Skip to content

Conversation

@dependabot
Copy link

@dependabot dependabot bot commented on behalf of github Jun 18, 2021

Bumps k8s.io/release from 0.8.0 to 0.9.0.

Release notes

Sourced from k8s.io/release's releases.

v0.9.0

Changes by Kind

Deprecation

Feature

  • Added i386 crossbuild toolchain to kube-cross. (#2086, @​saschagrunert) [SIG Release]

  • Bump k8s-cloud-builder to version v1.16.4-2 (#2093, @​puerco) [SIG Release]

  • Debian-base: Build buster-v1.6.0 image (#1991, @​justaugustus) [SIG Release]

  • Debian-base: Build buster-v1.7.0 image (#2080, @​justaugustus) [SIG Release]

  • Debian-iptables: Build buster-v1.6.0 image (#1983, @​wespanther) [SIG Release]

  • Debian-iptables: Build buster-v1.6.1 image

  • Dependency updates:

    • github.com/spf13/cobra from 1.1.1 to 1.1.3
    • github.com/go-git/go-git/v5 from 5.2.0 to 5.3.0
    • github.com/google/uuid from 1.1.4 to 1.2.0
    • github.com/sendgrid/rest from from 2.6.2 to 2.6.3
    • github.com/cheggaaa/pb/v3 from 3.0.5 to 3.0.8 (#2042, @​justaugustus) [SIG Release]
  • Deps: Update sigs.k8s.io/release-utils to v0.2.1 (#2052, @​justaugustus) [SIG Release]

  • Hack: Allow verify-dependencies to succeed when GOBIN is missing

    • [go] go1.16.4 and go1.15.12 updates
    • kube-cross: Build v1.16.4-1 and v1.15.12-1 images
    • go-runner: Build v2.3.1-go1.16.4-buster.0 and v2.3.1-go1.15.12-buster.0
    • releng-ci: Build v0.5.2 image using go1.16.4 (#2059, @​justaugustus) [SIG Release]
  • K8s-cloud-builder: Build v1.15.12-legacy-1/v1.15.12-1 image

    • k8s-ci-builder: Build image variants using go1.15.12 (#2063, @​cpanato) [SIG Release]
  • Kube-cross: Adds mingw-w64 for Windows binary compilation

  • Kube-cross: Build v1.15.11-1 / v1.15.11-legacy-1 image

  • New SPDX package for generating SPDX compliant manifests of artifacts.

    • The license package now includes a new Catalog object to interact with spdx license data
    • First set of image analyzers to enrich the BOM generated for the go-runner and distroless base images
    • Corrects a bug with the license downloader where license data was not available when first downloaded. (#2064, @​puerco) [SIG Release]
  • New bom utility allows software authors to generate spdx manifests for projects. Allows adding files and images to the manifest. (#2066, @​puerco) [SIG Release]

  • New krel cve subcommand to handle CVE data information in the release bucket. Allow a release manager to upload, delete and edit CVE data files that publish vulnerability information in the changelog. (#1995, @​puerco) [SIG Release]

  • Releng-ci: Enable building multiple image variants (#2089, @​justaugustus) [SIG Release]

  • Setcap: Build buster-v2.0.0 image

    Uses debian-base:buster-v1.6.0.

    Note: the image major version is arbitrarily bumped here to dissuade any inferences that it must match the debian-base image tag (#1992, @​justaugustus) [SIG Release]

  • The SPDX package can now index the contents of a directory and produce a Package listing all contents. Directories can be specified by -d/--directory

    • go.mod support: We now recognize directories that are golang modules. If a go.mod file is found, the spdx object will now download, scan them for licensing data and create packages which are then linked to the directory package as dependencies
    • Full support for .gitignore exclusions: WHen indexing a directory, the spdx object will detect a .gitignore file and honor the files excluded by patterns in it.

... (truncated)

Commits
  • b713f2d Merge pull request #2102 from justaugustus/cip
  • 3cbcfcb go.mod: Run go mod tidy
  • f8c7fd7 Merge pull request #2101 from justaugustus/cip
  • ee36821 pkg/cip: Migrate packages back to k-sigs/cip
  • 7a8c739 Merge pull request #2091 from xmudrii/debian-base-symlink-rm
  • af82e19 Bump debian-base to buster-v1.7.1
  • c6c13d5 Merge pull request #2085 from puerco/deep-mods
  • c1fff76 debian-base: symlink rm to /usr/sbin/rm
  • 8ea90f6 Merge pull request #2100 from kubernetes/dependabot/go_modules/github.com/cen...
  • 7d146c6 build(deps): bump github.com/cenkalti/backoff/v4 from 4.1.0 to 4.1.1
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Jun 18, 2021

The following labels could not be found: release-note-none.

@codecov-commenter
Copy link

codecov-commenter commented Jun 18, 2021

Codecov Report

Merging #10 (9403912) into master (741bd7c) will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master      #10   +/-   ##
=======================================
  Coverage   41.71%   41.71%           
=======================================
  Files         108      108           
  Lines       10163    10163           
=======================================
  Hits         4240     4240           
  Misses       5474     5474           
  Partials      449      449           

@dependabot dependabot bot force-pushed the dependabot/go_modules/k8s.io/release-0.9.0 branch from 687587f to 9403912 Compare June 30, 2021 18:53
Bumps [k8s.io/release](https://github.com/kubernetes/release) from 0.8.0 to 0.9.0.
- [Release notes](https://github.com/kubernetes/release/releases)
- [Changelog](https://github.com/kubernetes/release/blob/master/docs/release-notes-maps.md)
- [Commits](kubernetes/release@v0.8.0...v0.9.0)

---
updated-dependencies:
- dependency-name: k8s.io/release
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/k8s.io/release-0.9.0 branch from 9403912 to b1528ca Compare July 1, 2021 18:36
@dependabot @github
Copy link
Author

dependabot bot commented on behalf of github Aug 9, 2021

Superseded by #33.

@dependabot dependabot bot closed this Aug 9, 2021
@dependabot dependabot bot deleted the dependabot/go_modules/k8s.io/release-0.9.0 branch August 9, 2021 15:33
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants