diff --git a/.github/workflows/_verify_examples.yml b/.github/workflows/_verify_examples.yml index cfc3e22e..08789575 100644 --- a/.github/workflows/_verify_examples.yml +++ b/.github/workflows/_verify_examples.yml @@ -26,7 +26,7 @@ jobs: sudo mkdir -p "${TEMPDIR}" sudo mount -t tmpfs none "$TEMPDIR" sudo chown runner "$TEMPDIR" - - uses: actions/cache/restore@v4 + - uses: actions/cache/restore@v5 id: cache with: path: /cache/docker @@ -43,7 +43,7 @@ jobs: sudo mkdir -p "${TEMPDIR}" sudo mount -t tmpfs none "$TEMPDIR" sudo chown runner "$TEMPDIR" - - uses: actions/cache@v4 + - uses: actions/cache@v5 with: path: /home/runner/.cache key: ${{ runner.os }}-bazel-${{ hashFiles('**/BUILD', '**/*bzl', 'WORKSPACE') }} @@ -66,7 +66,7 @@ jobs: sudo tar cf - -C /var/lib/docker-examples . | zstd - -q -T0 -o "${TEMPDIR}/docker.tar.zst" ls -alh "${TEMPDIR}/docker.tar.zst" if: steps.cache.outputs.cache-hit != 'true' && github.event_name != 'pull_request' - - uses: actions/cache/save@v4 + - uses: actions/cache/save@v5 if: steps.cache.outputs.cache-hit != 'true' && github.event_name != 'pull_request' with: path: /cache/docker diff --git a/.github/workflows/lint.yml b/.github/workflows/lint.yml index a3fe82aa..f90864fb 100644 --- a/.github/workflows/lint.yml +++ b/.github/workflows/lint.yml @@ -20,7 +20,7 @@ jobs: if: github.repository_owner == 'envoyproxy' steps: - uses: actions/checkout@1af3b93b6815bc44a9784bd300feb67ff0d1eeb3 # v6.0.0 - - uses: actions/setup-python@e797f83bcb11b83ae66e0230d6156d7c80228e7c # v6.0.0 + - uses: actions/setup-python@83679a892e2d95755f2dac6acb0bfd1e9ac5d548 # v6.1.0 with: python-version: "3.12" - run: | diff --git a/golang-http/simple/go.mod b/golang-http/simple/go.mod index 6bdf65d6..e7c0dc88 100644 --- a/golang-http/simple/go.mod +++ b/golang-http/simple/go.mod @@ -8,8 +8,8 @@ toolchain go1.24.9 // NOTICE: these lines could be generated automatically by "go mod tidy" require ( github.com/cncf/xds/go v0.0.0-20251110193048-8bfbf64dc13e - github.com/envoyproxy/envoy v1.36.3 - google.golang.org/protobuf v1.36.10 + github.com/envoyproxy/envoy v1.36.4 + google.golang.org/protobuf v1.36.11 ) require ( diff --git a/golang-http/simple/go.sum b/golang-http/simple/go.sum index bd028966..790ac6df 100644 --- a/golang-http/simple/go.sum +++ b/golang-http/simple/go.sum @@ -2,8 +2,8 @@ cel.dev/expr v0.24.0 h1:56OvJKSH3hDGL0ml5uSxZmz3/3Pq4tJ+fb1unVLAFcY= cel.dev/expr v0.24.0/go.mod h1:hLPLo1W4QUmuYdA72RBX06QTs6MXw941piREPl3Yfiw= github.com/cncf/xds/go v0.0.0-20251110193048-8bfbf64dc13e h1:gt7U1Igw0xbJdyaCM5H2CnlAlPSkzrhsebQB6WQWjLA= github.com/cncf/xds/go v0.0.0-20251110193048-8bfbf64dc13e/go.mod h1:KdCmV+x/BuvyMxRnYBlmVaq4OLiKW6iRQfvC62cvdkI= -github.com/envoyproxy/envoy v1.36.3 h1:0ZT3QZHcIQ/Xx4mVrmGBgIUUfd4Qad8qrge5tFNPTCY= -github.com/envoyproxy/envoy v1.36.3/go.mod h1:mgMEye9tOlNiUTG+iYhQYgCzQcX46MMS0Jo6bVwRt1U= +github.com/envoyproxy/envoy v1.36.4 h1:O1WqXkfUxFgJdHkx0oNUvh4ssbzYGGcl9qGf8OmPQOo= +github.com/envoyproxy/envoy v1.36.4/go.mod h1:mgMEye9tOlNiUTG+iYhQYgCzQcX46MMS0Jo6bVwRt1U= github.com/envoyproxy/protoc-gen-validate v1.2.1 h1:DEo3O99U8j4hBFwbJfrz9VtgcDfUKS7KJ7spH3d86P8= github.com/envoyproxy/protoc-gen-validate v1.2.1/go.mod h1:d/C80l/jxXLdfEIhX1W2TmLfsJ31lvEjwamM4DxlWXU= github.com/google/go-cmp v0.7.0 h1:wk8382ETsv4JYUZwIsn6YpYiWiBsYLSJiTsyBybVuN8= @@ -12,5 +12,5 @@ google.golang.org/genproto/googleapis/api v0.0.0-20240903143218-8af14fe29dc1 h1: google.golang.org/genproto/googleapis/api v0.0.0-20240903143218-8af14fe29dc1/go.mod h1:qpvKtACPCQhAdu3PyQgV4l3LMXZEtft7y8QcarRsp9I= google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1 h1:pPJltXNxVzT4pK9yD8vR9X75DaWYYmLGMsEvBfFQZzQ= google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1/go.mod h1:UqMtugtsSgubUsoxbuAoiCXvqvErP7Gf0so0mK9tHxU= -google.golang.org/protobuf v1.36.10 h1:AYd7cD/uASjIL6Q9LiTjz8JLcrh/88q5UObnmY3aOOE= -google.golang.org/protobuf v1.36.10/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= +google.golang.org/protobuf v1.36.11 h1:fV6ZwhNocDyBLK0dj+fg8ektcVegBBuEolpbTQyBNVE= +google.golang.org/protobuf v1.36.11/go.mod h1:HTf+CrKn2C3g5S8VImy6tdcUvCska2kB7j23XfzDpco= diff --git a/grpc-bridge/client/requirements.txt b/grpc-bridge/client/requirements.txt index 280589d9..8ea24d46 100644 --- a/grpc-bridge/client/requirements.txt +++ b/grpc-bridge/client/requirements.txt @@ -264,9 +264,9 @@ typing-extensions==4.15.0 \ --hash=sha256:0cea48d173cc12fa28ecabc3b837ea3cf6f38c6d1136f85cbaaf598984861466 \ --hash=sha256:f0fa19c6845758ab08074a0cfa8b7aecb71c999ca73d62883bc25cc018c4e548 # via grpcio -urllib3==2.5.0 \ - --hash=sha256:3fc47733c7e419d4bc3f6b3dc2b4f890bb743906a30d56ba4a5bfa4bbff92760 \ - --hash=sha256:e6b01673c0fa6a13e374b50871808eb3bf7046c4b125b216f6bf1cc604cff0dc +urllib3==2.6.0 \ + --hash=sha256:c90f7a39f716c572c4e3e58509581ebd83f9b59cced005b7db7ad2d22b0db99f \ + --hash=sha256:cb9bcef5a4b345d5da5d145dc3e30834f58e8018828cbc724d30b4cb7d4d49f1 # via requests # The following packages are considered to be unsafe in a requirements file: diff --git a/opentelemetry/Dockerfile-opentelemetry b/opentelemetry/Dockerfile-opentelemetry index ca017539..a92bf5a8 100644 --- a/opentelemetry/Dockerfile-opentelemetry +++ b/opentelemetry/Dockerfile-opentelemetry @@ -1,7 +1,7 @@ FROM alpine:3.23@sha256:865b95f46d98cf867a156fe4a135ad3fe50d2056aa3f25ed31662dff6da4eb62 AS otelc_curl RUN apk --update add curl -FROM otel/opentelemetry-collector:0.140.0@sha256:6852803128c97a37fd2bafb989a04a10e3af920737d8eee998eefdfcebc698be +FROM otel/opentelemetry-collector:0.142.0@sha256:27e249dac470545ed31beefc86f9e1dc260a21e85aaa256903a2b6e0393a2d91 COPY --from=otelc_curl / / diff --git a/redis/Dockerfile-redis b/redis/Dockerfile-redis index 9d22bb55..40db8928 100644 --- a/redis/Dockerfile-redis +++ b/redis/Dockerfile-redis @@ -1 +1 @@ -FROM redis:8.4.0@sha256:43355efd22490e31ca14b9d569367d05121e2be61fd8e47937563ae2a80952ae +FROM redis:8.4.0@sha256:47200b04138293fae39737e50878a238b13ec0781083126b1b0c63cf5d992e8d diff --git a/shared/node/Dockerfile b/shared/node/Dockerfile index 3e60236a..3ab7eb7f 100644 --- a/shared/node/Dockerfile +++ b/shared/node/Dockerfile @@ -1,4 +1,4 @@ -FROM node:25.2-bookworm-slim@sha256:3772bb7a81a865c2ecf5e230ecc40d4df60e919bf27567514f8b8f1989af955c AS node-base +FROM node:25.2-bookworm-slim@sha256:b20f82c2332a22609edb43cdfd6b16cbb199a6e6fd5cf8d5ef85b43faab43144 AS node-base FROM node-base AS node-http-auth diff --git a/single-page-app/ui/package.json b/single-page-app/ui/package.json index 6368767c..8d51fc02 100644 --- a/single-page-app/ui/package.json +++ b/single-page-app/ui/package.json @@ -13,7 +13,7 @@ "@chakra-ui/react": "^3.28.1", "@emotion/react": "^11.14.0", "@emotion/styled": "^11.14.1", - "framer-motion": "^12.23.24", + "framer-motion": "^12.23.26", "mdi-react": "^9.3.0", "react": "^19.2.0", "react-dom": "^19.1.0", diff --git a/single-page-app/ui/yarn.lock b/single-page-app/ui/yarn.lock index 19ef7d8a..9bd43313 100644 --- a/single-page-app/ui/yarn.lock +++ b/single-page-app/ui/yarn.lock @@ -3044,10 +3044,10 @@ for-each@^0.3.5: dependencies: is-callable "^1.2.7" -framer-motion@^12.23.24: - version "12.23.24" - resolved "https://registry.yarnpkg.com/framer-motion/-/framer-motion-12.23.24.tgz#4895b67e880bd2b1089e61fbaa32ae802fc24b8c" - integrity sha512-HMi5HRoRCTou+3fb3h9oTLyJGBxHfW+HnNE25tAXOvVx/IvwMHK0cx7IR4a2ZU6sh3IX1Z+4ts32PcYBOqka8w== +framer-motion@^12.23.26: + version "12.23.26" + resolved "https://registry.yarnpkg.com/framer-motion/-/framer-motion-12.23.26.tgz#2a684e9b156118e1c4989d7fc9327def83480391" + integrity sha512-cPcIhgR42xBn1Uj+PzOyheMtZ73H927+uWPDVhUMqxy8UHt6Okavb6xIz9J/phFUHUj0OncR6UvMfJTXoc/LKA== dependencies: motion-dom "^12.23.23" motion-utils "^12.23.6" @@ -3772,9 +3772,9 @@ iterator.prototype@^1.1.4: integrity sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ== js-yaml@^4.1.0: - version "4.1.0" - resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.1.0.tgz#c1fb65f8f5017901cdd2c951864ba18458a10602" - integrity sha512-wpxZs9NoxZaJESJGIZTyDEaYpl0FKSA+FB9aJiyemKhMwkxQg63h4T1KJgUGHpTqPDNRcmmYLugrRjJlBtWvRA== + version "4.1.1" + resolved "https://registry.yarnpkg.com/js-yaml/-/js-yaml-4.1.1.tgz#854c292467705b699476e1a2decc0c8a3458806b" + integrity sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA== dependencies: argparse "^2.0.1"