Skip to content
This repository has been archived by the owner on Nov 28, 2024. It is now read-only.

build(deps): bump the go group across 1 directory with 20 updates #152

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 5, 2024

Bumps the go group with 14 updates in the / directory:

Package From To
code.gitea.io/sdk/gitea 0.15.1 0.18.0
cuelang.org/go 0.7.0 0.8.2
github.com/containers/image/v5 5.29.2 5.30.0
github.com/fluxcd/kustomize-controller/api 1.0.0-rc.3 1.2.2
github.com/fluxcd/pkg/apis/event 0.5.2 0.9.0
github.com/fluxcd/pkg/runtime 0.42.0 0.47.1
github.com/fluxcd/pkg/untar 0.2.0 0.3.0
github.com/fluxcd/source-controller/api 1.1.0 1.3.0
github.com/open-component-model/git-controller 0.12.0 0.12.1
github.com/open-component-model/mpas-project-controller 0.6.0 0.6.1
github.com/open-component-model/ocm 0.8.0 0.9.0
github.com/open-component-model/ocm-controller 0.19.0 0.20.1
github.com/open-component-model/replication-controller 0.13.0 0.13.1
github.com/teekennedy/goldmark-markdown 0.2.0 0.3.0

Updates code.gitea.io/sdk/gitea from 0.15.1 to 0.18.0

Updates cuelang.org/go from 0.7.0 to 0.8.2

Updates github.com/containers/image/v5 from 5.29.2 to 5.30.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.30.0

What's Changed

A fair number of improvements when working with zstd and zstd:chunked-compressed images.

Note that make install now installs policy.json and registries.d/default.yaml.

New Contributors

Full Changelog: containers/image@v5.29.2...v5.30.0

Commits
  • b29bde5 Bump to v5.30.0
  • 3cc0bb4 Merge pull request #2328 from containers/renovate/github.com-containers-stora...
  • 169d6f5 fix(deps): update module github.com/containers/storage to v1.53.0
  • ed96328 Merge pull request #2330 from containers/renovate/golang.org-x-oauth2-0.x
  • d097f7f fix(deps): update module golang.org/x/oauth2 to v0.18.0
  • 5dbfa1c Merge pull request #2329 from containers/renovate/golang.org-x-crypto-0.x
  • 99369af fix(deps): update module golang.org/x/crypto to v0.21.0
  • b457769 Merge pull request #2326 from containers/renovate/go-openapi
  • 23e4c1d fix(deps): update go-openapi packages
  • faa4f4f Merge pull request #2325 from containers/renovate/github.com-stretchr-testify...
  • Additional commits viewable in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.0.0-rc.3 to 1.2.2

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.2.2

Changelog

v1.2.2 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.2.2
  • ghcr.io/fluxcd/kustomize-controller:v1.2.2

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.1

Changelog

v1.2.1 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.2.1
  • ghcr.io/fluxcd/kustomize-controller:v1.2.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.0

Changelog

v1.2.0 changelog

Container images

  • docker.io/fluxcd/kustomize-controller:v1.2.0
  • ghcr.io/fluxcd/kustomize-controller:v1.2.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.1.1

Changelog

... (truncated)

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.2.2

Release date: 2024-02-01

This patch release comes with various bug fixes and improvements.

Reconciling empty directories and directories without Kubernetes manifests no longer results in an error. This regressing bug was introduced with the controller upgrade to Kustomize v5.3 and has been fixed in this patch release.

The regression due to which the namespaced objects without a namespace specified resulted in not found error instead of namespace not specified has also been fixed. And the regression due to which Roles and ClusterRoles were reconciled over and over due to the normalization of Roles and ClusterRoles has also been fixed.

In addition, the Kubernetes dependencies have been updated to v1.28.6. Various other dependencies have also been updated to their latest version to patch upstream CVEs.

Lastly, the controller is now built with Go 1.21.

Improvements:

1.2.1

Release date: 2023-12-14

This patch release comes with improvements in logging to provide faster feedback on any HTTP errors encountered while fetching source artifacts.

In addition, the status condition messages are now trimmed to respect the size limit defined by the API.

... (truncated)

Commits
  • 7a5ae11 Merge pull request #1077 from fluxcd/release-v1.2.2
  • afb9e73 Release v1.2.2
  • e5072d5 Add changelog entry for v1.2.2
  • 115614b Merge pull request #1076 from fluxcd/backport-1075-to-release/v1.2.x
  • 00821eb Update source-controller dependency
  • 151e55b Merge pull request #1074 from fluxcd/backport-1072-to-release/v1.2.x
  • c575ac2 build(deps): bump the go-deps group with 1 update
  • e75aa5f Merge pull request #1070 from fluxcd/backport-1069-to-release/v1.2.x
  • ddeda85 build(deps): bump the ci group with 1 update
  • 04b1e54 Merge pull request #1068 from fluxcd/backport-1066-to-release/v1.2.x
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/event from 0.5.2 to 0.9.0

Commits
  • 598e74e git: update dependencies
  • c28ef00 Merge pull request #463 from fluxcd/go-git-bc-tag
  • da9a7b7 go-git: transform revision for last observed tag
  • 0009fda Merge pull request #404 from fluxcd/commit-string-fmt
  • db0daab git: make LastObservedCommit backwards compatible
  • 3fb1b65 git: tidy code around digests
  • b097686 git: align tests and code with commit fmt change
  • 24a228c git: change Commit#String format
  • da2a476 Merge pull request #462 from fluxcd/event-digest-key
  • 7053ad7 apis/event: add MetaDigestKey
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/meta from 1.1.2 to 1.3.0

Commits
  • 31388ce Merge pull request #727 from fluxcd/distribution-up
  • 328eb42 Update OCI distribution to v3.0.0-alpha.1
  • 7fabcd8 Merge pull request #684 from somtochiama/pull-static-file-oci
  • a330445 fix options
  • 255f8fc test for static archive
  • f155227 refactor test
  • 8687514 implement pull static artifact
  • 4624208 Merge pull request #726 from fluxcd/deps-kube-v0.28.6
  • 30da897 Update dependencies
  • 63e3e9c Merge pull request #725 from fluxcd/dependabot/github_actions/ci-f38fbd1956
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.42.0 to 0.47.1

Commits
  • adcfcbe Merge pull request #769 from fluxcd/controller-runtime-v0.18.1
  • 0e74a82 Update runtime pkg docs
  • b329d92 Update dependencies to controller-runtime v0.18.1
  • d0bf8ed Merge pull request #768 from fluxcd/dependabot/github_actions/ci-b93eff89fb
  • 14f05d7 build(deps): bump actions/checkout from 4.1.3 to 4.1.4 in the ci group
  • 3790516 Merge pull request #767 from fluxcd/up-internal-deps
  • 37ea30c Update internal dependencies
  • e32ccc2 Merge pull request #763 from fluxcd/kubernetes-1.30
  • 2b974af Update sigs.k8s.io/controller-tools to v0.15.0
  • 52c1fc5 Update sigs.k8s.io/controller-runtime to v0.18.0
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/untar from 0.2.0 to 0.3.0

Commits
  • 57d9588 Merge pull request #655 from fluxcd/oci-skip-symlinks
  • c62dc82 Skip symlinks during OCI layer decompression
  • 4f69e78 Merge pull request #653 from errordeveloper/pull-any-artifact
  • 887bad4 oci/clinet: ensure Pull sets URL field in metadata it returns
  • 3b8d634 oci/client: drop custom platfrom from default client options
  • 0202722 oci/client: relax annotation parser
  • 56bc0ab Merge pull request #654 from fluxcd/dependabot/github_actions/ci-663ed1f0b6
  • 10fa7df build(deps): bump the ci group with 1 update
  • 83f76d6 Merge pull request #652 from fluxcd/dependabot/github_actions/ci-d24d09982f
  • 5c0b256 build(deps): bump the ci group with 3 updates
  • Additional commits viewable in compare view

Updates github.com/fluxcd/source-controller/api from 1.1.0 to 1.3.0

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.3.0

Changelog

v1.3.0 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.3.0
  • ghcr.io/fluxcd/source-controller:v1.3.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.5

Changelog

v1.2.5 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.2.5
  • ghcr.io/fluxcd/source-controller:v1.2.5

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.4

Changelog

v1.2.4 changelog

Container images

  • docker.io/fluxcd/source-controller:v1.2.4
  • ghcr.io/fluxcd/source-controller:v1.2.4

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.3

Changelog

... (truncated)

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.3.0

Release date: 2024-05-03

This minor release promotes the Helm APIs to GA, and comes with new features, improvements and bug fixes.

HelmRepository

The HelmRepository API has been promoted from v1beta2 to v1 (GA). The v1 API is backwards compatible with v1beta2.

For HelmRepository of type oci, the .spec.insecure field allows connecting over HTTP to an insecure non-TLS container registry.

To upgrade from v1beta2, after deploying the new CRD and controller, set apiVersion: source.toolkit.fluxcd.io/v1 in the YAML files that contain HelmRepository definitions. Bumping the API version in manifests can be done gradually. It is advised not to delay this procedure as the beta versions will be removed after 6 months.

HelmChart

The HelmChart API have been promoted from v1beta2 to v1 (GA). The v1 API is backwards compatible with v1beta2, with the exception of the removal of the deprecated field .spec.valuesFile which was replaced with spec.valuesFiles.

The HelmChart API was extended with support for Notation signature verification of Helm OCI charts.

A new optional field .spec.ignoreMissingValuesFiles has been added, which allows the controller to ignore missing values files rather than failing to reconcile the HelmChart.

OCIRepository

The OCIRepository API was extended with support for Notation signature verification of OCI artifacts.

A new optional field .spec.ref.semverFilter has been added, which allows the controller to filter the tags based on regular expressions before applying the semver range. This allows picking the latest release candidate instead of the latest stable release.

In addition, the controller has been updated to Kubernetes v1.30.0, Helm v3.14.4, and various other dependencies to their latest version to patch upstream CVEs.

... (truncated)

Commits
  • a80a99b Merge pull request #1472 from fluxcd/release-v1.3.0
  • 70901f8 Release v1.3.0
  • 05ab8b1 Add changelog entry for v1.3.0
  • c9bf167 Merge pull request #1298 from fluxcd/phony-build
  • cc3d495 ci: Print controller logs after e2e run
  • 0bd5b95 Rename make target build to manager
  • edccfe9 Merge pull request #1470 from fluxcd/dependabot/github_actions/ci-b23e0286c6
  • 9ce2d61 build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 in the ci group
  • 16eeeef Merge pull request #1469 from fluxcd/dependabot/go_modules/go-deps-4411c5bc33
  • 8598b8d build(deps): bump google.golang.org/api
  • Additional commits viewable in compare view

Updates github.com/open-component-model/git-controller from 0.12.0 to 0.12.1

Release notes

Sourced from github.com/open-component-model/git-controller's releases.

v0.12.1

Release 0.12.1

  • fix: add the right version in the image overlay for the deployment (#145)
  • chore: remove personal information (#139)
Commits

Updates github.com/open-component-model/mpas-project-controller from 0.6.0 to 0.6.1

Release notes

Sourced from github.com/open-component-model/mpas-project-controller's releases.

v0.6.1

Release 0.6.1

  • fix: add the right version in the image overlay for the deployment (#90)
Commits
  • 3a268a9 fix: add the right version in the image overlay for the deployment (#90)
  • See full diff in compare view

Updates github.com/open-component-model/ocm from 0.8.0 to 0.9.0

Release notes

Sourced from github.com/open-component-model/ocm's releases.

v0.9.0

Release v0.9.0

  • normalize order of used component lister results (#750)
  • eliminate dep from demo plugin to cli (#746)
  • Bump the go group across 1 directory with 3 updates (#748)
  • Bump github.com/fluxcd/cli-utils from 0.36.0-flux.5 to 0.36.0-flux.6 (#737)
  • change wording (#747)
  • Bump github.com/docker/cli from 25.0.5+incompatible to 26.1.0+incompatible (#743)
  • Bump github.com/docker/docker from 25.0.5+incompatible to 26.1.0+incompatible (#744)
  • eliminate lib to cli dependencies (#741)
  • enable http registries as ocm repositories (#676)
  • Rework object finalization (#703)
  • fix: do not create a new resource manager client (#742)
  • fix: remove all personal information from tests (#740)
  • incorporate VERSION file if built without make (#732)
  • Wget doc (#739)
  • add documentation for wget access (#733)
  • Bump the go group with 27 updates (#729)
  • Bump github.com/sigstore/cosign/v2 from 2.2.3 to 2.2.4 (#722)
  • Bump the ci group with 2 updates (#723)
  • fast version list command (#728)
  • fix issue with create tempfile on MS Windows (#726)
  • modify add sources doc (#727)
  • align ca-cert opts + remove relation constraints for inputs (#725)
  • add metadata for hyperspace (#719)
  • readonly mode configurable for CVs (#711)
  • spec normalization for OCI based OCM repository spec (#710)
  • Bump the go_modules group group with 3 updates (#707)
  • Bump the ci group with 3 updates (#713)
  • remove docs that are available in the spec (#715)
  • change to compopnent constrcutor file name (#712)
  • Fix repository cache (#705)
  • let's add a `user` within Docker (#704)
  • follow Docker official images recommendation (#699)
  • support for github enterprise urls (#698)
Commits
  • 548f7a5 Release v0.9.0
  • d125b48 ReleaseNotes for v0.9.0
  • 9cbb14b normalize order of used component lister results (#750)
  • 4b9a12f eliminate dep from demo plugin to cli (#746)
  • 09bb41c Bump the go group across 1 directory with 3 updates (#748)
  • 2ff7417 Bump github.com/fluxcd/cli-utils from 0.36.0-flux.5 to 0.36.0-flux.6 (#737)
  • f125c4b change wording (#747)
  • 2ea3ed6 Bump github.com/docker/cli from 25.0.5+incompatible to 26.1.0+incompatible (#...
  • ae2578b Bump github.com/docker/docker from 25.0.5+incompatible to 26.1.0+incompatible...
  • 600f585 eliminate lib to cli dependencies (#741)
  • Additional commits viewable in compare view

Updates github.com/open-component-model/ocm-controller from 0.19.0 to 0.20.1

Release notes

Sourced from github.com/open-component-model/ocm-controller's releases.

v0.20.1

Release 0.21.0

  • fix: Quick hack to address issue 68 - snapshot tag doesn't meet strict semver check (#390)

v0.20.0

Release 0.20.0

  • doc: update the documentation to be more thorough (#393)
  • add metadata for hyperspace (#394)
  • chore: remove personal information (#389)
  • chore(deps): bump the ci group with 2 updates (#392)
  • feat: add parsing dockerconfigjson and ocm configuration (#391)
Commits
  • d6e6aed release: docs for v0.20.1 (#401)
  • 7c50983 fix: Quick hack to address issue 68 - snapshot tag doesn't meet strict semver...
  • 7af4b5e release: add release docs for 0.20.0 (#399)
  • a0166ea doc: update the documentation to be more thorough (#393)
  • 7f9b629 add metadata for hyperspace (#394)
  • 6f4a565 chore: remove personal information (#389)
  • 8b79b01 chore(deps): bump the ci group with 2 updates (#392)
  • 8ad97cf feat: add parsing dockerconfigjson and ocm configuration (#391)
  • See full diff in compare view

Updates github.com/open-component-model/replication-controller from 0.13.0 to 0.13.1

Release notes

Sourced from github.com/open-component-model/replication-controller's releases.

v0.13.1

Release 0.13.1

  • fix: add the right version in the image overlay for the deployment (#140)
  • fix: remove any more personal data (#137)
  • chore: remove personal information (#134)
Commits

Updates github.com/teekennedy/goldmark-markdown from 0.2.0 to 0.3.0

Commits
  • 0cdef01 Fix lint errors
  • 96dcd23 Update module to go 1.21
  • 1e1dd11 Add tests for custom node renderers
  • 0f4d780 renderer: add support for extending node renderers
  • a9e5318 Bump gopkg.in/yaml.v3 from 3.0.0-20200313102051-9f266ea9e77c to 3.0.0
  • 286638d renderer: add support for ordered list
  • 5350b71 Fix typo
  • 215f4f5 Use go 1.18, upgrade all workflow actions
  • See full diff in compare view

Updates github.com/yuin/goldmark from 1.4.13 to 1.5.4

Commits

Updates golang.org/x/exp from 0.0.0-20240103183307-be819d1f06fc to 0.0.0-20240416160154-fe59bbe5cc7f

Commits

Updates golang.org/x/oauth2 from 0.16.0 to 0.19.0

Commits
  • d0e617c google: add Credentials.UniverseDomainProvider
  • 3c9c1f6 oauth2/google: fix the logic of sts 0 value of expires_in
  • 5a05c65 oauth2/google: fix remove content-type header from idms get requests
  • 3a6776a appengine: drop obsolete code for AppEngine envs <=Go 1.11
  • 85231f9 go.mod: update golang.org/x dependencies
  • 34a7afa google/externalaccount: add Config.UniverseDomain
  • 95bec95 google/externalaccount: moves externalaccount package out of internal and exp...
  • ebe81ad go.mod: update golang.org/x dependencies
  • adffd94 google/internal/externalaccount: update serviceAccountImpersonationRE to supp...
  • deefa7e google/downscope: add DownscopingConfig.UniverseDomain to support TPC
  • See full diff in compare view

Updates k8s.io/klog/v2 from 2.110.1 to 2.120.1

Release notes

Sourced from k8s.io/klog/v2's releases.

Prepare klog release for Kubernetes v1.30 (Take 2)

What's Changed

Full Changelog: kubernetes/klog@v2.120.0...v2.120.1

Prepare klog release for Kubernetes v1.30 (Take 1)

What's Changed

New Contributors

Full Changelog: kubernetes/klog@v2.110.1...v2.120.0

Commits
  • 007e661 textlogger: allow caller to override stack unwinding
  • 2d08296 Merge pull request #396 from pohly/slog-helper
  • e4deee8 slog: use main logr package instead of logr/slogr
  • 5d1d2d5 add SetSlogLogger
  • 39afdba dependencies: logr v1.4.1
  • 2086216 Merge pull request #393 from kaisoz/add-safeptr
  • 881fa0b Add SafePtr wrapper
  • 8dd3f2e Merge pull request #395 from pohly/readme-update
  • d3dd725 docs: clarify relationship between different features
  • 761b630 Merge pull request #394 from pohly/owners-update
  • Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20240102154912-e7106e64919e to 0.0.0-20240310230437-4693a0247e57

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| code.gitea.io/sdk/gitea | `0.15.1` | `0.18.0` |
| cuelang.org/go | `0.7.0` | `0.8.2` |
| [github.com/containers/image/v5](https://github.com/containers/image) | `5.29.2` | `5.30.0` |
| [github.com/fluxcd/kustomize-controller/api](https://github.com/fluxcd/kustomize-controller) | `1.0.0-rc.3` | `1.2.2` |
| [github.com/fluxcd/pkg/apis/event](https://github.com/fluxcd/pkg) | `0.5.2` | `0.9.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.42.0` | `0.47.1` |
| [github.com/fluxcd/pkg/untar](https://github.com/fluxcd/pkg) | `0.2.0` | `0.3.0` |
| [github.com/fluxcd/source-controller/api](https://github.com/fluxcd/source-controller) | `1.1.0` | `1.3.0` |
| [github.com/open-component-model/git-controller](https://github.com/open-component-model/git-controller) | `0.12.0` | `0.12.1` |
| [github.com/open-component-model/mpas-project-controller](https://github.com/open-component-model/mpas-project-controller) | `0.6.0` | `0.6.1` |
| [github.com/open-component-model/ocm](https://github.com/open-component-model/ocm) | `0.8.0` | `0.9.0` |
| [github.com/open-component-model/ocm-controller](https://github.com/open-component-model/ocm-controller) | `0.19.0` | `0.20.1` |
| [github.com/open-component-model/replication-controller](https://github.com/open-component-model/replication-controller) | `0.13.0` | `0.13.1` |
| [github.com/teekennedy/goldmark-markdown](https://github.com/teekennedy/goldmark-markdown) | `0.2.0` | `0.3.0` |



Updates `code.gitea.io/sdk/gitea` from 0.15.1 to 0.18.0

Updates `cuelang.org/go` from 0.7.0 to 0.8.2

Updates `github.com/containers/image/v5` from 5.29.2 to 5.30.0
- [Release notes](https://github.com/containers/image/releases)
- [Commits](containers/image@v5.29.2...v5.30.0)

Updates `github.com/fluxcd/kustomize-controller/api` from 1.0.0-rc.3 to 1.2.2
- [Release notes](https://github.com/fluxcd/kustomize-controller/releases)
- [Changelog](https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/kustomize-controller@v1.0.0-rc.3...v1.2.2)

Updates `github.com/fluxcd/pkg/apis/event` from 0.5.2 to 0.9.0
- [Commits](fluxcd/pkg@kustomize/v0.5.2...git/v0.9.0)

Updates `github.com/fluxcd/pkg/apis/meta` from 1.1.2 to 1.3.0
- [Commits](fluxcd/pkg@apis/meta/v1.1.2...apis/meta/v1.3.0)

Updates `github.com/fluxcd/pkg/runtime` from 0.42.0 to 0.47.1
- [Commits](fluxcd/pkg@runtime/v0.42.0...runtime/v0.47.1)

Updates `github.com/fluxcd/pkg/untar` from 0.2.0 to 0.3.0
- [Commits](fluxcd/pkg@tar/v0.2.0...tar/v0.3.0)

Updates `github.com/fluxcd/source-controller/api` from 1.1.0 to 1.3.0
- [Release notes](https://github.com/fluxcd/source-controller/releases)
- [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md)
- [Commits](fluxcd/source-controller@v1.1.0...v1.3.0)

Updates `github.com/open-component-model/git-controller` from 0.12.0 to 0.12.1
- [Release notes](https://github.com/open-component-model/git-controller/releases)
- [Changelog](https://github.com/open-component-model/git-controller/blob/main/.goreleaser.yaml)
- [Commits](open-component-model/git-controller@v0.12.0...v0.12.1)

Updates `github.com/open-component-model/mpas-project-controller` from 0.6.0 to 0.6.1
- [Release notes](https://github.com/open-component-model/mpas-project-controller/releases)
- [Changelog](https://github.com/open-component-model/mpas-project-controller/blob/main/.goreleaser.yaml)
- [Commits](open-component-model/mpas-project-controller@v0.6.0...v0.6.1)

Updates `github.com/open-component-model/ocm` from 0.8.0 to 0.9.0
- [Release notes](https://github.com/open-component-model/ocm/releases)
- [Changelog](https://github.com/open-component-model/ocm/blob/main/.goreleaser.yaml)
- [Commits](open-component-model/ocm@v0.8.0...v0.9.0)

Updates `github.com/open-component-model/ocm-controller` from 0.19.0 to 0.20.1
- [Release notes](https://github.com/open-component-model/ocm-controller/releases)
- [Changelog](https://github.com/open-component-model/ocm-controller/blob/main/.goreleaser.yaml)
- [Commits](open-component-model/ocm-controller@v0.19.0...v0.20.1)

Updates `github.com/open-component-model/replication-controller` from 0.13.0 to 0.13.1
- [Release notes](https://github.com/open-component-model/replication-controller/releases)
- [Changelog](https://github.com/open-component-model/replication-controller/blob/main/.goreleaser.yaml)
- [Commits](open-component-model/replication-controller@v0.13.0...v0.13.1)

Updates `github.com/teekennedy/goldmark-markdown` from 0.2.0 to 0.3.0
- [Commits](teekennedy/goldmark-markdown@v0.2.0...v0.3.0)

Updates `github.com/yuin/goldmark` from 1.4.13 to 1.5.4
- [Release notes](https://github.com/yuin/goldmark/releases)
- [Commits](yuin/goldmark@v1.4.13...v1.5.4)

Updates `golang.org/x/exp` from 0.0.0-20240103183307-be819d1f06fc to 0.0.0-20240416160154-fe59bbe5cc7f
- [Commits](https://github.com/golang/exp/commits)

Updates `golang.org/x/oauth2` from 0.16.0 to 0.19.0
- [Commits](golang/oauth2@v0.16.0...v0.19.0)

Updates `k8s.io/klog/v2` from 2.110.1 to 2.120.1
- [Release notes](https://github.com/kubernetes/klog/releases)
- [Changelog](https://github.com/kubernetes/klog/blob/main/RELEASE.md)
- [Commits](kubernetes/klog@v2.110.1...v2.120.1)

Updates `k8s.io/utils` from 0.0.0-20240102154912-e7106e64919e to 0.0.0-20240310230437-4693a0247e57
- [Commits](https://github.com/kubernetes/utils/commits)

---
updated-dependencies:
- dependency-name: code.gitea.io/sdk/gitea
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: cuelang.org/go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/containers/image/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/kustomize-controller/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/apis/event
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/apis/meta
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/untar
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/source-controller/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/open-component-model/git-controller
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/open-component-model/mpas-project-controller
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/open-component-model/ocm
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/open-component-model/ocm-controller
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/open-component-model/replication-controller
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/teekennedy/goldmark-markdown
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/yuin/goldmark
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/exp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/klog/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/utils
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 5, 2024
Copy link

github-actions bot commented May 5, 2024

Mend Scan Summary: ❌

Repository: open-component-model/mpas-product-controller

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 0
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 2
LICENSE RISK HIGH 9
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report
Mend UI

Copy link
Contributor Author

dependabot bot commented on behalf of github May 12, 2024

Superseded by #154.

@dependabot dependabot bot closed this May 12, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go-0724ad3d85 branch May 12, 2024 19:58
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants