Closed renovate[bot] closed 7 months ago
[puLL-Merge] - rs/zerolog@v1.31.0..v1.32.0
This pull request makes several changes and improvements to the zerolog library, including:
TriggerLevelWriter
, HTTPVersionHandler
, HostHandler
etcio.Discard
instead of deprecated ioutil.Discard
log.Fatal
not flushing buffered messages The motivation seems to be adding useful new features, fixing bugs, and general code cleanup and modernization.
cmd/prettylog/prettylog.go
: File paths are read from command line args which could lead to opening arbitrary files if user controlled. Risk is low.hlog/hlog.go
: Several HTTP request fields like host, IP, headers are logged. Ensure sensitive headers are filtered out. Risk is low.The rest of the changes look safe. The core zerolog APIs have not changed in backwards incompatible ways. There don't seem to be any obvious vulnerabilities introduced, assuming the library is used as intended.
This PR contains the following updates:
v1.31.0
->v1.32.0
Release Notes
rs/zerolog (github.com/rs/zerolog)
### [`v1.32.0`](https://togithub.com/rs/zerolog/compare/v1.31.0...v1.32.0) [Compare Source](https://togithub.com/rs/zerolog/compare/v1.31.0...v1.32.0)Configuration
📅 Schedule: Branch creation - " 0-4 * 3" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
â™» Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.