build(deps): bump the go_modules group across 1 directory with 7 updates#1
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
build(deps): bump the go_modules group across 1 directory with 7 updates#1dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the go_modules group with 3 updates in the / directory: [github.com/containerd/containerd](https://github.com/containerd/containerd), [github.com/docker/cli](https://github.com/docker/cli) and [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt). Updates `github.com/containerd/containerd` from 1.7.11 to 1.7.29 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v1.7.11...v1.7.29) Updates `github.com/docker/cli` from 23.0.5+incompatible to 29.2.0+incompatible - [Commits](docker/cli@v23.0.5...v29.2.0) Updates `github.com/golang-jwt/jwt/v4` from 4.4.2 to 4.5.2 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Commits](golang-jwt/jwt@v4.4.2...v4.5.2) Updates `golang.org/x/crypto` from 0.17.0 to 0.40.0 - [Commits](golang/crypto@v0.17.0...v0.40.0) Updates `golang.org/x/net` from 0.17.0 to 0.42.0 - [Commits](golang/net@v0.17.0...v0.42.0) Updates `golang.org/x/oauth2` from 0.11.0 to 0.30.0 - [Commits](golang/oauth2@v0.11.0...v0.30.0) Updates `google.golang.org/protobuf` from 1.31.0 to 1.35.2 --- updated-dependencies: - dependency-name: github.com/containerd/containerd dependency-version: 1.7.29 dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/docker/cli dependency-version: 29.2.0+incompatible dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/golang-jwt/jwt/v4 dependency-version: 4.5.2 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.40.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.42.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/oauth2 dependency-version: 0.30.0 dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/protobuf dependency-version: 1.35.2 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go_modules group with 3 updates in the / directory: github.com/containerd/containerd, github.com/docker/cli and github.com/golang-jwt/jwt/v4.
Updates
github.com/containerd/containerdfrom 1.7.11 to 1.7.29Release notes
Sourced from github.com/containerd/containerd's releases.
... (truncated)
Commits
442cb34Merge commit from forke5cb6ddMerge commit from fork9772966Merge pull request #12486 from dmcgowan/prepare-v1.7.291fc2daaPrepare release notes for v1.7.2993f710aMerge pull request #12480 from k8s-infra-cherrypick-robot/cherry-pick-12475-t...68d04beMerge pull request #12471 from austinvazquez/1_7_update_ci_go_and_images3f5f9f8runc: Update runc binary to v1.3.3667409fci: bump Go 1.24.9, 1.25.3294f8c0Update GHA runners to use latest images for basic binaries buildcf66b41Update GHA runners to use latest image for most jobsUpdates
github.com/docker/clifrom 23.0.5+incompatible to 29.2.0+incompatibleCommits
0b9d198Merge pull request #6764 from vvoland/update-docker9c9ec73vendor: github.com/moby/moby/client v0.2.2bab3e81vendor: github.com/moby/moby/api v1.53.02e64fc1Merge pull request #6367 from thaJeztah/template_slicejoin1f2ba2aMerge pull request #6760 from thaJeztah/container_create_fix_errore34a342templates: make "join" work with non-string slices and map valuesa86356dMerge pull request #6763 from thaJeztah/bump_mapstructure771660avendor: github.com/go-viper/mapstructure/v2 v2.5.09cff36bMerge pull request #6762 from thaJeztah/bump_x_deps08ed2bccli/command/container: make injecting config.json failures a warningUpdates
github.com/golang-jwt/jwt/v4from 4.4.2 to 4.5.2Release notes
Sourced from github.com/golang-jwt/jwt/v4's releases.
Commits
2f0e9adBackporting 0951d18 to v47b1c1c0Merge commit from fork9358574Allow strict base64 decoding (#259)2f0984aUsingtparsefor nicer CI test display (#251)2101c1fNo pointer embedding in the example (#255)35053d4Removed unneeded if statement (#241)0c4e387Add doc comment to ParseWithClaims (#232)bfea432Include https://github.com/golang-jwt/jwe in README (#229)d81acbfBump matrix to support latest go version (go1.19) (#231)fdaf0ebImplement a BearerExtractor (#226)Updates
golang.org/x/cryptofrom 0.17.0 to 0.40.0Commits
459a9dbgo.mod: update golang.org/x dependencies74e709assh: add AlgorithmNegotiationErrorb3790b8acme: fix TLSALPN01ChallengeCert for IP address identifiers1dc4269acme: add Pebble integration testing97bf787blake2b: implement hash.XOF952517dx509roots/fallback: update bundlec6fce02ssh: refuse to parse certificates that use a certificate as signing key0ae49b8ssh: reject certificate keys used as signature keys for SSH certs3bf9d2assh/test: skip KEX test if unsupported by system SSH client9bab967go.mod: update golang.org/x dependenciesUpdates
golang.org/x/netfrom 0.17.0 to 0.42.0Commits
76358aago.mod: update golang.org/x dependencies6e41caego.mod: update golang.org/x dependencies15f7d40http2: correctly wrap ErrFrameTooLarge in Framer.ReadFrameef33bc0internal/http3: use bubbled context in synctest tests919c6bchttp2: use an array instead of a map in typeFrameParserbae01a7trace: add missing td tag7d6e62ago.mod: update golang.org/x dependenciesea0c1d9internal/timeseries: use built-in max/min to simplify the code3e7a445quic: skip packet numbers for optimistic ack defense3f563d3quic: use an enum for sentPacket stateUpdates
golang.org/x/oauth2from 0.11.0 to 0.30.0Commits
cf14319oauth2: fix expiration time window check32d34efinternal: include clientID in auth style cache key2d34e30oauth2: replace a magic number with AuthStyleUnknown696f7b3all: modernize with doc links and any471209boauth2: drop dependency on go-cmp6968da2oauth2: sync Token.ExpiresIn from internal Tokend2c4e0aoauth2: context instead of golang.org/x/net/context in doc883dc3cendpoints: add various endpoints from stale CLs1c06e87all: make use of oauth.Token.ExpiresIn65c15a3oauth2: remove extra periodUpdates
google.golang.org/protobuffrom 1.31.0 to 1.35.2Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.