Bump the backend group with 12 updates #3402
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the backend group with 12 updates: | Package | From | To | | --- | --- | --- | | [github.com/aquasecurity/trivy](https://github.com/aquasecurity/trivy) | `0.42.1` | `0.45.1` | | [github.com/hashicorp/golang-lru/v2](https://github.com/hashicorp/golang-lru) | `2.0.6` | `2.0.7` | | [github.com/operator-framework/api](https://github.com/operator-framework/api) | `0.17.5` | `0.17.7` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.16.0` | `1.17.0` | | [github.com/rs/cors](https://github.com/rs/cors) | `1.10.0` | `1.10.1` | | [github.com/sigstore/cosign](https://github.com/sigstore/cosign) | `1.5.2` | `1.13.1` | | [github.com/spf13/viper](https://github.com/spf13/viper) | `1.16.0` | `1.17.0` | | [github.com/tektoncd/pipeline](https://github.com/tektoncd/pipeline) | `0.31.4` | `0.52.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.13.0` | `0.14.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.12.0` | `0.13.0` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.143.0` | `0.145.0` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.12.3` | `3.13.0` | Updates `github.com/aquasecurity/trivy` from 0.42.1 to 0.45.1 - [Release notes](https://github.com/aquasecurity/trivy/releases) - [Changelog](https://github.com/aquasecurity/trivy/blob/main/goreleaser.yml) - [Commits](aquasecurity/trivy@v0.42.1...v0.45.1) Updates `github.com/hashicorp/golang-lru/v2` from 2.0.6 to 2.0.7 - [Release notes](https://github.com/hashicorp/golang-lru/releases) - [Commits](hashicorp/golang-lru@v2.0.6...v2.0.7) Updates `github.com/operator-framework/api` from 0.17.5 to 0.17.7 - [Release notes](https://github.com/operator-framework/api/releases) - [Changelog](https://github.com/operator-framework/api/blob/master/RELEASE.md) - [Commits](operator-framework/api@v0.17.5...v0.17.7) Updates `github.com/prometheus/client_golang` from 1.16.0 to 1.17.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.16.0...v1.17.0) Updates `github.com/rs/cors` from 1.10.0 to 1.10.1 - [Release notes](https://github.com/rs/cors/releases) - [Commits](rs/cors@v1.10.0...v1.10.1) Updates `github.com/sigstore/cosign` from 1.5.2 to 1.13.1 - [Release notes](https://github.com/sigstore/cosign/releases) - [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md) - [Commits](sigstore/cosign@v1.5.2...v1.13.1) Updates `github.com/spf13/viper` from 1.16.0 to 1.17.0 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.16.0...v1.17.0) Updates `github.com/tektoncd/pipeline` from 0.31.4 to 0.52.0 - [Release notes](https://github.com/tektoncd/pipeline/releases) - [Changelog](https://github.com/tektoncd/pipeline/blob/main/releases.md) - [Commits](tektoncd/pipeline@v0.31.4...v0.52.0) Updates `golang.org/x/crypto` from 0.13.0 to 0.14.0 - [Commits](golang/crypto@v0.13.0...v0.14.0) Updates `golang.org/x/oauth2` from 0.12.0 to 0.13.0 - [Commits](golang/oauth2@v0.12.0...v0.13.0) Updates `google.golang.org/api` from 0.143.0 to 0.145.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.143.0...v0.145.0) Updates `helm.sh/helm/v3` from 3.12.3 to 3.13.0 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.12.3...v3.13.0) --- updated-dependencies: - dependency-name: github.com/aquasecurity/trivy dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: github.com/hashicorp/golang-lru/v2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: github.com/operator-framework/api dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: github.com/rs/cors dependency-type: direct:production update-type: version-update:semver-patch dependency-group: backend - dependency-name: github.com/sigstore/cosign dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: github.com/spf13/viper dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: github.com/tektoncd/pipeline dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: golang.org/x/oauth2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend - dependency-name: helm.sh/helm/v3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: backend ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the backend group with 12 updates:
0.42.10.45.12.0.62.0.70.17.50.17.71.16.01.17.01.10.01.10.11.5.21.13.11.16.01.17.00.31.40.52.00.13.00.14.00.12.00.13.00.143.00.145.03.12.33.13.0Updates
github.com/aquasecurity/trivyfrom 0.42.1 to 0.45.1Release notes
Sourced from github.com/aquasecurity/trivy's releases.
... (truncated)
Commits
daae882fix(purl): handle rust types (#5186)81240cfchore: auto-close issues (#5177)bd0accdchore(deps): bump github.com/spf13/viper from 1.15.0 to 1.16.0 (#5093)ecee794fix(k8s): kbom support addons labels (#5178)9ebc25dtest: validate SPDX with the JSON schema (#5124)9a49a37chore: bump trivy-kubernetes-latest (#5161)ad1dc63docs: add 'Signature Verification' guide (#4731)7c68d4adocs: add image-scanner-with-trivy for ecosystem (#5159)ed49609fix(fs): assign the absolute path to be inspected to ROOTPATH when filesystem...1953972chore(deps): bump github.com/CycloneDX/cyclonedx-go (#5102)Updates
github.com/hashicorp/golang-lru/v2from 2.0.6 to 2.0.7Release notes
Sourced from github.com/hashicorp/golang-lru/v2's releases.
Commits
d851586add a Resize method to 2Qd46c1d9expirable LRU: fix so that Get/Peek cannot return an ok and empty value (#156)56a2dc0Update arc to base package v2.0.6Updates
github.com/operator-framework/apifrom 0.17.5 to 0.17.7Release notes
Sourced from github.com/operator-framework/api's releases.
Commits
92e4341Makes codecov-action optionalfdfcb35Fix min kube version validation (#286)bbac502Adds codecov integration (#285)aa3e498updating dependencies (#284)ce75af3Merge pull request #279 from Jamstah/catalog-source-affinity45ebd8bAdd affinity customization to catalog source grpc podsUpdates
github.com/prometheus/client_golangfrom 1.16.0 to 1.17.0Release notes
Sourced from github.com/prometheus/client_golang's releases.
... (truncated)
Changelog
Sourced from github.com/prometheus/client_golang's changelog.
Commits
fa1408eMerge pull request #1352 from prometheus/arthursens/cut-1.17.024a72b8Add changelog entry for 1.171bae6c1Deprecated comment should begin with "Deprecated:" (#1347)bbab8feFix typos in comments, tests, and errors (#1346)df7fa49Extend Counters, Summaries and Histograms with creation timestamp (#1313)74cc262Add go_godebug_non_default_behavior_tlsmaxrsasize_events_total (#1348)d03abf3Cleanup golangci-lint errcheck (#1339)ca6ba04Update common Prometheus files (#1338)51d24f8Update common Prometheus files (#1332)c17edf0Merge pull request #1304 from prometheus/dependabot/go_modules/google.golang....Updates
github.com/rs/corsfrom 1.10.0 to 1.10.1Commits
e19471cPrevent empty Access-Control-Expose-Headers header (#160)20a76bdUpdate benchmarkUpdates
github.com/sigstore/cosignfrom 1.5.2 to 1.13.1Release notes
Sourced from github.com/sigstore/cosign's releases.
... (truncated)
Changelog
Sourced from github.com/sigstore/cosign's changelog.
... (truncated)
Commits
d1c6336Add CHANGELOG for v1.13.1 (#2349)e79cb5cchore(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#2326)eba132fchore(deps): bump github.com/go-openapi/runtime from 0.24.1 to 0.24.2 (#2347)2860144chore(deps): bump google.golang.org/api from 0.98.0 to 0.99.0 (#2348)ef9cf9dchore(deps): bump google-github-actions/setup-gcloud from 0.6.1 to 0.6.2 (#2344)fc83e43chore(deps): bump google-github-actions/auth from 0.8.2 to 0.8.3 (#2343)e652561chore(deps): bump google-github-actions/setup-gcloud from 0.6.0 to 0.6.1 (#2340)d637a3bverify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)a7ad7e7Nits for #2337 (#2342)797033cAdd verify-blob-attestation command and tests (#2337)Updates
github.com/spf13/viperfrom 1.16.0 to 1.17.0Release notes
Sourced from github.com/spf13/viper's releases.
... (truncated)
Commits
f62f86arefactor: make use ofstrings.Cut94632fachore: Use pip3 explicitly to install yamllint3f6cadcchore: Fix copy-paste error for yamllint target287507cdocs: add set subset KV examplef1cb226chore(deps): update cryptc292b55test: refactor asserts3d006ferefactor: replace interface{} with any8a6dc5dbuild(deps): bump github/codeql-action from 2.21.8 to 2.21.996c5c00chore: remove deprecated build tags44911d2build(deps): bump github/codeql-action from 2.21.7 to 2.21.8Updates
github.com/tektoncd/pipelinefrom 0.31.4 to 0.52.0Release notes
Sourced from github.com/tektoncd/pipeline's releases.
... (truncated)
Changelog
Sourced from github.com/tektoncd/pipeline's changelog.
... (truncated)
Commits
feb943cBump github.com/jenkins-x/go-scm from 1.13.13 to 1.14.146364191fix: clean results when taskrun retries503cc3dBump google.golang.org/grpc from 1.56.2 to 1.58.13076240fix 6093 task results not replaced with their values in childReferences3835c75Bump github.com/sigstore/sigstore from 1.7.1 to 1.7.3a41fafeBump github.com/spiffe/spire-api-sdk from 1.7.1 to 1.7.244e1707Bump github.com/containerd/containerd from 1.7.3 to 1.7.6d783556Remove results annotations filteringf27f333Bump google.golang.org/protobuf from 1.30.0 to 1.31.05131016add docs for emitting object resultsUpdates
golang.org/x/cryptofrom 0.13.0 to 0.14.0Commits
e3cc52ego.mod: update golang.org/x dependencies833695fssh: add server side support for [email protected] protocol extensionec07f4echacha20: drop Go 1.10 compatibility for arm64b665ba6all: use crypto/ed25519 instead of golang.org/x/crypto/ed25519a1aeb9bssh: add test cases for compatibility with old (buggy) clients28c53ffssh: add MultiAlgorithmSigner3f0842asha3: have ShakeHash extend hash.Hashe90f1e1cryptobyte: add uint48 methodsd359caassh: support for marshaling keys using the OpenSSH formatc5370d2ssh: check the declared public key algo against decoded oneUpdates
golang.org/x/oauth2from 0.12.0 to 0.13.0Commits
3c5dbf0go.mod: update golang.org/x dependencies11625ccgoogle: add authorized_user conditional to Credentials.UniverseDomain8d6d45bgoogle: add Credentials.UniverseDomain to support TPC43b6a7bgoogle: adding support for external account authorized user14b275coauth2: workaround misspelling of verification_uri18352fcgoogle/internal/externalaccount: adding BYOID Metrics9095a51oauth2: clarify error if endpoint missing DeviceAuthURL2d9e4a2oauth2/google: remove meta validations for aws external credentials55cd552oauth2: support PKCEe3fb0fboauth2: support device flowUpdates
google.golang.org/apifrom 0.143.0 to 0.145.0Release notes
Sourced from google.golang.org/api's releases.