Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the go group across 1 directory with 11 updates - recreation of #956 #959

Open
wants to merge 31 commits into
base: main
Choose a base branch
from

Conversation

hilmarf
Copy link
Member

@hilmarf hilmarf commented Oct 14, 2024

github seems to have some hiccups and doesn't reflect latest changes on branch 'dependabot/go_modules/go-bf3991935e'

so this PR is a recreation of:
#956

  • uses now go v1.23.2
  • uses now golangci-lint v1.61.0

dependabot bot and others added 3 commits October 13, 2024 08:15
Bumps the go group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.31.0` | `1.32.2` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.27.39` | `1.27.43` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.25` | `1.17.32` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.35.3` | `1.36.2` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.10` | `1.17.11` |
| [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.4.0` | `2.4.1` |
| [golang.org/x/net](https://github.com/golang/net) | `0.29.0` | `0.30.0` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.16.1` | `3.16.2` |



Updates `github.com/aws/aws-sdk-go-v2` from 1.31.0 to 1.32.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.31.0...v1.32.2)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.39 to 1.27.43
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.27.39...config/v1.27.43)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.37 to 1.17.41
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.37...credentials/v1.17.41)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.25 to 1.17.32
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.25...credentials/v1.17.32)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.35.3 to 1.36.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/iot/v1.35.3...service/iam/v1.36.2)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.63.3 to 1.65.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.63.3...service/s3/v1.65.3)

Updates `github.com/klauspost/compress` from 1.17.10 to 1.17.11
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.10...v1.17.11)

Updates `github.com/sigstore/cosign/v2` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](sigstore/cosign@v2.4.0...v2.4.1)

Updates `golang.org/x/net` from 0.29.0 to 0.30.0
- [Commits](golang/net@v0.29.0...v0.30.0)

Updates `golang.org/x/text` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.18.0...v0.19.0)

Updates `helm.sh/helm/v3` from 3.16.1 to 3.16.2
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.16.1...v3.16.2)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/sigstore/cosign/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/text
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
'refs/remotes/origin/dependabot/go_modules/go-bf3991935e' into
dependabot/go_modules/go-bf3991935e
@hilmarf hilmarf requested a review from a team as a code owner October 14, 2024 11:53
@ocmbot ocmbot bot added the dependencies Pull requests that update a dependency file label Oct 14, 2024
@github-actions github-actions bot added the size/m Size of pull request is medium (see gardener-robot robot/bots/size.py) label Oct 14, 2024
@hilmarf hilmarf added this to the 2024-Q4 milestone Oct 14, 2024
@hilmarf hilmarf enabled auto-merge (squash) October 14, 2024 11:54
Copy link
Contributor

github-actions bot commented Oct 14, 2024

Mend Scan Summary: ❌

Repository: open-component-model/ocm

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 3
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 2
HIGH RISK LICENSES 10
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report
Mend UI

@hilmarf hilmarf changed the title chore(deps): bump the go group across 1 directory with 11 updates - recreaion of #956 chore(deps): bump the go group across 1 directory with 11 updates - recreation of #956 Oct 14, 2024
@github-actions github-actions bot added size/l Size of pull request is large (see gardener-robot robot/bots/size.py) and removed size/m Size of pull request is medium (see gardener-robot robot/bots/size.py) labels Oct 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file size/l Size of pull request is large (see gardener-robot robot/bots/size.py)
Projects
Status: 🔍 Review
Development

Successfully merging this pull request may close these issues.

1 participant