Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the go group across 1 directory with 11 updates - recreation of #956 #959

Merged
merged 34 commits into from
Oct 17, 2024

Conversation

hilmarf
Copy link
Member

@hilmarf hilmarf commented Oct 14, 2024

github seems to have some hiccups and doesn't reflect latest changes on branch 'dependabot/go_modules/go-bf3991935e'

so this PR is a recreation of:
#956

  • uses now go v1.23.2
  • uses now golangci-lint v1.61.0

dependabot bot and others added 3 commits October 13, 2024 08:15
Bumps the go group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.31.0` | `1.32.2` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.27.39` | `1.27.43` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.25` | `1.17.32` |
| [github.com/aws/aws-sdk-go-v2/service/ecr](https://github.com/aws/aws-sdk-go-v2) | `1.35.3` | `1.36.2` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.10` | `1.17.11` |
| [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) | `2.4.0` | `2.4.1` |
| [golang.org/x/net](https://github.com/golang/net) | `0.29.0` | `0.30.0` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.16.1` | `3.16.2` |



Updates `github.com/aws/aws-sdk-go-v2` from 1.31.0 to 1.32.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.31.0...v1.32.2)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.39 to 1.27.43
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@config/v1.27.39...config/v1.27.43)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.37 to 1.17.41
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.37...credentials/v1.17.41)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.25 to 1.17.32
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.25...credentials/v1.17.32)

Updates `github.com/aws/aws-sdk-go-v2/service/ecr` from 1.35.3 to 1.36.2
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/iot/v1.35.3...service/iam/v1.36.2)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.63.3 to 1.65.3
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.63.3...service/s3/v1.65.3)

Updates `github.com/klauspost/compress` from 1.17.10 to 1.17.11
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.10...v1.17.11)

Updates `github.com/sigstore/cosign/v2` from 2.4.0 to 2.4.1
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](sigstore/cosign@v2.4.0...v2.4.1)

Updates `golang.org/x/net` from 0.29.0 to 0.30.0
- [Commits](golang/net@v0.29.0...v0.30.0)

Updates `golang.org/x/text` from 0.18.0 to 0.19.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.18.0...v0.19.0)

Updates `helm.sh/helm/v3` from 3.16.1 to 3.16.2
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.16.1...v3.16.2)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/ecr
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/sigstore/cosign/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/text
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <[email protected]>
'refs/remotes/origin/dependabot/go_modules/go-bf3991935e' into
dependabot/go_modules/go-bf3991935e
@hilmarf hilmarf requested a review from a team as a code owner October 14, 2024 11:53
@ocmbot ocmbot bot added the dependencies label Oct 14, 2024
@github-actions github-actions bot added the size/m Medium label Oct 14, 2024
@hilmarf hilmarf added this to the 2024-Q4 milestone Oct 14, 2024
@hilmarf hilmarf enabled auto-merge (squash) October 14, 2024 11:54
Copy link
Contributor

github-actions bot commented Oct 14, 2024

Mend Scan Summary: ❌

Repository: open-component-model/ocm

VIOLATION DESCRIPTION NUMBER OF VIOLATIONS
HIGH/CRITICAL SECURITY VULNERABILITIES 3
MAJOR UPDATES AVAILABLE 0
LICENSE REQUIRES REVIEW 2
HIGH RISK LICENSES 10
RESTRICTIED LICENSE FOR ON-PREMISE DELIVERY 0

Detailed Logs: mend-scan-> Generate Report
Mend UI

@hilmarf hilmarf changed the title chore(deps): bump the go group across 1 directory with 11 updates - recreaion of #956 chore(deps): bump the go group across 1 directory with 11 updates - recreation of #956 Oct 14, 2024
@hilmarf hilmarf merged commit dd2e6ba into main Oct 17, 2024
17 checks passed
@hilmarf hilmarf deleted the dependabot/go_modules/new branch October 17, 2024 11:49
Skarlso pushed a commit that referenced this pull request Oct 22, 2024
…ecreaion of #956 (#959)

github seems to have some hickups and doesn't reflect latest changes on
branch 'dependabot/go_modules/go-bf3991935e'

so this PR is a recreation of:
#956

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
size/l Large
Projects
Status: 🔒Closed
Development

Successfully merging this pull request may close these issues.

2 participants