From 45ad2876ee994f0bb2db1e2762c4c2c6549cc5e3 Mon Sep 17 00:00:00 2001 From: TrueCharts Bot Date: Thu, 27 Feb 2025 20:09:03 +0100 Subject: [PATCH] =?UTF-8?q?fix(deps):=20update=20module=20github.com/go-gi?= =?UTF-8?q?t/go-git/v5=20v5.13.2=20=E2=86=92=20v5.14.0=20(clustertool)=20(?= =?UTF-8?q?#32661)?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/go-git/go-git/v5](https://redirect.github.com/go-git/go-git) | require | minor | `v5.13.2` -> `v5.14.0` | --- > [!WARNING] > Some dependencies could not be looked up. Check the Dependency Dashboard for more information. --- ### Release Notes
go-git/go-git (github.com/go-git/go-git/v5) ### [`v5.14.0`](https://redirect.github.com/go-git/go-git/releases/tag/v5.14.0) [Compare Source](https://redirect.github.com/go-git/go-git/compare/v5.13.2...v5.14.0) #### What's Changed - v5: Bump Go and dependencies to mitigate [GO-2025-3487](https://pkg.go.dev/vuln/GO-2025-3487) by [@​pjbgf](https://redirect.github.com/pjbgf) in [https://github.com/go-git/go-git/pull/1436](https://redirect.github.com/go-git/go-git/pull/1436) :warning: Note that this version requires Go 1.23, due to the bump to `golang.org/x/crypto@v0.35.0` which mitigates the CVE above. User's that can't bump to Go 1.23 will need to remain on the previous v5.13.x release. **Full Changelog**: https://github.com/go-git/go-git/compare/v5.13.2...v5.14.0
--- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Enabled. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Renovate Bot](https://redirect.github.com/renovatebot/renovate). --- clustertool/go.mod | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/clustertool/go.mod b/clustertool/go.mod index d14aa35ed1c..53da877ffe3 100644 --- a/clustertool/go.mod +++ b/clustertool/go.mod @@ -8,7 +8,7 @@ require ( github.com/beevik/ntp v1.4.3 github.com/budimanjojo/talhelper/v3 v3.0.19 github.com/getsops/sops/v3 v3.9.4 - github.com/go-git/go-git/v5 v5.13.2 + github.com/go-git/go-git/v5 v5.14.0 github.com/go-logr/zerologr v1.2.3 github.com/go-playground/validator/v10 v10.25.0 github.com/invopop/jsonschema v0.13.0