Bump the non-gardener-dependencies group with 8 updates

[dependabot]

Bumps the non-gardener-dependencies group with 8 updates:

Package	From	To
github.com/Azure/azure-sdk-for-go/sdk/azidentity	1.8.1	1.8.2
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage	1.6.0	1.7.0
github.com/Azure/go-autorest/autorest	0.11.29	0.11.30
github.com/Azure/go-autorest/autorest/to	0.4.0	0.4.1
github.com/AzureAD/microsoft-authentication-library-for-go	1.3.2	1.4.0
github.com/google/go-cmp	0.6.0	0.7.0
golang.org/x/crypto	0.33.0	0.35.0
k8s.io/autoscaler/vertical-pod-autoscaler	1.2.2	1.3.0

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.8.1 to 1.8.2

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.8.2

1.8.2 (2025-02-12)

Other Changes

• Upgraded dependencies

Commits

• 5474626 Prepare azidentity v1.8.2 for release (#24108)
• 4d55b0c [tracing/azotel] Enable span link and propagation support (#24081)
• dc2f507 Increment package version after release of storage/azdatalake (#24105)
• 7efafe4 Increment package version after release of storage/azfile (#24101)
• ae43d8b Increment package version after release of storage/azblob (#24102)
• 03b82ac prep for azdatalake preview (#24103)
• 6ee011a [Storage] Prep for release stg97 - Blob and Files (#24100)
• db0a6cb [Storage] stg97 features (#24080)
• d9d7f1b Support Linux environment (#24095)
• 57bab21 Parameterize test-pipeline version separator (#24094)
• Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/storage/armstorage's releases.

sdk/resourcemanager/cognitiveservices/armcognitiveservices/v1.7.0

1.7.0 (2024-12-27)

Features Added

• New value ModelLifecycleStatusDeprecated, ModelLifecycleStatusDeprecating, ModelLifecycleStatusStable added to enum type ModelLifecycleStatus
• New enum type ByPassSelection with values ByPassSelectionAzureServices, ByPassSelectionNone
• New enum type ContentLevel with values ContentLevelHigh, ContentLevelLow, ContentLevelMedium
• New enum type DefenderForAISettingState with values DefenderForAISettingStateDisabled, DefenderForAISettingStateEnabled
• New enum type EncryptionScopeProvisioningState with values EncryptionScopeProvisioningStateAccepted, EncryptionScopeProvisioningStateCanceled, EncryptionScopeProvisioningStateCreating, EncryptionScopeProvisioningStateDeleting, EncryptionScopeProvisioningStateFailed, EncryptionScopeProvisioningStateMoving, EncryptionScopeProvisioningStateSucceeded
• New enum type EncryptionScopeState with values EncryptionScopeStateDisabled, EncryptionScopeStateEnabled
• New enum type NspAccessRuleDirection with values NspAccessRuleDirectionInbound, NspAccessRuleDirectionOutbound
• New enum type RaiPolicyContentSource with values RaiPolicyContentSourceCompletion, RaiPolicyContentSourcePrompt
• New enum type RaiPolicyMode with values RaiPolicyModeAsynchronousFilter, RaiPolicyModeBlocking, RaiPolicyModeDefault, RaiPolicyModeDeferred
• New enum type RaiPolicyType with values RaiPolicyTypeSystemManaged, RaiPolicyTypeUserManaged
• New function *ClientFactory.NewDefenderForAISettingsClient() *DefenderForAISettingsClient
• New function *ClientFactory.NewEncryptionScopesClient() *EncryptionScopesClient
• New function *ClientFactory.NewLocationBasedModelCapacitiesClient() *LocationBasedModelCapacitiesClient
• New function *ClientFactory.NewModelCapacitiesClient() *ModelCapacitiesClient
• New function *ClientFactory.NewNetworkSecurityPerimeterConfigurationsClient() *NetworkSecurityPerimeterConfigurationsClient
• New function *ClientFactory.NewRaiBlocklistItemsClient() *RaiBlocklistItemsClient
• New function *ClientFactory.NewRaiBlocklistsClient() *RaiBlocklistsClient
• New function *ClientFactory.NewRaiContentFiltersClient() *RaiContentFiltersClient
• New function *ClientFactory.NewRaiPoliciesClient() *RaiPoliciesClient
• New function NewDefenderForAISettingsClient(string, azcore.TokenCredential, *arm.ClientOptions) (*DefenderForAISettingsClient, error)
• New function *DefenderForAISettingsClient.CreateOrUpdate(context.Context, string, string, string, DefenderForAISetting, *DefenderForAISettingsClientCreateOrUpdateOptions) (DefenderForAISettingsClientCreateOrUpdateResponse, error)
• New function *DefenderForAISettingsClient.Get(context.Context, string, string, string, *DefenderForAISettingsClientGetOptions) (DefenderForAISettingsClientGetResponse, error)
• New function *DefenderForAISettingsClient.NewListPager(string, string, *DefenderForAISettingsClientListOptions) *runtime.Pager[DefenderForAISettingsClientListResponse]
• New function *DefenderForAISettingsClient.Update(context.Context, string, string, string, DefenderForAISetting, *DefenderForAISettingsClientUpdateOptions) (DefenderForAISettingsClientUpdateResponse, error)
• New function *DeploymentsClient.NewListSKUsPager(string, string, string, *DeploymentsClientListSKUsOptions) *runtime.Pager[DeploymentsClientListSKUsResponse]
• New function *DeploymentsClient.BeginUpdate(context.Context, string, string, string, PatchResourceTagsAndSKU, *DeploymentsClientBeginUpdateOptions) (*runtime.Poller[DeploymentsClientUpdateResponse], error)
• New function NewEncryptionScopesClient(string, azcore.TokenCredential, *arm.ClientOptions) (*EncryptionScopesClient, error)
• New function *EncryptionScopesClient.CreateOrUpdate(context.Context, string, string, string, EncryptionScope, *EncryptionScopesClientCreateOrUpdateOptions) (EncryptionScopesClientCreateOrUpdateResponse, error)
• New function *EncryptionScopesClient.BeginDelete(context.Context, string, string, string, *EncryptionScopesClientBeginDeleteOptions) (*runtime.Poller[EncryptionScopesClientDeleteResponse], error)
• New function *EncryptionScopesClient.Get(context.Context, string, string, string, *EncryptionScopesClientGetOptions) (EncryptionScopesClientGetResponse, error)
• New function *EncryptionScopesClient.NewListPager(string, string, *EncryptionScopesClientListOptions) *runtime.Pager[EncryptionScopesClientListResponse]
• New function NewLocationBasedModelCapacitiesClient(string, azcore.TokenCredential, *arm.ClientOptions) (*LocationBasedModelCapacitiesClient, error)
• New function *LocationBasedModelCapacitiesClient.NewListPager(string, string, string, string, *LocationBasedModelCapacitiesClientListOptions) *runtime.Pager[LocationBasedModelCapacitiesClientListResponse]
• New function *ManagementClient.CalculateModelCapacity(context.Context, CalculateModelCapacityParameter, *ManagementClientCalculateModelCapacityOptions) (ManagementClientCalculateModelCapacityResponse, error)
• New function NewModelCapacitiesClient(string, azcore.TokenCredential, *arm.ClientOptions) (*ModelCapacitiesClient, error)
• New function *ModelCapacitiesClient.NewListPager(string, string, string, *ModelCapacitiesClientListOptions) *runtime.Pager[ModelCapacitiesClientListResponse]
• New function NewRaiBlocklistItemsClient(string, azcore.TokenCredential, *arm.ClientOptions) (*RaiBlocklistItemsClient, error)
• New function *RaiBlocklistItemsClient.BatchAdd(context.Context, string, string, string, []*RaiBlocklistItemBulkRequest, *RaiBlocklistItemsClientBatchAddOptions) (RaiBlocklistItemsClientBatchAddResponse, error)
• New function *RaiBlocklistItemsClient.BatchDelete(context.Context, string, string, string, any, *RaiBlocklistItemsClientBatchDeleteOptions) (RaiBlocklistItemsClientBatchDeleteResponse, error)
• New function *RaiBlocklistItemsClient.CreateOrUpdate(context.Context, string, string, string, string, RaiBlocklistItem, *RaiBlocklistItemsClientCreateOrUpdateOptions) (RaiBlocklistItemsClientCreateOrUpdateResponse, error)
• New function *RaiBlocklistItemsClient.BeginDelete(context.Context, string, string, string, string, *RaiBlocklistItemsClientBeginDeleteOptions) (*runtime.Poller[RaiBlocklistItemsClientDeleteResponse], error)
• New function *RaiBlocklistItemsClient.Get(context.Context, string, string, string, string, *RaiBlocklistItemsClientGetOptions) (RaiBlocklistItemsClientGetResponse, error)
• New function *RaiBlocklistItemsClient.NewListPager(string, string, string, *RaiBlocklistItemsClientListOptions) *runtime.Pager[RaiBlocklistItemsClientListResponse]
• New function NewRaiBlocklistsClient(string, azcore.TokenCredential, *arm.ClientOptions) (*RaiBlocklistsClient, error)
• New function *RaiBlocklistsClient.CreateOrUpdate(context.Context, string, string, string, RaiBlocklist, *RaiBlocklistsClientCreateOrUpdateOptions) (RaiBlocklistsClientCreateOrUpdateResponse, error)
• New function *RaiBlocklistsClient.BeginDelete(context.Context, string, string, string, *RaiBlocklistsClientBeginDeleteOptions) (*runtime.Poller[RaiBlocklistsClientDeleteResponse], error)

... (truncated)

Commits

• 624baba bump azcore version number
• ce7217c Prep for azcore v1.7.0 release (#21149)
• 62a8079 Add support for shallow cloning azcore.Client instances (#21065) (#21098)
• 47286b0 Add flag to enable skipping of dependency checks (#21146)
• ee762d4 Fix populating module name in telemetry policy (#20967) (#20971)
• 0243175 Prep azcore v1.6.1 for release (#20961)
• 9c9d62a Increment package version after release of azcore (#20740)
• See full diff in compare view

Updates github.com/Azure/go-autorest/autorest from 0.11.29 to 0.11.30

Release notes

Sourced from github.com/Azure/go-autorest/autorest's releases.

autorest/v0.11.30

Deprecate the autorest module.

Commits

• 33e12ab Update readmes and add deprecation notices (#739)
• c0165cf Add links to track 2 migration guides (#738)
• f7ea664 Mark the adal module as deprecated (#731)
• 4c0e21c Bump golang.org/x/crypto from 0.6.0 to 0.17.0 in /autorest/azure/cli (#730)
• e2786c1 Bump golang.org/x/crypto from 0.6.0 to 0.17.0 in /autorest/azure/auth (#729)
• 4956109 Bump golang.org/x/crypto from 0.6.0 to 0.17.0 in /autorest (#728)
• 4210247 Bump golang.org/x/crypto from 0.6.0 to 0.17.0 in /autorest/adal (#727)
• df94ce5 Stop retriable request from adding a non-nil Body (#726)
• d3f8f8a chore: should use xx.String() instead of string(xx.Bytes()) (#725)
• be633f7 io/ioutil deprecated (#724)
• See full diff in compare view

Updates github.com/Azure/go-autorest/autorest/to from 0.4.0 to 0.4.1

Release notes

Sourced from github.com/Azure/go-autorest/autorest/to's releases.

autorest/mocks/v0.4.1

Fix mock sender to honor the request context.

autorest/azure/cli/v0.4.1

Update dependencies

autorest/to/v0.4.1

Deprecate the to module.

Changelog

Sourced from github.com/Azure/go-autorest/autorest/to's changelog.

CHANGELOG

NOTE Please see a module's release notes for change details.

v14.2.1

• In Future.WaitForCompletionRef(), if the initial async response includes a Retry-After header, sleep for the specified amount of time before starting to poll.
• Added APIManagementHostManagementSuffix field in Azure environment map.
• Added SynapseEndpointSuffix and ResourceIdentifiers/Synapse field in Azure environment map.

v14.2.0

• Added package comment to make github.com/Azure/go-autorest importable.

v14.1.1

Bug Fixes

• Change x-ms-authorization-auxiliary header value separator to comma.

v14.1.0

New Features

• Added azure.SetEnvironment() that will update the global environments map with the specified values.

v14.0.1

Bug Fixes

• Fix race condition when refreshing token.
• Fixed some tests to work with Go 1.14.

v14.0.0

Breaking Changes

• By default, the DoRetryForStatusCodes functions will no longer infinitely retry a request when the response returns an HTTP status code of 429 (StatusTooManyRequests). To opt in to the old behavior set autorest.Count429AsRetry to false.

New Features

• Variable autorest.Max429Delay can be used to control the maximum delay between retries when a 429 is received with no Retry-After header. The default is zero which means there is no cap.

v13.4.0

New Features

• Added field SendDecorators to the Client type. This can be used to specify a custom chain of SendDecorators per client.
• Added method Client.Send() which includes logic for selecting the preferred chain of SendDecorators.

... (truncated)

Commits

• 33e12ab Update readmes and add deprecation notices (#739)
• c0165cf Add links to track 2 migration guides (#738)
• f7ea664 Mark the adal module as deprecated (#731)
• 4c0e21c Bump golang.org/x/crypto from 0.6.0 to 0.17.0 in /autorest/azure/cli (#730)
• e2786c1 Bump golang.org/x/crypto from 0.6.0 to 0.17.0 in /autorest/azure/auth (#729)
• 4956109 Bump golang.org/x/crypto from 0.6.0 to 0.17.0 in /autorest (#728)
• 4210247 Bump golang.org/x/crypto from 0.6.0 to 0.17.0 in /autorest/adal (#727)
• df94ce5 Stop retriable request from adding a non-nil Body (#726)
• d3f8f8a chore: should use xx.String() instead of string(xx.Bytes()) (#725)
• be633f7 io/ioutil deprecated (#724)
• Additional commits viewable in compare view

Updates github.com/AzureAD/microsoft-authentication-library-for-go from 1.3.2 to 1.4.0

Release notes

Sourced from github.com/AzureAD/microsoft-authentication-library-for-go's releases.

v1.4.0

Release Summary: Add Managed Identity Support

Overview

This Release introduces Managed Identity support to the Microsoft Authentication Library for Go through a new client. The new client supports multiple sources for managed identities, including:

• IMDS
• Azure Arc
• Service Fabric
• App Service
• Azure Machine Learning
• Cloud Shell

The client can handle both System Assigned Managed Identities and User Assigned Managed Identities. For user-assigned identities, you can specify:

• Client ID
• Resource ID
• Object ID

Key Changes

• New Managed Identity Client: Added a new client to handle managed identity authentication.
• Multiple Sources Support: The client supports various managed identity sources, enhancing flexibility and usability.
• Tests: Comprehensive tests have been added to ensure the reliability and correctness of the new functionality.
• Documentation: Updated documentation to include details on the new managed identity client and usage instructions.

Code Sample

Here's a basic example of how to use the new managed identity client to acquire a token:

package main
import (
"context"
"fmt"
"github.com/AzureAD/microsoft-authentication-library-for-go/msal"
)
func main() {
miSystemAssigned, err := mi.New(mi.SystemAssigned())
if err != nil {
log.Fatal(err)
}
result, err := miSystemAssigned.AcquireToken(context.TODO(), "https://management.azure.com")
if err != nil {
log.Fatal(err)
}
fmt.Println("token expire at : ", result.ExpiresOn)
}

v1.3.3

... (truncated)

Commits

• e6d9244 Add Managed Identity Support (#552)
• c4a7948 Fix Bug: Prevent Empty Region in WithAzureRegion from Overriding MSAL_FORCE_R...
• 06ce6ba fix: username password flow (#536)
• See full diff in compare view

Updates github.com/google/go-cmp from 0.6.0 to 0.7.0

Release notes

Sourced from github.com/google/go-cmp's releases.

v0.7.0

New API:

• (#367) Support compare functions with SortSlices and SortMaps

Panic messaging:

• (#370) Detect proto.Message types when failing to export a field

Commits

• 9b12f36 Detect proto.Message types when failing to export a field (#370)
• 4dd3d63 fix: type 'aribica' => 'arabica' (#368)
• 391980c Support compare functions with SortSlices and SortMaps (#367)
• See full diff in compare view

Updates golang.org/x/crypto from 0.33.0 to 0.35.0

Commits

• 7292932 ssh: limit the size of the internal packet queue while waiting for KEX
• f66f74b acme/autocert: check host policy before probing the cache
• b0784b7 x509roots/fallback: drop obsolete build constraint
• 911360c all: bump golang.org/x/crypto dependencies of asm generators
• 89ff08d all: upgrade go directive to at least 1.23.0 [generated]
• e47973b all: update certs for go1.24
• See full diff in compare view

Updates k8s.io/autoscaler/vertical-pod-autoscaler from 1.2.2 to 1.3.0

Release notes

Sourced from k8s.io/autoscaler/vertical-pod-autoscaler's releases.

vertical-pod-autoscaler-1.3.0

IMPORTANT - Leader Election

If you DON'T use leader election --leader-elect=false (which is the default), you can ignore the following.

If you use leader election in your VPA deployment (off by default) using the leader-elect=true flag, you should note that the default lease name was changed in kubernetes/autoscaler#7462 from vpa-recommender to vpa-recommender-lease due to conflicts it creates with the built-in HPA/VPA deployment in GKE.

This means that while you roll out the latest VPA release, this can temporarily cause 2 different instances of the VPA recommender to be leaders. We don't believe this should cause any issues as the recommendations would simply be duplicated to API Server (see discussion in kubernetes/autoscaler#7498).

To avoid this default flag change, explicitly set --leader-elect-resource-name=vpa-recommender in your own VPA deployment.

IMPORTANT - v1beta2 is no longer served

This API has been deprecated since July 2023 (see #5922).

v1beta2 VPA CRDs were removed in kubernetes/autoscaler#7629.

This means v1beta2 objects are no longer served but can still be READ from etcd.

Migrating from v1beta2 to v1 is as simple as changing the apiVersion to v1 as all fields in v1beta2 are available in v1. See this guide

To undo this change, change served: false to served: true in the vpa-v1-crd-gen.yaml file. Alternatively, you could rollback to a previous VPA release.

What's Changed

• vpa-recommender: Prevent nil pointer dereference by @​ialidzhikov in kubernetes/autoscaler#7161
• VPA: Add option to set the webhook failurePolicy to Fail by @​adrianmoisey in kubernetes/autoscaler#7185
• VPA: Use kubectl apply to upsert VPA resource instead of create. by @​based64god in kubernetes/autoscaler#7199
• build(deps): bump golang from 1.22.5 to 1.23.0 in /vertical-pod-autoscaler/pkg/admission-controller by @​dependabot in kubernetes/autoscaler#7164
• build(deps): bump golang from 1.22.5 to 1.23.0 in /vertical-pod-autoscaler/pkg/updater by @​dependabot in kubernetes/autoscaler#7163
• build(deps): bump golang from 1.22.5 to 1.23.0 in /vertical-pod-autoscaler/pkg/recommender by @​dependabot in kubernetes/autoscaler#7165
• vpa-admission-controller: Wire contexts by @​ialidzhikov in kubernetes/autoscaler#6899
• Ensure CPU and Memory values are properly backfilled in GetContainersResources when VPA only touches one of CPU or Memory by @​raywainman in kubernetes/autoscaler#7184
• fix VPA controller_fetcher node validation by @​ZihanJiang96 in kubernetes/autoscaler#7101
• vpa-recommender: Use the MaintainCheckpoints context only for that step by @​ialidzhikov in kubernetes/autoscaler#7272
• build(deps): bump golang from 1.23.0 to 1.23.1 in /vertical-pod-autoscaler/pkg/recommender by @​dependabot in kubernetes/autoscaler#7259
• build(deps): bump golang from 1.23.0 to 1.23.1 in /vertical-pod-autoscaler/pkg/updater by @​dependabot in kubernetes/autoscaler#7260
• build(deps): bump golang from 1.23.0 to 1.23.1 in /vertical-pod-autoscaler/pkg/admission-controller by @​dependabot in kubernetes/autoscaler#7261
• vpa-admission-controller: Contextify status updates. Add timeout of 10s by @​ialidzhikov in kubernetes/autoscaler#7036
• fix: Generate certs for VPA on kubectl apply or create by @​adrianmoisey in kubernetes/autoscaler#7306
• Refactor logging statements in admission controller by @​omerap12 in kubernetes/autoscaler#7226
• Add pprof to all VPA components by @​adrianmoisey in kubernetes/autoscaler#7153
• build(deps): bump golang from 1.23.1 to 1.23.2 in /vertical-pod-autoscaler/pkg/admission-controller by @​dependabot in kubernetes/autoscaler#7323
• build(deps): bump golang from 1.23.1 to 1.23.2 in /vertical-pod-autoscaler/pkg/updater by @​dependabot in kubernetes/autoscaler#7324
• build(deps): bump golang from 1.23.1 to 1.23.2 in /vertical-pod-autoscaler/pkg/recommender by @​dependabot in kubernetes/autoscaler#7325
• fix: VPA use apply rather than update by @​adrianmoisey in kubernetes/autoscaler#7365
• FAQ: Update args for recommendations single pod by @​omerap12 in kubernetes/autoscaler#7308
• Refactor logging statements in recommender:checkpoint,input by @​omerap12 in kubernetes/autoscaler#7290
• feat: add webhook labels flag to add labels in VPA admission controller webhook by @​umagnus in kubernetes/autoscaler#7402
• Refactor logging in recommender, updater, and target components by @​omerap12 in kubernetes/autoscaler#7294
• Refactor logging statements in common,e2e test files by @​omerap12 in kubernetes/autoscaler#7205

... (truncated)

Commits

• a8baf36 Merge pull request #988 from aleksandra-malinowska/cluster-autoscaler-1.3.0
• 5ca7bdb Cluster Autoscaler 1.3.0
• e605eb6 Merge pull request #979 from aleksandra-malinowska/cluster-autoscaler-1.3.0-b...
• f2b489f Cluster Autoscaler 1.3.0-beta.2
• 1edd508 Merge pull request #977 from MaciekPytel/cp_nap_client
• 4b3f9de Remove GKE alpha client from godeps and override
• 9206448 Update GKE client used in cloudprovider
• cb9ee11 Update GKE beta client
• 542d55f Merge pull request #973 from aleksandra-malinowska/cluster-autoscaler-release...
• 64a11a6 Merge pull request #971 from aleksandra-malinowska/godeps-update
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[gardener-robot]

@dependabot[bot] Thank you for your contribution.

[gardener-robot-ci-3]

Thank you @dependabot[bot] for your contribution. Before I can start building your PR, a member of the organization must set the required label(s) {'reviewed/ok-to-test'}. Once started, you can check the build status in the PR checks section below.

[hebelsan]

/lgtm