-
Notifications
You must be signed in to change notification settings - Fork 107
chore(deps): bump the security group across 1 directory with 23 updates #1948
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Open
dependabot
wants to merge
1
commit into
main
Choose a base branch
from
dependabot/go_modules/security-f78746a648
base: main
Could not load branches
Branch not found: {{ refName }}
Loading
Could not load tags
Nothing to show
Loading
Are you sure you want to change the base?
Some commits from the old base branch may be removed from the timeline,
and old review comments may become outdated.
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the security group with 18 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/containerd/cgroups/v3](https://github.com/containerd/cgroups) | `3.1.1` | `3.1.2` | | [github.com/microsoft/go-mssqldb](https://github.com/microsoft/go-mssqldb) | `1.9.4` | `1.9.5` | | [github.com/miekg/dns](https://github.com/miekg/dns) | `1.1.68` | `1.1.69` | | [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.25.10` | `4.25.11` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.10.1` | `1.10.2` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.39.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.38.0` | `1.39.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.30.0` | `0.31.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.18.0` | `0.19.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.34.2` | `0.34.3` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.2` | `0.34.3` | | [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.34.2` | `0.34.3` | | [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) | `1.34.2` | `1.34.3` | | [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) | `1.7.0` | `1.8.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.47.0` | `0.48.0` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.0` | `3.19.4` | | [k8s.io/kubelet](https://github.com/kubernetes/kubelet) | `0.34.2` | `0.34.3` | | [k8s.io/metrics](https://github.com/kubernetes/metrics) | `0.34.2` | `0.34.3` | Updates `github.com/containerd/cgroups/v3` from 3.1.1 to 3.1.2 - [Release notes](https://github.com/containerd/cgroups/releases) - [Commits](containerd/cgroups@v3.1.1...v3.1.2) Updates `github.com/microsoft/go-mssqldb` from 1.9.4 to 1.9.5 - [Release notes](https://github.com/microsoft/go-mssqldb/releases) - [Changelog](https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md) - [Commits](microsoft/go-mssqldb@v1.9.4...v1.9.5) Updates `github.com/miekg/dns` from 1.1.68 to 1.1.69 - [Commits](miekg/dns@v1.1.68...v1.1.69) Updates `github.com/shirou/gopsutil/v4` from 4.25.10 to 4.25.11 - [Release notes](https://github.com/shirou/gopsutil/releases) - [Commits](shirou/gopsutil@v4.25.10...v4.25.11) Updates `github.com/spf13/cobra` from 1.10.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.10.1...v1.10.2) Updates `go.opentelemetry.io/otel` from 1.38.0 to 1.39.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0) Updates `go.opentelemetry.io/otel/sdk` from 1.38.0 to 1.39.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.38.0...v1.39.0) Updates `golang.org/x/mod` from 0.30.0 to 0.31.0 - [Commits](golang/mod@v0.30.0...v0.31.0) Updates `golang.org/x/sync` from 0.18.0 to 0.19.0 - [Commits](golang/sync@v0.18.0...v0.19.0) Updates `k8s.io/api` from 0.34.2 to 0.34.3 - [Commits](kubernetes/api@v0.34.2...v0.34.3) Updates `k8s.io/apiextensions-apiserver` from 0.34.2 to 0.34.3 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.34.2...v0.34.3) Updates `k8s.io/apimachinery` from 0.34.2 to 0.34.3 - [Commits](kubernetes/apimachinery@v0.34.2...v0.34.3) Updates `k8s.io/apiserver` from 0.34.2 to 0.34.3 - [Commits](kubernetes/apiserver@v0.34.2...v0.34.3) Updates `k8s.io/cli-runtime` from 0.34.2 to 0.34.3 - [Commits](kubernetes/cli-runtime@v0.34.2...v0.34.3) Updates `k8s.io/client-go` from 0.34.2 to 0.34.3 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.34.2...v0.34.3) Updates `k8s.io/kubernetes` from 1.34.2 to 1.34.3 - [Release notes](https://github.com/kubernetes/kubernetes/releases) - [Commits](kubernetes/kubernetes@v1.34.2...v1.34.3) Updates `github.com/hashicorp/go-version` from 1.7.0 to 1.8.0 - [Release notes](https://github.com/hashicorp/go-version/releases) - [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md) - [Commits](hashicorp/go-version@v1.7.0...v1.8.0) Updates `golang.org/x/net` from 0.47.0 to 0.48.0 - [Commits](golang/net@v0.47.0...v0.48.0) Updates `golang.org/x/sys` from 0.38.0 to 0.39.0 - [Commits](golang/sys@v0.38.0...v0.39.0) Updates `golang.org/x/text` from 0.31.0 to 0.32.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.31.0...v0.32.0) Updates `helm.sh/helm/v3` from 3.19.0 to 3.19.4 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.19.0...v3.19.4) Updates `k8s.io/kubelet` from 0.34.2 to 0.34.3 - [Commits](kubernetes/kubelet@v0.34.2...v0.34.3) Updates `k8s.io/metrics` from 0.34.2 to 0.34.3 - [Commits](kubernetes/metrics@v0.34.2...v0.34.3) --- updated-dependencies: - dependency-name: github.com/containerd/cgroups/v3 dependency-version: 3.1.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/microsoft/go-mssqldb dependency-version: 1.9.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/miekg/dns dependency-version: 1.1.69 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/shirou/gopsutil/v4 dependency-version: 4.25.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: go.opentelemetry.io/otel dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/mod dependency-version: 0.31.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/sync dependency-version: 0.19.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/api dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/apimachinery dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/apiserver dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/cli-runtime dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/client-go dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/kubernetes dependency-version: 1.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/hashicorp/go-version dependency-version: 1.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/net dependency-version: 0.48.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/sys dependency-version: 0.39.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/text dependency-version: 0.32.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: helm.sh/helm/v3 dependency-version: 3.19.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/kubelet dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/metrics dependency-version: 0.34.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security ... Signed-off-by: dependabot[bot] <[email protected]>
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the security group with 18 updates in the / directory:
3.1.13.1.21.9.41.9.51.1.681.1.694.25.104.25.111.10.11.10.21.38.01.39.01.38.01.39.00.30.00.31.00.18.00.19.00.34.20.34.30.34.20.34.30.34.20.34.31.34.21.34.31.7.01.8.00.47.00.48.03.19.03.19.40.34.20.34.30.34.20.34.3Updates
github.com/containerd/cgroups/v3from 3.1.1 to 3.1.2Release notes
Sourced from github.com/containerd/cgroups/v3's releases.
Commits
8c81c66Merge pull request #382 from HeRaNO/golangci-lintac36ca4Merge pull request #381 from containerd/dependabot/github_actions/actions/che...a302e56ci: bump golangci-lint to v2.6.2731cf7aci: suppress errcheck9bee663utils: move Close() to defer block9d7647crdma: use strings.Cut in Go 1.18109f063memory_test: apply De Morgan's lawe6fcf3fmemory_test: omit type from declaration4e30098build(deps): bump actions/checkout from 5 to 64fc9769Merge pull request #379 from voidbar/hugetlb-fixUpdates
github.com/microsoft/go-mssqldbfrom 1.9.4 to 1.9.5Commits
0bbbaf2fix(sharedmemory): Restrict package to supported platforms (#299)f1ed1e4feat: Shopspring decimal support (#287)Updates
github.com/miekg/dnsfrom 1.1.68 to 1.1.69Commits
49a9ceeRelease 1.1.6966f2f27fix EDNS0 flags and MBZ in String() output (#1693)acb3abaoptimized EDNS0_SUBNET pack, reducing make() calls (#1692)74d2ba1MsgInvalidFunc: Make DefaultMsgInvalidFunc a variable. (#1690)b39ef96Update deps (#1688)a0f8faafix(test): Increase RSA key length for sig0 (#1682)f15b2ddfeat(edns0): Add zoneversion option from RFC9660 (#1680)f640e4bBump the all group across 1 directory with 4 updates (#1679)294d373Added OwNS (NS for VPN users) (#1674)d495d33update readme some moreUpdates
github.com/shirou/gopsutil/v4from 4.25.10 to 4.25.11Release notes
Sourced from github.com/shirou/gopsutil/v4's releases.
Commits
93ca345Merge pull request #1943 from StefanoBalzarottiNozomi/add-context-disk-windows438f88eMerge pull request #1955 from OverOrion/fix/windows-file-handle-leaks28dc11cfix(process): add missing CloseHandle to OpenFilesWithContext for Windowsb44cda7use select ctx for context cancellation82391ffMerge pull request #1934 from johnnybubonic/fix_pidparse_edge1172d89Merge pull request #1893 from mmorel-35/nilnesserr678a63eMerge pull request #1948 from shirou/fix/update_github_action_runner_2025112f83a2cfix: remove and add GitHub action runner images.768bc18Merge pull request #1947 from shirou/dependabot/go_modules/github.com/tklause...3bb7cd5chore(deps): bump github.com/tklauser/go-sysconf from 0.3.15 to 0.3.16Updates
github.com/spf13/cobrafrom 1.10.1 to 1.10.2Release notes
Sourced from github.com/spf13/cobra's releases.
Commits
88b30abchore: Migrate from gopkg.in/yaml.v3 to go.yaml.in/yaml/v3 (#2336)346d408fix: actions/setup-go v6 (#2337)fc81d20refactor: change minUsagePadding from var to const (#2325)117698arefactor: replace several vars with consts (#2328)e2dd29dAdd documentation for repeated flags functionality (#2316)0629892Fix linter (#2327)Updates
go.opentelemetry.io/otelfrom 1.38.0 to 1.39.0Changelog
Sourced from go.opentelemetry.io/otel's changelog.
... (truncated)
Commits
6ce1429Release v1.39.0 (#7676)12e421asdk/log: move Enabled method from FilterProcessor to Processor (#7639)5982f16fix(deps): update module golang.org/x/sys to v0.39.0 (#7684)9288378chore(deps): update module golang.org/x/sync to v0.19.0 (#7683)ee3dfefchore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (#7682)9345d1ffix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (#7680)d03b033Check context prior to delaying retry in OTLP exporters (#7678)61765e7Fix flakyTestClientInstrumentation(#7677)a54721cchore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (#7679)746d086chore(deps): update github/codeql-action action to v4.31.7 (#7675)Updates
go.opentelemetry.io/otel/sdkfrom 1.38.0 to 1.39.0Changelog
Sourced from go.opentelemetry.io/otel/sdk's changelog.
... (truncated)
Commits
6ce1429Release v1.39.0 (#7676)12e421asdk/log: move Enabled method from FilterProcessor to Processor (#7639)5982f16fix(deps): update module golang.org/x/sys to v0.39.0 (#7684)9288378chore(deps): update module golang.org/x/sync to v0.19.0 (#7683)ee3dfefchore(deps): update github.com/securego/gosec/v2 digest to 41f28e2 (#7682)9345d1ffix(deps): update module github.com/golangci/golangci-lint/v2 to v2.7.2 (#7680)d03b033Check context prior to delaying retry in OTLP exporters (#7678)61765e7Fix flakyTestClientInstrumentation(#7677)a54721cchore(deps): update module github.com/go-git/go-billy/v5 to v5.7.0 (#7679)746d086chore(deps): update github/codeql-action action to v4.31.7 (#7675)Updates
golang.org/x/modfrom 0.30.0 to 0.31.0Commits
d271cf3go.mod: update golang.org/x dependencies269c237sumdb/note: delete chop3f03020x/mod: apply go fix and go vetUpdates
golang.org/x/syncfrom 0.18.0 to 0.19.0Commits
2a180e2errgroup: use consistent read for SetLimit panicUpdates
k8s.io/apifrom 0.34.2 to 0.34.3Commits
cf951b1Update dependencies to v0.34.3 tagUpdates
k8s.io/apiextensions-apiserverfrom 0.34.2 to 0.34.3Commits
a4ffedaUpdate dependencies to v0.34.3 tagUpdates
k8s.io/apimachineryfrom 0.34.2 to 0.34.3Commits
Updates
k8s.io/apiserverfrom 0.34.2 to 0.34.3Commits
a1e5047Update dependencies to v0.34.3 taga978f35Merge pull request #135343michaelasp/automated-cherry-pick-of-#1353277b9813aMerge pull request #135442lalitc375/automated-cherry-pick-of-#1353597b74a6dFallback to live ns lookup on admission if lister cannot find namespace4cb47d3Fix alpha API warnings for patch version differencesUpdates
k8s.io/cli-runtimefrom 0.34.2 to 0.34.3Commits
d035f64Update dependencies to v0.34.3 tagUpdates
k8s.io/client-gofrom 0.34.2 to 0.34.3Commits
3892804Update dependencies to v0.34.3 tagab04e77Merge pull request #135592serathius/automated-cherry-pick-of-#13558025da701Use transformer in consistency checker0c76ee5Add unit tests for Data Consistency Detectorcc3d9d0Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO ...Updates
k8s.io/kubernetesfrom 1.34.2 to 1.34.3Release notes
Sourced from k8s.io/kubernetes's releases.
Commits
df11db1Release commit for Kubernetes v1.34.37c5d1fcMerge pull request #135064eltrufas/automated-cherry-pick-of-#1335997124d34Merge pull request #135482 from borovetsav/fix-kubeadm-control-plane-join-1-34071d411Merge pull request #135612 from cpanato/update-rel-1343012c00Bump dependencies, images and versions used to Go 1.24.11 and distroless ipta...2f17c6cMerge pull request #135592serathius/automated-cherry-pick-of-#13558058da6ffMerge pull request #135207 from SergeyKanzhelev/automated-cherry-pick-of-#135...9043cb4Use transformer in consistency checker86c4e09Add unit tests for Data Consistency Detectorbe4a4f5Embed proper interface in TransformingStore to ensure DeltaFIFO and RealFIFO ...Updates
github.com/hashicorp/go-versionfrom 1.7.0 to 1.8.0Release notes
Sourced from github.com/hashicorp/go-version's releases.
Changelog
Sourced from github.com/hashicorp/go-version's changelog.
Commits
505335eMerge pull request #175 from florianl/drop-init6dd734bdrop init()0824a89Merge pull request #172 from hashicorp/compliance/update-headers9325934[COMPLIANCE] Update Copyright and License Headers5b82b98Bump the github-actions-breaking group across 1 directory with 2 updates (#171)6c6cd77Bump actions/checkout from 4.2.2 to 5.0.0 in the github-actions-breaking grou...0e50733Bump actions/cache from 4.2.3 to 4.2.4 in the github-actions-backward-compati...4e24ef1Bytes implementation (#161)437649aAdd benchmark test for version.String() (#159)b6c4db5Merge pull request #158 from hashicorp/compliance-templateUpdates
golang.org/x/netfrom 0.47.0 to 0.48.0Commits
35e1306go.mod: update golang.org/x dependencies7c36036http2, webdav, websocket: fix %q verb uses with wrong typeec11ecctrace: fix data race in RenderEventsbff14c5http2: don't PING a responsive server when resetting a stream88a6421dns/dnsmessage: avoid use of "strings" and "math" in dns/dnsmessage123d099http2: support net/http.Transport.NewClientConn346cc61webdav: relax test to check for any redirect status, not just 301Updates
golang.org/x/sysfrom 0.38.0 to 0.39.0Commits
08e5482unix: fix out of bounds memory access in tests4f4f1c6Revert "cpu: add HPDS, LOR, PAN detection for arm64"ca63116unix: add IOCTL_MEI_* constantsa4199c0unix: fix definition of Statvfs_t for netbsd-arm.Updates
golang.org/x/textfrom 0.31.0 to 0.32.0Commits
0dd57a6go.mod: update golang.org/x dependencies