dependabot[bot]
f494e1064e
Bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0
...
Bumps [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go ) from 1.40.0 to 1.41.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.40.0...v1.41.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel
dependency-version: 1.41.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-04-24 20:52:14 +00:00
Xun Jiang/Bruce Jiang
f30be4b657
Merge pull request #9654 from pierluigilenoci/fix/honor-stderrthreshold
...
Honor stderrthreshold when logtostderr is enabled
2026-04-24 13:24:50 +08:00
peter woodman
7549408e21
update hashicorp/go-hclog and go-plugin to current version ( #9613 )
...
Run the E2E test on kind / get-go-version (push) Failing after 1m1s
Run the E2E test on kind / build (push) Has been skipped
Run the E2E test on kind / setup-test-matrix (push) Successful in 4s
Run the E2E test on kind / run-e2e-test (push) Has been skipped
Main CI / get-go-version (push) Successful in 11s
Main CI / Build (push) Failing after 32s
Close stale issues and PRs / stale (push) Successful in 11s
Trivy Nightly Scan / Trivy nightly scan (velero, main) (push) Failing after 1m41s
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-aws, main) (push) Failing after 1m13s
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-gcp, main) (push) Failing after 1m8s
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-microsoft-azure, main) (push) Failing after 1m17s
Signed-off-by: Peter Woodman <peter@shortbus.org >
2026-04-23 00:20:05 -04:00
Pierluigi Lenoci
0fa1910afb
fix: honor -stderrthreshold when -logtostderr is true (default)
...
klog v2 defaults -logtostderr to true, which silently ignores the
-stderrthreshold flag — all log levels are unconditionally sent to
stderr. This makes it impossible for log-aggregation systems to filter
by severity.
Bump klog to v2.140.0 and opt into the fixed behavior by setting
legacy_stderr_threshold_behavior=false and stderrthreshold=INFO (which
preserves current output while letting users override via CLI flags).
Ref: kubernetes/klog#212 , kubernetes/klog#432
Signed-off-by: Pierluigi Lenoci <pierluigilenoci@gmail.com >
2026-04-22 09:44:47 +02:00
Shubham Pampattiwar
1b5503e20b
Bump external-snapshotter to v8.4.0 for VGS v1beta2 support
...
Kubernetes 1.34 introduced VolumeGroupSnapshot v1beta2 API and
deprecated v1beta1. Distributions running K8s 1.34+ (e.g. OpenShift
4.21+) have removed v1beta1 VGS CRDs entirely, breaking Velero's
VGS functionality on those clusters.
This change bumps external-snapshotter/client/v8 from v8.2.0 to
v8.4.0 and migrates all VGS API usage from v1beta1 to v1beta2.
The v1beta2 API is structurally compatible - the Spec-level types
(GroupSnapshotHandles, VolumeGroupSnapshotContentSource) are
unchanged. The Status-level change (VolumeSnapshotHandlePairList
replaced by VolumeSnapshotInfoList) does not affect Velero as it
does not directly consume that type.
Fixes #9694
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
2026-04-08 15:46:06 -07:00
dependabot[bot]
417d3d2562
Bump google.golang.org/grpc from 1.77.0 to 1.79.3
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.77.0 to 1.79.3.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.77.0...v1.79.3 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-version: 1.79.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-19 05:05:16 +00:00
dependabot[bot]
19360622e7
Bump go.opentelemetry.io/otel/sdk from 1.38.0 to 1.40.0
...
Run the E2E test on kind / get-go-version (push) Failing after 1m11s
Run the E2E test on kind / build (push) Has been skipped
Run the E2E test on kind / setup-test-matrix (push) Successful in 3s
Run the E2E test on kind / run-e2e-test (push) Has been skipped
Bumps [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go ) from 1.38.0 to 1.40.0.
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases )
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md )
- [Commits](https://github.com/open-telemetry/opentelemetry-go/compare/v1.38.0...v1.40.0 )
---
updated-dependencies:
- dependency-name: go.opentelemetry.io/otel/sdk
dependency-version: 1.40.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2026-03-02 06:50:57 +00:00
Lyndon-Li
c556603ce2
bump kopia to 0.22.3
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2025-12-30 16:44:52 +08:00
dependabot[bot]
960a596e7b
Bump golang.org/x/crypto from 0.40.0 to 0.45.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.40.0 to 0.45.0.
- [Commits](https://github.com/golang/crypto/compare/v0.40.0...v0.45.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-version: 0.45.0
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-11-24 17:09:09 +08:00
Priyansh Choudhary
f1476defde
Update AzureAD Microsoft Authentication Library to v1.5.0 ( #9244 )
...
Run the E2E test on kind / build (push) Failing after 9s
Run the E2E test on kind / setup-test-matrix (push) Successful in 3s
Run the E2E test on kind / run-e2e-test (push) Has been skipped
Main CI / Build (push) Failing after 4s
Close stale issues and PRs / stale (push) Failing after 6m3s
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-aws, main) (push) Failing after 38s
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-gcp, main) (push) Failing after 2s
Trivy Nightly Scan / Trivy nightly scan (velero-plugin-for-microsoft-azure, main) (push) Failing after 6s
Trivy Nightly Scan / Trivy nightly scan (velero, main) (push) Failing after 11m22s
* Update AzureAD Microsoft Authentication Library to v1.5.0
Signed-off-by: Priyansh Choudhary <im1706@gmail.com >
* Added Changelog
Signed-off-by: Priyansh Choudhary <im1706@gmail.com >
---------
Signed-off-by: Priyansh Choudhary <im1706@gmail.com >
2025-09-11 14:07:46 -04:00
Xun Jiang
e8208097ba
Bump k8s library to v1.33.
...
Replace deprecated EventExpansion method with WithContext methods.
Modify UTs.
Align the E2E ginkgo CLI version with go.mod
Signed-off-by: Xun Jiang <xun.jiang@broadcom.com >
2025-09-10 17:58:38 +08:00
Lyndon-Li
e6377ff2fd
Merge branch 'main' into bump-up-kopia-0.21.1
2025-07-22 13:42:37 +08:00
Lyndon-Li
b5502330e5
bump up kopia to v0.21.1
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2025-07-22 13:40:12 +08:00
Shubham Pampattiwar
a73a150d98
Accommodate VGS workflows in PVC CSI plugin
...
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
Add changelog file
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
make update
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
lint fix
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
add unit tests for getVSForPVC func
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
Use v1beta1 instead of v1 v1alpha1
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
go mod tidy
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
update updateVGSCreatedVS func to use retry on conflict
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
make update minor fix
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
fix ut assert
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
Address PR feedback
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
minor updates
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
remove unsused func and add todo for dep upgrades
Signed-off-by: Shubham Pampattiwar <spampatt@redhat.com >
2025-07-21 11:36:40 -07:00
Lyndon-Li
2e7d11e3b6
bump kopia v0.20.1
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2025-06-18 13:35:12 +08:00
dependabot[bot]
08929d2e1c
Bump golang.org/x/net from 0.36.0 to 0.38.0 ( #8872 )
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.36.0 to 0.38.0.
- [Commits](https://github.com/golang/net/compare/v0.36.0...v0.38.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-version: 0.38.0
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-04-17 02:39:30 -04:00
dependabot[bot]
efad9a0e94
Bump github.com/golang-jwt/jwt/v5 from 5.2.1 to 5.2.2 ( #8806 )
...
Bumps [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt ) from 5.2.1 to 5.2.2.
- [Release notes](https://github.com/golang-jwt/jwt/releases )
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md )
- [Commits](https://github.com/golang-jwt/jwt/compare/v5.2.1...v5.2.2 )
---
updated-dependencies:
- dependency-name: github.com/golang-jwt/jwt/v5
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2025-03-24 15:01:52 +08:00
dependabot[bot]
55d1592aaa
Bump golang.org/x/net from 0.34.0 to 0.36.0
...
Bumps [golang.org/x/net](https://github.com/golang/net ) from 0.34.0 to 0.36.0.
- [Commits](https://github.com/golang/net/compare/v0.34.0...v0.36.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/net
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2025-03-13 01:58:14 +00:00
Tiger Kaovilai
5dbf002da7
go-mod-upgrade: golang.org/x/oauth2@v0.27.0 ( #8752 )
...
Signed-off-by: Tiger Kaovilai <tkaovila@redhat.com >
2025-03-05 09:21:16 -05:00
Tiger Kaovilai
bf2b1185bf
CVE-2025-22869 + go1.23
...
Including https://go-review.googlesource.com/c/crypto/+/652135 patch to fix CVE
```sh
go get golang.org/x/crypto@v0.35 .0 toolchain@none && go mod tidy
```
Signed-off-by: Tiger Kaovilai <tkaovila@redhat.com >
2025-03-04 09:47:16 -06:00
Lyndon-Li
f12b9c15b2
bump up kopia to 0.19.0
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2025-02-27 13:35:47 +08:00
Tiger Kaovilai
a3cee616dc
Upgrade go.mod k8s.io/ go.mod to v0.31.3 and set klog.SetLogger() for client-go ( #8450 )
...
Run the E2E test on kind / build (push) Failing after 5m44s
Run the E2E test on kind / setup-test-matrix (push) Successful in 3s
Run the E2E test on kind / run-e2e-test (push) Has been skipped
build-image / Build (push) Failing after 10s
Main CI / Build (push) Failing after 31s
Close stale issues and PRs / stale (push) Successful in 7s
Trivy Nightly Scan / Trivy nightly scan (velero, main) (push) Failing after 59s
Trivy Nightly Scan / Trivy nightly scan (velero-restore-helper, main) (push) Failing after 45s
Also bumped to support upgraded k8s.io/ deps.
- controller-gen to v0.16.5
- sigs.k8s.io/controller-runtime v0.19.2
Signed-off-by: Tiger Kaovilai <tkaovila@redhat.com >
2025-02-17 15:05:10 -05:00
Lyndon-Li
7caa52c1fa
bump up kopia
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2025-01-23 16:01:12 +08:00
Tiger Kaovilai
8cb04bba33
CVE-2024-45337 CVE-2024-45338
...
Replaces #8514
Signed-off-by: Tiger Kaovilai <tkaovila@redhat.com >
2024-12-21 00:59:48 +07:00
Lyndon-Li
3cd85f5b43
ping kopia to 0.18.2
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2024-12-03 13:06:26 +08:00
Wenkai Yin(尹文开)
8320df44fd
Merge pull request #8275 from ywk253100/241008_discovery
...
Bump up version of client-go and controller-runtime
2024-10-28 13:51:17 +08:00
Lyndon-Li
9d5bb455a6
bump up kopia for 1.15
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2024-10-16 15:45:05 +08:00
Wenkai Yin(尹文开)
0a4e417aab
Bump up version of client-go and controller-runtime
...
Bump up version of client-go to v0.30.5
Bump up version of controller-runtime to v0.18.5
Fixes #8274
Signed-off-by: Wenkai Yin(尹文开) <yinw@vmware.com >
2024-10-08 18:53:12 +08:00
Xun Jiang/Bruce Jiang
bf6215c894
Merge pull request #7793 from kaovilai/upgrade_robfig/cron/v3
...
Upgrade to robfig/cron/v3 to support time zone specification
2024-09-11 14:02:58 +08:00
Lyndon-Li
a80c9359bf
bump up kopia
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2024-08-29 13:10:08 +08:00
Xun Jiang
7a3b947961
Bump Ginkgo to v2.
...
Signed-off-by: Xun Jiang <blackpigletbruce@gmail.com >
2024-07-17 15:31:23 +08:00
Tiger Kaovilai
6c8d051269
Upgrade to robfig/cron/v3 to support time zone specification
...
Breaking change (can be mitigated if needed in the future): v1 branch accepted an optional seconds field at the beginning of the cron spec. This is non-standard and has led to a lot of confusion. The new default parser conforms to the standard as described by [the Cron wikipedia page.](https://en.wikipedia.org/wiki/Cron ). It is unlikely that this affects us per https://github.com/vmware-tanzu/velero/pull/31
Other notes:
> CRON_TZ is now the recommended way to specify the timezone of a single schedule, which is sanctioned by the specification. The legacy "TZ=" prefix will continue to be supported since it is unambiguous and easy to do so.
References: https://pkg.go.dev/github.com/robfig/cron/v3#readme-upgrading-to-v3-june-2019
Signed-off-by: Tiger Kaovilai <tkaovila@redhat.com >
2024-07-12 00:08:42 -04:00
dependabot[bot]
04f52beee0
Bump github.com/Azure/azure-sdk-for-go/sdk/azidentity
...
Bumps [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go ) from 1.5.2 to 1.6.0.
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases )
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md )
- [Commits](https://github.com/Azure/azure-sdk-for-go/compare/sdk/internal/v1.5.2...sdk/azcore/v1.6.0 )
---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2024-06-11 20:21:24 +00:00
Matthieu MOREL
14e98b89ad
Migrate from github.com/Azure/azure-storage-blob-go to github.com/Azure/azure-sdk-for-go/sdk/storage/azblob
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com >
2024-05-10 09:24:35 +00:00
Lyndon-Li
45b1b87055
pin kopia to 0.17.0
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2024-04-17 13:15:38 +08:00
Matthieu MOREL
facfb9552f
migrating to sdk/resourcemanager/**/arm** from services/**/mgmt/** ( #7596 )
...
Signed-off-by: Matthieu MOREL <matthieu.morel35@gmail.com >
2024-04-15 09:55:52 -04:00
Lyndon-Li
0392e31c3d
pin kopia to the latest commit
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2024-04-03 11:01:52 +08:00
Lyndon-Li
18976c0a62
kopia: index compaction during maintenance
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2024-03-29 15:24:47 +08:00
Lyndon-Li
5d48e36b55
open kopia with no index change
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2024-03-25 18:14:43 +08:00
dependabot[bot]
b3a53ee8df
Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 ( #7518 )
...
Bumps google.golang.org/protobuf from 1.31.0 to 1.33.0.
---
updated-dependencies:
- dependency-name: google.golang.org/protobuf
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-03-14 11:10:39 -04:00
Wenkai Yin(尹文开)
8752c3a820
Bump up the versions of severel Kubernetes-related libs
...
Bump up the versions of severel Kubernetes-related libs
Signed-off-by: Wenkai Yin(尹文开) <yinw@vmware.com >
2024-03-05 13:09:38 +08:00
Wenkai Yin(尹文开)
b509df5172
Upgrade the version of go plugin related libs/tools ( #7373 )
...
Upgrade the version of go plugin related libs/tools
Signed-off-by: Wenkai Yin(尹文开) <yinw@vmware.com >
2024-02-01 13:02:42 -05:00
Guillaume Delacour
373b24e2c1
Upgrade AWS SDK
...
Signed-off-by: Guillaume Delacour <delacoug@amazon.com >
2024-01-16 23:35:33 +01:00
dependabot[bot]
ddb4889301
Bump golang.org/x/crypto from 0.14.0 to 0.17.0
...
Bumps [golang.org/x/crypto](https://github.com/golang/crypto ) from 0.14.0 to 0.17.0.
- [Commits](https://github.com/golang/crypto/compare/v0.14.0...v0.17.0 )
---
updated-dependencies:
- dependency-name: golang.org/x/crypto
dependency-type: indirect
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-12-18 23:36:41 +00:00
Wenkai Yin(尹文开)
73c948d6bd
Merge pull request #6917 from 27149chen/rm-improvement
...
support JSON Merge Patch and Strategic Merge Patch in Resource Modifiers
2023-11-02 10:36:40 +08:00
dependabot[bot]
8be1f4beff
Bump google.golang.org/grpc from 1.58.2 to 1.58.3
...
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go ) from 1.58.2 to 1.58.3.
- [Release notes](https://github.com/grpc/grpc-go/releases )
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.2...v1.58.3 )
---
updated-dependencies:
- dependency-name: google.golang.org/grpc
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <support@github.com >
2023-10-25 21:43:35 +00:00
Daniel Jiang
b71d2b3898
Bump up aws sdk to aws-sdk-go-v2
...
Signed-off-by: Daniel Jiang <jiangd@vmware.com >
2023-10-24 17:01:26 +08:00
Lyndon-Li
d3a1a83c6d
bump to kopia 0.15.0
...
Signed-off-by: Lyndon-Li <lyonghui@vmware.com >
2023-10-23 12:03:21 +08:00
Xun Jiang
a726329e82
Bump golang version.
...
Bump golang version to v1.21.
Bump golang.org/x/net version to v0.17.0 in Velero and Restic.
Signed-off-by: Xun Jiang <jxun@vmware.com >
2023-10-13 16:30:23 +08:00
lou
e880c0d01b
update after review
...
Signed-off-by: lou <alex1988@outlook.com >
2023-10-07 16:33:33 +08:00