Bump the gomod group with 4 updates

[dependabot]

Bumps the gomod group with 4 updates: github.com/libopenstorage/stork, github.com/sirupsen/logrus, github.com/slok/kubewebhook/v2 and github.com/urfave/cli.

Updates github.com/libopenstorage/stork from 1.4.1-0.20220512171133-b99428ee1ddf to 2.6.4-rc2+incompatible

Release notes

Sourced from github.com/libopenstorage/stork's releases.

Release Stork v2.6.3

New Features

• Added support to watch newly registered CRDs and auto create ApplicationRegistration resource for them. (#792)
• Add suspend option support for the following new apps (#811) :

       - perconadb
       - prometheus
       - rabbitmq
       - kafka (strimzi)
       - postgress(acid.zalan.do)

Improvements

• Added support for specifying ResourceType in ApplicationBackup that allows selecting specific resources while backing up a namespace. (#799)
• Support of pvc object migration in case of migration spec with disable application resource migration. (#783)
• All stork prometheus metrics will now have stork_ as prefix, eg. stork_application_backup_status, stork_migration_status, stork_hyperconverged_pods_total etc. All existing metrics will now move over to stork_ prefix convention. (#816)

Bug Fixes

• Configure side-effect parameter for stork webhook. This will allow running kubectl --dry-run command when stork webook is enabled. (#802)
• Restores of certain applications would partially succeed in k8s 1.20 due to the addition of a new field ClusterIPs to Services. This new field is now handled in restores. (#800)
• Allow excluding resources from GetResources API. This allows handling of ApplicationRestores in k8s 1.20 and above where certain resources like kube-root.ca config map are always created when a new namespace is created. (#798)
• Added support to watch newly registered CRDs and auto create ApplicationRegistration resource for them. (#792)
• Fixed issue with failed snapshots being retried. Printing correct error state for snapshots (#786)

Docker Hub Image: openstorage/stork:2.6.3

Release Stork v2.6.0

New Features

• Added the ability to backup and restore CSI volumes (#697).
• Added Prometheus metrics and Grafana dashboards for the scheduler extender and health monitor (#710).

Improvements

• Added a mechanism to change the log level during runtime. You can do this by adding the log level to /tmp/loglevel and then sending SIGUSR1 to the process (#735).
• Pruned migrations that are in PartialSuccess state. Previously, Stork retained all migrations in this state, causing the MigrationSchedule object to become very large (#742).

Bug Fixes

• Stork now triggers volume backups in batches of 10 and retries update failures due to conflicts. This behavior prevents issues where a backup is triggered, but Stork fails to update the CR (#707).
• Added support for disabling the cronjob object upon migration to a remote cluster. You can now also activate/deactivate a cronjob object using the storkctl activate/deactivate migration <migration_namespace> command (#731).
• Stork now fetches ApplicationRegistration objects only once when preparing resources. Previously, Stork made multiple calls to the kube-apiserver, causing delays during migration and backup (#732).
• Fixed issue where cluster-scoped CRs were being collected for migration and backup (#732).
• Fixed the volume size for EBS backups, which were previously incorrectly reported in GiB (#733).

Docker Hub Image: openstorage/stork:2.6.0

Release Stork v2.5.0

New Features

• Added support for specifying * as a wildcard to select all namespaces in the ApplicationBackup and ApplicationBackupSchedule specs (#693).
• Added support for specifying which resource to restore using ApplicationRestore. By default, all resources in the namespace will be restored (#652).
• Added support for specifying which resource to back up using ApplicationBackup. By default, all resources in the namespace will be backed up (#706).

... (truncated)

Commits

• See full diff in compare view

Updates github.com/sirupsen/logrus from 1.9.0 to 1.9.3

Release notes

Sourced from github.com/sirupsen/logrus's releases.

v1.9.3

• Fix a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines sirupsen/logrus@f9291a5 (re-apply sirupsen/logrus#1376)
• Fix panic in Writer sirupsen/logrus@d40e25c

Full Changelog: sirupsen/logrus@v1.9.2...v1.9.3

v1.9.2

• Revert sirupsen/logrus#1376, which introduced a regression in v1.9.1

Full Changelog: sirupsen/logrus@v1.9.1...v1.9.2

v1.9.1

What's Changed

• Fix data race in hooks.test package by @​FrancoisWagner in sirupsen/logrus#1362
• Add instructions to use different log levels for local and syslog by @​tommyblue in sirupsen/logrus#1372
• This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by @​ozfive in sirupsen/logrus#1376
• Use text when shows the logrus output by @​xieyuschen in sirupsen/logrus#1339

New Contributors

• @​FrancoisWagner made their first contribution in sirupsen/logrus#1362
• @​tommyblue made their first contribution in sirupsen/logrus#1372
• @​ozfive made their first contribution in sirupsen/logrus#1376
• @​xieyuschen made their first contribution in sirupsen/logrus#1339

Full Changelog: sirupsen/logrus@v1.9.0...v1.9.1

Commits

• d40e25c fix panic in Writer
• f9291a5 Revert "Revert "Merge pull request #1376 from ozfive/master""
• 352781d Revert "Merge pull request #1376 from ozfive/master"
• b30aa27 Merge pull request #1339 from xieyuschen/patch-1
• 6acd903 Merge pull request #1376 from ozfive/master
• 105e63f Merge pull request #1 from ashmckenzie/ashmckenzie/fix-writer-scanner
• c052ba6 Scan text in 64KB chunks
• e59b167 Merge pull request #1372 from tommyblue/syslog_different_loglevels
• 766cfec This commit fixes a potential denial of service vulnerability in logrus.Write...
• 70234da Add instructions to use different log levels for local and syslog
• Additional commits viewable in compare view

Updates github.com/slok/kubewebhook/v2 from 2.1.0 to 2.6.0

Release notes

Sourced from github.com/slok/kubewebhook/v2's releases.

v2.6.0

2.6.0 - 2024-03-31

Changed

• Update to Kubernetes v1.29.
• Update to Go v1.22.

v2.5.0

2.5.0 - 2022-10-15

Changed

• Update to Kubernetes v1.25.
• Update to Go v1.19.

v2.4.0

2.4.0 - 2022-10-15

Changed

• Update to Kubernetes v1.24.

v2.3.0

2.3.0 - 2022-03-23

Changed

• Update to Kubernetes v1.23.
• Fix panics on missing requestKind and RequestResource on v1beta1.
• Fix panics on missing requestKind and RequestResource on v1.
• Update to Go v1.18.

Fixed

• Unauthenticated control plane denial of service attack.

v2.2.0

[2.2.0] - 2021-12-05

Added

... (truncated)

Changelog

Sourced from github.com/slok/kubewebhook/v2's changelog.

[2.6.0] - 2024-03-31

Changed

• Update to Kubernetes v1.29.
• Update to Go v1.22.

[2.5.0] - 2022-10-15

Changed

• Update to Kubernetes v1.25.
• Update to Go v1.19.

[2.4.0] - 2022-10-15

Changed

• Update to Kubernetes v1.24.

[2.3.0] - 2022-03-23

Changed

• Update to Kubernetes v1.23.
• Fix panics on missing requestKind and RequestResource on v1beta1.
• Fix panics on missing requestKind and RequestResource on v1.
• Update to Go v1.18.

Fixed

• Unauthenticated control plane denial of service attack.

[2.2.0] - 2021-12-05

Added

• Infer automatically (using Unstructured) Kubernetes types that don't implement metav1.Object like corev1.PodExecOptions.
• Tracing support with Opentelemetry implementation.

Changed

• Update to Kubernetes v1.22.

Fixed

• Review errors on http handler were not being logged, now are logged as Error.

Commits

• 28b6ebe Merge pull request #254 from slok/slok/k8s-129
• 33d5428 Get ready for v2.6.0 release
• e705fcf Merge pull request #253 from slok/slok/k8s-129
• fd8c87a Update all dependencies to be compatible with Kubernetes 1.29
• f91b423 Merge pull request #233 from al-cheb/fix_webhhok_typo
• b6da872 Fix typo in webhhok
• 66c244e Merge pull request #226 from slok/dependabot/go_modules/github.com/prometheus...
• af7dfb4 Bump github.com/prometheus/client_golang from 1.13.0 to 1.14.0
• 563e7b4 Merge pull request #224 from slok/dependabot/go_modules/github.com/stretchr/t...
• 8751db2 Bump github.com/stretchr/testify from 1.8.0 to 1.8.1
• Additional commits viewable in compare view

Updates github.com/urfave/cli from 1.22.5 to 1.22.15

Release notes

Sourced from github.com/urfave/cli's releases.

v1.22.15

What's Changed

• Bump dependencies, tested go versions, and actions steps for v1 by @​meatballhat in urfave/cli#1886

Full Changelog: urfave/cli@v1.22.14...v1.22.15

v1.22.14

What's Changed

• Update dependencies for v1 by @​meatballhat in urfave/cli#1748

Full Changelog: urfave/cli@v1.22.13...v1.22.14

v1.22.13

What's Changed

• Shift tested Go versions in v1-maint by @​meatballhat in urfave/cli#1693
• Update dependencies for v1-maint by @​meatballhat in urfave/cli#1712

Full Changelog: urfave/cli@v1.22.12...v1.22.13

v1.22.12

What's Changed

• Update many v1 things by @​meatballhat in urfave/cli#1654

Full Changelog: urfave/cli@v1.22.11...v1.22.12

v1.22.11

What's Changed

• Fix:(issue_1338) Fix behaviour of skip flag parsing if there are subc… by @​dearchap in urfave/cli#1640
• Doc:(issue_1195) Add integration testing example in docs by @​dearchap in urfave/cli#1641
• Fix:(issue_1142). Allow comma in altsrc flag names by @​dearchap in urfave/cli#1645
• Run CI on v1 series by @​meatballhat in urfave/cli#1646

Full Changelog: urfave/cli@v1.22.10...v1.22.11

v1.22.10

What's Changed

• Ignore dirs that are ignored in v2 by @​meatballhat in urfave/cli#1428
• Fix:(issue_1094) Dont execute Before/After during shell completions by @​dearchap in urfave/cli#1459

Full Changelog: urfave/cli@v1.22.9...v1.22.10

v1.22.9

What's Changed

• do fix CI by @​kolyshkin in urfave/cli#1384

... (truncated)

Commits

• 2421d23 Merge pull request #1886 from urfave/v1-upgrades
• 4df8f14 Update to current md2man format
• dd16550 Bump dependencies, tested go versions, and actions steps for v1
• f5ca62f Merge pull request #1748 from urfave/v1-update-deps
• 8b495cc Update dependencies for v1
• ed683a7 Merge pull request #1712 from urfave/v1-update-deps
• 3133e8d Update dependencies for v1-maint
• f0d71d7 Merge pull request #1693 from urfave/v1-bump-go-versions
• e44ce3a Shift tested Go versions in v1-maint
• 49f9838 Merge pull request #1654 from urfave/v1-ci-updates
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[dependabot]

Looks like these dependencies are updatable in another way, so this is no longer needed.