Bump the security group across 1 directory with 6 updates#105
Closed
dependabot[bot] wants to merge 1 commit intomainfrom
Closed
Bump the security group across 1 directory with 6 updates#105dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the security group with 4 updates in the / directory: [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus), [github.com/vmware-tanzu/velero](https://github.com/vmware-tanzu/velero), [k8s.io/api](https://github.com/kubernetes/api) and [k8s.io/client-go](https://github.com/kubernetes/client-go). Updates `github.com/sirupsen/logrus` from 1.9.3 to 1.9.4 - [Release notes](https://github.com/sirupsen/logrus/releases) - [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md) - [Commits](sirupsen/logrus@v1.9.3...v1.9.4) Updates `github.com/vmware-tanzu/velero` from 1.17.1 to 1.17.2 - [Release notes](https://github.com/vmware-tanzu/velero/releases) - [Changelog](https://github.com/vmware-tanzu/velero/blob/main/CHANGELOG.md) - [Commits](vmware-tanzu/velero@v1.17.1...v1.17.2) Updates `k8s.io/api` from 0.34.2 to 0.35.1 - [Commits](kubernetes/api@v0.34.2...v0.35.1) Updates `k8s.io/apimachinery` from 0.34.2 to 0.35.1 - [Commits](kubernetes/apimachinery@v0.34.2...v0.35.1) Updates `k8s.io/client-go` from 0.34.2 to 0.35.1 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.34.2...v0.35.1) Updates `k8s.io/utils` from 0.0.0-20250604170112-4c0f3b243397 to 0.0.0-20251002143259-bc988d571ff4 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: github.com/sirupsen/logrus dependency-version: 1.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: github.com/vmware-tanzu/velero dependency-version: 1.17.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/api dependency-version: 0.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apimachinery dependency-version: 0.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/client-go dependency-version: 0.35.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/utils dependency-version: 0.0.0-20251002143259-bc988d571ff4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security ... Signed-off-by: dependabot[bot] <support@github.com>
Contributor
Author
|
Looks like these dependencies are updatable in another way, so this is no longer needed. |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the security group with 4 updates in the / directory: github.com/sirupsen/logrus, github.com/vmware-tanzu/velero, k8s.io/api and k8s.io/client-go.
Updates
github.com/sirupsen/logrusfrom 1.9.3 to 1.9.4Release notes
Sourced from github.com/sirupsen/logrus's releases.
Commits
b61f268Merge pull request #1472 from goldlinker/master15c29dbrefactor: replace the deprecated function in the ioutil packagecb253f3Merge pull request #1464 from thaJeztah/touchup_godoc29b2337Merge pull request #1468 from thaJeztah/touchup_readmed916819Merge pull request #1427 from dolmen/fix-testify-usage135e482README: small touch-ups2c5fa36Merge pull request #1467 from thaJeztah/rm_old_badge877ececREADME: remove travis badge55cf256Merge pull request #1393 from jsoref/grammar21bae50Merge pull request #1426 from dolmen/testing-fix-use-of-math-randUpdates
github.com/vmware-tanzu/velerofrom 1.17.1 to 1.17.2Release notes
Sourced from github.com/vmware-tanzu/velero's releases.
... (truncated)
Commits
7013a40Merge pull request #9479 from blackpiglet/add_role_rolebinding_in_resotre_seq...b188701Add Role, RoleBinding, ClusterRole, and ClusterRoleBinding in restore sequence.9d79e48Merge pull request #9458 from Lyndon-Li/release-1.171e350c0Merge branch 'release-1.17' into release-1.17339dee0Merge pull request #9459 from blackpiglet/bump_golang_and_ubuntu77b6812Replace golang.org/x/net/context with context package to fix linter issues.8e35a19Bump Golang to v1.24.11 and go/x/crypto to v0.45.0 to fix CVEs.69f29651.17.2 changelogdf05057Fix managed fields patch for resources using GenerateName (#9408)cad0169Merge pull request #9409 from shubham-pampattiwar/fix-volume-info-generatenam...Updates
k8s.io/apifrom 0.34.2 to 0.35.1Commits
4aa217dUpdate dependencies to v0.35.1 tagbbcbaa8Merge remote-tracking branch 'origin/master' into release-1.355bced61Bump golang.org/x/crypto to v0.45.039e2e26Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fixc22b4a1vendor: update vendor and license metadata after replacing BeTrue usage in cs...e3b1f3dResolve lint restriction on BeTrue by introducing Succeed() with contextual e...3da327cUpdate vendored dependenciesc764b44Merge pull request #132919 from ndixita/pod-level-in-place-pod-resizeaced136Generated files from API changes02d790dAdding Resources and AllocatedResoures fields to the list of expected fields ...Updates
k8s.io/apimachineryfrom 0.34.2 to 0.35.1Commits
72d71eaMerge remote-tracking branch 'origin/master' into release-1.35e2a2dbcBump golang.org/x/crypto to v0.45.02e9c228Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fixf274aacvendor: update vendor and license metadata after replacing BeTrue usage in cs...9445443Resolve lint restriction on BeTrue by introducing Succeed() with contextual e...52154f7Update vendored dependencies5a348c5KEP-5471: Extend tolerations operators (#134665)6f89492Merge pull request #133648 from richabanker/merged-discoveryc77dde2util/sort: Add MergePreservingRelativeOrder for topological sorting729c13dMerge pull request #134624 from yt2985/podcertificates-betaUpdates
k8s.io/client-gofrom 0.34.2 to 0.35.1Commits
b464ad8Update dependencies to v0.35.1 tag2d83546Merge remote-tracking branch 'origin/master' into release-1.3556b4af2Merge pull request #135591 from p0lyn0mial/upstream-watchlist-reflector-log-f...891f94cMerge remote-tracking branch 'origin/master' into release-1.3565ffe04Merge pull request #135580 from serathius/client-go-transformer2fe4ac2downgrade reflector watchlist fallback log to V(4)97256a6Bump golang.org/x/crypto to v0.45.046360b5Merge pull request #135131 from Dev1622/sig-storage/mock-expand-flake-fix171ef8cUse transformer in consistency checker3878a64vendor: update vendor and license metadata after replacing BeTrue usage in cs...Updates
k8s.io/utilsfrom 0.0.0-20250604170112-4c0f3b243397 to 0.0.0-20251002143259-bc988d571ff4Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions