You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@superset.apache.org by "renovate-bot (via GitHub)" <gi...@apache.org> on 2026/10/26 02:52:35 UTC

[PR] chore(deps): update dependency oras-project/oras to v1.3.5 [superset-kubernetes-operator]

renovate-bot opened a new pull request, #484:
URL: https://github.com/apache/superset-kubernetes-operator/pull/484

   This PR contains the following updates:
   
   | Package | Update | Change | Pending |
   |---|---|---|---|
   | [oras-project/oras](https://redirect.github.com/oras-project/oras) | patch | `v1.3.4` → `v1.3.5` | `v1.3.6` |
   
   ---
   
   ### Release Notes
   
   <details>
   <summary>oras-project/oras</summary>
   
   ### [`v1.3.5`](https://redirect.github.com/oras-project/oras/releases/tag/v1.3.5)
   
   [Compare Source](https://redirect.github.com/oras-project/oras/compare/v1.3.4...v1.3.5)
   
   #### Changelog
   
   - [`d6e7b58`](https://redirect.github.com/oras-project/oras/commit/d6e7b583b9afc7fa3798de77181c53c94418d727) bump: tag and release ORAS CLI v1.3.5 ([#&#8203;2244](https://redirect.github.com/oras-project/oras/issues/2244))
   - [`4431829`](https://redirect.github.com/oras-project/oras/commit/44318293132b5725ca03f279ca58ba258f3e9303) docs: require cve fixes to land before preparing a release ([#&#8203;2258](https://redirect.github.com/oras-project/oras/issues/2258))
   - [`8ee66ac`](https://redirect.github.com/oras-project/oras/commit/8ee66acb5b8ecb97c2bcb8c8e350f8919c656f8b) docs: add ORAS CLI release process ([#&#8203;2248](https://redirect.github.com/oras-project/oras/issues/2248))
   - [`e09a8bb`](https://redirect.github.com/oras-project/oras/commit/e09a8bbe9837a70465801a6a9fc400fcf4c29a4f) chore: bump oras-go to v2.6.4 in e2e tests ([#&#8203;2247](https://redirect.github.com/oras-project/oras/issues/2247))
   - [`8270f5f`](https://redirect.github.com/oras-project/oras/commit/8270f5ffa9ed7076bddd8120cc184c66494f8c30) chore: update oras-go to v2.6.4 ([#&#8203;2242](https://redirect.github.com/oras-project/oras/issues/2242))
   - [`ba3a3dc`](https://redirect.github.com/oras-project/oras/commit/ba3a3dc53c8d676d1ed721673f9739bbab7b0130) fix: validate extra destination tags before pushing ([#&#8203;2237](https://redirect.github.com/oras-project/oras/issues/2237))
   - [`6ca02d0`](https://redirect.github.com/oras-project/oras/commit/6ca02d0623152537dee5a066070d82d6b9f2f8f6) build(deps): bump the github-actions group across 1 directory with 3 updates ([#&#8203;2240](https://redirect.github.com/oras-project/oras/issues/2240))
   - [`c9ccd95`](https://redirect.github.com/oras-project/oras/commit/c9ccd9587f4856f84568337e217923a4471ae58d) build(deps): bump library/golang from 1.27.1-alpine to 1.27.2-alpine ([#&#8203;2239](https://redirect.github.com/oras-project/oras/issues/2239))
   - [`b2dc645`](https://redirect.github.com/oras-project/oras/commit/b2dc64558706a21d8bc02705fc2584b80b62ed1f) build(deps): bump github.com/onsi/ginkgo/v2 from 2.33.0 to 2.33.1 in /test/e2e ([#&#8203;2238](https://redirect.github.com/oras-project/oras/issues/2238))
   - [`bae5056`](https://redirect.github.com/oras-project/oras/commit/bae5056ea14f8f0cbcc7e1cfcbc8a75d02bcfbd1) Preserve the index media type when the index body omits it ([#&#8203;2235](https://redirect.github.com/oras-project/oras/issues/2235))
   - [`227fc74`](https://redirect.github.com/oras-project/oras/commit/227fc742ae383c12a135ec314dc8e1eef38d2438) chore: update oras-go to v2.6.3 ([#&#8203;2234](https://redirect.github.com/oras-project/oras/issues/2234))
   - [`4d6c6e8`](https://redirect.github.com/oras-project/oras/commit/4d6c6e8669cc914b7661dca3ecb349c517aad3dd) build(deps): bump golang.org/x/term from 0.46.0 to 0.47.0 ([#&#8203;2232](https://redirect.github.com/oras-project/oras/issues/2232))
   - [`21193d8`](https://redirect.github.com/oras-project/oras/commit/21193d8f5a5d072442cf36f213997d9c079f6fbd) build(deps): bump golang.org/x/sync from 0.23.0 to 0.24.0 ([#&#8203;2231](https://redirect.github.com/oras-project/oras/issues/2231))
   - [`8b3b8bd`](https://redirect.github.com/oras-project/oras/commit/8b3b8bd42a49c06b0263a2715c6d93df4b9cf4c4) Fall back to config media type for old-style artifact types ([#&#8203;2114](https://redirect.github.com/oras-project/oras/issues/2114))
   - [`e58fee3`](https://redirect.github.com/oras-project/oras/commit/e58fee37ea27a1b7a372c68d5c0d1c1b1c73f523) fix: validate format before special handling ([#&#8203;2205](https://redirect.github.com/oras-project/oras/issues/2205))
   - [`4e9a756`](https://redirect.github.com/oras-project/oras/commit/4e9a756e8e56ad9d88edfaa91c1fa672470e956e) fix: validate empty OCI layout path with digest ([#&#8203;2230](https://redirect.github.com/oras-project/oras/issues/2230))
   - [`b0a7bda`](https://redirect.github.com/oras-project/oras/commit/b0a7bdafe0bf643c9ebea893da7bd4b894f95a82) fix: restore pretty output for manifest fetch-config ([#&#8203;2228](https://redirect.github.com/oras-project/oras/issues/2228))
   - [`ab0ff3d`](https://redirect.github.com/oras-project/oras/commit/ab0ff3d60601d15851fc8efe22061c35d3ea67e6) fix: limit manifest config fetch size ([#&#8203;2222](https://redirect.github.com/oras-project/oras/issues/2222))
   - [`80f72e1`](https://redirect.github.com/oras-project/oras/commit/80f72e14f17bfc635f311994e56ca06637b166ea) build(deps): bump anchore/sbom-action/download-syft from 0.24.2 to 0.24.3 in the github-actions group ([#&#8203;2223](https://redirect.github.com/oras-project/oras/issues/2223))
   - [`d608889`](https://redirect.github.com/oras-project/oras/commit/d60888982bb434831a1186d01f281f672368cd80) docs(e2e): correct test/e2e/README.md references ([#&#8203;2219](https://redirect.github.com/oras-project/oras/issues/2219))
   - [`8d737cd`](https://redirect.github.com/oras-project/oras/commit/8d737cd0042cefe441c2c21f302d0bf87cf4c14c) chore: drop dead .gitignore entries for the Docker e2e registry mounts ([#&#8203;2220](https://redirect.github.com/oras-project/oras/issues/2220))
   - [`02c5c20`](https://redirect.github.com/oras-project/oras/commit/02c5c20b29a857cc5c02b07303926a4423939db0) ci: remove Docker-based e2e test run ([#&#8203;2208](https://redirect.github.com/oras-project/oras/issues/2208))
   - [`d41f4eb`](https://redirect.github.com/oras-project/oras/commit/d41f4ebf6fc5f1135de9cc4c0e573ff692fd1c17) fix: detect credentials in multiple JSON values ([#&#8203;2218](https://redirect.github.com/oras-project/oras/issues/2218))
   - [`5c33ab2`](https://redirect.github.com/oras-project/oras/commit/5c33ab2eb1688246d9019a0f77086b910dc928fd) ci: pin e2e-k8s.yml action refs to commit SHAs ([#&#8203;2216](https://redirect.github.com/oras-project/oras/issues/2216))
   - [`1033ebb`](https://redirect.github.com/oras-project/oras/commit/1033ebb7ad67e45d32ec744d7177258b456c1f4e) fix: generate coverage report in covhtml ([#&#8203;2214](https://redirect.github.com/oras-project/oras/issues/2214))
   - [`ccf3e26`](https://redirect.github.com/oras-project/oras/commit/ccf3e265b6663e070a74a65bf03a207a112982e6) chore: update golang.org/x/crypto ([#&#8203;2207](https://redirect.github.com/oras-project/oras/issues/2207))
   - [`715917d`](https://redirect.github.com/oras-project/oras/commit/715917d0e3f7f2c44fcaf8f2db98adf1de9eb7c2) feat(cp): support multiple platforms ([#&#8203;2191](https://redirect.github.com/oras-project/oras/issues/2191))
   - [`488b3fa`](https://redirect.github.com/oras-project/oras/commit/488b3fab108b77fa2d3ac54eca6e56db41dbcdcb) fix: correct manifest fetch format error ([#&#8203;2203](https://redirect.github.com/oras-project/oras/issues/2203))
   - [`a826d9a`](https://redirect.github.com/oras-project/oras/commit/a826d9aa24c1ee82a84e27c4df0584859d1bcb22) fix: clarify absolute path validation warning ([#&#8203;2201](https://redirect.github.com/oras-project/oras/issues/2201))
   - [`7327064`](https://redirect.github.com/oras-project/oras/commit/73270644f4c1be45334af635b55233239acba6d2) ci: replace action-publish with snapcraft CLI ([#&#8203;2199](https://redirect.github.com/oras-project/oras/issues/2199))
   - [`1dd0de8`](https://redirect.github.com/oras-project/oras/commit/1dd0de89bd4292d78d817b4c934c70c826df9540) build(deps): bump the github-actions group with 4 updates ([#&#8203;2200](https://redirect.github.com/oras-project/oras/issues/2200))
   - [`7c53cbf`](https://redirect.github.com/oras-project/oras/commit/7c53cbf2c880ed160c9e08b0e6c22c6820a70f78) fix: clean up partial pull output on failure ([#&#8203;2194](https://redirect.github.com/oras-project/oras/issues/2194))
   - [`bdf7835`](https://redirect.github.com/oras-project/oras/commit/bdf7835108c666aa9206146de715fb890ed99f6f) test(errors): cover the CLI error type and its constructors ([#&#8203;2196](https://redirect.github.com/oras-project/oras/issues/2196))
   - [`88f46a4`](https://redirect.github.com/oras-project/oras/commit/88f46a4b0be1426385ffa4201c66b550da696ed5) build(deps): bump github.com/onsi/gomega from 1.43.1 to 1.44.0 in /test/e2e ([#&#8203;2195](https://redirect.github.com/oras-project/oras/issues/2195))
   - [`8c979f1`](https://redirect.github.com/oras-project/oras/commit/8c979f1f30d0a4049addff5fcff8de48a4afe583) test(display): cover the pulled-file model ([#&#8203;2189](https://redirect.github.com/oras-project/oras/issues/2189))
   - [`a0cd4de`](https://redirect.github.com/oras-project/oras/commit/a0cd4de5cfcddc825d8e9979bda5edcd6d422f6b) feat: add Kubernetes-based e2e testing infrastructure ([#&#8203;1913](https://redirect.github.com/oras-project/oras/issues/1913))
   - [`be79214`](https://redirect.github.com/oras-project/oras/commit/be7921423828a0d4d4b56c995fe98c96de9f7a40) fix: fix concurrency in Tagged ([#&#8203;2183](https://redirect.github.com/oras-project/oras/issues/2183))
   - [`44e831a`](https://redirect.github.com/oras-project/oras/commit/44e831af07247fdf99ff7c1ee9697944b53580e8) ci: publish stable rolling image tags ([#&#8203;2184](https://redirect.github.com/oras-project/oras/issues/2184))
   - [`bc28b9c`](https://redirect.github.com/oras-project/oras/commit/bc28b9c7db34b286e10861f30fe6de2b1e210d5e) fix: keep an index's own children out of its reported referrers ([#&#8203;2174](https://redirect.github.com/oras-project/oras/issues/2174))
   - [`458c186`](https://redirect.github.com/oras-project/oras/commit/458c1865e441537092ee2bdb1e2924fa91166c3f) build(deps): bump the github-actions group across 1 directory with 3 updates ([#&#8203;2186](https://redirect.github.com/oras-project/oras/issues/2186))
   - [`ba0b7df`](https://redirect.github.com/oras-project/oras/commit/ba0b7df61b7b985939f20c941715ca14e312d69f) build(deps): bump library/alpine from 3.24.1 to 3.24.2 ([#&#8203;2185](https://redirect.github.com/oras-project/oras/issues/2185))
   - [`8016ba3`](https://redirect.github.com/oras-project/oras/commit/8016ba39bcbf24fa9333afd9b1211efb88957b1f) fix: only infer platform from OCI image configs ([#&#8203;2177](https://redirect.github.com/oras-project/oras/issues/2177))
   - [`a9965b3`](https://redirect.github.com/oras-project/oras/commit/a9965b334e2b061abe396cf30cf275d79ab86024) test(display): cover the raw content handlers ([#&#8203;2182](https://redirect.github.com/oras-project/oras/issues/2182))
   - [`e0dd8f2`](https://redirect.github.com/oras-project/oras/commit/e0dd8f2de21d24e9192e87270df7a7f6dc38fa0e) build(deps): bump github.com/onsi/gomega from 1.43.0 to 1.43.1 in /test/e2e ([#&#8203;2180](https://redirect.github.com/oras-project/oras/issues/2180))
   - [`ce4dc19`](https://redirect.github.com/oras-project/oras/commit/ce4dc19c325d32a9b13681946a287520c92a1699) fix(display): report files as \[] instead of null when a pull produces none ([#&#8203;2175](https://redirect.github.com/oras-project/oras/issues/2175))
   - [`0d1f61e`](https://redirect.github.com/oras-project/oras/commit/0d1f61e69d36ed1794e71b879ecd7662e643a771) test(display): cover the metadata model types ([#&#8203;2176](https://redirect.github.com/oras-project/oras/issues/2176))
   - [`283000c`](https://redirect.github.com/oras-project/oras/commit/283000c693d8fae70b9d1f8853bba729fefc3cd9) build(deps): bump github.com/onsi/ginkgo/v2 from 2.32.2 to 2.33.0 in /test/e2e ([#&#8203;2179](https://redirect.github.com/oras-project/oras/issues/2179))
   - [`87495d5`](https://redirect.github.com/oras-project/oras/commit/87495d530de96ef7114f5b7d7392cf3a0ecf7272) fix(display): report referenceAsTags as \[] instead of null when untagged ([#&#8203;2170](https://redirect.github.com/oras-project/oras/issues/2170))
   - [`4e589f5`](https://redirect.github.com/oras-project/oras/commit/4e589f5dd7560cf2dc63144f70119c517f027aa5) feat: add release automation script ([#&#8203;1992](https://redirect.github.com/oras-project/oras/issues/1992))
   - [`1cd8618`](https://redirect.github.com/oras-project/oras/commit/1cd8618b32ff7e42fdae5646c51e8afc8ef696f2) test(display): split template repo handler tests to match source files ([#&#8203;2171](https://redirect.github.com/oras-project/oras/issues/2171))
   - [`27c2d04`](https://redirect.github.com/oras-project/oras/commit/27c2d042c21ff9861fc96415ebe6c237973917cc) test(display): cover the pull metadata handler ([#&#8203;2168](https://redirect.github.com/oras-project/oras/issues/2168))
   - [`ec461af`](https://redirect.github.com/oras-project/oras/commit/ec461af45f6f9679bba8e16f4b538fe55ed7b6b2) build(deps): bump the github-actions group with 2 updates ([#&#8203;2172](https://redirect.github.com/oras-project/oras/issues/2172))
   - [`0afd96e`](https://redirect.github.com/oras-project/oras/commit/0afd96e3afe031ebf8914a7e8c61fd83711d0117) build(deps): bump github.com/onsi/ginkgo/v2 from 2.32.1 to 2.32.2 in /test/e2e ([#&#8203;2167](https://redirect.github.com/oras-project/oras/issues/2167))
   - [`36a446d`](https://redirect.github.com/oras-project/oras/commit/36a446d68bb4426f36a6c789cede81272d827d9f) build(deps): bump golang.org/x/term from 0.45.0 to 0.46.0 ([#&#8203;2166](https://redirect.github.com/oras-project/oras/issues/2166))
   - [`d1c4808`](https://redirect.github.com/oras-project/oras/commit/d1c4808007895b6656fb161d08c707ce791fbbc5) test(display): cover the template and descriptor metadata handlers ([#&#8203;2164](https://redirect.github.com/oras-project/oras/issues/2164))
   - [`d0da4a9`](https://redirect.github.com/oras-project/oras/commit/d0da4a96a6893d2e7f44ea60a8f317a2fcce1cf9) build(deps): bump golang.org/x/sync from 0.22.0 to 0.23.0 ([#&#8203;2162](https://redirect.github.com/oras-project/oras/issues/2162))
   - [`898a195`](https://redirect.github.com/oras-project/oras/commit/898a1950695c058a89facae5537cab5875da4014) fix(cli): pluralize "argument" in argument-count errors ([#&#8203;2161](https://redirect.github.com/oras-project/oras/issues/2161))
   - [`4728be6`](https://redirect.github.com/oras-project/oras/commit/4728be697c04437640f6ca13308068724c4adf5c) test(credential): fix TestNewStoreError failing on Windows ([#&#8203;2159](https://redirect.github.com/oras-project/oras/issues/2159))
   - [`003dfd1`](https://redirect.github.com/oras-project/oras/commit/003dfd1b050ba67d1f2969d24df4fcab59f29d19) build(deps): bump library/golang from 1.27.0-alpine to 1.27.1-alpine ([#&#8203;2160](https://redirect.github.com/oras-project/oras/issues/2160))
   - [`c508a57`](https://redirect.github.com/oras-project/oras/commit/c508a57d3479d2f8648542540e081ce058ced5c1) build(deps): bump the github-actions group across 1 directory with 5 updates ([#&#8203;2149](https://redirect.github.com/oras-project/oras/issues/2149))
   - [`b16846a`](https://redirect.github.com/oras-project/oras/commit/b16846a47c689db5ad559b068c5d9ca45129dd8e) fix(ci): resolve licenserc go.mod path relative to config directory ([#&#8203;2155](https://redirect.github.com/oras-project/oras/issues/2155))
   - [`f54f368`](https://redirect.github.com/oras-project/oras/commit/f54f368af1fb3d45c2ac33287c23c9b100a13385) fix: attribute recursive copy tag failures to the destination ([#&#8203;2157](https://redirect.github.com/oras-project/oras/issues/2157))
   - [`c75e8f3`](https://redirect.github.com/oras-project/oras/commit/c75e8f3bf66008167628841e3a627a853e183c8b) feat(ci): add windows/arm64 build to github release ([#&#8203;2153](https://redirect.github.com/oras-project/oras/issues/2153))
   - [`749d9c1`](https://redirect.github.com/oras-project/oras/commit/749d9c1e453c271b6894e82698c4e9e1f41b621c) build(deps): bump github.com/onsi/gomega from 1.42.1 to 1.43.0 in /test/e2e ([#&#8203;2147](https://redirect.github.com/oras-project/oras/issues/2147))
   - [`86eb615`](https://redirect.github.com/oras-project/oras/commit/86eb61552d12edc760f1a938a3b5d86011437381) build(deps): bump github.com/sirupsen/logrus from 1.10.1 to 1.10.2 ([#&#8203;2146](https://redirect.github.com/oras-project/oras/issues/2146))
   - [`71d17dd`](https://redirect.github.com/oras-project/oras/commit/71d17dd337598c964dbb58d3647d886c21b700b6) build: bump Go toolchain to 1.26 ([#&#8203;2145](https://redirect.github.com/oras-project/oras/issues/2145))
   - [`20df556`](https://redirect.github.com/oras-project/oras/commit/20df5563afed97fd512fd2417e0a0b64c48c6b43) ci: fetch full history for release changelog ([#&#8203;2143](https://redirect.github.com/oras-project/oras/issues/2143))
   
   #### Verification
   
   Release artifacts are signed with the ORAS project release key `C6FC42F0DE84A345FAADB742F44418110791EF37`. Signatures (`.asc` files) are attached to this release.
   
   Public keys are available in the [KEYS](https://redirect.github.com/oras-project/oras/blob/main/KEYS) file.
   
   </details>
   
   ---
   
   ### Configuration
   
   📅 **Schedule**: (UTC)
   
   - Branch creation
     - At any time (no schedule defined)
   - Automerge
     - At any time (no schedule defined)
   
   🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
   
   ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
   
   🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
   
   ---
   
    - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
   
   ---
   
   This PR was generated by [Mend Renovate](https://mend.io/renovate/). View the [repository job log](https://developer.mend.io/github/apache/superset-kubernetes-operator).
   <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0NC4xODAuMCIsInVwZGF0ZWRJblZlciI6IjQ0LjE4MC4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJkZXBlbmRlbmNpZXMiXX0=-->
   


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org

Re: [PR] chore(deps): update dependency oras-project/oras to v1.3.5 [superset-kubernetes-operator]

Posted by "villebro (via GitHub)" <gi...@apache.org>.

villebro merged PR #484:
URL: https://github.com/apache/superset-kubernetes-operator/pull/484


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org

For queries about this service, please contact Infrastructure at:
users@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscribe@superset.apache.org
For additional commands, e-mail: notifications-help@superset.apache.org