Skip to content

fix(deps): update dependencies (minor) - #115

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-updates
Open

fix(deps): update dependencies (minor)#115
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all-minor-updates

Conversation

@renovate

@renovate renovate Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence Type Update
github.com/ironcore-dev/controller-utils v0.12.0v0.13.0 age confidence require minor
github.com/ironcore-dev/ironcore v0.4.3v0.5.0 age confidence require minor
google/osv-scanner-action v2.3.8v2.5.0 age confidence action minor
osv-scanner v2.4.0v2.5.0 age confidence minor

Release Notes

ironcore-dev/controller-utils (github.com/ironcore-dev/controller-utils)

v0.13.0

Compare Source

Changes

🚀 Features

🧰 Maintenance

ironcore-dev/ironcore (github.com/ironcore-dev/ironcore)

v0.5.0

Compare Source

Changes

⚠️ Breaking

  • Remove the deprecated image field @​Rohit-0505 (#​1498)
    • requires ceph-provider v0.5.0 or higher, if co-deployed

🚀 Features

🐛 Bug Fixes

🧰 Maintenance

google/osv-scanner-action (google/osv-scanner-action)

v2.5.0

Compare Source

This updates OSV-Scanner to v2.5.0 as well as:

What's Changed
New Contributors

Full Changelog: google/osv-scanner-action@v2.3.8...v2.5.0

google/osv-scanner (osv-scanner)

v2.5.0

Compare Source

Features & Refactors:
  • Full OSV-Scalibr pipeline: Migrated scanning, filtering, and matching in osv-scanner to use osv-scalibr end-to-end, so most plugins that's supported in osv-scalibr should be supported via the --experimental-plugins flag (#​2935).

  • New extractors and ecosystem support via osv-scalibr:

    • Add javascript/vsix extractor to support scanning VS Code extension (.vsix) packages.
    • Extend ecosystem mapping for:
      • SUSE
      • Azure Linux / Mariner
      • Alpaquita
      • Mageia
      • openSUSE Leap
      • Debian and Ubuntu PURL
  • PURL Type Resolution: Updated osvscannerjson extractor to map ecosystem names to valid PURL types (golang, gem, cargo, npm, etc.).

Fixes:
  • Bug #​2915 Fix issue where osv-scanner reported already-fixed advisories as unfixed for RHEL-family RPM packages (Red Hat, AlmaLinux, Rocky Linux) with epochs by sending epoch-qualified versions.
  • Fix Python requirements.txt extractor in osv-scalibr, specifically regular expressions used to extract package names and per-requirement options (Fixes #​2940, #​2931)
  • Fix NPM and Composer PURL generation in osv-scalibr, separating package namespace (scope) from package name

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • "before 5am on Monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Enabled.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added ok-to-helm PR is allowed to build an publish helm chart ok-to-image PR is allowed to run container build labels Aug 10, 2026
@renovate
renovate Bot enabled auto-merge August 10, 2026 01:40
@renovate

renovate Bot commented Aug 10, 2026

Copy link
Copy Markdown
Contributor Author

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 14 additional dependencies were updated

Details:

Package Change
k8s.io/api v0.36.2 -> v0.36.3
k8s.io/apimachinery v0.36.2 -> v0.36.3
k8s.io/apiserver v0.36.2 -> v0.36.3
k8s.io/client-go v0.36.2 -> v0.36.3
k8s.io/code-generator v0.36.2 -> v0.36.3
k8s.io/component-base v0.36.2 -> v0.36.3
github.com/go-logr/logr v1.4.3 -> v1.4.4
github.com/google/cel-go v0.27.0 -> v0.29.0
golang.org/x/sync v0.21.0 -> v0.22.0
golang.org/x/sys v0.46.0 -> v0.47.0
google.golang.org/grpc v1.82.0 -> v1.82.1
k8s.io/apiextensions-apiserver v0.36.0 -> v0.36.3
k8s.io/kms v0.36.2 -> v0.36.3
k8s.io/streaming v0.36.2 -> v0.36.3

@coveralls

coveralls commented Aug 10, 2026

Copy link
Copy Markdown

Coverage Report for CI Build 31376574336

Coverage remained the same at 27.101%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 476
Covered Lines: 129
Line Coverage: 27.1%
Coverage Strength: 0.72 hits per line

💛 - Coveralls

@renovate
renovate Bot force-pushed the renovate/all-minor-updates branch from 5c405d9 to ff7a599 Compare August 10, 2026 09:51
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ok-to-helm PR is allowed to build an publish helm chart ok-to-image PR is allowed to run container build

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants