Bump the go-dependencies group with 8 updates
Type: Pull Request
State: Open
Association: None
Comments: 0
(5 months ago)
(5 months ago)
dependencies
Bumps the go-dependencies group with 8 updates:
| Package | From | To |
|---|---|---|
| github.com/go-logr/logr | 1.4.2 |
1.4.3 |
| github.com/kubernetes-csi/external-snapshotter/client/v8 | 8.0.0 |
8.2.0 |
| github.com/onsi/ginkgo/v2 | 2.22.1 |
2.23.4 |
| github.com/onsi/gomega | 1.36.2 |
1.36.3 |
| github.com/xdg-go/stringprep | 1.0.2 |
1.0.4 |
| golang.org/x/crypto | 0.36.0 |
0.38.0 |
| golang.org/x/tools | 0.30.0 |
0.31.0 |
| gotest.tools/v3 | 3.5.1 |
3.5.2 |
Updates github.com/go-logr/logr from 1.4.2 to 1.4.3
Release notes
Sourced from github.com/go-logr/logr's releases.
v1.4.3
Minor release.
What's Changed
- Fix slog tests for 1.25 by
@hoeppi-googlein go-logr/logr#361- Remove one exception from Slog testing by
@thockinin go-logr/logr#362New Contributors
@hoeppi-googlemade their first contribution in go-logr/logr#361Full Changelog: https://github.com/go-logr/logr/compare/v1.4.2...v1.4.3
Commits
38a1c47build(deps): bump github/codeql-action from 3.28.17 to 3.28.18f08beddbuild(deps): bump actions/setup-go from 5.4.0 to 5.5.06295e99build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0028840dbuild(deps): bump github/codeql-action from 3.28.15 to 3.28.17511e5faMerge pull request #367 from go-logr/dependabot/github_actions/github/codeql-...d806463build(deps): bump github/codeql-action from 3.28.13 to 3.28.15158c311Merge pull request #366 from thockin/masterc79ddb3Update to support golangci-lint v220a64babuild(deps): bump github/codeql-action from 3.28.12 to 3.28.130385e14Add comments around slog exceptions- Additional commits viewable in compare view
Updates github.com/kubernetes-csi/external-snapshotter/client/v8 from 8.0.0 to 8.2.0
Release notes
Sourced from github.com/kubernetes-csi/external-snapshotter/client/v8's releases.
client/v8.2.0
The release tag client/v8.2.0 is for VolumeSnapshot and VolumeGroupSnapshot APIs and client library which are in a separate go package.
Urgent Upgrade Notes
(No, really, you MUST read this before you upgrade)
- The validation webhook was deprecated in v8.0.0 and it is now removed. The validation webhook would prevent creating multiple default volume snapshot classes and multiple default volume group snapshot classes for the same CSI driver. With the removal of the validation webhook, an error will still be raised when dynamically provisioning a VolumeSnapshot or VolumeGroupSnapshot when multiple default volume snapshot classes or multiple default volume group snapshot classes for the same CSI driver exist. (#1186,
@yati1998)Changes by Kind
API Change
- Add a field called
volumegroupsnapshotcontent.status.volumeSnapshotHandlePairListthat allows the consumer to quickly map volume handles with snapshot handles. (#1169,@leonardoce)- The
volumegroupsnapshot.status.pvcVolumeSnapshotRefListfield has been removed. VolumeShapshots members of a dynamically provisioned VolumeGroupSnapshot will have theirpersistentVolumeClaimNameset, allowing the consumer to map the PVC being snapshotted with the corresponding snapshot. (#1200,@leonardoce)- The
volumegroupsnapshotcontent.status.pvVolumeSnapshotContentListfield has been removed. The same information can be found involumegroupsnapshotcontent.status.volumeSnapshotHandlePairList(#1199,@leonardoce)VolumeGroupSnapshotContent.status.creationTimeis now a metav1.Time instead of an unix epoch time (#1235,@leonardoce)VolumeGroupSnapshot,VolumeGroupSnapshotContent, andVolumeGroupSnapshotClassare now available inv1beta1version. The support for thev1alpha1version have been removed. (#1150,@leonardoce)Full Changelog
https://github.com/kubernetes-csi/external-snapshotter/blob/v8.2.0/CHANGELOG/CHANGELOG-8.2.md
v8.2.0
Overall Status
Volume snapshotting has been a GA feature since Kubernetes v1.20.
Supported CSI Spec Versions
1.0-1.11
- VolumeGroupSnapshot moves to GA in CSI spec v1.11.0.
Minimum Kubernetes version
1.25
Recommended Minimum Kubernetes version
1.25
Container
docker pull registry.k8s.io/sig-storage/snapshot-controller:v8.2.0 docker pull registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0Changes by Kind
API Change
VolumeGroupSnapshot,VolumeGroupSnapshotContent, andVolumeGroupSnapshotClassare now available inv1beta1version. The support for thev1alpha1version have been removed. (#1150,@leonardoce)
... (truncated)
Commits
0f21537Merge pull request #1152 from manishym/snapshotter_panic_in_volumegroupsnapsh...3f3b8b3Merge pull request #1239 from xing-yang/release-notes-8.2a1074f5Add nil check for groupSnapshotContent in deleteCSIGroupSnapshotOperation and...a992258Add release notes for v8.2.046e8028Merge pull request #1238 from AndrewSirenko/fix-snapshot-controller78efd29Merge pull request #1237 from leonardoce/update-api-approved-annotation965e259wip: Snapshot Controller startup should not LIST all volumesnapshotsc0cb7b7Merge pull request #1235 from leonardoce/metatime370225dUpdate the API Approved Annotationcb86a44Change CreationTime in VolumeGroupSnapshotContentStatus from *int64 to *metav...- Additional commits viewable in compare view
Updates github.com/onsi/ginkgo/v2 from 2.22.1 to 2.23.4
Release notes
Sourced from github.com/onsi/ginkgo/v2's releases.
v2.23.4
2.23.4
Prior to this release Ginkgo would compute the incorrect number of available CPUs when running with
-pin a linux container. Thanks to@emirotfor the fix!Features
- Add automaxprocs for using CPUQuota [2b9c428]
Fixes
- clarify gotchas about -vet flag [1f59d07]
Maintenance
- bump dependencies [2d134d5]
v2.23.3
2.23.3
Fixes
- allow
-as a standalone argument [cfcc1a5]- Bug Fix: Add GinkoTBWrapper.Chdir() and GinkoTBWrapper.Context() [feaf292]
- ignore exit code for symbol test on linux [88e2282]
v2.23.2
2.23.2
🎉🎉🎉
At long last, some long-standing performance gaps between
ginkgoandgo testhave been resolved!Ginkgo operates by running
go test -cto generate test binaries, and then running those binaries. It turns out that the compilation step ofgo test -cis slower thango test's compilation step becausego teststrips out debug symbols (ldflags=-w) whereasgo test -cdoes not.Ginkgo now passes the appropriate
ldflagstogo test -cwhen running specs to strip out symbols. This is only done when it is safe to do so and symbols are preferred when profiling is enabled and whenginkgo buildis called explicitly.This, coupled, with the instructions for disabling XProtect on MacOS yields a much better performance experience with Ginkgo.
v2.23.1
2.23.1
🚨 For users on MacOS 🚨
A long-standing Ginkgo performance issue on MacOS seems to be due to mac's antimalware XProtect. You can follow the instructions here to disable it in your terminal. Doing so sped up Ginkgo's own test suite from 1m8s to 47s.
Fixes
Ginkgo's CLI is now a bit clearer if you pass flags in incorrectly:
- make it clearer that you need to pass a filename to the various profile flags, not an absolute directory [a0e52ff]
- emit an error and exit if the ginkgo invocation includes flags after positional arguments [b799d8d]
... (truncated)
Changelog
Sourced from github.com/onsi/ginkgo/v2's changelog.
2.23.4
Prior to this release Ginkgo would compute the incorrect number of available CPUs when running with
-pin a linux container. Thanks to@emirotfor the fix!Features
- Add automaxprocs for using CPUQuota [2b9c428]
Fixes
- clarify gotchas about -vet flag [1f59d07]
Maintenance
- bump dependencies [2d134d5]
2.23.3
Fixes
- allow
-as a standalone argument [cfcc1a5]- Bug Fix: Add GinkoTBWrapper.Chdir() and GinkoTBWrapper.Context() [feaf292]
- ignore exit code for symbol test on linux [88e2282]
2.23.2
🎉🎉🎉
At long last, some long-standing performance gaps between
ginkgoandgo testhave been resolved!Ginkgo operates by running
go test -cto generate test binaries, and then running those binaries. It turns out that the compilation step ofgo test -cis slower thango test's compilation step becausego teststrips out debug symbols (ldflags=-w) whereasgo test -cdoes not.Ginkgo now passes the appropriate
ldflagstogo test -cwhen running specs to strip out symbols. This is only done when it is safe to do so and symbols are preferred when profiling is enabled and whenginkgo buildis called explicitly.This, coupled, with the instructions for disabling XProtect on MacOS yields a much better performance experience with Ginkgo.
2.23.1
🚨 For users on MacOS 🚨
A long-standing Ginkgo performance issue on MacOS seems to be due to mac's antimalware XProtect. You can follow the instructions here to disable it in your terminal. Doing so sped up Ginkgo's own test suite from 1m8s to 47s.
Fixes
Ginkgo's CLI is now a bit clearer if you pass flags in incorrectly:
- make it clearer that you need to pass a filename to the various profile flags, not an absolute directory [a0e52ff]
- emit an error and exit if the ginkgo invocation includes flags after positional arguments [b799d8d]
This might cause existing CI builds to fail. If so then it's likely that your CI build was misconfigured and should be corrected. Open an issue if you need help.
2.23.0
... (truncated)
Commits
229c981v2.23.42d134d5bump dependencies2b9c428Add automaxprocs for using CPUQuota31137deRevert "Add automaxprocs to automatically match the linux container CPU Quota"91b11b8Add automaxprocs to automatically match the linux container CPU Quotacdfddb6maybe escape quotes when you put them in a quoted string.1f59d07clarify gotchas about -vet flag7ab7d10bump all the things04a9a74v2.23.3cfcc1a5allow-as a standalone argument- Additional commits viewable in compare view
Updates github.com/onsi/gomega from 1.36.2 to 1.36.3
Release notes
Sourced from github.com/onsi/gomega's releases.
v1.36.3
1.36.3
Maintenance
- bump all the things [adb8b49]
- chore: replace
interface{}withany[7613216]- Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
- remove spurious "toolchain" from go.mod (#819) [a0e85b9]
- Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
- Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
- Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
- Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
- Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
- Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
- Fix typos (#813) [a1d518b]
Changelog
Sourced from github.com/onsi/gomega's changelog.
1.36.3
Maintenance
- bump all the things [adb8b49]
- chore: replace
interface{}withany[7613216]- Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
- remove spurious "toolchain" from go.mod (#819) [a0e85b9]
- Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
- Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
- Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
- Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
- Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
- Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
- Fix typos (#813) [a1d518b]
Commits
2251143v1.36.3adb8b49bump all the things7613216chore: replaceinterface{}withany9fe5259Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822)a0e85b9remove spurious "toolchain" from go.mod (#819)604a8b1Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823)36fbc84Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772)ced70d7Bump github-pages from 231 to 232 in /docs (#778)c8b4a07Bump rexml from 3.2.6 to 3.3.9 in /docs (#788)06431b9Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812)- Additional commits viewable in compare view
Updates github.com/xdg-go/stringprep from 1.0.2 to 1.0.4
Release notes
Sourced from github.com/xdg-go/stringprep's releases.
v1.0.4
Maintenance
- Bump golang.org/x/text to v0.3.8 due to CVE-2022-32149
v1.0.3
Maintenance
- Bump golang.org/x/text to v0.3.7 due to CVE-2021-38561
Changelog
Sourced from github.com/xdg-go/stringprep's changelog.
[v1.0.4] - 2022-12-07
Maintenance
- Bump golang.org/x/text to v0.3.8 due to CVE-2022-32149
[v1.0.3] - 2022-03-01
Maintenance
- Bump golang.org/x/text to v0.3.7 due to CVE-2021-38561
Commits
Updates golang.org/x/crypto from 0.36.0 to 0.38.0
Commits
aae6e61go.mod: update golang.org/x dependencies9c1aa6assh/test: reset the random source before capturing a recording8819902ssh/test: enable Diffie-Hellman key exchange algorithms3f311e4acme: return error from pre-authorization when unsupported1f7c62cssh/test: skip unsupported tests on js/wasma5f8048acme/autocert: use standard functions to pick the cache directory958cde8Revert "chacha20: add loong64 SIMD implementation"51f005cRevert "salsa20: add loong64 SIMD implementation"7c35866Revert "argon2: add loong64 SIMD implementation"0091fc8Revert "blake2s: add loong64 SIMD implementation"- Additional commits viewable in compare view
Updates golang.org/x/tools from 0.30.0 to 0.31.0
Commits
6a5b66bgo.mod: update golang.org/x dependencies25a90begopls/internal/golang: Implementations for func typesdb6008cgo/types/internal/play: show Cursor.Stack of selected nodeece9e9bgopls/doc/generate: add status in codelenses and inlayhints340f21agopls: move gopls/doc/generate package0721940gopls/internal/analysis/modernize: strings.Fields -> FieldsSeq8d38122gopls/internal/cache: reproduce and fix crash on if cond overflowd81d6fcgopls/internal/util/asm: better assembly parsing455db21gopls/internal/cache/parsego: fix OOB crash in fixInitStmt2b1f550gopls/internal/analysis/gofix: allow literal array lengths- Additional commits viewable in compare view
Updates gotest.tools/v3 from 3.5.1 to 3.5.2
Release notes
Sourced from gotest.tools/v3's releases.
v3.5.2
What's Changed
- assert: ensure message is always displayed & fix under bazel by
@cstrahanin gotestyourself/gotest.tools#276- go.mod: golang.org/x/tools v0.13.0 for go1.22+ compatibility by
@thaJeztahin gotestyourself/gotest.tools#282- poll: Continue(): use format.Message for formatting by
@thaJeztahin gotestyourself/gotest.tools#279- fix TestFromDirSymlink on Windows due to missing drive-letter by
@thaJeztahin gotestyourself/gotest.tools#283- Fix various linting issues and minor bugs by
@thaJeztahin gotestyourself/gotest.tools#280- fix badges in readme, gofmt, and minor linting fix by
@thaJeztahin gotestyourself/gotest.tools#284- circleci: add go1.21, go1.22, go1.23, and update golangci-lint to v1.60.3 by
@thaJeztahin gotestyourself/gotest.tools#285- assert, assert/cmp: un-deprecate assert.ErrorType for now by
@thaJeztahin gotestyourself/gotest.tools#286New Contributors
@cstrahanmade their first contribution in gotestyourself/gotest.tools#276Full Changelog: https://github.com/gotestyourself/gotest.tools/compare/v3.5.1...v3.5.2
Commits
0b81523Merge pull request #286 from thaJeztah/undeprecate_ErrorTypec5dad8fMerge pull request #285 from thaJeztah/update_go_versions160ab0eRemove go1.18 and go1.198569bbcMerge pull request #284 from thaJeztah/cleanup_readme4256834assert, assert/cmp: un-deprecate assert.ErrorType for noweb32186circleci: update golangci-lint to v1.60.35fc8473circleci: add go1.21, go1.22, go1.236f26df9circleci: test generics on go1.20 and windows as well732dfcfinternal/difflib: rename funcs that collided with built-ins7d95f55internal/difflib: gofmt- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions
Pull Request Statistics
1
2
+65
-46
Package Dependencies
go
8.0.0 → 8.2.0
Minor
github.com/xdg-go/stringprep
go
1.0.2 → 1.0.4
Patch
Security Advisories
golang.org/x/text/language Out-of-bounds Read vulnerability
Keycloak has Files or Directories Accessible to External Parties
golang.org/x/text/language Denial of service via crafted Accept-Language header
Technical Details
| ID: | 1278829 |
| UUID: | 2563582018 |
| Node ID: | PR_kwDOCshED86YzShC |
| Host: | GitHub |
| Repository: | cbandy/postgres-operator |
| Merge State: | Unknown |