search

GoogleCloudPlatform / cloud-foundation-toolkit

The Cloud Foundation toolkit provides GCP best practices as code.
Apache License 2.0
947 stars 450 forks source link

chore(deps): update go modules #2468

Closed renovate-bot closed 1 month ago

renovate-bot commented 1 month ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
cloud.google.com/go/asset v1.19.4 -> v1.19.5 age adoption passing confidence require patch
github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test v0.16.0 -> v0.16.1 age adoption passing confidence require patch
github.com/gomarkdown/markdown 2eda941 -> 034f12a age adoption passing confidence require digest
github.com/open-policy-agent/opa v0.66.0 -> v0.67.0 age adoption passing confidence require minor

Release Notes

open-policy-agent/opa (github.com/open-policy-agent/opa) ### [`v0.67.0`](https://togithub.com/open-policy-agent/opa/releases/tag/v0.67.0) [Compare Source](https://togithub.com/open-policy-agent/opa/compare/v0.66.0...v0.67.0) This release contains a mix of features, a new builtin function (`strings.count`), performance improvements, and bugfixes. ##### Breaking Change ##### Request Body Size Limits OPA now automatically rejects very large requests ([#​6868](https://togithub.com/open-policy-agent/opa/pull/6868)) authored by [@​philipaconrad](https://togithub.com/philipaconrad). Requests with a `Content-Length` larger than 128 MB uncompressed, and gzipped requests with payloads that decompress to larger than 256 MB will be rejected, as part of hardening OPA against denial-of-service attacks. Previously, a large enough request could cause an OPA instance to run out of memory in low-memory sidecar deployment scenarios, just from attempting to read the request body into memory. These changes allow improvements in memory usage for the OPA HTTP server, and help OPA deployments avoid some accidental out-of-memory situations. For most users, no changes will be needed to continue using OPA. However, to control this behavior, two new configuration keys are available: `server.decoding.max_length` and `server.decoding.gzip.max_length`. These control the max size in bytes to allow for an incoming request payload, and the maximum size in bytes to allow for a decompressed gzip request payload, respectively. Here's an example OPA configuration using the new keys: ```yaml ### Set max request size to 64 MB and max gzip size (decompressed) to be 128 MB. server: decoding: max_length: 67108864 gzip: max_length: 134217728 ``` ##### Topdown and Rego - topdown: New `strings.count` builtin which returns the number of non-overlapping instances of a substring in a string ([#​6827](https://togithub.com/open-policy-agent/opa/issues/6827)) authored by [@​Manish-Giri](https://togithub.com/Manish-Giri) - format: Produce error when `--rego-v1` formatted module has rule name conflicting with keyword ([#​6833](https://togithub.com/open-policy-agent/opa/issues/6833)) authored by [@​johanfylling](https://togithub.com/johanfylling) - topdown: Add cap to caches for regex and glob built-in functions ([#​6828](https://togithub.com/open-policy-agent/opa/issues/6828)) authored by [@​johanfylling](https://togithub.com/johanfylling). This fixes possible memory leaks where caches grow uncontrollably when large amounts of regexes or globs are generated or originate from the input document. ##### Runtime, Tooling, SDK - repl: Add support for correctly loading bundle modules ([#​6872](https://togithub.com/open-policy-agent/opa/issues/6872)) authored by [@​ashutosh-narkar](https://togithub.com/ashutosh-narkar) - plugins/discovery: Allow un-registration of discovery listener ([#​6851](https://togithub.com/open-policy-agent/opa/pull/6851)) authored by [@​mjungsbluth](https://togithub.com/mjungsbluth). The discovery plugin allows OPA to register a bundle download status listener but previously did not offer a method to unregister that listener - plugins/logs: Reduce amount of work performed inside global lock in decision log plugin ([#​6859](https://togithub.com/open-policy-agent/opa/pull/6859)) authored by [@​johanfylling](https://togithub.com/johanfylling) - plugins/rest: Add a new client credential attribute to support Azure Workload Identity. This would allow workloads deployed on an Azure Kubernetes Services (AKS) cluster to authenticate and access Azure cloud resources ([#​6802](https://togithub.com/open-policy-agent/opa/pull/6802)) authored by [@​ledbutter](https://togithub.com/ledbutter) - cmd/inspect: Add ability for opa inspect to inspect a single file outside of any bundle ([#​6873](https://togithub.com/open-policy-agent/opa/pull/6873)) authored by [@​tjons](https://togithub.com/tjons) - cmd+bundle: Add `--follow-symlinks` flag to the `opa build` command to allow users to build directories with symlinked files, and have the contents of those symlinked files included in the built bundle ([#​6800](https://togithub.com/open-policy-agent/opa/pull/6800)) authored by [@​tjons](https://togithub.com/tjons) - server: Add missing handling in the server for the `explain=fails` query value ([#​6886](https://togithub.com/open-policy-agent/opa/pull/6886)) authored by [@​acamatcisco](https://togithub.com/acamatcisco) ##### Docs, Website, Ecosystem - docs: Update bundle section with an example of a manifest with `rego_version` and `file_rego_versions` attributes ([#​6885](https://togithub.com/open-policy-agent/opa/pull/6885)) authored by [@​ashutosh-narkar](https://togithub.com/ashutosh-narkar) - docs: Better link language SDKs to make them more discoverable ([#​6866](https://togithub.com/open-policy-agent/opa/pull/6866)) authored by [@​charlieegan3](https://togithub.com/charlieegan3) ##### Miscellaneous - ci: Add the OpenSSF Scorecard Github Action to help evaluate the OPA project's security posture ([#​6848](https://togithub.com/open-policy-agent/opa/pull/6848)) authored by [@​harshitasao](https://togithub.com/harshitasao) - Dependency updates; notably: - build(go): bump golang from 1.22.4 to 1.22.5 - build(deps): bump github.com/containerd/containerd from 1.7.18 to 1.7.20 - build(deps): bump golang.org/x/net from 0.26.0 to 0.27.0 - build(deps): bump google.golang.org/grpc from 1.64.0 to 1.65.0 - build(deps): bump go.opentelemetry.io modules ([#​6847](https://togithub.com/open-policy-agent/opa/pull/6847))

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

This PR was generated by Mend Renovate. View the repository job log.

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

forking-renovate[bot] commented 1 month ago

ℹ Artifact update notice

File name: cli/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

Details:

Package Change
github.com/cenkalti/backoff/v4 v4.2.1 -> v4.3.0
github.com/cespare/xxhash/v2 v2.2.0 -> v2.3.0
github.com/golang/glog v1.2.0 -> v1.2.1
github.com/googleapis/gax-go/v2 v2.12.5 -> v2.13.0
github.com/grpc-ecosystem/grpc-gateway/v2 v2.16.0 -> v2.20.0
github.com/gruntwork-io/terratest v0.46.15 -> v0.47.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 -> v0.53.0
go.opentelemetry.io/otel v1.24.0 -> v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.21.0 -> v1.28.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.21.0 -> v1.28.0
go.opentelemetry.io/otel/metric v1.24.0 -> v1.28.0
go.opentelemetry.io/otel/sdk v1.24.0 -> v1.28.0
go.opentelemetry.io/otel/trace v1.24.0 -> v1.28.0
go.opentelemetry.io/proto/otlp v1.0.0 -> v1.3.1
google.golang.org/genproto/googleapis/api v0.0.0-20240701130421-f6361c86f094 -> v0.0.0-20240722135656-d784300faade
google.golang.org/grpc v1.64.1 -> v1.65.0
sigs.k8s.io/kustomize/kyaml v0.17.1 -> v0.17.2
dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

dpebot commented 1 month ago

/gcbrun

forking-renovate[bot] commented 1 month ago

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.