Bump the oc-mirror-v2-version-updates group with 8 updates#1459
Open
dependabot[bot] wants to merge 1 commit into
Open
Bump the oc-mirror-v2-version-updates group with 8 updates#1459dependabot[bot] wants to merge 1 commit into
dependabot[bot] wants to merge 1 commit into
Conversation
Bumps the oc-mirror-v2-version-updates group with 8 updates: | Package | From | To | | --- | --- | --- | | [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.4.0` | `3.5.0` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.21.1` | `0.21.7` | | [github.com/operator-framework/operator-registry](https://github.com/operator-framework/operator-registry) | `1.69.0` | `1.72.0` | | [github.com/vbauerster/mpb/v8](https://github.com/vbauerster/mpb) | `8.12.0` | `8.12.1` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.51.0` | `0.53.0` | | [golang.org/x/term](https://github.com/golang/term) | `0.43.0` | `0.44.0` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.18.6` | `3.21.2` | | [github.com/docker/cli](https://github.com/docker/cli) | `29.5.2+incompatible` | `29.5.3+incompatible` | Updates `github.com/Masterminds/semver/v3` from 3.4.0 to 3.5.0 - [Release notes](https://github.com/Masterminds/semver/releases) - [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md) - [Commits](Masterminds/semver@v3.4.0...v3.5.0) Updates `github.com/google/go-containerregistry` from 0.21.1 to 0.21.7 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Commits](google/go-containerregistry@v0.21.1...v0.21.7) Updates `github.com/operator-framework/operator-registry` from 1.69.0 to 1.72.0 - [Release notes](https://github.com/operator-framework/operator-registry/releases) - [Commits](operator-framework/operator-registry@v1.69.0...v1.72.0) Updates `github.com/vbauerster/mpb/v8` from 8.12.0 to 8.12.1 - [Release notes](https://github.com/vbauerster/mpb/releases) - [Commits](vbauerster/mpb@v8.12.0...v8.12.1) Updates `golang.org/x/crypto` from 0.51.0 to 0.53.0 - [Commits](golang/crypto@v0.51.0...v0.53.0) Updates `golang.org/x/term` from 0.43.0 to 0.44.0 - [Commits](golang/term@v0.43.0...v0.44.0) Updates `helm.sh/helm/v3` from 3.18.6 to 3.21.2 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.18.6...v3.21.2) Updates `github.com/docker/cli` from 29.5.2+incompatible to 29.5.3+incompatible - [Commits](docker/cli@v29.5.2...v29.5.3) --- updated-dependencies: - dependency-name: github.com/Masterminds/semver/v3 dependency-version: 3.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: oc-mirror-v2-version-updates - dependency-name: github.com/google/go-containerregistry dependency-version: 0.21.7 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: oc-mirror-v2-version-updates - dependency-name: github.com/operator-framework/operator-registry dependency-version: 1.72.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: oc-mirror-v2-version-updates - dependency-name: github.com/vbauerster/mpb/v8 dependency-version: 8.12.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: oc-mirror-v2-version-updates - dependency-name: golang.org/x/crypto dependency-version: 0.53.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: oc-mirror-v2-version-updates - dependency-name: golang.org/x/term dependency-version: 0.44.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: oc-mirror-v2-version-updates - dependency-name: helm.sh/helm/v3 dependency-version: 3.21.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: oc-mirror-v2-version-updates - dependency-name: github.com/docker/cli dependency-version: 29.5.3+incompatible dependency-type: direct:production update-type: version-update:semver-patch dependency-group: oc-mirror-v2-version-updates ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
Note Currently processing new changes in this PR. This may take a few minutes, please wait... ⚙️ Run configurationConfiguration used: Repository: openshift/coderabbit/.coderabbit.yaml Review profile: CHILL Plan: Enterprise Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: dependabot[bot] The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
openshift-ci
Bot
added
the
needs-ok-to-test
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a openshift member to verify that this patch is reasonable to test. If it is, they should reply with Regular contributors should join the org to skip this step. Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. DetailsInstructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the oc-mirror-v2-version-updates group with 8 updates:
3.4.03.5.00.21.10.21.71.69.01.72.08.12.08.12.10.51.00.53.00.43.00.44.03.18.63.21.229.5.2+incompatible29.5.3+incompatibleUpdates
github.com/Masterminds/semver/v3from 3.4.0 to 3.5.0Release notes
Sourced from github.com/Masterminds/semver/v3's releases.
Changelog
Sourced from github.com/Masterminds/semver/v3's changelog.
Commits
8b89c86Merge pull request #287 from mattfarina/fix-da-issues29d51d0Fixing some quality issues87f651dMerge pull request #286 from mattfarina/update-devcontainer158a685Updating gitignore for devcontainers7e83c08Merge pull request #284 from Masterminds/dependabot/github_actions/golangci/g...697e27fMerge pull request #283 from Masterminds/dependabot/github_actions/actions/ca...1591f8eMerge pull request #282 from Masterminds/dependabot/github_actions/github/cod...3f5ff17Bump golangci/golangci-lint-action from 7.0.1 to 9.2.004baa33Bump actions/cache from 4.2.3 to 5.0.545939feBump github/codeql-action from 4.35.1 to 4.35.2Updates
github.com/google/go-containerregistryfrom 0.21.1 to 0.21.7Release notes
Sourced from github.com/google/go-containerregistry's releases.
... (truncated)
Commits
c68d899Bump go version to 1.26.4 (#2350)da61d86transport: do not re-attach bearer token after cross-host redirect (#2349)09fe1e5fix(tarball): normalize paths when matching files (#2334)5baa399build(deps): bump the go-deps group across 3 directories with 4 updates (#2348)97a8a17fix(transport): apply refreshed bearer token after cross-host redirect (#2337)e963497internal/gzip: fix goroutine leak in ReadCloserLevel (#2347)02649eafix: prevent SSRF in google.List() pagination (#2332)7204b40build(deps): bump the actions group across 1 directory with 2 updates (#2344)4cfaa93build(deps): bump the go-deps group across 1 directory with 2 updates (#2343)6849394pkg/registry: export RedirectError (#2177)Updates
github.com/operator-framework/operator-registryfrom 1.69.0 to 1.72.0Release notes
Sourced from github.com/operator-framework/operator-registry's releases.
Commits
fcd8df7Update api to v0.44.0 (#2008)58c3582Bump the k8s-dependencies group across 1 directory with 5 updates (#2002)50e9eb4Bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1 (#2007)a877205Bump the golang-x-deps group with 4 updates (#2006)9e61172Bump golang from 1.25-alpine to 1.26-alpine (#1914)de59e21Bump codecov/codecov-action from 6 to 7 (#2005)9ff3fd4Bump github.com/mattn/go-sqlite3 from 1.14.44 to 1.14.45 (#2004)e9534a9Update to operator-framework/api@v0.43.0 (#2003)9c948cdUpdate to golang-1.26.3 (#2001)2e03f89Bump github.com/docker/cli (#1999)Updates
github.com/vbauerster/mpb/v8from 8.12.0 to 8.12.1Release notes
Sourced from github.com/vbauerster/mpb/v8's releases.
Commits
1fcdaddv8.12.198992b5go get -ueb5935afeat: ToBuilder() BarFillerBuildercf7d4dcrefactor: iTip is iLen9af2c34refactor: drop SpinnerStyleComposer interface050fe87refactor: drop BarStyleComposer interfacea03d9e1refactor: proxywriter_test with ewma4c4ab56refactor: proxywriter_test2208a21refactor: proxyreader_test with ewma7db7229refactor: proxyreader_testUpdates
golang.org/x/cryptofrom 0.51.0 to 0.53.0Commits
45460e0go.mod: update golang.org/x dependenciesd37c95epkcs12: limit PBKDF iteration count to prevent CPU exhaustione2ffffessh: reject incomplete gssapi-with-mic configurations60e158assh/test: isolate CLI tests from user SSH config and agent1b77d23ssh/knownhosts: reject lines with multiple or unknown markers3872a2bssh/knownhosts: verify declared key type matches decoded key9f72eccssh/knownhosts: treat only ASCII space and tab as whitespace8f405a4ssh: validate ECDSA curve matches expected algorithmbb41b3dssh: improve DH GEX group selection using PreferredBitse04e721ssh/agent: validate ed25519 private key length in AddUpdates
golang.org/x/termfrom 0.43.0 to 0.44.0Commits
3b43943go.mod: update golang.org/x dependenciesUpdates
helm.sh/helm/v3from 3.18.6 to 3.21.2Release notes
Sourced from helm.sh/helm/v3's releases.
... (truncated)
Commits
1259634chore(deps): bump the k8s-io group with 2 updatesb52e276fixes3342dbfchore(deps): bump the k8s-io group across 1 directory with 2 updatesc56dd00fix(action): avoid nil REST client getter panic when installing CRDs702529ffix(registry): keep credentials on plain-HTTP fallback with oras-go v2.6.1178e120chore(deps): bump oras.land/oras-go/v2 from 2.6.0 to 2.6.1dcf35f8chore(deps): bump golang.org/x/crypto from 0.52.0 to 0.53.044aff8bchore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0ae2f31fchore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0402225fUpdate .github/envUpdates
github.com/docker/clifrom 29.5.2+incompatible to 29.5.3+incompatibleCommits
d1c06efMerge pull request #7022 from mickael-docker/docs-request-field7dd053bMerge pull request #7003 from thaJeztah/logs_links37c3d31Merge pull request #7024 from thaJeztah/add_zizmor45f10f2Merge pull request #7025 from vvoland/update-gob458dc9update to go1.26.41953194gha: apply zizmor fixesac0419egha: add zizmor workflow1aa0416docs: recommend default deny and clarify requesturi field3a85952Merge pull request #7020 from thaJeztah/full_semver8d3fbdfMerge pull request #7019 from thaJeztah/dependabot_labelsDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsSummary by CodeRabbit