chore(deps): bump the go group across 1 directory with 18 updates #87

dependabot · 2024-06-02T06:27:48Z

Bumps the go group with 7 updates in the / directory:

Package	From	To
code.gitea.io/sdk/gitea	`0.17.1`	`0.18.0`
github.com/fluxcd/flux2/v2	`2.2.3`	`2.3.0`
github.com/open-component-model/git-controller	`0.8.0`	`0.12.1`
github.com/open-component-model/ocm	`0.8.0`	`0.10.0`
github.com/open-component-model/replication-controller	`0.7.0`	`0.13.1`
sigs.k8s.io/e2e-framework	`0.2.0`	`0.4.0`
github.com/open-component-model/ocm-controller	`0.19.0`	`0.21.4`

Updates code.gitea.io/sdk/gitea from 0.17.1 to 0.18.0

Updates github.com/fluxcd/flux2/v2 from 2.2.3 to 2.3.0

Release notes

Sourced from github.com/fluxcd/flux2/v2's releases.

v2.3.0

Highlights

Flux v2.3.0 is a feature release. Users are encouraged to upgrade for the best experience.

For a compressive overview of new features and API changes included in this release, please refer to the Announcing Flux 2.3 GA blog post.

This release marks the General Availability (GA) of Flux Helm features and APIs, including helm-controller, the HelmRelease, HelmChart, and HelmRepository APIs.

The HelmRepository v2 API comes with new features, such as the ability to reference Helm charts from OCIRepository sources, reuse existing HelmChart resources, and verify the integrity of Helm chart artifacts signed with Notary Notation.

❤️ Big thanks to all the Flux contributors that helped us with this release!

Kubernetes compatibility

This release is compatible with the following Kubernetes versions:

Kubernetes version Minimum required

v1.28 >= 1.28.0

v1.29 >= 1.29.0

v1.30 >= 1.30.0

[!NOTE] Note that the Flux project offers support only for the latest three minor versions of Kubernetes. Backwards compatibility with older versions of Kubernetes and OpenShift is offered by vendors such as ControlPlane that provide enterprise support for Flux.

API changes

HelmRelease v2

The HelmRelease kind was promoted from v2beta2 to v2 (GA).

The v2 API is backwards compatible with v2beta2, with the exception of the deprecated fields which have been removed.

Removed fields:

.spec.chart.spec.valuesFile replaced by .spec.chart.spec.valuesFiles.

.spec.postRenderers.kustomize.patchesJson6902 replaced by .spec.postRenderers.kustomize.patches.

.spec.postRenderers.kustomize.patchesStrategicMerge replaced by .spec.postRenderers.kustomize.patches.

.status.lastAppliedRevision replaced by .status.history.chartVersion.

New fields:

.spec.chartRef allows referencing chart artifacts from OCIRepository and HelmChart objects.

.spec.chart.spec.ignoreMissingValuesFiles allows ignoring missing values files instead of failing to reconcile.

HelmChart v1

... (truncated)

Commits

896e0fa Merge pull request #4785 from fluxcd/dependabot/github_actions/ci-f6abfb4cf0
8d75df8 build(deps): bump the ci group with 3 updates
dd7ef7d Merge pull request #4766 from fluxcd/reconcile-hr-with-chartref
5feee5c Add support for creating HR with .spec.ChartRef
0d0285a Enable reconciling HelmReleases with ChartRef
86b3581 Merge pull request #4783 from fluxcd/conformance-tests
32804f6 ci: Consolidate conformance tests
070fa0f Merge pull request #4781 from fluxcd/drop-kubernetes-eol
9ef9464 Update kubectl to 1.30.0 in flux-cli image
d8e6199 Set Kubernetes 1.28 as min required version
Additional commits viewable in compare view

Updates github.com/fluxcd/helm-controller/api from 0.37.4 to 1.0.1

Release notes

Sourced from github.com/fluxcd/helm-controller/api's releases.

v1.0.1

Changelog

v1.0.1 changelog

Container images

docker.io/fluxcd/helm-controller:v1.0.1

ghcr.io/fluxcd/helm-controller:v1.0.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.0.0

Changelog

v1.0.0 changelog

Container images

docker.io/fluxcd/helm-controller:v1.0.0

ghcr.io/fluxcd/helm-controller:v1.0.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/helm-controller/api's changelog.

1.0.1

Release date: 2024-05-10

This prerelease fixes a backwards compatibility issue that could occur when trying to move from the v2beta1 to v2 API while specifing .spec.chartRef.

Fixes:

Fix: Allow upgrading from v2beta1 to v2 (GA) #982

Fix: Make HelmChartTemplate a pointer in .spec.chart #980

1.0.0

Release date: 2024-05-08

This is the general availability release of helm-controller. From now on, this controller follows the Flux release cadence and support pledge.

This release promotes the HelmRelease API from v2beta2 to v2 (GA), and comes with new features, improvements and bug fixes.

In addition, the controller has been updated to Kubernetes v1.30.0, Helm v3.14.4, and various other dependencies to their latest version to patch upstream CVEs.

Highlights

The helm.toolkit.fluxcd.io/v2 API comes with a new field .spec.chartRef that adds support for referencing OCIRepository and HelmChart objects in a HelmRelease. When using .spec.chartRef instead of .spec.chart, the controller allows the reuse of a Helm chart version across multiple HelmRelease resources.

The notification mechanism has been improved to provide more detailed metadata in the notification payload. The controller now annotates the Kubernetes events with the appVersion and version of the Helm chart, and the oci digest of the chart artifact when available.

Helm OCI support

Starting with this version, the recommended way of referencing Helm charts stored in container registries is through OCIRepository.

The OCIRepository provides more flexibility in managing Helm charts, as it allows targeting a Helm chart version by tag, semver or OCI digest. It also provides a way to filter semver tags, allowing targeting a specific version range e.g. pre-releases only, patch versions, etc.

... (truncated)

Commits

6085b4f Merge pull request #984 from fluxcd/release-v1.0.1
671a274 Release v1.0.1
964e750 Add changelog entry for v1.0.1
1a7e9ac Merge pull request #983 from fluxcd/backport-982-to-release/v1.0.x
2299ec1 Fix: Allow upgrading from v2beta1 to v2 (GA)
c811cca Merge pull request #981 from fluxcd/backport-980-to-release/v1.0.x
21136d3 Make chartTemplate a pointer in .spec.chart
519df15 Merge branch 'main' into release/v1.0.x
cee9953 Merge pull request #971 from fluxcd/release-v1.0.0
93702c7 Release v1.0.0
Additional commits viewable in compare view

Updates github.com/fluxcd/image-automation-controller/api from 0.37.1 to 0.38.0

Release notes

Sourced from github.com/fluxcd/image-automation-controller/api's releases.

v0.38.0

Changelog

v0.38.0 changelog

Container images

docker.io/fluxcd/image-automation-controller:v0.38.0

ghcr.io/fluxcd/image-automation-controller:v0.38.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/image-automation-controller/api's changelog.

0.38.0

Release date: 2024-05-06

This prerelease graduates the ImageUpdateAutomation API to v1beta2.

image.toolkit.fluxcd.io/v1beta2

After upgrading the controller to v0.38.0, please update the ImageUpdateAutomation Custom Resources in Git by replacing image.toolkit.fluxcd.io/v1beta1 with image.toolkit.fluxcd.io/v1beta2 in all YAML manifests. Bumping the API version in manifests can be done gradually. It is advised not to delay this procedure as the v1beta1 version will be removed after 6 months.

Highlights

New API specification format

The specification for the v1beta2 API has been written in a new format with the aim to be more valuable to a user. Featuring separate sections with examples, and information on how to write and work with them.

New template data Changed and deprecation of Updated

A new Git commit message template data named Changed is introduced to replace Updated template data. Changed is designed to accommodate for all the types of updates made by ImaegUpdateAutomation, unlike only full image reference updates captured by Updated. The message template can now be used to render the old and new values for better presentation of the updates. For example:
Automation: default/test-update-auto


File: foo-deployment.yaml

Object: Deployment/default/foo
Changes:

2.2.2 -> 5.0.3





File: podinfo-deployment.yaml

Object: Deployment/default/infopod
Changes:

v1.0 -> 5.0.3


Object: Deployment/default/podinfo
Changes:

ghcr.io/stefanprodan/podinfo:4.0.6 -> ghcr.io/stefanprodan/podinfo:5.0.3
bar -> ghcr.io/stefanprodan/podinfo
4.0.6 -> 5.0.3
</tr></table>

... (truncated)

Commits

e093c3e Merge pull request #678 from fluxcd/release-0.38.0
e028cd9 Release v0.38.0
ec6d687 Merge pull request #677 from fluxcd/deprecate-v1beta1
785b5f7 Deprecate v1beta1 API
8743ead Merge pull request #676 from fluxcd/source-controller-1.3.0
e722b5f Update source-controller API to v1.3.0
2948f7a Merge pull request #673 from fluxcd/dependabot/github_actions/ci-f58ac10077
7c2a8f6 build(deps): bump the ci group across 1 directory with 3 updates
79788ab Merge pull request #670 from fluxcd/kubernetes-1.30
96898c9 Update dependencies to Kubernetes 1.30
Additional commits viewable in compare view

Updates github.com/fluxcd/image-reflector-controller/api from 0.31.2 to 0.32.0

Release notes

Sourced from github.com/fluxcd/image-reflector-controller/api's releases.

v0.32.0

Changelog

v0.32.0 changelog

Container images

docker.io/fluxcd/image-reflector-controller:v0.32.0

ghcr.io/fluxcd/image-reflector-controller:v0.32.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/image-reflector-controller/api's changelog.

0.32.0

Release date: 2024-05-06

This prerelease comes with an update to the Kubernetes dependencies to v1.30.0 and various other controller dependencies have been updated to their latest version. In addition, the controller is now built with Go 1.22.

Improvements:

docs: Remove references to aad pod identity #557

Update dependencies to Kubernetes 1.30 #551

Add note to restart image-reflector-controller after AWS IAM role change #508

Update dependencies to Go 1.22 and Kubernetes 1.29.3 #535

updating controller-gen to v0.14.0 #519

Add ImageRepository TLS test #511

Various dependency updates #504 #515 #529 #534 #538 #549 #546 #545 #544 #553 #555

Commits

c06e82b Merge pull request #559 from fluxcd/release-v0.32.0
84e96db Merge pull request #558 from fluxcd/controller-runtime-0.18.1
100c7a2 Update dependencies
6853d9a Merge pull request #555 from fluxcd/dependabot/github_actions/ci-b23e0286c6
840ae2d build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 in the ci group
ff3fe89 Merge pull request #557 from dipti-pai/remove-deprecated-aad-podidentity-ref
9f84191 Remove references aad pod identity
6d05554 Merge pull request #553 from fluxcd/dependabot/github_actions/ci-3daa6e97ec
aa59b19 build(deps): bump the ci group across 1 directory with 3 updates
4b070fe Merge pull request #551 from fluxcd/kubernetes-1.30
Additional commits viewable in compare view

Updates github.com/fluxcd/kustomize-controller/api from 1.2.2 to 1.3.0

Release notes

Sourced from github.com/fluxcd/kustomize-controller/api's releases.

v1.3.0

Changelog

v1.3.0 changelog

Container images

docker.io/fluxcd/kustomize-controller:v1.3.0

ghcr.io/fluxcd/kustomize-controller:v1.3.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/kustomize-controller/api's changelog.

1.3.0

Release date: 2024-05-06

This minor release comes with new features, improvements and bug fixes.

The controller has been updated to Kustomize v5.4, please see the kubernetes-sigs/kustomize changelog for more details.

The Flux Kustomization API gains two optional fields .spec.namePrefix and .spec.nameSuffix that can be used to specify a prefix and suffix to be added to the names of all managed resources.

The controller now supports the --feature-gates=StrictPostBuildSubstitutions=true flag, when enabled the post-build substitutions will fail if a variable without a default value is declared in files but is missing from the input vars.

When using variable substitution with values that are numbers or booleans, it is now possible to covert the values to strings, for more details see the post-build documentation.

In addition, the controller dependencies have been updated to Kubernetes v1.30 and controller-runtime v0.18. Various other dependencies have also been updated to their latest version to patch upstream CVEs.

Lastly, the controller is now built with Go 1.22.

Improvements:

Implement name prefix/suffix transformers #1134

Add StrictPostBuildSubstitutions feature flag #1130

Document how to use numbers and booleans in post build substitutions #1129

Remove deprecated aad pod identity from API docs #1152

api: Refer condition type constants from fluxcd/pkg/apis #1144

Update dependencies to Kustomize v5.4.0 #1128

Various dependency updates #1155 #1121 #1139 #1122

Fixes:

Fix requeue warning introduced by controller-runtime

... (truncated)

Commits

83fbfee Merge pull request #1157 from fluxcd/release-v1.3.0
458d7e2 Release v1.3.0
4a02b3f Add changelog entry for v1.3.0
882f6a7 Merge pull request #1154 from fluxcd/dependabot/github_actions/ci-b23e0286c6
dfcd4ed Merge pull request #1155 from fluxcd/source-controller-1.3.0
e81120a build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 in the ci group
780954f Update source-controller API to v1.3.0
99792de Merge pull request #1152 from dipti-pai/remove-deprecated-aad-podidentity-ref
fc663de Remove references aad pod identity
f0f9b03 Merge pull request #1149 from fluxcd/dependabot/github_actions/ci-cfa2b75493
Additional commits viewable in compare view

Updates github.com/fluxcd/notification-controller/api from 1.2.4 to 1.3.0

Release notes

Sourced from github.com/fluxcd/notification-controller/api's releases.

v1.3.0

Changelog

v1.3.0 changelog

Container images

docker.io/fluxcd/notification-controller:v1.3.0

ghcr.io/fluxcd/notification-controller:v1.3.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/notification-controller/api's changelog.

1.3.0

Release date: 2024-05-06

This minor release comes with new features, improvements and bug fixes.

The Receiver API has been extended to support CDEvents, for more information, please see the CDEvents Receiver API documentation.

Starting with this version, the controller allows grouping alerts for Alertmanager by setting the startsAt label instead of timestamp. When sending alerts to OpsGenie, the controller now sets the severity field to the alert's details.

In addition, the controller dependencies have been updated to Kubernetes v1.30 and controller-runtime v0.18. Various other dependencies have also been updated to their latest version to patch upstream CVEs.

Lastly, the controller is now built with Go 1.22.

Improvements:

Add CDEvent Receiver Support #772

Add severity to opsgenie alerts #796

Alertmanager: Change timestamp label to .StartsAt #795

Use password as fallback for the Git provider token auth #790

Add support for Bitbucket Context path #747

Various dependency updates #816 #814 #813 #810 #809 #787 #783 #763

Fixes:

Sanitize provider data loaded from secret #789

Fix timeout propagation for alerts #757

Fix Telegram MarkdownV2 escaping #776

Remove genclient:Namespaced tag #749

Commits

e0a1f00 Merge pull request #817 from fluxcd/release-v1.3.0
a8f81b3 Release v1.3.0
696f065 Add changelog entry for v1.3.0
1b5dbd9 Merge pull request #816 from fluxcd/dependabot/go_modules/go-deps-9d3f077bc0
5bfdcc0 build(deps): bump the go-deps group with 3 updates
5f0f561 Merge pull request #815 from fluxcd/dependabot/github_actions/ci-b23e0286c6
9a948c7 build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 in the ci group
b2c7992 Merge pull request #814 from fluxcd/update-apis
05abe0a Update runtime dependencies
3aba5bb Update Helm APIs to v1
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/apis/meta from 1.3.0 to 1.5.0

Commits

e32ccc2 Merge pull request #763 from fluxcd/kubernetes-1.30
2b974af Update sigs.k8s.io/controller-tools to v0.15.0
52c1fc5 Update sigs.k8s.io/controller-runtime to v0.18.0
c906252 Update dependencies to Kubernetes 1.30
92c1348 Merge pull request #764 from fluxcd/dependabot/github_actions/ci-e44cfae560
ccb916a build(deps): bump the ci group with 3 updates
6081556 Merge pull request #761 from fluxcd/kustomize-name-prefix-suffix
abf5675 kustomize: Add support for namePrefix and nameSuffix
98d2522 Merge pull request #760 from fluxcd/dependabot/github_actions/ci-8f082d4f6d
efcd824 build(deps): bump docker/setup-buildx-action in the ci group
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.44.1 to 0.47.1

Commits

adcfcbe Merge pull request #769 from fluxcd/controller-runtime-v0.18.1
0e74a82 Update runtime pkg docs
b329d92 Update dependencies to controller-runtime v0.18.1
d0bf8ed Merge pull request #768 from fluxcd/dependabot/github_actions/ci-b93eff89fb
14f05d7 build(deps): bump actions/checkout from 4.1.3 to 4.1.4 in the ci group
3790516 Merge pull request #767 from fluxcd/up-internal-deps
37ea30c Update internal dependencies
e32ccc2 Merge pull request #763 from fluxcd/kubernetes-1.30
2b974af Update sigs.k8s.io/controller-tools to v0.15.0
52c1fc5 Update sigs.k8s.io/controller-runtime to v0.18.0
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/ssa from 0.36.0 to 0.39.1

Commits

adcfcbe Merge pull request #769 from fluxcd/controller-runtime-v0.18.1
0e74a82 Update runtime pkg docs
b329d92 Update dependencies to controller-runtime v0.18.1
d0bf8ed Merge pull request #768 from fluxcd/dependabot/github_actions/ci-b93eff89fb
14f05d7 build(deps): bump actions/checkout from 4.1.3 to 4.1.4 in the ci group
3790516 Merge pull request #767 from fluxcd/up-internal-deps
37ea30c Update internal dependencies
e32ccc2 Merge pull request #763 from fluxcd/kubernetes-1.30
2b974af Update sigs.k8s.io/controller-tools to v0.15.0
52c1fc5 Update sigs.k8s.io/controller-runtime to v0.18.0
Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/version from 0.2.2 to 0.4.0

Commits

0d58ef4 Merge pull request #683 from fluxcd/update-deps
5505645 Update sigs.k8s.io/controller-runtime to v0.15.3
2d41523 Update k8s.io/* to v0.27.7
4c3b551 Update github.com/cyphar/filepath-securejoin
830e238 Update github.com/docker/docker across packages
7c5474c Update golang.org/x/net across packages
0b57897 Merge pull request #681 from fluxcd/tweak-file-perms
7dac171 *: change default permissions
9c506d6 Merge pull request #682 from fluxcd/oci-int-stop-exit-code
d29d25f oci/tests/int: Set exit code 1 on tf destroy fail
Additional commits viewable in compare view

Updates github.com/fluxcd/source-controller/api from 1.2.4 to 1.3.0

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.3.0

Changelog

v1.3.0 changelog

Container images

docker.io/fluxcd/source-controller:v1.3.0

ghcr.io/fluxcd/source-controller:v1.3.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.2.5

Changelog

v1.2.5 changelog

Container images

docker.io/fluxcd/source-controller:v1.2.5

ghcr.io/fluxcd/source-controller:v1.2.5

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.3.0

Release date: 2024-05-03

This minor release promotes the Helm APIs to GA, and comes with new features, improvements and bug fixes.

HelmRepository

The HelmRepository API has been promoted from v1beta2 to v1 (GA). The v1 API is backwards compatible with v1beta2.

For HelmRepository of type oci, the .spec.insecure field allows connecting over HTTP to an insecure non-TLS container registry.

To upgrade from v1beta2, after deploying the new CRD and controller, set apiVersion: source.toolkit.fluxcd.io/v1 in the YAML files that contain HelmRepository definitions. Bumping the API version in manifests can be done gradually. It is advised not to delay this procedure as the beta versions will be removed after 6 months.

HelmChart

The HelmChart API have been promoted from v1beta2 to v1 (GA). The v1 API is backwards compatible with v1beta2, with the exception of the removal of the deprecated field .spec.valuesFile which was replaced with spec.valuesFiles.

The HelmChart API was extended with support for Notation signature verification of Helm OCI charts.

A new optional field .spec.ignoreMissingValuesFiles has been added, which allows the controller to ignore missing values files rather than failing to reconcile the HelmChart.

OCIRepository

The OCIRepository API was extended with support for Notation signature verification of OCI artifacts.

A new optional field .spec.ref.semverFilter has been added, which allows the controller to filter the tags based on regular expressions before applying the semver range. This allows picking the latest release candidate instead of the latest stable release.

In addition, the controller has been updated to Kubernetes v1.30.0, Helm v3.14.4, and various other dependencies to their latest version to patch upstream CVEs.

... (truncated)

Commits

a80a99b Merge pull request #1472 from fluxcd/release-v1.3.0
70901f8 Release v1.3.0
05ab8b1 Add changelog entry for v1.3.0
c9bf167 Merge pull request #1298 from fluxcd/phony-build
cc3d495 ci: Print controller logs after e2e run
0bd5b95 Rename make target build to manager
edccfe9 Merge pull request #1470 from fluxcd/dependabot/github_actions/ci-b23e0286c6
9ce2d61 build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 in the ci group
16eeeef Merge pull request #1469 from fluxcd/dependabot/go_modules/go-deps-4411c5bc33
8598b8d build(deps): bump google.golang.org/api
Additional commits viewable in compare view

Updates github.com/open-component-model/git-controller from 0.8.0 to 0.12.1

Release notes

Sourced from github.com/open-component-model/git-controller's releases.

v0.12.1

Release 0.12.1

fix: add the right version in the image overlay for the deployment (#145)

chore: remove personal information (#139)

v0.12.0

Release 0.12.0

chore(deps): bump the go_modules group group with 3 updates (#135)

chore: update ocm to 0.8.0 and the controller to 0.19.0 (#134)

fix: correct position for security context (#133)

remove second trigger and just keep pull_request_target (#128)

Create codeql.yml (#125)

chore(deps): bump the ci group with 2 updates (#108)

chore(deps): bump github.com/containerd/containerd from 1.7.0 to 1.7.11 (#107)

chore(deps): bump github.com/go-git/go-git/v5 from 5.6.0 to 5.11.0 (#110)

chore(deps): bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 (#112)

v0.11.1

Release 0.11.1

Fix Path Bug (#101)

sec: zip-slip fix (#100)

v0.11.0

Release 0.11.0

dep: update ocm-controller to v0.18.1 (#96)

chore(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 (#87)

Skip Report generation on scheduled run + non PR runs (#92)

chore(deps): bump the ci group with 3 updates (#88)

Create dependabot.yml (#82)

feat: applying lint and fixing the lint issues (#86)

Add Reports to Mend Scans (#84)

docs: update the README and add relevant information (#85)

v0.10.1

Release 0.10.1

fix: removing reconciliation status (#83)

v0.10.0

Release 0.10.0

feat: apply kstatus feature from ocm-controller (#80)

chore(deps): bump golang.org/x/net from 0.13.0 to 0.17.0 (#69)

chore(deps): bump google.golang.org/grpc from 1.56.1 to 1.56.3 (#76)

add mend scans (#75)

update action versions (#74)

... (truncated)

Commits

bed5237 fix: add the right version in the image overlay for the deployment (#145)
7727ccc chore: remove personal information (#139)
c254731 chore: release docs for version v0.12.0 (#136)
315dad2 chore(deps): bump the go_modules group group with 3 updates (#135)
fbc6352 chore: update ocm to 0.8.0 and the controller to 0.19.0 (#134)
7e773db fix: correct position for security context (#133)
55dc985 remove second trigger and just keep pull_request_target (#128)
2132847 Merge pull request #125 from open-component-model/morri-son-patch-2
32f73fc Update .github/workflows/codeql.yml
1bef3ce Create codeql.yml
Additional commits viewable in compare view

Updates github.com/open-component-model/ocm from 0.8.0 to 0.10.0

Release notes

Sourced from github.com/open-component-model/ocm's releases.

v0.10.0

Release v0.10.0

externalize general go utilities in packages pkg{errors,exceptions,generics,finalizer} (#761)

Bump the go group with 12 updates (#768)

feat: add silent flag and fix dry run with prerequisites (#767)

let's get rid of reuse PendingDeprecationWarning (#765)

fix: stop ignoring most of the errors (#745)

feat: add uninstall command to the controller (#766)

Create codeql.yml (#764)

Npm/auth access (#757)

Bump the go group with 7 updates (#763)

Bump the ci group with 2 updates (#762)

Fix ocm issue 179, block in config yields invalid yaml (#734)

add cleanup to action for self hosted runner (#760)

add negative test for non-semver version (#759)

Don't Panik! (#758)

Bump the go group with 3 updates (#751)

Bump github.com/fluxcd/cli-utils from 0.36.0-flux.6 to 0.36.0-flux.7 (#752)

v0.9.0

Release v0.9.0

normalize order of used component lister results (#750)

eliminate dep from demo plugin to cli (#746)

Bump the go group across 1 directory with 3 updates (#748)

Bump g...
Description has been truncated

Bumps the go group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | code.gitea.io/sdk/gitea | `0.17.1` | `0.18.0` | | [github.com/fluxcd/flux2/v2](https://github.com/fluxcd/flux2) | `2.2.3` | `2.3.0` | | [github.com/open-component-model/git-controller](https://github.com/open-component-model/git-controller) | `0.8.0` | `0.12.1` | | [github.com/open-component-model/ocm](https://github.com/open-component-model/ocm) | `0.8.0` | `0.10.0` | | [github.com/open-component-model/replication-controller](https://github.com/open-component-model/replication-controller) | `0.7.0` | `0.13.1` | | [sigs.k8s.io/e2e-framework](https://github.com/kubernetes-sigs/e2e-framework) | `0.2.0` | `0.4.0` | | [github.com/open-component-model/ocm-controller](https://github.com/open-component-model/ocm-controller) | `0.19.0` | `0.21.4` | Updates `code.gitea.io/sdk/gitea` from 0.17.1 to 0.18.0 Updates `github.com/fluxcd/flux2/v2` from 2.2.3 to 2.3.0 - [Release notes](https://github.com/fluxcd/flux2/releases) - [Changelog](https://github.com/fluxcd/flux2/blob/main/.goreleaser.yml) - [Commits](fluxcd/flux2@v2.2.3...v2.3.0) Updates `github.com/fluxcd/helm-controller/api` from 0.37.4 to 1.0.1 - [Release notes](https://github.com/fluxcd/helm-controller/releases) - [Changelog](https://github.com/fluxcd/helm-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/helm-controller@v0.37.4...v1.0.1) Updates `github.com/fluxcd/image-automation-controller/api` from 0.37.1 to 0.38.0 - [Release notes](https://github.com/fluxcd/image-automation-controller/releases) - [Changelog](https://github.com/fluxcd/image-automation-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/image-automation-controller@v0.37.1...v0.38.0) Updates `github.com/fluxcd/image-reflector-controller/api` from 0.31.2 to 0.32.0 - [Release notes](https://github.com/fluxcd/image-reflector-controller/releases) - [Changelog](https://github.com/fluxcd/image-reflector-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/image-reflector-controller@v0.31.2...v0.32.0) Updates `github.com/fluxcd/kustomize-controller/api` from 1.2.2 to 1.3.0 - [Release notes](https://github.com/fluxcd/kustomize-controller/releases) - [Changelog](https://github.com/fluxcd/kustomize-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/kustomize-controller@v1.2.2...v1.3.0) Updates `github.com/fluxcd/notification-controller/api` from 1.2.4 to 1.3.0 - [Release notes](https://github.com/fluxcd/notification-controller/releases) - [Changelog](https://github.com/fluxcd/notification-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/notification-controller@v1.2.4...v1.3.0) Updates `github.com/fluxcd/pkg/apis/meta` from 1.3.0 to 1.5.0 - [Commits](fluxcd/pkg@apis/meta/v1.3.0...apis/meta/v1.5.0) Updates `github.com/fluxcd/pkg/runtime` from 0.44.1 to 0.47.1 - [Commits](fluxcd/pkg@runtime/v0.44.1...runtime/v0.47.1) Updates `github.com/fluxcd/pkg/ssa` from 0.36.0 to 0.39.1 - [Commits](fluxcd/pkg@oci/v0.36.0...ssa/v0.39.1) Updates `github.com/fluxcd/pkg/version` from 0.2.2 to 0.4.0 - [Commits](fluxcd/pkg@git/v0.2.2...tar/v0.4.0) Updates `github.com/fluxcd/source-controller/api` from 1.2.4 to 1.3.0 - [Release notes](https://github.com/fluxcd/source-controller/releases) - [Changelog](https://github.com/fluxcd/source-controller/blob/main/CHANGELOG.md) - [Commits](fluxcd/source-controller@v1.2.4...v1.3.0) Updates `github.com/open-component-model/git-controller` from 0.8.0 to 0.12.1 - [Release notes](https://github.com/open-component-model/git-controller/releases) - [Changelog](https://github.com/open-component-model/git-controller/blob/main/.goreleaser.yaml) - [Commits](open-component-model/git-controller@v0.8.0...v0.12.1) Updates `github.com/open-component-model/ocm` from 0.8.0 to 0.10.0 - [Release notes](https://github.com/open-component-model/ocm/releases) - [Changelog](https://github.com/open-component-model/ocm/blob/main/.goreleaser.yaml) - [Commits](open-component-model/ocm@v0.8.0...v0.10.0) Updates `github.com/open-component-model/replication-controller` from 0.7.0 to 0.13.1 - [Release notes](https://github.com/open-component-model/replication-controller/releases) - [Changelog](https://github.com/open-component-model/replication-controller/blob/main/.goreleaser.yaml) - [Commits](open-component-model/replication-controller@v0.7.0...v0.13.1) Updates `sigs.k8s.io/e2e-framework` from 0.2.0 to 0.4.0 - [Release notes](https://github.com/kubernetes-sigs/e2e-framework/releases) - [Changelog](https://github.com/kubernetes-sigs/e2e-framework/blob/main/RELEASE.md) - [Commits](kubernetes-sigs/e2e-framework@v0.2.0...v0.4.0) Updates `sigs.k8s.io/kustomize/api` from 0.16.0 to 0.17.1 - [Release notes](https://github.com/kubernetes-sigs/kustomize/releases) - [Commits](kubernetes-sigs/kustomize@api/v0.16.0...api/v0.17.1) Updates `github.com/open-component-model/ocm-controller` from 0.19.0 to 0.21.4 - [Release notes](https://github.com/open-component-model/ocm-controller/releases) - [Changelog](https://github.com/open-component-model/ocm-controller/blob/main/.goreleaser.yaml) - [Commits](open-component-model/ocm-controller@v0.19.0...v0.21.4) --- updated-dependencies: - dependency-name: code.gitea.io/sdk/gitea dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/flux2/v2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/helm-controller/api dependency-type: direct:production update-type: version-update:semver-major dependency-group: go - dependency-name: github.com/fluxcd/image-automation-controller/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/image-reflector-controller/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/kustomize-controller/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/notification-controller/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/pkg/apis/meta dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/pkg/runtime dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/pkg/ssa dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/pkg/version dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/fluxcd/source-controller/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/open-component-model/git-controller dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/open-component-model/ocm dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/open-component-model/replication-controller dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: sigs.k8s.io/e2e-framework dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: sigs.k8s.io/kustomize/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/open-component-model/ocm-controller dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-06-02T06:27:50Z

The following labels could not be found: go.

dependabot · 2024-06-09T06:16:30Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added the dependencies Pull requests that update a dependency file label Jun 2, 2024

dependabot bot closed this Jun 9, 2024

dependabot bot deleted the dependabot/go_modules/go-65be4ba016 branch June 9, 2024 06:16

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the go group across 1 directory with 18 updates #87

chore(deps): bump the go group across 1 directory with 18 updates #87

dependabot bot commented on behalf of github Jun 2, 2024 •

edited

Loading

dependabot bot commented on behalf of github Jun 2, 2024

dependabot bot commented on behalf of github Jun 9, 2024

chore(deps): bump the go group across 1 directory with 18 updates #87

chore(deps): bump the go group across 1 directory with 18 updates #87

Conversation

dependabot bot commented on behalf of github Jun 2, 2024 • edited Loading

v2.3.0

Highlights

Kubernetes compatibility

API changes

HelmRelease v2

HelmChart v1

v1.0.1

Changelog

Container images

v1.0.0

Changelog

Container images

1.0.1

1.0.0

Highlights

Helm OCI support

v0.38.0

Changelog

Container images

0.38.0

image.toolkit.fluxcd.io/v1beta2

Highlights

New API specification format

New template data Changed and deprecation of Updated

v0.32.0

Changelog

Container images

0.32.0

v1.3.0

Changelog

Container images

1.3.0

v1.3.0

Changelog

Container images

1.3.0

v1.3.0

Changelog

Container images

v1.2.5

Changelog

Container images

1.3.0

HelmRepository

HelmChart

OCIRepository

v0.12.1

Release 0.12.1

v0.12.0

Release 0.12.0

v0.11.1

Release 0.11.1

v0.11.0

Release 0.11.0

v0.10.1

Release 0.10.1

v0.10.0

Release 0.10.0

v0.10.0

v0.9.0

dependabot bot commented on behalf of github Jun 2, 2024

dependabot bot commented on behalf of github Jun 9, 2024

dependabot bot commented on behalf of github Jun 2, 2024 •

edited

Loading

`image.toolkit.fluxcd.io/v1beta2`

New template data `Changed` and deprecation of `Updated`