Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the security group with 12 updates #139

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 5, 2024

Bumps the security group with 12 updates:

Package From To
github.com/onsi/ginkgo/v2 2.13.1 2.17.1
github.com/onsi/gomega 1.30.0 1.32.0
github.com/spf13/cobra 1.7.0 1.8.0
github.com/spf13/viper 1.16.0 1.18.2
golang.org/x/term 0.16.0 0.19.0
k8s.io/api 0.29.2 0.29.3
k8s.io/apiextensions-apiserver 0.29.2 0.29.3
k8s.io/apimachinery 0.29.2 0.29.3
k8s.io/apiserver 0.29.2 0.29.3
k8s.io/client-go 0.29.2 0.29.3
k8s.io/kubectl 0.29.2 0.29.3
k8s.io/kubernetes 1.29.2 1.29.3

Updates github.com/onsi/ginkgo/v2 from 2.13.1 to 2.17.1

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.17.1

2.17.1

Fixes

  • If the user sets --seed=0, make sure all parallel nodes get the same seed [af0330d]

v2.17.0

2.17.0

Features

  • add --github-output for nicer output in github actions [e8a2056]

Maintenance

  • fix typo in core_dsl.go [977bc6f]
  • Fix typo in docs [e297e7b]

v2.16.0

2.16.0

Features

  • add SpecContext to reporting nodes

Fixes

  • merge coverages instead of combining them (#1329) (#1340) [23f0cc5]
  • core_dsl: disable Getwd() with environment variable (#1357) [cd418b7]

Maintenance

  • docs/index.md: Typo [2cebe8d]
  • fix docs [06de431]
  • chore: test with Go 1.22 (#1352) [898cba9]
  • Bump golang.org/x/tools from 0.16.1 to 0.17.0 (#1336) [17ae120]
  • Bump golang.org/x/sys from 0.15.0 to 0.16.0 (#1327) [5a179ed]
  • Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 (#1321) [a1e6b69]
  • Bump github-pages and jekyll-feed in /docs (#1351) [d52951d]
  • Fix docs for handling failures in goroutines (#1339) [4471b2e]

v2.15.0

2.15.0

Features

  • JUnit reports now interpret Label(owner:X) and set owner to X. [8f3bd70]
  • include cancellation reason when cancelling spec context [96e915c]

Fixes

  • emit output of failed go tool cover invocation so users can try to debug things for themselves [c245d09]
  • fix outline when using nodot in ginkgo v2 [dca77c8]

... (truncated)

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.17.1

Fixes

  • If the user sets --seed=0, make sure all parallel nodes get the same seed [af0330d]

2.17.0

Features

  • add --github-output for nicer output in github actions [e8a2056]

Maintenance

  • fix typo in core_dsl.go [977bc6f]
  • Fix typo in docs [e297e7b]

2.16.0

Features

  • add SpecContext to reporting nodes

Fixes

  • merge coverages instead of combining them (#1329) (#1340) [23f0cc5]
  • core_dsl: disable Getwd() with environment variable (#1357) [cd418b7]

Maintenance

  • docs/index.md: Typo [2cebe8d]
  • fix docs [06de431]
  • chore: test with Go 1.22 (#1352) [898cba9]
  • Bump golang.org/x/tools from 0.16.1 to 0.17.0 (#1336) [17ae120]
  • Bump golang.org/x/sys from 0.15.0 to 0.16.0 (#1327) [5a179ed]
  • Bump github.com/go-logr/logr from 1.3.0 to 1.4.1 (#1321) [a1e6b69]
  • Bump github-pages and jekyll-feed in /docs (#1351) [d52951d]
  • Fix docs for handling failures in goroutines (#1339) [4471b2e]

2.15.0

Features

  • JUnit reports now interpret Label(owner:X) and set owner to X. [8f3bd70]
  • include cancellation reason when cancelling spec context [96e915c]

Fixes

  • emit output of failed go tool cover invocation so users can try to debug things for themselves [c245d09]
  • fix outline when using nodot in ginkgo v2 [dca77c8]
  • Document areas where GinkgoT() behaves differently from testing.T [dbaf18f]
  • bugfix(docs): use Unsetenv instead of Clearenv (#1337) [6f67a14]

Maintenance

... (truncated)

Commits

Updates github.com/onsi/gomega from 1.30.0 to 1.32.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.32.0

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

v1.31.1

1.31.1

Fixes

  • Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]
  • Update test in case keeping msg is desired [ad1a367]

Maintenance

  • Show how to import the format sub package [24e958d]
  • tidy up go.sum [26661b8]
  • bump dependencies [bde8f7a]

v1.31.0

1.31.0

Features

  • Async assertions include context cancellation cause if present [121c37f]

Maintenance

  • Bump minimum go version [dee1e3c]
  • docs: fix typo in example usage "occured" -> "occurred" [49005fe]
  • Bump actions/setup-go from 4 to 5 (#714) [f1c8757]
  • Bump github/codeql-action from 2 to 3 (#715) [9836e76]
  • Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.2 (#713) [54726f0]
  • Bump golang.org/x/net from 0.17.0 to 0.19.0 (#711) [df97ecc]
  • docs: fix HaveExactElement typo (#712) [a672c86]
Changelog

Sourced from github.com/onsi/gomega's changelog.

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

1.31.1

Fixes

  • Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]
  • Update test in case keeping msg is desired [ad1a367]

Maintenance

  • Show how to import the format sub package [24e958d]
  • tidy up go.sum [26661b8]
  • bump dependencies [bde8f7a]

1.31.0

Features

  • Async assertions include context cancellation cause if present [121c37f]

Maintenance

  • Bump minimum go version [dee1e3c]
  • docs: fix typo in example usage "occured" -> "occurred" [49005fe]
  • Bump actions/setup-go from 4 to 5 (#714) [f1c8757]
  • Bump github/codeql-action from 2 to 3 (#715) [9836e76]
  • Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.2 (#713) [54726f0]
  • Bump golang.org/x/net from 0.17.0 to 0.19.0 (#711) [df97ecc]
  • docs: fix HaveExactElement typo (#712) [a672c86]
Commits
  • 4379951 v1.32.0
  • a350b95 Maintain source backwards compatibility
  • a6c8875 Fix failing test
  • 436a197 Migrate github.com/golang/protobuf to google.golang.org/protobuf
  • 32ef35e chore: test with Go 1.22 (#733)
  • a0d0387 Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717)
  • b71e477 Bump github-pages and jekyll-feed in /docs (#732)
  • f460154 docs: fix typo and broken anchor link to gstruct
  • a2862e4 docs: fix HaveEach matcher signature
  • 762b171 v1.31.1
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.0

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation


Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍

Full Changelog: spf13/cobra@v1.7.0...v1.8.0

Commits
  • a0a6ae0 Improve API to get flag completion function (#2063)
  • 890302a Support usage as plugin for tools like kubectl (#2018)
  • 48cea5c build(deps): bump actions/checkout from 3 to 4 (#2028)
  • 22953d8 Replace all non-alphanumerics in active help env var program prefix (#1940)
  • 00b68a1 Add tests for flag completion registration (#2053)
  • b711e87 Don't complete --help flag when flag parsing disabled (#2061)
  • 8b1eba4 Fix linter errors (#2052)
  • 4cafa37 Allow running persistent run hooks of all parents (#2044)
  • 5c962a2 build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 (#2047)
  • efe8fa3 build(deps): bump actions/setup-go from 3 to 4 (#1934)
  • Additional commits viewable in compare view

Updates github.com/spf13/viper from 1.16.0 to 1.18.2

Release notes

Sourced from github.com/spf13/viper's releases.

v1.18.2

tl;dr Skip 1.18.0 and 1.18.1 and upgrade to this version instead.

This release fixes a regression that appears in rare circumstances when using Unmarshal or UnmarshalExact to decode values onto pointers with multiple indirection (eg. pointer to a pointer, etc). The change was introduced in 1.18.0 as a means to resolve a long-standing bug when decoding environment variables to structs.

The feature is now disabled by default and can be enabled using the viper_bind_struct build tag. It's also considered experimental at this point, so breaking changes may be introduced in the future.

What's Changed

Bug Fixes 🐛

Full Changelog: spf13/viper@v1.18.1...v1.18.2

v1.18.1

What's Changed

Bug Fixes 🐛

Full Changelog: spf13/viper@v1.18.0...v1.18.1

v1.18.0

Major changes

Highlighting some of the changes for better visibility.

Please share your feedback in the Discussion forum. Thanks! ❤️

AutomaticEnv works with Unmarshal

Previously, environment variables that weren't bound manually or had no defaults could not be mapped by Unmarshal. (The problem is explained in details in this issue: #761)

#1429 introduced a solution that solves that issue.

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

... (truncated)

Commits
  • ab3a50c fix!: hide struct binding behind a feature flag
  • 9154b90 build(deps): bump actions/setup-go from 4.1.0 to 5.0.0
  • 08e4a00 build(deps): bump github/codeql-action from 2.22.8 to 2.22.9
  • fb6eb1e fix: merge missing struct keys inside UnmarshalExact
  • f5fcb4a chore: update crypt
  • f736363 fix isPathShadowedInFlatMap type cast bug (#1585)
  • 36a3868 Review changes
  • f0c4ccd fix: gocritic lint issues
  • 3a23b80 ci: enable test shuffle; fix tests
  • 73dfb94 feat: make Unmarshal work with AutomaticEnv
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.16.0 to 0.19.0

Commits
  • 5b15d26 go.mod: update golang.org/x dependencies
  • c5eaf76 go.mod: update golang.org/x dependencies
  • 353276a go.mod: update golang.org/x dependencies
  • See full diff in compare view

Updates k8s.io/api from 0.29.2 to 0.29.3

Commits

Updates k8s.io/apiextensions-apiserver from 0.29.2 to 0.29.3

Commits

Updates k8s.io/apimachinery from 0.29.2 to 0.29.3

Commits

Updates k8s.io/apiserver from 0.29.2 to 0.29.3

Commits
  • 8d18eec Update dependencies to v0.29.3 tag
  • d49097b Merge pull request #123763 from liggitt/proto-1.29
  • 1b4c9af Merge pull request #123693mengqiy/automated-cherry-pick-of-#123532
  • d138c29 [CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/pr...
  • b9037e3 Test that separation of streams work by using progress notifies
  • 88805ca Prevent watch cache starvation, by moving its watch to separate RPC and add a...
  • See full diff in compare view

Updates k8s.io/client-go from 0.29.2 to 0.29.3

Commits

Updates k8s.io/kubectl from 0.29.2 to 0.29.3

Commits

Updates k8s.io/kubernetes from 1.29.2 to 1.29.3

Release notes

Sourced from k8s.io/kubernetes's releases.

Kubernetes v1.29.3

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Commits
  • 6813625 Release commit for Kubernetes v1.29.3
  • a6fe782 Merge pull request #123763 from liggitt/proto-1.29
  • c319f5e Merge pull request #123752dhenkel92/automated-cherry-pick-of-#122056
  • b607e4e Merge pull request #123693mengqiy/automated-cherry-pick-of-#123532
  • f0d4db0 Merge pull request #123779aramase/automated-cherry-pick-of-#123251
  • bca71f3 Merge pull request #123709gjkim42/automated-cherry-pick-of-#123323
  • 9cbee4d Merge pull request #123773 from cpanato/update-go-129
  • 6db05c2 remove --v arg from kubetest2-tester-ginkgo test args
  • 6322dae ci: bump kind to latest for kms jobs
  • c53a24d [go] Bump images, dependencies and versions to go 1.21.8 / distroless-iptable...
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the security group with 12 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.13.1` | `2.17.1` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.30.0` | `1.32.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.7.0` | `1.8.0` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.16.0` | `1.18.2` |
| [golang.org/x/term](https://github.com/golang/term) | `0.16.0` | `0.19.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.29.2` | `0.29.3` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.29.2` | `0.29.3` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.29.2` | `0.29.3` |
| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.29.2` | `0.29.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.29.2` | `0.29.3` |
| [k8s.io/kubectl](https://github.com/kubernetes/kubectl) | `0.29.2` | `0.29.3` |
| [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) | `1.29.2` | `1.29.3` |


Updates `github.com/onsi/ginkgo/v2` from 2.13.1 to 2.17.1
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.13.1...v2.17.1)

Updates `github.com/onsi/gomega` from 1.30.0 to 1.32.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.30.0...v1.32.0)

Updates `github.com/spf13/cobra` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.7.0...v1.8.0)

Updates `github.com/spf13/viper` from 1.16.0 to 1.18.2
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.16.0...v1.18.2)

Updates `golang.org/x/term` from 0.16.0 to 0.19.0
- [Commits](golang/term@v0.16.0...v0.19.0)

Updates `k8s.io/api` from 0.29.2 to 0.29.3
- [Commits](kubernetes/api@v0.29.2...v0.29.3)

Updates `k8s.io/apiextensions-apiserver` from 0.29.2 to 0.29.3
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.29.2...v0.29.3)

Updates `k8s.io/apimachinery` from 0.29.2 to 0.29.3
- [Commits](kubernetes/apimachinery@v0.29.2...v0.29.3)

Updates `k8s.io/apiserver` from 0.29.2 to 0.29.3
- [Commits](kubernetes/apiserver@v0.29.2...v0.29.3)

Updates `k8s.io/client-go` from 0.29.2 to 0.29.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.29.2...v0.29.3)

Updates `k8s.io/kubectl` from 0.29.2 to 0.29.3
- [Commits](kubernetes/kubectl@v0.29.2...v0.29.3)

Updates `k8s.io/kubernetes` from 1.29.2 to 1.29.3
- [Release notes](https://github.com/kubernetes/kubernetes/releases)
- [Commits](kubernetes/kubernetes@v1.29.2...v1.29.3)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: github.com/spf13/viper
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: k8s.io/kubectl
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: k8s.io/kubernetes
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
...

Signed-off-by: dependabot[bot] <[email protected]>
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 5, 2024

The following labels could not be found: dependencies, go.

Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 17, 2024

Superseded by #140.

@dependabot dependabot bot closed this Apr 17, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/security-ad70d398a8 branch April 17, 2024 07:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants