chore(deps): bump the security group across 1 directory with 13 updates #1928

dependabot · 2025-11-20T17:09:35Z

Bumps the security group with 10 updates in the / directory:

Package	From	To
github.com/godbus/dbus/v5	`5.1.0`	`5.2.0`
github.com/microsoft/go-mssqldb	`1.9.3`	`1.9.4`
golang.org/x/mod	`0.29.0`	`0.30.0`
k8s.io/api	`0.34.1`	`0.34.2`
k8s.io/apiextensions-apiserver	`0.34.1`	`0.34.2`
k8s.io/cli-runtime	`0.34.1`	`0.34.2`
k8s.io/kubernetes	`1.34.1`	`1.34.2`
helm.sh/helm/v3	`3.19.0`	`3.19.2`
k8s.io/kubelet	`0.34.1`	`0.34.2`
k8s.io/metrics	`0.34.1`	`0.34.2`

Updates github.com/godbus/dbus/v5 from 5.1.0 to 5.2.0

Release notes

Sourced from github.com/godbus/dbus/v5's releases.

v5.2.0

What's Changed

Fix default golangci-lint warnings, add it to GHA by @kolyshkin in godbus/dbus#308

Add example for grab media keys. by @linuxerwang in godbus/dbus#316

CI: enable more linters by @kolyshkin in godbus/dbus#319

Add rpic to projects using godbus by @stephenhu in godbus/dbus#320

CI: Go 1.18 fixes by @guelfey in godbus/dbus#322

add fuzz test for (signature) decoding by @guelfey in godbus/dbus#323

style: error should be returned as the last argument by @liaohanqin in godbus/dbus#314

examples: Add asynchronous D-Bus call example in godbus/dbus#325

doc: fix spelling errors by @guelfey in godbus/dbus#335

Replace loop with call to copy() by @liaohanqin in godbus/dbus#334

fix(ci): apt-get update before installing dbus by @guelfey in godbus/dbus#342

freebsd: Remove the cgo dependency from transport_unixcred_freebsd.go by @dfr in godbus/dbus#332

Reduce allocs in decode function by @marselester in godbus/dbus#344

Set argument of SetProperty to Variant by @WhyNotHugo in godbus/dbus#239

Reduce allocs in ReadMessage (unix transport) by @marselester in godbus/dbus#347

Fix missing alignment in decodeU() by @felixonmars in godbus/dbus#348

Add test case for bool alignment by @guelfey in godbus/dbus#349

Add go 1.19 support by @amenzhinsky in godbus/dbus#339

CI tweaks by @guelfey in godbus/dbus#360

ci: add FreBSD job using Cirrus by @guelfey in godbus/dbus#361

Reduce decoder allocs due to int/uint decoding by @marselester in godbus/dbus#356

Pointer semantics in depthCounter by @marselester in godbus/dbus#352

message: use Discard for encoding in IsValid by @guelfey in godbus/dbus#362

Omit extra (*Message).IsValid for outgoing messages by @guelfey in godbus/dbus#363

Only check header validity when decoding messages by @guelfey in godbus/dbus#364

Replaced godoc url with pkg.go.dev url for v5. by @olivercalder in godbus/dbus#369

Reduce bytes to strings allocs in decoder by @marselester in godbus/dbus#367

feat: add security-policy to project by @diogoteles08 in godbus/dbus#366

auth: Do not send UID with external auth by @idleroamer in godbus/dbus#346

Bump CI versions by @guelfey in godbus/dbus#392

export struct members for signature benchmark by @mischief in godbus/dbus#390

introspect: add Peer to introspection by @mischief in godbus/dbus#389

Bump golang.org/x/sys to v0.27.0 by @lucacome in godbus/dbus#386

conn: generate error reply in more cases when trying to send invalid … by @guelfey in godbus/dbus#397

CI: bump FreeBSD image to 14.2 by @guelfey in godbus/dbus#416

Modernize code by @kolyshkin in godbus/dbus#412

Add Sting() method to RequestNameReply and ReleaseNameReply. by @istvan-andrasi in godbus/dbus#398

fix: added socket closing to prevent resource leak by @aiburegit in godbus/dbus#402

Fix mixed-up names in function documentation by @WhyNotHugo in godbus/dbus#407

Unix conn by @guelfey in godbus/dbus#417

add support for struct entities in MakeVariant by @guelfey in godbus/dbus#391

Removing sha1 by @guelfey in godbus/dbus#418

auth: disable sha1 by default on non-windows by @xnox in godbus/dbus#413

New Contributors

@linuxerwang made their first contribution in godbus/dbus#316

@stephenhu made their first contribution in godbus/dbus#320

@dfr made their first contribution in godbus/dbus#332

... (truncated)

Commits

b363148 Merge pull request #418 from godbus/removing-sha1
f55ce2f Merge pull request #391 from godbus/fix/struct_variant
ec919d8 auth: move getHomeDir to only be included on Windows as well
efac43f variant: don't output unneeded space when formatting structs
9364740 add support for struct entities in MakeVariant
99fac80 auth: disable sha1 by default on non-windows
2d48ce5 Merge pull request #417 from godbus/unix-conn
572a6c0 transport_unix: remove unneeded error return
caee758 conn_unix: add DialUnix and ConnectUnix
ae878af transport_unix: add newUnixTransportFromConn
Additional commits viewable in compare view

Updates github.com/microsoft/go-mssqldb from 1.9.3 to 1.9.4

Release notes

Sourced from github.com/microsoft/go-mssqldb's releases.

v1.9.4

What's Changed

Skip Attention packet when in rollback by @alhails in microsoft/go-mssqldb#293

set host var in pipeline by @shueybubbles in microsoft/go-mssqldb#291

fix(namedpipe): Restrict package to supported platforms by @srebhan in microsoft/go-mssqldb#298

New Contributors

@alhails made their first contribution in microsoft/go-mssqldb#293

@srebhan made their first contribution in microsoft/go-mssqldb#298

Full Changelog: microsoft/go-mssqldb@v1.9.3...v1.9.4

Changelog

Sourced from github.com/microsoft/go-mssqldb's changelog.

Changelog

Commits

0997918 fix(namedpipe): Restrict package to supported platforms (#298)
e574861 set host var in pipeline (#291)
819df9f Skip Attention packet when in rollback (#293)
See full diff in compare view

Updates golang.org/x/mod from 0.29.0 to 0.30.0

Commits

7416265 go.mod: update golang.org/x dependencies
5517a71 all: fix some comments
b6cdd1a modfile: use reflect.TypeFor instead of reflect.TypeOf
See full diff in compare view

Updates k8s.io/api from 0.34.1 to 0.34.2

Commits

e28454b Update dependencies to v0.34.2 tag
See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.34.1 to 0.34.2

Commits

9fd4b8c Update dependencies to v0.34.2 tag
See full diff in compare view

Updates k8s.io/apimachinery from 0.34.1 to 0.34.2

Commits

See full diff in compare view

Updates k8s.io/apiserver from 0.34.1 to 0.34.2

Commits

92c4c2c Update dependencies to v0.34.2 tag
d24fa2b Merge pull request #134500vikasbolla/automated-cherry-pick-of-#133310
67ad9b5 authz tests: delay response in context cancelled scenario
See full diff in compare view

Updates k8s.io/cli-runtime from 0.34.1 to 0.34.2

Commits

1d5030c Update dependencies to v0.34.2 tag
See full diff in compare view

Updates k8s.io/client-go from 0.34.1 to 0.34.2

Commits

54601aa Update dependencies to v0.34.2 tag
1bb1ad2 Merge pull request #134589liggitt/automated-cherry-pick-of-#134588
2505205 Remove invalid SAN certificate construction
7ffba0f Merge pull request #134004DerekFrank/automated-cherry-pick-of-#133573
145cb8f gofmt and review feedback
ddcdc12 fix: Update unit test to catch actual nil Labels case and fix functionality t...
See full diff in compare view

Updates k8s.io/kubernetes from 1.34.1 to 1.34.2

Release notes

Sourced from k8s.io/kubernetes's releases.

Kubernetes v1.34.2

See kubernetes-announce@. Additional binary downloads are linked in the CHANGELOG.

See the CHANGELOG for more details.

Commits

8cc511e Release commit for Kubernetes v1.34.2
3e31e4c Merge pull request #134500vikasbolla/automated-cherry-pick-of-#133310
11a8eb6 Merge pull request #135087liggitt/automated-cherry-pick-of-#135017
7768985 Merge pull request #135023hoskeri/automated-cherry-pick-of-#134740
6c1805c Merge pull request #134912rikatz/automated-cherry-pick-of-#134833
6f91cb6 Merge pull request #134800yuanwang04/automated-cherry-pick-of-#133072
732ead8 Merge pull request #134723neolit123/automated-cherry-pick-of-#134715
8b38073 Merge pull request #134533andyzhangx/automated-cherry-pick-of-#134144
11e6caf Merge pull request #135191gohilankit/automated-cherry-pick-of-#135081
5d5a495 Merge pull request #135170 from princepereira/automated-cherry-pick-of-#13514...
Additional commits viewable in compare view

Updates helm.sh/helm/v3 from 3.19.0 to 3.19.2

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.19.2 is a patch release. It is a rebuild of the v3.19.1 release with no code changes.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:

for questions and just to hang out

for discussing PRs, code, and bugs

Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom

Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.2. The common platform binaries are here:

MacOS amd64 (checksum / 7ef4416cdef4c2d78a09e1c8f07a51e945dc0343c883a46b1f628deab52690b7)

MacOS arm64 (checksum / f0847f899479b66a6dd8d9fcd452e8db2562e4cf3f7de28103f9fcf2b824f1d5)

Linux amd64 (checksum / 2114c9dea2844dce6d0ee2d792a9aae846be8cf53d5b19dc2988b5a0e8fec26e)

Linux arm (checksum / 20bcb0aad82172335914e30ae3efd020d28abc1b470b4b565e67aff152c0e4ee)

Linux arm64 (checksum / 566e9f3a5a83a81e4b03503ae37e368edd52d699619e8a9bb1fdf21561ae0e88)

Linux i386 (checksum / 54932ecf2c46c6d3cd9926d28d56e18e70b42467d8ad682844c64cbe8f3dfc11)

Linux ppc64le (checksum / 70d782fb208ebe67b5c508f6e5910a0b75f9b2c99ee3c569a9265aba147d6a37)

Linux s390x (checksum / 69d2a38afba43c9cd49b0bc6031d77230208506ad2b3c2772b3ad13436639e93)

Linux riscv64 (checksum / b60da5690e66acf89df796d11be91cc2052d6194a655b4d6ea5ee5c01112192b)

Windows amd64 (checksum / 8b3ea37bcd7c5eda68eadd278690498fb886a17ec541b449216ab3b45748600e)

Windows arm64 (checksum / ed37c24ac0f18721fe61182d24f55d8fd0d072052d3e7393338abaf10452b523)

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

3.19.3 and 4.0.1 are the next patch releases and will be on December 10, 2025

3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

[backport] fix: get-helm-3 script use helm3-latest-version 8766e718a0119851f10ddbe4577593a45fadf544 (George Jenkins)

Helm v3.19.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

Join the discussion in Kubernetes Slack:

for questions and just to hang out

for discussing PRs, code, and bugs

Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom

Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.1. The common platform binaries are here:

... (truncated)

Commits

8766e71 [backport] fix: get-helm-3 script use helm3-latest-version
4f953c2 chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29
6801f4d jsonschema: warn and ignore unresolved URN $ref to match v3.18.4
2f619be Avoid "panic: interface conversion: interface {} is nil"
8112d47 Fix helm pull untar dir check with repo urls
5dff7ce Fix deprecation warning
2dad4d2 chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10
a833710 Add timeout flag to repo add and update flags
3f5d2e2 Merge pull request #31407 from dirkmueller/release-3.19
2e12c81 chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0
See full diff in compare view

Updates k8s.io/kubelet from 0.34.1 to 0.34.2

Commits

b0a2886 Update dependencies to v0.34.2 tag
See full diff in compare view

Updates k8s.io/metrics from 0.34.1 to 0.34.2

Commits

3ec68e2 Update dependencies to v0.34.2 tag
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

xavpaice · 2025-11-24T03:14:08Z

@dependabot recreate

Bumps the security group with 10 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/godbus/dbus/v5](https://github.com/godbus/dbus) | `5.1.0` | `5.2.0` | | [github.com/microsoft/go-mssqldb](https://github.com/microsoft/go-mssqldb) | `1.9.3` | `1.9.4` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.29.0` | `0.30.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.34.1` | `0.34.2` | | [k8s.io/apiextensions-apiserver](https://github.com/kubernetes/apiextensions-apiserver) | `0.34.1` | `0.34.2` | | [k8s.io/cli-runtime](https://github.com/kubernetes/cli-runtime) | `0.34.1` | `0.34.2` | | [k8s.io/kubernetes](https://github.com/kubernetes/kubernetes) | `1.34.1` | `1.34.2` | | [helm.sh/helm/v3](https://github.com/helm/helm) | `3.19.0` | `3.19.2` | | [k8s.io/kubelet](https://github.com/kubernetes/kubelet) | `0.34.1` | `0.34.2` | | [k8s.io/metrics](https://github.com/kubernetes/metrics) | `0.34.1` | `0.34.2` | Updates `github.com/godbus/dbus/v5` from 5.1.0 to 5.2.0 - [Release notes](https://github.com/godbus/dbus/releases) - [Commits](godbus/dbus@v5.1.0...v5.2.0) Updates `github.com/microsoft/go-mssqldb` from 1.9.3 to 1.9.4 - [Release notes](https://github.com/microsoft/go-mssqldb/releases) - [Changelog](https://github.com/microsoft/go-mssqldb/blob/main/CHANGELOG.md) - [Commits](microsoft/go-mssqldb@v1.9.3...v1.9.4) Updates `golang.org/x/mod` from 0.29.0 to 0.30.0 - [Commits](golang/mod@v0.29.0...v0.30.0) Updates `k8s.io/api` from 0.34.1 to 0.34.2 - [Commits](kubernetes/api@v0.34.1...v0.34.2) Updates `k8s.io/apiextensions-apiserver` from 0.34.1 to 0.34.2 - [Release notes](https://github.com/kubernetes/apiextensions-apiserver/releases) - [Commits](kubernetes/apiextensions-apiserver@v0.34.1...v0.34.2) Updates `k8s.io/apimachinery` from 0.34.1 to 0.34.2 - [Commits](kubernetes/apimachinery@v0.34.1...v0.34.2) Updates `k8s.io/apiserver` from 0.34.1 to 0.34.2 - [Commits](kubernetes/apiserver@v0.34.1...v0.34.2) Updates `k8s.io/cli-runtime` from 0.34.1 to 0.34.2 - [Commits](kubernetes/cli-runtime@v0.34.1...v0.34.2) Updates `k8s.io/client-go` from 0.34.1 to 0.34.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.34.1...v0.34.2) Updates `k8s.io/kubernetes` from 1.34.1 to 1.34.2 - [Release notes](https://github.com/kubernetes/kubernetes/releases) - [Commits](kubernetes/kubernetes@v1.34.1...v1.34.2) Updates `helm.sh/helm/v3` from 3.19.0 to 3.19.2 - [Release notes](https://github.com/helm/helm/releases) - [Commits](helm/helm@v3.19.0...v3.19.2) Updates `k8s.io/kubelet` from 0.34.1 to 0.34.2 - [Commits](kubernetes/kubelet@v0.34.1...v0.34.2) Updates `k8s.io/metrics` from 0.34.1 to 0.34.2 - [Commits](kubernetes/metrics@v0.34.1...v0.34.2) --- updated-dependencies: - dependency-name: github.com/godbus/dbus/v5 dependency-version: 5.2.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: github.com/microsoft/go-mssqldb dependency-version: 1.9.4 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: golang.org/x/mod dependency-version: 0.30.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: security - dependency-name: k8s.io/api dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/apiextensions-apiserver dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/apimachinery dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/apiserver dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/cli-runtime dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/client-go dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/kubernetes dependency-version: 1.34.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: helm.sh/helm/v3 dependency-version: 3.19.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/kubelet dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security - dependency-name: k8s.io/metrics dependency-version: 0.34.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: security ... Signed-off-by: dependabot[bot] <support@github.com>

dependabot bot added dependencies go type::security labels Nov 20, 2025

dependabot bot force-pushed the dependabot/go_modules/security-2352ec8c16 branch from 441f65f to 6c1311f Compare November 24, 2025 03:16

dependabot bot force-pushed the dependabot/go_modules/security-2352ec8c16 branch from 6c1311f to 287ee36 Compare November 24, 2025 22:12

update file-path-securejoin

202d39e

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): bump the security group across 1 directory with 13 updates #1928

chore(deps): bump the security group across 1 directory with 13 updates #1928

Uh oh!

dependabot bot commented on behalf of github Nov 20, 2025 •

edited

Loading

Uh oh!

xavpaice commented Nov 24, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

chore(deps): bump the security group across 1 directory with 13 updates #1928

Are you sure you want to change the base?

chore(deps): bump the security group across 1 directory with 13 updates #1928

Uh oh!

Conversation

dependabot bot commented on behalf of github Nov 20, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

v5.2.0

What's Changed

New Contributors

v1.9.4

What's Changed

New Contributors

Changelog

Kubernetes v1.34.2

Installation and Upgrading

What's Next

Changelog

Installation and Upgrading

Uh oh!

xavpaice commented Nov 24, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

dependabot bot commented on behalf of github Nov 20, 2025 •

edited

Loading