Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update all dependencies (main) #1039

Closed
wants to merge 1 commit into from
Closed

chore(deps): update all dependencies (main) #1039

wants to merge 1 commit into from

Conversation

redhat-renovate-bot
Copy link
Collaborator

@redhat-renovate-bot redhat-renovate-bot commented Aug 9, 2024 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
github.com/kubevirt/monitoring/pkg/metrics/parser require digest 373a956 -> 84e3a01
github.com/onsi/ginkgo/v2 require minor v2.19.0 -> v2.20.2
github.com/onsi/gomega require patch v1.34.1 -> v1.34.2
github.com/openshift/api require digest 4b89b3a -> 2669d1e
github.com/openshift/library-go require digest 190fec8 -> c96b82b
github.com/operator-framework/api require minor v0.26.0 -> v0.27.0
github.com/operator-framework/operator-lib require minor v0.14.0 -> v0.15.0
github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring require minor v0.75.2 -> v0.77.0
github.com/prometheus/client_golang require minor v1.19.1 -> v1.20.4
github.com/prometheus/common require minor v0.55.0 -> v0.59.1
github.com/tektoncd/pipeline require minor v0.62.1 -> v0.63.0
gomodules.xyz/jsonpatch/v2 require major v2.4.0 -> v3.0.1
k8s.io/api require minor v0.30.3 -> v0.31.1
k8s.io/apiextensions-apiserver require minor v0.30.3 -> v0.31.1
k8s.io/apimachinery require minor v0.30.3 -> v0.31.1
k8s.io/client-go require minor v0.30.3 -> v0.31.1
k8s.io/kube-aggregator require minor v0.30.3 -> v0.31.1
k8s.io/utils require digest fe8a2dd -> 49e7df5
kubevirt.io/api require patch v1.3.0 -> v1.3.1
kubevirt.io/containerized-data-importer-api require minor v1.59.0 -> v1.60.3
kubevirt.io/ssp-operator/api require minor v0.0.0 -> v0.21.1
peter-evans/create-pull-request action major v6 -> v7
quay.io/fedora/fedora final major 40 -> 42
sigs.k8s.io/controller-runtime require minor v0.18.5 -> v0.19.0
sigs.k8s.io/controller-runtime require minor v0.18.4 -> v0.19.0

Release Notes

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.20.2

Compare Source

2.20.2

Require Go 1.22+

Maintenance

v2.20.1

Compare Source

2.20.1

Fixes
  • make BeSpecEvent duration matcher more forgiving [d6f9640]

v2.20.0

Compare Source

2.20.0

Features
Maintenance
  • Add update-deps to makefile [d303d14]
  • bump all dependencies [7a50221]

v2.19.1

Compare Source

2.19.1

Fixes
  • update supported platforms for race conditions [63c8c30]
  • [build] Allow custom name for binaries. [ff41e27]
Maintenance
onsi/gomega (github.com/onsi/gomega)

v1.34.2

Compare Source

1.34.2

Require Go 1.22+

Maintenance
  • bump ginkgo as well [c59c6dc]
  • bump to go 1.22 - remove x/exp dependency [8158b99]
operator-framework/api (github.com/operator-framework/api)

v0.27.0

Compare Source

What's Changed

New Contributors

Full Changelog: operator-framework/api@v0.26.0...v0.27.0

operator-framework/operator-lib (github.com/operator-framework/operator-lib)

v0.15.0

Compare Source

What's Changed

New Contributors

Full Changelog: operator-framework/operator-lib@v0.14.0...v0.15.0

prometheus-operator/prometheus-operator (github.com/prometheus-operator/prometheus-operator/pkg/apis/monitoring)

v0.77.0: 0.77.0 / 2024-09-19

Compare Source

[!NOTE]
Along with this release we also introduce a new command line tool poctl. It is designed specifically for managing Prometheus Operator Custom Resources. This project is currently under active development and fully experimental, so expect breaking changes and rough edges. We encourage you to try it out and provide the feedback.

[!WARNING]
Another notable change is that we have switched the logging framework from go-kit/log to slog which may lead to some differences in the log output.

  • [CHANGE] Add more API validation and changes to the ScrapeConfig CRD. #​6921 #​6855 #​6744
  • [CHANGE] Update the validating webhook to reject PrometheusRule objects that would generate configuration greater than the max ConfigMap size (512KiB). #​6606
  • [FEATURE] Add experimental Prometheus 3 support. It allows to try the new Prometheus v3.0.0-beta.0. #​6940
    • Feature requests in this version won't be supported until Prometheus 3 reaches a stable release. However, users are encouraged to try the beta version with the Operator and report any issues they encounter.
  • [FEATURE] Add support for PodMonitor to the PrometheusAgent CRD in DaemonSet mode. #​6879
  • [FEATURE] Add -kubelet-endpointslice argument to support EndpointSlice for the kubelet controller. #​6882
  • [FEATURE] Add outOfOrderTimeWindow field to the PrometheusAgent CRD. #​6851
  • [FEATURE] Add matchFirstNetwork field to the ScrapeConfig CRD for the Docker Service Discovery. #​6849 #​6894
  • [FEATURE] Add the otlp field to the Prometheus and PrometheusAgent CRDs. #​6780
  • [FEATURE] Add support for certificate, key and client CA file paths to the web TLS configuration. #​6358
  • [FEATURE] Add noProxy, proxyFromEnvironment and proxyConnectHeader fields to the AlertmanagerConfig CRD for OAuth2 clients. #​6922
  • [FEATURE] Add noProxy, proxyFromEnvironment and proxyConnectHeader fields to the AlertmanagerConfig CRD for HTTP clients. #​6864
  • [FEATURE] Add Ionos Service Discovery support to ScrapeConfig CRD. (#​6732)
  • [BUGFIX] Fix panic when processing an invalid AlertmanagerConfig object used for global configuration. #​6931
  • [BUGFIX] Allow configuring proxy URL for all Prometheus versions. #​6845

v0.76.2

Compare Source

  • [BUGFIX] Fix OAuth2 TLSConfig nil pointer. #​6909

v0.76.1

Compare Source

  • [BUGFIX] fix bug with Kubernetes service discovery Selector.Role field. #​6896

v0.76.0

Compare Source

0.76.0 / 2025-08-08

  • [CHANGE] Enhanced secret management in Prometheus and PrometheusAgent CRDs by switching the secrets field from atomic to listType: set, allowing independent handling of entries by different managers to prevent conflicts and improve deployment stability. #​6762
  • [CHANGE] Add API-level validations to Kubernetes SD in the ScrapeConfig CRD. #​6678
  • [FEATURE] Add TLS and Proxy settings to OAuth2 configuration for Prometheus and PrometheusAgent CRDs. #​6735
  • [FEATURE] Add support for OAuth2 in the ScrapeConfig CRD. #​6814
  • [FEATURE] Add scale subresource to the Alertmanger CRD. #​6728
  • [FEATURE] Add Scaleway service discovery to the ScrapeConfig CRD. #​6711
  • [FEATURE] Add serviceDiscoveryRole field to the Prometheus and PrometheusAgent CRDs to select between Endpoints (default) and EndpointSlice for discovering scrape and alerting targets. #​6672
  • [ENHANCEMENT] Make the namespace field optional in the Alertmanager endpoints configuration of the Prometheus CRD, if not defined it will use the default namespace. #​6338
  • [ENHANCEMENT] Add support to configure the TLS version for Prometheus, PrometheusAgent and Alertmanager CRDs. #​6736
  • [ENHANCEMENT] Add -secret-label-selector argument to the operator to filter the Secrets being watched. #​6731
  • [ENHANCEMENT] Add attachMetadata field to ScrapeClasses. #​6756
  • [BUGFIX] Add support for all proxy settings in the Alertmanager configuration. #​6818
prometheus/client_golang (github.com/prometheus/client_golang)

v1.20.4

Compare Source

  • [BUGFIX] histograms: Fix a possible data race when appending exemplars vs metrics gather. #​1623

v1.20.3

Compare Source

  • [BUGFIX] histograms: Fix possible data race when appending exemplars. #​1608

v1.20.2

Compare Source

  • [BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. #​1596

v1.20.1

Compare Source

This release contains the critical fix for the issue. Thanks to @​geberl, @​CubicrootXYZ, @​zetaab and @​timofurrer for helping us with the investigation!

  • [BUGFIX] process-collector: Fixed unregistered descriptor error when using process collector with PedanticRegistry on Linux machines. #​1587

v1.20.0

Compare Source

Thanks everyone for contributions!

⚠️ In this release we remove one (broken anyway, given Go runtime changes) metric and add three new (representing GOGC, GOMEMLIMIT and GOMAXPROCS flags) to the default collectors.NewGoCollector() collector. Given its popular usage, expect your binary to expose two additional metric.

Changes

  • [CHANGE] ⚠️ go-collector: Remove go_memstat_lookups_total metric which was always 0; Go runtime stopped sharing pointer lookup statistics. #​1577
  • [FEATURE] ⚠️ go-collector: Add 3 default metrics: go_gc_gogc_percent, go_gc_gomemlimit_bytes and go_sched_gomaxprocs_threads as those are recommended by the Go team. #​1559
  • [FEATURE] go-collector: Add more information to all metrics' HELP e.g. the exact runtime/metrics sourcing each metric (if relevant). #​1568 #​1578
  • [FEATURE] testutil: Add CollectAndFormat method. #​1503
  • [FEATURE] histograms: Add support for exemplars in native histograms. #​1471
  • [FEATURE] promhttp: Add experimental support for zstd on scrape, controlled by the request Accept-Encoding header. #​1496
  • [FEATURE] api/v1: Add WithLimit parameter to all API methods that supports it. #​1544
  • [FEATURE] prometheus: Add support for created timestamps in constant histograms and constant summaries. #​1537
  • [FEATURE] process-collectors: Add network usage metrics: process_network_receive_bytes_total and process_network_transmit_bytes_total. #​1555
  • [FEATURE] promlint: Add duplicated metric lint rule. #​1472
  • [BUGFIX] promlint: Relax metric type in name linter rule. #​1455
  • [BUGFIX] promhttp: Make sure server
    instrumentation wrapping supports new and future extra responseWriter methods. #​1480
  • [BUGFIX] testutil: Functions using compareMetricFamilies are now failing if filtered metricNames are not in the input. #​1424
All commits

New Contributors

Full Changelog: prometheus/client_golang@v1.19.1...v1.20.0

prometheus/common (github.com/prometheus/common)

v0.59.1

Compare Source

What's Changed

Full Changelog: prometheus/common@v0.59.0...v0.59.1

v0.59.0

Compare Source

What's Changed

Full Changelog: prometheus/common@v0.58.0...v0.59.0

v0.58.0

Compare Source

What's Changed

Full Changelog: prometheus/common@v0.57.0...v0.58.0

v0.57.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.56.0...v0.57.0

v0.56.0

Compare Source

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.55.0...v0.56.0

tektoncd/pipeline (github.com/tektoncd/pipeline)

v0.63.0: Tekton Pipeline release v0.63.0 "Abyssinian K-9"

Compare Source

-Docs @​ v0.63.0
-Examples @​ v0.63.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.63.0/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.63.0/release.yaml
REKOR_UUID=108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e

### Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.63.0@​sha256:" + .digest.sha256')

### Download the release file
curl "$RELEASE_FILE" > release.yaml

### For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
  printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

  • ✨ cluster-reslover: add support for StepAction (#​8199)

tepAction are now supported to a refered via the cluster resolver.

  • ✨ Allow securityContext field for affinity assistant podtemplate (#​8176)

Added the ability to set the pod-level securityContext for the AffinityAssistant StatefulSet.
This can be configured by providing a default-affinity-assistant-pod-template in the config-defaults ConfigMap or by specifying a pod template in TaskRun or PipelineRun.

  • ✨ Add UID label to PipelineRun and TaskRun (#​8166)

TaskRun pods have tekton.dev/taskRunUID and tekton.dev/pipelineRunUID labels

Fixes
  • 🐛 Fix Artifact type to a pointer (#​8226)

Fix Artifact type to a pointer.

  • 🐛 fix task name show in metric (#​8216)

fix clusterTask name show anonymous in metric

  • 🐛 apply default-container-resource-requirements before LimitRange transformer (#​8197)

[Bug fix]: default-container-resource-requirements will be applied to the container before LimtRange

  • 🐛 fix(pipelinerun): resolve issue where canceling active pipelinerun fails (#​8173)

fix(pipelinerun): resolve issue where canceling active pipelinerun fails

  • 🐛 fix(taskrun): resolve issue with TaskRun not failing promptly after Pod OOM (#​8171)

fix(taskrun): resolve issue with TaskRun not failing promptly after Pod OOM

  • 🐛 fix: If the finally timeout is set to 0s, the calculates the next queue entry time according to the pipeline timeout. (#​8056)

If the finally timeout is set to 0s, the reconciler calculates the next queue entry time according to the pipeline timeout.

  • 🐛 feat(matrix): Fix matrix param type mismatch problem for ref array result from customrun scenario (#​8024)
Misc
  • 🔨 build(deps): bump tj-actions/changed-files from 44.5.7 to 45.0.0 (#​8223)
  • 🔨 build(deps): bump github.com/golangci/golangci-lint from 1.59.1 to 1.60.3 in /tools (#​8219)
  • 🔨 build(deps): bump github.com/docker/docker from 26.1.3+incompatible to 26.1.5+incompatible (#​8218)
  • 🔨 Bump the all group in /tekton with 4 updates (#​8212)
  • 🔨 Bump github/codeql-action from 3.26.0 to 3.26.3 (#​8211)
  • :h

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@redhat-renovate-bot redhat-renovate-bot added the release-note-none Denotes a PR that doesn't merit a release note. label Aug 9, 2024
@redhat-renovate-bot
Copy link
Collaborator Author

redhat-renovate-bot commented Aug 9, 2024 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update artifacts related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -d -t ./...
go: go.mod requires go >= 1.22.4 (running go 1.21.11; GOTOOLCHAIN=local)
File name: api/go.sum
Command failed: go get -d -t ./...
go: go.mod requires go >= 1.22.4 (running go 1.21.11; GOTOOLCHAIN=local)

@kubevirt-bot kubevirt-bot added the dco-signoff: yes Indicates the PR's author has DCO signed all their commits. label Aug 9, 2024
@kubevirt-bot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign akrejcir for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

akrejcir
akrejcir reviewed Aug 9, 2024
View reviewed changes
Copy link
Collaborator

@akrejcir akrejcir left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The PR is incorrect.

/hold

api/go.mod Outdated
@@ -3,7 +3,7 @@ module kubevirt.io/ssp-operator/api
go 1.22.4

require (
github.com/openshift/api v0.0.0-20240702171116-4b89b3a92a17 // release-4.16
github.com/openshift/api v0.0.0-20240809035623-d6942fb7294e // release-4.16
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This update is not correct, because commit d6942fb7294e belongs to the master branch in the github.com/openshift/api repository. We only want updates from a specific release branch.

go.mod Outdated
@@ -6,13 +6,13 @@ require (
github.com/blang/semver/v4 v4.0.0
github.com/fsnotify/fsnotify v1.7.0
github.com/go-logr/logr v1.4.2
github.com/kubevirt/monitoring/pkg/metrics/parser v0.0.0-20230706095033-373a95665d5a
github.com/kubevirt/monitoring/pkg/metrics/parser 7667760c3f72
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is probably not correct syntax.

go.mod
github.com/tektoncd/pipeline v0.62.0
gomodules.xyz/jsonpatch/v2 v2.4.0
github.com/tektoncd/pipeline v0.62.1
gomodules.xyz/jsonpatch/v2/v3 v3.0.1
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This also does not look like correct syntax.

go.mod Outdated
kubevirt.io/api v1.3.0
kubevirt.io/containerized-data-importer-api v1.59.0
kubevirt.io/controller-lifecycle-operator-sdk/api v0.2.4
kubevirt.io/qe-tools v0.1.8
kubevirt.io/ssp-operator/api v0.0.0
kubevirt.io/ssp-operator/api v0.20.0
Copy link
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We are using replace for this submodule. The version should not be changed.

@kubevirt-bot kubevirt-bot added the do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. label Aug 9, 2024
@akrejcir akrejcir mentioned this pull request Aug 12, 2024
Open
@redhat-renovate-bot redhat-renovate-bot force-pushed the renovate/main-all branch 3 times, most recently from 45e8670 to ffddc12 Compare August 12, 2024 17:17
@openshift-ci OpenShift CI
Copy link

openshift-ci bot commented Aug 12, 2024

@redhat-renovate-bot: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
ci/prow/e2e-upgrade-functests ffddc12 link true /test e2e-upgrade-functests
ci/prow/e2e-single-node-functests ffddc12 link true /test e2e-single-node-functests
ci/prow/e2e-functests ffddc12 link true /test e2e-functests
ci/prow/unittests ffddc12 link true /test unittests
ci/prow/images ffddc12 link true /test images

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

@akrejcir akrejcir marked this pull request as draft August 13, 2024 09:23
@kubevirt-bot kubevirt-bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Aug 13, 2024
@akrejcir
Copy link
Collaborator

Converted to Draft, so the CI is not triggered every time renovate updates the PR.

@redhat-renovate-bot redhat-renovate-bot force-pushed the renovate/main-all branch 3 times, most recently from 70d8932 to d625427 Compare August 13, 2024 16:17
@redhat-renovate-bot redhat-renovate-bot force-pushed the renovate/main-all branch 6 times, most recently from 46c07ff to 414f163 Compare August 15, 2024 17:17
@redhat-renovate-bot redhat-renovate-bot force-pushed the renovate/main-all branch 11 times, most recently from c3c80a1 to 487b188 Compare September 11, 2024 20:08
@redhat-renovate-bot redhat-renovate-bot force-pushed the renovate/main-all branch 8 times, most recently from f0e84f7 to 5ae438b Compare September 19, 2024 00:08
@redhat-renovate-bot redhat-renovate-bot force-pushed the renovate/main-all branch 5 times, most recently from 3fad883 to 9e0b064 Compare September 20, 2024 15:08
@redhat-renovate-bot
chore(deps): update all dependencies
bccce62 
Signed-off-by: redhat-renovate-bot <[email protected]>
@sonarcloud SonarCloud
Copy link

sonarcloud bot commented Sep 21, 2024

Quality Gate Passed Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarCloud

@akrejcir
Copy link
Collaborator

/close

@kubevirt-bot
Copy link
Contributor

@akrejcir: Closed this PR.

In response to this:

/close

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@akrejcir akrejcir akrejcir left review comments

@0xFelix 0xFelix Awaiting requested review from 0xFelix

@jcanocan jcanocan Awaiting requested review from jcanocan

Assignees
No one assigned
Labels
dco-signoff: yes Indicates the PR's author has DCO signed all their commits. do-not-merge/hold Indicates that a PR should not merge because someone has issued a /hold command. do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. release-note-none Denotes a PR that doesn't merit a release note. size/M
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@redhat-renovate-bot @kubevirt-bot @akrejcir