Skip to content

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 29, 2024

This PR contains the following updates:

Package Update Change
crossplane-contrib/function-patch-and-transform minor v0.4.0 -> v0.7.0
crossplane-contrib/provider-helm minor v0.19.0 -> v0.20.0
crossplane-contrib/provider-kubernetes minor v0.12.1 -> v0.16.0
upbound/configuration-gcp-network minor v0.5.0 -> v0.6.0
upbound/provider-gcp minor v1.0.1 -> v1.10.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

crossplane-contrib/function-patch-and-transform (crossplane-contrib/function-patch-and-transform)

v0.7.0

Compare Source

What's Changed

New Contributors

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.6.0...v0.7.0

v0.6.0

Compare Source

What's Changed

New Contributors

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.5.0...v0.6.0

v0.5.0

Compare Source

Notable Changes

What's Changed

New Contributors

Full Changelog: crossplane-contrib/function-patch-and-transform@v0.4.0...v0.5.0

crossplane-contrib/provider-helm (crossplane-contrib/provider-helm)

v0.20.0

Compare Source

What's Changed

[!NOTE]
Starting with v0.20.0, the image is published under the upbound organization in the Upbound Marketplace.
The new location for the image is xpkg.upbound.io/upbound/provider-helm:v0.20.0. Please use the new location when installing/upgrading the provider.

New Contributors

Full Changelog: crossplane-contrib/provider-helm@v0.19.0...v0.20.0

crossplane-contrib/provider-kubernetes (crossplane-contrib/provider-kubernetes)

v0.16.0

Compare Source

What's Changed

[!NOTE]
Starting with v0.16.0, the image is published under the upbound organization in the Upbound Marketplace.
The new location for the image is xpkg.upbound.io/upbound/provider-kubernetes:v0.16.0. Please use the new location when installing/upgrading the provider.

New Contributors

Full Changelog: crossplane-contrib/provider-kubernetes@v0.15.0...v0.16.0

v0.15.0

Compare Source

This release introduces Alpha support for Server Side Apply. The feature can be enabled by--enable-server-side-apply flag.

github.com/Azure/kubelogin is bumped from 0.1.1 to 0.1.4 to mitigate CVE-2024-35255

What's Changed

New Contributors

Full Changelog: crossplane-contrib/provider-kubernetes@v0.14.1...v0.15.0

v0.14.1

Compare Source

What's Changed

Full Changelog: crossplane-contrib/provider-kubernetes@v0.14.0...v0.14.1

v0.14.0

Compare Source

Release v0.14.0 brings a bunch of various improvements and features including:

  • MR metrics
  • Azure Workload and Upbound Identity authentication
  • CEL readiness check policy
  • Watch resource alpha feature

What's Changed

New Contributors

Full Changelog: crossplane-contrib/provider-kubernetes@v0.13.0...v0.14.0

v0.13.0

Compare Source

This release introduces a new ObservedObjectCollection API type that enables users to observe a set of objects not managed directly by the provider. See #​209 and #​217 for the motivation and example usecases.

What's Changed

Full Changelog: crossplane-contrib/provider-kubernetes@v0.12.1...v0.13.0

upbound/configuration-gcp-network (upbound/configuration-gcp-network)

v0.6.0

Compare Source

What's Changed

New Contributors

Full Changelog: upbound/configuration-gcp-network@v0.5.0...v0.6.0

upbound/provider-gcp (upbound/provider-gcp)

v1.10.0

Compare Source

The v1.10.0 release introduces the following new resources.

  • ResponsePolicy.dns.gcp.upbound.io/v1beta1
  • ResponsePolicyRule.dns.gcp.upbound.io/v1beta1
  • TrustConfig.certificatemanager.gcp.upbound.io/v1beta1
What's Changed

Full Changelog: crossplane-contrib/provider-upjet-gcp@v1.9.0...v1.10.0

v1.9.0

Compare Source

The v1.9.0 release introduces the Terraform provider upgrade from 5.39.0 to 5.44.2, new resources, bug fixes, enhancements, and dependency updates.

Support for New Resources
  • ServiceConnectionPolicy.networkconnectivity.gcp.upbound.io/v1beta1
  • Cluster.redis.gcp.upbound.io/v1beta1
  • PolicyTag.datacatalog.gcp.upbound.io/v1beta1
  • Taxonomy.datacatalog.gcp.upbound.io/v1beta1
What's Changed
New Contributors

Full Changelog: crossplane-contrib/provider-upjet-gcp@v1.8.3...v1.9.0

v1.8.3

Compare Source

With the v1.8.3 release we cleaned uptest specific codes/placeholders from the examples in the marketplace.

What's Changed

Full Changelog: crossplane-contrib/provider-upjet-gcp@v1.8.2...v1.8.3

v1.8.2

Compare Source

The v1.8.2 release fixes the issue of hiding error messages.

What's Changed

Full Changelog: crossplane-contrib/provider-upjet-gcp@v1.8.1...v1.8.2

v1.8.1

Compare Source

The v1.8.1 release is reverting this commit, which caused a regression. See related PR https://github.com/crossplane-contrib/provider-upjet-gcp/pull/614

What's Changed

Full Changelog: crossplane-contrib/provider-upjet-gcp@v1.8.0...v1.8.1

v1.8.0

Compare Source

The v1.8.0 release introduces bug fixes, enhancements, and dependency updates.

What's Changed
New Contributors

Full Changelog: crossplane-contrib/provider-upjet-gcp@v1.7.0...v1.8.0

v1.7.0

Compare Source

The v1.7.0 release introduces the Terraform provider upgrade from v5.28.0 to v5.39.0, bug fixes, enhancements, and dependency updates.

What's Changed
New Contributors

Full Changelog: crossplane-contrib/provider-upjet-gcp@v1.6.0...v1.7.0

v1.6.0

Compare Source

The v1.6.0 release introduces new family providers, new resources, an important bug fix, enhancements, and dependency updates.

Support for New Family Providers
  • provider-gcp-orgpolicy
  • provider-gcp-tags
Support for New Resources
  • EnvgroupAttachment.apigee.gcp.upbound.io/v1beta1
  • EndpointAttachment.apigee.gcp.upbound.io/v1beta1
  • InstanceAttachment.apigee.gcp.upbound.io/v1beta1
  • AddonsConfig.apigee.gcp.upbound.io/v1beta1
  • SyncAuthorization.apigee.gcp.upbound.io/v1beta1
  • Policy.orgpolicy.gcp.upbound.io/v1beta1
  • TagBinding.tags.gcp.upbound.io/v1beta1
  • TagKey.tags.gcp.upbound.io/v1beta1
  • TagValue.tags.gcp.upbound.io/v1beta1
Bug Fix
What's Changed
New Contributors

Full Changelog: crossplane-contrib/provider-upjet-gcp@v1.5.0...v1.6.0

v1.5.0

Compare Source

In the release v1.5.0, we've upgraded the underlying Terraform provider version from 5.19.0 to 5.28.0

What's Changed

Full Changelog: crossplane-contrib/provider-upjet-gcp@v1.4.0...v1.5.0

v1.4.0

Compare Source

The v1.4.0 release introduces a new resource named HMACKey.storage.gcp.upbound.io/v1beta1, enhancements, and dependency updates.

What's Changed
New Contributors

Full Changelog: crossplane-contrib/provider-upjet-gcp@v1.3.0...v1.4.0

v1.3.0

Compare Source

The v1.3.0 release introduces bug fixes, documentation updates, and dependency updates.

What's Changed
New Contributors

Full Changelog: crossplane-contrib/provider-upjet-gcp@v1.2.0...v1.3.0

v1.2.0

Compare Source

The v1.2.0 release introduces converting singleton lists in the MR APIs to embedded objects, and dependency updates.

In this release, we've updated how Terraform configuration blocks are handled in our APIs. Terraform configuration blocks, even if they have a MaxItems constraint of 1, are (almost) always generated as lists. We now generate the lists with a MaxItems constraint of 1 as embedded objects in our MR APIs. This also helps when updating or patching via SSA the (previously list) objects.

The new v1beta2 versions of the CRD APIs incorporate these changes, ensuring backward compatibility for clients using the older v1beta1 versions. Any clients wanting to use the embedded objects-based APIs should update to the v1beta2 versions of the CRD APIs.

  • For instance, let's look at the YAML output of the DatabaseInstance.sql.gcp.upbound.io/v1beta2 resource's spec.forProvider, with this release we can see the spec.forProvider.settings field as an object:
spec:
  forProvider:
    databaseVersion: MYSQL_5_7
    deletionProtection: false
    project: official-provider-testing
    region: us-central1
    settings:
      diskSize: 20
      tier: db-f1-micro
  • If we look at the v1beta1 YAML output of the resource, we see the field as a list:
spec:
  forProvider:
    databaseVersion: MYSQL_5_7
    deletionProtection: false
    project: official-provider-testing
    region: us-central1
    settings:
    - diskSize: 20
      tier: db-f1-micro

For a detailed overview of the implementation, please see https://github.com/crossplane/upjet/pull/387 and https://github.com/crossplane/upjet/pull/400

What's Changed

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the automated label Nov 29, 2024
@renovate renovate bot requested a review from a team as a code owner November 29, 2024 21:33
Copy link

coworker-bot bot commented Nov 29, 2024

*upbound/configuration-gcp-gke* #50

Change Summary:

  • Multiple GCP provider version updates from v1.0.1 to v1.10.0 (compute, container, cloudplatform)
  • Provider Helm update from v0.19.0 to v0.20.0
  • Provider Kubernetes update from v0.12.1 to v0.16.0
  • Function patch-and-transform update from v0.4.0 to v0.7.0

Potential Vulnerabilities:

  • File: crossplane.yaml:21-23
  • Code: version: "v1.0.1" -> "v1.10.0"
  • Explanation: Major version jumps in infrastructure providers can introduce breaking changes in API compatibility or security configurations. Moving directly from v1.0.1 to v1.10.0 skips several versions which could include critical security patches that should be tested incrementally.

Code Smells:

  • None identified in this change set

Debug Logs:

  • None identified in this change set

Unintended Consequences:

  1. First Issue:

    • File: crossplane.yaml:21-34
    • Code: Multiple provider version updates
    • Explanation: Simultaneous update of multiple providers could cause integration issues between components. Provider versions should ideally be tested and updated individually to isolate potential issues.
  2. Second Issue:

    • File: crossplane.yaml:35-37
    • Code: version: "v0.4.0" -> "v0.7.0"
    • Explanation: The function-patch-and-transform update spans multiple minor versions which could affect existing transformation logic. Version 0.7.0 might handle patches differently than 0.4.0, potentially affecting existing configurations.

Risk Score: 7

@renovate renovate bot force-pushed the renovate/crossplane-dependencies branch from 5d558fc to 0813b43 Compare December 2, 2024 11:47
@kaessert
Copy link
Contributor

kaessert commented Dec 2, 2024

/test-examples

Signed-off-by: Tobias Kässer <tobias.kasser@upbound.io>
@kaessert
Copy link
Contributor

kaessert commented Dec 2, 2024

/test-examples

@kaessert kaessert merged commit c988c42 into main Dec 2, 2024
2 checks passed
@renovate renovate bot deleted the renovate/crossplane-dependencies branch December 2, 2024 16:17
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant