chore(deps): update all non-major dependencies

[renovate[bot]]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v3.0.0 -> v3.1.0
github.com/onsi/gomega	require	minor	v1.20.1 -> v1.24.1
go.opentelemetry.io/otel	require	patch	v1.11.1 -> v1.11.2
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc	require	minor	v0.33.0 -> v0.34.0
go.opentelemetry.io/otel/metric	require	minor	v0.33.0 -> v0.34.0
go.opentelemetry.io/otel/sdk/metric	require	minor	v0.33.0 -> v0.34.0
k8s.io/api	require	minor	v0.25.3 -> v0.26.0
k8s.io/apimachinery	require	minor	v0.25.3 -> v0.26.0
ossf/scorecard-action	action	patch	v2.0.3 -> v2.0.6
sigs.k8s.io/controller-runtime	require	patch	v0.13.0 -> v0.13.1

---

Release Notes

actions/checkout

v3.1.0

Compare Source

• Use @​actions/core saveState and getState
• Add github-server-url input

v3.0.2

Compare Source

• Add input set-safe-directory

v3.0.1

Compare Source

• Fixed an issue where checkout failed to run in container jobs due to the new git setting safe.directory
• Bumped various npm package versions

onsi/gomega

v1.24.1

Compare Source

v1.24.0

Compare Source

1.24.0

Features

Introducting gcustom - a convenient mechanism for building custom matchers.

This is an RC release for gcustom. The external API may be tweaked in response to feedback however it is expected to remain mostly stable.

Maintenance

• Update BeComparableTo documentation [756eaa0]

v1.23.0

Compare Source

1.23.0

Features

• Custom formatting on a per-type basis can be provided using format.RegisterCustomFormatter() -- see the docs here

• Substantial improvement have been made to StopTrying():

  • Users can now use StopTrying().Wrap(err) to wrap errors and StopTrying().Attach(description, object) to attach arbitrary objects to the StopTrying() error
  • StopTrying() is now always interpreted as a failure. If you are an early adopter of StopTrying() you may need to change your code as the prior version would match against the returned value even if StopTrying() was returned. Going forward the StopTrying() api should remain stable.
  • StopTrying() and StopTrying().Now() can both be used in matchers - not just polled functions.

• TryAgainAfter(duration) is used like StopTrying() but instructs Eventually and Consistently that the poll should be tried again after the specified duration. This allows you to dynamically adjust the polling duration.

• ctx can now be passed-in as the first argument to Eventually and Consistently.

Maintenance

• Bump github.com/onsi/ginkgo/v2 from 2.3.0 to 2.3.1 (#​597) [afed901]
• Bump nokogiri from 1.13.8 to 1.13.9 in /docs (#​599) [7c691b3]
• Bump github.com/google/go-cmp from 0.5.8 to 0.5.9 (#​587) [ff22665]

v1.22.1

Compare Source

1.22.1

Fixes

• When passed a context and no explicit timeout, Eventually will only timeout when the context is cancelled [e5105cf]
• Allow StopTrying() to be wrapped [bf3cba9]

Maintenance

• bump to ginkgo v2.3.0 [c5d5c39]

v1.22.0

Compare Source

1.22.0

Features

Several improvements have been made to Eventually and Consistently in this and the most recent releases:

• Eventually and Consistently can take a context.Context [65c01bc] This enables integration with Ginkgo 2.3.0's interruptible nodes and node timeouts.
• Eventually and Consistently that are passed a SpecContext can provide reports when an interrupt occurs [0d063c9]
• Eventually/Consistently will forward an attached context to functions that ask for one [e2091c5]
• Eventually/Consistently supports passing arguments to functions via WithArguments() [a2dc7c3]
• Eventually and Consistently can now be stopped early with StopTrying(message) and StopTrying(message).Now() [52976bb]

These improvements are all documented in Gomega's docs

v1.21.1

Compare Source

v1.21.1

Features

• Eventually and Consistently that are passed a SpecContext can provide reports when an interrupt occurs [0d063c9]

v1.21.0

Compare Source

1.21.0

Features

• Eventually and Consistently can take a context.Context [65c01bc] This enables integration with Ginkgo 2.3.0's interruptible nodes and node timeouts.
• Introduces Eventually.Within.ProbeEvery with tests and documentation (#​591) [f633800]
• New BeKeyOf matcher with documentation and unit tests (#​590) [fb586b3]

Fixes

• Cover the entire gmeasure suite with leak detection [8c54344]
• Fix gmeasure leak [119d4ce]
• Ignore new Ginkgo ProgressSignal goroutine in gleak [ba548e2]

Maintenance

• Fixes crashes on newer Ruby 3 installations by upgrading github-pages gem dependency (#​596) [12469a0]

v1.20.2

Compare Source

1.20.2

Fixes

• label specs that rely on remote access; bump timeout on short-circuit test to make it less flaky [35eeadf]
• gexec: allow more headroom for SIGABRT-related unit tests (#​581) [5b78f40]
• Enable reading from a closed gbytes.Buffer (#​575) [061fd26]

Maintenance

• Bump github.com/onsi/ginkgo/v2 from 2.1.5 to 2.1.6 (#​583) [55d895b]
• Bump github.com/onsi/ginkgo/v2 from 2.1.4 to 2.1.5 (#​582) [346de7c]

open-telemetry/opentelemetry-go

v1.11.2: /0.34.0

Compare Source

Added

• The WithView Option is added to the go.opentelemetry.io/otel/sdk/metric package. This option is used to configure the view(s) a MeterProvider will use for all Readers that are registered with it. (#​3387)
• Add Instrumentation Scope and Version as info metric and label in Prometheus exporter. This can be disabled using the WithoutScopeInfo() option added to that package.(#​3273, #​3357)
• OTLP exporters now recognize: (#​3363)
  • OTEL_EXPORTER_OTLP_INSECURE
  • OTEL_EXPORTER_OTLP_TRACES_INSECURE
  • OTEL_EXPORTER_OTLP_METRICS_INSECURE
  • OTEL_EXPORTER_OTLP_CLIENT_KEY
  • OTEL_EXPORTER_OTLP_TRACES_CLIENT_KEY
  • OTEL_EXPORTER_OTLP_METRICS_CLIENT_KEY
  • OTEL_EXPORTER_OTLP_CLIENT_CERTIFICATE
  • OTEL_EXPORTER_OTLP_TRACES_CLIENT_CERTIFICATE
  • OTEL_EXPORTER_OTLP_METRICS_CLIENT_CERTIFICATE
• The View type and related NewView function to create a view according to the OpenTelemetry specification are added to go.opentelemetry.io/otel/sdk/metric. These additions are replacements for the View type and New function from go.opentelemetry.io/otel/sdk/metric/view. (#​3459)
• The Instrument and InstrumentKind type are added to go.opentelemetry.io/otel/sdk/metric. These additions are replacements for the Instrument and InstrumentKind types from go.opentelemetry.io/otel/sdk/metric/view. (#​3459)
• The Stream type is added to go.opentelemetry.io/otel/sdk/metric to define a metric data stream a view will produce. (#​3459)
• The AssertHasAttributes allows instrument authors to test that datapoints returned have appropriate attributes. (#​3487)

Changed

• The "go.opentelemetry.io/otel/sdk/metric".WithReader option no longer accepts views to associate with the Reader. Instead, views are now registered directly with the MeterProvider via the new WithView option. The views registered with the MeterProvider apply to all Readers. (#​3387)
• The Temporality(view.InstrumentKind) metricdata.Temporality and Aggregation(view.InstrumentKind) aggregation.Aggregation methods are added to the "go.opentelemetry.io/otel/sdk/metric".Exporter interface. (#​3260)
• The Temporality(view.InstrumentKind) metricdata.Temporality and Aggregation(view.InstrumentKind) aggregation.Aggregation methods are added to the "go.opentelemetry.io/otel/exporters/otlp/otlpmetric".Client interface. (#​3260)
• The WithTemporalitySelector and WithAggregationSelector ReaderOptions have been changed to ManualReaderOptions in the go.opentelemetry.io/otel/sdk/metric package. (#​3260)
• The periodic reader in the go.opentelemetry.io/otel/sdk/metric package now uses the temporality and aggregation selectors from its configured exporter instead of accepting them as options. (#​3260)

Fixed

• The go.opentelemetry.io/otel/exporters/prometheus exporter fixes duplicated _total suffixes. (#​3369)
• Remove comparable requirement for Readers. (#​3387)
• Cumulative metrics from the OpenCensus bridge (go.opentelemetry.io/otel/bridge/opencensus) are defined as monotonic sums, instead of non-monotonic. (#​3389)
• Asynchronous counters (Counter and UpDownCounter) from the metric SDK now produce delta sums when configured with delta temporality. (#​3398)
• Exported Status codes in the go.opentelemetry.io/otel/exporters/zipkin exporter are now exported as all upper case values. (#​3340)
• Aggregations from go.opentelemetry.io/otel/sdk/metric with no data are not exported. (#​3394, #​3436)
• Reenabled Attribute Filters in the Metric SDK. (#​3396)
• Asynchronous callbacks are only called if they are registered with at least one instrument that does not use drop aggragation. (#​3408)
• Do not report empty partial-success responses in the go.opentelemetry.io/otel/exporters/otlp exporters. (#​3438, #​3432)
• Handle partial success responses in go.opentelemetry.io/otel/exporters/otlp/otlpmetric exporters. (#​3162, #​3440)
• Prevent duplicate Prometheus description, unit, and type. (#​3469)
• Prevents panic when using incorrect attribute.Value.As[Type]Slice(). (#​3489)

Removed

• The go.opentelemetry.io/otel/exporters/otlp/otlpmetric.Client interface is removed. (#​3486)
• The go.opentelemetry.io/otel/exporters/otlp/otlpmetric.New function is removed. Use the otlpmetric[http|grpc].New directly. (#​3486)

Deprecated

• The go.opentelemetry.io/otel/sdk/metric/view package is deprecated. Use Instrument, InstrumentKind, View, and NewView in go.opentelemetry.io/otel/sdk/metric instead. (#​3476)

kubernetes/api

v0.26.0

Compare Source

v0.25.5

Compare Source

v0.25.4

Compare Source

kubernetes/apimachinery

v0.26.0

Compare Source

v0.25.5

Compare Source

v0.25.4

Compare Source

ossf/scorecard-action

v2.0.6

Compare Source

What's Changed

• Fix - Broken dockerfile by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/979

Full Changelog: https://github.com/ossf/scorecard-action/compare/v2.0.5...v2.0.6

v2.0.5

Compare Source

What's Changed

• Remove trailing space from example by @​jamacku in https://github.com/ossf/scorecard-action/pull/955
• :seedling: Bump actions/cache from 3.0.8 to 3.0.10 by @​dependabot in https://github.com/ossf/scorecard-action/pull/956
• :seedling: Bump github/codeql-action from 2.1.25 to 2.1.26 by @​dependabot in https://github.com/ossf/scorecard-action/pull/957
• :seedling: Bump step-security/harden-runner from 1.4.5 to 1.5.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/958
• :seedling: Bump debian from 5cf1d98 to b46fc4e by @​dependabot in https://github.com/ossf/scorecard-action/pull/959
• :seedling: Bump github.com/sigstore/cosign from 1.12.1 to 1.13.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/962
• :seedling: Upgrade to go 1.19 by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/961
• :seedling: Bump github.com/spf13/cobra from 1.5.0 to 1.6.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/967
• :seedling: Bump golang from c2a98a5 to b850621 by @​dependabot in https://github.com/ossf/scorecard-action/pull/966
• :seedling: Bump golang from b850621 to 25de7b6 by @​dependabot in https://github.com/ossf/scorecard-action/pull/968
• New release for Scorecard v4.8.0 by @​naveensrinivasan in https://github.com/ossf/scorecard-action/pull/969

New Contributors

• @​jamacku made their first contribution in https://github.com/ossf/scorecard-action/pull/955

Full Changelog: https://github.com/ossf/scorecard-action/compare/v2.0.4...v2.0.5

v2.0.4

Compare Source

Fixes #​856

What's Changed

• :seedling: Bump github.com/caarlos0/env/v6 from 6.10.0 to 6.10.1 by @​dependabot in https://github.com/ossf/scorecard-action/pull/934
• feat: do not run signing on pull requests by @​laurentsimon in https://github.com/ossf/scorecard-action/pull/935
• :seedling: Bump debian from 11.4-slim to 11.5-slim by @​dependabot in https://github.com/ossf/scorecard-action/pull/936
• :seedling: Bump github.com/sigstore/cosign from 1.11.1 to 1.12.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/938
• :seedling: Bump github/codeql-action from 2.1.22 to 2.1.24 by @​dependabot in https://github.com/ossf/scorecard-action/pull/941
• 🐛 Restore behavior of ignoring scorecard runtime errors by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/948
• :seedling: Bump actions/dependency-review-action from 2.1.0 to 2.4.0 by @​dependabot in https://github.com/ossf/scorecard-action/pull/950
• :seedling: Bump github.com/sigstore/cosign from 1.12.0 to 1.12.1 by @​dependabot in https://github.com/ossf/scorecard-action/pull/947
• :seedling: Bump github/codeql-action from 2.1.24 to 2.1.25 by @​dependabot in https://github.com/ossf/scorecard-action/pull/949
• :seedling: Bump codecov/codecov-action from 3.1.0 to 3.1.1 by @​dependabot in https://github.com/ossf/scorecard-action/pull/942
• Create v2.0.4 patch by @​spencerschrock in https://github.com/ossf/scorecard-action/pull/952

New Contributors

• @​spencerschrock made their first contribution in https://github.com/ossf/scorecard-action/pull/948

Full Changelog: https://github.com/ossf/scorecard-action/compare/v2.0.3...v2.0.4

kubernetes-sigs/controller-runtime

v0.13.1

Compare Source

What's Changed

• ✨ Add tls options to manager.Options in https://github.com/kubernetes-sigs/controller-runtime/pull/2028

Full Changelog: https://github.com/kubernetes-sigs/controller-runtime/compare/v0.13.0...v0.13.1

---

Configuration

📅 Schedule: Branch creation - "before 3am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• [ ] If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[viccuad]

This looks like another API breakage in open-telemetry, again:

Error: ../../../go/pkg/mod/go.opentelemetry.io/otel/exporters/otlp/[email protected]/internal/oconf/options.go:107:62: undefined: internal.GetUserAgentHeader

[viccuad]

looking at controller-runtime bump, together with https://github.com/kubewarden/audit-scanner/pull/39.

[jvanz]

I've built the container image and ran the e2e test with the controller with these updates. All passed