Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 31, 2025

Bumps the go group with 8 updates in the / directory:

Package From To
cuelang.org/go 0.14.0 0.14.1
github.com/fluxcd/pkg/apis/meta 1.18.0 1.20.0
github.com/fluxcd/pkg/http/fetch 0.17.0 0.19.0
github.com/fluxcd/pkg/kustomize 1.19.0 1.20.0
github.com/fluxcd/pkg/runtime 0.79.0 0.82.0
github.com/mikefarah/yq/v4 4.45.4 4.47.1
helm.sh/helm/v3 3.18.5 3.18.6
ocm.software/ocm 0.27.0 0.28.0

Updates cuelang.org/go from 0.14.0 to 0.14.1

Updates github.com/fluxcd/pkg/apis/meta from 1.18.0 to 1.20.0

Commits
  • a5e02ce Merge pull request #1013 from fluxcd/meta-history
  • 71c0a08 Prepare release
  • 4aaf176 meta: Add History API for tracking reconcile runs in status
  • 7f090e9 Merge pull request #1014 from fluxcd/k8s-1.34
  • ed9f247 Prepare release
  • 7b0d9ad Update Go to 1.25
  • 622aa13 Update dependencies to Kubernetes v1.34.0
  • ca950d1 Merge pull request #1011 from cappyzawa/feat/object-level-config-validation
  • 524b599 Prepare for release
  • c7e0500 auth: add object-level configuration validation
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/http/fetch from 0.17.0 to 0.19.0

Commits
  • e32ccc2 Merge pull request #763 from fluxcd/kubernetes-1.30
  • 2b974af Update sigs.k8s.io/controller-tools to v0.15.0
  • 52c1fc5 Update sigs.k8s.io/controller-runtime to v0.18.0
  • c906252 Update dependencies to Kubernetes 1.30
  • 92c1348 Merge pull request #764 from fluxcd/dependabot/github_actions/ci-e44cfae560
  • ccb916a build(deps): bump the ci group with 3 updates
  • 6081556 Merge pull request #761 from fluxcd/kustomize-name-prefix-suffix
  • abf5675 kustomize: Add support for namePrefix and nameSuffix
  • 98d2522 Merge pull request #760 from fluxcd/dependabot/github_actions/ci-8f082d4f6d
  • efcd824 build(deps): bump docker/setup-buildx-action in the ci group
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/kustomize from 1.19.0 to 1.20.0

Commits

Updates github.com/fluxcd/pkg/runtime from 0.79.0 to 0.82.0

Commits
  • a5e02ce Merge pull request #1013 from fluxcd/meta-history
  • 71c0a08 Prepare release
  • 4aaf176 meta: Add History API for tracking reconcile runs in status
  • 7f090e9 Merge pull request #1014 from fluxcd/k8s-1.34
  • ed9f247 Prepare release
  • 7b0d9ad Update Go to 1.25
  • 622aa13 Update dependencies to Kubernetes v1.34.0
  • ca950d1 Merge pull request #1011 from cappyzawa/feat/object-level-config-validation
  • 524b599 Prepare for release
  • c7e0500 auth: add object-level configuration validation
  • Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/tar from 0.13.0 to 0.14.0

Commits
  • 909b315 Merge pull request #651 from fluxcd/git-upgrade-deps
  • 3249e6d git: upgrade dependencies
  • 6eae7b4 Merge pull request #650 from pjbgf/upstream-billy
  • e8ee260 git/gogit: Replaces fs with upstream osfs.BoundOS
  • 01981ea Merge pull request #649 from fluxcd/dependabot/github_actions/ci-915f3d3f9a
  • c6bb1fa build(deps): bump the ci group with 2 updates
  • eedb1a0 Merge pull request #646 from fluxcd/oci-cr-logger
  • e6669d8 oci/auth: Add test to check for non-test flags
  • f01d884 oci: Use controller-runtime pkg/log explicitly
  • 488252e Merge pull request #643 from fluxcd/dependabot/github_actions/ci-81eb07bab1
  • Additional commits viewable in compare view

Updates github.com/mikefarah/yq/v4 from 4.45.4 to 4.47.1

Release notes

Sourced from github.com/mikefarah/yq/v4's releases.

v4.47.1 - Merge Anchor fixes (with flag)

  • Fixed merge anchor behaviour (<<); #2404, #2110, #2386, #2178 Huge thanks to @​stevenwdv! Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes
  • Fixed panic for syntax error when creating a map #2423
  • Bumped dependencies

v4.46.1 - INI support + bug fixes

  • Added INI support
  • Fixed 'add' operator when piped in with no data #2378, #2383, #2384
  • Fixed delete after slice problem (bad node path) #2387 Thanks @​antoinedeschenes
  • Fixed yq small build Thanks @​imzue
  • Switched to YAML org supported go-yaml!
  • Bumped dependencies
Changelog

Sourced from github.com/mikefarah/yq/v4's changelog.

4.47.1:

  • Fixed merge anchor behaviour (<<); #2404, #2110, #2386, #2178 Huge thanks to @​stevenwdv! Note that you will need to set --yaml-fix-merge-anchor-to-spec to see the fixes
  • Fixed panic for syntax error when creating a map #2423
  • Bumped dependencies

4.46.1:

  • Added INI support
  • Fixed 'add' operator when piped in with no data #2378, #2383, #2384
  • Fixed delete after slice problem (bad node path) #2387 Thanks @​antoinedeschenes
  • Fixed yq small build Thanks @​imzue
  • Switched to YAML org supported go-yaml!
  • Bumped dependencies
Commits

Updates github.com/onsi/gomega from 1.38.0 to 1.38.2

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.38.2

1.38.2

  • roll back to go 1.23.0 [c404969]

v1.38.1

1.38.1

Fixes

Numerous minor fixes and dependency bumps

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.38.2

  • roll back to go 1.23.0 [c404969]

1.38.1

Fixes

Numerous minor fixes and dependency bumps

Commits

Updates github.com/stretchr/testify from 1.10.0 to 1.11.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.11.1

This release fixes #1785 introduced in v1.11.0 where expected argument values implementing the stringer interface (String() string) with a method which mutates their value, when passed to mock.Mock.On (m.On("Method", <expected>).Return()) or actual argument values passed to mock.Mock.Called may no longer match one another where they previously did match. The behaviour prior to v1.11.0 where the stringer is always called is restored. Future testify releases may not call the stringer method at all in this case.

What's Changed

Full Changelog: stretchr/testify@v1.11.0...v1.11.1

v1.11.0

What's Changed

Functional Changes

v1.11.0 Includes a number of performance improvements.

Fixes

Documentation, Build & CI

... (truncated)

Commits
  • 2a57335 Merge pull request #1788 from brackendawson/1785-backport-1.11
  • af8c912 Backport #1786 to release/1.11
  • b7801fb Merge pull request #1778 from stretchr/dependabot/github_actions/actions/chec...
  • 69831f3 build(deps): bump actions/checkout from 4 to 5
  • a53be35 Improve captureTestingT helper
  • aafb604 mock: improve formatting of error message
  • 7218e03 improve error msg
  • 929a212 Merge pull request #1758 from stretchr/dolmen/suite-faster-method-filtering
  • bc7459e suite: faster filtering of methods (-testify.m)
  • 7d37b5c suite: refactor methodFilter
  • Additional commits viewable in compare view

Updates helm.sh/helm/v3 from 3.18.5 to 3.18.6

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.18.6 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.18.6. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.0 is the next minor release and will be on September 11, 2025

Changelog

  • fix(helm-lint): fmt b76a950f6835474e0906b96c9ec68a2eff3a6430 (Isaiah Lewis)
  • fix(helm-lint): Add TLSClientConfig b79a4212e803ad50c66f06799b8bbdb51f918603 (Isaiah Lewis)
  • fix(helm-lint): Add HTTP/HTTPS URL support for json schema references b9180e674fccb57e6ea6934ed7deb4448a3c9ddb (Isaiah Lewis)
Commits
  • b76a950 fix(helm-lint): fmt
  • b79a421 fix(helm-lint): Add TLSClientConfig
  • b9180e6 fix(helm-lint): Add HTTP/HTTPS URL support for json schema references
  • See full diff in compare view

Updates k8s.io/api from 0.33.3 to 0.34.0

Commits
  • ae6c3b9 Update dependencies to v0.34.0 tag
  • 133a39c Merge remote-tracking branch 'origin/master' into release-1.34
  • fd087be clarify that staging repos are automatically published
  • ff163ef add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • 5ec86fc link to what a staging repository is
  • 08c5dee docs: clarify that this is a staging repository and not for direct contributions
  • ba64d0b Update prerelease lifecycle to v1.34
  • 25f849c Merge pull request #132522 from sunya-ch/KEP-5075-PR
  • baa1eb1 KEP-5075: generated codes from make update
  • 740b2c9 KEP-5075: API updates
  • Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.33.3 to 0.34.0

Commits
  • ce01291 Update dependencies to v0.34.0 tag
  • aada5e8 Merge remote-tracking branch 'origin/master' into release-1.34
  • bad5b2a clarify that staging repos are automatically published
  • f498996 add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • f782221 link to what a staging repository is
  • 3625d64 docs: clarify that this is a staging repository and not for direct contributions
  • 71e26b6 Bump etcd sdk to v3.6.4
  • 056a425 Merge pull request #133180 from ylink-lfs/chore/ptr_cast_replace
  • 63d27f2 Merge pull request #132942 from thockin/kyaml
  • 6f8ce15 Allow white-spaced CABundle during webhook client creation and validation (#1...
  • Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.33.3 to 0.34.0

Commits
  • b72d93d Merge remote-tracking branch 'origin/master' into release-1.34
  • cd8b91c clarify that staging repos are automatically published
  • 8c59599 add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • ec3cea5 link to what a staging repository is
  • e4db694 docs: clarify that this is a staging repository and not for direct contributions
  • 04507a3 Merge pull request #132942 from thockin/kyaml
  • 50e39b1 Merge pull request #132935 from benluddy/cbor-bump-custom-marshalers
  • 7d108e8 Re-vendor sigs.k8s.io/yaml @ v1.6.0
  • 58c4eb0 Merge pull request #133130 from ylink-lfs/chore/residual_boolptr_removal
  • 38a24e6 chore: residual boolptr and intptr removal
  • Additional commits viewable in compare view

Updates k8s.io/client-go from 0.33.3 to 0.34.0

Commits
  • b1c7d7b Update dependencies to v0.34.0 tag
  • 97396af Merge remote-tracking branch 'origin/master' into release-1.34
  • 5f737f3 clarify that staging repos are automatically published
  • 0b8655b add pointer to CONTRIBUTING.md for more details on contributing, clarify read...
  • c00384c link to what a staging repository is
  • b53b1f8 docs: clarify that this is a staging repository and not for direct contributions
  • 42e6182 KEP-5075: generated codes from make update
  • da11948 Merge pull request #130653 from yliaog/master
  • 3b7d818 extended resource backed by DRA: codegen
  • bb11581 Merge pull request #130160 from KobayashiD27/dra-device-binding-conditions
  • Additional commits viewable in compare view

Updates ocm.software/ocm from 0.27.0 to 0.28.0

Release notes

Sourced from ocm.software/ocm's releases.

v0.28.0

What's Changed

🚀 Features

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

Full Changelog: open-component-model/ocm@v0.27...v0.28.0

v0.28.0-rc.1

What's Changed

🚀 Features

🐛 Bug Fixes

⬆️ Dependencies

🧰 Maintenance

... (truncated)

Commits
  • 732be84 chore(deps): bump the go group with 5 updates (#1553)
  • 7468bf6 fix: double slash in imageReference (#1548)
  • 61ca8cb chore(deps): bump github/codeql-action from 3.29.3 to 3.29.4 in the ci group ...
  • 361f254 feat: add ref to github access spec (#1550)
  • 0e3c9e2 chore(deps): bump the ci group with 2 updates (#1549)
  • 05c2413 chore: update 'flake.nix' (#1546)
  • 79d44f0 chore(deps): bump the go group with 14 updates (#1547)
  • fc40108 chore(deps): bump the go group across 1 directory with 6 updates (#1542)
  • fafac49 chore(deps): bump sigstore/cosign-installer from 3.9.1 to 3.9.2 in the ci gro...
  • 22735b5 chore(deps): bump DeterminateSystems/nix-installer-action from 18 to 19 in th...
  • Additional commits viewable in compare view

Updates sigs.k8s.io/controller-runtime from 0.21.0 to 0.22.0

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.22.0

🔆 Highlights

⚠️ Breaking changes

✨ Features

🐛 Bugfixes

🌱 Other

📖 Documentation

... (truncated)

Commits
  • fc84a60 Merge pull request #3300 from troy0820/troy0820/k8s-deps-1.34
  • c430462 update k8s.io dependencies to v0.34.0
  • 7085be7 Merge pull request #3299 from sbueringer/pr-clarify-state-of-warmup
  • 5fd7ff6 Clarify state of Warmup feature
  • e922805 Merge pull request #3293 from s-z-z/certwatcher-patch
  • 41feb4f feat(certwatcher): add instance-specific logger with cert/key context
  • 0f4e99e Merge pull request #3296 from alvaroaleman/reconciliationtimeout
  • f8db32f ✨ Add a ReconciliationTimeout option

Bumps the go group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| cuelang.org/go | `0.14.0` | `0.14.1` |
| [github.com/fluxcd/pkg/apis/meta](https://github.com/fluxcd/pkg) | `1.18.0` | `1.20.0` |
| [github.com/fluxcd/pkg/http/fetch](https://github.com/fluxcd/pkg) | `0.17.0` | `0.19.0` |
| [github.com/fluxcd/pkg/kustomize](https://github.com/fluxcd/pkg) | `1.19.0` | `1.20.0` |
| [github.com/fluxcd/pkg/runtime](https://github.com/fluxcd/pkg) | `0.79.0` | `0.82.0` |
| [github.com/mikefarah/yq/v4](https://github.com/mikefarah/yq) | `4.45.4` | `4.47.1` |
| [helm.sh/helm/v3](https://github.com/helm/helm) | `3.18.5` | `3.18.6` |
| [ocm.software/ocm](https://github.com/open-component-model/ocm) | `0.27.0` | `0.28.0` |



Updates `cuelang.org/go` from 0.14.0 to 0.14.1

Updates `github.com/fluxcd/pkg/apis/meta` from 1.18.0 to 1.20.0
- [Commits](fluxcd/pkg@apis/meta/v1.18.0...apis/meta/v1.20.0)

Updates `github.com/fluxcd/pkg/http/fetch` from 0.17.0 to 0.19.0
- [Commits](fluxcd/pkg@git/v0.17.0...git/v0.19.0)

Updates `github.com/fluxcd/pkg/kustomize` from 1.19.0 to 1.20.0
- [Commits](fluxcd/pkg@apis/meta/v1.19.0...apis/meta/v1.20.0)

Updates `github.com/fluxcd/pkg/runtime` from 0.79.0 to 0.82.0
- [Commits](fluxcd/pkg@runtime/v0.79.0...runtime/v0.82.0)

Updates `github.com/fluxcd/pkg/tar` from 0.13.0 to 0.14.0
- [Commits](fluxcd/pkg@git/v0.13.0...git/v0.14.0)

Updates `github.com/mikefarah/yq/v4` from 4.45.4 to 4.47.1
- [Release notes](https://github.com/mikefarah/yq/releases)
- [Changelog](https://github.com/mikefarah/yq/blob/master/release_notes.txt)
- [Commits](mikefarah/yq@v4.45.4...v4.47.1)

Updates `github.com/onsi/gomega` from 1.38.0 to 1.38.2
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.38.0...v1.38.2)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.1)

Updates `helm.sh/helm/v3` from 3.18.5 to 3.18.6
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.18.5...v3.18.6)

Updates `k8s.io/api` from 0.33.3 to 0.34.0
- [Commits](kubernetes/api@v0.33.3...v0.34.0)

Updates `k8s.io/apiextensions-apiserver` from 0.33.3 to 0.34.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.33.3...v0.34.0)

Updates `k8s.io/apimachinery` from 0.33.3 to 0.34.0
- [Commits](kubernetes/apimachinery@v0.33.3...v0.34.0)

Updates `k8s.io/client-go` from 0.33.3 to 0.34.0
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.33.3...v0.34.0)

Updates `ocm.software/ocm` from 0.27.0 to 0.28.0
- [Release notes](https://github.com/open-component-model/ocm/releases)
- [Changelog](https://github.com/open-component-model/ocm/blob/main/RELEASE_PROCESS.md)
- [Commits](open-component-model/ocm@v0.27...v0.28)

Updates `sigs.k8s.io/controller-runtime` from 0.21.0 to 0.22.0
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.21.0...v0.22.0)

---
updated-dependencies:
- dependency-name: cuelang.org/go
  dependency-version: 0.14.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/apis/meta
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/http/fetch
  dependency-version: 0.19.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/kustomize
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/runtime
  dependency-version: 0.82.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/fluxcd/pkg/tar
  dependency-version: 0.14.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mikefarah/yq/v4
  dependency-version: 4.47.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.38.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.18.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: k8s.io/api
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: ocm.software/ocm
  dependency-version: 0.28.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Aug 31, 2025
@dependabot dependabot bot requested a review from a team as a code owner August 31, 2025 15:03
@dependabot dependabot bot added kind/chore chore, maintenance, etc. kind/dependency dependency update, etc. labels Aug 31, 2025
@hilmarf
Copy link
Member

hilmarf commented Sep 4, 2025

@dependabot recreate

Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 4, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 4, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/go-7e984cecd6 branch September 4, 2025 13:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/chore chore, maintenance, etc. kind/dependency dependency update, etc.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant