Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(dependabot): bump sigs.k8s.io/kustomize/kyaml from 0.16.0 to 0.17.0 #2081

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github May 13, 2024

Bumps sigs.k8s.io/kustomize/kyaml from 0.16.0 to 0.17.0.

Release notes

Sourced from sigs.k8s.io/kustomize/kyaml's releases.

api/v0.17.0

Breaking changes

#5519: Fix null YAML values being replaced by "null"

Features

#5539: Include exec plugin stderr with wrapped error #5542: fix: improve accumulation failure message #5550: use Strict unmarshal when read TransformerConfig

Bug fixes/performance improvements

#5234: fix edit set image to parse both tag and digest #5236: Fix name in a configMapRef missing hash #5047 #5463: Fix version tag management #5510: Skip KUSTOMIZE_PLUGIN_CONFIG_* env variables when too large #5621: Use require for Error and NoError

Dependencies

#5044: Remove non-essential dependency imdario/mergo #5479: Revert "Switch to json-patch v5" #5541: Use canonical json-patch v4 import #5555: chore: Update to Go v1.21 #5615: update dependencies google.golang.org/[email protected] #5639: Update kyaml to v0.17.0

chore

#5521: add license for api/pkg/util/image.go #5621: Use require for Error and NoError #5622: Pin tool versions with hack/go.mod #5624: Use a local test server instead of example.com #5627: Remove klog/v1 dependencies

kyaml/v0.17.0

Breaking changes

#5519: Fix null YAML values being replaced by "null"

Features

#5551: Improve framework documentation

Bug fixes/performance improvements

#5489: Fix typo in merge2 #5621: Use require for Error and NoError #5622: Pin tool versions with hack/go.mod

Dependencies

#5555: chore: Update to Go v1.21 #5615: update dependencies google.golang.org/[email protected]

Commits
  • 1b44976 Merge pull request #5640 from koba1t/pinToCmdConfig
  • a9f7a04 Update cmd/config to v0.14.0
  • cd954ce Merge pull request #5639 from koba1t/pinToKyaml
  • 10c292f Update kyaml to v0.17.0
  • a9bfabc Merge pull request #5637 from karlkfi/karl-fix-generate
  • 398aa36 Merge pull request #5638 from kubernetes-sigs/dependabot/go_modules/hack/gith...
  • 8f2d243 Merge pull request #5634 from kubernetes-sigs/dependabot/go_modules/hack/gith...
  • fd06780 build(deps): bump github.com/cloudflare/circl in /hack
  • 562cbc1 build(deps): bump github.com/cli/cli from 0.6.0 to 1.2.1 in /hack
  • d5f3c4f Merge pull request #5635 from kubernetes-sigs/dependabot/go_modules/hack/gith...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [sigs.k8s.io/kustomize/kyaml](https://github.com/kubernetes-sigs/kustomize) from 0.16.0 to 0.17.0.
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.16.0...api/v0.17.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/kustomize/kyaml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner May 13, 2024 19:13
@dependabot dependabot bot added area/dependency Issues or PRs related to dependency changes go Pull requests that update Go code labels May 13, 2024
@kyma-bot kyma-bot added cla: yes Indicates the PR's author has signed the CLA. size/XS Denotes a PR that changes 0-9 lines, ignoring generated files. labels May 13, 2024
@kyma-bot kyma-bot added the lgtm Looks good to me! label May 14, 2024
@halamix2 halamix2 closed this May 14, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github May 14, 2024

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@halamix2 halamix2 reopened this May 14, 2024
@kyma-bot kyma-bot merged commit 94d7c0b into main May 14, 2024
14 of 25 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/sigs.k8s.io/kustomize/kyaml-0.17.0 branch May 14, 2024 05:26
pPrecel pushed a commit to pPrecel/cli that referenced this pull request May 20, 2024
Bumps [sigs.k8s.io/kustomize/kyaml](https://github.com/kubernetes-sigs/kustomize) from 0.16.0 to 0.17.0.
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.16.0...api/v0.17.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/kustomize/kyaml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
kyma-bot pushed a commit that referenced this pull request May 21, 2024
* chore(dependabot): bump k8s.io/api from 0.29.1 to 0.29.2 (#1955)

Bumps [k8s.io/api](https://github.com/kubernetes/api) from 0.29.1 to 0.29.2.
- [Commits](kubernetes/api@v0.29.1...v0.29.2)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump github.com/opencontainers/image-spec (#1954)

Bumps [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) from 1.1.0-rc6 to 1.1.0.
- [Release notes](https://github.com/opencontainers/image-spec/releases)
- [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md)
- [Commits](opencontainers/image-spec@v1.1.0-rc6...v1.1.0)

---
updated-dependencies:
- dependency-name: github.com/opencontainers/image-spec
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump the go_modules group across 1 directories with 1 update (#1950)

Bumps the go_modules group with 1 update in the /. directory: [helm.sh/helm/v3](https://github.com/helm/helm).


Updates `helm.sh/helm/v3` from 3.14.0 to 3.14.1
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.14.0...v3.14.1)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump k8s.io/cli-runtime from 0.29.1 to 0.29.2 (#1953)

Bumps [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) from 0.29.1 to 0.29.2.
- [Commits](kubernetes/cli-runtime@v0.29.1...v0.29.2)

---
updated-dependencies:
- dependency-name: k8s.io/cli-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump sigs.k8s.io/controller-runtime (#1952)

Bumps [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) from 0.17.0 to 0.17.2.
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.17.0...v0.17.2)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump github.com/mandelsoft/vfs from 0.4.0 to 0.4.1 (#1956)

Bumps [github.com/mandelsoft/vfs](https://github.com/mandelsoft/vfs) from 0.4.0 to 0.4.1.
- [Release notes](https://github.com/mandelsoft/vfs/releases)
- [Commits](mandelsoft/vfs@v0.4...v0.4.1)

---
updated-dependencies:
- dependency-name: github.com/mandelsoft/vfs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump k8s.io/apiextensions-apiserver (#1957)

Bumps [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) from 0.29.1 to 0.29.2.
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.29.1...v0.29.2)

---
updated-dependencies:
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump go.uber.org/zap from 1.26.0 to 1.27.0 (#1961)

Bumps [go.uber.org/zap](https://github.com/uber-go/zap) from 1.26.0 to 1.27.0.
- [Release notes](https://github.com/uber-go/zap/releases)
- [Changelog](https://github.com/uber-go/zap/blob/master/CHANGELOG.md)
- [Commits](uber-go/zap@v1.26.0...v1.27.0)

---
updated-dependencies:
- dependency-name: go.uber.org/zap
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump helm.sh/helm/v3 from 3.14.1 to 3.14.2 (#1965)

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.14.1 to 3.14.2.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.14.1...v3.14.2)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump github.com/mandelsoft/vfs from 0.4.1 to 0.4.3 (#1968)

Bumps [github.com/mandelsoft/vfs](https://github.com/mandelsoft/vfs) from 0.4.1 to 0.4.3.
- [Release notes](https://github.com/mandelsoft/vfs/releases)
- [Commits](mandelsoft/vfs@v0.4.1...v0.4.3)

---
updated-dependencies:
- dependency-name: github.com/mandelsoft/vfs
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore: Bump `ocm` dependency to `v0.7.0` (#1971)

* chore: Bump 'ocm' dependency to 0.7.0

* revert isEquivalent undo

* Update CODEOWNERS (#1974)

* chore: Add Python 3.12 environment (#1976)

* Add Python 3.12

* docs: fix identation

* chore: Deprecate Python39 environment (#1983)

* chore: Remove Nodejs16  environment (#1985)

* chore: Add Nodejs20 environment (#1982)

* Bump hydroform (#1998)

* Bump Hydroform functions (#2000)

* chore: Deprecate Nodejs18 environment (#2005)

* fix: Security config ignored (#2003)

* Make security config from config file work

* Make security config from config file work

* Make security config from config file work

* review fix

* chore: Make Nodejs20 default runtime (#2006)

* chore: Make Nodejs20 default runtime

* use non-default runtime in tests

* chore(dependabot): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (#1978)

Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.4 to 1.9.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.8.4...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#2015)

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.15.0 to 2.17.1.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.15.0...v2.17.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump helm.sh/helm/v3 from 3.14.2 to 3.14.4 (#2038)

Bumps [helm.sh/helm/v3](https://github.com/helm/helm) from 3.14.2 to 3.14.4.
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.14.2...v3.14.4)

---
updated-dependencies:
- dependency-name: helm.sh/helm/v3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump github.com/containerd/containerd (#2060)

Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd) from 1.7.13 to 1.7.16.
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.7.13...v1.7.16)

---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(deps): bump the go_modules group across 1 directory with 5 updates (#2064)

Bumps the go_modules group with 3 updates in the / directory: [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose), [github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) and google.golang.org/protobuf.


Updates `github.com/go-jose/go-jose/v3` from 3.0.1 to 3.0.3
- [Release notes](https://github.com/go-jose/go-jose/releases)
- [Changelog](https://github.com/go-jose/go-jose/blob/v3.0.3/CHANGELOG.md)
- [Commits](go-jose/go-jose@v3.0.1...v3.0.3)

Updates `github.com/sigstore/cosign/v2` from 2.2.2 to 2.2.4
- [Release notes](https://github.com/sigstore/cosign/releases)
- [Changelog](https://github.com/sigstore/cosign/blob/main/CHANGELOG.md)
- [Commits](sigstore/cosign@v2.2.2...v2.2.4)

Updates `golang.org/x/net` from 0.20.0 to 0.22.0
- [Commits](golang/net@v0.20.0...v0.22.0)

Updates `google.golang.org/protobuf` from 1.33.0 to 1.34.0

Updates `gopkg.in/go-jose/go-jose.v2` from 2.6.2 to 2.6.3

---
updated-dependencies:
- dependency-name: github.com/go-jose/go-jose/v3
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/sigstore/cosign/v2
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: gopkg.in/go-jose/go-jose.v2
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump istio.io/client-go from 1.20.2 to 1.21.2 (#2077)

Bumps [istio.io/client-go](https://github.com/istio/client-go) from 1.20.2 to 1.21.2.
- [Commits](istio/client-go@1.20.2...1.21.2)

---
updated-dependencies:
- dependency-name: istio.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump github.com/onsi/gomega from 1.31.1 to 1.33.1 (#2078)

Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.31.1 to 1.33.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.31.1...v1.33.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump sigs.k8s.io/kustomize/kyaml (#2081)

Bumps [sigs.k8s.io/kustomize/kyaml](https://github.com/kubernetes-sigs/kustomize) from 0.16.0 to 0.17.0.
- [Release notes](https://github.com/kubernetes-sigs/kustomize/releases)
- [Commits](kubernetes-sigs/kustomize@api/v0.16.0...api/v0.17.0)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/kustomize/kyaml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.3 (#2079)

Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) from 2.17.1 to 2.17.3.
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.17.1...v2.17.3)

---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* chore(dependabot): bump github.com/go-git/go-git/v5 (#2088)

Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.11.0 to 5.12.0.
- [Release notes](https://github.com/go-git/go-git/releases)
- [Commits](go-git/go-git@v5.11.0...v5.12.0)

---
updated-dependencies:
- dependency-name: github.com/go-git/go-git/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Christoph Schwägerl <[email protected]>
Co-authored-by: Jan Mędrek <[email protected]>
Co-authored-by: Piotr Halama <[email protected]>
Co-authored-by: Michał Kalke <[email protected]>
Co-authored-by: Krzysztof Kwiatosz <[email protected]>
Co-authored-by: Tomasz Smelcerz <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
area/dependency Issues or PRs related to dependency changes cla: yes Indicates the PR's author has signed the CLA. go Pull requests that update Go code lgtm Looks good to me! size/XS Denotes a PR that changes 0-9 lines, ignoring generated files.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants