chore(deps): bump the security group across 1 directory with 21 updates #1789
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the security group with 15 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/casbin/govaluate](https://github.com/casbin/govaluate) | `1.3.0` | `1.4.0` | | [github.com/containers/image/v5](https://github.com/containers/image) | `5.34.3` | `5.35.0` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.4` | `5.7.5` | | [github.com/microsoft/go-mssqldb](https://github.com/microsoft/go-mssqldb) | `1.8.0` | `1.8.1` | | [github.com/miekg/dns](https://github.com/miekg/dns) | `1.1.65` | `1.1.66` | | [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.25.3` | `4.25.4` | | [github.com/vishvananda/netlink](https://github.com/vishvananda/netlink) | `1.3.0` | `1.3.1` | | [github.com/vmware-tanzu/velero](https://github.com/vmware-tanzu/velero) | `1.16.0` | `1.16.1` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.13.0` | `0.14.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.32.3` | `0.33.1` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.32.3` | `0.33.1` | | [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.32.3` | `0.33.1` | | [golang.org/x/net](https://github.com/golang/net) | `0.39.0` | `0.40.0` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.17.3` | `3.18.0` | | [k8s.io/kubelet](https://github.com/kubernetes/kubelet) | `0.32.3` | `0.33.1` | Updates `github.com/casbin/govaluate` from 1.3.0 to 1.4.0 - [Release notes](https://github.com/casbin/govaluate/releases) - [Changelog](https://github.com/casbin/govaluate/blob/master/.releaserc.json) - [Commits](casbin/govaluate@v1.3.0...v1.4.0) Updates `github.com/containers/image/v5` from 5.34.3 to 5.35.0 - [Release notes](https://github.com/containers/image/releases) - [Commits](containers/image@v5.34.3...v5.35.0) Updates `github.com/jackc/pgx/v5` from 5.7.4 to 5.7.5 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.7.4...v5.7.5) Updates `github.com/microsoft/go-mssqldb` from 1.8.0 to 1.8.1 - [Release notes](https://github.com/microsoft/go-mssqldb/releases) - [Changelog](https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md) - [Commits](microsoft/go-mssqldb@v1.8.0...v1.8.1) Updates `github.com/miekg/dns` from 1.1.65 to 1.1.66 - [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release) - [Commits](miekg/dns@v1.1.65...v1.1.66) Updates `github.com/shirou/gopsutil/v4` from 4.25.3 to 4.25.4 - [Release notes](https://github.com/shirou/gopsutil/releases) - [Commits](shirou/gopsutil@v4.25.3...v4.25.4) Updates `github.com/vishvananda/netlink` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/vishvananda/netlink/releases) - [Commits](vishvananda/netlink@v1.3.0...v1.3.1) Updates `github.com/vmware-tanzu/velero` from 1.16.0 to 1.16.1 - [Release notes](https://github.com/vmware-tanzu/velero/releases) - [Changelog](https://github.com/vmware-tanzu/velero/blob/main/CHANGELOG.md) - [Commits](vmware-tanzu/velero@v1.16.0...v1.16.1) Updates `golang.org/x/sync` from 0.13.0 to 0.14.0 - [Commits](golang/sync@v0.13.0...v0.14.0) Updates `k8s.io/api` from 0.32.3 to 0.33.1 - [Commits](kubernetes/api@v0.32.3...v0.33.1) Updates `k8s.io/apiextensions-apiserver` from 0.32.3 to 0.33.1 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.32.3...v0.33.1) Updates `k8s.io/apimachinery` from 0.32.3 to 0.33.1 - [Commits](kubernetes/apimachinery@v0.32.3...v0.33.1) Updates `k8s.io/apiserver` from 0.32.3 to 0.33.1 - [Commits](kubernetes/apiserver@v0.32.3...v0.33.1) Updates `k8s.io/cli-runtime` from 0.32.3 to 0.33.1 - [Commits](kubernetes/cli-runtime@v0.32.3...v0.33.1) Updates `k8s.io/client-go` from 0.32.3 to 0.33.1 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.32.3...v0.33.1) Updates `golang.org/x/net` from 0.39.0 to 0.40.0 - [Commits](golang/net@v0.39.0...v0.40.0) Updates `golang.org/x/sys` from 0.32.0 to 0.33.0 - [Commits](golang/sys@v0.32.0...v0.33.0) Updates `golang.org/x/text` from 0.24.0 to 0.25.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.24.0...v0.25.0) Updates `helm.sh/helm/v3` from 3.17.3 to 3.18.0 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.17.3...v3.18.0) Updates `k8s.io/kubelet` from 0.32.3 to 0.33.1 - [Commits](kubernetes/kubelet@v0.32.3...v0.33.1) Updates `k8s.io/metrics` from 0.32.3 to 0.33.0 - [Commits](kubernetes/metrics@v0.32.3...v0.33.0) --- updated-dependencies: - dependency-name: github.com/casbin/govaluate dependency-version: 1.4.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: github.com/containers/image/v5 dependency-version: 5.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.7.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/microsoft/go-mssqldb dependency-version: 1.8.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/miekg/dns dependency-version: 1.1.66 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/shirou/gopsutil/v4 dependency-version: 4.25.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/vishvananda/netlink dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/vmware-tanzu/velero dependency-version: 1.16.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: golang.org/x/sync dependency-version: 0.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/api dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apimachinery dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apiserver dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/cli-runtime dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/client-go dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/net dependency-version: 0.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/sys dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/text dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: helm.sh/helm/v3 dependency-version: 3.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/kubelet dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/metrics dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security ... Signed-off-by: dependabot[bot] <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the security group with 15 updates in the / directory:
1.3.01.4.05.34.35.35.05.7.45.7.51.8.01.8.11.1.651.1.664.25.34.25.41.3.01.3.11.16.01.16.10.13.00.14.00.32.30.33.10.32.30.33.10.32.30.33.10.39.00.40.03.17.33.18.00.32.30.33.1Updates
github.com/casbin/govaluatefrom 1.3.0 to 1.4.0Release notes
Sourced from github.com/casbin/govaluate's releases.
Commits
4697815feat: reduce memory allocs to optimize performance (#13)Updates
github.com/containers/image/v5from 5.34.3 to 5.35.0Release notes
Sourced from github.com/containers/image/v5's releases.
... (truncated)
Commits
617c288Bump to c/image v5.35.01b83b3aBump to c/storage v1.58.04279b17Merge pull request #2826 from containers/renovate/golangci-golangci-lint-2.x1d14076chore(deps): update dependency golangci/golangci-lint to v2.1.112c8495Merge pull request #2824 from containers/renovate/github.com-sigstore-rekor-1.x010f504fix(deps): update module github.com/sigstore/rekor to v1.3.109b83c49Merge pull request #2823 from Luap99/githuba4b363d.github: check_cirrus_cron work around github bug37150b4.github: remove cirrus rerun action6116c41Merge pull request #2822 from containers/renovate/github.com-sigstore-sigstor...Updates
github.com/jackc/pgx/v5from 5.7.4 to 5.7.5Changelog
Sourced from github.com/jackc/pgx/v5's changelog.
Commits
15bca4aRelease v5.7.51d557f9Remove PlanScan memoizationde7fe81Use reflect.TypeFor instead of reflect.TypeOfd9eb089Remove unused function6be24ebFix comment typo07871c0Zero internal baseRows references to allow GC earlier777e7e5Merge pull request #2313 from stampy88/tracelog_pool_additions151bd02Switched toLogLevelDebug540fcaaAdd support for PGOPTIONS environment variable3a248e3Add support for PGTZ environment variableUpdates
github.com/microsoft/go-mssqldbfrom 1.8.0 to 1.8.1Commits
6b3e174replace ioutil with io everywhere (#258)46d39b9bump: github.com/golang-jwt/jwt/v5 v5.2.1 => v5.2.2 (#256)549c925isProc: recognize builtin-commands (#252)b9933ebDATETIME: fix 1/300 of a seconds rounding logic (Bulk Copy related) (#242)e804768Add JSON-encoded version of NULL uniqueidentifier (#238)d27f997Try to fix the github PR validation workflow (#240)ba24accFix GUID conversion (#207)Updates
github.com/miekg/dnsfrom 1.1.65 to 1.1.66Commits
10d76bcRelease 1.1.66ed312a3Fix logic in xfr ReadMsg + add test (#1649)27318b9RFC 8490: Implement DSO type registry01abd80DSO: Use Stateful as the suffix64211b3Add the rcode DSO-TYPE Not Implemented / RFC8490 (#1648)8ec9f67Upgrade all deps (#1647)8a570c6A comment concerning newline while scanning (#1645)739cf21Return error for empty target (#1627)Updates
github.com/shirou/gopsutil/v4from 4.25.3 to 4.25.4Release notes
Sourced from github.com/shirou/gopsutil/v4's releases.
Commits
3ba33b4Merge pull request #1843 from mmorel-35/golangci-lint/ineffassign6469062chore: enable ineffassign linteraf2d6deMerge pull request #1825 from mmorel-35/golangci-lint/govet10be661chore: enable govet linter3c34181Merge pull request #1841 from shirou/feat/update_github_action_runners_imagesc43a933fix: update github actions runner imagesf9f5620Merge pull request #1840 from s0ders/refactor/host-info-error-msg0bbc484refactor: using fmt.Errorf on some error returns.7d9af6fMerge pull request #1829 from mmorel-35/golangci-lint@v261f624bMerge pull request #1831 from niemp100/win32_cpu_valuesUpdates
github.com/vishvananda/netlinkfrom 1.3.0 to 1.3.1Release notes
Sourced from github.com/vishvananda/netlink's releases.
... (truncated)
Commits
17daef6vlan: add support for flags and qos mapsb929916filter: add classid and port range support for flower06c2c01feat: add vlanid - tunnelid mapping supportc4bb4f9rdma: support rdma metrics: resource and statistice9f11f7bugfix: parse ipv4 src/dst error1f4f72cMimicipsetC code for determining correct default ipset revision2426b05qdisc: fix wrong type info of tc_sfq_qopta2e4b9aveth: allow configuring peer attributes beyond namespace and address9d88d83feat: add support for RtoMin lock6b5dd30geneve: Support setting/getting source port rangeUpdates
github.com/vmware-tanzu/velerofrom 1.16.0 to 1.16.1Release notes
Sourced from github.com/vmware-tanzu/velero's releases.
Commits
2eb97faMerge pull request #8940 from ywk253100/250514_fixf64fb36Call WaitGroup.Done() once only when PVB changes to final status the first ti...4bd86f1Merge pull request #8939 from blackpiglet/modify_image_usage_1.1618ef5e6Support using image registry proxy in more cases.01aa538Add default bakcup repository configuration for E2E.3617172Merge pull request #8928 from Lyndon-Li/release-1.1682dce511.16.1 changelog update659a352Add VolumeSnapshotContent into the RIA and the mustHave resource list. (#8926)9eeea4fMerge pull request #8922 from Lyndon-Li/release-1.16e1068d6bump up base imageUpdates
golang.org/x/syncfrom 0.13.0 to 0.14.0Commits
506c70ferrgroup: propagate panic and Goexit through WaitUpdates
k8s.io/apifrom 0.32.3 to 0.33.1Commits
04f698eUpdate dependencies to v0.33.1 tag16cedc7Merge pull request #131088 from atiratree/rename-terminating-replicas-fgdc88679Merge pull request #131103 from ahrtr/etcd_sdk_202503284a456a2bump etcd 3.5.21 sdk96e38c9rename DeploymentPodReplacementPolicy FG to DeploymentReplicaSetTerminatingRe...c21a017Merge pull request #129970 from mortent/AddResourceV1beta2APId0673dbRun make update118546dMerge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...f9401a3Merge pull request #130797 from jm-franc/configurable-tolerance9b3e544Generated UPDATE_COMPATIBILITY_FIXTURE_DATAUpdates
k8s.io/apiextensions-apiserverfrom 0.32.3 to 0.33.1Commits
a0cfc63Update dependencies to v0.33.1 tagc066cbeMerge remote-tracking branch 'origin/master' into release-1.3308c3d2fMove to released version of prometheus/client_golang v1.22.0 from rc.07c1033efix narrow spaces of %e for x/net bumpcdf67ddbump etcd 3.5.21 sdkb8b1528Merge pull request #129872 from seans3/websocket-https-proxyd5c7de8Websocket HTTPS proxy supportde39b8dMerge pull request #130899 from serathius/watchcache-error7022eabMerge pull request #130020 from mozillazg/patch-3718a2c7Merge pull request #130906 from serathius/streaming-validationUpdates
k8s.io/apimachineryfrom 0.32.3 to 0.33.1Commits
173776aMerge pull request #131708tigrato/automated-cherry-pick-of-#131702a3d1fdefix: fixes a possible panic inNewYAMLToJSONDecoder955939fbump etcd 3.5.21 sdke8a77bdMerge pull request #130910 from googs1025/fix/datarace7e8c77eMerge pull request #130906 from serathius/streaming-validation27fd396flake: fix data race for func TestBackoff_Step8bcc6f1Update kube-openapi and integrate streaming tags validation6ce776cMerge pull request #130857 from thockin/kk_small_vg_diffsf2c94d6Comment on origin and JSON schemab63ba07Use origin in validateFalse's own testUpdates
k8s.io/apiserverfrom 0.32.3 to 0.33.1Commits
338d7b8Update dependencies to v0.33.1 tag1fb809dMerge remote-tracking branch 'origin/master' into release-1.336aae451Stop exposing list-via-watch from the server345c8cfMerge remote-tracking branch 'origin/master' into release-1.3311e6080Merge pull request #131196 from siyuanfoundation/forward-apie87c9dbMove to released version of prometheus/client_golang v1.22.0 from rc.09ca332fbug fix: fix version order in emulation forward compatibility.d4f2fc5Merge pull request #131020 from wojtek-t/fix_asynchronous_errorbeaef1dMerge pull request #131103 from ahrtr/etcd_sdk_202503281776f0cParallelize cacher list testsUpdates
k8s.io/cli-runtimefrom 0.32.3 to 0.33.1Commits
8aa16c9Update dependencies to v0.33.1 tag2811321bump etcd 3.5.21 sdkb44307fMerge pull request #129872 from seans3/websocket-https-proxyf7c023cWebsocket HTTPS proxy support178adecMerge pull request #130906 from serathius/streaming-validation1e2dc5cUpdate kube-openapi and integrate streaming tags validation7d637a3Merge pull request #130555 from thockin/k_k_randfill67be32dVendor randfill2dc7b80Merge pull request #130569 from dims/update-to-latest-cadvisor-v0.52.0a4e93f9update to v1.22.0-rc.0Updates
k8s.io/client-gofrom 0.32.3 to 0.33.1Commits
e7397e5Update dependencies to v0.33.1 tagecbbb06bump etcd 3.5.21 sdk2086688Merge pull request #129970 from mortent/AddResourceV1beta2APIdba34c7Run make updatee359642Merge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...3bf0a05Merge pull request #130797 from jm-franc/configurable-tolerance7a03a3bGenerated files1676bebRefresh autogenerated files following the configurable tolerance updates.387edb8Merge pull request #130967 from aojea/listers21dc3b4benchmark to show inefficient linear search lookupUpdates
golang.org/x/netfrom 0.39.0 to 0.40.0Commits
7d6e62ago.mod: update golang.org/x dependenciesea0c1d9internal/timeseries: use built-in max/min to simplify the code3e7a445quic: skip packet numbers for optimistic ack defense3f563d3quic: use an enum for sentPacket statea3b6e77quic: don't re-lose packets when discarding keys22500a6quic: decode packet numbers >255 in testsdd0b200quic: remove go1.21 build constraintUpdates
golang.org/x/sysfrom 0.32.0 to 0.33.0Commits
3d9a6b8windows: add WSADuplicateSocketc0a9559cpu: add crypto extensions detection for riscv648e9e046windows: add virtual key codes and console input consts7138967windows: fix slicing of NTUnicodeString values6a85559windows: fix dangling pointers in (*SECURITY_DESCRIPTOR).ToAbsoluteUpdates
golang.org/x/textfrom 0.24.0 to 0.25.0Commits
700cc20go.mod: update golang.org/x dependenciesUpdates
helm.sh/helm/v3from 3.17.3 to 3.18.0Release notes
Sourced from helm.sh/helm/v3's releases.