Bump the go-dependencies group with 8 updates
Type: Pull Request
State: Open
![dependabot[bot]](https://github.com/dependabot.png)
Association: Contributor
Comments: 0
(2 months ago)
(2 months ago)
dependencies
Bumps the go-dependencies group with 8 updates:
Package | From | To |
---|---|---|
github.com/go-logr/logr | 1.4.2 |
1.4.3 |
github.com/kubernetes-csi/external-snapshotter/client/v8 | 8.0.0 |
8.2.0 |
github.com/onsi/ginkgo/v2 | 2.22.1 |
2.23.4 |
github.com/onsi/gomega | 1.36.2 |
1.36.3 |
github.com/xdg-go/stringprep | 1.0.2 |
1.0.4 |
golang.org/x/crypto | 0.36.0 |
0.40.0 |
golang.org/x/tools | 0.30.0 |
0.34.0 |
gotest.tools/v3 | 3.5.1 |
3.5.2 |
Updates github.com/go-logr/logr
from 1.4.2 to 1.4.3
Release notes
Sourced from github.com/go-logr/logr's releases.
v1.4.3
Minor release.
What's Changed
- Fix slog tests for 1.25 by
@hoeppi-google
in go-logr/logr#361- Remove one exception from Slog testing by
@thockin
in go-logr/logr#362New Contributors
@hoeppi-google
made their first contribution in go-logr/logr#361Full Changelog: https://github.com/go-logr/logr/compare/v1.4.2...v1.4.3
Commits
38a1c47
build(deps): bump github/codeql-action from 3.28.17 to 3.28.18f08bedd
build(deps): bump actions/setup-go from 5.4.0 to 5.5.06295e99
build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0028840d
build(deps): bump github/codeql-action from 3.28.15 to 3.28.17511e5fa
Merge pull request #367 from go-logr/dependabot/github_actions/github/codeql-...d806463
build(deps): bump github/codeql-action from 3.28.13 to 3.28.15158c311
Merge pull request #366 from thockin/masterc79ddb3
Update to support golangci-lint v220a64ba
build(deps): bump github/codeql-action from 3.28.12 to 3.28.130385e14
Add comments around slog exceptions- Additional commits viewable in compare view
Updates github.com/kubernetes-csi/external-snapshotter/client/v8
from 8.0.0 to 8.2.0
Release notes
Sourced from github.com/kubernetes-csi/external-snapshotter/client/v8's releases.
client/v8.2.0
The release tag client/v8.2.0 is for VolumeSnapshot and VolumeGroupSnapshot APIs and client library which are in a separate go package.
Urgent Upgrade Notes
(No, really, you MUST read this before you upgrade)
- The validation webhook was deprecated in v8.0.0 and it is now removed. The validation webhook would prevent creating multiple default volume snapshot classes and multiple default volume group snapshot classes for the same CSI driver. With the removal of the validation webhook, an error will still be raised when dynamically provisioning a VolumeSnapshot or VolumeGroupSnapshot when multiple default volume snapshot classes or multiple default volume group snapshot classes for the same CSI driver exist. (#1186,
@yati1998
)Changes by Kind
API Change
- Add a field called
volumegroupsnapshotcontent.status.volumeSnapshotHandlePairList
that allows the consumer to quickly map volume handles with snapshot handles. (#1169,@leonardoce
)- The
volumegroupsnapshot.status.pvcVolumeSnapshotRefList
field has been removed. VolumeShapshots members of a dynamically provisioned VolumeGroupSnapshot will have theirpersistentVolumeClaimName
set, allowing the consumer to map the PVC being snapshotted with the corresponding snapshot. (#1200,@leonardoce
)- The
volumegroupsnapshotcontent.status.pvVolumeSnapshotContentList
field has been removed. The same information can be found involumegroupsnapshotcontent.status.volumeSnapshotHandlePairList
(#1199,@leonardoce
)VolumeGroupSnapshotContent.status.creationTime
is now a metav1.Time instead of an unix epoch time (#1235,@leonardoce
)VolumeGroupSnapshot
,VolumeGroupSnapshotContent
, andVolumeGroupSnapshotClass
are now available inv1beta1
version. The support for thev1alpha1
version have been removed. (#1150,@leonardoce
)Full Changelog
https://github.com/kubernetes-csi/external-snapshotter/blob/v8.2.0/CHANGELOG/CHANGELOG-8.2.md
v8.2.0
Overall Status
Volume snapshotting has been a GA feature since Kubernetes v1.20.
Supported CSI Spec Versions
1.0-1.11
- VolumeGroupSnapshot moves to GA in CSI spec v1.11.0.
Minimum Kubernetes version
1.25
Recommended Minimum Kubernetes version
1.25
Container
docker pull registry.k8s.io/sig-storage/snapshot-controller:v8.2.0 docker pull registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0
Changes by Kind
API Change
VolumeGroupSnapshot
,VolumeGroupSnapshotContent
, andVolumeGroupSnapshotClass
are now available inv1beta1
version. The support for thev1alpha1
version have been removed. (#1150,@leonardoce
)
... (truncated)
Commits
0f21537
Merge pull request #1152 from manishym/snapshotter_panic_in_volumegroupsnapsh...3f3b8b3
Merge pull request #1239 from xing-yang/release-notes-8.2a1074f5
Add nil check for groupSnapshotContent in deleteCSIGroupSnapshotOperation and...a992258
Add release notes for v8.2.046e8028
Merge pull request #1238 from AndrewSirenko/fix-snapshot-controller78efd29
Merge pull request #1237 from leonardoce/update-api-approved-annotation965e259
wip: Snapshot Controller startup should not LIST all volumesnapshotsc0cb7b7
Merge pull request #1235 from leonardoce/metatime370225d
Update the API Approved Annotationcb86a44
Change CreationTime in VolumeGroupSnapshotContentStatus from *int64 to *metav...- Additional commits viewable in compare view
Updates github.com/onsi/ginkgo/v2
from 2.22.1 to 2.23.4
Release notes
Sourced from github.com/onsi/ginkgo/v2's releases.
v2.23.4
2.23.4
Prior to this release Ginkgo would compute the incorrect number of available CPUs when running with
-p
in a linux container. Thanks to@emirot
for the fix!Features
- Add automaxprocs for using CPUQuota [2b9c428]
Fixes
- clarify gotchas about -vet flag [1f59d07]
Maintenance
- bump dependencies [2d134d5]
v2.23.3
2.23.3
Fixes
- allow
-
as a standalone argument [cfcc1a5]- Bug Fix: Add GinkoTBWrapper.Chdir() and GinkoTBWrapper.Context() [feaf292]
- ignore exit code for symbol test on linux [88e2282]
v2.23.2
2.23.2
🎉🎉🎉
At long last, some long-standing performance gaps between
ginkgo
andgo test
have been resolved!Ginkgo operates by running
go test -c
to generate test binaries, and then running those binaries. It turns out that the compilation step ofgo test -c
is slower thango test
's compilation step becausego test
strips out debug symbols (ldflags=-w
) whereasgo test -c
does not.Ginkgo now passes the appropriate
ldflags
togo test -c
when running specs to strip out symbols. This is only done when it is safe to do so and symbols are preferred when profiling is enabled and whenginkgo build
is called explicitly.This, coupled, with the instructions for disabling XProtect on MacOS yields a much better performance experience with Ginkgo.
v2.23.1
2.23.1
🚨 For users on MacOS 🚨
A long-standing Ginkgo performance issue on MacOS seems to be due to mac's antimalware XProtect. You can follow the instructions here to disable it in your terminal. Doing so sped up Ginkgo's own test suite from 1m8s to 47s.
Fixes
Ginkgo's CLI is now a bit clearer if you pass flags in incorrectly:
- make it clearer that you need to pass a filename to the various profile flags, not an absolute directory [a0e52ff]
- emit an error and exit if the ginkgo invocation includes flags after positional arguments [b799d8d]
... (truncated)
Changelog
Sourced from github.com/onsi/ginkgo/v2's changelog.
2.23.4
Prior to this release Ginkgo would compute the incorrect number of available CPUs when running with
-p
in a linux container. Thanks to@emirot
for the fix!Features
- Add automaxprocs for using CPUQuota [2b9c428]
Fixes
- clarify gotchas about -vet flag [1f59d07]
Maintenance
- bump dependencies [2d134d5]
2.23.3
Fixes
- allow
-
as a standalone argument [cfcc1a5]- Bug Fix: Add GinkoTBWrapper.Chdir() and GinkoTBWrapper.Context() [feaf292]
- ignore exit code for symbol test on linux [88e2282]
2.23.2
🎉🎉🎉
At long last, some long-standing performance gaps between
ginkgo
andgo test
have been resolved!Ginkgo operates by running
go test -c
to generate test binaries, and then running those binaries. It turns out that the compilation step ofgo test -c
is slower thango test
's compilation step becausego test
strips out debug symbols (ldflags=-w
) whereasgo test -c
does not.Ginkgo now passes the appropriate
ldflags
togo test -c
when running specs to strip out symbols. This is only done when it is safe to do so and symbols are preferred when profiling is enabled and whenginkgo build
is called explicitly.This, coupled, with the instructions for disabling XProtect on MacOS yields a much better performance experience with Ginkgo.
2.23.1
🚨 For users on MacOS 🚨
A long-standing Ginkgo performance issue on MacOS seems to be due to mac's antimalware XProtect. You can follow the instructions here to disable it in your terminal. Doing so sped up Ginkgo's own test suite from 1m8s to 47s.
Fixes
Ginkgo's CLI is now a bit clearer if you pass flags in incorrectly:
- make it clearer that you need to pass a filename to the various profile flags, not an absolute directory [a0e52ff]
- emit an error and exit if the ginkgo invocation includes flags after positional arguments [b799d8d]
This might cause existing CI builds to fail. If so then it's likely that your CI build was misconfigured and should be corrected. Open an issue if you need help.
2.23.0
... (truncated)
Commits
229c981
v2.23.42d134d5
bump dependencies2b9c428
Add automaxprocs for using CPUQuota31137de
Revert "Add automaxprocs to automatically match the linux container CPU Quota"91b11b8
Add automaxprocs to automatically match the linux container CPU Quotacdfddb6
maybe escape quotes when you put them in a quoted string.1f59d07
clarify gotchas about -vet flag7ab7d10
bump all the things04a9a74
v2.23.3cfcc1a5
allow-
as a standalone argument- Additional commits viewable in compare view
Updates github.com/onsi/gomega
from 1.36.2 to 1.36.3
Release notes
Sourced from github.com/onsi/gomega's releases.
v1.36.3
1.36.3
Maintenance
- bump all the things [adb8b49]
- chore: replace
interface{}
withany
[7613216]- Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
- remove spurious "toolchain" from go.mod (#819) [a0e85b9]
- Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
- Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
- Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
- Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
- Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
- Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
- Fix typos (#813) [a1d518b]
Changelog
Sourced from github.com/onsi/gomega's changelog.
1.36.3
Maintenance
- bump all the things [adb8b49]
- chore: replace
interface{}
withany
[7613216]- Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
- remove spurious "toolchain" from go.mod (#819) [a0e85b9]
- Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
- Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
- Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
- Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
- Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
- Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
- Fix typos (#813) [a1d518b]
Commits
2251143
v1.36.3adb8b49
bump all the things7613216
chore: replaceinterface{}
withany
9fe5259
Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822)a0e85b9
remove spurious "toolchain" from go.mod (#819)604a8b1
Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823)36fbc84
Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772)ced70d7
Bump github-pages from 231 to 232 in /docs (#778)c8b4a07
Bump rexml from 3.2.6 to 3.3.9 in /docs (#788)06431b9
Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812)- Additional commits viewable in compare view
Updates github.com/xdg-go/stringprep
from 1.0.2 to 1.0.4
Release notes
Sourced from github.com/xdg-go/stringprep's releases.
v1.0.4
Maintenance
- Bump golang.org/x/text to v0.3.8 due to CVE-2022-32149
v1.0.3
Maintenance
- Bump golang.org/x/text to v0.3.7 due to CVE-2021-38561
Changelog
Sourced from github.com/xdg-go/stringprep's changelog.
[v1.0.4] - 2022-12-07
Maintenance
- Bump golang.org/x/text to v0.3.8 due to CVE-2022-32149
[v1.0.3] - 2022-03-01
Maintenance
- Bump golang.org/x/text to v0.3.7 due to CVE-2021-38561
Commits
Updates golang.org/x/crypto
from 0.36.0 to 0.40.0
Commits
459a9db
go.mod: update golang.org/x dependencies74e709a
ssh: add AlgorithmNegotiationErrorb3790b8
acme: fix TLSALPN01ChallengeCert for IP address identifiers1dc4269
acme: add Pebble integration testing97bf787
blake2b: implement hash.XOF952517d
x509roots/fallback: update bundlec6fce02
ssh: refuse to parse certificates that use a certificate as signing key0ae49b8
ssh: reject certificate keys used as signature keys for SSH certs3bf9d2a
ssh/test: skip KEX test if unsupported by system SSH client9bab967
go.mod: update golang.org/x dependencies- Additional commits viewable in compare view
Updates golang.org/x/tools
from 0.30.0 to 0.34.0
Commits
578c121
go.mod: update golang.org/x dependenciesf114dcf
gopls/internal/protocol: refine DocumentURI Clean method and its usages82ee0fd
internal/mcp: change paginateList to a generic helper64bfecc
gopls/internal/golang: fix extract bug with anon functions4546fbd
internal/mcp: unify json tag parsing82473ce
gopls/doc/release: tweak v0.19f3c581f
gopls/internal/protocol: add DocumentURI.Base accessord9bacab
gopls/internal/server: improve "editing generated file" warning1afeefa
internal/mcp: unexport FileResourceHandler33d5988
gopls/internal/server: Organize Imports of generated files- Additional commits viewable in compare view
Updates gotest.tools/v3
from 3.5.1 to 3.5.2
Release notes
Sourced from gotest.tools/v3's releases.
v3.5.2
What's Changed
- assert: ensure message is always displayed & fix under bazel by
@cstrahan
in gotestyourself/gotest.tools#276- go.mod: golang.org/x/tools v0.13.0 for go1.22+ compatibility by
@thaJeztah
in gotestyourself/gotest.tools#282- poll: Continue(): use format.Message for formatting by
@thaJeztah
in gotestyourself/gotest.tools#279- fix TestFromDirSymlink on Windows due to missing drive-letter by
@thaJeztah
in gotestyourself/gotest.tools#283- Fix various linting issues and minor bugs by
@thaJeztah
in gotestyourself/gotest.tools#280- fix badges in readme, gofmt, and minor linting fix by
@thaJeztah
in gotestyourself/gotest.tools#284- circleci: add go1.21, go1.22, go1.23, and update golangci-lint to v1.60.3 by
@thaJeztah
in gotestyourself/gotest.tools#285- assert, assert/cmp: un-deprecate assert.ErrorType for now by
@thaJeztah
in gotestyourself/gotest.tools#286New Contributors
@cstrahan
made their first contribution in gotestyourself/gotest.tools#276Full Changelog: https://github.com/gotestyourself/gotest.tools/compare/v3.5.1...v3.5.2
Commits
0b81523
Merge pull request #286 from thaJeztah/undeprecate_ErrorTypec5dad8f
Merge pull request #285 from thaJeztah/update_go_versions160ab0e
Remove go1.18 and go1.198569bbc
Merge pull request #284 from thaJeztah/cleanup_readme4256834
assert, assert/cmp: un-deprecate assert.ErrorType for noweb32186
circleci: update golangci-lint to v1.60.35fc8473
circleci: add go1.21, go1.22, go1.236f26df9
circleci: test generics on go1.20 and windows as well732dfcf
internal/difflib: rename funcs that collided with built-ins7d95f55
internal/difflib: gofmt- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase
.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
1
2
+68
-49
Package Dependencies
go
8.0.0 → 8.2.0
Minor
github.com/xdg-go/stringprep
go
1.0.2 → 1.0.4
Patch
Security Advisories
golang.org/x/text/language Out-of-bounds Read vulnerability
Keycloak has Files or Directories Accessible to External Parties
golang.org/x/text/language Denial of service via crafted Accept-Language header
Technical Details
ID: | 3075670 |
UUID: | 2657335593 |
Node ID: | PR_kwDOBPgFPM6eY7kp |
Host: | GitHub |
Repository: | CrunchyData/postgres-operator |
Merge State: | Unknown |