search

traPtitech / NeoShowcase

PaaS (Platform as a Service) on Docker 🐳 or k8s ☸
MIT License
53 stars 4 forks source link

build(deps): bump the non-majors group with 13 updates #942

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps the non-majors group with 13 updates:

Package From To
code.gitea.io/sdk/gitea 0.18.0 0.19.0
github.com/aws/aws-sdk-go 1.54.11 1.55.5
github.com/cert-manager/cert-manager 1.15.1 1.15.2
github.com/docker/cli 27.0.3+incompatible 27.1.1+incompatible
github.com/moby/buildkit 0.14.1 0.15.1
github.com/regclient/regclient 0.6.1 0.7.0
github.com/samber/lo 1.44.0 1.46.0
github.com/traefik/traefik/v3 3.0.3 3.1.1
golang.org/x/crypto 0.24.0 0.25.0
golang.org/x/net 0.26.0 0.27.0
k8s.io/api 0.30.2 0.30.3
k8s.io/apimachinery 0.30.2 0.30.3
k8s.io/client-go 0.30.2 0.30.3

Updates code.gitea.io/sdk/gitea from 0.18.0 to 0.19.0

Updates github.com/aws/aws-sdk-go from 1.54.11 to 1.55.5

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.5 (2024-07-30)

Service Client Updates

  • service/appstream: Updates service API and documentation
    • Added support for Red Hat Enterprise Linux 8 on Amazon AppStream 2.0
  • service/autoscaling: Updates service API and documentation
    • Increase the length limit for VPCZoneIdentifier from 2047 to 5000
  • service/codepipeline: Updates service API, documentation, and paginators
    • AWS CodePipeline V2 type pipelines now support stage level conditions to enable development teams to safely release changes that meet quality and compliance requirements.
  • service/elasticache: Updates service documentation
    • Doc only update for changes to deletion API.
  • service/elasticloadbalancing: Updates service API
  • service/eventbridge: Updates service API
  • service/logs: Updates service API
    • Add v2 smoke tests and smithy smokeTests trait for SDK testing.
  • service/models.lex.v2: Updates service API and documentation
  • service/rolesanywhere: Updates service API and documentation
  • service/tnb: Updates service API and documentation
  • service/workspaces: Updates service documentation
    • Removing multi-session as it isn't supported for pools

Release v1.55.4 (2024-07-29)

Service Client Updates

  • service/elasticache: Updates service documentation
    • Renaming full service name as it appears in developer documentation.
  • service/memorydb: Updates service API and documentation

Release v1.55.3 (2024-07-25)

Service Client Updates

  • service/application-autoscaling: Updates service API
  • service/application-signals: Updates service API and documentation
  • service/bedrock-runtime: Updates service API and documentation
  • service/codecommit: Updates service API and documentation
    • CreateRepository API now throws OperationNotAllowedException when the account has been restricted from creating a repository.
  • service/datazone: Updates service API and documentation
  • service/ec2: Updates service API and documentation
    • EC2 Fleet now supports using custom identifiers to reference Amazon Machine Images (AMI) in launch requests that are configured to choose from a diversified list of instance types.
  • service/ecr: Updates service API, documentation, paginators, and examples
    • API and documentation updates for Amazon ECR, adding support for creating, updating, describing and deleting ECR Repository Creation Template.
  • service/eks: Updates service API and documentation
  • service/elasticloadbalancingv2: Updates service API, documentation, and examples
  • service/network-firewall: Updates service API and documentation
  • service/outposts: Updates service API and documentation
  • service/states: Updates service API and documentation
    • This release adds support to customer managed KMS key encryption in AWS Step Functions.

... (truncated)

Commits


Updates github.com/cert-manager/cert-manager from 1.15.1 to 1.15.2

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.15.2

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

🔗 See v1.15.0 for more information about cert-manager 1.15 and read-before-upgrade info.

📜 Changes since v1.15.1

Bug or Regression

  • BUGFIX route53: explicitly set the aws-global STS region which is now required by the github.com/aws/aws-sdk-go-v2 library. (#7189, @cert-manager-bot)
  • Bump grpc-go to fix GHSA-xr7q-jx4m-x55m (#7167, @SgtCoDFish)
  • Fix Azure DNS causing panics whenever authentication error happens (#7188, @cert-manager-bot)
  • Fix incorrect value and indentation of endpointAdditionalProperties in the PodMonitor template of the Helm chart (#7191, @inteon)
  • Fixes ACME HTTP01 challenge behavior when using Gateway API to prevent unbounded creation of HTTPRoute resources (#7186, @cert-manager-bot)
  • Upgrade golang from 1.22.3 to 1.22.5 (#7165, @github-actions)

v1.15.2-alpha.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

🔗 See v1.15.0 for more information about cert-manager 1.15 and read-before-upgrade info.

📜 Changes since v1.15.1

Bug or Regression

  • BUGFIX route53: explicitly set the aws-global STS region which is now required by the github.com/aws/aws-sdk-go-v2 library. (#7189, @cert-manager-bot)
  • Bump grpc-go to fix GHSA-xr7q-jx4m-x55m (#7167, @SgtCoDFish)
  • Fix Azure DNS causing panics whenever authentication error happens (#7188, @cert-manager-bot)
  • Fix incorrect value and indentation of endpointAdditionalProperties in the PodMonitor template of the Helm chart (#7191, @inteon)
  • Fixes ACME HTTP01 challenge behavior when using Gateway API to prevent unbounded creation of HTTPRoute resources (#7186, @cert-manager-bot)
  • Upgrade golang from 1.22.3 to 1.22.5 (#7165, @github-actions)
Commits
  • 48216fb Merge pull request #7200 from cert-manager-bot/cherry-pick-7199-to-release-1.15
  • a94ad68 Update the Google CloudBuild job image
  • 5604417 Merge pull request #7197 from ThatsMrTalbot/fix/e2e-feature-flags-disabled-te...
  • 243cd78 fix: e2e feature flags disabled test failing
  • a4338af Merge pull request #7191 from inteon/release-1.15_podmonitor_template
  • ae55ea1 Fix incorrect value and indentation of the PodMonitor endpointAdditionalPrope...
  • 35e27b7 Merge pull request #7189 from cert-manager-bot/cherry-pick-7108-to-release-1.15
  • bf03ee5 improve aws GetSession comments that explain when and why regions have to be set
  • ff2a82a verify that the "aws-global" is used for sts in test
  • b47c58b set global region when calling sts
  • Additional commits viewable in compare view


Updates github.com/docker/cli from 27.0.3+incompatible to 27.1.1+incompatible

Commits
  • 6312585 Merge pull request #5274 from thaJeztah/27.1_backport_compose_oom
  • c599566 Allow for OomScoreAdj
  • fb19def Merge pull request #5271 from thaJeztah/27.1_backport_custom_headers_env_var
  • bccd478 Merge pull request #5270 from thaJeztah/27.1_backport_test_spring_cleaning
  • 8992378 add support for DOCKER_CUSTOM_HEADERS env-var (experimental)
  • f90273c Merge pull request #5269 from thaJeztah/27.1_backport_add_macos_apple_silicon
  • ca9636a test spring-cleaning
  • ad47d2a gha: update to macOS 13, add macOS 14 arm64 (Apple Silicon M1)
  • a2a0fb7 Merge pull request #5263 from thaJeztah/27.1_backport_relax_pr_check
  • 16d6c90 Merge pull request #5265 from thaJeztah/27.1_backport_bump_buildx_compose
  • Additional commits viewable in compare view


Updates github.com/moby/buildkit from 0.14.1 to 0.15.1

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.15.1

Welcome to the v0.15.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • CrazyMax
  • Tõnis Tiigi

Notable Changes

  • Fix possible panic when importing build record external error #5181
  • Fix regression with flock module where read-write mode was not applied anymore #5183

Dependency Changes

  • github.com/gofrs/flock v0.12.0 -> v0.12.1
  • golang.org/x/sys v0.21.0 -> v0.22.0

Previous release can be found at v0.15.0

v0.15.0

Welcome to the v0.15.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Tõnis Tiigi
  • Akihiro Suda
  • Sebastiaan van Stijn
  • Talon Bowler
  • CrazyMax
  • David Karlsson
  • Aleksa Sarai
  • Anthony Nandaa
  • Erik Sipsma
  • Jonathan A. Sternberg
  • Justin Chadwell
  • Alano Terblanche
  • Brian Goff
  • Jesper Noordsij
  • Moritz "WanzenBug" Wanzenböck

... (truncated)

Commits
  • 979542e Merge pull request #5186 from crazy-max/v0.15.1_cherry-picks
  • 607455d vendor: bump github.com/gofrs/flock to v0.12.1
  • 4882c33 llbsolver: avoid nil releaser on error
  • e83d79a Merge pull request #5135 from daghack/copy-ignored-file-check
  • 07fe324 Adds a rule check for copying files which match the .dockerignore patterns
  • 62ba6fe Merge pull request #5150 from tonistiigi/dockerfile-no-stage-error
  • 2a78bd3 Merge pull request #5149 from tonistiigi/update-gocsvvalue
  • 262634c dockerfile: avoid frontend panic when no stages defined
  • e38c064 Merge pull request #5141 from tonistiigi/testutil-mirror-fixes
  • fcb9a53 vendor: update go-csvvalue to ddb21b71
  • Additional commits viewable in compare view


Updates github.com/regclient/regclient from 0.6.1 to 0.7.0

Release notes

Sourced from github.com/regclient/regclient's releases.

v0.7.0

Release v0.7.0

CVEs:

  • CVE-2024-24790 fix included with Go 1.22.4 upgrade. (PR 762)
  • CVE-2024-24791 fix included with Go 1.22.5 upgrade. ([PR 777][pr-777])

Breaking:

  • regctl registry set and regctl registry login will return a non-zero if the ping fails. (PR 751)
  • Removed WithFS which required access to an internal interface to use. (PR 772)

Features:

  • Add an experimental regctl ref command. (PR 765)
  • Support digest algorithms beyond sha256. ([PR 776][pr-776])
  • Support modifying the digest algorithm on an image. ([PR 776][pr-776])
  • Experimental support for pushing tagged manifests with different digest algorithms. ([PR 778][pr-778])

Fixes:

  • Prevent panic on interrupted image mod. (PR 746)
  • Enable deletion on olareg tests. (PR 758)
  • Allow ~ (tilde) in ocidir reference paths. (PR 763)
  • Allow well known architectures as a platform. (PR 771)
  • Validate digests before calling methods that could panic. ([PR 776][pr-776])

Other changes:

  • Refactor pulling manifests by platform. (PR 768)
  • Cleanup Dockerfile linter warnings. (PR 770)
  • Enable docker caching of GHA builds. ([PR 773][pr-773])
  • Include a contributor list in the readme. ([PR 774][pr-774])

Contributors:

... (truncated)

Changelog

Sourced from github.com/regclient/regclient's changelog.

Release v0.7.0

CVEs:

  • CVE-2024-24790 fix included with Go 1.22.4 upgrade. (PR 762)
  • CVE-2024-24791 fix included with Go 1.22.5 upgrade. ([PR 777][pr-777])

Breaking:

  • regctl registry set and regctl registry login will return a non-zero if the ping fails. (PR 751)
  • Removed WithFS which required access to an internal interface to use. (PR 772)

Features:

  • Add an experimental regctl ref command. (PR 765)
  • Support digest algorithms beyond sha256. ([PR 776][pr-776])
  • Support modifying the digest algorithm on an image. ([PR 776][pr-776])
  • Experimental support for pushing tagged manifests with different digest algorithms. ([PR 778][pr-778])

Fixes:

  • Prevent panic on interrupted image mod. (PR 746)
  • Enable deletion on olareg tests. (PR 758)
  • Allow ~ (tilde) in ocidir reference paths. (PR 763)
  • Allow well known architectures as a platform. (PR 771)
  • Validate digests before calling methods that could panic. ([PR 776][pr-776])

Other changes:

  • Refactor pulling manifests by platform. (PR 768)
  • Cleanup Dockerfile linter warnings. (PR 770)
  • Enable docker caching of GHA builds. (PR 773)
  • Include a contributor list in the readme. ([PR 774][pr-774])

Contributors:

... (truncated)

Commits
  • 3e517a0 Release v0.7.0
  • 6974461 Merge for release v0.7.0
  • 368eceb Merge pull request #779 from sudo-bmitch/pr-update-20240712
  • be80198 Version bump
  • 1004315 Merge pull request #778 from sudo-bmitch/pr-digest-algo-manifest-put
  • 6c91f44 Support pushing tagged manifests with different digest algorithms
  • 410091a Merge pull request #777 from sudo-bmitch/pr-update-20240707
  • 090fb67 Version bump
  • 2eb59c0 Merge pull request #776 from sudo-bmitch/pr-digest-algo
  • e805426 Support changing digest algorithm
  • Additional commits viewable in compare view


Updates github.com/samber/lo from 1.44.0 to 1.46.0

Release notes

Sourced from github.com/samber/lo's releases.

v1.46.0

What's Changed

New Contributors

Full Changelog: https://github.com/samber/lo/compare/v1.45.0...v1.46.0

v1.45.0

What's Changed

New Contributors

Full Changelog: https://github.com/samber/lo/compare/v1.44.0...v1.45.0

Commits


Updates github.com/traefik/traefik/v3 from 3.0.3 to 3.1.1

Release notes

Sourced from github.com/traefik/traefik/v3's releases.

v3.1.1

Bug fixes:

  • [grpc] Bump google.golang.org/grpc to v1.64.1 (#10938 by kevinpollet)
  • [k8s/gatewayapi] Do not update route status when nothing changed (#10940 by kevinpollet)
  • [metrics] Fix grafana dashboard to work with scrape interval greater than 15s (#10936 by davhdavh)
  • [metrics] Update open connections gauge with connections count (#10905 by rtribotte)
  • [metrics] Use ServiceName in traefik_service_server_up metric (#10838 by KrishnaSindhur)

Documentation:

  • [k8s] Remove duplicated kubectl apply in Kubernetes Gateway documentation (#10931 by battery-staple)

v3.1.0

Important: Please read the migration guide.

Enhancements:

  • [k8s,k8s/gatewayapi] Support invalid HTTPRoute status (#10714 by kevinpollet)
  • [k8s,k8s/gatewayapi] KubernetesGateway provider is no longer experimental (#10840 by rtribotte)
  • [k8s,k8s/gatewayapi] Bump Gateway API to v1.1.0 (#10835 by kevinpollet)
  • [k8s,k8s/gatewayapi] Fix route attachments to gateways (#10761 by kevinpollet)
  • [k8s,k8s/gatewayapi] Support HTTPRoute method and query param matching (#10815 by kevinpollet)
  • [k8s,k8s/gatewayapi] Support HTTPURLRewrite filter (#10571 by SantoDE)
  • [k8s,k8s/gatewayapi] Set Gateway HTTPRoute status (#10667 by kevinpollet)
  • [k8s,k8s/gatewayapi] Support ReferenceGrant for HTTPRoute backends (#10771 by rtribotte)
  • [k8s,k8s/gatewayapi] Compute HTTPRoute priorities (#10766 by kevinpollet)
  • [k8s,k8s/gatewayapi] Support RegularExpression for path matching (#10717 by dmavrommatis)
  • [k8s/crd,k8s] Support HealthCheck for ExternalName services (#10467 by marcmognol)
  • [k8s/ingress,k8s/crd,k8s,k8s/gatewayapi] Migrate to EndpointSlices API (#10664 by jnoordsij)
  • [k8s/ingress,k8s/crd,k8s] Change log level from Warning to Info when ExternalName services is enabled (#10682 by marcmognol)
  • [k8s/ingress,k8s/crd,k8s] Allow to use internal Node IPs for NodePort services (#10278 by jorisvergeer)
  • [middleware,k8s,k8s/gatewayapi] Improve HTTPRoute Redirect Filter with port and scheme (#10784 by rtribotte)
  • [middleware,k8s,k8s/gatewayapi] Support HTTPRoute redirect port and scheme (#10802 by rtribotte)
  • [middleware] Support Content-Security-Policy-Report-Only in the headers middleware (#10709 by SpecLad)
  • [middleware] Add support for Zstandard to the compression middleware (#10660 by Belphemur)
  • [plugins] Enhance wasm plugins (#10829 by juliens)
  • [plugins] Add logs for plugins load (#10848 by mmatur)
  • [server] Support systemd socket-activation (#10399 by juliens)

Bug fixes:

  • [k8s,k8s/gatewayapi] Retry on Gateway API resource status update (#10881 by rtribotte)
  • [k8s,k8s/gatewayapi] Do not disable Gateway API provider if not enabled in experimental (#10862 by kevinpollet)
  • [otel] Bump opentelemetry-go to v1.28 (#10876 by arukiidou)
  • [plugins] Fix build only linux and darwin support wazergo (#10857 by juliens)
  • [healthcheck,k8s/crd,k8s] Fix Healthcheck default value for ExternalName services (#10778 by kevinpollet)
  • [middleware,metrics,tracing] Upgrade to OpenTelemetry Semantic Conventions v1.26.0 (#10850 by mmatur)

Documentation:

... (truncated)

Changelog

Sourced from github.com/traefik/traefik/v3's changelog.

v3.1.1 (2024-07-30)

All Commits

Bug fixes:

  • [grpc] Bump google.golang.org/grpc to v1.64.1 (#10938 by kevinpollet)
  • [k8s/gatewayapi] Do not update route status when nothing changed (#10940 by kevinpollet)
  • [metrics] Fix grafana dashboard to work with scrape interval greater than 15s (#10936 by davhdavh)
  • [metrics] Update open connections gauge with connections count (#10905 by rtribotte)
  • [metrics] Use ServiceName in traefik_service_server_up metric (#10838 by KrishnaSindhur)

