replicatedhq / local-volume-provider

A Velero plugin for backup/restore directly to Kubernetes volumes.
Apache License 2.0
34 stars 6 forks source link

Bump the security group with 7 updates #51

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 7 months ago

Bumps the security group with 7 updates:

Package From To
github.com/gofiber/fiber/v2 2.52.1 2.52.3
github.com/stretchr/testify 1.8.4 1.9.0
github.com/vmware-tanzu/velero 1.13.0 1.13.1
k8s.io/api 0.25.6 0.29.3
k8s.io/apimachinery 0.25.6 0.29.3
k8s.io/client-go 0.25.6 0.29.3
k8s.io/utils 0.0.0-20220728103510-ee6ede2d64ed 0.0.0-20230726121419-3b25d923346b

Updates github.com/gofiber/fiber/v2 from 2.52.1 to 2.52.3

Release notes

Sourced from github.com/gofiber/fiber/v2's releases.

v2.52.3

🐛 Fixes

Full Changelog: https://github.com/gofiber/fiber/compare/v2.52.2...v2.52.3

v2.52.2

🐛 Fixes

Full Changelog: https://github.com/gofiber/fiber/compare/v2.52.1...v2.52.2

Commits
  • 43d5091 Prepare release v2.52.3
  • ba10e68 test(middleware/csrf): Fix Benchmark Tests (#2932)
  • 1607d87 fix(middleware/cors): Categorize requests correctly (#2921)
  • 1aac6f6 fix(middleware/cors): Handling and wildcard subdomain matching (#2915)
  • d2b19e2 refactor(docs): deactivate docs sync for v2
  • 68d90cd refactor(docs): deactivate docs sync for v2
  • 109e91a prepare release v2.52.2
  • d456e7d fix(middleware/cors): Validation of multiple Origins (#2883)
  • ddc6b23 fix sync-docs workflow
  • 0df0e08 fix sync-docs workflow
  • See full diff in compare view


Updates github.com/stretchr/testify from 1.8.4 to 1.9.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.9.0

What's Changed

... (truncated)

Commits
  • bb548d0 Merge pull request #1552 from stretchr/dependabot/go_modules/github.com/stret...
  • 814075f build(deps): bump github.com/stretchr/objx from 0.5.1 to 0.5.2
  • e045612 Merge pull request #1339 from bogdandrutu/uintptr
  • 5b6926d Merge pull request #1385 from hslatman/not-implements
  • 9f97d67 Merge pull request #1550 from stretchr/release-notes
  • bcb0d3f Include the auto-release notes in releases
  • fb770f8 Merge pull request #1247 from ccoVeille/typos
  • 85d8bb6 fix typos in comments, tests and github templates
  • e2741fa Merge pull request #1548 from arjunmahishi/msgAndArgs
  • 6e59f20 http_assertions: assert that the msgAndArgs actually works in tests
  • Additional commits viewable in compare view


Updates github.com/vmware-tanzu/velero from 1.13.0 to 1.13.1

Release notes

Sourced from github.com/vmware-tanzu/velero's releases.

v1.13.1

2024-03-13

Download

https://github.com/vmware-tanzu/velero/releases/tag/v1.13.1

Container Image

velero/velero:v1.13.1

Documentation

https://velero.io/docs/v1.13/

Upgrading

https://velero.io/docs/v1.13/upgrade-to-1.13/

All changes

  • Fix issue #7308, change the data path requeue time to 5 second for data mover backup/restore, PVB and PVR. (#7459, @​Lyndon-Li)
  • BackupRepositories associated with a BSL are invalidated when BSL is (re-)created. (#7399, @​kaovilai)
  • Adjust the logic for the backup_last_status metrics to stop incorrectly incrementing over time (#7445, @​allenxu404)

v1.13.1-rc.1

2024-03-11

Download

https://github.com/vmware-tanzu/velero/releases/tag/v1.13.1-rc.1

Container Image

velero/velero:v1.13.1-rc.1

Documentation

https://velero.io/docs/v1.13/

Upgrading

https://velero.io/docs/v1.13/upgrade-to-1.13/

All changes

  • Fix issue #7308, change the data path requeue time to 5 second for data mover backup/restore, PVB and PVR. (#7459, @​Lyndon-Li)
  • BackupRepositories associated with a BSL are invalidated when BSL is (re-)created. (#7399, @​kaovilai)
  • Adjust the logic for the backup_last_status metrics to stop incorrectly incrementing over time (#7445, @​allenxu404)
Commits
  • ea5a89f Merge pull request #7500 from ywk253100/240307_1.13.1
  • 642924d Generate the changelog for release 1.13.1
  • 8dca539 Merge pull request #7468 from blackpiglet/7464_fix_release_1.13
  • a6a6da5 Modify the label used by the restore CLI to filter the PVR.
  • 99376a3 Merge pull request #7461 from danfengliu/bumpup-upgrade-path
  • eed1c38 Merge branch 'release-1.13' into bumpup-upgrade-path
  • 941ad1a Merge pull request #7450 from allenxu404/release-1.13
  • 02d229c Adjust the logic for the backup_last_status metrics to stop incorrectly incre...
  • c859f7b bump up upgrade path to 1.13
  • e1222ff Merge pull request #7459 from Lyndon-Li/release-1.13
  • Additional commits viewable in compare view


Updates k8s.io/api from 0.25.6 to 0.29.3

Commits
  • 067c548 Update dependencies to v0.29.3 tag
  • f98a503 Merge pull request #123763 from liggitt/proto-1.29
  • 1e39277 [CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/pr...
  • f5eca04 Merge pull request #122959RomanBednar/automated-cherry-pick-of-#122728
  • fd1786f flag PersistentVolumeLastPhaseTransitionTime field as beta
  • a48c0a4 Merge pull request #122429 from MadhavJivrajani/tools-bump-129
  • 656e18f .*: bump golang.org/x/tools to v0.16.1
  • 0d77c34 Merge remote-tracking branch 'origin/master' into release-1.29
  • bb0a75c add beta comment for pod replacement policy
  • 0099855 update go.mod
  • Additional commits viewable in compare view


Updates k8s.io/apimachinery from 0.25.6 to 0.29.3

Commits
  • d794766 Merge pull request #123763 from liggitt/proto-1.29
  • 9b124b1 [CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/pr...
  • dc7e034 Merge pull request #122429 from MadhavJivrajani/tools-bump-129
  • 7d94fef .*: bump golang.org/x/tools to v0.16.1
  • 3c8c1f2 update go.mod
  • 12dc3f8 Merge pull request #113374 from ahmedtd/kep-3257-projected-types
  • 03a1b4b LRUExpireCache: Allow removing multiple keys under lock
  • bc0a03b Merge pull request #119762 from AxeZhan/PollUntilContextCancel
  • 16d50e6 Merge pull request #121552 from pohly/klog-update
  • 6b13b03 dependencies: klog v2.110.1
  • Additional commits viewable in compare view


Updates k8s.io/client-go from 0.25.6 to 0.29.3

Commits
  • 46588f2 Update dependencies to v0.29.3 tag
  • 403b37f Merge pull request #123763 from liggitt/proto-1.29
  • 92199ae [CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/pr...
  • baea19d Merge pull request #122429 from MadhavJivrajani/tools-bump-129
  • 3373afd .*: bump golang.org/x/tools to v0.16.1
  • 288368e update go.mod
  • 86d49e7 Merge pull request #113374 from ahmedtd/kep-3257-projected-types
  • 59c256a Regenerate for ClusterTrustBundlePEM projected volume API
  • ac369c3 Define ClusterTrustBundlePEM projected volume
  • 66e57f7 Merge pull request #121552 from pohly/klog-update
  • Additional commits viewable in compare view


Updates k8s.io/utils from 0.0.0-20220728103510-ee6ede2d64ed to 0.0.0-20230726121419-3b25d923346b

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 7 months ago

Superseded by #52.