Update all non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
actions/checkout	action	minor	v3.1.0 -> v3.6.0
anchore/sbom-action	action	minor	v0.13.1 -> v0.15.0
dev-drprasad/delete-tag-and-release	action	patch	v0.2.0 -> v0.2.1
docker/login-action	action	minor	v2.1.0 -> v2.2.0
github.com/fatih/color	require	minor	v1.13.0 -> v1.16.0
github.com/go-logr/logr	require	minor	v1.2.3 -> v1.3.0
github.com/gruntwork-io/terratest	require	minor	v0.41.4 -> v0.46.7
github.com/sethvargo/go-envconfig	require	minor	v0.8.3 -> v0.9.0
github.com/stretchr/testify	require	patch	v1.8.1 -> v1.8.4
go.opentelemetry.io/contrib/propagators/aws	require	minor	v1.12.0 -> v1.21.1
go.opentelemetry.io/otel	require	minor	v1.11.2 -> v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace	require	minor	v1.11.2 -> v1.21.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp	require	minor	v1.11.2 -> v1.21.0
go.opentelemetry.io/otel/sdk	require	minor	v1.11.2 -> v1.21.0
go.opentelemetry.io/otel/trace	require	minor	v1.11.2 -> v1.21.0
go.uber.org/zap	require	minor	v1.24.0 -> v1.26.0
jaegertracing/all-in-one		minor	1.39.0 -> 1.51.0
k8s.io/api	require	minor	v0.25.4 -> v0.28.4
k8s.io/apiextensions-apiserver	require	minor	v0.25.4 -> v0.28.4
k8s.io/apimachinery	require	minor	v0.25.4 -> v0.28.4
k8s.io/client-go	require	minor	v0.25.4 -> v0.28.4
otel/opentelemetry-collector		minor	0.66.0 -> 0.89.0
sigs.k8s.io/controller-runtime	require	minor	v0.13.1 -> v0.16.3
step-security/harden-runner	action	minor	v2.0.0 -> v2.6.1

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

actions/checkout (actions/checkout)

v3.6.0

Compare Source

• Fix: Mark test scripts with Bash'isms to be run via Bash
• Add option to fetch tags even if fetch-depth > 0

v3.5.3

Compare Source

• Fix: Checkout fail in self-hosted runners when faulty submodule are checked-in
• Fix typos found by codespell
• Add support for sparse checkouts

v3.5.2

Compare Source

• Fix api endpoint for GHES

v3.5.1

Compare Source

• Fix slow checkout on Windows

v3.5.0

Compare Source

• Add new public key for known_hosts

v3.4.0

Compare Source

• Upgrade codeql actions to v2
• Upgrade dependencies
• Upgrade @​actions/io

v3.3.0

Compare Source

• Implement branch list using callbacks from exec function
• Add in explicit reference to private checkout options
• Fix comment typos (that got added in #​770)

v3.2.0

Compare Source

• Add GitHub Action to perform release
• Fix status badge
• Replace datadog/squid with ubuntu/squid Docker image
• Wrap pipeline commands for submoduleForeach in quotes
• Update @​actions/io to 1.1.2
• Upgrading version to 3.2.0

anchore/sbom-action (anchore/sbom-action)

v0.15.0

Compare Source

Changes in v0.14.4

Breaking Changes

• Previously, running on Windows required WSL. Now, running on Windows expects to be run on native windows (#​426) [willmurphyscode].

Other Changes

• pin and upgrade actions/checkout (#​428) [willmurphyscode]
• chore(deps): update Syft to v0.97.1 (#​427) [anchore-actions-token-generator]
• add oss community board auto-add workflow (#​421) [wagoodman]

v0.14.3

Compare Source

Changes in v0.14.3

• update Syft to v0.84.0 (#​418) [anchore-actions-token-generator]

v0.14.2

Compare Source

Changes in v0.14.2

• Update Syft to v0.80.0 (#​415)
• Make sure all invalid artifact name characters are replaced #​396 (#​417) [lts-po]
• Ensure SBOM is copied to output-file (#​411) [gszr]

v0.14.1

Compare Source

Changes in v0.14.1

• chore(deps): update Syft to v0.76.0 (#​403) [anchore-actions-token-generator]

v0.13.4

Compare Source

Changes in v0.13.4

• Added support of workflow artifact's retention policy (#​398) [ViacheslavKudinov]
• Use the correct SHA for dependency snapshots from pull requests (#​401) [juxtin]
• Update Syft to v0.75.0 (#​394) [anchore-actions-token-generator]

v0.13.3

Compare Source

Changes in v0.13.3

• Update Syft to v0.68.1 (#​391) [anchore-actions-token-generator]

v0.13.2

Compare Source

Changes in v0.13.2

• Update Syft to v0.68.0 (#​387) [anchore-actions-token-generator]

docker/login-action (docker/login-action)

v2.2.0

Compare Source

• Switch to actions-toolkit implementation by @​crazy-max in https://github.com/docker/login-action/pull/409 https://github.com/docker/login-action/pull/470 https://github.com/docker/login-action/pull/476
• Bump @​aws-sdk/client-ecr and @​aws-sdk/client-ecr-public to 3.347.1 in https://github.com/docker/login-action/pull/524 https://github.com/docker/login-action/pull/364 https://github.com/docker/login-action/pull/363
• Bump minimatch from 3.0.4 to 3.1.2 in https://github.com/docker/login-action/pull/354
• Bump json5 from 2.2.0 to 2.2.3 in https://github.com/docker/login-action/pull/378
• Bump http-proxy-agent from 5.0.0 to 7.0.0 in https://github.com/docker/login-action/pull/509
• Bump https-proxy-agent from 5.0.1 to 7.0.0 in https://github.com/docker/login-action/pull/508

Full Changelog: docker/login-action@v2.1.0...v2.2.0

fatih/color (github.com/fatih/color)

v1.16.0

Compare Source

What's Changed

• Update dependabot.yml by @​ilyabrin in https://github.com/fatih/color/pull/200
• color: add newline after wrapping text by @​fatih in https://github.com/fatih/color/pull/192
• [Test] Nil check added by @​hyunsooda in https://github.com/fatih/color/pull/203
• fixes #​206 (using underline with a different fg color breaks) by @​gregpoirson in https://github.com/fatih/color/pull/210

Dependency updates

• Bump dominikh/staticcheck-action from 1.2.0 to 1.3.0 by @​dependabot in https://github.com/fatih/color/pull/201
• Bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18 by @​dependabot in https://github.com/fatih/color/pull/193
• Bump golang.org/x/sys from 0.6.0 to 0.8.0 by @​dependabot in https://github.com/fatih/color/pull/195
• Bump github.com/mattn/go-isatty from 0.0.18 to 0.0.19 by @​dependabot in https://github.com/fatih/color/pull/196
• Bump golang.org/x/sys from 0.8.0 to 0.10.0 by @​dependabot in https://github.com/fatih/color/pull/199
• Bump github.com/mattn/go-isatty from 0.0.19 to 0.0.20 by @​dependabot in https://github.com/fatih/color/pull/212
• Bump golang.org/x/sys from 0.10.0 to 0.13.0 by @​dependabot in https://github.com/fatih/color/pull/209
• Bump actions/setup-go from 3 to 4 by @​dependabot in https://github.com/fatih/color/pull/202
• Bump actions/checkout from 3 to 4 by @​dependabot in https://github.com/fatih/color/pull/208
• Bump golang.org/x/sys from 0.13.0 to 0.14.0 by @​dependabot in https://github.com/fatih/color/pull/213

New Contributors

• @​ilyabrin made their first contribution in https://github.com/fatih/color/pull/200
• @​hyunsooda made their first contribution in https://github.com/fatih/color/pull/203
• @​gregpoirson made their first contribution in https://github.com/fatih/color/pull/210

Full Changelog: fatih/color@v1.15.0...v1.16.0

v1.15.0

Compare Source

What's Changed

• windows: enable virtual terminal processing, fixes #​169 by @​martinlindhe in https://github.com/fatih/color/pull/186
• ci: update dependencies by @​fatih in https://github.com/fatih/color/pull/191
• Bump golang.org/x/sys from 0.5.0 to 0.6.0 by @​dependabot in https://github.com/fatih/color/pull/189
• Refactor color_windows.go by @​pellared in https://github.com/fatih/color/pull/188

New Contributors

• @​martinlindhe made their first contribution in https://github.com/fatih/color/pull/186

Full Changelog: fatih/color@v1.14.1...v1.15.0

v1.14.1

Compare Source

What's Changed

• Update to Go 1.17 by @​pellared in https://github.com/fatih/color/pull/184

Full Changelog: fatih/color@v1.14.0...v1.14.1

v1.14.0

Compare Source

What's Changed

• Bump github.com/mattn/go-colorable from 0.1.12 to 0.1.13 by @​dependabot in https://github.com/fatih/color/pull/165
• Bump go-isatty from 0.0.16 to 0.0.17 by @​fatih in https://github.com/fatih/color/pull/178
• Spelling and grammar fixes by @​pattmax00 in https://github.com/fatih/color/pull/181
• NO_COLOR requires a non-empty string by @​pellared in https://github.com/fatih/color/pull/171
• color: expose SetWriter and UnsetWriter by @​fatih in https://github.com/fatih/color/pull/182

New Contributors

• @​pattmax00 made their first contribution in https://github.com/fatih/color/pull/181
• @​pellared made their first contribution in https://github.com/fatih/color/pull/171

Full Changelog: fatih/color@v1.13.0...v1.14.0

go-logr/logr (github.com/go-logr/logr)

v1.3.0

Compare Source

This release adds support for slog in a new, self-contained logr/slogr package. Implementers of a logr.LogSink are encouraged, but not required, to extend their implementation to improve the quality of log output coming from a slog API call.

Breaking change: the call depth for LogSink.Enabled when called via Logger.Enabled was fixed to be the same as for other call paths. Implementers of a LogSink who have worked around this bug will need to remove their workarounds.

Security best practices were improved. Only Go versions >= 1.18 are supported by this release.

What's Changed

• Fix golangci-lint fails by @​thockin in https://github.com/go-logr/logr/pull/173
• Add minimal permissions to workflows by @​pnacht in https://github.com/go-logr/logr/pull/177
• Add a security policy by @​pnacht in https://github.com/go-logr/logr/pull/178
• Update security email by @​thockin in https://github.com/go-logr/logr/pull/181
• docs: explain relationship between Logger{} and Discard() by @​pohly in https://github.com/go-logr/logr/pull/182
• Add the OpenSSF Scorecard workflow by @​pnacht in https://github.com/go-logr/logr/pull/186
• README: show of OpenSSF Scorecard badge by @​pohly in https://github.com/go-logr/logr/pull/187
• Hash-pin workflow Actions by @​pnacht in https://github.com/go-logr/logr/pull/189
• Bump go versions to 1.18+ by @​thockin in https://github.com/go-logr/logr/pull/203
• slogr: add glue code for logging to slog.Handler and with slog.Logger by @​pohly in https://github.com/go-logr/logr/pull/205
• slogr: restore original backend when converting back and forth by @​pohly in https://github.com/go-logr/logr/pull/210
• slogr: add SlogSink by @​pohly in https://github.com/go-logr/logr/pull/211
• Use same call depth for Enabled, Info, Error by @​thockin in https://github.com/go-logr/logr/pull/218
• test: eliminate helper func by @​thockin in https://github.com/go-logr/logr/pull/219
• docs: interoperability with slog by @​pohly in https://github.com/go-logr/logr/pull/222

---

• build(deps): bump actions/setup-go from 3.5.0 to 4.0.1 by @​dependabot in https://github.com/go-logr/logr/pull/190
• build(deps): bump github/codeql-action from 2.20.1 to 2.20.3 by @​dependabot in https://github.com/go-logr/logr/pull/191
• build(deps): bump github/codeql-action from 2.20.3 to 2.20.4 by @​dependabot in https://github.com/go-logr/logr/pull/192
• build(deps): bump github/codeql-action from 2.20.4 to 2.21.0 by @​dependabot in https://github.com/go-logr/logr/pull/193
• build(deps): bump github/codeql-action from 2.21.0 to 2.21.2 by @​dependabot in https://github.com/go-logr/logr/pull/194
• build(deps): bump github/codeql-action from 2.21.2 to 2.21.3 by @​dependabot in https://github.com/go-logr/logr/pull/207
• build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by @​dependabot in https://github.com/go-logr/logr/pull/206
• build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @​dependabot in https://github.com/go-logr/logr/pull/209
• build(deps): bump github/codeql-action from 2.21.3 to 2.21.4 by @​dependabot in https://github.com/go-logr/logr/pull/208
• build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @​dependabot in https://github.com/go-logr/logr/pull/214
• build(deps): bump github/codeql-action from 2.21.4 to 2.21.5 by @​dependabot in https://github.com/go-logr/logr/pull/217
• build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @​dependabot in https://github.com/go-logr/logr/pull/220
• build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @​dependabot in https://github.com/go-logr/logr/pull/221
• build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 by @​dependabot in https://github.com/go-logr/logr/pull/223
• build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by @​dependabot in https://github.com/go-logr/logr/pull/224
• build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @​dependabot in https://github.com/go-logr/logr/pull/225
• build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by @​dependabot in https://github.com/go-logr/logr/pull/226
• build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @​dependabot in https://github.com/go-logr/logr/pull/227
• build(deps): bump github/codeql-action from 2.21.9 to 2.22.0 by @​dependabot in https://github.com/go-logr/logr/pull/228
• build(deps): bump github/codeql-action from 2.22.0 to 2.22.3 by @​dependabot in https://github.com/go-logr/logr/pull/229
• build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @​dependabot in https://github.com/go-logr/logr/pull/231
• build(deps): bump github/codeql-action from 2.22.3 to 2.22.4 by @​dependabot in https://github.com/go-logr/logr/pull/230

New Contributors

• @​pnacht made their first contribution in https://github.com/go-logr/logr/pull/177
• @​dependabot made their first contribution in https://github.com/go-logr/logr/pull/190

Full Changelog: go-logr/logr@v1.2.4...v1.3.0

v1.2.4

Compare Source

This is a collection of small bugfixes and documentation updates.

NOTE: A change (https://github.com/go-logr/logr/pull/166) which was thought to be compatible seems to be a breaking change. In particular, one used to be able to differentiate the result of Discard() from Logger{}. After this change, those are the same. We are considering how to address this, but do not currently plan to revert this change. Apologies!

What's Changed

• Fix syntax in documentation by @​balki in https://github.com/go-logr/logr/pull/144
• testr: use an interface to make it work with *testing.B and *testing.F by @​jeandeaual in https://github.com/go-logr/logr/pull/143
• If logging as JSON and the type is json.RawMessage log it "as-is" by @​sfc-gh-jchacon in https://github.com/go-logr/logr/pull/147
• Make zero value useful & add .IsZero() by @​wojas in https://github.com/go-logr/logr/pull/153
• testr: merge testLogger and testLoggerInterface by @​thockin in https://github.com/go-logr/logr/pull/160
• funcr: JSON invalid output with 1st field omitted by @​thockin in https://github.com/go-logr/logr/pull/159
• Make github assign PRs and issues by @​thockin in https://github.com/go-logr/logr/pull/162
• Fix comments on optional sink interfaces by @​thockin in https://github.com/go-logr/logr/pull/161
• Add examples for Logger methods by @​thockin in https://github.com/go-logr/logr/pull/163
• funcr: optimize WithValues/WithName/WithCallDepth by @​pohly in https://github.com/go-logr/logr/pull/165
• make Discard logger equal to null logger by @​pohly in https://github.com/go-logr/logr/pull/166

New Contributors

• @​balki made their first contribution in https://github.com/go-logr/logr/pull/144
• @​jeandeaual made their first contribution in https://github.com/go-logr/logr/pull/143
• @​sfc-gh-jchacon made their first contribution in https://github.com/go-logr/logr/pull/147

Full Changelog: go-logr/logr@v1.2.3...v1.2.4

gruntwork-io/terratest (github.com/gruntwork-io/terratest)

v0.46.7

Compare Source

Modules affected

• http-helper

Description

• Added handling for nil body in http-helper.

Special thanks

Special thanks to the following users for their contribution!

• @​semihbkgr

Related links

• https://github.com/gruntwork-io/terratest/pull/1370

v0.46.6

Compare Source

Modules affected

• helm

Description

• Added support for the --repo options to the helm test feature

Special thanks

Special thanks to the following users for their contribution!

• @​jguionnet

Related links

• https://github.com/gruntwork-io/terratest/pull/1365
• https://github.com/gruntwork-io/terratest/pull/1368

v0.46.5

Compare Source

Modules affected

• k8s

Description

• Added RestConfig field to extend auth options for Kubernetes client.

Special thanks

Special thanks to the following users for their contribution!

• @​kirecek

Related links

• https://github.com/gruntwork-io/terratest/pull/1354

v0.46.4

Compare Source

Description

• Updated dependency github.com/docker/docker from 20.10.7+incompatible to 24.0.7+incompatible

Related links

• https://github.com/gruntwork-io/terratest/pull/1362

v0.46.3

Compare Source

Description

• Updated dependency google.golang.org/grpc from 1.51.0 to 1.56.3

Related links

• https://github.com/gruntwork-io/terratest/pull/1360

v0.46.2

Compare Source

Description

• Updated dependency github.com/docker/distribution from 2.7.1+incompatible to 2.8.2+incompatible

Related links

• https://github.com/gruntwork-io/terratest/pull/1286

v0.46.1

Compare Source

Description

• Updated dependency golang.org/x/net from 0.8.0 to 0.17.0

Related links

• https://github.com/gruntwork-io/terratest/pull/1356

v0.46.0

Compare Source

Modules affected

• terraform

Description

• Added support for OpenTofu in terraform module

Migration Guide

Switching to tofu:

1. Install OpenTofu cli https://github.com/opentofu/opentofu
2. Apply one of:

• Option 1: Remove terraform binary from PATH
• Option 2: use TerraformBinary config to specify tofu executable

Related links

• https://github.com/gruntwork-io/terratest/pull/1352

v0.45.0

Compare Source

Description

• Removed Go patch version from go.mod

Related links

• https://github.com/gruntwork-io/terratest/pull/1351

v0.44.1

Compare Source

Description

• Updated AMI module to support Ubuntu 20.04 and 22.04.

Related links

• https://github.com/gruntwork-io/terratest/pull/1350

v0.44.0

Compare Source

Description

• Updated minimal Go version to 1.21

Related links

• https://github.com/gruntwork-io/terratest/pull/1339

v0.43.13

Compare Source

Modules affected

• azure

Description

• Added new fields to the NsgRuleSummary structure

Special thanks

Special thanks to the following users for their contribution!

• @​DamianJarzebowski

Related links

• https://github.com/gruntwork-io/terratest/pull/1332

v0.43.12

Compare Source

Modules affected

• k8s

Description

• Fixed panic in WaitUntilDeploymentAvailable in the k8s module

Special thanks

Special thanks to the following users for their contribution!

• @​antoninbas

Related links

• https://github.com/gruntwork-io/terratest/pull/1330

v0.43.11

Compare Source

Modules affected

• terraform

Description

• Added function AssertTgPlanAllExitCode to validate output of terragrunt run-all plan

Special thanks

Special thanks to the following users for their contribution!

• @​bt-macole

Related links

• https://github.com/gruntwork-io/terratest/pull/1323

v0.43.10

Compare Source

Modules affected

• k8s

Description

• Added support for passing custom logger when running kubectl

Special thanks

Special thanks to the following users for their contribution!

• @​retpolanne

Related links

• https://github.com/gruntwork-io/terratest/pull/1325

v0.43.9

Compare Source

Modules affected

• test-structure

Description

• Added function SaveTerraformOptionsIfNotPresent

Special thanks

Special thanks to the following users for their contribution!

• @​bt-macole

Related links

• https://github.com/gruntwork-io/terratest/pull/1319

v0.43.8

Compare Source

Modules affected

• terraform

Description

• Added public ParsePlanJSON function to terraform module.

Special thanks

Special thanks to the following users for their contribution!

• @​mdb

Related links

• https://github.com/gruntwork-io/terratest/pull/1309

v0.43.7

Compare Source

Modules affected

• azure

Description

• Added support for Azure SQL Managed Instance

Special thanks

Special thanks to the following users for their contribution!

• @​sweanan

Related links

• https://github.com/gruntwork-io/terratest/pull/1307

v0.43.6

Compare Source

Modules affected

If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[renovate]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.