Lokesh Mandvekar
55e2081cc9
Bump golang.org/x/crypto to 7b82a4e
...
Resolves: GHSA-8c26-wmh5-6g9v - CVE-2022-27191
Buildah doesn't seem to be directly affected as the logic in question
is not called.
golang.org/x/crypto@1baeb1ce contains the actual CVE fix. Using the
latest upstream commit to also include support for SHA-2.
Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
2022-04-12 14:11:44 -04:00
Aditya R
3f63d91ac9
vendor: bump c/image to v5.16.0-rhel/8b06d33
...
Use race-free `AddNames` instead of `SetNames` by bumping `c/image`
Signed-off-by: Aditya R <arajan@redhat.com>
2022-04-07 01:15:53 +05:30
Aditya R
4ce604b757
Use race-free c/storage by bumping it to 1.36.3
...
Signed-off-by: Aditya R <arajan@redhat.com>
2022-04-07 01:10:59 +05:30
Nalin Dahyabhai
9f71aefbff
Bump github.com/prometheus/client_golang to v1.11.1
...
Resolves: CVE-2022-21698
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2022-03-24 16:26:14 -04:00
Nalin Dahyabhai
fea62ccc70
bump(github.com/modern-go/reflect2) to v1.0.2
...
github.com/modern-go/reflect2, pulled in by github.com/json-iterator/go,
which we use in multiple dependencies, wasn't compatible with Go 1.18
until v1.0.2, so we need to update from v1.0.1.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2022-02-01 16:45:15 -05:00
Lokesh Mandvekar
3ec002a7ac
Bump containerd to v1.5.7
...
Fixes: GHSA-c2h3-6mxw-7mvq
Vulnerable versions: >= 1.5.0, < 1.5.7
Patched version: 1.5.7
`Impact`
A bug was found in containerd where container root directories and
some plugins had insufficiently restricted permissions, allowing
otherwise unprivileged Linux users to traverse directory contents
and execute programs. When containers included executable programs
with extended permission bits (such as setuid), unprivileged Linux
users could discover and execute those programs. When the UID of
an unprivileged Linux user on the host collided with the file
owner or group inside a container, the unprivileged Linux user on
the host could discover, read, and modify those files.
`Patches`
This vulnerability has been fixed in containerd 1.4.11 and
containerd 1.5.7. Users should update to these version when they
are released and may restart containers or update directory
permissions to mitigate the vulnerability.
`Workarounds`
Limit access to the host to trusted users. Update directory
permission on container bundles directories.
Signed-off-by: Lokesh Mandvekar <lsm5@fedoraproject.org>
2022-01-24 14:41:56 -05:00
Ashley Cui
f6ff8fd97b
Vendor containers/common v0.44.2
...
Signed-off-by: Ashley Cui <acui@redhat.com>
2021-09-27 14:23:46 -04:00
Daniel J Walsh
b44c7b64da
Vendor in containers/common v0.44.0
...
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-09-13 10:38:41 -04:00
dependabot[bot]
fc37ada27e
build(deps): bump github.com/containers/storage from 1.35.0 to 1.36.0
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.35.0 to 1.36.0.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/main/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.35.0...v1.36.0 )
---
updated-dependencies:
- dependency-name: github.com/containers/storage
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-09-13 08:28:27 +00:00
dependabot[bot]
d277035355
build(deps): bump github.com/opencontainers/selinux from 1.8.4 to 1.8.5
...
Bumps [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux ) from 1.8.4 to 1.8.5.
- [Release notes](https://github.com/opencontainers/selinux/releases )
- [Commits](https://github.com/opencontainers/selinux/compare/v1.8.4...v1.8.5 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/selinux
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-09-10 08:34:55 +00:00
Aditya Rajan
36b74ad49b
vendor: bump c/common to v0.43.3-0.20210902095222-a7acc160fb25
...
Signed-off-by: Aditya Rajan <arajan@redhat.com>
2021-09-02 16:08:45 +05:30
flouthoc
82eedac468
tag: Support tagging manifest list instead of resolving to images
...
Following commit makes sure when `buildah tag` is invoked on a manifest
list, it tags the same manifest list instead of resolving image and
tagiing it.
Signed-off-by: Aditya Rajan <flouthoc.git@gmail.com>
2021-08-30 14:44:58 +05:30
dependabot[bot]
980d352b29
build(deps): bump github.com/containers/image/v5 from 5.15.2 to 5.16.0
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.15.2 to 5.16.0.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.15.2...v5.16.0 )
---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-26 08:26:50 +00:00
Nalin Dahyabhai
1ec4983d50
Replace golang.org/x/crypto/ssh/terminal with golang.org/x/term
...
The golang.org/x/crypto/ssh/terminal package has been deprecated and
replaced upstream by golang.org/x/term, so switch to that. It's a
simple 1:1 replacement.
[NO NEW TESTS NEEDED]
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2021-08-24 15:35:12 -04:00
Daniel J Walsh
e71191ef5b
Merge branch 'main' into dependabot/go_modules/github.com/onsi/gomega-1.16.0
2021-08-23 13:39:25 -04:00
OpenShift Merge Robot
da2b428c56
Merge pull request #3470 from containers/dependabot/go_modules/github.com/fsouza/go-dockerclient-1.7.4
...
build(deps): bump github.com/fsouza/go-dockerclient from 1.7.3 to 1.7.4
2021-08-23 13:32:21 -04:00
dependabot[bot]
b367ffa0b1
build(deps): bump github.com/opencontainers/runc from 1.0.1 to 1.0.2
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.0.1 to 1.0.2.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Commits](https://github.com/opencontainers/runc/compare/v1.0.1...v1.0.2 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-23 08:38:07 +00:00
dependabot[bot]
e0375fdd5e
build(deps): bump github.com/onsi/gomega from 1.15.0 to 1.16.0
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.15.0 to 1.16.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.15.0...v1.16.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-23 08:37:22 +00:00
dependabot[bot]
9c264c1cd5
build(deps): bump github.com/fsouza/go-dockerclient from 1.7.3 to 1.7.4
...
Bumps [github.com/fsouza/go-dockerclient](https://github.com/fsouza/go-dockerclient ) from 1.7.3 to 1.7.4.
- [Release notes](https://github.com/fsouza/go-dockerclient/releases )
- [Changelog](https://github.com/fsouza/go-dockerclient/blob/main/container_changes_test.go )
- [Commits](https://github.com/fsouza/go-dockerclient/compare/v1.7.3...v1.7.4 )
---
updated-dependencies:
- dependency-name: github.com/fsouza/go-dockerclient
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-23 08:36:34 +00:00
dependabot[bot]
28cf4bf468
build(deps): bump github.com/containers/common from 0.43.1 to 0.43.2
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.43.1 to 0.43.2.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.43.1...v0.43.2 )
---
updated-dependencies:
- dependency-name: github.com/containers/common
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-20 09:48:53 +00:00
dependabot[bot]
081334e784
build(deps): bump github.com/containers/image/v5 from 5.15.1 to 5.15.2
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.15.1 to 5.15.2.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.15.1...v5.15.2 )
---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-19 08:33:51 +00:00
dependabot[bot]
c504863905
build(deps): bump github.com/containers/image/v5 from 5.15.0 to 5.15.1
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.15.0 to 5.15.1.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.15.0...v5.15.1 )
---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-17 15:27:05 +00:00
Daniel J Walsh
49740138fa
build(deps): bump github.com/containers/common from 0.42.1 to 0.43.1
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.42.1 to 0.43.1.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.42.1...v0.43.1 )
---
updated-dependencies:
- dependency-name: github.com/containers/common
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-17 06:19:47 -04:00
dependabot[bot]
a9d7ba6333
build(deps): bump github.com/opencontainers/selinux from 1.8.3 to 1.8.4
...
Bumps [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux ) from 1.8.3 to 1.8.4.
- [Release notes](https://github.com/opencontainers/selinux/releases )
- [Commits](https://github.com/opencontainers/selinux/compare/v1.8.3...v1.8.4 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/selinux
dependency-type: direct:production
update-type: version-update:semver-patch
...
[NO TESTS NEEDED] This is just a revendoring.
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-08-16 16:38:38 -04:00
openshift-ci[bot]
88f55c8f15
Merge pull request #3409 from ashley-cui/sshagent
...
Implement SSH RUN mount
2021-08-06 22:35:40 +00:00
Ashley Cui
3a5635f90b
Implement SSH RUN mount
...
Allow ssh socket from host or certain ssh keys to be exposed to a
certain RUN instruction, but not any other instructions, as well as not
showing up in the final image.
This is done by spawining a new agent from buildah and mounting
the listening socket inside the run. SSH_AUTH_SOCK inside the container
will be set to the socket mountpoint. The defualt mountpoint is
/run/buildkit/ssh_agent.{i}
Signed-off-by: Ashley Cui <acui@redhat.com>
2021-08-06 09:00:06 -04:00
dependabot[bot]
80afa137ed
build(deps): bump github.com/onsi/gomega from 1.14.0 to 1.15.0
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.14.0 to 1.15.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.14.0...v1.15.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-06 12:33:48 +00:00
dependabot[bot]
9586d35842
build(deps): bump github.com/containerd/containerd from 1.5.1 to 1.5.5
...
Bumps [github.com/containerd/containerd](https://github.com/containerd/containerd ) from 1.5.1 to 1.5.5.
- [Release notes](https://github.com/containerd/containerd/releases )
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md )
- [Commits](https://github.com/containerd/containerd/compare/v1.5.1...v1.5.5 )
---
updated-dependencies:
- dependency-name: github.com/containerd/containerd
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-06 08:28:29 +00:00
Nalin Dahyabhai
4d904fdfc1
make vendor-in-container
...
It looks like there's some behavior difference between the 1.13 that CI
uses and the 1.16 on my system.
Signed-off-by: Nalin Dahyabhai <nalin@redhat.com>
2021-08-04 15:23:11 -04:00
openshift-ci[bot]
0022921a99
Merge pull request #3423 from vrothberg/fix-3415
...
set base-image annotations
2021-08-03 21:39:33 +00:00
Valentin Rothberg
d97694b013
set base-image annotations
...
Since opencontainers/image-spec/pull/822/ the OCI spec supports two new
annotations to set the fully-qualified name and the digest of the base
image.
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2021-08-03 15:51:18 +02:00
dependabot[bot]
4f30cd1532
build(deps): bump github.com/opencontainers/selinux from 1.8.2 to 1.8.3
...
Bumps [github.com/opencontainers/selinux](https://github.com/opencontainers/selinux ) from 1.8.2 to 1.8.3.
- [Release notes](https://github.com/opencontainers/selinux/releases )
- [Commits](https://github.com/opencontainers/selinux/compare/v1.8.2...v1.8.3 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/selinux
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-08-03 08:31:46 +00:00
TomSweeneyRedHat
a80feebe87
c/image, c/storage, c/common vendor before Podman 3.3 release
...
In preparation for Podman v3.3.0, start the vendor dance
c/common - v0.42.0
c/image - v5.15.0
c/storage - v1.33.0
Signed-off-by: TomSweeneyRedHat <tsweeney@redhat.com>
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2021-08-02 16:09:24 +02:00
dependabot[bot]
914a7e5299
build(deps): bump github.com/containers/image/v5 from 5.13.2 to 5.14.0
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.13.2 to 5.14.0.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.13.2...v5.14.0 )
---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-07-27 13:22:21 -04:00
dependabot[bot]
b935dbf50d
build(deps): bump github.com/containers/storage from 1.32.6 to 1.33.0
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.32.6 to 1.33.0.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/main/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.32.6...v1.33.0 )
---
updated-dependencies:
- dependency-name: github.com/containers/storage
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-07-27 08:29:27 +00:00
Valentin Rothberg
a23615aecf
refine dangling filter
...
By proxy by vendoring containers/common. Previously, a "dangling" image
was an untagged image; just a described in the Docker docs. The
definition of dangling has now been refined to an untagged image without
children to be compatible with Docker.
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2021-07-21 14:04:36 +02:00
dependabot[bot]
12c8c4cc38
build(deps): bump github.com/opencontainers/runc from 1.0.0 to 1.0.1
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.0.0 to 1.0.1.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Commits](https://github.com/opencontainers/runc/compare/v1.0.0...v1.0.1 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-07-19 08:23:43 +00:00
Daniel J Walsh
36e17cbb9b
Fix excludes exception begining with / or ./
...
Vendor in containers/storage v1.32.6 for the fix
Fixes: https://github.com/containers/buildah/issues/3272
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-07-09 13:59:16 -04:00
dependabot[bot]
25c0d3d832
build(deps): bump github.com/onsi/gomega from 1.13.0 to 1.14.0
...
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega ) from 1.13.0 to 1.14.0.
- [Release notes](https://github.com/onsi/gomega/releases )
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md )
- [Commits](https://github.com/onsi/gomega/compare/v1.13.0...v1.14.0 )
---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-07-08 08:23:53 +00:00
Valentin Rothberg
fbd99d001d
vendor containers/common@main
...
The `IgnorePlatform` options has been removed from the
`LookupImageOptions` in libimage to properly support multi-arch images.
Buildah always set it to true.
Also temporarily remove /usr/share/containers/containers.conf. c/common
is now throwing warnings when facing unknown keys which unfortunately is
the case with the upstream containers.conf and ultimately breaks CI
since some output checks are failing.
Once an updated containers.conf has been shipped, we can revert the
change.
[NO TESTS NEEDED]
Signed-off-by: Valentin Rothberg <rothberg@redhat.com>
2021-07-07 13:28:20 +02:00
dependabot[bot]
5603612843
build(deps): bump github.com/containers/ocicrypt from 1.1.1 to 1.1.2
...
Bumps [github.com/containers/ocicrypt](https://github.com/containers/ocicrypt ) from 1.1.1 to 1.1.2.
- [Release notes](https://github.com/containers/ocicrypt/releases )
- [Commits](https://github.com/containers/ocicrypt/compare/v1.1.1...v1.1.2 )
---
updated-dependencies:
- dependency-name: github.com/containers/ocicrypt
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-29 08:22:18 +00:00
dependabot[bot]
477e431817
build(deps): bump github.com/containers/storage from 1.32.4 to 1.32.5
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.32.4 to 1.32.5.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/main/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.32.4...v1.32.5 )
---
updated-dependencies:
- dependency-name: github.com/containers/storage
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-25 08:27:24 +00:00
dependabot[bot]
dfc3875f35
build(deps): bump github.com/opencontainers/runc
...
Bumps [github.com/opencontainers/runc](https://github.com/opencontainers/runc ) from 1.0.0-rc95 to 1.0.0.
- [Release notes](https://github.com/opencontainers/runc/releases )
- [Commits](https://github.com/opencontainers/runc/compare/v1.0.0-rc95...v1.0.0 )
---
updated-dependencies:
- dependency-name: github.com/opencontainers/runc
dependency-type: direct:production
update-type: version-update:semver-patch
...
[NO TESTS NEEDED]
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-06-23 08:43:28 -04:00
dependabot[bot]
d9f7c7a02b
build(deps): bump github.com/containers/storage from 1.32.2 to 1.32.3
...
Bumps [github.com/containers/storage](https://github.com/containers/storage ) from 1.32.2 to 1.32.3.
- [Release notes](https://github.com/containers/storage/releases )
- [Changelog](https://github.com/containers/storage/blob/main/docs/containers-storage-changes.md )
- [Commits](https://github.com/containers/storage/compare/v1.32.2...v1.32.3 )
---
updated-dependencies:
- dependency-name: github.com/containers/storage
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-21 13:05:59 +00:00
dependabot[bot]
b0dd50766f
build(deps): bump github.com/containers/common from 0.40.0 to 0.40.1
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.40.0 to 0.40.1.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.40.0...v0.40.1 )
---
updated-dependencies:
- dependency-name: github.com/containers/common
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-21 08:29:14 +00:00
dependabot[bot]
3cf8145d76
build(deps): bump github.com/containers/common from 0.39.0 to 0.40.0
...
Bumps [github.com/containers/common](https://github.com/containers/common ) from 0.39.0 to 0.40.0.
- [Release notes](https://github.com/containers/common/releases )
- [Commits](https://github.com/containers/common/compare/v0.39.0...v0.40.0 )
---
updated-dependencies:
- dependency-name: github.com/containers/common
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-06-17 16:29:49 -04:00
dependabot[bot]
fbfce827f2
build(deps): bump github.com/containers/image/v5 from 5.13.0 to 5.13.1
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.13.0 to 5.13.1.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.13.0...v5.13.1 )
---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <support@github.com>
2021-06-17 08:24:33 +00:00
dependabot[bot]
9cced13a45
build(deps): bump github.com/containers/image/v5 from 5.12.0 to 5.13.0
...
Bumps [github.com/containers/image/v5](https://github.com/containers/image ) from 5.12.0 to 5.13.0.
- [Release notes](https://github.com/containers/image/releases )
- [Commits](https://github.com/containers/image/compare/v5.12.0...v5.13.0 )
---
updated-dependencies:
- dependency-name: github.com/containers/image/v5
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Daniel J Walsh <dwalsh@redhat.com>
2021-06-16 05:43:51 -04:00
OpenShift Merge Robot
e451a6f7ef
Merge pull request #3291 from containers/dependabot/go_modules/github.com/fsouza/go-dockerclient-1.7.3
...
build(deps): bump github.com/fsouza/go-dockerclient from 1.7.2 to 1.7.3
2021-06-10 16:50:28 -04:00
OpenShift Merge Robot
99aa24bf1c
Merge pull request #3289 from containers/dependabot/go_modules/go.etcd.io/bbolt-1.3.6
...
build(deps): bump go.etcd.io/bbolt from 1.3.5 to 1.3.6
2021-06-10 16:49:16 -04:00