submariner-io / shipyard

Framework and scripts to create multiple Kubernetes clusters with kind (K8s in Docker) for local E2E testing and development.
https://submariner.io/for_developers/shipyard/
Apache License 2.0
46 stars 26 forks source link

Bump the tools group in /tools with 3 updates #1647

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps the tools group in /tools with 3 updates: github.com/golangci/golangci-lint, helm.sh/helm/v3 and sigs.k8s.io/kind.

Updates github.com/golangci/golangci-lint from 1.58.1 to 1.58.2

Release notes

Sourced from github.com/golangci/golangci-lint's releases.

v1.58.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! :heart:

For key updates, see the changelog.

Changelog

  • 7c87a9e6 build(deps): bump github.com/Antonboom/nilnil from 0.1.8 to 0.1.9 (#4716)
  • 3fbc2f52 build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#4725)
  • 8fe47a93 build(deps): bump github.com/lasiar/canonicalheader from 1.0.6 to 1.1.1 (#4715)
  • 8c4cfb61 build(deps): bump github.com/securego/gosec/v2 from 2.19.0 to 2.20.0 (#4724)
  • 35eaf609 build(deps): bump go-simpler.org/musttag from 0.12.1 to 0.12.2 (#4710)
  • 7f6606a7 build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (#4722)
Changelog

Sourced from github.com/golangci/golangci-lint's changelog.

v1.58.2

  1. Updated linters
    • canonicalheader: from 1.0.6 to 1.1.1
    • gosec: from 2.19.0 to 2.20.0
    • musttag: from 0.12.1 to 0.12.2
    • nilnil: from 0.1.8 to 0.1.9
  2. Documentation
    • Improve integrations and install pages
Commits
  • 8c4cfb6 build(deps): bump github.com/securego/gosec/v2 from 2.19.0 to 2.20.0 (#4724)
  • 3fbc2f5 build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#4725)
  • 7f6606a build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (#4722)
  • 78ade26 docs: improve integrations and install pages (#4719)
  • 27355d9 docs: uses org account for GitHub Sponsor
  • 1df156c docs: funding and social networks
  • f17b3ef docs: funding and social networks
  • 7c87a9e build(deps): bump github.com/Antonboom/nilnil from 0.1.8 to 0.1.9 (#4716)
  • 8fe47a9 build(deps): bump github.com/lasiar/canonicalheader from 1.0.6 to 1.1.1 (#4715)
  • c90d06b dev: set CGO_ENABLED=1 when running "test" task (#4712)
  • Additional commits viewable in compare view


Updates helm.sh/helm/v3 from 3.14.4 to 3.15.0

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.15.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Opt-in to hiding secrets when running dry-run for install and upgrade
  • Added robustness to wait checks

Installation and Upgrading

Download Helm v3.15.0. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.15.1 is the next patch release and will be on June 12, 2024.
  • 3.16.0 is the next feature release and will be on September 11, 2024.

Changelog

  • Updating to k8s 1.30 c4e37b39dbb341cb3f716220df9f9d306d123a58 (Matt Farina)
  • bump version to v3.15.0 d7afa3b6b432c09a02cd07342e908ba5bed34940 (Matt Farina)
  • bump version to 774346777c5b311251d8252cd470d56bdd23a403 (Matt Farina)
  • Fix namespace on kubeconfig error 214fb6eff393f1c17890d45e9eaee86f6b37ea17 (Calvin Krist)
  • Update testdata PKI with keys that have validity until 3393 (Fixes #12880) 1b75d48189c2484cb5904f7996933d8d85315adb (Dirk Müller)
  • chore(deps): bump golang.org/x/net from 0.17.0 to 0.23.0 dac23c82ce3bc05b6e72a1571bea48e424494fb0 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 3.24.7 to 3.24.10 167d57676d22ea10fa7869e6f85c6fe2e46b3292 (dependabot[bot])
  • chore: remove repetitive words dd37787ffd25419cf5f76222e682fbba47d289eb (deterclosed)
  • Modified how created annotation is populated based on package creation time 0a69a0dea6b1dcebaaf5d5b67c9a56eade463a71 (Andrew Block)
  • chore(deps): bump github.com/docker/docker aaaf1128d2dd2ce3e119472cae0bd9da3d62eb89 (dependabot[bot])

... (truncated)

Commits
  • c4e37b3 Updating to k8s 1.30
  • d7afa3b bump version to v3.15.0
  • 7743467 bump version to
  • cf823d4 Merge pull request #12971 from dirkmueller/cert_extended_range
  • 1df0064 Merge pull request #12966 from helm/dependabot/go_modules/golang.org/x/net-0....
  • c6beb16 Merge pull request #12979 from CalvinKrist/fix-namespace-on-kube-error
  • 214fb6e Fix namespace on kubeconfig error
  • 1b75d48 Update testdata PKI with keys that have validity until 3393 (Fixes #12880)
  • dac23c8 chore(deps): bump golang.org/x/net from 0.17.0 to 0.23.0
  • 14d0c13 Merge pull request #11569 from alex-petrov-vt/iss-11553
  • Additional commits viewable in compare view


Updates sigs.k8s.io/kind from 0.22.0 to 0.23.0

Release notes

Sourced from sigs.k8s.io/kind's releases.

v0.23.0

This release introduces initial limited support for nerdctl and kube-proxy nftables mode.

  • The default node image is now Kubernetes 1.30.0: kindest/node:v1.30.0@sha256:047357ac0cfea04663786a612ba1eaba9702bef25227a794b52890dd8bcd692e
  • ipFamily config field is now validated
    • While technically a breaking change, if the value you set here is now caught as invalid it was being silently ignored and creating an ipv4 cluster previously and you should correct your config
  • Go 1.17+ is required for go install sigs.k8s.io/kind / building the kind binary
    • Prebuilt binaries are available as an alternative to go install
    • For local development make will automatically setup the correct go version
    • Note that the go team only supports 1.21+ and major linux distros have 1.19+
    • Future releases may increase this to a more current Go release
    • Future release may adopt toolchain in go.mod to make this seamless if you have go 1.21+ installed even without our makefile. We highly recommend installing go 1.21+

Images pre-built for this release:

  • v1.30.0: kindest/node:v1.30.0@sha256:047357ac0cfea04663786a612ba1eaba9702bef25227a794b52890dd8bcd692e
  • v1.29.4: kindest/node:v1.29.4@sha256:3abb816a5b1061fb15c6e9e60856ec40d56b7b52bcea5f5f1350bc6e2320b6f8
  • v1.28.9: kindest/node:v1.28.9@sha256:dca54bc6a6079dd34699d53d7d4ffa2e853e46a20cd12d619a09207e35300bd0
  • v1.27.13: kindest/node:v1.27.13@sha256:17439fa5b32290e3ead39ead1250dca1d822d94a10d26f1981756cd51b24b9d8
  • v1.26.15: kindest/node:v1.26.15@sha256:84333e26cae1d70361bb7339efb568df1871419f2019c80f9a12b7e2d485fe19
  • v1.25.16: kindest/node:v1.25.16@sha256:5da57dfc290ac3599e775e63b8b6c49c0c85d3fec771cd7d55b45fae14b38d3b

NOTE: You must use the @sha256 digest to guarantee an image built for this release, until such a time as we switch to a different tagging scheme. Even then we will highly encourage digest pinning for security and reproducibility reasons.

See also:

NOTE: These node images support amd64 and arm64, both of our supported platforms. You must use the same platform as your host, for more context see kubernetes-sigs/kind#2718

  • Correctly case kubeProxyMode: "none"

... (truncated)

Commits
  • 0296c52 version v0.23.0
  • 4a36b22 Merge pull request #3608 from BenTheElder/bump-kindnetd-mod
  • 96a3352 bump node image to 1.30.0
  • 1c8c510 bump base image
  • 7e41de9 bump local-path-provisioner image
  • 54682a2 bump kindnetd image
  • cd2ac64 bump kindnetd to k8s 0.29 (not 0.30 as we'd need go 1.22+, see runc issue 4233)
  • b9bba13 Merge pull request #3607 from BenTheElder/bump-go
  • 274e9d4 upgrade to go1.21.10
  • 6967c95 Merge pull request #3605 from kubernetes-sigs/dependabot/github_actions/actio...
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dfarrell07 commented 4 months ago

The kind part of this PR will be done by https://github.com/submariner-io/shipyard/pull/1650.

dependabot[bot] commented 4 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.