Bump the security group with 12 updates #140
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the security group with 12 updates: | Package | From | To | | --- | --- | --- | | [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.13.1` | `2.17.1` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.30.0` | `1.32.0` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.7.0` | `1.8.0` | | [github.com/spf13/viper](https://github.com/spf13/viper) | `1.16.0` | `1.18.2` | | [golang.org/x/term](https://github.com/golang/term) | `0.16.0` | `0.19.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.29.2` | `0.29.4` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.29.2` | `0.29.4` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.29.2` | `0.29.4` | | [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.29.2` | `0.29.4` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.29.2` | `0.29.4` | | [k8s.io/kubectl](https://github.com/kubernetes/kubectl) | `0.29.2` | `0.29.4` | | [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) | `1.29.2` | `1.29.4` | Updates `github.com/onsi/ginkgo/v2` from 2.13.1 to 2.17.1 - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v2.13.1...v2.17.1) Updates `github.com/onsi/gomega` from 1.30.0 to 1.32.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.30.0...v1.32.0) Updates `github.com/spf13/cobra` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.7.0...v1.8.0) Updates `github.com/spf13/viper` from 1.16.0 to 1.18.2 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.16.0...v1.18.2) Updates `golang.org/x/term` from 0.16.0 to 0.19.0 - [Commits](golang/term@v0.16.0...v0.19.0) Updates `k8s.io/api` from 0.29.2 to 0.29.4 - [Commits](kubernetes/api@v0.29.2...v0.29.4) Updates `k8s.io/apiextensions-apiserver` from 0.29.2 to 0.29.4 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.29.2...v0.29.4) Updates `k8s.io/apimachinery` from 0.29.2 to 0.29.4 - [Commits](kubernetes/apimachinery@v0.29.2...v0.29.4) Updates `k8s.io/apiserver` from 0.29.2 to 0.29.4 - [Commits](kubernetes/apiserver@v0.29.2...v0.29.4) Updates `k8s.io/client-go` from 0.29.2 to 0.29.4 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.29.2...v0.29.4) Updates `k8s.io/kubectl` from 0.29.2 to 0.29.4 - [Commits](kubernetes/kubectl@v0.29.2...v0.29.4) Updates `k8s.io/kubernetes` from 1.29.2 to 1.29.4 - [Release notes](https://github.com/kubernetes/kubernetes/releases) - [Commits](kubernetes/kubernetes@v1.29.2...v1.29.4) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo/v2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: github.com/spf13/cobra dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: github.com/spf13/viper dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/term dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/api dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/apiextensions-apiserver dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/apimachinery dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/apiserver dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/client-go dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/kubectl dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/kubernetes dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security ... Signed-off-by: dependabot[bot] <[email protected]>
|
The following labels could not be found: |
|
Superseded by #141. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the security group with 12 updates:
2.13.12.17.11.30.01.32.01.7.01.8.01.16.01.18.20.16.00.19.00.29.20.29.40.29.20.29.40.29.20.29.40.29.20.29.40.29.20.29.40.29.20.29.41.29.21.29.4Updates
github.com/onsi/ginkgo/v2from 2.13.1 to 2.17.1Release notes
Sourced from github.com/onsi/ginkgo/v2's releases.
... (truncated)
Changelog
Sourced from github.com/onsi/ginkgo/v2's changelog.
... (truncated)
Commits
9242338v2.17.1af0330dIf the user sets --seed=0, make sure all parallel nodes get the same seed75ad73bv2.17.03a6097aadd test6e80d3fuse github formwat in CIe8a2056add--github-outputfor nicer output in github actions977bc6ffix typo in core_dsl.goe297e7bFix typo in docsa181ee2v2.16.02cebe8ddocs/index.md: TypoUpdates
github.com/onsi/gomegafrom 1.30.0 to 1.32.0Release notes
Sourced from github.com/onsi/gomega's releases.
Changelog
Sourced from github.com/onsi/gomega's changelog.
Commits
4379951v1.32.0a350b95Maintain source backwards compatibilitya6c8875Fix failing test436a197Migrate github.com/golang/protobuf to google.golang.org/protobuf32ef35echore: test with Go 1.22 (#733)a0d0387Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717)b71e477Bump github-pages and jekyll-feed in /docs (#732)f460154docs: fix typo and broken anchor link to gstructa2862e4docs: fix HaveEach matcher signature762b171v1.31.1Updates
github.com/spf13/cobrafrom 1.7.0 to 1.8.0Release notes
Sourced from github.com/spf13/cobra's releases.
Commits
a0a6ae0Improve API to get flag completion function (#2063)890302aSupport usage as plugin for tools like kubectl (#2018)48cea5cbuild(deps): bump actions/checkout from 3 to 4 (#2028)22953d8Replace all non-alphanumerics in active help env var program prefix (#1940)00b68a1Add tests for flag completion registration (#2053)b711e87Don't complete --help flag when flag parsing disabled (#2061)8b1eba4Fix linter errors (#2052)4cafa37Allow running persistent run hooks of all parents (#2044)5c962a2build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 (#2047)efe8fa3build(deps): bump actions/setup-go from 3 to 4 (#1934)Updates
github.com/spf13/viperfrom 1.16.0 to 1.18.2Release notes
Sourced from github.com/spf13/viper's releases.
... (truncated)
Commits
ab3a50cfix!: hide struct binding behind a feature flag9154b90build(deps): bump actions/setup-go from 4.1.0 to 5.0.008e4a00build(deps): bump github/codeql-action from 2.22.8 to 2.22.9fb6eb1efix: merge missing struct keys inside UnmarshalExactf5fcb4achore: update cryptf736363fix isPathShadowedInFlatMap type cast bug (#1585)36a3868Review changesf0c4ccdfix: gocritic lint issues3a23b80ci: enable test shuffle; fix tests73dfb94feat: make Unmarshal work with AutomaticEnvUpdates
golang.org/x/termfrom 0.16.0 to 0.19.0Commits
5b15d26go.mod: update golang.org/x dependenciesc5eaf76go.mod: update golang.org/x dependencies353276ago.mod: update golang.org/x dependenciesUpdates
k8s.io/apifrom 0.29.2 to 0.29.4Commits
379f6cdUpdate dependencies to v0.29.4 tag448db12Merge pull request #124180 from MadhavJivrajani/bump-x-net-2023-45288-1298240278[CVE-2023-45288] .*: bump x/net to v0.23.0b31b2fdsync: update go.modf98a503Merge pull request #123763 from liggitt/proto-1.291e39277[CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/pr...Updates
k8s.io/apiextensions-apiserverfrom 0.29.2 to 0.29.4Commits
28317e8Update dependencies to v0.29.4 tagce4a37cMerge pull request #124180 from MadhavJivrajani/bump-x-net-2023-45288-12915b1282[CVE-2023-45288] .*: bump x/net to v0.23.0400935esync: update go.mod4b0ba87Merge pull request #123763 from liggitt/proto-1.29d499055[CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/pr...Updates
k8s.io/apimachineryfrom 0.29.2 to 0.29.4Commits
2bbf530Merge pull request #124172liggitt/automated-cherry-pick-of-#1235983e7c65aMerge pull request #124180 from MadhavJivrajani/bump-x-net-2023-45288-12906deedf[CVE-2023-45288] .*: bump x/net to v0.23.0d794766Merge pull request #123763 from liggitt/proto-1.299b124b1[CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/pr...801d824Avoid logging binary junk for frame write failureUpdates
k8s.io/apiserverfrom 0.29.2 to 0.29.4Commits
245242eUpdate dependencies to v0.29.4 taga4273ccMerge pull request #124180 from MadhavJivrajani/bump-x-net-2023-45288-129661759c[CVE-2023-45288] .*: bump x/net to v0.23.08eca52cMerge pull request #123973 from serathius/consistent-watch-from-etcd-1.29d432100Undo double run of the TestWatchSemantics test to avoid hitting timeout0946a03apiserver/storage/cacher: decrease the running time of tests in the cacher pa...582da82Serve watch without resourceVersion from cache and introduce a WatchFromStora...21e0f5bEnsure that initial events are sorted for WatchListd49097bMerge pull request #123763 from liggitt/proto-1.291b4c9afMerge pull request #123693mengqiy/automated-cherry-pick-of-#123532Updates
k8s.io/client-gofrom 0.29.2 to 0.29.4Commits
9f00f2cUpdate dependencies to v0.29.4 tag1e7adeeMerge pull request #124172liggitt/automated-cherry-pick-of-#1235980058eeeMerge pull request #124180 from MadhavJivrajani/bump-x-net-2023-45288-129f0be73d[CVE-2023-45288] .*: bump x/net to v0.23.0ca07432sync: update go.mod403b37fMerge pull request #123763 from liggitt/proto-1.2992199ae[CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/pr...cc21122Keep streams from being set up after closeAllStreamReaders is called8636987Make websocket heartbeat test timing less flakyUpdates
k8s.io/kubectlfrom 0.29.2 to 0.29.4Commits
3cd8dffUpdate dependencies to v0.29.4 taga30d557Merge pull request #124180 from MadhavJivrajani/bump-x-net-2023-45288-129e49c5f9[CVE-2023-45288] .*: bump x/net to v0.23.064b2531sync: update go.mode9d3b7cMerge pull request #123763 from liggitt/proto-1.291ca158d[CVE-2024-24786] Bump github.com/golang/protobuf v1.5.4, google.golang.org/pr...Updates
k8s.io/kubernetesfrom 1.29.2 to 1.29.4Release notes
Sourced from k8s.io/kubernetes's releases.
Commits
55019c8Release commit for Kubernetes v1.29.4a619ca3Merge pull request #124327ritazh/automated-cherry-pick-of-#12432234546f4Add envFrom to serviceaccount admission plugin3df26e3Merge pull request #122682bmwiedemann/automated-cherry-pick-of-#121894b666aecMerge pull request #124197 from cpanato/update-go-1.29b635fd6update debian-base to bookworm-v1.0.21fded9c[go] Bump images, dependencies and versions to go 1.21.9 and distroless iptab...15d121dMerge pull request #124172liggitt/automated-cherry-pick-of-#123598bddce43Merge pull request #124110benluddy/automated-cherry-pick-of-#123873c3e84fdMerge pull request #123624Jefftree/automated-cherry-pick-of-#123570Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions