Skip to content

chore(deps): bump the security group with 8 updates #1770

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 1 commit into from
Apr 8, 2025
Merged

chore(deps): bump the security group with 8 updates #1770

merged 1 commit into from
Apr 8, 2025

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 8, 2025

Bumps the security group with 8 updates:

Package From To
github.com/cilium/ebpf 0.17.3 0.18.0
github.com/go-sql-driver/mysql 1.9.1 1.9.2
github.com/miekg/dns 1.1.64 1.1.65
github.com/shirou/gopsutil/v4 4.25.2 4.25.3
golang.org/x/sync 0.12.0 0.13.0
golang.org/x/net 0.38.0 0.39.0
golang.org/x/sys 0.31.0 0.32.0
golang.org/x/text 0.23.0 0.24.0

Updates github.com/cilium/ebpf from 0.17.3 to 0.18.0

Release notes

Sourced from github.com/cilium/ebpf's releases.

v0.18.0

Initial Windows Support

This release adds support for eBPF on Windows through the eBPF for Windows runtime. Users must run a recent build of the main branch of eBPF for Windows, version 0.20.0 is not supported.

See the documentation and how to contribute to the Windows port.

Supported:

  • Basic map and program operations
  • Support for program loading, including native images (.sys files)
  • Pin operations use Windows-specific global object table instead of bpffs
  • Support for retrieving program/attach type from GUID

Not supported:

  • Feature tests
  • BTF
  • bpf2go
  • perf
  • ringbuf
  • rlimit
  • pin
  • Reading Windows ELFs

The Windows port is still very new and won't be as performant or stable as the Linux part of the code base. There is also no guarantee of stability at the moment.

Build System Improvements

  • Mounting GOCACHE and GOMODCACHE into containers for faster rebuilds with Podman
  • Added -verbose flag to bpf2go and gentypes tools
  • Verbosity defaults to Make's V= environment variable

Documentation

  • Added Windows user-facing documentation
  • Added instructions for working on the Windows port

Bugfixes

  • prog: Fixed program loading loop that would run forever if log size was over kernel maximum
  • prog: Added limits to program load retry attempts
  • collection: Fixed missing Map.Close in collectionLoader.loadMap
  • memory: Fixed off-by-one error in bounds check that prevented accessing the last byte of memory segments
  • map, program: Names passed to kernel are now automatically sanitized

Breaking Changes

ebpf:

  • Unexported SanitizeName function. Map and program names are now automatically sanitized.
  • The ELF reader now always allows dots in names but will strip them if necessary when making syscalls. This will break users with pinned objects that have dots in their names on kernels which don't support dots.

... (truncated)

Commits
  • e3234a1 golangci-lint: ignore QF1010 (convert byte slices to strings before printing)
  • 4d8e31a link: lowercase error strings to satisfy staticcheck
  • e2c5471 link: kprobe_test: satisfy staticcheck QF1001 (not A and not B)
  • 9f64b89 kallsyms: return from parseSymbol() after third field
  • e031491 *: remove references to embedded fields
  • 279fdf9 docs: replace main() with init() in rlimit example
  • d41cdc2 build(deps): bump golangci/golangci-lint-action from 6.5.0 to 7.0.0
  • 2e72b41 golangci-lint: convert configuration to v2
  • f6a5ebd map, program: always sanitize names passed to the kernel
  • 7b8cc32 cmd/bpf2go: add -verbose flag, hide output by default
  • Additional commits viewable in compare view

Updates github.com/go-sql-driver/mysql from 1.9.1 to 1.9.2

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.9.2

What's Changed

v1.9.2 is a re-release of v1.9.1 due to a release process issue; no changes were made to the content.

Full Changelog: go-sql-driver/mysql@v1.9.1...v1.9.2

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

v1.9.2 (2025-04-07)

v1.9.2 is a re-release of v1.9.1 due to a release process issue; no changes were made to the content.

Commits

Updates github.com/miekg/dns from 1.1.64 to 1.1.65

Commits

Updates github.com/shirou/gopsutil/v4 from 4.25.2 to 4.25.3

Release notes

Sourced from github.com/shirou/gopsutil/v4's releases.

v4.25.3

Important Notice

Starting from this release, we have set the Go version in go.mod to 1.23. Moving forward, we plan to continuously update it to the second most recent Go release.

We understand that gopsutil runs on various platforms, and some applications using it may only support older Go versions. With this release, those applications might no longer be able to build. However, as discussed in #1804, we made this change because golang.org/x/sys, which gopsutil depends on, has adopted a policy of continuously updating its Go version.

That said, we intend to be conservative about syntax changes and avoid unnecessary modifications whenever possible.

What's Changed

disk

host

process

Chore

Other Changes

New Contributors

Full Changelog: shirou/gopsutil@v4.25.2...v4.25.3

Commits
  • 1e1ad22 Merge pull request #1830 from shirou/feat/try_to_fix_ci_test_fail_host_virtua...
  • fdbdf51 [host]: fix potential error on CI test on Windows.
  • 2b55813 Merge pull request #1791 from samburba/support-get-disk-serial-number-darwin
  • 6d4c8e5 [disk][darwin]:rename unused parameter in function to fix lint
  • 935bb6c Merge branch 'master' into support-get-disk-serial-number-darwin
  • 591e789 Merge pull request #1826 from mmorel-35/fix/contextcheck
  • 7576b6f Merge pull request #1827 from mmorel-35/loong64/golangci
  • 7166a61 fix: address //nolint:contextcheck
  • 7b14b86 Merge pull request #1783 from mmorel-35/revive/unused-parameter
  • 9d29c70 Merge pull request #1813 from mmorel-35/gocritic
  • Additional commits viewable in compare view

Updates golang.org/x/sync from 0.12.0 to 0.13.0

Commits

Updates golang.org/x/net from 0.38.0 to 0.39.0

Commits

Updates golang.org/x/sys from 0.31.0 to 0.32.0

Commits
  • 01aaa83 all: simplify code by using modern Go constructs
  • 1b2bd6b windows: replace all StringToUTF16 calls with UTF16FromString
  • 1c3b72f unix: update Linux kernel to 6.14
  • c175b6b windows: add cmsghdr and pktinfo structures
  • 3330b5e unix: support Readv, Preadv, Writev and Pwritev for darwin
  • 7401cce cpu: replace specific instructions with WORD in the function get_cpucfg on lo...
  • b8f7da6 cpu: add support for detecting cpu features on loong64
  • f2ce62c windows: add constants for PMTUD socket options
  • See full diff in compare view

Updates golang.org/x/text from 0.23.0 to 0.24.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
chore(deps): bump the security group with 8 updates
20446d5 
Bumps the security group with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/cilium/ebpf](https://github.com/cilium/ebpf) | `0.17.3` | `0.18.0` |
| [github.com/go-sql-driver/mysql](https://github.com/go-sql-driver/mysql) | `1.9.1` | `1.9.2` |
| [github.com/miekg/dns](https://github.com/miekg/dns) | `1.1.64` | `1.1.65` |
| [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil) | `4.25.2` | `4.25.3` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.12.0` | `0.13.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.38.0` | `0.39.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.31.0` | `0.32.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.23.0` | `0.24.0` |


Updates `github.com/cilium/ebpf` from 0.17.3 to 0.18.0
- [Release notes](https://github.com/cilium/ebpf/releases)
- [Commits](cilium/ebpf@v0.17.3...v0.18.0)

Updates `github.com/go-sql-driver/mysql` from 1.9.1 to 1.9.2
- [Release notes](https://github.com/go-sql-driver/mysql/releases)
- [Changelog](https://github.com/go-sql-driver/mysql/blob/master/CHANGELOG.md)
- [Commits](go-sql-driver/mysql@v1.9.1...v1.9.2)

Updates `github.com/miekg/dns` from 1.1.64 to 1.1.65
- [Changelog](https://github.com/miekg/dns/blob/master/Makefile.release)
- [Commits](miekg/dns@v1.1.64...v1.1.65)

Updates `github.com/shirou/gopsutil/v4` from 4.25.2 to 4.25.3
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.25.2...v4.25.3)

Updates `golang.org/x/sync` from 0.12.0 to 0.13.0
- [Commits](golang/sync@v0.12.0...v0.13.0)

Updates `golang.org/x/net` from 0.38.0 to 0.39.0
- [Commits](golang/net@v0.38.0...v0.39.0)

Updates `golang.org/x/sys` from 0.31.0 to 0.32.0
- [Commits](golang/sys@v0.31.0...v0.32.0)

Updates `golang.org/x/text` from 0.23.0 to 0.24.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.23.0...v0.24.0)

---
updated-dependencies:
- dependency-name: github.com/cilium/ebpf
  dependency-version: 0.18.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: github.com/go-sql-driver/mysql
  dependency-version: 1.9.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: github.com/miekg/dns
  dependency-version: 1.1.65
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.25.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: golang.org/x/sync
  dependency-version: 0.13.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: golang.org/x/net
  dependency-version: 0.39.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: golang.org/x/sys
  dependency-version: 0.32.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: golang.org/x/text
  dependency-version: 0.24.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
...

Signed-off-by: dependabot[bot] <[email protected]>
replicated-ci
replicated-ci approved these changes Apr 8, 2025
View reviewed changes
Copy link

@replicated-ci replicated-ci left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM 👍

This PR was automatically approved and merged by the automated-prs-manager GitHub action

@replicated-ci replicated-ci merged commit 08beae3 into main Apr 8, 2025
22 checks passed
@replicated-ci replicated-ci deleted the dependabot/go_modules/security-8fc9d5c70d branch April 8, 2025 06:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@replicated-ci replicated-ci replicated-ci approved these changes

Assignees
No one assigned
Labels
dependencies go type::security
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@replicated-ci