chore(deps): bump the go_modules group across 11 directories with 5 updates by dependabot[bot] · Pull Request #7761 · ovh/cds

dependabot · 2026-05-20T06:22:29Z

Bumps the go_modules group with 2 updates in the / directory: helm.sh/helm/v3 and github.com/go-git/go-git/v5.
Bumps the go_modules group with 1 update in the /contrib/grpcplugins/action/plugin-archive directory: github.com/go-git/go-git/v5.
Bumps the go_modules group with 1 update in the /contrib/grpcplugins/action/plugin-artifactory-release-bundle-create directory: github.com/go-git/go-git/v5.
Bumps the go_modules group with 1 update in the /contrib/grpcplugins/action/plugin-artifactory-release-bundle-distribute directory: github.com/go-git/go-git/v5.
Bumps the go_modules group with 1 update in the /contrib/grpcplugins/action/plugin-tmpl directory: github.com/go-git/go-git/v5.
Bumps the go_modules group with 1 update in the /contrib/integrations/artifactory/artifactory-build-info-plugin directory: github.com/go-git/go-git/v5.
Bumps the go_modules group with 1 update in the /contrib/integrations/artifactory/artifactory-download-artifact-plugin directory: github.com/go-git/go-git/v5.
Bumps the go_modules group with 1 update in the /contrib/integrations/artifactory/artifactory-promote-plugin directory: github.com/go-git/go-git/v5.
Bumps the go_modules group with 1 update in the /contrib/integrations/artifactory/artifactory-release-plugin directory: github.com/go-git/go-git/v5.
Bumps the go_modules group with 1 update in the /contrib/integrations/artifactory/artifactory-upload-artifact-plugin directory: github.com/go-git/go-git/v5.
Bumps the go_modules group with 1 update in the /tools/smtpmock directory: golang.org/x/crypto.

Updates helm.sh/helm/v3 from 3.14.2 to 3.20.2

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.20.2

v3.20.2

Helm v3.20.2 is a security patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:

for questions and just to hang out

for discussing PRs, code, and bugs

Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom

Test, debug, and contribute charts: ArtifactHub/packages

Security fixes

GHSA-hr2v-4r36-88hr Helm Chart extraction output directory collapse via Chart.yaml name dot-segment

Installation and Upgrading

Download Helm v3.20.2. The common platform binaries are here:

MacOS amd64 (checksum / 7de04301f28b902a74f6286ed941cadc86ee5e6a9086a18f2ccf1f548e99d618)

MacOS arm64 (checksum / 139c794c22f16b579d08ddd3008c8038b9bb2814f35b5bcca91f50a1f458978d)

Linux amd64 (checksum / 258e830a9e613c8a7a302d6059b4bb3b9758f2f3e1bb8ea0d707ce10a9a72fea)

Linux arm (checksum / a8a614c740399ff1ef32bcea6be6e4523f17e3376f9cf55c192cc48c8f2d1f19)

Linux arm64 (checksum / 5ea2d6bc2cda3f8edf985e028809f5a9278f404fb8ab24044de9b7cb9b79a691)

Linux i386 (checksum / 88e4c1834307cdbc9f3b80920e1a383e4ba50bb488fb0be1b1fbd4918bb6ae73)

Linux ppc64le (checksum / 98bb26a2f3c0b0c1a50db3181dff192554e0c204a07427d98d6b01e259f23cbe)

Linux s390x (checksum / 584dd77ef8096d6ef939a1822f72840e749fc8311b2b13ae94df5f786862a56b)

Linux riscv64 (checksum / 957391d0710d72678acd09959b5dc77888cd007a78a4b99944d3b2fc7e1895ca)

Windows amd64 (checksum / 24e8e5b71bab4ee17e6f989931ecf4fb144f9916cbe9990c0b6b2ec7b925c454)

Windows arm64 (checksum / 7c940a73a6882f50b69aec3282549da4a49917669db18fc503db930fb74b9789)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

4.1.5 and 3.20.3 are the next patch (bug fix) releases and will be on April 8, 2026

4.2.0 and 3.21.0 are the next minor (feature) releases and will be on May 13, 2026

Changelog

fix: Chart dot-name path bug 8fb76d6ab555577e98e23b7500009537a471feee (George Jenkins)

fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow 3a8927e275c50cecde273872dad2a5576bd46375 (Terry Howe)

Helm v3.20.1 is a patch release. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:

... (truncated)

Commits

8fb76d6 fix: Chart dot-name path bug
3a8927e fix: pin codeql-action/upload-sarif to commit SHA in scorecards workflow
a2369ca chore(deps): bump the k8s-io group with 7 updates
90e1056 add image index test
911f2e9 fix pulling charts from OCI indices
76dad33 Remove refactorring changes from coalesce_test.go
45c12f7 Fix import
26c6f19 Update pkg/chart/common/util/coalesce_test.go
09f5129 Fix lint warning
417deb2 Preserve nil values in chart already
Additional commits viewable in compare view

Updates github.com/containerd/containerd from 1.7.11 to 1.7.30

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.30

Welcome to the v1.7.30 release of containerd!

The thirtieth patch release for containerd 1.7 contains various fixes and updates.

Highlights

Container Runtime Interface (CRI)

Fix NRI dropping requested CDI devices silently (#12650)

Redact all query parameters in CRI error logs (#12551)

Runtime

Update runc binary to v1.3.4 (#12619)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan

Akihiro Suda

Austin Vazquez

Mike Brown

Wei Fu

Andrey Noskov

CrazyMax

Davanum Srinivas

Jin Dong

Krisztian Litkey

Maksym Pavlenko

Paweł Gronowski

Phil Estes

Samuel Karp

Changes

Prepare release notes for v1.7.30 (#12652)

3d0ca6d2e Prepare release notes for v1.7.30

Fix NRI dropping requested CDI devices silently (#12650)

0bc74f47e cri,nri: don't drop requested CDI devices silently.

script/setup/install-cni: install CNI plugins v1.9.0 (#12660)

7db16b562 script/setup/install-cni: install CNI plugins v1.9.0

go.mod: golang.org/x/crypto v0.45.0 (drop support for Go 1.23) (#12640)

bca897b47 go.mod: golang.org/x/crypto v0.45.0

37cbd2224 CI: drop Go 1.23

... (truncated)

Commits

71c1c86 Merge pull request #12652 from dmcgowan/prepare-1.7.30
3d0ca6d Prepare release notes for v1.7.30
a8ce78b Merge pull request #12650 from klihub/fixes/1.7.x/nri-cdi-device-injection
ba2b3a2 Merge pull request #12660 from AkihiroSuda/cni-1.9.0-1.7
0bc74f4 cri,nri: don't drop requested CDI devices silently.
7db16b5 script/setup/install-cni: install CNI plugins v1.9.0
3b655c2 Merge pull request #12640 from AkihiroSuda/dev-1.7
bca897b go.mod: golang.org/x/crypto v0.45.0
37cbd22 CI: drop Go 1.23
ee49d17 Update Go requirements in BUILDING
Additional commits viewable in compare view