Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump golang.org/x/crypto from 0.14.0 to 0.17.0 #580

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 18, 2023

Bumps golang.org/x/crypto from 0.14.0 to 0.17.0.

Commits
  • 9d2ee97 ssh: implement strict KEX protocol changes
  • 4e5a261 ssh: close net.Conn on all NewServerConn errors
  • 152cdb1 x509roots/fallback: update bundle
  • fdfe1f8 ssh: defer channel window adjustment
  • b8ffc16 blake2b: drop Go 1.6, Go 1.8 compatibility
  • 7e6fbd8 ssh: wrap errors from client handshake
  • bda2f3f argon2: avoid clobbering BP
  • 325b735 ssh/test: skip TestSSHCLIAuth on Windows
  • 1eadac5 go.mod: update golang.org/x dependencies
  • b2d7c26 ssh: add (*Client).DialContext method
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.14.0 to 0.17.0.
- [Commits](golang/crypto@v0.14.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 18, 2023
@eks-distro-bot
Copy link
Collaborator

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a aws member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

@xdu31
Copy link
Member

xdu31 commented Dec 22, 2023

/lgtm

@bhavi-koduru
Copy link
Member

/approve

@eks-distro-bot
Copy link
Collaborator

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: bhavi-koduru

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@eks-distro-bot eks-distro-bot merged commit f70553a into main Jan 2, 2024
2 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/golang.org/x/crypto-0.17.0 branch January 2, 2024 20:26
rcrozean added a commit to rcrozean/eks-distro-prow-jobs that referenced this pull request Jan 4, 2024
* [PR BOT] Update builder-base image tag in Prow jobs (aws#483)

* [PR BOT] Update builder-base image tag in Prow jobs (aws#484)

* Bump go mod to fix security alerts (aws#485)

* Adds check-for-supported-release-branch for checking presubmit (aws#491)

* Bump golang.org/x/text from 0.3.7 to 0.3.8 (aws#487)

Bumps [golang.org/x/text](https://github.com/golang/text) from 0.3.7 to 0.3.8.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.3.7...v0.3.8)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Fix release branch check (aws#492)

* Bump golang.org/x/net from 0.0.0-20220722155237-a158d28d115b to 0.7.0 (aws#488)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20220722155237-a158d28d115b to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/commits/v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* [PR BOT] Update builder-base image tag in Prow jobs (aws#494)

* Changes al 2022 builds to be 2023 which will be the ga version (aws#493)

* Removed 1.21 jobs (aws#490)

* [PR BOT] Update builder-base image tag in Prow jobs (aws#496)

* [PR BOT] Update builder-base image tag in Prow jobs (aws#497)

* Added jobs for 1.27 (aws#498)

* bumps kubernetes presubmit resources up (aws#501)

* Increased resources on k8s presubmit test (aws#502)

* [PR BOT] Update builder-base image tag in Prow jobs (aws#500)

* Move 1.27 to post-submits cluster temporarily (aws#503)

* Move 1.27 to post-submits cluster temporarily

* Change jobs

* Fix linter

* Add missing checks

* Add arch (aws#504)

* [PR BOT] Update builder-base image tag in Prow jobs (aws#506)

* [PR BOT] Update builder-base image tag in Prow jobs (aws#507)

* Added new people to OWNERS (aws#508)

* Deprecate 1.22 jobs (aws#510)

* remove 1.15, 1.16 golang prowjobs (aws#511)

* [PR BOT] Update builder-base image tag in Prowjobs (aws#512)

* Remove 1.17 Prowjobs (aws#513)

* Update builder-base image tag in Prowjobs (aws#514)

* [PR BOT] Update builder-base image tag in Prowjobs

* Delete golang-1-17-ARM64-PROD-postsubmits.yaml

* Delete golang-1-17-presubmits.yaml

* Delete golang-1-17-ARM64-postsubmits.yaml

* Delete golang-1-17-PROD-postsubmits.yaml

* Delete golang-1-17-postsubmits.yaml

* Delete golang-1-17-PROD-images-postsubmits.yaml

* Delete eks-distro-base-presubmits-golang-1-17-al-2.yaml

* Delete eks-distro-base-presubmits-golang-1-17-al-2023.yaml

---------

Co-authored-by: Sajia Zafreen <42818305+zafs23@users.noreply.github.com>

* [PR BOT] Update builder-base image tag in Prowjobs (aws#516)

* Add builder-base image PR notifier (aws#517)

* [PR BOT] Update builder-base image tag in Prowjobs (aws#519)

* [PR BOT] Update builder-base image tag in Prowjobs (aws#520)

* Add 1.28 prow jobs (aws#523)

Co-authored-by: Bhavitha Koduru <kodurub@amazon.com>

* Create quarterly rebuild minimal image prowjob (aws#524)

* update quarterly rebuild minimal image prowjob

* build the prowjob

* lower resources and timeout

* build rebuilder pj with new resource settings

* Added sns notification to golang post-submits (aws#521)

* Added sns notification to golang post-submits

* Changed script called and added arns

* Add go1.21 (aws#525)

* update quarterly rebuild minimal image prowjob

* build the prowjob

* lower resources and timeout

* build rebuilder pj with new resource settings

* update to include go1.21

* Remove 1.23 prowjobs (aws#526)

Co-authored-by: Bhavitha Koduru <kodurub@amazon.com>

* Revert "Remove 1.23 prowjobs (aws#526)" (aws#527)

This reverts commit 90d5f88.

Co-authored-by: kodurub <kodurub@amazon.com>

* Move 1-28-test-presubmits job to different cluster (aws#528)

* Move 1-28-test-presubmits job to different cluster

* Updated linter

* Added role to golang image updates (aws#529)

* Update go mod (aws#530)

* Add 1.20 for Prowjob Liner (aws#533)

* Add 1.20 for Prowjob Liner

* test

* test

* test

* test

* test

* test

* revert

* Fix go.mod for linter (aws#534)

* Revert "Fix go.mod for linter (aws#534)" (aws#535)

This reverts commit 17cfa65.

* Fix go mod to run linter (aws#536)

* Fix go mod to run linter

* test linter

* update test infra

* revert prowjob changes

* [PR BOT] Update builder-base image tag in Prowjobs (aws#531)

* Request ephemeral storage to run 1-28-test-presubmit on fargate (aws#537)

* Move 1-28-test-presubmit to presubmit cluster

* Test ephemeral storage to run 1-28-test-presubmit on fargate

* edit indent

* increase ephemeral storage

* Configure ephemeral storage to be a standard resource (aws#538)

* Request ephemeral-storage for 1-27-test-presubmit (aws#539)

* Remove go1.18 prowjobs (aws#540)

* remove go1.18 jobs

* run templater to remove go 1.18 jobs

* [PR BOT] Update builder-base image tag in Prowjobs (aws#541)

* update storage size for kops-presubmits (aws#543)

* [PR BOT] Update builder-base image tag in Prowjobs (aws#544)

* Request ephemeral storage to run 1.25,1.26 test presubmits (aws#546)

Co-authored-by: Bhavitha Koduru <kodurub@amazon.com>

* increase memory request to avoid OOM killing of CCM pre-submit (aws#547)

* increase memory request to avoid OOM killing of CCM pre-submit

* generate jobs from template

* Adding a Kops test for eks-distro (aws#542)

* first round of adding a kops test for eks-distro

* add kops script presumbit

* make kops-build-presubmits for each kops version

* add tests for new kops-prow-nobuild make targets

* update kops presubmits with new make target

* image build false

* remove unused env

* run templater

* update kops presubmits after merging upstream

* update to include make build

* fix template to run if changed

* [PR BOT] Update builder-base image tag in Prowjobs (aws#549)

* [PR BOT] Update builder-base image tag in Prowjobs (aws#551)

* Revert "[PR BOT] Update builder-base image tag in Prowjobs (aws#551)" (aws#553)

This reverts commit d5d2243.

* update service account similar to access artifact account (aws#555)

* Set max concurrency to 1 for Builder-Base postsubmit (aws#554)

* Set max concurrency to 1 for Builder-Base postsubmit

* run base-periodic two times a day

* Update builder-base image tag in Prowjobs (aws#552)

* [PR BOT] Update builder-base image tag in Prowjobs

* ran make prowjob command

---------

Co-authored-by: Sajia Zafreen <sajiazafreen@u.boisestate.edu>

* Revert "update service account similar to access artifact account (aws#555)" (aws#556)

This reverts commit 974b24e.

* Revert "Update builder-base image tag in Prowjobs (aws#552)" (aws#559)

This reverts commit 4d476bc.

* [PR BOT] Update builder-base image tag in Prowjobs (aws#558)

* adds support for setting runAsUser and runAsGroup (aws#561)

* [PR BOT] Update builder-base image tag in Prowjobs (aws#560)

* Bump google.golang.org/grpc from 1.56.2 to 1.56.3 (aws#557)

Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.56.2 to 1.56.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.56.2...v1.56.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump golang.org/x/net from 0.12.0 to 0.17.0 (aws#548)

Bumps [golang.org/x/net](https://github.com/golang/net) from 0.12.0 to 0.17.0.
- [Commits](golang/net@v0.12.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Add CNI-plugin tests (aws#562)

* [PR BOT] Update builder-base image tag in Prowjobs (aws#563)

* Exclude 1-23 jobs from Prowjob Linter (aws#565)

* Exclude 1-23 jobs from Prowjob Linter

* udpate

* Update verify_prowjob script (aws#566)

* Remove 1.23 Prowjobs K8 presubmit tests and Update CNI-plugin tests triggeres (aws#564)

* Remove 1.23 Prowjobs and Update CNI-plugin tests triggeres

* keep the 1-23 branch

* test

* get rid of the triggers from 1-23 and change verify-prowjob script to exclude 1-23

* Remove 1.23 jobs

* update script

* update

* update script

* Update CNI-plugin unit tests triggers (aws#567)

* Update CNI-plugin unit tests triggers

* add golang trigger

* [PR BOT] Update builder-base image tag in Prowjobs (aws#568)

* add 1.29 prowjobs (aws#570)

Signed-off-by: Cameron Rozean <rcrozean@amazon.com>

* remove CNI tests prowjobs due to WIP state (aws#571)

Signed-off-by: Cameron Rozean <rcrozean@amazon.com>

* updates buildkit to 0.12 (aws#572)

* [PR BOT] Update builder-base image tag in Prowjobs (aws#573)

* [PR BOT] Update builder-base image tag in Prowjobs (aws#574)

* Add 1.23 presubmits (aws#575)

* Add all jobs

* Add only 1.23 presubmits

* [PR BOT] Update builder-base image tag in Prowjobs (aws#577)

* [PR BOT] Update builder-base image tag in Prowjobs (aws#578)

* [PR BOT] Update builder-base image tag in Prowjobs (aws#579)

* Bump golang.org/x/crypto from 0.14.0 to 0.17.0 (aws#580)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.14.0 to 0.17.0.
- [Commits](golang/crypto@v0.14.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* update files to point to personal prow

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Cameron Rozean <rcrozean@amazon.com>
Co-authored-by: EKS Distro PR Bot <75336432+eks-distro-pr-bot@users.noreply.github.com>
Co-authored-by: Abhay Krishna <arnchlm@amazon.com>
Co-authored-by: Jackson West <jgw@amazon.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Kirsten Schumy <ksschumy@amazon.com>
Co-authored-by: Mark Pruett <67116121+markapruett@users.noreply.github.com>
Co-authored-by: Sajia Zafreen <42818305+zafs23@users.noreply.github.com>
Co-authored-by: Bhavitha <106284071+bhavi-koduru@users.noreply.github.com>
Co-authored-by: Bhavitha Koduru <kodurub@amazon.com>
Co-authored-by: Jason Du <jasonxdu@amazon.com>
Co-authored-by: Daniel Budris <budris@amazon.com>
Co-authored-by: Sajia Zafreen <sajiazafreen@u.boisestate.edu>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved dependencies Pull requests that update a dependency file lgtm needs-ok-to-test size/S
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

3 participants