Bump the go_modules group across 1 directory with 9 updates#3911
Conversation
Bumps the go_modules group with 4 updates in the /roles/copy_container/files/copy-quay directory: [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose), [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux), [github.com/sigstore/fulcio](https://github.com/sigstore/fulcio) and [github.com/sigstore/rekor](https://github.com/sigstore/rekor). Updates `github.com/go-jose/go-jose/v3` from 3.0.3 to 3.0.5 - [Release notes](https://github.com/go-jose/go-jose/releases) - [Commits](go-jose/go-jose@v3.0.3...v3.0.5) Updates `github.com/opencontainers/selinux` from 1.11.0 to 1.13.0 - [Release notes](https://github.com/opencontainers/selinux/releases) - [Commits](opencontainers/selinux@v1.11.0...v1.13.0) Updates `github.com/sigstore/fulcio` from 1.4.3 to 1.8.5 - [Release notes](https://github.com/sigstore/fulcio/releases) - [Changelog](https://github.com/sigstore/fulcio/blob/main/CHANGELOG.md) - [Commits](sigstore/fulcio@v1.4.3...v1.8.5) Updates `github.com/sigstore/rekor` from 1.2.2 to 1.5.0 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.2.2...v1.5.0) Updates `github.com/sigstore/sigstore` from 1.8.2 to 1.10.3 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.2...v1.10.3) Updates `github.com/ulikunitz/xz` from 0.5.11 to 0.5.14 - [Commits](ulikunitz/xz@v0.5.11...v0.5.14) Updates `golang.org/x/crypto` from 0.31.0 to 0.46.0 - [Commits](golang/crypto@v0.31.0...v0.46.0) Updates `golang.org/x/net` from 0.25.0 to 0.48.0 - [Commits](golang/net@v0.25.0...v0.48.0) Updates `google.golang.org/grpc` from 1.61.1 to 1.78.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.61.1...v1.78.0) --- updated-dependencies: - dependency-name: github.com/go-jose/go-jose/v3 dependency-version: 3.0.5 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/opencontainers/selinux dependency-version: 1.13.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/sigstore/fulcio dependency-version: 1.8.5 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/sigstore/rekor dependency-version: 1.5.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/sigstore/sigstore dependency-version: 1.10.3 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/ulikunitz/xz dependency-version: 0.5.14 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.46.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.48.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-version: 1.78.0 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a openstack-k8s-operators member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 39m 22s |
Bumps the go_modules group with 4 updates in the /roles/copy_container/files/copy-quay directory: github.com/go-jose/go-jose/v3, github.com/opencontainers/selinux, github.com/sigstore/fulcio and github.com/sigstore/rekor.
Updates
github.com/go-jose/go-jose/v3from 3.0.3 to 3.0.5Release notes
Sourced from github.com/go-jose/go-jose/v3's releases.
Commits
be2f654ci: update Go versions for GHA workflows (#221)0246416Merge commit from fork5253038Backport fix 167 to v3 (#174)047dc99CI: Update github actions and go version (#173)0f017e9Revert #26 (ignore unsupported JWKs in Sets) (#131)3e2bbefUnmarshal jwk keys with unsupported key type or algorithm into empty … (#26)Updates
github.com/opencontainers/selinuxfrom 1.11.0 to 1.13.0Release notes
Sourced from github.com/opencontainers/selinux's releases.
... (truncated)
Commits
4be9937Merge pull request #237 from cyphar/selinux-safe-procfsc8cfa6fselinux: migrate to pathrs-lite procfs APIf2424d8Merge pull request #236 from kolyshkin/modernize-ci648ce7fci: add go 1.25916cab9ci: bump golangci-lint to v2.5b42e5c8all: format sources with latest gofumpt74393eaMerge pull request #235 from cyphar/fix-keyring-err-check6ec194bkeyring: fix typo in EACCES check879a755Merge pull request #234 from opencontainers/dependabot/github_actions/actions...3c1bd9abuild(deps): bump actions/setup-go from 5 to 6Updates
github.com/sigstore/fulciofrom 1.4.3 to 1.8.5Release notes
Sourced from github.com/sigstore/fulcio's releases.
... (truncated)
Changelog
Sourced from github.com/sigstore/fulcio's changelog.
... (truncated)
Commits
eaae2f2Add anchors when matching meta issuer regexp (GHSA-59jp-pj84-45mr) (#2263)9325775Update changelog for v1.8.5 (#2264)b23705dbuild(deps): bump google.golang.org/api from 0.258.0 to 0.259.0 (#2260)9e8841dbuild(deps): bump golang froma22b2e6to36b4f45(#2251)5c13588build(deps): bump actions/upload-artifact from 5.0.0 to 6.0.0 (#2253)4c823aebuild(deps): bump the all group across 1 directory with 4 updates (#2259)c15246abuild(deps): bump google.golang.org/api from 0.257.0 to 0.258.0 (#2252)f2e48e1Use transparency-dev tesseract image (#2250)9e26cb4Add read service for CT log (#2258)7bff3d6Switch to go.yaml.in/yaml/v3 (#2257)Updates
github.com/sigstore/rekorfrom 1.2.2 to 1.5.0Release notes
Sourced from github.com/sigstore/rekor's releases.
... (truncated)
Changelog
Sourced from github.com/sigstore/rekor's changelog.
... (truncated)
Commits
fe9717fChangelog for v1.5.0 (#2730)60ef2bcDrop support for fetching public keys by URL in the search index (#2731)ca625dcbuild(deps): Bump github.com/redis/go-redis/v9 from 9.14.1 to 9.17.2 (#2706)39bae3dMerge commit from fork (#2729)812e699build(deps): Bump google.golang.org/api from 0.256.0 to 0.259.0 (#2723)4596e4ebuild(deps): Bump golang.org/x/net from 0.47.0 to 0.48.0 (#2722)a3e73cdbuild(deps): Bump github.com/sigstore/sigstore from 1.9.5 to 1.10.3 (#2724)94d259cbuild(deps): Bump the all group across 1 directory with 3 updates (#2727)a5329c9build(deps): Bump the all group with 2 updates (#2728)5e6bdcdbuild(deps): Bump google.com/cloudsdktool/google-cloud-cli (#2726)Updates
github.com/sigstore/sigstorefrom 1.8.2 to 1.10.3Release notes
Sourced from github.com/sigstore/sigstore's releases.
... (truncated)
Commits
72f0ed7build(deps): Bump github.com/aws/aws-sdk-go-v2/config (#2230)b257168build(deps): Bump github.com/aws/aws-sdk-go-v2 in /pkg/signature/kms/aws (#2226)84f57b8build(deps): Bump github.com/sigstore/sigstore (#2221)bdc1a86build(deps): Bump actions/checkout from 5.0.1 to 6.0.0 (#2220)11dfe81build(deps): Bump golang.org/x/crypto in /pkg/signature/kms/aws (#2236)0214948Add back ValidatePubKey as a deprecated, minimal function (#2235)cc26bb8build(deps): Bump localstack/localstack in /test/e2e in the all group (#2227)63ab8d8build(deps): Bump github.com/aws/aws-sdk-go-v2/service/kms (#2229)9e629f0build(deps): Bump the all group with 2 updates (#2219)234b99dbuild(deps): Bump github.com/coreos/go-oidc/v3 from 3.16.0 to 3.17.0 (#2223)Updates
github.com/ulikunitz/xzfrom 0.5.11 to 0.5.14Commits
7184815Preparation of release v0.5.1488ddf1dAddress Security Issue GHSA-jc7w-c686-c4v9c8314b8Add new package xio with WriteCloserStack4f11dceUpdate README.md and SECURITY.md to address security questionsf56ebbfTODO.md: fix a typoUpdates
golang.org/x/cryptofrom 0.31.0 to 0.46.0Commits
19acf81go.mod: update golang.org/x dependencies3a1c6b4x509roots/fallback: update bundlef4602e4ssh/agent: fix flaky test by ensuring a writeable home directory4e0068cgo.mod: update golang.org/x dependenciese79546essh: curb GSSAPI DoS risk by limiting number of specified OIDsf91f7a7ssh/agent: prevent panic on malformed constraint2df4153acme/autocert: let automatic renewal work with short lifetime certsbcf6a84acme: pass context to requestb4f2b62ssh: fix error message on unsupported cipher79ec3a5ssh: allow to bind to a hostname in remote forwardingUpdates
golang.org/x/netfrom 0.25.0 to 0.48.0Commits
35e1306go.mod: update golang.org/x dependencies7c36036http2, webdav, websocket: fix %q verb uses with wrong typeec11ecctrace: fix data race in RenderEventsbff14c5http2: don't PING a responsive server when resetting a stream88a6421dns/dnsmessage: avoid use of "strings" and "math" in dns/dnsmessage123d099http2: support net/http.Transport.NewClientConn346cc61webdav: relax test to check for any redirect status, not just 3019a29643go.mod: update golang.org/x dependencies07cefd8context: deprecate5ac9dacpublicsuffix: don't treat ip addresses as domain namesUpdates
google.golang.org/grpcfrom 1.61.1 to 1.78.0Release notes
Sourced from google.golang.org/grpc's releases.
... (truncated)
Commits
9df039eChange version to 1.78.0 (#8761)9b990b6gracefulswitch: Wait for all goroutines on close (#8746)6677d9axds: Fixing a typo (#8760)d35ceddxds/resolver: pass route's auto_host_rewrite to LB picker (gRFC A81) (#8740)d931fdcclient: allow overriding grpc-accept-encoding header (#8718)0800ec7xds/clusterimpl: update TestChildPolicyChangeOnConfigUpdate to use custom lb ...6553ea1stats/otel: Add subchannel metrics (A94) (#8738)81a00cegrpc: Fixing spelling typo (#8756)e413838client: Change connectivity state to CONNECTING when creating the name resolv...f9d2bdbstats/otel: Add grpc.lb.backend_service label to wrr metrics (A89) (#8737)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.