Build(deps): bump the gomod-backward-compatible group across 1 directory with 6 updates

[dependabot]

Bumps the gomod-backward-compatible group with 5 updates in the / directory:

Package	From	To
github.com/evanphx/json-patch	5.9.0+incompatible	5.9.11+incompatible
github.com/hashicorp/vault/sdk	0.14.1	0.15.0
k8s.io/api	0.32.1	0.32.2
k8s.io/client-go	0.32.1	0.32.2
sigs.k8s.io/controller-runtime	0.20.1	0.20.2

Updates github.com/evanphx/json-patch from 5.9.0+incompatible to 5.9.11+incompatible

Release notes

Sourced from github.com/evanphx/json-patch's releases.

v5.9.11

What's Changed

• Export errBadJSONDoc and errBadJSONPatch errors by @​skitt in evanphx/json-patch#209

Full Changelog: evanphx/json-patch@v5.9.10...v5.9.11

v5.9.10

What's Changed

• Drop the reference to gopkg.in for v5 by @​skitt in evanphx/json-patch#203
• remove unmaintained errors pkg(github.com/pkg/errors) by @​koba1t in evanphx/json-patch#206

New Contributors

• @​skitt made their first contribution in evanphx/json-patch#203
• @​koba1t made their first contribution in evanphx/json-patch#206

Full Changelog: evanphx/json-patch@v5.9.0...v5.9.10

Commits

• 84a4bb1 Merge pull request #209 from skitt/export-errs-v5
• 7a7a88a Export errBadJSONDoc and errBadJSONPatch errors
• bd18525 Upgrade go-flags
• 42f26cb Fix spacing
• 0a3482b Merge pull request #206 from koba1t/remove_unmaintained_error_pkg
• 106306d remove unmaintained errors pkg
• e7cfbbb Merge pull request #203 from skitt/drop-gopkgin-v5
• 61e1ad7 Drop the reference to gopkg.in for v5
• See full diff in compare view

Updates github.com/hashicorp/vault/sdk from 0.14.1 to 0.15.0

Changelog

Sourced from github.com/hashicorp/vault/sdk's changelog.

1.15.16 Enterprise

October 09, 2024

SECURITY:

• secrets/identity: A privileged Vault operator with write permissions to the root namespace's identity endpoint could escalate their privileges to Vault's root policy (CVE-2024-9180) HCSEC-2024-21

IMPROVEMENTS:

• core: log at level ERROR rather than INFO when all seals are unhealthy. [GH-28564]

BUG FIXES:

• auth/cert: When using ocsp_ca_certificates, an error was produced though extra certs validation succeeded. [GH-28597]
• auth/token: Fix token TTL calculation so that it uses max_lease_ttl tune value for tokens created via auth/token/create. [GH-28498]

1.15.15 Enterprise

September 25, 2024

SECURITY:

• secrets/ssh: require valid_principals to contain a value or default_user be set by default to guard against potentially insecure configurations. allow_empty_principals can be used for backwards compatibility [HCSEC-2024-20](https://discuss.hashicorp.com/t/hcsec-2024-20-vault-ssh-secrets-engine-configuration-did-not-restrict-valid-principals-by-default/7025

CHANGES:

• core: Bump Go version to 1.22.7.
• secrets/ssh: Add a flag, allow_empty_principals to allow keys or certs to apply to any user/principal. [GH-28466]

BUG FIXES:

• secret/aws: Fixed potential panic after step-down and the queue has not repopulated. [GH-28330]
• auth/cert: During certificate validation, OCSP requests are debug logged even if Vault's log level is above DEBUG. [GH-28450]
• auth/cert: ocsp_ca_certificates field was not honored when validating OCSP responses signed by a CA that did not issue the certificate. [GH-28309]
• auth: Updated error handling for missing login credentials in AppRole and UserPass auth methods to return a 400 error instead of a 500 error. [GH-28441]
• core: Fixed an issue where maximum request duration timeout was not being added to all requests containing strings sys/monitor and sys/events. With this change, timeout is now added to all requests except monitor and events endpoint. [GH-28230]

1.15.14 Enterprise

August 29, 2024

CHANGES:

• activity (enterprise): filter all fields in client count responses by the request namespace [GH-27790]
• core: Bump Go version to 1.22.6

IMPROVEMENTS:

• activity log: Changes how new client counts in the current month are estimated, in order to return more visibly sensible totals. [GH-27547]
• activity: /sys/internal/counters/activity will now include a warning if the specified usage period contains estimated client counts. [GH-28068]
• cli: vault operator usage will now include a warning if the specified usage period contains estimated client counts. [GH-28068]
• core/activity: Ensure client count queries that include the current month return consistent results by sorting the clients before performing estimation [GH-28062]

... (truncated)

Commits

• 6741773 update vault auth submodules to api/v1.16.0 (#29548)
• 9b70487 Automated rotate root support for AWS Auth and Secrets (#29497)
• 8d0443f db: honor static role TTL across restarts when skip import rotation i… (#29537)
• 49ecdad Sign empty to cert on manual-chain update. (#29473)
• 7fb0db7 UI: Fix updating static roles via role edit page on UI (#29498)
• 9e6b5ce UI: Use timestamp.now() in custom messages (#29525)
• 4051cb4 UI: Remove custom tag class and replace with Hds::Badge (#29475)
• 7842163 Update vault-plugin-secrets-alicloud to v0.19.0 (#29512)
• b3baef9 Update vault-plugin-auth-cf to v0.20.0 (#29528)
• 17fc022 Add missing parameter signature_bits to the generate root PKI API docs (#29522)
• Additional commits viewable in compare view

Updates k8s.io/api from 0.32.1 to 0.32.2

Commits

• 78094a6 Update dependencies to v0.32.2 tag
• See full diff in compare view

Updates k8s.io/apimachinery from 0.32.1 to 0.32.2

Commits

• See full diff in compare view

Updates k8s.io/client-go from 0.32.1 to 0.32.2

Commits

• 86ff7a1 Update dependencies to v0.32.2 tag
• See full diff in compare view

Updates sigs.k8s.io/controller-runtime from 0.20.1 to 0.20.2

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.20.2

What's Changed

• ✨ Expose all Go runtime metrics by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3100
• 🐛Fix behavior of rate limit option in priorityqueue.AddWithOpts by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3106
• 🌱 Update dependencies, k8s 1.32.1 by @​k8s-infra-cherrypick-robot in kubernetes-sigs/controller-runtime#3108

Full Changelog: kubernetes-sigs/controller-runtime@v0.20.1...v0.20.2

Commits

• 52b1791 [release-0.20] 🌱 Update dependencies, k8s 1.32.1 (#3108)
• ed7d2a4 Merge pull request #3106 from k8s-infra-cherrypick-robot/cherry-pick-3103-to-...
• cad72fa Fix behavior of rate limit option in priorityqueue.AddWithOpts
• fc48583 [release-0.20] ✨ Expose all Go runtime metrics (#3100)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions