Skip to content

chore(deps): update all dependencies #2060

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: master
Choose a base branch
from
Open

chore(deps): update all dependencies #2060

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 7, 2025 •
edited
Loading

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
alpine final minor 3.21.3 -> 3.22.0 age adoption passing confidence
aquasecurity/trivy-action action minor 0.30.0 -> 0.31.0 age adoption passing confidence
docker/build-push-action action minor v6.17.0 -> v6.18.0 age adoption passing confidence
docker/setup-buildx-action action minor v3.10.0 -> v3.11.1 age adoption passing confidence
fluent-plugin-concat minor '2.5.0' -> '2.6.0' age adoption passing confidence
gcr.io/distroless/static final digest d9f9472 -> b7b9a69
github.com/kube-logging/logging-operator require digest 8f70057 -> 3c33a47 age adoption passing confidence
github.com/kube-logging/telemetry-controller require digest e6bb350 -> b686871 age adoption passing confidence
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring require minor v0.82.2 -> v0.83.0 age adoption passing confidence
github.com/spf13/cast require minor v1.8.0 -> v1.9.2 age adoption passing confidence
github.com/vladopajic/go-test-coverage/v2 minor 2.14.3 -> 2.15.0 age adoption passing confidence
github/codeql-action action minor v3.28.18 -> v3.29.0 age adoption passing confidence
golang patch 1.24.3 -> 1.24.4 age adoption passing confidence
golang.org/x/exp require digest ce4c2cf -> dcc06ee age adoption passing confidence
golang.org/x/net require minor v0.40.0 -> v0.41.0 age adoption passing confidence
helm.sh/helm/v3 require patch v3.18.0 -> v3.18.3 age adoption passing confidence
k8s.io/api require patch v0.33.0 -> v0.33.1 age adoption passing confidence
k8s.io/apiextensions-apiserver require patch v0.33.0 -> v0.33.1 age adoption passing confidence
k8s.io/apimachinery require patch v0.33.0 -> v0.33.1 age adoption passing confidence
k8s.io/client-go require patch v0.33.0 -> v0.33.1 age adoption passing confidence
sigs.k8s.io/controller-runtime require minor v0.20.4 -> v0.21.0 age adoption passing confidence
sigstore/cosign-installer action minor v3.8.2 -> v3.9.0 age adoption passing confidence
vladopajic/go-test-coverage action minor v2.14.3 -> v2.15.0 age adoption passing confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

aquasecurity/trivy-action (aquasecurity/trivy-action)

v0.31.0

Compare Source

What's Changed

New Contributors

Full Changelog: aquasecurity/trivy-action@0.30.0...0.31.0

docker/build-push-action (docker/build-push-action)

v6.18.0

Compare Source

[!NOTE]
Build summary is now supported with Docker Build Cloud.

Full Changelog: docker/build-push-action@v6.17.0...v6.18.0

docker/setup-buildx-action (docker/setup-buildx-action)

v3.11.1

Compare Source

Full Changelog: docker/setup-buildx-action@v3.11.0...v3.11.1

v3.11.0

Compare Source

Full Changelog: docker/setup-buildx-action@v3.10.0...v3.11.0

fluent-plugins-nursery/fluent-plugin-concat (fluent-plugin-concat)

v2.6.0

Compare Source

prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)

v0.83.0: 0.83.0 / 2025-05-30

Compare Source

  • [FEATURE] Add limits option for Alertmanager silences. #​7478
  • [FEATURE] Add NoTranslation as a translationStrategy option to OTLP config. #​7539
  • [FEATURE] Add nameEscapingScheme field to Prometheus CRDs. #​7538
  • [FEATURE] Add convertHistogramsToNHCB field to OTLPConfig. #​7533
  • [FEATURE] Add convert_classic_histograms_to_nhcb option to Prometheus global config. #​7543
  • [FEATURE] Add new MetricNameEscapingScheme and MetricNameValidationScheme parameters to ScrapeConfig. #​7555
  • [ENHANCEMENT] Do not insert sharding relabeling in scrapeConfigs if already present. #​7421
spf13/cast (github.com/spf13/cast)

v1.9.2

Compare Source

What's Changed

Full Changelog: spf13/cast@v1.9.1...v1.9.2

v1.9.1

Compare Source

What's Changed

Full Changelog: spf13/cast@v1.9.0...v1.9.1

v1.9.0

Compare Source

Notable new features 🎉

  • Casting from type aliases is now supported for basic types
  • Added generic functions: To/ToE, Must, ToNumber/ToNumberE
  • Increased test coverage
  • Converting float numbers from string is now supported

What's Changed

New Contributors

Full Changelog: spf13/cast@v1.8.0...v1.9.0

vladopajic/go-test-coverage (github.com/vladopajic/go-test-coverage/v2)

v2.15.0

Compare Source

What's Changed

New GitHub action was added that runs tool as go source (instead of running it as binary from docker image).
Usage of this GitHub action is exactly the same, except that uses property should specify path to this action.

  - name: check test coverage

##### note: uses adds 'action/source' part, compared to default action
    uses: vladopajic/go-test-coverage/action/source@v2
    with:
      config: ./.testcoverage.yml

Full Changelog: vladopajic/go-test-coverage@v2.14.3...v2.15.0

github/codeql-action (github/codeql-action)

v3.29.0

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.29.0 - 11 Jun 2025

  • Update default CodeQL bundle version to 2.22.0. #​2925
  • Bump minimum CodeQL bundle version to 2.16.6. #​2912

See the full CHANGELOG.md for more information.

v3.28.19

Compare Source

CodeQL Action Changelog

See the releases page for the relevant changes to the CodeQL CLI and language packs.

3.28.19 - 03 Jun 2025
  • The CodeQL Action no longer includes its own copy of the extractor for the actions language, which is currently in public preview.
    The actions extractor has been included in the CodeQL CLI since v2.20.6. If your workflow has enabled the actions language and you have pinned
    your tools: property to a specific version of the CodeQL CLI earlier than v2.20.6, you will need to update to at least CodeQL v2.20.6 or disable
    actions analysis.
  • Update default CodeQL bundle version to 2.21.4. #​2910

See the full CHANGELOG.md for more information.

golang/go (golang)

v1.24.4

Compare Source

helm/helm (helm.sh/helm/v3)

v3.18.3: Helm 3.18.3

Compare Source

Helm v3.18.3 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages
Installation and Upgrading

Download Helm v3.18.3. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next
  • 3.18.4 is the next patch release and will be on July 09, 2025
  • 3.19.0 is the next minor release and will be on September 11, 2025
Changelog
  • build(deps): bump golang.org/x/crypto from 0.38.0 to 0.39.0 6838ebc (dependabot[bot])
  • fix: user username password for login 5b9e2f6 (Terry Howe)
  • Update pkg/registry/transport.go 2782412 (Terry Howe)
  • Update pkg/registry/transport.go e66cf6a (Terry Howe)
  • fix: add debug logging to oci transport 191f05c (Terry Howe)

v3.18.2: Helm 3.18.2

Compare Source

Helm v3.18.2 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.2. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.18.3 is the next patch release and will be on July 09, 2025
  • 3.19.0 is the next minor release and will be on September 11, 2025

Changelog

  • fix: legacy docker support broken for login 04cad46 (Terry Howe)
  • Handle an empty registry config file. bc9f8a2 (Matt Farina)

v3.18.1: Helm v3.18.1

Compare Source

Helm v3.18.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

Notes:

  • This release fixes regressions around template generation and OCI registry interaction in 3.18.0
  • There are at least 2 known regressions unaddressed in this release. They are being worked on.
    • Empty registry configuration files. When the file exists but it is empty.
    • Login to Docker Hub on some domains fails.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.1. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.18.2 will contain only bug fixes.
  • 3.19.0 on September 11th, 2025 is the next feature release.

Changelog

  • fix(client): skipnode utilization for PreCopy f6f8700 (Brandt Keller)
  • fix(client): layers now returns manifest - remove duplicate from descriptors 4da7015 (Brandt Keller)
  • fix(client): return nil on non-allowed media types 1a8507f (Brandt Keller)
  • Prevent fetching newReference again as we have in calling method 015531c (Benoit Tigeot)
  • Prevent failure when resolving version tags in oras memory store 9db1a12 (Benoit Tigeot)
  • Update pkg/plugin/plugin.go e8bfa0e (Benoit Tigeot)
  • Update pkg/plugin/plugin.go 24b4490 (Benoit Tigeot)
  • Wait for Helm v4 before raising when platformCommand and Command are set 7e8f534 (Benoit Tigeot)
  • Fix 3.18.0 regression: registry login with scheme ea04cea (Scott Rigby)
  • Revert "fix (helm) : toToml` renders int as float [ backport to v3 ]" bec6609 (Matt Farina)
kubernetes/api (k8s.io/api)

v0.33.1

Compare Source

kubernetes/apiextensions-apiserver (k8s.io/apiextensions-apiserver)

v0.33.1

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.33.1

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.33.1

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.21.0

Compare Source

Highlights

  • Bump to Kubernetes v1.33 libraries
  • Improvements for priority queue (#​2374)
  • envtest now has an option to download envtest binaries (can be used to replace setup-envtest depending on use case)
  • Metric improvements: native histograms, all Go runtime metrics are enabled now
  • Various bug fixes
  • New reviewers: @​troy0820, @​JoelSpeed!!

⚠️ Breaking Changes

  • Bump to k8s.io/* v0.33.0 and Go 1.24 (#​3104 #​3142 #​3161 #​3204 #​3215)
  • config: Stop enabling client-side ratelimiter by default (#​3119)
    • Previous behavior can be preserved by setting QPS 20 and Burst 30 on the rest.Config
  • controller: NewUnmanaged/NewTypedUnmanaged: Stop requiring a manager (#​3141)
  • reconcile: Deprecate Result.Requeue (#​3107)

✨ New Features

  • controller: priority queue:
  • envtest: Add Environment.KubeConfig field (#​2278)
  • envtest: Add option to download envtest binaries (#​3135 #​3137)
  • events: Add IsInInitialList to TypedCreateEvent (#​3162)
  • log/zap: Enable panic log level (#​3186)
  • logging: Adopt WarningHandlerWithContext (#​3176)
  • logging: Improve logging by adopting contextual logging (#​3149)
  • metrics: Adopt native histograms (#​3165)
  • metrics: Expose all Go runtime metrics (#​3070)

🐛 Bug Fixes

  • apiutil: restmapper: Respect preferred version (#​3151)
  • builder: webhook: Fix custom path for webhook conflicts (#​3102)
  • cache: Clone maps to prevent data races when concurrently creating caches using the same options (#​3078)
  • cache: Stop accumulating lists in multi-namespace cache implementation (#​3195)
  • cache: List out of global cache when present and necessary (#​3126)
  • client: Return error if pagination is used with the cached client (#​3134)
  • controller: Support WaitForSync in TypedSyncingSource (#​3084)
  • controller: priority queue: Fix behavior of rate limit option in priorityqueue.AddWithOpts (#​3103)
  • controller: priority queue: Yet another queue_depth metric fix (#​3085)
  • controllerutil: CreateOrUpdate: Avoid panic when the MutateFn is nil (#​2828)
  • envtest: Fix nil pointer exception in Stop() (#​3153)
  • fake client: Fix data races when writing to the scheme (#​3143)
  • fake client: Use k8s.io/apimachinery/pkg/util/json to unmarshal in fake client (#​3208)
  • log/zap: Fix verbose info lost on KubeAwareEncoder.Clone (#​3209)
  • logging: controller: Use fmt.Stringer from custom source for logging (if available) (#​3068)
  • webhook: MultiMutatingHandler/MultiValidatingHandler: return warnings on webhook response (#​3223)

🌱 Others

  • Add troy0820 to reviewers (#​3099)
  • Add JoelSpeed to reviewers (#​3097)
  • client: Validate that unstructured objects don't require scheme registration (#​3138)
  • controller: Mention the SkipNameValidation option in the name validation error (#​3170)
  • docs: Clarify that controller-runtime is not a kubebuilder subproject (#​3185)
  • envtest: Export envtest.ReadCRDFiles (#​3129)
  • golangci-lint: Bump golangci-lint to v1.63.4 (#​3076)
  • golangci-lint: Bump golangci-lint to v2.1.6 (#​3187)
  • manager: Fix race in unit test ([#​3150](https://redirect.github.com

Configuration

📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) in timezone Etc/UTC, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate Renovate
Copy link
Contributor Author

renovate bot commented Jun 7, 2025 •
edited
Loading

ℹ Artifact update notice

File name: e2e/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 10 additional dependencies were updated

Details:

Package Change
github.com/go-logr/logr v1.4.2 -> v1.4.3
golang.org/x/crypto v0.38.0 -> v0.39.0
golang.org/x/sync v0.14.0 -> v0.15.0
golang.org/x/text v0.25.0 -> v0.26.0
k8s.io/apiserver v0.33.0 -> v0.33.1
k8s.io/cli-runtime v0.33.0 -> v0.33.1
k8s.io/component-base v0.33.0 -> v0.33.1
k8s.io/kubectl v0.33.0 -> v0.33.1
k8s.io/utils v0.0.0-20250321185631-1f6e0b77f77e -> v0.0.0-20250502105355-0f33e8f1c979
oras.land/oras-go/v2 v2.5.0 -> v2.6.0
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 18 additional dependencies were updated

Details:

Package Change
dario.cat/mergo v1.0.1 -> v1.0.2
github.com/open-telemetry/opentelemetry-operator v0.124.0 -> v0.127.0
github.com/prometheus/common v0.63.0 -> v0.64.0
go.opentelemetry.io/collector/config/configcompression v1.30.0 -> v1.33.0
go.opentelemetry.io/collector/config/configopaque v1.30.0 -> v1.33.0
go.opentelemetry.io/collector/featuregate v1.30.0 -> v1.33.0
go.opentelemetry.io/otel v1.35.0 -> v1.36.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.35.0 -> v1.36.0
go.opentelemetry.io/otel/exporters/prometheus v0.57.0 -> v0.58.0
go.opentelemetry.io/otel/metric v1.35.0 -> v1.36.0
go.opentelemetry.io/otel/sdk v1.35.0 -> v1.36.0
go.opentelemetry.io/otel/sdk/metric v1.35.0 -> v1.36.0
go.opentelemetry.io/otel/trace v1.35.0 -> v1.36.0
go.opentelemetry.io/proto/otlp v1.5.0 -> v1.6.0
golang.org/x/oauth2 v0.29.0 -> v0.30.0
google.golang.org/genproto/googleapis/api v0.0.0-20250425173222-7b384671a197 -> v0.0.0-20250519155744-55703ea1f237
google.golang.org/genproto/googleapis/rpc v0.0.0-20250425173222-7b384671a197 -> v0.0.0-20250519155744-55703ea1f237
google.golang.org/grpc v1.72.0 -> v1.72.1
File name: pkg/sdk/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 5 additional dependencies were updated

Details:

Package Change
github.com/go-logr/logr v1.4.2 -> v1.4.3
golang.org/x/sync v0.14.0 -> v0.15.0
golang.org/x/text v0.25.0 -> v0.26.0
k8s.io/apiextensions-apiserver v0.33.0 -> v0.33.1
k8s.io/utils v0.0.0-20250321185631-1f6e0b77f77e -> v0.0.0-20250502105355-0f33e8f1c979
File name: pkg/sdk/logging/model/syslogng/config/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 10 additional dependencies were updated

Details:

Package Change
github.com/go-logr/logr v1.4.2 -> v1.4.3
github.com/kube-logging/logging-operator v0.0.0-20250519064237-8f70057397f0 -> v0.0.0-20250613120409-3c33a4704908
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring v0.82.2 -> v0.83.0
github.com/spf13/cast v1.8.0 -> v1.9.2
golang.org/x/net v0.40.0 -> v0.41.0
golang.org/x/sync v0.14.0 -> v0.15.0
golang.org/x/text v0.25.0 -> v0.26.0
k8s.io/apiextensions-apiserver v0.33.0 -> v0.33.1
k8s.io/client-go v0.33.0 -> v0.33.1
k8s.io/utils v0.0.0-20250321185631-1f6e0b77f77e -> v0.0.0-20250502105355-0f33e8f1c979

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Jun 7, 2025
@renovate renovate bot force-pushed the renovate/all branch 9 times, most recently from 8130b09 to 0d32cc2 Compare June 16, 2025 22:27
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants