Skip to content

Bump the gomod-dependencies group across 1 directory with 5 updates#637

Closed
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/gomod-dependencies-c0c92fd6e9
Closed

Bump the gomod-dependencies group across 1 directory with 5 updates#637
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/go_modules/gomod-dependencies-c0c92fd6e9

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 24, 2025

Copy link
Copy Markdown
Contributor

Bumps the gomod-dependencies group with 5 updates in the / directory:

Package From To
github.com/jaypipes/ghw 0.13.0 0.16.0
github.com/k8snetworkplumbingwg/network-attachment-definition-client 1.7.5 1.7.6
github.com/onsi/gomega 1.36.2 1.36.3
google.golang.org/grpc 1.69.2 1.71.0
k8s.io/kubelet 0.32.0 0.32.3

Updates github.com/jaypipes/ghw from 0.13.0 to 0.16.0

Release notes

Sourced from github.com/jaypipes/ghw's releases.

v0.16.0

What's Changed

New Contributors

Full Changelog: jaypipes/ghw@v0.15.0...v0.16.0

v0.15.0

What's Changed

Full Changelog: jaypipes/ghw@v0.0.14...v0.15.0

v0.14.0

What's Changed

New Contributors

Full Changelog: jaypipes/ghw@v0.13.0...v0.14.0

Commits
  • b2e06de Merge pull request #410 from infastin/model
  • 8bfbc92 feat: more cpu model extractors
  • 9e879f1 Merge pull request #409 from zaneb/multipath-wwn
  • f0ccc08 Get WWN for multipath block devices
  • 3773bc3 Merge pull request #408 from jaypipes/issue407
  • b36d6a3 fix PCI address in filepath for graphics cards
  • 8018747 Merge pull request #406 from jaypipes/use-slices-contais
  • bba8dfb deps: accelerator: remove deps
  • 8f0a31c Merge pull request #404 from karman-docker/fix_index_out_of_range
  • fa9ef4c fixed an out of range index access
  • Additional commits viewable in compare view

Updates github.com/k8snetworkplumbingwg/network-attachment-definition-client from 1.7.5 to 1.7.6

Release notes

Sourced from github.com/k8snetworkplumbingwg/network-attachment-definition-client's releases.

v1.7.6

This release fixes a regression affecting CNI plugins that do not specify interfaces in their CNI ADD result.

Previously, IP addresses returned without an associated interface index were not being assigned to any network-status entry. This release restores the prior behavior by assigning such IPs to the last network status (i.e., the last sandboxed interface), ensuring consistent handling across plugins, especially those that omit the interfaces field entirely.

This change is important for compatibility with certain CNI plugins and maintains expected behavior from earlier versions of the net-attach-def library.

Special thanks to @​Brian-McM for identifying the issue and providing the fix!

Commits
  • e12bd55 Merge pull request #77 from Brian-McM/assign-ips-with-no-interface-to-default...
  • 77dfd49 Update pkg/utils/net-attach-def_test.go
  • 1945b69 Assign IPs that don't have an interface index to the last network status
  • See full diff in compare view

Updates github.com/onsi/gomega from 1.36.2 to 1.36.3

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.36.3

1.36.3

Maintenance

  • bump all the things [adb8b49]
  • chore: replace interface{} with any [7613216]
  • Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
  • remove spurious "toolchain" from go.mod (#819) [a0e85b9]
  • Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
  • Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
  • Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
  • Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
  • Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
  • Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
  • Fix typos (#813) [a1d518b]
Changelog

Sourced from github.com/onsi/gomega's changelog.

1.36.3

Maintenance

  • bump all the things [adb8b49]
  • chore: replace interface{} with any [7613216]
  • Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
  • remove spurious "toolchain" from go.mod (#819) [a0e85b9]
  • Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
  • Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
  • Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
  • Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
  • Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
  • Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
  • Fix typos (#813) [a1d518b]
Commits
  • 2251143 v1.36.3
  • adb8b49 bump all the things
  • 7613216 chore: replace interface{} with any
  • 9fe5259 Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822)
  • a0e85b9 remove spurious "toolchain" from go.mod (#819)
  • 604a8b1 Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823)
  • 36fbc84 Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772)
  • ced70d7 Bump github-pages from 231 to 232 in /docs (#778)
  • c8b4a07 Bump rexml from 3.2.6 to 3.3.9 in /docs (#788)
  • 06431b9 Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812)
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.69.2 to 1.71.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.71.0

API Changes

  • balancer: Custom LB policies that record metrics must use the new MetricsRecorder method on Balancer.ClientConn instead of the removed Balancer.BuildOptions.MetricsRecorder field to obtain a metrics recorder. (#8027)
  • balancer: balancer.ClientConn implementations must now embed a delegate implementation. This allows grpc-go to add new methods to the interface and remain backward compatible. (#8026)
  • balancer/endpointsharding: The constructor accepts the child balancer's builder and a struct with optional configuration. (#8052)

New Features

  • xds: Add support for dualstack via the additional_addresses field in the Endpoint resource. To disable this feature, set the environment variable GRPC_EXPERIMENTAL_XDS_DUALSTACK_ENDPOINTS=false. (#8134)
  • stats/opentelemetry: Add experimental support for OpenTelemetry tracing. (#7852)
  • xds/internal/xdsclient: Add counter metrics for valid and invalid resource updates. (#8038)
  • balancer/leastrequest, roundrobin: Add dualstack support. (#7969, #7966)
  • balancer/endpointsharding: Balancers created with the new DisableAutoReconnect option will not attempt to call ExitIdle automatically on their children when the children report idle. (#8052)

Bug Fixes

  • client: Fix support for proxies when using grpc.NewClient so the target is resolved by the proxy as expected. (#7881)
    • Added WithLocalDNSResolution() dial option to explicitly force target resolution on the client instead. (#7881)
  • weightedtarget: Return erroring picker when no targets are configured. (#8070)
  • xds: Fail RPCs with UNAVAILABLE when the EDS resource is missing or contains no endpoints (#8070)
  • xdsclient: Fix a bug where connectivity failures were reported to resource watchers before trying all listed servers. (#8075)
  • grpc: Fix the number of bytes reported in the error message when encoded messages are larger than 4GB. (#8033)
  • xds: Fixed a bug preventing tests from creating multiple servers or channels with different bootstrap configs. (#8050)
  • grpc: Fix message length checks when compression is enabled and maxReceiveMessageSize is MaxInt (#7918)

Documentation

  • client: Improve documentation of grpc.NewClient and ClientConn.CanonicalTarget by providing examples. (#8078)
  • examples/features/dualstack: New example demonstrating usage of endpoints and dualstack functionality. (#8098)

Release 1.70.0

Behavior Changes

  • client: reject service configs containing an invalid retryPolicy in accordance with gRFCs A21 and A6. (#7905)
    • Note that this is a potential breaking change for some users using an invalid configuration, but continuing to allow this behavior would violate our cross-language compatibility requirements.

New Features

  • xdsclient: fallback to a secondary management server (if specified in the bootstrap configuration) when the primary is down is enabled by default. Can be disabled by setting the environment variable GRPC_EXPERIMENTAL_XDS_FALLBACK to false. (#7949)
  • experimental/credentials: experimental transport credentials are added which don't enforce ALPN. (#7980)
    • These credentials will be removed in an upcoming grpc-go release. Users must not rely on these credentials directly. Instead, they should either vendor a specific version of gRPC or copy the relevant credentials into their own codebase if absolutely necessary.

Bug Fixes

  • xds: fix a possible deadlock that happens when both the client application and the xDS management server (responsible for configuring the client) are using the xds:/// scheme in their target URIs. (#8011)

Performance

... (truncated)

Commits
  • d01db5c Change version to 1.71.0 (#8105)
  • 012f8bf xds: Enable dualstack flag (#8134)
  • bf0c885 examples/features/dualstack: Demonstrate Dual Stack functionality (#8098) (#8...
  • 05bdd66 ringhash: Remove TODO comment (#8096)
  • ddb2484 xds: remove obsolete xDS transport custom dialer option (#8079)
  • 8528f43 cleanup: replace Dial with NewClient (#7975)
  • ae2a04f ringhash: Replace DNS resolver before sending xDS Update in test (#8091)
  • e55819e lazy: Use channel to wait for resolver error being received in test (#8088)
  • b524c08 xdsclient: include xds node ID in errors from the WatchResource API (#8093)
  • 91eb6aa client: improve documentation of target strings (#8078)
  • Additional commits viewable in compare view

Updates k8s.io/kubelet from 0.32.0 to 0.32.3

Commits
  • 27d733c Update dependencies to v0.32.3 tag
  • 8dbe302 Merge pull request #129598aravindhp/automated-cherry-pick-of-#129595
  • 14a411f kubelet: use env vars in node log query PS command
  • See full diff in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 24, 2025
@coveralls

coveralls commented Mar 24, 2025

Copy link
Copy Markdown
Collaborator

Pull Request Test Coverage Report for Build 14317358564

Details

  • 0 of 0 changed or added relevant lines in 0 files are covered.
  • No unchanged relevant lines lost coverage.
  • Overall coverage remained the same at 74.508%

Totals Coverage Status
Change from base Build 14309968448: 0.0%
Covered Lines: 2122
Relevant Lines: 2848

💛 - Coveralls

@zeeke

zeeke commented Apr 3, 2025

Copy link
Copy Markdown
Member

@dependabot close

@dependabot dependabot Bot closed this Apr 3, 2025
@dependabot @github

dependabot Bot commented on behalf of github Apr 3, 2025

Copy link
Copy Markdown
Contributor Author

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot Bot deleted the dependabot/go_modules/gomod-dependencies-c0c92fd6e9 branch April 3, 2025 07:35
@zeeke

zeeke commented Apr 3, 2025

Copy link
Copy Markdown
Member

@dependabot reopen

@dependabot dependabot Bot restored the dependabot/go_modules/gomod-dependencies-c0c92fd6e9 branch April 3, 2025 07:35
@dependabot dependabot Bot reopened this Apr 3, 2025
@dependabot dependabot Bot force-pushed the dependabot/go_modules/gomod-dependencies-c0c92fd6e9 branch from e88548c to 6330a86 Compare April 3, 2025 07:37
@dependabot @github

dependabot Bot commented on behalf of github Apr 7, 2025

Copy link
Copy Markdown
Contributor Author

Dependabot wasn't able to update downloading. Because of this, Dependabot cannot update this pull request.

Bumps the gomod-dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/jaypipes/ghw](https://github.com/jaypipes/ghw) | `0.13.0` | `0.16.0` |
| [github.com/k8snetworkplumbingwg/network-attachment-definition-client](https://github.com/k8snetworkplumbingwg/network-attachment-definition-client) | `1.7.5` | `1.7.6` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.36.2` | `1.36.3` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.69.2` | `1.71.0` |
| [k8s.io/kubelet](https://github.com/kubernetes/kubelet) | `0.32.0` | `0.32.3` |



Updates `github.com/jaypipes/ghw` from 0.13.0 to 0.16.0
- [Release notes](https://github.com/jaypipes/ghw/releases)
- [Commits](jaypipes/ghw@v0.13.0...v0.16.0)

Updates `github.com/k8snetworkplumbingwg/network-attachment-definition-client` from 1.7.5 to 1.7.6
- [Release notes](https://github.com/k8snetworkplumbingwg/network-attachment-definition-client/releases)
- [Commits](k8snetworkplumbingwg/network-attachment-definition-client@v1.7.5...v1.7.6)

Updates `github.com/onsi/gomega` from 1.36.2 to 1.36.3
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.36.2...v1.36.3)

Updates `google.golang.org/grpc` from 1.69.2 to 1.71.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.69.2...v1.71.0)

Updates `k8s.io/kubelet` from 0.32.0 to 0.32.3
- [Commits](kubernetes/kubelet@v0.32.0...v0.32.3)

---
updated-dependencies:
- dependency-name: github.com/jaypipes/ghw
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-dependencies
- dependency-name: github.com/k8snetworkplumbingwg/network-attachment-definition-client
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-dependencies
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-dependencies
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-dependencies
- dependency-name: k8s.io/kubelet
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/go_modules/gomod-dependencies-c0c92fd6e9 branch from 6330a86 to 16e9ec0 Compare April 7, 2025 19:04
@dependabot @github

dependabot Bot commented on behalf of github Apr 7, 2025

Copy link
Copy Markdown
Contributor Author

Dependabot wasn't able to update downloading. Because of this, Dependabot cannot update this pull request.

2 similar comments
@dependabot @github

dependabot Bot commented on behalf of github Apr 28, 2025

Copy link
Copy Markdown
Contributor Author

Dependabot wasn't able to update downloading. Because of this, Dependabot cannot update this pull request.

@dependabot @github

dependabot Bot commented on behalf of github Apr 28, 2025

Copy link
Copy Markdown
Contributor Author

Dependabot wasn't able to update downloading. Because of this, Dependabot cannot update this pull request.

@dependabot @github

dependabot Bot commented on behalf of github May 5, 2025

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 5, 2025
@dependabot dependabot Bot deleted the dependabot/go_modules/gomod-dependencies-c0c92fd6e9 branch May 5, 2025 18:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants