Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update dependency influxdata/telegraf to v1.33.1 #9515

Merged
merged 1 commit into from
Jan 11, 2025

Conversation

uniget-bot
Copy link

This PR contains the following updates:

Package Update Change
influxdata/telegraf patch 1.33.0 -> 1.33.1

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

influxdata/telegraf (influxdata/telegraf)

v1.33.1

Compare Source

Important Changes
  • The default value of skip_processors_after_aggregators will change to true
    with Telegraf v1.40.0, skip running the processors again after aggregators!
    If you need the current default behavior, please explicitly set the option to
    false! To silence the warning and use the future default behavior, please
    explicitly set the option to true.
Bugfixes
  • #​16290 agent Skip initialization of second processor state if requested
  • #​16377 inputs.intel_powerstat Fix option removal version
  • #​16310 inputs.mongodb Do not dereference nil pointer if gathering database stats fails
  • #​16383 outputs.influxdb_v2 Allow overriding auth and agent headers
  • #​16388 outputs.influxdb_v2 Fix panic and API error handling
  • #​16289 outputs.remotefile Handle tracking metrics correctly
Dependency Updates
  • #​16344 deps Bump cloud.google.com/go/bigquery from 1.64.0 to 1.65.0
  • #​16283 deps Bump cloud.google.com/go/monitoring from 1.21.1 to 1.22.0
  • #​16315 deps Bump github.com/Azure/go-autorest/autorest/adal from 0.9.23 to 0.9.24
  • #​16319 deps Bump github.com/IBM/nzgo/v12 from 12.0.9-0.20231115043259-49c27f2dfe48 to 12.0.9
  • #​16346 deps Bump github.com/Masterminds/semver/v3 from 3.3.0 to 3.3.1
  • #​16280 deps Bump github.com/aws/aws-sdk-go-v2/config from 1.27.39 to 1.28.6
  • #​16343 deps Bump github.com/aws/aws-sdk-go-v2/service/ec2 from 1.162.1 to 1.198.1
  • #​16317 deps Bump github.com/fatih/color from 1.17.0 to 1.18.0
  • #​16345 deps Bump github.com/gopacket/gopacket from 1.3.0 to 1.3.1
  • #​16282 deps Bump github.com/nats-io/nats.go from 1.36.0 to 1.37.0
  • #​16318 deps Bump github.com/prometheus/common from 0.60.0 to 0.61.0
  • #​16324 deps Bump github.com/vapourismo/knx-go from v0.0.0-20240217175130-922a0d50c241 to v0.0.0-20240915133544-a6ab43471c11
  • #​16297 deps Bump golang.org/x/crypto from 0.29.0 to 0.31.0
  • #​16281 deps Bump k8s.io/client-go from 0.30.1 to 0.31.3
  • #​16313 deps Bump super-linter/super-linter from 7.2.0 to 7.2.1

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

Copy link

@nicholasdille-bot nicholasdille-bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Auto-approved because label type/renovate is present.

Copy link

🔍 Vulnerabilities of ghcr.io/uniget-org/tools/telegraf:1.33.1

📦 Image Reference ghcr.io/uniget-org/tools/telegraf:1.33.1
digestsha256:e32c31eda340d138df7081b9cbb8d8a64ee2a68b43bb59868ceb7d4580e098ba
vulnerabilitiescritical: 0 high: 1 medium: 0 low: 0
platformlinux/amd64
size74 MB
packages474
critical: 0 high: 1 medium: 0 low: 0 golang.org/x/net 0.32.0 (golang)

pkg:golang/golang.org/x/net@0.32.0

high 8.7: CVE--2024--45338 Allocation of Resources Without Limits or Throttling

Affected range<0.33.0
Fixed version0.33.0
CVSS Score8.7
CVSS VectorCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Description

An attacker can craft an input to the Parse functions that would be processed non-linearly with respect to its length, resulting in extremely slow parsing. This could cause a denial of service.

Copy link

Attempting automerge. See https://github.com/uniget-org/tools/actions/runs/12720130632.

Copy link

PR is clean and can be merged. See https://github.com/uniget-org/tools/actions/runs/12720130632.

@github-actions github-actions bot merged commit 090d4b9 into main Jan 11, 2025
10 of 11 checks passed
@github-actions github-actions bot deleted the renovate/influxdata-telegraf-1.33.x branch January 11, 2025 01:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants