Bump the go group across 1 directory with 8 updates#143
Open
dependabot[bot] wants to merge 1 commit into
Open
Conversation
Bumps the go group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/coreos/go-oidc/v3](https://github.com/coreos/go-oidc) | `3.10.0` | `3.17.0` | | [github.com/go-test/deep](https://github.com/go-test/deep) | `1.1.0` | `1.1.1` | | [github.com/gorilla/schema](https://github.com/gorilla/schema) | `1.3.0` | `1.4.1` | | [github.com/spf13/afero](https://github.com/spf13/afero) | `1.11.0` | `1.15.0` | | [go.uber.org/zap](https://github.com/uber-go/zap) | `1.27.0` | `1.27.1` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.30.1` | `0.34.2` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.30.1` | `0.34.2` | Updates `github.com/coreos/go-oidc/v3` from 3.10.0 to 3.17.0 - [Release notes](https://github.com/coreos/go-oidc/releases) - [Commits](coreos/go-oidc@v3.10.0...v3.17.0) Updates `github.com/go-test/deep` from 1.1.0 to 1.1.1 - [Release notes](https://github.com/go-test/deep/releases) - [Changelog](https://github.com/go-test/deep/blob/master/CHANGES.md) - [Commits](go-test/deep@v1.1.0...v1.1.1) Updates `github.com/gorilla/schema` from 1.3.0 to 1.4.1 - [Release notes](https://github.com/gorilla/schema/releases) - [Commits](gorilla/schema@v1.3.0...v1.4.1) Updates `github.com/spf13/afero` from 1.11.0 to 1.15.0 - [Release notes](https://github.com/spf13/afero/releases) - [Commits](spf13/afero@v1.11.0...v1.15.0) Updates `go.uber.org/zap` from 1.27.0 to 1.27.1 - [Release notes](https://github.com/uber-go/zap/releases) - [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md) - [Commits](uber-go/zap@v1.27.0...v1.27.1) Updates `golang.org/x/oauth2` from 0.21.0 to 0.28.0 - [Commits](golang/oauth2@v0.21.0...v0.28.0) Updates `k8s.io/api` from 0.30.1 to 0.34.2 - [Commits](kubernetes/api@v0.30.1...v0.34.2) Updates `k8s.io/client-go` from 0.30.1 to 0.34.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.30.1...v0.34.2) --- updated-dependencies: - dependency-name: github.com/coreos/go-oidc/v3 dependency-version: 3.17.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/go-test/deep dependency-version: 1.1.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/gorilla/schema dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/spf13/afero dependency-version: 1.15.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: go.uber.org/zap dependency-version: 1.27.1 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: golang.org/x/oauth2 dependency-version: 0.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: k8s.io/api dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: k8s.io/client-go dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go group with 7 updates in the / directory:
3.10.03.17.01.1.01.1.11.3.01.4.11.11.01.15.01.27.01.27.10.30.10.34.20.30.10.34.2Updates
github.com/coreos/go-oidc/v3from 3.10.0 to 3.17.0Release notes
Sourced from github.com/coreos/go-oidc/v3's releases.
... (truncated)
Commits
35b8e03oidc: improve error message for mismatched issuer URLse958473bump go to 1.24, remove 1.23 support, bump go-jose dependency, remove x/net d...69b1670refactor: Remove unused time injection from RemoteKeySet8d1e57eoidc: verify the ID Token's signature before processing claimsa7c457eoidctest: fix importaba1ce2oidc/oidctest: add new package60d436e*: bump dependency versions4b5f82doidc: add JSON tags to ProviderConfig0fe9887oidc: ignore cancellation of remote key set context308e778chore(deps): bump dependencies to address security issuesUpdates
github.com/go-test/deepfrom 1.1.0 to 1.1.1Release notes
Sourced from github.com/go-test/deep's releases.
Changelog
Sourced from github.com/go-test/deep's changelog.
Commits
9e863ffRelease v1.1.1dc5b2f6Update SECURITY.md185886dRestore 100% test coverage (NilPointersAreZero case)47ae1b8Merge pull request #61 from seveas/nil-pointers-are-zero93c35acMerge branch 'master' into nil-pointers-are-zero2982c5cUpdate test matrix to latest 3 Go versions2b8252eAdd an option to consider nil pointers to be equivalent to zero values95fb3b1Merge pull request #58 from bartleyg/patch-11127c84fix copy pasta test7ff4e92Update changelog for v1.1.0Updates
github.com/gorilla/schemafrom 1.3.0 to 1.4.1Release notes
Sourced from github.com/gorilla/schema's releases.
Commits
cd59f2fMerge pull request from GHSA-3669-72x9-r9p3180f71efix: indirection through nil pointer to embedded struct (#211)a377fd6fix: fix assertion testbe699f4fix delete pointer slice test50924fffix:test: fix commentc44c90dfix:test: add assertion7d1c58efix: decode error message4548527fix: test data993e5b1fix: add test7487651fix: if default element type of value are setted in slice , raise errorUpdates
github.com/spf13/aferofrom 1.11.0 to 1.15.0Release notes
Sourced from github.com/spf13/afero's releases.
... (truncated)
Commits
399bb34Merge pull request #523 from MarkRosemaker/fix-spelling9b67716Merge pull request #538 from spf13/depsf5f4f7bchore: update depsc245c4fci: update ci85c4956Merge pull request #527 from spf13/dependabot/github_actions/actions/checkout...41206fdbuild(deps): bump actions/checkout from 4.2.2 to 5.0.0a583fadMerge pull request #533 from spf13/dependabot/github_actions/actions/dependen...673c03eMerge pull request #536 from spf13/dependabot/github_actions/actions/setup-go...ac849f6Merge pull request #537 from spf13/dependabot/github_actions/github/codeql-ac...9596fe8build(deps): bump github/codeql-action from 3.29.7 to 3.30.1Updates
go.uber.org/zapfrom 1.27.0 to 1.27.1Release notes
Sourced from go.uber.org/zap's releases.
Changelog
Sourced from go.uber.org/zap's changelog.
Commits
7b755a3release 1.27.1 (#1521)d6b395bUpdate lazy logger not to materialize unless it's being written to (#1519)4b9cea0ci: Test with Go 1.24, Go 1.25 (#1508)7c80d7bFix race condition in WithLazy implementation (#1426) (#1511)07077a6Prevent zap.Object from panicing on nils (#1501)a6afd05Fix lint check name (#1502)6d48253chore: fix typo (#1482)32f2ec1Fix the field test for bool type (#1480)fe16eb5Upgrade grpc in zapgrc test package & bump go version (#1478)5f00c34test(AtomicLevel): demonstrate Handler is not vulnerable to XSS (#1477)Updates
golang.org/x/oauth2from 0.21.0 to 0.28.0Commits
0042180oauth2: Deep copy context client in NewClientce350bfoauth2: remove unneeded TokenSource implementation in transport test44967abgoogle: fix typos9c82a8coauth2.go: use a more straightforward return value681b4d8jws: split token into fixed number of parts3f78298all: upgrade go directive to at least 1.23.0 [generated]109dabfendpoints: add links/provider for Discordac571faoauth2: fix docs for Config.DeviceAuth314ee5bendpoints: add patreon endpointb9c813bgoogle: add warning about externally-provided credentialsUpdates
k8s.io/apifrom 0.30.1 to 0.34.2Commits
e28454bUpdate dependencies to v0.34.2 tag133a39cMerge remote-tracking branch 'origin/master' into release-1.34fd087beclarify that staging repos are automatically publishedff163efadd pointer to CONTRIBUTING.md for more details on contributing, clarify read...5ec86fclink to what a staging repository is08c5deedocs: clarify that this is a staging repository and not for direct contributionsba64d0bUpdate prerelease lifecycle to v1.3425f849cMerge pull request #132522 from sunya-ch/KEP-5075-PRbaa1eb1KEP-5075: generated codes from make update740b2c9KEP-5075: API updatesUpdates
k8s.io/client-gofrom 0.30.1 to 0.34.2Commits
54601aaUpdate dependencies to v0.34.2 tag1bb1ad2Merge pull request #134589liggitt/automated-cherry-pick-of-#1345882505205Remove invalid SAN certificate construction7ffba0fMerge pull request #134004DerekFrank/automated-cherry-pick-of-#133573145cb8fgofmt and review feedbackddcdc12fix: Update unit test to catch actual nil Labels case and fix functionality t...97396afMerge remote-tracking branch 'origin/master' into release-1.345f737f3clarify that staging repos are automatically published0b8655badd pointer to CONTRIBUTING.md for more details on contributing, clarify read...c00384clink to what a staging repository isDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions