Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

ci(deps): setup dependabot #614

Merged
merged 22 commits into from Dec 19, 2022
Merged

ci(deps): setup dependabot #614

merged 22 commits into from Dec 19, 2022

Conversation

mmorel-35
Copy link
Contributor

@mmorel-35 mmorel-35 commented Dec 11, 2022 •
edited

Setup dependabot for github-actions and go dependencies.
It also intregates the updates of github-actions and go submodules of the project as @jacob-delgado already created #607 for the main module dependencies.

Signed-off-by: Matthieu MOREL matthieu.morel35@gmail.com

mmorel-35 and others added 11 commits December 11, 2022 22:56
@mmorel-35
Create dependabot.yml
1bd7505 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
@mmorel-35
Update dependabot.yml
048c9a8 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
@mmorel-35
Update dependabot.yml
189aa3d 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
@dependabot
Bump github.com/envoyproxy/go-control-plane in /xdsmatcher
b794c30 
Bumps [github.com/envoyproxy/go-control-plane](https://github.com/envoyproxy/go-control-plane) from 0.9.9 to 0.10.3.
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@v0.9.9...v0.10.3)

---
updated-dependencies:
- dependency-name: github.com/envoyproxy/go-control-plane
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/stretchr/testify from 1.7.0 to 1.8.1 in /xdsmatcher
a8d03ad 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.0 to 1.8.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.7.0...v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/checkout from 2 to 3
d461096 
Bumps [actions/checkout](https://github.com/actions/checkout) from 2 to 3.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@v2...v3)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump actions/stale from 3.0.14 to 6.0.1
b9b6415 
Bumps [actions/stale](https://github.com/actions/stale) from 3.0.14 to 6.0.1.
- [Release notes](https://github.com/actions/stale/releases)
- [Changelog](https://github.com/actions/stale/blob/main/CHANGELOG.md)
- [Commits](actions/stale@v3.0.14...v6.0.1)

---
updated-dependencies:
- dependency-name: actions/stale
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump google.golang.org/protobuf from 1.26.0 to 1.28.1 in /xdsmatcher
bc1000f 
Bumps [google.golang.org/protobuf](https://github.com/protocolbuffers/protobuf-go) from 1.26.0 to 1.28.1.
- [Release notes](https://github.com/protocolbuffers/protobuf-go/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf-go/blob/master/release.bash)
- [Commits](protocolbuffers/protobuf-go@v1.26.0...v1.28.1)

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump golangci/golangci-lint-action from 2 to 3
7250739 
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 2 to 3.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@v2...v3)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump gopkg.in/yaml.v2 from 2.2.8 to 2.4.0 in /examples/dyplomat
505780c 
Bumps [gopkg.in/yaml.v2](https://github.com/go-yaml/yaml) from 2.2.8 to 2.4.0.
- [Release notes](https://github.com/go-yaml/yaml/releases)
- [Commits](go-yaml/yaml@v2.2.8...v2.4.0)

---
updated-dependencies:
- dependency-name: gopkg.in/yaml.v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@mmorel-35
Update stale.yaml
d8f6218 
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
@sunjayBhatia
Copy link
Member

@envoyproxy/dependency-watchers any reason not to do this?

@alecholmez
Copy link
Contributor

This seems like a good idea to me +1 for dependabot

@alecholmez alecholmez self-assigned this Dec 15, 2022
alecholmez
alecholmez reviewed Dec 15, 2022
View reviewed changes
xdsmatcher/go.mod Outdated
@@ -3,14 +3,9 @@ module github.com/envoyproxy/go-control-plane/xdsmatcher
go 1.15
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Might be a good idea to bump this to whatever is at the root go.sum too. We can do that later though

Copy link
Contributor Author

@mmorel-35 mmorel-35 Dec 16, 2022 •
edited

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I think it worth another PR Indeed. As 1.19 has been published, it might even be an opportunity to upgrade go version to 1.17 for all the modules in thé project

alecholmez
alecholmez previously approved these changes Dec 15, 2022
View reviewed changes
@dependabot
Bump google.golang.org/protobuf from 1.28.0 to 1.28.1
dfe8eea 
Bumps [google.golang.org/protobuf](https://github.com/protocolbuffers/protobuf-go) from 1.28.0 to 1.28.1.
- [Release notes](https://github.com/protocolbuffers/protobuf-go/releases)
- [Changelog](https://github.com/protocolbuffers/protobuf-go/blob/master/release.bash)
- [Commits](protocolbuffers/protobuf-go@v1.28.0...v1.28.1)

---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
dependabot bot and others added 10 commits December 17, 2022 15:14
@dependabot
Bump github.com/google/go-cmp from 0.5.7 to 0.5.9
436fed2 
Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.5.7 to 0.5.9.
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](google/go-cmp@v0.5.7...v0.5.9)

---
updated-dependencies:
- dependency-name: github.com/google/go-cmp
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump go.opentelemetry.io/proto/otlp from 0.15.0 to 0.19.0
9ff4f4c 
Bumps [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) from 0.15.0 to 0.19.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v0.15.0...v0.19.0)

---
updated-dependencies:
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump google.golang.org/grpc from 1.45.0 to 1.51.0
3717114 
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.45.0 to 1.51.0.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.45.0...v1.51.0)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/stretchr/testify from 1.7.1 to 1.8.1
ecfaee9 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.7.1 to 1.8.1.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.7.1...v1.8.1)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump github.com/census-instrumentation/opencensus-proto
b16136f 
Bumps [github.com/census-instrumentation/opencensus-proto](https://github.com/census-instrumentation/opencensus-proto) from 0.3.0 to 0.4.1.
- [Release notes](https://github.com/census-instrumentation/opencensus-proto/releases)
- [Commits](census-instrumentation/opencensus-proto@v0.3.0...v0.4.1)

---
updated-dependencies:
- dependency-name: github.com/census-instrumentation/opencensus-proto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @mmorel-35
Bump github.com/envoyproxy/protoc-gen-validate from 0.6.7 to 0.9.1
bfa73f3 
* Bump github.com/envoyproxy/protoc-gen-validate from 0.6.7 to 0.9.1

Bumps [github.com/envoyproxy/protoc-gen-validate](https://github.com/envoyproxy/protoc-gen-validate) from 0.6.7 to 0.9.1.
- [Release notes](https://github.com/envoyproxy/protoc-gen-validate/releases)
- [Changelog](https://github.com/bufbuild/protoc-gen-validate/blob/main/.goreleaser.yaml)
- [Commits](bufbuild/protoc-gen-validate@v0.6.7...v0.9.1)

---
updated-dependencies:
- dependency-name: github.com/envoyproxy/protoc-gen-validate
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update go.mod

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

* Update go.mod

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

* Update go.mod

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

* Update go.mod

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

* up

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

* Update dependabot.yml

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

* Update Dockerfile.ci

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

* Update Dockerfile

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matthieu MOREL <matthieu.morel35@gmail.com>
@dependabot @mmorel-35
Bump sigs.k8s.io/aws-iam-authenticator from 0.5.1 to 0.5.9 in /exampl…
cea214f 
…es/dyplomat

* Bump sigs.k8s.io/aws-iam-authenticator in /examples/dyplomat

Bumps [sigs.k8s.io/aws-iam-authenticator](https://github.com/kubernetes-sigs/aws-iam-authenticator) from 0.5.1 to 0.5.9.
- [Release notes](https://github.com/kubernetes-sigs/aws-iam-authenticator/releases)
- [Changelog](https://github.com/kubernetes-sigs/aws-iam-authenticator/blob/master/CHANGELOG.md)
- [Commits](kubernetes-sigs/aws-iam-authenticator@v0.5.1...v0.5.9)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/aws-iam-authenticator
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Update main.go

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

* Update main.go

Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Matthieu MOREL <matthieu.morel35@gmail.com>
@dependabot
Bump golang from 1.17 to 1.19 in /examples/dyplomat
2a67d78 
Bumps golang from 1.17 to 1.19.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump golang from 1.17 to 1.19
f69a0d9 
Bumps golang from 1.17 to 1.19.

---
updated-dependencies:
- dependency-name: golang
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot
Bump k8s.io/client-go from 0.22.1 to 0.26.0 in /examples/dyplomat
70519d9 
Bumps [k8s.io/client-go](https://github.com/kubernetes/client-go) from 0.22.1 to 0.26.0.
- [Release notes](https://github.com/kubernetes/client-go/releases)
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.22.1...v0.26.0)

---
updated-dependencies:
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@alecholmez
Copy link
Contributor

If this build goes green I think it's good to merge.

@alecholmez alecholmez merged commit 3bf2100 into envoyproxy:main Dec 19, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@alecholmez alecholmez alecholmez approved these changes

Assignees

@alecholmez alecholmez

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
3 participants
@mmorel-35 @sunjayBhatia @alecholmez