Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 2, 2025

Bumps the security group with 4 updates in the / directory: github.com/containerd/cgroups/v3, github.com/shirou/gopsutil/v4, github.com/hashicorp/go-version and helm.sh/helm/v3.

Updates github.com/containerd/cgroups/v3 from 3.1.1 to 3.1.2

Release notes

Sourced from github.com/containerd/cgroups/v3's releases.

v3.1.2

What's Changed

New Contributors

Full Changelog: containerd/cgroups@v3.1.1...v3.1.2

Commits
  • 8c81c66 Merge pull request #382 from HeRaNO/golangci-lint
  • ac36ca4 Merge pull request #381 from containerd/dependabot/github_actions/actions/che...
  • a302e56 ci: bump golangci-lint to v2.6.2
  • 731cf7a ci: suppress errcheck
  • 9bee663 utils: move Close() to defer block
  • 9d7647c rdma: use strings.Cut in Go 1.18
  • 109f063 memory_test: apply De Morgan's law
  • e6fcf3f memory_test: omit type from declaration
  • 4e30098 build(deps): bump actions/checkout from 5 to 6
  • 4fc9769 Merge pull request #379 from voidbar/hugetlb-fix
  • Additional commits viewable in compare view

Updates github.com/shirou/gopsutil/v4 from 4.25.10 to 4.25.11

Release notes

Sourced from github.com/shirou/gopsutil/v4's releases.

v4.25.11

What's Changed

cpu

disk

process

Other Changes

New Contributors

Full Changelog: shirou/gopsutil@v4.25.10...v4.25.11

Commits
  • 93ca345 Merge pull request #1943 from StefanoBalzarottiNozomi/add-context-disk-windows
  • 438f88e Merge pull request #1955 from OverOrion/fix/windows-file-handle-leaks
  • 28dc11c fix(process): add missing CloseHandle to OpenFilesWithContext for Windows
  • b44cda7 use select ctx for context cancellation
  • 82391ff Merge pull request #1934 from johnnybubonic/fix_pidparse_edge
  • 1172d89 Merge pull request #1893 from mmorel-35/nilnesserr
  • 678a63e Merge pull request #1948 from shirou/fix/update_github_action_runner_202511
  • 2f83a2c fix: remove and add GitHub action runner images.
  • 768bc18 Merge pull request #1947 from shirou/dependabot/go_modules/github.com/tklause...
  • 3bb7cd5 chore(deps): bump github.com/tklauser/go-sysconf from 0.3.15 to 0.3.16
  • Additional commits viewable in compare view

Updates github.com/hashicorp/go-version from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/hashicorp/go-version's releases.

v1.8.0

What's Changed

New Contributors

Full Changelog: hashicorp/go-version@v1.7.0...v1.8.0

Changelog

Sourced from github.com/hashicorp/go-version's changelog.

1.8.0 (Nov 28, 2025)

ENHANCEMENTS:

INTERNAL:

Commits
  • 505335e Merge pull request #175 from florianl/drop-init
  • 6dd734b drop init()
  • 0824a89 Merge pull request #172 from hashicorp/compliance/update-headers
  • 9325934 [COMPLIANCE] Update Copyright and License Headers
  • 5b82b98 Bump the github-actions-breaking group across 1 directory with 2 updates (#171)
  • 6c6cd77 Bump actions/checkout from 4.2.2 to 5.0.0 in the github-actions-breaking grou...
  • 0e50733 Bump actions/cache from 4.2.3 to 4.2.4 in the github-actions-backward-compati...
  • 4e24ef1 Bytes implementation (#161)
  • 437649a Add benchmark test for version.String() (#159)
  • b6c4db5 Merge pull request #158 from hashicorp/compliance-template
  • Additional commits viewable in compare view

Updates helm.sh/helm/v3 from 3.19.0 to 3.19.2

Release notes

Sourced from helm.sh/helm/v3's releases.

Helm v3.19.2 is a patch release. It is a rebuild of the v3.19.1 release with no code changes.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.2. The common platform binaries are here:

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.19.3 and 4.0.1 are the next patch releases and will be on December 10, 2025
  • 3.20.0 and 4.1.0 is the next minor releases and will be on January 21, 2026

Changelog

  • [backport] fix: get-helm-3 script use helm3-latest-version 8766e718a0119851f10ddbe4577593a45fadf544 (George Jenkins)

Helm v3.19.1 is a patch release. Users are encouraged to upgrade for the best experience. Users are encouraged to upgrade for the best experience.

The community keeps growing, and we'd love to see you there!

  • Join the discussion in Kubernetes Slack:
    • for questions and just to hang out
    • for discussing PRs, code, and bugs
  • Hang out at the Public Developer Call: Thursday, 9:30 Pacific via Zoom
  • Test, debug, and contribute charts: ArtifactHub/packages

Installation and Upgrading

Download Helm v3.19.1. The common platform binaries are here:

... (truncated)

Commits
  • 8766e71 [backport] fix: get-helm-3 script use helm3-latest-version
  • 4f953c2 chore(deps): bump github.com/containerd/containerd from 1.7.28 to 1.7.29
  • 6801f4d jsonschema: warn and ignore unresolved URN $ref to match v3.18.4
  • 2f619be Avoid "panic: interface conversion: interface {} is nil"
  • 8112d47 Fix helm pull untar dir check with repo urls
  • 5dff7ce Fix deprecation warning
  • 2dad4d2 chore(deps): bump github.com/spf13/pflag from 1.0.7 to 1.0.10
  • a833710 Add timeout flag to repo add and update flags
  • 3f5d2e2 Merge pull request #31407 from dirkmueller/release-3.19
  • 2e12c81 chore(deps): bump golang.org/x/crypto from 0.41.0 to 0.43.0
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the security group with 4 updates in the / directory: [github.com/containerd/cgroups/v3](https://github.com/containerd/cgroups), [github.com/shirou/gopsutil/v4](https://github.com/shirou/gopsutil), [github.com/hashicorp/go-version](https://github.com/hashicorp/go-version) and [helm.sh/helm/v3](https://github.com/helm/helm).


Updates `github.com/containerd/cgroups/v3` from 3.1.1 to 3.1.2
- [Release notes](https://github.com/containerd/cgroups/releases)
- [Commits](containerd/cgroups@v3.1.1...v3.1.2)

Updates `github.com/shirou/gopsutil/v4` from 4.25.10 to 4.25.11
- [Release notes](https://github.com/shirou/gopsutil/releases)
- [Commits](shirou/gopsutil@v4.25.10...v4.25.11)

Updates `github.com/hashicorp/go-version` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/hashicorp/go-version/releases)
- [Changelog](https://github.com/hashicorp/go-version/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-version@v1.7.0...v1.8.0)

Updates `helm.sh/helm/v3` from 3.19.0 to 3.19.2
- [Release notes](https://github.com/helm/helm/releases)
- [Commits](helm/helm@v3.19.0...v3.19.2)

---
updated-dependencies:
- dependency-name: github.com/containerd/cgroups/v3
  dependency-version: 3.1.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: github.com/shirou/gopsutil/v4
  dependency-version: 4.25.11
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
- dependency-name: github.com/hashicorp/go-version
  dependency-version: 1.8.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: security
- dependency-name: helm.sh/helm/v3
  dependency-version: 3.19.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: security
...

Signed-off-by: dependabot[bot] <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant