Skip to content

🌱 Bump the dependencies group across 1 directory with 33 updates#1003

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/dependencies-d1c63d98e8
Open

🌱 Bump the dependencies group across 1 directory with 33 updates#1003
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/dependencies-d1c63d98e8

Conversation

@dependabot
Copy link
Copy Markdown

@dependabot dependabot bot commented on behalf of github Jan 19, 2026

Bumps the dependencies group with 12 updates in the / directory:

Package From To
github.com/aws/amazon-vpc-cni-k8s 1.15.5 1.21.1
github.com/aws/aws-lambda-go 1.41.0 1.52.0
github.com/aws/aws-sdk-go 1.55.5 1.55.8
github.com/coreos/ignition/v2 2.16.2 2.25.1
github.com/gofrs/flock 0.8.1 0.13.0
github.com/openshift/rosa 1.2.48-rc1 1.2.48
github.com/sergi/go-diff 1.3.1 1.4.0
github.com/sirupsen/logrus 1.9.3 1.9.4
github.com/zgalor/weberr 0.8.2 0.9.0
sigs.k8s.io/aws-iam-authenticator 0.6.13 0.7.10
sigs.k8s.io/cluster-api 1.9.4 1.9.11
sigs.k8s.io/cluster-api/test 1.9.4 1.9.11

Updates github.com/aws/amazon-vpc-cni-k8s from 1.15.5 to 1.21.1

Release notes

Sourced from github.com/aws/amazon-vpc-cni-k8s's releases.

v1.21.1

Fixes bug in Network Policy agent where the map pointer gets overwritten which causes issues with existing network policies

What's Changed

Full Changelog: aws/amazon-vpc-cni-k8s@v1.21.0...v1.21.1

To manually apply this release:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.21.1/config/master/aws-k8s-cni.yaml


Note that the following regions use different manifests:

us-gov-east-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.21.1/config/master/aws-k8s-cni-us-gov-east-1.yaml

us-gov-west-1:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/v1.21.1/config/master/aws-k8s-cni-us-gov-west-1.yaml

cn:

kubectl apply -f https://raw.githubusercontent.com/aws/amazon-vpc-cni-k8s/refs/heads/v1.21.1/config/master/aws-k8s-cni-cn.yaml

To apply this release using helm:
Follow the installation instructions in https://github.com/aws/amazon-vpc-cni-k8s/blob/v1.21.1/charts/aws-vpc-cni/README.md#installing-the-chart

Verify the update:

$ kubectl describe daemonset aws-node -n kube-system | grep Image | cut -d "/" -f 2-3

amazon-k8s-cni-init:v1.21.1 amazon-k8s-cni:v1.21.1 amazon/aws-network-policy-agent:v1.3.1


v1.21.0

🚨 🚨 🚨 v1.21.0 contains a defect in Network Policy Agent version (image tag v1.3.0) that may cause issues with existing network policies. For users using network policy feature, please upgrade to v1.21.1. 🚨 🚨 🚨

What's New

... (truncated)

Changelog

Sourced from github.com/aws/amazon-vpc-cni-k8s's changelog.

v1.21.1

  • Bug fix for Network Policy Agent

v1.21.0

v1.20.5

v1.20.4

v1.20.3

... (truncated)

Commits

Updates github.com/aws/aws-lambda-go from 1.41.0 to 1.52.0

Release notes

Sourced from github.com/aws/aws-lambda-go's releases.

v1.52.0

What's Changed

New Contributors

Full Changelog: aws/aws-lambda-go@v1.51.2...v1.52.0

v1.51.2

What's Changed

New Contributors

Full Changelog: aws/aws-lambda-go@v1.51.1...v1.51.2

v1.51.1

What's Changed

Full Changelog: aws/aws-lambda-go@v1.51.0...v1.51.1

v1.51.0

What's Changed

Full Changelog: aws/aws-lambda-go@v1.50.0...v1.51.0

v1.50.0

What's Changed

New Contributors

Full Changelog: aws/aws-lambda-go@v1.49.0...v1.50.0

v1.49.0

What's Changed

... (truncated)

Commits
  • 9dac8a5 Add structured logging helper (#614)
  • 6252f73 fix: always return PhysicalResourceID for CFn CustomResources (#613)
  • d4fbc0b Add CODECOV_TOKEN to tests.yml (#609)
  • a28c6f0 Update lambda/sigterm_test to use RIE via public.ecr.aws/lambda/provided rath...
  • 56a0f54 documentation rework (#608)
  • bbde148 Bump GitHub actions (#605)
  • e2b5656 fix flaky test TestRuntimeAPILoopWithConcurrency (#606)
  • 1fe9d1b Add TenantID to LambdaContext (#604)
  • 7dfe2bb Add APIGatewayProxyStreamingResponse
  • 45c22d5 Remove _X_AMZN_TRACE_ID environment variable mutations when handling concurre...
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go from 1.55.5 to 1.55.8

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.8 (2025-07-31)

SDK Features

  • Mark the module and all packages as deprecated.
    • This SDK has entered end-of-support.

Release v1.55.7 (2025-04-22)

SDK Bugs

  • service/s3/s3manager: Abort multipart download if object is modified during download

Release v1.55.6 (2025-01-15)

SDK Bugs

  • Fix broken printf for go1.24
Commits
  • 070853e release v1.55.8 (2025-07-31)
  • bb0168e Add deprecation warnings everywhere and remove some README content
  • 7ce44f3 aws
  • 6d9a26d remove doc issue tmpl
  • 239002f deprecate service packages and HLLs
  • 70c4177 deprecate main runtime packages
  • bbdd4e9 deprecate
  • 163aada release v1.55.7 (2025-04-22) (#5346)
  • 9eb2bfd Abort multi part download if the object is modified during download
  • 8d203cc Update bug-report.yml
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.28.6 to 1.38.6

Commits

Updates github.com/coreos/ignition/v2 from 2.16.2 to 2.25.1

Release notes

Sourced from github.com/coreos/ignition/v2's releases.

v2.25.1

Ignition 2.25.1 (2025-12-22)

Bug fixes

  • Fix OpenStack provider returning empty JSON instead of empty bytes when metadata has no config

v2.24.0

Features

  • Add support for nocloud config fetching in kubevirt

Bug fixes

  • Fix occasional cex.key file removal
  • Fix multipath partitioning: ignore DM holders when no partitions are mounted

v2.23.0

Features

  • Support UpCloud

Changes

  • Switch to aws-sdk-go-v2 for S3 fetches and EC2 interactions

Bug fixes

  • Fix fetch-offline for Oracle Cloud Infrastructure

v2.22.0

Starting with this release, ignition-validate binaries are signed with the Fedora 42 key.

Features

  • Support Oracle Cloud Infrastructure

Changes

  • Rename ignition.cfg -> 05_ignition.cfg
  • Support setting setuid/setgid/sticky mode bits (3.6.0-exp)
  • Warn if setuid/setgid/sticky mode bits specified (3.4.0 - 3.5.0)
  • Add initial TMT tests and a new workflow to execute tests on PRs

Bug fixes

v2.21.0

Starting with this release, ignition-validate binaries are signed with the Fedora 41 key.

Features

... (truncated)

Changelog

Sourced from github.com/coreos/ignition/v2's changelog.

Ignition 2.25.1 (2025-12-22)

Bug fixes

  • Fix OpenStack provider returning empty JSON instead of empty bytes when metadata has no config

Ignition 2.25.0 (2025-12-11)

Starting with this release, ignition-validate binaries are signed with the Fedora 43 key.

Features

  • The name for custom clevis pins is not validated by Ignition anymore, enabling the use of arbitrary custom pins (3.6.0-exp)
  • Add NVIDIA BlueField provider

Bug fixes

  • Fix EnsureGroup to be idempotent when group already exists (#2158)
  • Fix invalid random source in FIPS 140-only mode in FIPS mode (#2159)
  • Only load kernel modules when actually necessary so that they can be built-in (#2164)

Ignition 2.24.0 (2024-10-14)

This version was actually released 2025-10-14, but changing the title now would invalidate links to this entry here in the release notes.

Features

  • Add support for nocloud config fetching in kubevirt

Bug fixes

  • Fix occasional cex.key file removal
  • Fix multipath partitioning: ignore DM holders when no partitions are mounted

Ignition 2.23.0 (2025-09-10)

Features

  • Support UpCloud

Changes

  • Switch to aws-sdk-go-v2 for S3 fetches and EC2 interactions

Bug fixes

... (truncated)

Commits
  • ef86d61 Merge pull request #2181 from prestist/new-release-2.25.1
  • 87e5dd1 docs/release-notes: update for 2.25.1
  • b97b22c Merge pull request #2177 from yasminvalim/bugfix-openstack-support
  • 4248e7b Merge pull request #2179 from coreosbot-releng/repo-templates
  • 478adc4 Sync repo templates ⚙
  • 67a4c91 Merge pull request #2174 from coreos/dependabot/go_modules/build-4a2c2cba6a
  • e7e9ce1 Merge pull request #2176 from coreos/add-owners
  • 34be53d release-notes: add release notes for the bugfix
  • d0c5d54 openstack.go: fix fetchConfigFromMetadataService bug removing encoding/json
  • 21f3aaa build(deps): bump the build group with 7 updates
  • Additional commits viewable in compare view

Updates github.com/go-logr/logr from 1.4.2 to 1.4.3

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.3

Minor release.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

Commits
  • 38a1c47 build(deps): bump github/codeql-action from 3.28.17 to 3.28.18
  • f08bedd build(deps): bump actions/setup-go from 5.4.0 to 5.5.0
  • 6295e99 build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0
  • 028840d build(deps): bump github/codeql-action from 3.28.15 to 3.28.17
  • 511e5fa Merge pull request #367 from go-logr/dependabot/github_actions/github/codeql-...
  • d806463 build(deps): bump github/codeql-action from 3.28.13 to 3.28.15
  • 158c311 Merge pull request #366 from thockin/master
  • c79ddb3 Update to support golangci-lint v2
  • 20a64ba build(deps): bump github/codeql-action from 3.28.12 to 3.28.13
  • 0385e14 Add comments around slog exceptions
  • Additional commits viewable in compare view

Updates github.com/gofrs/flock from 0.8.1 to 0.13.0

Release notes

Sourced from github.com/gofrs/flock's releases.

v0.13.0

What's Changed

Minimum Go version 1.24

Full Changelog: gofrs/flock@v0.12.1...v0.13.0

v0.12.1

What's Changed

New Contributors

Full Changelog: gofrs/flock@v0.12.0...v0.12.1

v0.12.0

What's Changed

Full Changelog: gofrs/flock@v0.11.0...v0.12.0

v0.11.0

What's Changed

Full Changelog: gofrs/flock@v0.10.0...v0.11.0

v0.10.0

What's Changed

New Contributors

Full Changelog: gofrs/flock@v0.9.0...v0.10.0

... (truncated)

Commits
  • bfec60b chore(deps): bump golang.org/x/sys from 0.36.0 to 0.37.0 in the gomod group (...
  • 7094284 chore: update linter
  • 8111aec feat: add Stat method (#127)
  • 6f0f0ed chore(deps): bump the github-actions group with 4 updates (#126)
  • fe44231 chore(deps): bump golang.org/x/sys from 0.35.0 to 0.36.0 in the gomod group (...
  • f74f0fb chore(deps): bump github.com/stretchr/testify from 1.10.0 to 1.11.1 in the go...
  • c1f6d16 chore(deps): bump golang.org/x/sys from 0.34.0 to 0.35.0 in the gomod group (...
  • c542c57 chore(deps): bump github/codeql-action from 3.29.2 to 3.29.5 in the github-ac...
  • 425570b chore(deps): bump golang.org/x/sys from 0.33.0 to 0.34.0 in the gomod group (...
  • 12753ea chore(deps): bump github/codeql-action from 3.28.18 to 3.29.2 in the github-a...
  • Additional commits viewable in compare view

Updates github.com/google/go-cmp from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/google/go-cmp's releases.

v0.7.0

New API:

  • (#367) Support compare functions with SortSlices and SortMaps

Panic messaging:

  • (#370) Detect proto.Message types when failing to export a field
Commits

Updates github.com/onsi/ginkgo/v2 from 2.22.0 to 2.23.4

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.23.4

2.23.4

Prior to this release Ginkgo would compute the incorrect number of available CPUs when running with -p in a linux container. Thanks to @​emirot for the fix!

Features

  • Add automaxprocs for using CPUQuota [2b9c428]

Fixes

  • clarify gotchas about -vet flag [1f59d07]

Maintenance

  • bump dependencies [2d134d5]

v2.23.3

2.23.3

Fixes

  • allow - as a standalone argument [cfcc1a5]
  • Bug Fix: Add GinkoTBWrapper.Chdir() and GinkoTBWrapper.Context() [feaf292]
  • ignore exit code for symbol test on linux [88e2282]

v2.23.2

2.23.2

🎉🎉🎉

At long last, some long-standing performance gaps between ginkgo and go test have been resolved!

Ginkgo operates by running go test -c to generate test binaries, and then running those binaries. It turns out that the compilation step of go test -c is slower than go test's compilation step because go test strips out debug symbols (ldflags=-w) whereas go test -c does not.

Ginkgo now passes the appropriate ldflags to go test -c when running specs to strip out symbols. This is only done when it is safe to do so and symbols are preferred when profiling is enabled and when ginkgo build is called explicitly.

This, coupled, with the instructions for disabling XProtect on MacOS yields a much better performance experience with Ginkgo.

v2.23.1

2.23.1

🚨 For users on MacOS 🚨

A long-standing Ginkgo performance issue on MacOS seems to be due to mac's antimalware XProtect. You can follow the instructions here to disable it in your terminal. Doing so sped up Ginkgo's own test suite from 1m8s to 47s.

Fixes

Ginkgo's CLI is now a bit clearer if you pass flags in incorrectly:

  • make it clearer that you need to pass a filename to the various profile flags, not an absolute directory [a0e52ff]
  • emit an error and exit if the ginkgo invocation includes flags after positional arguments [b799d8d]

... (truncated)

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.23.4

Prior to this release Ginkgo would compute the incorrect number of available CPUs when running with -p in a linux container. Thanks to @​emirot for the fix!

Features

  • Add automaxprocs for using CPUQuota [2b9c428]

Fixes

  • clarify gotchas about -vet flag [1f59d07]

Maintenance

  • bump dependencies [2d134d5]

2.23.3

Fixes

  • allow - as a standalone argument [cfcc1a5]
  • Bug Fix: Add GinkoTBWrapper.Chdir() and GinkoTBWrapper.Context() [feaf292]
  • ignore exit code for symbol test on linux [88e2282]

2.23.2

🎉🎉🎉

At long last, some long-standing performance gaps between ginkgo and go test have been resolved!

Ginkgo operates by running go test -c to generate test binaries, and then running those binaries. It turns out that the compilation step of go test -c is slower than go test's compilation step because go test strips out debug symbols (ldflags=-w) whereas go test -c does not.

Ginkgo now passes the appropriate ldflags to go test -c when running specs to strip out symbols. This is only done when it is safe to do so and symbols are preferred when profiling is enabled and when ginkgo build is called explicitly.

This, coupled, with the instructions for disabling XProtect on MacOS yields a much better performance experience with Ginkgo.

2.23.1

🚨 For users on MacOS 🚨

A long-standing Ginkgo performance issue on MacOS seems to be due to mac's antimalware XProtect. You can follow the instructions here to disable it in your terminal. Doing so sped up Ginkgo's own test suite from 1m8s to 47s.

Fixes

Ginkgo's CLI is now a bit clearer if you pass flags in incorrectly:

  • make it clearer that you need to pass a filename to the various profile flags, not an absolute directory [a0e52ff]
  • emit an error and exit if the ginkgo invocation includes flags after positional arguments [b799d8d]

This might cause existing CI builds to fail. If so then it's likely that your CI build was misconfigured and should be corrected. Open an issue if you need help.

2.23.0

... (truncated)

Commits
  • 229c981 v2.23.4
  • 2d134d5 bump dependencies
  • 2b9c428 Add automaxprocs for using CPUQuota
  • 31137de Revert "Add automaxprocs to automatically match the linux container CPU Quota"
  • 91b11b8 Add automaxprocs to automatically match the linux container CPU Quota
  • cdfddb6 maybe escape quotes when you put them in a quoted string.
  • 1f59d07 clarify gotchas about -vet flag
  • 7ab7d10 bump all the things
  • 04a9a74 v2.23.3
  • cfcc1a5 allow - as a standalone argument
  • Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.36.0 to 1.37.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.37.0

1.37.0

Features

  • add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

v1.36.3

1.36.3

Maintenance

  • bump all the things [adb8b49]
  • chore: replace interface{} with any [7613216]
  • Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
  • remove spurious "toolchain" from go.mod (#819) [a0e85b9]
  • Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
  • Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
  • Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
  • Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
  • Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
  • Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
  • Fix typos (#813) [a1d518b]

v1.36.2

Maintenance

v1.36.1

1.36.1

Fixes

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.37.0

Features

  • add To/ToNot/NotTo aliases for AsyncAssertion [5666f98]

1.36.3

Maintenance

  • bump all the things [adb8b49]
  • chore: replace interface{} with any [7613216]
  • Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
  • remove spurious "toolchain" from go.mod (#819) [a0e85b9]
  • Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
  • Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
  • Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
  • Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
  • Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
  • Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
  • Fix typos (#813) [a1d518b]

1.36.2

Maintenance

  • Bump google.golang.org/protobuf from 1.35.1 to 1.36.1 (#810) [9a7609d]
  • Bump golang.org/x/net from 0.30.0 to 0.33.0 (#807) [b6cb028]
  • Bump github.com/onsi/ginkgo/v2 from 2.20.1 to 2.22.1 (#808) [5756529]
  • Bump nokogiri from 1.16.3 to 1.16.5 in /docs (#757) [dabc12e]

1.36.1

Fixes

Commits
  • 272fca3 v1.37.0
  • 5666f98 add To/ToNot/NotTo aliases for AsyncAssertion
  • 2251143 v1.36.3
  • adb8b49 bump all the things
  • 7613216 chore: replace interface{} with any
  • 9fe5259 Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822)
  • a0e85b9 remove spurious "toolchain" from go.mod (#819)
  • 604a8b1 Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823)
  • 36fbc84 Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772)
  • ced70d7 Bump github-pages from 231 to 232 in /docs (#778)
  • Additional commits viewable in compare view

Updates github.com/openshift/rosa from 1.2.48-rc1 to 1.2.48

Release notes

Sourced from github.com/openshift/rosa's releases.

v1.2.48

Changelog

Features

  • 68db331d OCM-10017 | feat: Add EC2 container registry policy to worker role for zero egress
  • b2978270 OCM-10677 | feat: Adding extra validation to verify user is logged in
  • ce46d3ae OCM-10677 | feat: Adding extra validation to verify user is logged in
  • f5455c39 OCM-11496 | feat: Adding validation of the roles manage policies as a step when an upgrade policy is being requested by a cluster.
  • ec8fc8e6 OCM-11810 | feat: Improved help message for rosa create network
  • f64797aa OCM-11868 | feat: Adding --template-dir flag & TEMPLATE_DIR env var
  • 427d7513 OCM-12179 | feat: adding dmoskale to rosa cli approvers
  • 1b9cbf1b OCM-12285 | feat: Update cluster autoscaler max value (180->249)
  • ad76f153 OCM-12420 | feat: Adding default cf template for binary builds
  • 8a41d7f1 OCM-5664 | feat: fixing manual mode operator deletion command

Bug fixes

  • 9aa356e6 OCM-10017 | fix: re-enable adding EC2 policy to worker role
  • 8f41ad7b OCM-10017 | fix: revert adding EC2 policy to worker role
  • fb37f8c5 OCM-11480 | fix: not exit when user choosing N for registry config
  • afac1e9a OCM-11578 | fix: skip validation of container registry policy for create cluster
  • 219ac1d0 OCM-11969 | fix: Rearranging creation order to fix endpoint issue
  • 5715e2d9 OCM-12083 | fix: adding Availability zone default count
  • 40ae8767 OCM-12100 | fix: Exit with status 0
  • 25e17a77 OCM-12100 | fix: Only attempt provider creation with auto mode
  • 0b2b6825 OCM-12100 | fix: Only run oidcprovider command when mode=auto
  • 74cd5ece OCM-12101 | fix: Adding log outputs for empty values
  • 2a7d0543 OCM-12118 | fix: Pass config ID into create/provider
  • 6124108b OCM-12119 | fix: Env var regression with create/network
  • 676a62c1 OCM-12256 | fix: Fixing enable-delete-protection flag
  • fa7e671c OCM-12257 | fix: Fixing tags and network not appearing in help
  • f7c22876 OCM-12379 | fix: Duplicate commands when manual create/accountroles
  • ff79ace7 OCM-12435 | fix: Updated info message for when no template is specified
  • 41dfb701 OCM-12438 | fix: changing default template dir in help message
  • 8bd559d6 OCM-12479 | fix: Fixed help message for binary builds
  • 0445109d OCM-12479 | fix: Fixed help message for binary builds
  • cb2cb653 OCM-12480 | fix: Fixed default name in info message
  • 65ab7df2 OCM-12482 | fix: Fixed tempalte dir env var to work
  • 6590cb11 OCM-12486 | fix: Fixed network command to be able to run custom templates

Others

  • 8ddfdc26 OCM-10805 | test: automated ids:76394,76395
  • e55f4417 OCM-11675 | ci: Expose some of the cluster configurations for profile override
  • 54e3373a OCM-11943 | chore: Bump master to 1.2.48
  • 2302782d OCM-12036 | test: automated ids:38827,38829,35894,55701
  • 20617572 OCM-12117 | test: automated ids:70370,76396,77149,72602
  • f877e859 OCM-12315 | chore: St release version to 1.2.48-RC1
  • 3ee785c9 OCM-12316 | chore: Bump version to RC2
  • cae7dfdd OCM-12316 | chore: Set release version to 1.2.48
  • c4e2d6d0 OCM-12316 | chore: Set release version to 1.2.48-RC4
  • d534f08a OCM-12316 | chore: Set release version to 1.2.48-RC5
  • 4a72043d OCM-1988 | chore: update ROSA CLI with the latest ocm sdk to use addons_mgmt
  • 10dc599a OCM-9183 | test: Get kubeconfig from env
  • 09992fa1 OCM-9310 | test: automated ids:75921,75922

... (truncated)

Commits
  • cae7dfd OCM-12316 | chore: Set release version to 1.2.48

Bumps the dependencies group with 12 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/amazon-vpc-cni-k8s](https://github.com/aws/amazon-vpc-cni-k8s) | `1.15.5` | `1.21.1` |
| [github.com/aws/aws-lambda-go](https://github.com/aws/aws-lambda-go) | `1.41.0` | `1.52.0` |
| [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) | `1.55.5` | `1.55.8` |
| [github.com/coreos/ignition/v2](https://github.com/coreos/ignition) | `2.16.2` | `2.25.1` |
| [github.com/gofrs/flock](https://github.com/gofrs/flock) | `0.8.1` | `0.13.0` |
| [github.com/openshift/rosa](https://github.com/openshift/rosa) | `1.2.48-rc1` | `1.2.48` |
| [github.com/sergi/go-diff](https://github.com/sergi/go-diff) | `1.3.1` | `1.4.0` |
| [github.com/sirupsen/logrus](https://github.com/sirupsen/logrus) | `1.9.3` | `1.9.4` |
| [github.com/zgalor/weberr](https://github.com/zgalor/weberr) | `0.8.2` | `0.9.0` |
| [sigs.k8s.io/aws-iam-authenticator](https://github.com/kubernetes-sigs/aws-iam-authenticator) | `0.6.13` | `0.7.10` |
| [sigs.k8s.io/cluster-api](https://github.com/kubernetes-sigs/cluster-api) | `1.9.4` | `1.9.11` |
| [sigs.k8s.io/cluster-api/test](https://github.com/kubernetes-sigs/cluster-api) | `1.9.4` | `1.9.11` |



Updates `github.com/aws/amazon-vpc-cni-k8s` from 1.15.5 to 1.21.1
- [Release notes](https://github.com/aws/amazon-vpc-cni-k8s/releases)
- [Changelog](https://github.com/aws/amazon-vpc-cni-k8s/blob/master/CHANGELOG.md)
- [Commits](aws/amazon-vpc-cni-k8s@v1.15.5...v1.21.1)

Updates `github.com/aws/aws-lambda-go` from 1.41.0 to 1.52.0
- [Release notes](https://github.com/aws/aws-lambda-go/releases)
- [Commits](aws/aws-lambda-go@v1.41.0...v1.52.0)

Updates `github.com/aws/aws-sdk-go` from 1.55.5 to 1.55.8
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG_PENDING.md)
- [Commits](aws/aws-sdk-go@v1.55.5...v1.55.8)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.28.6 to 1.38.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json)
- [Commits](aws/aws-sdk-go-v2@config/v1.28.6...service/sts/v1.38.6)

Updates `github.com/coreos/ignition/v2` from 2.16.2 to 2.25.1
- [Release notes](https://github.com/coreos/ignition/releases)
- [Changelog](https://github.com/coreos/ignition/blob/main/docs/release-notes.md)
- [Commits](coreos/ignition@v2.16.2...v2.25.1)

Updates `github.com/go-logr/logr` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/go-logr/logr/releases)
- [Changelog](https://github.com/go-logr/logr/blob/master/CHANGELOG.md)
- [Commits](go-logr/logr@v1.4.2...v1.4.3)

Updates `github.com/gofrs/flock` from 0.8.1 to 0.13.0
- [Release notes](https://github.com/gofrs/flock/releases)
- [Commits](gofrs/flock@v0.8.1...v0.13.0)

Updates `github.com/google/go-cmp` from 0.6.0 to 0.7.0
- [Release notes](https://github.com/google/go-cmp/releases)
- [Commits](google/go-cmp@v0.6.0...v0.7.0)

Updates `github.com/onsi/ginkgo/v2` from 2.22.0 to 2.23.4
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.22.0...v2.23.4)

Updates `github.com/onsi/gomega` from 1.36.0 to 1.37.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.36.0...v1.37.0)

Updates `github.com/openshift/rosa` from 1.2.48-rc1 to 1.2.48
- [Release notes](https://github.com/openshift/rosa/releases)
- [Commits](openshift/rosa@v1.2.48-rc1...v1.2.48)

Updates `github.com/prometheus/client_golang` from 1.19.1 to 1.22.0
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.19.1...v1.22.0)

Updates `github.com/sergi/go-diff` from 1.3.1 to 1.4.0
- [Commits](sergi/go-diff@v1.3.1...v1.4.0)

Updates `github.com/sirupsen/logrus` from 1.9.3 to 1.9.4
- [Release notes](https://github.com/sirupsen/logrus/releases)
- [Changelog](https://github.com/sirupsen/logrus/blob/master/CHANGELOG.md)
- [Commits](sirupsen/logrus@v1.9.3...v1.9.4)

Updates `github.com/spf13/cobra` from 1.8.1 to 1.9.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.8.1...v1.9.1)

Updates `github.com/spf13/pflag` from 1.0.6-0.20210604193023-d5e0c0615ace to 1.0.10
- [Release notes](https://github.com/spf13/pflag/releases)
- [Commits](https://github.com/spf13/pflag/commits/v1.0.10)

Updates `github.com/zgalor/weberr` from 0.8.2 to 0.9.0
- [Release notes](https://github.com/zgalor/weberr/releases)
- [Commits](openshift-online/weberr@v0.8.2...v0.9.0)

Updates `golang.org/x/crypto` from 0.31.0 to 0.46.0
- [Commits](golang/crypto@v0.31.0...v0.46.0)

Updates `golang.org/x/text` from 0.21.0 to 0.32.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.21.0...v0.32.0)

Updates `k8s.io/api` from 0.31.3 to 0.34.1
- [Commits](kubernetes/api@v0.31.3...v0.34.1)

Updates `k8s.io/apiextensions-apiserver` from 0.31.3 to 0.34.0
- [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases)
- [Commits](kubernetes/apiextensions-apiserver@v0.31.3...v0.34.0)

Updates `k8s.io/apimachinery` from 0.31.3 to 0.34.1
- [Commits](kubernetes/apimachinery@v0.31.3...v0.34.1)

Updates `k8s.io/apiserver` from 0.31.3 to 0.34.0
- [Commits](kubernetes/apiserver@v0.31.3...v0.34.0)

Updates `k8s.io/cli-runtime` from 0.31.3 to 0.34.1
- [Commits](kubernetes/cli-runtime@v0.31.3...v0.34.1)

Updates `k8s.io/client-go` from 0.31.3 to 0.34.1
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.31.3...v0.34.1)

Updates `k8s.io/component-base` from 0.31.3 to 0.34.0
- [Commits](kubernetes/component-base@v0.31.3...v0.34.0)

Updates `k8s.io/kubectl` from 0.31.3 to 0.33.3
- [Commits](kubernetes/kubectl@v0.31.3...v0.33.3)

Updates `k8s.io/utils` from 0.0.0-20240711033017-18e509b52bc8 to 0.0.0-20250604170112-4c0f3b243397
- [Commits](https://github.com/kubernetes/utils/commits)

Updates `sigs.k8s.io/aws-iam-authenticator` from 0.6.13 to 0.7.10
- [Release notes](https://github.com/kubernetes-sigs/aws-iam-authenticator/releases)
- [Changelog](https://github.com/kubernetes-sigs/aws-iam-authenticator/blob/master/docs/RELEASE.md)
- [Commits](kubernetes-sigs/aws-iam-authenticator@v0.6.13...v0.7.10)

Updates `sigs.k8s.io/cluster-api` from 1.9.4 to 1.9.11
- [Release notes](https://github.com/kubernetes-sigs/cluster-api/releases)
- [Commits](kubernetes-sigs/cluster-api@v1.9.4...v1.9.11)

Updates `sigs.k8s.io/cluster-api/test` from 1.9.4 to 1.9.11
- [Release notes](https://github.com/kubernetes-sigs/cluster-api/releases)
- [Commits](kubernetes-sigs/cluster-api@v1.9.4...v1.9.11)

Updates `sigs.k8s.io/controller-runtime` from 0.19.4 to 0.22.1
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.19.4...v0.22.1)

Updates `sigs.k8s.io/yaml` from 1.4.0 to 1.6.0
- [Release notes](https://github.com/kubernetes-sigs/yaml/releases)
- [Changelog](https://github.com/kubernetes-sigs/yaml/blob/master/RELEASE.md)
- [Commits](kubernetes-sigs/yaml@v1.4.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/aws/amazon-vpc-cni-k8s
  dependency-version: 1.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-lambda-go
  dependency-version: 1.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go
  dependency-version: 1.55.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-version: 1.38.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/coreos/ignition/v2
  dependency-version: 2.25.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/go-logr/logr
  dependency-version: 1.4.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/gofrs/flock
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/google/go-cmp
  dependency-version: 0.7.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-version: 2.23.4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.37.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/openshift/rosa
  dependency-version: 1.2.48
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/sergi/go-diff
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/sirupsen/logrus
  dependency-version: 1.9.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/spf13/cobra
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/spf13/pflag
  dependency-version: 1.0.10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/zgalor/weberr
  dependency-version: 0.9.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: golang.org/x/crypto
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: golang.org/x/text
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/api
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/apiextensions-apiserver
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/apimachinery
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/apiserver
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/cli-runtime
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/client-go
  dependency-version: 0.34.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/component-base
  dependency-version: 0.34.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/kubectl
  dependency-version: 0.33.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: k8s.io/utils
  dependency-version: 0.0.0-20250604170112-4c0f3b243397
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: sigs.k8s.io/aws-iam-authenticator
  dependency-version: 0.7.10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sigs.k8s.io/cluster-api
  dependency-version: 1.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: sigs.k8s.io/cluster-api/test
  dependency-version: 1.9.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-version: 0.22.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: sigs.k8s.io/yaml
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @github
Copy link
Copy Markdown
Author

dependabot bot commented on behalf of github Jan 19, 2026

Labels

The following labels could not be found: area/dependency, kind/cleanup, ok-to-test, release-note-none. Please create them before Dependabot can add them to a pull request.

Please fix the above issues or remove invalid values from dependabot.yml.

@spectro-prow
Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
To complete the pull request process, please assign after the PR has been reviewed.
You can assign the PR to them by writing /assign in a comment when ready.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@spectro-prow
Copy link
Copy Markdown

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a spectrocloud member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes/test-infra repository.

Copy link
Copy Markdown

@bulwark-spectrocloud bulwark-spectrocloud bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

⚠️ GoSec scan found code issues:

  1. G401: Use of weak cryptographic primitive, Severity: MEDIUM
      1. File: /home/runner/work/bulwark/bulwark/target-repo/pkg/cloud/services/eks/iam/iam.go:499:13
  2. G505: Blocklisted import crypto/sha1: weak cryptographic primitive, Severity: MEDIUM
      1. File: /home/runner/work/bulwark/bulwark/target-repo/pkg/cloud/services/eks/iam/iam.go:22:2

Please review these findings and fix the issues before merging.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant