chore: update dependencies by renovate[bot] · Pull Request #10045 · siderolabs/talos

renovate · 2024-12-25T18:50:03Z

ℹ️ Note

This PR body was truncated due to platform limits.

Update Request | Renovate Bot

This PR contains the following updates:

Package	Change	Type	Update
github.com/Azure/azure-sdk-for-go/sdk/azcore	`v1.22.0` → `v1.23.0`	require	minor
github.com/anchore/grype	`v0.116.0` → `v0.117.0`	indirect	minor
github.com/aws/aws-sdk-go-v2	`v1.43.5` → `v1.43.6`	require	patch
github.com/aws/aws-sdk-go-v2	`v1.43.4` → `v1.43.6`	require	patch
github.com/aws/aws-sdk-go-v2/config	`v1.32.36` → `v1.32.37`	require	patch
github.com/aws/aws-sdk-go-v2/config	`v1.32.35` → `v1.32.37`	require	patch
github.com/aws/aws-sdk-go-v2/feature/ec2/imds	`v1.18.35` → `v1.18.37`	require	patch
github.com/aws/aws-sdk-go-v2/feature/s3/transfermanager	`v0.3.12` → `v0.3.13`	require	patch
github.com/aws/aws-sdk-go-v2/service/acm	`v1.43.4` → `v1.44.1`	require	minor
github.com/aws/aws-sdk-go-v2/service/ec2	`v1.321.1` → `v1.321.2`	require	patch
github.com/aws/aws-sdk-go-v2/service/kms	`v1.55.4` → `v1.55.6`	require	patch
github.com/aws/aws-sdk-go-v2/service/s3	`v1.107.1` → `v1.107.2`	require	patch
github.com/aws/smithy-go	`v1.27.7` → `v1.27.8`	require	patch
github.com/cenkalti/backoff/v4	`v4.3.0` → `v7.0.0`	require	major
github.com/containerd/containerd/v2	`v2.3.3` → `v2.3.4`	require	patch
github.com/gdamore/tcell/v2	`v2.13.10` → `v3.4.1`	require	major
github.com/google/go-containerregistry	`v0.21.7` → `v0.21.9`	require	patch
github.com/planetscale/vtprotobuf	`0393e58` → `8ae5a48`	indirect	digest
github.com/siderolabs/siderolink	`v0.3.16` → `v0.3.17`	require	patch
github.com/siderolabs/talos/pkg/machinery	`v1.14.0-beta.1` → `v1.14.0-rc.1`	require	patch
github.com/siderolabs/talos/tools/cloud-image-uploader	`c680852` → `2b03169`	indirect	digest
github.com/siderolabs/talos/tools/docgen	`c680852` → `2b03169`	indirect	digest
github.com/siderolabs/talos/tools/gotagsrewrite	`c680852` → `2b03169`	indirect	digest
github.com/siderolabs/talos/tools/labeled-squashfs	`c680852` → `2b03169`	indirect	digest
github.com/siderolabs/talos/tools/redactgen	`c680852` → `2b03169`	indirect	digest
github.com/siderolabs/talos/tools/sbom-builder	`c680852` → `2b03169`	indirect	digest
github.com/siderolabs/talos/tools/structprotogen	`c680852` → `2b03169`	indirect	digest
github.com/sirupsen/logrus	`v1.9.4` → `v1.10.0`	require	minor
github.com/smira/kobject	`49c8d46` → `19ca174`	replace	digest
github.com/stretchr/testify	`v1.11.1` → `v1.12.0`	require	minor
golang.org/x/vuln	`v1.6.0` → `v1.7.0`	indirect	minor
helm/helm	`v4.2.3` → `v4.2.4`		patch
k8s.io/client-go	`v0.37.0-rc.0` → `v11.0.0+incompatible`	require	major
k8s.io/code-generator	`v0.36.2` → `v0.36.3`	indirect	patch
longhorn (source)	`1.12.0` → `1.12.1`		patch
rook-ceph	`v1.20.3` → `v1.20.4`		patch

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

anchore/grype (github.com/anchore/grype)

`v0.117.0`

Compare Source

Added Features

Include vulnerable ranges in CycloneDX output format [Issue #3512] [PR #3519 @somaz94]

Bug Fixes

honor match.rust.using-cpes configuration [PR #3611 @Dashtid]

Dependencies

11 dependency changes (11 updated). 2 vulnerabilities remediated.

