chore(deps): bump the security group with 17 updates #1703

dependabot · 2024-12-16T23:30:17Z

Bumps the security group with 17 updates:

Package	From	To
github.com/microsoft/go-mssqldb	`1.7.2`	`1.8.0`
go.opentelemetry.io/otel	`1.32.0`	`1.33.0`
go.opentelemetry.io/otel/sdk	`1.32.0`	`1.33.0`
golang.org/x/sync	`0.9.0`	`0.10.0`
k8s.io/api	`0.31.3`	`0.32.0`
k8s.io/apiextensions-apiserver	`0.31.3`	`0.32.0`
k8s.io/apimachinery	`0.31.3`	`0.32.0`
k8s.io/apiserver	`0.31.3`	`0.32.0`
k8s.io/cli-runtime	`0.31.3`	`0.32.0`
k8s.io/client-go	`0.31.3`	`0.32.0`
golang.org/x/net	`0.31.0`	`0.32.0`
golang.org/x/sys	`0.27.0`	`0.28.0`
golang.org/x/text	`0.20.0`	`0.21.0`
helm.sh/helm/v3	`3.16.3`	`3.16.4`
k8s.io/kubelet	`0.31.3`	`0.32.0`
k8s.io/metrics	`0.31.3`	`0.32.0`
k8s.io/utils	`0.0.0-20240711033017-18e509b52bc8`	`0.0.0-20241104100929-3ea5e8cea738`

Updates github.com/microsoft/go-mssqldb from 1.7.2 to 1.8.0

Release notes

Sourced from github.com/microsoft/go-mssqldb's releases.

v1.8.0

What's Changed

Migrate managed identity example to azidentity by @chlowell in microsoft/go-mssqldb#199

Vulnerabilty dependency x/net by @tulioncds in microsoft/go-mssqldb#203

Support for UDT (hierarchyid, geometry and geography) by @tentone in microsoft/go-mssqldb#216

Connection not closed when database name is incorrect #173 fix by @parMaster in microsoft/go-mssqldb#224

Fix error checks during certificatePath reading and parsing in azuread by @jegorbunov in microsoft/go-mssqldb#227

Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.1 to 1.6.0 by @dependabot in microsoft/go-mssqldb#229

Feat: Add tracing data to prelogin and login7 packets by @shueybubbles in microsoft/go-mssqldb#228

New Contributors

@chlowell made their first contribution in microsoft/go-mssqldb#199

@tulioncds made their first contribution in microsoft/go-mssqldb#203

@tentone made their first contribution in microsoft/go-mssqldb#216

@parMaster made their first contribution in microsoft/go-mssqldb#224

@jegorbunov made their first contribution in microsoft/go-mssqldb#227

@dependabot made their first contribution in microsoft/go-mssqldb#229

Full Changelog: microsoft/go-mssqldb@v1.7.2...v1.8.0

Commits

dad23d2 Feat: Add tracing data to prelogin and login7 packets (#228)
2521238 Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity (#229)
4b95a0f Fix error checks during certificatePath reading and parsing in azuread (#227)
573423d Fix: Connection not closed when database name is incorrect #173 fix (#224)
02deabf Support for UDT (hierarchyid, geometry and geography) (#216)
9b84d9b Vulnerabilty dependency x/net (#203)
2395b78 Migrate managed identity example to azidentity (#199)
See full diff in compare view

Updates go.opentelemetry.io/otel from 1.32.0 to 1.33.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.33.0/0.55.0/0.9.0/0.0.12] 2024-12-12

Added

Add Reset method to SpanRecorder in go.opentelemetry.io/otel/sdk/trace/tracetest. (#5994)

Add EnabledInstrument interface in go.opentelemetry.io/otel/sdk/metric/internal/x. This is an experimental interface that is implemented by synchronous instruments provided by go.opentelemetry.io/otel/sdk/metric. Users can use it to avoid performing computationally expensive operations when recording measurements. It does not fall within the scope of the OpenTelemetry Go versioning and stability policy and it may be changed in backwards incompatible ways or removed in feature releases. (#6016)

Changed

The default global API now supports full auto-instrumentation from the go.opentelemetry.io/auto package. See that package for more information. (#5920)

Propagate non-retryable error messages to client in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5929)

Propagate non-retryable error messages to client in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#5929)

Propagate non-retryable error messages to client in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#5929)

Performance improvements for attribute value AsStringSlice, AsFloat64Slice, AsInt64Slice, AsBoolSlice. (#6011)

Change EnabledParameters to have a Severity field instead of a getter and setter in go.opentelemetry.io/otel/log. (#6009)

Fixed

Fix inconsistent request body closing in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5954)

Fix inconsistent request body closing in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#5954)

Fix inconsistent request body closing in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#5954)

Fix invalid exemplar keys in go.opentelemetry.io/otel/exporters/prometheus. (#5995)

Fix attribute value truncation in go.opentelemetry.io/otel/sdk/trace. (#5997)

Fix attribute value truncation in go.opentelemetry.io/otel/sdk/log. (#6032)

Commits

8c38f80 Release v1.33.0 (#6035)
aa95895 Fix sdk/log record attr value limit (#6032)
58fdf2a Cache successful requests in lychee (#6030)
ac386f3 fix(deps): update golang.org/x/exp digest to 1829a12 (#6031)
dd83cac chore(deps): update googleapis to e6fa225 (#6028)
de4ff31 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to ca80a...
0598dae sdk/metric: Add experimental Enabled method to synchronous instruments (#6016)
3bb224b chore(deps): update google.golang.org/genproto/googleapis/rpc digest to a4fef...
13da554 chore(deps): update codecov/codecov-action action to v5.1.1 (#6026)
b4a91a2 chore(deps): update module go.opentelemetry.io/auto/sdk to v1.1.0 (#6025)
Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/sdk from 1.32.0 to 1.33.0

Changelog

Sourced from go.opentelemetry.io/otel/sdk's changelog.

[1.33.0/0.55.0/0.9.0/0.0.12] 2024-12-12

Added

Add Reset method to SpanRecorder in go.opentelemetry.io/otel/sdk/trace/tracetest. (#5994)

Add EnabledInstrument interface in go.opentelemetry.io/otel/sdk/metric/internal/x. This is an experimental interface that is implemented by synchronous instruments provided by go.opentelemetry.io/otel/sdk/metric. Users can use it to avoid performing computationally expensive operations when recording measurements. It does not fall within the scope of the OpenTelemetry Go versioning and stability policy and it may be changed in backwards incompatible ways or removed in feature releases. (#6016)

Changed

The default global API now supports full auto-instrumentation from the go.opentelemetry.io/auto package. See that package for more information. (#5920)

Propagate non-retryable error messages to client in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5929)

Propagate non-retryable error messages to client in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#5929)

Propagate non-retryable error messages to client in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#5929)

Performance improvements for attribute value AsStringSlice, AsFloat64Slice, AsInt64Slice, AsBoolSlice. (#6011)

Change EnabledParameters to have a Severity field instead of a getter and setter in go.opentelemetry.io/otel/log. (#6009)

Fixed

Fix inconsistent request body closing in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5954)

Fix inconsistent request body closing in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#5954)

Fix inconsistent request body closing in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#5954)

Fix invalid exemplar keys in go.opentelemetry.io/otel/exporters/prometheus. (#5995)

Fix attribute value truncation in go.opentelemetry.io/otel/sdk/trace. (#5997)

Fix attribute value truncation in go.opentelemetry.io/otel/sdk/log. (#6032)

Commits

8c38f80 Release v1.33.0 (#6035)
aa95895 Fix sdk/log record attr value limit (#6032)
58fdf2a Cache successful requests in lychee (#6030)
ac386f3 fix(deps): update golang.org/x/exp digest to 1829a12 (#6031)
dd83cac chore(deps): update googleapis to e6fa225 (#6028)
de4ff31 fix(deps): update github.com/opentracing-contrib/go-grpc/test digest to ca80a...
0598dae sdk/metric: Add experimental Enabled method to synchronous instruments (#6016)
3bb224b chore(deps): update google.golang.org/genproto/googleapis/rpc digest to a4fef...
13da554 chore(deps): update codecov/codecov-action action to v5.1.1 (#6026)
b4a91a2 chore(deps): update module go.opentelemetry.io/auto/sdk to v1.1.0 (#6025)
Additional commits viewable in compare view

Updates golang.org/x/sync from 0.9.0 to 0.10.0

Commits

913fb63 singleflight: fix typo in singleflight_test.go
See full diff in compare view

Updates k8s.io/api from 0.31.3 to 0.32.0

Commits

e622342 Update dependencies to v0.32.0 tag
b0543a3 Merge remote-tracking branch 'origin/master' into release-1.32
f6bae9a Drop use of winreadlinkvolume godebug option
ea815d5 Merge remote-tracking branch 'origin/master' into release-1.32
c331a79 Revert to go1.22 windows filesystem stdlib behavior
f8e5e36 Merge pull request #128407 from ndixita/pod-level-resources
84e0db8 Merge pull request #127857 from Jefftree/cle-v1alpha2
cbaf5a0 Merge pull request #128686 from thockin/take_over_pr-125233
a503a4f Merge pull request #128687 from tallclair/allocated-status
3f43b5a Merge pull request #128240 from LionelJouin/KEP-4817
Additional commits viewable in compare view

Updates k8s.io/apiextensions-apiserver from 0.31.3 to 0.32.0

Commits

7215469 Update dependencies to v0.32.0 tag
887679f Merge remote-tracking branch 'origin/master' into release-1.32
bd027a4 Drop use of winreadlinkvolume godebug option
919f42b Merge remote-tracking branch 'origin/master' into release-1.32
a4e1034 Revert to go1.22 windows filesystem stdlib behavior
89d6021 Run codegen
2a91f8a Merge pull request #127513 from tkashem/delete-undecryptable
06dc95a api: run codegen
19f7123 Merge pull request #128639 from jpbetz/fix-cost-test
66631b6 Fix flake in CEL cost stability tests
Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.31.3 to 0.32.0

Commits

59e9003 Merge remote-tracking branch 'origin/master' into release-1.32
639247c Drop use of winreadlinkvolume godebug option
220d7c3 Merge remote-tracking branch 'origin/master' into release-1.32
c199d3b Revert to go1.22 windows filesystem stdlib behavior
16af2ff implement unsafe deletion, and wire it
6ff8305 api: run codegen
ca9b8b2 api: add a new field to meta/v1 DeleteOptions
d941d9f Merge pull request #128503 from benluddy/cbor-codecs-featuregate
3b4250f Wire serving codecs to CBOR feature gate.
daaad09 Merge pull request #128501 from benluddy/watch-cbor-seq
Additional commits viewable in compare view

Updates k8s.io/apiserver from 0.31.3 to 0.32.0

Commits

9d86305 Update dependencies to v0.32.0 tag
34b7cc9 Merge remote-tracking branch 'origin/master' into release-1.32
5945d46 Drop use of winreadlinkvolume godebug option
adee259 Merge remote-tracking branch 'origin/master' into release-1.32
fbba927 Merge pull request #129081 from stlaz/fg_remote_uid
b3c0cb6 Merge remote-tracking branch 'origin/master' into release-1.32
bf14697 Revert to go1.22 windows filesystem stdlib behavior
f76e404 featuregate UID in RequestHeader authenticator
1f546ee Possible fix for alpha CI jobs failing with AllowUnsafeMalformedObjectDeletio...
3423727 Merge pull request #127581 from richabanker/flagz-apiserver
Additional commits viewable in compare view

Updates k8s.io/cli-runtime from 0.31.3 to 0.32.0

Commits

49dbc54 Update dependencies to v0.32.0 tag
f8c45be Merge remote-tracking branch 'origin/master' into release-1.32
f750fa0 Drop use of winreadlinkvolume godebug option
9da77ec Merge remote-tracking branch 'origin/master' into release-1.32
15e0912 Revert to go1.22 windows filesystem stdlib behavior
3a2a8b4 hack/pin-dependency.sh k8s.io/kube-openapi 32ad38e42d3faf1ce94eb29f4ea6d76333...
8ceafc0 Merge pull request #128396 from ritazh/deprecate-EnforceMountableSecretsAnnot...
f78772d deprecate EnforceMountableSecretsAnnotation in 1.32
44c3029 Merge pull request #128507 from dims/use-k8s.io/utils/lru-instead-of-github.c...
16fbedb Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
Additional commits viewable in compare view

Updates k8s.io/client-go from 0.31.3 to 0.32.0

Commits

0d55461 Update dependencies to v0.32.0 tag
4765ade Merge remote-tracking branch 'origin/master' into release-1.32
692a511 Drop use of winreadlinkvolume godebug option
9df5099 Merge remote-tracking branch 'origin/master' into release-1.32
120beb2 Revert to go1.22 windows filesystem stdlib behavior
55d23e2 Align fake client-go clients with the main interface
646e79b Run codegen
c475fe0 Generify fake clientsets
955401c Merge pull request #128407 from ndixita/pod-level-resources
eddb107 Merge pull request #127857 from Jefftree/cle-v1alpha2
Additional commits viewable in compare view

Updates golang.org/x/net from 0.31.0 to 0.32.0

Commits

285e1cf go.mod: update golang.org/x dependencies
d0a1049 route: remove unused sizeof* consts on freebsd
6e41410 http2: fix benchmarks using common frame read/write functions
4be1253 route: change from syscall to x/sys/unix
bc37675 http2: limit number of PINGs bundled with RST_STREAMs
e9cd716 route: fix parse of zero-length sockaddrs in RIBs
9a51899 http2: add SETTINGS_ENABLE_CONNECT_PROTOCOL support
See full diff in compare view

Updates golang.org/x/sys from 0.27.0 to 0.28.0

Commits

fe16172 unix: define IfMsghdr2, IfData64, and RtMsghdr2 on darwin
0a57dbc unix: update to kernel Linux 6.12
3cf1e67 unix: don't fail TestPpoll on EINTR
d2cea70 windows: add functions to get named pipe process IDs
a13946c windows: regenerate zsyscall_windows.go
See full diff in compare view

Updates golang.org/x/text from 0.20.0 to 0.21.0

Commits

d42948e go.mod: update golang.org/x dependencies
See full diff in compare view

Updates helm.sh/helm/v3 from 3.16.3 to 3.16.4

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.16.4 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:

for questions and just to hang out

for discussing PRs, code, and bugs

Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom

Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.16.4. The common platform binaries are here:

MacOS amd64 (checksum / 8dc25671120a4af197afe7ad9041fb8e1dd71bc01e5ef73dba1139cbc9e9f44b)

MacOS arm64 (checksum / e2442d8f05d53d84c39b869bc5fe5affad247ee2f4c706a040919c146edb1f94)

Linux amd64 (checksum / fc307327959aa38ed8f9f7e66d45492bb022a66c3e5da6063958254b9767d179)

Linux arm (checksum / 432e774d1087d3773737888d384c62477b399227662b42cbf0c32e95e6e72556)

Linux arm64 (checksum / d3f8f15b3d9ec8c8678fbf3280c3e5902efabe5912e2f9fcf29107efbc8ead69)

Linux i386 (checksum / 6022b34e165a5196827043c77bcd1fa28ef48109b3a4af46e8660ddb0a6c44e0)

Linux ppc64le (checksum / 0ba4375a6dcf6117a8e7729fbed36d9220f8ad98dbc7aabc16186f22917caead)

Linux s390x (checksum / 10b88dc2afd97267feba8283d58dcb1c937defb7df8de152c86b60aaece47d59)

Linux riscv64 (checksum / e733c727de7644cfeb25b094e1f0a56c53a7cb437c93c992aa92e6c7b9f6af93)

Windows amd64 (checksum / 9bb114c12e530a7129fd3d78fc1784e813dd7a6e29e5f9b5af8bc83fd1066d36)

Windows arm64 (checksum / a4afeee93031920ec08b7e880c859a159bcd222837a81196cadaeb42408ad0b3)

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

3.17.0 is the next feature release and will be on January 15, 2025

Changelog

Bump golang.org/x/crypto from 0.30.0 to 0.31.0 7877b45b63f95635153b29a42c0c2f4273ec45ca (dependabot[bot])

Bump the k8s-io group with 7 updates 848e586c27f05d84bc19d082f395098aba0b7619 (dependabot[bot])

Commits

7877b45 Bump golang.org/x/crypto from 0.30.0 to 0.31.0
848e586 Bump the k8s-io group with 7 updates
See full diff in compare view

Updates k8s.io/kubelet from 0.31.3 to 0.32.0

Commits

ab6d6c0 Update dependencies to v0.32.0 tag
78330cb Merge remote-tracking branch 'origin/master' into release-1.32
9aa82a6 Drop use of winreadlinkvolume godebug option
351b167 Merge remote-tracking branch 'origin/master' into release-1.32
97885c0 Revert to go1.22 windows filesystem stdlib behavior
de4c476 DRA kubelet: use unique protobuf package name
3b14f64 KEP-4603: Node specific kubelet config for maximum backoff down to 1 second (...
353a4bc Merge pull request #126503 from skitt/generic-fake-client
35e9b33 Generify fake clientsets
2466f75 Merge pull request #128646 from pohly/dra-kubelet-separate-beta-api
Additional commits viewable in compare view

Updates k8s.io/metrics from 0.31.3 to 0.32.0

Commits

747abc1 Update dependencies to v0.32.0 tag
5d76b1a Merge remote-tracking branch 'origin/master' into release-1.32
54a1c04 Drop use of winreadlinkvolume godebug option
f4ebf54 Merge remote-tracking branch 'origin/master' into release-1.32
140b464 Revert to go1.22 windows filesystem stdlib behavior
5197509 Run codegen
0eafb3f Merge pull request #128580 from jpbetz/bump-kube-openapi
4175bc6 hack/pin-dependency.sh k8s.io/kube-openapi 32ad38e42d3faf1ce94eb29f4ea6d76333...
7658283 Merge pull request #128507 from dims/use-k8s.io/utils/lru-instead-of-github.c...
3f92891 Use k8s.io/utils/lru instead of github.com/golang/groupcache/lru
Additional commits viewable in compare view

Updates k8s.io/utils from 0.0.0-20240711033017-18e509b52bc8 to 0.0.0-20241104100929-3ea5e8cea738

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the security group with 17 updates: | Package | From | To | | --- | --- | --- | | [github.com/microsoft/go-mssqldb](https://github.com/microsoft/go-mssqldb) | `1.7.2` | `1.8.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.32.0` | `1.33.0` | | [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.32.0` | `1.33.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.9.0` | `0.10.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.31.3` | `0.32.0` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.31.3` | `0.32.0` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.31.3` | `0.32.0` | | [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.31.3` | `0.32.0` | | [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.31.3` | `0.32.0` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.31.3` | `0.32.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.31.0` | `0.32.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.27.0` | `0.28.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.20.0` | `0.21.0` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.16.3` | `3.16.4` | | [k8s.io/kubelet](https://github.com/kubernetes/kubelet) | `0.31.3` | `0.32.0` | | [k8s.io/metrics](https://github.com/kubernetes/metrics) | `0.31.3` | `0.32.0` | | [k8s.io/utils](https://github.com/kubernetes/utils) | `0.0.0-20240711033017-18e509b52bc8` | `0.0.0-20241104100929-3ea5e8cea738` | Updates `github.com/microsoft/go-mssqldb` from 1.7.2 to 1.8.0 - [Release notes](https://github.com/microsoft/go-mssqldb/releases) - [Changelog](https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md) - [Commits](microsoft/go-mssqldb@v1.7.2...v1.8.0) Updates `go.opentelemetry.io/otel` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.32.0...v1.33.0) Updates `go.opentelemetry.io/otel/sdk` from 1.32.0 to 1.33.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.32.0...v1.33.0) Updates `golang.org/x/sync` from 0.9.0 to 0.10.0 - [Commits](golang/sync@v0.9.0...v0.10.0) Updates `k8s.io/api` from 0.31.3 to 0.32.0 - [Commits](kubernetes/api@v0.31.3...v0.32.0) Updates `k8s.io/apiextensions-apiserver` from 0.31.3 to 0.32.0 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.31.3...v0.32.0) Updates `k8s.io/apimachinery` from 0.31.3 to 0.32.0 - [Commits](kubernetes/apimachinery@v0.31.3...v0.32.0) Updates `k8s.io/apiserver` from 0.31.3 to 0.32.0 - [Commits](kubernetes/apiserver@v0.31.3...v0.32.0) Updates `k8s.io/cli-runtime` from 0.31.3 to 0.32.0 - [Commits](kubernetes/cli-runtime@v0.31.3...v0.32.0) Updates `k8s.io/client-go` from 0.31.3 to 0.32.0 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.31.3...v0.32.0) Updates `golang.org/x/net` from 0.31.0 to 0.32.0 - [Commits](golang/net@v0.31.0...v0.32.0) Updates `golang.org/x/sys` from 0.27.0 to 0.28.0 - [Commits](golang/sys@v0.27.0...v0.28.0) Updates `golang.org/x/text` from 0.20.0 to 0.21.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.20.0...v0.21.0) Updates `helm.sh/helm/v3` from 3.16.3 to 3.16.4 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.16.3...v3.16.4) Updates `k8s.io/kubelet` from 0.31.3 to 0.32.0 - [Commits](kubernetes/kubelet@v0.31.3...v0.32.0) Updates `k8s.io/metrics` from 0.31.3 to 0.32.0 - [Commits](kubernetes/metrics@v0.31.3...v0.32.0) Updates `k8s.io/utils` from 0.0.0-20240711033017-18e509b52bc8 to 0.0.0-20241104100929-3ea5e8cea738 - [Commits](https://github.com/kubernetes/utils/commits) --- updated-dependencies: - dependency-name: github.com/microsoft/go-mssqldb dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: go.opentelemetry.io/otel dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: go.opentelemetry.io/otel/sdk dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/sync dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apiextensions-apiserver dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apimachinery dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/apiserver dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/cli-runtime dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/client-go dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/sys dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: golang.org/x/text dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: helm.sh/helm/v3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/kubelet dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/metrics dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/utils dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-12-17T06:10:36Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added dependencies go type::security labels Dec 16, 2024

dependabot bot closed this Dec 17, 2024

dependabot bot deleted the dependabot/go_modules/security-65b3613a7f branch December 17, 2024 06:10

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the security group with 17 updates #1703

chore(deps): bump the security group with 17 updates #1703

dependabot bot commented on behalf of github Dec 16, 2024 •

edited

Loading

dependabot bot commented on behalf of github Dec 17, 2024

chore(deps): bump the security group with 17 updates #1703

chore(deps): bump the security group with 17 updates #1703

Conversation

dependabot bot commented on behalf of github Dec 16, 2024 • edited Loading

v1.8.0

What's Changed

New Contributors

[1.33.0/0.55.0/0.9.0/0.0.12] 2024-12-12

Added

Changed

Fixed

[1.33.0/0.55.0/0.9.0/0.0.12] 2024-12-12

Added

Changed

Fixed

Installation and Upgrading

What's Next

Changelog

dependabot bot commented on behalf of github Dec 17, 2024

dependabot bot commented on behalf of github Dec 16, 2024 •

edited

Loading