Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the go-dependencies group across 1 directory with 4 updates #379

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 13, 2024

Bumps the go-dependencies group with 2 updates in the / directory: go.pinniped.dev and google.golang.org/protobuf.

Updates go.pinniped.dev from 0.29.0 to 0.30.0

Release notes

Sourced from go.pinniped.dev's releases.

v0.30.0

Release v0.30.0

Release Image

Image Registry
ghcr.io/vmware-tanzu/pinniped/pinniped-server:v0.30.0 GitHub Container Registry
docker.io/getpinniped/pinniped-server:v0.30.0 DockerHub

These images can also be referenced by their digest: sha256:3955ac6e04db6b87fb992e08302ca9080f1dcfc340deacc82f0f0f4687d535b6.

Changes

This release includes several new features and upgrades also upgrades all project dependencies.

Minor Changes

  • Added new option to OIDCClient resource to allow configuration of ID token lifetime for tokens issued by authcode flows and refresh flows. See OIDCClient.spec.tokenLifetimes.idTokenSeconds in the API docs. (#1914)
  • Setting the new env var PINNIPED_SKIP_PRINT_LOGIN_URL=true will cause the Pinniped CLI to skip printing the login URL when a browser has launched, which can be useful when using console UIs like k9s. (#1938, #1897)
  • WebhookAuthenticator resources will have detailed status written to them automatically, to aid in debugging. (#1894)
  • WebhookAuthenticators now honor Pinniped's preferred client TLS configuration, including its preferred allowed TLS v1.2 ciphers. This could be a breaking change if your webhook server is serving requests using only TLS v1.2 (not allowing TLS v1.3) and does not allow any of Pinniped's preferred TLS v1.2 ciphers. Note that Pinniped's preferred TLS v1.2 cipher list is different depending on if it was compiled in FIPS compatibility mode or not. (#1917)
  • Removed all deprecated deployment options from ytt templates. (#1926)
  • Clarified the text in some error messages. (#1932, #1922)
  • Added documentation to provide some debugging tips. (#1936, #1904, #1824)
  • Updates Go to v1.22.3, updates the Kubernetes libraries to v0.30.0, and updates all other project dependencies. (#1940, #1937, #1935, #1934, #1933, #1931, #1921, #1916, #1913, #1911, #1902, #1899)

Diffs

A complete list of changes (101 commits, 768 changed files with 33,015 additions and 64,816 deletions) can be found here.

Commits
  • ca6a60b Merge pull request #1940 from vmware-tanzu/pinny/bump-deps
  • 9975562 Bump dependencies
  • bc5eb3c Merge pull request #1938 from vmware-tanzu/skip_auth_url_also_skips_authcode_...
  • c86a615 CLI also skips authcode prompt when PINNIPED_SKIP_PRINT_LOGIN_URL=true
  • c494add Merge pull request #1937 from vmware-tanzu/pinny/bump-deps
  • f94b1e7 Bump dependencies
  • 42ed11a Merge pull request #1936 from vmware-tanzu/doc_goland
  • a7c6c43 Merge branch 'main' into doc_goland
  • 17d6def Merge pull request #1935 from vmware-tanzu/pinny/bump-deps
  • 73e7aec add doc for how to use GoLand to run integration tests
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.19.0 to 0.20.0

Commits
  • 84cb9f7 oauth2: fix typo in comment
  • 4b7f0bd go.mod: update cloud.google.com/go/compute/metadata dependency
  • e11eea8 microsoft: added DeviceAuthURL to AzureADEndpoint
  • See full diff in compare view

Updates golang.org/x/term from 0.19.0 to 0.20.0

Commits

Updates google.golang.org/protobuf from 1.34.0 to 1.34.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 2 updates in the / directory: [go.pinniped.dev](https://github.com/vmware-tanzu/pinniped) and google.golang.org/protobuf.


Updates `go.pinniped.dev` from 0.29.0 to 0.30.0
- [Release notes](https://github.com/vmware-tanzu/pinniped/releases)
- [Commits](vmware-tanzu/pinniped@v0.29.0...v0.30.0)

Updates `golang.org/x/oauth2` from 0.19.0 to 0.20.0
- [Commits](golang/oauth2@v0.19.0...v0.20.0)

Updates `golang.org/x/term` from 0.19.0 to 0.20.0
- [Commits](golang/term@v0.19.0...v0.20.0)

Updates `google.golang.org/protobuf` from 1.34.0 to 1.34.1

---
updated-dependencies:
- dependency-name: go.pinniped.dev
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from pnickolov as a code owner May 13, 2024 01:33
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 13, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github May 20, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this May 20, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go-dependencies-d8f6ff6b47 branch May 20, 2024 01:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants