Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the security group across 1 directory with 5 updates #1531

Merged
merged 1 commit into from
Apr 26, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 26, 2024

Bumps the security group with 5 updates in the / directory:

Package From To
github.com/microsoft/go-mssqldb 1.7.0 1.7.1
github.com/vmware-tanzu/velero 1.13.1 1.13.2
go.opentelemetry.io/otel 1.25.0 1.26.0
go.opentelemetry.io/otel/sdk 1.25.0 1.26.0
sigs.k8s.io/controller-runtime 0.17.3 0.18.0

Updates github.com/microsoft/go-mssqldb from 1.7.0 to 1.7.1

Release notes

Sourced from github.com/microsoft/go-mssqldb's releases.

v1.7.1

What's Changed

New Contributors

Full Changelog: microsoft/go-mssqldb@v1.5.0...v1.7.1

Changelog

Sourced from github.com/microsoft/go-mssqldb's changelog.

Changelog

Commits

Updates github.com/vmware-tanzu/velero from 1.13.1 to 1.13.2

Release notes

Sourced from github.com/vmware-tanzu/velero's releases.

v1.13.2

2024-04-17

Download

https://github.com/vmware-tanzu/velero/releases/tag/v1.13.2

Container Image

velero/velero:v1.13.2

Documentation

https://velero.io/docs/v1.13/

Upgrading

https://velero.io/docs/v1.13/upgrade-to-1.13/

All changes

v1.13.2-rc.1

2024-04-15

Download

https://github.com/vmware-tanzu/velero/releases/tag/v1.13.2-rc.1

Container Image

velero/velero:v1.13.2-rc.1

Documentation

https://velero.io/docs/v1.13/

Upgrading

https://velero.io/docs/v1.13/upgrade-to-1.13/

All changes

Commits
  • 4d961fb Merge pull request #7652 from ywk253100/240410_changelog
  • 17da80f Add changelog for v1.13.2
  • 8f7121d Merge pull request #7606 from blackpiglet/bump_golang_version
  • 2400651 Bump Golang version, and bump protobuf version.
  • 35177cd Merge pull request #7644 from ywk253100/240409_list
  • 27a4bfc Empty the list before next round of listing
  • 2c57ed8 Merge pull request #7645 from ywk253100/240409_action
  • c35fd60 Upgrade codecov action to v4
  • 9f9464c Merge pull request #7586 from Lyndon-Li/release-1.13
  • 6bcd5be Merge branch 'release-1.13' into release-1.13
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.25.0 to 1.26.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.26.0/0.48.0/0.2.0-alpha] 2024-04-24

Added

  • Add Recorder in go.opentelemetry.io/otel/log/logtest to facilitate testing the log bridge implementations. (#5134)
  • Add span flags to OTLP spans and links exported by go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#5194)
  • Make the initial alpha release of go.opentelemetry.io/otel/sdk/log. This new module contains the Go implementation of the OpenTelemetry Logs SDK. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • Make the initial alpha release of go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. This new module contains an OTLP exporter that transmits log telemetry using HTTP. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • Make the initial alpha release of go.opentelemetry.io/otel/exporters/stdout/stdoutlog. This new module contains an exporter prints log records to STDOUT. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • The go.opentelemetry.io/otel/semconv/v1.25.0 package. The package contains semantic conventions from the v1.25.0 version of the OpenTelemetry Semantic Conventions. (#5254)

Changed

  • Update go.opentelemetry.io/proto/otlp from v1.1.0 to v1.2.0. (#5177)
  • Improve performance of baggage member character validation in go.opentelemetry.io/otel/baggage. (#5214)
Commits
  • 9656d0a Release 1.26.0/0.48.0/0.2.0-alpha (#5260)
  • 29e1c7e Add custom ring implementation to the BatchProcessor (#5237)
  • baeb560 sdk/log: Fix doc for LoggerProvider.ForceFlush and LoggerProvider.Shutdown (#...
  • ae55e29 Remove left-over TODO in otlploghttp (#5256)
  • fe8e3a1 Semconv v1.25.0 (#5254)
  • bf37c5a Revert the usage of go.opentelemetry.io/proto/slim (#5253)
  • b34cfc4 Default implementation for empty BatchProcessor (#5239)
  • 9370c5a Implement resource serialization for stdoutlog (#5213)
  • 6e92163 otlpmetrichttp: Use go.opentelemetry.io/proto/slim/otlp (#5222)
  • f885333 build(deps): bump golang.org/x/vuln in /internal/tools (#5245)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/sdk from 1.25.0 to 1.26.0

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.26.0/0.48.0/0.2.0-alpha] 2024-04-24

Added

  • Add Recorder in go.opentelemetry.io/otel/log/logtest to facilitate testing the log bridge implementations. (#5134)
  • Add span flags to OTLP spans and links exported by go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#5194)
  • Make the initial alpha release of go.opentelemetry.io/otel/sdk/log. This new module contains the Go implementation of the OpenTelemetry Logs SDK. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • Make the initial alpha release of go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. This new module contains an OTLP exporter that transmits log telemetry using HTTP. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • Make the initial alpha release of go.opentelemetry.io/otel/exporters/stdout/stdoutlog. This new module contains an exporter prints log records to STDOUT. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • The go.opentelemetry.io/otel/semconv/v1.25.0 package. The package contains semantic conventions from the v1.25.0 version of the OpenTelemetry Semantic Conventions. (#5254)

Changed

  • Update go.opentelemetry.io/proto/otlp from v1.1.0 to v1.2.0. (#5177)
  • Improve performance of baggage member character validation in go.opentelemetry.io/otel/baggage. (#5214)
Commits
  • 9656d0a Release 1.26.0/0.48.0/0.2.0-alpha (#5260)
  • 29e1c7e Add custom ring implementation to the BatchProcessor (#5237)
  • baeb560 sdk/log: Fix doc for LoggerProvider.ForceFlush and LoggerProvider.Shutdown (#...
  • ae55e29 Remove left-over TODO in otlploghttp (#5256)
  • fe8e3a1 Semconv v1.25.0 (#5254)
  • bf37c5a Revert the usage of go.opentelemetry.io/proto/slim (#5253)
  • b34cfc4 Default implementation for empty BatchProcessor (#5239)
  • 9370c5a Implement resource serialization for stdoutlog (#5213)
  • 6e92163 otlpmetrichttp: Use go.opentelemetry.io/proto/slim/otlp (#5222)
  • f885333 build(deps): bump golang.org/x/vuln in /internal/tools (#5245)
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.17.3 to 0.18.0

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.18.0

⚠️ Breaking Changes

  • Bump to k8s.io/* v1.30 (#2693 #2754 #2765 #2776 #2786)
  • Remove deprecated v1alpha1.ControllerManagerConfiguration (#2648)
  • admission.Decoder is now an interface (#2736)
  • Source, Event, Predicate, Handler: Add generics support (#2783 #2796)
  • client: Fix SubResourceCreateOptions signature in subresource client (#2766)

✨ New Features

  • cache: Add TransformStripManagedFields transform func (#2791)
  • client: Add client.WithFieldOwner to configure client-wide FieldManager (#2771 #2777)
  • controller: Add NewQueue option (#2767)
  • manager: Export HTTP server runnable implementation (#2473)
  • metrics/server: Add ListenConfig option (#2519)

🐛 Bug Fixes

  • builder/webhook: Return error if For() is used multiple times (#2740)
  • cache: Keep selectors when byObject.Namespaces is defaulted (#2747)
  • cache: Prevent race when informers are started more than once (#2758)
  • fake client: Allow fakeclient to patch CR with no resourceVersion (#2725)
  • fake client: Do not consider an apply patch to be a strategic merge patch (#2679)
  • manager: Prevent leader election when shutting down a non-elected manager (#2724)
  • manager: Runnable group should check if stopped before enqueueing (#2757)
  • restmapper: Clean restmapper cache if a version is notFound (#2663)
  • restmapper: Fix cache invalidation (#2687)

🌱 Others

  • ci: Add OSSF scorecard action (#2714)
  • ci: Improve github actions dependencies versions and permissions (#2715)
  • ci: Pin checkout action in golangci-lint action, bump checkout action, use consistent tag format (#2729)
  • ci: Update golangci-lint to v1.57.2 (#2708 #2751)
  • ci: Update scorecard github action (#2728)
  • ci: Use go-install for versioned dependencies (#2710)
  • envtest: WaitForDefaultNamespace while starting up envtest (#2668)
  • owners: Cleanup owners files (#2730)
  • owners: Remove outdated testing framework approvers (#2709)
  • predicate: Compare labels and annotations using maps.Equal (#2705)
  • typos: Fix typo of CacheReader comment (#2773)
  • typos: Fix typo in channel option (#2792)
  • typos: Minor typo fixes in docstrings (#2727)

📖 Additionally, there have been 3 contributions to our documentation and book. (#2712, #2770, #2789)

Dependencies

... (truncated)

Commits
  • ed81fa6 Merge pull request #2796 from alvaroaleman/mark
  • b35cd6b 📖 Mark Typed Handlers as experimental
  • b74908f Merge pull request #2793 from kubernetes-sigs/dependabot/github_actions/actio...
  • a9db208 Merge pull request #2794 from kubernetes-sigs/dependabot/github_actions/actio...
  • 757ae66 🌱 Bump actions/upload-artifact from 4.3.1 to 4.3.3
  • 18ae9e0 🌱 Bump actions/checkout from 4.1.2 to 4.1.3
  • 4f00207 Merge pull request #2792 from sbueringer/pr-fix-typo
  • 9fb4913 Fix typo in channel option
  • 5823d1b Merge pull request #2791 from alvaroaleman/add-default-transform
  • ae0f6ab Merge pull request #2783 from alvaroaleman/compatible-generics
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the security group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/microsoft/go-mssqldb](https://github.com/microsoft/go-mssqldb) | `1.7.0` | `1.7.1` |
| [github.com/vmware-tanzu/velero](https://github.com/vmware-tanzu/velero) | `1.13.1` | `1.13.2` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.25.0` | `1.26.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.25.0` | `1.26.0` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.17.3` | `0.18.0` |



Updates `github.com/microsoft/go-mssqldb` from 1.7.0 to 1.7.1
- [Release notes](https://github.com/microsoft/go-mssqldb/releases)
- [Changelog](https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md)
- [Commits](microsoft/go-mssqldb@v1.7.0...v1.7.1)

Updates `github.com/vmware-tanzu/velero` from 1.13.1 to 1.13.2
- [Release notes](https://github.com/vmware-tanzu/velero/releases)
- [Changelog](https://github.com/vmware-tanzu/velero/blob/main/CHANGELOG.md)
- [Commits](vmware-tanzu/velero@v1.13.1...v1.13.2)

Updates `go.opentelemetry.io/otel` from 1.25.0 to 1.26.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.25.0...v1.26.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.25.0 to 1.26.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.25.0...v1.26.0)

Updates `sigs.k8s.io/controller-runtime` from 0.17.3 to 0.18.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.17.3...v0.18.0)

---
updated-dependencies:
- dependency-name: github.com/microsoft/go-mssqldb
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: github.com/vmware-tanzu/velero
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: go.opentelemetry.io/otel
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
...

Signed-off-by: dependabot[bot] <support@github.com>
@xavpaice xavpaice merged commit f438467 into main Apr 26, 2024
27 checks passed
@xavpaice xavpaice deleted the dependabot/go_modules/security-22c694a804 branch April 26, 2024 03:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant