Skip to content

chore(deps): update tools#638

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/tools
Open

chore(deps): update tools#638
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/tools

Conversation

@renovate

@renovate renovate Bot commented Jun 9, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Update Change Age Adoption Passing Confidence
Azure/azure-workload-identity minor v1.5.1 → v1.6.0 age adoption passing confidence
github.com/cli/cli/v2 minor v2.93.0 → v2.94.0 age adoption passing confidence
golang.org/x/tools minor v0.45.0 → v0.46.0 age adoption passing confidence
protocolbuffers/protobuf minor v35.0 → v35.1 age adoption passing confidence
redhat-openshift-ecosystem/openshift-preflight patch 1.19.0 → 1.19.1 age adoption passing confidence

Release Notes

Azure/azure-workload-identity (Azure/azure-workload-identity)

v1.6.0

Compare Source

v1.6.0 - 2026-06-11

⚠️ Breaking change: projected token path moved (#​1720)

The projected service account token mount path changed:

Before After
Mount path /var/run/secrets/azure/tokens /var/run/secrets/azure/wi/token
Full token path /var/run/secrets/azure/tokens/azure-identity-token /var/run/secrets/azure/wi/token/azure-identity-token

[!IMPORTANT]
Never hardcode the token file path. Always read AZURE_FEDERATED_TOKEN_FILE — the webhook owns this path and it may change again in future releases.

AZURE_FEDERATED_TOKEN_FILE is updated by the webhook to point at the new path. Applications using DefaultAzureCredential / WorkloadIdentityCredential (or reading AZURE_FEDERATED_TOKEN_FILE directly) work without changes:

tokenFilePath := os.Getenv("AZURE_FEDERATED_TOKEN_FILE")

Workaround for apps that hardcode the old path — add an init container that symlinks old → new:

initContainers:
- name: symlink-token
  image: busybox:latest
  command: ["sh", "-c", "mkdir -p /var/run/secrets/azure/tokens && ln -sf /var/run/secrets/azure/wi/token/azure-identity-token /var/run/secrets/azure/tokens/azure-identity-token"]
  volumeMounts:
  - { name: azure-tokens-compat, mountPath: /var/run/secrets/azure/tokens }
containers:
- name: your-app
  image: your-image
  volumeMounts:
  - { name: azure-tokens-compat, mountPath: /var/run/secrets/azure/tokens, readOnly: true }
volumes:
- name: azure-tokens-compat
  emptyDir: {}

Changelog

Bug Fixes 🐞
  • 806062f fix: update Go version, remove K8s version table, bump kind versions (#​1722)
Build 🏭
  • a7bab3c build: run go builder on $BUILDPLATFORM for cross-arch images (#​1734)
Code Refactoring 💎
  • 89ee981 refactor: migrate proxy from MSAL to azidentity SDK with LRU credential cache (#​1721)
  • bdb8258 refactor: use sets.Set instead of map[string]struct{} (#​1616)
Continuous Integration 💜
Documentation 📘
  • 360876a docs: Update docs to reflect actual proxy sidecar behavior (#​1643)
  • 4716a8d docs: use azure storge static web serving rather than public access (#​1635)
Features 🌈
  • 3045cd0 feat: allow extraEnv/extraVolumes/extraVolumeMounts in webhook chart (#​1732)
  • d878231 feat: support custom token endpoint injection for workload identity (#​1720)
  • 533d7f5 feat: add --version flag for webhook and proxy (#​1629)
Maintenance 🔧
cli/cli (github.com/cli/cli/v2)

v2.94.0: GitHub CLI 2.94.0

Compare Source

Issue types, sub-issues, and relationships in gh issue

issue-view-monas-cafe-with-frame

This release brings GitHub's advanced issue features to gh issue create, edit, view, and list. You can set and view an issue's type, organize work with sub-issues, and track blocked-by and blocking relationships without leaving the command line:

# Set an issue's type
gh issue create --type Bug
gh issue edit 123 --type Bug

# Organize work with sub-issues
gh issue create --parent 100
gh issue edit 100 --add-sub-issue 123

# Track blocked-by and blocking relationships
gh issue create --blocked-by 200
gh issue edit 123 --add-blocking 300

Issue types and sub-issues are available on GitHub.com and GHES 3.17+; relationships require GHES 3.19+.

Manage discussions with gh discussion

discussion-view-monas-cafe-with-frame

This release introduces the discussion command set for working with GitHub Discussions in gh:

# List discussions
gh discussion list

# View a discussion, its comments, or replies to a comment
gh discussion view 123 --comments

# Create a discussion
gh discussion create

# Edit a discussion
gh discussion edit 123

# Comment on a discussion
gh discussion comment 123

# Reply to a comment using its URL
gh discussion comment <url>

Run gh discussion --help for more information.

[!NOTE]
The discussion command set is in preview and is subject to change without notice.

Equip your agents with new gh features

Teach your agents how to leverage new GitHub CLI features on release day by installing the gh skill:

# Install
gh skill install cli/cli gh --scope user

# Or update
gh skill update gh

What's Changed

✨ Features
🐛 Fixes
📚 Docs & Chores
:dependabot: Dependencies

Full Changelog: cli/cli@v2.93.0...v2.94.0

protocolbuffers/protobuf (protocolbuffers/protobuf)

v35.1: Protocol Buffers v35.1

Compare Source

Announcements
  • Protobuf News may include additional announcements or pre-announcements for upcoming changes.
Bazel
  • Bazel 9 tests for csharp, hpb, objc, php, python, rust and upb (#​27598) (4469e38)
  • Break protobuf dependency on Bazel's proto fragment. Only respect the Starlark versions of --proto_toolchain_for*. This is a breaking change from 35.0, but matches the behavior in 34.x. (1f99c52)
C++
  • Add cord setters to repeated string fields. (6efa174)
UPB (Python/PHP/Ruby C-Extension)
  • Avoid UB in upb by switching to the XCT section, which will run our constructors before the compiler-generated initializers. (c35b977)
redhat-openshift-ecosystem/openshift-preflight (redhat-openshift-ecosystem/openshift-preflight)

v1.19.1

Compare Source

What's Changed

Full Changelog: redhat-openshift-ecosystem/openshift-preflight@1.19.0...1.19.1

Configuration

📅 Schedule: (in timezone Europe/London)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added dependencies Pull requests that update a dependency file ok-to-test labels Jun 9, 2026
@cert-manager-prow cert-manager-prow Bot added the dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. label Jun 9, 2026
@cert-manager-prow

cert-manager-prow Bot commented Jun 9, 2026

Copy link
Copy Markdown
Contributor

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign jakexks for approval. For more information see the Code Review Process.

The full list of commands accepted by this bot can be found here.

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@cert-manager-prow cert-manager-prow Bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Jun 9, 2026
@renovate renovate Bot force-pushed the renovate/tools branch from 3a4729f to 76f3773 Compare June 11, 2026 00:39
@renovate renovate Bot changed the title chore(deps): update tools to v1.19.1 chore(deps): update tools Jun 11, 2026
@renovate
chore(deps): update tools
76e498e 
Signed-off-by: Renovate Bot <renovate-bot@users.noreply.github.com>
@renovate renovate Bot force-pushed the renovate/tools branch from 76f3773 to 76e498e Compare June 11, 2026 22:47
@cert-manager-prow cert-manager-prow Bot added size/M Denotes a PR that changes 30-99 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Jun 11, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dco-signoff: yes Indicates that all commits in the pull request have the valid DCO sign-off message. dependencies Pull requests that update a dependency file ok-to-test size/M Denotes a PR that changes 30-99 lines, ignoring generated files.

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants