Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update go updates #31

Merged
merged 2 commits into from Apr 30, 2024
Merged

Update go updates #31

merged 2 commits into from Apr 30, 2024

Conversation

platform-engineering-bot
Copy link
Contributor

@platform-engineering-bot platform-engineering-bot commented Dec 11, 2023 •
edited

This PR contains the following updates:

Package Type Update Change
github.com/emicklei/go-restful/v3 indirect minor v3.11.0 -> v3.12.0
github.com/go-logr/logr indirect minor v1.3.0 -> v1.4.1
github.com/go-openapi/jsonpointer indirect minor v0.19.6 -> v0.21.0
github.com/go-openapi/jsonreference indirect minor v0.20.2 -> v0.21.0
github.com/go-openapi/swag indirect minor v0.22.3 -> v0.23.0
github.com/golang/protobuf indirect patch v1.5.3 -> v1.5.4
github.com/google/uuid indirect minor v1.3.0 -> v1.6.0
github.com/gorilla/websocket indirect patch v1.5.0 -> v1.5.1
github.com/imdario/mergo indirect major v0.3.6 -> v1.0.0
go.arcalot.io/assert require minor v1.7.0 -> v1.8.0
golang.org/x/net indirect minor v0.19.0 -> v0.24.0
golang.org/x/oauth2 indirect minor v0.10.0 -> v0.19.0
golang.org/x/sys indirect minor v0.15.0 -> v0.19.0
golang.org/x/term indirect minor v0.15.0 -> v0.19.0
golang.org/x/time indirect minor v0.3.0 -> v0.5.0
google.golang.org/appengine indirect major v1.6.7 -> v2.0.6
google.golang.org/protobuf indirect minor v1.31.0 -> v1.33.0
gopkg.in/yaml.v2 indirect major v2.4.0 -> v3.0.1
k8s.io/klog/v2 indirect minor v2.110.1 -> v2.120.1
k8s.io/kube-openapi indirect digest 2dd684a -> dc4e619
k8s.io/utils indirect digest 3b25d92 -> 4693a02
sigs.k8s.io/yaml indirect minor v1.3.0 -> v1.4.0

Release Notes

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.12.0

Compare Source

v3.11.3

Compare Source

  • better not have 2 tags on one commit

v3.11.2

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.1

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)
go-logr/logr (github.com/go-logr/logr)

v1.4.1

Compare Source

What's Changed

Full Changelog: go-logr/logr@v1.4.0...v1.4.1

v1.4.0

Compare Source

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.3.0...v1.4.0

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.21.0

Compare Source

v0.20.3

Compare Source

v0.20.2

Compare Source

v0.20.1

Compare Source

v0.20.0

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.0

Compare Source

v0.20.5

Compare Source

v0.20.4

Compare Source

v0.20.3

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

v0.23.0

Compare Source

v0.22.10

Compare Source

v0.22.9

Compare Source

v0.22.8

Compare Source

v0.22.7

Compare Source

v0.22.6

Compare Source

v0.22.5

Compare Source

v0.22.4

Compare Source

golang/protobuf (github.com/golang/protobuf)

v1.5.4

Compare Source

Notable changes

  • update descriptor.proto to latest version
google/uuid (github.com/google/uuid)

v1.6.0

Compare Source

Features
Bug Fixes

v1.5.0

Compare Source

Features

v1.4.0

Compare Source

Features
  • UUIDs slice type with Strings() convenience method (#​133) (cd5fbbd)
Fixes
  • Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior)

v1.3.1

Compare Source

Bug Fixes
gorilla/websocket (github.com/gorilla/websocket)

v1.5.1

Compare Source

What's Changed

New Contributors

Full Changelog: gorilla/websocket@v1.5.0...v1.5.1

imdario/mergo (github.com/imdario/mergo)

v1.0.0: 1.0.0 released with new module URL: dario.cat/mergo

Compare Source

This PR is a release containing 0.3.15 features but changing the module URL to dario.cat/mergo.

What's Changed

Full Changelog: darccio/mergo@v0.3.16...v1.0.0

v0.3.16: Announcement: v1.0.0 will be released on June 18th

Compare Source

This release doesn't contain code changes.

After 10 years, with many corner cases covered, very few issues pending (at least, comparing them with the usage of the library as part of Docker, Kubernetes, Datadog's agent, etc.), and a very stable API, I think it's time to release a 1.0.0 version.

This version will be released under a vanity URL: dario.cat/mergo

PS: although I'll make sure that github.com/imdario/mergo will be available, I'm going to also change my GitHub handle, so expect for a few minutes to not be able to pull from github.com/imdario as I fork it from the new handle to the old one.

PS2: I'm creating a discussion for this release to make sure we can have a conversation around the topic, and anything else about Mergo that you care about.

v0.3.15: Issues #​131, #​170, #​220, and #​202 fixed

Compare Source

v0.3.14: fix: Respect overwriteWithEmptySrc when merging maps #​231

Compare Source

v0.3.13: Merging same-type slices supported, YAML upgraded to v3 (only used in tests), and more flexibility for transformers

Compare Source

What's Changed

New Contributors

Full Changelog: darccio/mergo@0.3.12...v0.3.13

v0.3.12: Some bug fixes

Compare Source

Thanks to @​abicky and @​ndeloof to help to improve Mergo. They fixed issues #​90 & #​174.

v0.3.11

Compare Source

v0.3.10: : frozen codebase + next steps

Compare Source

After the broken 0.3.9, I decided to revert the faulty PR #​105, reopening the issues #​90 and #​103. Also, this release includes all the other pending bugs. As it is getting harder to modify the codebase, I decided to freeze it. I'm going to merge only PRs fixing bugs with proper tests.

On the other hand, I will start a new cleanroom implementation. Existing tests will be reviewed and used as "test subjects". Also, I plan to collect real-world examples to use them also as "test subjects" in a separate repository.

In this process, I would like to work from the bottom to the top, focusing on getting the core right. I plan to keep a legacy compatibility layer, but the new API may differ from the current one to allow better maintenance and new features.

v0.3.9: Support for Struct in Map

Compare Source

v0.3.8: Several PRs merged

Compare Source

v0.3.7

Compare Source

Two PR merged to fix bugs. Thanks @​requilence, @​smgladkovskiy, @​vdemeester and @​luisdavim for your time!

arcalot/go-assert (go.arcalot.io/assert)

v1.8.0: : Improved Panic Assertions

Compare Source

This release adds more functions for asserting that a panic has occurred. They allow validating that the value in the panic has the expected value.

Pull Requests

Full Changelog: arcalot/go-assert@v1.7.0...v1.8.0

golang/appengine (google.golang.org/appengine)

v2.0.6

Compare Source

What's Changed

New Contributors

Full Changelog: golang/appengine@v1.6.8...v2.0.6

v2.0.5

Compare Source

What's Changed

New Contributors

Full Changelog: golang/appengine@v2.0.4...v2.0.5

v2.0.4

Compare Source

What's Changed

New Contributors

Full Changelog: golang/appengine@v2.0.3...v2.0.4

v2.0.3

Compare Source

What's Changed

New Contributors

Full Changelog: golang/appengine@v2.0.2...v2.0.3

v2.0.2: Release App Engine golang SDK v2.0.2

Compare Source

What's Changed

New Contributors

Full Changelog: golang/appengine@v2.0.1...v2.0.2

v2.0.1: Version 2.0.1

Compare Source

  • delay: let user use unique function keys using delay.MustRegister
  • aefix: fix v2/aefix to work with appengine/v2
  • Clean up interfaces for legacy APIs that will be supported for Go 1.12+

v1.6.8

Compare Source

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.33.0

Compare Source

This release contains one security fix:

  • encoding/protojson: Unmarshal could enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set. Unmarshal now correctly returns an error when handling these inputs. This is CVE-2024-24786.

v1.32.0

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.31.0...v1.32.0

This release contains commit protocolbuffers/protobuf-go@bfcd647, which fixes a denial of service vulnerability by preventing a stack overflow through a default maximum recursion limit. See https://github.com/golang/protobuf/issues/1583 and https://github.com/golang/protobuf/issues/1584 for details.

go-yaml/yaml (gopkg.in/yaml.v2)

v3.0.1

Compare Source

v3.0.0

Compare Source

kubernetes/klog (k8s.io/klog/v2)

v2.120.1: Prepare klog release for Kubernetes v1.30 (Take 2)

Compare Source

What's Changed

Full Changelog: kubernetes/klog@v2.120.0...v2.120.1

v2.120.0: Prepare klog release for Kubernetes v1.30 (Take 1)

Compare Source

What's Changed

New Contributors

Full Changelog: kubernetes/klog@v2.110.1...v2.120.0

kubernetes-sigs/yaml (sigs.k8s.io/yaml)

v1.4.0

Compare Source

  • Adds a goyaml.v2 subpackage containing a fork of gopkg.in/yaml.v2 at v2.4.0
  • Adds a goyaml.v3 subpackage containing a fork of gopkg.in/yaml.v3 at v3.0.1
  • Adds an Encoder#CompactSeqIndent() encoder option to sigs.k8.io/goyaml.v3 to allow opting into indentation compatible with gopkg.in/yaml.v2

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@platform-engineering-bot
Copy link
Contributor Author

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: go get -d -t ./...
go: github.com/imdario/mergo@v1.0.0: parsing go.mod:
	module declares its path as: dario.cat/mergo
	        but was required as: github.com/imdario/mergo

@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 4 times, most recently from f4bb061 to c4a602f Compare December 17, 2023 18:15
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 7 times, most recently from 41c03d6 to c8af392 Compare December 27, 2023 19:10
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 8 times, most recently from 15996bf to 741119e Compare January 8, 2024 19:12
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 2 times, most recently from 9b9786f to 3eb229e Compare January 10, 2024 20:14
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 5 times, most recently from a8d8fe2 to ec43b3a Compare January 23, 2024 19:11
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 3 times, most recently from e8ac277 to c6edc2c Compare January 30, 2024 19:11
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 8 times, most recently from 092c1f2 to 070898c Compare March 10, 2024 23:13
@webbnh webbnh changed the title Update go updates rebase! Update go updates Mar 21, 2024
@platform-engineering-bot platform-engineering-bot changed the title rebase! Update go updates Update go updates Mar 27, 2024
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 2 times, most recently from 838bf35 to f2d8766 Compare April 2, 2024 20:07
webbnh
webbnh requested changes Apr 3, 2024
View reviewed changes
Copy link
Contributor

@webbnh webbnh left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Needs revision.

go.mod Outdated
github.com/imdario/mergo v0.3.6 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/gorilla/websocket v1.5.1 // indirect
github.com/imdario/mergo v1.0.0 // indirect
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The change to Mergo requires additional action: we either need to change the reference in the dependency (if we can) to dario.cat/mergo or we need to add a replace directive here:

replace github.com/imdario/mergo => github.com/imdario/mergo v0.3.16

@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 6 times, most recently from 1739d8f to 41147d5 Compare April 8, 2024 22:07
@platform-engineering-bot
Copy link
Contributor Author

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

@platform-engineering-bot @webbnh
Update go updates
1f0f61f 
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
@webbnh
Fix mergo dependency
fe79e2c
@webbnh webbnh force-pushed the renovate/go-updates branch 2 times, most recently from 967a1b4 to fe79e2c Compare April 30, 2024 16:37
@webbnh webbnh merged commit d8bb1f6 into main Apr 30, 2024
2 checks passed
@webbnh webbnh deleted the renovate/go-updates branch April 30, 2024 16:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@webbnh webbnh webbnh approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@platform-engineering-bot @webbnh