Documentation:

  • [k8s] Remove duplicated kubectl apply in Kubernetes Gateway documentation (#10931 by battery-staple)

Misc:

v2.11.7 (2024-07-30)

All Commits

Bug fixes:

  • [logs] Make the log about new version more accurate (#10903 by jmcbri)
  • [tls,k8s/crd,k8s] Enforce default cipher suites list (#10907 by rtribotte)

Documentation:

  • [acme] Modify certificatesDuration documentation (#10920 by peacewalker122)
  • [api] Improve explanation on API exposition (#10926 by mloiseleur)
  • [docker,consul,rancher,ecs] Improve doc on sensitive data stored into labels/tags (#10873 by emilevauge)
  • [docker,logs] Improve error and documentation on the needed link between router and service (#10262 by mloiseleur)
  • [docker] Document Docker port selection on multiple exposed ports (#10935 by mbrodala)
  • Update the supported versions table for v3.1 release (#10933 by jnoordsij)
  • Update PR approval process (#10887 by emilevauge)

v3.1.0 (2024-07-15)

All Commits

Enhancements:

  • [k8s,k8s/gatewayapi] Support invalid HTTPRoute status (#10714 by kevinpollet)
  • [k8s,k8s/gatewayapi] KubernetesGateway provider is no longer experimental (#10840 by rtribotte)
  • [k8s,k8s/gatewayapi] Bump Gateway API to v1.1.0 (#10835 by kevinpollet)
  • [k8s,k8s/gatewayapi] Fix route attachments to gateways (#10761 by kevinpollet)
  • [k8s,k8s/gatewayapi] Support HTTPRoute method and query param matching (#10815 by kevinpollet)
  • [k8s,k8s/gatewayapi] Support HTTPURLRewrite filter (#10571 by SantoDE)
  • [k8s,k8s/gatewayapi] Set Gateway HTTPRoute status (#10667 by kevinpollet)
  • [k8s,k8s/gatewayapi] Support ReferenceGrant for HTTPRoute backends (#10771 by rtribotte)
  • [k8s,k8s/gatewayapi] Compute HTTPRoute priorities (#10766 by kevinpollet)
  • [k8s,k8s/gatewayapi] Support RegularExpression for path matching (#10717 by dmavrommatis)
  • [k8s/crd,k8s] Support HealthCheck for ExternalName services (#10467 by marcmognol)
  • [k8s/ingress,k8s/crd,k8s,k8s/gatewayapi] Migrate to EndpointSlices API (#10664 by jnoordsij)
  • [k8s/ingress,k8s/crd,k8s] Change log level from Warning to Info when ExternalName services is enabled (#10682 by marcmognol)
  • [k8s/ingress,k8s/crd,k8s] Allow to use internal Node IPs for NodePort services (#10278 by jorisvergeer)

... (truncated)

Commits
  • f52a36b Prepare release v3.1.1
  • 2ffa6c6 Merge current v2.11 into v3.1
  • 2104009 Prepare release v2.11.7
  • ba6b4cb chore(ci): fix deprecation and optimization
  • 7dbd3f8 Do not update route status when nothing changed
  • 898eab2 Improve error and documentation on the needed link between router and service
  • 5a70910 Improve explanation on API exposition
  • 386c2ff Use ServiceName in traefik_service_server_up metric
  • 266a2d8 Fix grafana dashboard to work with scrape interval greater than 15s
  • 3ba53df Document Docker port selection on multiple exposed ports
  • Additional commits viewable in compare view


Updates golang.org/x/crypto from 0.24.0 to 0.25.0

Commits
  • 9fadb0b go.mod: update golang.org/x dependencies
  • a6a393f all: bump go.mod version and drop compatibility shims
  • 1c74500 ssh/test: make struct comment match struct name
  • d4e7c9c ssh: fail client auth immediately on receiving disconnect message
  • See full diff in compare view


Updates golang.org/x/net from 0.26.0 to 0.27.0

Commits
  • e2310ae go.mod: update golang.org/x dependencies
  • 77708f7 quic: skip tests which depend on unimplemented UDP functions on Plan 9
  • 9617c63 http2: avoid Transport hang with Connection: close and AllowHTTP
  • See full diff in compare view


Updates k8s.io/api from 0.30.2 to 0.30.3

Commits


Updates k8s.io/apimachinery from 0.30.2 to 0.30.3

Commits


Updates k8s.io/client-go from 0.30.2 to 0.30.3

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
github-actions[bot] commented 3 months ago

Preview (prod backend + PR dashboard) → https://942.ns-preview.trapti.tech/