Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 1, 2025

Bumps k8s.io/api from 0.23.5 to 0.34.0.

Commits
  • ae6c3b9 Update dependencies to v0.34.0 tag
  • 133a39c Merge remote-tracking branch 'origin/master' into release-1.34
  • fd087be clarify that staging repos are automatically published
  • ff163ef add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • 5ec86fc link to what a staging repository is
  • 08c5dee docs: clarify that this is a staging repository and not for direct contributions
  • ba64d0b Update prerelease lifecycle to v1.34
  • 25f849c Merge pull request #132522 from sunya-ch/KEP-5075-PR
  • baa1eb1 KEP-5075: generated codes from make update
  • 740b2c9 KEP-5075: API updates
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.23.5 to 0.34.0.
- [Commits](kubernetes/api@v0.23.5...v0.34.0)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Sep 1, 2025
Copy link

@bulwark-spectrocloud bulwark-spectrocloud bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ GoSec scan found code issues:

  1. G115: integer overflow conversion int -> uint32, Severity: HIGH
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/kubevirt/schema/virtualmachineinstance/domain_spec.go:295:26
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/kubevirt/schema/virtualmachineinstance/domain_spec.go:292:26
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/kubevirt/schema/virtualmachineinstance/domain_spec.go:289:24
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/workspace_rbac.go:42:19
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/workspace_namespace.go:41:20
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_platform_setting.go:395:58
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_platform_setting.go:144:57
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_pcg_ippool.go:207:20
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_developer_setting.go:73:30
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_developer_setting.go:72:30
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_developer_setting.go:71:30
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_developer_setting.go:70:30
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_cluster_vsphere.go:893:43
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_cluster_vsphere.go:878:37
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/resource_cluster_vsphere.go:864:14
    • ... (truncated), run gosec locally to capture all failure for the rule G115
  2. G402: TLS InsecureSkipVerify set true., Severity: HIGH
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/provider.go:208:93
  3. G109: Potential Integer overflow made by strconv.Atoi result conversion to int16/32, Severity: HIGH
      1. File: /home/runner/_work/bulwark/bulwark/target-repo/spectrocloud/workspace_namespace.go:41:15

Please review these findings and fix the issues before merging.

@SivaanandM SivaanandM changed the base branch from main to tf-palette-4.7.b September 5, 2025 05:29
@SivaanandM SivaanandM merged commit 83abc3b into tf-palette-4.7.b Sep 5, 2025
1 of 6 checks passed
@SivaanandM SivaanandM deleted the dependabot/go_modules/k8s.io/api-0.34.0 branch September 5, 2025 05:37
vishwanaths pushed a commit that referenced this pull request Sep 10, 2025
* PLT-1887: Fixed eks dynamic cluster provisioning, removed cp entry in api call (#643)

* Fix: update sso resource to have correct validation and description within oidc section (#641) (#642)

Co-authored-by: dal13002 <[email protected]>

* saml email fix

* PLT:1898- Fixed GoSec issues (#645)

* Fixed G115 Go sec issues

* Fixed G109 and G402

* PLT-1898: Fixed all GO sec issues

* Added windows support for spectro-tf-format script

* refreshed sdk

Signed-off-by: Sivaanand Murugesan <[email protected]>

* refreshed depandabot issue

* PLT-1879: Added LXD support for MAAS Cluster (#651)

* PLT-1879: Added LXD support for MAAS Cluster

* docs

* PLT-1799:Added support for AzureUSSecretCloud in Azure cloud account. (#653)

* refresh sdk

* PLT-1944: Removed depricated spectrocloud_macro resources (#661)

* PLT-1852: Added import support for all resources (#647)

* PLT-1852: Added import support for all resoruces

* Fixed alert import

Signed-off-by: Sivaanand Murugesan <[email protected]>

* fixed import for application profile

* tested cluster group import

* fix

* refreshed docs

* Fixed application import

* refresh template

* Fixed ippool import

* fixed dns map import

* tested backup storage location

* test oci registry

* fixed all resource import

---------

Signed-off-by: Sivaanand Murugesan <[email protected]>

* PLT-1946: Fixed application profile import (#662)

* Bump github.com/hashicorp/go-cty (#659)

Bumps [github.com/hashicorp/go-cty](https://github.com/hashicorp/go-cty) from 1.4.1-0.20200414143053-d3edf31b6320 to 1.5.0.
- [Changelog](https://github.com/hashicorp/go-cty/blob/master/CHANGELOG.md)
- [Commits](https://github.com/hashicorp/go-cty/commits/v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/go-cty
  dependency-version: 1.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump github.com/hashicorp/terraform-plugin-sdk/v2 from 2.30.0 to 2.37.0 (#657)

Bumps [github.com/hashicorp/terraform-plugin-sdk/v2](https://github.com/hashicorp/terraform-plugin-sdk) from 2.30.0 to 2.37.0.
- [Release notes](https://github.com/hashicorp/terraform-plugin-sdk/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-sdk@v2.30.0...v2.37.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/terraform-plugin-sdk/v2
  dependency-version: 2.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sivaanand Murugesan <[email protected]>

* Bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#660)

Bumps [github.com/google/go-cmp](https://github.com/google/go-cmp) from 0.6.0 to 0.7.0.
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](google/go-cmp@v0.6.0...v0.7.0)

---
updated-dependencies:
- dependency-name: github.com/google/go-cmp
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump k8s.io/api from 0.23.5 to 0.34.0 (#658)

Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.23.5 to 0.34.0.
- [Commits](kubernetes/api@v0.23.5...v0.34.0)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sivaanand Murugesan <[email protected]>

* Bump github.com/hashicorp/terraform-plugin-docs from 0.16.0 to 0.22.0 (#656)

Bumps [github.com/hashicorp/terraform-plugin-docs](https://github.com/hashicorp/terraform-plugin-docs) from 0.16.0 to 0.22.0.
- [Release notes](https://github.com/hashicorp/terraform-plugin-docs/releases)
- [Changelog](https://github.com/hashicorp/terraform-plugin-docs/blob/main/CHANGELOG.md)
- [Commits](hashicorp/terraform-plugin-docs@v0.16.0...v0.22.0)

---
updated-dependencies:
- dependency-name: github.com/hashicorp/terraform-plugin-docs
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Sivaanand Murugesan <[email protected]>

* fixed dependency refresh issues

* PLT-1947: Fixed import support for sshkey, application, clusterprofile, alert, virtual cluster and application (#664)

* PLT-1886: Fixed cluster profile manifest pack day 2 operation (#665)

* refreshed palette sdk go

* refresh fix

---------

Signed-off-by: Sivaanand Murugesan <[email protected]>
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dal13002 <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant