kubernetes-sigs/kustomize
1
0
Fork 0
mirror of https://github.com/kubernetes-sigs/kustomize.git synced 2026-09-15 12:18:57 +00:00
Code Issues Packages Projects Releases 1 Wiki Activity
7,147 Commits 147 Branches 359 Tags
b747ba9572afd9c0096cf78cf3471edb45ab083c
Commit Graph

120 Commits

Author SHA1 Message Date
kubernetes-prow[bot]
b747ba9572 Merge pull request #6252 from kubernetes-sigs/dependabot/go_modules/golang.org/x/mod-0.40.0 
build(deps): bump golang.org/x/mod from 0.38.0 to 0.40.0
 2026-09-04 03:36:20 +00:00
kubernetes-prow[bot]
64e65c2f6d Merge pull request #6254 from kubernetes-sigs/dependabot/go_modules/github.com/google/gnostic-models-0.7.1 
build(deps): bump github.com/google/gnostic-models from 0.7.0 to 0.7.1
 2026-09-04 03:26:21 +00:00
dependabot[bot]
25d21bbb92 build(deps): bump golang.org/x/mod from 0.38.0 to 0.40.0 
Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.38.0 to 0.40.0.
- [Commits](https://github.com/golang/mod/compare/v0.38.0...v0.40.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.40.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-04 03:21:20 +00:00
kubernetes-prow[bot]
21322bdea3 Merge pull request #6248 from kubernetes-sigs/dependabot/go_modules/golang.org/x/text-0.41.0 
build(deps): bump golang.org/x/text from 0.38.0 to 0.41.0
 2026-09-04 03:18:20 +00:00
dependabot[bot]
2645f78639 build(deps): bump github.com/google/gnostic-models from 0.7.0 to 0.7.1 
Bumps [github.com/google/gnostic-models](https://github.com/google/gnostic-models) from 0.7.0 to 0.7.1.
- [Commits](https://github.com/google/gnostic-models/compare/v0.7.0...v0.7.1)

---
updated-dependencies:
- dependency-name: github.com/google/gnostic-models
  dependency-version: 0.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-04 03:13:03 +00:00
kubernetes-prow[bot]
aa78ac0846 Merge pull request #6251 from kubernetes-sigs/dependabot/go_modules/github.com/go-errors/errors-1.5.1 
build(deps): bump github.com/go-errors/errors from 1.4.2 to 1.5.1
 2026-09-04 03:10:31 +00:00
kubernetes-prow[bot]
31c1273bc1 Merge pull request #6250 from kubernetes-sigs/dependabot/go_modules/sigs.k8s.io/application-0.8.3 
build(deps): bump sigs.k8s.io/application from 0.8.2 to 0.8.3
 2026-09-04 03:10:22 +00:00
dependabot[bot]
a2dbe836ae build(deps): bump golang.org/x/text from 0.38.0 to 0.41.0 
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.38.0 to 0.41.0.
- [Release notes](https://github.com/golang/text/releases)
- [Commits](https://github.com/golang/text/compare/v0.38.0...v0.41.0)

---
updated-dependencies:
- dependency-name: golang.org/x/text
  dependency-version: 0.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-04 03:03:13 +00:00
dependabot[bot]
39d6506d85 build(deps): bump golang.org/x/sys from 0.45.0 to 0.47.0 
Bumps [golang.org/x/sys](https://github.com/golang/sys) from 0.45.0 to 0.47.0.
- [Commits](https://github.com/golang/sys/compare/v0.45.0...v0.47.0)

---
updated-dependencies:
- dependency-name: golang.org/x/sys
  dependency-version: 0.47.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-04 01:59:36 +00:00
dependabot[bot]
cba85e8c30 build(deps): bump github.com/go-errors/errors from 1.4.2 to 1.5.1 
Bumps [github.com/go-errors/errors](https://github.com/go-errors/errors) from 1.4.2 to 1.5.1.
- [Release notes](https://github.com/go-errors/errors/releases)
- [Commits](https://github.com/go-errors/errors/compare/v1.4.2...v1.5.1)

---
updated-dependencies:
- dependency-name: github.com/go-errors/errors
  dependency-version: 1.5.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-04 01:57:37 +00:00
dependabot[bot]
2be553c77f build(deps): bump sigs.k8s.io/application from 0.8.2 to 0.8.3 
Bumps [sigs.k8s.io/application](https://github.com/kubernetes-sigs/application) from 0.8.2 to 0.8.3.
- [Release notes](https://github.com/kubernetes-sigs/application/releases)
- [Changelog](https://github.com/kubernetes-sigs/application/blob/master/docs/release.md)
- [Commits](https://github.com/kubernetes-sigs/application/compare/v0.8.2...v0.8.3)

---
updated-dependencies:
- dependency-name: sigs.k8s.io/application
  dependency-version: 0.8.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
 2026-09-04 01:57:11 +00:00
Yugo Kobayashi
84168ddd1b chore: bump stretch/testify pkg to remove old yaml dependencies 2026-08-20 09:04:11 +09:00
yugo kobayashi
79bb1aa2b2 update vuln dependencies at 2026/07 (#6187) 
* update dependencies

* sync modules
 2026-07-12 03:19:46 +00:00
koba1t
81991821f6 bump: go v1.26.5 2026-07-11 07:42:00 +09:00
Davanum Srinivas
9a61304919 bump k8s.io/kube-openapi, drop github.com/mailru/easyjson 
Updates k8s.io/kube-openapi from v0.0.0-20241212222426-2c72e554b1e7 to
v0.0.0-20260502001324-b7f5293f4787 across api, kyaml, and kustomize modules,
then propagates the change across all workspace modules via make workspace-sync.

The new kube-openapi release switched from the monolithic go-openapi/swag
(v0.23.0) to the refactored split sub-modules (go-openapi/swag/* v0.25.4).
The old swag carried github.com/mailru/easyjson as a dependency; the new
sub-modules do not. After go mod tidy, easyjson and josharian/intern are
fully removed from all three module graphs.

Also upgraded: github.com/google/gnostic-models v0.6.9 → v0.7.0 (pulled
in by the same kube-openapi update).

Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2026-05-02 10:47:24 -04:00
yugo kobayashi
1c87a5063d drop 'go-spew' dependencies and update dependencies (#6134) 
* drop 'go-spew' dependencies

* update dependencies

* fix: change install method of golangci-lint
 2026-05-01 05:37:24 +05:30
koba1t
68e507eb6f update otel lib to v1.40.0 2026-03-04 23:30:01 +09:00
koba1t
5231e099e5 bump go-git and x/crypt 2026-02-13 20:46:17 +09:00
koba1t
8eb136f67e update go 1.25.7 2026-02-12 01:26:18 +09:00
koba1t
b472396d10 introduce go tool directive 2025-08-28 02:36:10 +09:00
koba1t
c8d3d5709e bump github.com/go-git/go-git/v5 from 5.11.0 to 5.13.0 2025-08-18 06:30:17 +09:00
Mauren Berti
c9a0d10d5a build(deps): bump golang.org/x/oauth2 from 0.25.0 to 0.27.0 2025-08-17 16:20:00 -04:00
yugo kobayashi
87d0629bd1 update go 1.24.6 (#5959) 
* update go 1.24.6

* fix non-constant format string error

* update golang.org/x/tools@v0.36.0 and github.com/golangci/golangci-lint@v1.64.8 to pass execute golangci-lint

* add a verpose diff output to prow test

* remove pluginator binary version from generated files
 2025-08-17 13:05:12 -07:00
Davanum Srinivas
a7703f685c Drop usage of forked copies of goyaml.v2 and goyaml.v3 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2025-06-25 13:13:52 -04:00
Stephen Kitt
6b830658d1 Bump to github.com/spf13/viper v1.20.0 
This includes the go-difflib and go-spew reverts, which means the
corresponding exclusions can be removed. cmd/gorepomod/go.mod loses a
number of indirect dependencies thanks to the spf13/viper cleanup, but
hack/go.mod gains a few.

Signed-off-by: Stephen Kitt <skitt@redhat.com>
 2025-03-15 17:13:59 +01:00
Mauren Berti
f03e31389d build(deps): bump golang.org/x/net from 0.28.0 to 0.33.0 in /hack 
Bump the golang.org/x/net dependency and synchronize the workspace using
make workspace-sync
 2025-01-15 15:17:23 -05:00
Sebastiaan van Stijn
2867f353c2 downgrade go-difflib and go-spew to tagged releases (#5830) 
* workspace sync

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

* downgrade go-difflib and go-spew to tagged releases

commit d35edbf80d updated these dependencies
to untagged versions. The diff in both dependencies show that there's no
code changes, and it's unlikely for those modules to do new releases.

Unfortunate, because of that change all projects depending on kubernetes
or any of it's modules now had to upgrade to unreleased versions of
these.

This patch reverts those updates (but it may take some time before
all other projects can be reverted).

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>

---------

Signed-off-by: Sebastiaan van Stijn <github@gone.nl>
 2025-01-07 03:48:28 +01:00
Davanum Srinivas
84e6594e9b Update golangci/golangci-lint to v1.56.2 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2024-12-14 19:28:39 -05:00
Davanum Srinivas
b79c5f652d Update to latest kube-opeapi to drop govalidator dependency 
Signed-off-by: Davanum Srinivas <davanum@gmail.com>
 2024-12-12 18:48:06 -05:00
koba1t
b67ce5bb73 go work sync && ./hack/doGoMod.sh tidy 2024-09-15 01:43:03 +09:00
koba1t
5ba8523df7 update go 1.22.7 2024-09-15 01:40:50 +09:00
Karl Isenberg
6a829feef8 Pin kustomize image in cockroachdb example 
- Pin to v5.4.1 with sha256 as example of how to ensure supply-chain
  security. Pulling the latest kustomize image or source is insecure
  without checksum validation.
- Bump example image tag to v0.1.1
 2024-05-06 11:02:20 -07:00
koba1t
72d95b5f41 chore: restore version for github.com/asaskevich/govalidator 2024-04-25 17:21:05 +09:00
Mauren Berti
5d127e4138 chore(deps): bump dependencies of kustomize + sync go workspace 
* Bump the golang.org/x dependencies.
* Run `go work sync` to synchronize dependencies across Go workspaces.
 2024-04-21 20:03:38 -04:00
Karl Isenberg
ed2ca23400 Pin tool versions with hack/go.mod (#5622) 
* Pin tool versions with hack/go.mod

This change centralizes the tracking of versions for tools used for
development and testing. This way, the tools and all their
dependencies have their checksums stored in hack/go.sum, which
improves supply chain security.

* Workspace Sync & Tidy
 2024-04-02 12:34:13 -07:00
Karl Isenberg
4dbc0d22e1 chore: Update to Go v1.21 
- go mod tidy (all modules)
- go work sync
- Fixed plugin generation for Go 1.21
- Updated linting for Go 1.21
- Fixed minecraft example for Helm v3 pull download path
- Update dev docs to mention Go 1.21
- Regenerate plugins with Go 1.21
 2024-03-15 11:47:44 -07:00
koba1t
d35edbf80d update dependencies google.golang.org/protobuf@v1.33.0 2024-03-14 17:27:48 +09:00
koba1t
af7c088053 fix failed tests for fn framework mount generator 2023-11-02 02:37:00 +09:00
Sylvain Rabot
b1f100e3da Run go work sync and go mod tidy 
```shell
go work sync
for i in $(find . -name go.mod); do (cd $(dirname $i); go mod tidy); done
```

Signed-off-by: Sylvain Rabot <sylvain@abstraction.fr>
 2023-10-28 13:05:11 +02:00
Natasha Sarkar
96ad106ee1 Use upstream go-yaml fork and remove our internal one (#5412) 
* test new yaml fork

* delete old kyaml fork

* update to sigs yaml 1.4.0

* remove comments
 2023-10-25 19:48:22 +02:00
dependabot[bot]
0eca5c4b06 build(deps): bump golang.org/x/net 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.8.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.8.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-10-17 19:51:16 +00:00
dependabot[bot]
76695414c7 build(deps): bump golang.org/x/net 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.8.0 to 0.17.0.
- [Commits](https://github.com/golang/net/compare/v0.8.0...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-10-17 19:24:53 +00:00
Jan-Otto Kröpke
d64ac13447 kustomize: Add support for OCI based helm repos (#5167) 
* kustomize: Add support for OCI based helm repos

Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de>

* Update api/internal/builtins/HelmChartInflationGenerator.go

* Update plugin/builtin/helmchartinflationgenerator/HelmChartInflationGenerator.go

* go fmt

Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de>

* s/expectedHelmExternalDns/expectedHelmExternalDNS

Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de>

* commit

Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de>

* commit with content

Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de>

* Apply suggestions from maintainer

* go work sync

* added test

---------

Signed-off-by: Jan-Otto Kröpke <joe@cloudeteer.de>
 2023-10-17 21:24:00 +02:00
Kazuki Suda
f5ca753377 Update imdario/mergo to v0.3.13 
Co-authored-by: Krzysztof Gibuła <krzysztof.gibula@gmail.com>
Signed-off-by: Kazuki Suda <kazuki.suda@gmail.com>
 2023-09-24 16:34:45 +09:00
koba1t
d1647a51af fix e2econtainer test 2023-06-07 02:19:55 +09:00
koba1t
5b76aa9d2f update go 1.20 2023-06-06 22:39:06 +09:00
Katrina Verey
38d5bf8e09 Add licence and make script use current year 2023-04-13 17:45:47 -04:00
Katrina Verey
85d623bc86 Add a rich example of fn framework for abstraction 2023-04-13 16:57:50 -04:00
dependabot[bot]
a4954d386a Bump golang.org/x/net in /functions/examples/application-cr/image 
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.4.0 to 0.7.0.
- [Release notes](https://github.com/golang/net/releases)
- [Commits](https://github.com/golang/net/compare/v0.4.0...v0.7.0)

---
updated-dependencies:
- dependency-name: golang.org/x/net
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-27 18:17:11 +00:00
dependabot[bot]
9b43e76947 Bump golang.org/x/crypto in /functions/examples/application-cr/image 
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.0.0-20210921155107-089bfa567519 to 0.1.0.
- [Release notes](https://github.com/golang/crypto/releases)
- [Commits](https://github.com/golang/crypto/commits/v0.1.0)

---
updated-dependencies:
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
 2023-02-25 00:50:47 +00:00