Renovate: Update External dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
github.com/go-logr/logr	require	minor	v1.2.4 -> v1.3.0
github.com/onsi/gomega	require	minor	v1.28.0 -> v1.29.0
sigs.k8s.io/yaml	require	minor	v1.3.0 -> v1.4.0

---

Release Notes

go-logr/logr (github.com/go-logr/logr)

v1.3.0

Compare Source

This release adds support for slog in a new, self-contained logr/slogr package. Implementers of a logr.LogSink are encouraged, but not required, to extend their implementation to improve the quality of log output coming from a slog API call.

Breaking change: the call depth for LogSink.Enabled when called via Logger.Enabled was fixed to be the same as for other call paths. Implementers of a LogSink who have worked around this bug will need to remove their workarounds.

Security best practices were improved. Only Go versions >= 1.18 are supported by this release.

What's Changed

• Fix golangci-lint fails by @​thockin in https://github.com/go-logr/logr/pull/173
• Add minimal permissions to workflows by @​pnacht in https://github.com/go-logr/logr/pull/177
• Add a security policy by @​pnacht in https://github.com/go-logr/logr/pull/178
• Update security email by @​thockin in https://github.com/go-logr/logr/pull/181
• docs: explain relationship between Logger{} and Discard() by @​pohly in https://github.com/go-logr/logr/pull/182
• Add the OpenSSF Scorecard workflow by @​pnacht in https://github.com/go-logr/logr/pull/186
• README: show of OpenSSF Scorecard badge by @​pohly in https://github.com/go-logr/logr/pull/187
• Hash-pin workflow Actions by @​pnacht in https://github.com/go-logr/logr/pull/189
• Bump go versions to 1.18+ by @​thockin in https://github.com/go-logr/logr/pull/203
• slogr: add glue code for logging to slog.Handler and with slog.Logger by @​pohly in https://github.com/go-logr/logr/pull/205
• slogr: restore original backend when converting back and forth by @​pohly in https://github.com/go-logr/logr/pull/210
• slogr: add SlogSink by @​pohly in https://github.com/go-logr/logr/pull/211
• Use same call depth for Enabled, Info, Error by @​thockin in https://github.com/go-logr/logr/pull/218
• test: eliminate helper func by @​thockin in https://github.com/go-logr/logr/pull/219
• docs: interoperability with slog by @​pohly in https://github.com/go-logr/logr/pull/222

---

• build(deps): bump actions/setup-go from 3.5.0 to 4.0.1 by @​dependabot in https://github.com/go-logr/logr/pull/190
• build(deps): bump github/codeql-action from 2.20.1 to 2.20.3 by @​dependabot in https://github.com/go-logr/logr/pull/191
• build(deps): bump github/codeql-action from 2.20.3 to 2.20.4 by @​dependabot in https://github.com/go-logr/logr/pull/192
• build(deps): bump github/codeql-action from 2.20.4 to 2.21.0 by @​dependabot in https://github.com/go-logr/logr/pull/193
• build(deps): bump github/codeql-action from 2.21.0 to 2.21.2 by @​dependabot in https://github.com/go-logr/logr/pull/194
• build(deps): bump github/codeql-action from 2.21.2 to 2.21.3 by @​dependabot in https://github.com/go-logr/logr/pull/207
• build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by @​dependabot in https://github.com/go-logr/logr/pull/206
• build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @​dependabot in https://github.com/go-logr/logr/pull/209
• build(deps): bump github/codeql-action from 2.21.3 to 2.21.4 by @​dependabot in https://github.com/go-logr/logr/pull/208
• build(deps): bump actions/checkout from 3.5.3 to 3.6.0 by @​dependabot in https://github.com/go-logr/logr/pull/214
• build(deps): bump github/codeql-action from 2.21.4 to 2.21.5 by @​dependabot in https://github.com/go-logr/logr/pull/217
• build(deps): bump actions/checkout from 3.6.0 to 4.0.0 by @​dependabot in https://github.com/go-logr/logr/pull/220
• build(deps): bump actions/upload-artifact from 3.1.2 to 3.1.3 by @​dependabot in https://github.com/go-logr/logr/pull/221
• build(deps): bump github/codeql-action from 2.21.5 to 2.21.7 by @​dependabot in https://github.com/go-logr/logr/pull/223
• build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by @​dependabot in https://github.com/go-logr/logr/pull/224
• build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @​dependabot in https://github.com/go-logr/logr/pull/225
• build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by @​dependabot in https://github.com/go-logr/logr/pull/226
• build(deps): bump ossf/scorecard-action from 2.2.0 to 2.3.0 by @​dependabot in https://github.com/go-logr/logr/pull/227
• build(deps): bump github/codeql-action from 2.21.9 to 2.22.0 by @​dependabot in https://github.com/go-logr/logr/pull/228
• build(deps): bump github/codeql-action from 2.22.0 to 2.22.3 by @​dependabot in https://github.com/go-logr/logr/pull/229
• build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @​dependabot in https://github.com/go-logr/logr/pull/231
• build(deps): bump github/codeql-action from 2.22.3 to 2.22.4 by @​dependabot in https://github.com/go-logr/logr/pull/230

New Contributors

• @​pnacht made their first contribution in https://github.com/go-logr/logr/pull/177
• @​dependabot made their first contribution in https://github.com/go-logr/logr/pull/190

Full Changelog: go-logr/logr@v1.2.4...v1.3.0

onsi/gomega (github.com/onsi/gomega)

v1.29.0

Compare Source

1.29.0

Features

• MatchError can now take an optional func(error) bool + description [2b39142]

v1.28.1

Compare Source

1.28.1

Maintenance

• Bump github.com/onsi/ginkgo/v2 from 2.12.0 to 2.13.0 [635d196]
• Bump github.com/google/go-cmp from 0.5.9 to 0.6.0 [14f8859]
• Bump golang.org/x/net from 0.14.0 to 0.17.0 [d8a6508]
• #​703 doc(matchers): HaveEach() doc comment updated [2705bdb]
• Minor typos (#​699) [375648c]

kubernetes-sigs/yaml (sigs.k8s.io/yaml)

v1.4.0

Compare Source

• Adds a goyaml.v2 subpackage containing a fork of gopkg.in/yaml.v2 at v2.4.0
• Adds a goyaml.v3 subpackage containing a fork of gopkg.in/yaml.v3 at v3.0.1
• Adds an Encoder#CompactSeqIndent() encoder option to sigs.k8.io/goyaml.v3 to allow opting into indentation compatible with gopkg.in/yaml.v2

---

Configuration

📅 Schedule: Branch creation - "before 8am on Friday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.