Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the ci group with 5 updates #546

Merged
merged 1 commit into from Aug 29, 2023

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 29, 2023

Bumps the ci group with 5 updates:

Package From To
actions/setup-go 4.0.1 4.1.0
goreleaser/goreleaser-action 4.3.0 4.4.0
slsa-framework/slsa-github-generator 1.8.0 1.9.0
terraform-linters/setup-tflint 3.0.0 3.1.0
fluxcd/flux2 2.0.1 2.1.0

Updates actions/setup-go from 4.0.1 to 4.1.0

Release notes

Sourced from actions/setup-go's releases.

v4.1.0

What's Changed

In scope of this release, slow installation on Windows was fixed by @​dsame in actions/setup-go#393 and OS version was added to primaryKey for Ubuntu runners to avoid conflicts (actions/setup-go#383)

This release also includes the following changes:

New Contributors

Full Changelog: actions/setup-go@v4...v4.1.0

Commits
  • 93397be Fix Install on Windows is very slow (#393)
  • 27eec5b Merge pull request #396 from actions/dependabot/npm_and_yarn/semver-6.3.1
  • ecfc77a Merge pull request #397 from actions/dependabot/npm_and_yarn/word-wrap-1.2.4
  • 1b80a11 Bump word-wrap from 1.2.3 to 1.2.4
  • b1c3434 Fix licensing for Semver 6.3.1
  • 0bb97b1 Rebuild after updating Semver
  • 4220624 Bump semver from 6.3.0 to 6.3.1
  • db8764c Bump tough-cookie and @​azure/ms-rest-js (#392)
  • 08b314a Merge pull request #383 from akv-platform/issue-368
  • 4e0b6c7 Limit to Linux only
  • Additional commits viewable in compare view

Updates goreleaser/goreleaser-action from 4.3.0 to 4.4.0

Release notes

Sourced from goreleaser/goreleaser-action's releases.

v4.4.0

What's Changed

Full Changelog: goreleaser/goreleaser-action@v4.3.0...v4.4.0

Commits

Updates slsa-framework/slsa-github-generator from 1.8.0 to 1.9.0

Release notes

Sourced from slsa-framework/slsa-github-generator's releases.

v1.9.0

See the CHANGELOG for details.

v1.9.0-rc.0

This is an un-finalized pre-release.

See the CHANGELOG for details.

Changelog

Sourced from slsa-framework/slsa-github-generator's changelog.

v1.9.0

Release [v1.9.0] includes bug fixes and new features.

See the full change list.

v1.9.0: BYOB framework (beta)

  • New: A new framework to turn GitHub Actions into SLSA compliant builders.

v1.9.0: Maven builder (beta)

  • New: A Maven builder to build Java projects and publish to Maven central.

v1.9.0: Gradle builder (beta)

  • New: A Gradle builder to build Java projects and publish to Maven central.

v1.9.0: JReleaser builder

Commits

Updates terraform-linters/setup-tflint from 3.0.0 to 3.1.0

Release notes

Sourced from terraform-linters/setup-tflint's releases.

v3.1.0

What's Changed

Features

Documentation

Dependencies

New Contributors

Full Changelog: terraform-linters/setup-tflint@v3...v3.1.0

Commits
  • 3bb7d77 github: update features changelog header
  • 10d4e61 github: add changelog config
  • ada8239 docs: add guidance on auth for GHES users (#186)
  • 7e14708 build(deps): Bump @​octokit/rest from 19.0.13 to 20.0.1 (#184)
  • 6314b8f build(deps-dev): Bump eslint-plugin-import from 2.27.5 to 2.28.0 (#180)
  • 1769c10 build(deps-dev): Bump eslint from 8.44.0 to 8.46.0 (#181)
  • 65c7c4e build(deps-dev): Bump prettier from 2.8.8 to 3.0.0 (#182)
  • 81adfac build(deps-dev): Bump jest from 29.5.0 to 29.6.2 (#183)
  • 0da770d build(deps): Bump semver from 6.3.0 to 6.3.1 (#179)
  • 39c4c30 build(deps): bump @​octokit/rest from 19.0.5 to 19.0.13 (#177)
  • Additional commits viewable in compare view

Updates fluxcd/flux2 from 2.0.1 to 2.1.0

Release notes

Sourced from fluxcd/flux2's releases.

v2.1.0

Highlights

Flux v2.1.0 is a feature release. Users are encouraged to upgrade for the best experience.

The Flux APIs were extended with new opt-in features in a backwards-compatible manner.

The Flux Git capabilities have been improved with support for Git push options, Git refspec, Gerrit, HTTP/S and SOCKS5 proxies.

The Flux alerting capabilities have been extended with Datadog support.

The Flux controllers come with performance improvements when reconciling Helm repositories with large indexes (80% memory reduction), and when reconciling Flux Kustomizations with thousands of resources (x4 faster server-side apply). The load distribution has been improved when reconciling Flux objects in parallel to reduce CPU and memory spikes.

❤️ Big thanks to all the Flux contributors that helped us with this release!

Deprecations

Flux v2.1.0 comes with support for Kubernetes TLS Secrets when referring to secrets containing TLS certs, and deprecates the usage of caFile, keyFile and certFile keys.

For more details about the TLS changes please see the Kubernetes TLS Secrets section.

Flux v2.1.0 comes with major improvements to the Prometheus monitoring stack. Starting with this version, Flux is leveraging the kube-state-metrics CRD exporter to report metrics containing rich information about Flux reconciliation status e.g. Git revision, Helm chart version, OCI artifacts digests, etc. The gotk_reconcile_condition metrics was deprecated in favor of the gotk_resource_info.

For more details about the new monitoring stack please see the Flux Prometheus metrics documentation and the flux2-monitoring-example repository.

API changes

GitRepository v1

The GitRepository API was extended with the following fields:

  • .spec.proxySecretRef.name is an optional field used to specify the name of a Kubernetes Secret that contains the HTTP/S or SOCKS5 proxy settings.
  • .spec.verify.mode now support one of the following values HEAD, Tag, TagAndHEAD.

Kustomization v1

The Kustomization API was extended with two apply policies IfNotPresent and Ignore.

Changing the apply behaviour for specific Kubernetes resources, can be done using the following annotations:

Annotation Default Values Role
kustomize.toolkit.fluxcd.io/ssa Override - Override- Merge- IfNotPresent- Ignore Apply policy
kustomize.toolkit.fluxcd.io/force Disabled - Enabled- Disabled Recreate policy
kustomize.toolkit.fluxcd.io/prune Enabled - Enabled- Disabled Delete policy

The IfNotPresent policy instructs the controller to only apply the Kubernetes resources if they are not present on the cluster. This policy can be used for Kubernetes Secrets and ValidatingWebhookConfigurations managed by cert-manager, where Flux creates the resources with fields that are later on mutated by other controllers.

... (truncated)

Commits
  • 22cf986 Merge pull request #4169 from fluxcd/monitoring-deprecation
  • d80b697 Add monitoring configuration deprecation notice
  • 8b9aaad Merge pull request #4189 from fluxcd/update-deps
  • 4080d58 tests/azure: update dependencies
  • 7c2072e Update dependencies
  • d21e779 Merge pull request #4186 from fluxcd/update-components
  • f7e5223 Update toolkit components
  • 525bd21 Merge pull request #4147 from fluxcd/tls-flags
  • 8df27d8 modify flux create secret tls to create secrets of type TLS
  • 6464d6c add deprecation warning per secret key field and constant
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the ci group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [actions/setup-go](https://github.com/actions/setup-go) | `4.0.1` | `4.1.0` |
| [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) | `4.3.0` | `4.4.0` |
| [slsa-framework/slsa-github-generator](https://github.com/slsa-framework/slsa-github-generator) | `1.8.0` | `1.9.0` |
| [terraform-linters/setup-tflint](https://github.com/terraform-linters/setup-tflint) | `3.0.0` | `3.1.0` |
| [fluxcd/flux2](https://github.com/fluxcd/flux2) | `2.0.1` | `2.1.0` |


Updates `actions/setup-go` from 4.0.1 to 4.1.0
- [Release notes](https://github.com/actions/setup-go/releases)
- [Commits](actions/setup-go@fac708d...93397be)

Updates `goreleaser/goreleaser-action` from 4.3.0 to 4.4.0
- [Release notes](https://github.com/goreleaser/goreleaser-action/releases)
- [Commits](goreleaser/goreleaser-action@336e299...3fa32b8)

Updates `slsa-framework/slsa-github-generator` from 1.8.0 to 1.9.0
- [Release notes](https://github.com/slsa-framework/slsa-github-generator/releases)
- [Changelog](https://github.com/slsa-framework/slsa-github-generator/blob/main/CHANGELOG.md)
- [Commits](slsa-framework/slsa-github-generator@v1.8.0...v1.9.0)

Updates `terraform-linters/setup-tflint` from 3.0.0 to 3.1.0
- [Release notes](https://github.com/terraform-linters/setup-tflint/releases)
- [Commits](terraform-linters/setup-tflint@ba6bb29...3bb7d77)

Updates `fluxcd/flux2` from 2.0.1 to 2.1.0
- [Release notes](https://github.com/fluxcd/flux2/releases)
- [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml)
- [Commits](fluxcd/flux2@9b31624...22cf986)

---
updated-dependencies:
- dependency-name: actions/setup-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: goreleaser/goreleaser-action
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: slsa-framework/slsa-github-generator
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: terraform-linters/setup-tflint
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
- dependency-name: fluxcd/flux2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: ci
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added area/ci CI related issues and pull requests dependencies Pull requests that update a dependency labels Aug 29, 2023
@stefanprodan stefanprodan merged commit 4771d14 into main Aug 29, 2023
5 checks passed
@stefanprodan stefanprodan deleted the dependabot/github_actions/ci-564bdf635c branch August 29, 2023 08:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/ci CI related issues and pull requests dependencies Pull requests that update a dependency
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant