Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🌱 Update Builder Image group #270

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

cluster-stack-bot[bot]
Copy link
Contributor

@cluster-stack-bot cluster-stack-bot bot commented Jan 1, 2025

This PR contains the following updates:

Package Type Update Change
docker.io/aquasec/trivy (source) stage minor 0.57.1 -> 0.58.1
docker.io/library/alpine stage minor 3.20.3 -> 3.21.1
docker.io/library/golang final patch 1.23.3-bullseye -> 1.23.4-bullseye
golangci/golangci-lint minor v1.62.2 -> v1.63.4
helm/helm patch v3.16.3 -> v3.16.4

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

aquasecurity/trivy (docker.io/aquasec/trivy)

v0.58.1

Compare Source

⚡Release highlights and summary⚡

👉 https://github.com/aquasecurity/trivy/discussions/8171

Changelog

https://github.com/aquasecurity/trivy/blob/release/v0.58/CHANGELOG.md#0581-2024-12-24

v0.58.0

Compare Source

Features
Bug Fixes
golangci/golangci-lint (golangci/golangci-lint)

v1.63.4

Compare Source

  1. Linters bug fixes
    • dupl, gomodguard, revive: keep only Go-files.

v1.63.3

Compare Source

  1. Linters bug fixes
    • gofmt, gofumpt, goimports, gci: panic with several trailing EOL
    • goheader: skip issues with invalid positions

v1.63.2

Compare Source

  1. Linters bug fixes
    • gofmt, gofumpt, goimports, gci: panic with missing trailing EOL

v1.63.1

Compare Source

  1. Linters bug fixes
    • cgi: invalid reports with cgo
    • gofumpt: panic with autofix and cgo

v1.63.0

Compare Source

  1. Enhancements
    • Add support for SuggestedFixes 🎉 (35 linters can "autofix" reports).
    • Formatters (gofmt, goimports, gofumpt, gci) are applied after the suggested fixes.
  2. New linters
  3. Linters new features
    • gci: new options: no-inline-comments, no-prefix-comments
    • gomoddirectives: from 0.2.4 to 0.6.0 (new options: go-version-pattern, toolchain-pattern,toolchain-forbidden, tool-forbidden, go-debug-forbidden)
    • govet: new stdversion, waitgroup analyzers
    • importas: allow multiple empty aliases
    • loggercheck: new slog option
    • recvcheck: from 0.1.2 to 0.2.0 (new options: disable-builtin, exclusions)
    • tagliatelle: from 0.5.0 to 0.7.1 (new options: ignored-fields, extended-rules,overrides, pkg, ignore)
    • usestdlibvars: from 1.27.0 to 1.28.0 (autofix)
    • wrapcheck: from 2.9.0 to 2.10.0 (new option: extra-ignore-sigs)
  4. Linters bug fixes
    • asciicheck: from 0.2.0 to 0.3.0
    • bodyclose: from 5742072 to ed6a65f
    • funlen: from 0.1.0 to 0.2.0
    • ginkgolinter: from 0.18.3 to 0.18.4
    • gochecksumtype: from 0.2.0 to 0.3.1
    • gocognit: from 1.1.3 to 1.2.0
    • godot: from 1.4.18 to 1.4.20
    • goheader: report position improvement
    • gosec: handling of global nosec option when it is false
    • iface: from 1.2.1 to 1.3.0
    • importas: from 0.1.0 to 0.2.0
    • intrange: from 0.2.1 to 0.3.0
    • makezero: from 1.1.1 to 1.2.0
    • mirror: from 1.2.0 to 1.3.0
    • nilnil: from 1.0.0 to 1.0.1
    • nosprintfhostport: from 0.1.1 to 0.2.0
    • reassign: from 0.2.0 to 0.3.0
    • spancheck: from 0.6.2 to 0.6.4
    • tagalign: from 1.3.4 to 1.4.1
    • wastedassign: from 2.0.7 to 2.1.0
    • whitespace: from 0.1.1 to 0.2.0
    • wsl: from 4.4.1 to 4.5.0
  5. Deprecations
    • ⚠️ output.uniq-by-line is deprecated and replaced by issues.uniq-by-line.
  6. Misc.
    • Improvements of the help command (color and JSON support).
    • Removes decoder, sloglint, tagalin from format preset.
    • Enables paths with junction inside Windows.
    • The timeout is disabled if run.timeout <= 0.
helm/helm (helm/helm)

v3.16.4: Helm v3.16.4

Compare Source

Helm v3.16.4 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.16.4. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.17.0 is the next feature release and will be on January 15, 2025

Changelog

  • Bump golang.org/x/crypto from 0.30.0 to 0.31.0 7877b45 (dependabot[bot])
  • Bump the k8s-io group with 7 updates 848e586 (dependabot[bot])

Configuration

📅 Schedule: Branch creation - "on the first day of the month" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

| datasource  | package                  | from    | to      |
| ----------- | ------------------------ | ------- | ------- |
| docker      | docker.io/aquasec/trivy  | 0.57.1  | 0.58.1  |
| docker      | docker.io/library/alpine | 3.20.3  | 3.21.1  |
| docker      | docker.io/library/golang | 1.23.3  | 1.23.4  |
| github-tags | golangci/golangci-lint   | v1.62.2 | v1.63.4 |
| github-tags | helm/helm                | v3.16.3 | v3.16.4 |
@cluster-stack-bot cluster-stack-bot bot force-pushed the renovate/cso-builder-image branch from d72f8ce to 0b0d193 Compare January 7, 2025 11:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants