Bump the flux-deps group across 1 directory with 4 updates

[dependabot]

Bumps the flux-deps group with 4 updates in the / directory: github.com/fluxcd/pkg/http/fetch, github.com/fluxcd/pkg/runtime, github.com/fluxcd/pkg/tar and github.com/fluxcd/source-controller/api.

Updates github.com/fluxcd/pkg/http/fetch from 0.12.0 to 0.12.1

Commits

• 80ab4c3 Merge pull request #564 from fluxcd/update-deps
• 4759e6d runtime: update dependencies
• 403e3b1 version: update dependencies
• 7ff5151 ssh: update dependencies
• 1e5fbd8 ssa: update dependencies
• 1dd8df2 oci/tests/integration: update dependencies
• 31f7fe3 oci: update dependencies
• f94edcc kustomize: update dependencies
• 51f7565 http/fetch: update dependencies
• 90957c7 helmtestserver: update dependencies
• Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/runtime from 0.49.0 to 0.49.1

Commits

• 7fe9789 Merge pull request #810 from fluxcd/up-int-deps
• f674386 Update internal dependencies
• c8165af Merge pull request #809 from fluxcd/k8s-1.31.1
• 18924bf Update controller-gen to v0.16.1
• 735a85b Update dependencies
• 62475f1 Merge pull request #789 from dipti-pai/pkg-azure-git-wi-auth
• 1686996 Support Azure OIDC authentication
• a2a7a01 Merge pull request #808 from matheuscscp/oci-auth-proxy
• 8b5c43a Add proxy support for oci/auth login
• d467d6e Merge pull request #807 from fluxcd/dependabot/github_actions/ci-6f7028051e
• Additional commits viewable in compare view

Updates github.com/fluxcd/pkg/tar from 0.8.0 to 0.8.1

Commits

• 68b676d Merge pull request #621 from fluxcd/update-runtime-deps
• 8026a27 runtime: update dependencies
• e8edd75 Merge pull request #620 from fluxcd/update-deps
• 5e21e50 helmtestserver: update dependencies
• a7213f0 Merge pull request #619 from fluxcd/enable-codeql-quality
• 79175a1 ci: enable security-and-quality CodeQL query
• bfb6c67 Merge pull request #617 from fluxcd/fix-git-flake
• 0ac59bc git/internal/e2e: address flake for clone tests
• 79df79e Merge pull request #618 from fluxcd/remove-dep-rand-seed
• d998987 *: remove deprecated rand.Seed calls
• Additional commits viewable in compare view

Updates github.com/fluxcd/source-controller/api from 1.3.0 to 1.4.1

Release notes

Sourced from github.com/fluxcd/source-controller/api's releases.

v1.4.1

Changelog

v1.4.1 changelog

Container images

• docker.io/fluxcd/source-controller:v1.4.1
• ghcr.io/fluxcd/source-controller:v1.4.1

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

v1.4.0

Changelog

v1.4.0 changelog

Container images

• docker.io/fluxcd/source-controller:v1.4.0
• ghcr.io/fluxcd/source-controller:v1.4.0

Supported architectures: linux/amd64, linux/arm64 and linux/arm/v7.

The container images are built on GitHub hosted runners and are signed with cosign and GitHub OIDC. To verify the images and their provenance (SLSA level 3), please see the security documentation.

Changelog

Sourced from github.com/fluxcd/source-controller/api's changelog.

1.4.1

Release date: 2024-09-26

This patch release comes with a fix to the GitRepository API to keep it backwards compatible by removing the default value for .spec.provider field when not set in the API. The controller will internally consider an empty value for the provider as the generic provider.

Fix:

• GitRepo: Remove provider default value from API #1626

1.4.0

Release date: 2024-09-25

This minor release promotes the Bucket API to GA, and comes with new features, improvements and bug fixes.

Bucket

The Bucket API has been promoted from v1beta2 to v1 (GA). The v1 API is backwards compatible with v1beta2.

Bucket API now supports proxy through the field .spec.proxySecretRef and custom TLS client certificate and CA through the field .spec.certSecretRef.

Bucket API now also supports specifying a custom STS configuration through the field .spec.sts. This is currently only supported for the providers generic and aws. When specifying a custom STS configuration one must specify which STS provider to use. For the generic bucket provider we support the ldap STS provider, and for the aws bucket provider we support the aws STS provider. For the aws STS provider, one may use the default main STS endpoint, or the regional STS endpoints, or even an interface endpoint.

OCIRepository

OCIRepository API now supports proxy through the field .spec.proxySecretRef.

Warning: Proxy is not supported for cosign keyless verification.

GitRepository

GitRepository API now supports OIDC authentication for Azure DevOps repositories through the field .spec.provider using the value azure. See the docs for details here.

In addition, the Kubernetes dependencies have been updated to v1.31.1, Helm has been updated to v3.16.1 and various other controller dependencies have been updated to their latest version. The controller is now built with Go 1.23.

Fixes:

• helm: Use the default transport pool to preserve proxy settings #1490
• Fix incorrect use of format strings with the conditions package. #1529
• Fix HelmChart local dependency resolution for name-based path #1539

... (truncated)

Commits

• 50035c6 Merge pull request #1628 from fluxcd/release-v1.4.1
• c2b6b39 Release v1.4.1
• a2658ba Add changelog entry for v1.4.1
• a485ed4 Merge pull request #1627 from fluxcd/backport-1626-to-release/v1.4.x
• 0e4f558 GitRepo: Remove provider default value from API
• e6e2b15 Merge pull request #1620 from fluxcd/release-v1.4.0
• e920838 Release v1.4.0
• c796f52 Add changelog entry for v1.4.0
• 03889fe Merge pull request #1618 from fluxcd/dependabot/go_modules/go-deps-a9e873101f
• 32bc10c build(deps): bump the go-deps group across 1 directory with 3 updates
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions