Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update all non-major dependencies #325

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Jun 19, 2024

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
cert-manager/cert-manager patch v1.16.0 -> v1.16.2 age adoption passing confidence
github.com/aws/aws-sdk-go-v2 require minor v1.27.0 -> v1.32.6 age adoption passing confidence
github.com/aws/aws-sdk-go-v2/config require minor v1.27.15 -> v1.28.6 age adoption passing confidence
github.com/aws/aws-sdk-go-v2/credentials require patch v1.17.15 -> v1.17.47 age adoption passing confidence
github.com/aws/aws-sdk-go-v2/service/acmpca require minor v1.29.5 -> v1.37.8 age adoption passing confidence
github.com/aws/aws-sdk-go-v2/service/iam require minor v1.32.1 -> v1.38.2 age adoption passing confidence
github.com/aws/aws-sdk-go-v2/service/ram require minor v1.25.5 -> v1.29.7 age adoption passing confidence
github.com/aws/aws-sdk-go-v2/service/sts require minor v1.28.9 -> v1.33.2 age adoption passing confidence
github.com/cert-manager/cert-manager require minor v1.15.4 -> v1.16.2 age adoption passing confidence
github.com/go-logr/logr require patch v1.4.1 -> v1.4.2 age adoption passing confidence
github.com/stretchr/testify require minor v1.9.0 -> v1.10.0 age adoption passing confidence
go (source) toolchain minor 1.22.3 -> 1.23.4 age adoption passing confidence
golang stage minor 1.22.3 -> 1.23.4 age adoption passing confidence
golang stage minor 1.22 -> 1.23 age adoption passing confidence
k8s.io/api require minor v0.30.1 -> v0.32.0 age adoption passing confidence
k8s.io/apimachinery require minor v0.30.1 -> v0.32.0 age adoption passing confidence
k8s.io/client-go require minor v0.30.1 -> v0.32.0 age adoption passing confidence
k8s.io/utils require digest fe8a2dd -> 24370be age adoption passing confidence
kubernetes-sigs/controller-tools minor 0.15.0 -> 0.16.5 age adoption passing confidence
sigs.k8s.io/controller-runtime require minor v0.18.2 -> v0.19.3 age adoption passing confidence

Release Notes

cert-manager/cert-manager (cert-manager/cert-manager)

v1.16.2

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This patch release of cert-manager 1.16 makes several changes to how PEM input is validated, adding maximum sizes appropriate to the type of PEM data which is being parsed.

This is to prevent an unacceptable slow-down in parsing specially crafted PEM data. The issue was found by Google's OSS-Fuzz project.

The issue is low severity; to exploit the PEM issue would require privileged access which would likely allow Denial-of-Service through other methods.

Note also that since most PEM data parsed by cert-manager comes from ConfigMap or Secret resources which have a max size limit of approximately 1MB, it's difficult to force cert-manager to parse large amounts of PEM data.

Further information is available in GHSA-r4pg-vg54-wxx4

In addition, the version of Go used to build cert-manager 1.16 was updated along with the base images.

Changes by Kind

Bug or Regression
  • Set a maximum size for PEM inputs which cert-manager will accept to remove possibility of taking a long time to process an input (#​7401, @​SgtCoDFish)
Other (Cleanup or Flake)

v1.16.1

Compare Source

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

The cert-manager 1.16 release includes: new Helm chart features, more Prometheus metrics, memory optimizations, and various improvements and bug fixes for the ACME issuer and Venafi Issuer.

📖 Read the complete 1.16 release notes before upgrading.

📜Changes since v1.16.0

Bug or Regression
  • BUGFIX: Helm schema validation: the new schema validation was too strict for the "global" section. Since the global section is shared across all charts and sub-charts, we must also allow unknown fields. (#​7348, @inteon)
  • BUGFIX: Helm will now accept percentages for the podDisruptionBudget.minAvailable and podDisruptionBudget.maxAvailable values. (#​7345, @inteon)
  • Helm: allow enabled to be set as a value to toggle cert-manager as a dependency. (#​7356, @inteon)
  • BUGFIX: A change in v1.16.0 caused cert-manager's ACME ClusterIssuer to look in the wrong namespace for resources required for the issuance (e.g. credential Secrets). This is now fixed in v1.16.1. (#​7342, @inteon)
aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

v1.32.6

Compare Source

v1.32.5

Compare Source

v1.32.4

Compare Source

v1.32.3

Compare Source

v1.32.2

Compare Source

v1.32.1

Compare Source

v1.32.0

Compare Source

v1.31.0

Compare Source

v1.30.5

Compare Source

v1.30.4

Compare Source

v1.30.3

Compare Source

v1.30.2

Compare Source

v1.30.1

Compare Source

v1.30.0

Compare Source

v1.29.0

v1.28.0

v1.27.2

v1.27.1

go-logr/logr (github.com/go-logr/logr)

v1.4.2

Compare Source

What's Changed

Dependencies:

Full Changelog: go-logr/logr@v1.4.1...v1.4.2

stretchr/testify (github.com/stretchr/testify)

v1.10.0

Compare Source

What's Changed

Functional Changes
Fixes
Documantation, Build & CI

New Contributors

Full Changelog: stretchr/testify@v1.9.0...v1.10.0

golang/go (go)

v1.23.4

v1.23.3

v1.23.2

v1.23.1

v1.23.0

v1.22.10

v1.22.9

v1.22.8

v1.22.7

v1.22.6

v1.22.5

v1.22.4

kubernetes/api (k8s.io/api)

v0.32.0

Compare Source

v0.31.4

Compare Source

v0.31.3

Compare Source

v0.31.2

Compare Source

v0.31.1

Compare Source

v0.31.0

Compare Source

v0.30.8

Compare Source

v0.30.7

Compare Source

v0.30.6

Compare Source

v0.30.5

Compare Source

v0.30.4

Compare Source

v0.30.3

Compare Source

v0.30.2

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.32.0

Compare Source

v0.31.4

Compare Source

v0.31.3

Compare Source

v0.31.2

Compare Source

v0.31.1

Compare Source

v0.31.0

Compare Source

v0.30.8

Compare Source

v0.30.7

Compare Source

v0.30.6

Compare Source

v0.30.5

Compare Source

v0.30.4

Compare Source

v0.30.3

Compare Source

v0.30.2

Compare Source

kubernetes/client-go (k8s.io/client-go)

v0.32.0

Compare Source

v0.31.4

Compare Source

v0.31.3

Compare Source

v0.31.2

Compare Source

v0.31.1

Compare Source

v0.31.0

Compare Source

v0.30.8

Compare Source

v0.30.7

Compare Source

v0.30.6

Compare Source

v0.30.5

Compare Source

v0.30.4

Compare Source

v0.30.3

Compare Source

v0.30.2

Compare Source

kubernetes-sigs/controller-tools (kubernetes-sigs/controller-tools)

v0.16.5

Compare Source

What's Changed

Dependencies

Full Changelog: kubernetes-sigs/controller-tools@v0.16.4...v0.16.5

v0.16.4

Compare Source

What's Changed

Dependencies

New Contributors

Full Changelog: kubernetes-sigs/controller-tools@v0.16.3...v0.16.4

v0.16.3

Compare Source

Published binaries on previous v0.16.x releases were reporting an incorrect version.

What's Changed

Dependencies

  • 🌱 Bump github.com/onsi/gomega from 1.34.1 to 1.34.2 in the all-go-mod-patch-and-minor group by @​dependabot in [https://github.com/kubernetes

Configuration

📅 Schedule: Branch creation - "after 9am on Wednesday,before 12pm on Wednesday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link
Contributor Author

renovate bot commented Jun 19, 2024

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 29 additional dependencies were updated

Details:

Package Change
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.3 -> v1.16.21
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.7 -> v1.3.25
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.7 -> v2.6.25
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.0 -> v1.8.1
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.2 -> v1.12.1
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.9 -> v1.12.6
github.com/aws/aws-sdk-go-v2/service/sso v1.20.8 -> v1.24.7
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.24.2 -> v1.28.6
github.com/aws/smithy-go v1.20.2 -> v1.22.1
github.com/emicklei/go-restful/v3 v3.12.0 -> v3.12.1
github.com/prometheus/client_golang v1.18.0 -> v1.20.4
github.com/prometheus/common v0.46.0 -> v0.55.0
github.com/prometheus/procfs v0.15.0 -> v0.15.1
github.com/spf13/cobra v1.8.0 -> v1.8.1
golang.org/x/crypto v0.24.0 -> v0.28.0
golang.org/x/exp v0.0.0-20240506185415-9bf2ced13842 -> v0.0.0-20240719175910-8a7402abbf56
golang.org/x/net v0.26.0 -> v0.30.0
golang.org/x/oauth2 v0.20.0 -> v0.23.0
golang.org/x/sys v0.21.0 -> v0.26.0
golang.org/x/term v0.21.0 -> v0.25.0
golang.org/x/text v0.16.0 -> v0.19.0
golang.org/x/time v0.5.0 -> v0.7.0
google.golang.org/protobuf v1.34.1 -> v1.35.1
k8s.io/apiextensions-apiserver v0.30.1 -> v0.31.1
k8s.io/component-base v0.30.1 -> v0.31.1
k8s.io/klog/v2 v2.120.1 -> v2.130.1
k8s.io/kube-openapi v0.0.0-20240430033511-f0e62f92d13f -> v0.0.0-20241105132330-32ad38e42d3f
sigs.k8s.io/json v0.0.0-20221116044647-bc3834ca7abd -> v0.0.0-20241010143419-9aa6b5e7a4b3
sigs.k8s.io/structured-merge-diff/v4 v4.4.1 -> v4.4.2

@cert-manager-prow
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign munnerz for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 2b01dac to 64dee19 Compare June 19, 2024 19:38
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 7 times, most recently from 7b87743 to 921e3c1 Compare July 3, 2024 02:10
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from 86f00a3 to 4400a7f Compare July 10, 2024 19:34
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from fa07001 to 27e33a9 Compare July 12, 2024 20:15
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 2 times, most recently from b06926e to 6a99f80 Compare July 18, 2024 20:48
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 6a99f80 to a2230ed Compare July 30, 2024 14:08
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from c67cd33 to 8de3726 Compare August 13, 2024 16:58
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 04918da to d342f02 Compare August 15, 2024 10:26
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from c5e005a to 7a25b08 Compare October 28, 2024 22:15
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 6 times, most recently from 576dd2f to eca8bdd Compare November 7, 2024 21:14
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 8 times, most recently from 4be05f6 to 3701742 Compare November 21, 2024 19:58
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from 3701742 to ad15124 Compare November 23, 2024 12:12
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 4 times, most recently from 64d5a80 to f204028 Compare December 4, 2024 03:51
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from f204028 to 39a7cf6 Compare December 10, 2024 11:49
@renovate renovate bot changed the title chore(deps): update all non-major dependencies fix(deps): update all non-major dependencies Dec 10, 2024
@renovate renovate bot force-pushed the renovate/all-minor-patch branch 3 times, most recently from 18c1ac6 to b040248 Compare December 12, 2024 00:17
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot force-pushed the renovate/all-minor-patch branch from b040248 to c5ac266 Compare December 16, 2024 18:38
@renovate renovate bot changed the title fix(deps): update all non-major dependencies Update all non-major dependencies Dec 16, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant