chore(deps): update all non-major dependencies #915
Merged
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v4.2.1
->v4.2.2
v5.0.2
->v5.1.0
v4.4.0
->v4.4.3
v1.1.15
->v1.2.0
v0.33.0
->v0.34.0
v0.31.1
->v0.31.2
v0.31.1
->v0.31.2
v0.31.1
->v0.31.2
v0.19.0
->v0.19.1
v3.6.0
->v3.7.0
Release Notes
actions/checkout (actions/checkout)
v4.2.2
Compare Source
url-helper.ts
now leverages well-known environment variables by @jww3 in https://github.com/actions/checkout/pull/1941isGhes
by @jww3 in https://github.com/actions/checkout/pull/1946actions/setup-go (actions/setup-go)
v5.1.0
Compare Source
What's Changed
This addresses issues with caching by adding the architecture (arch) to the cache key, ensuring that cache keys are accurate to prevent conflicts.
Note: This change may break previous cache keys as they will no longer be compatible with the new format.
Bug Fixes
isGhes
logic by @jww3 in https://github.com/actions/setup-go/pull/511New Contributors
Full Changelog: actions/setup-go@v5...v5.1.0
actions/upload-artifact (actions/upload-artifact)
v4.4.3
Compare Source
What's Changed
Full Changelog: actions/upload-artifact@v4.4.2...v4.4.3
v4.4.2
Compare Source
What's Changed
@actions/artifact
to 2.1.11 by @robherley in https://github.com/actions/upload-artifact/pull/627Full Changelog: actions/upload-artifact@v4.4.1...v4.4.2
v4.4.1
Compare Source
What's Changed
New Contributors
Full Changelog: actions/upload-artifact@v4.4.0...v4.4.1
opencontainers/runc (github.com/opencontainers/runc)
v1.2.0
: runc v1.2.0 -- "できるときにできることをやるんだ。それが今だ。"Compare Source
This is the long-awaited release of runc 1.2.0! The primary changes from rc3
are general improvements and fixes for minor regressions related to the
new /proc/self/exe cloning logic in runc 1.2, follow-on patches related
to CVE-2024-45310, as well as some other minor changes.
(arguably somewhat unimportant, but measurable) performance overhead of
memfds for cloning
/proc/self/exe
, we have added a new protection usingoverlayfs
that is used if you have enough privileges and the runningkernel supports it. It has effectively no performance nor memory overhead
(compared to no cloning at all). (#4448)
limited in scope to make it easier to review, however it also did not handle
all possible
os.MkdirAll
cases and thus could lead to regressions. We haveswitched to the more complete implementation in the newer versions of
github.com/cyphar/filepath-securejoin
. (#4393, #4400, #4421, #4430)could accidentally end up leaking mounts from the container into the host.
This has been fixed. (#4417)
O_TMPFILE
clones of/proc/self/exe
had a minorbug that would cause us to miss non-
noexec
directories and thus fail tostart containers on some systems. (#4444)
/proc/self/exe
file descriptor could be placed in away that it would get clobbered by the Go runtime. We had a fix for this
already but it turns out it could still break in rare circumstances, but it
has now been fixed. (#4294, #4452)
runc kill
to work properly in some specificconfigurations (such as rootless containers with no cgroups and a shared pid
namespace). We now output a warning for such configurations. (#4398)
unit more idiomatic. (#4428)
downstreams asked for. (#4397, #4396)
runc init
synchronisation that was no longer necessary (dueto the
/proc/self/exe
cloning move to Go) was removed. (#4441)Static Linking Notices
The
runc
binary distributed with this release are statically linked withthe following GNU LGPL-2.1 licensed libraries, with
runc
actingas a "work that uses the Library":
The versions of these libraries were not modified from their upstream versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the attached
runc source code) may be used to exercise your rights under the LGPL-2.1.
However we strongly suggest that you make use of your distribution's packages
or download them from the authoritative upstream sources, especially since
these libraries are related to the security of your containers.
Thanks to all of the contributors who made this release possible:
Signed-off-by: Aleksa Sarai [email protected]
testcontainers/testcontainers-go (github.com/testcontainers/testcontainers-go/modules/k3s)
v0.34.0
Compare Source
What's Changed
🚀 Features
🐛 Bug Fixes
📖 Documentation
🧹 Housekeeping
Contains
orErrorContains
with testify (#2839) @mmorel-35📦 Dependency updates
kubernetes/api (k8s.io/api)
v0.31.2
Compare Source
kubernetes/apimachinery (k8s.io/apimachinery)
v0.31.2
Compare Source
kubernetes/apiserver (k8s.io/apiserver)
v0.31.2
Compare Source
kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)
v0.19.1
Compare Source
What's Changed
Full Changelog: kubernetes-sigs/controller-runtime@v0.19.0...v0.19.1
sigstore/cosign-installer (sigstore/cosign-installer)
v3.7.0
Compare Source
What's Changed
Full Changelog: sigstore/cosign-installer@v3.6.0...v3.7.0
Configuration
📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.