lifecycle Bump the go-dependencies group with 5 updates

Bump the go-dependencies group with 5 updates

Open dependabot[bot] opened this issue 1 year ago • 0 comments

Bumps the go-dependencies group with 5 updates:

Package	From	To
github.com/GoogleContainerTools/kaniko	`1.21.0`	`1.21.1`
github.com/containerd/containerd	`1.7.13`	`1.7.14`
github.com/docker/docker	`25.0.3+incompatible`	`25.0.4+incompatible`
github.com/google/go-containerregistry	`0.19.0`	`0.19.1`
github.com/moby/buildkit	`0.12.5`	`0.13.1`

Updates github.com/GoogleContainerTools/kaniko from 1.21.0 to 1.21.1

Release notes

Sourced from github.com/GoogleContainerTools/kaniko's releases.

v1.21.1 Release 2024-03-06

The executor images in this release are:
gcr.io/kaniko-project/executor:v1.21.1
gcr.io/kaniko-project/executor:latest
The debug images are available at:
gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.21.1-debug
The slim executor images which don't contain any authentication binaries are available at:
gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.21.1-slim
Highlights:

this patch release updates dependencies to remove CVEs present in v1.21.0, for patched dependencies see PRs included in this release below

Dependency Updates:

chore(deps): bump cloud.google.com/go/storage from 1.38.0 to 1.39.0 #3040

chore(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.13 #3038

chore(deps): bump docker/setup-buildx-action from 3.0.0 to 3.1.0 #3037

chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.3.0 to 1.3.1 #3039

Testing:

test: fix test breakage caused by external dependency update #3049

Huge thank you for this release towards our contributors:

Aaron Prindle

dependabot[bot]

Changelog

Sourced from github.com/GoogleContainerTools/kaniko's changelog.

v1.21.1 Release 2024-03-06

The executor images in this release are:
gcr.io/kaniko-project/executor:v1.21.1
gcr.io/kaniko-project/executor:latest
The debug images are available at:
gcr.io/kaniko-project/executor:debug
gcr.io/kaniko-project/executor:v1.21.1-debug
The slim executor images which don't contain any authentication binaries are available at:
gcr.io/kaniko-project/executor:slim
gcr.io/kaniko-project/executor:v1.21.1-slim
chore(deps): bump cloud.google.com/go/storage from 1.38.0 to 1.39.0 #3040

chore(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.13 #3038

test: fix test breakage caused by external dependency update #3049

chore(deps): bump docker/setup-buildx-action from 3.0.0 to 3.1.0 #3037

chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob from 1.3.0 to 1.3.1 #3039

Huge thank you for this release towards our contributors:

Aaron Prindle

dependabot[bot]

Commits

6f57367 chore(release): release v1.21.1 (#3050)
2038a5f chore(deps): bump cloud.google.com/go/storage from 1.38.0 to 1.39.0 (#3040)
2c87b2f chore(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.13 (#3038)
805a239 test: fix test breakage caused by external depenency update (#3049)
f0c7eb5 chore(deps): bump docker/setup-buildx-action from 3.0.0 to 3.1.0 (#3037)
9f768aa chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/storage/azblob (#3039)
See full diff in compare view

Updates github.com/containerd/containerd from 1.7.13 to 1.7.14

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.14

Welcome to the v1.7.14 release of containerd!

The fourteenth patch release for containerd 1.7 contains various fixes and updates.

Highlights

Update builds to use go 1.21.8 (#9933)

Fix various timing issues with docker pusher (#9921)

Register imagePullThroughput and count with MiB (#9855)

Move high volume event logs to Trace level (#9823)

Container Runtime Interface (CRI)

Handle pod transition states gracefully while listing pod stats (#9905)

Runtime

Update runc-shim to process exec exits before init (#9928)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

Wei Fu

Derek McGowan

Maksym Pavlenko

Krisztian Litkey

Akihiro Suda

Justin Chadwell

Sebastiaan van Stijn

Phil Estes

Kirtana Ashok

Akhil Mohan

Austin Vazquez

Etienne Champetier

Jordan Liggitt

Kohei Tokunaga

Mike Brown

Samuel Karp

Davanum Srinivas

Edgar Lee

Henry Wang

James Sturtevant

Laura Brehm

Nashwan Azhari

Robbie Buxton

Robert-André Mauchin

Shukui Yang

... (truncated)

Commits

dcf2847 Merge pull request #9953 from dmcgowan/prepare-v1.7.14
1babe6b Prepare release notes for v1.7.14
9138da4 Merge pull request #9951 from austinvazquez/release-1.7-backport-use-matrix-g...
a9bbbef Use the Go toolchain in CI matrix to build binaries
17cbd50 Merge pull request #9933 from AkihiroSuda/go-1.21.8-1.7
4c825b3 Merge pull request #9938 from akhilerm/cherry-pick-9777-1.7
39caf53 Move inline PS scripts into files
5613fae Merge pull request #9944 from dmcgowan/1.7-skip-oom-test
1ca9a64 update to go 1.21.8, 1.22.1
630226b Disable OOM set score unpriv test temporarily
Additional commits viewable in compare view

Updates github.com/docker/docker from 25.0.3+incompatible to 25.0.4+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v25.0.4

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 25.0.4 milestone

moby/moby, 25.0.4 milestone

Deprecated and removed features, see Deprecated Features.

Changes to the Engine API, see API version history.

Bug fixes and enhancements

Restore DNS names for containers in the default "nat" network on Windows. moby/moby#47490

Fix docker start failing when used with --checkpoint moby/moby#47466

Don't enforce new validation rules for existing swarm networks moby/moby#47482

Restore IP connectivity between the host and containers on an internal bridge network. moby/moby#47481

Fix a regression introduced in v25.0 that prevented the classic builder from ADDing a tar archive with xattrs created on a non-Linux OS moby/moby#47483

containerd image store: Fix image pull not emitting Pulling fs layer status moby/moby#47484

API

To preserve backwards compatibility, make read-only mounts not recursive by default when using older clients (API version < v1.44). moby/moby#47393

GET /images/{id}/json omits the Created field (previously it was 0001-01-01T00:00:00Z) if the Created field is missing from the image config. moby/moby#47451

Populate a missing Created field in GET /images/{id}/json with 0001-01-01T00:00:00Z for API version <= 1.43. moby/moby#47387

Fix a regression that caused API socket connection failures to report an API version negotiation failure instead. moby/moby#47470

Preserve supplied endpoint configuration in a container-create API request, when a container-wide MAC address is specified, but NetworkMode name-or-id is not the same as the name-or-id used in NetworkSettings.Networks. moby/moby#47510

Packaging updates

Upgrade Go runtime to 1.21.8. moby/moby#47503

Upgrade RootlessKit to v2.0.2. moby/moby#47508

Upgrade Compose to v2.24.7. docker/docker-ce-packaging#998

Upgrade Buildx to v0.13.0. docker/docker-ce-packaging#997

Full Changelog: https://github.com/moby/moby/compare/v25.0.3...v25.0.4

Commits

061aa95 Merge pull request #47513 from vvoland/v25.0-47498
d0d85f6 daemon: overlay2: remove world writable permission from the lower file
5d66793 Merge pull request #47508 from vvoland/v25.0-47504
ef1fa23 Merge pull request #47510 from akerouanton/25.0-47441_mac_addr_config_migration
0451b28 Don't create endpoint config for MAC addr config migration
d27fe25 dockerd-rootless-setuptool.sh: check RootlessKit functionality
77de535 Dockerfile: update RootlessKit to v2.0.2
9e526bc Merge pull request #47503 from vvoland/v25.0-47502
2d34702 update to go1.21.8
51e876c Merge pull request #47493 from akerouanton/25.0-47370_windows_natnw_dns_test
Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.19.0 to 0.19.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.19.1

What's Changed

Bump golang.org/x/net from 0.10.0 to 0.17.0 in /pkg/authn/k8schain by @dependabot in google/go-containerregistry#1815

Bump golang.org/x/ packages by @jonjohnsonjr in google/go-containerregistry#1892

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.19.0...v0.19.1

Commits

8b3c303 Bump golang.org/x/ packages (#1892)
afec664 Bump golang.org/x/net from 0.10.0 to 0.17.0 in /pkg/authn/k8schain (#1815)
See full diff in compare view

Updates github.com/moby/buildkit from 0.12.5 to 0.13.1

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.13.1

buildkit 0.13.1

Welcome to the 0.13.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Notable Changes

Fix handling of deleted blobs when importing cache from Github Actions cache backend #4771

Fix unclean shutdown error on WCOW on Ctrl-C #4774

Mitigate issue with mounting OpenTelemetry socket in containers in some installations #4778

Fix parsing ./.git source path as Git URL. #4776

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.13.0

v0.13.0

buildkit 0.13.0

Welcome to the 0.13.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

Tõnis Tiigi

CrazyMax

Justin Chadwell

Sebastiaan van Stijn

Akihiro Suda

Jonathan A. Sternberg

Kohei Tokunaga

David Karlsson

Leandro Santiago

Gabriel Adrian Samfira

Chris Goller

Anthony Nandaa

Erik Sipsma

Paweł Gronowski

Jakub Ciolek

... (truncated)

Commits

2ae42e0 Merge pull request #4779 from tonistiigi/v0.13.1-picks
0aff323 oci: make mounting oci socket optional
9e593c0 git: ensure file-looking git refs aren't parsed as URLs
50fbf50 remotecache: fix missing CheckDescriptor method
62eec44 solver: stub out sysSampler close
3f62976 Merge pull request #4742 from crazy-max/v0.13_cherry-picks
f64b48e fix(docs): add the containers feature enabling step
525ea4f ci: enable multi-platform lint only for upstream repo
ee081eb docs: replace references to the master branch with v0.13
2afc050 Merge pull request #4735 from moby/v0.13.0-picks
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Mar 18 '24 23:03 dependabot[bot]

lifecycle lifecycle copied to clipboard

Bump the go-dependencies group with 5 updates

v1.21.1 Release 2024-03-06

v1.21.1 Release 2024-03-06

containerd 1.7.14

Highlights

Container Runtime Interface (CRI)

Runtime

Contributors

v25.0.4

Bug fixes and enhancements

API

Packaging updates

v0.19.1

What's Changed

v0.13.1

Notable Changes

Dependency Changes

v0.13.0

Contributors

lifecycle
lifecycle copied to clipboard