Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the security group with 4 updates #1727

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 3, 2025

Bumps the security group with 4 updates: github.com/cilium/ebpf, github.com/containers/image/v5, github.com/spf13/pflag and golang.org/x/exp.

Updates github.com/cilium/ebpf from 0.17.1 to 0.17.2

Release notes

Sourced from github.com/cilium/ebpf's releases.

v0.17.2

Another minor release to ship some bug fixes, notably for attaching bpf programs to symbols in kernel modules, and for reusing data sections across multiple Collections.

All users are encouraged to upgrade!

Features

Bug Fixes

Other Changes

Thanks to all who contributed and reported issues!

Full Changelog: cilium/ebpf@v0.17.1...v0.17.2

Commits
  • 9f20115 internal: add OnLinux constant
  • 923d34a CI: use latest main build of efW
  • dd845c5 CI: add windows job
  • b7c2bb8 internal/linux: skip some tests on non-Linux platforms
  • db50d22 internal/kallsyms: skip some tests on non-Linux platforms
  • ff8468e internal/tracefs: skip some tests on non-Linux platforms
  • 55d4f2f unix: return ErrNotSupportedOnOS for non-Linux platforms
  • 52120f3 cmd/bpf2go: disable on Windows
  • ac55f31 perf, ringbuf, epoll: add linux build tag
  • 8d7c47f features: add linux build tag
  • Additional commits viewable in compare view

Updates github.com/containers/image/v5 from 5.33.1 to 5.34.0

Release notes

Sourced from github.com/containers/image/v5's releases.

v5.34.0

What's Changed

... (truncated)

Commits
  • 51a5d96 Bump to c/image v5.34.0
  • 771660e Bump c/storage to v1.57.1
  • 7f0e59d Merge pull request #2696 from Luap99/ENOENT
  • 3f17e2e ignore ENOENT errors when parsing .crt files
  • c9771a8 ignore ENOENT errors when parsing registries.conf.d files
  • 1294122 ignore ENOENT errors when parsing registries.d files
  • b5c6aff Merge pull request #2693 from containers/renovate/github.com-docker-docker-27.x
  • 1683fc2 Update module github.com/docker/docker to v27.5.1+incompatible
  • 16f7e1e Merge pull request #2692 from containers/renovate/github.com-docker-cli-27.x
  • 30f0d87 Update module github.com/docker/cli to v27.5.1+incompatible
  • Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.5 to 1.0.6

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.6

What's Changed

New Contributors

Full Changelog: spf13/pflag@v1.0.5...v1.0.6

Commits

Updates golang.org/x/exp from 0.0.0-20241108190413-2d47ceb2692f to 0.0.0-20241217172543-b2144cdd0a67

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the security group with 4 updates: [github.com/cilium/ebpf](https://github.com/cilium/ebpf), [github.com/containers/image/v5](https://github.com/containers/image), [github.com/spf13/pflag](https://github.com/spf13/pflag) and [golang.org/x/exp](https://github.com/golang/exp).


Updates `github.com/cilium/ebpf` from 0.17.1 to 0.17.2
- [Release notes](https://github.com/cilium/ebpf/releases)
- [Commits](cilium/ebpf@v0.17.1...v0.17.2)

Updates `github.com/containers/image/v5` from 5.33.1 to 5.34.0
- [Release notes](https://github.com/containers/image/releases)
- [Commits](containers/image@v5.33.1...v5.34.0)

Updates `github.com/spf13/pflag` from 1.0.5 to 1.0.6
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](spf13/pflag@v1.0.5...v1.0.6)

Updates `golang.org/x/exp` from 0.0.0-20241108190413-2d47ceb2692f to 0.0.0-20241217172543-b2144cdd0a67
- [Commits](https://github.com/golang/exp/commits)

---
updated-dependencies:
- dependency-name: github.com/cilium/ebpf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: github.com/containers/image/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: github.com/spf13/pflag
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: golang.org/x/exp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
...

Signed-off-by: dependabot[bot] <[email protected]>
@xavpaice
Copy link
Member

@dependabot rebase

Copy link
Contributor Author

dependabot bot commented on behalf of github Feb 10, 2025

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Feb 10, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/security-8bced43e7e branch February 10, 2025 05:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant