fix(deps): update go module updates minor #55

netic-renovate · 2025-07-03T08:41:23Z

This PR contains the following updates:

Package	Change	Type	Update
github.com/aquasecurity/trivy	`v0.63.0` -> `v0.66.0`	require	minor
github.com/aquasecurity/trivy-operator	`v0.27.1` -> `v0.28.0`	require	minor
github.com/spf13/cobra	`v1.9.1` -> `v1.10.1`	require	minor
go (source)	`1.24.4` -> `1.25.1`	toolchain	minor
k8s.io/api	`v0.33.2` -> `v0.34.1`	require	minor
k8s.io/apimachinery	`v0.33.2` -> `v0.34.1`	require	minor
k8s.io/client-go	`v0.33.2` -> `v0.34.1`	require	minor
sigs.k8s.io/controller-runtime	`v0.21.0` -> `v0.22.1`	require	minor

Release Notes

aquasecurity/trivy (github.com/aquasecurity/trivy)

`v0.66.0`

Compare Source

👉 Trivy v.66.0 release notes (click here)

⬇️ Download Trivy

Full changelog

`v0.65.0`

Compare Source

👉 Trivy v.65.0 release notes (click here)

⬇️ Download Trivy

Full changelog

`v0.64.1`

Compare Source

Changelog

86ee3c1 release: v0.64.1 [release/v0.64] (#9122)
4e12722 fix(misconf): skip rewriting expr if attr is nil [backport: release/v0.64] (#9127)
9a7d384 fix(cli): Add more non-sensitive flags to telemetry [backport: release/v0.64] (#9124)
53adfba fix(rootio): check full version to detect root.io packages [backport: release/v0.64] (#9120)
8cf1bf9 fix(alma): parse epochs from rpmqa file [backport: release/v0.64] (#9119)

`v0.64.0`

Compare Source

👉 Trivy v.64.0 release notes (click here)

⬇️ Download Trivy

Full changelog

aquasecurity/trivy-operator (github.com/aquasecurity/trivy-operator)

`v0.28.0`

Compare Source

What's Changed

✨ Notable Changes ✨

feat: support storageClassName for alternatReportStorage by @cyrinux in #2633

🐛 Notable Fixes 🐛

fix: bump ubi9 image to latest release by @simar7 in #2651
fix: correct output for uncompressed logs by @afdesk in #2652
fix: Do not error out on invalid rego policies if any by @simar7 in #2670

📝 Documentation && Miscellaneous 🔧

chore: bump up Trivy to version 0.64.1 by @afdesk in #2654
chore: bump up UBI 9 version to 9.6-1752587672 by @afdesk in #2660
chore: update for CVE-2025-6965 by @simar7 in #2678
chore: bump up docker for CVE-2025-54388 by @simar7 in #2679
chore: update ubi image by @simar7 in #2681
chore: bump up Trivy to version 0.65.0 by @afdesk in #2686

👒 Dependencies 👒

build(deps): bump ubi9/ubi-minimal from 0d7cfb0 to 295f920 in /build/trivy-operator by @dependabot[bot] in #2688
build(deps): bump alpine from 3.20.6 to 3.22.1 in /build/trivy-operator by @dependabot[bot] in #2687

New Contributors

@cyrinux made their first contribution in #2633

Full Changelog: aquasecurity/trivy-operator@v0.27.3...v0.28.0

`v0.27.3`

Compare Source

What's Changed

🐛 Notable Fixes 🐛

fix: bump helm to v3.18.4 by @simar7 in #2647
fix: correct predicate logic to allow whitelisted ConfigMaps by @nikpivkin in #2631
fix: Deletion of scanjob before ttl expires by @tom1299 in #2632
fix(deploy): remove hardcoded namespace from pvc-template by @SamuelWy in #2646
fix: add ubi9 images for nightly testing by @simar7 in #2650

New Contributors

@SamuelWy made their first contribution in #2646

Full Changelog: aquasecurity/trivy-operator@v0.27.2...v0.27.3

`v0.27.2`

Compare Source

What's Changed

🐛 Notable Fixes 🐛

fix(ci): use multiline syntax to print logs on failure by @nikpivkin in #2637

📝 Documentation && Miscellaneous 🔧

chore: update UBI to version 9.6-1750782676 by @afdesk in #2625
chore: bump up some deps by @afdesk in #2618
chore: use a correct default repo for node-collector by @afdesk in #2619
docs: fix typo in RELEASING.md for Helm chart file name by @nikpivkin in #2642
chore: bump up UBI version to 9.6-1751286687 by @afdesk in #2643

👒 Dependencies 👒

build(deps): bump github.com/go-viper/mapstructure/v2 from 2.2.1 to 2.3.0 by @dependabot in #2630

Full Changelog: aquasecurity/trivy-operator@v0.27.1...v0.27.2

spf13/cobra (github.com/spf13/cobra)

`v1.10.1`

Compare Source

🐛 Fix

chore: upgrade pflags v1.0.9 by @jpmcb in #2305

v1.0.9 of pflags brought back ParseErrorsWhitelist and marked it as deprecated

Full Changelog: spf13/cobra@v1.10.0...v1.10.1

`v1.10.0`

Compare Source

What's Changed

🚨 Attention!

Bump pflag to 1.0.8 by @tomasaschan in #2303

This version of pflag carried a breaking change: it renamed ParseErrorsWhitelist to ParseErrorsAllowlist which can break builds if both pflag and cobra are dependencies in your project.

If you use both pflag and cobra, upgrade pflagto 1.0.8 andcobrato1.10.0`
or use the newer, fixed version of pflag v1.0.9 which keeps the deprecated ParseErrorsWhitelist

More details can be found here: #2303 (comment)

✨ Features

Flow context to command in SetHelpFunc by @Frassle in #2241
The default ShellCompDirective can be customized for a command and its subcommands by @albers in #2238

🐛 Fix

Upgrade golangci-lint to v2, address findings by @scop in #2279

🪠 Testing

Test with Go 1.24 by @harryzcy in #2236
chore: Rm GitHub Action PR size labeler by @jpmcb in #2256

📝 Docs

Remove traling curlybrace by @yedayak in #2237
Update command.go by @styee in #2248
feat: Add security policy by @jpmcb in #2253
Update Readme (Warp) by @ericdachen in #2267
Add Periscope to the list of projects using Cobra by @anishathalye in #2299

New Contributors

@harryzcy made their first contribution in #2236
@yedayak made their first contribution in #2237
@Frassle made their first contribution in #2241
@styee made their first contribution in #2248
@ericdachen made their first contribution in #2267
@albers made their first contribution in #2238
@anishathalye made their first contribution in #2299
@tomasaschan made their first contribution in #2303

Full Changelog: spf13/cobra@v1.9.1...v1.9.2

kubernetes/api (k8s.io/api)

kubernetes/apimachinery (k8s.io/apimachinery)

`v0.34.1`

Compare Source

`v0.34.0`

Compare Source

`v0.33.5`

Compare Source

`v0.33.4`

Compare Source

`v0.33.3`

Compare Source

kubernetes/client-go (k8s.io/client-go)

`v0.34.1`

Compare Source

`v0.34.0`

Compare Source

`v0.33.5`

Compare Source

`v0.33.4`

Compare Source

`v0.33.3`

Compare Source

kubernetes-sigs/controller-runtime (sigs.k8s.io/controller-runtime)

`v0.22.1`

Compare Source

What's Changed

🌱 Revert deprecation of client.Apply by @k8s-infra-cherrypick-robot in #3308

Full Changelog: kubernetes-sigs/controller-runtime@v0.22.0...v0.22.1

`v0.22.0`

Compare Source

🔆 Highlights

Client: Native support for Server-Side Apply (SSA) (#3253, #2981)
Update to k8s.io/* v1.34 dependencies (#3231, #3236, #3246, #3259, #3270, #3300)
Controller: Implement warmup support for controllers (#3192)
Priorityqueue: various improvements (#3289, #3290, #3243, #3250)

⚠️ Breaking changes

Update to k8s.io/* v1.34 dependencies by @alvaroaleman @troy0820 #3231, #3236, #3246, #3259, #3270, #3300
Client: Add native SSA support by @alvaroaleman in #3253
Client: Default selector to Nothing if it is nil for MatchingLabelsSelector and MatchingFieldsSelector by @acumino in #3279
Fakeclient: Add SSA support by @alvaroaleman in #2981
Fakeclient: Remove support for objects with pointer ObjectMeta by @alvaroaleman in #3228
Fakeclient: Clear TypeMeta for structured objects by @alvaroaleman in #3229
Priorityqueue: Make Priority option a pointer by @alvaroaleman in #3289

✨ Features

Client: Add UnsafeDisableDeepCopy to GetOptions by @jonathan-innis in #3227
Controller: Add a ReconciliationTimeout option by @alvaroaleman in #3296
Controller: Implement warmup support for controllers by @godwinpang in #3192
Envtest: Allow selection of binaries version by release series by @cbandy in #3280
Manager: Add support for custom labels on leader election leases by @DerekFrank in #3237
Priorityqueue: WithLowPriorityWhenUnchanged: Set Priority for all add methods by @alvaroaleman in #3290
Webhooks: Handle panics during conversion more gracefully by @sbueringer in #3278

🐛 Bugfixes

Envtest: Ensure cleanup validates etcd process state first by @Danil-Grigorev in #3272
Envtest: Include listening address in kube-apiserver serving certificate by @solidDoWant in #3284
Fakeclient: Fix some SSA-related bugs by @alvaroaleman in #3268
Fakeclient: Update passed object in Apply by @alvaroaleman in #3283
Fakeclient: Validate managed fields on init objects by @alvaroaleman in #3282
Manager: Prevent goroutine leak on shutdown timeout by @jingyih in #3247
Priorityqueue: Don't block on Get when queue is shutdown by @dongjiang1989 in #3243
Priorityqueue: Shutdown on shutdown by @alvaroaleman in #3250
Unit tests: Fix ginkgo panic in webhook integration test by @sbueringer in #3288
Unit tests: Fix race condition in Warmup unit test by @sbueringer in #3287

🌱 Other

Certwatcher: Add instance-specific logger with cert/key k/v pair by @s-z-z in #3293
Certwatcher: Don't require leader election by @alvaroaleman in #3273
Examples-builtin: Refactor controller setup to use builder pattern by @s-z-z in #3265
Fix deprecation warnings by @sbueringer in #3275
Update golangci-lint to v2.3.0 by @dongjiang1989 in #3266
Unit tests: Stop using context.Background()/TODO() in tests by @alvaroaleman in #3263

📖 Documentation

Clarify our versioning scheme by @alvaroaleman in #3264
Clarify state of Warmup feature by @sbueringer in #3299
Extend godoc of SyncPeriod field by @guettli in #3269, #3277
Fix docs for LabelChangedPredicate by @guettli in #3254
Make pod naming consistent in examples by @clebs in #3251
Sync admins & maintainers with kubernetes/org by @sbueringer in #3258

Dependencies

Added

github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp: v1.26.0
github.com/envoyproxy/go-control-plane/envoy: v1.32.4
github.com/envoyproxy/go-control-plane/ratelimit: v0.1.0
github.com/go-jose/go-jose/v4: v4.0.4
github.com/golang-jwt/jwt/v5: v5.2.2
github.com/grpc-ecosystem/go-grpc-middleware/providers/prometheus: v1.0.1
github.com/grpc-ecosystem/go-grpc-middleware/v2: v2.3.0
github.com/spiffe/go-spiffe/v2: v2.5.0
github.com/zeebo/errs: v1.4.0
go.etcd.io/raft/v3: v3.6.0
go.opentelemetry.io/contrib/detectors/gcp: v1.34.0
go.opentelemetry.io/otel/sdk/metric: v1.34.0
go.yaml.in/yaml/v2: v2.4.2
go.yaml.in/yaml/v3: v3.0.4
sigs.k8s.io/structured-merge-diff/v6: v6.3.0

Changed

cel.dev/expr: v0.19.1 → v0.24.0
cloud.google.com/go/compute/metadata: v0.5.0 → v0.6.0
github.com/cncf/xds/go: b4127c9 → 2f00578
github.com/cpuguy83/go-md2man/v2: v2.0.4 → v2.0.6
github.com/emicklei/go-restful/v3: v3.11.0 → v3.12.2
github.com/envoyproxy/go-control-plane: v0.13.0 → v0.13.4
github.com/envoyproxy/protoc-gen-validate: v1.1.0 → v1.2.1
github.com/fsnotify/fsnotify: v1.7.0 → v1.9.0
github.com/fxamacker/cbor/v2: v2.7.0 → v2.9.0
github.com/golang/glog: v1.2.2 → v1.2.4
github.com/google/cel-go: v0.23.2 → v0.26.0
github.com/google/gnostic-models: v0.6.9 → v0.7.0
github.com/grpc-ecosystem/grpc-gateway/v2: v2.24.0 → v2.26.3
github.com/jonboulle/clockwork: v0.4.0 → v0.5.0
github.com/modern-go/reflect2: v1.0.2 → 35a7c28
github.com/spf13/cobra: v1.8.1 → v1.9.1
github.com/spf13/pflag: v1.0.5 → v1.0.6
go.etcd.io/bbolt: v1.3.11 → v1.4.2
go.etcd.io/etcd/api/v3: v3.5.21 → v3.6.4
go.etcd.io/etcd/client/pkg/v3: v3.5.21 → v3.6.4
go.etcd.io/etcd/client/v3: v3.5.21 → v3.6.4
go.etcd.io/etcd/pkg/v3: v3.5.21 → v3.6.4
go.etcd.io/etcd/server/v3: v3.5.21 → v3.6.4
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc: v0.58.0 → v0.60.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.33.0 → v1.34.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.33.0 → v1.34.0
go.opentelemetry.io/otel/metric: v1.33.0 → v1.35.0
go.opentelemetry.io/otel/sdk: v1.33.0 → v1.34.0
go.opentelemetry.io/otel/trace: v1.33.0 → v1.35.0
go.opentelemetry.io/otel: v1.33.0 → v1.35.0
go.opentelemetry.io/proto/otlp: v1.4.0 → v1.5.0
google.golang.org/genproto/googleapis/api: e6fa225 → a0af3ef
google.golang.org/genproto/googleapis/rpc: e6fa225 → a0af3ef
google.golang.org/grpc: v1.68.1 → v1.72.1
k8s.io/api: v0.33.0 → v0.34.0
k8s.io/apiextensions-apiserver: v0.33.0 → v0.34.0
k8s.io/apimachinery: v0.33.0 → v0.34.0
k8s.io/apiserver: v0.33.0 → v0.34.0
k8s.io/client-go: v0.33.0 → v0.34.0
k8s.io/code-generator: v0.33.0 → v0.34.0
k8s.io/component-base: v0.33.0 → v0.34.0
k8s.io/gengo/v2: 1244d31 → 85fd79d
k8s.io/kms: v0.33.0 → v0.34.0
k8s.io/kube-openapi: c8a335a → f3f2b99
k8s.io/utils: 3ea5e8c → 4c0f3b2
sigs.k8s.io/json: 9aa6b5e → cfa47c3
sigs.k8s.io/yaml: v1.4.0 → v1.6.0

Removed

github.com/census-instrumentation/opencensus-proto: v0.4.1
github.com/golang-jwt/jwt/v4: v4.5.2
github.com/grpc-ecosystem/go-grpc-middleware: v1.3.0
github.com/grpc-ecosystem/grpc-gateway: v1.16.0
go.etcd.io/etcd/client/v2: v2.305.21
go.etcd.io/etcd/raft/v3: v3.5.21
google.golang.org/genproto: ef43131
sigs.k8s.io/structured-merge-diff/v4: v4.6.0

New Contributors

@DerekFrank made their first contribution in #3237
@clebs made their first contribution in #3251
@jingyih made their first contribution in #3247
@s-z-z made their first contribution in #3265
@solidDoWant made their first contribution in #3284

Full Changelog: kubernetes-sigs/controller-runtime@v0.21.0...v0.22.0

Thanks to all our contributors! 😊

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

netic-renovate · 2025-07-03T08:41:25Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -t ./...
go: gopkg.in/go-jose/go-jose.v4@v4.1.0: parsing go.mod:
	module declares its path as: github.com/go-jose/go-jose/v4
	        but was required as: gopkg.in/go-jose/go-jose.v4

netic-renovate bot force-pushed the renovate/go-module-updates-minor branch from a5972a8 to 3e0f239 Compare July 7, 2025 06:39

netic-renovate bot changed the title ~~fix(deps): update module github.com/aquasecurity/trivy to v0.64.0~~ fix(deps): update module github.com/aquasecurity/trivy to v0.64.1 Jul 7, 2025

netic-renovate bot force-pushed the renovate/go-module-updates-minor branch from 3e0f239 to ef9bfa6 Compare August 4, 2025 06:51

netic-renovate bot changed the title ~~fix(deps): update module github.com/aquasecurity/trivy to v0.64.1~~ fix(deps): update module github.com/aquasecurity/trivy to v0.65.0 Aug 4, 2025

netic-renovate bot force-pushed the renovate/go-module-updates-minor branch from ef9bfa6 to 4c0de22 Compare August 8, 2025 06:45

netic-renovate bot changed the title ~~fix(deps): update module github.com/aquasecurity/trivy to v0.65.0~~ fix(deps): update go module updates minor Aug 8, 2025

netic-renovate bot force-pushed the renovate/go-module-updates-minor branch from 4c0de22 to 44f4269 Compare August 14, 2025 06:44

netic-renovate bot force-pushed the renovate/go-module-updates-minor branch 4 times, most recently from fd05bea to 6508665 Compare September 3, 2025 16:43

netic-renovate bot force-pushed the renovate/go-module-updates-minor branch 4 times, most recently from 348f330 to 2c723b9 Compare September 10, 2025 08:40

fix(deps): update go module updates minor

0cf17fb

netic-renovate bot force-pushed the renovate/go-module-updates-minor branch from 2c723b9 to 0cf17fb Compare September 12, 2025 06:47

netic-renovate bot added the renovate-auto-approve Enables auto approval for Renovate PRs label Sep 16, 2025

KimNorgaard approved these changes Sep 22, 2025

View reviewed changes

KimNorgaard merged commit 4352855 into main Sep 22, 2025
1 of 3 checks passed

KimNorgaard deleted the renovate/go-module-updates-minor branch September 22, 2025 09:38

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix(deps): update go module updates minor #55

fix(deps): update go module updates minor #55

Uh oh!

netic-renovate bot commented Jul 3, 2025 •

edited

Loading

Uh oh!

netic-renovate bot commented Jul 3, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

fix(deps): update go module updates minor #55

fix(deps): update go module updates minor #55

Uh oh!

Conversation

netic-renovate bot commented Jul 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

⬇️ Download Trivy

⬇️ Download Trivy

Changelog

⬇️ Download Trivy

What's Changed

✨ Notable Changes ✨

🐛 Notable Fixes 🐛

📝 Documentation && Miscellaneous 🔧

👒 Dependencies 👒

New Contributors

What's Changed

🐛 Notable Fixes 🐛

New Contributors

What's Changed

🐛 Notable Fixes 🐛

📝 Documentation && Miscellaneous 🔧

👒 Dependencies 👒

🐛 Fix

What's Changed

🚨 Attention!

✨ Features

🐛 Fix

🪠 Testing

📝 Docs

New Contributors

What's Changed

🔆 Highlights

⚠️ Breaking changes

✨ Features

🐛 Bugfixes

🌱 Other

📖 Documentation

Dependencies

Added

Changed

Removed

New Contributors

Configuration

Uh oh!

netic-renovate bot commented Jul 3, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

⚠️ Artifact update problem

File name: go.sum

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

netic-renovate bot commented Jul 3, 2025 •

edited

Loading

netic-renovate bot commented Jul 3, 2025 •

edited

Loading