Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump github.com/vmware-tanzu/carvel-vendir from 0.30.0 to 0.30.1 #1007

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 5, 2022

Bumps github.com/vmware-tanzu/carvel-vendir from 0.30.0 to 0.30.1.

Release notes

Sourced from github.com/vmware-tanzu/carvel-vendir's releases.

v0.30.1

What's Changed

Full Changelog: carvel-dev/vendir@v0.30.0...v0.30.1

📂 Files Checksum

01734145373cb1ba5053a364ff97f11296f4b2940cfb5d536b07012bde50628b  vendir-darwin-amd64
162a1d188f9881d34e052bde56fed89d483d4b7584e7234dfc90bffa92a1f63b  vendir-linux-arm64
5c437ae0476460e9e0f5c99f58cec635a7af929b2af61dc81e9fd17199c0aa2f  vendir-darwin-arm64
ab660041eb5144521425ad4c1703bcd62acf32a64401e2a3200ebb91358b65c4  vendir-linux-amd64
c2908535e2c744e5269ed4519c0c8e98750322d4204cf56ecd97bea09de7a9dc  vendir-windows-amd64.exe

Commits
  • 54ab879 Merge pull request #203 from vmware-tanzu/nh-cves_v0.30.x
  • 1a3b9aa Merge pull request #202 from vmware-tanzu/nh-golang-1.19.3_v0.30.x
  • 5d0339e Bump dependencies to remove CVEs
  • e8b34da Bump golang to v1.19.3
  • See full diff in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/vmware-tanzu/carvel-vendir](https://github.com/vmware-tanzu/carvel-vendir) from 0.30.0 to 0.30.1.
- [Release notes](https://github.com/vmware-tanzu/carvel-vendir/releases)
- [Changelog](https://github.com/vmware-tanzu/carvel-vendir/blob/develop/.goreleaser.yml)
- [Commits](carvel-dev/vendir@v0.30.0...v0.30.1)

---
updated-dependencies:
- dependency-name: github.com/vmware-tanzu/carvel-vendir
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Dec 5, 2022
Copy link
Contributor

@neil-hickey neil-hickey left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, will merge alongside #1009

@neil-hickey neil-hickey merged commit 843e3cd into develop Dec 13, 2022
@neil-hickey neil-hickey deleted the dependabot/go_modules/github.com/vmware-tanzu/carvel-vendir-0.30.1 branch December 13, 2022 19:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
cla-not-required dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants