build(deps): bump the go-deps group across 1 directory with 8 updates #1836
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the go-deps group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.12.0` | `1.13.0` | | [github.com/fluxcd/pkg/helmtestserver](https://github.com/fluxcd/pkg) | `0.24.0` | `0.25.0` | | [github.com/fluxcd/pkg/version](https://github.com/fluxcd/pkg) | `0.7.0` | `0.8.0` | | [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) | `7.0.92` | `7.0.94` | | [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.5.0` | `2.5.2` | | [oras.land/oras-go/v2](https://github.com/oras-project/oras-go) | `2.5.0` | `2.6.0` | Updates `github.com/fluxcd/pkg/apis/meta` from 1.12.0 to 1.13.0 - [Commits](fluxcd/pkg@apis/meta/v1.12.0...apis/meta/v1.13.0) Updates `github.com/fluxcd/pkg/helmtestserver` from 0.24.0 to 0.25.0 - [Commits](fluxcd/pkg@git/v0.24.0...git/v0.25.0) Updates `github.com/fluxcd/pkg/version` from 0.7.0 to 0.8.0 - [Commits](fluxcd/pkg@tar/v0.7.0...git/v0.8.0) Updates `github.com/minio/minio-go/v7` from 7.0.92 to 7.0.94 - [Release notes](https://github.com/minio/minio-go/releases) - [Commits](minio/minio-go@v7.0.92...v7.0.94) Updates `github.com/sigstore/cosign/v2` from 2.5.0 to 2.5.2 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v2.5.0...v2.5.2) Updates `github.com/sigstore/sigstore` from 1.9.1 to 1.9.5 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.9.1...v1.9.5) Updates `google.golang.org/api` from 0.227.0 to 0.237.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.227.0...v0.237.0) Updates `oras.land/oras-go/v2` from 2.5.0 to 2.6.0 - [Release notes](https://github.com/oras-project/oras-go/releases) - [Commits](oras-project/oras-go@v2.5.0...v2.6.0) --- updated-dependencies: - dependency-name: github.com/fluxcd/pkg/apis/meta dependency-version: 1.13.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/helmtestserver dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/version dependency-version: 0.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/minio/minio-go/v7 dependency-version: 7.0.94 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/sigstore/cosign/v2 dependency-version: 2.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/sigstore/sigstore dependency-version: 1.9.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: google.golang.org/api dependency-version: 0.237.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: oras.land/oras-go/v2 dependency-version: 2.6.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the go-deps group with 6 updates in the / directory:
1.12.01.13.00.24.00.25.00.7.00.8.07.0.927.0.942.5.02.5.22.5.02.6.0Updates
github.com/fluxcd/pkg/apis/metafrom 1.12.0 to 1.13.0Commits
246bc82Merge pull request #942 from fluxcd/force-annotation86ef319Introduce reconcile.fluxcd.io/forceAt annotation9be33b3Merge pull request #941 from fluxcd/crypto-v0.39.08957219Updategolang.org/x/cryptoto v0.39.0406c48dMerge pull request #940 from fluxcd/release-git-pkgs2298005Release git/v0.32.0 and git/gogit/v0.34.047a1b23Merge pull request #938 from fluxcd/public-ecra0d4442Fix support for public.ecr.aws53c7b2dMerge pull request #939 from kane8n/update-go-git77f008cupdate go-gitUpdates
github.com/fluxcd/pkg/helmtestserverfrom 0.24.0 to 0.25.0Commits
090c3ceMerge pull request #886 from dipti-pai/move-github-provider84883b4Move auth/github to git/github0d627fbMerge pull request #885 from fluxcd/gh-app-cache-key4380ea7Take the hash of all the parts in the GitHub App token cache key84d0d45Merge pull request #882 from kathleenfrench/kfrench/cel-eval-string567773dsupport string evaluation in CEL expressions8b1f852Merge pull request #881 from fluxcd/token-cache-flags4b34b01Add CLI flags for the token cache and method to delete all eventsc05eb67Merge pull request #880 from fluxcd/cache-custom-metric-labels4d91aaeAdd option for custom event namespace label in cache metricsUpdates
github.com/fluxcd/pkg/versionfrom 0.7.0 to 0.8.0Commits
7ef01b0Merge pull request #442 from blurpy/feature/git_bearer_token659695fAdd back support for passphrase protected ssh keys767e771Validate that basic auth and bearer token cannot be set at the same timecbf091cAdd test to verify that username from Secret is preferredb6c6888Refactor of NewAuthOptions to only fill the auth options that are relevantfef9d6aAdd more test scenarios for NewAuthOptions9b9b723Validate that bearer token is not used over http04d0d48Add some quick tests of basic auth in client.validateUrl()a451505Support specifying bearerToken for git http token authentication.bfb6385Merge pull request #448 from fluxcd/e2e-uxUpdates
github.com/minio/minio-go/v7from 7.0.92 to 7.0.94Release notes
Sourced from github.com/minio/minio-go/v7's releases.
Commits
564e213fix: canceled context should not start list before do listObjects (#2122)99a107fUpdate version to next releasedc94dffAdd constants for response errors (#2120)7a9dff0Add support of error responses in 200 OK body (#2115)496595dtest: add mint test case for metadata with non-us-ascll (#2118)14d7d61fix: parse the mime metadata when do get/head object (#2106)258935aupdate documented API.md (#2111)ebcbfebadd iterator based RemoveObjects implementation (#2113)07f51b1Add Checksums to versioned list results (#2116)48ee2d3replication: add in progress metric and target status (#2109)Updates
github.com/sigstore/cosign/v2from 2.5.0 to 2.5.2Release notes
Sourced from github.com/sigstore/cosign/v2's releases.
Changelog
Sourced from github.com/sigstore/cosign/v2's changelog.
Commits
af5a988Add changelog for v2.5.2 (#4253)2eb0d91chore(deps): bump the gomod group across 1 directory with 11 updates (#4252)dbbe60echore(deps): bump gitlab.com/gitlab-org/api/client-go (#4246)a71cb51chore(deps): bump chainguard-dev/actions in the actions group (#4249)b126109Do not load trusted root when CT env key is set19ef59ddocs: improve doc for --no-upload option (#4206)6839e63Add CHANGELOG for v2.5.1 (#4245)a7345fbAdd Rekor v2 support for trusted-root create (#4242)3df894eAdd baseUrl and Uri to trusted-root create commandfb26ffdupdate builder to use go1.24.4 (#4241)Updates
github.com/sigstore/sigstorefrom 1.9.1 to 1.9.5Release notes
Sourced from github.com/sigstore/sigstore's releases.
Commits
75efc00build(deps): Bump localstack/localstack in /test/e2e in the all group (#2092)32d462fbuild(deps): Bump the all group in /test/e2e with 3 updates (#2091)007cd79build(deps): Bump the all group in /test/e2e with 3 updates (#2074)bbd546bbuild(deps): Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#2087)540126bbuild(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2088)0996ba4build(deps): Bump actions/dependency-review-action in the all group (#2085)7eafe24build(deps): Bump golang.org/x/oauth2 from 0.29.0 to 0.30.0 (#2081)d771343build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/azure (#2082)1b0bd69build(deps): Bump the all group with 2 updates (#2078)e2f3b71build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#2084)Updates
google.golang.org/apifrom 0.227.0 to 0.237.0Release notes
Sourced from google.golang.org/api's releases.
... (truncated)
Changelog
Sourced from google.golang.org/api's changelog.
... (truncated)
Commits
3fb83a0chore(main): release 0.237.0 (#3183)1540497feat(all): auto-regenerate discovery clients (#3191)0022bdefeat(all): auto-regenerate discovery clients (#3190)fc2cac2chore(all): update all (#3188)a03f9f0feat(all): auto-regenerate discovery clients (#3189)ec0e2c4feat(all): auto-regenerate discovery clients (#3187)5f2f220feat(all): auto-regenerate discovery clients (#3186)ea78c84feat(all): auto-regenerate discovery clients (#3185)7c6dc44feat(all): auto-regenerate discovery clients (#3184)bb1dc77feat(all): auto-regenerate discovery clients (#3182)Updates
oras.land/oras-go/v2from 2.5.0 to 2.6.0Release notes
Sourced from oras.land/oras-go/v2's releases.
... (truncated)
Commits
05a2b09build(deps): bump golang.org/x/sync from 0.13.0 to 0.14.0 (#955)753f8a8docs: improve README.md (#950)5043a7bdocs: updated broken links (#951)17e7d15docs: add quick start for oras-go (#939)34a87eftest: add unit tests for validateMediaType (#946)f7a6126docs: add more practical examples (#940)0c12035docs: improve docs for OCI store (#941)7963626feat: introduceCopyErrorto identify error source in copy operations (#933)6dd6913build(deps): bump golang.org/x/sync from 0.12.0 to 0.13.0 (#937)d0ac8e4docs: update example tests (#932)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions