Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the prod-dependencies group with 14 updates #1109

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 18, 2023

Bumps the prod-dependencies group with 14 updates:

Package From To
github.com/bombsimon/logrusr/v4 4.0.0 4.1.0
github.com/docker/cli 24.0.6+incompatible 24.0.7+incompatible
github.com/go-logr/logr 1.2.4 1.3.0
github.com/google/go-containerregistry 0.15.2 0.17.0
github.com/onsi/ginkgo/v2 2.12.1 2.13.2
github.com/onsi/gomega 1.29.0 1.30.0
github.com/operator-framework/api 0.17.7 0.20.0
github.com/spf13/afero 1.10.0 1.11.0
github.com/spf13/cobra 1.7.0 1.8.0
github.com/spf13/viper 1.16.0 1.18.2
k8s.io/api 0.27.7 0.29.0
k8s.io/client-go 0.27.7 0.29.0
sigs.k8s.io/controller-runtime 0.15.3 0.16.3
sigs.k8s.io/yaml 1.3.0 1.4.0

Updates github.com/bombsimon/logrusr/v4 from 4.0.0 to 4.1.0

Release notes

Sourced from github.com/bombsimon/logrusr/v4's releases.

v4.1.0

What's Changed

Full Changelog: bombsimon/logrusr@v4.0.0...v4.1.0

Commits

Updates github.com/docker/cli from 24.0.6+incompatible to 24.0.7+incompatible

Commits
  • afdd53b Merge pull request #4629 from thaJeztah/24.0_update_engine
  • 12c309f Merge pull request #4628 from thaJeztah/24.0_backport_bump_compress
  • f427198 vendor: github.com/docker/docker v24.0.6
  • 1777018 vendor: github.com/klauspost/compress v1.17.2
  • cde0441 vendor: github.com/klauspost/compress v1.16.5
  • d9f94d5 Merge pull request #4618 from thaJeztah/24.0_backport_cli-issue-502
  • 54d83fb Add docker ps status descriptions
  • 30a185e Merge pull request #4609 from thaJeztah/24.0_backport_x_net
  • d43c48d vendor: golang.org/x/net v0.17.0
  • 1919679 vendor: golang.org/x/crypto v0.14.0
  • Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.2.4 to 1.3.0

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.3.0

This release adds support for slog in a new, self-contained logr/slogr package. Implementers of a logr.LogSink are encouraged, but not required, to extend their implementation to improve the quality of log output coming from a slog API call.

Breaking change: the call depth for LogSink.Enabled when called via Logger.Enabled was fixed to be the same as for other call paths. Implementers of a LogSink who have worked around this bug will need to remove their workarounds.

Security best practices were improved. Only Go versions >= 1.18 are supported by this release.

What's Changed


New Contributors

... (truncated)

Commits
  • 8adefbe docs: interoperability with slog
  • ebabbb9 build(deps): bump github/codeql-action from 2.22.3 to 2.22.4
  • 9c361f0 build(deps): bump actions/checkout from 4.1.0 to 4.1.1
  • d9b2b78 Merge pull request #229 from go-logr/dependabot/github_actions/github/codeql-...
  • 91cec29 build(deps): bump github/codeql-action from 2.22.0 to 2.22.3
  • 2ea8628 Merge pull request #228 from go-logr/dependabot/github_actions/github/codeql-...
  • 37a4f55 Merge pull request #227 from go-logr/dependabot/github_actions/ossf/scorecard...
  • ecf310c build(deps): bump github/codeql-action from 2.21.9 to 2.22.0
  • d73e05e build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0
  • 1d1c415 Merge pull request #226 from go-logr/dependabot/github_actions/github/codeql-...
  • Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.15.2 to 0.17.0

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.17.0

What's Changed

Full Changelog: google/go-containerregistry@v0.16.1...v0.17.0

v0.16.1

Release is broken due to goreleaser error, 0.16.1 has the fix

What's Changed

New Contributors

Full Changelog: google/go-containerregistry@v0.15.2...v0.16.1

Container Images

... (truncated)

Commits

Updates github.com/onsi/ginkgo/v2 from 2.12.1 to 2.13.2

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.13.2

2.13.2

Fixes

  • Fix file handler leak (#1309) [e2e81c8]
  • Avoid allocations with (*regexp.Regexp).MatchString (#1302) [3b2a2a7]

v2.13.1

2.13.1

Fixes

  • 1296 fix(precompiled test guite): exec bit check omitted on Windows (#1301) [26eea01]

Maintenance

  • Bump github.com/go-logr/logr from 1.2.4 to 1.3.0 (#1291) [7161a9d]
  • Bump golang.org/x/sys from 0.13.0 to 0.14.0 (#1295) [7fc7b10]
  • Bump golang.org/x/tools from 0.12.0 to 0.14.0 (#1282) [74bbd65]
  • Bump github.com/onsi/gomega from 1.27.10 to 1.29.0 (#1290) [9373633]
  • Bump golang.org/x/net in /integration/_fixtures/version_mismatch_fixture (#1286) [6e3cf65]

v2.13.0

2.13.0

Features

Add PreviewSpect() to enable programmatic preview access to the suite report (fixes #1225)

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.13.2

Fixes

  • Fix file handler leak (#1309) [e2e81c8]
  • Avoid allocations with (*regexp.Regexp).MatchString (#1302) [3b2a2a7]

2.13.1

Fixes

  • 1296 fix(precompiled test guite): exec bit check omitted on Windows (#1301) [26eea01]

Maintenance

  • Bump github.com/go-logr/logr from 1.2.4 to 1.3.0 (#1291) [7161a9d]
  • Bump golang.org/x/sys from 0.13.0 to 0.14.0 (#1295) [7fc7b10]
  • Bump golang.org/x/tools from 0.12.0 to 0.14.0 (#1282) [74bbd65]
  • Bump github.com/onsi/gomega from 1.27.10 to 1.29.0 (#1290) [9373633]
  • Bump golang.org/x/net in /integration/_fixtures/version_mismatch_fixture (#1286) [6e3cf65]

2.13.0

Features

Add PreviewSpect() to enable programmatic preview access to the suite report (fixes #1225)

Commits
  • 931dc0b v2.13.2
  • e2e81c8 Fix file handler leak (#1309)
  • 3b2a2a7 Avoid allocations with (*regexp.Regexp).MatchString (#1302)
  • 64b8552 v2.13.1
  • 26eea01 # 1296 fix(precompiled test guite): exec bit check omitted on Windows (#1301)
  • 7161a9d Bump github.com/go-logr/logr from 1.2.4 to 1.3.0 (#1291)
  • 7fc7b10 Bump golang.org/x/sys from 0.13.0 to 0.14.0 (#1295)
  • 74bbd65 Bump golang.org/x/tools from 0.12.0 to 0.14.0 (#1282)
  • 9373633 Bump github.com/onsi/gomega from 1.27.10 to 1.29.0 (#1290)
  • 6e3cf65 Bump golang.org/x/net in /integration/_fixtures/version_mismatch_fixture (#1286)
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.29.0 to 1.30.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.30.0

1.30.0

Features

  • BeTrueBecause and BeFalseBecause allow for better failure messages [4da4c7f]

Maintenance

  • Bump actions/checkout from 3 to 4 (#694) [6ca6e97]
  • doc: fix type on gleak go doc [f1b8343]
Changelog

Sourced from github.com/onsi/gomega's changelog.

1.30.0

Features

  • BeTrueBecause and BeFalseBecause allow for better failure messages [4da4c7f]

Maintenance

  • Bump actions/checkout from 3 to 4 (#694) [6ca6e97]
  • doc: fix type on gleak go doc [f1b8343]
Commits

Updates github.com/operator-framework/api from 0.17.7 to 0.20.0

Release notes

Sourced from github.com/operator-framework/api's releases.

v0.20.0

What's Changed

New Contributors

Full Changelog: operator-framework/api@v0.19.0...v0.20.0

v0.19.0

What's Changed

Full Changelog: operator-framework/api@v0.18.0...v0.19.0

v0.18.0

What's Changed

New Contributors

Full Changelog: operator-framework/api@v0.17.7...v0.18.0

Commits
  • 5efe1a2 Replace github.com/ghodss/yaml with sigs.k8s.io/yaml (#308)
  • 047dce1 Add additional deprecation types for each level (package, channel, bundle). (...
  • 6b3567d Adds 'OperatorDeprecated' status condition for Subscription. (#306)
  • 3417188 OWNERS: Remove timflannagan from reviewers (#305)
  • 73a5934 Separate Category and Capability Validation (#304)
  • 071829b Bump k8s dependencies to v0.27.7
  • d52e6b2 build(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 (#299)
  • 7961b02 Add config for packageserver wakeup interval (#298)
  • 28c6773 CatalogSource: require fields when extracting FBC (#295)
  • bb012a3 catalogsource: update dir name (#294)
  • Additional commits viewable in compare view

Updates github.com/spf13/afero from 1.10.0 to 1.11.0

Release notes

Sourced from github.com/spf13/afero's releases.

v1.11.0

What's Changed

Full Changelog: spf13/afero@v1.10.0...v1.11.0

Commits
  • 5c4385a github: Bump GitHub actions versions
  • eb6bef0 github: Format workflow file
  • 2fd19a1 github: Add permissions to workflow
  • 2a63c9c deps: Update all direct dependencies
  • c419971 github: Update Go versions
  • See full diff in compare view

Updates github.com/spf13/cobra from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.0

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation


Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍

Full Changelog: spf13/cobra@v1.7.0...v1.8.0

Commits
  • a0a6ae0 Improve API to get flag completion function (#2063)
  • 890302a Support usage as plugin for tools like kubectl (#2018)
  • 48cea5c build(deps): bump actions/checkout from 3 to 4 (#2028)
  • 22953d8 Replace all non-alphanumerics in active help env var program prefix (#1940)
  • 00b68a1 Add tests for flag completion registration (#2053)
  • b711e87 Don't complete --help flag when flag parsing disabled (#2061)
  • 8b1eba4 Fix linter errors (#2052)
  • 4cafa37 Allow running persistent run hooks of all parents (#2044)
  • 5c962a2 build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 (#2047)
  • efe8fa3 build(deps): bump actions/setup-go from 3 to 4 (#1934)
  • Additional commits viewable in compare view

Updates github.com/spf13/viper from 1.16.0 to 1.18.2

Release notes

Sourced from github.com/spf13/viper's releases.

v1.18.2

tl;dr Skip 1.18.0 and 1.18.1 and upgrade to this version instead.

This release fixes a regression that appears in rare circumstances when using Unmarshal or UnmarshalExact to decode values onto pointers with multiple indirection (eg. pointer to a pointer, etc). The change was introduced in 1.18.0 as a means to resolve a long-standing bug when decoding environment variables to structs.

The feature is now disabled by default and can be enabled using the viper_bind_struct build tag. It's also considered experimental at this point, so breaking changes may be introduced in the future.

What's Changed

Bug Fixes 🐛

Full Changelog: spf13/viper@v1.18.1...v1.18.2

v1.18.1

What's Changed

Bug Fixes 🐛

Full Changelog: spf13/viper@v1.18.0...v1.18.1

v1.18.0

Major changes

Highlighting some of the changes for better visibility.

Please share your feedback in the Discussion forum. Thanks! ❤️

AutomaticEnv works with Unmarshal

Previously, environment variables that weren't bound manually or had no defaults could not be mapped by Unmarshal. (The problem is explained in details in this issue: #761)

#1429 introduced a solution that solves that issue.

What's Changed

Enhancements 🚀

Bug Fixes 🐛

Dependency Updates ⬆️

... (truncated)

Commits
  • ab3a50c fix!: hide struct binding behind a feature flag
  • 9154b90 build(deps): bump actions/setup-go from 4.1.0 to 5.0.0
  • 08e4a00 build(deps): bump github/codeql-action from 2.22.8 to 2.22.9
  • fb6eb1e fix: merge missing struct keys inside UnmarshalExact
  • f5fcb4a chore: update crypt
  • f736363 fix isPathShadowedInFlatMap type cast bug (#1585)
  • 36a3868 Review changes
  • f0c4ccd fix: gocritic lint issues
  • 3a23b80 ci: enable test shuffle; fix tests
  • 73dfb94 feat: make Unmarshal work with AutomaticEnv
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.27.7 to 0.29.0

Commits
  • 12b5cfd Update dependencies to v0.29.0 tag
  • 0d77c34 Merge remote-tracking branch 'origin/master' into release-1.29
  • bb0a75c add beta comment for pod replacement policy
  • 0099855 update go.mod
  • d4b94f4 Merge pull request #121765 from mimowo/ready-pods-stable-api
  • 8391a3f Merge pull request #121764 from mimowo/backoff-limit-per-index-beta-api
  • 7e58e00 Fix API comment for the Job ready field
  • 5a2bc70 Fix API comment for the FailIndex Job pod failure policy action
  • cca653e Merge pull request #113374 from ahmedtd/kep-3257-projected-types
  • d23b507 Regenerate for ClusterTrustBundlePEM projected volume API
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.27.7 to 0.29.0

Commits
  • fb8b734 Update dependencies to v0.29.0 tag
  • 288368e update go.mod
  • 86d49e7 Merge pull request #113374 from ahmedtd/kep-3257-projected-types
  • 59c256a R...

    Description has been truncated

Bumps the prod-dependencies group with 14 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/bombsimon/logrusr/v4](https://github.com/bombsimon/logrusr) | `4.0.0` | `4.1.0` |
| [github.com/docker/cli](https://github.com/docker/cli) | `24.0.6+incompatible` | `24.0.7+incompatible` |
| [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.2.4` | `1.3.0` |
| [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.15.2` | `0.17.0` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.12.1` | `2.13.2` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.29.0` | `1.30.0` |
| [github.com/operator-framework/api](https://github.com/operator-framework/api) | `0.17.7` | `0.20.0` |
| [github.com/spf13/afero](https://github.com/spf13/afero) | `1.10.0` | `1.11.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.7.0` | `1.8.0` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.16.0` | `1.18.2` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.27.7` | `0.29.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.27.7` | `0.29.0` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.15.3` | `0.16.3` |
| [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) | `1.3.0` | `1.4.0` |


Updates `github.com/bombsimon/logrusr/v4` from 4.0.0 to 4.1.0
- [Release notes](https://github.com/bombsimon/logrusr/releases)
- [Commits](bombsimon/logrusr@v4.0.0...v4.1.0)

Updates `github.com/docker/cli` from 24.0.6+incompatible to 24.0.7+incompatible
- [Commits](docker/cli@v24.0.6...v24.0.7)

Updates `github.com/go-logr/logr` from 1.2.4 to 1.3.0
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.2.4...v1.3.0)

Updates `github.com/google/go-containerregistry` from 0.15.2 to 0.17.0
- [Release notes](https://github.com/google/go-containerregistry/releases)
- [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml)
- [Commits](google/go-containerregistry@v0.15.2...v0.17.0)

Updates `github.com/onsi/ginkgo/v2` from 2.12.1 to 2.13.2
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.12.1...v2.13.2)

Updates `github.com/onsi/gomega` from 1.29.0 to 1.30.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.29.0...v1.30.0)

Updates `github.com/operator-framework/api` from 0.17.7 to 0.20.0
- [Release notes](https://github.com/operator-framework/api/releases)
- [Changelog](https://github.com/operator-framework/api/blob/master/RELEASE.md)
- [Commits](operator-framework/api@v0.17.7...v0.20.0)

Updates `github.com/spf13/afero` from 1.10.0 to 1.11.0
- [Release notes](https://github.com/spf13/afero/releases)
- [Commits](spf13/afero@v1.10.0...v1.11.0)

Updates `github.com/spf13/cobra` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.7.0...v1.8.0)

Updates `github.com/spf13/viper` from 1.16.0 to 1.18.2
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.16.0...v1.18.2)

Updates `k8s.io/api` from 0.27.7 to 0.29.0
- [Commits](kubernetes/api@v0.27.7...v0.29.0)

Updates `k8s.io/client-go` from 0.27.7 to 0.29.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.27.7...v0.29.0)

Updates `sigs.k8s.io/controller-runtime` from 0.15.3 to 0.16.3
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.15.3...v0.16.3)

Updates `sigs.k8s.io/yaml` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/yaml@v1.3.0...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/bombsimon/logrusr/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/docker/cli
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: prod-dependencies
- dependency-name: github.com/go-logr/logr
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/google/go-containerregistry
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/operator-framework/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/spf13/afero
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: github.com/spf13/viper
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
- dependency-name: sigs.k8s.io/yaml
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 18, 2023
@dependabot dependabot bot requested a review from jomkz December 18, 2023 22:11
@openshift-ci openshift-ci bot requested review from acornett21 and komish December 18, 2023 22:11
@dependabot dependabot bot requested review from komish and skattoju December 18, 2023 22:11
Copy link

openshift-ci bot commented Dec 18, 2023

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign komish for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-ci openshift-ci bot added the needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test. label Dec 18, 2023
Copy link

openshift-ci bot commented Dec 18, 2023

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a redhat-openshift-ecosystem member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 25, 2023

Superseded by #1112.

@dependabot dependabot bot closed this Dec 25, 2023
@dependabot dependabot bot deleted the dependabot/go_modules/prod-dependencies-d1f5188846 branch December 25, 2023 22:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code needs-ok-to-test Indicates a PR that requires an org member to verify it is safe to test.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant