Skip to content

Bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 in /pkg/security/secl - #38348

Merged
dd-mergequeue[bot] merged 2 commits into
mainfrom
dependabot/go_modules/pkg/security/secl/sigs.k8s.io/yaml-1.5.0
Jul 24, 2025
Merged

Bump sigs.k8s.io/yaml from 1.4.0 to 1.5.0 in /pkg/security/secl#38348
dd-mergequeue[bot] merged 2 commits into
mainfrom
dependabot/go_modules/pkg/security/secl/sigs.k8s.io/yaml-1.5.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 1, 2025

Copy link
Copy Markdown
Contributor

Bumps sigs.k8s.io/yaml from 1.4.0 to 1.5.0.

Release notes

Sourced from sigs.k8s.io/yaml's releases.

v1.5.0

Full Changelog: kubernetes-sigs/yaml@v1.4.0...v1.5.0

Commits
  • 0f318dc Merge pull request #134 from kubernetes-sigs/forgot-to-add-redirects-for-cons...
  • b8fc0c0 Forgot to add redirects for v3 constants
  • 8eaa802 Merge pull request #133 from kubernetes-sigs/deprecate-code-in-goyaml.v3-goya...
  • 69e45c1 Deprecate code in goyaml.v2/goyaml.v3 directories and redirect
  • 0fe7da3 Merge pull request #125 from kragniz/go-1.24
  • 14cbb88 Test against go 1.24.x
  • c6ac2c9 Merge pull request #126 from kragniz/remove-travis
  • 203ded9 Remove old travisci config file
  • b9a9b1c Merge pull request #106 from ThatsMrTalbot/patch-1
  • 4c6913f fix: wrap errors returned by JSON unmarshal
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot Bot added changelog/no-changelog No changelog entry needed dependencies PRs that bump a dependency dependencies-go PRs that bump a go dependency team/agent-security labels Jul 1, 2025
@github-actions github-actions Bot added component/system-probe short review PR is simple enough to be reviewed quickly labels Jul 1, 2025
@cit-pr-commenter

cit-pr-commenter Bot commented Jul 1, 2025

Copy link
Copy Markdown

Go Package Import Differences

Baseline: 5813fd2
Comparison: 5925955

binaryosarchchange
agentlinuxamd64
+2, -0
+go.yaml.in/yaml/v2
+go.yaml.in/yaml/v3
agentlinuxarm64
+2, -0
+go.yaml.in/yaml/v2
+go.yaml.in/yaml/v3
agentwindowsamd64
+2, -0
+go.yaml.in/yaml/v2
+go.yaml.in/yaml/v3
agentdarwinamd64
+2, -0
+go.yaml.in/yaml/v2
+go.yaml.in/yaml/v3
agentdarwinarm64
+2, -0
+go.yaml.in/yaml/v2
+go.yaml.in/yaml/v3
iot-agentlinuxamd64
+1, -0
+go.yaml.in/yaml/v3
iot-agentlinuxarm64
+1, -0
+go.yaml.in/yaml/v3
heroku-agentlinuxamd64
+1, -0
+go.yaml.in/yaml/v3
cluster-agentlinuxamd64
+1, -0
+go.yaml.in/yaml/v2
cluster-agentlinuxarm64
+1, -0
+go.yaml.in/yaml/v2
dogstatsdlinuxamd64
+1, -0
+go.yaml.in/yaml/v2
dogstatsdlinuxarm64
+1, -0
+go.yaml.in/yaml/v2
process-agentlinuxamd64
+1, -0
+go.yaml.in/yaml/v2
process-agentlinuxarm64
+1, -0
+go.yaml.in/yaml/v2
process-agentwindowsamd64
+1, -0
+go.yaml.in/yaml/v2
process-agentdarwinamd64
+1, -0
+go.yaml.in/yaml/v2
process-agentdarwinarm64
+1, -0
+go.yaml.in/yaml/v2
security-agentlinuxamd64
+1, -0
+go.yaml.in/yaml/v2
security-agentlinuxarm64
+1, -0
+go.yaml.in/yaml/v2
security-agentwindowsamd64
+1, -0
+go.yaml.in/yaml/v2
serverlesslinuxamd64
+1, -0
+go.yaml.in/yaml/v3
serverlesslinuxarm64
+1, -0
+go.yaml.in/yaml/v3
trace-agentlinuxamd64
+1, -0
+go.yaml.in/yaml/v3
trace-agentlinuxarm64
+1, -0
+go.yaml.in/yaml/v3
trace-agentwindowsamd64
+1, -0
+go.yaml.in/yaml/v3
trace-agentdarwinamd64
+1, -0
+go.yaml.in/yaml/v3
trace-agentdarwinarm64
+1, -0
+go.yaml.in/yaml/v3
heroku-trace-agentlinuxamd64
+1, -0
+go.yaml.in/yaml/v3
otel-agentlinuxamd64
+2, -0
+go.yaml.in/yaml/v2
+go.yaml.in/yaml/v3
otel-agentlinuxarm64
+2, -0
+go.yaml.in/yaml/v2
+go.yaml.in/yaml/v3

@cit-pr-commenter

cit-pr-commenter Bot commented Jul 1, 2025

Copy link
Copy Markdown

Regression Detector

Regression Detector Results

Metrics dashboard
Target profiles
Run ID: d012071d-b9e6-4b03-b02d-4ea6e1095a95

Baseline: e4f9a11
Comparison: 5925955
Diff

Optimization Goals: ✅ No significant changes detected

Experiments ignored for regressions

Regressions in experiments with settings containing erratic: true are ignored.

perf experiment goal Δ mean % Δ mean % CI trials links
docker_containers_cpu % cpu utilization -1.43 [-4.46, +1.61] 1 Logs

Fine details of change detection per experiment

perf experiment goal Δ mean % Δ mean % CI trials links
quality_gate_logs % cpu utilization +1.05 [-1.73, +3.83] 1 Logs bounds checks dashboard
otlp_ingest_logs memory utilization +0.55 [+0.42, +0.67] 1 Logs
tcp_syslog_to_blackhole ingress throughput +0.31 [+0.25, +0.38] 1 Logs
ddot_logs memory utilization +0.31 [+0.21, +0.40] 1 Logs
file_to_blackhole_500ms_latency egress throughput +0.17 [-0.39, +0.74] 1 Logs
otlp_ingest_metrics memory utilization +0.14 [-0.01, +0.29] 1 Logs
quality_gate_idle_all_features memory utilization +0.09 [+0.06, +0.13] 1 Logs bounds checks dashboard
file_to_blackhole_1000ms_latency egress throughput +0.01 [-0.57, +0.59] 1 Logs
tcp_dd_logs_filter_exclude ingress throughput -0.00 [-0.02, +0.02] 1 Logs
uds_dogstatsd_to_api ingress throughput -0.00 [-0.32, +0.31] 1 Logs
file_to_blackhole_0ms_latency egress throughput -0.03 [-0.59, +0.54] 1 Logs
file_tree memory utilization -0.03 [-0.07, +0.00] 1 Logs
file_to_blackhole_100ms_latency egress throughput -0.07 [-0.68, +0.55] 1 Logs
ddot_metrics memory utilization -0.11 [-0.22, +0.01] 1 Logs
docker_containers_memory memory utilization -0.24 [-0.31, -0.18] 1 Logs
quality_gate_idle memory utilization -0.25 [-0.31, -0.19] 1 Logs bounds checks dashboard
uds_dogstatsd_20mb_12k_contexts_20_senders memory utilization -0.37 [-0.44, -0.30] 1 Logs
docker_containers_cpu % cpu utilization -1.43 [-4.46, +1.61] 1 Logs
quality_gate_metrics_logs memory utilization -1.70 [-2.09, -1.31] 1 Logs bounds checks dashboard

Bounds Checks: ✅ Passed

perf experiment bounds_check_name replicates_passed links
docker_containers_cpu simple_check_run 10/10
docker_containers_memory memory_usage 10/10
docker_containers_memory simple_check_run 10/10
file_to_blackhole_0ms_latency lost_bytes 10/10
file_to_blackhole_0ms_latency memory_usage 10/10
file_to_blackhole_1000ms_latency memory_usage 10/10
file_to_blackhole_100ms_latency lost_bytes 10/10
file_to_blackhole_100ms_latency memory_usage 10/10
file_to_blackhole_500ms_latency lost_bytes 10/10
file_to_blackhole_500ms_latency memory_usage 10/10
quality_gate_idle intake_connections 10/10 bounds checks dashboard
quality_gate_idle memory_usage 10/10 bounds checks dashboard
quality_gate_idle_all_features intake_connections 10/10 bounds checks dashboard
quality_gate_idle_all_features memory_usage 10/10 bounds checks dashboard
quality_gate_logs intake_connections 10/10 bounds checks dashboard
quality_gate_logs lost_bytes 10/10 bounds checks dashboard
quality_gate_logs memory_usage 10/10 bounds checks dashboard
quality_gate_metrics_logs cpu_usage 10/10 bounds checks dashboard
quality_gate_metrics_logs intake_connections 10/10 bounds checks dashboard
quality_gate_metrics_logs lost_bytes 10/10 bounds checks dashboard
quality_gate_metrics_logs memory_usage 10/10 bounds checks dashboard

Explanation

Confidence level: 90.00%
Effect size tolerance: |Δ mean %| ≥ 5.00%

Performance changes are noted in the perf column of each table:

  • ✅ = significantly better comparison variant performance
  • ❌ = significantly worse comparison variant performance
  • ➖ = no significant change in performance

A regression test is an A/B test of target performance in a repeatable rig, where "performance" is measured as "comparison variant minus baseline variant" for an optimization goal (e.g., ingress throughput). Due to intrinsic variability in measuring that goal, we can only estimate its mean value for each experiment; we report uncertainty in that value as a 90.00% confidence interval denoted "Δ mean % CI".

For each experiment, we decide whether a change in performance is a "regression" -- a change worth investigating further -- if all of the following criteria are true:

  1. Its estimated |Δ mean %| ≥ 5.00%, indicating the change is big enough to merit a closer look.

  2. Its 90.00% confidence interval "Δ mean % CI" does not contain zero, indicating that if our statistical model is accurate, there is at least a 90.00% chance there is a difference in performance between baseline and comparison variants.

  3. Its configuration does not mark it "erratic".

CI Pass/Fail Decision

Passed. All Quality Gates passed.

  • quality_gate_idle, bounds check intake_connections: 10/10 replicas passed. Gate passed.
  • quality_gate_idle, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_metrics_logs, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_metrics_logs, bounds check cpu_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_metrics_logs, bounds check intake_connections: 10/10 replicas passed. Gate passed.
  • quality_gate_metrics_logs, bounds check lost_bytes: 10/10 replicas passed. Gate passed.
  • quality_gate_logs, bounds check lost_bytes: 10/10 replicas passed. Gate passed.
  • quality_gate_logs, bounds check intake_connections: 10/10 replicas passed. Gate passed.
  • quality_gate_logs, bounds check memory_usage: 10/10 replicas passed. Gate passed.
  • quality_gate_idle_all_features, bounds check intake_connections: 10/10 replicas passed. Gate passed.
  • quality_gate_idle_all_features, bounds check memory_usage: 10/10 replicas passed. Gate passed.

@agent-platform-auto-pr

agent-platform-auto-pr Bot commented Jul 1, 2025

Copy link
Copy Markdown
Contributor

Static quality checks

✅ Please find below the results from static quality gates
Comparison made with ancestor 5813fd2

Successful checks

Info

Quality gate Delta On disk size (MiB) Delta On wire size (MiB)
agent_deb_amd64 $${+0}$$ $${704.72}$$ < $${704.84}$$ $${-0.03}$$ $${177.9}$$ < $${178.58}$$
agent_deb_amd64_fips $${+0}$$ $${702.98}$$ < $${703.09}$$ $${+0}$$ $${177.37}$$ < $${178.12}$$
agent_heroku_amd64 $${+0.01}$$ $${354.62}$$ < $${355.37}$$ $${+0}$$ $${94.86}$$ < $${95.72}$$
agent_msi $${-0.01}$$ $${979.32}$$ < $${979.61}$$ $${-0.01}$$ $${148.62}$$ < $${149.31}$$
agent_rpm_amd64 $${+0}$$ $${704.71}$$ < $${704.83}$$ $${-0}$$ $${179.6}$$ < $${180.22}$$
agent_rpm_amd64_fips $${+0}$$ $${702.97}$$ < $${703.08}$$ $${+0.01}$$ $${179.23}$$ < $${179.85}$$
agent_rpm_arm64 $${+0}$$ $${694.52}$$ < $${694.74}$$ $${-0.02}$$ $${163.29}$$ < $${163.96}$$
agent_rpm_arm64_fips $${+0}$$ $${692.83}$$ < $${693.05}$$ $${+0.01}$$ $${162.25}$$ < $${163.0}$$
agent_suse_amd64 $${+0}$$ $${704.71}$$ < $${704.83}$$ $${-0}$$ $${179.6}$$ < $${180.22}$$
agent_suse_amd64_fips $${+0}$$ $${702.97}$$ < $${703.08}$$ $${+0.01}$$ $${179.23}$$ < $${179.85}$$
agent_suse_arm64 $${+0}$$ $${694.52}$$ < $${694.74}$$ $${-0.02}$$ $${163.29}$$ < $${163.96}$$
agent_suse_arm64_fips $${+0}$$ $${692.83}$$ < $${693.05}$$ $${+0.01}$$ $${162.25}$$ < $${163.0}$$
docker_agent_amd64 $${+0}$$ $${788.47}$$ < $${788.65}$$ $${-0.01}$$ $${271.36}$$ < $${272.01}$$
docker_agent_arm64 $${+0}$$ $${801.79}$$ < $${802.0}$$ $${+0.03}$$ $${259.01}$$ < $${259.7}$$
docker_agent_jmx_amd64 $${+0}$$ $${979.71}$$ < $${979.84}$$ $${+0.01}$$ $${340.38}$$ < $${340.95}$$
docker_agent_jmx_arm64 $${+0}$$ $${981.63}$$ < $${981.8}$$ $${+0.02}$$ $${324.01}$$ < $${324.65}$$
docker_cluster_agent_amd64 $${+0}$$ $${213.9}$$ < $${214.5}$$ $${-0}$$ $${72.71}$$ < $${73.51}$$
docker_cluster_agent_arm64 $${+0}$$ $${229.75}$$ < $${230.33}$$ $${-0}$$ $${68.96}$$ < $${69.77}$$
docker_cws_instrumentation_amd64 $${0}$$ $${7.07}$$ < $${7.12}$$ $${+0}$$ $${2.95}$$ < $${3.29}$$
docker_cws_instrumentation_arm64 $${0}$$ $${6.69}$$ < $${6.92}$$ $${+0}$$ $${2.7}$$ < $${3.07}$$
docker_dogstatsd_amd64 $${+0}$$ $${38.55}$$ < $${39.57}$$ $${-0}$$ $${14.88}$$ < $${15.76}$$
docker_dogstatsd_arm64 $${+0}$$ $${37.23}$$ < $${38.2}$$ $${+0}$$ $${14.34}$$ < $${14.83}$$
dogstatsd_deb_amd64 $${+0}$$ $${29.79}$$ < $${31.4}$$ $${+0}$$ $${7.85}$$ < $${8.95}$$
dogstatsd_deb_arm64 $${+0}$$ $${28.39}$$ < $${29.97}$$ $${-0}$$ $${6.81}$$ < $${7.89}$$
dogstatsd_rpm_amd64 $${+0}$$ $${29.79}$$ < $${31.4}$$ $${+0}$$ $${7.86}$$ < $${8.96}$$
dogstatsd_suse_amd64 $${+0}$$ $${29.79}$$ < $${31.4}$$ $${+0}$$ $${7.86}$$ < $${8.96}$$
iot_agent_deb_amd64 $${+0.01}$$ $${54.06}$$ < $${54.55}$$ $${+0}$$ $${13.63}$$ < $${14.45}$$
iot_agent_deb_arm64 $${+0.01}$$ $${51.38}$$ < $${51.9}$$ $${-0}$$ $${11.79}$$ < $${12.63}$$
iot_agent_deb_armhf $${+0.01}$$ $${50.9}$$ < $${51.42}$$ $${+0.01}$$ $${11.87}$$ < $${12.74}$$
iot_agent_rpm_amd64 $${+0.01}$$ $${54.06}$$ < $${54.55}$$ $${-0}$$ $${13.65}$$ < $${14.47}$$
iot_agent_rpm_arm64 $${+0.01}$$ $${51.38}$$ < $${51.91}$$ $${-0}$$ $${11.81}$$ < $${12.65}$$
iot_agent_suse_amd64 $${+0.01}$$ $${54.06}$$ < $${54.55}$$ $${-0}$$ $${13.65}$$ < $${14.47}$$

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/pkg/security/secl/sigs.k8s.io/yaml-1.5.0 branch from 790099b to 843393f Compare July 10, 2025 17:45
@dependabot
dependabot Bot force-pushed the dependabot/go_modules/pkg/security/secl/sigs.k8s.io/yaml-1.5.0 branch from 5c073a1 to 297601e Compare July 23, 2025 08:28
@paulcacheux

Copy link
Copy Markdown
Contributor

@dependabot rebase

@agent-platform-auto-pr

Copy link
Copy Markdown
Contributor

/merge

@dd-devflow-routing-codex

dd-devflow-routing-codex Bot commented Jul 23, 2025

Copy link
Copy Markdown

View all feedbacks in Devflow UI.

2025-07-23 15:40:03 UTC ℹ️ Start processing command /merge


2025-07-23 15:40:22 UTC ℹ️ MergeQueue: waiting for PR to be ready

This merge request is not mergeable yet, because of pending checks/missing approvals. It will be added to the queue as soon as checks pass and/or get approvals.
Note: if you pushed new commits since the last approval, you may need additional approval.
You can remove it from the waiting list with /remove command.


2025-07-23 19:41:04 UTC ⚠️ MergeQueue: This merge request was unqueued

devflow unqueued this merge request: It did not become mergeable within the expected time

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/pkg/security/secl/sigs.k8s.io/yaml-1.5.0 branch from c22b132 to 8050ce6 Compare July 23, 2025 15:40
@paulcacheux paulcacheux added the qa/done QA done before merge and regressions are covered by tests label Jul 23, 2025
dependabot Bot and others added 2 commits July 23, 2025 22:04
Bumps [sigs.k8s.io/yaml](https://github.com/kubernetes-sigs/yaml) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/yaml@v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
This commit was created from the local commit with hash 1f1b112ff1cf92fe88e89b186a9e504dd14ac389.
@paulcacheux
paulcacheux force-pushed the dependabot/go_modules/pkg/security/secl/sigs.k8s.io/yaml-1.5.0 branch from 6f8e7a4 to 5925955 Compare July 23, 2025 20:11
@paulcacheux

Copy link
Copy Markdown
Contributor

/merge

@dd-devflow-routing-codex

dd-devflow-routing-codex Bot commented Jul 23, 2025

Copy link
Copy Markdown

View all feedbacks in Devflow UI.

2025-07-23 20:11:53 UTC ℹ️ Start processing command /merge


2025-07-23 20:12:03 UTC ℹ️ MergeQueue: waiting for PR to be ready

This merge request is not mergeable yet, because of pending checks/missing approvals. It will be added to the queue as soon as checks pass and/or get approvals.
Note: if you pushed new commits since the last approval, you may need additional approval.
You can remove it from the waiting list with /remove command.


2025-07-24 00:12:03 UTC ⚠️ MergeQueue: This merge request was unqueued

devflow unqueued this merge request: It did not become mergeable within the expected time

@github-actions github-actions Bot added long review PR is complex, plan time to review it and removed short review PR is simple enough to be reviewed quickly labels Jul 23, 2025
@agent-platform-auto-pr
agent-platform-auto-pr Bot requested a review from a team July 23, 2025 20:12
@paulcacheux

Copy link
Copy Markdown
Contributor

/merge

@dd-devflow-routing-codex

dd-devflow-routing-codex Bot commented Jul 24, 2025

Copy link
Copy Markdown

View all feedbacks in Devflow UI.

2025-07-24 06:46:23 UTC ℹ️ Start processing command /merge


2025-07-24 06:46:33 UTC ℹ️ MergeQueue: waiting for PR to be ready

This merge request is not mergeable yet, because of pending checks/missing approvals. It will be added to the queue as soon as checks pass and/or get approvals.
Note: if you pushed new commits since the last approval, you may need additional approval.
You can remove it from the waiting list with /remove command.


2025-07-24 08:00:05 UTC ℹ️ MergeQueue: merge request added to the queue

The expected merge time in main is approximately 2h (p90).


2025-07-24 08:42:27 UTC ℹ️ MergeQueue: This merge request was merged

@dd-mergequeue
dd-mergequeue Bot merged commit 5aa7e2c into main Jul 24, 2025
536 of 537 checks passed
@dd-mergequeue
dd-mergequeue Bot deleted the dependabot/go_modules/pkg/security/secl/sigs.k8s.io/yaml-1.5.0 branch July 24, 2025 08:42
@github-actions github-actions Bot added this to the 7.70.0 milestone Jul 24, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

changelog/no-changelog No changelog entry needed component/system-probe dependencies PRs that bump a dependency dependencies-go PRs that bump a go dependency long review PR is complex, plan time to review it qa/done QA done before merge and regressions are covered by tests team/agent-security

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant