Update all dependencies

[renovate]

This PR contains the following updates:

Package	Update	Change
defenseunicorns/build-harness	minor	1.6.1 -> 1.7.0
flux2	patch	2.0.0 -> 2.0.1
golang	patch	1.20.5 -> 1.20.6

---

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.

---

Release Notes

defenseunicorns/build-harness (defenseunicorns/build-harness)

v1.7.0

Compare Source

What's Changed

• Add grype config file and ignore a false positive by @​RothAndrew in https://github.com/defenseunicorns/build-harness/pull/50
• Update dependency defenseunicorns/build-harness to v1.6.1 by @​renovate in https://github.com/defenseunicorns/build-harness/pull/53
• Update dependency awscli to v2.13.0 by @​renovate in https://github.com/defenseunicorns/build-harness/pull/54

Full Changelog: 1.6.1...1.7.0

fluxcd/flux2 (flux2)

v2.0.1

Compare Source

Highlights

Flux v2.0.1 is a patch release which comes with various fixes. Users are encouraged to upgrade for the best experience.

💡 For upgrading from Flux v0.x, please see the procedure documented in 2.0.0.

Fixes

• Fix AWS auth for cross-region ECR repositories (source-controller, image-reflector-controller).
• Prevent spurious alerts for skipped resources (kustomize-controller).
• List removed resources for flux diff ks --kustomization-file (flux CLI).
• Fix SLSA provenance generation for the Flux CLI binaries.

Components changelog

• source-controller v1.0.1
• kustomize-controller v1.0.1
• image-reflector-controller v0.29.1

CLI Changelog

• PR #​4068 - @​stefanprodan - Update dependencies
• PR #​4065 - @​hiddeco - action: support openssl and sha256sum
• PR #​4062 - @​souleb - diff: Take into account the server-side inventory for local Flux Kustomizations
• PR #​4061 - @​hiddeco - action: re-allow configuration of non-default token
• PR #​4057 - @​fluxcdbot - Update toolkit components
• PR #​4052 - @​stefanprodan - docs: Link to the Flux GitHub Action documentation
• PR #​4051 - @​hiddeco - action: use $RUNNER_TOOL_CACHE, support MacOS and Windows, validate checksum
• PR #​4046 - @​stefanprodan - ci: backport: set write permissions
• PR #​4043 - @​stefanprodan - ci: release: extract the image tag from GITHUB_REF
• PR #​4041 - @​hiddeco - ci: release: disable interpretation backslash esc

New Documentation

• Flux GitHub Action
• SLSA provenance verification

golang/go (golang)

v1.20.6

Compare Source

---

Configuration

📅 Schedule: Branch creation - "after 9am and before 5pm every weekday" in timezone America/New_York, Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.