dependabot[bot]
1faca4943d
🌱 Bump google.golang.org/protobuf from 1.34.1 to 1.34.2 ( #4169 )
2024-06-12 17:58:59 +00:00
dependabot[bot]
fde26a0ef4
🌱 Bump github.com/moby/buildkit from 0.13.2 to 0.14.0 ( #4168 )
2024-06-12 16:07:16 +00:00
dependabot[bot]
bc1c2e6995
🌱 Bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 ( #4148 )
2024-06-06 17:14:20 +00:00
dependabot[bot]
b4d6ee469c
🌱 Bump github.com/bradleyfalzon/ghinstallation/v2 ( #4137 )
2024-06-05 18:13:00 +00:00
dependabot[bot]
eea94f5d01
🌱 Bump github.com/rhysd/actionlint from 1.7.0 to 1.7.1 ( #4138 )
2024-06-05 18:00:32 +00:00
dependabot[bot]
936efa9fff
🌱 Bump golang.org/x/text from 0.15.0 to 0.16.0 ( #4142 )
2024-06-05 17:44:34 +00:00
dependabot[bot]
36d8ad7a60
🌱 Bump github.com/google/osv-scanner from 1.7.3 to 1.7.4 ( #4139 )
...
Bumps [github.com/google/osv-scanner](https://github.com/google/osv-scanner ) from 1.7.3 to 1.7.4.
- [Release notes](https://github.com/google/osv-scanner/releases )
- [Changelog](https://github.com/google/osv-scanner/blob/main/CHANGELOG.md )
- [Commits](https://github.com/google/osv-scanner/compare/v1.7.3...v1.7.4 )
---
updated-dependencies:
- dependency-name: github.com/google/osv-scanner
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-06-04 11:25:36 -07:00
dependabot[bot]
02f72e0582
🌱 Bump github.com/onsi/ginkgo/v2 from 2.17.3 to 2.19.0 ( #4126 )
2024-05-30 23:03:52 +00:00
dependabot[bot]
d99ae690a9
🌱 Bump github.com/go-logr/logr from 1.4.1 to 1.4.2 ( #4120 )
...
updated-dependencies:
- dependency-name: github.com/go-logr/logr
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-23 18:36:17 -04:00
dependabot[bot]
956d7c3895
🌱 Bump sigs.k8s.io/release-utils from 0.8.1 to 0.8.2 ( #4107 )
2024-05-15 17:14:00 +00:00
dependabot[bot]
6f9a512296
🌱 Bump github.com/rhysd/actionlint from 1.6.27 to 1.7.0 ( #4100 )
2024-05-14 19:43:41 +00:00
dependabot[bot]
d40ecbacb3
🌱 Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 ( #4091 )
2024-05-14 19:26:15 +00:00
dependabot[bot]
665e9c48e8
🌱 Bump github.com/google/osv-scanner from 1.7.2 to 1.7.3 ( #4101 )
...
* 🌱 Bump github.com/google/osv-scanner from 1.7.2 to 1.7.3
Bumps [github.com/google/osv-scanner](https://github.com/google/osv-scanner ) from 1.7.2 to 1.7.3.
- [Release notes](https://github.com/google/osv-scanner/releases )
- [Changelog](https://github.com/google/osv-scanner/blob/main/CHANGELOG.md )
- [Commits](https://github.com/google/osv-scanner/compare/v1.7.2...v1.7.3 )
---
updated-dependencies:
- dependency-name: github.com/google/osv-scanner
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
* remove toolchain directive and run go mod tidy
Signed-off-by: Spencer Schrock <sschrock@google.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Spencer Schrock <sschrock@google.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Spencer Schrock <sschrock@google.com>
2024-05-14 17:58:15 +00:00
dependabot[bot]
db720cc870
🌱 Bump google.golang.org/protobuf from 1.34.0 to 1.34.1 ( #4092 )
2024-05-10 21:21:27 +00:00
dependabot[bot]
5a59357658
🌱 Bump github.com/xanzy/go-gitlab from 0.103.0 to 0.105.0 ( #4099 )
2024-05-10 18:33:13 +00:00
Spencer Schrock
7ce8609469
🐛 Support renamed gradle verification action and callers which pin to hash ( #4097 )
...
* Support renamed gradle verification action
From gradle/wrapper-validation-action's readme:
"As of v3 this action has been superceded by
gradle/actions/wrapper-validation"
Also support actions pinned to a hash.
Signed-off-by: Spencer Schrock <sschrock@google.com>
* remove unneeded dependency
Signed-off-by: Spencer Schrock <sschrock@google.com>
---------
Signed-off-by: Spencer Schrock <sschrock@google.com>
2024-05-09 18:27:34 +00:00
dependabot[bot]
6b5cb27cd0
🌱 Bump cloud.google.com/go/pubsub from 1.37.0 to 1.38.0 ( #4088 )
2024-05-07 17:49:20 +00:00
dependabot[bot]
13c7254fd5
🌱 Bump golang.org/x/text from 0.14.0 to 0.15.0 ( #4089 )
2024-05-07 17:32:27 +00:00
dependabot[bot]
e6f5767190
🌱 Bump golang.org/x/oauth2 from 0.19.0 to 0.20.0 ( #4087 )
2024-05-07 17:20:00 +00:00
dependabot[bot]
cad20c5355
🌱 Bump cloud.google.com/go/bigquery from 1.60.0 to 1.61.0 ( #4069 )
2024-05-06 20:25:24 +00:00
dependabot[bot]
0616bf3a5e
🌱 Bump github.com/moby/buildkit from 0.13.1 to 0.13.2 ( #4070 )
...
Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit ) from 0.13.1 to 0.13.2.
- [Release notes](https://github.com/moby/buildkit/releases )
- [Commits](https://github.com/moby/buildkit/compare/v0.13.1...v0.13.2 )
---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-05-02 13:23:17 -04:00
dependabot[bot]
62aca9907c
🌱 Bump github.com/onsi/gomega from 1.33.0 to 1.33.1 ( #4066 )
2024-04-30 21:42:28 +00:00
dependabot[bot]
58f0ed5ed3
🌱 Bump google.golang.org/protobuf from 1.33.0 to 1.34.0 ( #4065 )
2024-04-30 20:59:20 +00:00
dependabot[bot]
a0efbf455b
🌱 Bump github.com/onsi/gomega from 1.32.0 to 1.33.0 ( #4042 )
2024-04-24 19:10:30 +00:00
dependabot[bot]
f9b43b72db
🌱 Bump github.com/xanzy/go-gitlab from 0.102.0 to 0.103.0 ( #4043 )
2024-04-24 18:57:03 +00:00
dependabot[bot]
eef39716ef
🌱 Bump github.com/google/osv-scanner from 1.7.1 to 1.7.2 ( #4044 )
2024-04-24 18:44:47 +00:00
dependabot[bot]
c69fcab521
🌱 Bump golang.org/x/net from 0.22.0 to 0.23.0 ( #4045 )
2024-04-24 18:32:27 +00:00
Spencer Schrock
0b9dfb656f
⚠️ Replace v4 module references with v5 ( #4027 )
...
Signed-off-by: Spencer Schrock <sschrock@google.com>
2024-04-12 14:51:50 -07:00
dependabot[bot]
f939ab1cb3
🌱 Bump golang.org/x/oauth2 from 0.18.0 to 0.19.0 ( #4004 )
2024-04-12 18:31:25 +00:00
dependabot[bot]
d187f11e0f
🌱 Bump sigs.k8s.io/release-utils from 0.6.0 to 0.8.1 ( #4015 )
2024-04-12 18:07:00 +00:00
dependabot[bot]
b118c1950f
🌱 Bump github.com/xanzy/go-gitlab from 0.101.0 to 0.102.0 ( #4005 )
2024-04-05 18:11:56 +00:00
dependabot[bot]
6d488c0410
🌱 Bump github.com/bradleyfalzon/ghinstallation/v2 ( #3975 )
2024-04-01 20:09:15 +00:00
dependabot[bot]
bcaef6d34e
🌱 Bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 ( #3984 )
2024-04-01 19:29:04 +00:00
dependabot[bot]
6ae6472698
🌱 Bump cloud.google.com/go/bigquery from 1.59.1 to 1.60.0 ( #3980 )
...
Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go ) from 1.59.1 to 1.60.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/bigquery/v1.59.1...spanner/v1.60.0 )
---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-04-01 11:30:42 -04:00
dependabot[bot]
153e06d99f
🌱 Bump github.com/onsi/ginkgo/v2 from 2.16.0 to 2.17.1 ( #3974 )
...
Bumps [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo ) from 2.16.0 to 2.17.1.
- [Release notes](https://github.com/onsi/ginkgo/releases )
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/ginkgo/compare/v2.16.0...v2.17.1 )
---
updated-dependencies:
- dependency-name: github.com/onsi/ginkgo/v2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-26 19:25:05 +00:00
dependabot[bot]
be15709929
🌱 Bump github.com/xanzy/go-gitlab from 0.99.0 to 0.101.0 ( #3973 )
2024-03-26 17:59:52 +00:00
dependabot[bot]
deced313db
🌱 Bump github.com/onsi/gomega from 1.31.1 to 1.32.0 ( #3964 )
2024-03-25 21:37:29 +00:00
dependabot[bot]
b379817680
🌱 Bump gocloud.dev from 0.36.0 to 0.37.0 ( #3963 )
2024-03-25 20:58:27 +00:00
dependabot[bot]
c1066d9ac2
🌱 Bump github.com/moby/buildkit from 0.12.5 to 0.13.1 ( #3951 )
...
Bumps [github.com/moby/buildkit](https://github.com/moby/buildkit ) from 0.12.5 to 0.13.1.
- [Release notes](https://github.com/moby/buildkit/releases )
- [Commits](https://github.com/moby/buildkit/compare/v0.12.5...v0.13.1 )
---
updated-dependencies:
- dependency-name: github.com/moby/buildkit
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-20 23:46:54 +00:00
dependabot[bot]
da798b6523
🌱 Bump github.com/google/osv-scanner from 1.6.2 to 1.7.1 ( #3958 )
...
* 🌱 Bump github.com/google/osv-scanner from 1.6.2 to 1.7.1
Bumps [github.com/google/osv-scanner](https://github.com/google/osv-scanner ) from 1.6.2 to 1.7.1.
- [Release notes](https://github.com/google/osv-scanner/releases )
- [Changelog](https://github.com/google/osv-scanner/blob/main/CHANGELOG.md )
- [Commits](https://github.com/google/osv-scanner/compare/v1.6.2...v1.7.1 )
---
updated-dependencies:
- dependency-name: github.com/google/osv-scanner
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
* remove toolchain directive
Signed-off-by: Spencer Schrock <sschrock@google.com>
* bump vulnerable package so PR can merge
Signed-off-by: Spencer Schrock <sschrock@google.com>
---------
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Spencer Schrock <sschrock@google.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Spencer Schrock <sschrock@google.com>
2024-03-20 23:26:56 +00:00
dependabot[bot]
2c02d4b816
🌱 Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 ( #3927 )
...
Bumps google.golang.org/protobuf from 1.32.0 to 1.33.0.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-19 09:27:53 -07:00
dependabot[bot]
2aef57de7f
🌱 Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.16.0 ( #3918 )
2024-03-06 23:04:53 +00:00
dependabot[bot]
c3f2f131ec
🌱 Bump github.com/xanzy/go-gitlab from 0.98.0 to 0.99.0 ( #3919 )
2024-03-06 22:43:32 +00:00
dependabot[bot]
7543416c8d
🌱 Bump golang.org/x/oauth2 from 0.17.0 to 0.18.0 ( #3920 )
2024-03-06 22:20:45 +00:00
dependabot[bot]
ae4822eac6
🌱 Bump cloud.google.com/go/pubsub from 1.36.1 to 1.36.2 ( #3909 )
...
Bumps [cloud.google.com/go/pubsub](https://github.com/googleapis/google-cloud-go ) from 1.36.1 to 1.36.2.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/pubsub/v1.36.1...pubsub/v1.36.2 )
---
updated-dependencies:
- dependency-name: cloud.google.com/go/pubsub
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-01 10:55:52 -06:00
dependabot[bot]
e7da5b10c8
🌱 Bump github.com/xanzy/go-gitlab from 0.97.0 to 0.98.0 ( #3901 )
...
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab ) from 0.97.0 to 0.98.0.
- [Changelog](https://github.com/xanzy/go-gitlab/blob/main/releases_test.go )
- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.97.0...v0.98.0 )
---
updated-dependencies:
- dependency-name: github.com/xanzy/go-gitlab
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-29 10:11:03 -08:00
dependabot[bot]
cac416eade
🌱 Bump github.com/rhysd/actionlint from 1.6.26 to 1.6.27 ( #3900 )
...
Bumps [github.com/rhysd/actionlint](https://github.com/rhysd/actionlint ) from 1.6.26 to 1.6.27.
- [Release notes](https://github.com/rhysd/actionlint/releases )
- [Changelog](https://github.com/rhysd/actionlint/blob/main/CHANGELOG.md )
- [Commits](https://github.com/rhysd/actionlint/compare/v1.6.26...v1.6.27 )
---
updated-dependencies:
- dependency-name: github.com/rhysd/actionlint
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-26 10:00:22 -08:00
dependabot[bot]
e39802a370
🌱 Bump cloud.google.com/go/bigquery from 1.59.0 to 1.59.1 ( #3875 )
...
Bumps [cloud.google.com/go/bigquery](https://github.com/googleapis/google-cloud-go ) from 1.59.0 to 1.59.1.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases )
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md )
- [Commits](https://github.com/googleapis/google-cloud-go/compare/bigquery/v1.59.0...bigquery/v1.59.1 )
---
updated-dependencies:
- dependency-name: cloud.google.com/go/bigquery
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-13 11:35:58 -08:00
dependabot[bot]
ec5c81f890
🌱 Bump mvdan.cc/sh/v3 from 3.7.0 to 3.8.0 ( #3871 )
...
Bumps [mvdan.cc/sh/v3](https://github.com/mvdan/sh ) from 3.7.0 to 3.8.0.
- [Release notes](https://github.com/mvdan/sh/releases )
- [Changelog](https://github.com/mvdan/sh/blob/master/CHANGELOG.md )
- [Commits](https://github.com/mvdan/sh/compare/v3.7.0...v3.8.0 )
---
updated-dependencies:
- dependency-name: mvdan.cc/sh/v3
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-12 10:43:24 -06:00
dependabot[bot]
e211d37a54
🌱 Bump golang.org/x/oauth2 from 0.16.0 to 0.17.0 ( #3868 )
...
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2 ) from 0.16.0 to 0.17.0.
- [Commits](https://github.com/golang/oauth2/compare/v0.16.0...v0.17.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/oauth2
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-02-09 10:20:48 -06:00