Bump the go-deps group across 1 directory with 10 updates - #1080
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the go-deps group across 1 directory with 10 updates#1080dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the go-deps group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.6.1` | `0.7.0` | | [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) | `0.27.0` | `0.28.0` | | [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.30.1` | `1.31.0` | | [github.com/fluxcd/pkg/auth](https://github.com/fluxcd/pkg) | `0.54.0` | `0.56.0` | | [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.110.0` | `0.111.0` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.9.0` | `5.9.1` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.19.1` | `5.19.2` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.6` | `0.21.7` | Updates `github.com/cyphar/filepath-securejoin` from 0.6.1 to 0.7.0 - [Release notes](https://github.com/cyphar/filepath-securejoin/releases) - [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md) - [Commits](cyphar/filepath-securejoin@v0.6.1...v0.7.0) Updates `github.com/fluxcd/pkg/apis/event` from 0.27.0 to 0.28.0 - [Commits](fluxcd/pkg@git/v0.27.0...git/v0.28.0) Updates `github.com/fluxcd/pkg/apis/meta` from 1.30.1 to 1.31.0 - [Commits](fluxcd/pkg@apis/meta/v1.30.1...apis/meta/v1.31.0) Updates `github.com/fluxcd/pkg/auth` from 0.54.0 to 0.56.0 - [Commits](fluxcd/pkg@oci/v0.54.0...oci/v0.56.0) Updates `github.com/fluxcd/pkg/runtime` from 0.110.0 to 0.111.0 - [Commits](fluxcd/pkg@runtime/v0.110.0...runtime/v0.111.0) Updates `github.com/go-git/go-billy/v5` from 5.9.0 to 5.9.1 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.9.0...v5.9.1) Updates `github.com/go-git/go-git/v5` from 5.19.1 to 5.19.2 - [Release notes](https://github.com/go-git/go-git/releases) - [Changelog](https://github.com/go-git/go-git/blob/main/HISTORY.md) - [Commits](go-git/go-git@v5.19.1...v5.19.2) Updates `github.com/google/go-containerregistry` from 0.21.6 to 0.21.7 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.6...v0.21.7) Updates `github.com/onsi/gomega` from 1.41.0 to 1.42.1 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.41.0...v1.42.1) Updates `golang.org/x/crypto` from 0.52.0 to 0.53.0 - [Commits](golang/crypto@v0.52.0...v0.53.0) --- updated-dependencies: - dependency-name: github.com/cyphar/filepath-securejoin dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/apis/event dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/apis/meta dependency-version: 1.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/auth dependency-version: 0.56.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/fluxcd/pkg/runtime dependency-version: 0.111.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: github.com/go-git/go-billy/v5 dependency-version: 5.9.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/go-git/go-git/v5 dependency-version: 5.19.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-deps - dependency-name: github.com/onsi/gomega dependency-version: 1.42.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps - dependency-name: golang.org/x/crypto dependency-version: 0.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-deps ... Signed-off-by: dependabot[bot] <support@github.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go-deps group with 8 updates in the / directory:
0.6.10.7.00.27.00.28.01.30.11.31.00.54.00.56.00.110.00.111.05.9.05.9.15.19.15.19.20.21.60.21.7Updates
github.com/cyphar/filepath-securejoinfrom 0.6.1 to 0.7.0Changelog
Sourced from github.com/cyphar/filepath-securejoin's changelog.
Commits
8096a95VERSION: release v0.7.01324ccbmerge #101 into cyphar/filepath-securejoin:maindd8f0bbdeps: bump to cyphar.com/go-pathrs@v0.2.5c9a7725gha: bump golangci-lint to v2.122e968bdMerge pull request #91 from cyphar/dependabot/github_actions/actions/download...2879148Merge pull request #90 from cyphar/dependabot/github_actions/actions/upload-a...07b805bbuild(deps): bump actions/download-artifact from 6 to 78507844build(deps): bump actions/upload-artifact from 5 to 6daef0cfMerge pull request #89 from cyphar/dependabot/github_actions/actions/checkout-695f8ea4build(deps): bump actions/checkout from 5 to 6Updates
github.com/fluxcd/pkg/apis/eventfrom 0.27.0 to 0.28.0Commits
00782edMerge pull request #917 from fluxcd/test-auth-providers3976c50[RFC-0010] Add tests for auth providers182841aMerge pull request #916 from fluxcd/cache-op-label1e41450Introduce operation label for cache event metricaa3cde9Merge pull request #909 from fluxcd/auth-azure9e0e8bc[RFC-0010] Add azure auth library7eae091Merge pull request #908 from fluxcd/auth-gcp9f68942Merge pull request #907 from fluxcd/auth-awsbb7cb58Merge pull request #906 from fluxcd/auth-core45fbfee[RFC-0010] Add gcp auth libraryUpdates
github.com/fluxcd/pkg/apis/metafrom 1.30.1 to 1.31.0Commits
b98e2b0Merge pull request #1251 from fluxcd/release-main2dfcb7cPrepare for releasedd6b016Merge pull request #1253 from fluxcd/upgrade-k8s-36.22d00796Upgrade kubernetes to 1.36.2827f6c3Merge pull request #1249 from fluxcd/upgrade-go-git-providersbe6d462Upgrade go-git-providers and go-github023a357Merge pull request #1248 from fluxcd/label-2.97e8856dAdd backport label for Flux 2.9Updates
github.com/fluxcd/pkg/authfrom 0.54.0 to 0.56.0Commits
bf02f0aMerge pull request #1026 from fluxcd/storage-refactoringe2dd3d1artifact: Refactor storage package structureee36d78Merge pull request #1025 from fluxcd/controller-runtime-v0.22.1b5ab5b9Prepare release6ce90c6Add the Artifact Management SDK to readmee4f3937Update controller-runtime to v0.22.19e2ac7dMerge pull request #1024 from fluxcd/dependabot/github_actions/ci-43e651404493ac531build(deps): bump the ci group across 1 directory with 5 updates24724beMerge pull request #1023 from fluxcd/runtime-env-vars85cb1e2runtime: Add environment variablesUpdates
github.com/fluxcd/pkg/runtimefrom 0.110.0 to 0.111.0Commits
b98e2b0Merge pull request #1251 from fluxcd/release-main2dfcb7cPrepare for releasedd6b016Merge pull request #1253 from fluxcd/upgrade-k8s-36.22d00796Upgrade kubernetes to 1.36.2827f6c3Merge pull request #1249 from fluxcd/upgrade-go-git-providersbe6d462Upgrade go-git-providers and go-github023a357Merge pull request #1248 from fluxcd/label-2.97e8856dAdd backport label for Flux 2.9ae10469Merge pull request #1246 from fluxcd/ks-always-subst2cd36cbkustomize: add tests for empty vars with strict sub and omitted withoutUpdates
github.com/go-git/go-billy/v5from 5.9.0 to 5.9.1Release notes
Sourced from github.com/go-git/go-billy/v5's releases.
Commits
19ea4ddMerge pull request #229 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...8923518build: Update module golang.org/x/net to v0.56.0 [SECURITY]306e011Merge pull request #230 from go-git/renovate/releases/v5.x-go-golang.org-x-te...6108d3abuild: Update module golang.org/x/text to v0.39.0 [SECURITY]f135070Merge pull request #216 from go-git/renovate/releases/v5.x-go-golang.org-x-ne...473e72cbuild: Update module golang.org/x/net to v0.55.0 [SECURITY]Updates
github.com/go-git/go-git/v5from 5.19.1 to 5.19.2Release notes
Sourced from github.com/go-git/go-git/v5's releases.
Commits
3eeb238Merge pull request #2277 from go-git/checkout-v5008a78fgit: worktree, make the filesystem wrapper a symlink-safe boundary2263fb5Merge pull request #2268 from go-git/renovate/releases/v5.x-go-golang.org-x-t...77b7625build: Update module golang.org/x/text to v0.39.0 [SECURITY]85ea767Merge pull request #2267 from go-git/renovate/releases/v5.x-go-golang.org-x-n...198675abuild: Update module golang.org/x/net to v0.56.0 [SECURITY]4a0e66dMerge pull request #2254 from pjbgf/v5-dotgit-ref-name-containment3b306efstorage: dotgit, align reference-name safety with refname_is_safef3d0cc1storage: dotgit, reject path traversal in reference names979cfe9Merge pull request #2262 from joshblum/joshblum/to-slash-v5Updates
github.com/google/go-containerregistryfrom 0.21.6 to 0.21.7Release notes
Sourced from github.com/google/go-containerregistry's releases.
Commits
c68d899Bump go version to 1.26.4 (#2350)da61d86transport: do not re-attach bearer token after cross-host redirect (#2349)09fe1e5fix(tarball): normalize paths when matching files (#2334)5baa399build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)97a8a17fix(transport): apply refreshed bearer token after cross-host redirect (#2337)e963497internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)02649eafix: prevent SSRF in google.List() pagination (#2332)7204b40build(deps): bump the actions group across 1 directory with 2 updates (#2344)4cfaa93build(deps): bump the go-deps group across 1 directory with 2 updates (#2343)6849394pkg/registry: export RedirectError (#2177)Updates
github.com/onsi/gomegafrom 1.41.0 to 1.42.1Release notes
Sourced from github.com/onsi/gomega's releases.
Changelog
Sourced from github.com/onsi/gomega's changelog.
Commits
ced6c1cv1.42.12beb9fbv1.42.1 (full)006cd2cbump al lthe things35ca084v1.42.0d72697bv1.42.0 (full)1f95d86add a set of claude skills as a marketplace pluginUpdates
golang.org/x/cryptofrom 0.52.0 to 0.53.0Commits
45460e0go.mod: update golang.org/x dependenciesd37c95epkcs12: limit PBKDF iteration count to prevent CPU exhaustione2ffffessh: reject incomplete gssapi-with-mic configurations60e158assh/test: isolate CLI tests from user SSH config and agent1b77d23ssh/knownhosts: reject lines with multiple or unknown markers3872a2bssh/knownhosts: verify declared key type matches decoded key9f72eccssh/knownhosts: treat only ASCII space and tab as whitespace8f405a4ssh: validate ECDSA curve matches expected algorithmbb41b3dssh: improve DH GEX group selection using PreferredBitse04e721ssh/agent: validate ed25519 private key length in AddDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions