Bump the security group across 1 directory with 7 updates #284
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
|
@dependabot rebase |
Bumps the security group with 3 updates in the / directory: [github.com/spf13/viper](https://github.com/spf13/viper), [helm.sh/helm/v3](https://github.com/helm/helm) and [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime). Updates `github.com/spf13/viper` from 1.19.0 to 1.20.1 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.19.0...v1.20.1) Updates `helm.sh/helm/v3` from 3.17.3 to 3.18.0 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.17.3...v3.18.0) Updates `k8s.io/api` from 0.32.2 to 0.33.0 - [Commits](kubernetes/api@v0.32.2...v0.33.0) Updates `k8s.io/apimachinery` from 0.32.2 to 0.33.0 - [Commits](kubernetes/apimachinery@v0.32.2...v0.33.0) Updates `k8s.io/cli-runtime` from 0.32.2 to 0.33.0 - [Commits](kubernetes/cli-runtime@v0.32.2...v0.33.0) Updates `k8s.io/client-go` from 0.32.2 to 0.33.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.32.2...v0.33.0) Updates `sigs.k8s.io/controller-runtime` from 0.20.2 to 0.20.4 - [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/controller-runtime@v0.20.2...v0.20.4) --- updated-dependencies: - dependency-name: github.com/spf13/viper dependency-version: 1.20.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: helm.sh/helm/v3 dependency-version: 3.18.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/api dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apimachinery dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/cli-runtime dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/client-go dependency-version: 0.33.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: sigs.k8s.io/controller-runtime dependency-version: 0.20.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
force-pushed
the
dependabot/go_modules/security-9173b60c2f
branch
from
4696824 to
266a242
Compare
laverya
approved these changes
Jun 9, 2025
|
@dependabot merge |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the security group with 3 updates in the / directory: github.com/spf13/viper, helm.sh/helm/v3 and sigs.k8s.io/controller-runtime.
Updates
github.com/spf13/viperfrom 1.19.0 to 1.20.1Release notes
Sourced from github.com/spf13/viper's releases.
... (truncated)
Commits
9568cfcfix: config type check when loading any configfd05140fix(config): get config type from v.configType or config file extc038295docs: add update instructions for 1.209c07e0fbuild: disable unused linters48112d6ci: add Go 1.24 to the test matrix66e3e28build(deps): bump github.com/spf13/pflag from 1.0.5 to 1.0.617b96acNew Logo8b223a4build(deps): bump github.com/spf13/cast from 1.7.0 to 1.7.191fd363chore: update aferoe75c48fFix issues reported by testifylintUpdates
helm.sh/helm/v3from 3.17.3 to 3.18.0Release notes
Sourced from helm.sh/helm/v3's releases.
... (truncated)
Commits
cc58e3fbuild(deps): bump the k8s-io group with 7 updatesbf1436bfix: govulncheck workflowd8edc2abump version to v3.18.0aa7cdaeMerge pull request #30818 from TerryHowe/fix-dev-v3-proxy48377fefix:add proxy support when mTLS configuredadf8430Merge pull request #30805 from TerryHowe/note-about-fallbackcdd7c10docs: Note about http fallback for OCI registries5339003Merge pull request #30791 from benoittgt/fix-30780f9ab8f7Bump net package to avoid CVE on dev-v3e4bc4a3Merge pull request #30768 from banjoh/em/fix-take-ownershipUpdates
k8s.io/apifrom 0.32.2 to 0.33.0Commits
82c0029Update dependencies to v0.33.0 tag16cedc7Merge pull request #131088 from atiratree/rename-terminating-replicas-fgdc88679Merge pull request #131103 from ahrtr/etcd_sdk_202503284a456a2bump etcd 3.5.21 sdk96e38c9rename DeploymentPodReplacementPolicy FG to DeploymentReplicaSetTerminatingRe...c21a017Merge pull request #129970 from mortent/AddResourceV1beta2APId0673dbRun make update118546dMerge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...f9401a3Merge pull request #130797 from jm-franc/configurable-tolerance9b3e544Generated UPDATE_COMPATIBILITY_FIXTURE_DATAUpdates
k8s.io/apimachineryfrom 0.32.2 to 0.33.0Commits
955939fbump etcd 3.5.21 sdke8a77bdMerge pull request #130910 from googs1025/fix/datarace7e8c77eMerge pull request #130906 from serathius/streaming-validation27fd396flake: fix data race for func TestBackoff_Step8bcc6f1Update kube-openapi and integrate streaming tags validation6ce776cMerge pull request #130857 from thockin/kk_small_vg_diffsf2c94d6Comment on origin and JSON schemab63ba07Use origin in validateFalse's own testbeddba4Use test.Helper in helper funcseaf4038Merge pull request #130354 from siyuanfoundation/forward-apiUpdates
k8s.io/cli-runtimefrom 0.32.2 to 0.33.0Commits
46ca2a9Update dependencies to v0.33.0 tag2811321bump etcd 3.5.21 sdkb44307fMerge pull request #129872 from seans3/websocket-https-proxyf7c023cWebsocket HTTPS proxy support178adecMerge pull request #130906 from serathius/streaming-validation1e2dc5cUpdate kube-openapi and integrate streaming tags validation7d637a3Merge pull request #130555 from thockin/k_k_randfill67be32dVendor randfill2dc7b80Merge pull request #130569 from dims/update-to-latest-cadvisor-v0.52.0a4e93f9update to v1.22.0-rc.0Updates
k8s.io/client-gofrom 0.32.2 to 0.33.0Commits
3aa3c77Update dependencies to v0.33.0 tagecbbb06bump etcd 3.5.21 sdk2086688Merge pull request #129970 from mortent/AddResourceV1beta2APIdba34c7Run make updatee359642Merge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...3bf0a05Merge pull request #130797 from jm-franc/configurable-tolerance7a03a3bGenerated files1676bebRefresh autogenerated files following the configurable tolerance updates.387edb8Merge pull request #130967 from aojea/listers21dc3b4benchmark to show inefficient linear search lookupUpdates
sigs.k8s.io/controller-runtimefrom 0.20.2 to 0.20.4Release notes
Sourced from sigs.k8s.io/controller-runtime's releases.
Commits
0f7927cMerge pull request #3179 from alvaroaleman/lowpdefault9951869🌱 TypedRequestForOwner: Decrease priority when unchangedc7d5d83Fix godoc of TypedEventHandler2062f3a🌱 Remove redundant WithLowPriorityWhenUnchanged in builder2af3164🌱 Followups to default low priority in mappers29debb1🌱 Handlers: Use low priority when object is unchanged and priority q5355658🐛Implement priorityqueue as default on handlers if using priorityqueue interf...3156aceMerge pull request #3175 from k8s-infra-cherrypick-robot/cherry-pick-3166-to-...4ae5f39add version.version to tools/setup-envtest to show installed version833f208Merge pull request #3173 from k8s-infra-cherrypick-robot/cherry-pick-3167-to-...Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot will merge this PR once CI passes on it, as requested by @laverya.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions