Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Creating a Function that Reverses a String #796

Merged
merged 6 commits into from Aug 18, 2023
Merged

Creating a Function that Reverses a String #796

merged 6 commits into from Aug 18, 2023

Conversation

bboogler
Copy link
Contributor

@bboogler bboogler commented Aug 11, 2023 •
edited

Commit Message

Creating a reverse function for CEL that takes a string, and returns a new string whose characters are in the reverse order of the original.

Summary of change in 50 characters or less

Function that can take "gums" and return "smug".

@bboogler
"Creating a reverse function for CEL that takes a str,
e830798 
and returns a new string whose characters are in the reverse order of
 the original."
@bboogler bboogler marked this pull request as ready for review August 11, 2023 16:23
@TristonianJones
Copy link
Collaborator

/gcbrun

TristonianJones
TristonianJones requested changes Aug 11, 2023
View reviewed changes
ext/strings.go Outdated Show resolved Hide resolved
ext/strings_test.go Show resolved Hide resolved
@TristonianJones
Copy link
Collaborator

@bboogler also, please update the ext/README.md with the documentation for your new function and a note about which version of the library where it was introduced.

@TristonianJones
Copy link
Collaborator

/gcbrun

@TristonianJones
Copy link
Collaborator

@bboogler do you mind syncing with HEAD? That should fix the build error you've encountered.

@bboogler
Copy link
Contributor Author

bboogler commented Aug 17, 2023 •
edited

@TristonianJones I don't mind, just synced. Blocked on /gcbrun.

@TristonianJones
Copy link
Collaborator

/gcbrun

bboogler
bboogler commented Aug 17, 2023
View reviewed changes
Copy link
Contributor Author

@bboogler bboogler left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The reverse function for taking a string argument and returning a new string whose characters are the original's in reverse order, is implemented and documented with this code.

@TristonianJones TristonianJones merged commit 5be9464 into google:master Aug 18, 2023
2 checks passed
charithe added a commit to cerbos/cerbos that referenced this pull request Oct 24, 2023
@renovate @charithe
chore(deps): Update go deps (#1845)
1295185 
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/aws/aws-sdk-go](https://togithub.com/aws/aws-sdk-go) |
require | minor | `v1.45.25` -> `v1.46.2` |
| [github.com/bufbuild/buf](https://togithub.com/bufbuild/buf) | require
| patch | `v1.27.0` -> `v1.27.1` |
|
[github.com/bufbuild/protovalidate-go](https://togithub.com/bufbuild/protovalidate-go)
| require | patch | `v0.3.1` -> `v0.3.4` |
|
[github.com/cerbos/cerbos/api/genpb](https://togithub.com/cerbos/cerbos)
| require | digest | `58d2969` -> `21315fe` |
| [github.com/google/cel-go](https://togithub.com/google/cel-go) |
require | minor | `v0.17.6` -> `v0.18.1` |
| [github.com/lestrrat-go/jwx/v2](https://togithub.com/lestrrat-go/jwx)
| require | patch | `v2.0.13` -> `v2.0.15` |
| [github.com/mattn/go-isatty](https://togithub.com/mattn/go-isatty) |
require | patch | `v0.0.19` -> `v0.0.20` |
| [github.com/rivo/tview](https://togithub.com/rivo/tview) | require |
digest | `6c844bd` -> `f7f32ad` |
| [github.com/twmb/franz-go](https://togithub.com/twmb/franz-go) |
require | patch | `v1.15.0` -> `v1.15.1` |
|
[github.com/twmb/franz-go/pkg/kadm](https://togithub.com/twmb/franz-go)
| require | minor | `v1.9.2` -> `v1.10.0` |
| [github.com/vektra/mockery/v2](https://togithub.com/vektra/mockery) |
require | minor | `v2.35.4` -> `v2.36.0` |
|
[google.golang.org/genproto/googleapis/api](https://togithub.com/googleapis/go-genproto)
| require | digest | `e917dd1` -> `49dd2c1` |
| [google.golang.org/grpc](https://togithub.com/grpc/grpc-go) | require
| minor | `v1.58.3` -> `v1.59.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>aws/aws-sdk-go (github.com/aws/aws-sdk-go)</summary>

###
[`v1.46.2`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1462-2023-10-23)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.1...v1.46.2)

\===

##### Service Client Updates

- `service/marketplacecommerceanalytics`: Updates service API and
documentation
- The StartSupportDataExport operation has been deprecated as part of
the Product Support Connection deprecation. As of December 2022, Product
Support Connection is no longer supported.
-   `service/networkmanager`: Updates service API and documentation
-   `service/redshift-serverless`: Updates service API and documentation
- `service/rekognition`: Updates service API, documentation, paginators,
and examples
- Amazon Rekognition introduces StartMediaAnalysisJob,
GetMediaAnalysisJob, and ListMediaAnalysisJobs operations to run a bulk
analysis of images with a Detect Moderation model.

###
[`v1.46.1`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1461-2023-10-20)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.0...v1.46.1)

\===

##### Service Client Updates

-   `service/appconfig`: Updates service API
-   `service/appintegrations`: Updates service API
-   `service/connect`: Updates service API and documentation
- `service/discovery`: Updates service API, documentation, and
paginators
- This release introduces three new APIs:
StartBatchDeleteConfigurationTask, DescribeBatchDeleteConfigurationTask,
and BatchDeleteAgents.
-   `service/medical-imaging`: Updates service documentation
-   `service/ssm`: Updates service API and documentation
- This release introduces a new API: DeleteOpsItem. This allows deletion
of an OpsItem.

###
[`v1.46.0`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1460-2023-10-19)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.45.28...v1.46.0)

\===

##### Service Client Updates

-   `service/ec2`: Updates service API
- Amazon EC2 C7a instances, powered by 4th generation AMD EPYC
processors, are ideal for high performance, compute-intensive workloads
such as high performance computing. Amazon EC2 R7i instances are
next-generation memory optimized and powered by custom 4th Generation
Intel Xeon Scalable processors.
-   `service/managedblockchain-query`: Updates service API
-   `service/neptunedata`: Updates service documentation
-   `service/omics`: Updates service API and documentation
- `service/opensearch`: Updates service API, documentation, and
paginators
-   `service/quicksight`: Updates service API and documentation
- This release adds the following: 1) Trino and Starburst Database
Connectors 2) Custom total for tables and pivot tables 3) Enable
restricted folders 4) Add rolling dates for time equality filters 5)
Refine DataPathValue and introduce DataPathType 6) Add SeriesType to
ReferenceLineDataConfiguration
-   `service/secretsmanager`: Updates service documentation
    -   Documentation updates for Secrets Manager
-   `service/servicecatalog`: Updates service API and documentation
- Introduce support for EXTERNAL product and provisioning artifact type
in CreateProduct and CreateProvisioningArtifact APIs.
-   `service/verifiedpermissions`: Updates service API and documentation
-   `service/workspaces`: Updates service documentation
    -   Documentation updates for WorkSpaces

##### SDK Features

-   `service/gamesparks`: Deprecate Gamesparks
- This change removes the gamesparks service, since it is deprecated.

###
[`v1.45.28`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v14528-2023-10-18)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.45.27...v1.45.28)

\===

##### Service Client Updates

-   `service/cloud9`: Updates service documentation
    -   Update to imageId parameter behavior and dates updated.
- `service/dynamodb`: Updates service API, documentation, waiters,
paginators, and examples
    -   Updating descriptions for several APIs.
-   `service/kendra`: Updates service API and documentation
- Changes for a new feature in Amazon Kendra's Query API to
Collapse/Expand query results
- `service/rds`: Updates service API, documentation, waiters,
paginators, and examples
- This release adds support for upgrading the storage file system
configuration on the DB instance using a blue/green deployment or a read
replica.
-   `service/wisdom`: Updates service API

###
[`v1.45.27`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v14527-2023-10-17)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.45.26...v1.45.27)

\===

##### Service Client Updates

-   `service/codepipeline`: Updates service API and documentation
- Add retryMode ALL_ACTIONS to RetryStageExecution API that retries a
failed stage starting from first action in the stage
-   `service/discovery`: Updates service API and documentation
- This release introduces three new APIs:
StartBatchDeleteConfigurationTask, DescribeBatchDeleteConfigurationTask,
and BatchDeleteAgents.
-   `service/ecs`: Updates service documentation and examples
    -   Documentation only updates to address Amazon ECS tickets.
-   `service/globalaccelerator`: Updates service paginators
-   `service/guardduty`: Updates service API and documentation
    -   Add domainWithSuffix finding field to dnsRequestAction
-   `service/kafka`: Updates service API, documentation, and paginators
- `service/route53-recovery-cluster`: Updates service API and
documentation
- `service/route53-recovery-control-config`: Updates service API and
documentation

###
[`v1.45.26`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v14526-2023-10-16)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.45.25...v1.45.26)

\===

##### Service Client Updates

-   `service/cloudformation`: Updates service API
    -   SDK and documentation updates for UpdateReplacePolicy
-   `service/drs`: Updates service API and documentation
- `service/entityresolution`: Updates service API, documentation, and
paginators
- `service/managedblockchain-query`: Updates service API, documentation,
and paginators
-   `service/mediapackagev2`: Updates service API and documentation
-   `service/opensearch`: Updates service API and documentation
-   `service/redshift`: Updates service API and documentation
- Added support for managing credentials of provisioned cluster admin
using AWS Secrets Manager.
-   `service/redshift-serverless`: Updates service API and documentation
-   `service/sesv2`: Updates service API and documentation
-   `service/transfer`: Updates service documentation
    -   Documentation updates for AWS Transfer Family
-   `service/xray`: Updates service API and documentation
- This releases enhances GetTraceSummaries API to support new
TimeRangeType Service to query trace summaries by segment end time.

</details>

<details>
<summary>bufbuild/buf (github.com/bufbuild/buf)</summary>

###
[`v1.27.1`](https://togithub.com/bufbuild/buf/blob/HEAD/CHANGELOG.md#v1271---2023-10-16)

[Compare
Source](https://togithub.com/bufbuild/buf/compare/v1.27.0...v1.27.1)

- Fix issue in v1.27.0 where `--path` did not work with workspaces under
certain scenarios.

</details>

<details>
<summary>bufbuild/protovalidate-go
(github.com/bufbuild/protovalidate-go)</summary>

###
[`v0.3.4`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.4)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.3...v0.3.4)

#### What's Changed

- Make DefaultResolver public by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#59
- Update minimum required Go version from 1.18 to 1.19 by
[@&#8203;nicksnyder](https://togithub.com/nicksnyder) in
[bufbuild/protovalidate-go#62
- Fix ignore path for resolver.go by
[@&#8203;nicksnyder](https://togithub.com/nicksnyder) in
[bufbuild/protovalidate-go#63

#### New Contributors

- [@&#8203;nicksnyder](https://togithub.com/nicksnyder) made their first
contribution in
[bufbuild/protovalidate-go#62

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.3...v0.3.4

###
[`v0.3.3`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.3)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.2...v0.3.3)

#### What's Changed

- Update benchmarks by [@&#8203;rodaine](https://togithub.com/rodaine)
in
[bufbuild/protovalidate-go#50
- Bug: transitive field CEL expressions fail to resolve types during
type checking by [@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#51
- Fix loading field message when dependency is more than one step by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#54
- Bump github.com/google/cel-go from 0.18.0 to 0.18.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#55
- Make constraint resolution more flexible to different concrete
extension types by [@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#57
- Move package `celext` out of internal by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#56

#### New Contributors

- [@&#8203;oliversun9](https://togithub.com/oliversun9) made their first
contribution in
[bufbuild/protovalidate-go#54

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.2...v0.3.3

###
[`v0.3.2`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.2)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.1...v0.3.2)

#### What's Changed

- Build validator copy cache on write by
[@&#8203;emcfarlane](https://togithub.com/emcfarlane) in
[bufbuild/protovalidate-go#31
- Bump github.com/google/cel-go from 0.17.4 to 0.17.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#39
- Bump github.com/google/cel-go from 0.17.6 to 0.18.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#42
- Bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from
1.31.0-20230824200731-b9b8148056b9.1 to
1.31.0-20230830185350-7a34d6557349.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#41
- Bypass deprecation lint warning by
[@&#8203;akshayjshah](https://togithub.com/akshayjshah) in
[bufbuild/protovalidate-go#45
- Bump actions/checkout from 3 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#46
- Cleanup: replace deprecated OptCheckStringFormat by
[@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#48
- Conformance: support for multiple uniques by
[@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#49

#### New Contributors

- [@&#8203;emcfarlane](https://togithub.com/emcfarlane) made their first
contribution in
[bufbuild/protovalidate-go#31
- [@&#8203;akshayjshah](https://togithub.com/akshayjshah) made their
first contribution in
[bufbuild/protovalidate-go#45

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.1...v0.3.2

</details>

<details>
<summary>google/cel-go (github.com/google/cel-go)</summary>

### [`v0.18.1`](https://togithub.com/google/cel-go/releases/tag/v0.18.1)

[Compare
Source](https://togithub.com/google/cel-go/compare/v0.18.0...v0.18.1)

#### What's Changed

- Add support for a relative offset within ast.SourceInfo by
\[[#&#8203;836](https://togithub.com/google/cel-go/issues/836)]
- Fix last optional element to be retained as an optional index while
folding \[[#&#8203;841](https://togithub.com/google/cel-go/issues/841)]
- Fix deprecation notice for string format validation
\[[#&#8203;840](https://togithub.com/google/cel-go/issues/840)]
- Update cel-spec and enable wrappers conformance tests
\[[#&#8203;842](https://togithub.com/google/cel-go/issues/842)]
- refactor: remove lexer and parser pools
\[[#&#8203;838](https://togithub.com/google/cel-go/issues/838)]

#### New Contributors

- [@&#8203;TulgaCG](https://togithub.com/TulgaCG) made their first
contribution in
[google/cel-go#835
- [@&#8203;aimuz](https://togithub.com/aimuz) made their first
contribution in
[google/cel-go#838

**Full Changelog**:
google/cel-go@v0.18.0...v0.18.1

### [`v0.18.0`](https://togithub.com/google/cel-go/releases/tag/v0.18.0)

[Compare
Source](https://togithub.com/google/cel-go/compare/v0.17.6...v0.18.0)

#### Features

The latest release of CEL introduces validators
([#&#8203;775](https://togithub.com/google/cel-go/issues/775)) and
optimizers
([#&#8203;804](https://togithub.com/google/cel-go/issues/804),
[#&#8203;827](https://togithub.com/google/cel-go/issues/827)) and
migrates the core CEL internals off of the
protobuf expression and type representations
([#&#8203;789](https://togithub.com/google/cel-go/issues/789)).

- String format validator
\[[#&#8203;775](https://togithub.com/google/cel-go/issues/775)]
- Create a Function that Reverses a String
\[[#&#8203;796](https://togithub.com/google/cel-go/issues/796)]
- Introduce pre-order / post-order visitor pattern
\[[#&#8203;813](https://togithub.com/google/cel-go/issues/813)]
- Add Libraries() function to Env
\[[#&#8203;822](https://togithub.com/google/cel-go/issues/822)]
- Static optimizer for constant folding
\[[#&#8203;804](https://togithub.com/google/cel-go/issues/804)]
- Inlining optimizer
\[[#&#8203;827](https://togithub.com/google/cel-go/issues/827)]
- FindStructTypeFields support for types.Provider
\[[#&#8203;814](https://togithub.com/google/cel-go/issues/814)]

#### Breaking Changes

The following PR changes the API signature of the `checker.AstNode`
method `Expr` to return an `ast.Expr`.

- Migrate the checker.Coster to the ast.Expr
\[[#&#8203;798](https://togithub.com/google/cel-go/issues/798)]

#### Fixes

- Nil safety checks for cel.Ast
\[[#&#8203;784](https://togithub.com/google/cel-go/issues/784)]
- Fix cost estimates to propagate result sizes
\[[#&#8203;787](https://togithub.com/google/cel-go/issues/787)]
- Catch invalid literals created from expression factories
\[[#&#8203;810](https://togithub.com/google/cel-go/issues/810)]
- Ensure stable ordering of overload candidates
\[[#&#8203;817](https://togithub.com/google/cel-go/issues/817)]
- Clarify replace with/by empty string
\[[#&#8203;820](https://togithub.com/google/cel-go/issues/820)]
- Fix functional exemptions for homogeneous literal checks
\[[#&#8203;832](https://togithub.com/google/cel-go/issues/832)]
- Fix logical operator folding that only involve literals
\[[#&#8203;833](https://togithub.com/google/cel-go/issues/833)]
- Upgrade go-genproto to latest
\[[#&#8203;831](https://togithub.com/google/cel-go/issues/831)]

#### New Contributors

- [@&#8203;bboogler](https://togithub.com/bboogler) made their first
contribution in
[google/cel-go#796

**Full Changelog**:
google/cel-go@v0.17.1...v0.18.0

</details>

<details>
<summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v2)</summary>

###
[`v2.0.15`](https://togithub.com/lestrrat-go/jwx/releases/tag/v2.0.15)

[Compare
Source](https://togithub.com/lestrrat-go/jwx/compare/v2.0.14...v2.0.15)

    v2.0.15 19 20 Oct 2023
    [Bug fixes]
* [jws] jws.Sign() now properly check for valid algorithm / key type
pair when
the key implements crypto.Signer. This was caused by the fact that when
jws.WithKey() accepted keys that implemented crypto.Signer, there really
is no way to robustly check what algorithm the crypto.Signer implements.

The code has now been modified to check for KNOWN key types, i.e. those
that are defined in Go standard library, and those that are defined in
this library. For example, now calling jws.Sign() with
jws.WithKey(jwa.RS256, ecdsaKey)
where ecdsaKey is either an instance of *ecdsa.PrivateKey or
jwk.ECDSAPrivateKey
        will produce an error.

However, if you use a separate library that wraps some KMS library which
implements
crypto.Signer, this same check will not be performed due to the fact
that
it is an unknown library to us. And there's no way to query a
crypto.Signer
        for its algorithm family.

###
[`v2.0.14`](https://togithub.com/lestrrat-go/jwx/releases/tag/v2.0.14)

[Compare
Source](https://togithub.com/lestrrat-go/jwx/compare/v2.0.13...v2.0.14)

    v2.0.14 17 Oct 2023
      [New Features]
* [jwk] jwk.IsPrivateKey(), as well as jwk.AsymmetricKey has been added.
The function can be used to tell if a jwk.Key is a private key of an
        asymmetric key pair.
      [Security]
* golang.org/x/crypto has been updated to 0.14.0. The update contains a
fix for HTTP/2
rapid reset DoS vulnerability, which some security scanning softwares
may flag.
However, do note that this library is NOT affected by the issue, as it
does not have
the capability to serve as an HTTP/2 server. This is included in this
release
document so that users will be able to tell why this library may be
flagged
        when/if their scanning software do so.

</details>

<details>
<summary>mattn/go-isatty (github.com/mattn/go-isatty)</summary>

###
[`v0.0.20`](https://togithub.com/mattn/go-isatty/compare/v0.0.19...v0.0.20)

[Compare
Source](https://togithub.com/mattn/go-isatty/compare/v0.0.19...v0.0.20)

</details>

<details>
<summary>twmb/franz-go (github.com/twmb/franz-go)</summary>

###
[`v1.15.1`](https://togithub.com/twmb/franz-go/blob/HEAD/CHANGELOG.md#v1151)

[Compare
Source](https://togithub.com/twmb/franz-go/compare/v1.15.0...v1.15.1)

\===

This patch release contains a bunch of internal improvements to kgo and
includes a bugfix for a very hard to encounter logic race. Each
improvement
is a bit focused on a specific use case, so I recommend reading any
relevant-to-you
commit message below.

As well, the kversion package now detects Kafka 3.6, and the kgo package
now
handles AddPartitionsToTxn v4 (however, you will probably not be issuing
this
request).

Lastly, this release is paired with a minor kadm release, which adds the
ErrMessage field CreateTopicsResponse and DeleteTopicsResponse, and,
importantly, fixes a data race in the ApiVersions request.

##### franz-go

- [`2a3b6bd`](https://togithub.com/twmb/franz-go/commit/2a3b6bd)
**improvement** kversion: detect 3.6
- [`fe5a660`](https://togithub.com/twmb/franz-go/commit/fe5a660)
**improvement** kgo: add sharding for AddPartitionsToTxn for KIP-890
- [`b2ccc2f`](https://togithub.com/twmb/franz-go/commit/b2ccc2f)
**improvement** kgo: reintroduce random broker iteration
- [`54a7418`](https://togithub.com/twmb/franz-go/commit/54a7418)
**improvement** kgo: allow PreTxnCommitFnContext to modify empty offsets
- [`c013050`](https://togithub.com/twmb/franz-go/commit/c013050)
**bugfix** kgo: avoid rare panic
- [`0ecb52b`](https://togithub.com/twmb/franz-go/commit/0ecb52b)
**improvement** kgo: do not rotate the consumer session when pausing
topics/partitions
- [`1429d47`](https://togithub.com/twmb/franz-go/commit/1429d47)
**improvement** sticky balancer: try for better topic distribution among
members

##### kadm

- [`1955938`](https://togithub.com/twmb/franz-go/commit/1955938)
**bugfix** kadm: do not reuse ApiVersions in many concurrent requests
- [`66974e8`](https://togithub.com/twmb/franz-go/commit/66974e8)
**feature** kadm: include ErrMessage in topic response

</details>

<details>
<summary>vektra/mockery (github.com/vektra/mockery/v2)</summary>

###
[`v2.36.0`](https://togithub.com/vektra/mockery/releases/tag/v2.36.0)

[Compare
Source](https://togithub.com/vektra/mockery/compare/v2.35.4...v2.36.0)

#### Changelog

- [`5d48467`](https://togithub.com/vektra/mockery/commit/5d48467) Add
exclude-regex to config
- [`25befa2`](https://togithub.com/vektra/mockery/commit/25befa2) Cover
error conditions in tests
- [`b919710`](https://togithub.com/vektra/mockery/commit/b919710) Merge
pull request
[#&#8203;720](https://togithub.com/vektra/mockery/issues/720) from
kbolino/718-exclude-regex
- [`e8ebf52`](https://togithub.com/vektra/mockery/commit/e8ebf52)
Refactor Config.ShouldGenerateInterface

</details>

<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>

### [`v1.59.0`](https://togithub.com/grpc/grpc-go/releases/tag/v1.59.0):
Release 1.59.0

[Compare
Source](https://togithub.com/grpc/grpc-go/compare/v1.58.3...v1.59.0)

### Behavior Changes

- balancer: grpc will switch to case-sensitive balancer names soon; log
a warning if a capital letter is encountered in an LB policy name
([#&#8203;6647](https://togithub.com/grpc/grpc-go/issues/6647))
- server: allow applications to send arbitrary data in the
`grpc-status-details-bin` trailer
([#&#8203;6662](https://togithub.com/grpc/grpc-go/issues/6662))
- client: validate `grpc-status-details-bin` trailer and pass through
the trailer to the application directly
([#&#8203;6662](https://togithub.com/grpc/grpc-go/issues/6662))

### New Features

- tap (experimental): Add Header metadata to tap handler
([#&#8203;6652](https://togithub.com/grpc/grpc-go/issues/6652))
- Special Thanks: [@&#8203;pstibrany](https://togithub.com/pstibrany)
- grpc: channel idleness enabled by default with an `idle_timeout` of
`30m` ([#&#8203;6585](https://togithub.com/grpc/grpc-go/issues/6585))

### Documentation

- examples: add an example of flow control behavior
([#&#8203;6648](https://togithub.com/grpc/grpc-go/issues/6648))

### Bug Fixes

- xds: fix hash policy header to skip "-bin" headers and read
content-type header as expected
([#&#8203;6609](https://togithub.com/grpc/grpc-go/issues/6609))

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/cerbos/cerbos).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xOS4yIiwidXBkYXRlZEluVmVyIjoiMzcuMzEuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Charith Ellawala <charith@cerbos.dev>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Charith Ellawala <charith@cerbos.dev>
charithe added a commit to cerbos/cerbos that referenced this pull request Oct 30, 2023
@renovate @charithe
chore(deps): Update go deps (#1852)
5f6b938 
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/alecthomas/chroma/v2](https://togithub.com/alecthomas/chroma)
| require | minor | `v2.9.1` -> `v2.10.0` |
| [github.com/aws/aws-sdk-go](https://togithub.com/aws/aws-sdk-go) |
require | patch | `v1.46.2` -> `v1.46.6` |
| [github.com/bufbuild/buf](https://togithub.com/bufbuild/buf) | require
| patch | `v1.27.1` -> `v1.27.2` |
|
[github.com/bufbuild/protovalidate-go](https://togithub.com/bufbuild/protovalidate-go)
| require | patch | `v0.3.1` -> `v0.3.4` |
|
[github.com/cerbos/cerbos/api/genpb](https://togithub.com/cerbos/cerbos)
| require | digest | `21315fe` -> `f134903` |
| [github.com/cerbos/cloud-api](https://togithub.com/cerbos/cloud-api) |
require | patch | `v0.1.7` -> `v0.1.8` |
|
[github.com/fullstorydev/grpcurl](https://togithub.com/fullstorydev/grpcurl)
| require | patch | `v1.8.8` -> `v1.8.9` |
| [github.com/go-git/go-git/v5](https://togithub.com/go-git/go-git) |
require | minor | `v5.9.0` -> `v5.10.0` |
| [github.com/google/cel-go](https://togithub.com/google/cel-go) |
require | minor | `v0.17.6` -> `v0.18.1` |
| [github.com/google/uuid](https://togithub.com/google/uuid) | require |
minor | `v1.3.1` -> `v1.4.0` |
| [github.com/rivo/tview](https://togithub.com/rivo/tview) | require |
digest | `f7f32ad` -> `8b7bcf9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>alecthomas/chroma (github.com/alecthomas/chroma/v2)</summary>

###
[`v2.10.0`](https://togithub.com/alecthomas/chroma/releases/tag/v2.10.0)

[Compare
Source](https://togithub.com/alecthomas/chroma/compare/v2.9.1...v2.10.0)

#### Changelog

- [`810464a`](https://togithub.com/alecthomas/chroma/commit/810464a)
Update Java lexer
([#&#8203;873](https://togithub.com/alecthomas/chroma/issues/873))
- [`77e9146`](https://togithub.com/alecthomas/chroma/commit/77e9146) Add
file extensions to go_template lexer
([#&#8203;875](https://togithub.com/alecthomas/chroma/issues/875))
- [`b127e35`](https://togithub.com/alecthomas/chroma/commit/b127e35)
Make `tty_indexed.go` respond to `None` like `tty_truecolour.go`
([#&#8203;869](https://togithub.com/alecthomas/chroma/issues/869))
- [`9ae4dae`](https://togithub.com/alecthomas/chroma/commit/9ae4dae) Add
`*.Dockerfile` to docker lexer
([#&#8203;868](https://togithub.com/alecthomas/chroma/issues/868))
- [`2fa6f14`](https://togithub.com/alecthomas/chroma/commit/2fa6f14) Add
PRQL to README
([#&#8203;863](https://togithub.com/alecthomas/chroma/issues/863))
- [`17597b6`](https://togithub.com/alecthomas/chroma/commit/17597b6) Add
PRQL language
([#&#8203;862](https://togithub.com/alecthomas/chroma/issues/862))
- [`7eb0305`](https://togithub.com/alecthomas/chroma/commit/7eb0305)
lexers/r: Match keywords prior to functions
([#&#8203;860](https://togithub.com/alecthomas/chroma/issues/860))
- [`827bd93`](https://togithub.com/alecthomas/chroma/commit/827bd93)
lexers: add initial version of CUE lexer
([#&#8203;858](https://togithub.com/alecthomas/chroma/issues/858))
- [`9087c63`](https://togithub.com/alecthomas/chroma/commit/9087c63)
docs: note about Get() being slow due to file matching
- [`ccd8d68`](https://togithub.com/alecthomas/chroma/commit/ccd8d68)
lexers: move to comparing bytes in tests
([#&#8203;856](https://togithub.com/alecthomas/chroma/issues/856))
- [`def00e9`](https://togithub.com/alecthomas/chroma/commit/def00e9)
chore: update issue templates
- [`0b08639`](https://togithub.com/alecthomas/chroma/commit/0b08639)
lexers: support for nim GENERALIZED_TRIPLESTR_LIT
([#&#8203;853](https://togithub.com/alecthomas/chroma/issues/853))
- [`94d11ab`](https://togithub.com/alecthomas/chroma/commit/94d11ab)
Update Bicep grammar with recent additions
([#&#8203;850](https://togithub.com/alecthomas/chroma/issues/850))
- [`c64e1be`](https://togithub.com/alecthomas/chroma/commit/c64e1be) add
justfile filename to Makefile lexer
([#&#8203;852](https://togithub.com/alecthomas/chroma/issues/852))
- [`2b39461`](https://togithub.com/alecthomas/chroma/commit/2b39461) Fix
GDScript3 analyse regexes
([#&#8203;848](https://togithub.com/alecthomas/chroma/issues/848))

</details>

<details>
<summary>aws/aws-sdk-go (github.com/aws/aws-sdk-go)</summary>

###
[`v1.46.6`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1466-2023-10-27)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.5...v1.46.6)

\===

##### Service Client Updates

-   `service/elasticmapreduce`: Updates service API and documentation
- Updated CreateCluster API request and DescribeCluster API responses to
include EbsRootVolumeIops, and EbsRootVolumeThroughput attributes that
specify the user configured root volume IOPS and throughput for Amazon
EBS root device volume. This feature will be available from Amazon EMR
releases 6.15.0
-   `service/neptune`: Updates service API and documentation
    -   Update TdeCredentialPassword type to SensitiveString
-   `service/pinpoint`: Updates service documentation
- Updated documentation to describe the case insensitivity for
EndpointIds.
-   `service/redshift`: Updates service API and documentation
    -   added support to create a dual stack cluster
-   `service/wafv2`: Updates service documentation

###
[`v1.46.5`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1465-2023-10-26)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.4...v1.46.5)

\===

##### Service Client Updates

-   `service/appstream`: Updates service API and documentation
- This release introduces multi-session fleets, allowing customers to
provision more than one user session on a single fleet instance.
-   `service/ec2`: Updates service API, documentation, and paginators
- Launching GetSecurityGroupsForVpc API. This API gets security groups
that can be associated by the AWS account making the request with
network interfaces in the specified VPC.
-   `service/network-firewall`: Updates service API and documentation
-   `service/opensearch`: Updates service API and documentation
- `service/redshift`: Updates service API, documentation, and paginators
- Add Redshift APIs GetResourcePolicy, DeleteResourcePolicy,
PutResourcePolicy and DescribeInboundIntegrations for the new Amazon
Redshift Zero-ETL integration feature, which can be used to control data
ingress into Redshift namespace, and view inbound integrations.
-   `service/sagemaker`: Updates service API and documentation
    -   Amazon Sagemaker Autopilot now supports Text Generation jobs.
-   `service/sns`: Updates service API and documentation
- Message Archiving and Replay is now supported in Amazon SNS for FIFO
topics.
-   `service/ssm-sap`: Updates service API and documentation
- `service/transfer`: Updates service API, documentation, waiters, and
paginators
- No API changes from previous release. This release migrated the model
to Smithy keeping all features unchanged.

###
[`v1.46.4`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1464-2023-10-25)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.3...v1.46.4)

\===

##### Service Client Updates

-   `service/connectcases`: Updates service API and documentation
-   `service/groundstation`: Updates service API and documentation
-   `service/iam`: Updates service API and documentation
- Updates to GetAccessKeyLastUsed action to replace NoSuchEntity error
with AccessDeniedException error.

###
[`v1.46.3`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1463-2023-10-24)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.2...v1.46.3)

\===

##### Service Client Updates

-   `service/codepipeline`: Updates service API and documentation
- Add ability to trigger pipelines from git tags, define variables at
pipeline level and new pipeline type V2.
-   `service/ec2`: Updates service documentation
- This release updates the documentation for
InstanceInterruptionBehavior and HibernationOptionsRequest to more
accurately describe the behavior of these two parameters when using Spot
hibernation.
-   `service/eks`: Updates service API
-   `service/iam`: Adds new service
    -   Add the partitional endpoint for IAM in iso-f.
-   `service/migrationhub-config`: Updates service API and documentation
- `service/migrationhubstrategy`: Updates service API, documentation,
and paginators
- `service/opensearchserverless`: Updates service API, documentation,
and paginators

</details>

<details>
<summary>bufbuild/buf (github.com/bufbuild/buf)</summary>

###
[`v1.27.2`](https://togithub.com/bufbuild/buf/blob/HEAD/CHANGELOG.md#v1272---2023-10-27)

[Compare
Source](https://togithub.com/bufbuild/buf/compare/v1.27.1...v1.27.2)

- Fix issue where `buf build` and other commands may fail when handling
certain
archives created on macOS that contain files with extended attributes.

</details>

<details>
<summary>bufbuild/protovalidate-go
(github.com/bufbuild/protovalidate-go)</summary>

###
[`v0.3.4`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.4)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.3...v0.3.4)

#### What's Changed

- Make DefaultResolver public by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#59
- Update minimum required Go version from 1.18 to 1.19 by
[@&#8203;nicksnyder](https://togithub.com/nicksnyder) in
[bufbuild/protovalidate-go#62
- Fix ignore path for resolver.go by
[@&#8203;nicksnyder](https://togithub.com/nicksnyder) in
[bufbuild/protovalidate-go#63

#### New Contributors

- [@&#8203;nicksnyder](https://togithub.com/nicksnyder) made their first
contribution in
[bufbuild/protovalidate-go#62

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.3...v0.3.4

###
[`v0.3.3`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.3)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.2...v0.3.3)

#### What's Changed

- Update benchmarks by [@&#8203;rodaine](https://togithub.com/rodaine)
in
[bufbuild/protovalidate-go#50
- Bug: transitive field CEL expressions fail to resolve types during
type checking by [@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#51
- Fix loading field message when dependency is more than one step by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#54
- Bump github.com/google/cel-go from 0.18.0 to 0.18.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#55
- Make constraint resolution more flexible to different concrete
extension types by [@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#57
- Move package `celext` out of internal by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#56

#### New Contributors

- [@&#8203;oliversun9](https://togithub.com/oliversun9) made their first
contribution in
[bufbuild/protovalidate-go#54

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.2...v0.3.3

###
[`v0.3.2`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.2)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.1...v0.3.2)

#### What's Changed

- Build validator copy cache on write by
[@&#8203;emcfarlane](https://togithub.com/emcfarlane) in
[bufbuild/protovalidate-go#31
- Bump github.com/google/cel-go from 0.17.4 to 0.17.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#39
- Bump github.com/google/cel-go from 0.17.6 to 0.18.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#42
- Bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from
1.31.0-20230824200731-b9b8148056b9.1 to
1.31.0-20230830185350-7a34d6557349.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#41
- Bypass deprecation lint warning by
[@&#8203;akshayjshah](https://togithub.com/akshayjshah) in
[bufbuild/protovalidate-go#45
- Bump actions/checkout from 3 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#46
- Cleanup: replace deprecated OptCheckStringFormat by
[@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#48
- Conformance: support for multiple uniques by
[@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#49

#### New Contributors

- [@&#8203;emcfarlane](https://togithub.com/emcfarlane) made their first
contribution in
[bufbuild/protovalidate-go#31
- [@&#8203;akshayjshah](https://togithub.com/akshayjshah) made their
first contribution in
[bufbuild/protovalidate-go#45

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.1...v0.3.2

</details>

<details>
<summary>cerbos/cloud-api (github.com/cerbos/cloud-api)</summary>

###
[`v0.1.8`](https://togithub.com/cerbos/cloud-api/compare/v0.1.7...v0.1.8)

[Compare
Source](https://togithub.com/cerbos/cloud-api/compare/v0.1.7...v0.1.8)

</details>

<details>
<summary>fullstorydev/grpcurl
(github.com/fullstorydev/grpcurl)</summary>

###
[`v1.8.9`](https://togithub.com/fullstorydev/grpcurl/releases/tag/v1.8.9)

[Compare
Source](https://togithub.com/fullstorydev/grpcurl/compare/v1.8.8...v1.8.9)

#### Changelog

- [`28c0ee2`](https://togithub.com/fullstorydev/grpcurl/commit/28c0ee2)
Disable CGO for improved compatibility across distros
([#&#8203;420](https://togithub.com/fullstorydev/grpcurl/issues/420))
- [`bc2944d`](https://togithub.com/fullstorydev/grpcurl/commit/bc2944d)
Bump golang.org/x/net from 0.9.0 to 0.17.0
([#&#8203;419](https://togithub.com/fullstorydev/grpcurl/issues/419))
- [`7a845ca`](https://togithub.com/fullstorydev/grpcurl/commit/7a845ca)
SIGSEGV: panic: runtime error: invalid memory address or nil pointer
dereference in protoreflect
([#&#8203;416](https://togithub.com/fullstorydev/grpcurl/issues/416))
- [`c17f078`](https://togithub.com/fullstorydev/grpcurl/commit/c17f078)
Added alts credential option
([#&#8203;341](https://togithub.com/fullstorydev/grpcurl/issues/341))

</details>

<details>
<summary>go-git/go-git (github.com/go-git/go-git/v5)</summary>

### [`v5.10.0`](https://togithub.com/go-git/go-git/releases/tag/v5.10.0)

[Compare
Source](https://togithub.com/go-git/go-git/compare/v5.9.0...v5.10.0)

#### What's Changed

- PlainInitOptions.Bare and allow using InitOptions with
PlainInitWithOptions by
[@&#8203;ThinkChaos](https://togithub.com/ThinkChaos) in
[go-git/go-git#782
- Worktree, apply ProxyOption on Pull by
[@&#8203;nodivbyzero](https://togithub.com/nodivbyzero) in
[go-git/go-git#840
- Repository: add clone --shared feature by
[@&#8203;enverbisevac](https://togithub.com/enverbisevac) in
[go-git/go-git#860
- build: Add github workflow to check commit message format by
[@&#8203;pjbgf](https://togithub.com/pjbgf) in
[go-git/go-git#867
- Improve handling of remote errors by
[@&#8203;makkes](https://togithub.com/makkes) in
[go-git/go-git#866
- build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[go-git/go-git#873
- plumbing: commitgraph, Add generation v2 support by
[@&#8203;zeripath](https://togithub.com/zeripath) in
[go-git/go-git#869
- plumbing: protocol/packp, Add validation for decodeLine by
[@&#8203;pjbgf](https://togithub.com/pjbgf) in
[go-git/go-git#868
- plumbing: parse the encoding header of the commit object by
[@&#8203;liwenqiu](https://togithub.com/liwenqiu) in
[go-git/go-git#761
- plumbing: commitgraph, allow SHA256 commit-graphs by
[@&#8203;zeripath](https://togithub.com/zeripath) in
[go-git/go-git#853
- plumbing: commitgraph, Allow reading commit-graph chains by
[@&#8203;zeripath](https://togithub.com/zeripath) in
[go-git/go-git#854
- plumbing/object: Support mergetag in merge commits by
[@&#8203;adityasaky](https://togithub.com/adityasaky) in
[go-git/go-git#847

#### New Contributors

- [@&#8203;nodivbyzero](https://togithub.com/nodivbyzero) made their
first contribution in
[go-git/go-git#840
- [@&#8203;adityasaky](https://togithub.com/adityasaky) made their first
contribution in
[go-git/go-git#847
- [@&#8203;hezhizhen](https://togithub.com/hezhizhen) made their first
contribution in
[go-git/go-git#836
- [@&#8203;0x34d](https://togithub.com/0x34d) made their first
contribution in
[go-git/go-git#855
- [@&#8203;liwenqiu](https://togithub.com/liwenqiu) made their first
contribution in
[go-git/go-git#761
- [@&#8203;enverbisevac](https://togithub.com/enverbisevac) made their
first contribution in
[go-git/go-git#860
- [@&#8203;makkes](https://togithub.com/makkes) made their first
contribution in
[go-git/go-git#866

**Full Changelog**:
go-git/go-git@v5.9.0...v5.10.0

</details>

<details>
<summary>google/cel-go (github.com/google/cel-go)</summary>

### [`v0.18.1`](https://togithub.com/google/cel-go/releases/tag/v0.18.1)

[Compare
Source](https://togithub.com/google/cel-go/compare/v0.18.0...v0.18.1)

#### What's Changed

- Add support for a relative offset within ast.SourceInfo by
\[[#&#8203;836](https://togithub.com/google/cel-go/issues/836)]
- Fix last optional element to be retained as an optional index while
folding \[[#&#8203;841](https://togithub.com/google/cel-go/issues/841)]
- Fix deprecation notice for string format validation
\[[#&#8203;840](https://togithub.com/google/cel-go/issues/840)]
- Update cel-spec and enable wrappers conformance tests
\[[#&#8203;842](https://togithub.com/google/cel-go/issues/842)]
- refactor: remove lexer and parser pools
\[[#&#8203;838](https://togithub.com/google/cel-go/issues/838)]

#### New Contributors

- [@&#8203;TulgaCG](https://togithub.com/TulgaCG) made their first
contribution in
[google/cel-go#835
- [@&#8203;aimuz](https://togithub.com/aimuz) made their first
contribution in
[google/cel-go#838

**Full Changelog**:
google/cel-go@v0.18.0...v0.18.1

### [`v0.18.0`](https://togithub.com/google/cel-go/releases/tag/v0.18.0)

[Compare
Source](https://togithub.com/google/cel-go/compare/v0.17.6...v0.18.0)

#### Features

The latest release of CEL introduces validators
([#&#8203;775](https://togithub.com/google/cel-go/issues/775)) and
optimizers
([#&#8203;804](https://togithub.com/google/cel-go/issues/804),
[#&#8203;827](https://togithub.com/google/cel-go/issues/827)) and
migrates the core CEL internals off of the
protobuf expression and type representations
([#&#8203;789](https://togithub.com/google/cel-go/issues/789)).

- String format validator
\[[#&#8203;775](https://togithub.com/google/cel-go/issues/775)]
- Create a Function that Reverses a String
\[[#&#8203;796](https://togithub.com/google/cel-go/issues/796)]
- Introduce pre-order / post-order visitor pattern
\[[#&#8203;813](https://togithub.com/google/cel-go/issues/813)]
- Add Libraries() function to Env
\[[#&#8203;822](https://togithub.com/google/cel-go/issues/822)]
- Static optimizer for constant folding
\[[#&#8203;804](https://togithub.com/google/cel-go/issues/804)]
- Inlining optimizer
\[[#&#8203;827](https://togithub.com/google/cel-go/issues/827)]
- FindStructTypeFields support for types.Provider
\[[#&#8203;814](https://togithub.com/google/cel-go/issues/814)]

#### Breaking Changes

The following PR changes the API signature of the `checker.AstNode`
method `Expr` to return an `ast.Expr`.

- Migrate the checker.Coster to the ast.Expr
\[[#&#8203;798](https://togithub.com/google/cel-go/issues/798)]

#### Fixes

- Nil safety checks for cel.Ast
\[[#&#8203;784](https://togithub.com/google/cel-go/issues/784)]
- Fix cost estimates to propagate result sizes
\[[#&#8203;787](https://togithub.com/google/cel-go/issues/787)]
- Catch invalid literals created from expression factories
\[[#&#8203;810](https://togithub.com/google/cel-go/issues/810)]
- Ensure stable ordering of overload candidates
\[[#&#8203;817](https://togithub.com/google/cel-go/issues/817)]
- Clarify replace with/by empty string
\[[#&#8203;820](https://togithub.com/google/cel-go/issues/820)]
- Fix functional exemptions for homogeneous literal checks
\[[#&#8203;832](https://togithub.com/google/cel-go/issues/832)]
- Fix logical operator folding that only involve literals
\[[#&#8203;833](https://togithub.com/google/cel-go/issues/833)]
- Upgrade go-genproto to latest
\[[#&#8203;831](https://togithub.com/google/cel-go/issues/831)]

#### New Contributors

- [@&#8203;bboogler](https://togithub.com/bboogler) made their first
contribution in
[google/cel-go#796

**Full Changelog**:
google/cel-go@v0.17.1...v0.18.0

</details>

<details>
<summary>google/uuid (github.com/google/uuid)</summary>

### [`v1.4.0`](https://togithub.com/google/uuid/releases/tag/v1.4.0)

[Compare
Source](https://togithub.com/google/uuid/compare/v1.3.1...v1.4.0)

##### Features

- UUIDs slice type with Strings() convenience method
([#&#8203;133](https://togithub.com/google/uuid/issues/133))
([cd5fbbd](https://togithub.com/google/uuid/commit/cd5fbbdd02f3e3467ac18940e07e062be1f864b4))

##### Fixes

- Clarify that Parse's job is to parse but not necessarily validate
strings. (Documents current behavior)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/cerbos/cerbos).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMS41IiwidXBkYXRlZEluVmVyIjoiMzcuMzEuNSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Charith Ellawala <charith@cerbos.dev>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Charith Ellawala <charith@cerbos.dev>
charithe added a commit to charithe/cerbos that referenced this pull request Oct 30, 2023
@renovate @charithe
chore(deps): Update go deps (cerbos#1852)
8e16d34 
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/alecthomas/chroma/v2](https://togithub.com/alecthomas/chroma)
| require | minor | `v2.9.1` -> `v2.10.0` |
| [github.com/aws/aws-sdk-go](https://togithub.com/aws/aws-sdk-go) |
require | patch | `v1.46.2` -> `v1.46.6` |
| [github.com/bufbuild/buf](https://togithub.com/bufbuild/buf) | require
| patch | `v1.27.1` -> `v1.27.2` |
|
[github.com/bufbuild/protovalidate-go](https://togithub.com/bufbuild/protovalidate-go)
| require | patch | `v0.3.1` -> `v0.3.4` |
|
[github.com/cerbos/cerbos/api/genpb](https://togithub.com/cerbos/cerbos)
| require | digest | `21315fe` -> `f134903` |
| [github.com/cerbos/cloud-api](https://togithub.com/cerbos/cloud-api) |
require | patch | `v0.1.7` -> `v0.1.8` |
|
[github.com/fullstorydev/grpcurl](https://togithub.com/fullstorydev/grpcurl)
| require | patch | `v1.8.8` -> `v1.8.9` |
| [github.com/go-git/go-git/v5](https://togithub.com/go-git/go-git) |
require | minor | `v5.9.0` -> `v5.10.0` |
| [github.com/google/cel-go](https://togithub.com/google/cel-go) |
require | minor | `v0.17.6` -> `v0.18.1` |
| [github.com/google/uuid](https://togithub.com/google/uuid) | require |
minor | `v1.3.1` -> `v1.4.0` |
| [github.com/rivo/tview](https://togithub.com/rivo/tview) | require |
digest | `f7f32ad` -> `8b7bcf9` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>alecthomas/chroma (github.com/alecthomas/chroma/v2)</summary>

###
[`v2.10.0`](https://togithub.com/alecthomas/chroma/releases/tag/v2.10.0)

[Compare
Source](https://togithub.com/alecthomas/chroma/compare/v2.9.1...v2.10.0)

#### Changelog

- [`810464a`](https://togithub.com/alecthomas/chroma/commit/810464a)
Update Java lexer
([#&#8203;873](https://togithub.com/alecthomas/chroma/issues/873))
- [`77e9146`](https://togithub.com/alecthomas/chroma/commit/77e9146) Add
file extensions to go_template lexer
([#&#8203;875](https://togithub.com/alecthomas/chroma/issues/875))
- [`b127e35`](https://togithub.com/alecthomas/chroma/commit/b127e35)
Make `tty_indexed.go` respond to `None` like `tty_truecolour.go`
([#&#8203;869](https://togithub.com/alecthomas/chroma/issues/869))
- [`9ae4dae`](https://togithub.com/alecthomas/chroma/commit/9ae4dae) Add
`*.Dockerfile` to docker lexer
([#&#8203;868](https://togithub.com/alecthomas/chroma/issues/868))
- [`2fa6f14`](https://togithub.com/alecthomas/chroma/commit/2fa6f14) Add
PRQL to README
([#&#8203;863](https://togithub.com/alecthomas/chroma/issues/863))
- [`17597b6`](https://togithub.com/alecthomas/chroma/commit/17597b6) Add
PRQL language
([#&#8203;862](https://togithub.com/alecthomas/chroma/issues/862))
- [`7eb0305`](https://togithub.com/alecthomas/chroma/commit/7eb0305)
lexers/r: Match keywords prior to functions
([#&#8203;860](https://togithub.com/alecthomas/chroma/issues/860))
- [`827bd93`](https://togithub.com/alecthomas/chroma/commit/827bd93)
lexers: add initial version of CUE lexer
([#&#8203;858](https://togithub.com/alecthomas/chroma/issues/858))
- [`9087c63`](https://togithub.com/alecthomas/chroma/commit/9087c63)
docs: note about Get() being slow due to file matching
- [`ccd8d68`](https://togithub.com/alecthomas/chroma/commit/ccd8d68)
lexers: move to comparing bytes in tests
([#&#8203;856](https://togithub.com/alecthomas/chroma/issues/856))
- [`def00e9`](https://togithub.com/alecthomas/chroma/commit/def00e9)
chore: update issue templates
- [`0b08639`](https://togithub.com/alecthomas/chroma/commit/0b08639)
lexers: support for nim GENERALIZED_TRIPLESTR_LIT
([#&#8203;853](https://togithub.com/alecthomas/chroma/issues/853))
- [`94d11ab`](https://togithub.com/alecthomas/chroma/commit/94d11ab)
Update Bicep grammar with recent additions
([#&#8203;850](https://togithub.com/alecthomas/chroma/issues/850))
- [`c64e1be`](https://togithub.com/alecthomas/chroma/commit/c64e1be) add
justfile filename to Makefile lexer
([#&#8203;852](https://togithub.com/alecthomas/chroma/issues/852))
- [`2b39461`](https://togithub.com/alecthomas/chroma/commit/2b39461) Fix
GDScript3 analyse regexes
([#&#8203;848](https://togithub.com/alecthomas/chroma/issues/848))

</details>

<details>
<summary>aws/aws-sdk-go (github.com/aws/aws-sdk-go)</summary>

###
[`v1.46.6`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1466-2023-10-27)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.5...v1.46.6)

\===

##### Service Client Updates

-   `service/elasticmapreduce`: Updates service API and documentation
- Updated CreateCluster API request and DescribeCluster API responses to
include EbsRootVolumeIops, and EbsRootVolumeThroughput attributes that
specify the user configured root volume IOPS and throughput for Amazon
EBS root device volume. This feature will be available from Amazon EMR
releases 6.15.0
-   `service/neptune`: Updates service API and documentation
    -   Update TdeCredentialPassword type to SensitiveString
-   `service/pinpoint`: Updates service documentation
- Updated documentation to describe the case insensitivity for
EndpointIds.
-   `service/redshift`: Updates service API and documentation
    -   added support to create a dual stack cluster
-   `service/wafv2`: Updates service documentation

###
[`v1.46.5`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1465-2023-10-26)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.4...v1.46.5)

\===

##### Service Client Updates

-   `service/appstream`: Updates service API and documentation
- This release introduces multi-session fleets, allowing customers to
provision more than one user session on a single fleet instance.
-   `service/ec2`: Updates service API, documentation, and paginators
- Launching GetSecurityGroupsForVpc API. This API gets security groups
that can be associated by the AWS account making the request with
network interfaces in the specified VPC.
-   `service/network-firewall`: Updates service API and documentation
-   `service/opensearch`: Updates service API and documentation
- `service/redshift`: Updates service API, documentation, and paginators
- Add Redshift APIs GetResourcePolicy, DeleteResourcePolicy,
PutResourcePolicy and DescribeInboundIntegrations for the new Amazon
Redshift Zero-ETL integration feature, which can be used to control data
ingress into Redshift namespace, and view inbound integrations.
-   `service/sagemaker`: Updates service API and documentation
    -   Amazon Sagemaker Autopilot now supports Text Generation jobs.
-   `service/sns`: Updates service API and documentation
- Message Archiving and Replay is now supported in Amazon SNS for FIFO
topics.
-   `service/ssm-sap`: Updates service API and documentation
- `service/transfer`: Updates service API, documentation, waiters, and
paginators
- No API changes from previous release. This release migrated the model
to Smithy keeping all features unchanged.

###
[`v1.46.4`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1464-2023-10-25)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.3...v1.46.4)

\===

##### Service Client Updates

-   `service/connectcases`: Updates service API and documentation
-   `service/groundstation`: Updates service API and documentation
-   `service/iam`: Updates service API and documentation
- Updates to GetAccessKeyLastUsed action to replace NoSuchEntity error
with AccessDeniedException error.

###
[`v1.46.3`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1463-2023-10-24)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.2...v1.46.3)

\===

##### Service Client Updates

-   `service/codepipeline`: Updates service API and documentation
- Add ability to trigger pipelines from git tags, define variables at
pipeline level and new pipeline type V2.
-   `service/ec2`: Updates service documentation
- This release updates the documentation for
InstanceInterruptionBehavior and HibernationOptionsRequest to more
accurately describe the behavior of these two parameters when using Spot
hibernation.
-   `service/eks`: Updates service API
-   `service/iam`: Adds new service
    -   Add the partitional endpoint for IAM in iso-f.
-   `service/migrationhub-config`: Updates service API and documentation
- `service/migrationhubstrategy`: Updates service API, documentation,
and paginators
- `service/opensearchserverless`: Updates service API, documentation,
and paginators

</details>

<details>
<summary>bufbuild/buf (github.com/bufbuild/buf)</summary>

###
[`v1.27.2`](https://togithub.com/bufbuild/buf/blob/HEAD/CHANGELOG.md#v1272---2023-10-27)

[Compare
Source](https://togithub.com/bufbuild/buf/compare/v1.27.1...v1.27.2)

- Fix issue where `buf build` and other commands may fail when handling
certain
archives created on macOS that contain files with extended attributes.

</details>

<details>
<summary>bufbuild/protovalidate-go
(github.com/bufbuild/protovalidate-go)</summary>

###
[`v0.3.4`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.4)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.3...v0.3.4)

#### What's Changed

- Make DefaultResolver public by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#59
- Update minimum required Go version from 1.18 to 1.19 by
[@&#8203;nicksnyder](https://togithub.com/nicksnyder) in
[bufbuild/protovalidate-go#62
- Fix ignore path for resolver.go by
[@&#8203;nicksnyder](https://togithub.com/nicksnyder) in
[bufbuild/protovalidate-go#63

#### New Contributors

- [@&#8203;nicksnyder](https://togithub.com/nicksnyder) made their first
contribution in
[bufbuild/protovalidate-go#62

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.3...v0.3.4

###
[`v0.3.3`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.3)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.2...v0.3.3)

#### What's Changed

- Update benchmarks by [@&#8203;rodaine](https://togithub.com/rodaine)
in
[bufbuild/protovalidate-go#50
- Bug: transitive field CEL expressions fail to resolve types during
type checking by [@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#51
- Fix loading field message when dependency is more than one step by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#54
- Bump github.com/google/cel-go from 0.18.0 to 0.18.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#55
- Make constraint resolution more flexible to different concrete
extension types by [@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#57
- Move package `celext` out of internal by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#56

#### New Contributors

- [@&#8203;oliversun9](https://togithub.com/oliversun9) made their first
contribution in
[bufbuild/protovalidate-go#54

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.2...v0.3.3

###
[`v0.3.2`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.2)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.1...v0.3.2)

#### What's Changed

- Build validator copy cache on write by
[@&#8203;emcfarlane](https://togithub.com/emcfarlane) in
[bufbuild/protovalidate-go#31
- Bump github.com/google/cel-go from 0.17.4 to 0.17.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#39
- Bump github.com/google/cel-go from 0.17.6 to 0.18.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#42
- Bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from
1.31.0-20230824200731-b9b8148056b9.1 to
1.31.0-20230830185350-7a34d6557349.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#41
- Bypass deprecation lint warning by
[@&#8203;akshayjshah](https://togithub.com/akshayjshah) in
[bufbuild/protovalidate-go#45
- Bump actions/checkout from 3 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#46
- Cleanup: replace deprecated OptCheckStringFormat by
[@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#48
- Conformance: support for multiple uniques by
[@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#49

#### New Contributors

- [@&#8203;emcfarlane](https://togithub.com/emcfarlane) made their first
contribution in
[bufbuild/protovalidate-go#31
- [@&#8203;akshayjshah](https://togithub.com/akshayjshah) made their
first contribution in
[bufbuild/protovalidate-go#45

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.1...v0.3.2

</details>

<details>
<summary>cerbos/cloud-api (github.com/cerbos/cloud-api)</summary>

###
[`v0.1.8`](https://togithub.com/cerbos/cloud-api/compare/v0.1.7...v0.1.8)

[Compare
Source](https://togithub.com/cerbos/cloud-api/compare/v0.1.7...v0.1.8)

</details>

<details>
<summary>fullstorydev/grpcurl
(github.com/fullstorydev/grpcurl)</summary>

###
[`v1.8.9`](https://togithub.com/fullstorydev/grpcurl/releases/tag/v1.8.9)

[Compare
Source](https://togithub.com/fullstorydev/grpcurl/compare/v1.8.8...v1.8.9)

#### Changelog

- [`28c0ee2`](https://togithub.com/fullstorydev/grpcurl/commit/28c0ee2)
Disable CGO for improved compatibility across distros
([#&#8203;420](https://togithub.com/fullstorydev/grpcurl/issues/420))
- [`bc2944d`](https://togithub.com/fullstorydev/grpcurl/commit/bc2944d)
Bump golang.org/x/net from 0.9.0 to 0.17.0
([#&#8203;419](https://togithub.com/fullstorydev/grpcurl/issues/419))
- [`7a845ca`](https://togithub.com/fullstorydev/grpcurl/commit/7a845ca)
SIGSEGV: panic: runtime error: invalid memory address or nil pointer
dereference in protoreflect
([#&#8203;416](https://togithub.com/fullstorydev/grpcurl/issues/416))
- [`c17f078`](https://togithub.com/fullstorydev/grpcurl/commit/c17f078)
Added alts credential option
([#&#8203;341](https://togithub.com/fullstorydev/grpcurl/issues/341))

</details>

<details>
<summary>go-git/go-git (github.com/go-git/go-git/v5)</summary>

### [`v5.10.0`](https://togithub.com/go-git/go-git/releases/tag/v5.10.0)

[Compare
Source](https://togithub.com/go-git/go-git/compare/v5.9.0...v5.10.0)

#### What's Changed

- PlainInitOptions.Bare and allow using InitOptions with
PlainInitWithOptions by
[@&#8203;ThinkChaos](https://togithub.com/ThinkChaos) in
[go-git/go-git#782
- Worktree, apply ProxyOption on Pull by
[@&#8203;nodivbyzero](https://togithub.com/nodivbyzero) in
[go-git/go-git#840
- Repository: add clone --shared feature by
[@&#8203;enverbisevac](https://togithub.com/enverbisevac) in
[go-git/go-git#860
- build: Add github workflow to check commit message format by
[@&#8203;pjbgf](https://togithub.com/pjbgf) in
[go-git/go-git#867
- Improve handling of remote errors by
[@&#8203;makkes](https://togithub.com/makkes) in
[go-git/go-git#866
- build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[go-git/go-git#873
- plumbing: commitgraph, Add generation v2 support by
[@&#8203;zeripath](https://togithub.com/zeripath) in
[go-git/go-git#869
- plumbing: protocol/packp, Add validation for decodeLine by
[@&#8203;pjbgf](https://togithub.com/pjbgf) in
[go-git/go-git#868
- plumbing: parse the encoding header of the commit object by
[@&#8203;liwenqiu](https://togithub.com/liwenqiu) in
[go-git/go-git#761
- plumbing: commitgraph, allow SHA256 commit-graphs by
[@&#8203;zeripath](https://togithub.com/zeripath) in
[go-git/go-git#853
- plumbing: commitgraph, Allow reading commit-graph chains by
[@&#8203;zeripath](https://togithub.com/zeripath) in
[go-git/go-git#854
- plumbing/object: Support mergetag in merge commits by
[@&#8203;adityasaky](https://togithub.com/adityasaky) in
[go-git/go-git#847

#### New Contributors

- [@&#8203;nodivbyzero](https://togithub.com/nodivbyzero) made their
first contribution in
[go-git/go-git#840
- [@&#8203;adityasaky](https://togithub.com/adityasaky) made their first
contribution in
[go-git/go-git#847
- [@&#8203;hezhizhen](https://togithub.com/hezhizhen) made their first
contribution in
[go-git/go-git#836
- [@&#8203;0x34d](https://togithub.com/0x34d) made their first
contribution in
[go-git/go-git#855
- [@&#8203;liwenqiu](https://togithub.com/liwenqiu) made their first
contribution in
[go-git/go-git#761
- [@&#8203;enverbisevac](https://togithub.com/enverbisevac) made their
first contribution in
[go-git/go-git#860
- [@&#8203;makkes](https://togithub.com/makkes) made their first
contribution in
[go-git/go-git#866

**Full Changelog**:
go-git/go-git@v5.9.0...v5.10.0

</details>

<details>
<summary>google/cel-go (github.com/google/cel-go)</summary>

### [`v0.18.1`](https://togithub.com/google/cel-go/releases/tag/v0.18.1)

[Compare
Source](https://togithub.com/google/cel-go/compare/v0.18.0...v0.18.1)

#### What's Changed

- Add support for a relative offset within ast.SourceInfo by
\[[#&#8203;836](https://togithub.com/google/cel-go/issues/836)]
- Fix last optional element to be retained as an optional index while
folding \[[#&#8203;841](https://togithub.com/google/cel-go/issues/841)]
- Fix deprecation notice for string format validation
\[[#&#8203;840](https://togithub.com/google/cel-go/issues/840)]
- Update cel-spec and enable wrappers conformance tests
\[[#&#8203;842](https://togithub.com/google/cel-go/issues/842)]
- refactor: remove lexer and parser pools
\[[#&#8203;838](https://togithub.com/google/cel-go/issues/838)]

#### New Contributors

- [@&#8203;TulgaCG](https://togithub.com/TulgaCG) made their first
contribution in
[google/cel-go#835
- [@&#8203;aimuz](https://togithub.com/aimuz) made their first
contribution in
[google/cel-go#838

**Full Changelog**:
google/cel-go@v0.18.0...v0.18.1

### [`v0.18.0`](https://togithub.com/google/cel-go/releases/tag/v0.18.0)

[Compare
Source](https://togithub.com/google/cel-go/compare/v0.17.6...v0.18.0)

#### Features

The latest release of CEL introduces validators
([#&#8203;775](https://togithub.com/google/cel-go/issues/775)) and
optimizers
([#&#8203;804](https://togithub.com/google/cel-go/issues/804),
[#&#8203;827](https://togithub.com/google/cel-go/issues/827)) and
migrates the core CEL internals off of the
protobuf expression and type representations
([#&#8203;789](https://togithub.com/google/cel-go/issues/789)).

- String format validator
\[[#&#8203;775](https://togithub.com/google/cel-go/issues/775)]
- Create a Function that Reverses a String
\[[#&#8203;796](https://togithub.com/google/cel-go/issues/796)]
- Introduce pre-order / post-order visitor pattern
\[[#&#8203;813](https://togithub.com/google/cel-go/issues/813)]
- Add Libraries() function to Env
\[[#&#8203;822](https://togithub.com/google/cel-go/issues/822)]
- Static optimizer for constant folding
\[[#&#8203;804](https://togithub.com/google/cel-go/issues/804)]
- Inlining optimizer
\[[#&#8203;827](https://togithub.com/google/cel-go/issues/827)]
- FindStructTypeFields support for types.Provider
\[[#&#8203;814](https://togithub.com/google/cel-go/issues/814)]

#### Breaking Changes

The following PR changes the API signature of the `checker.AstNode`
method `Expr` to return an `ast.Expr`.

- Migrate the checker.Coster to the ast.Expr
\[[#&#8203;798](https://togithub.com/google/cel-go/issues/798)]

#### Fixes

- Nil safety checks for cel.Ast
\[[#&#8203;784](https://togithub.com/google/cel-go/issues/784)]
- Fix cost estimates to propagate result sizes
\[[#&#8203;787](https://togithub.com/google/cel-go/issues/787)]
- Catch invalid literals created from expression factories
\[[#&#8203;810](https://togithub.com/google/cel-go/issues/810)]
- Ensure stable ordering of overload candidates
\[[#&#8203;817](https://togithub.com/google/cel-go/issues/817)]
- Clarify replace with/by empty string
\[[#&#8203;820](https://togithub.com/google/cel-go/issues/820)]
- Fix functional exemptions for homogeneous literal checks
\[[#&#8203;832](https://togithub.com/google/cel-go/issues/832)]
- Fix logical operator folding that only involve literals
\[[#&#8203;833](https://togithub.com/google/cel-go/issues/833)]
- Upgrade go-genproto to latest
\[[#&#8203;831](https://togithub.com/google/cel-go/issues/831)]

#### New Contributors

- [@&#8203;bboogler](https://togithub.com/bboogler) made their first
contribution in
[google/cel-go#796

**Full Changelog**:
google/cel-go@v0.17.1...v0.18.0

</details>

<details>
<summary>google/uuid (github.com/google/uuid)</summary>

### [`v1.4.0`](https://togithub.com/google/uuid/releases/tag/v1.4.0)

[Compare
Source](https://togithub.com/google/uuid/compare/v1.3.1...v1.4.0)

##### Features

- UUIDs slice type with Strings() convenience method
([#&#8203;133](https://togithub.com/google/uuid/issues/133))
([cd5fbbd](https://togithub.com/google/uuid/commit/cd5fbbdd02f3e3467ac18940e07e062be1f864b4))

##### Fixes

- Clarify that Parse's job is to parse but not necessarily validate
strings. (Documents current behavior)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/cerbos/cerbos).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMS41IiwidXBkYXRlZEluVmVyIjoiMzcuMzEuNSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Charith Ellawala <charith@cerbos.dev>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Charith Ellawala <charith@cerbos.dev>
oguzhand95 added a commit to cerbos/cerbos that referenced this pull request Nov 6, 2023
@renovate @oguzhand95
chore(deps): Update go deps (#1863)
ebb56d2 
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com)

This PR contains the following updates:

| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/aws/aws-sdk-go](https://togithub.com/aws/aws-sdk-go) |
require | minor | `v1.46.6` -> `v1.47.3` |
|
[github.com/bufbuild/protovalidate-go](https://togithub.com/bufbuild/protovalidate-go)
| require | minor | `v0.3.1` -> `v0.4.0` |
|
[github.com/cerbos/cerbos/api/genpb](https://togithub.com/cerbos/cerbos)
| require | digest | `f134903` -> `761a3dc` |
| [github.com/cerbos/cloud-api](https://togithub.com/cerbos/cloud-api) |
require | patch | `v0.1.8` -> `v0.1.9` |
| [github.com/go-logr/zapr](https://togithub.com/go-logr/zapr) | require
| minor | `v1.2.4` -> `v1.3.0` |
| [github.com/gorilla/mux](https://togithub.com/gorilla/mux) | require |
patch | `v1.8.0` -> `v1.8.1` |
| [github.com/jackc/pgx/v5](https://togithub.com/jackc/pgx) | require |
minor | `v5.4.3` -> `v5.5.0` |
| [github.com/lestrrat-go/jwx/v2](https://togithub.com/lestrrat-go/jwx)
| require | patch | `v2.0.15` -> `v2.0.16` |
| [github.com/pterm/pterm](https://togithub.com/pterm/pterm) | require |
patch | `v0.12.69` -> `v0.12.70` |
| [github.com/rivo/tview](https://togithub.com/rivo/tview) | require |
digest | `8b7bcf9` -> `1b91b81` |
| [github.com/twmb/franz-go](https://togithub.com/twmb/franz-go) |
require | patch | `v1.15.1` -> `v1.15.2` |
| [github.com/vektra/mockery/v2](https://togithub.com/vektra/mockery) |
require | patch | `v2.36.0` -> `v2.36.1` |
| golang.org/x/sync | require | minor | `v0.4.0` -> `v0.5.0` |
|
[google.golang.org/genproto/googleapis/api](https://togithub.com/googleapis/go-genproto)
| require | digest | `49dd2c1` -> `d783a09` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | require |
minor | `v1.26.0` -> `v1.27.0` |

---

> [!WARNING]
> Some dependencies could not be looked up. Check the Dependency
Dashboard for more information.

---

### Release Notes

<details>
<summary>aws/aws-sdk-go (github.com/aws/aws-sdk-go)</summary>

###
[`v1.47.3`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1473-2023-11-03)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.47.2...v1.47.3)

\===

##### Service Client Updates

-   `service/config`: Updates service API
-   `service/connect`: Updates service API and documentation
-   `service/iotwireless`: Updates service API and documentation
-   `service/launch-wizard`: Adds new service

###
[`v1.47.2`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1472-2023-11-02)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.47.1...v1.47.2)

\===

##### Service Client Updates

-   `service/apprunner`: Updates service API and documentation
-   `service/connect`: Updates service documentation
-   `service/gamelift`: Updates service API and documentation
- Amazon GameLift adds support for shared credentials, which allows
applications that are deployed on managed EC2 fleets to interact with
other AWS resources.
-   `service/glue`: Updates service API and documentation
- This release introduces Google BigQuery Source and Target in AWS Glue
CodeGenConfigurationNode.
-   `service/network-firewall`: Updates service API and documentation
-   `service/quicksight`: Updates service API and documentation
- Got confirmed from qmeixua@ about custom week features, and tested
locally with aws cli and java sdk that the subtypes are showing up.

##### SDK Enhancements

- `aws/ec2metadata`: Added environment and shared config support for
disabling IMDSv1 fallback.
- Use env `AWS_EC2_METADATA_V1_DISABLED` or shared config
`ec2_metadata_v1_disabled` accordingly.

###
[`v1.47.1`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1471-2023-11-01)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.47.0...v1.47.1)

\===

##### Service Client Updates

- `service/connect`: Updates service API, documentation, and paginators
- `service/globalaccelerator`: Updates service API, documentation, and
paginators
- `service/rds`: Updates service API, documentation, waiters,
paginators, and examples
- This release adds support for customized networking resources to
Amazon RDS Custom.
-   `service/redshift`: Updates service API and documentation
- Added support for Multi-AZ deployments for Provisioned RA3 clusters
that provide 99.99% SLA availability.
-   `service/sagemaker`: Updates service API and documentation
    -   Support for batch transform input in Model dashboard

###
[`v1.47.0`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1470-2023-10-31)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.7...v1.47.0)

\===

##### Service Client Updates

- `service/amplify`: Updates service API, documentation, and paginators
- `service/application-insights`: Updates service API and documentation
-   `service/ec2`: Updates service API, documentation, and paginators
- Capacity Blocks for ML are a new EC2 purchasing option for reserving
GPU instances on a future date to support short duration machine
learning (ML) workloads. Capacity Blocks automatically place instances
close together inside Amazon EC2 UltraClusters for low-latency,
high-throughput networking.
-   `service/m2`: Updates service API and documentation
-   `service/neptunedata`: Updates service API and documentation
-   `service/translate`: Updates service API and documentation

##### SDK Features

-   `aws`: Bump minimum go version to 1.19.
- See
https://aws.amazon.com/blogs/developer/aws-sdk-for-go-aligns-with-go-release-policy-on-supported-runtimes/.

###
[`v1.46.7`](https://togithub.com/aws/aws-sdk-go/blob/HEAD/CHANGELOG.md#Release-v1467-2023-10-30)

[Compare
Source](https://togithub.com/aws/aws-sdk-go/compare/v1.46.6...v1.46.7)

\===

##### Service Client Updates

-   `service/connect`: Updates service API and documentation
-   `service/dataexchange`: Updates service API and documentation
-   `service/datasync`: Updates service API and documentation
-   `service/finspace`: Updates service API and documentation
-   `service/mediapackagev2`: Updates service API and documentation
- `service/rds`: Updates service API, documentation, waiters,
paginators, and examples
- This release launches the CreateIntegration, DeleteIntegration, and
DescribeIntegrations APIs to manage zero-ETL Integrations.
- `service/redshift-serverless`: Updates service API, documentation, and
paginators
-   `service/resiliencehub`: Updates service API and documentation
-   `service/s3outposts`: Updates service API and documentation
-   `service/wisdom`: Updates service documentation

</details>

<details>
<summary>bufbuild/protovalidate-go
(github.com/bufbuild/protovalidate-go)</summary>

###
[`v0.4.0`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.4.0)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.4...v0.4.0)

#### What's Changed

- Fix bug where cel expression cannot compile for fields of type
google.protobuf.Any by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#65
- Link to connect/validate-go by
[@&#8203;emcfarlane](https://togithub.com/emcfarlane) in
[bufbuild/protovalidate-go#66
- Run CI on Go 1.19 by
[@&#8203;akshayjshah](https://togithub.com/akshayjshah) in
[bufbuild/protovalidate-go#72
- Use make lint in CI instead of golangci-lint action by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#70
- Add isIpPrefix by [@&#8203;higebu](https://togithub.com/higebu) in
[bufbuild/protovalidate-go#53

#### New Contributors

- [@&#8203;higebu](https://togithub.com/higebu) made their first
contribution in
[bufbuild/protovalidate-go#53

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.4...v0.4.0

###
[`v0.3.4`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.4)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.3...v0.3.4)

#### What's Changed

- Make DefaultResolver public by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#59
- Update minimum required Go version from 1.18 to 1.19 by
[@&#8203;nicksnyder](https://togithub.com/nicksnyder) in
[bufbuild/protovalidate-go#62
- Fix ignore path for resolver.go by
[@&#8203;nicksnyder](https://togithub.com/nicksnyder) in
[bufbuild/protovalidate-go#63

#### New Contributors

- [@&#8203;nicksnyder](https://togithub.com/nicksnyder) made their first
contribution in
[bufbuild/protovalidate-go#62

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.3...v0.3.4

###
[`v0.3.3`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.3)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.2...v0.3.3)

#### What's Changed

- Update benchmarks by [@&#8203;rodaine](https://togithub.com/rodaine)
in
[bufbuild/protovalidate-go#50
- Bug: transitive field CEL expressions fail to resolve types during
type checking by [@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#51
- Fix loading field message when dependency is more than one step by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#54
- Bump github.com/google/cel-go from 0.18.0 to 0.18.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#55
- Make constraint resolution more flexible to different concrete
extension types by [@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#57
- Move package `celext` out of internal by
[@&#8203;oliversun9](https://togithub.com/oliversun9) in
[bufbuild/protovalidate-go#56

#### New Contributors

- [@&#8203;oliversun9](https://togithub.com/oliversun9) made their first
contribution in
[bufbuild/protovalidate-go#54

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.2...v0.3.3

###
[`v0.3.2`](https://togithub.com/bufbuild/protovalidate-go/releases/tag/v0.3.2)

[Compare
Source](https://togithub.com/bufbuild/protovalidate-go/compare/v0.3.1...v0.3.2)

#### What's Changed

- Build validator copy cache on write by
[@&#8203;emcfarlane](https://togithub.com/emcfarlane) in
[bufbuild/protovalidate-go#31
- Bump github.com/google/cel-go from 0.17.4 to 0.17.6 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#39
- Bump github.com/google/cel-go from 0.17.6 to 0.18.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#42
- Bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from
1.31.0-20230824200731-b9b8148056b9.1 to
1.31.0-20230830185350-7a34d6557349.1 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#41
- Bypass deprecation lint warning by
[@&#8203;akshayjshah](https://togithub.com/akshayjshah) in
[bufbuild/protovalidate-go#45
- Bump actions/checkout from 3 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[bufbuild/protovalidate-go#46
- Cleanup: replace deprecated OptCheckStringFormat by
[@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#48
- Conformance: support for multiple uniques by
[@&#8203;rodaine](https://togithub.com/rodaine) in
[bufbuild/protovalidate-go#49

#### New Contributors

- [@&#8203;emcfarlane](https://togithub.com/emcfarlane) made their first
contribution in
[bufbuild/protovalidate-go#31
- [@&#8203;akshayjshah](https://togithub.com/akshayjshah) made their
first contribution in
[bufbuild/protovalidate-go#45

**Full Changelog**:
bufbuild/protovalidate-go@v0.3.1...v0.3.2

</details>

<details>
<summary>cerbos/cloud-api (github.com/cerbos/cloud-api)</summary>

###
[`v0.1.9`](https://togithub.com/cerbos/cloud-api/compare/v0.1.8...v0.1.9)

[Compare
Source](https://togithub.com/cerbos/cloud-api/compare/v0.1.8...v0.1.9)

</details>

<details>
<summary>go-logr/zapr (github.com/go-logr/zapr)</summary>

### [`v1.3.0`](https://togithub.com/go-logr/zapr/releases/tag/v1.3.0)

[Compare
Source](https://togithub.com/go-logr/zapr/compare/v1.2.4...v1.3.0)

This release adds [support for
slog](https://togithub.com/go-logr/logr#slog-interoperability). zapr
implements `slogr.SlogSink` and therefore can be used through
[`slogr.NewSlogHandler`](https://pkg.go.dev/github.com/go-logr/logr@v1.3.0/slogr#NewSlogHandler)
as backend for slog.

#### What's Changed

- Added dependabot by [@&#8203;Neo2308](https://togithub.com/Neo2308) in
[go-logr/zapr#63
- Updated min supported version to go 1.18 by
[@&#8203;Neo2308](https://togithub.com/Neo2308) in
[go-logr/zapr#62
- update linter config and fix issues by
[@&#8203;pohly](https://togithub.com/pohly) in
[go-logr/zapr#61
- Bump github.com/go-logr/logr from 1.2.4 to 1.3.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[go-logr/zapr#71
- support slog by [@&#8203;pohly](https://togithub.com/pohly) in
[go-logr/zapr#60

***

- Bump github.com/stretchr/testify from 1.8.0 to 1.8.4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[go-logr/zapr#65
- Bump actions/checkout from 2 to 3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[go-logr/zapr#66
- Bump actions/setup-go from 2 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[go-logr/zapr#67
- Bump golangci/golangci-lint-action from 2 to 3 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[go-logr/zapr#68
- Bump actions/checkout from 3 to 4 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[go-logr/zapr#69
- Bump go.uber.org/zap from 1.24.0 to 1.25.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[go-logr/zapr#64
- Bump go.uber.org/zap from 1.25.0 to 1.26.0 by
[@&#8203;dependabot](https://togithub.com/dependabot) in
[go-logr/zapr#70

#### New Contributors

- [@&#8203;Neo2308](https://togithub.com/Neo2308) made their first
contribution in
[go-logr/zapr#63
- [@&#8203;dependabot](https://togithub.com/dependabot) made their first
contribution in
[go-logr/zapr#65

**Full Changelog**:
go-logr/zapr@v1.2.4...v1.3.0

</details>

<details>
<summary>google/cel-go (github.com/google/cel-go)</summary>

### [`v0.18.1`](https://togithub.com/google/cel-go/releases/tag/v0.18.1)

[Compare
Source](https://togithub.com/google/cel-go/compare/v0.18.0...v0.18.1)

#### What's Changed

- Add support for a relative offset within ast.SourceInfo by
\[[#&#8203;836](https://togithub.com/google/cel-go/issues/836)]
- Fix last optional element to be retained as an optional index while
folding \[[#&#8203;841](https://togithub.com/google/cel-go/issues/841)]
- Fix deprecation notice for string format validation
\[[#&#8203;840](https://togithub.com/google/cel-go/issues/840)]
- Update cel-spec and enable wrappers conformance tests
\[[#&#8203;842](https://togithub.com/google/cel-go/issues/842)]
- refactor: remove lexer and parser pools
\[[#&#8203;838](https://togithub.com/google/cel-go/issues/838)]

#### New Contributors

- [@&#8203;TulgaCG](https://togithub.com/TulgaCG) made their first
contribution in
[google/cel-go#835
- [@&#8203;aimuz](https://togithub.com/aimuz) made their first
contribution in
[google/cel-go#838

**Full Changelog**:
google/cel-go@v0.18.0...v0.18.1

### [`v0.18.0`](https://togithub.com/google/cel-go/releases/tag/v0.18.0)

[Compare
Source](https://togithub.com/google/cel-go/compare/v0.17.7...v0.18.0)

#### Features

The latest release of CEL introduces validators
([#&#8203;775](https://togithub.com/google/cel-go/issues/775)) and
optimizers
([#&#8203;804](https://togithub.com/google/cel-go/issues/804),
[#&#8203;827](https://togithub.com/google/cel-go/issues/827)) and
migrates the core CEL internals off of the
protobuf expression and type representations
([#&#8203;789](https://togithub.com/google/cel-go/issues/789)).

- String format validator
\[[#&#8203;775](https://togithub.com/google/cel-go/issues/775)]
- Create a Function that Reverses a String
\[[#&#8203;796](https://togithub.com/google/cel-go/issues/796)]
- Introduce pre-order / post-order visitor pattern
\[[#&#8203;813](https://togithub.com/google/cel-go/issues/813)]
- Add Libraries() function to Env
\[[#&#8203;822](https://togithub.com/google/cel-go/issues/822)]
- Static optimizer for constant folding
\[[#&#8203;804](https://togithub.com/google/cel-go/issues/804)]
- Inlining optimizer
\[[#&#8203;827](https://togithub.com/google/cel-go/issues/827)]
- FindStructTypeFields support for types.Provider
\[[#&#8203;814](https://togithub.com/google/cel-go/issues/814)]

#### Breaking Changes

The following PR changes the API signature of the `checker.AstNode`
method `Expr` to return an `ast.Expr`.

- Migrate the checker.Coster to the ast.Expr
\[[#&#8203;798](https://togithub.com/google/cel-go/issues/798)]

#### Fixes

- Nil safety checks for cel.Ast
\[[#&#8203;784](https://togithub.com/google/cel-go/issues/784)]
- Fix cost estimates to propagate result sizes
\[[#&#8203;787](https://togithub.com/google/cel-go/issues/787)]
- Catch invalid literals created from expression factories
\[[#&#8203;810](https://togithub.com/google/cel-go/issues/810)]
- Ensure stable ordering of overload candidates
\[[#&#8203;817](https://togithub.com/google/cel-go/issues/817)]
- Clarify replace with/by empty string
\[[#&#8203;820](https://togithub.com/google/cel-go/issues/820)]
- Fix functional exemptions for homogeneous literal checks
\[[#&#8203;832](https://togithub.com/google/cel-go/issues/832)]
- Fix logical operator folding that only involve literals
\[[#&#8203;833](https://togithub.com/google/cel-go/issues/833)]
- Upgrade go-genproto to latest
\[[#&#8203;831](https://togithub.com/google/cel-go/issues/831)]

#### New Contributors

- [@&#8203;bboogler](https://togithub.com/bboogler) made their first
contribution in
[google/cel-go#796

**Full Changelog**:
google/cel-go@v0.17.1...v0.18.0

### [`v0.17.7`](https://togithub.com/google/cel-go/releases/tag/v0.17.7)

[Compare
Source](https://togithub.com/google/cel-go/compare/v0.17.6...v0.17.7)

#### What's Changed

- Backport [#&#8203;850](https://togithub.com/google/cel-go/issues/850):
Sets cost estimation and tracking options
\[[#&#8203;852](https://togithub.com/google/cel-go/issues/852)]

**Full Changelog**:
google/cel-go@v0.17.6...v0.17.7

</details>

<details>
<summary>gorilla/mux (github.com/gorilla/mux)</summary>

### [`v1.8.1`](https://togithub.com/gorilla/mux/releases/tag/v1.8.1)

[Compare
Source](https://togithub.com/gorilla/mux/compare/v1.8.0...v1.8.1)

#### What's Changed

- build: CircleCI 2.1 + build matrix by
[@&#8203;elithrar](https://togithub.com/elithrar) in
[gorilla/mux#595
- Include "404" and "405" in the docs by
[@&#8203;Jille](https://togithub.com/Jille) in
[gorilla/mux#602
- docs: update README w.r.t new maintainer ask by
[@&#8203;elithrar](https://togithub.com/elithrar) in
[gorilla/mux#660
- regexp: use iota instead of hardcoded values for regexType\* by
[@&#8203;michaelgrigoryan25](https://togithub.com/michaelgrigoryan25) in
[gorilla/mux#679
- Fix `authenticationMiddleware` initialization in the `README.md` file
by [@&#8203;amustaque97](https://togithub.com/amustaque97) in
[gorilla/mux#693
- Update README.md by
[@&#8203;coreydaley](https://togithub.com/coreydaley) in
[gorilla/mux#713
- \[GPT-95] Update go version, add tools for verification and testing by
[@&#8203;apoorvajagtap](https://togithub.com/apoorvajagtap) in
[gorilla/mux#718
- Delete release-drafter.yml by
[@&#8203;coreydaley](https://togithub.com/coreydaley) in
[gorilla/mux#719
- Delete stale.yml by
[@&#8203;coreydaley](https://togithub.com/coreydaley) in
[gorilla/mux#720
- Delete AUTHORS by
[@&#8203;coreydaley](https://togithub.com/coreydaley) in
[gorilla/mux#721
- Update LICENSE by
[@&#8203;coreydaley](https://togithub.com/coreydaley) in
[gorilla/mux#722
- Updated the logo in README.md by
[@&#8203;shamkarthik](https://togithub.com/shamkarthik) in
[gorilla/mux#724
- Update LICENSE by
[@&#8203;coreydaley](https://togithub.com/coreydaley) in
[gorilla/mux#723
- Update issues.yml by
[@&#8203;coreydaley](https://togithub.com/coreydaley) in
[gorilla/mux#726
- Update issues.yml by
[@&#8203;coreydaley](https://togithub.com/coreydaley) in
[gorilla/mux#727
- run go fmt with Go 1.20 by
[@&#8203;shogo82148](https://togithub.com/shogo82148) in
[gorilla/mux#725
- Fix `Single Page Application` example in `README.md` file by
[@&#8203;amustaque97](https://togithub.com/amustaque97) in
[gorilla/mux#678
- \[BUG] Inconsistent HTTP status code on query mismatch by
[@&#8203;soheilrt](https://togithub.com/soheilrt) in
[gorilla/mux#712
- Clarify documentation examples of Route methods by
[@&#8203;andrew-werdna](https://togithub.com/andrew-werdna) in
[gorilla/mux#672
- changed the routeVariables text content. by
[@&#8203;sumanpaikdev](https://togithub.com/sumanpaikdev) in
[gorilla/mux#708
- Add GetVarNames() by [@&#8203;eh-steve](https://togithub.com/eh-steve)
in
[gorilla/mux#676
- fix SPA handler in README.md by
[@&#8203;sy9](https://togithub.com/sy9) in
[gorilla/mux#733
- update GitHub workflows by
[@&#8203;coreydaley](https://togithub.com/coreydaley) in
[gorilla/mux#734

#### New Contributors

- [@&#8203;Jille](https://togithub.com/Jille) made their first
contribution in
[gorilla/mux#602
- [@&#8203;michaelgrigoryan25](https://togithub.com/michaelgrigoryan25)
made their first contribution in
[gorilla/mux#679
- [@&#8203;amustaque97](https://togithub.com/amustaque97) made their
first contribution in
[gorilla/mux#693
- [@&#8203;coreydaley](https://togithub.com/coreydaley) made their first
contribution in
[gorilla/mux#713
- [@&#8203;apoorvajagtap](https://togithub.com/apoorvajagtap) made their
first contribution in
[gorilla/mux#718
- [@&#8203;shamkarthik](https://togithub.com/shamkarthik) made their
first contribution in
[gorilla/mux#724
- [@&#8203;shogo82148](https://togithub.com/shogo82148) made their first
contribution in
[gorilla/mux#725
- [@&#8203;soheilrt](https://togithub.com/soheilrt) made their first
contribution in
[gorilla/mux#712
- [@&#8203;andrew-werdna](https://togithub.com/andrew-werdna) made their
first contribution in
[gorilla/mux#672
- [@&#8203;sumanpaikdev](https://togithub.com/sumanpaikdev) made their
first contribution in
[gorilla/mux#708
- [@&#8203;eh-steve](https://togithub.com/eh-steve) made their first
contribution in
[gorilla/mux#676
- [@&#8203;sy9](https://togithub.com/sy9) made their first contribution
in
[gorilla/mux#733

**Full Changelog**:
gorilla/mux@v1.8.0...v1.8.1

</details>

<details>
<summary>jackc/pgx (github.com/jackc/pgx/v5)</summary>

### [`v5.5.0`](https://togithub.com/jackc/pgx/compare/v5.4.3...v5.5.0)

[Compare Source](https://togithub.com/jackc/pgx/compare/v5.4.3...v5.5.0)

</details>

<details>
<summary>lestrrat-go/jwx (github.com/lestrrat-go/jwx/v2)</summary>

###
[`v2.0.16`](https://togithub.com/lestrrat-go/jwx/releases/tag/v2.0.16)

[Compare
Source](https://togithub.com/lestrrat-go/jwx/compare/v2.0.15...v2.0.16)

    v2.0.16 31 Oct 2023
    [Security]
* [jws] ECDSA signature verification requires us to check if the
signature
is of the desired length of bytes, but this check that used to exist
before
had been removed in #&#8203;65, resulting in certain malformed
signatures to pass
        verification.

One of the ways this could happen if R is a 31 byte integer and S is 32
byte integer,
both containing the correct signature values, but R is not zero-padded.

           Correct = R: [ 0 , ... ] (32 bytes) S: [ ... ] (32 bytes)
           Wrong   = R: [ ... ] (31 bytes)     S: [ ... ] (32 bytes)

In order for this check to pass, you would still need to have all 63
bytes
populated with the correct signature. The only modification a bad actor
may be able to do is to add one more byte at the end, in which case the
first 32 bytes (including what would have been S's first byte) is used
for R,
and S would contain the rest. But this will only result in the
verification to
fail. Therefore this in itself should not pose any security risk, albeit
        allowing some illegally formated messages to be verified.

* [jwk] `jwk.Key` objects now have a `Validate()` method to validate the
data
stored in the keys. However, this still does not necessarily mean that
the key's
are valid for use in cryptographic operations. If `Validate()` is
successful,
it only means that the keys are in the right _format_, including the
presence
of required fields and that certain fields have proper length, etc.

    [New Features]
* [jws] Added `jws.WithValidateKey()` to force calling `key.Validate()`
before
        signing or verification.

* [jws] `jws.Sign()` now returns a special type of error that can hold
the
individual errors from the signers. The stringification is still the
same
        as before to preserve backwards compatibility.

* [jwk] Added `jwk.IsKeyValidationError` that checks if an error is an
error
        from `key.Validate()`.

    [Bug Fixes]
* [jwt] `jwt.ParseInsecure()` was running verification if you provided a
key
        via `jwt.WithKey()` or `jwt.WithKeySet()` (#&#8203;1007)

</details>

<details>
<summary>pterm/pterm (github.com/pterm/pterm)</summary>

###
[`v0.12.70`](https://togithub.com/pterm/pterm/releases/tag/v0.12.70):
Heatmap Printer 🎉

[Compare
Source](https://togithub.com/pterm/pterm/compare/v0.12.69...v0.12.70)

<!-- Release notes generated using configuration in .github/release.yml
at master -->

#### What's Changed

##### Exciting New Features 🎉

- Feature: Default value for interactive text input by
[@&#8203;KarolosLykos](https://togithub.com/KarolosLykos) in
[pterm/pterm#577
- Added a heatmap printer by
[@&#8203;floaust](https://togithub.com/floaust) in
[pterm/pterm#487

<img width="800"
src="https://github.com/pterm/pterm/assets/56639481/c994c395-3b94-4b27-af20-4ae5fd6fc0be"
/>

##### Fixes 🔧
* fix(heatmap): fix bug legend was not fully boxed by
@&#8203;floau[pterm/pterm#583
* fix(heatmap): fix bug legend was too long by
@&#8203;floau[pterm/pterm#585

**Full Changelog**:
pterm/pterm@v0.12.69...v0.12.70

</details>

<details>
<summary>twmb/franz-go (github.com/twmb/franz-go)</summary>

###
[`v1.15.2`](https://togithub.com/twmb/franz-go/blob/HEAD/CHANGELOG.md#v1152)

[Compare
Source](https://togithub.com/twmb/franz-go/compare/v1.15.1...v1.15.2)

\===

This patch release fixes two bugs and changes Mark functions to be
no-ops when
not using AutoCommitMarks to avoid confusion. This also includes a minor
commit
further improving the sticky balancer. See the commits for more details.

- [`72778cb`](https://togithub.com/twmb/franz-go/commit/72778cb)
**behavior change** kgo: no-op mark functions when not using
AutoCommitMarks
- [`e209bb6`](https://togithub.com/twmb/franz-go/commit/e209bb6)
**bugfix** kgo: pin AddPartitionsToTxn to v3 when using one transaction
- [`36b4437`](https://togithub.com/twmb/franz-go/commit/36b4437) sticky:
further improvements
- [`af5bc1f`](https://togithub.com/twmb/franz-go/commit/af5bc1f)
**bugfix** kgo: be sure to use topics when other topics are paused

</details>

<details>
<summary>vektra/mockery (github.com/vektra/mockery/v2)</summary>

###
[`v2.36.1`](https://togithub.com/vektra/mockery/releases/tag/v2.36.1)

[Compare
Source](https://togithub.com/vektra/mockery/compare/v2.36.0...v2.36.1)

#### Changelog

- [`b648c23`](https://togithub.com/vektra/mockery/commit/b648c23) Add
additional test
- [`0310201`](https://togithub.com/vektra/mockery/commit/0310201) Add
fix for showconfig command
- [`d3515d1`](https://togithub.com/vektra/mockery/commit/d3515d1) Fix
bug with sub-package inheritance
- [`77064ad`](https://togithub.com/vektra/mockery/commit/77064ad) Fix
config bug where mockery crashes when package map is nil
- [`5978bc5`](https://togithub.com/vektra/mockery/commit/5978bc5) Fix
test with config initialization
- [`deb4860`](https://togithub.com/vektra/mockery/commit/deb4860) Merge
pull request
[#&#8203;730](https://togithub.com/vektra/mockery/issues/730) from
LandonTClipp/issue\_726
- [`e86d230`](https://togithub.com/vektra/mockery/commit/e86d230)
Simplifying some config in interface copying code
- [`726d76c`](https://togithub.com/vektra/mockery/commit/726d76c) Update
running.md
- [`2dd8f00`](https://togithub.com/vektra/mockery/commit/2dd8f00) Use
gotestsum for better testing output

</details>

<details>
<summary>cznic/sqlite (modernc.org/sqlite)</summary>

###
[`v1.27.0`](https://gitlab.com/cznic/sqlite/compare/v1.26.0...v1.27.0)

[Compare
Source](https://gitlab.com/cznic/sqlite/compare/v1.26.0...v1.27.0)

</details>

---

### Configuration

📅 **Schedule**: Branch creation - "before 4am on Monday" (UTC),
Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.

♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.

👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions) if
that's undesired.

---

- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box

---

This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/). View
repository job log
[here](https://developer.mend.io/github/cerbos/cerbos).

<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4zMS41IiwidXBkYXRlZEluVmVyIjoiMzcuNDYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->

---------

Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Signed-off-by: Oğuzhan Durgun <oguzhandurgun95@gmail.com>
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Oğuzhan Durgun <oguzhandurgun95@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@TristonianJones TristonianJones TristonianJones approved these changes

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

None yet
2 participants
@bboogler @TristonianJones