3666d9 build(deps): Bump the all group in /test/e2e with 2 updates
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
github-actions[bot] commented 1 week ago

Mend Scan Summary: :x:

Repository: open-component-model/ocm

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 3
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 1
HIGH RISK LICENSES 10
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report Mend UI

ocmbot[bot] commented 1 week ago

Integration Tests for 8eec36386c79fdaaa04b67b973f3c996e9c08627 run with result: Success ✅!

dependabot[bot] commented 3 days ago

Looks like these dependencies are updatable in another way, so this is no longer needed.