Bump the gomodupdates group across 1 directory with 11 updates #1221

dependabot · 2025-01-16T08:37:29Z

Bumps the gomodupdates group with 6 updates in the / directory:

Package	From	To
github.com/cert-manager/cert-manager	`1.14.5`	`1.16.2`
github.com/golang-jwt/jwt/v4	`4.5.0`	`4.5.1`
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring	`0.74.0`	`0.79.2`
github.com/stretchr/testify	`1.9.0`	`1.10.0`
go.mondoo.com/cnquery/v11	`11.15.0`	`11.37.1`
go.mondoo.com/cnspec/v11	`11.15.0`	`11.37.0`

Updates github.com/cert-manager/cert-manager from 1.14.5 to 1.16.2

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.16.2

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

This patch release of cert-manager 1.16 makes several changes to how PEM input is validated, adding maximum sizes appropriate to the type of PEM data which is being parsed.

This is to prevent an unacceptable slow-down in parsing specially crafted PEM data. The issue was found by Google's OSS-Fuzz project.

The issue is low severity; to exploit the PEM issue would require privileged access which would likely allow Denial-of-Service through other methods.

Note also that since most PEM data parsed by cert-manager comes from ConfigMap or Secret resources which have a max size limit of approximately 1MB, it's difficult to force cert-manager to parse large amounts of PEM data.

Further information is available in GHSA-r4pg-vg54-wxx4

In addition, the version of Go used to build cert-manager 1.16 was updated along with the base images.

Changes by Kind

Bug or Regression

Set a maximum size for PEM inputs which cert-manager will accept to remove possibility of taking a long time to process an input (#7401, @SgtCoDFish)

Other (Cleanup or Flake)

Bump go to 1.23.3 and bump base images to latest available (#7431, @SgtCoDFish)

v1.16.1

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

The cert-manager 1.16 release includes: new Helm chart features, more Prometheus metrics, memory optimizations, and various improvements and bug fixes for the ACME issuer and Venafi Issuer.

📖 Read the complete 1.16 release notes before upgrading.

📜Changes since v1.16.0

Bug or Regression

BUGFIX: Helm schema validation: the new schema validation was too strict for the "global" section. Since the global section is shared across all charts and sub-charts, we must also allow unknown fields. (#7348, @inteon)

BUGFIX: Helm will now accept percentages for the podDisruptionBudget.minAvailable and podDisruptionBudget.maxAvailable values. (#7345, @inteon)

Helm: allow enabled to be set as a value to toggle cert-manager as a dependency. (#7356, @inteon)

BUGFIX: A change in v1.16.0 caused cert-manager's ACME ClusterIssuer to look in the wrong namespace for resources required for the issuance (e.g. credential Secrets). This is now fixed in v1.16.1. (#7342, @inteon)

v1.16.0

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

The cert-manager 1.16 release includes: new Helm chart features, more Prometheus metrics, memory optimizations, and various improvements and bug fixes for the ACME issuer and Venafi Issuer.

📖 Read the complete 1.16 release notes at cert-manager.io.

⚠️ Known issues

Helm Chart: JSON schema prevents the chart being used as a sub-chart on Rancher RKE.

... (truncated)

Commits

33df0f2 Merge pull request #7431 from SgtCoDFish/release-1.16-bumps
03f9832 [release-1.16] bump go + base images
5001e8b Merge pull request #7401 from SgtCoDFish/release-1.16-pem-inputs
3ba1f2c [release-1.16] bump base images
d99dddb security: remove calls to pem.Decode in non-test code
481b67b security: Add functions to limit max PEM sizes allowable
24f59c3 Merge pull request #7370 from SgtCoDFish/release-1.16-ipv6-dns
a9785d4 [release-1.16] add IPv6 example for recursive DNS arg
ff50c06 Merge pull request #7356 from cert-manager-bot/cherry-pick-7350-to-release-1.16
2298278 Helm: add enabled to json schema
Additional commits viewable in compare view

Updates github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1

Release notes

Sourced from github.com/golang-jwt/jwt/v4's releases.

v4.5.1

Security

Unclear documentation of the error behavior in ParseWithClaims in <= 4.5.0 could lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned by ParseWithClaims return both error codes. If users only check for the jwt.ErrTokenExpired using error.Is, they will ignore the embedded jwt.ErrTokenSignatureInvalid and thus potentially accept invalid tokens.

This issue was documented in GHSA-29wx-vh33-7x7r and fixed in this release.

Note: v5 was not affected by this issue. So upgrading to this release version is also recommended.

What's Changed

Back-ported error-handling logic in ParseWithClaims from v5 branch. This fixes GHSA-29wx-vh33-7x7r.

Full Changelog: golang-jwt/jwt@v4.5.0...v4.5.1

Commits

7b1c1c0 Merge commit from fork
See full diff in compare view

Updates github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring from 0.74.0 to 0.79.2

Release notes

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's releases.

0.79.2 / 2024-12-18

[BUGFIX] Fix pod and service monitor selector validation. #7214

0.79.1 / 2024-12-17

[CHANGE] Rename the field scrapeFallbackProtocol to fallbackScrapeProtocol to match with naming as in Prometheus #7199

[BUGFIX] Remove the field scrapeFallbackProtocol from Prometheus/PrometheusAgent global config. #7197

0.79.0 / 2024-12-13

[!IMPORTANT] With this release, the operator will be deploying Prometheus v3.0.1 unless a specific version is specified. Users who want to stay with Prometheus v2 need to set the version field under Prometheus/PrometheusAgent Spec.

[CHANGE/FEATURE] Set Prometheus v3.0.1 as default version installed by operator. #7158

[CHANGE] Add more API validations to the ScrapeConfig CRD. #6738 #7006

[FEATURE] Set Alertmanager API version to v2 for Prometheus v3 and above. #7102

[FEATURE] Add enableOTLPReceiver field in the Prometheus/PrometheusAgent CRDs. #7105

[FEATURE] Add support for TranslationStrategy option for OTLP receiver. #7112

[FEATURE] Add nameValidationScheme field in Prometheus global configuration. #7116

[FEATURE] Add scrapeFallbackProtocol field in Prometheus, PrometheusAgent, ServiceMonitor, PodMonitor, Probe, ScrapeConfig and globally. #7131

[FEATURE] Add support for labels in PrometheusRule CRD at rules level. #7140

[FEATURE] Add support for ProxyConfig in Alertmanager Endpoints. #7191

[FEATURE] Add support for configuring Alertmanager STS persistentVolumeClaimRetentionPolicy. #7183

[FEATURE] Add enableHTTP2 to ScrapeConfig CRD. #7024

[FEATURE] Add filter field in ConsulSDConfig in ScrapeConfig CRD #7124

[FEATURE] Add messageThreadID field to TelegramConfig in AlertmanagerConfig CRD. #6999

[ENHANCEMENT] Allow users to control the sharding label(s). #7126

[ENHANCEMENT] Add support for role selector field selectorMechanism on ServiceMonitor. #7086

[ENHANCEMENT] Add support for role selector field selectorMechanism on PodMonitor. #7185

[ENHANCEMENT] Add support for the PrometheusText1.0.0 scrape protocol. #7085

[ENHANCEMENT] Allow users to toggle Prometheus controller's custom configuration deprecation behavior using the --deprecate-custom-configuration flag. #6955

[BUGFIX] Add goGC field to PrometheusAgent CRD. #6667

[BUGFIX] Validate SMTPSmarthost and SMTPFrom fields in EmailConfig in AlertManagerConfig CRD. #6004

[BUGFIX] Fix flaky discovery behavior caused by delayed endpoints publishing for Alertmanager. #7084

0.78.2 / 2024-11-21

[BUGFIX] Revert the removal of the proxyURL field in AlertmanagerConfig CRD. The field takes precedence over proxyUrl. #7114

0.78.1 / 2024-10-30

[BUGFIX] Fix container images for architectures other than amd64. #7065 #7066 #7067

0.78.0 / 2024-10-30

[CHANGE] Allow overlapping compactions by default in Prometheus when the Thanos sidecar is configured with uploads. #6906

[CHANGE] Drop support (officially) for Alertmanager less than v0.15. #7057

[FEATURE] Add dnsConfig and dnsPolicy fields to Alertmanager, Prometheus, PrometheusAgent and ThanosRuler CRDs. #3889

[FEATURE] Add ruleQueryOffset field to Prometheus CRD and query_offset field to PrometheusRule CRD. #6957

[FEATURE] Add support for Remote Write v2.0 to Prometheus and PrometheusAgent CRDs. #7033

[ENHANCEMENT] Add goGC field to Prometheus and PrometheusAgent CRDs. #6667

[BUGFIX] Fix label name validation in ScrapeConfig CRD. #6892

[BUGFIX] Fix version checking for the promoteResourceAttributes field. #7017

... (truncated)

Changelog

Sourced from github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring's changelog.

0.79.2 / 2024-12-18

[BUGFIX] Fix pod and service monitor selector validation. #7214

0.79.1 / 2024-12-17

[CHANGE] Rename the field scrapeFallbackProtocol to fallbackScrapeProtocol to match with naming as in Prometheus #7199

[BUGFIX] Remove the field scrapeFallbackProtocol from Prometheus/PrometheusAgent global config. #7197

0.79.0 / 2024-12-13

[!IMPORTANT] With this release, the operator will be deploying Prometheus v3.0.1 unless a specific version is specified. Users who want to stay with Prometheus v2 need to set the version field under Prometheus/PrometheusAgent Spec.

[CHANGE/FEATURE] Set Prometheus v3.0.1 as default version installed by operator. #7158

[CHANGE] Add more API validations to the ScrapeConfig CRD. #6738 #7006

[FEATURE] Set Alertmanager API version to v2 for Prometheus v3 and above. #7102

[FEATURE] Add enableOTLPReceiver field in the Prometheus/PrometheusAgent CRDs. #7105

[FEATURE] Add support for TranslationStrategy option for OTLP receiver. #7112

[FEATURE] Add nameValidationScheme field in Prometheus global configuration. #7116

[FEATURE] Add scrapeFallbackProtocol field in Prometheus, PrometheusAgent, ServiceMonitor, PodMonitor, Probe, ScrapeConfig and globally. #7131

[FEATURE] Add support for labels in PrometheusRule CRD at rules level. #7140

[FEATURE] Add support for ProxyConfig in Alertmanager Endpoints. #7191

[FEATURE] Add support for configuring Alertmanager STS persistentVolumeClaimRetentionPolicy. #7183

[FEATURE] Add enableHTTP2 to ScrapeConfig CRD. #7024

[FEATURE] Add filter field in ConsulSDConfig in ScrapeConfig CRD #7124

[FEATURE] Add messageThreadID field to TelegramConfig in AlertmanagerConfig CRD. #6999

[ENHANCEMENT] Allow users to control the sharding label(s). #7126

[ENHANCEMENT] Add support for role selector field selectorMechanism on ServiceMonitor. #7086

[ENHANCEMENT] Add support for role selector field selectorMechanism on PodMonitor. #7185

[ENHANCEMENT] Add support for the PrometheusText1.0.0 scrape protocol. #7085

[ENHANCEMENT] Allow users to toggle Prometheus controller's custom configuration deprecation behavior using the --deprecate-custom-configuration flag. #6955

[BUGFIX] Add goGC field to PrometheusAgent CRD. #6667

[BUGFIX] Validate SMTPSmarthost and SMTPFrom fields in EmailConfig in AlertManagerConfig CRD. #6004

[BUGFIX] Fix flaky discovery behavior caused by delayed endpoints publishing for Alertmanager. #7084

0.78.2 / 2024-11-21

[BUGFIX] Revert the removal of the proxyURL field in AlertmanagerConfig CRD. The field takes precedence over proxyUrl. #7114

0.78.1 / 2024-10-30

[BUGFIX] Fix container images for architectures other than amd64. #7065 #7066 #7067

0.78.0 / 2024-10-30

[CHANGE] Allow overlapping compactions by default in Prometheus when the Thanos sidecar is configured with uploads. #6906

[CHANGE] Drop support (officially) for Alertmanager less than v0.15. #7057

... (truncated)

Commits

1d2dca5 Merge pull request #7219 from slashpai/cut-0.79.2
4e8d553 chore: cut v0.79.2
fa1aea3 [BUGFIX] Fixing pod and service monitor selector validation (#7217)
54669ad chore: cut v0.79.1 (#7200)
a5db09d Merge pull request #7199 from slashpai/fallback-protocol-fix
58d9d3a CHANGE/BugFix: Rename scrapeFallbackProtocol to fallbackScrapeProtocol
ca3db52 Fix: Remove scrapeFallbackProtocol in Prometheus CommonSpec (#7197)
85ac658 Merge pull request #7194 from slashpai/cut-0.79
2d5acac chore: cut v0.79.0
0291114 Merge pull request #7185 from prometheus-operator/chore/role-selector-pod-mon...
Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.9.0 to 1.10.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.10.0

What's Changed

Functional Changes

Add PanicAssertionFunc by @fahimbagar in stretchr/testify#1337

assert: deprecate CompareType by @dolmen in stretchr/testify#1566

assert: make YAML dependency pluggable via build tags by @dolmen in stretchr/testify#1579

assert: new assertion NotElementsMatch by @hendrywiranto in stretchr/testify#1600

mock: in order mock calls by @ReyOrtiz in stretchr/testify#1637

Add assertion for NotErrorAs by @palsivertsen in stretchr/testify#1129

Record Return Arguments of a Call by @jayd3e in stretchr/testify#1636

assert.EqualExportedValues: accepts everything by @redachl in stretchr/testify#1586

Fixes

assert: make tHelper a type alias by @dolmen in stretchr/testify#1562

Do not get argument again unnecessarily in Arguments.Error() by @TomWright in stretchr/testify#820

Fix time.Time compare by @myxo in stretchr/testify#1582

assert.Regexp: handle []byte array properly by @kevinburkesegment in stretchr/testify#1587

assert: collect.FailNow() should not panic by @marshall-lee in stretchr/testify#1481

mock: simplify implementation of FunctionalOptions by @dolmen in stretchr/testify#1571

mock: caller information for unexpected method call by @spirin in stretchr/testify#1644

suite: fix test failures by @stevenh in stretchr/testify#1421

Fix issue #1662 (comparing infs should fail) by @ybrustin in stretchr/testify#1663

NotSame should fail if args are not pointers #1661 by @sikehish in stretchr/testify#1664

Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI by @sikehish in stretchr/testify#1667

fix: compare functional option names for indirect calls by @arjun-1 in stretchr/testify#1626

Documantation, Build & CI

.gitignore: ignore "go test -c" binaries by @dolmen in stretchr/testify#1565

mock: improve doc by @dolmen in stretchr/testify#1570

mock: fix FunctionalOptions docs by @snirye in stretchr/testify#1433

README: link out to the excellent testifylint by @brackendawson in stretchr/testify#1568

assert: fix typo in comment by @JohnEndson in stretchr/testify#1580

Correct the EventuallyWithT and EventuallyWithTf example by @JonCrowther in stretchr/testify#1588

CI: bump softprops/action-gh-release from 1 to 2 by @dependabot in stretchr/testify#1575

mock: document more alternatives to deprecated AnythingOfTypeArgument by @dolmen in stretchr/testify#1569

assert: Correctly document EqualValues behavior by @brackendawson in stretchr/testify#1593

fix: grammar in godoc by @miparnisari in stretchr/testify#1607

.github/workflows: Run tests for Go 1.22 by @HaraldNordgren in stretchr/testify#1629

Document suite's lack of support for t.Parallel by @brackendawson in stretchr/testify#1645

assert: fix typos in comments by @alexandear in stretchr/testify#1650

mock: fix doc comment for NotBefore by @alexandear in stretchr/testify#1651

Generate better comments for require package by @Neokil in stretchr/testify#1610

README: replace Testify V2 notice with @dolmen's V2 manifesto by @hendrywiranto in stretchr/testify#1518

New Contributors

@fahimbagar made their first contribution in stretchr/testify#1337

@TomWright made their first contribution in stretchr/testify#820

@snirye made their first contribution in stretchr/testify#1433

@myxo made their first contribution in stretchr/testify#1582

@JohnEndson made their first contribution in stretchr/testify#1580

... (truncated)

Commits

89cbdd9 Merge pull request #1626 from arjun-1/fix-functional-options-diff-indirect-calls
07bac60 Merge pull request #1667 from sikehish/flaky
716de8d Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI
118fb83 NotSame should fail if args are not pointers #1661 (#1664)
7d99b2b attempt 2
05f87c0 more similar
ea7129e better fmt
a1b9c9e Merge pull request #1663 from ybrustin/master
8302de9 Merge branch 'master' into master
89352f7 Merge pull request #1518 from hendrywiranto/adjust-readme-remove-v2
Additional commits viewable in compare view

Updates go.mondoo.com/cnquery/v11 from 11.15.0 to 11.37.1

Release notes

Sourced from go.mondoo.com/cnquery/v11's releases.

v11.37.1

What's Changed

✨ Update providers 20250114 by @github-actions in mondoohq/cnquery#5090

Add featureflag to force shell completions for windows by @jaym in mondoohq/cnquery#5093

Full Changelog: mondoohq/cnquery@v11.37.0...v11.37.1

v11.37.0

What's Changed

✨ Update providers 20250109 by @github-actions in mondoohq/cnquery#5080

✨ add encryption to gcp storage bucket resource by @vjeffrey in mondoohq/cnquery#5077

🎉 aws-11.5.17 by @vjeffrey in mondoohq/cnquery#5084

🎉 gcp-11.0.57 by @vjeffrey in mondoohq/cnquery#5085

⭐️ Add tags to objectref by @jaym in mondoohq/cnquery#5083

Update the example kind values in the docs by @tas50 in mondoohq/cnquery#5078

📄 Add long-form help for ms365 provider by @misterpantz in mondoohq/cnquery#5086

🧹 Update deps for cnquery and providers 20250113 by @github-actions in mondoohq/cnquery#5087

🧹 add query in panic when compiling by @jaym in mondoohq/cnquery#5089

🧹 Add new ALF plist location for macOS 15 by @jaym in mondoohq/cnquery#5013

Unify more of the aws resources on createdAt by @tas50 in mondoohq/cnquery#5041

✨ Add platform PURL type by @czunker in mondoohq/cnquery#5088

Full Changelog: mondoohq/cnquery@v11.36.2...v11.37.0

v11.36.2

What's Changed

✨ Update providers 20250108 by @github-actions in mondoohq/cnquery#5075

feat: keep block devices mounted option by @slntopp in mondoohq/cnquery#5076

🐛 use configured region to fetch regions list (aws) by @vjeffrey in mondoohq/cnquery#5073

🐛 do not download providers when already present by @imilchev in mondoohq/cnquery#5079

Full Changelog: mondoohq/cnquery@v11.36.1...v11.36.2

v11.36.1

What's Changed

✨ Update providers 20250107 by @github-actions in mondoohq/cnquery#5072

🤖 Trigger bump PR after goreleaser is finished by @czunker in mondoohq/cnquery#5010

🧹 add cloudflare to default providers by @chris-rock in mondoohq/cnquery#5074

Full Changelog: mondoohq/cnquery@v11.36.0...v11.36.1

v11.36.0

What's Changed

✨ Update providers 20241217 by @github-actions in mondoohq/cnquery#4999

📄 Tidy up nmap docs by @misterpantz in mondoohq/cnquery#5002

🐛 fix github provider load secret from inventory by @afiune in mondoohq/cnquery#5004

... (truncated)

Commits

6f73a8a Add featureflag to force shell completions for windows (#5093)
c0dd0e9 ✨ Update providers 20250114 (#5090)
3300ea7 ✨ Add platform PURL type (#5088)
f8106af Unify more of the aws resources on createdAt (#5041)
bd6c42f 🧹 Add new ALF plist location for macOS 15 (#5013)
f7589bf 🧹 add query in panic when compiling (#5089)
954a86f 🧹 Update deps for cnquery and providers 20250113 (#5087)
be398c5 Add long-form help for ms365 provider (#5086)
4ca7ea7 Update the example kind values in the docs (#5078)
d19b449 ⭐️ Add tags to objectref (#5083)
Additional commits viewable in compare view

Updates go.mondoo.com/cnspec/v11 from 11.15.0 to 11.37.0

Release notes

Sourced from go.mondoo.com/cnspec/v11's releases.

v11.37.0

What's Changed

🧹 Remove old resolver by @jaym in mondoohq/cnspec#1516

fix: nil-pointer panic in ToCnqueryProto by @slntopp in mondoohq/cnspec#1539

🐛 Let resolved policy tell you if something is a check by @jaym in mondoohq/cnspec#1541

Bump the gomodupdates group with 4 updates by @dependabot in mondoohq/cnspec#1542

🧹 Bump cnquery to v11.37.0 by @github-actions in mondoohq/cnspec#1543

Full Changelog: mondoohq/cnspec@v11.36.2...v11.37.0

v11.36.2

What's Changed

🧹 Bump cnquery to v11.36.2 by @github-actions in mondoohq/cnspec#1538

Full Changelog: mondoohq/cnspec@v11.36.1...v11.36.2

v11.36.1

What's Changed

🤖 Automatically create GH release after cnquery bump by @czunker in mondoohq/cnspec#1520

fix #1532, add missing azure permission by @AdamVB in mondoohq/cnspec#1533

Add asset platform to cnspec output when displaying asset by @jaym in mondoohq/cnspec#1535

🧹 Bump cnquery to v11.36.1 by @github-actions in mondoohq/cnspec#1536

New Contributors

@AdamVB made their first contribution in mondoohq/cnspec#1533

Full Changelog: mondoohq/cnspec@v11.36.0...v11.36.1

v11.36.0

What's Changed

Expand our spellcheck forbidden patterns by @tas50 in mondoohq/cnspec#1523

🚨 recover from panic's inside goroutines by @afiune in mondoohq/cnspec#1525

🐛 fix CI test by @afiune in mondoohq/cnspec#1527

Bump the gomodupdates group across 1 directory with 5 updates by @dependabot in mondoohq/cnspec#1528

Bump the gomodupdates group with 4 updates by @dependabot in mondoohq/cnspec#1529

🧹 Bump grpc and cnquery manually by @czunker in mondoohq/cnspec#1530

Full Changelog: mondoohq/cnspec@v11.35.0...v11.36.0

v11.35.0

What's Changed

🧹 Bump go to v1.23.4 by @czunker in mondoohq/cnspec#1513

🐛 Use 100 for the default value of impact by @jaym in mondoohq/cnspec#1514

Bump the gomodupdates group with 2 updates by @dependabot in mondoohq/cnspec#1517

🐛 Fix junit output for vuln report by @czunker in mondoohq/cnspec#1518

🧹 Bump cnquery to v11.35.0 by @github-actions in mondoohq/cnspec#1519

... (truncated)

Commits

b6094fe 🧹 Bump cnquery to v11.37.0 (#1543)
69c89c1 Bump the gomodupdates group with 4 updates (#1542)
4dd94f6 🐛 Let resolved policy tell you if something is a check (#1541)
1e17bc1 fix: nil-pointer panic in ToCnqueryProto (#1539)
f5aaceb 🧹 Remove old resolver (#1516)
cca68a9 🧹 Bump cnquery to v11.36.2 (#1538)
790ed2e 🧹 Bump cnquery to v11.36.1 (#1536)
7771ef0 Add asset platform to cnspec output when displaying asset (#1535)
941d182 fix #1532, add missing azure permission (#1533)
527d869 🤖 Automatically create GH release after cnquery bump (#1520)
Additional commits viewable in compare view

Updates go.mondoo.com/mondoo-go from 0.0.0-20240716062427-ec95d879cbe7 to 0.0.0-20250108144440-673a4fac8289

Commits

See full diff in compare view

Updates github.com/google/go-containerregistry from 0.20.1 to 0.20.2

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.2

What's Changed

deps: bump docker dep by @imjasonh in google/go-containerregistry#1991

Full Changelog: google/go-containerregistry@v0.20.1...v0.20.2

Commits

c195f15 deps: bump docker dep (#1991)
See full diff in compare view

Updates github.com/prometheus/client_golang from 1.19.1 to 1.20.4

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.20.4

[BUGFIX] histograms: Fix a possible data race when appending exemplars vs metrics gather. #1623

v1.20.3

[BUGFIX] histograms: Fix possible data race when appending exemplars. #1608

v1.20.2

[BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. #1596

v1.20.1

This release contains the critical fix for the issue. Thanks to @geberl, @CubicrootXYZ, @zetaab and @timofurrer for helping us with the investigation!

[BUGFIX] process-collector: Fixed unregistered descriptor error when using process collector with PedanticRegistry on Linux machines. #1587

v1.20.0

Thanks everyone for contributions!

⚠️ In this release we remove one (broken anyway, given Go runtime changes) metric and add three new (representing GOGC, GOMEMLIMIT and GOMAXPROCS flags) to the default collectors.NewGoCollector() collector. Given its popular usage, expect your binary to expose two additional metric.

Changes

[CHANGE] ⚠️ go-collector: Remove go_memstat_lookups_total metric which was always 0; Go runtime stopped sharing pointer lookup statistics. #1577

[FEATURE] ⚠️ go-collector: Add 3 default metrics: go_gc_gogc_percent, go_gc_gomemlimit_bytes and go_sched_gomaxprocs_threads as those are recommended by the Go team. #1559

[FEATURE] go-collector: Add more information to all metrics' HELP e.g. the exact runtime/metrics sourcing each metric (if relevant). #1568 #1578

[FEATURE] testutil: Add CollectAndFormat method. #1503

[FEATURE] histograms: Add support for exemplars in native histograms. #1471

[FEATURE] promhttp: Add experimental support for zstd on scrape, controlled by the request Accept-Encoding header. #1496

[FEATURE] api/v1: Add WithLimit parameter to all API methods that supports it. #1544

[FEATURE] prometheus: Add support for created timestamps in constant histograms and constant summaries. #1537

[FEATURE] process-collectors: Add network usage metrics: process_network_receive_bytes_total and process_network_transmit_bytes_total. #1555

[FEATURE] promlint: Add duplicated metric lint rule. #1472

[BUGFIX] promlint: Relax metric type in name linter rule. #1455

[BUGFIX] promhttp: Make sure server instrumentation wrapping supports new and future extra responseWriter methods. #1480

[BUGFIX] testutil: Functions using compareMetricFamilies are now failing if filtered metricNames are not in the input. #1424

feat(prometheus/testutil/promlint/validations): refine lintMetricType… by @foehammer127 in prometheus/client_golang#1455

Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 in /examples/middleware by @dependabot in prometheus/client_golang#1457

Bump github.com/prometheus/client_model from 0.5.0 to 0.6.0 by @dependabot in prometheus/client_golang#1458

Bump golang.org/x/sys from 0.16.0 to 0.17.0 by @dependabot in prometheus/client_golang#1459

Bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0 in /tutorial/whatsup by @dependabot in prometheus/client_golang#1461

Merge Release 1.19 back to main by @ArthurSens in

Bumps the gomodupdates group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/cert-manager/cert-manager](https://github.com/cert-manager/cert-manager) | `1.14.5` | `1.16.2` | | [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.5.0` | `4.5.1` | | [github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring](https://github.com/prometheus-operator/prometheus-operator) | `0.74.0` | `0.79.2` | | [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.9.0` | `1.10.0` | | [go.mondoo.com/cnquery/v11](https://github.com/mondoohq/cnquery) | `11.15.0` | `11.37.1` | | [go.mondoo.com/cnspec/v11](https://github.com/mondoohq/cnspec) | `11.15.0` | `11.37.0` | Updates `github.com/cert-manager/cert-manager` from 1.14.5 to 1.16.2 - [Release notes](https://github.com/cert-manager/cert-manager/releases) - [Changelog](https://github.com/cert-manager/cert-manager/blob/master/RELEASE.md) - [Commits](cert-manager/cert-manager@v1.14.5...v1.16.2) Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.1 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](golang-jwt/jwt@v4.5.0...v4.5.1) Updates `github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring` from 0.74.0 to 0.79.2 - [Release notes](https://github.com/prometheus-operator/prometheus-operator/releases) - [Changelog](https://github.com/prometheus-operator/prometheus-operator/blob/main/CHANGELOG.md) - [Commits](prometheus-operator/prometheus-operator@v0.74.0...v0.79.2) Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0 - [Release notes](https://github.com/stretchr/testify/releases) - [Commits](stretchr/testify@v1.9.0...v1.10.0) Updates `go.mondoo.com/cnquery/v11` from 11.15.0 to 11.37.1 - [Release notes](https://github.com/mondoohq/cnquery/releases) - [Changelog](https://github.com/mondoohq/cnquery/blob/main/.goreleaser.yml) - [Commits](mondoohq/cnquery@v11.15.0...v11.37.1) Updates `go.mondoo.com/cnspec/v11` from 11.15.0 to 11.37.0 - [Release notes](https://github.com/mondoohq/cnspec/releases) - [Changelog](https://github.com/mondoohq/cnspec/blob/main/.goreleaser.yml) - [Commits](mondoohq/cnspec@v11.15.0...v11.37.0) Updates `go.mondoo.com/mondoo-go` from 0.0.0-20240716062427-ec95d879cbe7 to 0.0.0-20250108144440-673a4fac8289 - [Commits](https://github.com/mondoohq/mondoo-go/commits) Updates `github.com/google/go-containerregistry` from 0.20.1 to 0.20.2 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml) - [Commits](google/go-containerregistry@v0.20.1...v0.20.2) Updates `github.com/prometheus/client_golang` from 1.19.1 to 1.20.4 - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.19.1...v1.20.4) Updates `google.golang.org/protobuf` from 1.34.2 to 1.36.2 Updates `k8s.io/utils` from 0.0.0-20240711033017-18e509b52bc8 to 0.0.0-20241210054802-24370beab758 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: github.com/cert-manager/cert-manager dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/golang-jwt/jwt/v4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates - dependency-name: github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: github.com/stretchr/testify dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: go.mondoo.com/cnquery/v11 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: go.mondoo.com/cnspec/v11 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: go.mondoo.com/mondoo-go dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates - dependency-name: github.com/google/go-containerregistry dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates - dependency-name: github.com/prometheus/client_golang dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomodupdates - dependency-name: k8s.io/utils dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomodupdates ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2025-01-16T08:38:18Z

Test Results

0 files - 5 0 suites - 51 0s ⏱️ - 2h 25m 39s
0 tests - 319 0 ✅ - 319 0 💤 ±0 0 ❌ ±0
0 runs - 388 0 ✅ - 388 0 💤 ±0 0 ❌ ±0

Results for commit 21ab18b. ± Comparison against base commit 5eccaf4.

dependabot · 2025-01-17T08:17:19Z

Superseded by #1222.

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jan 16, 2025

dependabot bot mentioned this pull request Jan 16, 2025

Bump the gomodupdates group across 1 directory with 11 updates #1220

Closed

dependabot bot closed this Jan 17, 2025

dependabot bot deleted the dependabot/go_modules/gomodupdates-41b3c0250f branch January 17, 2025 08:17

github-actions bot locked and limited conversation to collaborators Jan 17, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the gomodupdates group across 1 directory with 11 updates #1221

Bump the gomodupdates group across 1 directory with 11 updates #1221

dependabot bot commented on behalf of github Jan 16, 2025 •

edited

Loading

github-actions bot commented Jan 16, 2025

dependabot bot commented on behalf of github Jan 17, 2025

Bump the gomodupdates group across 1 directory with 11 updates #1221

Bump the gomodupdates group across 1 directory with 11 updates #1221

Conversation

dependabot bot commented on behalf of github Jan 16, 2025 • edited Loading

v1.16.2

Changes by Kind

Bug or Regression

Other (Cleanup or Flake)

v1.16.1

📜Changes since v1.16.0

Bug or Regression

v1.16.0

⚠️ Known issues

v4.5.1

Security

What's Changed

0.79.2 / 2024-12-18

0.79.1 / 2024-12-17

0.79.0 / 2024-12-13

0.78.2 / 2024-11-21

0.78.1 / 2024-10-30

0.78.0 / 2024-10-30

0.79.2 / 2024-12-18

0.79.1 / 2024-12-17

0.79.0 / 2024-12-13

0.78.2 / 2024-11-21

0.78.1 / 2024-10-30

0.78.0 / 2024-10-30

v1.10.0

What's Changed

Functional Changes

Fixes

Documantation, Build & CI

New Contributors

v11.37.1

What's Changed

v11.37.0

What's Changed

v11.36.2

What's Changed

v11.36.1

What's Changed

v11.36.0

What's Changed

v11.37.0

What's Changed

v11.36.2

What's Changed

v11.36.1

What's Changed

New Contributors

v11.36.0

What's Changed

v11.35.0

What's Changed

v0.20.2

What's Changed

v1.20.4

v1.20.3

v1.20.2

v1.20.1

v1.20.0

Changes

github-actions bot commented Jan 16, 2025

Test Results

dependabot bot commented on behalf of github Jan 17, 2025

dependabot bot commented on behalf of github Jan 16, 2025 •

edited

Loading

📜Changes since `v1.16.0`