Update External dependencies (release-1.4) (patch)
This MR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| ClusterSecretStore | patch |
external-secrets.io/v1beta1 -> external-secrets.io/v1
|
|
| ExternalSecret | patch |
external-secrets.io/v1beta1 -> external-secrets.io/v1
|
|
| busybox | patch |
1.36.0 -> 1.36.1
|
|
| ceph-csi-cephfs (source) | patch |
3.14.0 -> 3.14.2
|
|
| core (source) | patch |
2.8.3 -> 2.8.9
|
|
| crossplane (source) | patch |
1.20.1 -> 1.20.3
|
|
| ghcr.io/kube-vip/kube-vip | patch |
v0.9.1 -> v0.9.2
|
|
| https://github.com/grafana/loki.git | patch |
v3.5.1 -> v3.5.8
|
|
| https://github.com/rancher/local-path-provisioner.git | patch |
v0.0.31 -> v0.0.32
|
|
| k8s-gateway | patch |
3.2.7 -> 3.2.8
|
|
| kepler (source) | patch |
0.5.14 -> 0.5.19
|
|
| kubernetes-sigs/cluster-api-provider-vsphere | patch |
v1.13.0 -> v1.13.1
|
|
| openshift/assisted-service | patch |
v2.33.0 -> v2.33.1
|
|
| openshift/assisted-service | Kustomization | patch |
v2.33.0 -> v2.33.1
|
| openstack-cinder-csi | patch |
2.32.0 -> 2.32.2
|
|
| python | image | patch |
3.13.5-slim -> 3.13.9-slim
|
| quay.io/kubevirt/cirros-container-disk-demo | patch |
v1.4.0 -> v1.4.1
|
|
| rancher-logging (source) | patch |
105.3.0+up4.10.0-rancher.4 -> 105.3.2+up4.10.0-rancher.8
|
|
| rancher-logging-crd | patch |
105.3.0+up4.10.0-rancher.4 -> 105.3.2+up4.10.0-rancher.8
|
|
| rancher/cluster-api-provider-rke2 | patch |
v0.16.1 -> v0.16.3
|
|
| to-be-continuous/gitleaks | repository | patch |
2.7.2 -> 2.7.3
|
| trivy-operator | patch |
0.26.0 -> 0.26.1
|
|
| vault-config-operator | patch |
v0.8.33 -> v0.8.36
|
⚠️ WarningSome dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
ceph/ceph-csi (ceph-csi-cephfs)
v3.14.2: Ceph-CSI v3.14.2 Release
What's Changed
- revert: prepare for v3.14.1 by @Madhu-1 in #5384
- flattenClonedRbdImages may require namespace (backport #5392) by @mergify[bot] in #5396
- Run cryptsetup with "-d -" instead of "-d /dev/stdin" (backport #5307) by @mergify[bot] in #5407
- doc: changes for 3.14.2 release (backport #5434) by @mergify[bot] in #5435
- Template changes for 3.14.2 release by @Madhu-1 in #5436
Full Changelog: https://github.com/ceph/ceph-csi/compare/v3.14.1...v3.14.2
v3.14.1: Ceph-CSI v3.14.1 Release
What's Changed
- revert: revert to 3.14-canary by @Rakshith-R in #5269
- util: fix bug in health checker (backport #5272) by @mergify in #5273
- ci: install awk in Fedora test container-image (backport #5281) by @mergify in #5284
- rbd: skip comparing volumes in a group if new group is created (backport #5345) by @mergify in #5350
- nfs: return success if export already exists (backport #5372) by @mergify in #5373
- doc: update Readme for v3.14.1 (backport #5377) by @mergify in #5378
- doc: add
v3symlink to get current versions in pkg.go.dev (backport #5364) by @mergify in #5379 - build: prepare for v3.14.1 by @Madhu-1 in #5382
Full Changelog: https://github.com/ceph/ceph-csi/compare/v3.14.0...v3.14.1
neuvector/neuvector-helm (core)
v2.8.9: Release 2.8.9
What's Changed
- NVSHAS-10074 Update NV helm & manifest about the new field for CRD nvadmissioncontrolsecurityrules.neuvector.com by @venkateshjayagopal in #514
- chore: bump up helm chart versions by @gfsuse in #519
New Contributors
Full Changelog: https://github.com/neuvector/neuvector-helm/compare/v2.8.8...v2.8.9
v2.8.8: Release 2.8.8
What's Changed
- configuration of resources to the certupgrader cronjob by @saurabhsadhalesuse in #502
- update init container resources for controller deployments by @saurabhsadhalesuse in #504
- chore(deps): bump golang.org/x/oauth2 from 0.24.0 to 0.27.0 in /test by @dependabot[bot] in #505
- NVSHAS-10047 Add RBAC & CRD schema to helm chart for supporting response rule by @venkateshjayagopal in #508
- chore: bump helm chart versions by @kyledong-suse in #509
- Adding labels under metadata for nvresponserulesecurityrules.neuvector.com and nvcomplianceprofiles.neuvector.com by @venkateshjayagopal in #511
New Contributors
- @kyledong-suse made their first contribution in #509
Full Changelog: https://github.com/neuvector/neuvector-helm/compare/v2.8.7...v2.8.8
v2.8.7: Release 2.8.7
What's Changed
- feat: add TLS configuration support for ServiceMonitor by @daxmc99 in #493
- NSVHAS-9776 Enforcer Daemonset missing etcd toleration by @venkateshjayagopal in #495
- NVSHAS-9996 NeuVector Helm chart should allow non-privileged mode of enforcer pods by @venkateshjayagopal in #499
- chore: bump versions by @holyspectral in #501
New Contributors
Full Changelog: https://github.com/neuvector/neuvector-helm/compare/v2.8.6...v2.8.7
v2.8.6: Release 2.8.6
What's Changed
- feat: NVSHAS-9904 provide options to override img pull policy by @holyspectral in #481
- Update the default value cve.adapter.enabled to false. by @saurabhsadhalesuse in #480
- chore(deps): bump golang.org/x/net from 0.32.0 to 0.36.0 in /test by @dependabot in #473
- chore(deps): bump golang.org/x/net from 0.36.0 to 0.38.0 in /test by @dependabot in #483
- add port definition to exporter deployment by @nshttpd in #479
- Added missing tolerations config for cronjobs by @ppastorf in #485
- NVSHAS-9912 - Adding role and rolebinding for neuvector-store-secret by @venkateshjayagopal in #489
- chore: update image tags for 5.4.4 by @holyspectral in #490
- chore: update crd chart version by @holyspectral in #491
New Contributors
- @saurabhsadhalesuse made their first contribution in #480
- @nshttpd made their first contribution in #479
Full Changelog: https://github.com/neuvector/neuvector-helm/compare/v2.8.5...v2.8.6
v2.8.5: Release 2.8.5
What's Changed
- chore: bump compliance-config version by @holyspectral in #469
- NVSHAS-9426 Add hostPath for scanner to helm chart by @venkateshjayagopal in #470
- NVSHAS-9748 [Helm] NV helm update for supporting name referral for common groups in CRD by @venkateshjayagopal in #472
- chore: update codeowners by @holyspectral in #476
- chore: update image tags for 5.4.3 by @holyspectral in #475
Full Changelog: https://github.com/neuvector/neuvector-helm/compare/v2.8.4...v2.8.5
v2.8.4: Release 2.8.4
What's Changed
- chore: update go dependencies by @holyspectral in #464
- feat: NVSHAS-9443 allow ArgoCD users to disable lease creation by @holyspectral in #462
- feat: NVSHAS-9686 provide a better CN for registry-adapter by @holyspectral in #463
- fix: NVSHAS-9662 fix inconsistent role bindings by @holyspectral in #467
- Adding value to set NodePort number by @selvamt94 in #468
- Promote version to 5.4.2 by @holyspectral in #466
Full Changelog: https://github.com/neuvector/neuvector-helm/compare/v2.8.3...v2.8.4
crossplane/crossplane (crossplane)
v1.20.3
This is a patch release scoped to fixing issues reported by users of Crossplane v1.20 and fixing security related issues in Crossplane's dependencies.
What's Changed
- [Backport release-1.20] Support function cache XfnCacheMaxTTL CLI option by @github-actions[bot] in #6711
- fix: update CompositionRevision migrator for v1.20 to upgrade from v1beta1 to current (v1) by @jbw976 in #6868
- Fix: enforcedCompositonRef composite sync by @ezgidemirel in #6867
- chore(deps): update module github.com/go-viper/mapstructure/v2 to v2.4.0 [security] (release-1.20) by @crossplane-renovate[bot] in #6741
- fix(deps): update module github.com/docker/docker to v28 [security] (release-1.20) by @crossplane-renovate[bot] in #6729
- [Backport release-1.20] build: update releases/charts bucket names by @github-actions[bot] in #6904
Full Changelog: https://github.com/crossplane/crossplane/compare/v1.20.1...v1.20.3
kube-vip/kube-vip (ghcr.io/kube-vip/kube-vip)
v0.9.2
Highlights
- Preparation for refactoring + bugfixes
- Dependency upgrades
What's Changed
- Replace invalid verb "endpoints" with "update" by @nprzy in #1146
- Fix/map concurrency by @Cellebyte in #1166
- Small change to reduce pointless errors by @thebsdbox in #1169
- Added ARP/NDP services tests and Routing Table services tests by @p-strusiewiczsurmacki-mobica in #1163
- Fixed service-tests + minor changes by @p-strusiewiczsurmacki-mobica in #1174
- Updated go version to 1.24.4 by @p-strusiewiczsurmacki-mobica in #1179
- Fixed BGP clear deadlock by @p-strusiewiczsurmacki-mobica in #1178
- Kernel modules by @thebsdbox in #1175
- Bump alpine from 3.21.3 to 3.22.0 by @dependabot in #1168
- Bump go.etcd.io/etcd/client/v3 from 3.5.18 to 3.6.1 by @dependabot in #1172
- Bump anchore/sbom-action from 0.19.0 to 0.20.1 by @dependabot in #1177
- Bump golang.org/x/sys from 0.32.0 to 0.33.0 by @dependabot in #1182
- Bump github.com/onsi/gomega from 1.36.2 to 1.37.0 by @dependabot in #1133
- Bump github.com/prometheus/client_golang from 1.21.0 to 1.22.0 by @dependabot in #1151
- Bump version to v0.9.2 by @Cellebyte in #1184
New Contributors
Full Changelog: https://github.com/kube-vip/kube-vip/compare/v0.9.1...v0.9.2
grafana/loki (https://github.com/grafana/loki.git)
v3.5.8
Bug Fixes
v3.5.7
This release fixes a build issue in 3.5.6 where it was not built with Go 1.24.8 as expected, but Go 1.24.1.
Bug Fixes
- build: rpm signature config (#19476) (#19483) (d5b382b)
- build: update loki build image (#19473) (#19474) (c70476a)
v3.5.6
Bug Fixes
- deps: remove CVE GHSA-2464-8j7c-4cjm (#19469) (f2a304a)
- deps: update module github.com/twmb/franz-go/plugin/kprom to v1.2.1 (release-3.5.x) (#18793) (bb7356c)
- release-3.5.x: bump Go version to 1.24.8 (#19454) (#19462) (1b8b5dd)
v3.5.5
Bug Fixes
v3.5.4
Bug Fixes
- docs: added instructions for how to upgrade zone-aware ingesters… (#18663) (e0de7da)
- Upgrade go version 1.24.6 in release-3.5.x (#19096) (ce8d705)
v3.5.3
Bug Fixes
- deps: Move to Go 1.24.5 (#18412) (2aa4680)
- Handle WAL corruption properly on startup (backport release-3.5.x) (#18408) (5b8ee9a)
v3.5.2
Bug Fixes
- ci: Update release code 3.5 (#18014) (b1b28b0)
- deps: Move to Go 1.24.2 (backport release-3.5.x) (#17805) (d0fbad0)
- frontend: allow resolution of v6 addresses. (backport release-3.5.x) (#18261) (aed4610)
- Handle WAL corruption properly on startup (backport release-3.5.x) (#18408) (5b8ee9a)
-
jsonparser: Fix possible JSON log line corruption caused by
jsonparser on query path (backport release-3.5.x) (#18059) (546d456) - memberlist: allow resolution of advertise address from v6 interf… (backport release-3.5.x) (#18257) (6f878ad)
rancher/local-path-provisioner (https://github.com/rancher/local-path-provisioner.git)
v0.0.32: Local Path Provisioner v0.0.32
What's Changed
- fix: helm install command by @antonengelhardt in #468
- feat: add ability to set custom namespace by @tzabbi in #478
- fix: multiple paths is not true random (fix #342) by @tulequ in #496
- Build local-path-provisioner for ppc64le by @kishen-v in #492
- build(deps): bump golang.org/x/net from 0.34.0 to 0.38.0 by @dependabot[bot] in #488
- helm: add location for setting PodDisruptionBudget by @jcpunk in #490
- use existing kubeClient when saving helper logs by @sceneryback in #502
- fix: do not override nodeName, if exists by @BohdanTkachenko in #499
- Allow overriding kubeclient burst and qps settings by @badstreff in #503
- chore: typo by @ldicarlo in #507
- chore: update dependencies by @derekbit in #506
- Fix helper pod tolerations by @sbocinec in #486
- Change default nodePathMap value in storageClassConfigs in values.yml to [] by @Birkenstab in #510
- Helm: Add abbility to set additional tolerations to helper pod via values by @verdel in #511
- OCI based helm chart build workflow added by @supu2 in #501
- fix: rename workflows by @derekbit in #512
- fix: rename workflows by @derekbit in #513
- fix: fix chart tag by @derekbit in #514
- fix: fix Invalid Semantic Version by @derekbit in #515
- chore(release): bump to v0.0.32 by @derekbit in #516
New Contributors
- @antonengelhardt made their first contribution in #468
- @tzabbi made their first contribution in #478
- @tulequ made their first contribution in #496
- @kishen-v made their first contribution in #492
- @dependabot[bot] made their first contribution in #488
- @jcpunk made their first contribution in #490
- @sceneryback made their first contribution in #502
- @BohdanTkachenko made their first contribution in #499
- @badstreff made their first contribution in #503
- @ldicarlo made their first contribution in #507
- @Birkenstab made their first contribution in #510
- @verdel made their first contribution in #511
- @supu2 made their first contribution in #501
Full Changelog: https://github.com/rancher/local-path-provisioner/compare/v0.0.31...v0.0.32
sustainable-computing-io/kepler-helm-chart (kepler)
v0.5.19
A Helm chart for kepler (Kubernetes-based Efficient Power Level Exporter)
v0.5.18
A Helm chart for kepler (Kubernetes-based Efficient Power Level Exporter)
v0.5.17
A Helm chart for kepler (Kubernetes-based Efficient Power Level Exporter)
v0.5.16
A Helm chart for kepler (Kubernetes-based Efficient Power Level Exporter)
v0.5.15
A Helm chart for kepler (Kubernetes-based Efficient Power Level Exporter)
kubernetes-sigs/cluster-api-provider-vsphere (kubernetes-sigs/cluster-api-provider-vsphere)
v1.13.1
Changes since v1.13.0
📈 Overview
- 12 new commits merged
- 1 bug fixed
🐛
🐛 Bug Fixes
- StoragePolicy should ignore datastores in maintenance mode (#3500)
🌱 Others
- Able to export webhooks for external utilization (#3456)
- Bump golang.org/x/net to v0.38.0 to fix CVE (#3457)
- Bump to Go v1.23.10, github.com/cloudflare/circl v1.6.1 (#3510)
- Changes for community owned Prow CI (#3484)
- CI: Partially revert 3473 due to having vSphere 8 in community ci (#3489)
- E2e: also collect pod logs (#3496)
- E2e: fixup flake while claiming VIPs and and IPAM MTU (#3505)
- E2e: wait for vsphere api and set mtu for calico (#3514)
- Fix web-hook structure names and descriptions (#3463)
- Hack: debug vsphere connectivity (#3520)
- Use release artefacts for CAPI v1.10 (#3449)
Dependencies
Added
Nothing has changed.
Changed
- golang.org/x/net: v0.37.0 → v0.38.0
Removed
Nothing has changed.
Thanks to all our contributors!
rancher/cluster-api-provider-rke2 (rancher/cluster-api-provider-rke2)
v0.16.3
What's Changed
🐛 Bugs
- [0.16] Revert token registry fix by @anmazzotti in #687
Full Changelog: https://github.com/rancher/cluster-api-provider-rke2/compare/v0.16.2...v0.16.3
v0.16.2
What's Changed
🐛 Bugs
- [0.16] Fix private registry token authentication by @anmazzotti in #674
Full Changelog: https://github.com/rancher/cluster-api-provider-rke2/compare/v0.16.1...v0.16.2
to-be-continuous/gitleaks (to-be-continuous/gitleaks)
v2.7.3
Features
- modular workflow rules (dab4f93)
2.7.3 (2025-07-05)
Bug Fixes
- fix unscope_variables (e5d9d7a)
2.7.2 (2025-06-13)
Bug Fixes
- replace deprecated Docker Hub registry FQDN (7a0f26e)
2.7.1 (2025-04-02)
Bug Fixes
- analyse branch or MR commits only (0ed44f1)
redhat-cop/vault-config-operator (vault-config-operator)
v0.8.36
What's Changed
- fix: safe type assertion for reading vault secrets for rabbitmq engine config by @13bscsaamjad in #289
Full Changelog: https://github.com/redhat-cop/vault-config-operator/compare/v0.8.35...v0.8.36
v0.8.35
What's Changed
- feat/fix: make path optional in secret engine mount by @13bscsaamjad in #287
Full Changelog: https://github.com/redhat-cop/vault-config-operator/compare/v0.8.34...v0.8.35
v0.8.34
What's Changed
- Update redhat-cop/github-workflows-operators action to v1.1.1 by @renovate[bot] in #284
- Implement configurable drift detection for Vault resources by @13bscsaamjad in #286
- Fix PKI secret engine role enum validation for string arrays by @npurdy-tyro in #282
New Contributors
- @13bscsaamjad made their first contribution in #286
- @npurdy-tyro made their first contribution in #282
Full Changelog: https://github.com/redhat-cop/vault-config-operator/compare/v0.8.33...v0.8.34
Configuration
-
If you want to rebase/retry this MR, check this box
This MR has been generated by Renovate Bot Sylva instance.
CI configuration couldn't be handle by MR description. A dedicated comment has been posted to control it.
If no checkbox is checked, a default pipeline will be enabled (capm3, or capo if capo label is set)