chore(deps): bump the go-patch group with 5 updates

[dependabot]

Bumps the go-patch group with 5 updates:

Package	From	To
github.com/aws/aws-sdk-go-v2/config	1.27.33	1.27.36
github.com/aws/aws-sdk-go-v2/credentials	1.17.32	1.17.34
github.com/aws/aws-sdk-go-v2/service/sts	1.30.7	1.31.0
github.com/cyphar/filepath-securejoin	0.3.1	0.3.2
k8s.io/apiextensions-apiserver	0.31.0	0.31.1

Updates github.com/aws/aws-sdk-go-v2/config from 1.27.33 to 1.27.36

Commits

• 2f44586 Release 2024-09-20
• 22d0876 Regenerated Clients
• 5454ab9 Update API model
• 06150d9 add tracing and metrics support (#2798)
• 18f7b40 Release 2024-09-19
• e91c9c4 Regenerated Clients
• 6df0a09 Update API model
• 98ae688 Release 2024-09-18
• 222928c Regenerated Clients
• 887c4de Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.32 to 1.17.34

Commits

• 2f44586 Release 2024-09-20
• 22d0876 Regenerated Clients
• 5454ab9 Update API model
• 06150d9 add tracing and metrics support (#2798)
• 18f7b40 Release 2024-09-19
• e91c9c4 Regenerated Clients
• 6df0a09 Update API model
• 98ae688 Release 2024-09-18
• 222928c Regenerated Clients
• 887c4de Update API model
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.30.7 to 1.31.0

Commits

• 2f44586 Release 2024-09-20
• 22d0876 Regenerated Clients
• 5454ab9 Update API model
• 06150d9 add tracing and metrics support (#2798)
• 18f7b40 Release 2024-09-19
• e91c9c4 Regenerated Clients
• 6df0a09 Update API model
• 98ae688 Release 2024-09-18
• 222928c Regenerated Clients
• 887c4de Update API model
• See full diff in compare view

Updates github.com/cyphar/filepath-securejoin from 0.3.1 to 0.3.2

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.3.2

This release includes a few fixes for MkdirAll when dealing with S_ISUID and S_ISGID, to solve a regression runc hit when switching to MkdirAll.

• Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return an explicit error saying that those bits are ignored by mkdirat(2). In the past a different error was returned, but since the silent ignoring behaviour is codified in the man pages a more explicit error seems apt. While silently ignoring these bits would be the most compatible option, it could lead to users thinking their code sets these bits when it doesn't. Programs that need to deal with compatibility can mask the bits themselves. (#23, #25)

• If a directory has S_ISGID set, then all child directories will have S_ISGID set when created and a different gid will be used for any inode created under the directory. Previously, the "expected owner and mode" validation in securejoin.MkdirAll did not correctly handle this. We now correctly handle this case. (#24, #25)

Signed-off-by: Aleksa Sarai [email protected]

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.3.2] - 2024-09-13

Changed

• Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return an explicit error saying that those bits are ignored by mkdirat(2). In the past a different error was returned, but since the silent ignoring behaviour is codified in the man pages a more explicit error seems apt. While silently ignoring these bits would be the most compatible option, it could lead to users thinking their code sets these bits when it doesn't. Programs that need to deal with compatibility can mask the bits themselves. (#23, #25)

Fixed

• If a directory has S_ISGID set, then all child directories will have S_ISGID set when created and a different gid will be used for any inode created under the directory. Previously, the "expected owner and mode" validation in securejoin.MkdirAll did not correctly handle this. We now correctly handle this case. (#24, #25)

Commits

• e408943 VERSION: release v0.3.2
• 1c875f5 CHANGELOG: fix headers
• fdaafcc merge #25 into cyphar/filepath-securejoin:main
• 1acda83 mkdirall: correctly handle sgid directory parent
• 8484faf tests: mkdirall: refactor check and mkdirall helpers
• 350d697 mkdirall: explicitly return an error for suid/sgid bits
• 43b1026 tests: procfs: skip procfs tests if overmounting is blocked
• 82e5725 VERSION: back to development
• See full diff in compare view

Updates k8s.io/apiextensions-apiserver from 0.31.0 to 0.31.1

Commits

• b68c0dd Update dependencies to v0.31.1 tag
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[netlify]

✅ Deploy Preview for docs-kargo-akuity-io ready!

Name	Link
🔨 Latest commit	37f5ea0
🔍 Latest deploy log	https://app.netlify.com/sites/docs-kargo-akuity-io/deploys/66efa85431fe800008b4a1fc
😎 Deploy Preview	https://deploy-preview-2558.kargo.akuity.io
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify site configuration.