8000 rebase: bump the github-dependencies group with 3 updates by dependabot[bot] · Pull Request #5356 · ceph/ceph-csi · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

rebase: bump the github-dependencies group with 3 updates #5356

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Jun 10, 2025
Merged

rebase: bump the github-dependencies group with 3 updates #5356

merged 1 commit into from
Jun 10, 2025

Conversation

dependabot[bot]
Copy link
Contributor
@dependabot dependabot bot commented on behalf of github Jun 9, 2025

Bumps the github-dependencies group with 3 updates: github.com/aws/aws-sdk-go-v2/service/sts, github.com/hashicorp/vault/api and github.com/pkg/xattr.

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.33.19 to 1.33.20

Commits

Updates github.com/hashicorp/vault/api from 1.16.0 to 1.20.0

Release notes

Sourced from github.com/hashicorp/vault/api's releases.

v1.19.5

1.19.5

May 30, 2025

Enterprise LTS: Vault Enterprise 1.19 is a Long-Term Support (LTS) release.

CHANGES:

  • database/snowflake: Update plugin to v0.13.1 [GH-30775]

IMPROVEMENTS:

  • plugins: Support registration of CE plugins with extracted artifact directory. [GH-30673]

BUG FIXES:

  • ui: Fix broken link to Hashicorp Vault developer site in the Web REPL help. [GH-30670]

v1.19.4

1.19.4

May 16, 2025

CHANGES:

  • Update vault-plugin-auth-cf to v0.20.1 [GH-30586]
  • auth/azure: Update plugin to v0.20.4 [GH-30543]
  • core: Bump Go version to 1.24.3.

IMPROVEMENTS:

  • Namespaces (enterprise): allow a root token to relock a namespace
  • core (enterprise): update to FIPS 140-3 cryptographic module in the FIPS builds.
  • core: Updated code and documentation to support FIPS 140-3 compliant algorithms. [GH-30576]
  • core: support for X25519MLKEM768 (post quantum key agreement) in the Go TLS stack. [GH-30603]
  • ui: Replaces all instances of the deprecated event.keyCode with event.key [GH-30493]

BUG FIXES:

  • core (enterprise): fix a bug where plugin automated root rotations would stop after seal/unseal operations
  • plugins (enterprise): Fix an issue where Enterprise plugins can't run on a standby node when it becomes active because standby nodes don't extract the artifact when the plugin is registered. Remove extracting from Vault and require the operator to place the extracted artifact in the plugin directory before registration.

v1.19.3

1.19.3

April 30, 2025

CHANGES:

... (truncated)

Changelog

Sourced from github.com/hashicorp/vault/api's changelog.

Previous versions

1.19.5

May 30, 2025

Enterprise LTS: Vault Enterprise 1.19 is a Long-Term Support (LTS) release.

CHANGES:

  • database/snowflake: Update plugin to v0.13.1 [GH-30775]

IMPROVEMENTS:

  • plugins: Support registration of CE plugins with extracted artifact directory. [GH-30673]

BUG FIXES:

  • ui: Fix broken link to Hashicorp Vault developer site in the Web REPL help. [GH-30670]

1.19.4

May 16, 2025

Enterprise LTS: Vault Enterprise 1.19 is a Long-Term Support (LTS) release.

CHANGES:

  • Update vault-plugin-auth-cf to v0.20.1 [GH-30586]
  • auth/azure: Update plugin to v0.20.4 [GH-30543]
  • core: Bump Go version to 1.24.3.

IMPROVEMENTS:

  • Namespaces (enterprise): allow a root token to relock a namespace
  • core (enterprise): update to FIPS 140-3 cryptographic module in the FIPS builds.
  • core: Updated code and documentation to support FIPS 140-3 compliant algorithms. [GH-30576]
  • core: support for X25519MLKEM768 (post quantum key agreement) in the Go TLS stack. [GH-30603]
  • ui: Replaces all instances of the deprecated event.keyCode with event.key [GH-30493]

8000 BUG FIXES:

  • core (enterprise): fix a bug where plugin automated root rotations would stop after seal/unseal operations
  • plugins (enterprise): Fix an issue where Enterprise plugins can't run on a standby node when it becomes active because standby nodes don't extract the artifact when the plugin is registered. Remove extracting from Vault and require the operator to place the extracted artifact in the plugin directory before registration.

... (truncated)

Commits
  • 71ca099 Update vault-plugin-secrets-gcp to v0.22.0 (#30846)
  • 51ec0db Update vault-plugin-auth-kerberos to v0.15.0 (#30845)
  • 38cc2c9 Update vault-plugin-auth-cf to v0.21.0 (#30842)
  • 36aa49b enos(fips1403): simplify semver constraint to only consider currently mixed r...
  • 407c297 Update vault-plugin-secrets-openldap to v0.16.0 (#30844)
  • a725087 VAULT-36495 CE changes (#30807)
  • d19e946 Update vault-plugin-auth-oci to v0.19.0 (#30841)
  • d9ecd5b PostgreSQL backend passwordless authentication in cloud (#30681)
  • 636524e Update vault-plugin-database-couchbase to v0.14.0 (#30836)
  • befafd5 [VAULT-35682] build(cgo): Build CGO binaries in a container (#30834)
  • Additional commits viewable in compare view

Updates github.com/pkg/xattr from 0.4.10 to 0.4.11

Release notes

Sourced from github.com/pkg/xattr's releases.

v0.4.11

What's Changed

Full Changelog: pkg/xattr@v0.4.10...v0.4.11

Commits

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
rebase: bump the github-dependencies group with 3 updates
35d879d 
Bumps the github-dependencies group with 3 updates: [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2), [github.com/hashicorp/vault/api](https://github.com/hashicorp/vault) and [github.com/pkg/xattr](https://github.com/pkg/xattr).


Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.33.19 to 1.33.20
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@service/sns/v1.33.19...service/sns/v1.33.20)

Updates `github.com/hashicorp/vault/api` from 1.16.0 to 1.20.0
- [Release notes](https://github.com/hashicorp/vault/releases)
- [Changelog](https://github.com/hashicorp/vault/blob/main/CHANGELOG.md)
- [Commits](hashicorp/vault@v1.16.0...api/v1.20.0)

Updates `github.com/pkg/xattr` from 0.4.10 to 0.4.11
- [Release notes](https://github.com/pkg/xattr/releases)
- [Commits](pkg/xattr@v0.4.10...v0.4.11)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.33.20
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
- dependency-name: github.com/hashicorp/vault/api
  dependency-version: 1.20.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: github-dependencies
- dependency-name: github.com/pkg/xattr
  dependency-version: 0.4.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: github-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added the rebase update the version of an external component label Jun 9, 2025
@nixpanic nixpanic requested a review from a team June 10, 2025 07:20
@nixpanic
Copy link
Member

@Mergifyio rebase

@mergify Mergify
Copy link
Contributor
mergify bot commented Jun 10, 2025

rebase

☑️ Nothing to do, the required conditions are not met

  • any of:
    • #commits > 1 [📌 rebase requirement]
    • #commits-behind > 0 [📌 rebase requirement]
    • -linear-history [📌 rebase requirement]
  • -closed [📌 rebase requirement]
  • -conflict [📌 rebase requirement]
  • queue-position = -1 [📌 rebase requirement]

@nixpanic
Copy link
Member

@Mergifyio queue

@mergify Mergify
Copy link
Contributor
mergify bot commented Jun 10, 2025 •
edited
Loading

queue

✅ The pull request has been merged automatically

The pull request has been merged automatically at 598e7a6

@mergify mergify bot added the ok-to-test Label to trigger E2E tests label Jun 10, 2025
@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/k8s-e2e-external-storage/1.32

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/k8s-e2e-external-storage/1.31

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/upgrade-tests-cephfs

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e-helm/k8s-1.31

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e-helm/k8s-1.32

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/k8s-e2e-external-storage/1.30

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e/k8s-1.31

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/upgrade-tests-rbd

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e/k8s-1.32

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e-helm/k8s-1.30

@ceph-csi-bot
Copy link
Collaborator

/test ci/centos/mini-e2e/k8s-1.30

@ceph-csi-bot ceph-csi-bot removed the ok-to-test Label to trigger E2E tests label Jun 10, 2025
@mergify mergify bot merged commit 598e7a6 into devel Jun 10, 2025
41 checks passed
@mergify mergify bot deleted the dependabot/go_modules/github-dependencies-23a6e494a5 branch June 10, 2025 12:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@nixpanic nixpanic nixpanic approved these changes

@yati1998 yati1998 yati1998 approved these changes

Assignees
No one assigned
Labels
rebase update the version of an external component
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
3 participants
@nixpanic @ceph-csi-bot @yati1998
0