fix(deps): update non-minor dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
docker.io/bitnami/os-shell (source)		patch	12-debian-12-r31 -> 12-debian-12-r35
github.com/onsi/ginkgo/v2	require	patch	v2.22.0 -> v2.22.2
github.com/onsi/gomega	require	patch	v1.36.0 -> v1.36.2
github.com/sap/admission-webhook-runtime	require	patch	v0.1.44 -> v0.1.54
github.com/sap/component-operator-runtime	require	patch	v0.3.45 -> v0.3.63
github.com/sap/go-generics	require	patch	v0.2.20 -> v0.2.23
go (source)	golang	patch	1.23.2 -> 1.23.4
sigs.k8s.io/controller-runtime	require	patch	v0.19.3 -> v0.19.4
sigs.k8s.io/controller-runtime/tools/setup-envtest	require	digest	a9b7c2d -> d19d76c

---

Release Notes

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.22.2

Compare Source

What's Changed

• Bump golang.org/x/net from 0.32.0 to 0.33.0 by @​dependabot in https://github.com/onsi/ginkgo/pull/1496
• Bump golang.org/x/crypto from 0.17.0 to 0.31.0 in /ginkgo/performance/_fixtures/performance_fixture by @​dependabot in https://github.com/onsi/ginkgo/pull/1498
• Bump github.com/onsi/gomega from 1.36.1 to 1.36.2 by @​dependabot in https://github.com/onsi/ginkgo/pull/1499

Full Changelog: onsi/ginkgo@v2.22.1...v2.22.2

v2.22.1

Compare Source

2.22.1

Fixes

Fix CSV encoding

• Update tests [aab3da6]
• Properly encode CSV rows [c09df39]
• Add test case for proper csv escaping [96a80fc]
• Add meta-test [43dad69]

Maintenance

• ensure *.test files are gitignored so we don't accidentally commit compiled tests again [c88c634]
• remove golang.org/x/net/context in favour of stdlib context [4df44bf]

onsi/gomega (github.com/onsi/gomega)

v1.36.2

Compare Source

Maintenance

• Bump nokogiri from 1.16.3 to 1.16.5 in /docs by @​dependabot in https://github.com/onsi/gomega/pull/757
• Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.22.1 by @​dependabot in https://github.com/onsi/gomega/pull/808
• Bump golang.org/x/net from 0.30.0 to 0.33.0 by @​dependabot in https://github.com/onsi/gomega/pull/807
• Bump google.golang.org/protobuf from 1.35.1 to 1.36.1 by @​dependabot in https://github.com/onsi/gomega/pull/810

v1.36.1

Compare Source

1.36.1

Fixes

• Fix https://github.com/onsi/gomega/issues/803 [1c6c112]
• resolves #​696: make HaveField great on pointer receivers given only a non-addressable value [4feb9d7]

sap/admission-webhook-runtime (github.com/sap/admission-webhook-runtime)

v0.1.54

Compare Source

v0.1.53

Compare Source

v0.1.52

Compare Source

v0.1.51

Compare Source

v0.1.50

Compare Source

v0.1.49

Compare Source

v0.1.48

Compare Source

v0.1.47

Compare Source

v0.1.46

Compare Source

v0.1.45

Compare Source

sap/component-operator-runtime (github.com/sap/component-operator-runtime)

v0.3.63

Compare Source

v0.3.62

Compare Source

Incompatible changes

Previously, the forced re-apply of dependent objects was based on a timestamp that was coded into the object digest. As a consequence, the digest annotation of every dependent object was updated more or less every 60 minutes. Which caused problems (e.g. with crossplane).

From this release onwards, the force-re-apply mechanism is based on the new status field status.inventory[].lastAppliedAt.

Note: YOU MUST, REALLY MUST, regenerate your component CRD when using a version of component-operator-runtime containing this release, and ship the module update together with the updated CRD!!!

v0.3.61

Compare Source

v0.3.60

Compare Source

v0.3.59

Compare Source

This release is non-functional (preparation for future work). It ships a new status field .status.inventory[].lastAppliedAt.

v0.3.58

Compare Source

This release is a bugfix release for the clm cli. So far, while applying or deleting a release, clm was aborting immediately if an error occurred. This is not very convenient. At least in some ephemeral error situations, it should behave in a more resilient way. So, with this release, clm tries to recognise such ephemeral errors (for example 409 - Conflict responses from the API server), and retries the failing operation a couple of times.

v0.3.57

Compare Source

v0.3.56

Compare Source

Enhancements

A new flag --create-namespace was added to clm apply. If specified the specified release namespace will be auto-created if missing. Note that in that case, the namespace is not part of the release inventory. In particular, it will not be deleted if the component gets deleted.

v0.3.55

Compare Source

This release adds a new interface PolicyConfiguration that component types (or their spec types) can implement:

type PolicyConfiguration interface {
  // Get adoption policy.
  // Must return a valid AdoptionPolicy, or the empty string (then the reconciler/framework default applies).
  GetAdoptionPolicy() reconciler.AdoptionPolicy
  // Get update policy.
  // Must return a valid UpdatePolicy, or the empty string (then the reconciler/framework default applies).
  GetUpdatePolicy() reconciler.UpdatePolicy
  // Get delete policy.
  // Must return a valid DeletePolicy, or the empty string (then the reconciler/framework default applies).
  GetDeletePolicy() reconciler.DeletePolicy
}

Through this interface, components can override the framework default policies that would otherwise apply. Of course, dependent resources can still override the behaviour using the well-known annotations. For easier consumption (similar to the already existing Configuration interfaces), there is a standard implementation PolicySpec that components may embed into their spec).

Furthermore, the semantics of the deletion policy was slightly changed:

1. Other than before, the deletion policy is now ignored during apply. That is, if an existing object becomes obsolete while applying a new revision of the depdendents' manifests, it will be always deleted now, even if it has an effective deletion policy 'orphan'. In other words, the deletion policy will only be honoured if the owning component itself is deleted.
2. So far, a component's deletion will block if it contains extension types, and there exist any foreign instances of these types in the cluster; this check will now be skipped if all dependents of the component have an effective deletion policy 'orphan'.

v0.3.54

Compare Source

This release adds some new template functions to HelmGenerator and KustomizeGenerator.

1. Template functions for bitwise operations:

   • func bitwiseShiftLeft(by any, arg any) (uint64, error)
   • func bitwiseShiftRight(by any, arg any) (uint64, error)
   • func bitwiseAnd(args ...any) (uint64, error)
   • func bitwiseOr(args ...any) (uint64, error)
   • func bitwiseXor(args ...any) (uint64, error)

2. Functions for IPv4 address handling:

   • func parseIPv4Address(data any) (uint32, error)
   • func formatIPv4Address(data any) (string, error)

v0.3.53

Compare Source

v0.3.52

Compare Source

This is a bugfix release, but it slightly changes the procedure how dependent objects are reconciled. In detail:

Until now, reconciler.Apply() (which is what happens if a component is reconciled, not deleted) first deleted all redundant objects, that is objects which appear in the component's inventory, but are no longer part of the current manifest list. Only after all redundant objects were gone, the reconciliation of the current dependents was started. This potentially caused some deadlock situations, e.g. in component-operator. To overcome, the deletion part was shifted to the end of
reconciler.Apply(), after the application of the current manifest list. This should not be a noticeable change. However, the completion handling still happens early (before the reconciliation of the dependents), and was slightly changed as well; for example, object deletions happening as consequence of a completion now no longer honour delete-order or delete-policy.

v0.3.51

Compare Source

v0.3.50

Compare Source

v0.3.49

Compare Source

v0.3.48

Compare Source

v0.3.47

Compare Source

v0.3.46

Compare Source

sap/go-generics (github.com/sap/go-generics)

v0.2.23

Compare Source

v0.2.22

Compare Source

v0.2.21

Compare Source

golang/go (go)

v1.23.4

v1.23.3

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.19.4

Compare Source

What's Changed

• 🌱 Add fsnotify watcher+polling by @​sbueringer in https://github.com/kubernetes-sigs/controller-runtime/pull/3052

Full Changelog: kubernetes-sigs/controller-runtime@v0.19.3...v0.19.4

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 8 additional dependencies were updated

Details:

Package	Change
github.com/google/pprof	v0.0.0-20241029153458-d1b30febd7db -> v0.0.0-20241210010833-40e02aabc2ad
github.com/prometheus/client_golang	v1.20.4 -> v1.20.5
github.com/spf13/cast	v1.7.0 -> v1.7.1
golang.org/x/net	v0.30.0 -> v0.33.0
golang.org/x/time	v0.7.0 -> v0.9.0
golang.org/x/tools	v0.26.0 -> v0.28.0
google.golang.org/protobuf	v1.35.1 -> v1.36.1
sigs.k8s.io/structured-merge-diff/v4	v4.4.2 -> v4.5.0