Skip to content

Bump the dependencies group across 1 directory with 6 updates #455

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 28, 2025

Bumps the dependencies group with 5 updates in the / directory:

Package From To
github.com/aws/aws-sdk-go 1.55.6 1.55.7
google.golang.org/grpc 1.71.1 1.72.0
k8s.io/api 0.32.3 0.33.0
k8s.io/client-go 0.32.3 0.33.0
sigs.k8s.io/secrets-store-csi-driver 1.4.8 1.5.0

Updates github.com/aws/aws-sdk-go from 1.55.6 to 1.55.7

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.7 (2025-04-22)

SDK Bugs

  • service/s3/s3manager: Abort multipart download if object is modified during download
Commits

Updates google.golang.org/grpc from 1.71.1 to 1.72.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.72.0

Dependencies

  • Minimum supported Go version is now 1.23 (#8108)

API Changes

  • resolver: add experimental AddressMapV2 with generics to ultimately replace AddressMap. Deprecate AddressMap for deletion (#8187)
  • resolver: convert EndpointMap in place to use generics (#8189)

New Features

  • xds: add grpc.xds_client.server_failure counter metric on xDS client to record connectivity errors (#8203)
  • balancer/rls: allow maxAge to exceed 5 minutes if staleAge is set in the LB policy configuration (#8137)
  • ringhash: implement gRFC A76 improvements. (#8159)
  • pickfirst: The new pick first LB policy is made the default. The new LB policy implements the Happy Eyeballs algorithm. To disable the new policy set the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST to false (case insensitive).

Bug Fixes

  • xds: fix support for circuit breakers and load reporting in LOGICAL_DNS clusters (#8169, #8170)
  • xds/cds: improve RPC error messages when resources are not found (#8122)
  • balancer/priority: fix race that could leak balancers and goroutines during shutdown (#8095)
  • stats/opentelemetry: fix trace attributes message sequence numbers to start from 0 (#8237)
  • balancer/pickfirstleaf: fix panic if deprecated Address.Metadata field is set to a non-comparable value by ignoring the field (#8227)

Behavior Changes

  • transport: make servers send an HTTP/2 RST_STREAM frame to cancel a stream when the deadline expires (#8071)

Documentation

  • stats: clarify the expected sequence of events on a stats handler (#7885)
Commits
  • a43eba6 Change version to 1.72.0 (#8218)
  • 48f48c1 balancer/pickfirstleaf: Avoid reading Address.Metadata (#8227) (#8259)
  • fd6f585 Cherry-pick #8159 and #8243 to v1.72.x (#8255)
  • 79ca174 stats/opentelemetry: fix trace attributes message sequence numbers to start f...
  • 57a2605 xdsclient: fix TestServerFailureMetrics_BeforeResponseRecv test to wait for w...
  • 5edab9e xdsclient: add grpc.xds_client.server_failure counter mertric (#8203)
  • 78ba661 regenerate protos (#8208)
  • 6819ed7 delegatingresolver: Stop calls into delegates once the parent resolver is clo...
  • a51009d resolver: convert EndpointMap to use generics (#8189)
  • b0d1203 resolver: create AddressMapV2 with generics to replace AddressMap (#8187)
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.32.3 to 0.33.0

Commits
  • 82c0029 Update dependencies to v0.33.0 tag
  • 16cedc7 Merge pull request #131088 from atiratree/rename-terminating-replicas-fg
  • dc88679 Merge pull request #131103 from ahrtr/etcd_sdk_20250328
  • 4a456a2 bump etcd 3.5.21 sdk
  • 96e38c9 rename DeploymentPodReplacementPolicy FG to DeploymentReplicaSetTerminatingRe...
  • c21a017 Merge pull request #129970 from mortent/AddResourceV1beta2API
  • d0673db Run make update
  • 118546d Merge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...
  • f9401a3 Merge pull request #130797 from jm-franc/configurable-tolerance
  • 9b3e544 Generated UPDATE_COMPATIBILITY_FIXTURE_DATA
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.32.3 to 0.33.0

Commits
  • 955939f bump etcd 3.5.21 sdk
  • e8a77bd Merge pull request #130910 from googs1025/fix/datarace
  • 7e8c77e Merge pull request #130906 from serathius/streaming-validation
  • 27fd396 flake: fix data race for func TestBackoff_Step
  • 8bcc6f1 Update kube-openapi and integrate streaming tags validation
  • 6ce776c Merge pull request #130857 from thockin/kk_small_vg_diffs
  • f2c94d6 Comment on origin and JSON schema
  • b63ba07 Use origin in validateFalse's own test
  • beddba4 Use test.Helper in helper funcs
  • eaf4038 Merge pull request #130354 from siyuanfoundation/forward-api
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.32.3 to 0.33.0

Commits
  • 3aa3c77 Update dependencies to v0.33.0 tag
  • ecbbb06 bump etcd 3.5.21 sdk
  • 2086688 Merge pull request #129970 from mortent/AddResourceV1beta2API
  • dba34c7 Run make update
  • e359642 Merge pull request #130556 from sreeram-venkitesh/kep-4960-container-stop-sig...
  • 3bf0a05 Merge pull request #130797 from jm-franc/configurable-tolerance
  • 7a03a3b Generated files
  • 1676beb Refresh autogenerated files following the configurable tolerance updates.
  • 387edb8 Merge pull request #130967 from aojea/listers
  • 21dc3b4 benchmark to show inefficient linear search lookup
  • Additional commits viewable in compare view

Updates sigs.k8s.io/secrets-store-csi-driver from 1.4.8 to 1.5.0

Release notes

Sourced from sigs.k8s.io/secrets-store-csi-driver's releases.

v1.5.0 - 2025-04-09

Changelog

Bug Fixes 🐞

  • b0fdeb52d108375887241e8ddd07c8a97296d061 fix: update sha generation logic
  • f0e9dccf836986666aaa7f22dbd1ad6e5210c02f fix: add unit test to show failures in current sha logic

Code Refactoring 💎

  • 9548c23ad3e8d430cb01b163a6f431240504771a refactor: cleanup unused err check

Features 🌈

  • bf7e77ef35795a6b405511938f6cb976463cb8f9 feat: add build for windows ltsc2025

Maintenance 🔧

  • a488327b740472d9b5e4d2af228b91f79b3f9657 chore: bump kind to v0.27.0
  • 515358e1f4f65c12cff0d081687fd9de23ecede5 chore: disable trivy package testing for driver-crds
  • 924b3b8302bf5a3c172c663ff85c14dcd195addf chore: bump docker golang base images to 1.23
  • 572e439668e9689e3c33071c8cb6525ae262a0ce chore: move tam7t to emeritus_approvers
  • 0b00da8f222c0e76e6cce09136f839e8cb8a7934 chore: bump github/codeql-action from 3.28.0 to 3.28.8
  • b8a1e5bea00875a7f437902b7f419cf6118f3017 chore: bump actions/setup-go from 5.2.0 to 5.3.0
  • 4aad87b2c506c3c4f670da9b59d530b46f518e13 chore: bump golang.org/x/net from 0.28.0 to 0.33.0 in /hack/tools
  • 25d77569bac10e152ac953a831e436b034625083 chore: bump gaurav-nelson/github-action-markdown-link-check
  • c3cb4ffc0b68bd2016311a3f74ea876cf26733ea chore: bump step-security/harden-runner from 2.10.2 to 2.10.3
  • 911b494b4f2c366ca98a27ec3a21f8da5e691db2 chore: bump codecov/codecov-action from 5.1.1 to 5.1.2
  • aaa4a3c875f4cbdfd846813ce2f431b70340f943 chore: bump github/codeql-action from 3.26.13 to 3.28.0
  • 5a8d6b55097564533003a6d2f7b8622a51184b51 chore: bump actions/upload-artifact from 4.4.1 to 4.5.0
  • 7c04af1d155af55ef88b090d092c26fa7b8048c0 chore: bump actions/setup-go from 5.0.2 to 5.2.0
  • a24d2fdd75c68c6febbbaeb85cfb003cb9e7b7de chore: bump golang.org/x/crypto from 0.22.0 to 0.31.0
  • 5fe63f79191efaaf40f6584b32de872d5c643d8a chore: bump codecov/codecov-action from 4.5.0 to 5.1.1
  • 658a778626e0fb91a72e1dc3c2bd8264ca6c62e3 chore: bump golang/govulncheck-action from 1.0.3 to 1.0.4
  • 041d14233cbc642caee545b148f68683cc0a9b57 chore: bump to golang 1.22 builder image in dockerfile
  • c5d2bd300190d1e790b165ae683fe73f632cacb1 chore: bump trivy to v0.57.1 to mitigate rate limit issues
  • f6bd4d8b091289af9f064e60ac11d1c78fd1e604 chore: bump step-security/harden-runner from 2.9.1 to 2.10.2
  • 88d1253a7c01e26fd6d97339e7077f9c3527f0b8 chore: bump actions/checkout from 4.1.7 to 4.2.1
  • 44e76537659cffffeabdd9838b1283f0461f43af chore: bump github/codeql-action from 3.26.6 to 3.26.13
  • cb6fd1e86f84a27442f85d1d03a625ac793089f8 chore: bumps base images
  • ef8f5eb3bf682774ea4e8df84ca9a0e9bb54c359 chore: bump actions/upload-artifact from 4.4.0 to 4.4.1
  • 2f6e7d0324bc624ac33217b82da0e22e0198423f chore: bump actions/upload-artifact from 4.3.6 to 4.4.0
  • 92c73a029323480d0f9d4940d7488f0bed552b46 chore: bump github/codeql-action from 3.26.5 to 3.26.6
  • 77109220c4c75a827c77ea78c6305c86425d9c7a chore: bump actions/dependency-review-action from 4.3.2 to 4.3.4
  • 5e1d34fba8b53b038dfbca42052dd64418a4d905 chore: bump golang/govulncheck-action from 1.0.2 to 1.0.3
  • 6fe8bd569a1fcb618e053ec6a990bd1b0281f1c1 chore: bump actions/checkout from 4.1.5 to 4.1.7
  • f09e97c906581fbe7d6f3be1c3a01208a4340282 chore: bump github/codeql-action from 3.25.8 to 3.26.5
  • dae09613725666657430641a75e5e62b6554c825 chore: bump actions/upload-artifact from 4.3.1 to 4.3.6
  • 5e3935b2f9907f0ccfcc3068e2c76c057e4b850d chore: bump step-security/harden-runner from 2.6.1 to 2.9.1
  • 0a0ed48b131766b07bd40c56b5d1876411554ff5 chore: bump kind version and k8s version in test matrix
  • 36c6a8db9939e4a730c48e97b7d032f9768d3b3e chore: bump livenessprobe to v2.13.1
  • c807dca3c4760a8b72a5591b4fd1a72557fbc27d chore: bump node-driver-registrar to v2.11.1
  • 0c90683e90a0ac55e975886037e6cfee26039aa2 chore: bump ossf/scorecard-action from 2.3.1 to 2.4.0
  • 09e9b3b15b6d9e6feed7297d8e22b386642bf5e5 chore: bump actions/setup-go from 4.0.1 to 5.0.2
  • 0363ede509e18b1b45f7caa107ffc2edb0d9ba4b chore: bump codecov/codecov-action from 4.2.0 to 4.5.0
  • 549a1dec47f62ad349a6ca86c5fed38f8d6d23b7 chore: bump github/codeql-action from 3.25.0 to 3.25.8
  • 5672b8d58221e49dc16b754479492f9eedfac11c chore: update debian-base to bookworm-v1.0.3

... (truncated)

Commits
  • b5cd347 Merge pull request #1787aramase/automated-cherry-pick-of-#1786
  • 4fddb09 release: update manifest and helm charts for v1.5.0
  • a23250a Merge pull request #1785 from aramase/aramase/c/bump_release_1.5_v1.5.0
  • 6b41ff9 chore: bump version to v1.5.0 in release-1.5
  • be10948 Merge pull request #1676 from aramase/aramase/b/sha_logic
  • b0fdeb5 fix: update sha generation logic
  • f0e9dcc fix: add unit test to show failures in current sha logic
  • 6c0fbc3 Merge pull request #1783 from aramase/aramase/c/kind_v0.27.0
  • a488327 chore: bump kind to v0.27.0
  • 1080aee Merge pull request #1777 from aramase/aramase/s/fix_cves
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Apr 28, 2025
@dependabot dependabot bot requested a review from a team as a code owner April 28, 2025 10:43
@dependabot dependabot bot added the go Pull requests that update Go code label Apr 28, 2025
Bumps the dependencies group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) | `1.55.6` | `1.55.7` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.71.1` | `1.72.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.32.3` | `0.33.0` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.32.3` | `0.33.0` |
| [sigs.k8s.io/secrets-store-csi-driver](https://github.com/kubernetes-sigs/secrets-store-csi-driver) | `1.4.8` | `1.5.0` |



Updates `github.com/aws/aws-sdk-go` from 1.55.6 to 1.55.7
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG_PENDING.md)
- [Commits](aws/aws-sdk-go@v1.55.6...v1.55.7)

Updates `google.golang.org/grpc` from 1.71.1 to 1.72.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.71.1...v1.72.0)

Updates `k8s.io/api` from 0.32.3 to 0.33.0
- [Commits](kubernetes/api@v0.32.3...v0.33.0)

Updates `k8s.io/apimachinery` from 0.32.3 to 0.33.0
- [Commits](kubernetes/apimachinery@v0.32.3...v0.33.0)

Updates `k8s.io/client-go` from 0.32.3 to 0.33.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.32.3...v0.33.0)

Updates `sigs.k8s.io/secrets-store-csi-driver` from 1.4.8 to 1.5.0
- [Release notes](https://github.com/kubernetes-sigs/secrets-store-csi-driver/releases)
- [Changelog](https://github.com/kubernetes-sigs/secrets-store-csi-driver/blob/main/docs/RELEASE.md)
- [Commits](kubernetes-sigs/secrets-store-csi-driver@v1.4.8...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-version: 1.55.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: google.golang.org/grpc
  dependency-version: 1.72.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sigs.k8s.io/secrets-store-csi-driver
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/dependencies-bd55db7a93 branch from 959bb70 to 189572d Compare May 5, 2025 08:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants