Skip to content

Conversation

lelithium
Copy link
Member

Pulls changes from helm/helm:dev-v3

gjenkins8 and others added 30 commits September 27, 2024 17:42
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
…ions/checkout-4.2.0

Bump actions/checkout from 4.1.7 to 4.2.0
Remove the Kubernetes configuration file permissions check
Bumps [golang/govulncheck-action](https://github.com/golang/govulncheck-action) from 1.0.3 to 1.0.4.
- [Release notes](https://github.com/golang/govulncheck-action/releases)
- [Commits](golang/govulncheck-action@dd0578b...b625fbe)

---
updated-dependencies:
- dependency-name: golang/govulncheck-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…ang/govulncheck-action-1.0.4

Bump golang/govulncheck-action from 1.0.3 to 1.0.4
Bumps the k8s-io group with 7 updates:

| Package | From | To |
| --- | --- | --- |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.31.0` | `0.31.1` |
| [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.31.0` | `0.31.1` |
| [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.31.0` | `0.31.1` |
| [k8s.io/apiserver](https://github.com/kubernetes/apiserver) | `0.31.0` | `0.31.1` |
| [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.31.0` | `0.31.1` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.31.0` | `0.31.1` |
| [k8s.io/kubectl](https://github.com/kubernetes/kubectl) | `0.31.0` | `0.31.1` |


Updates `k8s.io/api` from 0.31.0 to 0.31.1
- [Commits](kubernetes/api@v0.31.0...v0.31.1)

Updates `k8s.io/apiextensions-apiserver` from 0.31.0 to 0.31.1
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.31.0...v0.31.1)

Updates `k8s.io/apimachinery` from 0.31.0 to 0.31.1
- [Commits](kubernetes/apimachinery@v0.31.0...v0.31.1)

Updates `k8s.io/apiserver` from 0.31.0 to 0.31.1
- [Commits](kubernetes/apiserver@v0.31.0...v0.31.1)

Updates `k8s.io/cli-runtime` from 0.31.0 to 0.31.1
- [Commits](kubernetes/cli-runtime@v0.31.0...v0.31.1)

Updates `k8s.io/client-go` from 0.31.0 to 0.31.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.31.0...v0.31.1)

Updates `k8s.io/kubectl` from 0.31.0 to 0.31.1
- [Commits](kubernetes/kubectl@v0.31.0...v0.31.1)

---
updated-dependencies:
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/apiserver
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/cli-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
- dependency-name: k8s.io/kubectl
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: k8s-io
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
Bumps [golangci/golangci-lint-action](https://github.com/golangci/golangci-lint-action) from 6.1.0 to 6.1.1.
- [Release notes](https://github.com/golangci/golangci-lint-action/releases)
- [Commits](golangci/golangci-lint-action@aaa42aa...971e284)

---
updated-dependencies:
- dependency-name: golangci/golangci-lint-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…angci/golangci-lint-action-6.1.1

Bump golangci/golangci-lint-action from 6.1.0 to 6.1.1
add strvals fuzzer from cncf-fuzzing
Signed-off-by: ricardo.bartels@telekom.de <ricardo.bartels@telekom.de>
…14671bab77

Bump the k8s-io group with 7 updates
Improves handling of Helm index with broken helm chart versions helm#13176
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.27.0 to 0.28.0.
- [Commits](golang/crypto@v0.27.0...v0.28.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
Signed-off-by: George Jenkins <gvjenkins@gmail.com>
Amending for new checks to run.

Signed-off-by: Bryan Honof <bryan@floxdev.com>
Signed-off-by: Robert Sirchia <rsirchia@outlook.com>
doc: add Flox as an installation option
Bumps [actions/checkout](https://github.com/actions/checkout) from 4.2.0 to 4.2.1.
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@d632683...eef6144)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Make retryingRoundTripper type public to allow being used in other
projects

fixes: helm#13052
Signed-off-by: Luis Davim <luis.davim@gmail.com>
benoittgt and others added 28 commits March 19, 2025 23:09
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
Report as debug log, the time spent waiting for resources
Signed-off-by: Matt Farina <matt@mattfarina.com>
(cherry picked from commit 7cc4dcf94ee410c8e0d64f3e726dda199c24ccb2)
Unarchiving fix [v3]
```
$ go mod download                                                                                            130 ↵
go: module github.com/distribution/distribution/v3@v3.0.0 requires go >= 1.23.7; switching to go1.23.8
```

Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
Bumps github.com/distribution/distribution/v3 from 3.0.0-rc.3 to 3.0.0
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
Bump text package with minimal impact
Bumps [golang.org/x/term](https://github.com/golang/term) from 0.30.0 to 0.31.0.
- [Commits](golang/term@v0.30.0...v0.31.0)

---
updated-dependencies:
- dependency-name: golang.org/x/term
  dependency-version: 0.31.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…golang.org/x/term-0.31.0

build(deps): bump golang.org/x/term from 0.30.0 to 0.31.0
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.36.0 to 0.37.0.
- [Commits](golang/crypto@v0.36.0...v0.37.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-version: 0.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
…golang.org/x/crypto-0.37.0

build(deps): bump golang.org/x/crypto from 0.36.0 to 0.37.0
Bumps [github.com/rubenv/sql-migrate](https://github.com/rubenv/sql-migrate) from 1.7.1 to 1.7.2.
- [Commits](rubenv/sql-migrate@v1.7.1...v1.7.2)

---
updated-dependencies:
- dependency-name: github.com/rubenv/sql-migrate
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
…github.com/rubenv/sql-migrate-1.7.2

build(deps): bump github.com/rubenv/sql-migrate from 1.7.1 to 1.7.2
If a resource exists in the cluster and is to be adopted by helm install
--take-ownership, it is left unchanged while helm reports the
installation to have succeeded.

This is due to CRs and CRDs being merged without three-way-merge, which
results in an empty patch.

By using a three-way-merge transparently when --take-ownership is used,
the helm behaves as expected without breaking previous behavior.

Fixes helm#30622

Signed-off-by: Patrick Seidensal <pseidensal@suse.com>
Signed-off-by: Evans Mungai <mbuevans@gmail.com>
Bumps [github.com/rubenv/sql-migrate](https://github.com/rubenv/sql-migrate) from 1.7.2 to 1.8.0.
- [Commits](rubenv/sql-migrate@v1.7.2...v1.8.0)

---
updated-dependencies:
- dependency-name: github.com/rubenv/sql-migrate
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: dongjiang <dongjiang1989@126.com>
…github.com/rubenv/sql-migrate-1.8.0

build(deps): bump github.com/rubenv/sql-migrate from 1.7.2 to 1.8.0
…v-v3

[v3 backport] chore: Update Golang to v1.24
Looking at the [toml diff](BurntSushi/toml@v1.4.0...v1.5.0). I think it's safe to change the test here.

For main: helm#30775

Closes: helm#30683
Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
Closes: helm#30780

Signed-off-by: Benoit Tigeot <benoit.tigeot@lifen.fr>
Bump net package to avoid CVE on dev-v3
@lelithium lelithium self-assigned this Apr 28, 2025
@lelithium lelithium merged commit f2464f4 into main Apr 28, 2025
7 of 8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.