Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

deps: update Go dependencies #58

Merged
merged 3 commits into from
Apr 15, 2024
Merged

deps: update Go dependencies #58

merged 3 commits into from
Apr 15, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 15, 2024

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
cloud.google.com/go/compute v1.23.3 -> v1.25.1 age adoption passing confidence require minor
cloud.google.com/go/storage v1.36.0 -> v1.40.0 age adoption passing confidence require minor
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.9.1 -> v1.11.1 age adoption passing confidence require minor
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.4.0 -> v1.5.2 age adoption passing confidence require minor
github.com/Azure/azure-sdk-for-go/sdk/resourcemanager/compute/armcompute/v5 v5.4.0 -> v5.6.0 age adoption passing confidence require minor
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.2.1 -> v1.3.2 age adoption passing confidence require minor
github.com/aws/aws-sdk-go-v2/config v1.26.2 -> v1.27.11 age adoption passing confidence require minor
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.15.9 -> v1.16.15 age adoption passing confidence require minor
github.com/aws/aws-sdk-go-v2/service/ec2 v1.142.0 -> v1.156.0 age adoption passing confidence require minor
github.com/aws/aws-sdk-go-v2/service/s3 v1.47.7 -> v1.53.1 age adoption passing confidence require minor
github.com/aws/aws-sdk-go-v2/service/sts v1.26.6 -> v1.28.6 age adoption passing confidence require minor
github.com/aws/smithy-go v1.19.0 -> v1.20.2 age adoption passing confidence require minor
github.com/googleapis/gax-go/v2 v2.12.0 -> v2.12.3 age adoption passing confidence require patch
github.com/gophercloud/gophercloud v1.9.0 -> v1.11.0 age adoption passing confidence require minor
github.com/gophercloud/utils 80377ec -> c2cbb9f require digest
github.com/open-policy-agent/opa v0.60.0 -> v0.63.0 age adoption passing confidence require minor
github.com/stretchr/testify v1.8.4 -> v1.9.0 age adoption passing confidence require minor
golang.org/x/mod v0.14.0 -> v0.17.0 age adoption passing confidence require minor

Release Notes

aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2/feature/s3/manager)

v1.16.14

v1.16.13

v1.16.12

v1.16.11

v1.16.10

v1.16.9

v1.16.8

v1.16.7

v1.16.6

v1.16.5

v1.16.4

v1.16.3

v1.16.2

v1.16.1

v1.16.0

aws/smithy-go (github.com/aws/smithy-go)

v1.20.2

Compare Source

v1.20.1

Compare Source

v1.20.0

Compare Source

googleapis/gax-go (github.com/googleapis/gax-go/v2)

v2.12.3

Compare Source

Bug Fixes

v2.12.2

Compare Source

Bug Fixes
  • v2/callctx: fix SetHeader race by cloning header map (#​326) (534311f)

v2.12.1

Compare Source

Bug Fixes
gophercloud/gophercloud (github.com/gophercloud/gophercloud)

v1.11.0

Compare Source

What's Changed

This release replaces v1.9 and v1.10, making the Context embedded in the Provider client working again as expected.

Full Changelog: gophercloud/gophercloud@v1.10.0...v1.11.0

v1.10.0

Compare Source

What's Changed

Full Changelog: gophercloud/gophercloud@v1.9.0...v1.10.0

open-policy-agent/opa (github.com/open-policy-agent/opa)

v0.63.0

Compare Source

This release contains a mix of features, performance improvements, and bugfixes.

Runtime, Tooling, SDK
Topdown and Rego
Docs + Website + Ecosystem
Miscellaneous
  • chore: Remove repetitive words (#​6644) authored by @​occupyhabit
  • Dependency updates; notably:
    • build(deps): bump github.com/containerd/containerd from 1.7.13 to 1.7.14
    • build(deps): bump github.com/golang/protobuf from 1.5.3 to 1.5.4
    • build(deps): bump google.golang.org/grpc from 1.62.0 to 1.62.1

v0.62.1

Compare Source

This is a security fix release for the fixes published in Go 1.22.1.

OPA servers using --authentication=tls would be affected: crafted malicious client certificates could cause a panic in the server.

Also, crafted server certificates could panic OPA's HTTP clients, in bundle plugin, status and decision logs; and http.send calls that verify TLS.

This is CVE-2024-24783 (https://pkg.go.dev/vuln/GO-2024-2598).

Note that there are other security fixes in this Golang release, but whether or not OPA is affected is harder to assess. An update is advised.

Miscellaneous

v0.62.0

Compare Source

NOTES:

  • The minimum version of Go required to build the OPA module is 1.20

This release contains a mix of improvements and bugfixes.

Runtime, Tooling, SDK
  • cmd: Add environment variable backups for command-line flags (#​6508) authored by @​colinjlacy
  • download/oci: Add missing WithBundleParserOpts method to OCI downloader (#​6571) authored by @​slonka
  • logging: avoid %!F(MISSING) in logs by skipping calls to the {Debug,Info,Warn,Error}f functions when there are no arguments (#​6555) authored by @​srenatus
Topdown and Rego
Docs + Website + Ecosystem
Miscellaneous
  • Add Elastic to ADOPTERS.md (#​6568) authored by @​orouz
  • Dependency updates; notably:
    • bump golang 1.21.5 -> 1.22 (#​6595) authored by @​srenatus
    • bump google.golang.org/grpc from 1.61.0 to 1.62.0
    • bump golang.org/x/net from 0.19.0 to 0.21.0
    • bump github.com/containerd/containerd from 1.7.12 to 1.7.13
    • bump aquasecurity/trivy-action from 0.16.1 to 0.17.0
    • bump github.com/prometheus/client_golang from 1.18.0 to 1.19.0
    • bump github.com/opencontainers/image-spec from 1.1.0-rc5 to 1.1.0-rc6

v0.61.0

Compare Source

This release contains a mix of new features and bugfixes.

Runtime, SDK
Topdown
Docs
Miscellaneous
  • linters+testdata: Reformat all yaml testcases for linting. (#​6511) authored by @​philipaconrad
  • Dependency updates, notably:
    • bump github.com/containerd/containerd from 1.7.11 to 1.7.12
    • bump github.com/go-logr/logr from 1.3.0 to 1.4.1
    • bump github.com/google/uuid from 1.5.0 to 1.6.0
    • bump github.com/prometheus/client_golang from v1.16.0 to v1.18.0
    • bump google.golang.org/grpc from 1.60.1 to 1.61.0
stretchr/testify (github.com/stretchr/testify)

v1.9.0

Compare Source

What's Changed

New Contributors

Full Changelog: stretchr/testify@v1.8.4...v1.9.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate Renovate
Copy link
Contributor Author

renovate bot commented Apr 15, 2024

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -d -t ./...
go: errors parsing go.mod:
go.mod:98:2: require github.com/gophercloud/utils: version "v0.0.0-20240410104636-c2cbb9f23ff9" invalid: go.mod has post-v0 module path "github.com/gophercloud/utils/v2" at revision c2cbb9f23ff9

@katexochen
deps: downgrade gophercloud/utils to 80377ec, tidy go.mod
6c60ae1 
Signed-off-by: Paul Meyer <49727155+katexochen@users.noreply.github.com>
@renovate Renovate
Copy link
Contributor Author

renovate bot commented Apr 15, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

@katexochen katexochen merged commit 8933160 into main Apr 15, 2024
7 of 8 checks passed
@katexochen katexochen deleted the renovate/go-dependencies branch April 15, 2024 08:09
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@katexochen katexochen katexochen approved these changes

Assignees
No one assigned
Labels
dependencies
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@katexochen @edgelessci