Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update crossplane dependencies #92

Merged
merged 2 commits into from
Nov 28, 2024
Merged

chore(deps): update crossplane dependencies #92

merged 2 commits into from
Nov 28, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 28, 2024 •
edited
Loading

This PR contains the following updates:

Package Update Change
crossplane-contrib/function-auto-ready minor v0.2.1 -> v0.3.0
crossplane-contrib/function-kcl minor v0.9.4 -> v0.10.10
crossplane-contrib/function-sequencer minor v0.1.2 -> v0.2.1
crossplane-contrib/provider-helm minor v0.19.0 -> v0.20.0
crossplane-contrib/provider-kubernetes minor v0.15.0 -> v0.16.0
upbound/configuration-aws-network minor v0.18.0 -> v0.19.0
upbound/provider-aws minor v1.14.0 -> v1.17.0

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

Release Notes

crossplane-contrib/function-auto-ready (crossplane-contrib/function-auto-ready)

v0.3.0

Compare Source

This release updates the function to use the new v1 function RPCs introduced with Crossplane v1.17.

This version is backward compatible with Crossplane v1.16 and earlier, that use v1beta1 function RPCs.

You can install this release using the following manifest:

apiVersion: pkg.crossplane.io/v1
kind: Function
metadata:
  name: function-auto-ready
spec:
  package: xpkg.upbound.io/crossplane-contrib/function-auto-ready:v0.3.0

What's Changed

Full Changelog: crossplane-contrib/function-auto-ready@v0.2.1...v0.3.0

crossplane-contrib/function-kcl (crossplane-contrib/function-kcl)

v0.10.10: Release

Compare Source

v0.10.9: Release

Compare Source

v0.10.8: Release

Compare Source

What's Changed

Full Changelog: crossplane-contrib/function-kcl@v0.10.7...v0.10.8

v0.10.7: Release

Compare Source

What's Changed

Full Changelog: crossplane-contrib/function-kcl@v0.10.6...v0.10.7

v0.10.6: Release

Compare Source

Full Changelog: crossplane-contrib/function-kcl@v0.10.4...v0.10.6

v0.10.4: Release

Compare Source

What's Changed

Full Changelog: crossplane-contrib/function-kcl@v0.10.3...v0.10.4

v0.10.3: Release

Compare Source

What's Changed

Full Changelog: crossplane-contrib/function-kcl@v0.10.2...v0.10.3

v0.10.2: Release

Compare Source

What's Changed

Full Changelog: crossplane-contrib/function-kcl@v0.10.1...v0.10.2

v0.10.1: Release

Compare Source

What's Changed

New Contributors

Full Changelog: crossplane-contrib/function-kcl@v0.10.0...v0.10.1

v0.10.0: Release

Compare Source

What's Changed

Full Changelog: crossplane-contrib/function-kcl@v0.9.4...v0.10.0

crossplane-contrib/function-sequencer (crossplane-contrib/function-sequencer)

v0.2.1

Compare Source

What's Changed

Full Changelog: crossplane-contrib/function-sequencer@v0.2.0...v0.2.1

v0.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: crossplane-contrib/function-sequencer@v0.1.0...v0.2.0

crossplane-contrib/provider-helm (crossplane-contrib/provider-helm)

v0.20.0

Compare Source

What's Changed

[!NOTE]
Starting with v0.20.0, the image is published under the upbound organization in the Upbound Marketplace.
The new location for the image is xpkg.upbound.io/upbound/provider-helm:v0.20.0. Please use the new location when installing/upgrading the provider.

New Contributors

Full Changelog: crossplane-contrib/provider-helm@v0.19.0...v0.20.0

crossplane-contrib/provider-kubernetes (crossplane-contrib/provider-kubernetes)

v0.16.0

Compare Source

What's Changed

[!NOTE]
Starting with v0.16.0, the image is published under the upbound organization in the Upbound Marketplace.
The new location for the image is xpkg.upbound.io/upbound/provider-kubernetes:v0.16.0. Please use the new location when installing/upgrading the provider.

New Contributors

Full Changelog: crossplane-contrib/provider-kubernetes@v0.15.0...v0.16.0

upbound/configuration-aws-network (upbound/configuration-aws-network)

v0.19.0

Compare Source

What's Changed

New Contributors

Full Changelog: upbound/configuration-aws-network@v0.18.0...v0.19.0

upbound/provider-aws (upbound/provider-aws)

v1.17.0

Compare Source

The v1.17.0 release introduces the Terraform provider upgrade from 5.68.0 to 5.73.0, new resources, bug fixes, enhancements, and dependency updates.

Support for New Resources
  • ComputeEnvironment.batch.aws.upbound.io/v1beta1
  • JobQueue.batch.aws.upbound.io/v1beta1
What's Changed
New Contributors

Full Changelog: crossplane-contrib/provider-upjet-aws@v1.16.0...v1.17.0

v1.16.0

Compare Source

The v1.16.0 release introduces important bug fixes and dependency updates.

Bug Fixes
What's Changed

Full Changelog: crossplane-contrib/provider-upjet-aws@v1.15.0...v1.16.0

v1.15.0

Compare Source

In the v1.15.0 release, we've upgraded the underlying Terraform provider version from v5.58.0 to v5.68.0. This release also introduces new family providers, new resources, bug fixes, and dependency updates.

Support for New Resources
  • Pipeline.osis.aws.upbound.io/v1beta1
  • Agent.bedrockagent.aws.upbound.io/v1beta1
What's Changed
New Contributors

Full Changelog: crossplane-contrib/provider-upjet-aws@v1.14.0...v1.15.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot requested a review from a team as a code owner November 28, 2024 11:33
@renovate renovate bot added the automated label Nov 28, 2024
@village-labs-bot Village Labs Bot
Copy link

upbound/configuration-aws-eks #92

Change Summary

  • Provider version updates: Multiple AWS providers (EC2, EKS, IAM) upgraded from v1.14.0 to v1.17.0
  • Crossplane provider updates: Helm updated to v0.20.0 and Kubernetes to v0.16.0
  • Function updates: Multiple function versions updated including KCL (v0.9.4 to v0.10.10), auto-ready (v0.2.1 to v0.3.0), and sequencer (v0.1.2 to v0.2.1)

Potential Vulnerabilities

  • File: crossplane.yaml:9-31
  • Code: Multiple version updates across providers and functions
  • Explanation: Version jumps across multiple dependencies simultaneously increase the attack surface and risk of introducing security vulnerabilities. Special attention should be paid to the changelog of each updated component, particularly the AWS providers jumping three minor versions.

Code Smells

None identified in this change. The modifications are strictly version updates in the configuration file.

Debug Logs

None identified in this change.

Unintended Consequences

  • File: crossplane.yaml:20-31
  • Code: ```
    • provider: xpkg.upbound.io/crossplane-contrib/provider-helm
      version: "v0.20.0"
    • provider: xpkg.upbound.io/crossplane-contrib/provider-kubernetes
      version: "v0.16.0"
      [...]
    • provider: xpkg.upbound.io/upbound/provider-aws-eks
      version: "v1.17.0"
- Explanation: Multiple provider version updates happening simultaneously could lead to compatibility issues between providers. The jump from v1.14.0 to v1.17.0 for AWS providers spans multiple versions and could introduce breaking changes or unexpected behaviors in the interaction between components.

- File: `crossplane.yaml:39-42`
- Code: ```
    - function: xpkg.upbound.io/crossplane-contrib/function-kcl
      version: "v0.10.10"
  • Explanation: The KCL function update from v0.9.4 to v0.10.10 is a significant version jump that crosses major version boundaries (0.9 to 0.10), which could introduce breaking changes in function behavior.

Risk Score: 7

The relatively high risk score is attributed to:

  1. Multiple simultaneous version updates across critical infrastructure components
  2. Significant version jumps in AWS providers (3 minor versions)
  3. Cross-version updates in function components
  4. Lack of gradual migration path for these updates

@kaessert
Copy link
Contributor

/test-examples

1 similar comment
@kaessert
Copy link
Contributor

/test-examples

@kaessert
Copy link
Contributor

Stuck because of

  - lastTransitionTime: "2024-11-28T12:14:10Z"
    message: 'cannot resolve package dependencies: incompatible dependencies: existing
      package xpkg.upbound.io/upbound/[email protected] is incompatible with
      constraint v1.14.0; existing package xpkg.upbound.io/crossplane-contrib/[email protected]
      is incompatible with constraint v0.2.1'

@renovate renovate bot force-pushed the renovate/crossplane-dependencies branch 4 times, most recently from f400bdd to 2de54d3 Compare November 28, 2024 13:35
@kaessert
Copy link
Contributor

/test-examples

@renovate renovate bot force-pushed the renovate/crossplane-dependencies branch from 2de54d3 to d78d864 Compare November 28, 2024 13:51
@kaessert
Copy link
Contributor

/test-examples

@renovate Renovate
Copy link
Contributor Author

renovate bot commented Nov 28, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@ytsarev ytsarev merged commit 83be605 into main Nov 28, 2024
2 checks passed
@ytsarev ytsarev deleted the renovate/crossplane-dependencies branch November 28, 2024 22:56
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@ytsarev ytsarev ytsarev approved these changes

@kaessert kaessert kaessert approved these changes

Assignees
No one assigned
Labels
automated
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@kaessert @ytsarev