chore(deps): update all non-major dependencies #2
Loading…
Reference in New Issue
Block a user
No description provided.
Delete Branch "renovate/all-minor-patch"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
This PR contains the following updates:
v2.13.0
->v2.13.1
v3.9.1
->v3.9.2
v0.37.6
->v0.38.0
Release Notes
argoproj/argo-cd (quay.io/argoproj/argocd)
v2.13.1
Compare Source
Quick Start
Non-HA:
HA:
Release Signatures and Provenance
All Argo CD container images are signed by cosign. A Provenance is generated for container images and CLI binaries which meet the SLSA Level 3 specifications. See the documentation on how to verify.
Upgrading
If upgrading from a different minor version, be sure to read the upgrading documentation.
Changelog
Features
6a8cb6e
: feat: option to disable writing k8s events(#18205) (#18441) (#20788) (@Jack-R-lantern)Bug fixes
449e693
: fix(pkce): 20202 Backport PKCE auth flow fix for basehref and reauth (#20675) (@austin5219)68606c6
: fix: Fix repeated 403 due to app namespace being undefined (#20699) (#20819) (#20860) (@gcp-cherry-pick-bot[bot])99aab9a
: fix: check for source position when --show-params is set (#20682) (#20689) (@gcp-cherry-pick-bot[bot])d03ccf3
: fix: disable automaxprocs logging (#20069) - cherry-pick 2.13 (#20718) (@pasha-codefresh)Other work
7f45c9e
: chore: Don't degrade PDB on InsufficientPods (#20171) (#20665) (#20694) (@gcp-cherry-pick-bot[bot])Full Changelog: https://github.com/argoproj/argo-cd/compare/v2.13.0...v2.13.1
getsops/sops (sops)
v3.9.2
Compare Source
Installation
To install
sops
, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.For instance, if you are using Linux on an AMD64 architecture:
Verify checksums file signature
The checksums file provided within the artifacts attached to this release is signed using Cosign with GitHub OIDC. To validate the signature of this file, run the following commands:
Verify binary integrity
To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature:
Verify artifact provenance
The SLSA provenance of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an in-toto link metadata file named
sops-v3.9.2.intoto.jsonl
. To verify the provenance of an artifact, you can utilize theslsa-verifier
tool:Container Images
The
sops
binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies.These container images are available for the following architectures:
linux/amd64
andlinux/arm64
.GitHub Container Registry
ghcr.io/getsops/sops:v3.9.2
ghcr.io/getsops/sops:v3.9.2-alpine
Quay.io
quay.io/getsops/sops:v3.9.2
quay.io/getsops/sops:v3.9.2-alpine
Verify container image signature
The container images are signed using Cosign with GitHub OIDC. To validate the signature of an image, run the following command:
Verify container image provenance
The container images include SLSA provenance attestations. For more information around the verification of this, please refer to the
slsa-verifier
documentation.Software Bill of Materials
The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an SPDX JSON file, formatted as
<binary>.spdx.sbom.json
.What's Changed
New Contributors
Full Changelog: https://github.com/getsops/sops/compare/v3.9.1...v3.9.2
helmfile/vals (vals)
v0.38.0
Compare Source
What's Changed
New Contributors
Full Changelog: https://github.com/helmfile/vals/compare/v0.37.8...v0.38.0
v0.37.8
Compare Source
What's Changed
New Contributors
Full Changelog: https://github.com/helmfile/vals/compare/v0.37.7...v0.37.8
v0.37.7
Compare Source
What's Changed
New Contributors
Full Changelog: https://github.com/helmfile/vals/compare/v0.37.6...v0.37.7
Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR has been generated by Renovate Bot.
3522db5445
to103d590aa3
chore(deps): update quay.io/argoproj/argocd docker tag to v2.13.1to chore(deps): update all non-major dependencies103d590aa3
to948cf20953