Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

🌱 Update Golang Dependencies group to v3.14.2 #78

Merged
merged 1 commit into from
Feb 23, 2024

Conversation

cluster-stack-bot[bot]
Copy link
Contributor

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
helm.sh/helm/v3 v3.14.1 -> v3.14.2 age adoption passing confidence

Release Notes

helm/helm (helm.sh/helm/v3)

v3.14.2: Helm v3.14.2

Compare Source

Helm v3.14.2 is a security (patch) release. Users are strongly recommended to update to this release.

A Helm contributor discovered uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content.

Jakub Ciolek with AlphaSense discovered the vulnerability.

Installation and Upgrading

Download Helm v3.14.2. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.14.3 will contain only bug fixes and be released on March 13, 2024.
  • 3.15.0 is the next feature release and will be on May 08, 2024.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

| datasource | package         | from    | to      |
| ---------- | --------------- | ------- | ------- |
| go         | helm.sh/helm/v3 | v3.14.1 | v3.14.2 |
@cluster-stack-bot cluster-stack-bot bot added type/patch update/go size/XS Denotes a PR that changes 0-20 lines, ignoring generated files. labels Feb 22, 2024
@kranurag7 kranurag7 merged commit e9e6d3d into main Feb 23, 2024
5 checks passed
@kranurag7 kranurag7 deleted the renovate/patch-golang-deps branch February 23, 2024 19:06
Copy link
Contributor

@kranurag7 kranurag7 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

lgtm

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
size/XS Denotes a PR that changes 0-20 lines, ignoring generated files. type/patch update/go
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant