search

replicatedhq / troubleshoot

Preflight Checks and Support Bundles Framework for Kubernetes Applications
https://troubleshoot.sh
Apache License 2.0
543 stars 93 forks source link

chore(deps): bump the security group with 9 updates #1551

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps the security group with 9 updates:

Package From To
github.com/containers/image/v5 5.30.1 5.31.0
github.com/go-logr/logr 1.4.1 1.4.2
github.com/jackc/pgx/v5 5.5.5 5.6.0
go.opentelemetry.io/otel 1.26.0 1.27.0
go.opentelemetry.io/otel/sdk 1.26.0 1.27.0
golang.org/x/exp 0.0.0-20240222234643-814bf88cf225 0.0.0-20240506185415-9bf2ced13842
sigs.k8s.io/controller-runtime 0.18.2 0.18.3
github.com/hashicorp/go-version 1.6.0 1.7.0
helm.sh/helm/v3 3.15.0 3.15.1

Updates github.com/containers/image/v5 from 5.30.1 to 5.31.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.31.0

What's Changed

... (truncated)

Commits
  • b5a7587 Bump c/image to v5.31.0
  • 21ac79b Merge pull request #2428 from mtrmac/als-toc-fixes
  • 45f4f23 Don't completely ignore already-computed image size if we see an ALS layer
  • 27516f3 Don't modify a storage.Layer returned by c/storage
  • c2327e4 Don't unnecessarily trust the ALS FUSE server about the TOC digest
  • db02dee Merge pull request #2426 from containers/renovate/github.com-containers-stora...
  • 6db27e1 fix(deps): update module github.com/containers/storage to v1.54.0
  • cf26b3c Merge pull request #2416 from ktock/store-tocdigest-id
  • 52101a0 getSize: allow unknown uncompressed size
  • ebbd025 Enable to pass TOCDigest to Additional Layer Store
  • Additional commits viewable in compare view


Updates github.com/go-logr/logr from 1.4.1 to 1.4.2

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.2

What's Changed

Dependencies:

Full Changelog: https://github.com/go-logr/logr/compare/v1.4.1...v1.4.2

Commits
  • 1205f42 Merge pull request #295 from go-logr/dependabot/github_actions/actions/checko...
  • ccedcbd Merge pull request #294 from go-logr/dependabot/github_actions/github/codeql-...
  • bead577 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
  • a492d95 build(deps): bump github/codeql-action from 3.25.4 to 3.25.5
  • 19ad07c build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
  • 1c97a21 build(deps): bump actions/checkout from 4.1.4 to 4.1.5
  • f70c5b5 build(deps): bump github/codeql-action from 3.25.3 to 3.25.4
  • 4ade8d3 build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1
  • 88d98bd Merge pull request #289 from go-logr/dependabot/github_actions/golangci/golan...
  • 432cd86 Merge pull request #288 from go-logr/dependabot/github_actions/actions/setup-...
  • Additional commits viewable in compare view


Updates github.com/jackc/pgx/v5 from 5.5.5 to 5.6.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.6.0 (May 25, 2024)

  • Add StrictNamedArgs (Tomas Zahradnicek)
  • Add support for macaddr8 type (Carlos Pérez-Aradros Herce)
  • Add SeverityUnlocalized field to PgError / Notice
  • Performance optimization of RowToStructByPos/Name (Zach Olstein)
  • Allow customizing context canceled behavior for pgconn
  • Add ScanLocation to pgtype.Timestamp[tz]Codec
  • Add custom data to pgconn.PgConn
  • Fix ResultReader.Read() to handle nil values
  • Do not encode interval microseconds when they are 0 (Carlos Pérez-Aradros Herce)
  • pgconn.SafeToRetry checks for wrapped errors (tjasko)
  • Failed connection attempts include all errors
  • Optimize LargeObject.Read (Mitar)
  • Add tracing for connection acquire and release from pool (ngavinsir)
  • Fix encode driver.Valuer not called when nil
  • Add support for custom JSON marshal and unmarshal (Mitar)
  • Use Go default keepalive for TCP connections (Hans-Joachim Kliemeck)
Commits
  • 572d7ff Release v5.6.0
  • b4911f1 Merge pull request #2019 from jackc/fix-encode-driver-valuer-on-pointer
  • 24c0a5e remove keepalive and rely on GOLANG default (since go 1.13 default is 15s)
  • 9ca9203 Move typed nil handling to Map.Encode from anynil
  • 79cab46 Only use anynil inside of pgtype
  • 6ea2d24 Remove anynil.NormalizeSlice
  • c1075bf Remove some special casing for QueryExecModeExec
  • cf6074f Remove unused anynil.Normalize
  • 13beb38 Fix encode driver.Valuer on nil-able non-pointers
  • fec45c8 Refactor appendParamsForQueryExecModeExec
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/otel from 1.26.0 to 1.27.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.27.0/0.49.0/0.3.0] 2024-05-21

Added

  • Add example for go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#5242)
  • Add RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest to facilitate testing exporter and processor implementations. (#5258)
  • Add RecordFactory in go.opentelemetry.io/otel/log/logtest to facilitate testing bridge implementations. (#5263)
  • The count of dropped records from the BatchProcessor in go.opentelemetry.io/otel/sdk/log is logged. (#5276)
  • Add metrics in the otel-collector example. (#5283)
  • Add the synchronous gauge instrument to go.opentelemetry.io/otel/metric. (#5304)
    • An int64 or float64 synchronous gauge instrument can now be created from a Meter.
    • All implementations of the API (go.opentelemetry.io/otel/metric/noop, go.opentelemetry.io/otel/sdk/metric) are updated to support this instrument.
  • Add logs to go.opentelemetry.io/otel/example/dice. (#5349)

Changed

  • The Shutdown method of Exporter in go.opentelemetry.io/otel/exporters/stdout/stdouttrace ignores the context cancellation and always returns nil. (#5189)
  • The ForceFlush and Shutdown methods of the exporter returned by New in go.opentelemetry.io/otel/exporters/stdout/stdoutmetric ignore the context cancellation and always return nil. (#5189)
  • Apply the value length limits to Record attributes in go.opentelemetry.io/otel/sdk/log. (#5230)
  • De-duplicate map attributes added to a Record in go.opentelemetry.io/otel/sdk/log. (#5230)
  • go.opentelemetry.io/otel/exporters/stdout/stdoutlog won't print timestamps when WithoutTimestamps option is set. (#5241)
  • The go.opentelemetry.io/otel/exporters/stdout/stdoutlog exporter won't print AttributeValueLengthLimit and AttributeCountLimit fields now, instead it prints the DroppedAttributes field. (#5272)
  • Improved performance in the Stringer implementation of go.opentelemetry.io/otel/baggage.Member by reducing the number of allocations. (#5286)
  • Set the start time for last-value aggregates in go.opentelemetry.io/otel/sdk/metric. (#5305)
  • The Span in go.opentelemetry.io/otel/sdk/trace will record links without span context if either non-empty TraceState or attributes are provided. (#5315)
  • Upgrade all dependencies of go.opentelemetry.io/otel/semconv/v1.24.0 to go.opentelemetry.io/otel/semconv/v1.25.0. (#5374)

Fixed

  • Comparison of unordered maps for go.opentelemetry.io/otel/log.KeyValue and go.opentelemetry.io/otel/log.Value. (#5306)
  • Fix the empty output of go.opentelemetry.io/otel/log.Value in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#5311)
  • Split the behavior of Recorder in go.opentelemetry.io/otel/log/logtest so it behaves as a LoggerProvider only. (#5365)
  • Fix wrong package name of the error message when parsing endpoint URL in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5371)
  • Identify the Logger returned from the global LoggerProvider in go.opentelemetry.io/otel/log/global with its schema URL. (#5375)
Commits
  • 5661ff0 Release v1.27.0/v0.49.0/v0.3.0 (#5392)
  • 0d3dddc Fix exported instrument kind const value change (#5385)
  • 7aae7a8 chore(deps): update benchmark-action/github-action-benchmark action to v1.20....
  • 8c3120f chore(deps): update module google.golang.org/genproto/googleapis/api to v0.0....
  • d55658e chore(deps): update codecov/codecov-action action to v4.4.1 (#5387)
  • 49c866f fix(deps): update module github.com/golangci/golangci-lint to v1.58.2 (#5382)
  • 999c6a0 Update all semconv use to v1.25.0 (#5374)
  • 14441ae Identify logger with schemaURL in global logger provider (#5375)
  • ebd0ade Split log/logtest into a recorder and a logger (#5365)
  • 0d1e77c Fix package prefix of error in otlploghttp (#5371)
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/otel/sdk from 1.26.0 to 1.27.0

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.27.0/0.49.0/0.3.0] 2024-05-21

Added

  • Add example for go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#5242)
  • Add RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest to facilitate testing exporter and processor implementations. (#5258)
  • Add RecordFactory in go.opentelemetry.io/otel/log/logtest to facilitate testing bridge implementations. (#5263)
  • The count of dropped records from the BatchProcessor in go.opentelemetry.io/otel/sdk/log is logged. (#5276)
  • Add metrics in the otel-collector example. (#5283)
  • Add the synchronous gauge instrument to go.opentelemetry.io/otel/metric. (#5304)
    • An int64 or float64 synchronous gauge instrument can now be created from a Meter.
    • All implementations of the API (go.opentelemetry.io/otel/metric/noop, go.opentelemetry.io/otel/sdk/metric) are updated to support this instrument.
  • Add logs to go.opentelemetry.io/otel/example/dice. (#5349)

Changed

  • The Shutdown method of Exporter in go.opentelemetry.io/otel/exporters/stdout/stdouttrace ignores the context cancellation and always returns nil. (#5189)
  • The ForceFlush and Shutdown methods of the exporter returned by New in go.opentelemetry.io/otel/exporters/stdout/stdoutmetric ignore the context cancellation and always return nil. (#5189)
  • Apply the value length limits to Record attributes in go.opentelemetry.io/otel/sdk/log. (#5230)
  • De-duplicate map attributes added to a Record in go.opentelemetry.io/otel/sdk/log. (#5230)
  • go.opentelemetry.io/otel/exporters/stdout/stdoutlog won't print timestamps when WithoutTimestamps option is set. (#5241)
  • The go.opentelemetry.io/otel/exporters/stdout/stdoutlog exporter won't print AttributeValueLengthLimit and AttributeCountLimit fields now, instead it prints the DroppedAttributes field. (#5272)
  • Improved performance in the Stringer implementation of go.opentelemetry.io/otel/baggage.Member by reducing the number of allocations. (#5286)
  • Set the start time for last-value aggregates in go.opentelemetry.io/otel/sdk/metric. (#5305)
  • The Span in go.opentelemetry.io/otel/sdk/trace will record links without span context if either non-empty TraceState or attributes are provided. (#5315)
  • Upgrade all dependencies of go.opentelemetry.io/otel/semconv/v1.24.0 to go.opentelemetry.io/otel/semconv/v1.25.0. (#5374)

Fixed

  • Comparison of unordered maps for go.opentelemetry.io/otel/log.KeyValue and go.opentelemetry.io/otel/log.Value. (#5306)
  • Fix the empty output of go.opentelemetry.io/otel/log.Value in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#5311)
  • Split the behavior of Recorder in go.opentelemetry.io/otel/log/logtest so it behaves as a LoggerProvider only. (#5365)
  • Fix wrong package name of the error message when parsing endpoint URL in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5371)
  • Identify the Logger returned from the global LoggerProvider in go.opentelemetry.io/otel/log/global with its schema URL. (#5375)
Commits
  • 5661ff0 Release v1.27.0/v0.49.0/v0.3.0 (#5392)
  • 0d3dddc Fix exported instrument kind const value change (#5385)
  • 7aae7a8 chore(deps): update benchmark-action/github-action-benchmark action to v1.20....
  • 8c3120f chore(deps): update module google.golang.org/genproto/googleapis/api to v0.0....
  • d55658e chore(deps): update codecov/codecov-action action to v4.4.1 (#5387)
  • 49c866f fix(deps): update module github.com/golangci/golangci-lint to v1.58.2 (#5382)
  • 999c6a0 Update all semconv use to v1.25.0 (#5374)
  • 14441ae Identify logger with schemaURL in global logger provider (#5375)
  • ebd0ade Split log/logtest into a recorder and a logger (#5365)
  • 0d1e77c Fix package prefix of error in otlploghttp (#5371)
  • Additional commits viewable in compare view


Updates golang.org/x/exp from 0.0.0-20240222234643-814bf88cf225 to 0.0.0-20240506185415-9bf2ced13842

Commits


Updates sigs.k8s.io/controller-runtime from 0.18.2 to 0.18.3

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.18.3

What's Changed

Full Changelog: https://github.com/kubernetes-sigs/controller-runtime/compare/v0.18.2...v0.18.3

Commits
  • be2f383 Merge pull request #2840 from sbueringer/pr-bump-k8s
  • 4720d17 Bump k8s.io/* to v0.30.1
  • aa9ed14 Merge pull request #2837 from sbueringer/pr-setup-envtest-ct-rel-0.18
  • 35d7bbd default --use-deprecated-gcs to true
  • ce4e4f5 some more deprecations
  • 56dcc14 setup-envtest: allow downloading envtest binaries from controller-tools
  • See full diff in compare view


Updates github.com/hashicorp/go-version from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/hashicorp/go-version's releases.

v1.7.0

ENHANCEMENTS:

  • Remove reflect dependency (#91)
  • Implement the database/sql.Scanner and database/sql/driver.Value interfaces for Version (#133)

INTERNAL:

  • [COMPLIANCE] Add Copyright and License Headers (#115)
  • [COMPLIANCE] Update MPL-2.0 LICENSE (#105)
  • Bump actions/cache from 3.0.11 to 3.2.5 (#116)
  • Bump actions/checkout from 3.2.0 to 3.3.0 (#111)
  • Bump actions/upload-artifact from 3.1.1 to 3.1.2 (#112)
  • GHA Migration (#103)
  • github: Pin external GitHub Actions to hashes (#107)
  • SEC-090: Automated trusted workflow pinning (2023-04-05) (#124)
  • update readme (#104)
Changelog

Sourced from github.com/hashicorp/go-version's changelog.

1.7.0 (May 24, 2024)

ENHANCEMENTS:

  • Remove reflect dependency (#91)
  • Implement the database/sql.Scanner and database/sql/driver.Value interfaces for Version (#133)

INTERNAL:

  • [COMPLIANCE] Add Copyright and License Headers (#115)
  • [COMPLIANCE] Update MPL-2.0 LICENSE (#105)
  • Bump actions/cache from 3.0.11 to 3.2.5 (#116)
  • Bump actions/checkout from 3.2.0 to 3.3.0 (#111)
  • Bump actions/upload-artifact from 3.1.1 to 3.1.2 (#112)
  • GHA Migration (#103)
  • github: Pin external GitHub Actions to hashes (#107)
  • SEC-090: Automated trusted workflow pinning (2023-04-05) (#124)
  • update readme (#104)
Commits
  • fcaa532 Update CHANGELOG.md
  • b85381a Update CHANGELOG.md
  • d55f214 Implement the Scan and driver.Value SQL interfaces (#133)
  • e04a866 remove reflection dependency (#91)
  • 94bab9e [COMPLIANCE] Add Copyright and License Headers (#115)
  • 73ddc63 github: Change Dependabot to only manage HashiCorp-owned Actions
  • bf1144e SEC-090: Automated trusted workflow pinning (2023-04-05) (#124)
  • 644291d Bump actions/cache from 3.0.11 to 3.2.5 (#116)
  • 8f6487b Bump actions/upload-artifact from 3.1.1 to 3.1.2 (#112)
  • 7f856b8 Bump actions/checkout from 3.2.0 to 3.3.0 (#111)
  • Additional commits viewable in compare view


Updates helm.sh/helm/v3 from 3.15.0 to 3.15.1

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.15.1 is a patch release. The Helm application source is the same as 3.15.0. The 3.15.0 builds stated the wrong version when running helm version. Instead of the release number it had the release candidate version which pointed to the same revision of the source.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.15.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.15.2 is the next patch release and will be on June 12, 2024.
  • 3.16.0 is the next feature release and will be on September 11, 2024.

Changelog

  • Fixing build issue where wrong version is used e211f2aa62992bd72586b395de50979e31231829 (Matt Farina)
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions