Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 15, 2025

⚠️ Dependabot is rebasing this PR ⚠️

Rebasing might not happen immediately, so don't worry if this takes some time.

Note: if you make any changes to this PR yourself, they will take precedence over the rebase.


Bumps github.com/projectcontour/contour from 1.32.1 to 1.33.0.

Release notes

Sourced from github.com/projectcontour/contour's releases.

Contour v1.33.0

We are delighted to present version v1.33.0 of Contour, our layer 7 HTTP reverse proxy for Kubernetes clusters.

A big thank you to everyone who contributed to the release.

Minor Changes

Distroless Envoy image

The Envoy image used in the example manifests and as the default image in the Gateway Provisioner has been switched to the distroless variant.

Previously, it was based on Ubuntu and included a minimal OS with a package manager. The distroless variant contains only the files required to run Envoy, improving security.

(#7170, @​tsaarni)

Update to Gateway API v1.3.0

Gateway API CRD compatibility has been updated to release v1.3.0.

Full release notes for Gateway API v1.3.0 can be found here.

Other Changes

Installing and Upgrading

For a fresh install of Contour, consult the getting started documentation.

To upgrade an existing Contour installation, please consult the upgrade documentation.

Compatible Kubernetes Versions

Contour v1.33.0 is tested against Kubernetes 1.32 through 1.34.

Community Thanks!

We’re immensely grateful for all the community contributions that help make Contour even better!

... (truncated)

Commits
  • 3635b06 Update Contour Docker image to v1.33.0.
  • 7c737c9 Update golang to 1.25.1 (#7211)
  • 8c5ef62 build(deps): bump sigs.k8s.io/controller-runtime from 0.22.0 to 0.22.1 (#7210)
  • 4e9af85 build(deps): bump golang.org/x/oauth2 from 0.30.0 to 0.31.0 (#7209)
  • 0d4114f build(deps): bump github.com/prometheus/common from 0.65.0 to 0.66.1 (#7199)
  • e64437e build(deps): bump sigs.k8s.io/controller-tools from 0.18.0 to 0.19.0 (#7206)
  • f845e9e build(deps): bump sigs.k8s.io/controller-runtime from 0.21.0 to 0.22.0 (#7202)
  • e8560ee build(deps): bump actions/setup-go from 5.5.0 to 6.0.0 (#7200)
  • 787083d build(deps): bump actions/stale from 9.1.0 to 10.0.0 (#7207)
  • 8d540b4 build(deps): bump github/codeql-action from 3.29.11 to 3.30.1 (#7204)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

@dependabot dependabot bot added dependencies Pull requests that update a dependency file go type::chore labels Sep 15, 2025
@dependabot dependabot bot requested a review from a team as a code owner September 15, 2025 05:15
@dependabot dependabot bot added type::chore dependencies Pull requests that update a dependency file go labels Sep 15, 2025
Bumps [github.com/projectcontour/contour](https://github.com/projectcontour/contour) from 1.32.1 to 1.33.0.
- [Release notes](https://github.com/projectcontour/contour/releases)
- [Changelog](https://github.com/projectcontour/contour/blob/main/RELEASES.md)
- [Commits](projectcontour/contour@v1.32.1...v1.33.0)

---
updated-dependencies:
- dependency-name: github.com/projectcontour/contour
  dependency-version: 1.33.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/projectcontour/contour-1.33.0 branch from 98fc2c5 to 1b30a02 Compare September 16, 2025 19:56
@emosbaugh emosbaugh mentioned this pull request Sep 26, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go type::chore

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants