osbuild / images

Image builder image definition library
Apache License 2.0
23 stars 52 forks source link

build(deps): bump the go-deps group across 1 directory with 7 updates #1018

Closed dependabot[bot] closed 1 week ago

dependabot[bot] commented 1 week ago

Bumps the go-deps group with 6 updates in the / directory:

Package From To
cloud.google.com/go/compute 1.28.1 1.28.3
cloud.google.com/go/storage 1.44.0 1.46.0
github.com/containers/storage 1.55.0 1.55.1
github.com/golang-jwt/jwt/v4 4.5.0 4.5.1
github.com/vmware/govmomi 0.42.0 0.46.0
golang.org/x/tools 0.24.0 0.26.0

Updates cloud.google.com/go/compute from 1.28.1 to 1.28.3

Release notes

Sourced from cloud.google.com/go/compute's releases.

compute: v1.28.3

1.28.3 (2024-11-06)

Bug Fixes

  • compute: Reduce size of Go compute package (#946) (706ecb2)
Changelog

Sourced from cloud.google.com/go/compute's changelog.

Changes

1.35.0 (2024-10-23)

Features

  • documentai: Add RESOURCE_EXHAUSTED to retryable status codes for ProcessDocument method (6e69d2e)
  • documentai: Added an url for issue reporting and api short name (6e69d2e)
  • documentai: Updated the exponential backoff settings for the Document AI ProcessDocument and BatchProcessDocuments methods (6e69d2e)

Bug Fixes

  • documentai: Update google.golang.org/api to v0.203.0 (8bb87d5)
  • documentai: WARNING: On approximately Dec 1, 2024, an update to Protobuf will change service registration function signatures to use an interface instead of a concrete type in generated .pb.go files. This change is expected to affect very few if any users of this client library. For more information, see googleapis/google-cloud-go#11020. (8bb87d5)

1.34.0 (2024-09-12)

Features

  • documentai: Add API fields for the descriptions of entity type and property in the document schema (2d5a9f9)

Bug Fixes

  • documentai: Bump dependencies (2ddeb15)

1.33.0 (2024-08-20)

Features

  • documentai: Add support for Go 1.23 iterators (84461c0)

1.32.0 (2024-08-08)

Features

  • documentai: A new field gen_ai_model_info is added to message .google.cloud.documentai.v1.ProcessorVersion (649c075)
  • documentai: A new field imageless_mode is added to message .google.cloud.documentai.v1.ProcessRequest (649c075)

Bug Fixes

  • documentai: Update google.golang.org/api to v0.191.0 (5b32644)

... (truncated)

Commits
  • c702b71 chore: release main (#11033)
  • 2a2dbb8 feat(dialogflow): added support for ALAW encoding (#11092)
  • cf8cc93 chore(main): release auth 0.10.1 (#11091)
  • 87159c1 fix(auth): skip impersonate universe domain check if empty (#11086)
  • abf9cba feat(dialogflow/cx): add options of client_certificate_settings, bigquery_exp...
  • 8771f2e fix(auth): restore Application Default Credentials support to idtoken (#11083)
  • 91c6f0f feat(spanner/spansql): add support for protobuf column types & Proto bundles ...
  • 3ae0d45 test(storage): fix metrics exporter test (#11085)
  • 5ff0fdc chore(storage): adding request-id in the stall-retry log (#11074)
  • 9586931 chore(main): release vertexai 0.13.2 (#11028)
  • Additional commits viewable in compare view


Updates cloud.google.com/go/storage from 1.44.0 to 1.46.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.46.0

1.46.0 (2024-10-31)

Features

  • storage: Add grpc metrics experimental options (#10984) (5b7397b)

Bug Fixes

  • storage: Skip only specific transport tests. (#11016) (d40fbff)
  • storage: Update google.golang.org/api to v0.203.0 (8bb87d5)
  • storage: WARNING: On approximately Dec 1, 2024, an update to Protobuf will change service registration function signatures to use an interface instead of a concrete type in generated .pb.go files. This change is expected to affect very few if any users of this client library. For more information, see googleapis/google-cloud-go#11020. (2b8ca4b)

Miscellaneous Chores

  • storage/internal: Remove notification, service account, and hmac RPCS. These API have been migrated to Storage Control and are available via the JSON API. (#11008) (e0759f4)

pubsub: v1.45.1

1.45.1 (2024-10-24)

Bug Fixes

  • pubsub: Update google.golang.org/api to v0.203.0 (8bb87d5)
  • pubsub: WARNING: On approximately Dec 1, 2024, an update to Protobuf will change service registration function signatures to use an interface instead of a concrete type in generated .pb.go files. This change is expected to affect very few if any users of this client library. For more information, see googleapis/google-cloud-go#11020. (8bb87d5)

Documentation

  • pubsub: Add doc links to top level package doc (#11029) (fe2ec56)
Commits
  • dd8829a chore(main): release spanner 1.46.0 (#7894)
  • 1dd53b8 chore(internal/gensnippets): remove unused module internal/gensnippets (#7920)
  • ee10cfd feat(maps/places): start generating apiv1 (#7919)
  • 83870f5 feat(spanner/admin/database): Add support for UpdateDatabase in Cloud Spanner...
  • 5c9e185 chore(maps/places): add config to generate apiv1 (#7918)
  • 4474523 chore(deps): bump github.com/cloudflare/circl from 1.1.0 to 1.3.3 in /interna...
  • b573226 chore(deps): bump github.com/cloudflare/circl in /internal/gapicgen (#7916)
  • d0d3755 feat(spanner): make leader aware routing default enabled for supported RPC re...
  • 151908a chore(main): release pubsublite 1.8.1 (#7891)
  • 4a68b61 chore(compute): restore smoke_test (#7914)
  • Additional commits viewable in compare view


Updates github.com/containers/storage from 1.55.0 to 1.55.1

Release notes

Sourced from github.com/containers/storage's releases.

v1.55.1

What's Changed

Full Changelog: https://github.com/containers/storage/compare/v1.55.0...v1.55.1

Commits
  • c31627e Merge pull request #2139 from nalind/v1.55.1
  • 16bdeb5 Bump the version to v1.55.1
  • 465d8c0 Merge pull request #2135 from mheon/backport_2024_9676_release155
  • eccfbd0 Force lint to golang:1.21
  • 097de28 Use securejoin.SecureJoin when forming userns paths
  • 9b22eea userns: skip "nogroup"
  • 5401ebd users: fix path for /etc/group in the container
  • 8038220 userns: fix off-by-one userns max size detection
  • See full diff in compare view


Updates github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1

Release notes

Sourced from github.com/golang-jwt/jwt/v4's releases.

v4.5.1

Security

Unclear documentation of the error behavior in ParseWithClaims in <= 4.5.0 could lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by ParseWithClaims return both error codes. If users only check for the jwt.ErrTokenExpired using error.Is, they will ignore the embedded jwt.ErrTokenSignatureInvalid and thus potentially accept invalid tokens.

This issue was documented in https://github.com/golang-jwt/jwt/security/advisories/GHSA-29wx-vh33-7x7r and fixed in this release.

Note: v5 was not affected by this issue. So upgrading to this release version is also recommended.

What's Changed

Full Changelog: https://github.com/golang-jwt/jwt/compare/v4.5.0...v4.5.1

Commits


Updates github.com/vmware/govmomi from 0.42.0 to 0.46.0

Release notes

Sourced from github.com/vmware/govmomi's releases.

v0.46.0

Release v0.46.0

Release Date: 2024-11-06

🐞 Fix

  • [f9d093b9] Set DuplicateName Object to duplicate object (#3610)
  • [60d4b049] CreateSATAController to return error when no bus numbers
  • [fe934500] vcsim: avoid race in DestroyPropertyFilter

πŸ’« API Changes

  • [ae558231] Support CnsBlockCreateSpec
  • [a9d5985f] support MOID conversion in Finder methods
  • [5c54c3fa] change ManagerKmip.IsValidKey to use QueryCryptoKeyStatus
  • [6ecb2087] add crypto.ManagerKmip.QueryCryptoKeyStatus
  • [6e84b72c] Fetch crypto key in GetVirtualDiskInfoByUUID

πŸ’« govc (CLI)

  • [fdb091c2] add vm.change -migrate-encryption and -ft-encryption-mode options (#3493)
  • [8f3b0a38] add '-I' flag to ls and find commands
  • [66fc63a4] add kms.key commands

πŸ’« vcsim (Simulator)

  • [ca05e10d] add QueryCryptoKeyStatus

🧹 Chore

  • [35c45692] Update version.go for v0.46.0
  • [34ca8c85] skip tests unless running docker on linux (#3604)

⚠️ BREAKING

change ManagerKmip.IsValidKey to use QueryCryptoKeyStatus [5c54c3fa]: IsValidKey now requires a key providerID param.

πŸ“– Commits

  • [35c45692] chore: Update version.go for v0.46.0
  • [fdb091c2] govc: add vm.change -migrate-encryption and -ft-encryption-mode options (#3493)
  • [ae558231] api: Support CnsBlockCreateSpec
  • [a9d5985f] api: support MOID conversion in Finder methods
  • [8f3b0a38] govc: add '-I' flag to ls and find commands
  • [f9d093b9] fix: Set DuplicateName Object to duplicate object (#3610)
  • [34ca8c85] chore: skip tests unless running docker on linux (#3604)

... (truncated)

Changelog

Sourced from github.com/vmware/govmomi's changelog.

Release v0.43.0

Release Date: 2024-09-10

🐞 Fix

  • [97aa7214] vcsim: avoid possible race when encoding PropertyCollector response
  • [ad2d3573] use complete InventoryPath in Datacenter.Folders

πŸ’« API Changes

  • [476704a3] Fault helpers
  • [caad54aa] add VirtualMachine.AddDeviceWithProfile method
  • [a316da5c] VirtualMachine.AttachDisk unitNumber param is optional
  • [8491321a] ToString for vim types
  • [64610213] add namespace.RegisterVM binding
  • [e602029e] Fix panic when encoding nil iface ptrs to JSON

πŸ’« govc (CLI)

  • [8fd86912] add disk.create '-profile' flag
  • [ea3cf257] add vm.disk.create '-profile' flag
  • [e73c34fa] add vm.disk.attach '-profile' flag
  • [06dcf31a] Add '-size' flag to datastore.create
  • [23390c23] add namespace.registervm command
  • [1892eecd] Support thick/eager disk opts on vm.create

πŸ’« vcsim (Simulator)

  • [8421b678] Support PlaceVm with relocate placement type
  • [9234233e] Support PlaceVm with reconfigure placement type
  • [f06d0834] add VirtualMachine AttachDisk and DetachDisk methods
  • [35dc193f] Support VM crypto spec in vC Sim
  • [0517b87e] add namespace/registervm implementation

🧹 Chore

  • [b17abb20] Update version.go for v0.43.0
  • [93da4a20] sync generated govc/USAGE.md
  • [51105db8] govc: add common StorageProfileFlag

⚠️ BREAKING

VirtualMachine.AttachDisk unitNumber param is optional [a316da5c]: switching from int32 to *int32, otherwise the client must choose a valid unitNumber. vCenter will choose a unitNumber when not provided.

πŸ“– Commits

... (truncated)

Commits
  • 35c4569 chore: Update version.go for v0.46.0
  • a2c22f0 Merge pull request #3614 from dougm/issue-3493
  • fdb091c govc: add vm.change -migrate-encryption and -ft-encryption-mode options
  • 63f11e9 Merge pull request #3609 from dougm/find-by-id
  • 73b10a0 Merge pull request #3613 from akutz/feature/cns-block-create-spec
  • ae55823 api: Support CnsBlockCreateSpec
  • 1d5568b Merge pull request #3611 from dougm/issue-3604
  • a9d5985 api: support MOID conversion in Finder methods
  • 8f3b0a3 govc: add '-I' flag to ls and find commands
  • 455de3e Merge pull request #3612 from prziborowski/issue-3610
  • Additional commits viewable in compare view


Updates golang.org/x/tools from 0.24.0 to 0.26.0

Commits
  • 2ab3b51 go.mod: update golang.org/x dependencies
  • 2683c79 gopls/internal/golang/stubmethods: rename analysis/stubmethods
  • efd951d gopls/internal/analysis/stubmethods: merge into CodeAction
  • d0d0d9e gopls/internal/cache: memoize dependent hash on analysisNode
  • a19eef6 gopls/internal/cache: express packageHandle as a state machine
  • dd745ec gopls/internal/test/marker: update regression test issue68918.txt
  • a02ee35 go/analysis/passes/stdversion: reenable tests
  • a24facf all: set gotypesalias=0 explicitly
  • ce2a33e gopls/internal: fix extract refactor for cases with anonymous functions
  • a2ff832 go/ssa: remove references to GOEXPERIMENT range
  • Additional commits viewable in compare view


Updates google.golang.org/api from 0.201.0 to 0.203.0

Release notes

Sourced from google.golang.org/api's releases.

v0.203.0

0.203.0 (2024-10-23)

Features

v0.202.0

0.202.0 (2024-10-22)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.203.0 (2024-10-23)

Features

0.202.0 (2024-10-22)

Features

Commits


Most Recent Ignore Conditions Applied to This Pull Request | Dependency Name | Ignore Conditions | | --- | --- | | google.golang.org/api | [>= 0.196.a, < 0.197] |

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 1 week ago

Looks like these dependencies are updatable in another way, so this is no longer needed.