chore(deps): Bump the production-dependencies group across 1 directory with 35 updates

[dependabot]

Bumps the production-dependencies group with 18 updates in the / directory:

Package	From	To
github.com/tektoncd/pipeline	0.61.1	0.63.0
k8s.io/apimachinery	0.30.3	0.31.1
kubevirt.io/api	1.3.0	1.3.1
kubevirt.io/client-go	1.3.0	1.3.1
kubevirt.io/containerized-data-importer	1.59.0	1.60.3
kubevirt.io/kubevirt	1.3.0	1.3.1
cloud.google.com/go/iam	1.1.11	1.2.1
github.com/docker/cli	27.1.1+incompatible	27.3.0+incompatible
github.com/go-jose/go-jose/v4	4.0.3	4.0.4
github.com/google/cel-go	0.20.1	0.21.0
github.com/google/go-containerregistry	0.20.1	0.20.2
github.com/grpc-ecosystem/grpc-gateway/v2	2.20.0	2.22.0
github.com/k8snetworkplumbingwg/network-attachment-definition-client	1.7.0	1.7.3
github.com/prometheus/client_golang	1.19.1	1.20.4
github.com/prometheus/common	0.55.0	0.59.1
github.com/prometheus/statsd_exporter	0.26.1	0.27.1
github.com/sigstore/sigstore	1.8.7	1.8.9
golang.org/x/tools	0.23.0	0.25.0

Updates github.com/tektoncd/pipeline from 0.61.1 to 0.63.0

Release notes

Sourced from github.com/tektoncd/pipeline's releases.

Tekton Pipeline release v0.63.0 "Abyssinian K-9"

-Docs @ v0.63.0 -Examples @ v0.63.0

Installation one-liner

kubectl apply -f https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.63.0/release.yaml

Attestation

The Rekor UUID for this release is 108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e

Obtain the attestation:

REKOR_UUID=108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e
rekor-cli get --uuid $REKOR_UUID --format json | jq -r .Attestation | jq .

Verify that all container images in the attestation are in the release file:

RELEASE_FILE=https://storage.googleapis.com/tekton-releases/pipeline/previous/v0.63.0/release.yaml
REKOR_UUID=108e9186e8c5677a41806e924e8c5d6a3c1e083f8c35950f0d1af7e0e6a4c0712a2eb4bf92e9538e
Obtains the list of images with sha from the attestation
REKOR_ATTESTATION_IMAGES=$(rekor-cli get --uuid "$REKOR_UUID" --format json | jq -r .Attestation | jq -r '.subject[]|.name + ":v0.63.0@sha256:" + .digest.sha256')
Download the release file
curl "$RELEASE_FILE" > release.yaml
For each image in the attestation, match it to the release file
for image in $REKOR_ATTESTATION_IMAGES; do
printf $image; grep -q $image release.yaml && echo " ===> ok" || echo " ===> no match";
done

Changes

Features

• ✨ cluster-reslover: add support for StepAction (#8199)

... (truncated)

Changelog

Sourced from github.com/tektoncd/pipeline's changelog.

Tekton Pipeline Releases

Release Frequency

Tekton Pipelines follows the Tekton community [release policy][release-policy] as follows:

• Versions are numbered according to semantic versioning: vX.Y.Z
• A new release is produced on a monthly basis
• Four releases a year are chosen for long term support (LTS). All remaining releases are supported for approximately 1 month (until the next release is produced)
  • LTS releases take place in January, April, July and October every year
  • The first Tekton Pipelines LTS release will be v0.41.0 in October 2022
  • Releases happen towards the middle of the month, between the 13th and the 20th, depending on week-ends and readiness

Tekton Pipelines produces nightly builds, publicly available on gcr.io/tekton-nightly.

Transition Process

Before release v0.41 Tekton Pipelines has worked on the basis of an undocumented support period of four months, which will be maintained for the releases between v0.37 and v0.40.

Release Process

Tekton Pipeline releases are made of YAML manifests and container images. Manifests are published to cloud object-storage as well as [GitHub][tekton-pipeline-releases]. Container images are signed by [Sigstore][sigstore] via [Tekton Chains][tekton-chains]; signatures can be verified through the [public key][chains-public-key] hosted by the Tekton Chains project.

Further documentation available:

• The Tekton Pipeline [release process][tekton-releases-docs]
• [Installing Tekton][tekton-installation]
• Standard for [release notes][release-notes-standards]

Release

v0.63

• Latest Release: [v0.63.0][v0.63-0] (2024-08-30) ([docs][v0.63-0-docs], [examples][v0.63-0-examples])
• Initial Release: [v0.63.0][v0.63-0] (2024-08-30)
• End of Life: 2024-09-30
• Patch Releases: [v0.63.0][v0.63-0]

v0.62 (LTS)

... (truncated)

Commits

• c910594 Fix Artifact type to a pointer
• a3bd23e build(deps): bump tj-actions/changed-files from 44.5.7 to 45.0.0
• 504bdc8 Add UID label to PipelineRun and TaskRun
• 78d1f11 Fixing linting issue with updates…
• 1c0367d build(deps): bump github.com/golangci/golangci-lint in /tools
• b4e8652 fix(taskrun): resolve issue with TaskRun not failing promptly after Pod OOM
• 7ba0b3b build(deps): bump github.com/docker/docker
• 4f04964 TEP-0097 breakpoint before steps for taskrun
• c6c33e0 docs: fix links to Matrix examples
• 086e4d6 apply default-container-resource-requirements before LimitRange transformer
• Additional commits viewable in compare view

Updates k8s.io/apimachinery from 0.30.3 to 0.31.1

Commits

• a8f449e Falls back to SPDY for gorilla/websocket https proxy error
• 62791ec Merge pull request #125571 from liggitt/filter-auth-02-sar
• cc2ba35 add field and label selectors to authorization attributes
• ce76a8f generate
• 35052c5 add subjectaccessreview field and label selectors
• ab06869 Merge pull request #126105 from benluddy/cbor-framer
• 429f4e4 Implement runtime.Framer for CBOR Sequences.
• d7e1c53 Merge pull request #126018 from aroradaman/bump-k8s-utils
• 07cb122 Merge pull request #125748 from benluddy/cbor-custom-marshalers
• dd17456 bump k8s.io/utils
• Additional commits viewable in compare view

Updates kubevirt.io/api from 1.3.0 to 1.3.1

Commits

• 4eb2693 api update by KubeVirt Prow build 1826539953216032768
• 9d6ee0e api update by KubeVirt Prow build 1826294852254437376
• 0d0c046 api update by KubeVirt Prow build 1821543908778184704
• 40aea84 api update by KubeVirt Prow build 1819295154511548416
• 4c4d6b6 api update by KubeVirt Prow build 1818954032295710720
• See full diff in compare view

Updates kubevirt.io/client-go from 1.3.0 to 1.3.1

Commits

• 877704f client-go update by KubeVirt Prow build 1826539953216032768
• f09898f client-go update by KubeVirt Prow build 1826294852254437376
• adc25c2 client-go update by KubeVirt Prow build 1821543908778184704
• 9af7fa4 client-go update by KubeVirt Prow build 1819295154511548416
• 664135b client-go update by KubeVirt Prow build 1818954032295710720
• See full diff in compare view

Updates kubevirt.io/containerized-data-importer from 1.59.0 to 1.60.3

Release notes

Sourced from kubevirt.io/containerized-data-importer's releases.

v1.60.3

This release follows v1.60.2 and consists of 5 changes, contributed by 2 people, leading to 23 files changed, 131 insertions(+), 30 deletions(-).

The source code and selected binaries are available for download at: https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.3.

Pre-built CDI containers are published on Quay.io and can be viewed at: https://quay.io/repository/kubevirt/cdi-controller/ https://quay.io/repository/kubevirt/cdi-importer/ https://quay.io/repository/kubevirt/cdi-cloner/ https://quay.io/repository/kubevirt/cdi-uploadproxy/ https://quay.io/repository/kubevirt/cdi-apiserver/ https://quay.io/repository/kubevirt/cdi-uploadserver/ https://quay.io/repository/kubevirt/cdi-operator/

Notable changes

BugFix: Fix PVC deletion logic in CDI populators BugFix: Increased size of scratch space to take fs overhead into account

Contributors

2 people contributed to this release:

     3	kubevirt-bot <[email protected]>
     2	Alex Kalenyuk <[email protected]>

Additional Resources

• Mailing list: https://groups.google.com/forum/#!forum/kubevirt-dev
• How to contribute
• License

v1.60.2

This release follows v1.60.1 and consists of 2 changes, contributed by 2 people, leading to 5 files changed, 80 insertions(+), 20 deletions(-).

The source code and selected binaries are available for download at: https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.2.

Pre-built CDI containers are published on Quay.io and can be viewed at: https://quay.io/repository/kubevirt/cdi-controller/

... (truncated)

Changelog

Sourced from kubevirt.io/containerized-data-importer's changelog.

v1.60.3 BugFix: Fix PVC deletion logic in CDI populators BugFix: Increased size of scratch space to take fs overhead into account

Commits

• c855e2e v1.60.3 release notes
• 905d9d8 Bump builder (#3427)
• 8c58c93 Make bazel binary world executable (#3425)
• 8b6a47c [release-v1.60] Ensure scratch space is large enough to hold disk image (#3421)
• 57f5c88 [release-v1.60] Fix PVC deletion logic in populators (#3415)
• f5138c8 v1.60.2 release notes
• fc6f48e [release-v1.60] VDDK: pass snapshot ID through to nbdkit. (#3400)
• c186264 fix post submit issue in order to release properly
• b375def v1.60.0 release notes
• d68f59e remove gradle dep when running gen-swagger-docs.sh (#3390)
• Additional commits viewable in compare view

Updates kubevirt.io/containerized-data-importer-api from 1.59.0 to 1.60.3

Release notes

Sourced from kubevirt.io/containerized-data-importer-api's releases.

v1.60.3

This release follows v1.60.2 and consists of 5 changes, contributed by 2 people, leading to 23 files changed, 131 insertions(+), 30 deletions(-).

The source code and selected binaries are available for download at: https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.3.

Pre-built CDI containers are published on Quay.io and can be viewed at: https://quay.io/repository/kubevirt/cdi-controller/ https://quay.io/repository/kubevirt/cdi-importer/ https://quay.io/repository/kubevirt/cdi-cloner/ https://quay.io/repository/kubevirt/cdi-uploadproxy/ https://quay.io/repository/kubevirt/cdi-apiserver/ https://quay.io/repository/kubevirt/cdi-uploadserver/ https://quay.io/repository/kubevirt/cdi-operator/

Notable changes

BugFix: Fix PVC deletion logic in CDI populators BugFix: Increased size of scratch space to take fs overhead into account

Contributors

2 people contributed to this release:

     3	kubevirt-bot <[email protected]>
     2	Alex Kalenyuk <[email protected]>

Additional Resources

• Mailing list: https://groups.google.com/forum/#!forum/kubevirt-dev
• How to contribute
• License

v1.60.2

This release follows v1.60.1 and consists of 2 changes, contributed by 2 people, leading to 5 files changed, 80 insertions(+), 20 deletions(-).

The source code and selected binaries are available for download at: https://github.com/kubevirt/containerized-data-importer/releases/tag/v1.60.2.

Pre-built CDI containers are published on Quay.io and can be viewed at: https://quay.io/repository/kubevirt/cdi-controller/

... (truncated)

Changelog

Sourced from kubevirt.io/containerized-data-importer-api's changelog.

v1.60.3 BugFix: Fix PVC deletion logic in CDI populators BugFix: Increased size of scratch space to take fs overhead into account

Commits

• c855e2e v1.60.3 release notes
• 905d9d8 Bump builder (#3427)
• 8c58c93 Make bazel binary world executable (#3425)
• 8b6a47c [release-v1.60] Ensure scratch space is large enough to hold disk image (#3421)
• 57f5c88 [release-v1.60] Fix PVC deletion logic in populators (#3415)
• f5138c8 v1.60.2 release notes
• fc6f48e [release-v1.60] VDDK: pass snapshot ID through to nbdkit. (#3400)
• c186264 fix post submit issue in order to release properly
• b375def v1.60.0 release notes
• d68f59e remove gradle dep when running gen-swagger-docs.sh (#3390)
• Additional commits viewable in compare view

Updates kubevirt.io/kubevirt from 1.3.0 to 1.3.1

Release notes

Sourced from kubevirt.io/kubevirt's releases.

v1.3.1

tag v1.3.1 Tagger: Antonio Cardace [email protected]

This release follows v1.3.0 and consists of 80 changes, contributed by 17 people, leading to 144 files changed, 24248 insertions(+), 479 deletions(-).

The source code and selected binaries are available for download at: https://github.com/kubevirt/kubevirt/releases/tag/v1.3.1.

The primary release artifact of KubeVirt is the git tree. The release tag is signed and can be verified using git tag -v v1.3.1.

Pre-built containers are published on Quay and can be viewed at: https://quay.io/kubevirt/.

Notable changes

• [PR #12646][kubevirt-bot] BugFix: "Cannot allocate memory" warnings for containerdisk VMs
• [PR #12555][kubevirt-bot] VM supports kubevirt.io/immediate-data-volume-creation: "false" which delays creating DataVolumeTemplates until VM is started
• [PR #12549][kubevirt-bot] Updated common-instancetypes bundles to v1.1.0
• [PR #12495][fossedihelm] Fix: eviction requests to completed virt-launcher pods cannot trigger a live migration
• [PR #12409][kubevirt-bot] Use optional interface at passt binding sidecar
• [PR #12319][Sreeja1725] Add v1.3.0 perf and scale benchmarks data
• [PR #12330][kubevirt-bot] Fix wrong KubeVirtVMIExcessiveMigrations alert calculation in an upgrade scenario.
• [PR #12328][acardace] enable only for VMs with memory >= 1Gi
• [PR #12272][Sreeja1725] Add unit tests to check for API backward compatibility

Contributors

17 people contributed to this release:

6 Alice Frosi [email protected] 5 Alvaro Romero [email protected] 5 Lee Yarwood [email protected] 4 Antonio Cardace [email protected] 4 Assaf Admi [email protected] 4 Michael Henriksen [email protected] 3 Alex Kalenyuk [email protected] 3 Brian Carey [email protected] 3 Luboslav Pivarc [email protected] 3 fossedihelm [email protected] 3 svarnam [email protected] 1 Enrique Llorente [email protected] 1 Felix Matouschek [email protected] 1 Igor Bezukh [email protected] 1 Oren Cohen [email protected]

Additional Resources

• Mailing list: https://groups.google.com/forum/#!forum/kubevirt-dev
• Slack: https://kubernetes.slack.com/messages/virtualization

... (truncated)

Commits

• ed1e7ae Merge pull request #12646 from kubevirt-bot/cherry-pick-12638-to-release-1.3
• 50997e2 Merge pull request #12555 from kubevirt-bot/cherry-pick-12194-to-release-1.3
• 41c2b6a Remove handler cgroup pkg dep in virt-chroot
• 44b73d3 Merge pull request #12626 from kubevirt-bot/cherry-pick-12580-to-release-1.3
• 12a90fe Merge pull request #12604 from brianmcarey/backport-1.3-12552
• d7454cc Merge pull request #12576 from kubevirt-bot/cherry-pick-12507-to-release-1.3
• 2463706 volume migration tests: adjust workdir path to absolute
• c3a2b58 build: Add updated builder image with gradle removed
• 1f8c489 apidocs: remove gradle build and properties files
• 2c3ccbc apidocs: Switch to using swaggermarkup-cli and remove gradle dependency
• Additional commits viewable in compare view

Updates cloud.google.com/go/iam from 1.1.11 to 1.2.1

Release notes

Sourced from cloud.google.com/go/iam's releases.

iam: v1.2.1

1.2.1 (2024-09-12)

Bug Fixes

• iam: Bump dependencies (2ddeb15)

securesourcemanager: v1.2.1

1.2.1 (2024-09-12)

Bug Fixes

• securesourcemanager: Bump dependencies (2ddeb15)

cloudcontrolspartner: v1.2.0

1.2.0 (2024-09-19)

Features

• cloudcontrolspartner: A new value ACCESS_TRANSPARENCY_LOGS_SUPPORT_CASE_VIEWER is added to enum .google.cloud.cloudcontrolspartner.v1.PartnerPermissions.Permission (9efa812)
• cloudcontrolspartner: A new value ACCESS_TRANSPARENCY_LOGS_SUPPORT_CASE_VIEWER is added to enum .google.cloud.cloudcontrolspartner.v1beta.PartnerPermissions.Permission (9efa812)
• cloudcontrolspartner: Field behavior for field customer_onboarding_state in message .google.cloud.cloudcontrolspartner.v1.Customer is changed (9efa812)
• cloudcontrolspartner: Field behavior for field customer_onboarding_state in message .google.cloud.cloudcontrolspartner.v1beta.Customer is changed (9efa812)
• cloudcontrolspartner: Field behavior for field is_onboarded in message .google.cloud.cloudcontrolspartner.v1.Customer is changed (9efa812)
• cloudcontrolspartner: Field behavior for field is_onboarded in message .google.cloud.cloudcontrolspartner.v1beta.Customer is changed (9efa812)

Bug Fixes

• cloudcontrolspartner: Field behavior for field display_name in message .google.cloud.cloudcontrolspartner.v1.Customer is changed (9efa812)
• cloudcontrolspartner: Field behavior for field display_name in message .google.cloud.cloudcontrolspartner.v1beta.Customer is changed (#10865) (9efa812)

Documentation

• cloudcontrolspartner: A comment for field display_name in message .google.cloud.cloudcontrolspartner.v1.Customer is changed (9efa812)
• cloudcontrolspartner: A comment for field display_name in message .google.cloud.cloudcontrolspartner.v1beta.Customer is changed (9efa812)

Commits

• e992f09 chore: release main (#10792)
• 22adc9a chore(main): release firestore 1.17.0 (#10597)
• e9a551e feat(firestore): Adding distance threshold and result field (#10802)
• 839f30e chore(main): release auth 0.9.4 (#10846)
• b9dfce5 chore: update gapic-generator-go to 0.47.0 (#10848)
• 9b4b2fa docs(pubsub): update documentation for 31 day subscription message retention ...
• 2bdedef fix(compute/metadata): check error chain for retryable error (#10840)
• 2d5a9f9 feat(dataproc): add support for new Dataproc features (#10817)
• f9869f7 fix(auth): enable self-signed JWT for non-GDU universe domain (#10831)
• 6720291 chore(main): release bigtable 1.32.0 (#10815)
• Additional commits viewable in compare view

Updates cloud.google.com/go/kms from 1.18.3 to 1.19.0

Release notes

Sourced from cloud.google.com/go/kms's releases.

dlp: v1.19.0

1.19.0 (2024-09-19)

Features

• dlp: Action for publishing data profiles to SecOps (formelly known as Chronicle) (#10884) (fdb4ea9)
• dlp: Action for publishing data profiles to Security Command Center (fdb4ea9)
• dlp: Discovery configs for AWS S3 buckets (fdb4ea9)

Documentation

• dlp: Small improvements and clarifications (fdb4ea9)

Changelog

Sourced from cloud.google.com/go/kms's changelog.

1.19.0 (2023-05-30)

Features

• documentai: Update all direct dependencies (b340d03)

1.18.1 (2023-05-08)

Bug Fixes

• documentai: Update grpc to v1.55.0 (1147ce0)

1.18.0 (2023-03-22)

Features

• documentai: Add ImportProcessorVersion in v1beta3 (c967961)

1.17.0 (2023-03-15)

Features

• documentai: Added hints.language_hints field in OcrConfig (#7522) (b2c40c3)

1.16.0 (2023-02-22)

Features

• documentai: ROLLBACK (#7439) (932ddc8)

1.15.0 (2023-02-14)

⚠ BREAKING CHANGES

• documentai: The TrainProcessorVersion parent was incorrectly annotated.

Features

• documentai: Add REST client (06a54a1)
• documentai: Added advanced_ocr_options field in OcrConfig (45c70e3)
• documentai: Added EvaluationReference to evaluation.proto (#7290) (4623db8)
• documentai: Added field_mask field in DocumentOutputConfig.GcsOutputConfig in document_io.proto (2a0b1ae)
• documentai: Added font_family to document.proto feat: added ImageQualityScores message to document.proto feat: added PropertyMetadata and EntityTypeMetadata to document_schema.proto (9c5d6c8)
• documentai: Added TrainProcessorVersion, EvaluateProcessorVersion, GetEvaluation, and ListEvaluations v1beta3 APIs feat: added evaluation.proto feat: added document_schema field in ProcessorVersion processor.proto feat: added image_quality_scores field in Document.Page in document.proto feat: added font_family field in Document.Style in document.proto (ac0c5c2)

... (truncated)

Commits

• f5833e6 chore: release main (#10690)
• 6692abb chore(all): update deps (#10705)
• 0130d06 chore(datastore): add owlbot config for protos (#10708)
• e265371 feat(apihub): new clients (#10713)
• 84461c0 docs(batch): clarify tasks success criteria for background runnable (#10702)
• 4c519e3 fix(spanner): json null handling (#10660)
• 95ae207 chore(main): release pubsub 1.42.0 (#10656)
• bbd3366 feat(pubsub): add opentelemetry tracing support (#10709)
• 106174a chore(apihub): add config to generate apiv1 (#10701)
• 2b7a912 chore(main): release auth 0.9.0 (#10693)
• Additional commits viewable in compare view

Updates github.com/docker/cli from 27.1.1+incompatible to 27.3.0+incompatible

Commits

• e85edf8 Merge pull request #5452 from laurazard/27.3.0-match-moby-version
• ca62759 vendor: github.com/docker/docker v27.3.0-rc2
• e4dc9d2 Merge pull request #5448 from laurazard/backport-otel-shutdown-errors
• ddf8f23 Merge pull request #5449 from laurazard/backport-lowercase-windows-drive
• c6dde25 command: change drive to lowercase for wsl path
• fcf6dd0 Merge pull request #5447 from thaJeztah/27.x_backport_codeql_updates
• 4b5a196 telemetry: pass otel errors to the otel handler for shutdown and force flush
• e2eb069 gha: update codeql workflow to go1.22.7
• 58a14cc Merge pull request #5443 from laurazard/backport-container-rm-docs
• 81ca58b docs: Fix --rm=false flag in container_run.md
• Additional commits viewable in compare view

Updates github.com/go-jose/go-jose/v4 from 4.0.3 to 4.0.4

Release notes

Sourced from github.com/go-jose/go-jose/v4's releases.

Version 4.0.4

Fixed

• Reverted "Allow unmarshalling JSONWebKeySets with unsupported key types" as a breaking change. See #136 / #137.

Changelog

Sourced from github.com/go-jose/go-jose/v4's changelog.

v4.0.4

Fixed

• Reverted "Allow unmarshalling JSONWebKeySets with unsupported key types" as a breaking change. See #136 / #137.

Commits

• 15bc4c2 Update CHANGELOG for 4.0.4 (#138)
• f3534ca Revert #130: JSONWebKeySet: ignore unsupported key types (#137)
• ebaac64 Remove unused JWK error type (#135)
• See full diff in compare view

Updates github.com/google/cel-go from 0.20.1 to 0.21.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.21.0

Features

• Math extensions update to include bitwise ops and floating point helpers #923
• Better support custom types with custom type registries #931
• repl: implement %parse #933
• Fixed partial variables extended bug and split PartialVarsEnvExtended test into two #955
• Added partial evaluations example #959
• Enable conformance tests for extensions #930
• Update cel-spec and enable optional_type conformance tests #919
• Improve token representation in AST #932
• Add function accessor to Env #978

CEL Policy Compiler

Policies which use CEL often evolve to express complex logic using multiple statements and decision criteria. The CEL Policy Compiler provides an extensible format for parsing, compiling, and composing expression graphs. Below is a simple example which can easily be compiled to a single CEL expression.

name: "my-policy"
rule:
  variables:
    - name: greeting
      expression: "'%s, %s!'"
    - name: people
      expression: >
       ['Tristan', 'Calla', 'Antoine', 'Jonathan', 'Sokwhan', 'Rebecca']
  match:
    - condition: "request.user in variables.people"
      output: "variables.greeting.format(['hello', request.user])"
    - output: "variables.greeting.format(['goodbye', 'stranger'])"

• Simple Policy Compiler #924
• Introduce protobuf message testing to policies #961
• Generate policy explanations during compilation #977
• Variable and nested rule limits #989
• Improved support for nested rules #991]

Fixes

• Delete dangling source info from macro expansion #934
• Do not re-use ID twice in exists_one macro #935
• Avoid iterating over the source multiple times during parse #936
• Fix for working with byte arrays by #958
• Stabilize macro id generation during optimization #962
• String formatting panic fix for non-literal format strings #987
• Add nil checking for wrapperspb's types #960

... (truncated)

Commits

• 3545aac Improved support for nested rules (#991)
• 5bcdb8b Check for output type agreement during the compile phase (#992)
• 1f51886 Use bytes interface value for zero native type struct fields instead of dynam...
• c9164bc Variable and nested rule limits (#989)
• 5cbef66 Prevent self-append for Issues (#988)
• 25457de Add nil checking for wrapperspb's types (#960)
• badfce0 Fix panic in formatting string for non-literal formats (#987)
• 9e64eb7 Decompose the compile and compose methods (#986)
• 37d5b96 Add a function to return a policy whose output is the explanation. (#977)
• bc96f3b Fix math.bitShiftRight for negative int (#983)
• Additional commits viewable in compare view

Updates github.com/google/go-containerregistry from 0.20.1 to 0.20.2

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.2

What's Changed

• deps: bump docker dep by @​imjasonh in google/go-containerregistry#1991

Full Changelog: google/go-containerregistry@v0.20.1...v0.20.2

Commits

• c195f15 deps: bump docker dep (#1991)
• See full diff in compare view

Updates github.com/google/pprof from 0.0.0-20240424215950-a892ee059fd6 to 0.0.0-20240525223248-4bfdf5a9a2af

Commits

• See full diff in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.20.0 to 2.22.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.22.0

What's Changed

• docs: add example to fully override http responses by @​nguyentranbao-ct in grpc-ecosystem/grpc-gateway#4564
• stop printing error logs in handleForwardResponseOptions by @​taichimaeda in grpc-ecosystem/grpc-gateway#4594
• Add some documenation for CustomQueryParser with examples by @​texzone in grpc-ecosystem/grpc-gateway#4602
• Fix #4614 Unique Items placement by @​sebaraj in grpc-ecosystem/grpc-gateway#4619
• all: fix test lint warnings by @​johanbrandhorst in grpc-ecosystem/grpc-gateway#4632
• ci: update go versions supported by @​johanbrandhorst in grpc-ecosystem/grpc-gateway#4634
• feat: Add WithForwardResponseRewriter to allow easier/more useful response control by @​nkcmr in grpc-ecosystem/grpc-gateway#4622

New Contributors

• @​nguyentranbao-ct made their first contribution in grpc-ecosystem/grpc-gateway#4564
• @​taichimaeda made their first contribution in grpc-ecosystem/grpc-gateway#4594
• @​texzone made their first contribution in grpc-ecosystem/grpc-gateway#4602
• @​sebaraj made their first contribution in grpc-ecosystem/grpc-gateway#4619
• @​nkcmr made their first contribution in grpc-ecosystem/grpc-gateway#4622

Full Changelog: grpc-ecosystem/grpc-gateway@v2.21.0...v2.22.0

v2.21.0

What's Changed

• feat: Use version info from runtime/debug:BuildInfo when installed by go build by @​MakDon in grpc-ecosystem/grpc-gateway#4359
• feat: add mux middlewares and inject http pattern by @​nikitaksv in grpc-ecosystem/grpc-gateway#4290
• Fixes #3917: Add package openapi naming strategy. by @​jgiles in grpc-ecosystem/grpc-gateway#4372
• feat: use buildInfo.Main.Version as version when installed by go install by @​MakDon in grpc-ecosystem/grpc-gateway#4390
• Add support for method's deprecated option by

[kubevirt-bot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign ksimon1 for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by: dependabot[bot]
Once this PR has been reviewed and has the lgtm label, please assign ksimon1 for approval. For more information see the Kubernetes Code Review Process.

The full list of commands accepted by this bot can be found here.

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/unit-tests	1ab21a6	link	true	/test unit-tests
ci/prow/images	1ab21a6	link	true	/test images
ci/prow/e2e-tests	1ab21a6	link	true	/test e2e-tests

Full PR test history. Your PR dashboard.

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.