Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

🌱 Update Builder Image group #236

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

🌱 Update Builder Image group #236

wants to merge 1 commit into from

Conversation

cluster-stack-bot[bot]
Copy link
Contributor

@cluster-stack-bot cluster-stack-bot bot commented Jul 1, 2024 •
edited
Loading

This PR contains the following updates:

Package Type Update Change
docker.io/aquasec/trivy (source) stage minor 0.51.4 -> 0.53.0
docker.io/library/alpine stage patch 3.20.0 -> 3.20.1
golangci/golangci-lint patch v1.59.0 -> v1.59.1
helm/helm minor v3.14.1 -> v3.15.2

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

aquasecurity/trivy (docker.io/aquasec/trivy)

v0.53.0

Compare Source

⚠ BREAKING CHANGES
  • k8s: node-collector dynamic commands support (#​6861)
  • add clean subcommand (#​6993)
  • aws: Remove aws subcommand (#​6995)
Features
Bug Fixes

v0.52.2

Compare Source

Changelog

  • 8709d4f release: v0.52.2 [release/v0.52] (#​6896)
  • a4b8ad7 ci: use ubuntu-latest-m runner [backport: release/v0.52] (#​6933)
  • 2b711bc chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.2 to 1.6.0 [backport: release/v0.52] (#​6919)
  • 191d31e test: bump docker API to 1.45 [backport: release/v0.52] (#​6922)
  • 3f5874c ci: bump github.com/goreleaser/goreleaser to v2.0.0 [backport: release/v0.52] (#​6893)
  • 8f8c76a fix(debian): take installed files from the origin layer [backport: release/v0.52] (#​6892)

v0.52.1

Compare Source

Changelog

  • a3caf06 release: v0.52.1 [release/v0.52] (#​6877)
  • 01dbb42 fix(nodejs): fix infinite loop when package link from package-lock.json file is broken [backport: release/v0.52] (#​6888)
  • f186d22 fix(sbom): don't overwrite srcEpoch when decoding SBOM files [backport: release/v0.52] (#​6881)
  • 093c0ae fix(python): compare pkg names from poetry.lock and pyproject.toml in lowercase [backport: release/v0.52] (#​6878)
  • 6bfda76 Merge pull request #​6879 from aquasecurity/backport-pr-6864-to-release/v0.52
  • 53850c8 docs: explain how VEX is applied (#​6864)
  • 2211962 Merge pull request #​6875 from aquasecurity/backport-pr-6857-to-release/v0.52
  • a614b69 fix(nodejs): fix infinity loops for pnpm with cyclic imports (#​6857)

v0.52.0

Compare Source

Features
Bug Fixes
Performance Improvements
golangci/golangci-lint (golangci/golangci-lint)

v1.59.1

Compare Source

  1. Updated linters
    • go-errorlint: from 1.5.1 to 1.5.2
    • gomnd: deprecated configuration compatibility
    • intrange: add style preset
    • misspell: from 0.5.1 to 0.6.0
    • sloglint: from 0.7.0 to 0.7.1
    • testifylint: from 1.3.0 to 1.3.1
    • unparam: bump to HEAD
    • usestdlibvars: from 1.25.0 to 1.26.0
  2. Fixes
    • SARIF: init empty result slice
    • SARIF: issue column >= 1
  3. Documentation
    • update revive configuration
helm/helm (helm/helm)

v3.15.2: Helm v3.15.2

Compare Source

Helm v3.15.2 is a security (patch) release. Users are strongly recommended to update to this release.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.15.2. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.15.3 will contain only bug fixes and be released on July 10, 2024.
  • 3.16.0 is the next feature release and will be on September 11, 2024.

Changelog

  • fix: wrong cli description 1a500d5 (yyzxw)
  • fix typo in load_plugins.go 70b225c (yxxhero)
  • fix docs of DeployedAll b3640f1 (Daniel Strobusch)
  • Bump github.com/docker/docker 46e2ba0 (dependabot[bot])
  • bump oras minor version fb311d3 (Austin Abro)
  • feat(load.go): add warning on requirements.lock 23552a7 (Aaron U'Ren)

v3.15.1: Helm v3.15.1

Compare Source

Helm v3.15.1 is a patch release. The Helm application source is the same as 3.15.0. The 3.15.0 builds stated the wrong version when running helm version. Instead of the release number it had the release candidate version which pointed to the same revision of the source.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.15.1. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.15.2 is the next patch release and will be on June 12, 2024.
  • 3.16.0 is the next feature release and will be on September 11, 2024.

Changelog

  • Fixing build issue where wrong version is used e211f2a (Matt Farina)

v3.15.0: Helm v3.15.0

Compare Source

Helm v3.15.0 is a feature release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Notable Changes

  • Opt-in to hiding secrets when running dry-run for install and upgrade
  • Added robustness to wait checks

Installation and Upgrading

Download Helm v3.15.0. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.15.1 is the next patch release and will be on June 12, 2024.
  • 3.16.0 is the next feature release and will be on September 11, 2024.

Changelog

  • Updating to k8s 1.30 c4e37b3 (Matt Farina)
  • bump version to v3.15.0 d7afa3b (Matt Farina)
  • bump version to 7743467 (Matt Farina)
  • Fix namespace on kubeconfig error 214fb6e (Calvin Krist)
  • Update testdata PKI with keys that have validity until 3393 (Fixes #​12880) 1b75d48 (Dirk Müller)
  • chore(deps): bump golang.org/x/net from 0.17.0 to 0.23.0 dac23c8 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 3.24.7 to 3.24.10 167d576 (dependabot[bot])
  • chore: remove repetitive words dd37787 (deterclosed)
  • Modified how created annotation is populated based on package creation time 0a69a0d (Andrew Block)
  • chore(deps): bump github.com/docker/docker aaaf112 (dependabot[bot])
  • chore(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 7f53529 (dependabot[bot])
  • Enabling hide secrets on install and upgrade dry run 25c4738 (Matt Farina)
  • chore(deps): bump github/codeql-action from 3.24.6 to 3.24.7 ff94e93 (dependabot[bot])
  • Fixing all the linting errors d58d7b3 (Robert Sirchia)
  • Add a note about --dry-run displaying secrets a23dd9e (Matt Farina)
  • chore(deps): bump golang.org/x/term from 0.15.0 to 0.18.0 275f2ab (dependabot[bot])
  • Updating .gitignore 8b424ba (Robert Sirchia)
  • chore(deps): bump github/codeql-action from 3.24.5 to 3.24.6 e22d881 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 3.24.3 to 3.24.5 4f200fa (dependabot[bot])
  • Some fixes 764557c (Matt Farina)
  • chore(deps): bump github/codeql-action from 3.23.1 to 3.24.3 5bc97b9 (dependabot[bot])
  • chore(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 e6db0ec (dependabot[bot])
  • add error messages 8d19bcb (George Jenkins)
  • Fix: Ignore alias validation error for index load 68294fd (George Jenkins)
  • validation fix 8e6a514 (Matt Farina)
  • bug: add proxy support for oci getter 94c1dea (Ricardo Maraschini)
  • chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 cbab6d6 (dependabot[bot])
  • chore(deps): bump github/codeql-action from 3.23.0 to 3.23.1 de332ae (dependabot[bot])
  • chore(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 a2dd34b (dependabot[bot])
  • Update architecture detection method 57a1bb8 (weidongkl)
  • chore(deps): bump github/codeql-action from 3.22.11 to 3.23.0 8cab7c1 (dependabot[bot])
  • chore(deps): bump github.com/DATA-DOG/go-sqlmock from 1.5.0 to 1.5.2 5f9533f (dependabot[bot])
  • Improve release action 4790bb9 (George Jenkins)
  • chore(deps): bump actions/setup-go from 4.1.0 to 5.0.0 f980ad3 (dependabot[bot])
  • Fix grammatical error c25736c (Matt Carr)
  • Updated for review comments d2cf8c6 (MichaelMorris)
  • Add robustness to wait status checks fc74964 (MichaelMorris)
  • refactor: create a helper for checking if a release is uninstalled f908379 (Alex Petrov)
  • fix: reinstall previously uninstalled chart with --keep-history 9e198fa (Alex Petrov)

v3.14.4: Helm v3.14.4

Compare Source

Helm v3.14.4 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.14.4. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.15.0 is the next feature release and will be on May 08, 2024.

Changelog

  • refactor: create a helper for checking if a release is uninstalled 81c902a (Alex Petrov)
  • fix: reinstall previously uninstalled chart with --keep-history 5a11c76 (Alex Petrov)
  • chore: remove repetitive words fb3d880 (deterclosed)
  • chore(deps): bump google.golang.org/protobuf from 1.31.0 to 1.33.0 01ac4a2 (dependabot[bot])
  • chore(deps): bump github.com/docker/docker 138602d (dependabot[bot])
  • bug: add proxy support for oci getter aa7d953 (Ricardo Maraschini)

v3.14.3: Helm v3.14.3

Compare Source

Helm v3.14.3 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.14.3. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.14.4 will contain only bug fixes and be released on April 10, 2024.
  • 3.15.0 is the next feature release and will be on May 08, 2024.

Changelog

  • Add a note about --dry-run displaying secrets f03cc04 (Matt Farina)
  • add error messages 1a7330f (George Jenkins)
  • Fix: Ignore alias validation error for index load d6acc00 (George Jenkins)
  • chore(deps): bump github.com/containerd/containerd from 1.7.11 to 1.7.12 b2738fb (dependabot[bot])
  • chore(deps): bump github.com/DATA-DOG/go-sqlmock from 1.5.0 to 1.5.2 5b0847e (dependabot[bot])
  • Update architecture detection method 7e18c39 (weidongkl)

v3.14.2: Helm v3.14.2

Compare Source

Helm v3.14.2 is a security (patch) release. Users are strongly recommended to update to this release.

A Helm contributor discovered uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content.

Jakub Ciolek with AlphaSense discovered the vulnerability.

Installation and Upgrading

Download Helm v3.14.2. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.14.3 will contain only bug fixes and be released on March 13, 2024.
  • 3.15.0 is the next feature release and will be on May 08, 2024.

Configuration

📅 Schedule: Branch creation - "on the first day of the month" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

@cluster-stack-bot
🌱 Update Builder Image group
b07f038 
| datasource  | package                  | from    | to      |
| ----------- | ------------------------ | ------- | ------- |
| docker      | docker.io/aquasec/trivy  | 0.51.4  | 0.53.0  |
| docker      | docker.io/library/alpine | 3.20.0  | 3.20.1  |
| github-tags | golangci/golangci-lint   | v1.59.0 | v1.59.1 |
| github-tags | helm/helm                | v3.14.1 | v3.15.2 |
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
type/minor type/patch update/container
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
0 participants