🌱 bump the dependencies group across 1 directory with 7 updates #5232
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the dependencies group with 6 updates in the /hack/tools directory: | Package | From | To | | --- | --- | --- | | [github.com/goreleaser/goreleaser](https://github.com/goreleaser/goreleaser) | `1.25.1` | `1.26.2` | | [github.com/itchyny/gojq](https://github.com/itchyny/gojq) | `0.12.15` | `0.12.16` | | [github.com/mikefarah/yq/v4](https://github.com/mikefarah/yq) | `4.43.1` | `4.44.5` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.31.0` | `0.31.3` | | [sigs.k8s.io/controller-tools](https://github.com/kubernetes-sigs/controller-tools) | `0.14.0` | `0.16.5` | | [sigs.k8s.io/kustomize/kustomize/v5](https://github.com/kubernetes-sigs/kustomize) | `5.3.0` | `5.5.0` | Updates `github.com/goreleaser/goreleaser` from 1.25.1 to 1.26.2 - [Release notes](https://github.com/goreleaser/goreleaser/releases) - [Changelog](https://github.com/goreleaser/goreleaser/blob/main/.goreleaser.yaml) - [Commits](goreleaser/goreleaser@v1.25.1...v1.26.2) Updates `github.com/itchyny/gojq` from 0.12.15 to 0.12.16 - [Release notes](https://github.com/itchyny/gojq/releases) - [Changelog](https://github.com/itchyny/gojq/blob/main/CHANGELOG.md) - [Commits](itchyny/gojq@v0.12.15...v0.12.16) Updates `github.com/mikefarah/yq/v4` from 4.43.1 to 4.44.5 - [Release notes](https://github.com/mikefarah/yq/releases) - [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt) - [Commits](mikefarah/yq@v4.43.1...v4.44.5) Updates `k8s.io/apimachinery` from 0.31.0 to 0.31.3 - [Commits](kubernetes/apimachinery@v0.31.0...v0.31.3) Updates `sigs.k8s.io/controller-tools` from 0.14.0 to 0.16.5 - [Release notes](https://github.com/kubernetes-sigs/controller-tools/releases) - [Changelog](https://github.com/kubernetes-sigs/controller-tools/blob/main/envtest-releases.yaml) - [Commits](kubernetes-sigs/controller-tools@v0.14.0...v0.16.5) Updates `sigs.k8s.io/kind` from 0.22.0 to 0.23.0 - [Release notes](https://github.com/kubernetes-sigs/kind/releases) - [Commits](kubernetes-sigs/kind@v0.22.0...v0.23.0) Updates `sigs.k8s.io/kustomize/kustomize/v5` from 5.3.0 to 5.5.0 - [Release notes](https://github.com/kubernetes-sigs/kustomize/releases) - [Commits](kubernetes-sigs/kustomize@kustomize/v5.3.0...kustomize/v5.5.0) --- updated-dependencies: - dependency-name: github.com/goreleaser/goreleaser dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: github.com/itchyny/gojq dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: github.com/mikefarah/yq/v4 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: k8s.io/apimachinery dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependencies - dependency-name: sigs.k8s.io/controller-tools dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: sigs.k8s.io/kind dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies - dependency-name: sigs.k8s.io/kustomize/kustomize/v5 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependencies ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
area/dependency
k8s-ci-robot
added
the
cncf-cla: yes
|
Hi @dependabot[bot]. Thanks for your PR. I'm waiting for a kubernetes-sigs member to verify that this patch is reasonable to test. If it is, they should reply with Once the patch is verified, the new status will be reflected by the I understand the commands that are listed here. Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. |
k8s-ci-robot
added
the
size/XL
k8s-ci-robot
added
size/XXL
|
/ok-to-test |
|
/lgtm |
k8s-ci-robot
added
the
lgtm
|
[APPROVALNOTIFIER] This PR is APPROVED This pull-request has been approved by: nrb The full list of commands accepted by this bot can be found here. The pull request process is described here
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
k8s-ci-robot
added
the
approved
dependabot
bot
deleted the
dependabot/go_modules/hack/tools/dependencies-0c10346742
branch
nrb
added a commit
to nrb/cluster-api-provider-aws
that referenced
this pull request
Dec 6, 2024
Kustomize previously broke builds (kubernetes-sigs#5188) and we mistakenly approved a version bump (kubernetes-sigs#5232) that caused the Go version to be >= 1.22.7. As of right now, the builder image only has Go 1.22.0. This change downgrades the relevant kustomize dependencies, as well as prevents dependabot from incrementing kustomize automatically in the future. Signed-off-by: Nolan Brubaker <[email protected]>
3 tasks
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the dependencies group with 6 updates in the /hack/tools directory:
1.25.11.26.20.12.150.12.164.43.14.44.50.31.00.31.30.14.00.16.55.3.05.5.0Updates
github.com/goreleaser/goreleaserfrom 1.25.1 to 1.26.2Release notes
Sourced from github.com/goreleaser/goreleaser's releases.
... (truncated)
Commits
d7c23c1chore(deps): bump golang fromf1fe698tob8ded51(#4887)fae464echore(deps): bump github.com/caarlos0/env/v11 from 11.0.0 to 11.0.1 (#4888)f4cd8fcbuild: fix changelog not showing dependencies updatesde796ebchore(deps): bump github.com/google/ko from 0.15.2 to 0.15.4 (#4885)1c66ce4chore(deps): bump anchore/sbom-action from 0.15.11 to 0.16.0 (#4881)1d49b22chore(deps): bump codecov/codecov-action from 4.4.0 to 4.4.1 (#4882)79caa9cchore(deps): bump github/codeql-action from 3.25.5 to 3.25.6 (#4883)cf2c47achore(deps): bump github/codeql-action from 2.13.4 to 3.25.5 (#4880)b3d6460fix(docs): version typo (#4878)73a22e5chore(deps): bump actions/checkout from 4.1.5 to 4.1.6 (#4876)Updates
github.com/itchyny/gojqfrom 0.12.15 to 0.12.16Release notes
Sourced from github.com/itchyny/gojq's releases.
Changelog
Sourced from github.com/itchyny/gojq's changelog.
Commits
0607aa5bump up version to 0.12.160709341update CHANGELOG.md for v0.12.161324e6eupdate dependencies01355e9improve parser to allow binary operators as object valuesa41a5f8fix debug/1 function to be available only when debug/0 is definedf694c1bfix a benchmark test BenchmarkCompilef2559f6remove private compare function0cd3a66improve compiler to abort with error if query is missing422cc9drefactor stringify function declarations of query1130c4erefactor program body, rename rules, remove empty actions in parserUpdates
github.com/mikefarah/yq/v4from 4.43.1 to 4.44.5Release notes
Sourced from github.com/mikefarah/yq/v4's releases.
Changelog
Sourced from github.com/mikefarah/yq/v4's changelog.
Commits
bc5b54cBumping version129e597Fixing release pipeline42db154Bumping versionf06c7c6Updating release notes1ae6ac1Merge branch 'gabe565-add-comment-style'b710fadRegenerating go mod6a43f17Merge branch 'add-comment-style' of github.com:gabe565/yq into gabe565-add-co...1a4b248Merge branch 'master' into add-comment-style58cc9dbUpdated release notes4af292fFixed handling of nulls with sort_by expressions #2164Updates
k8s.io/apimachineryfrom 0.31.0 to 0.31.3Commits
Updates
sigs.k8s.io/controller-toolsfrom 0.14.0 to 0.16.5Release notes
Sourced from sigs.k8s.io/controller-tools's releases.
... (truncated)
Commits
23a31fdMerge pull request #1083 from kubernetes-sigs/dependabot/github_actions/all-g...932f834Merge pull request #1082 from kubernetes-sigs/dependabot/go_modules/all-go-mo...2e2e001🌱 Bump the all-github-actions group with 2 updates8aeb7d1🌱 Bump the all-go-mod-patch-and-minor group with 4 updates5ea1855Merge pull request #1080 from sbueringer/pr-fix-items-enum79a0f50Fix item validation for unhashable markers49ae6f8Merge pull request #1078 from mtardy/pr/mtardy/type-alias-validation5656666Merge pull request #1079 from mtardy/pr/mtardy/fix-exprsel-aliasfd3bd9fpkg/crd: fix a missed type casting panic with new *types.Aliase443da3pkg/crd: fix alias conversion to schema with gotypesalias=1Updates
sigs.k8s.io/kindfrom 0.22.0 to 0.23.0Release notes
Sourced from sigs.k8s.io/kind's releases.
... (truncated)
Commits
0296c52version v0.23.04a36b22Merge pull request #3608 from BenTheElder/bump-kindnetd-mod96a3352bump node image to 1.30.01c8c510bump base image7e41de9bump local-path-provisioner image54682a2bump kindnetd imagecd2ac64bump kindnetd to k8s 0.29 (not 0.30 as we'd need go 1.22+, see runc issue 4233)b9bba13Merge pull request #3607 from BenTheElder/bump-go274e9d4upgrade to go1.21.106967c95Merge pull request #3605 from kubernetes-sigs/dependabot/github_actions/actio...Updates
sigs.k8s.io/kustomize/kustomize/v5from 5.3.0 to 5.5.0Release notes
Sourced from sigs.k8s.io/kustomize/kustomize/v5's releases.
... (truncated)
Commits
afe7793Merge pull request #5783 from koba1t/pinToApiae98655Update api to v0.18.0faccc12Merge pull request #5782 from koba1t/pinToCmdConfigfdf9f59Update cmd/config to v0.15.0e2967cfMerge pull request #5781 from koba1t/pinToKyamld22fa37Update kyaml to v0.18.101cce4fMerge pull request #5756 from viniciusdc/5755-kustomize-install54cbcdcMerge pull request #5770 from koba1t/add_write_permission_to_run_release_CIb36b222add write permission to run release CI2cd9a2eMerge pull request #5768 from dims/remove-starlark-supportDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions