Bump the gomodupdates group across 1 directory with 13 updates by dependabot[bot] · Pull Request #1248 · mondoohq/mondoo-operator

dependabot · 2025-06-05T10:26:21Z

Bumps the gomodupdates group with 8 updates in the / directory:

Package	From	To
github.com/cert-manager/cert-manager	`1.14.5`	`1.17.2`
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring	`0.74.0`	`0.83.0`
github.com/rs/zerolog	`1.33.0`	`1.34.0`
github.com/spf13/cobra	`1.8.1`	`1.9.1`
go.mondoo.com/cnquery/v11	`11.15.0`	`11.57.2`
go.mondoo.com/cnspec/v11	`11.15.0`	`11.57.2`
github.com/go-logr/logr	`1.4.2`	`1.4.3`
github.com/prometheus/client_model	`0.6.1`	`0.6.2`

Updates github.com/cert-manager/cert-manager from 1.14.5 to 1.17.2

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.17.2

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This patch release addresses several vulnerabilities reported by the Trivy security scanner. It is built with the latest version of Go 1.23 and includes various dependency updates.

📖 Read the full cert-manager 1.17 release notes, before installing or upgrading.

Changes since v1.17.1

Bug or Regression

Bump Go to v1.23.8 to fix CVE-2025-22871 (#7701, @wallrj)

Bump go-jose dependency to address CVE-2025-27144 (#7603, @SgtCoDFish)

Bump golang.org/x/net to address CVE-2025-22870 reported by Trivy (#7622, @SgtCoDFish)

Bump golang.org/x/net to fix CVE-2025-22872 (#7703, @wallrj)

Bump golang.org/x/oauth2 to patch CVE-2025-22868 (#7692, @lentzi90)

Bump golang.org/x/crypto to patch GHSA-hcg3-q754-cr77 (#7692, @lentzi90)

Bump github.com/golang-jwt/jwt to patch GHSA-mh63-6h87-95cp (#7692, @lentzi90)

v1.17.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This release is primarily intended to address a breaking change in Cloudflare's API which impacted ACME DNS-01 challenges using Cloudflare.

Many thanks to the community members who reported this issue!

Changes by Kind

Bug or Regression

❗ Fix issuing of certificates via DNS01 challenges on Cloudflare after a breaking change to the Cloudflare API (#7565, @LukeCarrier)

Bump go to 1.23.6 to address CVE-2025-22866 reported by Trivy (#7563, @SgtCoDFish

v1.17.0

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

v1.17.0 is a feature release with several improvements, including:

A helpful compliance change to RSA signatures on certificates

An easier way to specify passwords for PKCS#12 and JKS keystores

A few feature flag promotions (and a deprecation)

Dependency bumps and other smaller improvements

Major Themes

RSA Certificate Compliance

The United States Department of Defense published a memo in 2022 which introduced some requirements on the kinds of cryptography they require to be supported in software they use.

In effect, the memo requires that software be able to support larger RSA keys (3072-bit and 4096-bit) and hashing algorithms (SHA-384 at a minimum).

... (truncated)

Commits

f3ffb86 Merge pull request #7703 from wallrj/release-1.17-trivy-2
75366d4 make generate-licenses
1792adb make go-tidy
788bfc8 go get golang.org/x/net@v0.38.0
c02bec7 Merge pull request #7701 from wallrj/release-1.17-trivy
d8bb946 Merge pull request #7704 from wallrj/release-1.17-bump-base-images
8e06936 make update-base-images
05fc833 make go-tidy
5d2b5bf _bin/tools/go get go@1.23.8
12a41ee Bump go to v1.23.8
Additional commits viewable in compare view

Updates github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.74.0 to 0.83.0

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.83.0 / 2025-05-30

[FEATURE] Add limits option for Alertmanager silences. #7478

[FEATURE] Add NoTranslation as a translationStrategy option to OTLP config. #7539

[FEATURE] Add nameEscapingScheme field to Prometheus CRDs. #7538

[FEATURE] Add convertHistogramsToNHCB field to OTLPConfig. #7533

[FEATURE] Add convert_classic_histograms_to_nhcb option to Prometheus global config. #7543

[FEATURE] Add new MetricNameEscapingScheme and MetricNameValidationScheme parameters to ScrapeConfig. #7555

[ENHANCEMENT] Do not insert sharding relabeling in scrapeConfigs if already present. #7421

0.82.2 / 2025-05-12

[BUGFIX] Fix Alertmanager peer discovery for Alertmanager when using custom service name. #7512

[BUGFIX] Fix parsing role field in openstackSDConfigs in ScrapeConfig CRD. #7516

0.82.1 / 2025-05-06

[BUGFIX] Fix ThanosRuler when no remote-write configuration is defined. #7498

0.82.0 / 2025-04-17

[CHANGE] Add more API validations to the ScrapeConfig CRD. #7413

[CHANGE] Remove web console arguments if Prometheus version >= 3. #7457

[FEATURE] Add RemoteWrite support for ThanosRuler CRD. Note that when remote write is configured, Thanos Ruler runs in stateless mode. #7444

[FEATURE] Add msTeamsV2Configs receiver to AlertManagerConfig CRD. #7464

[FEATURE] Add content, username and avatarURL fields to discordConfigs receiver in AlertmanagerConfig CRD. #7307

[FEATURE] Add convertClassicHistogramsToNHCB field to ServiceMonitor, PodMonitor, Probe and ScrapeConfig CRDs. #7448

[FEATURE] Add timeout field to webhookConfigs receiver in AlertManagerConfig CRD. #7310

[FEATURE] Add additionalArgs field to AlertManager CRD. #7385

[ENHANCEMENT] Add maxSamplesPerSend field to RemoteWrite Metadata Config. #7443

[ENHANCEMENT] Add the terminationGracePeriodSeconds to the Alertmanager, Prometheus, PrometheusAgent and ThanosRuler CRDs. #7439

[ENHANCEMENT] Validate proxyURL field in AlertManagerConfig CRD. #6876

[BUGFIX] Fix nameValidationScheme support for Prometheus and PrometheusAgent CRDs. #7414

[BUGFIX] Support socks5 scheme in proxyUrl field for all CRDs. #7460 #7466

0.81.0 / 2025-03-11

[CHANGE] Remove the lower-case hypervisor and instance roles for the OpenStack Service Discovery from the ScrapeConfig CRD (users are required to use Hypervisor and Instance instead). #7370

[FEATURE] Add serviceName field to the ThanosRuler and Alertmanager CRDs. #7325

[FEATURE] Add shardRetentionPolicy field to the Prometheus CRD (it requires the PrometheusShardRetentionPolicy feature gate). #7274

[FEATURE] Add support for the cluster mTLS configuration to the Alertmanager CRD. #7149

[FEATURE] Add LoadBalancer role for the OpenStack Service Discovery to the ScrapeConfig CRD. #7356

[ENHANCEMENT] Add enableServiceLinks field to the Alertmanager, Prometheus, PrometheusAgent and ThanosRuler CRDs. #7384

[BUGFIX] Fix Alertmanager configuration with PushOver duration fields. #7249

0.80.1 / 2025-02-19

[BUGFIX] Fix msteamsv2_configs to work with either webhook_url or webhook_url_file. #7352

0.80.0 / 2025-02-04

[CHANGE] Add more API validations to the ScrapeConfig CRD. #7231 #7220 #7215 #7238 #7244 #7255

[FEATURE] Add serviceName field to the Prometheus and PrometheusAgent CRDs. #6687

[FEATURE] Add keepIdentifyingResourceAttributes field in OTLPConfig for Prometheus and PrometheusAgent CRDs. #7240

[FEATURE] Add fallbackScrapeProtocol field to ScrapeClass for Prometheus and PrometheusAgent CRDs. #7288

[FEATURE] Support MSTeamsV2Config receiver in Alertmanager configuration Secret. #7296

[FEATURE] Support JiraConfig and RocketChat receivers in Alertmanager configuration secret. #7315

... (truncated)

Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.83.0 / 2025-05-30

[FEATURE] Add limits option for Alertmanager silences. #7478

[FEATURE] Add NoTranslation as a translationStrategy option to OTLP config. #7539

[FEATURE] Add nameEscapingScheme field to Prometheus CRDs. #7538

[FEATURE] Add convertHistogramsToNHCB field to OTLPConfig. #7533

[FEATURE] Add convert_classic_histograms_to_nhcb option to Prometheus global config. #7543

[FEATURE] Add new MetricNameEscapingScheme and MetricNameValidationScheme parameters to ScrapeConfig. #7555

[ENHANCEMENT] Do not insert sharding relabeling in scrapeConfigs if already present. #7421

0.82.2 / 2025-05-12

[BUGFIX] Fix Alertmanager peer discovery for Alertmanager when using custom service name. #7512

[BUGFIX] Fix parsing role field in openstackSDConfigs in ScrapeConfig CRD. #7516

0.82.1 / 2025-05-06

[BUGFIX] Fix ThanosRuler when no remote-write configuration is defined. #7498

0.82.0 / 2025-04-17

[CHANGE] Add more API validations to the ScrapeConfig CRD. #7413

[CHANGE] Remove web console arguments if Prometheus version >= 3. #7457

[FEATURE] Add RemoteWrite support for ThanosRuler CRD. Note that when remote write is configured, Thanos Ruler runs in stateless mode. #7444

[FEATURE] Add msTeamsV2Configs receiver to AlertManagerConfig CRD. #7464

[FEATURE] Add content, username and avatarURL fields to discordConfigs receiver in AlertmanagerConfig CRD. #7307

[FEATURE] Add convertClassicHistogramsToNHCB field to ServiceMonitor, PodMonitor, Probe and ScrapeConfig CRDs. #7448

[FEATURE] Add timeout field to webhookConfigs receiver in AlertManagerConfig CRD. #7310

[FEATURE] Add additionalArgs field to AlertManager CRD. #7385

[ENHANCEMENT] Add maxSamplesPerSend field to RemoteWrite Metadata Config. #7443

[ENHANCEMENT] Add the terminationGracePeriodSeconds to the Alertmanager, Prometheus, PrometheusAgent and ThanosRuler CRDs. #7439

[ENHANCEMENT] Validate proxyURL field in AlertManagerConfig CRD. #6876

[BUGFIX] Fix nameValidationScheme support for Prometheus and PrometheusAgent CRDs. #7414

[BUGFIX] Support socks5 scheme in proxyUrl field for all CRDs. #7460 #7466

0.81.0 / 2025-03-11

[CHANGE] Remove the lower-case hypervisor and instance roles for the OpenStack Service Discovery from the ScrapeConfig CRD (users are required to use Hypervisor and Instance instead). #7370

[FEATURE] Add serviceName field to the ThanosRuler and Alertmanager CRDs. #7325

[FEATURE] Add shardRetentionPolicy field to the Prometheus CRD (it requires the PrometheusShardRetentionPolicy feature gate). #7274

[FEATURE] Add support for the cluster mTLS configuration to the Alertmanager CRD. #7149

[FEATURE] Add LoadBalancer role for the OpenStack Service Discovery to the ScrapeConfig CRD. #7356

[ENHANCEMENT] Add enableServiceLinks field to the Alertmanager, Prometheus, PrometheusAgent and ThanosRuler CRDs. #7384

[BUGFIX] Fix Alertmanager configuration with PushOver duration fields. #7249

0.80.1 / 2025-02-19

[BUGFIX] Fix msteamsv2_configs to work with either webhook_url or webhook_url_file. #7352

0.80.0 / 2025-02-04

... (truncated)

Commits

5cf2f5d Merge pull request #7567 from mviswanathsai/cut-0.83
e21a488 chore: cut v0.83.0
2955ff7 Feat: Add new MetricNameEscapingScheme and MetricNameValidationScheme paramet...
a3327f1 Add Duration type helper (#7493)
18f8fca Add Duration type helper
b6281e2 Merge pull request #7566 from mviswanathsai/cut-0.83
f46619c Merge pull request #7564 from simonpasquier/update-proposal-template
5e5688f chore: update proposal template
83b7a96 Merge pull request #7563 from simonpasquier/fix-NameEscapingSchemeOptions-doc
ce0246b chore: fix NameEscapingSchemeOptions documentation
Additional commits viewable in compare view

Updates github.com/rs/zerolog from 1.33.0 to 1.34.0

Commits

db9d1be Update go versions covered by CI
5f4b880 Delete _config.yml
ffb2708 Remove CNAME file
cc4dde7 Create CONTRIBUTING.md
04ea0f4 Implement Close() for zerolog.FilteredLevelWriter (#715)
0398600 fix: reset condition in burst sampler (#711) (#712)
1869fa5 FormatPartValueByName for flexible custom formatting for ConsoleWriter (#541)
31e7995 remove unnecessary nil checks (#701)
582f820 Get BasicSampler(0), RandomSampler(0), and BurstSampler(0) to behave the same...
6abadab Bump github.com/rs/xid from 1.5.0 to 1.6.0 (#684)
See full diff in compare view

Updates github.com/spf13/cobra from 1.8.1 to 1.9.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.9.1

🐛 Fixes

Fix CompletionFunc implementation by @ccoVeille in spf13/cobra#2234

Revert "Make detection for test-binary more universal (#2173)" by @marckhouzam in spf13/cobra#2235

Full Changelog: spf13/cobra@v1.9.0...v1.9.1

v1.9.0

✨ Features

Allow linker to perform deadcode elimination for program using Cobra by @aarzilli in spf13/cobra#1956

Add default completion command even if there are no other sub-commands by @marckhouzam in spf13/cobra#1559

Add CompletionWithDesc helper by @ccoVeille in spf13/cobra#2231

🐛 Fixes

Fix deprecation comment for Command.SetOutput by @thaJeztah in spf13/cobra#2172

Replace deprecated ioutil usage by @nirs in spf13/cobra#2181

Fix --version help and output for plugins by @nirs in spf13/cobra#2180

Allow to reset the templates to the default by @marckhouzam in spf13/cobra#2229

🤖 Completions

Make Powershell completion work in constrained mode by @lstemplinger in spf13/cobra#2196

Improve detection for flags that accept multiple values by @thaJeztah in spf13/cobra#2210

add CompletionFunc type to help with completions by @ccoVeille in spf13/cobra#2220

Add similar whitespace escape logic to bash v2 completions than in other completions by @kangasta in spf13/cobra#1743

Print ActiveHelp for bash along other completions by @marckhouzam in spf13/cobra#2076

fix(completions): Complete map flags multiple times by @gabe565 in spf13/cobra#2174

fix(bash): nounset unbound file filter variable on empty extension by @scop in spf13/cobra#2228

🧪 Testing

Test also with go 1.23 by @nirs in spf13/cobra#2182

Make detection for test-binary more universal by @thaJeztah in spf13/cobra#2173

✍🏼 Documentation

docs: update README.md by @eltociear in spf13/cobra#2197

Improve site formatting by @nirs in spf13/cobra#2183

doc: add Conduit by @raulb in spf13/cobra#2230

doc: azion project added to the list of CLIs that use cobra by @maxwelbm in spf13/cobra#2198

Fix broken links in active_help.md by @vuil in spf13/cobra#2202

chore: fix function name in comment by @zhuhaicity in spf13/cobra#2216

🔧 Dependency upgrades

build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.5 to 2.0.6 by @thaJeztah in spf13/cobra#2206

Update to latest go-md2man by @mikelolasagasti in spf13/cobra#2201

... (truncated)

Commits

40b5bc1 Revert "Make detection for test-binary more universal (#2173)" (#2235)
a97f9fd fix CompletionFunc implementation (#2234)
5f9c408 chore: Upgrade dependencies for v1.9.0 (#2233)
24ada7f Remove the default "completion" cmd if it is alone (#1559)
680936a New logo
8cb30f9 feat: add CompletionWithDesc helper (#2231)
17b6dca doc: add Conduit (#2230)
ab5cadc Allow to reset the templates to the default (#2229)
4ba5566 fix(bash): nounset unbound file filter variable on empty extension (#2228)
41b26ec Print ActiveHelp for bash along other completions (#2076)
Additional commits viewable in compare view

Updates go.mondoo.com/cnquery/v11 from 11.15.0 to 11.57.2

Release notes

Sourced from go.mondoo.com/cnquery/v11's releases.

v11.57.2

What's Changed

✨ Update providers 20250604 by @github-actions in mondoohq/cnquery#5627

Revert "Configure Coordinator from ENV in init(), prepare for explicit init (#5577)" by @glower in mondoohq/cnquery#5628

Full Changelog: mondoohq/mql@v11.57.1...v11.57.2

v11.57.1

What's Changed

✨ Update providers 20250603 by @github-actions in mondoohq/cnquery#5624

Remove unnecessary logging in the provider by @glower in mondoohq/cnquery#5626

Full Changelog: mondoohq/mql@v11.57.0...v11.57.1

v11.57.0

What's Changed

✨ Update providers 20250527 by @github-actions in mondoohq/cnquery#5578

✨ aws codedeploy resource by @afiune in mondoohq/cnquery#5590

🎉 aws-11.5.49 by @afiune in mondoohq/cnquery#5595

🐛 aws codedeploy deploymentGroup typo by @afiune in mondoohq/cnquery#5596

🎉 aws-11.5.50 by @afiune in mondoohq/cnquery#5597

✨ IBM cloud detect + AIX by @afiune in mondoohq/cnquery#5589

🐛 Add dependencies to ResourceSchema interface by @afiune in mondoohq/cnquery#5580

🎉 os-11.4.14 by @afiune in mondoohq/cnquery#5599

🐛 aws code deploy fixes by @afiune in mondoohq/cnquery#5600

🎉 aws-11.5.51 by @afiune in mondoohq/cnquery#5601

🧹 set aix packages arch by @imilchev in mondoohq/cnquery#5602

Configure Coordinator from ENV in init(), prepare for explicit init by @glower in mondoohq/cnquery#5577

Bump dawidd6/action-download-artifact from 9 to 10 by @dependabot in mondoohq/cnquery#5611

Full Changelog: mondoohq/mql@v11.56.0...v11.57.0

v11.56.0

What's Changed

✨ Update providers 20250520 by @github-actions in mondoohq/cnquery#5556

🧹 improve description for shodan and nmap provider by @chris-rock in mondoohq/cnquery#5557

✨ Add MQL VEX document resource by @czunker in mondoohq/cnquery#5555

🧹 update VEX docs by @chris-rock in mondoohq/cnquery#5560

Remove references to yaml.path by @tas50 in mondoohq/cnquery#5562

Exclude 429s from GitHub by @tas50 in mondoohq/cnquery#5563

⭐ Add asset discovery for aws-eks-cluster assets by @tas50 in mondoohq/cnquery#5550

🧹 update tests by @chris-rock in mondoohq/cnquery#5565

🐛 Prevent trailing space in ParseProcessCmdline output by @glower in mondoohq/cnquery#5558

🧹 update go github by @chris-rock in mondoohq/cnquery#5564

🧹 Remove version pin from docker dep by @czunker in mondoohq/cnquery#5566

🧹 add example for filtering instanceids to help output by @vjeffrey in mondoohq/cnquery#5559

🎉 aws-11.5.47 by @vjeffrey in mondoohq/cnquery#5569

... (truncated)

Commits

c4f5b68 Revert "Configure Coordinator from ENV in init(), prepare for explicit init (...
a7bdabf ✨ Update providers 20250604 (#5627)
493f509 Remove unnecessary logging in the provider (#5626)
26f97e3 ✨ Update providers 20250603 (#5624)
dc152fa Bump dawidd6/action-download-artifact from 9 to 10 (#5611)
ce07339 Configure Coordinator from ENV in init(), prepare for explicit init (#5577)
54ebec5 🧹 set aix packages platform (#5602)
b62e786 🎉 aws-11.5.51 (#5601)
dd5a7c3 🐛 aws code deploy fixes (#5600)
891156b 🎉 os-11.4.14 (#5599)
Additional commits viewable in compare view

Updates go.mondoo.com/cnspec/v11 from 11.15.0 to 11.57.2

Release notes

Sourced from go.mondoo.com/cnspec/v11's releases.

v11.57.2

What's Changed

⭐️ onboarding: ignore non-enabled azure subscriptons by @afiune in mondoohq/cnspec#1674

Revert "Fix test for mondoohq/cnquery#5424 (#1682)" by @philipbalinov in mondoohq/cnspec#1684

🧹 Bump cnquery to v11.57.2 by @github-actions in mondoohq/cnspec#1683

Full Changelog: mondoohq/cnspec@v11.57.1...v11.57.2

v11.57.1

What's Changed

⭐ Automatic integration for ms365 by @mati007thm in mondoohq/cnspec#1660

🧹allow users to override the platform id by @chris-rock in mondoohq/cnspec#1506

🧹 lift lint errors to warnings for variants by @chris-rock in mondoohq/cnspec#1680

Fix test for mondoohq/cnquery#5424 by @philipbalinov in mondoohq/cnspec#1682

🧹 Bump cnquery to v11.57.1 by @github-actions in mondoohq/cnspec#1681

New Contributors

@mati007thm made their first contribution in mondoohq/cnspec#1660

Full Changelog: mondoohq/cnspec@v11.57.0...v11.57.1

v11.57.0

What's Changed

Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.79.3 to 1.79.4 in the gomodupdates group across 1 directory by @dependabot in mondoohq/cnspec#1670

🧹 simplify linter code by @chris-rock in mondoohq/cnspec#1672

🐛 Policy list -a limit fix by @claytoncasey01 in mondoohq/cnspec#1655

Bump github.com/aws/aws-sdk-go-v2/service/s3 from 1.79.4 to 1.80.0 in the gomodupdates group by @dependabot in mondoohq/cnspec#1678

🧹 Bump cnquery to v11.57.0 by @github-actions in mondoohq/cnspec#1679

Full Changelog: mondoohq/cnspec@v11.56.0...v11.57.0

v11.56.0

What's Changed

Improve the linter by @syrull in mondoohq/cnspec#1653

🧹 Bump cnquery to v11.56.0 by @github-actions in mondoohq/cnspec#1669

New Contributors

@syrull made their first contribution in mondoohq/cnspec#1653

Full Changelog: mondoohq/cnspec@v11.55.0...v11.56.0

v11.55.0

What's Changed

⭐️ cnspec report compare by @chris-rock in mondoohq/cnspec#1661

Bump the gomodupdates group with 3 updates by @dependabot in mondoohq/cnspec#1662

Bump slackapi/slack-github-action from 2.0.0 to 2.1.0 by @dependabot in mondoohq/cnspec#1654

Bump check-spelling/check-spelling from 0.0.24 to 0.0.25 by @dependabot in mondoohq/cnspec#1664

🧹 Bump cnquery to v11.55.0 by @github-actions in mondoohq/cnspec#1666

... (truncated)

Commits

b1db432 🧹 Bump cnquery to v11.57.2 (#1683)
5d9bd0f Revert "Fix test for mondoohq/cnquery#5424 (#1682)" (...
a63d95f ⭐️ onboarding: ignore non-enabled azure subscriptons (#1674)
cfef762 🧹 Bump cnquery to v11.57.1 (#1681)
d94fbfa Fix test for mondoohq/cnquery#5424 (#1682)
8707ee8 🧹 lift lint errors to warnings for variants (#1680)
b2ca91d 🧹allow users to override the platform id (#1506)
a48d438 ⭐ Automatic integration for ms365 (#1660)
ce6a44b 🧹 Bump cnquery to v11.57.0 (#1679)
81573c7 Bump github.com/aws/aws-sdk-go-v2/service/s3 in the gomodupdates group (#1678)
Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.4.2 to 1.4.3

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.3

Minor release.

What's Changed

Fix slog tests for 1.25 by @hoeppi-google in go-logr/logr#361

Remove one exception from Slog testing by @thockin in go-logr/logr#362

New Contributors

@hoeppi-google made their first contribution in go-logr/logr#361

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

Commits

38a1c47 build(deps): bump github/codeql-action from 3.28.17 to 3.28.18
f08bedd build(deps): bump actions/setup-go from 5.4.0 to 5.5.0
6295e99 build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0
028840d build(deps): bump github/codeql-action from 3.28.15 to 3.28.17
511e5fa Merge pull request #367 from go-logr/dependabot/github_actions/github/codeql-...
d806463 build(deps): bump github/codeql-action from 3.28.13 to 3.28.15
158c311 Merge pull request #366 from thockin/master
c79ddb3 Update to support golangci-lint v2
20a64ba build(deps): bump github/codeql-action from 3.28.12 to 3.28.13
0385e14 Add comments around slog exceptions
Additional commits viewable in compare view

Updates github.com/google/go-cmp from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/google/go-cmp's releases.

v0.7.0

New API:

(#367) Support compare functions with SortSlices and SortMaps

Panic messaging:

(#370) Detect proto.Message types when failing to export a field

Commits

9b12f36 Detect proto.Message types when failing to export a field (#370)
4dd3d63 fix: type 'aribica' => 'arabica' (#368)
391980c Support compare functions with SortSlices and SortMaps (#367)
See full diff in compare view

Updates github.com/google/go-containerregistry from 0.20.1 to 0.20.5

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.5

What's Changed

build(deps): bump docker/docker to v28.0.0+incompatible by @luhring in google/go-containerregistry#2071

Migrate linter to v2 by @Subserial in google/go-containerregistry#2096

bump go version + bump deps by @Subserial in google/go-containerregistry#2093

implement TextMarshaler/JSONMarshaler more consistently by @imjasonh in google/go-containerregistry#2097

Update CodeQL permissions by @Subserial in google/go-containerregistry#2103

Update goreleaser permissions by @Subserial in google/go-containerregistry#2104

Update provenance action in release by @Subserial in google/go-containerregistry#2105

Update validator action by @Subserial in google/go-containerregistry#2106

New Contributors

@luhring made their first contribution in google/go-containerregistry#2071

@Subserial made their first contribution in google/go-containerregistry#2096

Full Changelog: google/go-containerregistry@v0.20.3...v0.20.5

v0.20.4 - Not usable as a go module

🚨 This release was published to the Go module proxy and then re-tagged with a different commit. This means it's not usable as a Go module (google/go-containerregistry#2107) -- please us v0.20.5 instead.

What's Changed

build(deps): bump docker/docker to v28.0.0+incompatible by @luhring in google/go-containerregistry#2071

Migrate linter to v2 by @Subserial in google/go-containerregistry#2096

bump go version + bump deps by <...
Description has been truncated

github-actions · 2025-06-05T10:26:58Z

Test Results

0 files - 5 0 suites - 51 0s ⏱️ - 2h 42m 12s
0 tests - 319 0 ✅ - 319 0 💤 ±0 0 ❌ ±0
0 runs - 388 0 ✅ - 388 0 💤 ±0 0 ❌ ±0

Results for commit d5a7e79. ± Comparison against base commit 6b440f2.

♻️ This comment has been updated with latest results.

Bumps the gomodupdates group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.14.5` | `1.17.2` | | [github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring](https://github.com/prometheus-operator/prometheus-operator) | `0.74.0` | `0.83.0` | | [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.33.0` | `1.34.0` | | [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.1` | `1.9.1` | | [go.mondoo.com/cnquery/v11](https://github.com/mondoohq/cnquery) | `11.15.0` | `11.57.2` | | [go.mondoo.com/cnspec/v11](https://github.com/mondoohq/cnspec) | `11.15.0` | `11.57.2` | | [github.com/go-logr/logr](https://github.com/go-logr/logr) | `1.4.2` | `1.4.3` | | [github.com/prometheus/client_model](https://github.com/prometheus/client_model) | `0.6.1` | `0.6.2` | Updates `github.com/cert-manager/cert-manager` from 1.14.5 to 1.17.2 - [Release notes](https://github.com/cert-manager/cert-manager/releases) - [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md) - [Commits](cert-manager/cert-manager@v1.14.5...v1.17.2) Updates `github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring` from 0.74.0 to 0.83.0 - [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases) - [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md) - [Commits](prometheus-operator/prometheus-operator@v0.74.0...v0.83.0) Updates `github.com/rs/zerolog` from 1.33.0 to 1.34.0 - [Commits](rs/zerolog@v1.33.0...v1.34.0) Updates `github.com/spf13/cobra` from 1.8.1 to 1.9.1 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.8.1...v1.9.1) Updates `go.mondoo.com/cnquery/v11` from 11.15.0 to 11.57.2 - [Release notes](https://github.com/mondoohq/cnquery/releases) - [Changelog](https://github.com/mondoohq/cnquery/blob/main/.goreleaser.yml) - [Commits](mondoohq/mql@v11.15.0...v11.57.2) Updates `go.mondoo.com/cnspec/v11` from 11.15.0 to 11.57.2 - [Release notes](https://github.com/mondoohq/cnspec/releases) - [Changelog](https://github.com/mondoohq/cnspec/blob/main/.goreleaser.yml) - [Commits](mondoohq/cnspec@v11.15.0...v11.57.2) Updates `github.com/go-logr/logr` from 1.4.2 to 1.4.3 - [Release notes](https://github.com/go-logr/logr/releases) - [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md) - [Commits](go-logr/logr@v1.4.2...v1.4.3) Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0 - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](google/go-cmp@v0.6.0...v0.7.0) Updates `github.com/google/go-containerregistry` from 0.20.1 to 0.20.5 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml) - [Commits](google/go-containerregistry@v0.20.1...v0.20.5) Updates `github.com/prometheus/client_golang` from 1.19.1 to 1.22.0 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.19.1...v1.22.0) Updates `github.com/prometheus/client_model` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/prometheus/client_model/releases) - [Commits](prometheus/client_model@v0.6.1...v0.6.2) Updates `google.golang.org/protobuf` from 1.34.2 to 1.36.6 Updates `k8s.io/utils` from 0.0.0-20240711033017-18e509b52bc8 to 0.0.0-20250502105355-0f33e8f1c979 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: github.com/cert-manager/cert-manager dependency-version: 1.17.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring dependency-version: 0.83.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/rs/zerolog dependency-version: 1.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/spf13/cobra dependency-version: 1.9.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: go.mondoo.com/cnquery/v11 dependency-version: 11.57.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: go.mondoo.com/cnspec/v11 dependency-version: 11.57.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/go-logr/logr dependency-version: 1.4.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates - dependency-name: github.com/google/go-cmp dependency-version: 0.7.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/google/go-containerregistry dependency-version: 0.20.5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates - dependency-name: github.com/prometheus/client_golang dependency-version: 1.22.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/prometheus/client_model dependency-version: 0.6.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates - dependency-name: google.golang.org/protobuf dependency-version: 1.36.6 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: k8s.io/utils dependency-version: 0.0.0-20250502105355-0f33e8f1c979 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot · 2025-06-24T10:41:01Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 5, 2025

dependabot Bot force-pushed the dependabot/go_modules/gomodupdates-ac6b8d67b5 branch from 0c750a2 to 8d77708 Compare June 5, 2025 10:38

dependabot Bot force-pushed the dependabot/go_modules/gomodupdates-ac6b8d67b5 branch from 8d77708 to d5a7e79 Compare June 6, 2025 08:42

dependabot Bot closed this Jun 24, 2025

dependabot Bot deleted the dependabot/go_modules/gomodupdates-ac6b8d67b5 branch June 24, 2025 10:41

github-actions Bot locked and limited conversation to collaborators Jun 24, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the gomodupdates group across 1 directory with 13 updates#1248

Bump the gomodupdates group across 1 directory with 13 updates#1248
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/gomodupdates-ac6b8d67b5

dependabot Bot commented on behalf of github Jun 5, 2025 •

edited

Loading

Uh oh!

github-actions Bot commented Jun 5, 2025 •

edited

Loading

Uh oh!

dependabot Bot commented on behalf of github Jun 24, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Jun 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v1.17.2

Changes since v1.17.1

Bug or Regression

v1.17.1

Changes by Kind

Bug or Regression

v1.17.0

Major Themes

RSA Certificate Compliance

0.83.0 / 2025-05-30

0.82.2 / 2025-05-12

0.82.1 / 2025-05-06

0.82.0 / 2025-04-17

0.81.0 / 2025-03-11

0.80.1 / 2025-02-19

0.80.0 / 2025-02-04

0.83.0 / 2025-05-30

0.82.2 / 2025-05-12

0.82.1 / 2025-05-06

0.82.0 / 2025-04-17

0.81.0 / 2025-03-11

0.80.1 / 2025-02-19

0.80.0 / 2025-02-04

v1.9.1

🐛 Fixes

v1.9.0

✨ Features

🐛 Fixes

🤖 Completions

🧪 Testing

✍🏼 Documentation

🔧 Dependency upgrades

v11.57.2

What's Changed

v11.57.1

What's Changed

v11.57.0

What's Changed

v11.56.0

What's Changed

v11.57.2

What's Changed

v11.57.1

What's Changed

New Contributors

v11.57.0

What's Changed

v11.56.0

What's Changed

New Contributors

v11.55.0

What's Changed

v1.4.3

What's Changed

New Contributors

v0.7.0

v0.20.5

What's Changed

New Contributors

v0.20.4 - Not usable as a go module

What's Changed

Uh oh!

github-actions Bot commented Jun 5, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Test Results

Uh oh!

dependabot Bot commented on behalf of github Jun 24, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

dependabot Bot commented on behalf of github Jun 5, 2025 •

edited

Loading

Changes since `v1.17.1`

github-actions Bot commented Jun 5, 2025 •

edited

Loading