Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build(deps): bump the go-deps group across 1 directory with 14 updates #1612

Closed
wants to merge 1 commit into from
Closed

build(deps): bump the go-deps group across 1 directory with 14 updates #1612

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 16, 2024 •
edited
Loading

Bumps the go-deps group with 9 updates in the / directory:

Package From To
github.com/cyphar/filepath-securejoin 0.3.1 0.3.2
github.com/fluxcd/pkg/apis/event 0.10.0 0.10.1
github.com/fluxcd/pkg/apis/meta 1.6.0 1.6.1
github.com/fluxcd/pkg/git 0.20.0 0.21.0
github.com/fluxcd/pkg/git/gogit 0.20.0 0.21.0
github.com/fluxcd/pkg/helmtestserver 0.19.0 0.20.0
github.com/fluxcd/pkg/oci 0.41.0 0.41.1
github.com/fluxcd/pkg/runtime 0.49.0 0.49.1
google.golang.org/api 0.196.0 0.197.0

Updates github.com/cyphar/filepath-securejoin from 0.3.1 to 0.3.2

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.3.2

This release includes a few fixes for MkdirAll when dealing with S_ISUID and S_ISGID, to solve a regression runc hit when switching to MkdirAll.

  • Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return an explicit error saying that those bits are ignored by mkdirat(2). In the past a different error was returned, but since the silent ignoring behaviour is codified in the man pages a more explicit error seems apt. While silently ignoring these bits would be the most compatible option, it could lead to users thinking their code sets these bits when it doesn't. Programs that need to deal with compatibility can mask the bits themselves. (#23, #25)

  • If a directory has S_ISGID set, then all child directories will have S_ISGID set when created and a different gid will be used for any inode created under the directory. Previously, the "expected owner and mode" validation in securejoin.MkdirAll did not correctly handle this. We now correctly handle this case. (#24, #25)

Signed-off-by: Aleksa Sarai [email protected]

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.3.2] - 2024-09-13

Changed

  • Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return an explicit error saying that those bits are ignored by mkdirat(2). In the past a different error was returned, but since the silent ignoring behaviour is codified in the man pages a more explicit error seems apt. While silently ignoring these bits would be the most compatible option, it could lead to users thinking their code sets these bits when it doesn't. Programs that need to deal with compatibility can mask the bits themselves. (#23, #25)

Fixed

  • If a directory has S_ISGID set, then all child directories will have S_ISGID set when created and a different gid will be used for any inode created under the directory. Previously, the "expected owner and mode" validation in securejoin.MkdirAll did not correctly handle this. We now correctly handle this case. (#24, #25)
Commits
  • e408943 VERSION: release v0.3.2
  • 1c875f5 CHANGELOG: fix headers
  • fdaafcc merge #25 into cyphar/filepath-securejoin:main
  • 1acda83 mkdirall: correctly handle sgid directory parent
  • 8484faf tests: mkdirall: refactor check and mkdirall helpers
  • 350d697 mkdirall: explicitly return an error for suid/sgid bits
  • 43b1026 tests: procfs: skip procfs tests if overmounting is blocked
  • 82e5725 VERSION: back to development
  • See full diff in compare view

Updates github.com/fluxcd/pkg/apis/event from 0.10.0 to 0.10.1

Commits
  • 196a3ba Merge pull request #93 from fluxcd/fix-le
  • 98bdf3b Set leader election Lease duration to 35s
  • 1d56dd8 Merge pull request #92 from fluxcd/leaderelection-options
  • c294d46 Add leader election config to runtime
  • 8ef4a8f Merge pull request #91 from SomtochiAma/record-deepcopy
  • 9a29a95 Generate deepcopy method for event
  • 276ad93 Merge pull request #90 from SomtochiAma/runtime-suspend
  • 4efd97c Uses suspendGuage
  • ec8435e Merge pull request #89 from fluxcd/controller-runtime-v0.8.3
  • f879c7e Update controller-runtime to v0.8.3
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/meta from 1.6.0 to 1.6.1

Commits
  • c8165af Merge pull request #809 from fluxcd/k8s-1.31.1
  • 18924bf Update controller-gen to v0.16.1
  • 735a85b Update dependencies
  • 62475f1 Merge pull request #789 from dipti-pai/pkg-azure-git-wi-auth
  • 1686996 Support Azure OIDC authentication
  • a2a7a01 Merge pull request #808 from matheuscscp/oci-auth-proxy
  • 8b5c43a Add proxy support for oci/auth login
  • d467d6e Merge pull request #807 from fluxcd/dependabot/github_actions/ci-6f7028051e
  • a6b58a7 build(deps): bump the ci group with 2 updates
  • f0eb8aa Merge pull request #806 from fluxcd/dependabot/github_actions/ci-fc48fdf541
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/git from 0.20.0 to 0.21.0

Commits
  • 7fe9789 Merge pull request #810 from fluxcd/up-int-deps
  • f674386 Update internal dependencies
  • c8165af Merge pull request #809 from fluxcd/k8s-1.31.1
  • 18924bf Update controller-gen to v0.16.1
  • 735a85b Update dependencies
  • 62475f1 Merge pull request #789 from dipti-pai/pkg-azure-git-wi-auth
  • 1686996 Support Azure OIDC authentication
  • a2a7a01 Merge pull request #808 from matheuscscp/oci-auth-proxy
  • 8b5c43a Add proxy support for oci/auth login
  • d467d6e Merge pull request #807 from fluxcd/dependabot/github_actions/ci-6f7028051e
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/git/gogit from 0.20.0 to 0.21.0

Commits
  • 7fe9789 Merge pull request #810 from fluxcd/up-int-deps
  • f674386 Update internal dependencies
  • c8165af Merge pull request #809 from fluxcd/k8s-1.31.1
  • 18924bf Update controller-gen to v0.16.1
  • 735a85b Update dependencies
  • 62475f1 Merge pull request #789 from dipti-pai/pkg-azure-git-wi-auth
  • 1686996 Support Azure OIDC authentication
  • a2a7a01 Merge pull request #808 from matheuscscp/oci-auth-proxy
  • 8b5c43a Add proxy support for oci/auth login
  • d467d6e Merge pull request #807 from fluxcd/dependabot/github_actions/ci-6f7028051e
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/gittestserver from 0.13.0 to 0.13.1

Commits
  • 3c08fca Merge pull request #241 from fluxcd/patch-tounstructured
  • 5e55b75 runtime/patch: Make ToUnstructured() public
  • ccbc687 Merge pull request #240 from fluxcd/runtime-apis-meta-update
  • 9c6ae69 chore: update apis/meta to v0.12.0
  • aa13413 Merge pull request #238 from pjbgf/patch-180222
  • 96cf31a Update github.com/prometheus/client_golang to v1.12.1 (CVE fix)
  • 7590657 Merge pull request #239 from fluxcd/runtime-patch-fieldowner
  • e9a4022 runtime/patch: add FieldOwner K8s client option
  • 5f45ff6 Merge pull request #235 from souleb/fix-stringdata-diff
  • 94fc3ea convert StringData to data
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/helmtestserver from 0.19.0 to 0.20.0

Commits
  • be8df7e Merge pull request #801 from fluxcd/k8s-1.31
  • 76035f8 Update Helm to v3.15.4
  • 3f5cf4c Build with Go 1.23
  • 4b90241 Update dependencies to Kubernetes v1.31.0
  • 0e61a3b Merge pull request #799 from fluxcd/dependabot/github_actions/ci-9f4b007c5b
  • 6bf4bad build(deps): bump the ci group with 4 updates
  • 968f190 Merge pull request #795 from fluxcd/dependabot/github_actions/ci-8fa51b1870
  • bce8cab build(deps): bump the ci group across 1 directory with 8 updates
  • 7d033c1 Merge pull request #798 from fluxcd/cleanup-aws-nuke
  • e98ccfa workflow: Set aws-nuke region for cleanup
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/oci from 0.41.0 to 0.41.1

Commits

Updates github.com/fluxcd/pkg/runtime from 0.49.0 to 0.49.1

Commits
  • 7fe9789 Merge pull request #810 from fluxcd/up-int-deps
  • f674386 Update internal dependencies
  • c8165af Merge pull request #809 from fluxcd/k8s-1.31.1
  • 18924bf Update controller-gen to v0.16.1
  • 735a85b Update dependencies
  • 62475f1 Merge pull request #789 from dipti-pai/pkg-azure-git-wi-auth
  • 1686996 Support Azure OIDC authentication
  • a2a7a01 Merge pull request #808 from matheuscscp/oci-auth-proxy
  • 8b5c43a Add proxy support for oci/auth login
  • d467d6e Merge pull request #807 from fluxcd/dependabot/github_actions/ci-6f7028051e
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/sourceignore from 0.8.0 to 0.8.1

Commits
  • 68b676d Merge pull request #621 from fluxcd/update-runtime-deps
  • 8026a27 runtime: update dependencies
  • e8edd75 Merge pull request #620 from fluxcd/update-deps
  • 5e21e50 helmtestserver: update dependencies
  • a7213f0 Merge pull request #619 from fluxcd/enable-codeql-quality
  • 79175a1 ci: enable security-and-quality CodeQL query
  • bfb6c67 Merge pull request #617 from fluxcd/fix-git-flake
  • 0ac59bc git/internal/e2e: address flake for clone tests
  • 79df79e Merge pull request #618 from fluxcd/remove-dep-rand-seed
  • d998987 *: remove deprecated rand.Seed calls
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/ssh from 0.14.0 to 0.14.1

Commits
  • 388dd66 Merge pull request #667 from fluxcd/update-git-deps
  • 2fed1fa git/e2e: update dependencies
  • 6ad8798 git/gogit: update dependencies
  • 3b08f08 git: update dependencies
  • d2d97d5 Merge pull request #666 from fluxcd/optimize-refname
  • d6f0e93 git/gogit: use existing methods to clone branch/tag via refname
  • 4292046 Merge pull request #663 from fluxcd/tidy-nits
  • e56a100 helmtestserver: check err before Close() defer
  • b6fd7cc tar: remove unused allowSymlink
  • 8b924c3 tar: check err before continuing walk
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/tar from 0.8.0 to 0.8.1

Commits
  • 68b676d Merge pull request #621 from fluxcd/update-runtime-deps
  • 8026a27 runtime: update dependencies
  • e8edd75 Merge pull request #620 from fluxcd/update-deps
  • 5e21e50 helmtestserver: update dependencies
  • a7213f0 Merge pull request #619 from fluxcd/enable-codeql-quality
  • 79175a1 ci: enable security-and-quality CodeQL query
  • bfb6c67 Merge pull request #617 from fluxcd/fix-git-flake
  • 0ac59bc git/internal/e2e: address flake for clone tests
  • 79df79e Merge pull request #618 from fluxcd/remove-dep-rand-seed
  • d998987 *: remove deprecated rand.Seed calls
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/version from 0.4.0 to 0.4.1

Commits
  • 17398b5 Merge pull request #314 from somtochiama/sourceignore
  • fb3355b check for . path
  • 4d3acc8 Merge pull request #313 from fluxcd/oci-ignore
  • 82fe1ed Update sourceignore version for OCI
  • 4cc38cb Merge pull request #312 from somtochiama/sourceignore
  • e36c917 increase timeout for failing patch
  • 9de2992 run tidy
  • 4e42496 Move sourceignore its own dir
  • d26e2ae remove log
  • 71cbd21 Move sourceignore package and add ignore functionality to oci build/push
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.196.0 to 0.197.0

Release notes

Sourced from google.golang.org/api's releases.

v0.197.0

0.197.0 (2024-09-10)

Features

Bug Fixes

  • transport: Set UniverseDomain in http.NewClient for new auth (#2773) (140d0a5)
Changelog

Sourced from google.golang.org/api's changelog.

0.197.0 (2024-09-10)

Features

Bug Fixes

  • transport: Set UniverseDomain in http.NewClient for new auth (#2773) (140d0a5)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the go-deps group across 1 directory with 14 updates
79b2b86 
Bumps the go-deps group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.3.1` | `0.3.2` |
| [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) | `0.10.0` | `0.10.1` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.6.0` | `1.6.1` |
| [github.com/fluxcd/pkg/git](https://github.com/fluxcd/pkg) | `0.20.0` | `0.21.0` |
| [github.com/fluxcd/pkg/git/gogit](https://github.com/fluxcd/pkg) | `0.20.0` | `0.21.0` |
| [github.com/fluxcd/pkg/helmtestserver](https://github.com/fluxcd/pkg) | `0.19.0` | `0.20.0` |
| [github.com/fluxcd/pkg/oci](https://github.com/fluxcd/pkg) | `0.41.0` | `0.41.1` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.49.0` | `0.49.1` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.196.0` | `0.197.0` |



Updates `github.com/cyphar/filepath-securejoin` from 0.3.1 to 0.3.2
- [Release notes](https://github.com/cyphar/filepath-securejoin/releases)
- [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md)
- [Commits](cyphar/filepath-securejoin@v0.3.1...v0.3.2)

Updates `github.com/fluxcd/pkg/apis/event` from 0.10.0 to 0.10.1
- [Commits](fluxcd/pkg@git/v0.10.0...runtime/v0.10.1)

Updates `github.com/fluxcd/pkg/apis/meta` from 1.6.0 to 1.6.1
- [Commits](fluxcd/pkg@apis/meta/v1.6.0...apis/meta/v1.6.1)

Updates `github.com/fluxcd/pkg/git` from 0.20.0 to 0.21.0
- [Commits](fluxcd/pkg@git/v0.20.0...git/v0.21.0)

Updates `github.com/fluxcd/pkg/git/gogit` from 0.20.0 to 0.21.0
- [Commits](fluxcd/pkg@git/v0.20.0...git/v0.21.0)

Updates `github.com/fluxcd/pkg/gittestserver` from 0.13.0 to 0.13.1
- [Commits](fluxcd/pkg@git/v0.13.0...runtime/v0.13.1)

Updates `github.com/fluxcd/pkg/helmtestserver` from 0.19.0 to 0.20.0
- [Commits](fluxcd/pkg@git/v0.19.0...git/v0.20.0)

Updates `github.com/fluxcd/pkg/oci` from 0.41.0 to 0.41.1
- [Commits](fluxcd/pkg@oci/v0.41.0...oci/v0.41.1)

Updates `github.com/fluxcd/pkg/runtime` from 0.49.0 to 0.49.1
- [Commits](fluxcd/pkg@runtime/v0.49.0...runtime/v0.49.1)

Updates `github.com/fluxcd/pkg/sourceignore` from 0.8.0 to 0.8.1
- [Commits](fluxcd/pkg@git/v0.8.0...ssh/v0.8.1)

Updates `github.com/fluxcd/pkg/ssh` from 0.14.0 to 0.14.1
- [Commits](fluxcd/pkg@git/v0.14.0...git/v0.14.1)

Updates `github.com/fluxcd/pkg/tar` from 0.8.0 to 0.8.1
- [Commits](fluxcd/pkg@git/v0.8.0...ssh/v0.8.1)

Updates `github.com/fluxcd/pkg/version` from 0.4.0 to 0.4.1
- [Commits](fluxcd/pkg@tar/v0.4.0...oci/v0.4.1)

Updates `google.golang.org/api` from 0.196.0 to 0.197.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.196.0...v0.197.0)

---
updated-dependencies:
- dependency-name: github.com/cyphar/filepath-securejoin
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/apis/event
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/apis/meta
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/git
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/git/gogit
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/gittestserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/helmtestserver
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/oci
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/sourceignore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/ssh
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/tar
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: github.com/fluxcd/pkg/version
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-deps
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-deps
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency label Sep 16, 2024
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 16, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 16, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go-deps-b67f30dfef branch September 16, 2024 06:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants