Bump the all group across 1 directory with 13 updates by dependabot[bot] · Pull Request #1257 · tektoncd/chains

dependabot · 2024-11-25T14:51:37Z

Bumps the all group with 7 updates in the / directory:

Package	From	To
cloud.google.com/go/storage	`1.46.0`	`1.47.0`
github.com/golangci/golangci-lint	`1.61.0`	`1.62.2`
github.com/sigstore/rekor	`1.3.6`	`1.3.7`
github.com/tektoncd/pipeline	`0.65.0`	`0.65.2`
k8s.io/api	`0.31.2`	`0.31.3`
k8s.io/client-go	`0.31.2`	`0.31.3`
k8s.io/code-generator	`0.31.2`	`0.31.3`

Updates cloud.google.com/go/storage from 1.46.0 to 1.47.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.47.0

1.47.0 (2024-11-14)

Features

storage: Introduce dp detector based on grpc metrics (#11100) (60c2323)

Bug Fixes

storage: Bump auth dep (#11135) (9620a51)

Commits

703c26a chore(main): release spanner 1.47.0 (#7960)
b726d41 feat(aiplatform): add UpdateExplanationDataset to aiplatform (#8118)
fc49c78 feat(spanner): add databoost property for batch transactions (#8152)
005d2df fix(internal/retry): never return nil from GRPCStatus() (#8128)
b429aa1 chore(internal/postprocessor): fix profiler & errorreporting shortnames (#8131)
4e80088 chore(deps): update gax-go and google.golang.org/api (#8117)
e43ebeb chore(postprocessor): add update steps (#8103)
72d0127 test: skip flaky test (#8129)
20573e2 chore(postprocessor): fix missing format specifier (#8112)
28aa098 chore(postprocessor): update manual entries (#8111)
Additional commits viewable in compare view

Updates github.com/golangci/golangci-lint from 1.61.0 to 1.62.2

Release notes

Sourced from github.com/golangci/golangci-lint's releases.

v1.62.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

build(deps): bump github.com/uudashr/iface from 1.2.0 to 1.2.1 (#5154)

build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#5152)

build(deps): bump github.com/Crocmagnon/fatcontext from 0.5.2 to 0.5.3 (#5153)

build(deps): bump github.com/polyfloyd/go-errorlint from 1.6.0 to 1.7.0 (#5134)

build(deps): bump github.com/nunnatsa/ginkgolinter from 0.18.0 to 0.18.3 (#5133)

build(deps): bump github.com/mgechev/revive from 1.5.0 to 1.5.1 (#5135)

build(deps): bump github.com/Antonboom/testifylint from 1.5.0 to 1.5.2 (#5132)

fix: ignore cache error when file not found (#5129)

v1.62.0

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

29c5529e93f641b6e385b525badb165643f84e10 Add filen linter (#5081)

baf610d5bff0c4182e1378310b1d0136f7c04f6a Add iface linter (#4871)

ab9076301540d3a794c21f7fe4f87166a1d3bcf8 Add recvcheck linter (#5014)

8a9d16e6e84c4217086ff7c005228e831087406b Revert "Add filen linter (#5081)" (#5087)

944e1d844182da7d93ca5ee31b33d8bcb2e15890 build(deps): bump github.com/Abirdcfly/dupword from 0.1.1 to 0.1.3 (#5062)

9f4951f10d47a35888d5ff84b935e4bc0044b1cf build(deps): bump github.com/Antonboom/errname from 0.1.13 to 1.0.0 (#5057)

61f8c0e8923479d61125e19e103e6d59ddba9139 build(deps): bump github.com/Antonboom/nilnil from 0.1.9 to 1.0.0 (#5058)

095e4952be33b395f273482276275c9fb98fbbe1 build(deps): bump github.com/Antonboom/testifylint from 1.4.3 to 1.5.0 (#5054)

07989418461bc2792e558ce1323164dcf7870afe build(deps): bump github.com/alecthomas/go-check-sumtype from 0.1.4 to 0.2.0 (#5038)

90c0509fcbf07f642d250cdf232d4cd5bf4a657a build(deps): bump github.com/alexkohler/nakedret/v2 from 2.0.4 to 2.0.5 (#5076)

188d56c611e1509335c602da844f829fc996d52b build(deps): bump github.com/bkielbasa/cyclop from 1.2.1 to 1.2.3 (#5071)

b020f7b6559f9e37a334e3e7d096aa78e452e100 build(deps): bump github.com/breml/bidichk from 0.2.7 to 0.3.1 (#5025)

6c0ee25a61a03c57f65eb05619529181b0990229 build(deps): bump github.com/breml/bidichk from 0.3.1 to 0.3.2 (#5075)

e5dab8de7f74e802662e631a53b3172c5c4638c6 build(deps): bump github.com/breml/errchkjson from 0.3.6 to 0.4.0 (#5028)

318d78e2ba891735574e8bb75b67064712381a99 build(deps): bump github.com/ckaznocha/intrange from 0.2.0 to 0.2.1 (#5024)

5034dbcde1a53f239947e2ab266fc0c8dbc35861 build(deps): bump github.com/fatih/color from 1.17.0 to 1.18.0 (#5088)

a33f7942e6572107696badd8f77b351213b52e45 build(deps): bump github.com/ghostiam/protogetter from 0.3.6 to 0.3.8 (#5026)

b07c319f557d0496d184f58b3de3d76e19733ef2 build(deps): bump github.com/go-critic/go-critic from 0.11.4 to 0.11.5 (#5061)

a45560d4398b2c7c915bb3fd118aec4d8cbe36a2 build(deps): bump github.com/go-viper/mapstructure/v2 from 2.1.0 to 2.2.0 (#5034)

aa669e22908160f8780ca56e8925368898b5091e build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.0 to 2.2.1 (#5040)

... (truncated)

Changelog

Sourced from github.com/golangci/golangci-lint's changelog.

v1.62.2

Updated linters

fatcontext: from 0.5.2 to 0.5.3

ginkgolinter: from 0.18.0 to 0.18.3

go-errorlint: from 1.6.0 to 1.7.0

iface: from 1.2.0 to 1.2.1

revive: from 1.5.0 to 1.5.1

testifylint: from 1.5.0 to 1.5.2

Misc.

fix: ignore cache error when file not found

v1.62.1

Cancelled due to CI failure.

v1.62.0

New linters

Add recvcheck linter https://github.com/raeperd/recvcheck

Add iface linter https://github.com/uudashr/iface

Updated linters

⚠️ execinquery: deprecation step 2

⚠️ gomnd: deprecation step 2 (replaced by mnd)

bidichk: from 0.2.7 to 0.3.2 (important performance improvement)

canonicalheader: from 1.1.1 to 1.1.2

cyclop: from 1.2.1 to 1.2.3

dupword: from 0.1.1 to 0.1.3

errcheck: from 1.7.0 to 1.8.0

errchkjson: from 0.3.6 to 0.4.0

errname: from 0.1.13 to 1.0.0

ginkgolinter: from 0.17.0 to 0.18.0 (new option: force-succeed)

go-check-sumtype: from 0.1.4 to 0.2.0 (new option: default-signifies-exhaustive)

go-critic: from 0.11.4 to 0.11.5

go-printf-func-name: from 7558a9eaa5af to v0.1.0

godot: from 1.4.17 to 1.4.18

gosec: from 2.21.2 to 2.21.4

intrange: from 0.2.0 to 0.2.1

loggercheck: from 0.9.4 to 0.10.1 (log/slog support)

musttag: from 0.12.2 to 0.13.0

nakedret: from 2.0.4 to 2.0.5

nilnil: from 0.1.9 to 1.0.0 (new option: detect-opposite)

noctx: from 0.0.2 to 0.1.0

protogetter: from 0.3.6 to 0.3.8

revive: from 1.3.9 to 1.5.0 (new rules: filename-format, and file-length-limit)

tenv: from 1.10.0 to 1.12.1 (handle dot import)

testifylint: from 1.4.3 to 1.5.0 (new checkers: contains, encoded-compare, regexp)

Misc.

Type sizing when cross-compiling (32-bit).

code-climate: add check_name field

... (truncated)

Commits

89476e7 dev: fix release workflow (#5156)
8c45cf5 build(deps): bump github.com/uudashr/iface from 1.2.0 to 1.2.1 (#5154)
bc3d877 dev: publish snap (#5130)
59f6a2e build(deps): bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (#5152)
d1cef36 build(deps): bump github.com/Crocmagnon/fatcontext from 0.5.2 to 0.5.3 (#5153)
432d3b1 dev: add missing AUR_KEY secret (#5151)
af9b92a dev: simplify sort results processors (#5150)
e0e37c4 docs: Simplify team and contributors section (#5148)
4ab3dca dev: publish AUR -bin automatically (#5146)
a41fe44 build(deps): bump cross-spawn from 6.0.5 to 6.0.6 in /.github/contributors (#...
Additional commits viewable in compare view

Updates github.com/sigstore/rekor from 1.3.6 to 1.3.7

Release notes

Sourced from github.com/sigstore/rekor's releases.

v1.3.7

Changelog

Please see https://github.com/sigstore/rekor/blob/main/CHANGELOG.md for changes included in this release.

Thanks for all contributors!

Changelog

Sourced from github.com/sigstore/rekor's changelog.

v1.3.7

New Features

log request body on 500 error to aid debugging (#2283)

Add support for signing with Tink keyset (#2228)

Add public key hash check in Signed Note verification (#2214)

update Trillian TLS configuration (#2202)

Add TLS support for Trillian server (#2164)

Replace docker-compose with plugin if available (#2153)

Add flags to backfill script (#2146)

Unset DisableKeepalive for backfill HTTP client (#2137)

Add script to delete indexes from Redis (#2120)

Run CREATE statement in backfill script (#2109)

Add MySQL support to backfill script (#2081)

Run e2e tests on mysql and redis index backends (#2079)

Bug Fixes

remove unneeded value in log message (#2282)

Add error message when computing consistency proof (#2278)

fix validation error handling on API (#2217)

fix error in pretty-printed inclusion proof from verify subcommand (#2210)

Fix index scripts (#2203)

fix failing sharding test

Better error handling in backfill script (#2148)

Batch entries in cleanup script (#2158)

Add missing workflow for index cleanup test (#2121)

hashedrekord: fix schema $id (#2092)

Contributors

Aditya Sirish

Bob Callaway

Colleen Murphy

cpanato

Firas Ghanmi

Hayden B

Hojoung (Brian) Jang

William Woodruff

Commits

4caadbc changelog for v1.3.7 (#2284)
9fddf00 log request body on 500 error to aid debugging (#2283)
92584b7 remove unneeded value in log message (#2282)
56ea4b5 Add error message when computing consistency proof (#2278)
3eb84f9 build(deps): Bump the all group with 2 updates
28aa29c build(deps): Bump google/cloud-sdk from 500.0.0 to 501.0.0
d7e2d1d build(deps): Bump codecov/codecov-action from 4.6.0 to 5.0.2
a018e78 build(deps): Bump google.golang.org/api from 0.205.0 to 0.206.0
38d5f67 build(deps): Bump golang from d56c3e0 to 73f06be
ded5cd1 build(deps): Bump google.golang.org/api from 0.204.0 to 0.205.0
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.9.0 to 1.10.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.10.0

What's Changed

Functional Changes

Add PanicAssertionFunc by @fahimbagar in stretchr/testify#1337

assert: deprecate CompareType by @dolmen in stretchr/testify#1566

assert: make YAML dependency pluggable via build tags by @dolmen in stretchr/testify#1579

assert: new assertion NotElementsMatch by @hendrywiranto in stretchr/testify#1600

mock: in order mock calls by @ReyOrtiz in stretchr/testify#1637

Add assertion for NotErrorAs by @palsivertsen in stretchr/testify#1129

Record Return Arguments of a Call by @jayd3e in stretchr/testify#1636

assert.EqualExportedValues: accepts everything by @redachl in stretchr/testify#1586

Fixes

assert: make tHelper a type alias by @dolmen in stretchr/testify#1562

Do not get argument again unnecessarily in Arguments.Error() by @TomWright in stretchr/testify#820

Fix time.Time compare by @myxo in stretchr/testify#1582

assert.Regexp: handle []byte array properly by @kevinburkesegment in stretchr/testify#1587

assert: collect.FailNow() should not panic by @marshall-lee in stretchr/testify#1481

mock: simplify implementation of FunctionalOptions by @dolmen in stretchr/testify#1571

mock: caller information for unexpected method call by @spirin in stretchr/testify#1644

suite: fix test failures by @stevenh in stretchr/testify#1421

Fix issue #1662 (comparing infs should fail) by @ybrustin in stretchr/testify#1663

NotSame should fail if args are not pointers #1661 by @sikehish in stretchr/testify#1664

Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI by @sikehish in stretchr/testify#1667

fix: compare functional option names for indirect calls by @arjun-1 in stretchr/testify#1626

Documantation, Build & CI

.gitignore: ignore "go test -c" binaries by @dolmen in stretchr/testify#1565

mock: improve doc by @dolmen in stretchr/testify#1570

mock: fix FunctionalOptions docs by @snirye in stretchr/testify#1433

README: link out to the excellent testifylint by @brackendawson in stretchr/testify#1568

assert: fix typo in comment by @JohnEndson in stretchr/testify#1580

Correct the EventuallyWithT and EventuallyWithTf example by @JonCrowther in stretchr/testify#1588

CI: bump softprops/action-gh-release from 1 to 2 by @dependabot in stretchr/testify#1575

mock: document more alternatives to deprecated AnythingOfTypeArgument by @dolmen in stretchr/testify#1569

assert: Correctly document EqualValues behavior by @brackendawson in stretchr/testify#1593

fix: grammar in godoc by @miparnisari in stretchr/testify#1607

.github/workflows: Run tests for Go 1.22 by @HaraldNordgren in stretchr/testify#1629

Document suite's lack of support for t.Parallel by @brackendawson in stretchr/testify#1645

assert: fix typos in comments by @alexandear in stretchr/testify#1650

mock: fix doc comment for NotBefore by @alexandear in stretchr/testify#1651

Generate better comments for require package by @Neokil in stretchr/testify#1610

README: replace Testify V2 notice with @dolmen's V2 manifesto by @hendrywiranto in stretchr/testify#1518

New Contributors

@fahimbagar made their first contribution in stretchr/testify#1337

@TomWright made their first contribution in stretchr/testify#820

@snirye made their first contribution in stretchr/testify#1433

@myxo made their first contribution in stretchr/testify#1582

@JohnEndson made their first contribution in stretchr/testify#1580

... (truncated)

Commits

89cbdd9 Merge pull request #1626 from arjun-1/fix-functional-options-diff-indirect-calls
07bac60 Merge pull request #1667 from sikehish/flaky
716de8d Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI
118fb83 NotSame should fail if args are not pointers #1661 (#1664)
7d99b2b attempt 2
05f87c0 more similar
ea7129e better fmt
a1b9c9e Merge pull request #1663 from ybrustin/master
8302de9 Merge branch 'master' into master
89352f7 Merge pull request #1518 from hendrywiranto/adjust-readme-remove-v2
Additional commits viewable in compare view

Updates github.com/tektoncd/pipeline from 0.65.0 to 0.65.2

Release notes

Sourced from github.com/tektoncd/pipeline's releases.

Tekton Pipeline release v0.65.2 "Sokoke Herbie"

-Docs @ v0.65.2 -Examples @ v0.65.2

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.65.2/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a153542f1de8a93c4ac314c1ca01c0ed45edf9ffac3faa701ddcd02600c3f452f

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a153542f1de8a93c4ac314c1ca01c0ed45edf9ffac3faa701ddcd02600c3f452f
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.65.2/release.yaml
REKOR_UUID=108e9186e8c5677a153542f1de8a93c4ac314c1ca01c0ed45edf9ffac3faa701ddcd02600c3f452f
Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.65.2@sha256:" + .digest.sha256')
Download the release file
curl "$RELEASE_FILE" > release.yaml
For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

... (truncated)

Commits

7b76131 Use io.ReadFull to read the bundle content
9664cb4 Fix StepAction support in Cluster resolver
58910a4 Fix number of completed and failed task in case of ValidationFailed
f32544a Remove permanent error and improve skip logic
b762df2 Exit reconcilation and markfailed if finally is not present
0f0eab9 Resolve review comments 1
c6b45b8 Run finally pipeline even if task is failed at the validation
eb1e38a Expose Resolvers Controller performance tuning configurations
See full diff in compare view

Updates golang.org/x/crypto from 0.28.0 to 0.29.0

Commits

6018723 go.mod: update golang.org/x dependencies
71ed71b README: don't recommend go get
750a45f sha3: add MarshalBinary, AppendBinary, and UnmarshalBinary
36b1725 sha3: avoid trailing permutation
80ea76e sha3: fix padding for long cSHAKE parameters
c17aa50 sha3: avoid buffer copy
7cfb916 ssh: return unexpected msg error when server fails keyboard-interactive auth ...
b61b08d chacha20: extend ppc64le support to ppc64
6c21748 internal/poly1305: extend ppc64le support to ppc64
See full diff in compare view

Updates golang.org/x/exp from 0.0.0-20240904232852-e7e105dedf7e to 0.0.0-20240909161429-701f63a606c0

Commits

See full diff in compare view

Updates google.golang.org/grpc from 1.67.1 to 1.68.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.68.0

Known Issues

The recently added grpc.NewClient function is incompatible with forward proxies, because it resolves the target hostname on the client instead of passing the hostname to the proxy. This bug has been present since the introduction of NewClient. A fix is expected to be a part of grpc-go v1.69. (#7556)

Behavior Changes

stats/opentelemetry/csm: Get mesh_id local label from "CSM_MESH_ID" environment variable, rather than parsing from bootstrap file (#7740)

orca (experimental): if using an ORCA listener, it must now be registered only on a READY SubConn, and the listener will automatically be stopped when the connection is lost. (#7663)

client: ClientConn.Close() now closes transports simultaneously and waits for transports to be closed before returning. (#7666)

credentials: TLS credentials created via NewTLS that use tls.Config.GetConfigForClient will now have CipherSuites, supported TLS versions and ALPN configured automatically. These were previously only set for configs not using the GetConfigForClient option. (#7709)

Bug Fixes

transport: prevent deadlock in client transport shutdown when writing the GOAWAY frame hangs. (#7662)

mem: reuse buffers more accurately by using slice capacity instead of length (#7702)

Special Thanks: @PapaCharlie

status: Fix regression caused by #6919 in status.Details() causing it to return a wrapped type when getting proto messages generated with protoc-gen-go < v1. (#7724)

Dependencies

Bump minimum supported Go version to go1.22.7. (#7624)

Commits

acba4d3 Change version to 1.68.0 (#7743)
5363dca credentials: Apply defaults to TLS configs provided through GetConfigForClien...
056dc64 status: Fix status incompatibility introduced by #6919 and move non-regenerat...
b79fb61 mem: use slice capacity instead of length, to determine whether to pool buffe...
54841ef stats/opentelemetry/csm: Get mesh_id local label from "CSM_MESH_ID" environme...
ad81c20 pickfirstleaf: minor simplification to reconcileSubConnsLocked method (#7731)
b850ea5 transport : wait for goroutines to exit before transport closes (#7666)
00b9e14 pickfirst: New pick first policy for dualstack (#7498)
18a4eac testutils: add couple of log statements to the restartable listener type (#7716)
fdc2ec2 xdsclient: deflake TestADS_ResourcesAreRequestedAfterStreamRestart (#7720)
Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.35.1 to 1.35.2

Updates k8s.io/api from 0.31.2 to 0.31.3

Commits

b7783ab Update dependencies to v0.31.3 tag
See full diff in compare view

Updates k8s.io/apimachinery from 0.31.2 to 0.31.3

Commits

See full diff in compare view

Updates k8s.io/client-go from 0.31.2 to 0.31.3

Commits

ef98edc Update dependencies to v0.31.3 tag
See full diff in compare view

Updates k8s.io/code-generator from 0.31.2 to 0.31.3

Commits

86c3401 Update dependencies to v0.31.3 tag
See full diff in compare view

Most Recent Ignore Conditions Applied to This Pull Request

Dependency Name	Ignore Conditions
k8s.io/apimachinery	[>= 0.23.a, < 0.24]

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.46.0` | `1.47.0` | | [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) | `1.61.0` | `1.62.2` | | [github.com/sigstore/rekor](https://github.com/sigstore/rekor) | `1.3.6` | `1.3.7` | | [github.com/tektoncd/pipeline](https://github.com/tektoncd/pipeline) | `0.65.0` | `0.65.2` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.31.2` | `0.31.3` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.31.2` | `0.31.3` | | [k8s.io/code-generator](https://github.com/kubernetes/code-generator) | `0.31.2` | `0.31.3` | Updates `cloud.google.com/go/storage` from 1.46.0 to 1.47.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@spanner/v1.46.0...spanner/v1.47.0) Updates `github.com/golangci/golangci-lint` from 1.61.0 to 1.62.2 - [Release notes](https://github.com/golangci/golangci-lint/releases) - [Changelog](https://github.com/golangci/golangci-lint/blob/master/CHANGELOG.md) - [Commits](golangci/golangci-lint@v1.61.0...v1.62.2) Updates `github.com/sigstore/rekor` from 1.3.6 to 1.3.7 - [Release notes](https://github.com/sigstore/rekor/releases) - [Changelog](https://github.com/sigstore/rekor/blob/main/CHANGELOG.md) - [Commits](sigstore/rekor@v1.3.6...v1.3.7) Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.9.0...v1.10.0) Updates `github.com/tektoncd/pipeline` from 0.65.0 to 0.65.2 - [Release notes](https://github.com/tektoncd/pipeline/releases) - [Changelog](https://github.com/tektoncd/pipeline/blob/main/releases.md) - [Commits](tektoncd/pipeline@v0.65.0...v0.65.2) Updates `golang.org/x/crypto` from 0.28.0 to 0.29.0 - [Commits](golang/crypto@v0.28.0...v0.29.0) Updates `golang.org/x/exp` from 0.0.0-20240904232852-e7e105dedf7e to 0.0.0-20240909161429-701f63a606c0 - [Commits](https://github.com/golang/exp/commits) Updates `google.golang.org/grpc` from 1.67.1 to 1.68.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.67.1...v1.68.0) Updates `google.golang.org/protobuf` from 1.35.1 to 1.35.2 Updates `k8s.io/api` from 0.31.2 to 0.31.3 - [Commits](kubernetes/api@v0.31.2...v0.31.3) Updates `k8s.io/apimachinery` from 0.31.2 to 0.31.3 - [Commits](kubernetes/apimachinery@v0.31.2...v0.31.3) Updates `k8s.io/client-go` from 0.31.2 to 0.31.3 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.31.2...v0.31.3) Updates `k8s.io/code-generator` from 0.31.2 to 0.31.3 - [Commits](kubernetes/code-generator@v0.31.2...v0.31.3) --- updated-dependencies: - dependency-name: cloud.google.com/go/storage dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/golangci/golangci-lint dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/sigstore/rekor dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: github.com/tektoncd/pipeline dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: golang.org/x/exp dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: google.golang.org/grpc dependency-type: direct:production update-type: version-update:semver-minor dependency-group: all - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/api dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/apimachinery dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/client-go dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all - dependency-name: k8s.io/code-generator dependency-type: direct:production update-type: version-update:semver-patch dependency-group: all ... Signed-off-by: dependabot[bot] <[email protected]>

tekton-robot · 2024-11-25T14:51:47Z

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a tektoncd member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

lcarva

/lgtm

tekton-robot · 2024-11-25T14:53:42Z

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: lcarva

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

~~OWNERS~~ [lcarva]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

tekton-robot requested review from chitrangpatel and wlynch November 25, 2024 14:51

tekton-robot added the size/XL Denotes a PR that changes 500-999 lines, ignoring generated files. label Nov 25, 2024

lcarva approved these changes Nov 25, 2024

View reviewed changes

tekton-robot assigned lcarva Nov 25, 2024

tekton-robot added the lgtm Indicates that a PR is ready to be merged. label Nov 25, 2024

tekton-robot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Nov 25, 2024

lcarva merged commit a01211b into main Nov 25, 2024

dependabot bot deleted the dependabot/go_modules/all-c8ae93aa78 branch November 25, 2024 17:29

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the all group across 1 directory with 13 updates#1257

Bump the all group across 1 directory with 13 updates#1257
lcarva merged 1 commit intomainfrom
dependabot/go_modules/all-c8ae93aa78

dependabot bot commented on behalf of github Nov 25, 2024

Uh oh!

tekton-robot commented Nov 25, 2024

Uh oh!

lcarva left a comment

Uh oh!

tekton-robot commented Nov 25, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

dependabot bot commented on behalf of github Nov 25, 2024

storage: v1.47.0

1.47.0 (2024-11-14)

Features

Bug Fixes

v1.62.2

Changelog

v1.62.0

Changelog

v1.62.2

v1.62.1

v1.62.0

v1.3.7

Changelog

Thanks for all contributors!

v1.3.7

New Features

Bug Fixes

Contributors

v1.10.0

What's Changed

Functional Changes

Fixes

Documantation, Build & CI

New Contributors

Tekton Pipeline release v0.65.2 "Sokoke Herbie"

Installation one-liner

Attestation

Changes

Features

Release 1.68.0

Known Issues

Behavior Changes

Bug Fixes

Dependencies

Uh oh!

tekton-robot commented Nov 25, 2024

Uh oh!

lcarva left a comment

Choose a reason for hiding this comment

Uh oh!

tekton-robot commented Nov 25, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants