Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 14, 2025

Bumps the go_modules group with 1 update: github.com/argoproj/argo-events.

Updates github.com/argoproj/argo-events from 1.9.1 to 1.9.6

-- Manual changes by Alan Clucas
Manually refactored the code necessary for this where the events
clients need updating - moving to a single client instead of separate
event source and sensor clients

As this bumps prometheus-go switch to the legacy name verifier for
metrics as the new name verifier doesn't match our documented
rules. This could be fixed elsewhere separately from this.

Release notes

Sourced from github.com/argoproj/argo-events's releases.

v1.9.6

Major Changes

  • fix: compare errors with string to avoid log spew in jetstream sensor (#3441)
  • feat: add workload identity support to azure event hub eventsource (#3434)
  • fix: catastrophic data loss on NATS connectivity issues (#3449)
  • feat: add authentication to nats trigger (#3467)
  • fix: crash eventsource resource in some circumstances (#3496)
  • chore: use human readable time format in the log (#3505)
  • chore: use expr built-in functions instead of pkg (#3507)
  • fix: allow gitlab eventsource to work without projects or groups (#3508)
  • fix: disable the capability of attaching any properties to the container (#3528) - Thanks @​thevilledev for reporting the vulnerability!

Pull Requests

argoproj/argo-events@v1.9.5...v1.9.6

Installation

kubectl create namespace argo-events
kubectl apply -n argo-events -f https://github.com/argoproj/argo-events/releases/download/v1.9.6/install.yaml
Install validating webhook (optional)
kubectl apply -n argo-events -f https://github.com/argoproj/argo-events/releases/download/v1.9.6/install-validating-webhook.yaml

v1.9.5

Major Changes

  • fix: connection for custom gRPC trigger (#3421)
  • Bump up Argo Workflow binary to v3.6.2

Pull Requests

argoproj/argo-events@v1.9.4...v1.9.5

Installation

kubectl create namespace argo-events
kubectl apply -n argo-events -f https://github.com/argoproj/argo-events/releases/download/v1.9.5/install.yaml
Install validating webhook (optional)
kubectl apply -n argo-events -f https://github.com/argoproj/argo-events/releases/download/v1.9.5/install-validating-webhook.yaml

v1.9.4

Major Changes

... (truncated)

Changelog

Sourced from github.com/argoproj/argo-events's changelog.

v1.9.6 (2025-04-06)

  • 80f59511 Update manifests to v1.9.6
  • c66510c2 chore(deps): bump google.golang.org/api from 0.227.0 to 0.228.0 (#3539)
  • 2167912f chore(deps): bump github.com/pkg/sftp from 1.13.8 to 1.13.9 (#3541)
  • 534f86a0 chore(deps): bump github.com/minio/minio-go/v7 from 7.0.88 to 7.0.89 (#3536)
  • 48103179 chore(deps): bump github.com/nats-io/nats.go from 1.39.1 to 1.41.0 (#3547)
  • 7aa57ffa chore(deps): bump sigs.k8s.io/controller-tools from 0.16.3 to 0.17.3 (#3545)
  • b65ab166 chore(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1 (#3546)
  • 02c9a5e3 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.126.0 to 0.127.0 (#3544)
  • db1ba6ee chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 (#3529)
  • 93240820 chore(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.20.0 to 2.26.3 (#3533)
  • 65bada7f chore(deps): bump google.golang.org/api from 0.226.0 to 0.227.0 (#3532)
  • 0ae95100 chore(deps): bump github.com/spf13/viper from 1.19.0 to 1.20.0 (#3531)
  • c71a9062 chore(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.1 to 4.5.2 (#3530)
  • 061b4030 fix: disable the capability of attaching any properties to the container (#3528)
  • 2cee870a fix: allow gitlab eventsource to work without projects or groups (#3508)
  • ba34a02c Fix: Kafka consumer fails to reconnect and sensor stops working (#3495)
  • 98b764be chore(deps): bump google.golang.org/grpc from 1.70.0 to 1.71.0 (#3514)
  • 3fd5883e chore(deps): bump google.golang.org/api from 0.223.0 to 0.224.0 (#3512)
  • a36feca8 chore(deps): bump golang.org/x/tools from 0.30.0 to 0.31.0 (#3511)
  • cc4583bb chore(deps): bump github.com/prometheus/client_golang from 1.21.0 to 1.21.1 (#3509)
  • be251ecd fix: crash eventsource resource (#3496)
  • fc3b1b05 chore(deps): bump google.golang.org/api from 0.222.0 to 0.223.0 (#3503)
  • b545be84 chore(deps): bump github.com/go-git/go-git/v5 from 5.13.2 to 5.14.0 (#3502)
  • 51ea14ef chore(deps): bump golang.org/x/crypto from 0.34.0 to 0.35.0 (#3501)
  • dba79193 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.123.0 to 0.124.0 (#3500)
  • b958277a fix(ci): upgrade actions/upload-artifact (#3493)
  • e6d2ee5b feat: add authentication to nats trigger (#3467)
  • 330f521a fix(docs): broken link to event source types (#3478)
  • 8347cb69 port-forward on svc/webhook-eventsource-svc 12000:12000 instead of pod. (#3480)
  • 35776e36 docs(sensor): move parameters to template level (#3457)
  • baf42c12 Fix typo that emits a malformed JSON string. (#3466)
  • 36b52959 chore(deps): bump github.com/nats-io/nats.go from 1.39.0 to 1.39.1 (#3491)
  • ee1102e7 chore(deps): bump google.golang.org/api from 0.221.0 to 0.222.0 (#3489)
  • 092bb60b chore(deps): bump github.com/slack-go/slack from 0.15.0 to 0.16.0 (#3474)
  • 337ac998 chore(deps): bump github.com/google/go-cmp from 0.6.0 to 0.7.0 (#3490)
  • 0fd89781 chore(deps): bump github.com/prometheus/client_golang from 1.20.5 to 1.21.0 (#3488)
  • 5fd91956 chore(deps): bump github.com/bradleyfalzon/ghinstallation/v2 from 2.13.0 to 2.14.0 (#3487)
  • f91a1d99 chore(deps): bump golang.org/x/crypto from 0.33.0 to 0.34.0 (#3485)
  • e4f2726a chore(deps): bump github.com/minio/minio-go/v7 from 7.0.86 to 7.0.87 (#3486)
  • 17f41ad4 chore(deps): bump github.com/spf13/cobra from 1.8.1 to 1.9.1 (#3484)
  • 50384690 chore(deps): bump sigstore/cosign-installer from 3.8.0 to 3.8.1 (#3483)
  • bcd4df89 chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/messaging/azservicebus from 1.7.3 to 1.8.0 (#3477)
  • b703f42b chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.8.0 to 1.8.2 (#3469)
  • f6f6735b chore(deps): bump google.golang.org/api from 0.220.0 to 0.221.0 (#3470)
  • 6061a0a6 chore(deps): bump github.com/minio/minio-go/v7 from 7.0.84 to 7.0.86 (#3476)
  • 64c8673c chore(deps): bump github.com/Azure/azure-sdk-for-go/sdk/messaging/azeventhubs from 1.2.3 to 1.3.0 (#3475)
  • d4d13285 chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.122.0 to 0.123.0 (#3473)
  • 217d9214 chore(deps): bump github.com/hamba/avro/v2 from 2.27.0 to 2.28.0 (#3468)

... (truncated)

Commits
  • 80f5951 Update manifests to v1.9.6
  • c66510c chore(deps): bump google.golang.org/api from 0.227.0 to 0.228.0 (#3539)
  • 2167912 chore(deps): bump github.com/pkg/sftp from 1.13.8 to 1.13.9 (#3541)
  • 534f86a chore(deps): bump github.com/minio/minio-go/v7 from 7.0.88 to 7.0.89 (#3536)
  • 4810317 chore(deps): bump github.com/nats-io/nats.go from 1.39.1 to 1.41.0 (#3547)
  • 7aa57ff chore(deps): bump sigs.k8s.io/controller-tools from 0.16.3 to 0.17.3 (#3545)
  • b65ab16 chore(deps): bump google.golang.org/grpc from 1.71.0 to 1.71.1 (#3546)
  • 02c9a5e chore(deps): bump gitlab.com/gitlab-org/api/client-go from 0.126.0 to 0.127.0...
  • 616288f docs: Update PDB apiVersion (#3535)
  • db1ba6e chore(deps): bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 (#3529)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot dependabot bot added go Pull requests that update Go dependencies type/dependencies PRs and issues specific to updating dependencies labels Apr 14, 2025
@github-actions github-actions bot enabled auto-merge (squash) April 14, 2025 18:13
@Joibel Joibel self-assigned this Apr 15, 2025
@vkamlesh
Copy link

@Joibel While building binary with argo-events v1.9.6 I am seeing the following failures.

github.com/argoproj/argo-events/pkg/client/eventsource/clientset/versioned --> github.com/argoproj/argo-events/pkg/client/clientset/versioned

github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned. --> github.com/argoproj/argo-events/pkg/client/clientset/versioned

go: finding module for package github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned/typed/sensor/v1alpha1
go: downloading github.com/argoproj/argo-events v1.9.6
go: github.com/argoproj/argo-workflows/v3/cmd/argo/commands imports
	github.com/argoproj/argo-events/pkg/client/eventsource/clientset/versioned: module github.com/argoproj/argo-events@latest found (v1.9.6), but does not contain package github.com/argoproj/argo-events/pkg/client/eventsource/clientset/versioned
go: github.com/argoproj/argo-workflows/v3/cmd/argo/commands imports
	github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned: module github.com/argoproj/argo-events@latest found (v1.9.6), but does not contain package github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned
go: github.com/argoproj/argo-workflows/v3/pkg/apiclient/eventsource imports
	github.com/argoproj/argo-events/pkg/apis/eventsource/v1alpha1: module github.com/argoproj/argo-events@latest found (v1.9.6), but does not contain package github.com/argoproj/argo-events/pkg/apis/eventsource/v1alpha1
go: github.com/argoproj/argo-workflows/v3/pkg/apiclient/sensor imports
	github.com/argoproj/argo-events/pkg/apis/sensor/v1alpha1: module github.com/argoproj/argo-events@latest found (v1.9.6), but does not contain package github.com/argoproj/argo-events/pkg/apis/sensor/v1alpha1
go: github.com/argoproj/argo-workflows/v3/server/sensor tested by
	github.com/argoproj/argo-workflows/v3/server/sensor.test imports
	github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned/typed/sensor/v1alpha1: module github.com/argoproj/argo-events@latest found (v1.9.6), but does not contain package github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned/typed/sensor/v1alpha1
time="2025-04-15T08:05:35Z" level=error msg="Unable to write build event: \"write unixgram @03994->/run/systemd/journal/socket: sendmsg: no such file or directory\""
Error: building at STEP "RUN go mod tidy && go mod vendor": while running runtime: exit status 1

@SaiReddy268201
Copy link

@Joibel While building binary with argo-events v1.9.6 I am seeing the following failures.

github.com/argoproj/argo-events/pkg/client/eventsource/clientset/versioned --> github.com/argoproj/argo-events/pkg/client/clientset/versioned

github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned. --> github.com/argoproj/argo-events/pkg/client/clientset/versioned

go: finding module for package github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned/typed/sensor/v1alpha1
go: downloading github.com/argoproj/argo-events v1.9.6
go: github.com/argoproj/argo-workflows/v3/cmd/argo/commands imports
	github.com/argoproj/argo-events/pkg/client/eventsource/clientset/versioned: module github.com/argoproj/argo-events@latest found (v1.9.6), but does not contain package github.com/argoproj/argo-events/pkg/client/eventsource/clientset/versioned
go: github.com/argoproj/argo-workflows/v3/cmd/argo/commands imports
	github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned: module github.com/argoproj/argo-events@latest found (v1.9.6), but does not contain package github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned
go: github.com/argoproj/argo-workflows/v3/pkg/apiclient/eventsource imports
	github.com/argoproj/argo-events/pkg/apis/eventsource/v1alpha1: module github.com/argoproj/argo-events@latest found (v1.9.6), but does not contain package github.com/argoproj/argo-events/pkg/apis/eventsource/v1alpha1
go: github.com/argoproj/argo-workflows/v3/pkg/apiclient/sensor imports
	github.com/argoproj/argo-events/pkg/apis/sensor/v1alpha1: module github.com/argoproj/argo-events@latest found (v1.9.6), but does not contain package github.com/argoproj/argo-events/pkg/apis/sensor/v1alpha1
go: github.com/argoproj/argo-workflows/v3/server/sensor tested by
	github.com/argoproj/argo-workflows/v3/server/sensor.test imports
	github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned/typed/sensor/v1alpha1: module github.com/argoproj/argo-events@latest found (v1.9.6), but does not contain package github.com/argoproj/argo-events/pkg/client/sensor/clientset/versioned/typed/sensor/v1alpha1
time="2025-04-15T08:05:35Z" level=error msg="Unable to write build event: \"write unixgram @03994->/run/systemd/journal/socket: sendmsg: no such file or directory\""
Error: building at STEP "RUN go mod tidy && go mod vendor": while running runtime: exit status 1

Even I am facing the same issue

@dependabot dependabot bot force-pushed the dependabot/go_modules/go_modules-1693ce000b branch from a1fe54c to 57b101f Compare April 17, 2025 12:40
Bumps the go_modules group with 1 update: [github.com/argoproj/argo-events](https://github.com/argoproj/argo-events).

Updates `github.com/argoproj/argo-events` from 1.9.1 to 1.9.6
- [Release notes](https://github.com/argoproj/argo-events/releases)
- [Changelog](https://github.com/argoproj/argo-events/blob/master/CHANGELOG.md)
- [Commits](argoproj/argo-events@v1.9.1...v1.9.6)

Manually refactored the code necessary for this where the events
clients need updating - moving to a single client instead of separate
event source and sensor clients

As this bumps prometheus-go switch to the legacy name verifier for
metrics as the new name verifier doesn't match our documented
rules. This could be fixed elsewhere separately from this.

---
updated-dependencies:
- dependency-name: github.com/argoproj/argo-events
  dependency-version: 1.9.6
  dependency-type: direct:production
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@Joibel Joibel force-pushed the dependabot/go_modules/go_modules-1693ce000b branch from 57b101f to b53eb3a Compare April 17, 2025 12:44
@github-actions github-actions bot merged commit fa51c6d into main Apr 17, 2025
33 checks passed
@github-actions github-actions bot deleted the dependabot/go_modules/go_modules-1693ce000b branch April 17, 2025 13:25
Joibel pushed a commit that referenced this pull request Apr 24, 2025
… in the go_modules group (#14382)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
(cherry picked from commit fa51c6d)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

go Pull requests that update Go dependencies type/dependencies PRs and issues specific to updating dependencies

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants