build(deps): bump the github-dependencies group across 1 directory with 2 updates

[dependabot]

Bumps the github-dependencies group with 2 updates in the / directory: github.com/noobaa/noobaa-operator/v5 and github.com/rook/rook.

Updates github.com/noobaa/noobaa-operator/v5 from 5.0.0-20260506172103-a30b2d322aaf to 5.21.0

Release notes

Sourced from github.com/noobaa/noobaa-operator/v5's releases.

v5.21.0

What's Changed

• Remove usage of create_auth and reset_password API by @​tangledbytes in noobaa/noobaa-operator#1697
• Mongo pool upgrade by @​naveenpaul1 in noobaa/noobaa-operator#1698
• Modify the golangci-lint pre-commit and Makefile flow by @​Neon-White in noobaa/noobaa-operator#1687
• CVE fix | Remove user_setup script by @​liranmauda in noobaa/noobaa-operator#1701
• Bumping version from 5.20.0 to 5.21.0 by @​liranmauda in noobaa/noobaa-operator#1704
• Update rook api by @​liranmauda in noobaa/noobaa-operator#1709
• Avoid updating cpu and memory in pvc template by @​jackyalbo in noobaa/noobaa-operator#1720
• Secure agent_config by using volume mounts instead of env vars by @​aayushchouhan09 in noobaa/noobaa-operator#1718
• IAM | IAM Service and Route Addition by @​shirady in noobaa/noobaa-operator#1721
• DB Backup - Design doc and initial changes by @​dannyzaken in noobaa/noobaa-operator#1717
• add liveness, readiness, and startup probes to noobaa-operator by @​OdedViner in noobaa/noobaa-operator#1684
• Add DB backup logic to noobaa reconciliation by @​dannyzaken in noobaa/noobaa-operator#1726
• add POSTGRES_HOST_RO to core host if using cnpg cluster by @​alphaprinz in noobaa/noobaa-operator#1725
• Fix upgrade failure due to readiness probe by @​tangledbytes in noobaa/noobaa-operator#1731
• Update AWS Regions with ap-southeast-6 by @​liranmauda in noobaa/noobaa-operator#1735
• Update dependencies by @​liranmauda in noobaa/noobaa-operator#1736
• Added logic for DB recovery from backup by @​dannyzaken in noobaa/noobaa-operator#1737
• Added a CLI command to take a single DB backup by @​dannyzaken in noobaa/noobaa-operator#1740
• Add support for "bench warp" command by @​tangledbytes in noobaa/noobaa-operator#1702
• Increased cnpg operator memory to 300Mi by @​dannyzaken in noobaa/noobaa-operator#1741
• Delete pre-commit by @​jackyalbo in noobaa/noobaa-operator#1742
• IAM | Save ARN for accounts in secret by @​naveenpaul1 in noobaa/noobaa-operator#1739
• Handle shared_buffers value when there are no memory requests by @​dannyzaken in noobaa/noobaa-operator#1743
• Update Dependencies by @​liranmauda in noobaa/noobaa-operator#1746
• fixed typo in noobaa-crd.md by @​dannyzaken in noobaa/noobaa-operator#1748
• Add spec validation for BackingStore and NamespaceStore by @​VershaAgrawal in noobaa/noobaa-operator#1745
• [Backport into 5.21] Filter out NOOBAA_ROOT_SECRET from env vars to avoid exposing it in pod spec by @​liranmauda in noobaa/noobaa-operator#1756
• [Backport into 5.21] fix:bad secret key blocking other backingstores by @​liranmauda in noobaa/noobaa-operator#1760
• [Backport into 5.21] disable HAC + set noobaa-core term grace to 1 by @​liranmauda in noobaa/noobaa-operator#1763
• [Direct into 5.21] Revert "Bump github.com/kedacore/keda/v2 from 2.18.1 to 2.18.3" by @​liranmauda in noobaa/noobaa-operator#1765
• [Backport to 5.21] added regex validation to check cron format of dbBackup.schedule by @​dannyzaken in noobaa/noobaa-operator#1776
• [Backport into 5.21] ThanosRuleHighRuleEvaluationWarnings firing due to sufix by @​liranmauda in noobaa/noobaa-operator#1785
• [backport to 5.21] Add runbook full capacity alerts by @​jackyalbo in noobaa/noobaa-operator#1793
• [Backport into 5.21] Fix the 'runbook_url' position in prometheus-rules file by @​liranmauda in noobaa/noobaa-operator#1805
• [Backport into 5.21] backporting regions, and CVE fixes by @​liranmauda in noobaa/noobaa-operator#1809
• [Backport 5.21] Re-enable HAC for components other than DB (#1810) by @​tangledbytes in noobaa/noobaa-operator#1811
• [Backport 5.21] PR 1819 & PR 1807 by @​tangledbytes in noobaa/noobaa-operator#1820

New Contributors

• @​OdedViner made their first contribution in noobaa/noobaa-operator#1684

Full Changelog: noobaa/noobaa-operator@v5.20.0...v5.21.0

v5.20.0

Release v5.20.0

What's Changed

• Bump golang.org/x/net from 0.37.0 to 0.38.0 by @​dependabot[bot] in noobaa/noobaa-operator#1590

... (truncated)

Commits

• See full diff in compare view

Updates github.com/rook/rook from 1.19.5 to 1.20.1

Release notes

Sourced from github.com/rook/rook's releases.

v1.20.1

Improvements

Rook v1.20.1 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

helm: Add rook compatible ceph csi driver values (#17665, @​subhamkrai) osd: Ensure require-osd-release set after a major Ceph upgrade (#17546, @​Sunnatillo) build: bump golang.org/x/crypto to v0.52.0 (#17718, @​subhamkrai) nvmeof: Use Ceph default gateway image when not specified in the nvmeof CR (#17701, @​OdedViner) core: Delete stale MDS and RGW pdbs (#17700, @​sp98) osd: Support using node labels for OSD device class assignment (#17649, @​yuxiang-he) csi: Disable csi-addons by default (#17664, @​subhamkrai) object: Clobber bucket policy on modify instead of merging (#17643, @​archy-rock3t-cloud) docs: Add an install guide for Two-Node Fenced clusters (#17628, @​parth-gr) docs: Add prerequisite to run udev (#17760, @​sp98) docs: External cluster documentation updated for the CSI operator (#17690, @​parth-gr) docs: Update csi-driver value.yaml reference link (#17674, @​subhamkrai)

v1.20.0

Upgrade Guide

To upgrade from previous versions of Rook, see the Rook upgrade guide.

Breaking Changes

• The Ceph CSI operator is required for managing CSI driver settings.
  • Upgrades will continue working with the existing settings that had been applied by Rook previously. Further updates to CSI settings will need to be updated by the Rook admin. Clusters with default CSI settings do not require customizations.
  • CSI settings are removed from the Rook operator configmap rook-ceph-operator-config and the rook-ceph Helm chart.
  • New installs must configure the CSI settings with the Ceph-CSI OperatorConfig and Driver CRs. Default settings are included in operator.yaml. For custom CSI settings, see the CSI Configuration for more details and examples.
  • For helm users, the Ceph CSI operator settings are configured by the ceph-csi-drivers chart. Custom CSI images remain configured by the rook-ceph chart values.

Features

• Supported Kubernetes versions are v1.31 through v1.36.
• SSE-S3 with Vault Agent: Added support for server-side encryption with SSE-S3 using HashiCorp Vault Agent authentication. See the CephObjectStore Security Settings for more details.
• Unused CRUSH rule cleanup: Rook now deletes unused CRUSH rules by default after the Ceph mgr starts. If unused CRUSH rules should not be deleted, set ROOK_DELETE_UNUSED_CRUSH_RULES to false in the operator config.
• Concurrently reconciling multiple Ceph Clusters with the setting ROOK_RECONCILE_CONCURRENT_CLUSTERS is declared stable.
• Containers within a pod are now consistently reconciled by name instead of relying on the order in which they are declared. This is a defensive measure against the declaration order changing due to manipulation by a mutating webhook.
• OSD resize with encrypted host-based OSDs: For encrypted OSDs (with encryptedDevice: true) with host-based (non-PVC) clusters, resizing the underlying disk now automatically expands encrypted OSDs.
• RGW Accounts (Experimental): The CephObjectStoreAccount CRD manages RGW accounts. The accountReffield is added inCephObjectStoreUser to associate users with accounts. This feature is currently only testable with the Ceph main branch image (quay.ceph.io/ceph-ci/ceph:main`). See the Object Store Accounts documentation for more details.
• Two-node clusters (Experimental): Rook allows a "floating" mon to migrate between the two nodes in case one node is down.

v1.19.7

Improvements

Rook v1.19.7 is a patch release limited in scope and focusing on feature additions and bug fixes to the Ceph operator.

• build: Set default version of Ceph to 19.2.4 (#17629, @​subhamkrai)
• helm: Set helm ownership for csi resources if operator chart is configured (#17717, @​subhamkrai)
• core: Delete stale MDS and RGW PDBs (#17700, @​sp98)
• osd: Support using node labels for OSD device class assignment (#17649, @​yuxiang-he)
• osd: Ensure require-osd-release is set after rolling upgrade (#17546, @​Sunnatillo)

... (truncated)

Commits

• 6eab73f Merge pull request #17767 from obnoxxx/prep-v1.20.1
• efe29fa build: set the release version to v1.20.1
• 5ee2359 Merge pull request #17766 from rook/mergify/bp/release-1.20/pr-17760
• 2acb4ce doc: update prerequisite to use udev
• 2a4eea4 Merge pull request #17757 from rook/mergify/bp/release-1.20/pr-17628
• adcb56e core: add a install guide for tnf
• 8c6316e Merge pull request #17745 from rook/mergify/bp/release-1.20/pr-17708
• 5449820 test: run object suite store with a single rgw instance
• 958f605 Merge pull request #17706 from rook/mergify/bp/release-1.20/pr-17695
• bdeddda Merge pull request #17739 from rook/mergify/bp/release-1.20/pr-17726
• Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

[openshift-ci]

Hi @dependabot[bot]. Thanks for your PR.

I'm waiting for a red-hat-storage member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work.

Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

rebase

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

[openshift-ci]

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dependabot[bot], subhamkrai

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details

Needs approval from an approver in each of these files:

• OWNERS [subhamkrai]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[openshift-ci]

@dependabot[bot]: The following tests failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name	Commit	Details	Required	Rerun command
ci/prow/build	d74d126	link	true	/test build
ci/prow/test	d74d126	link	true	/test test

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.