cloudfoundry / libbuildpack

A library for writing buildpacks
Apache License 2.0
35 stars 31 forks source link

Bump github.com/jarcoal/httpmock from 1.1.0 to 1.2.0 #159

Closed dependabot[bot] closed 2 years ago

dependabot[bot] commented 2 years ago

Bumps github.com/jarcoal/httpmock from 1.1.0 to 1.2.0.

Release notes

Sourced from github.com/jarcoal/httpmock's releases.

v1.2.0

New features:

Fixes:

  • url.RawPath is used instead of url.Path when checking path alone for consistency with full URL check, which is always unescaped. Let 2 registered responders:

    1. GET http://z.tld/foo%2fbar
    2. GET /foo%2fbar

    Before this release:

    • GET http://z.tld/foo%2fbar is caught by 1
    • GET http://unknown.tld/foo%2fbar is not caught as the tested path is /foo/bar instead of /foo%2fbar

    From this release:

    • GET http://z.tld/foo%2fbar is caught by 1
    • GET http://unknown.tld/foo%2fbar is caught by 2
  • save of old clients transports is now protected from concurrent writes (@​roboslone).

Miscellaneous:

  • now use go-testdeep to simplify tests (saves >500 test lines);
  • go minimal version required is now 1.9;
  • CI tests using go1.18 & golangci-lint v1.45.0;
  • signatures (and so documentation) now use any type instead of interface{}, as appeared in go 1.18 (in a compatible manner with go<1.18).

Enjoy!

Commits
  • fbf2267 Merge pull request #128 from roboslone/v1
  • da037fb fix concurrent map writes to oldClients
  • 70189fd Merge pull request #127 from jarcoal/td-example
  • 3cfaf8f docs: add go-testdeep example
  • 377286a Merge pull request #126 from jarcoal/any
  • afe87ee refactor: since go1.18 use any instead of interface{}
  • bbd5dcb Merge pull request #125 from jarcoal/go118
  • 6b1d576 ci: enable go1.18 + upgrade golangci-lint to v1.45.0
  • 0be0f8b Merge pull request #124 from jarcoal/responders
  • 9bab136 feat: add (*MockTransport).Responders() method
  • Additional commits viewable in compare view


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)