Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 10, 2025

Bumps the go-deps group with 4 updates in the / directory: github.com/hashicorp/vault/api, github.com/stretchr/objx, golang.org/x/crypto and sigs.k8s.io/controller-runtime.

Updates github.com/hashicorp/vault/api from 1.21.0 to 1.22.0

Commits
  • 526ac82 Merge remote-tracking branch 'remotes/from/ce/main'
  • 8041281 Backport Update vault-plugin-secrets-terraform to v0.13.0 into ce/main (#9814)
  • dce7d8a Backport Update vault-plugin-secrets-kubernetes to v0.12.0 into ce/main (#9811)
  • 9cae193 Merge remote-tracking branch 'remotes/from/ce/main'
  • abde734 UI: Fix MFA validation timing issue (#9774) (#9799)
  • da04c45 Merge remote-tracking branch 'remotes/from/ce/main'
  • bf32d52 [UI] Ember Data Migration - KV Cleanup (#9623) (#9794)
  • 0c3dcbc Backport Update vault-plugin-auth-azure to v0.22.0 into ce/main (#9782)
  • 69b8abb Merge remote-tracking branch 'remotes/from/ce/main'
  • 8cf2228 Fix auth method config submit following ember data migration (#9755) (#9793)
  • Additional commits viewable in compare view

Updates github.com/stretchr/objx from 0.5.2 to 0.5.3

Release notes

Sourced from github.com/stretchr/objx's releases.

v0.5.3

What's Changed

New Contributors

Full Changelog: stretchr/objx@v0.5.2...v0.5.3

Commits
  • b152998 Replace testify assertions with custom testing helpers (#159)
  • f248e2b Remove duplicate module cache from CI (#162)
  • 8175ed5 Extend test coverage to include go 1.25 (#161)
  • 3d14c8f Bump actions/setup-go from 5 to 6 (#158)
  • 15bffc6 Remove codeclimate integration (#160)
  • b94b78f Bump github.com/stretchr/testify from 1.11.0 to 1.11.1 (#157)
  • 0b52e9c Bump github.com/stretchr/testify from 1.10.0 to 1.11.0 (#156)
  • 07525db Bump actions/checkout from 4 to 5 (#155)
  • f3a7a99 Add syntax highlighting in README (#153)
  • 0c86e82 Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#152)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.42.0 to 0.43.0

Commits
  • 627cb89 go.mod: update golang.org/x dependencies
  • dca4914 acme: fix autocert TestHTTPHandlerDefaultFallback
  • 1336e21 x509roots/fallback: update bundle
  • 2beaa59 ssh: add VerifiedPublicKeyCallback
  • 66c3d8c ssh: add support for FIPS mode
  • ddb4e80 ssh: remove custom contains, use slices.Contains
  • f4d47b0 ssh: return clearer error when signature algorithm is used as key format
  • 96dc232 x509roots/fallback/bundle: add bundle package to export root certs
  • 8c9ba31 all: freeze and deprecate more packages
  • 559e062 ssh/agent: return an error for unexpected message types
  • See full diff in compare view

Updates sigs.k8s.io/controller-runtime from 0.19.4 to 0.19.7

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.19.7

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.19.6...v0.19.7

v0.19.6

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.19.5...v0.19.6

v0.19.5

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.19.4...v0.19.5

Commits
  • 5fe7bb3 Merge pull request #3148 from k8s-infra-cherrypick-robot/cherry-pick-3147-to-...
  • 97bb1ff Revert "[release-0.20] ✨ Expose all Go runtime metrics (#3100)"
  • 56df553 Merge pull request #3146 from k8s-infra-cherrypick-robot/cherry-pick-3143-to-...
  • d2145c0 bug: Fakeclient: Fix dataraces when writing to the scheme
  • 13450ba Merge pull request #3128 from k8s-infra-cherrypick-robot/cherry-pick-3126-to-...
  • a2a9f54 fix: cache should list out of global cache when present and necessary
  • cd644c0 [release-0.19] ✨ Expose all Go runtime metrics (#3101)
  • e022b91 Merge pull request #3087 from tareksha/typed_waitforsync
  • b2c2171 Update controller_suite_test.go
  • 8017666 🐛fix(controller): support WaitForSync in custom TypedSyncingSource (#3084)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-deps group with 4 updates in the / directory: [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault), [github.com/stretchr/objx](https://github.com/stretchr/objx), [golang.org/x/crypto](https://github.com/golang/crypto) and [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime).


Updates `github.com/hashicorp/vault/api` from 1.21.0 to 1.22.0
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG-v1.10-v1.15.md)
- [Commits](hashicorp/vault@api/v1.21.0...api/v1.22.0)

Updates `github.com/stretchr/objx` from 0.5.2 to 0.5.3
- [Release notes](https://github.com/stretchr/objx/releases)
- [Commits](stretchr/objx@v0.5.2...v0.5.3)

Updates `golang.org/x/crypto` from 0.42.0 to 0.43.0
- [Commits](golang/crypto@v0.42.0...v0.43.0)

Updates `sigs.k8s.io/controller-runtime` from 0.19.4 to 0.19.7
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.19.4...v0.19.7)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/vault/api
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/stretchr/objx
  dependency-version: 0.5.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: golang.org/x/crypto
  dependency-version: 0.43.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.19.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code skip-changelog Use this label in Pull Request to not require new changelog entry file labels Oct 10, 2025
@dependabot dependabot bot requested a review from a team as a code owner October 10, 2025 13:23
@github-actions
Copy link

⚠️ (this preview might not be accurate if the PR is not rebased on current master branch)

MCK 1.5.0 Release Notes

New Features

  • Improve automation agent certificate rotation: the agent now restarts automatically when its certificate is renewed, ensuring smooth operation without manual intervention and allowing seamless certificate updates without requiring manual Pod restarts.

Bug Fixes

  • MongoDBMultiCluster: fix resource stuck in Pending state if any clusterSpecList item has 0 members. After the fix, a value of 0 members is handled correctly, similarly to how it's done in the MongoDB resource.
  • MultiClusterSharded: Blocked removing non-zero member cluster from MongoDB resource. This prevents from scaling down member cluster without current configuration available, which could lead to unexpected issues.

@MaciejKaras MaciejKaras merged commit 87b203f into master Oct 13, 2025
37 checks passed
@MaciejKaras MaciejKaras deleted the dependabot/go_modules/go-deps-fe285367dd branch October 13, 2025 12:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code skip-changelog Use this label in Pull Request to not require new changelog entry file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants