Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
[](https://renovatebot.com) This PR contains the following updates: | Package | Change | Age | Adoption | Passing | Confidence | |---|---|---|---|---|---| | [github.com/cerbos/cerbos/api/genpb](https://togithub.com/cerbos/cerbos) | `v0.33.0` -> `v0.34.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [github.com/lestrrat-go/jwx/v2](https://togithub.com/lestrrat-go/jwx) | `v2.0.19` -> `v2.0.20` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | | [google.golang.org/grpc](https://togithub.com/grpc/grpc-go) | `v1.61.1` -> `v1.62.0` | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | [](https://docs.renovatebot.com/merge-confidence/) | --- ### Release Notes <details> <summary>cerbos/cerbos (github.com/cerbos/cerbos/api/genpb)</summary> ### [`v0.34.0`](https://togithub.com/cerbos/cerbos/releases/tag/v0.34.0) [Compare Source](https://togithub.com/cerbos/cerbos/compare/v0.33.0...v0.34.0) ## Cerbos 0.34.0 View the full release notes at https://docs.cerbos.dev/cerbos/latest/releases/v0.34.0.html #### Changelog ##### Features - [`42e8442`](https://togithub.com/cerbos/cerbos/commit/42e84420) feat: Better diagnostic error messages for policy issues ([#​1960](https://togithub.com/cerbos/cerbos/issues/1960)) ##### Enhancements - [`36b0e6d`](https://togithub.com/cerbos/cerbos/commit/36b0e6d6) enhancement(ci): Sign release artifacts ([#​1959](https://togithub.com/cerbos/cerbos/issues/1959)) - [`5db9ab0`](https://togithub.com/cerbos/cerbos/commit/5db9ab03) enhancement(ci): Validate Helm chart in CI ([#​1957](https://togithub.com/cerbos/cerbos/issues/1957)) - [`90f198a`](https://togithub.com/cerbos/cerbos/commit/90f198a2) enhancement: Better compilation errors ([#​1968](https://togithub.com/cerbos/cerbos/issues/1968)) - [`707278f`](https://togithub.com/cerbos/cerbos/commit/707278ff) enhancement: Detailed load errors in REPL ([#​1985](https://togithub.com/cerbos/cerbos/issues/1985)) ##### Bug fixes - [`4f90a5c`](https://togithub.com/cerbos/cerbos/commit/4f90a5c8) fix: Record HTTP remote address as peer address for HTTP requests ([#​1964](https://togithub.com/cerbos/cerbos/issues/1964)) ##### Documentation - [`4afdc2f`](https://togithub.com/cerbos/cerbos/commit/4afdc2f8) docs: Fix branch filter ([#​1958](https://togithub.com/cerbos/cerbos/issues/1958)) ##### Chores - [`05ef26b`](https://togithub.com/cerbos/cerbos/commit/05ef26b9) chore(ci): Add correct permissions to snapshot job ([#​1962](https://togithub.com/cerbos/cerbos/issues/1962)) - [`f24bec2`](https://togithub.com/cerbos/cerbos/commit/f24bec2d) chore(ci): Add cosign to snapshot build job ([#​1961](https://togithub.com/cerbos/cerbos/issues/1961)) - [`8db9898`](https://togithub.com/cerbos/cerbos/commit/8db98982) chore(ci): Fix workflow permissions ([#​1963](https://togithub.com/cerbos/cerbos/issues/1963)) - [`cfed07f`](https://togithub.com/cerbos/cerbos/commit/cfed07f9) chore(ci): Use master version of govulncheck ([#​1967](https://togithub.com/cerbos/cerbos/issues/1967)) - [`b89c2c7`](https://togithub.com/cerbos/cerbos/commit/b89c2c78) chore(deps): Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12 ([#​1971](https://togithub.com/cerbos/cerbos/issues/1971)) - [`7918e5e`](https://togithub.com/cerbos/cerbos/commit/7918e5e9) chore(deps): Bump helm.sh/helm/v3 from 3.14.0 to 3.14.1 ([#​1986](https://togithub.com/cerbos/cerbos/issues/1986)) - [`5cf243a`](https://togithub.com/cerbos/cerbos/commit/5cf243a1) chore(deps): Update actions/cache action to v4 ([#​1955](https://togithub.com/cerbos/cerbos/issues/1955)) - [`dc8cf7f`](https://togithub.com/cerbos/cerbos/commit/dc8cf7fb) chore(deps): Update actions/setup-go action to v5 ([#​1990](https://togithub.com/cerbos/cerbos/issues/1990)) - [`5574e85`](https://togithub.com/cerbos/cerbos/commit/5574e85a) chore(deps): Update github actions deps ([#​1973](https://togithub.com/cerbos/cerbos/issues/1973)) - [`e510788`](https://togithub.com/cerbos/cerbos/commit/e5107889) chore(deps): Update github actions deps ([#​1983](https://togithub.com/cerbos/cerbos/issues/1983)) - [`58a915c`](https://togithub.com/cerbos/cerbos/commit/58a915c3) chore(deps): Update go deps ([#​1954](https://togithub.com/cerbos/cerbos/issues/1954)) - [`e683b1d`](https://togithub.com/cerbos/cerbos/commit/e683b1d2) chore(deps): Update go deps ([#​1974](https://togithub.com/cerbos/cerbos/issues/1974)) - [`9bc3226`](https://togithub.com/cerbos/cerbos/commit/9bc32263) chore(deps): Update go deps ([#​1984](https://togithub.com/cerbos/cerbos/issues/1984)) - [`f151096`](https://togithub.com/cerbos/cerbos/commit/f1510961) chore(deps): Update go deps ([#​1989](https://togithub.com/cerbos/cerbos/issues/1989)) - [`0c095fc`](https://togithub.com/cerbos/cerbos/commit/0c095fcd) chore(deps): Update module github.com/goreleaser/goreleaser to v1.24.0 \[security] ([#​1976](https://togithub.com/cerbos/cerbos/issues/1976)) - [`9cf901b`](https://togithub.com/cerbos/cerbos/commit/9cf901b4) chore(docs): Readme update ([#​1965](https://togithub.com/cerbos/cerbos/issues/1965)) - [`aad2e98`](https://togithub.com/cerbos/cerbos/commit/aad2e98a) chore(docs): Readme update ([#​1966](https://togithub.com/cerbos/cerbos/issues/1966)) - [`e5c7bef`](https://togithub.com/cerbos/cerbos/commit/e5c7beff) chore(docs): Update header to have tabs for PDP and Hub ([#​1975](https://togithub.com/cerbos/cerbos/issues/1975)) - [`c9d468d`](https://togithub.com/cerbos/cerbos/commit/c9d468d8) chore(release): Add 0.34.0 release notes ([#​1991](https://togithub.com/cerbos/cerbos/issues/1991)) - [`8534c79`](https://togithub.com/cerbos/cerbos/commit/8534c799) chore(release): Prepare release 0.34.0 - [`563bec1`](https://togithub.com/cerbos/cerbos/commit/563bec15) chore(version): Bump version to 0.34.0 - [`e4ebc88`](https://togithub.com/cerbos/cerbos/commit/e4ebc884) chore: Add JSON test cases for parser ([#​1952](https://togithub.com/cerbos/cerbos/issues/1952)) - [`0dd8dad`](https://togithub.com/cerbos/cerbos/commit/0dd8dadb) chore: Add ability to parse well-known types ([#​1972](https://togithub.com/cerbos/cerbos/issues/1972)) - [`c253d87`](https://togithub.com/cerbos/cerbos/commit/c253d87e) chore: Copy metadata to runtime policies ([#​1981](https://togithub.com/cerbos/cerbos/issues/1981)) - [`bc84737`](https://togithub.com/cerbos/cerbos/commit/bc84737e) chore: Handle invalid YAML files containing unterminated strings ([#​1970](https://togithub.com/cerbos/cerbos/issues/1970)) - [`b10b139`](https://togithub.com/cerbos/cerbos/commit/b10b1391) chore: Move compiled policies annotations to \*PolicySet ([#​1988](https://togithub.com/cerbos/cerbos/issues/1988)) - [`4798453`](https://togithub.com/cerbos/cerbos/commit/47984534) chore: Reduce Docker healthcheck interval ([#​1978](https://togithub.com/cerbos/cerbos/issues/1978)) - [`03f95ec`](https://togithub.com/cerbos/cerbos/commit/03f95ec6) chore: Remove start-period from Docker health check ([#​1979](https://togithub.com/cerbos/cerbos/issues/1979)) - [`353aa08`](https://togithub.com/cerbos/cerbos/commit/353aa089) chore: Switch workspace mode off for vulnerability check ([#​1953](https://togithub.com/cerbos/cerbos/issues/1953)) - [`199ae8d`](https://togithub.com/cerbos/cerbos/commit/199ae8df) chore: Update test filtering logic ([#​1992](https://togithub.com/cerbos/cerbos/issues/1992)) - [`d022db1`](https://togithub.com/cerbos/cerbos/commit/d022db1e) chore: Use Go 1.22 ([#​1982](https://togithub.com/cerbos/cerbos/issues/1982)) </details> <details> <summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v2)</summary> ### [`v2.0.20`](https://togithub.com/lestrrat-go/jwx/releases/tag/v2.0.20) [Compare Source](https://togithub.com/lestrrat-go/jwx/compare/v2.0.19...v2.0.20) ### v2.0.20 20 Feb 2024 #### \[New Features] - \[jwe] Added `jwe.Settings(WithMaxBufferSize(int64))` to set the maximum size of internal buffers. The default value is 256MB. Most users do not need to change this value. - \[jws] Allow `jws.WithCompact()` and `jws.WithJSON()` to be passed to `jws.Parse()` and `jws.Verify()`. These options control the expected serialization format for the JWS message. - \[jwt] Add `jwt.WithCompactOnly()` to specify that only compact serialization can be used for `jwt.Parse()`. Previously, by virtue of `jws.Parse()` allowing either JSON or Compact serialization format, `jwt.Parse()` also alloed JSON serialization where as RFC7519 explicitly states that only compact serialization should be used. For backward compatibility the default behavior is not changed, but you can set this global option for jwt: `jwt.Settings(jwt.WithCompactOnly(true))` #### \[Miscellaneous] - Internal key conversions should now allow private keys to be used in place of public keys. This would allow you to pass private keys where public keys are expected. </details> <details> <summary>grpc/grpc-go (google.golang.org/grpc)</summary> ### [`v1.62.0`](https://togithub.com/grpc/grpc-go/releases/tag/v1.62.0): Release 1.62.0 [Compare Source](https://togithub.com/grpc/grpc-go/compare/v1.61.1...v1.62.0) ### New Features - grpc: Add StaticMethod CallOption as a signal to stats handler that a method is safe to use as an instrument key ([#​6986](https://togithub.com/grpc/grpc-go/issues/6986)) ### Behavior Changes - grpc: Return canonical target string from ClientConn.Target() and resolver.Address.String() ([#​6923](https://togithub.com/grpc/grpc-go/issues/6923)) ### Bug Fixes - server: wait to close connection until incoming socket is drained (with timeout) to prevent data loss on client-side ([#​6977](https://togithub.com/grpc/grpc-go/issues/6977)) - Special Thanks: [@​s-matyukevich](https://togithub.com/s-matyukevich) for discovering the root cause ### Performance Improvements - \*: Allow building without `x/net/trace` by using `grpcnotrace` to enable dead code elimination ([#​6954](https://togithub.com/grpc/grpc-go/issues/6954)) - Special Thanks: [@​hugelgupf](https://togithub.com/hugelgupf) - rand: improve performance and simplify implementation of `grpcrand` by adopting `math/rand`'s top-level functions for go version 1.21.0 and newer. ([#​6925](https://togithub.com/grpc/grpc-go/issues/6925)) - Special Thanks: [@​kmirzavaziri](https://togithub.com/kmirzavaziri) ### Dependencies - \*: Use google.golang.org/protobuf/proto instead of github.com/golang/protobuf. ([#​6919](https://togithub.com/grpc/grpc-go/issues/6919)) - Special Thanks: [@​Clement-Jean](https://togithub.com/Clement-Jean) > \[!NOTE] > The above change in proto library usage introduces a minor behavior change within those libraries. The old `github.com/golang/protobuf` library would error if given a `nil` message to `Marshal`, while the new `google.golang.org/protobuf` library will successfully output zero bytes in this case. This means server method handlers that did `return nil, nil` will now return an empty message and no error, while it used to return an error. This also affects the client side, where clients sending `nil` messages used to fail without sending the RPC, and now they will send an empty message. </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 👻 **Immortal**: This PR will be recreated if closed unmerged. Get [config help](https://togithub.com/renovatebot/renovate/discussions) if that's undesired. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/cerbos/cerbos-sdk-go). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4yMTIuMCIsInVwZGF0ZWRJblZlciI6IjM3LjIxMi4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9--> Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
](https://renovatebot.com){kind=link}
- Loading branch information
1 parent
b741ef0
commit 25cb5b7