Bump the gomodupdates group across 1 directory with 15 updates by dependabot[bot] · Pull Request #1240 · mondoohq/mondoo-operator

dependabot · 2025-05-15T08:39:05Z

Bumps the gomodupdates group with 8 updates in the / directory:

Package	From	To
github.com/cert-manager/cert-manager	`1.14.5`	`1.17.2`
github.com/golang-jwt/jwt/v4	`4.5.0`	`4.5.2`
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring	`0.74.0`	`0.82.2`
github.com/rs/zerolog	`1.33.0`	`1.34.0`
github.com/spf13/cobra	`1.8.1`	`1.9.1`
go.mondoo.com/cnquery/v11	`11.15.0`	`11.54.0`
go.mondoo.com/cnspec/v11	`11.15.0`	`11.54.0`
github.com/prometheus/client_model	`0.6.1`	`0.6.2`

Updates github.com/cert-manager/cert-manager from 1.14.5 to 1.17.2

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.17.2

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This patch release addresses several vulnerabilities reported by the Trivy security scanner. It is built with the latest version of Go 1.23 and includes various dependency updates.

📖 Read the full cert-manager 1.17 release notes, before installing or upgrading.

Changes since v1.17.1

Bug or Regression

Bump Go to v1.23.8 to fix CVE-2025-22871 (#7701, @wallrj)

Bump go-jose dependency to address CVE-2025-27144 (#7603, @SgtCoDFish)

Bump golang.org/x/net to address CVE-2025-22870 reported by Trivy (#7622, @SgtCoDFish)

Bump golang.org/x/net to fix CVE-2025-22872 (#7703, @wallrj)

Bump golang.org/x/oauth2 to patch CVE-2025-22868 (#7692, @lentzi90)

Bump golang.org/x/crypto to patch GHSA-hcg3-q754-cr77 (#7692, @lentzi90)

Bump github.com/golang-jwt/jwt to patch GHSA-mh63-6h87-95cp (#7692, @lentzi90)

v1.17.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This release is primarily intended to address a breaking change in Cloudflare's API which impacted ACME DNS-01 challenges using Cloudflare.

Many thanks to the community members who reported this issue!

Changes by Kind

Bug or Regression

❗ Fix issuing of certificates via DNS01 challenges on Cloudflare after a breaking change to the Cloudflare API (#7565, @LukeCarrier)

Bump go to 1.23.6 to address CVE-2025-22866 reported by Trivy (#7563, @SgtCoDFish

v1.17.0

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.17.0 is a feature release with several improvements, including:

A helpful compliance change to RSA signatures on certificates

An easier way to specify passwords for PKCS#12 and JKS keystores

A few feature flag promotions (and a deprecation)

Dependency bumps and other smaller improvements

Major Themes

RSA Certificate Compliance

The United States Department of Defense published a memo in 2022 which introduced some requirements on the kinds of cryptography they require to be supported in software they use.

In effect, the memo requires that software be able to support larger RSA keys (3072-bit and 4096-bit) and hashing algorithms (SHA-384 at a minimum).

... (truncated)

Commits

f3ffb86 Merge pull request #7703 from wallrj/release-1.17-trivy-2
75366d4 make generate-licenses
1792adb make go-tidy
788bfc8 go get golang.org/x/net@v0.38.0
c02bec7 Merge pull request #7701 from wallrj/release-1.17-trivy
d8bb946 Merge pull request #7704 from wallrj/release-1.17-bump-base-images
8e06936 make update-base-images
05fc833 make go-tidy
5d2b5bf _bin/tools/go get go@1.23.8
12a41ee Bump go to v1.23.8
Additional commits viewable in compare view

Updates github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.2

Release notes

Sourced from github.com/golang-jwt/jwt/v4's releases.

v4.5.2

See GHSA-mh63-6h87-95cp

Full Changelog: golang-jwt/jwt@v4.5.1...v4.5.2

v4.5.1

Security

Unclear documentation of the error behavior in ParseWithClaims in <= 4.5.0 could lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by ParseWithClaims return both error codes. If users only check for the jwt.ErrTokenExpired using error.Is, they will ignore the embedded jwt.ErrTokenSignatureInvalid and thus potentially accept invalid tokens.

This issue was documented in GHSA-29wx-vh33-7x7r and fixed in this release.

Note: v5 was not affected by this issue. So upgrading to this release version is also recommended.

What's Changed

Back-ported error-handling logic in ParseWithClaims from v5 branch. This fixes GHSA-29wx-vh33-7x7r.

Full Changelog: golang-jwt/jwt@v4.5.0...v4.5.1

Commits

2f0e9ad Backporting 0951d18 to v4
7b1c1c0 Merge commit from fork
See full diff in compare view

Updates github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.74.0 to 0.82.2

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.82.2 / 2025-05-12

[BUGFIX] Fix Alertmanager peer discovery for Alertmanager when using custom service name. #7512

[BUGFIX] Fix parsing role field in openstackSDConfigs in ScrapeConfig CRD. #7516

0.82.1 / 2025-05-06

[BUGFIX] Fix ThanosRuler when no remote-write configuration is defined. #7498

0.82.0 / 2025-04-17

[CHANGE] Add more API validations to the ScrapeConfig CRD. #7413

[CHANGE] Remove web console arguments if Prometheus version >= 3. #7457

[FEATURE] Add RemoteWrite support for ThanosRuler CRD. Note that when remote write is configured, Thanos Ruler runs in stateless mode. #7444

[FEATURE] Add msTeamsV2Configs receiver to AlertManagerConfig CRD. #7464

[FEATURE] Add content, username and avatarURL fields to discordConfigs receiver in AlertmanagerConfig CRD. #7307

[FEATURE] Add convertClassicHistogramsToNHCB field to ServiceMonitor, PodMonitor, Probe and ScrapeConfig CRDs. #7448

[FEATURE] Add timeout field to webhookConfigs receiver in AlertManagerConfig CRD. #7310

[FEATURE] Add additionalArgs field to AlertManager CRD. #7385

[ENHANCEMENT] Add maxSamplesPerSend field to RemoteWrite Metadata Config. #7443

[ENHANCEMENT] Add the terminationGracePeriodSeconds to the Alertmanager, Prometheus, PrometheusAgent and ThanosRuler CRDs. #7439

[ENHANCEMENT] Validate proxyURL field in AlertManagerConfig CRD. #6876

[BUGFIX] Fix nameValidationScheme support for Prometheus and PrometheusAgent CRDs. #7414

[BUGFIX] Support socks5 scheme in proxyUrl field for all CRDs. #7460 #7466

0.81.0 / 2025-03-11

[CHANGE] Remove the lower-case hypervisor and instance roles for the OpenStack Service Discovery from the ScrapeConfig CRD (users are required to use Hypervisor and Instance instead). #7370

[FEATURE] Add serviceName field to the ThanosRuler and Alertmanager CRDs. #7325

[FEATURE] Add shardRetentionPolicy field to the Prometheus CRD (it requires the PrometheusShardRetentionPolicy feature gate). #7274

[FEATURE] Add support for the cluster mTLS configuration to the Alertmanager CRD. #7149

[FEATURE] Add LoadBalancer role for the OpenStack Service Discovery to the ScrapeConfig CRD. #7356

[ENHANCEMENT] Add enableServiceLinks field to the Alertmanager, Prometheus, PrometheusAgent and ThanosRuler CRDs. #7384

[BUGFIX] Fix Alertmanager configuration with PushOver duration fields. #7249

0.80.1 / 2025-02-19

[BUGFIX] Fix msteamsv2_configs to work with either webhook_url or webhook_url_file. #7352

0.80.0 / 2025-02-04

[CHANGE] Add more API validations to the ScrapeConfig CRD. #7231 #7220 #7215 #7238 #7244 #7255

[FEATURE] Add serviceName field to the Prometheus and PrometheusAgent CRDs. #6687

[FEATURE] Add keepIdentifyingResourceAttributes field in OTLPConfig for Prometheus and PrometheusAgent CRDs. #7240

[FEATURE] Add fallbackScrapeProtocol field to ScrapeClass for Prometheus and PrometheusAgent CRDs. #7288

[FEATURE] Support MSTeamsV2Config receiver in Alertmanager configuration Secret. #7296

[FEATURE] Support JiraConfig and RocketChat receivers in Alertmanager configuration secret. #7315

[FEATURE] Support global smtp_tls_config field in Alertmanager configuration secret. #7316

[FEATURE] Add timeout field in Webhook receiver in Alertmanager configuration Secret. #7312

[FEATURE] Add content, username and avatarUrl fields in Discord receiver in Alertmanager configuration secret. #7313

[FEATURE] Add scrapeFailureLogFile field to the Prometheus and PrometheusAgent CRDs. #7038 #7311

[BUGFIX] Validate respective api URL field in PagerDutyConfigs, DiscordConfigs, SlackConfigs and WebhookConfigs in AlertManagerConfig CRD. #6585

0.79.2 / 2024-12-18

[BUGFIX] Fix pod and service monitor selector validation. #7214

... (truncated)

Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.82.2 / 2025-05-12

[BUGFIX] Fix Alertmanager peer discovery for Alertmanager when using custom service name. #7512

[BUGFIX] Fix parsing role field in openstackSDConfigs in ScrapeConfig CRD. #7516

0.82.1 / 2025-05-06

[BUGFIX] Fix ThanosRuler when no remote-write configuration is defined. #7498

0.82.0 / 2025-04-17

[CHANGE] Add more API validations to the ScrapeConfig CRD. #7413

[CHANGE] Remove web console arguments if Prometheus version >= 3. #7457

[FEATURE] Add RemoteWrite support for ThanosRuler CRD. Note that when remote write is configured, Thanos Ruler runs in stateless mode. #7444

[FEATURE] Add msTeamsV2Configs receiver to AlertManagerConfig CRD. #7464

[FEATURE] Add content, username and avatarURL fields to discordConfigs receiver in AlertmanagerConfig CRD. #7307

[FEATURE] Add convertClassicHistogramsToNHCB field to ServiceMonitor, PodMonitor, Probe and ScrapeConfig CRDs. #7448

[FEATURE] Add timeout field to webhookConfigs receiver in AlertManagerConfig CRD. #7310

[FEATURE] Add additionalArgs field to AlertManager CRD. #7385

[ENHANCEMENT] Add maxSamplesPerSend field to RemoteWrite Metadata Config. #7443

[ENHANCEMENT] Add the terminationGracePeriodSeconds to the Alertmanager, Prometheus, PrometheusAgent and ThanosRuler CRDs. #7439

[ENHANCEMENT] Validate proxyURL field in AlertManagerConfig CRD. #6876

[BUGFIX] Fix nameValidationScheme support for Prometheus and PrometheusAgent CRDs. #7414

[BUGFIX] Support socks5 scheme in proxyUrl field for all CRDs. #7460 #7466

0.81.0 / 2025-03-11

[CHANGE] Remove the lower-case hypervisor and instance roles for the OpenStack Service Discovery from the ScrapeConfig CRD (users are required to use Hypervisor and Instance instead). #7370

[FEATURE] Add serviceName field to the ThanosRuler and Alertmanager CRDs. #7325

[FEATURE] Add shardRetentionPolicy field to the Prometheus CRD (it requires the PrometheusShardRetentionPolicy feature gate). #7274

[FEATURE] Add support for the cluster mTLS configuration to the Alertmanager CRD. #7149

[FEATURE] Add LoadBalancer role for the OpenStack Service Discovery to the ScrapeConfig CRD. #7356

[ENHANCEMENT] Add enableServiceLinks field to the Alertmanager, Prometheus, PrometheusAgent and ThanosRuler CRDs. #7384

[BUGFIX] Fix Alertmanager configuration with PushOver duration fields. #7249

0.80.1 / 2025-02-19

[BUGFIX] Fix msteamsv2_configs to work with either webhook_url or webhook_url_file. #7352

0.80.0 / 2025-02-04

[CHANGE] Add more API validations to the ScrapeConfig CRD. #7231 #7220 #7215 #7238 #7244 #7255

[FEATURE] Add serviceName field to the Prometheus and PrometheusAgent CRDs. #6687

[FEATURE] Add keepIdentifyingResourceAttributes field in OTLPConfig for Prometheus and PrometheusAgent CRDs. #7240

[FEATURE] Add fallbackScrapeProtocol field to ScrapeClass for Prometheus and PrometheusAgent CRDs. #7288

[FEATURE] Support MSTeamsV2Config receiver in Alertmanager configuration Secret. #7296

[FEATURE] Support JiraConfig and RocketChat receivers in Alertmanager configuration secret. #7315

[FEATURE] Support global smtp_tls_config field in Alertmanager configuration secret. #7316

[FEATURE] Add timeout field in Webhook receiver in Alertmanager configuration Secret. #7312

[FEATURE] Add content, username and avatarUrl fields in Discord receiver in Alertmanager configuration secret. #7313

... (truncated)

Commits

4d008d5 Merge pull request #7518 from slashpai/update-change-log
641b224 chore: update changelog to correct date
a955c07 Merge pull request #7516 from slashpai/fix-openstack
c9ccb31 fix: Fix parsing role field in openstackSDConfigs in ScrapeConfig CRD
1991ba9 Merge pull request #7515 from simonpasquier/bump-go-mods
1c57527 *: update go.mod files
f2818c7 Merge pull request #7513 from simonpasquier/cut-0.82.2
8a34f94 *: cut v0.82.2
cb52276 fix(alertmanager): cluster.peer with custom service (#7512)
6cea98b Merge pull request #7504 from simonpasquier/cut-0.82.1
Additional commits viewable in compare view

Updates github.com/rs/zerolog from 1.33.0 to 1.34.0

Commits

db9d1be Update go versions covered by CI
5f4b880 Delete _config.yml
ffb2708 Remove CNAME file
cc4dde7 Create CONTRIBUTING.md
04ea0f4 Implement Close() for zerolog.FilteredLevelWriter (#715)
0398600 fix: reset condition in burst sampler (#711) (#712)
1869fa5 FormatPartValueByName for flexible custom formatting for ConsoleWriter (#541)
31e7995 remove unnecessary nil checks (#701)
582f820 Get BasicSampler(0), RandomSampler(0), and BurstSampler(0) to behave the same...
6abadab Bump github.com/rs/xid from 1.5.0 to 1.6.0 (#684)
See full diff in compare view

Updates github.com/spf13/cobra from 1.8.1 to 1.9.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.9.1

🐛 Fixes

Fix CompletionFunc implementation by @ccoVeille in spf13/cobra#2234

Revert "Make detection for test-binary more universal (#2173)" by @marckhouzam in spf13/cobra#2235

Full Changelog: spf13/cobra@v1.9.0...v1.9.1

v1.9.0

✨ Features

Allow linker to perform deadcode elimination for program using Cobra by @aarzilli in spf13/cobra#1956

Add default completion command even if there are no other sub-commands by @marckhouzam in spf13/cobra#1559

Add CompletionWithDesc helper by @ccoVeille in spf13/cobra#2231

🐛 Fixes

Fix deprecation comment for Command.SetOutput by @thaJeztah in spf13/cobra#2172

Replace deprecated ioutil usage by @nirs in spf13/cobra#2181

Fix --version help and output for plugins by @nirs in spf13/cobra#2180

Allow to reset the templates to the default by @marckhouzam in spf13/cobra#2229

🤖 Completions

Make Powershell completion work in constrained mode by @lstemplinger in spf13/cobra#2196

Improve detection for flags that accept multiple values by @thaJeztah in spf13/cobra#2210

add CompletionFunc type to help with completions by @ccoVeille in spf13/cobra#2220

Add similar whitespace escape logic to bash v2 completions than in other completions by @kangasta in spf13/cobra#1743

Print ActiveHelp for bash along other completions by @marckhouzam in spf13/cobra#2076

fix(completions): Complete map flags multiple times by @gabe565 in spf13/cobra#2174

fix(bash): nounset unbound file filter variable on empty extension by @scop in spf13/cobra#2228

🧪 Testing

Test also with go 1.23 by @nirs in spf13/cobra#2182

Make detection for test-binary more universal by @thaJeztah in spf13/cobra#2173

✍🏼 Documentation

docs: update README.md by @eltociear in spf13/cobra#2197

Improve site formatting by @nirs in spf13/cobra#2183

doc: add Conduit by @raulb in spf13/cobra#2230

doc: azion project added to the list of CLIs that use cobra by @maxwelbm in spf13/cobra#2198

Fix broken links in active_help.md by @vuil in spf13/cobra#2202

chore: fix function name in comment by @zhuhaicity in spf13/cobra#2216

🔧 Dependency upgrades

build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6 by @thaJeztah in spf13/cobra#2206

Update to latest go-md2man by @mikelolasagasti in spf13/cobra#2201

... (truncated)

Commits

40b5bc1 Revert "Make detection for test-binary more universal (#2173)" (#2235)
a97f9fd fix CompletionFunc implementation (#2234)
5f9c408 chore: Upgrade dependencies for v1.9.0 (#2233)
24ada7f Remove the default "completion" cmd if it is alone (#1559)
680936a New logo
8cb30f9 feat: add CompletionWithDesc helper (#2231)
17b6dca doc: add Conduit (#2230)
ab5cadc Allow to reset the templates to the default (#2229)
4ba5566 fix(bash): nounset unbound file filter variable on empty extension (#2228)
41b26ec Print ActiveHelp for bash along other completions (#2076)
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.9.0 to 1.10.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.10.0

What's Changed

Functional Changes

Add PanicAssertionFunc by @fahimbagar in stretchr/testify#1337

assert: deprecate CompareType by @dolmen in stretchr/testify#1566

assert: make YAML dependency pluggable via build tags by @dolmen in stretchr/testify#1579

assert: new assertion NotElementsMatch by @hendrywiranto in stretchr/testify#1600

mock: in order mock calls by @ReyOrtiz in stretchr/testify#1637

Add assertion for NotErrorAs by @palsivertsen in stretchr/testify#1129

Record Return Arguments of a Call by @jayd3e in stretchr/testify#1636

assert.EqualExportedValues: accepts everything by @redachl in stretchr/testify#1586

Fixes

assert: make tHelper a type alias by @dolmen in stretchr/testify#1562

Do not get argument again unnecessarily in Arguments.Error() by @TomWright in stretchr/testify#820

Fix time.Time compare by @myxo in stretchr/testify#1582

assert.Regexp: handle []byte array properly by @kevinburkesegment in stretchr/testify#1587

assert: collect.FailNow() should not panic by @marshall-lee in stretchr/testify#1481

mock: simplify implementation of FunctionalOptions by @dolmen in stretchr/testify#1571

mock: caller information for unexpected method call by @spirin in stretchr/testify#1644

suite: fix test failures by @stevenh in stretchr/testify#1421

Fix issue #1662 (comparing infs should fail) by @ybrustin in stretchr/testify#1663

NotSame should fail if args are not pointers #1661 by @sikehish in stretchr/testify#1664

Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI by @sikehish in stretchr/testify#1667

fix: compare functional option names for indirect calls by @arjun-1 in stretchr/testify#1626

Documentation, Build & CI

.gitignore: ignore "go test -c" binaries by @dolmen in stretchr/testify#1565

mock: improve doc by @dolmen in stretchr/testify#1570

mock: fix FunctionalOptions docs by @snirye in stretchr/testify#1433

README: link out to the excellent testifylint by @brackendawson in stretchr/testify#1568

assert: fix typo in comment by @JohnEndson in stretchr/testify#1580

Correct the EventuallyWithT and EventuallyWithTf example by @JonCrowther in stretchr/testify#1588

CI: bump softprops/action-gh-release from 1 to 2 by @dependabot in stretchr/testify#1575

mock: document more alternatives to deprecated AnythingOfTypeArgument by @dolmen in stretchr/testify#1569

assert: Correctly document EqualValues behavior by @brackendawson in stretchr/testify#1593

fix: grammar in godoc by @miparnisari in stretchr/testify#1607

.github/workflows: Run tests for Go 1.22 by @HaraldNordgren in stretchr/testify#1629

Document suite's lack of support for t.Parallel by @brackendawson in stretchr/testify#1645

assert: fix typos in comments by @alexandear in stretchr/testify#1650

mock: fix doc comment for NotBefore by @alexandear in stretchr/testify#1651

Generate better comments for require package by @Neokil in stretchr/testify#1610

README: replace Testify V2 notice with @dolmen's V2 manifesto by @hendrywiranto in stretchr/testify#1518

New Contributors

@fahimbagar made their first contribution in stretchr/testify#1337

@TomWright made their first contribution in stretchr/testify#820

@snirye made their first contribution in stretchr/testify#1433

@myxo made their first contribution in stretchr/testify#1582

@JohnEndson made their first contribution in stretchr/testify#1580

... (truncated)

Commits

89cbdd9 Merge pull request #1626 from arjun-1/fix-functional-options-diff-indirect-calls
07bac60 Merge pull request #1667 from sikehish/flaky
716de8d Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI
118fb83 NotSame should fail if args are not pointers #1661 (#1664)
7d99b2b attempt 2
05f87c0 more similar
ea7129e better fmt
a1b9c9e Merge pull request #1663 from ybrustin/master
8302de9 Merge branch 'master' into master
89352f7 Merge pull request #1518 from hendrywiranto/adjust-readme-remove-v2
Additional commits viewable in compare view

Updates go.mondoo.com/cnquery/v11 from 11.15.0 to 11.54.0

Release notes

Sourced from go.mondoo.com/cnquery/v11's releases.

v11.54.0

What's Changed

✨ Update providers 20250506 by @github-actions in mondoohq/cnquery#5512

Provide better Azure SQL Flexible server output by @tas50 in mondoohq/cnquery#5517

⭐️ add provider dependencies as builtin by @afiune in mondoohq/cnquery#5503

🐛 azure: fix web app runtime stacks by @afiune in mondoohq/cnquery#5501

🎉 azure-11.3.52 by @afiune in mondoohq/cnquery#5518

✨ Show running version of MS SQL based on KBs by @czunker in mondoohq/cnquery#5513

🧹 Bump goreleaser version to v2.9.0 by @czunker in mondoohq/cnquery#5514

✨ Collect snap packages by @czunker in mondoohq/cnquery#5519

🧹 Delete unused functions by @czunker in mondoohq/cnquery#5522

🐛 Do not stop package collection if snap dir is not present. by @preslavgerchev in mondoohq/cnquery#5526

🐛 Fix npm package ID to be uniq across directories by @czunker in mondoohq/cnquery#5523

🧹 Update deps for cnquery and providers 20250512 by @github-actions in mondoohq/cnquery#5527

✨ Update providers 20250513 by @github-actions in mondoohq/cnquery#5532

Revert "🧹 Bump goreleaser version to v2.9.0" by @czunker in mondoohq/cnquery#5533

Full Changelog: mondoohq/mql@v11.53.2...v11.54.0

v11.53.2

What's Changed

Bump actions/create-github-app-token from 1 to 2 by @dependabot in mondoohq/cnquery#5427

✨ Update providers 20250506 by @github-actions in mondoohq/cnquery#5509

🐛 Propagate AutoUpdate to all runtimes + avoid reinstalling deps by @afiune in mondoohq/cnquery#5510

Full Changelog: mondoohq/mql@v11.53.1...v11.53.2

v11.53.1

What's Changed

✨ Update providers 20250506 by @github-actions in mondoohq/cnquery#5506

🧹 Pin sqlite dep by @czunker in mondoohq/cnquery#5507

📝 disable 403 link check by @afiune in mondoohq/cnquery#5508

Full Changelog: mondoohq/mql@v11.53.0...v11.53.1

v11.53.0

What's Changed

✨ Update providers 20250429 by @github-actions in mondoohq/cnquery#5490

🐛 Fix GTE and LTE comparison labels by @jaym in mondoohq/cnquery#5487

🐛 OS Provider Segfault Fix by @claytoncasey01 in mondoohq/cnquery#5480

🧹 ran make cnquery/generate/core by @afiune in mondoohq/cnquery#5493

🐛 Fix terraform panic when using terraform.block by @claytoncasey01 in mondoohq/cnquery#5491

🎉 terraform-11.1.22 by @claytoncasey01 in mondoohq/cnquery#5494

✨ improve hostname detection via getent cmd by @afiune in mondoohq/cnquery#5492

🧹 Update deps for cnquery and providers 20250428 by @github-actions in mondoohq/cnquery#5486

🧹 Update deps for cnquery and providers 20250505 by @github-actions in mondoohq/cnquery#5497

🐛 Fix process handling for Linux kernel threads by @glower in mondoohq/cnquery#5489

... (truncated)

Commits

5781084 Revert "🧹 Bump goreleaser version to v2.9.0 (#5514)" (#5533)
6ffca8f ✨ Update providers 20250513 (#5532)
f025faa 🧹 Update deps for cnquery and providers 20250512 (#5527)
ee44658 🐛 Fix npm package ID to be uniq across directories (#5523)
661a17c 🐛 Do not stop package collection if snap dir is not present. (#5526)
aea0bde 🧹 Delete unused functions (#5522)
3753edc ✨ Collect snap packages (#5519)
b547dfe 🧹 Bump goreleaser version to v2.9.0 (#5514)
f818f99 ✨ Show running version of MS SQL based on KBs (#5513)
4b9b64e 🎉 azure-11.3.52 (#5518)
Additional commits viewable in compare view

Updates go.mondoo.com/cnspec/v11 from 11.15.0 to 11.54.0

Release notes

Sourced from go.mondoo.com/cnspec/v11's releases.

v11.54.0

What's Changed

Bump the gomodupdates group across 1 directory with 6 updates by @dependabot in mondoohq/cnspec#1649

Notify when a policy checksum must be recalculated by @jaym in mondoohq/cnspec#1652

Add back letter grade by @jaym in mondoohq/cnspec#1656

🧹 Bump cnquery to v11.54.0 by @github-actions in mondoohq/cnspec#1657

Full Changelog: mondoohq/cnspec@v11.53.2...v11.54.0

v11.53.2

What's Changed

🐛 NewLocalScanner should use the DefaultRuntime() by @github-actions in mondoohq/cnspec#1651

Full Changelog: mondoohq/cnspec@v11.53.1...v11.53.2

v11.53.1

What's Changed

🐛 onboarding: honor ...
Description has been truncated

Bumps the gomodupdates group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.14.5` | `1.17.2` | | [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.5.0` | `4.5.2` | | [github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring](https://github.com/prometheus-operator/prometheus-operator) | `0.74.0` | `0.82.2` | | [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.33.0` | `1.34.0` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.1` | `1.9.1` | | [go.mondoo.com/cnquery/v11](https://github.com/mondoohq/cnquery) | `11.15.0` | `11.54.0` | | [go.mondoo.com/cnspec/v11](https://github.com/mondoohq/cnspec) | `11.15.0` | `11.54.0` | | [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.1` | `0.6.2` | Updates `github.com/cert-manager/cert-manager` from 1.14.5 to 1.17.2 - [Release notes](https://github.com/cert-manager/cert-manager/releases) - [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md) - [Commits](cert-manager/cert-manager@v1.14.5...v1.17.2) Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](golang-jwt/jwt@v4.5.0...v4.5.2) Updates `github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring` from 0.74.0 to 0.82.2 - [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases) - [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md) - [Commits](prometheus-operator/prometheus-operator@v0.74.0...v0.82.2) Updates `github.com/rs/zerolog` from 1.33.0 to 1.34.0 - [Commits](rs/zerolog@v1.33.0...v1.34.0) Updates `github.com/spf13/cobra` from 1.8.1 to 1.9.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.8.1...v1.9.1) Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.9.0...v1.10.0) Updates `go.mondoo.com/cnquery/v11` from 11.15.0 to 11.54.0 - [Release notes](https://github.com/mondoohq/cnquery/releases) - [Changelog](https://github.com/mondoohq/cnquery/blob/main/.goreleaser.yml) - [Commits](mondoohq/mql@v11.15.0...v11.54.0) Updates `go.mondoo.com/cnspec/v11` from 11.15.0 to 11.54.0 - [Release notes](https://github.com/mondoohq/cnspec/releases) - [Changelog](https://github.com/mondoohq/cnspec/blob/main/.goreleaser.yml) - [Commits](mondoohq/cnspec@v11.15.0...v11.54.0) Updates `go.mondoo.com/mondoo-go` from 0.0.0-20240716062427-ec95d879cbe7 to 0.0.0-20250430000358-71abb93a3c47 - [Commits](https://github.com/mondoohq/mondoo-go/commits) Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](google/go-cmp@v0.6.0...v0.7.0) Updates `github.com/google/go-containerregistry` from 0.20.1 to 0.20.3 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml) - [Commits](google/go-containerregistry@v0.20.1...v0.20.3) Updates `github.com/prometheus/client_golang` from 1.19.1 to 1.22.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.19.1...v1.22.0) Updates `github.com/prometheus/client_model` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/prometheus/client_model/releases) - [Commits](prometheus/client_model@v0.6.1...v0.6.2) Updates `google.golang.org/protobuf` from 1.34.2 to 1.36.6 Updates `k8s.io/utils` from 0.0.0-20240711033017-18e509b52bc8 to 0.0.0-20250502105355-0f33e8f1c979 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: github.com/cert-manager/cert-manager dependency-version: 1.17.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/golang-jwt/jwt/v4 dependency-version: 4.5.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates - dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring dependency-version: 0.82.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/rs/zerolog dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/spf13/cobra dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/stretchr/testify dependency-version: 1.10.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: go.mondoo.com/cnquery/v11 dependency-version: 11.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: go.mondoo.com/cnspec/v11 dependency-version: 11.54.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: go.mondoo.com/mondoo-go dependency-version: 0.0.0-20250430000358-71abb93a3c47 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates - dependency-name: github.com/google/go-cmp dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/google/go-containerregistry dependency-version: 0.20.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates - dependency-name: github.com/prometheus/client_golang dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/prometheus/client_model dependency-version: 0.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates - dependency-name: google.golang.org/protobuf dependency-version: 1.36.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: k8s.io/utils dependency-version: 0.0.0-20250502105355-0f33e8f1c979 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates ... Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2025-05-15T08:39:43Z

Test Results

0 files - 5 0 suites - 51 0s ⏱️ -15s
0 tests - 300 0 ✅ - 296 0 💤 ±0 0 ❌ - 4
0 runs - 312 0 ✅ - 296 0 💤 ±0 0 ❌ - 16

Results for commit 450acac. ± Comparison against base commit d77a0cf.

dependabot · 2025-05-29T08:29:28Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 15, 2025

dependabot bot closed this May 29, 2025

dependabot bot deleted the dependabot/go_modules/gomodupdates-c7715c05ca branch May 29, 2025 08:29

github-actions bot locked and limited conversation to collaborators May 29, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the gomodupdates group across 1 directory with 15 updates#1240

Bump the gomodupdates group across 1 directory with 15 updates#1240
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomodupdates-c7715c05ca

dependabot bot commented on behalf of github May 15, 2025 •

edited

Loading

Uh oh!

github-actions bot commented May 15, 2025

Uh oh!

dependabot bot commented on behalf of github May 29, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot bot commented on behalf of github May 15, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.17.2

Changes since v1.17.1

Bug or Regression

v1.17.1

Changes by Kind

Bug or Regression

v1.17.0

Major Themes

RSA Certificate Compliance

v4.5.2

v4.5.1

Security

What's Changed

0.82.2 / 2025-05-12

0.82.1 / 2025-05-06

0.82.0 / 2025-04-17

0.81.0 / 2025-03-11

0.80.1 / 2025-02-19

0.80.0 / 2025-02-04

0.79.2 / 2024-12-18

0.82.2 / 2025-05-12

0.82.1 / 2025-05-06

0.82.0 / 2025-04-17

0.81.0 / 2025-03-11

0.80.1 / 2025-02-19

0.80.0 / 2025-02-04

v1.9.1

🐛 Fixes

v1.9.0

✨ Features

🐛 Fixes

🤖 Completions

🧪 Testing

✍🏼 Documentation

🔧 Dependency upgrades

v1.10.0

What's Changed

Functional Changes

Fixes

Documentation, Build & CI

New Contributors

v11.54.0

What's Changed

v11.53.2

What's Changed

v11.53.1

What's Changed

v11.53.0

What's Changed

v11.54.0

What's Changed

v11.53.2

What's Changed

v11.53.1

What's Changed

Uh oh!

github-actions bot commented May 15, 2025

Test Results

Uh oh!

dependabot bot commented on behalf of github May 29, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot bot commented on behalf of github May 15, 2025 •

edited

Loading

Changes since `v1.17.1`