Update Helm release mysql from 9.19.1 to v10 (helm/defectdojo/Chart.yaml)

[renovate]

This PR contains the following updates:

Package	Update	Change
mysql (source)	major	~9.19.0 -> ~10.3.0

---

Release Notes

bitnami/charts (mysql)

v10.3.0

• [bitnami/mysql] feat: ✨ 🔒 Add warning when original images are replaced (#​26251)

v10.2.4

• [bitnami/mysql] Use different liveness/readiness probes (#​25893) (1ee381b), closes #​25893

v10.2.3

• [bitnami/*] Change non-root and rolling-tags doc URLs (#​25628) (b067c94), closes #​25628
• [bitnami/*] Set new header/owner (#​25558) (8d1dc11), closes #​25558
• [bitnami/mysql] Release 10.2.3 updating components versions (#​25797) (d04e22b), closes #​25797

v10.2.2

• [bitnami/mysql] Release 10.2.2 updating components versions (#​25510) (74b8f70), closes #​25510

v10.2.1

• [bitnami/mysql] Release 10.2.1 updating components versions (#​25468) (445abb9), closes #​25468
• Replace VMware by Broadcom copyright text (#​25306) (a5e4bd0), closes #​25306

v10.1.1

• [bitnami/mysql] Release 10.1.1 updating components versions (#​24802) (72c09f5), closes #​24802
• [bitnami/several] Fix comment mentioning Keycloak (#​24661) (641c546), closes #​24661

v10.1.0

• [bitnami/mysql] feat: adds any extraPorts entries into the NetworkPolicy's ingress config (#​23927) (4aafee0), closes #​23927

v10.0.0

• [bitnami/*] Reorder Chart sections (#​24455) (0cf4048), closes #​24455
• [bitnami/mysql] feat!: 🔒 💥 Improve security defaults (#​24242) (2994fd2), closes #​24242

v9.23.0

• [bitnami/mysql] feat: ✨ 🔒 Add automatic adaptation for Openshift restricted-v2 SCC (#​2 (51beaf0), closes #​24128

v9.22.0

• [bitnami/mysql] feat: ✨ 🔒 Add readOnlyRootFilesystem support (#​23595) (6abe07f), closes #​23595

v9.21.2

• [bitnami/mysql] Release 9.21.2 updating components versions (#​23809) (753510e), closes #​23809

v9.21.1

• [bitnami/mysql] Release 9.21.1 updating components versions (#​23672) (9f18b01), closes #​23672

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[dryrunsecurity]

Hi there 👋, @DryRunSecurity here, below is a summary of our analysis and findings.

DryRun Security	Status	Findings
Configured Codepaths Analyzer	✅	0 findings
Sensitive Files Analyzer	✅	0 findings
AppSec Analyzer	✅	0 findings
Authn/Authz Analyzer	✅	0 findings
Secrets Analyzer	✅	0 findings

Note

🟢 Risk threshold not exceeded.

Change Summary (click to expand)

The following is a summary of changes in this pull request made by me, your security buddy 🤖. Note that this summary is auto-generated and not meant to be a definitive list of security issues but rather a helpful summary from a security perspective.

Summary:

The pull request includes two changes related to the DefectDojo Helm chart:

1. The helm/defectdojo/Chart.lock file has been updated to reflect the change in the MySQL Helm chart dependency version from 9.19.1 to 10.3.0. This is a routine dependency update, and the changes to the digest and generated fields are simply reflecting the changes made to the chart lock file.

2. The helm/defectdojo/Chart.yaml file has been updated to change the MySQL dependency version constraint from ~9.19.0 to ~10.3.0. This version change should be reviewed to ensure that there are no known security vulnerabilities or compatibility issues that could impact the DefectDojo application.

While the changes do not appear to have any direct security implications, it's important to review the release notes and changelogs for the new MySQL Helm chart version to identify any potential security updates or bug fixes. Additionally, thorough testing of the updated Helm chart is recommended to ensure that there are no regressions or unintended side effects.

Files Changed:

1. helm/defectdojo/Chart.lock:

   • The version of the mysql Helm chart dependency has been updated from 9.19.1 to 10.3.0.
   • The digest value has been updated to sha256:f4759fd1bf9e082790966aa295fed373129ec703480b2d962c59e5880ddeff74.
   • The generated timestamp has been updated to "2024-05-22T18:18:38.32694589Z".

2. helm/defectdojo/Chart.yaml:

   • The version constraint for the MySQL dependency has been updated from ~9.19.0 to ~10.3.0.

Powered by DryRun Security

[mtesauro]

@dsever Sorry, long day but is this related to the other helm PR you worked on recently? I'm not sure so sitting on this for now.

[dsever]

@mtesauro I see the pattern, rabbit is broken on k8s v1.22. So first of all I would like to do upgrade from not supported k8s version (1.22)

#9684

[mtesauro]

#9684 Merged 😃 👍

[mtesauro]

@dsever With #9684 merged, we good to start approvals on this one?

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[github-actions]

This pull request has conflicts, please resolve those before we can evaluate the pull request.

[github-actions]

Conflicts have been resolved. A maintainer will review the pull request shortly.

[mtesauro]

Closing this since MySQL support will end with the June minor release

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update. You will not get PRs for any future 10.x releases. But if you manually upgrade to 10.x then Renovate will re-enable minor and patch updates automatically.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.