chore(deps): bump the security group across 1 directory with 27 updates #1796
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the security group with 21 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/casbin/govaluate](https://github.com/casbin/govaluate) | `1.3.0` | `1.7.0` | | [github.com/containers/image/v5](https://github.com/containers/image) | `5.34.3` | `5.35.0` | | [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.2` | `1.4.3` | | [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) | `1.9.2` | `1.9.3` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.4` | `5.7.5` | | [github.com/microsoft/go-mssqldb](https://github.com/microsoft/go-mssqldb) | `1.8.0` | `1.8.2` | | [github.com/miekg/dns](https://github.com/miekg/dns) | `1.1.65` | `1.1.66` | | [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.25.3` | `4.25.5` | | [github.com/vishvananda/netlink](https://github.com/vishvananda/netlink) | `1.3.0` | `1.3.1` | | [github.com/vmware-tanzu/velero](https://github.com/vmware-tanzu/velero) | `1.16.0` | `1.16.1` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.36.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.35.0` | `1.36.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.24.0` | `0.25.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.13.0` | `0.15.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.32.3` | `0.33.1` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.32.3` | `0.33.1` | | [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.32.3` | `0.33.1` | | [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.20.4` | `0.21.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.39.0` | `0.41.0` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.17.3` | `3.18.3` | | [k8s.io/kubelet](https://github.com/kubernetes/kubelet) | `0.32.3` | `0.33.1` | Updates `github.com/casbin/govaluate` from 1.3.0 to 1.7.0 - [Release notes](https://github.com/casbin/govaluate/releases) - [Changelog](https://github.com/casbin/govaluate/blob/master/.releaserc.json) - [Commits](casbin/govaluate@v1.3.0...v1.7.0) Updates `github.com/containers/image/v5` from 5.34.3 to 5.35.0 - [Release notes](https://github.com/containers/image/releases) - [Commits](containers/image@v5.34.3...v5.35.0) Updates `github.com/go-logr/logr` from 1.4.2 to 1.4.3 - [Release notes](https://github.com/go-logr/logr/releases) - [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md) - [Commits](go-logr/logr@v1.4.2...v1.4.3) Updates `github.com/go-sql-driver/mysql` from 1.9.2 to 1.9.3 - [Release notes](https://github.com/go-sql-driver/mysql/releases) - [Changelog](https://github.com/go-sql-driver/mysql/blob/v1.9.3/CHANGELOG.md) - [Commits](go-sql-driver/mysql@v1.9.2...v1.9.3) Updates `github.com/jackc/pgx/v5` from 5.7.4 to 5.7.5 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.7.4...v5.7.5) Updates `github.com/microsoft/go-mssqldb` from 1.8.0 to 1.8.2 - [Release notes](https://github.com/microsoft/go-mssqldb/releases) - [Changelog](https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md) - [Commits](microsoft/go-mssqldb@v1.8.0...v1.8.2) Updates `github.com/miekg/dns` from 1.1.65 to 1.1.66 - [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release) - [Commits](miekg/dns@v1.1.65...v1.1.66) Updates `github.com/shirou/gopsutil/v4` from 4.25.3 to 4.25.5 - [Release notes](https://github.com/shirou/gopsutil/releases) - [Commits](shirou/gopsutil@v4.25.3...v4.25.5) Updates `github.com/vishvananda/netlink` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/vishvananda/netlink/releases) - [Commits](vishvananda/netlink@v1.3.0...v1.3.1) Updates `github.com/vmware-tanzu/velero` from 1.16.0 to 1.16.1 - [Release notes](https://github.com/vmware-tanzu/velero/releases) - [Changelog](https://github.com/vmware-tanzu/velero/blob/main/CHANGELOG.md) - [Commits](vmware-tanzu/velero@v1.16.0...v1.16.1) Updates `go.opentelemetry.io/otel` from 1.35.0 to 1.36.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.36.0) Updates `go.opentelemetry.io/otel/sdk` from 1.35.0 to 1.36.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.35.0...v1.36.0) Updates `golang.org/x/mod` from 0.24.0 to 0.25.0 - [Commits](golang/mod@v0.24.0...v0.25.0) Updates `golang.org/x/sync` from 0.13.0 to 0.15.0 - [Commits](golang/sync@v0.13.0...v0.15.0) Updates `k8s.io/api` from 0.32.3 to 0.33.1 - [Commits](kubernetes/api@v0.32.3...v0.33.1) Updates `k8s.io/apiextensions-apiserver` from 0.32.3 to 0.33.1 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.32.3...v0.33.1) Updates `k8s.io/apimachinery` from 0.32.3 to 0.33.1 - [Commits](kubernetes/apimachinery@v0.32.3...v0.33.1) Updates `k8s.io/apiserver` from 0.32.3 to 0.33.1 - [Commits](kubernetes/apiserver@v0.32.3...v0.33.1) Updates `k8s.io/cli-runtime` from 0.32.3 to 0.33.1 - [Commits](kubernetes/cli-runtime@v0.32.3...v0.33.1) Updates `k8s.io/client-go` from 0.32.3 to 0.33.1 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.32.3...v0.33.1) Updates `sigs.k8s.io/controller-runtime` from 0.20.4 to 0.21.0 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.20.4...v0.21.0) Updates `golang.org/x/net` from 0.39.0 to 0.41.0 - [Commits](golang/net@v0.39.0...v0.41.0) Updates `golang.org/x/sys` from 0.32.0 to 0.33.0 - [Commits](golang/sys@v0.32.0...v0.33.0) Updates `golang.org/x/text` from 0.24.0 to 0.26.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.24.0...v0.26.0) Updates `helm.sh/helm/v3` from 3.17.3 to 3.18.3 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.17.3...v3.18.3) Updates `k8s.io/kubelet` from 0.32.3 to 0.33.1 - [Commits](kubernetes/kubelet@v0.32.3...v0.33.1) Updates `k8s.io/metrics` from 0.32.3 to 0.33.1 - [Commits](kubernetes/metrics@v0.32.3...v0.33.1) --- updated-dependencies: - dependency-name: github.com/casbin/govaluate dependency-version: 1.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: github.com/containers/image/v5 dependency-version: 5.35.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: github.com/go-logr/logr dependency-version: 1.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/go-sql-driver/mysql dependency-version: 1.9.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.7.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/microsoft/go-mssqldb dependency-version: 1.8.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/miekg/dns dependency-version: 1.1.66 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/shirou/gopsutil/v4 dependency-version: 4.25.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/vishvananda/netlink dependency-version: 1.3.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/vmware-tanzu/velero dependency-version: 1.16.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: go.opentelemetry.io/otel dependency-version: 1.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.36.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/mod dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/sync dependency-version: 0.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/api dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apimachinery dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apiserver dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/cli-runtime dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/client-go dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/net dependency-version: 0.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/sys dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/text dependency-version: 0.26.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: helm.sh/helm/v3 dependency-version: 3.18.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/kubelet dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/metrics dependency-version: 0.33.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security ... Signed-off-by: dependabot[bot] <support@github.com>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the security group with 21 updates in the / directory:
1.3.01.7.05.34.35.35.01.4.21.4.31.9.21.9.35.7.45.7.51.8.01.8.21.1.651.1.664.25.34.25.51.3.01.3.11.16.01.16.11.35.01.36.01.35.01.36.00.24.00.25.00.13.00.15.00.32.30.33.10.32.30.33.10.32.30.33.10.20.40.21.00.39.00.41.03.17.33.18.30.32.30.33.1Updates
github.com/casbin/govaluatefrom 1.3.0 to 1.7.0Release notes
Sourced from github.com/casbin/govaluate's releases.
Commits
d795199feat: Add Sample Locking + Massive Parallel test (#15)df0c938feat: fix handling multi-byte characters both before and after single byte (#19)358dbb2feat: fix unicode var bug by handling multi-byte characters before single byt...4697815feat: reduce memory allocs to optimize performance (#13)Updates
github.com/containers/image/v5from 5.34.3 to 5.35.0Release notes
Sourced from github.com/containers/image/v5's releases.
... (truncated)
Commits
617c288Bump to c/image v5.35.01b83b3aBump to c/storage v1.58.04279b17Merge pull request #2826 from containers/renovate/golangci-golangci-lint-2.x1d14076chore(deps): update dependency golangci/golangci-lint to v2.1.112c8495Merge pull request #2824 from containers/renovate/github.com-sigstore-rekor-1.x010f504fix(deps): update module github.com/sigstore/rekor to v1.3.109b83c49Merge pull request #2823 from Luap99/githuba4b363d.github: check_cirrus_cron work around github bug37150b4.github: remove cirrus rerun action6116c41Merge pull request #2822 from containers/renovate/github.com-sigstore-sigstor...Updates
github.com/go-logr/logrfrom 1.4.2 to 1.4.3Release notes
Sourced from github.com/go-logr/logr's releases.
Commits
38a1c47build(deps): bump github/codeql-action from 3.28.17 to 3.28.18f08beddbuild(deps): bump actions/setup-go from 5.4.0 to 5.5.06295e99build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0028840dbuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17511e5faMerge pull request #367 from go-logr/dependabot/github_actions/github/codeql-...d806463build(deps): bump github/codeql-action from 3.28.13 to 3.28.15158c311Merge pull request #366 from thockin/masterc79ddb3Update to support golangci-lint v220a64babuild(deps): bump github/codeql-action from 3.28.12 to 3.28.130385e14Add comments around slog exceptionsUpdates
github.com/go-sql-driver/mysqlfrom 1.9.2 to 1.9.3Release notes
Sourced from github.com/go-sql-driver/mysql's releases.
Changelog
Sourced from github.com/go-sql-driver/mysql's changelog.
Commits
62984adrelease v1.9.3 (#1725)324cbb3[1.9] fix PING on compressed connections (#1723)dfd973aoptimize readPacket (#1707)2ed589bbackport benchmark_test (#1706)ac04e5fTransaction Commit/Rollback returns conn's cached error (#1702)1bee809test stability improvement. (#1699)Updates
github.com/jackc/pgx/v5from 5.7.4 to 5.7.5Changelog
Sourced from github.com/jackc/pgx/v5's changelog.
Commits
15bca4aRelease v5.7.51d557f9Remove PlanScan memoizationde7fe81Use reflect.TypeFor instead of reflect.TypeOfd9eb089Remove unused function6be24ebFix comment typo07871c0Zero internal baseRows references to allow GC earlier777e7e5Merge pull request #2313 from stampy88/tracelog_pool_additions151bd02Switched toLogLevelDebug540fcaaAdd support for PGOPTIONS environment variable3a248e3Add support for PGTZ environment variableUpdates
github.com/microsoft/go-mssqldbfrom 1.8.0 to 1.8.2Release notes
Sourced from github.com/microsoft/go-mssqldb's releases.
Changelog
Sourced from github.com/microsoft/go-mssqldb's changelog.
... (truncated)
Commits
d3c6336Parse does not recognize Pwd as a valid password field alias (#263)661c0e6isProc: addedCOMMITandROLLBACKcommand to the builtin commands list (#...a3ce042Work around build error introduced by the new 'go vet' tests analyser in v1.2...6b3e174replace ioutil with io everywhere (#258)46d39b9bump: github.com/golang-jwt/jwt/v5 v5.2.1 => v5.2.2 (#256)549c925isProc: recognize builtin-commands (#252)b9933ebDATETIME: fix 1/300 of a seconds rounding logic (Bulk Copy related) (#242)e804768Add JSON-encoded version of NULL uniqueidentifier (#238)d27f997Try to fix the github PR validation workflow (#240)ba24accFix GUID conversion (#207)Updates
github.com/miekg/dnsfrom 1.1.65 to 1.1.66Commits
10d76bcRelease 1.1.66ed312a3Fix logic in xfr ReadMsg + add test (#1649)27318b9RFC 8490: Implement DSO type registry01abd80DSO: Use Stateful as the suffix64211b3Add the rcode DSO-TYPE Not Implemented / RFC8490 (#1648)8ec9f67Upgrade all deps (#1647)8a570c6A comment concerning newline while scanning (#1645)739cf21Return error for empty target (#1627)Updates
github.com/shirou/gopsutil/v4from 4.25.3 to 4.25.5Release notes
Sourced from github.com/shirou/gopsutil/v4's releases.
Commits
15412acMerge pull request #1844 from shirou/dependabot/github_actions/golangci/golan...2c7ae10Merge pull request #1862 from mmorel-35/containeridbcbca49rename containerid arguments to containerIDb2c442fMerge pull request #1860 from shirou/dependabot/go_modules/github.com/ebiteng...e3ebde9chore(deps): bump github.com/ebitengine/purego from 0.8.3 to 0.8.434ac457Merge pull request #1848 from secDre4mer/master95eb2c3Merge pull request #1851 from shirou/dependabot/github_actions/actions/setup-...7597e32chore(deps): bump actions/setup-go from 5.4.0 to 5.5.03ef5d4cMerge pull request #1847 from mmorel-35/nakedret6a79b39fix ignore nakedretUpdates
github.com/vishvananda/netlinkfrom 1.3.0 to 1.3.1Release notes
Sourced from github.com/vishvananda/netlink's releases.
... (truncated)
Commits
17daef6vlan: add support for flags and qos mapsb929916filter: add classid and port range support for flower06c2c01feat: add vlanid - tunnelid mapping supportc4bb4f9rdma: support rdma metrics: resource and statistice9f11f7bugfix: parse ipv4 src/dst error1f4f72cMimicipsetC code for determining correct default ipset revision2426b05qdisc: fix wrong type info of tc_sfq_qopta2e4b9aveth: allow configuring peer attributes beyond namespace and address9d88d83feat: add support for RtoMin lock6b5dd30geneve: Support setting/getting source port rangeUpdates
github.com/vmware-tanzu/velerofrom 1.16.0 to 1.16.1Release notes
Sourced from github.com/vmware-tanzu/velero's releases.
Commits
2eb97faMerge pull request #8940 from ywk253100/250514_fixf64fb36Call WaitGroup.Done() once only when PVB changes to final status the first ti...4bd86f1Merge pull request #8939 from blackpiglet/modify_image_usage_1.1618ef5e6Support using image registry proxy in more cases.01aa538Add default bakcup repository configuration for E2E.3617172Merge pull request #8928 from Lyndon-Li/release-1.1682dce511.16.1 changelog update659a352Add VolumeSnapshotContent into the RIA and the mustHave resource list. (#8926)9eeea4fMerge pull request #8922 from Lyndon-Li/release-1.16e1068d6bump up base imageUpdates
go.opentelemetry.io/otelfrom 1.35.0 to 1.36.0Changelog
Sourced from go.opentelemetry.io/otel's changelog.