Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update all non-major dependencies #915

Merged
merged 1 commit into from
Oct 29, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 28, 2024

This PR contains the following updates:

Package Type Update Change Age Adoption Passing Confidence
actions/checkout action patch v4.2.1 -> v4.2.2 age adoption passing confidence
actions/setup-go action minor v5.0.2 -> v5.1.0 age adoption passing confidence
actions/upload-artifact action patch v4.4.0 -> v4.4.3 age adoption passing confidence
github.com/opencontainers/runc replace minor v1.1.15 -> v1.2.0 age adoption passing confidence
github.com/testcontainers/testcontainers-go/modules/k3s require minor v0.33.0 -> v0.34.0 age adoption passing confidence
k8s.io/api require patch v0.31.1 -> v0.31.2 age adoption passing confidence
k8s.io/apimachinery require patch v0.31.1 -> v0.31.2 age adoption passing confidence
k8s.io/apiserver require patch v0.31.1 -> v0.31.2 age adoption passing confidence
sigs.k8s.io/controller-runtime require patch v0.19.0 -> v0.19.1 age adoption passing confidence
sigstore/cosign-installer action minor v3.6.0 -> v3.7.0 age adoption passing confidence

Release Notes

actions/checkout (actions/checkout)

v4.2.2

Compare Source

actions/setup-go (actions/setup-go)

v5.1.0

Compare Source

What's Changed

Bug Fixes

New Contributors

Full Changelog: actions/setup-go@v5...v5.1.0

actions/upload-artifact (actions/upload-artifact)

v4.4.3

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3

v4.4.2

Compare Source

What's Changed

Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2

v4.4.1

Compare Source

What's Changed
New Contributors

Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1

opencontainers/runc (github.com/opencontainers/runc)

v1.2.0: runc v1.2.0 -- "できるときにできることをやるんだ。それが今だ。"

Compare Source

This is the long-awaited release of runc 1.2.0! The primary changes from rc3
are general improvements and fixes for minor regressions related to the
new /proc/self/exe cloning logic in runc 1.2, follow-on patches related
to CVE-2024-45310, as well as some other minor changes.

  • In order to alleviate the remaining concerns around the memory usage and
    (arguably somewhat unimportant, but measurable) performance overhead of
    memfds for cloning /proc/self/exe, we have added a new protection using
    overlayfs that is used if you have enough privileges and the running
    kernel supports it. It has effectively no performance nor memory overhead
    (compared to no cloning at all). (#​4448)
  • The original fix for CVE-2024-45310 was intentionally very
    limited in scope to make it easier to review, however it also did not handle
    all possible os.MkdirAll cases and thus could lead to regressions. We have
    switched to the more complete implementation in the newer versions of
    github.com/cyphar/filepath-securejoin. (#​4393, #​4400, #​4421, #​4430)
  • In certain situations (a system with lots of mounts or racing mounts) we
    could accidentally end up leaking mounts from the container into the host.
    This has been fixed. (#​4417)
  • The fallback logic for O_TMPFILE clones of /proc/self/exe had a minor
    bug that would cause us to miss non-noexec directories and thus fail to
    start containers on some systems. (#​4444)
  • Sometimes the cloned /proc/self/exe file descriptor could be placed in a
    way that it would get clobbered by the Go runtime. We had a fix for this
    already but it turns out it could still break in rare circumstances, but it
    has now been fixed. (#​4294, #​4452)
  • It is not possible for runc kill to work properly in some specific
    configurations (such as rootless containers with no cgroups and a shared pid
    namespace). We now output a warning for such configurations. (#​4398)
  • memfd-bind: update the documentation and make path handling with the systemd
    unit more idiomatic. (#​4428)
  • We now use v0.16 of Cilium's eBPF library, including fixes that quite a few
    downstreams asked for. (#​4397, #​4396)
  • Some internal runc init synchronisation that was no longer necessary (due
    to the /proc/self/exe cloning move to Go) was removed. (#​4441)
Static Linking Notices

The runc binary distributed with this release are statically linked with
the following GNU LGPL-2.1 licensed libraries, with runc acting
as a "work that uses the Library":

The versions of these libraries were not modified from their upstream versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the attached
runc source code) may be used to exercise your rights under the LGPL-2.1.

However we strongly suggest that you make use of your distribution's packages
or download them from the authoritative upstream sources, especially since
these libraries are related to the security of your containers.


Thanks to all of the contributors who made this release possible:

Signed-off-by: Aleksa Sarai [email protected]

testcontainers/testcontainers-go (github.com/testcontainers/testcontainers-go/modules/k3s)

v0.34.0

Compare Source

What's Changed
🚀 Features
🐛 Bug Fixes
📖 Documentation
🧹 Housekeeping
📦 Dependency updates
kubernetes/api (k8s.io/api)

v0.31.2

Compare Source

kubernetes/apimachinery (k8s.io/apimachinery)

v0.31.2

Compare Source

kubernetes/apiserver (k8s.io/apiserver)

v0.31.2

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

v0.19.1

Compare Source

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.19.0...v0.19.1

sigstore/cosign-installer (sigstore/cosign-installer)

v3.7.0

Compare Source

What's Changed

Full Changelog: sigstore/cosign-installer@v3.6.0...v3.7.0


Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner October 28, 2024 00:34
Copy link
Contributor Author

renovate bot commented Oct 28, 2024

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
k8s.io/client-go v0.31.1 -> v0.31.2
github.com/cpuguy83/dockercfg v0.3.1 -> v0.3.2
github.com/testcontainers/testcontainers-go v0.33.0 -> v0.34.0
k8s.io/component-base v0.31.1 -> v0.31.2

Copy link

codecov bot commented Oct 28, 2024

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 69.44%. Comparing base (f4ed3ec) to head (2045e03).
Report is 2 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main     #915   +/-   ##
=======================================
  Coverage   69.44%   69.44%           
=======================================
  Files          30       30           
  Lines        3040     3040           
=======================================
  Hits         2111     2111           
  Misses        763      763           
  Partials      166      166           
Flag Coverage Δ
integration-tests 58.37% <ø> (ø)
unit-tests 40.41% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

Copy link
Member

@flavio flavio left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I would go ahead and merge it, or do you want to wait for 1.18 GA to be out?

@viccuad viccuad merged commit 2f1b162 into main Oct 29, 2024
16 checks passed
@renovate renovate bot deleted the renovate/all-minor-patch branch October 29, 2024 10:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
Archived in project
Development

Successfully merging this pull request may close these issues.

2 participants