🟢 Remediated (2)

GHSA-hc8v-wwc9-vgxm (High) — github.com/go-git/go-git/v5
GHSA-qgq7-7hm3-q39j (Medium) — github.com/go-git/go-git/v5

Updated (11 packages)

github.com/anchore/syft v1.50.0 → v1.51.0
github.com/diskfs/go-diskfs v1.9.3 → v1.9.4
github.com/gabriel-vasile/mimetype v1.4.13 → v1.4.15
github.com/go-git/go-billy/v5 v5.9.0 → v5.9.1
github.com/go-git/go-git/v5 v5.19.1 → v5.19.2 (🟢 remediated GHSA-hc8v-wwc9-vgxm, GHSA-qgq7-7hm3-q39j)
github.com/klauspost/compress v1.19.0 → v1.19.1
github.com/magiconair/properties v1.8.10 → v1.18.11
github.com/santhosh-tekuri/jsonschema/v6 v6.0.2 → v6.0.3
github.com/ulikunitz/xz v0.5.15 → v0.5.16
go.yaml.in/yaml/v3 v3.0.4 → v3.0.5
modernc.org/sqlite v1.54.0 → v1.55.0

(Full Changelog)

`v0.116.1`

Compare Source

Bug Fixes

Ensure channel parsing is consistent [PR #3603 @wagoodman]
Scope Go GHSA twins by shared CVE [PR #3592 @wagoodman]
do not cache a comparator that failed to build [PR #3567 @arpitjain099]
Add fix date to rhel minor records created from rhsa [PR #3585 @wagoodman]
grype reporting CVE-64091 as critical - redhat says it is not affected [Issue #3591]
panic: index out of range in distro.parseVersion for VERSION_ID=v [Issue #3588] [PR #3589 @matiasinsaurralde]
False Positive: GO-2026-5932 [Issue #3573]

Dependencies

30 dependency changes (30 updated). 1 vulnerability remediated.

🟢 Remediated (1)

GHSA-hrxh-6v49-42gf (High) — google.golang.org/grpc

Updated (30 packages)

github.com/GoogleCloudPlatform/opentelemetry-operations-go/detectors/gcp v1.31.0 → v1.32.0
github.com/anchore/stereoscope v0.2.2 → v0.3.0
github.com/anchore/syft v1.48.0 → v1.50.0
github.com/cncf/xds/go v0.0.0-ee656c7 → v0.0.0-dba9d58
github.com/containerd/containerd/v2 v2.3.2 → v2.3.3
github.com/docker/cli v29.5.3+incompatible → v29.6.1+incompatible
github.com/envoyproxy/go-control-plane/envoy v1.36.0 → v1.37.0
github.com/envoyproxy/protoc-gen-validate v1.3.0 → v1.3.3
github.com/gkampitakis/go-snaps v0.5.22 → v0.5.23
github.com/gpustack/gguf-parser-go v0.24.1 → v0.25.0
github.com/moby/moby/api v1.54.2 → v1.55.0
github.com/moby/moby/client v0.4.1 → v0.5.0
github.com/pelletier/go-toml/v2 v2.3.1 → v2.4.3
go.opentelemetry.io/contrib/detectors/gcp v1.39.0 → v1.43.0
golang.org/x/crypto v0.53.0 → v0.54.0
golang.org/x/mod v0.37.0 → v0.38.0
golang.org/x/net v0.56.0 → v0.57.0
golang.org/x/sync v0.21.0 → v0.22.0
golang.org/x/sys v0.46.0 → v0.47.0
golang.org/x/term v0.44.0 → v0.45.0
golang.org/x/text v0.39.0 → v0.40.0
golang.org/x/tools v0.47.0 → v0.48.0
google.golang.org/genproto/googleapis/api v0.0.0-9d38bb4 → v0.0.0-afd174a
google.golang.org/genproto/googleapis/rpc v0.0.0-6f92a3b → v0.0.0-afd174a
google.golang.org/grpc v1.80.0 → v1.82.1 (🟢 remediated GHSA-hrxh-6v49-42gf)
modernc.org/cc/v4 v4.28.4 → v4.29.0
modernc.org/ccgo/v4 v4.34.4 → v4.34.6
modernc.org/gc/v3 v3.1.3 → v3.1.4
modernc.org/libc v1.73.4 → v1.74.1
modernc.org/sqlite v1.53.0 → v1.54.0

(Full Changelog)

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)

`v1.43.6`

Compare Source

aws/smithy-go (github.com/aws/smithy-go)

`v1.27.8`

Compare Source

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/smithy-go: v1.27.8
- Bug Fix: Restore draining the HTTP response body in CloseResponseBody to avoid issues with TCP connection reuse.

cenkalti/backoff (github.com/cenkalti/backoff/v4)

containerd/containerd (github.com/containerd/containerd/v2)

`v2.3.4`: containerd 2.3.4

Compare Source

Welcome to the v2.3.4 release of containerd!

The fourth patch release for containerd 2.3 contains various fixes and updates.

Highlights

Container Runtime Interface (CRI)

Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#13913)
Set default runtimeFeatures.UserNamespacesHostNetwork to true in CRI (#13914)
Deprecate checkpoint restore in CreateContainer (#13868)
Support non-UTF-8 binary environment variable values in CRI (#13454)
Enable OCI runtime feature introspection for non-runc runtimes in CRI (#13778)
Disable checkpoint restore codepaths when CRIU is not installed and add enable_criu configuration option (#13734)
Normalize sandbox image references in CRI to resolve images without domain prefixes (#13759)

Node Resource Interface (NRI)

Emit deprecation warnings for plugins using deprecated NRI interfaces (#13935)

Runtime

Enable log scrubbing by default on Windows (#13904)
Fix memory leak in OOM watcher map when stopping container monitoring (#13870)
Avoid orphaning shims on transient errors when loading process IDs (#13857)
Fix corruption of binary protobuf shim start responses caused by premature whitespace trimming (#13803)

Snapshotters

Fix EROFS snapshotter dropping lower layers stacked above merged filesystem metadata (#13876)

Breaking

Disable checkpoint restore in CreateContainer by default, requiring the enable_experimental_restore_via_create configuration option to enable (#13913)

Deprecations

Deprecate checkpoint restore in CreateContainer (#13868)

Please try out the release binaries and report any issues at
https://github.com/containerd/containerd/issues.

Contributors

Samuel Karp
Maksym Pavlenko
Mike Brown
Akihiro Suda
Derek McGowan
Jordan Liggitt
Paweł Gronowski
Amir Alavi
Andrew Halaney
Bing Hongtao
Chris Henzie
Harshal Patel
Krisztian Litkey
Phil Estes
Wei Fu
ningmingxiao

Changes

35 commits

c1f5360ef Prepare release notes for v2.3.4
cri: disable restore in CreateContainer by default (#13913)
- 928c03c68 cri: disable restore in CreateContainer by default
nri,deprecation: record and emit warnings for NRI deprecations. (#13935)
- 5966e2edb nri,deprecation: emit warnings for old NRI plugins.
Set the default of runtimeFeatures.UserNamespacesHostNetwork to true (#13914)
- ab52c58f1 Set the default of runtimeFeatures.UserNamespacesHostNetwork to true
Use ScrubLogs by default on Windows (#13904)
- 0c255158a ctr: add --scrub-logs flag for Windows
- 1c2b13dc9 cri/config: use ScrubLogs by default on Windows
snapshots/erofs: keep lowers stacked above a merged fsmeta (#13876)
- 0c511e068 snapshots/erofs: keep lowers stacked above a merged fsmeta
cri: deprecate restore in CreateContainer (#13868)
- dc98141df cri: deprecate restore in CreateContainer
internal/oom: Fix memory leak by removing watcher from map on Stop (#13870)
- 537d82d54 internal/oom: Fix memory leak by removing watcher from map on Stop
shim_load: Consider shim leaked only if we can't find pids (#13857)
- decf97a9c shim_load: Consider shim leaked only if we can't find pids
core/runtime/v2: Drop checkpointctl module dependency (#13840)
- 796f07dc8 core/runtime/v2: Drop checkpointctl module dependency
Handle []byte envvar value for CRI (#13454)
- 751fddddb Handle []byte envvar value
- 0bce9060e update to v0.36.x kubernetes dependencies
fix(cri): introspect OCI runtime features for non-runc runtimes (#13778)
- 61a8f6f45 fix(cri): introspect OCI runtime features for non-runc runtimes
core/runtime/v2: Preserve protobuf shim response bytes (#13803)
- 1d28017be core/runtime/v2: Preserve protobuf shim response bytes
Disable checkpoint restore codepath when CRIU is not installed (#13734)
- 374091d67 github/workflows: install criu in node-e2e
- db03e3968 cri: add enable_criu configuration option
- dacd4c7d0 cri: validate CRIU availability and version early
ci: bound Go fuzzing by execution count (#13785)
- 890a9c86c ci: bound Go fuzzing by execution count
cri: auto-add prefix for pause image (#13759)
- 0b2f1d078 cri: auto-add prefix for pause image

Dependency Changes

k8s.io/api v0.36.0 -> v0.36.3
k8s.io/apimachinery v0.36.0 -> v0.36.3
k8s.io/client-go v0.36.0 -> v0.36.3
k8s.io/component-base v0.36.0 -> v0.36.3
k8s.io/cri-api v0.36.0 -> v0.36.3
k8s.io/cri-client v0.36.0 -> v0.36.3
k8s.io/cri-streaming v0.36.0 -> v0.36.3
sigs.k8s.io/structured-merge-diff/v6 v6.3.2 -> v6.3.3

Previous release can be found at v2.3.3

Which file should I download?

containerd-<VERSION>-<OS>-<ARCH>.tar.gz: ✅Recommended. Dynamically linked with glibc 2.35 (Ubuntu 22.04).
containerd-static-<VERSION>-<OS>-<ARCH>.tar.gz: Statically linked. Expected to be used on Linux distributions that do not use glibc >= 2.35. Not position-independent.

In addition to containerd, typically you will have to install runc
and CNI plugins from their official sites too.

See also the Getting Started documentation.

gdamore/tcell (github.com/gdamore/tcell/v2)

`v3.4.1`: Version 3.4.1 Bug Fix Release

Compare Source

What's Changed

perf: skip grapheme segmentation on identical cell re-Put by @ayn2op in #1114
chore(deps): bump golang.org/x/sys from 0.44.0 to 0.45.0 by @dependabot[bot] in #1117
chore(deps): bump golang.org/x/term from 0.43.0 to 0.44.0 by @dependabot[bot] in #1121
chore(deps): bump golang.org/x/text from 0.37.0 to 0.38.0 by @dependabot[bot] in #1122
chore(deps): bump codecov/codecov-action from 6 to 7 by @dependabot[bot] in #1120
chore(deps): bump actions/checkout from 6 to 7 by @dependabot[bot] in #1126
Preserve Windows key release state by @gdamore in #1128
Fix screen Init/Fini races by @gdamore in #1130
docs: SimulationScreen is removed notice. (fixes #1119) by @gdamore in #1131
chore(deps): bump golang.org/x/term from 0.44.0 to 0.45.0 by @dependabot[bot] in #1135
chore(deps): bump golang.org/x/text from 0.38.0 to 0.40.0 by @dependabot[bot] in #1137
Fix draw spinning forever on a suspended screen by @stefanhaller in #1139
fix(input): decode CSI R as F3 by @kke in #1133
chore(wasm): stop inlining ghostty-vt.wasm in ghostty-web.js by @gdamore in #1140

New Contributors

@kke made their first contribution in #1133

Full Changelog: gdamore/tcell@v3.4.0...v3.4.1

`v3.4.0`: Version 3.4.0 Feature Release

Compare Source

This release has quite a number of bug fixes, but it also introduces some substantial new capabilities.
Mostly the new support for advanced key reporting, along with backing support in the mouse demo, and
enhanced configurability and overrides both for the application and for the user (environment variables).

This also replaces the old WASM terminal with a new version based on the libghostty implementation. This
should be much faster, and nicer to work with, with a larger set of full features such as advanced key reporting,
better support for resizing, etc.

What's Changed

fix: possible panic in getConsoleInput if no event returned by @AntoineGS in #1068
Sanitize titles and notifications (fixes #1066) by @gdamore in #1069
feat: Optionally sanitize content before putting to the terminal (fix… by @gdamore in #1071
feat: Add reporting of keyboard protocol (fixes #967) by @gdamore in #1073
C1 handling improvements by @gdamore in #1074
feat(keys): Add support for advanced key reporting by @gdamore in #1075
feat(wasm): Introduce ghostty-wasm as backing WASM terminal (fixes #7… by @gdamore in #1076
fix: close OSC8 hyperlinks (fixes #1078) by @gdamore in #1080
feat: KeyBacktab updates for advanced mode (fixes #1018) by @gdamore in #1081
feat: support pixel-precision mouse reporting (CSI ?1016h) by @ImGajeed76 in #1077
fix(input): accept Unicode modifyOtherKeys codepoints by @ayn2op in #1083
Fix reporting of key releases by @tihirvon in #1088
chore(deps): bump golang.org/x/term from 0.42.0 to 0.43.0 by @dependabot[bot] in #1085
chore(deps): bump golang.org/x/text from 0.36.0 to 0.37.0 by @dependabot[bot] in #1087
MInor bug fixes by @gdamore in #1097
Preserve orphaned UTF-16 surrogates on Windows by @gdamore in #1104
vt: prune tab stops after resize by @gdamore in #1105
vt: ignore malformed SGR parameters by @gdamore in #1106
Limit inbound control strings by @gdamore in #1107
fix: cells should be marked dirty even if they have no content (fixes… by @gdamore in #1108
fix: lock SetSize screen mutations by @gdamore in #1109
tscreen: prevent terminal mutation after Fini by @gdamore in #1110
Avoid extra keyboard protocols on Windows by @gdamore in #1111
[codex] Fix OSC 8 hyperlink state transitions by @gdamore in #1112

New Contributors

@ImGajeed76 made their first contribution in #1077

Full Changelog: gdamore/tcell@v3.3.0...v3.4.0

`v3.3.0`: Feature Release

Compare Source

What's Changed

chore(deps): bump golang.org/x/term from 0.40.0 to 0.41.0 by @dependabot[bot] in #1040
ci: only run the CI on main and on PRs by @gdamore in #1049
fix(mouse): work around Ghostty false motion press bug by @noborus in #1051
Fix expected bell count in beep_test.go by @wangzhione in #1052
style: unify spelling of OSC in code comments by @CatsDeservePets in #1050
fix(input): handle ESC during CSI and SS3 parse states per ECMA-48 by @ModeEngage in #1053
chore(deps): bump golang.org/x/sys from 0.42.0 to 0.43.0 by @dependabot[bot] in #1056
feat(events): add Unwrap() to EventError by @Tubbles in #1058
chore(deps): bump golang.org/x/text from 0.35.0 to 0.36.0 by @dependabot[bot] in #1055
chore(deps): bump golang.org/x/term from 0.41.0 to 0.42.0 by @dependabot[bot] in #1057
Faster rendering with better grapheme segmentation by @gdamore in #1060
Fix for broken terminal negotiation in Windows by @gdamore in #1063
Sanitize OSC 8 links (fixes #1061) by @gdamore in #1064

New Contributors

@wangzhione made their first contribution in #1052
@CatsDeservePets made their first contribution in #1050
@Tubbles made their first contribution in #1058

Full Changelog: gdamore/tcell@v3.2.0...v3.3.0

`v3.2.0`

Compare Source

`v3.1.2`: Version 3.1.2 Bug Fix Release

Compare Source

The main reason for releasing this is to get out two fixes that were offered up by others.

Infinite loop bug in pasting
Wide characters disappearing at right margin

What's Changed

chore: Move unicode demo into demos by @gdamore in #993
feat(emulator): introduce new buffering API by @gdamore in #994
chore: move color demo to demos, update copyrights for demos by @gdamore in #995
feat(emulator): Implement cursor shapes (DECSCUSR) by @gdamore in #999
chore(deps): bump golang.org/x/term from 0.38.0 to 0.39.0 by @dependabot[bot] in #996
chore(deps): bump golang.org/x/text from 0.32.0 to 0.33.0 by @dependabot[bot] in #997
Add clipboard emulator and update demo for it. by @gdamore in #1000
More osc52 related improvements, new HasClipboard API by @gdamore in #1001
chore: move cursors demo to demos and add test for it by @gdamore in #1002
tests: Add some more test coverage for the clipboard demo. by @gdamore in #1003
feat(emulator): Implement OSC 8 by @gdamore in #1004
tests: More test cases for input parser edge cases by [@gdamore](https://redirect.github.com/gd

✂ Note

PR body was truncated to here.

Configuration

📅 Schedule: (UTC)

Branch creation
- At 12:00 AM through 04:59 AM and 10:00 PM through 11:59 PM, Monday through Friday (* 0-4,22-23 * * 1-5)
- Only on Sunday and Saturday (* * * * 0,6)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2026-08-14T14:01:39Z