Bump the go-dependencies group with 8 updates

[dependabot]

Bumps the go-dependencies group with 8 updates:

Package	From	To
github.com/go-logr/logr	1.4.2	1.4.3
github.com/kubernetes-csi/external-snapshotter/client/v8	8.0.0	8.2.0
github.com/onsi/ginkgo/v2	2.22.1	2.23.4
github.com/onsi/gomega	1.36.2	1.36.3
github.com/xdg-go/stringprep	1.0.2	1.0.4
golang.org/x/crypto	0.36.0	0.40.0
golang.org/x/tools	0.30.0	0.34.0
gotest.tools/v3	3.5.1	3.5.2

Updates github.com/go-logr/logr from 1.4.2 to 1.4.3

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.3

Minor release.

What's Changed

• Fix slog tests for 1.25 by @​hoeppi-google in go-logr/logr#361
• Remove one exception from Slog testing by @​thockin in go-logr/logr#362

New Contributors

• @​hoeppi-google made their first contribution in go-logr/logr#361

Full Changelog: go-logr/logr@v1.4.2...v1.4.3

Commits

• 38a1c47 build(deps): bump github/codeql-action from 3.28.17 to 3.28.18
• f08bedd build(deps): bump actions/setup-go from 5.4.0 to 5.5.0
• 6295e99 build(deps): bump golangci/golangci-lint-action from 7.0.0 to 8.0.0
• 028840d build(deps): bump github/codeql-action from 3.28.15 to 3.28.17
• 511e5fa Merge pull request #367 from go-logr/dependabot/github_actions/github/codeql-...
• d806463 build(deps): bump github/codeql-action from 3.28.13 to 3.28.15
• 158c311 Merge pull request #366 from thockin/master
• c79ddb3 Update to support golangci-lint v2
• 20a64ba build(deps): bump github/codeql-action from 3.28.12 to 3.28.13
• 0385e14 Add comments around slog exceptions
• Additional commits viewable in compare view

Updates github.com/kubernetes-csi/external-snapshotter/client/v8 from 8.0.0 to 8.2.0

Release notes

Sourced from github.com/kubernetes-csi/external-snapshotter/client/v8's releases.

client/v8.2.0

The release tag client/v8.2.0 is for VolumeSnapshot and VolumeGroupSnapshot APIs and client library which are in a separate go package.

Urgent Upgrade Notes

(No, really, you MUST read this before you upgrade)

• The validation webhook was deprecated in v8.0.0 and it is now removed. The validation webhook would prevent creating multiple default volume snapshot classes and multiple default volume group snapshot classes for the same CSI driver. With the removal of the validation webhook, an error will still be raised when dynamically provisioning a VolumeSnapshot or VolumeGroupSnapshot when multiple default volume snapshot classes or multiple default volume group snapshot classes for the same CSI driver exist. (#1186, @​yati1998)

Changes by Kind

API Change

• Add a field called volumegroupsnapshotcontent.status.volumeSnapshotHandlePairList that allows the consumer to quickly map volume handles with snapshot handles. (#1169, @​leonardoce)
• The volumegroupsnapshot.status.pvcVolumeSnapshotRefList field has been removed. VolumeShapshots members of a dynamically provisioned VolumeGroupSnapshot will have their persistentVolumeClaimName set, allowing the consumer to map the PVC being snapshotted with the corresponding snapshot. (#1200, @​leonardoce)
• The volumegroupsnapshotcontent.status.pvVolumeSnapshotContentList field has been removed. The same information can be found in volumegroupsnapshotcontent.status.volumeSnapshotHandlePairList (#1199, @​leonardoce)
• VolumeGroupSnapshotContent.status.creationTime is now a metav1.Time instead of an unix epoch time (#1235, @​leonardoce)
• VolumeGroupSnapshot, VolumeGroupSnapshotContent, and VolumeGroupSnapshotClass are now available in v1beta1 version. The support for the v1alpha1 version have been removed. (#1150, @​leonardoce)

Full Changelog

https://github.com/kubernetes-csi/external-snapshotter/blob/v8.2.0/CHANGELOG/CHANGELOG-8.2.md

v8.2.0

Overall Status

Volume snapshotting has been a GA feature since Kubernetes v1.20.

Supported CSI Spec Versions

1.0-1.11

• VolumeGroupSnapshot moves to GA in CSI spec v1.11.0.

Minimum Kubernetes version

1.25

Recommended Minimum Kubernetes version

1.25

Container

docker pull registry.k8s.io/sig-storage/snapshot-controller:v8.2.0
docker pull registry.k8s.io/sig-storage/csi-snapshotter:v8.2.0

Changes by Kind

API Change

• VolumeGroupSnapshot, VolumeGroupSnapshotContent, and VolumeGroupSnapshotClass are now available in v1beta1 version. The support for the v1alpha1 version have been removed. (#1150, @​leonardoce)

... (truncated)

Commits

• 0f21537 Merge pull request #1152 from manishym/snapshotter_panic_in_volumegroupsnapsh...
• 3f3b8b3 Merge pull request #1239 from xing-yang/release-notes-8.2
• a1074f5 Add nil check for groupSnapshotContent in deleteCSIGroupSnapshotOperation and...
• a992258 Add release notes for v8.2.0
• 46e8028 Merge pull request #1238 from AndrewSirenko/fix-snapshot-controller
• 78efd29 Merge pull request #1237 from leonardoce/update-api-approved-annotation
• 965e259 wip: Snapshot Controller startup should not LIST all volumesnapshots
• c0cb7b7 Merge pull request #1235 from leonardoce/metatime
• 370225d Update the API Approved Annotation
• cb86a44 Change CreationTime in VolumeGroupSnapshotContentStatus from *int64 to *metav...
• Additional commits viewable in compare view

Updates github.com/onsi/ginkgo/v2 from 2.22.1 to 2.23.4

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.23.4

2.23.4

Prior to this release Ginkgo would compute the incorrect number of available CPUs when running with -p in a linux container. Thanks to @​emirot for the fix!

Features

• Add automaxprocs for using CPUQuota [2b9c428]

Fixes

• clarify gotchas about -vet flag [1f59d07]

Maintenance

• bump dependencies [2d134d5]

v2.23.3

2.23.3

Fixes

• allow - as a standalone argument [cfcc1a5]
• Bug Fix: Add GinkoTBWrapper.Chdir() and GinkoTBWrapper.Context() [feaf292]
• ignore exit code for symbol test on linux [88e2282]

v2.23.2

2.23.2

🎉🎉🎉

At long last, some long-standing performance gaps between ginkgo and go test have been resolved!

Ginkgo operates by running go test -c to generate test binaries, and then running those binaries. It turns out that the compilation step of go test -c is slower than go test's compilation step because go test strips out debug symbols (ldflags=-w) whereas go test -c does not.

Ginkgo now passes the appropriate ldflags to go test -c when running specs to strip out symbols. This is only done when it is safe to do so and symbols are preferred when profiling is enabled and when ginkgo build is called explicitly.

This, coupled, with the instructions for disabling XProtect on MacOS yields a much better performance experience with Ginkgo.

v2.23.1

2.23.1

🚨 For users on MacOS 🚨

A long-standing Ginkgo performance issue on MacOS seems to be due to mac's antimalware XProtect. You can follow the instructions here to disable it in your terminal. Doing so sped up Ginkgo's own test suite from 1m8s to 47s.

Fixes

Ginkgo's CLI is now a bit clearer if you pass flags in incorrectly:

• make it clearer that you need to pass a filename to the various profile flags, not an absolute directory [a0e52ff]
• emit an error and exit if the ginkgo invocation includes flags after positional arguments [b799d8d]

... (truncated)

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.23.4

Prior to this release Ginkgo would compute the incorrect number of available CPUs when running with -p in a linux container. Thanks to @​emirot for the fix!

Features

• Add automaxprocs for using CPUQuota [2b9c428]

Fixes

• clarify gotchas about -vet flag [1f59d07]

Maintenance

• bump dependencies [2d134d5]

2.23.3

Fixes

• allow - as a standalone argument [cfcc1a5]
• Bug Fix: Add GinkoTBWrapper.Chdir() and GinkoTBWrapper.Context() [feaf292]
• ignore exit code for symbol test on linux [88e2282]

2.23.2

🎉🎉🎉

At long last, some long-standing performance gaps between ginkgo and go test have been resolved!

Ginkgo operates by running go test -c to generate test binaries, and then running those binaries. It turns out that the compilation step of go test -c is slower than go test's compilation step because go test strips out debug symbols (ldflags=-w) whereas go test -c does not.

Ginkgo now passes the appropriate ldflags to go test -c when running specs to strip out symbols. This is only done when it is safe to do so and symbols are preferred when profiling is enabled and when ginkgo build is called explicitly.

This, coupled, with the instructions for disabling XProtect on MacOS yields a much better performance experience with Ginkgo.

2.23.1

🚨 For users on MacOS 🚨

A long-standing Ginkgo performance issue on MacOS seems to be due to mac's antimalware XProtect. You can follow the instructions here to disable it in your terminal. Doing so sped up Ginkgo's own test suite from 1m8s to 47s.

Fixes

Ginkgo's CLI is now a bit clearer if you pass flags in incorrectly:

• make it clearer that you need to pass a filename to the various profile flags, not an absolute directory [a0e52ff]
• emit an error and exit if the ginkgo invocation includes flags after positional arguments [b799d8d]

This might cause existing CI builds to fail. If so then it's likely that your CI build was misconfigured and should be corrected. Open an issue if you need help.

2.23.0

... (truncated)

Commits

• 229c981 v2.23.4
• 2d134d5 bump dependencies
• 2b9c428 Add automaxprocs for using CPUQuota
• 31137de Revert "Add automaxprocs to automatically match the linux container CPU Quota"
• 91b11b8 Add automaxprocs to automatically match the linux container CPU Quota
• cdfddb6 maybe escape quotes when you put them in a quoted string.
• 1f59d07 clarify gotchas about -vet flag
• 7ab7d10 bump all the things
• 04a9a74 v2.23.3
• cfcc1a5 allow - as a standalone argument
• Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.36.2 to 1.36.3

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.36.3

1.36.3

Maintenance

• bump all the things [adb8b49]
• chore: replace interface{} with any [7613216]
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
• remove spurious "toolchain" from go.mod (#819) [a0e85b9]
• Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
• Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
• Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
• Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
• Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
• Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
• Fix typos (#813) [a1d518b]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.36.3

Maintenance

• bump all the things [adb8b49]
• chore: replace interface{} with any [7613216]
• Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822) [9fe5259]
• remove spurious "toolchain" from go.mod (#819) [a0e85b9]
• Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823) [604a8b1]
• Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772) [36fbc84]
• Bump github-pages from 231 to 232 in /docs (#778) [ced70d7]
• Bump rexml from 3.2.6 to 3.3.9 in /docs (#788) [c8b4a07]
• Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812) [06431b9]
• Bump webrick from 1.8.1 to 1.9.1 in /docs (#800) [b55a92d]
• Fix typos (#813) [a1d518b]

Commits

• 2251143 v1.36.3
• adb8b49 bump all the things
• 7613216 chore: replace interface{} with any
• 9fe5259 Bump google.golang.org/protobuf from 1.36.1 to 1.36.5 (#822)
• a0e85b9 remove spurious "toolchain" from go.mod (#819)
• 604a8b1 Bump golang.org/x/net from 0.33.0 to 0.35.0 (#823)
• 36fbc84 Bump activesupport from 6.0.6.1 to 6.1.7.5 in /docs (#772)
• ced70d7 Bump github-pages from 231 to 232 in /docs (#778)
• c8b4a07 Bump rexml from 3.2.6 to 3.3.9 in /docs (#788)
• 06431b9 Bump github.com/onsi/ginkgo/v2 from 2.22.1 to 2.22.2 (#812)
• Additional commits viewable in compare view

Updates github.com/xdg-go/stringprep from 1.0.2 to 1.0.4

Release notes

Sourced from github.com/xdg-go/stringprep's releases.

v1.0.4

Maintenance

• Bump golang.org/x/text to v0.3.8 due to CVE-2022-32149

v1.0.3

Maintenance

• Bump golang.org/x/text to v0.3.7 due to CVE-2021-38561

Changelog

Sourced from github.com/xdg-go/stringprep's changelog.

[v1.0.4] - 2022-12-07

Maintenance

• Bump golang.org/x/text to v0.3.8 due to CVE-2022-32149

[v1.0.3] - 2022-03-01

Maintenance

• Bump golang.org/x/text to v0.3.7 due to CVE-2021-38561

Commits

• dabf774 Add 1.18/19 to test matrix; remove 1.11/12/13
• 9836471 Bump golang.org/x/text to v0.3.8
• eb5c8f2 Add Go 1.17 to CI matrix
• 6b23024 Update CHANGELOG.md
• 544ab23 chore: update golang.org/x/text (CVE-2021-38561)
• See full diff in compare view

Updates golang.org/x/crypto from 0.36.0 to 0.40.0

Commits

• 459a9db go.mod: update golang.org/x dependencies
• 74e709a ssh: add AlgorithmNegotiationError
• b3790b8 acme: fix TLSALPN01ChallengeCert for IP address identifiers
• 1dc4269 acme: add Pebble integration testing
• 97bf787 blake2b: implement hash.XOF
• 952517d x509roots/fallback: update bundle
• c6fce02 ssh: refuse to parse certificates that use a certificate as signing key
• 0ae49b8 ssh: reject certificate keys used as signature keys for SSH certs
• 3bf9d2a ssh/test: skip KEX test if unsupported by system SSH client
• 9bab967 go.mod: update golang.org/x dependencies
• Additional commits viewable in compare view

Updates golang.org/x/tools from 0.30.0 to 0.34.0

Commits

• 578c121 go.mod: update golang.org/x dependencies
• f114dcf gopls/internal/protocol: refine DocumentURI Clean method and its usages
• 82ee0fd internal/mcp: change paginateList to a generic helper
• 64bfecc gopls/internal/golang: fix extract bug with anon functions
• 4546fbd internal/mcp: unify json tag parsing
• 82473ce gopls/doc/release: tweak v0.19
• f3c581f gopls/internal/protocol: add DocumentURI.Base accessor
• d9bacab gopls/internal/server: improve "editing generated file" warning
• 1afeefa internal/mcp: unexport FileResourceHandler
• 33d5988 gopls/internal/server: Organize Imports of generated files
• Additional commits viewable in compare view

Updates gotest.tools/v3 from 3.5.1 to 3.5.2

Release notes

Sourced from gotest.tools/v3's releases.

v3.5.2

What's Changed

• assert: ensure message is always displayed & fix under bazel by @​cstrahan in gotestyourself/gotest.tools#276
• go.mod: golang.org/x/tools v0.13.0 for go1.22+ compatibility by @​thaJeztah in gotestyourself/gotest.tools#282
• poll: Continue(): use format.Message for formatting by @​thaJeztah in gotestyourself/gotest.tools#279
• fix TestFromDirSymlink on Windows due to missing drive-letter by @​thaJeztah in gotestyourself/gotest.tools#283
• Fix various linting issues and minor bugs by @​thaJeztah in gotestyourself/gotest.tools#280
• fix badges in readme, gofmt, and minor linting fix by @​thaJeztah in gotestyourself/gotest.tools#284
• circleci: add go1.21, go1.22, go1.23, and update golangci-lint to v1.60.3 by @​thaJeztah in gotestyourself/gotest.tools#285
• assert, assert/cmp: un-deprecate assert.ErrorType for now by @​thaJeztah in gotestyourself/gotest.tools#286

New Contributors

• @​cstrahan made their first contribution in gotestyourself/gotest.tools#276

Full Changelog: gotestyourself/gotest.tools@v3.5.1...v3.5.2

Commits

• 0b81523 Merge pull request #286 from thaJeztah/undeprecate_ErrorType
• c5dad8f Merge pull request #285 from thaJeztah/update_go_versions
• 160ab0e Remove go1.18 and go1.19
• 8569bbc Merge pull request #284 from thaJeztah/cleanup_readme
• 4256834 assert, assert/cmp: un-deprecate assert.ErrorType for now
• eb32186 circleci: update golangci-lint to v1.60.3
• 5fc8473 circleci: add go1.21, go1.22, go1.23
• 6f26df9 circleci: test generics on go1.20 and windows as well
• 732dfcf internal/difflib: rename funcs that collided with built-ins
• 7d95f55 internal/difflib: gofmt
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions