chore(deps): Bump the production-dependencies group across 1 directory with 26 updates #538

dependabot · 2024-10-16T00:17:21Z

Bumps the production-dependencies group with 17 updates in the / directory:

Package	From	To
github.com/tektoncd/pipeline	`0.61.1`	`0.64.0`
kubevirt.io/kubevirt	`1.3.0`	`1.3.1`
cloud.google.com/go/iam	`1.1.11`	`1.2.1`
github.com/go-jose/go-jose/v4	`4.0.3`	`4.0.4`
github.com/google/cel-go	`0.20.1`	`0.21.0`
github.com/grpc-ecosystem/grpc-gateway/v2	`2.20.0`	`2.22.0`
github.com/k8snetworkplumbingwg/network-attachment-definition-client	`1.7.4`	`1.7.5`
github.com/klauspost/compress	`1.17.10`	`1.17.11`
github.com/prometheus/client_golang	`1.19.1`	`1.20.5`
github.com/prometheus/common	`0.55.0`	`0.60.0`
github.com/prometheus/statsd_exporter	`0.26.1`	`0.27.2`
github.com/sigstore/sigstore	`1.8.7`	`1.8.10`
golang.org/x/net	`0.29.0`	`0.30.0`
golang.org/x/time	`0.6.0`	`0.7.0`
golang.org/x/tools	`0.25.0`	`0.26.0`
google.golang.org/protobuf	`1.34.2`	`1.35.1`
sigs.k8s.io/kustomize/api	`0.17.3`	`0.18.0`

Updates github.com/tektoncd/pipeline from 0.61.1 to 0.64.0

Release notes

Sourced from github.com/tektoncd/pipeline's releases.

Tekton Pipeline release v0.64.0 "Ragamuffin Reventlov"

🎉 Released Container Images stored on ghcr.io 🎉

-Docs @ v0.64.0 -Examples @ v0.64.0

Installation one-liner
kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.64.0/release.yaml
Attestation

The Rekor UUID for this release is 108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8

Obtain the attestation:
REKOR_UUID=108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .
Verify that all container images in the attestation are in the release file:
RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.64.0/release.yaml
REKOR_UUID=108e9186e8c5677ab54c658d37a263dfad3c8244bbef3e63cced8ae2d37c05701abf89bc6fa1fdf8
Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.64.0@sha256:" + .digest.sha256')
Download the release file
curl "$RELEASE_FILE" > release.yaml
For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done
Changes

Features

✨ Implement set-security-context feature for affinity assistant containers (#8182)

Affinity Assistant containers will now have a securityContext when feature flag set-security-context is enabled in ConfigMap feature-flags.

Fixes

🐛 Fix isolated workspaces ignored when using StepTemplate (#8272)

... (truncated)

Changelog

Sourced from github.com/tektoncd/pipeline's changelog.

Tekton Pipeline Releases

Release Frequency

Tekton Pipelines follows the Tekton community [release policy][release-policy] as follows:

Versions are numbered according to semantic versioning: vX.Y.Z

A new release is produced on a monthly basis

Four releases a year are chosen for long term support (LTS). All remaining releases are supported for approximately 1 month (until the next release is produced)

LTS releases take place in January, April, July and October every year

The first Tekton Pipelines LTS release will be v0.41.0 in October 2022

Releases happen towards the middle of the month, between the 13th and the 20th, depending on week-ends and readiness

Tekton Pipelines produces nightly builds, publicly available on gcr.io/tekton-nightly.

Transition Process

Before release v0.41 Tekton Pipelines has worked on the basis of an undocumented support period of four months, which will be maintained for the releases between v0.37 and v0.40.

Release Process

Tekton Pipeline releases are made of YAML manifests and container images. Manifests are published to cloud object-storage as well as [GitHub][tekton-pipeline-releases]. Container images are signed by [Sigstore][sigstore] via [Tekton Chains][tekton-chains]; signatures can be verified through the [public key][chains-public-key] hosted by the Tekton Chains project.

Further documentation available:

The Tekton Pipeline [release process][tekton-releases-docs]

[Installing Tekton][tekton-installation]

Standard for [release notes][release-notes-standards]

Release

v0.64

Latest Release: [v0.64.0][v0.64-0] (2024-09-27) ([docs][v0.64-0-docs], [examples][v0.64-0-examples])

Initial Release: [v0.64.0][v0.64-0] (2024-09-27)

End of Life: 2024-10-26

Patch Releases: [v0.64.0][v0.64-0]

v0.62 (LTS)

... (truncated)

Commits

575b35c build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity
cf4ccee fix(TaskRun): fixed the issue where some step statuses might not be correctly...
e3f5fe6 Bump google.golang.org/grpc from 1.64.1 to 1.67.0
43135b0 Simply the path for the base image
acefe8e Bump the all group across 1 directory with 4 updates
f59eea0 Mark steps as deleted when TaskRun fails
10468ca Pin alpine image used in release pipeline
1f27899 Pin setup-go action
63a1667 fix(pipelinerun): resolve issue with PipelineRun not timing out successfully
2e7b40f Bump github/codeql-action from 3.26.7 to 3.26.8
Additional commits viewable in compare view

Updates kubevirt.io/kubevirt from 1.3.0 to 1.3.1

Release notes

Sourced from kubevirt.io/kubevirt's releases.

v1.3.1

tag v1.3.1 Tagger: Antonio Cardace [email protected]

This release follows v1.3.0 and consists of 80 changes, contributed by 17 people, leading to 144 files changed, 24248 insertions(+), 479 deletions(-).

The source code and selected binaries are available for download at: https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1.

The primary release artifact of KubeVirt is the git tree. The release tag is signed and can be verified using git tag -v v1.3.1.

Pre-built containers are published on Quay and can be viewed at: https://quay.io/kubevirt/.

Notable changes

[PR #12646][kubevirt-bot] BugFix: "Cannot allocate memory" warnings for containerdisk VMs

[PR #12555][kubevirt-bot] VM supports kubevirt.io/immediate-data-volume-creation: "false" which delays creating DataVolumeTemplates until VM is started

[PR #12549][kubevirt-bot] Updated common-instancetypes bundles to v1.1.0

[PR #12495][fossedihelm] Fix: eviction requests to completed virt-launcher pods cannot trigger a live migration

[PR #12409][kubevirt-bot] Use optional interface at passt binding sidecar

[PR #12319][Sreeja1725] Add v1.3.0 perf and scale benchmarks data

[PR #12330][kubevirt-bot] Fix wrong KubeVirtVMIExcessiveMigrations alert calculation in an upgrade scenario.

[PR #12328][acardace] enable only for VMs with memory >= 1Gi

[PR #12272][Sreeja1725] Add unit tests to check for API backward compatibility

Contributors

17 people contributed to this release:

6 Alice Frosi [email protected] 5 Alvaro Romero [email protected] 5 Lee Yarwood [email protected] 4 Antonio Cardace [email protected] 4 Assaf Admi [email protected] 4 Michael Henriksen [email protected] 3 Alex Kalenyuk [email protected] 3 Brian Carey [email protected] 3 Luboslav Pivarc [email protected] 3 fossedihelm [email protected] 3 svarnam [email protected] 1 Enrique Llorente [email protected] 1 Felix Matouschek [email protected] 1 Igor Bezukh [email protected] 1 Oren Cohen [email protected]

Additional Resources

Mailing list: https://groups.google.com/forum/#!forum/kubevirt-dev

Slack: https://kubernetes.slack.com/messages/virtualization

... (truncated)

Commits

ed1e7ae Merge pull request #12646 from kubevirt-bot/cherry-pick-12638-to-release-1.3
50997e2 Merge pull request #12555 from kubevirt-bot/cherry-pick-12194-to-release-1.3
41c2b6a Remove handler cgroup pkg dep in virt-chroot
44b73d3 Merge pull request #12626 from kubevirt-bot/cherry-pick-12580-to-release-1.3
12a90fe Merge pull request #12604 from brianmcarey/backport-1.3-12552
d7454cc Merge pull request #12576 from kubevirt-bot/cherry-pick-12507-to-release-1.3
2463706 volume migration tests: adjust workdir path to absolute
c3a2b58 build: Add updated builder image with gradle removed
1f8c489 apidocs: remove gradle build and properties files
2c3ccbc apidocs: Switch to using swaggermarkup-cli and remove gradle dependency
Additional commits viewable in compare view

Updates cloud.google.com/go/iam from 1.1.11 to 1.2.1

Release notes

Sourced from cloud.google.com/go/iam's releases.

securesourcemanager: v1.2.1

1.2.1 (2024-09-12)

Bug Fixes

securesourcemanager: Bump dependencies (2ddeb15)

cloudcontrolspartner: v1.2.0

1.2.0 (2024-09-19)

Features

cloudcontrolspartner: A new value ACCESS_TRANSPARENCY_LOGS_SUPPORT_CASE_VIEWER is added to enum .google.cloud.cloudcontrolspartner.v1.PartnerPermissions.Permission (9efa812)

cloudcontrolspartner: A new value ACCESS_TRANSPARENCY_LOGS_SUPPORT_CASE_VIEWER is added to enum .google.cloud.cloudcontrolspartner.v1beta.PartnerPermissions.Permission (9efa812)

cloudcontrolspartner: Field behavior for field customer_onboarding_state in message .google.cloud.cloudcontrolspartner.v1.Customer is changed (9efa812)

cloudcontrolspartner: Field behavior for field customer_onboarding_state in message .google.cloud.cloudcontrolspartner.v1beta.Customer is changed (9efa812)

cloudcontrolspartner: Field behavior for field is_onboarded in message .google.cloud.cloudcontrolspartner.v1.Customer is changed (9efa812)

cloudcontrolspartner: Field behavior for field is_onboarded in message .google.cloud.cloudcontrolspartner.v1beta.Customer is changed (9efa812)

Bug Fixes

cloudcontrolspartner: Field behavior for field display_name in message .google.cloud.cloudcontrolspartner.v1.Customer is changed (9efa812)

cloudcontrolspartner: Field behavior for field display_name in message .google.cloud.cloudcontrolspartner.v1beta.Customer is changed (#10865) (9efa812)

Documentation

cloudcontrolspartner: A comment for field display_name in message .google.cloud.cloudcontrolspartner.v1.Customer is changed (9efa812)

cloudcontrolspartner: A comment for field display_name in message .google.cloud.cloudcontrolspartner.v1beta.Customer is changed (9efa812)

backupdr: v1.2.0

1.2.0 (2024-10-09)

Features

backupdr: Add backupplan proto (78d8513)

backupdr: Add backupplanassociation proto (78d8513)

backupdr: Add backupvault_ba proto (78d8513)

backupdr: Add backupvault_gce proto (78d8513)

backupdr: Client library for the backupvault api is added (78d8513)

Bug Fixes

backupdr: Remove visibility of unneeded AbandonBackup RPC (78d8513)

backupdr: Remove visibility of unneeded FinalizeBackup RPC (78d8513)

... (truncated)

Commits

e992f09 chore: release main (#10792)
22adc9a chore(main): release firestore 1.17.0 (#10597)
e9a551e feat(firestore): Adding distance threshold and result field (#10802)
839f30e chore(main): release auth 0.9.4 (#10846)
b9dfce5 chore: update gapic-generator-go to 0.47.0 (#10848)
9b4b2fa docs(pubsub): update documentation for 31 day subscription message retention ...
2bdedef fix(compute/metadata): check error chain for retryable error (#10840)
2d5a9f9 feat(dataproc): add support for new Dataproc features (#10817)
f9869f7 fix(auth): enable self-signed JWT for non-GDU universe domain (#10831)
6720291 chore(main): release bigtable 1.32.0 (#10815)
Additional commits viewable in compare view

Updates cloud.google.com/go/kms from 1.18.3 to 1.19.0

Release notes

Sourced from cloud.google.com/go/kms's releases.

dlp: v1.19.0

1.19.0 (2024-09-19)

Features

dlp: Action for publishing data profiles to SecOps (formelly known as Chronicle) (#10884) (fdb4ea9)

dlp: Action for publishing data profiles to Security Command Center (fdb4ea9)

dlp: Discovery configs for AWS S3 buckets (fdb4ea9)

Documentation

dlp: Small improvements and clarifications (fdb4ea9)

channel: v1.19.0

1.19.0 (2024-10-09)

Features

channel: Add support for importing team customer from a different reseller (78d8513)

channel: Add support for primary_admin_email as customer_identity for ImportCustomer (78d8513)

channel: Add support to look up team customer Cloud Identity information (78d8513)

Documentation

channel: Clarify the expected value of the domain field for team type customers (78d8513)

retail: v1.19.0

1.19.0 (2024-10-09)

Features

retail: Add conversational search (78d8513)

retail: Add conversational search (78d8513)

retail: Add conversational search (78d8513)

retail: Add tile navigation (78d8513)

retail: Add tile navigation (78d8513)

retail: Add tile navigation (78d8513)

Documentation

retail: Keep the API doc up-to-date with recent changes (78d8513)

retail: Keep the API doc up-to-date with recent changes (78d8513)

retail: Keep the API doc up-to-date with recent changes (78d8513)

Changelog

Sourced from cloud.google.com/go/kms's changelog.

1.19.0 (2023-05-30)

Features

documentai: Update all direct dependencies (b340d03)

1.18.1 (2023-05-08)

Bug Fixes

documentai: Update grpc to v1.55.0 (1147ce0)

1.18.0 (2023-03-22)

Features

documentai: Add ImportProcessorVersion in v1beta3 (c967961)

1.17.0 (2023-03-15)

Features

documentai: Added hints.language_hints field in OcrConfig (#7522) (b2c40c3)

1.16.0 (2023-02-22)

Features

documentai: ROLLBACK (#7439) (932ddc8)

1.15.0 (2023-02-14)

⚠ BREAKING CHANGES

documentai: The TrainProcessorVersion parent was incorrectly annotated.

Features

documentai: Add REST client (06a54a1)

documentai: Added advanced_ocr_options field in OcrConfig (45c70e3)

documentai: Added EvaluationReference to evaluation.proto (#7290) (4623db8)

documentai: Added field_mask field in DocumentOutputConfig.GcsOutputConfig in document_io.proto (2a0b1ae)

documentai: Added font_family to document.proto feat: added ImageQualityScores message to document.proto feat: added PropertyMetadata and EntityTypeMetadata to document_schema.proto (9c5d6c8)

documentai: Added TrainProcessorVersion, EvaluateProcessorVersion, GetEvaluation, and ListEvaluations v1beta3 APIs feat: added evaluation.proto feat: added document_schema field in ProcessorVersion processor.proto feat: added image_quality_scores field in Document.Page in document.proto feat: added font_family field in Document.Style in document.proto (ac0c5c2)

... (truncated)

Commits

f5833e6 chore: release main (#10690)
6692abb chore(all): update deps (#10705)
0130d06 chore(datastore): add owlbot config for protos (#10708)
e265371 feat(apihub): new clients (#10713)
84461c0 docs(batch): clarify tasks success criteria for background runnable (#10702)
4c519e3 fix(spanner): json null handling (#10660)
95ae207 chore(main): release pubsub 1.42.0 (#10656)
bbd3366 feat(pubsub): add opentelemetry tracing support (#10709)
106174a chore(apihub): add config to generate apiv1 (#10701)
2b7a912 chore(main): release auth 0.9.0 (#10693)
Additional commits viewable in compare view

Updates github.com/go-jose/go-jose/v4 from 4.0.3 to 4.0.4

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

Version 4.0.4

Fixed

Reverted "Allow unmarshalling JSONWebKeySets with unsupported key types" as a breaking change. See #136 / #137.

Changelog

Sourced from github.com/go-jose/go-jose/v4's changelog.

v4.0.4

Fixed

Reverted "Allow unmarshalling JSONWebKeySets with unsupported key types" as a breaking change. See #136 / #137.

Commits

15bc4c2 Update CHANGELOG for 4.0.4 (#138)
f3534ca Revert #130: JSONWebKeySet: ignore unsupported key types (#137)
ebaac64 Remove unused JWK error type (#135)
See full diff in compare view

Updates github.com/google/cel-go from 0.20.1 to 0.21.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.21.0

Features

Math extensions update to include bitwise ops and floating point helpers #923

Better support custom types with custom type registries #931

repl: implement %parse #933

Fixed partial variables extended bug and split PartialVarsEnvExtended test into two #955

Added partial evaluations example #959

Enable conformance tests for extensions #930

Update cel-spec and enable optional_type conformance tests #919

Improve token representation in AST #932

Add function accessor to Env #978

CEL Policy Compiler

Policies which use CEL often evolve to express complex logic using multiple statements and decision criteria. The CEL Policy Compiler provides an extensible format for parsing, compiling, and composing expression graphs. Below is a simple example which can easily be compiled to a single CEL expression.
name: "my-policy"
rule:
  variables:
    - name: greeting
      expression: "'%s, %s!'"
    - name: people
      expression: >
       ['Tristan', 'Calla', 'Antoine', 'Jonathan', 'Sokwhan', 'Rebecca']
  match:
    - condition: "request.user in variables.people"
      output: "variables.greeting.format(['hello', request.user])"
    - output: "variables.greeting.format(['goodbye', 'stranger'])"
Simple Policy Compiler #924

Introduce protobuf message testing to policies #961

Generate policy explanations during compilation #977

Variable and nested rule limits #989

Improved support for nested rules #991]

Fixes

Delete dangling source info from macro expansion #934

Do not re-use ID twice in exists_one macro #935

Avoid iterating over the source multiple times during parse #936

Fix for working with byte arrays by #958

Stabilize macro id generation during optimization #962

String formatting panic fix for non-literal format strings #987

Add nil checking for wrapperspb's types #960

... (truncated)

Commits

3545aac Improved support for nested rules (#991)
5bcdb8b Check for output type agreement during the compile phase (#992)
1f51886 Use bytes interface value for zero native type struct fields instead of dynam...
c9164bc Variable and nested rule limits (#989)
5cbef66 Prevent self-append for Issues (#988)
25457de Add nil checking for wrapperspb's types (#960)
badfce0 Fix panic in formatting string for non-literal formats (#987)
9e64eb7 Decompose the compile and compose methods (#986)
37d5b96 Add a function to return a policy whose output is the explanation. (#977)
bc96f3b Fix math.bitShiftRight for negative int (#983)
Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.20.0 to 2.22.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.22.0

What's Changed

docs: add example to fully override http responses by @nguyentranbao-ct in grpc-ecosystem/grpc-gateway#4564

stop printing error logs in handleForwardResponseOptions by @taichimaeda in grpc-ecosystem/grpc-gateway#4594

Add some documenation for CustomQueryParser with examples by @texzone in grpc-ecosystem/grpc-gateway#4602

Fix #4614 Unique Items placement by @sebaraj in grpc-ecosystem/grpc-gateway#4619

all: fix test lint warnings by @johanbrandhorst in grpc-ecosystem/grpc-gateway#4632

ci: update go versions supported by @johanbrandhorst in grpc-ecosystem/grpc-gateway#4634

feat: Add WithForwardResponseRewriter to allow easier/more useful response control by @nkcmr in grpc-ecosystem/grpc-gateway#4622

New Contributors

@nguyentranbao-ct made their first contribution in grpc-ecosystem/grpc-gateway#4564

@taichimaeda made their first contribution in grpc-ecosystem/grpc-gateway#4594

@texzone made their first contribution in grpc-ecosystem/grpc-gateway#4602

@sebaraj made their first contribution in grpc-ecosystem/grpc-gateway#4619

@nkcmr made their first contribution in grpc-ecosystem/grpc-gateway#4622

Full Changelog: grpc-ecosystem/grpc-gateway@v2.21.0...v2.22.0

v2.21.0

What's Changed

feat: Use version info from runtime/debug:BuildInfo when installed by go build by @MakDon in grpc-ecosystem/grpc-gateway#4359

feat: add mux middlewares and inject http pattern by @nikitaksv in grpc-ecosystem/grpc-gateway#4290

Fixes #3917: Add package openapi naming strategy. by @jgiles in grpc-ecosystem/grpc-gateway#4372

feat: use buildInfo.Main.Version as version when installed by go install by @MakDon in grpc-ecosystem/grpc-gateway#4390

Add support for method's deprecated option by @vajexal in grpc-ecosystem/grpc-gateway#4373

adding gRPC gateway generator script by @akoserwal in grpc-ecosystem/grpc-gateway#4426

fix url gen-grpc-gateway-api by @akoserwal in grpc-ecosystem/grpc-gateway#4434

ci: upgrade to goreleaser v2 by @johanbrandhorst in grpc-ecosystem/grpc-gateway#4437

docs: add grpc-starter transcoding to related projects by @DanielLiu1123 in grpc-ecosystem/grpc-gateway#4456

Fix build on 32bit systems by @gibmat in grpc-ecosystem/grpc-gateway#4557

New Contributors

@nikitaksv made their first contribution in grpc-ecosystem/grpc-gateway#4290

@vajexal made their first contribution in grpc-ecosystem/grpc-gateway#4373

@akoserwal made their first contribution in grpc-ecosystem/grpc-gateway#4426

@DanielLiu1123 made their first contribution in grpc-ecosystem/grpc-gateway#4456

@gibmat made their first contribution in grpc-ecosystem/grpc-gateway#4557

Full Changelog: grpc-ecosystem/grpc-gateway@v2.20.0...v2.21.0

Commits

0b14a81 chore(deps): update googleapis digest to 611b36b
a1b0988 feat: Add WithForwardResponseRewriter to allow easier/more useful response co...
169370b fix(deps): update google.golang.org/genproto/googleapis/rpc digest to ddb44da
1d33c43 chore(deps): update googleapis digest to 21b26c5
992f84c fix(deps): update google.golang.org/genproto/googleapis/api digest to ddb44da
30432b7 ci: update go versions supported (#4634)
b36529e chore(deps): update golang docker tag to v1.23.0
78cec49 chore(deps): update googleapis digest to fe00da8
218b078 all: fix test lint warnings (#4632)
f9c311f chore(deps): update googleapis digest to 96facec
Additional commits viewable in compare view

Updates github.com/k8snetworkplumbingwg/network-attachment-definition-client from 1.7.4 to 1.7.5

Release notes

Sourced from github.com/k8snetworkplumbingwg/network-attachment-definition-client's releases.

v1.7.5

This release contains a fix related to the determination of the default interface, e.g. setting the default parameter to true in the network-status annotation based on the presence of a gateway in the CNI ADD success result ips.gateway and makes the determination of the default based on the first interface that has an associated value of gateway (using the interface index in the ips element in the CNI ADD success result).

This provides flexibility especially in CRI-O which uses the first interface and IP addresses for the pod.IP in Kubernetes, therefore. Containerd functionality is unchanged in that it uses the value for the IP addresses specifically

It's worth noting that CNI ADD success results which do not contain any interfaces will be discarded in this determination of the default, therefore it's recommended to set one with an associated gateway if aiming to have it be noted as the default.

Commits

7d2def1 Merge pull request #73 from dougbtv/gw-for-default
55f81d3 Assigns default=true on a multiple interface return for first interface with ...
See full diff in compare view

Updates github.com/klauspost/compress from 1.17.10 to 1.17.11

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.11

What's Changed

zstd: Fix extra CRC written with multiple Close calls by @klauspost in klauspost/compress#1017

s2: Don't use stack for index tables by @klauspost in klauspost/compress#1014

gzhttp: No content-type on no body response code by @juliens in klauspost/compress#1011

gzhttp: Do not set the content-type when response has no body by @kevinpollet in klauspost/compress#1013

New Contributors

@juliens made their first contribution in klauspost/compress#1011

@kevinpollet made their first contribution in klauspost/compress#1013

Full Changelog: klauspost/compress@v1.17.10...v1.17.11

Commits

72cd4a9 zstd: Fix extra CRC written with multiple Close calls (#1017)
dbd6c38 s2: Don't use stack for index tables (#1014)
f73ab1e Do not set the content-type when response has no body (#1013)
f2a4f25 build(deps): bump github/codeql-action in the github-actions group (#1012)
8e14b1b No content-type on no body response code (#1011)
13a1ce6 ci: Match goreleaser version (#1009)
6c5a195 Update README.md
See full diff in compare view

Updates github.com/prometheus/client_golang from 1.19.1 to 1.20.5

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.20.5 / 2024-10-15

We decided to revert the testutil change that made our util functions less error-prone, but created a lot of work for our downstream users. Apologies for the pain! This revert should not cause any major breaking change, even if you already did the work--unless you depend on the exact error message.

Going forward, we plan to reinforce our release testing strategy [1],[2] and deliver an enhanced testutil package/module with more flexible and safer APIs.

Thanks to @dashpole @dgrisonnet @kakkoyun @ArthurSens @vesari @logicalhan @krajorama @bwplotka who helped in this patch release! 🤗

Changelog

[BUGFIX] testutil: Reverted #1424; functions using compareMetricFamilies are (again) only failing if filtered metricNames are in the expected input. #1645

v1.20.4

[BUGFIX] histograms: Fix a possible data race when appending exemplars vs metrics gather. #1623

v1.20.3

[BUGFIX] histograms: Fix possible data race when appending exemplars. #1608

v1.20.2

[BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. #1596

v1.20.1

This release contains the critical fix for the issue. Thanks to @geberl, @CubicrootXYZ, @zetaab and @timofurrer for helping us with the investigation!

[BUGFIX] process-collector: Fixed unregistered descriptor error when using process collector with PedanticRegistry on Linux machines. #1587

v1.20.0

Thanks everyone for contributions!

⚠️ In this release we remove one (broken anyway, given Go runtime changes) metric and add three new (representing GOGC, GOMEMLIMIT and GOMAXPROCS flags) to the default collectors.NewGoCollector() collector. Given its popular usage, expect your binary to expose two additional metric.

Changes

[CHANGE] ⚠️ go-collector: Remove go_memstat_lookups_total metric which was always 0; Go runtime stopped sharing pointer lookup statistics. #1577

[FEATURE] ⚠️ go-collector: Add 3 default metrics: go_gc_gogc_percent, go_gc_gomemlimit_bytes and go_sched_gomaxprocs_threads as those are recommended by the Go team. #1559

[FEATURE] go-collector: Add more information to all metrics' HELP e.g. the exact runtime/metrics sourcing each metric (if relevant). #1568 #1578

[FEATURE] testutil: Add CollectAndFormat method. #1503

[FEATURE] histograms: Add support for exemplars in native histograms. #1471

[FEATURE] promhttp: Add experimental support for zstd on scrape, controlled by the request Accept-Encoding header. #1496

[FEATURE] api/v1: Add WithLimit parameter to all API met...
Description has been truncated

…y with 26 updates Bumps the production-dependencies group with 17 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/tektoncd/pipeline](https://github.com/tektoncd/pipeline) | `0.61.1` | `0.64.0` | | [kubevirt.io/kubevirt](https://github.com/kubevirt/kubevirt) | `1.3.0` | `1.3.1` | | [cloud.google.com/go/iam](https://github.com/googleapis/google-cloud-go) | `1.1.11` | `1.2.1` | | [github.com/go-jose/go-jose/v4](https://github.com/go-jose/go-jose) | `4.0.3` | `4.0.4` | | [github.com/google/cel-go](https://github.com/google/cel-go) | `0.20.1` | `0.21.0` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.20.0` | `2.22.0` | | [github.com/k8snetworkplumbingwg/network-attachment-definition-client](https://github.com/k8snetworkplumbingwg/network-attachment-definition-client) | `1.7.4` | `1.7.5` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.10` | `1.17.11` | | [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.19.1` | `1.20.5` | | [github.com/prometheus/common](https://github.com/prometheus/common) | `0.55.0` | `0.60.0` | | [github.com/prometheus/statsd_exporter](https://github.com/prometheus/statsd_exporter) | `0.26.1` | `0.27.2` | | [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.8.7` | `1.8.10` | | [golang.org/x/net](https://github.com/golang/net) | `0.29.0` | `0.30.0` | | [golang.org/x/time](https://github.com/golang/time) | `0.6.0` | `0.7.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.25.0` | `0.26.0` | | google.golang.org/protobuf | `1.34.2` | `1.35.1` | | [sigs.k8s.io/kustomize/api](https://github.com/kubernetes-sigs/kustomize) | `0.17.3` | `0.18.0` | Updates `github.com/tektoncd/pipeline` from 0.61.1 to 0.64.0 - [Release notes](https://github.com/tektoncd/pipeline/releases) - [Changelog](https://github.com/tektoncd/pipeline/blob/main/releases.md) - [Commits](tektoncd/pipeline@v0.61.1...v0.64.0) Updates `kubevirt.io/kubevirt` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/kubevirt/kubevirt/releases) - [Changelog](https://github.com/kubevirt/kubevirt/blob/main/docs/release.md) - [Commits](kubevirt/kubevirt@v1.3.0...v1.3.1) Updates `cloud.google.com/go/iam` from 1.1.11 to 1.2.1 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@iam/v1.1.11...iam/v1.2.1) Updates `cloud.google.com/go/kms` from 1.18.3 to 1.19.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](googleapis/google-cloud-go@kms/v1.18.3...kms/v1.19.0) Updates `github.com/go-jose/go-jose/v4` from 4.0.3 to 4.0.4 - [Release notes](https://github.com/go-jose/go-jose/releases) - [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md) - [Commits](go-jose/go-jose@v4.0.3...v4.0.4) Updates `github.com/google/cel-go` from 0.20.1 to 0.21.0 - [Release notes](https://github.com/google/cel-go/releases) - [Commits](google/cel-go@v0.20.1...v0.21.0) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.20.0 to 2.22.0 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Changelog](https://github.com/grpc-ecosystem/grpc-gateway/blob/main/.goreleaser.yml) - [Commits](grpc-ecosystem/grpc-gateway@v2.20.0...v2.22.0) Updates `github.com/k8snetworkplumbingwg/network-attachment-definition-client` from 1.7.4 to 1.7.5 - [Release notes](https://github.com/k8snetworkplumbingwg/network-attachment-definition-client/releases) - [Commits](k8snetworkplumbingwg/network-attachment-definition-client@v1.7.4...v1.7.5) Updates `github.com/klauspost/compress` from 1.17.10 to 1.17.11 - [Release notes](https://github.com/klauspost/compress/releases) - [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml) - [Commits](klauspost/compress@v1.17.10...v1.17.11) Updates `github.com/prometheus/client_golang` from 1.19.1 to 1.20.5 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.19.1...v1.20.5) Updates `github.com/prometheus/common` from 0.55.0 to 0.60.0 - [Release notes](https://github.com/prometheus/common/releases) - [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md) - [Commits](prometheus/common@v0.55.0...v0.60.0) Updates `github.com/prometheus/statsd_exporter` from 0.26.1 to 0.27.2 - [Release notes](https://github.com/prometheus/statsd_exporter/releases) - [Changelog](https://github.com/prometheus/statsd_exporter/blob/master/CHANGELOG.md) - [Commits](prometheus/statsd_exporter@v0.26.1...v0.27.2) Updates `github.com/sigstore/sigstore` from 1.8.7 to 1.8.10 - [Release notes](https://github.com/sigstore/sigstore/releases) - [Commits](sigstore/sigstore@v1.8.7...v1.8.10) Updates `golang.org/x/crypto` from 0.27.0 to 0.28.0 - [Commits](golang/crypto@v0.27.0...v0.28.0) Updates `golang.org/x/net` from 0.29.0 to 0.30.0 - [Commits](golang/net@v0.29.0...v0.30.0) Updates `golang.org/x/sys` from 0.25.0 to 0.26.0 - [Commits](golang/sys@v0.25.0...v0.26.0) Updates `golang.org/x/term` from 0.24.0 to 0.25.0 - [Commits](golang/term@v0.24.0...v0.25.0) Updates `golang.org/x/text` from 0.18.0 to 0.19.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.18.0...v0.19.0) Updates `golang.org/x/time` from 0.6.0 to 0.7.0 - [Commits](golang/time@v0.6.0...v0.7.0) Updates `golang.org/x/tools` from 0.25.0 to 0.26.0 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.25.0...v0.26.0) Updates `google.golang.org/api` from 0.189.0 to 0.196.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.189.0...v0.196.0) Updates `google.golang.org/genproto/googleapis/api` from 0.0.0-20240814211410-ddb44dafa142 to 0.0.0-20240903143218-8af14fe29dc1 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240814211410-ddb44dafa142 to 0.0.0-20240903143218-8af14fe29dc1 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/protobuf` from 1.34.2 to 1.35.1 Updates `sigs.k8s.io/kustomize/api` from 0.17.3 to 0.18.0 - [Release notes](https://github.com/kubernetes-sigs/kustomize/releases) - [Commits](kubernetes-sigs/kustomize@api/v0.17.3...api/v0.18.0) Updates `sigs.k8s.io/kustomize/kyaml` from 0.17.2 to 0.18.1 - [Release notes](https://github.com/kubernetes-sigs/kustomize/releases) - [Commits](kubernetes-sigs/kustomize@api/v0.17.2...kyaml/v0.18.1) --- updated-dependencies: - dependency-name: github.com/tektoncd/pipeline dependency-type: direct:production update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: kubevirt.io/kubevirt dependency-type: direct:production update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: cloud.google.com/go/iam dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: cloud.google.com/go/kms dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: github.com/go-jose/go-jose/v4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: github.com/google/cel-go dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: github.com/k8snetworkplumbingwg/network-attachment-definition-client dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: github.com/klauspost/compress dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: github.com/prometheus/client_golang dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: github.com/prometheus/common dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: github.com/prometheus/statsd_exporter dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: github.com/sigstore/sigstore dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: golang.org/x/crypto dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: golang.org/x/net dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: golang.org/x/sys dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: golang.org/x/term dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: golang.org/x/text dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: golang.org/x/time dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: golang.org/x/tools dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: google.golang.org/api dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: google.golang.org/genproto/googleapis/api dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-type: indirect update-type: version-update:semver-patch dependency-group: production-dependencies - dependency-name: google.golang.org/protobuf dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: sigs.k8s.io/kustomize/api dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies - dependency-name: sigs.k8s.io/kustomize/kyaml dependency-type: indirect update-type: version-update:semver-minor dependency-group: production-dependencies ... Signed-off-by: dependabot[bot] <[email protected]>

kubevirt-bot · 2024-10-16T00:17:26Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign ksimon1 for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci · 2024-10-16T00:17:33Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign ksimon1 for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

openshift-ci · 2024-10-16T00:29:44Z

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/e2e-tests	`4961b6a`	link	true	`/test e2e-tests`
ci/prow/images	`4961b6a`	link	true	`/test images`

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

dependabot · 2024-10-17T00:24:22Z

Dependabot can't parse your go.mod. Because of this, Dependabot cannot update this pull request.

dependabot bot added the release-note-none Denotes a PR that doesn't merit a release note. label Oct 16, 2024

kubevirt-bot added the dco-signoff: yes Indicates the PR's author has DCO signed all their commits. label Oct 16, 2024

kubevirt-bot requested review from ksimon1 and lyarwood October 16, 2024 00:17

openshift-ci bot requested a review from 0xFelix October 16, 2024 00:17

kubevirt-bot added the size/XXL label Oct 16, 2024

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): Bump the production-dependencies group across 1 directory with 26 updates #538

chore(deps): Bump the production-dependencies group across 1 directory with 26 updates #538

dependabot bot commented on behalf of github Oct 16, 2024 •

edited

Loading

kubevirt-bot commented Oct 16, 2024

openshift-ci bot commented Oct 16, 2024

openshift-ci bot commented Oct 16, 2024

dependabot bot commented on behalf of github Oct 17, 2024

chore(deps): Bump the production-dependencies group across 1 directory with 26 updates #538

Are you sure you want to change the base?

chore(deps): Bump the production-dependencies group across 1 directory with 26 updates #538

Conversation

dependabot bot commented on behalf of github Oct 16, 2024 • edited Loading

Tekton Pipeline release v0.64.0 "Ragamuffin Reventlov"

🎉 Released Container Images stored on ghcr.io 🎉

Installation one-liner

Attestation

Changes

Features

Fixes

Tekton Pipeline Releases

Release Frequency

Transition Process

Release Process

Release

v0.64

v0.62 (LTS)

v1.3.1

Notable changes

Contributors

Additional Resources

securesourcemanager: v1.2.1

1.2.1 (2024-09-12)

Bug Fixes

cloudcontrolspartner: v1.2.0

1.2.0 (2024-09-19)

Features

Bug Fixes

Documentation

backupdr: v1.2.0

1.2.0 (2024-10-09)

Features

Bug Fixes

dlp: v1.19.0

1.19.0 (2024-09-19)

Features

Documentation

channel: v1.19.0

1.19.0 (2024-10-09)

Features

Documentation

retail: v1.19.0

1.19.0 (2024-10-09)

Features

Documentation

1.19.0 (2023-05-30)

Features

1.18.1 (2023-05-08)

Bug Fixes

1.18.0 (2023-03-22)

Features

1.17.0 (2023-03-15)

Features

1.16.0 (2023-02-22)

Features

1.15.0 (2023-02-14)

⚠ BREAKING CHANGES

Features

Version 4.0.4

Fixed

v4.0.4

Fixed

Release v0.21.0

Features

CEL Policy Compiler

Fixes

v2.22.0

What's Changed

New Contributors

v2.21.0

What's Changed

New Contributors

v1.7.5

v1.17.11

What's Changed

New Contributors

v1.20.5 / 2024-10-15

Changelog

dependabot bot commented on behalf of github Oct 16, 2024 •

edited

Loading