Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): bump the go group across 1 directory with 26 updates #602

Closed
wants to merge 1 commit into from
Closed

chore(deps): bump the go group across 1 directory with 26 updates #602

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 23, 2025 •
edited
Loading

Bumps the go group with 16 updates in the / directory:

Package From To
cuelang.org/go 0.9.0 0.12.0
github.com/Masterminds/semver/v3 3.2.1 3.3.1
github.com/containers/image/v5 5.31.0 5.34.0
github.com/cyphar/filepath-securejoin 0.3.6 0.4.1
github.com/fluxcd/helm-controller/api 1.0.1 1.2.0
github.com/fluxcd/kustomize-controller/api 1.3.0 1.5.0
github.com/fluxcd/pkg/apis/event 0.9.0 0.16.0
github.com/fluxcd/pkg/http/fetch 0.11.0 0.15.0
github.com/fluxcd/pkg/kustomize 1.11.0 1.16.0
github.com/fluxcd/pkg/runtime 0.47.1 0.53.1
github.com/fluxcd/source-controller/api 1.3.0 1.5.0
github.com/mandelsoft/vfs 0.4.3 0.4.4
github.com/tetratelabs/wazero 1.7.2 1.9.0
helm.sh/helm/v3 3.15.1 3.17.1
sigs.k8s.io/e2e-framework 0.2.0 0.6.0
github.com/mikefarah/yq/v4 4.44.1 4.45.1

Updates cuelang.org/go from 0.9.0 to 0.12.0

Updates github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.1

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.3.1

What's Changed

Full Changelog: Masterminds/semver@v3.3.0...v3.3.1

v3.3.0

What's Changed

New Contributors

Full Changelog: Masterminds/semver@v3.2.1...v3.3.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

Changelog

3.3.0 (2024-08-27)

Added

Changed

  • #241: Simplify StrictNewVersion parsing (thanks @​grosser)
  • Testing support up through Go 1.23
  • Minimum version set to 1.21 as this is what's tested now
  • Fuzz testing now supports caching
Commits
  • 1558ca3 Merge pull request #253 from mattfarina/fix-bad-versions
  • 252dd61 Fix for allowing some version that were invalid
  • e6e3d4d Merge pull request #249 from mattfarina/update-changelog-3.3.0
  • e80c4ea Updating changelog for 3.3.0
  • 80427ad Merge pull request #248 from mattfarina/bump-min-version
  • b610837 bumping min version in go.mod based on what's tested
  • a4cccd8 Merge pull request #246 from mattfarina/bump-go-1.23
  • 7c178cf Updating the testing version of Go used
  • 29f94c1 Merge pull request #241 from grosser/grosser/validate
  • 2cf1b16 Merge pull request #245 from mattfarina/remove-vert
  • Additional commits viewable in compare view

Updates github.com/containers/image/v5 from 5.31.0 to 5.34.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.34.0

What's Changed

... (truncated)

Commits
  • 51a5d96 Bump to c/image v5.34.0
  • 771660e Bump c/storage to v1.57.1
  • 7f0e59d Merge pull request #2696 from Luap99/ENOENT
  • 3f17e2e ignore ENOENT errors when parsing .crt files
  • c9771a8 ignore ENOENT errors when parsing registries.conf.d files
  • 1294122 ignore ENOENT errors when parsing registries.d files
  • b5c6aff Merge pull request #2693 from containers/renovate/github.jparrowsec.cn-docker-docker-27.x
  • 1683fc2 Update module github.com/docker/docker to v27.5.1+incompatible
  • 16f7e1e Merge pull request #2692 from containers/renovate/github.jparrowsec.cn-docker-cli-27.x
  • 30f0d87 Update module github.com/docker/cli to v27.5.1+incompatible
  • Additional commits viewable in compare view

Updates github.com/cyphar/filepath-securejoin from 0.3.6 to 0.4.1

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.4.1

This release fixes a regression introduced in one of the hardening features added to filepath-securejoin 0.4.0.

  • The restrictions added for root paths passed to SecureJoin in 0.4.0 was found to be too strict and caused some regressions when folks tried to update, so this restriction has been relaxed to only return an error if the path contains a .. component. We still recommend users use filepath.Clean (and even filepath.EvalSymlinks) on the root path they are using, but at least you will no longer be punished for "trivial" unclean paths. (#46)

Signed-off-by: Aleksa Sarai [email protected]

v0.4.0

This release primarily includes a few minor breaking changes to make the MkdirAll and SecureJoin interfaces more robust against accidental misuse.

  • SecureJoin(VFS) will now return an error if the provided root is not a filepath.Clean'd path.

    While it is ultimately the responsibility of the caller to ensure the root is a safe path to use, passing a path like /symlink/.. as a root would result in the SecureJoin'd path being placed in / even though /symlink/.. might be a different directory, and so we should more strongly discourage such usage.

    All major users of securejoin.SecureJoin already ensure that the paths they provide are safe (and this is ultimately a question of user error), but removing this foot-gun is probably a good idea. Of course, this is necessarily a breaking API change (though we expect no real users to be affected by it).

    Thanks to Erik Sjölund, who initially reported this issue as a possible security issue.

  • MkdirAll and MkdirHandle now take an os.FileMode-style mode argument instead of a raw unix.S_*-style mode argument, which may cause compile-time type errors depending on how you use filepath-securejoin. For most users, there will be no change in behaviour aside from the type change (as the bottom 0o777 bits are the same in both formats, and most users are probably only using those bits).

    However, if you were using unix.S_ISVTX to set the sticky bit with MkdirAll(Handle) you will need to switch to os.ModeSticky otherwise you will get a runtime error with this update. In addition, the error message you will get from passing unix.S_ISUID and unix.S_ISGID will be different as they are treated as invalid bits now (note that previously passing said bits was also an error).

... (truncated)

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.4.1] - 2025-01-28

Fixed

  • The restrictions added for root paths passed to SecureJoin in 0.4.0 was found to be too strict and caused some regressions when folks tried to update, so this restriction has been relaxed to only return an error if the path contains a .. component. We still recommend users use filepath.Clean (and even filepath.EvalSymlinks) on the root path they are using, but at least you will no longer be punished for "trivial" unclean paths.

[0.4.0] - 2025-01-13

Breaking

  • SecureJoin(VFS) will now return an error if the provided root is not a filepath.Clean'd path.

    While it is ultimately the responsibility of the caller to ensure the root is a safe path to use, passing a path like /symlink/.. as a root would result in the SecureJoin'd path being placed in / even though /symlink/.. might be a different directory, and so we should more strongly discourage such usage.

    All major users of securejoin.SecureJoin already ensure that the paths they provide are safe (and this is ultimately a question of user error), but removing this foot-gun is probably a good idea. Of course, this is necessarily a breaking API change (though we expect no real users to be affected by it).

    Thanks to Erik Sjölund, who initially reported this issue as a possible security issue.

  • MkdirAll and MkdirHandle now take an os.FileMode-style mode argument instead of a raw unix.S_*-style mode argument, which may cause compile-time type errors depending on how you use filepath-securejoin. For most users, there will be no change in behaviour aside from the type change (as the bottom 0o777 bits are the same in both formats, and most users are probably only using those bits).

    However, if you were using unix.S_ISVTX to set the sticky bit with MkdirAll(Handle) you will need to switch to os.ModeSticky otherwise you will get a runtime error with this update. In addition, the error message you will get from passing unix.S_ISUID and unix.S_ISGID will be different as they are treated as invalid bits now (note that previously passing said bits was also an error).

Commits
  • 7abd870 VERSION: release v0.4.1
  • 509a359 merge #47 into cyphar/filepath-securejoin:main
  • fbaef26 join: loosen cleanliness requirements for SecureJoin root
  • 54460df merge #45 into cyphar/filepath-securejoin:main
  • 14e6cfe VERSION: back to development
  • 9a17e6b VERSION: release v0.4.0
  • e410d4a merge #44 into cyphar/filepath-securejoin:main
  • ea4e5b6 gha: add GOARCH=386 build check
  • 0c2fbe6 mkdirall: switch to os.FileMode argument
  • f3a512c merge #43 into cyphar/filepath-securejoin:main
  • Additional commits viewable in compare view

Updates github.com/fluxcd/helm-controller/api from 1.0.1 to 1.2.0

Release notes

Sourced from github.com/fluxcd/helm-controller/api's releases.

v1.2.0

Changelog

v1.2.0 changelog

Container images

  • docker.io/fluxcd/helm-controller:v1.2.0
  • ghcr.io/fluxcd/helm-controller:v1.2.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.1.0

Changelog

v1.1.0 changelog

Container images

  • docker.io/fluxcd/helm-controller:v1.1.0
  • ghcr.io/fluxcd/helm-controller:v1.1.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/helm-controller/api's changelog.

1.2.0

Release date: 2025-02-19

This minor release comes with various bug fixes and improvements.

In addition, the Kubernetes dependencies have been updated to v1.32.1, Helm has been updated to v3.17.1 and various other controller dependencies have been updated to their latest version.

Fixes:

  • Replace _ with + when verifying the chart version matches the OCI artifact tag #1102
  • fix: handle "leader changed" errors #1084
  • Make ValuesReference an alias for backwards compat #1126
  • Fix install and upgrade applying subchart CRDs when condition is false #1123
  • fix: use HelmRelease max history for rollback remediation #1169

Improvements:

1.1.0

Release date: 2024-09-26

This minor release comes with various bug fixes and improvements.

The chart values schema

... (truncated)

Commits
  • 8e4de32 Merge pull request #1174 from fluxcd/release-v1.2.0
  • 9463301 Release v1.2.0
  • 94c60d5 Add changelog entry for v1.2.0
  • 34d0036 Merge pull request #1170 from fluxcd/dependabot/go_modules/go-deps-d8ecef8942
  • e22eb27 Bump the go-deps group across 1 directory with 2 updates
  • 93eef0d Merge pull request #1173 from fluxcd/upgrade-helm
  • 25f3db5 Upgrade helm to v3.17.1
  • 3385e3f Merge pull request #1167 from fluxcd/dependabot/github_actions/ci-4ac27b1555
  • f80b06b Bump the ci group across 1 directory with 2 updates
  • da8af05 Merge pull request #1171 from fluxcd/upgrade-deps
  • Additional commits viewable in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.3.0 to 1.5.0

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.5.0

Changelog

v1.5.0 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.5.0
  • ghcr.io/fluxcd/kustomize-controller:v1.5.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.4.0

Changelog

v1.4.0 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.4.0
  • ghcr.io/fluxcd/kustomize-controller:v1.4.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.5.0

Release date: 2025-02-18

This minor release comes with various bug fixes and improvements.

The controller has been updated to Kustomize v5.6, please see the kubernetes-sigs/kustomize changelog for more details.

The Kustomization API now supports custom health checks for Custom Resources through Common Expression Language (CEL) expressions. See docs.

The controller now sends an origin revision from OCI artifact annotations to notification-controller on events, which is useful for updating commit statuses on the notification providers that support this feature. See docs.

It is now also possible to control whether or not kustomize-controller will orphan resources when a Kustomization is deleted. See docs.

In addition, the Kubernetes dependencies have been updated to v1.32.1 and various other controller dependencies have been updated to their latest version.

Fixes:

  • Clarify precedence in Kustomization substituteFrom #1301
  • Remove deprecated object metrics from controllers #1305

Improvements:

  • Enable decryption of secrets generated by Kustomize components #1283
  • Added decryption of Kustomize patches and refactor SOPS tests #1286
  • Allow control of finalization garbage collection #1314
  • Add OCI revision to events #1338
  • [RFC-0009] Add CEL custom healthchecks #1344
  • Add GroupChangeLog feature gate to fix es indexing cardinality #1361
  • Various dependency updates #1302 #1304

... (truncated)

Commits
  • 9ce7db7 Merge pull request #1365 from fluxcd/release-v1.5.0
  • 676fc61 Release v1.5.0
  • 5d2bcf9 Add changelog entry for v1.5.0
  • fc2a95e Merge pull request #1358 from fluxcd/dependabot/github_actions/ci-4ac27b1555
  • 3b0de40 Merge pull request #1364 from fluxcd/dependabot/go_modules/go-deps-4d974c417d
  • f82ae38 Merge pull request #1362 from fluxcd/upgrade-deps
  • cc89da1 Bump the ci group across 1 directory with 2 updates
  • 6790333 Bump golang.org/x/net in the go-deps group across 1 directory
  • 947be82 Merge pull request #1361 from 94DanielBrown/main
  • 230b55f chore: add GroupChangeLog feature gate to fix es indexing cardinality
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/event from 0.9.0 to 0.16.0

Commits
  • 91eda6e Merge pull request #694 from fluxcd/git-deps-up
  • 2a64584 Use gomega in sourceignore
  • 46577cd Update golang.org dependencies
  • e6b6af7 Merge pull request #685 from knutgoetz/chore/gogit/delete-gogiterror-function
  • cbc2172 Delete obsolete goGitError function
  • 02723c3 Merge pull request #693 from fluxcd/go-git-v5.10.1
  • 3715de1 Update go-git to v5.10.1
  • ce91255 Merge pull request #692 from fluxcd/ssa-nits
  • 8fc4505 ssa: prevent unnecessary DeepCopy
  • cc07605 Merge pull request #691 from fluxcd/jsondiff-include-obj
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/meta from 1.5.0 to 1.10.0

Commits
  • 2f763a4 Merge pull request #857 from fluxcd/custom-healthchecks
  • a6353b2 Add healthcheck expressions to kustomize types
  • af0f283 Merge pull request #859 from fluxcd/cel-meta
  • 1178930 Add InvalidCELExpressionReason to apis/meta
  • f39dac4 Merge pull request #861 from fluxcd/deps-kube-v0.32.1
  • 70e88cb Update dependencies
  • f59d360 Merge pull request #850 from kane8n/support-sparse-checkout
  • a033d2f support sparse checkout
  • 528bc56 Merge pull request #856 from fluxcd/get-revision
  • a189152 Add GetRevision() to Event API
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/http/fetch from 0.11.0 to 0.15.0

Commits
  • cc785fa Merge pull request #686 from fluxcd/k8s-1.28
  • 1d7d31b all: Group github.com/fluxcd/cli-utils imports
  • 09ba5d8 runtime: Add pprof.GetHandlers to help setup the metrics server
  • 768085d runtime: Update sigs.k8s.io/controller-runtime to v0.16.3
  • 2e007cb ssa: Update Kubernetes to v1.28.4
  • e7686cf kustomize: Update Kustomize to v5.2.1
  • 3be575d oci: Update sigs.k8s.io/controller-runtime to v0.16.3
  • 7f72436 helmtestserver: Update Helm to v3.13.2
  • fe543f5 git: Update golang.org/x/crypto to v0.15.0
  • 129adfd apis: Update Kubernetes to v1.28
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/kustomize from 1.11.0 to 1.16.0

Commits
  • e454462 Merge pull request #864 from fluxcd/internal-deps-bump
  • 2959020 Update internal dependencies
  • c964ce7 Merge pull request #858 from fluxcd/custom-healthchecks-impl
  • 62d235c Add CEL library with custom healthchecks to runtime
  • 243510f Merge pull request #863 from fluxcd/dependabot/github_actions/ci-83dfb6cda2
  • 3cffbeb build(deps): bump the ci group across 1 directory with 3 updates
  • 2f763a4 Merge pull request #857 from fluxcd/custom-healthchecks
  • a6353b2 Add healthcheck expressions to kustomize types
  • af0f283 Merge pull request #859 from fluxcd/cel-meta
  • 1178930 Add InvalidCELExpressionReason to apis/meta
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.47.1 to 0.53.1

Commits
  • c911231 Merge pull request #868 from fluxcd/fix-panic
  • 51166e7 Fix panic on nil map entry assignment for custom event metadata
  • 7c90c14 Merge pull request #862 from YvanGuidoin/rework-ssa-diffoptions
  • 88a752e Add tests for DiffOptions.IfNotPresentSelector
  • dd54c6a Align ResourceManager.Diff Skipping resources with ResourceManager.Apply
  • e454462 Merge pull request #864 from fluxcd/internal-deps-bump
  • 2959020 Update internal dependencies
  • c964ce7 Merge pull request #858 from fluxcd/custom-healthchecks-impl
  • 62d235c Add CEL library with custom healthchecks to runtime
  • 243510f Merge pull request #863 from fluxcd/dependabot/github_actions/ci-83dfb6cda2
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/tar from 0.7.0 to 0.10.0

Commits
  • e8e803e Merge pull request #465 from aryan9600/clone-refname
  • ca1dce0 add support for checking out git repo to a ref via gogit
  • 2bb3aa8 Merge pull request #461 from giantswarm/bump-default-client-burst-to-300
  • 4d5a7eb Increase default burst to 300 to conform client-go
  • db1f3af Merge pull request #460 from fluxcd/oci-media-type
  • 2dda8d7 oci: Add media type test
  • e1d86c3 oci: Set created annotation time to UTC
  • 13010c9 oci: Introduce Flux media types
  • 6c2b10b Merge pull request #464 from fluxcd/update-git-lib-deps
  • 228c90b libgit2: just use github.com/google/uuid
  • Additional commits viewable in compare view

Updates github.com/fluxcd/source-controller/api from 1.3.0 to 1.5.0

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.5.0

Changelog

v1.5.0 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.5.0
  • ghcr.io/fluxcd/source-controller:v1.5.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.4.1

Changelog

v1.4.1 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.4.1
  • ghcr.io/fluxcd/source-controller:v1.4.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.4.0

Changelog

v1.4.0 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.4.0
  • ghcr.io/fluxcd/source-controller:v1.4.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.5.0

Release date: 2025-02-13

This minor release comes with various bug fixes and improvements.

GitRepository

The GitRepository API now supports authenticating through GitHub App for GitHub repositories. See docs.

In addition, the Kubernetes dependencies have been updated to v1.32.1, Helm has been updated to v3.17.0 and various other controller dependencies have been updated to their latest version.

Fixes:

  • Remove deprecated object metrics from controllers #1686

Improvements:

1.4.1

Release date: 2024-09-26

This patch release comes with a fix to the GitRepository API to keep it backwards compatible by removing the default value for .spec.provider field when not set in the API. The controller will internally consider an empty value for the provider as the generic provider.

Fix:

  • GitRepo: Remove provider default value from API #1626

1.4.0

Release date: 2024-09-25

... (truncated)

Commits

@dependabot
chore(deps): bump the go group across 1 directory with 26 updates
629031b 
Bumps the go group with 16 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| cuelang.org/go | `0.9.0` | `0.12.0` |
| [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.2.1` | `3.3.1` |
| [github.com/containers/image/v5](https://github.com/containers/image) | `5.31.0` | `5.34.0` |
| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.3.6` | `0.4.1` |
| [github.com/fluxcd/helm-controller/api](https://github.com/fluxcd/helm-controller) | `1.0.1` | `1.2.0` |
| [github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller) | `1.3.0` | `1.5.0` |
| [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) | `0.9.0` | `0.16.0` |
| [github.com/fluxcd/pkg/http/fetch](https://github.com/fluxcd/pkg) | `0.11.0` | `0.15.0` |
| [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.11.0` | `1.16.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.47.1` | `0.53.1` |
| [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) | `1.3.0` | `1.5.0` |
| [github.com/mandelsoft/vfs](https://github.com/mandelsoft/vfs) | `0.4.3` | `0.4.4` |
| [github.com/tetratelabs/wazero](https://github.com/tetratelabs/wazero) | `1.7.2` | `1.9.0` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.15.1` | `3.17.1` |
| [sigs.k8s.io/e2e-framework](https://github.com/kubernetes-sigs/e2e-framework) | `0.2.0` | `0.6.0` |
| [github.com/mikefarah/yq/v4](https://github.com/mikefarah/yq) | `4.44.1` | `4.45.1` |



Updates `cuelang.org/go` from 0.9.0 to 0.12.0

Updates `github.com/Masterminds/semver/v3` from 3.2.1 to 3.3.1
- [Release notes](https://github.com/Masterminds/semver/releases)
- [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md)
- [Commits](Masterminds/semver@v3.2.1...v3.3.1)

Updates `github.com/containers/image/v5` from 5.31.0 to 5.34.0
- [Release notes](https://github.com/containers/image/releases)
- [Commits](containers/image@v5.31.0...v5.34.0)

Updates `github.com/cyphar/filepath-securejoin` from 0.3.6 to 0.4.1
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.3.6...v0.4.1)

Updates `github.com/fluxcd/helm-controller/api` from 1.0.1 to 1.2.0
- [Release notes](https://github.com/fluxcd/helm-controller/releases)
- [Changelog](https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/helm-controller@v1.0.1...v1.2.0)

Updates `github.com/fluxcd/kustomize-controller/api` from 1.3.0 to 1.5.0
- [Release notes](https://github.com/fluxcd/kustomize-controller/releases)
- [Changelog](https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/kustomize-controller@v1.3.0...v1.5.0)

Updates `github.com/fluxcd/pkg/apis/event` from 0.9.0 to 0.16.0
- [Commits](fluxcd/pkg@git/v0.9.0...git/v0.16.0)

Updates `github.com/fluxcd/pkg/apis/meta` from 1.5.0 to 1.10.0
- [Commits](fluxcd/pkg@apis/meta/v1.5.0...apis/meta/v1.10.0)

Updates `github.com/fluxcd/pkg/http/fetch` from 0.11.0 to 0.15.0
- [Commits](fluxcd/pkg@git/v0.11.0...git/v0.15.0)

Updates `github.com/fluxcd/pkg/kustomize` from 1.11.0 to 1.16.0
- [Commits](fluxcd/pkg@kustomize/v1.11.0...kustomize/v1.16.0)

Updates `github.com/fluxcd/pkg/runtime` from 0.47.1 to 0.53.1
- [Commits](fluxcd/pkg@runtime/v0.47.1...runtime/v0.53.1)

Updates `github.com/fluxcd/pkg/tar` from 0.7.0 to 0.10.0
- [Commits](fluxcd/pkg@git/v0.7.0...git/v0.10.0)

Updates `github.com/fluxcd/source-controller/api` from 1.3.0 to 1.5.0
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.3.0...v1.5.0)

Updates `github.com/mandelsoft/vfs` from 0.4.3 to 0.4.4
- [Release notes](https://github.com/mandelsoft/vfs/releases)
- [Commits](mandelsoft/vfs@v0.4.3...v0.4.4)

Updates `github.com/onsi/gomega` from 1.34.1 to 1.36.2
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.34.1...v1.36.2)

Updates `github.com/tetratelabs/wazero` from 1.7.2 to 1.9.0
- [Release notes](https://github.com/tetratelabs/wazero/releases)
- [Commits](tetratelabs/wazero@v1.7.2...v1.9.0)

Updates `golang.org/x/exp` from 0.0.0-20240719175910-8a7402abbf56 to 0.0.0-20241217172543-b2144cdd0a67
- [Commits](https://github.com/golang/exp/commits)

Updates `helm.sh/helm/v3` from 3.15.1 to 3.17.1
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.15.1...v3.17.1)

Updates `k8s.io/apimachinery` from 0.30.1 to 0.32.1
- [Commits](kubernetes/apimachinery@v0.30.1...v0.32.1)

Updates `k8s.io/client-go` from 0.30.1 to 0.32.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.30.1...v0.32.1)

Updates `sigs.k8s.io/controller-runtime` from 0.18.4 to 0.20.1
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.18.4...v0.20.1)

Updates `sigs.k8s.io/e2e-framework` from 0.2.0 to 0.6.0
- [Release notes](https://github.com/kubernetes-sigs/e2e-framework/releases)
- [Changelog](https://github.com/kubernetes-sigs/e2e-framework/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/e2e-framework@v0.2.0...v0.6.0)

Updates `sigs.k8s.io/kustomize/api` from 0.17.2 to 0.19.0
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.17.2...api/v0.19.0)

Updates `github.com/mikefarah/yq/v4` from 4.44.1 to 4.45.1
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@v4.44.1...v4.45.1)

Updates `k8s.io/api` from 0.30.1 to 0.32.1
- [Commits](kubernetes/api@v0.30.1...v0.32.1)

Updates `k8s.io/apiextensions-apiserver` from 0.30.1 to 0.32.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.30.1...v0.32.1)

---
updated-dependencies:
- dependency-name: cuelang.org/go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/Masterminds/semver/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/containers/image/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/helm-controller/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/kustomize-controller/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/apis/event
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/apis/meta
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/http/fetch
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/kustomize
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/tar
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mandelsoft/vfs
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/tetratelabs/wazero
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/exp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/e2e-framework
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/kustomize/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mikefarah/yq/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner February 23, 2025 15:27
@dependabot dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Feb 23, 2025
@github-actions GitHub Actions
Copy link

Mend Scan Summary: ❌

Repository: open-component-model/ocm-controller

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 2
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 1
LICENSE RISK HIGH 9
RESTRICTED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report
Mend UI

@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 2, 2025

Superseded by #607.

@dependabot dependabot bot closed this Mar 2, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/go-5d9bd4fc0b branch March 2, 2025 15:39
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
kind/chore chore, maintenance, etc. kind/dependency dependency update, etc.
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants