Updated Dependencies #134
Open
Updated Dependencies #134
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps [helm/chart-releaser-action](https://github.com/helm/chart-releaser-action) from 1.4.1 to 1.5.0. - [Release notes](https://github.com/helm/chart-releaser-action/releases) - [Commits](helm/chart-releaser-action@v1.4.1...v1.5.0) --- updated-dependencies: - dependency-name: helm/chart-releaser-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/checkout](https://github.com/actions/checkout) from 1 to 4. - [Release notes](https://github.com/actions/checkout/releases) - [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md) - [Commits](actions/checkout@v1...v4) --- updated-dependencies: - dependency-name: actions/checkout dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 3 to 4. - [Release notes](https://github.com/actions/setup-go/releases) - [Commits](actions/setup-go@v3...v4) --- updated-dependencies: - dependency-name: actions/setup-go dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.3.2 to 0.3.8. - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.3.2...v0.3.8) --- updated-dependencies: - dependency-name: golang.org/x/text dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…/helm/chart-releaser-action-1.5.0 Bump helm/chart-releaser-action from 1.4.1 to 1.5.0
…/actions/checkout-4 Bump actions/checkout from 1 to 4
…/actions/setup-go-4 Bump actions/setup-go from 3 to 4
…/x/text-0.3.8 Bump golang.org/x/text from 0.3.2 to 0.3.8
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.0.0-20200414173820-0848c9571904 to 0.1.0. - [Commits](https://github.com/golang/crypto/commits/v0.1.0) --- updated-dependencies: - dependency-name: golang.org/x/crypto dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.3.0 to 1.10.9. - [Release notes](https://github.com/lib/pq/releases) - [Commits](lib/pq@v1.3.0...v1.10.9) --- updated-dependencies: - dependency-name: github.com/lib/pq dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
Bumps [github.com/emicklei/go-restful](https://github.com/emicklei/go-restful) from 2.11.1+incompatible to 2.16.0+incompatible. - [Release notes](https://github.com/emicklei/go-restful/releases) - [Changelog](https://github.com/emicklei/go-restful/blob/v3/CHANGES.md) - [Commits](emicklei/go-restful@v2.11.1...v2.16.0) --- updated-dependencies: - dependency-name: github.com/emicklei/go-restful dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…/x/crypto-0.1.0 Bump golang.org/x/crypto from 0.0.0-20200414173820-0848c9571904 to 0.1.0
…m/emicklei/go-restful-2.16.0incompatible Bump github.com/emicklei/go-restful from 2.11.1+incompatible to 2.16.0+incompatible
…thub.com/lib/pq-1.10.9 Bump github.com/lib/pq from 1.3.0 to 1.10.9
Bumps [github.com/gogo/protobuf](https://github.com/gogo/protobuf) from 1.3.1 to 1.3.2. - [Release notes](https://github.com/gogo/protobuf/releases) - [Commits](gogo/protobuf@v1.3.1...v1.3.2) --- updated-dependencies: - dependency-name: github.com/gogo/protobuf dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…/gogo/protobuf-1.3.2 Bump github.com/gogo/protobuf from 1.3.1 to 1.3.2
Bumps [github.com/go-openapi/spec](https://github.com/go-openapi/spec) from 0.19.4 to 0.20.9. - [Commits](go-openapi/spec@v0.19.4...v0.20.9) --- updated-dependencies: - dependency-name: github.com/go-openapi/spec dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…hub.com/go-openapi/spec-0.20.9 Bump github.com/go-openapi/spec from 0.19.4 to 0.20.9
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.0.0-20200301022130-244492dfa37a to 0.7.0. - [Commits](https://github.com/golang/net/commits/v0.7.0) --- updated-dependencies: - dependency-name: golang.org/x/net dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…/x/net-0.7.0 Bump golang.org/x/net from 0.0.0-20200301022130-244492dfa37a to 0.7.0
Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.5.1 to 1.11.1. - [Release notes](https://github.com/prometheus/client_golang/releases) - [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md) - [Commits](prometheus/client_golang@v1.5.1...v1.11.1) --- updated-dependencies: - dependency-name: github.com/prometheus/client_golang dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
…m/prometheus/client_golang-1.11.1 Bump github.com/prometheus/client_golang from 1.5.1 to 1.11.1
Bumps [github.com/golang/mock](https://github.com/golang/mock) from 1.3.1 to 1.6.0. - [Release notes](https://github.com/golang/mock/releases) - [Changelog](https://github.com/golang/mock/blob/main/.goreleaser.yml) - [Commits](golang/mock@1.3.1...v1.6.0) --- updated-dependencies: - dependency-name: github.com/golang/mock dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…thub.com/golang/mock-1.6.0 Bump github.com/golang/mock from 1.3.1 to 1.6.0
Bumps [github.com/onsi/ginkgo](https://github.com/onsi/ginkgo) from 1.12.0 to 1.16.5. - [Release notes](https://github.com/onsi/ginkgo/releases) - [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md) - [Commits](onsi/ginkgo@v1.12.0...v1.16.5) --- updated-dependencies: - dependency-name: github.com/onsi/ginkgo dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
…thub.com/onsi/ginkgo-1.16.5 Bump github.com/onsi/ginkgo from 1.12.0 to 1.16.5
|
Also two dependencies were unable to pass test/build pipelines: |
|
@hitman99 , there are a few issues even with the current version I tried to address a few issues when I first created this PR. With the depandabot config in #133 it might become easier to keep the dependencies current and thus reduce the number of findings on the image. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
After enabling dependabot (#133) in my fork there were a good few updates to consider.
I merged everything where the tests passed.
You can see what happened here: https://github.com/aschaber1/movetokube-postgres-operator/pulls?q=is%3Apr
If you have any questions, please let me know. I'd gladly help.