Upgrade dependencies

.circleci/config.yml

@@ -2,37 +2,37 @@ version: 2.1
 parameters:
   GOLANG_VERSION:
     type: string
-    default: "1.17.3"
+    default: "1.17.5"
   NODE_VERSION:
     type: string
     default: "16"
   RUST_VERSION:
     type: string
-    default: "1.56.1"
+    default: "1.57.0"
   DOCKER_VERSION:
     type: string
-    default: "20.10.7"
+    default: "20.10.11"
   HELM_VERSION_MIN:
     type: "string"
-    default: "v3.1.0"
+    default: "v3.2.0"
   HELM_VERSION_STABLE:
     type: "string"
-    default: "v3.7.1"
+    default: "v3.7.2"
   OLM_VERSION:
     type: "string"
-    default: "v0.19.1"
+    default: "v0.20.0"
   MKCERT_VERSION:
     type: "string"
     default: "v1.4.3"
   KUBECTL_VERSION:
     type: "string"
-    default: "v1.22.3"
+    default: "v1.22.5"
   GITHUB_VERSION:
     type: "string"
-    default: "2.2.0"
+    default: "2.4.0"
   SEMVER_VERSION:
     type: "string"
-    default: "3.2.0"
+    default: "3.3.0"
   KIND_VERSION:
     type: "string"
     default: "v0.11.1"
@@ -41,7 +41,7 @@ parameters:
     default: "v1.21.1@sha256:69860bda5563ac81e3c0057d654b5253219618a22ec3a346306239bba8cfa1a6"
   POSTGRESQL_VERSION:
     type: "string"
-    default: "11.14.0-debian-10-r0"
+    default: "11.14.0-debian-10-r28"
   GKE_STABLE_VERSION:
     type: "string"
     default: "1.20"

chart/kubeapps/Chart.lock

@@ -4,9 +4,9 @@ dependencies:
   version: 1.10.3
 - name: postgresql
   repository: https://charts.bitnami.com/bitnami
-  version: 10.15.1
+  version: 10.16.1
 - name: redis
   repository: https://charts.bitnami.com/bitnami
-  version: 15.7.4
-digest: sha256:73b53342a807a168a0c4c1addce0b3a2bd60ebc291f04e324ddb6a8d21124c45
-generated: "2022-01-12T09:28:21.845067896+01:00"
+  version: 15.7.6
+digest: sha256:4d341fe5fc00958161492557838fa045357f4c9233552d8c598558b9a544f1b1
+generated: "2022-01-19T12:08:08.180863464+01:00"

cmd/apprepository-controller/Dockerfile

@@ -1,6 +1,6 @@
 # syntax = docker/dockerfile:1
 
-FROM bitnami/golang:1.17.3 as builder
+FROM bitnami/golang:1.17.6 as builder
 WORKDIR /go/src/github.com/kubeapps/kubeapps
 COPY go.mod go.sum ./
 COPY pkg pkg

cmd/asset-syncer/Dockerfile

@@ -1,6 +1,6 @@
 # syntax = docker/dockerfile:1
 
-FROM bitnami/golang:1.17.3 as builder
+FROM bitnami/golang:1.17.6 as builder
 WORKDIR /go/src/github.com/kubeapps/kubeapps
 COPY go.mod go.sum ./
 COPY pkg pkg

cmd/asset-syncer/server/postgresql_db_test.go

@@ -17,7 +17,7 @@ limitations under the License.
 // Currently these tests will be skipped entirely unless the
 // ENABLE_PG_INTEGRATION_TESTS env var is set.
 // Run the local postgres with
-// docker run --publish 5432:5432 -e ALLOW_EMPTY_PASSWORD=yes bitnami/postgresql:11.13.0-debian-10-r39
+// docker run --publish 5432:5432 -e ALLOW_EMPTY_PASSWORD=yes bitnami/postgresql:11.14.0-debian-10-r28
 // in another terminal.
 package server
 

cmd/assetsvc/Dockerfile

@@ -1,6 +1,6 @@
 # syntax = docker/dockerfile:1
 
-FROM bitnami/golang:1.17.3 as builder
+FROM bitnami/golang:1.17.6 as builder
 WORKDIR /go/src/github.com/kubeapps/kubeapps
 COPY go.mod go.sum ./
 COPY pkg pkg

cmd/assetsvc/pkg/utils/postgres_db_test.go

@@ -17,7 +17,7 @@ limitations under the License.
 // Currently these tests will be skipped entirely unless the
 // ENABLE_PG_INTEGRATION_TESTS env var is set.
 // Run the local postgres with
-// docker run --publish 5432:5432 -e ALLOW_EMPTY_PASSWORD=yes bitnami/postgresql:11.13.0-debian-10-r39
+// docker run --publish 5432:5432 -e ALLOW_EMPTY_PASSWORD=yes bitnami/postgresql:11.14.0-debian-10-r28
 // in another terminal.
 package utils
 

cmd/assetsvc/server/server.go

@@ -25,7 +25,7 @@ import (
 	"github.com/heptiolabs/healthcheck"
 	"github.com/kubeapps/kubeapps/cmd/assetsvc/pkg/utils"
 	"github.com/kubeapps/kubeapps/pkg/dbutils"
-	"github.com/urfave/negroni"
+	negroni "github.com/urfave/negroni/v2"
 	log "k8s.io/klog/v2"
 )
 

cmd/kubeapps-apis/Dockerfile

@@ -1,6 +1,6 @@
 # syntax = docker/dockerfile:1
 
-FROM bitnami/golang:1.17.3 as builder
+FROM bitnami/golang:1.17.6 as builder
 WORKDIR /go/src/github.com/kubeapps/kubeapps
 COPY go.mod go.sum ./
 COPY pkg pkg

cmd/kubeapps-apis/buf.gen.yaml

@@ -48,6 +48,6 @@ plugins:
     opt:
       - outputClientImpl=grpc-web # client implementation it generates
       - esModuleInterop=true # use imports as required in modern ts setups
-      - useOptionals=true # use optional TypeScript properties instead of undefined
+      - useOptionals=messages # use optional TypeScript properties instead of undefined
       # - context=true #  Go-style ctx parameters # have to re-check it
       # - exportCommonSymbols=false # utility types like DeepPartial wont be exported (avoid some import conflicts) # have to re-check it

cmd/kubeapps-apis/buf.lock

@@ -5,9 +5,9 @@ deps:
     owner: googleapis
     repository: googleapis
     branch: main
-    commit: 867d9dd9b3c3471188f2f6022443c18c
-    digest: b1-r5E1yTfg4WtPV3sgHlE1Vwhkq-e06bTg65c6WMXyGPM=
-    create_time: 2021-11-25T15:03:01.772237Z
+    commit: c21d9ee7a8c74d6a8cce1338a2839547
+    digest: b1-Rdf7A_4QeTLvu6BdzORkijdmHsAyJd2MHEEZWBEUFIM=
+    create_time: 2022-01-15T15:04:23.382499Z
   - remote: buf.build
     owner: grpc-ecosystem
     repository: grpc-gateway

cmd/kubeapps-apis/docs/kubeapps-apis.swagger.json

@@ -2610,6 +2610,13 @@
             "in": "path",
             "required": true,
             "type": "string"
+          },
+          {
+            "name": "context.namespace",
+            "description": "Namespace. A namespace must be provided if the context of the operation is for a resource\nor resources in a particular namespace.\nFor requests to list items, not including a namespace here implies that the context\nfor the request is everything the requesting user can read, though the result can\nbe filtered by any filtering options of the request. Plugins may choose to return\nUnimplemented for some queries for which we do not yet have a need.",
+            "in": "query",
+            "required": false,
+            "type": "string"
           }
         ],
         "tags": [
@@ -2736,6 +2743,31 @@
             "in": "path",
             "required": true,
             "type": "string"
+          },
+          {
+            "name": "type",
+            "description": "Type. The type of the secret. Valid values are defined by the Type enumeration.",
+            "in": "query",
+            "required": false,
+            "type": "string",
+            "enum": [
+              "SECRET_TYPE_OPAQUE_UNSPECIFIED",
+              "SECRET_TYPE_SERVICE_ACCOUNT_TOKEN",
+              "SECRET_TYPE_DOCKER_CONFIG",
+              "SECRET_TYPE_DOCKER_CONFIG_JSON",
+              "SECRET_TYPE_BASIC_AUTH",
+              "SECRET_TYPE_SSH_AUTH",
+              "SECRET_TYPE_TLS",
+              "SECRET_TYPE_BOOTSTRAP_TOKEN"
+            ],
+            "default": "SECRET_TYPE_OPAQUE_UNSPECIFIED"
+          },
+          {
+            "name": "name",
+            "description": "Name. The name of the secret.",
+            "in": "query",
+            "required": false,
+            "type": "string"
           }
         ],
         "tags": [
@@ -2984,16 +3016,12 @@
     "protobufAny": {
       "type": "object",
       "properties": {
-        "typeUrl": {
+        "@type": {
           "type": "string",
           "description": "A URL/resource name that uniquely identifies the type of the serialized\nprotocol buffer message. This string must contain at least\none \"/\" character. The last segment of the URL's path must represent\nthe fully qualified name of the type (as in\n`path/google.protobuf.Duration`). The name should be in a canonical form\n(e.g., leading \".\" is not accepted).\n\nIn practice, teams usually precompile into the binary all types that they\nexpect it to use in the context of Any. However, for URLs which use the\nscheme `http`, `https`, or no scheme, one can optionally set up a type\nserver that maps type URLs to message definitions as follows:\n\n* If no scheme is provided, `https` is assumed.\n* An HTTP GET on the URL must yield a [google.protobuf.Type][]\n  value in binary format, or produce an error.\n* Applications are allowed to cache lookup results based on the\n  URL, or have them precompiled into a binary to avoid any\n  lookup. Therefore, binary compatibility needs to be preserved\n  on changes to types. (Use versioned type names to manage\n  breaking changes.)\n\nNote: this functionality is not currently available in the official\nprotobuf release, and it is not used for type URLs beginning with\ntype.googleapis.com.\n\nSchemes other than `http`, `https` (or the empty scheme) might be\nused with implementation specific semantics."
-        },
-        "value": {
-          "type": "string",
-          "format": "byte",
-          "description": "Must be a valid serialized protocol buffer of the above specified type."
         }
       },
+      "additionalProperties": {},
       "description": "`Any` contains an arbitrary serialized protocol buffer message along with a\nURL that describes the type of the serialized message.\n\nProtobuf library provides support to pack/unpack Any values in the form\nof utility functions or additional generated methods of the Any type.\n\nExample 1: Pack and unpack a message in C++.\n\n    Foo foo = ...;\n    Any any;\n    any.PackFrom(foo);\n    ...\n    if (any.UnpackTo(\u0026foo)) {\n      ...\n    }\n\nExample 2: Pack and unpack a message in Java.\n\n    Foo foo = ...;\n    Any any = Any.pack(foo);\n    ...\n    if (any.is(Foo.class)) {\n      foo = any.unpack(Foo.class);\n    }\n\n Example 3: Pack and unpack a message in Python.\n\n    foo = Foo(...)\n    any = Any()\n    any.Pack(foo)\n    ...\n    if any.Is(Foo.DESCRIPTOR):\n      any.Unpack(foo)\n      ...\n\n Example 4: Pack and unpack a message in Go\n\n     foo := \u0026pb.Foo{...}\n     any, err := anypb.New(foo)\n     if err != nil {\n       ...\n     }\n     ...\n     foo := \u0026pb.Foo{}\n     if err := any.UnmarshalTo(foo); err != nil {\n       ...\n     }\n\nThe pack methods provided by protobuf library will by default use\n'type.googleapis.com/full.type.name' as the type URL and the unpack\nmethods only use the fully qualified type name after the last '/'\nin the type URL, for example \"foo.bar.com/x/y.z\" will yield type\nname \"y.z\".\n\n\nJSON\n====\nThe JSON representation of an `Any` value uses the regular\nrepresentation of the deserialized, embedded message, with an\nadditional field `@type` which contains the type URL. Example:\n\n    package google.profile;\n    message Person {\n      string first_name = 1;\n      string last_name = 2;\n    }\n\n    {\n      \"@type\": \"type.googleapis.com/google.profile.Person\",\n      \"firstName\": \u003cstring\u003e,\n      \"lastName\": \u003cstring\u003e\n    }\n\nIf the embedded message type is well-known and has a custom JSON\nrepresentation, that representation will be embedded adding a field\n`value` which holds the custom JSON in addition to the `@type`\nfield. Example (for message [google.protobuf.Duration][]):\n\n    {\n      \"@type\": \"type.googleapis.com/google.protobuf.Duration\",\n      \"value\": \"1.212s\"\n    }"
     },
     "rpcStatus": {

cmd/kubeops/Dockerfile

@@ -1,6 +1,6 @@
 # syntax = docker/dockerfile:1
 
-FROM bitnami/golang:1.17.3 as builder
+FROM bitnami/golang:1.17.6 as builder
 WORKDIR /go/src/github.com/kubeapps/kubeapps
 COPY go.mod go.sum ./
 COPY pkg pkg

cmd/kubeops/internal/handler/handler.go

@@ -15,7 +15,7 @@ import (
 	"github.com/kubeapps/kubeapps/pkg/kube"
 	"github.com/kubeapps/kubeapps/pkg/response"
 	log "github.com/sirupsen/logrus"
-	"github.com/urfave/negroni"
+	negroni "github.com/urfave/negroni/v2"
 	"helm.sh/helm/v3/pkg/action"
 	"k8s.io/client-go/kubernetes"
 	"k8s.io/client-go/rest"

cmd/kubeops/server/server.go

@@ -34,7 +34,7 @@ import (
 	"github.com/kubeapps/kubeapps/pkg/auth"
 	backendHandlers "github.com/kubeapps/kubeapps/pkg/http-handler"
 	"github.com/kubeapps/kubeapps/pkg/kube"
-	"github.com/urfave/negroni"
+	negroni "github.com/urfave/negroni/v2"
 
 	log "k8s.io/klog/v2"
 )