chore(deps): update go dependencies #261

red-hat-konflux · 2025-05-04T14:01:41Z

This PR contains the following updates:

Package	Type	Update	Change
chainguard.dev/sdk	require	patch	`v0.1.29` -> `v0.1.33`
cloud.google.com/go	indirect	minor	`v0.120.0` -> `v0.121.1`
cloud.google.com/go/auth	indirect	minor	`v0.15.0` -> `v0.16.1`
cloud.google.com/go/compute/metadata	indirect	minor	`v0.6.0` -> `v0.7.0`
cloud.google.com/go/iam	indirect	patch	`v1.5.0` -> `v1.5.2`
cloud.google.com/go/kms	indirect	patch	`v1.21.1` -> `v1.21.2`
cloud.google.com/go/longrunning	indirect	patch	`v0.6.6` -> `v0.6.7`
cloud.google.com/go/security	require	patch	`v1.18.4` -> `v1.18.5`
github.com/Azure/azure-sdk-for-go/sdk/azcore	indirect	minor	`v1.17.0` -> `v1.18.0`
github.com/Azure/azure-sdk-for-go/sdk/azidentity	indirect	minor	`v1.8.0` -> `v1.10.0`
github.com/Azure/azure-sdk-for-go/sdk/internal	indirect	minor	`v1.10.0` -> `v1.11.1`
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys	indirect	patch	`v1.3.0` -> `v1.3.1`
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal	indirect	patch	`v1.1.0` -> `v1.1.1`
github.com/AzureAD/microsoft-authentication-library-for-go	indirect	minor	`v1.3.1` -> `v1.4.2`
github.com/PaesslerAG/gval	indirect	minor	`v1.0.0` -> `v1.2.4`
github.com/ThalesIgnite/crypto11	require	minor	`v1.2.5` -> `v1.4.1`
github.com/aws/aws-sdk-go-v2/credentials	indirect	patch	`v1.17.51` -> `v1.17.67`
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	indirect	patch	`v1.16.23` -> `v1.16.30`
github.com/aws/aws-sdk-go-v2/internal/configsources	indirect	patch	`v1.3.27` -> `v1.3.34`
github.com/aws/aws-sdk-go-v2/internal/ini	indirect	patch	`v1.8.1` -> `v1.8.3`
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding	indirect	patch	`v1.12.1` -> `v1.12.3`
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url	indirect	patch	`v1.12.8` -> `v1.12.15`
github.com/aws/smithy-go	indirect	patch	`v1.22.1` -> `v1.22.3`
github.com/fsnotify/fsnotify	require	minor	`v1.8.0` -> `v1.9.0`
github.com/google/go-containerregistry	indirect	patch	`v0.20.2` -> `v0.20.3`
github.com/hashicorp/go-secure-stdlib/parseutil	indirect	minor	`v0.1.7` -> `v0.2.0`
github.com/hashicorp/go-sockaddr	indirect	patch	`v1.0.2` -> `v1.0.7`
github.com/hashicorp/vault/api	indirect	minor	`v1.15.0` -> `v1.16.0`
github.com/jhump/protoreflect	indirect	minor	`v1.16.0` -> `v1.17.0`
github.com/klauspost/compress	indirect	minor	`v1.17.11` -> `v1.18.0`
github.com/letsencrypt/boulder	indirect	digest	`de9c061` -> `ac2dae7`
github.com/magiconair/properties	require	patch	`v1.8.9` -> `v1.8.10`
github.com/mattn/go-runewidth	indirect	patch	`v0.0.9` -> `v0.0.16`
github.com/prometheus/client_golang	require	minor	`v1.21.1` -> `v1.22.0`
github.com/prometheus/client_model	require	patch	`v0.6.1` -> `v0.6.2`
github.com/prometheus/common	require	minor	`v0.62.0` -> `v0.64.0`
github.com/prometheus/procfs	indirect	minor	`v0.15.1` -> `v0.16.1`
github.com/rogpeppe/go-internal	indirect	minor	`v1.10.0` -> `v1.14.1`
github.com/sagikazarmark/locafero	indirect	minor	`v0.4.0` -> `v0.9.0`
github.com/sigstore/sigstore	require	minor	`v1.8.12` -> `v1.9.4`
github.com/sigstore/sigstore/pkg/signature/kms/aws	require	minor	`v1.8.12` -> `v1.9.4`
github.com/sigstore/sigstore/pkg/signature/kms/azure	require	minor	`v1.8.12` -> `v1.9.4`
github.com/sigstore/sigstore/pkg/signature/kms/gcp	require	minor	`v1.8.12` -> `v1.9.4`
github.com/sigstore/sigstore/pkg/signature/kms/hashivault	require	minor	`v1.8.12` -> `v1.9.4`
github.com/spf13/afero	indirect	minor	`v1.11.0` -> `v1.14.0`
github.com/spf13/cast	indirect	minor	`v1.7.0` -> `v1.8.0`
github.com/spf13/cobra	require	minor	`v1.8.1` -> `v1.9.1`
github.com/spf13/pflag	indirect	patch	`v1.0.5` -> `v1.0.6`
github.com/spf13/pflag	require	patch	`v1.0.5` -> `v1.0.6`
github.com/spf13/viper	require	minor	`v1.19.0` -> `v1.20.1`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	indirect	minor	`v0.59.0` -> `v0.60.0`
go.opentelemetry.io/proto/otlp	indirect	minor	`v1.5.0` -> `v1.6.0`
go.step.sm/crypto	require	minor	`v0.57.0` -> `v0.63.0`
golang.org/x/crypto	indirect	minor	`v0.36.0` -> `v0.38.0`
golang.org/x/exp	indirect	digest	`7e4ce0a` -> `ce4c2cf`
golang.org/x/net	indirect	minor	`v0.37.0` -> `v0.40.0`
golang.org/x/oauth2	indirect	minor	`v0.28.0` -> `v0.30.0`
golang.org/x/sync	indirect	minor	`v0.12.0` -> `v0.14.0`
golang.org/x/sync	indirect	minor	`v0.13.0` -> `v0.14.0`
golang.org/x/sys	indirect	minor	`v0.31.0` -> `v0.33.0`
golang.org/x/term	indirect	minor	`v0.30.0` -> `v0.32.0`
golang.org/x/text	indirect	minor	`v0.23.0` -> `v0.25.0`
google.golang.org/api	require	minor	`v0.227.0` -> `v0.233.0`
google.golang.org/genproto	indirect	digest	`de1ac95` -> `5a2f75b`
google.golang.org/genproto/googleapis/api	indirect	digest	`de1ac95` -> `5a2f75b`
google.golang.org/genproto/googleapis/api	require	digest	`de1ac95` -> `5a2f75b`
google.golang.org/genproto/googleapis/rpc	indirect	digest	`ee84b53` -> `5a2f75b`
sigs.k8s.io/release-utils	require	minor	`v0.9.0` -> `v0.11.1`

Release Notes

chainguard-dev/sdk (chainguard.dev/sdk)

What's Changed

Bump the go_modules group across 1 directory with 2 updates by @dependabot in https://github.com/chainguard-dev/sdk/pull/148

Full Changelog: chainguard-dev/sdk@v0.1.29...v0.1.30

googleapis/google-cloud-go (cloud.google.com/go)

`v0.121.1`

Compare Source

Bug Fixes

civil: Add support for civil.Date, civil.Time and civil.DateTime arguments to their respective Scan methods (#12240) (7127ce9), refs #12060

`v0.121.0`

Compare Source

Features

debugger: Remove debugger/apiv2 client (#12050) (af8641e)

`v0.120.1`

Compare Source

Bug Fixes

readme: Update authentication section (#11918) (2fda860)

AzureAD/microsoft-authentication-library-for-go (github.com/AzureAD/microsoft-authentication-library-for-go)

`v1.4.2`

Compare Source

What's Changed

Support for refresh_in for ConfidentialClient by @4gust in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/542
Update Unit tests by @4gust in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/560
Exposing necessary types from each client by @4gust in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/561
4gust/cca 256sha support by @4gust in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/562
Updated the version info by @4gust in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/564

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.4.1...v1.4.2

`v1.4.1`

Compare Source

What's Changed

Fixing // #nosec G101 issue on MSI by @4gust in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/554
Unmarshal device code verification URLs by @chlowell in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/556

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.4.0...v1.4.1

`v1.4.0`

Compare Source

Release Summary: Add Managed Identity Support

Overview

This Release introduces Managed Identity support to the Microsoft Authentication Library for Go through a new client. The new client supports multiple sources for managed identities, including:

IMDS
Azure Arc
Service Fabric
App Service
Azure Machine Learning
Cloud Shell

The client can handle both System Assigned Managed Identities and User Assigned Managed Identities.
For user-assigned identities, you can specify:

Client ID
Resource ID
Object ID

Key Changes

New Managed Identity Client: Added a new client to handle managed identity authentication.
Multiple Sources Support: The client supports various managed identity sources, enhancing flexibility and usability.
Tests: Comprehensive tests have been added to ensure the reliability and correctness of the new functionality.
Documentation: Updated documentation to include details on the new managed identity client and usage instructions.

Code Sample

Here's a basic example of how to use the new managed identity client to acquire a token:

package main

import (
    "context"
    "fmt"
    "github.com/AzureAD/microsoft-authentication-library-for-go/msal"
)

func main() {
	miSystemAssigned, err := mi.New(mi.SystemAssigned())
	if err != nil {
		log.Fatal(err)
	}
	result, err := miSystemAssigned.AcquireToken(context.TODO(), "https://management.azure.com")
	if err != nil {
		log.Fatal(err)
	}
	fmt.Println("token expire at : ", result.ExpiresOn)
}

`v1.3.3`

Compare Source

What's Changed

fix: username password flow by @mohanjith in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/536
Fix Bug: Prevent Empty Region in WithAzureRegion from Overriding MSAL_FORCE_REGION by @4gust in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/545

New Contributors

@mohanjith made their first contribution in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/536

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.3.2...v1.3.3

`v1.3.2`

Compare Source

Re-release v1.3.2, which was accidentally tagged as v.1.3.2

What's Changed

Revert WithTenantID("adfs") regression by @chlowell in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/529
Create release.md by @bgavrilMS in https://github.com/AzureAD/microsoft-authentication-library-for-go/pull/530

Full Changelog: AzureAD/microsoft-authentication-library-for-go@v1.3.1...v1.3.2

PaesslerAG/gval (github.com/PaesslerAG/gval)

`v1.2.4`

Compare Source

What's Changed

Fix functions Nil arguements by @KinyaElGrande in https://github.com/PaesslerAG/gval/pull/109

New Contributors

@KinyaElGrande made their first contribution in https://github.com/PaesslerAG/gval/pull/109

Full Changelog: PaesslerAG/gval@v1.2.3...v1.2.4

`v1.2.3`

Compare Source

What's Changed

Apply formatting (go fmt) by @darh in https://github.com/PaesslerAG/gval/pull/92
Add support for typed map and slices with method calls by @tw1nk in https://github.com/PaesslerAG/gval/pull/88
fix unexpected func() bool expected bool by @mei-rune in https://github.com/PaesslerAG/gval/pull/104
feat: fix goroutine leakage problem caused by errCh write blocking. by @catundercar in https://github.com/PaesslerAG/gval/pull/107

New Contributors

@tw1nk made their first contribution in https://github.com/PaesslerAG/gval/pull/88
@mei-rune made their first contribution in https://github.com/PaesslerAG/gval/pull/104
@catundercar made their first contribution in https://github.com/PaesslerAG/gval/pull/107

Full Changelog: PaesslerAG/gval@v1.2.2...v1.2.3

`v1.2.2`

Compare Source

Wrap errors instead of the error message.

`v1.2.1`: Allow nil arguments and catch panics in function calls

Compare Source

`v1.2.0`

Compare Source

Added DecimalArithmetic to gval.

`v1.1.2`

Compare Source

Fixed IsConst for go 1.17
Fixed scanning to much characters while parsing operators

`v1.1.1`

Compare Source

Fixed typed nil value issues.

`v1.1.0`: 1.1

Compare Source

Make ident and parentheses parsers available separately from Base()

`v1.0.1`

Compare Source

ThalesIgnite/crypto11 (github.com/ThalesIgnite/crypto11)

`v1.4.1`

Compare Source

What's Changed

fix: underlying library context is reused through reference counting by @ek-1n574 in https://github.com/ThalesGroup/crypto11/pull/114

New Contributors

@ek-1n574 made their first contribution in https://github.com/ThalesGroup/crypto11/pull/114

Full Changelog: ThalesGroup/crypto11@v1.4.0...v1.4.1

`v1.4.0`

Compare Source

What's Changed

upgrade to go1.23.6 by @Nicolas-Peiffer in https://github.com/ThalesGroup/crypto11/pull/116

New Contributors

@Nicolas-Peiffer made their first contribution in https://github.com/ThalesGroup/crypto11/pull/116

Full Changelog: ThalesGroup/crypto11@v1.3.0...v1.4.0

`v1.3.0`

Compare Source

What's Changed

feature: optimized aes cbc support by @IceManGreen in https://github.com/ThalesGroup/crypto11/pull/107
RSA support for asymmetric decryption by @IceManGreen in https://github.com/ThalesGroup/crypto11/pull/115

New Contributors

@IceManGreen made their first contribution in https://github.com/ThalesGroup/crypto11/pull/107

Full Changelog: ThalesGroup/crypto11@v1.2.1...v1.3.0

aws/smithy-go (github.com/aws/smithy-go)

`v1.22.3`

Compare Source

`v1.22.2`

Compare Source

fsnotify/fsnotify (github.com/fsnotify/fsnotify)

`v1.9.0`

Compare Source

Changes and fixes

all: make BufferedWatcher buffered again (#657)
inotify: fix race when adding/removing watches while a watched path is being deleted (#678, #686)
inotify: don't send empty event if a watched path is unmounted (#655)
inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#679)
kqueue: fix watching relative symlinks (#681)
kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#682)
illumos: don't send error if changed file is deleted while processing the event (#678)

google/go-containerregistry (github.com/google/go-containerregistry)

`v0.20.3`

Compare Source

What's Changed

remote/transport: Make bearer transport go-routine-safe by @2opremio in https://github.com/google/go-containerregistry/pull/1806
Expose compare package by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/2001
fix: redact.URL uses (*URL).Redacted to omit basic-auth password by @bmoylan in https://github.com/google/go-containerregistry/pull/1947
bump actions to latest by @ajayk in https://github.com/google/go-containerregistry/pull/2011
don't pin chainguard-dev/actions by @imjasonh in https://github.com/google/go-containerregistry/pull/2025
Check for 406 status code when handling referrers API endpoint response by @malancas in https://github.com/google/go-containerregistry/pull/2026
mutate: Create a defensive annotations copy by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/2030
Detect zstd in crane append by @jonjohnsonjr in https://github.com/google/go-containerregistry/pull/2023
bump deps using hack/bump-deps.sh by @imjasonh in https://github.com/google/go-containerregistry/pull/2042

New Contributors

@bmoylan made their first contribution in https://github.com/google/go-containerregistry/pull/1947
@ajayk made their first contribution in https://github.com/google/go-containerregistry/pull/2011
@malancas made their first contribution in https://github.com/google/go-containerregistry/pull/2026

Full Changelog: google/go-containerregistry@v0.20.2...v0.20.3

hashicorp/go-sockaddr (github.com/hashicorp/go-sockaddr)

`v1.0.7`

Compare Source

What's Changed

Update readme to use go install as go get -u is no longer valid for installing modules by @jm96441n in https://github.com/hashicorp/go-sockaddr/pull/59
AIX support and build tag fixes by @jtroy in https://github.com/hashicorp/go-sockaddr/pull/62
Bump golang.org/x/sys from 0.0.0-20190412213103-97732733099d to 0.1.0 by @dependabot in https://github.com/hashicorp/go-sockaddr/pull/52
Bump golang.org/x/crypto from 0.0.0-20200820211705-5c72a883971a to 0.17.0 by @dependabot in https://github.com/hashicorp/go-sockaddr/pull/63

New Contributors

@jm96441n made their first contribution in https://github.com/hashicorp/go-sockaddr/pull/59
@jtroy made their first contribution in https://github.com/hashicorp/go-sockaddr/pull/62
@dependabot made their first contribution in https://github.com/hashicorp/go-sockaddr/pull/52

Full Changelog: hashicorp/go-sockaddr@v1.0.6...v1.0.7

`v1.0.6`

Compare Source

`v1.0.5`

Compare Source

`v1.0.4`

Compare Source

`v1.0.3`

Compare Source

hashicorp/vault (github.com/hashicorp/vault/api)

`v1.16.0`

Compare Source

1.16.0

March 26, 2024

SECURITY:

auth/cert: compare public keys of trusted non-CA certificates with incoming
client certificates to prevent trusting certs with the same serial number
but not the same public/private key. [GH-25649]
auth/cert: validate OCSP response was signed by the expected issuer and serial number matched request [GH-26091]
secrets/transit: fix a regression that was honoring nonces provided in non-convergent modes during encryption. [GH-22852]

CHANGES:

Upgrade grpc to v1.58.3 [GH-23703]
Upgrade x/net to v0.17.0 [GH-23703]
api: add the enterprise parameter to the /sys/health endpoint [GH-24270]
auth/alicloud: Update plugin to v0.16.1 [GH-25014]
auth/alicloud: Update plugin to v0.17.0 [GH-25217]
auth/approle: Normalized error response messages when invalid credentials are provided [GH-23786]
auth/azure: Update plugin to v0.16.1 [GH-22795]
auth/azure: Update plugin to v0.17.0 [GH-25258]
auth/cf: Update plugin to v0.16.0 [GH-25196]
auth/gcp: Update plugin to v0.16.2 [GH-25233]
auth/jwt: Update plugin to v0.19.0 [GH-24972]
auth/jwt: Update plugin to v0.20.0 [GH-25326]
auth/jwt: Update plugin to v0.20.1 [GH-25937]
auth/kerberos: Update plugin to v0.10.1 [GH-22797]
auth/kerberos: Update plugin to v0.11.0 [GH-25232]
auth/kubernetes: Update plugin to v0.18.0 [GH-25207]
auth/oci: Update plugin to v0.14.1 [GH-22774]
auth/oci: Update plugin to v0.15.1 [GH-25245]
cli: Using vault plugin reload with -plugin in the root namespace will now reload the plugin across all namespaces instead of just the root namespace. [GH-24878]
cli: vault plugin info and vault plugin deregister now require 2 positional arguments instead of accepting either 1 or 2. [GH-24250]
core (enterprise): Seal High Availability (HA) must be enabled by enable_multiseal in configuration.
core: Bump Go version to 1.21.8.
database/couchbase: Update plugin to v0.10.1 [GH-25275]
database/elasticsearch: Update plugin to v0.14.0 [GH-25263]
database/mongodbatlas: Update plugin to v0.11.0 [GH-25264]
database/redis-elasticache: Update plugin to v0.3.0 [GH-25296]
database/redis: Update plugin to v0.2.3 [GH-25289]
database/snowflake: Update plugin to v0.10.0 [GH-25143]
database/snowflake: Update plugin to v0.9.1 [GH-25020]
events: Remove event noficiations websocket endpoint in non-Enterprise [GH-25640]
events: Source URL is now vault://{vault node} [GH-24201]
identity (enterprise): POST requests to the /identity/entity/merge endpoint
are now always forwarded from standbys to the active node. [GH-24325]
plugins/database: Reading connection config at database/config/:name will now return a computed running_plugin_version field if a non-builtin version is running. [GH-25105]
plugins: Add a warning to the response from sys/plugins/reload/backend if no plugins were reloaded. [GH-24512]
plugins: By default, environment variables provided during plugin registration will now take precedence over system environment variables.
Use the environment variable VAULT_PLUGIN_USE_LEGACY_ENV_LAYERING=true to opt out and keep higher preference for system environment
variables. When this flag is set, Vault will check during unseal for conflicts and print warnings for any plugins with environment
variables that conflict with system environment variables. [GH-25128]
plugins: /sys/plugins/runtimes/catalog response will always include a list of "runtimes" in the response, even if empty. [GH-24864]
sdk: Upgrade dependent packages by sdk.
This includes github.com/docker/docker to v24.0.7+incompatible,
google.golang.org/grpc to v1.57.2 and golang.org/x/net to v0.17.0. [GH-23913]
secrets/ad: Update plugin to v0.16.2 [GH-25058]
secrets/ad: Update plugin to v0.17.0 [GH-25187]
secrets/alicloud: Update plugin to v0.16.0 [GH-25257]
secrets/azure: Update plugin to v0.17.0 [GH-25189]
secrets/gcp: Update plugin to v0.18.0 [GH-25173]
secrets/gcpkms: Update plugin to v0.16.0 [GH-25231]
secrets/keymgmt: Update plugin to v0.10.0
secrets/kubernetes: Update plugin to v0.7.0 [GH-25204]
secrets/kv: Update plugin to v0.16.2 [GH-22790]
secrets/kv: Update plugin to v0.17.0 [GH-25277]
secrets/mongodbatlas: Update plugin to v0.10.2 [GH-23849]
secrets/mongodbatlas: Update plugin to v0.11.0 [GH-25253]
secrets/openldap: Update plugin to v0.11.3 [GH-25040]
secrets/openldap: Update plugin to v0.12.0 [GH-25251]
secrets/openldap: Update plugin to v0.12.1 [GH-25524]
secrets/terraform: Update plugin to v0.7.5 [GH-25288]
telemetry: Seal wrap encrypt/decrypt metrics now differentiate between seals using a metrics label of seal name rather than separate metric names. [GH-23837]
ui: Update icons to use Flight icons where available. [GH-24823]
ui: add subnav for replication items [GH-24283]

FEATURES:

Add Snapshot Inspector Tool: Add CLI tool to inspect Vault snapshots [GH-23457]
Audit Filtering: Audit devices support expression-based filter rules (powered by go-bexpr) to determine which entries are written to the audit log. [GH-24558]
Controlled Access to Unauthenticated Endpoints (enterprise): Gives admins more control over how unauthenticated endpoints in Vault can be accessed and in some cases what information they return. [GH-23547] [GH-23534] [GH-23740]
Custom messages (enterprise): Introduces custom messages settings, allowing users to view, and operators to configure system-wide messages.
Database Event Notifications: The database plugin now emits event notifications. [GH-24718]
Default Lease Count Quota (enterprise): Apply a new global default lease count quota of 300k leases for all
new installs of Vault. [GH-24382]
Experimental Raft-WAL Option: Reduces risk of infinite snapshot loops for follower nodes in large-scale Integrated Storage deployments. [GH-21460]
Manual License Utilization Reporting: Added manual license
utilization reporting, which allows users to create manual exports of product-license [metering
data] to report to Hashicorp.
Plugin Identity Tokens: Adds secret-less configuration of AWS secret engine using web identity federation. [GH-24987]
Plugin Workload Identity (enterprise): Vault can generate identity tokens for plugins to use in workload identity federation auth flows.
Quotas in Privileged Namespaces: Enable creation/update/deletion of quotas from the privileged namespace
Reload seal configuration on SIGHUP: Seal configuration is reloaded on SIGHUP so that seal configuration can
be changed without shutting down vault [GH-23571]
Request Limiter (enterprise): Add adaptive concurrency limits to
write-based HTTP methods and special-case pki/issue requests to prevent
overloading the Vault server. [GH-25093]
Rotate Root for LDAP auth: Rotate root operations are now supported for the LDAP auth engine. [GH-24099]
Seal High Availability (enterprise): Operators can configure more than one automatic seal for resilience against seal provider outages.
Secrets Sync UI (enterprise): Adds secret syncing for KV v2 secrets to external destinations using the UI. [GH-23667]
Vault PKI EST Server (Enterprise/Beta): Beta support for the PKI Enrollment over Secure Transport (EST) certificate management protocol has been added to the Vault PKI Plugin. This allows standard EST clients to request certificates from a Vault server with no knowledge of Vault APIs.
Vault Proxy Static Secret Caching (enterprise): Adds support for static secret (KVv1 and KVv2) caching to Vault Proxy. [GH-23621]
secrets-import (enterprise): Support importing secrets from external sources into KVv2
secrets/aws: Support issuing an STS Session Token directly from 8000 the root credential. [GH-23690]

IMPROVEMENTS:

.release/linux: add LimitCORE=0 to vault.service [GH-23272]
agent/template: Added max_connections_per_host to limit total number of connections per Vault host. [GH-24548]
agent: Added new namespace top level configuration parameter, which can be used to make requests made by Agent to go to that namespace. [GH-24667]
agent: allow users to specify files for child process stdout/stderr [GH-22812]
api (enterprise): Enable the sys/license/features from any namespace
api/plugins: add tls-server-name arg for plugin registration [GH-23549]
api: Add wrapper functions for GET /sys/mounts/:path and GET /sys/auth/:path [GH-25499]
api: Do not require sudo for API wrapper functions GetAuth and GetAuthWithContext [GH-25968]
api: added new API field to Vault responses, mount_type, returning mount information (e.g. kv for KVV1/KVV2) for mount when appropriate. [GH-23047]
api: sys/health and sys/ha-status now expose information about how long
the last heartbeat took, and the estimated clock skew between standby and
active node based on that heartbeat duration. [GH-24343]
auth/cert: Allow validation with OCSP responses with no NextUpdate time [GH-25912]
auth/cert: Cache trusted certs to reduce memory usage and improve performance of logins. [GH-25421]
auth/ldap: introduce cap/ldap.Client for LDAP authentication
auth/ldap: deprecates connection_timeout in favor of request_timeout for timeouts
sdk/ldaputil: deprecates Client in favor of cap/ldap.Client [GH-22185]
auth/saml: Update plugin to v0.2.0
auto-auth/azure: Support setting the authenticate_from_environment variable to "true" and "false" string literals, too. [GH-22996]
cli: introduce new command group hcp which groups subcommands for authentication of users or machines to HCP using
either provided arguments or retrieved HCP token through browser login. [GH-23897]
cli: Improved error messages for vault plugin sub-commands. [GH-24250]
cli: adds plugin identity token to enable and tune commands for secret engines and auth methods [GH-24980]
cli: include secret syncs counts in the vault operator usage command output [GH-25751]
command/server: display logs on startup immediately if disable-gated-logs flag is set [GH-24280]
command/token-capabilities: allow using accessor when listing token capabilities on a path [GH-24479]
core (enterprise): Avoid seal rewrapping in some specific unnecessary cases.
core (enterprise): Improve seal unwrap performance when in degraded mode with one or more unhealthy seals. [GH-25171]
core (enterprise): Speed up unseal when using namespaces
core (enterprise): persist seal rewrap status, so rewrap status API is consistent on secondary nodes.
core/activity: Include secret_syncs in activity log responses [GH-24710]
core/cli: Warning related to VAULT_ADDR & -address not set with CLI requests. [GH-17076]
core/metrics: add metrics for secret sync client count [GH-25713]
core: Added new plugin_tmpdir config option for containerized plugins, in addition to the existing VAULT_PLUGIN_TMPDIR environment variable. [GH-24978]
core: make the best effort timeout for encryption count tracking persistence configurable via an environment variable. [GH-25636]
core: update sys/seal-status (and CLI vault status) to report the type of
the seal when unsealed, as well as the type of the recovery seal if an
auto-seal. [GH-23022]
events: Add support for event subscription plugins, including SQS [GH-24352]
identity/tokens: adds plugin issuer with openid-configuration and keys APIs [GH-24898]
limits: Add a listener configuration option disable_request_limiter to allow
disabling the request limiter per-listener. [GH-25098]
limits: Introduce a reloadable opt-in configuration for the Request Limiter. [GH-25095]
oidc/provider: Adds code_challenge_methods_supported to OpenID Connect Metadata [GH-24979]
plugins: Add new pin version APIs to enforce all plugins of a specific type and name to run the same version. [GH-25105]
plugins: Containerized plugins can be run fully rootless with the runsc runtime. [GH-24236]
plugins: New API sys/plugins/reload/:type/:name available in the root namespace for reloading a specific plugin across all namespaces. [GH-24878]
proxy: Added new namespace top level configuration parameter, and prepend_configured_namespace API Proxy configuration parameter, which can be used to make requests made to Proxy get proxied to that namespace. [GH-24667]
raft/snapshotagent (enterprise): upgrade raft-snapshotagent to v0.0.0-20221104090112-13395acd02c5
replication (enterprise): Add last_upstream_remote_wal metric to telemetry and stop emitting last_remote_wal on standby nodes
replication (enterprise): Add re-index status metric to telemetry
replication: Add re-index status metric to telemetry [GH-23160]
sdk/plugin: Fix an issue where external plugins were not reporting logs below INFO level [GH-23771]
sdk: Add identity token helpers to consistently apply new plugin WIF fields across integrations. [GH-24925]
sdk: adds new method to system view to allow plugins to request identity tokens [GH-24929]
secrets-sync (enterprise): Add ability to turn the sync system on and off
secrets-sync (enterprise): Add reconciliation loop
secrets-sync (enterprise): Added PATCH request on the sync destinations API
secrets-sync (enterprise): Added delete request to reset global config to factory defaults
secrets-sync (enterprise): Added field to define custom tags to add on synced secrets
secrets-sync (enterprise): Added global config path to the administrative namespace.
secrets-sync (enterprise): Added telemetry on number of destinations and associations per type.
secrets-sync (enterprise): Adds ability to set target GCP project ID to sync secrets with
secrets-sync (enterprise): Adjusted associations list responses to be more CLI-friendly
secrets-sync (enterprise): Adjusted destination list responses to be more CLI-friendly & added endpoint to list destinations by type.
secrets-sync (enterprise): Clean up membdb tests
secrets-sync (enterprise): Support AWS IAM assume role and external ID
secrets-sync (enterprise): Support custom GitHub apps
secrets-sync (enterprise): Support custom templating of external secret names
secrets-sync (enterprise): Support granular secrets syncing
secrets-sync (enterprise): add purge field to the destination delete endpoint
secrets/database: Add new reload/:plugin_name API to reload database plugins by name for a specific mount. [GH-24472]
secrets/database: Support reloading named database plugins using the sys/plugins/reload/backend API endpoint. [GH-24512]
secrets/pki: do not check TLS validity on ACME requests redirected to https [GH-22521]
storage/etcd: etcd should only return keys when calling List() [GH-23872]
storage/raft (enterprise): Replication WAL batches may now contain up to 4096
entries rather than being limited to 62 like Consul is. Performance testing
shows improvements in throughput and latency under some write-heavy workloads.
storage/raft: Add support for larger transactions when using raft storage. [GH-24991]
storage/raft: Upgrade to bbolt 1.3.8, along with an extra patch to reduce time scanning large freelist maps. [GH-24010]
sys (enterprise): Enable sys/config/group-application-policy in privileged namespace
sys (enterprise): Adds the chroot_namespace field to this sys/internal/ui/resultant-acl endpoint, which exposes the value of the chroot namespace from the
listener config.
sys: adds configuration of the key used to sign plugin identity tokens during mount enable and tune [GH-24962]
ui: Add deletion_allowed param to transformations and include tokenization as a type option [GH-25436]
ui: Add warning message to the namespace picker warning users about the behavior when logging in with a root token. [GH-23277]
ui: Adds a warning when whitespace is detected in a key of a KV secret [GH-23702]
ui: Adds allowed_response_headers, plugin_version and user_lockout_config params to auth method configuration [GH-25646]
ui: Adds toggle to KV secrets engine value download modal to optionally stringify value in downloaded file [GH-23747]
ui: Allow users in userpass auth mount to update their own password [GH-23797]
ui: Implement Helios Design System Breadcrumbs [GH-24387]
ui: Implement Helios Design System copy button component making copy buttons accessible [GH-22333]
ui: Implement Helios Design System footer component [GH-24191]
ui: Implement Helios Design System pagination component [GH-23169]
ui: Increase base font-size from 14px to 16px and update use of rem vs pixels for size variables [GH-23994]
ui: Makes modals accessible by implementing Helios Design System modal component [GH-23382]
ui: Replace inline confirm alert inside a popup-menu dropdown with confirm alert modal [GH-21520]
ui: Separates out client counts dashboard to overview and entity/non-entity tabs [GH-24752]
ui: Sort list view of entities and aliases alphabetically using the item name [GH-24103]
ui: Surface warning banner if UI has stopped auto-refreshing token [GH-23143]
ui: Update AlertInline component to use Helios Design System Alert component [GH-24299]
ui: Update flat, shell-quote and swagger-ui-dist packages. Remove swagger-ui styling overrides. [GH-23700]
ui: Update mount backend form to use selectable cards [GH-14998]
ui: Update sidebar Secrets engine to title case. [[GH-23964](https://redirect.githu

Configuration

📅 Schedule: Branch creation - "after 5am on sunday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

To execute skipped test pipelines write comment /ok-to-test.

This PR has been generated by MintMaker (powered by Renovate Bot).

openshift-ci · 2025-05-04T14:01:47Z

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: red-hat-konflux[bot]

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

tommyd450 · 2025-05-19T10:46:45Z

/retest

red-hat-konflux · 2025-05-19T14:20:38Z

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

tommyd450 · 2025-05-28T09:43:09Z

/retest

red-hat-konflux bot added the dependencies label May 4, 2025

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from 9a9086b to 17b62a3 Compare May 11, 2025 05:47

chore(deps): update go dependencies

433791c

Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>

red-hat-konflux bot force-pushed the konflux/mintmaker/main/go-deps branch from 17b62a3 to 433791c Compare May 18, 2025 05:21

red-hat-konflux bot changed the title ~~fix(deps): update go dependencies~~ chore(deps): update go dependencies May 18, 2025

tommyd450 added 3 commits May 19, 2025 11:49

Renaming Package

fba1c62

Updating Builder Image

3276dde

Updating to go 1.23.6

e3b0c5f

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore(deps): update go dependencies #261

chore(deps): update go dependencies #261

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

Uh oh!

chore(deps): update go dependencies #261

Are you sure you want to change the base?

chore(deps): update go dependencies #261

Uh oh!

Conversation

Uh oh!

Release Notes

What's Changed

Bug Fixes

Features

Bug Fixes

What's Changed

What's Changed

Release Summary: Add Managed Identity Support

Overview

Key Changes

Code Sample

What's Changed

New Contributors

What's Changed

What's Changed

New Contributors

What's Changed

New Contributors

v1.2.1: Allow nil arguments and catch panics in function calls

v1.1.0: 1.1

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

Changes and fixes

What's Changed

New Contributors

What's Changed

New Contributors

1.16.0

March 26, 2024

Configuration

Uh oh!

Uh oh!

Uh oh!

Edited/Blocked Notification

Uh oh!

Uh oh!

Uh oh!

`v1.2.1`: Allow nil arguments and catch panics in function calls

`v1.1.0`: 1.1