Scalingo / go-utils

Small libraries and helpers concerning errors, logging, nsq
6 stars 2 forks source link

build(deps): bump github.com/gofrs/uuid/v5 from 5.2.0 to 5.3.0 in /httpclient in the dependencies group #957

Closed dependabot[bot] closed 2 weeks ago

dependabot[bot] commented 2 weeks ago

Bumps the dependencies group in /httpclient with 1 update: github.com/gofrs/uuid/v5.

Updates github.com/gofrs/uuid/v5 from 5.2.0 to 5.3.0

Release notes

Sourced from github.com/gofrs/uuid/v5's releases.

v5.3.0

Summary

In this release, we updated the package to participate in OpenSSF Scorecard and tuned several development workflows and added some fuzz tests. Additionally, We added AtTime generators for V1, V6, and V7 so that users may generate UUIDs from time stamps.

NOTE Technically, the additional of the AtTime generators is a breaking change to the Generator interface. We decided to go with a minor update because of the unlikelihood of this interface being implemented by a consumer, and to reduce the impact of releasing a major version for this feature.  

What's Changed

New Contributors

Full Changelog: https://github.com/gofrs/uuid/compare/v5.2.0...v5.3.0

Commits
  • e826b84 Add "AtTime" generators for V1, V6, and V7 (#142)
  • 190948b Bump actions/upload-artifact from 4.3.4 to 4.3.5 in the all group (#171)
  • 1643bf3 Bump the all group with 2 updates (#170)
  • e60730a Bump github/codeql-action from 3.25.12 to 3.25.13 in the all group (#169)
  • 2f6f9f4 chore: group GitHub Action updates (#168)
  • da52fd9 Bump github/codeql-action from 3.25.11 to 3.25.12 (#165)
  • 8595587 Bump actions/setup-go from 5.0.1 to 5.0.2 (#166)
  • fad3d14 Bump actions/dependency-review-action from 4.3.3 to 4.3.4 (#167)
  • 817d03c Bump actions/upload-artifact from 4.3.3 to 4.3.4 (#164)
  • b7cab94 Bump github/codeql-action from 3.25.10 to 3.25.11 (#163)
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions