search

getsops / sops

Simple and flexible tool for managing secrets
https://getsops.io/
Mozilla Public License 2.0
15.77k stars 842 forks source link

build(deps): Bump the go group across 1 directory with 24 updates #1515

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps the go group with 11 updates in the / directory:

Package From To
cloud.google.com/go/kms 1.15.7 1.17.1
github.com/Azure/azure-sdk-for-go/sdk/azcore 1.9.2 1.11.1
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.5.1 1.5.2
github.com/ProtonMail/go-crypto 1.1.0-alpha.0-proton 1.1.0-alpha.2
github.com/aws/aws-sdk-go-v2 1.25.0 1.27.0
github.com/aws/aws-sdk-go-v2/config 1.27.0 1.27.16
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.16.0 1.16.21
github.com/aws/aws-sdk-go-v2/service/kms 1.28.1 1.32.1
github.com/fatih/color 1.16.0 1.17.0
github.com/hashicorp/vault/api 1.12.0 1.14.0
github.com/urfave/cli 1.22.14 1.22.15

Updates cloud.google.com/go/kms from 1.15.7 to 1.17.1

Release notes

Sourced from cloud.google.com/go/kms's releases.

kms: v1.17.1

1.17.1 (2024-05-22)

Bug Fixes

datastore: v1.17.0

1.17.0 (2024-05-08)

Features

kms: v1.17.0

1.17.0 (2024-05-16)

Features

  • kms: Add client library for KMS Autokey service, which enables automated KMS key provision and management (292e812)

security: v1.17.0

1.17.0 (2024-05-22)

Features

retail: v1.16.2

1.16.2 (2024-05-01)

Bug Fixes

  • retail: Bump x/net to v0.24.0 (ba31ed5)

security: v1.16.1

1.16.1 (2024-05-01)

Bug Fixes

  • security: Bump x/net to v0.24.0 (ba31ed5)

dataplex: v1.16.0

1.16.0 (2024-05-08)

... (truncated)

Commits


Updates cloud.google.com/go/storage from 1.38.0 to 1.39.1

Commits
  • 71dc4c6 chore(main): release storage 1.39.1 (#9524)
  • ae7dc65 chore(apphub): add config to generate apiv1 (#9550)
  • 50fcc6e chore(main): release bigtable 1.22.0 (#9551)
  • 74dcd1f chore(securitycenter): add config to generate apiv2 (#9549)
  • 3f4d7c2 chore(cloudcontrolspartner): add config to generate apiv1 (#9548)
  • 48614ab chore(bigtable): release 1.22.0 (#9547)
  • 511d9b2 fix(vertexai): clarify Client.GenerativeModel documentation (#9533)
  • f0a2781 chore: re-drop weak refs to parent modules and tag (#9545)
  • bdf2f17 chore(main): release auth 0.1.1 (#8920)
  • 9b97ce7 feat(spanner/spansql): support Table rename & Table synonym (#9275)
  • Additional commits viewable in compare view


Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.9.2 to 1.11.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.11.1

1.11.1 (2024-04-02)

Bugs Fixed

  • Pollers that use the Location header won't consider http.StatusRequestTimeout a terminal failure.
  • runtime.Poller[T].Result won't consider non-terminal error responses as terminal.

sdk/azcore/v1.11.0

1.11.0 (2024-04-01)

Features Added

  • Added StatusCodes to arm/policy.RegistrationOptions to allow supporting non-standard HTTP status codes during registration.
  • Added field InsecureAllowCredentialWithHTTP to azcore.ClientOptions and dependent authentication pipeline policies.
  • Added type MultipartContent to the streaming package to support multipart/form payloads with custom Content-Type and file name.

Bugs Fixed

  • runtime.SetMultipartFormData won't try to stringify []byte values.
  • Pollers that use the Location header won't consider http.StatusTooManyRequests a terminal failure.

Other Changes

  • Update dependencies.
Commits
  • 76e5495 Prep azcore@v1.11.1 for release (#22680)
  • 2650473 Increment package version after release of messaging/azeventhubs (#22677)
  • 51ef615 runtime.Poller.Result won't be done on non-terminal error (#22675)
  • aef7678 Increment package version after release of messaging/azservicebus (#22678)
  • a67b4de Increment package version after release of messaging/eventgrid/azeventgrid (#...
  • e978d51 [azopenai] Updating doc comments based on feedback from an issue, as well as ...
  • 4116d5d Don't consider 408 as terminal failure for Location poller (#22674)
  • e036aea Sync eng/common directory with azure-sdk-tools for PR 7989 (#22673)
  • 53f73ad Sync eng/common directory with azure-sdk-tools for PR 7988 (#22672)
  • 9e78ee2 [azeventgrid] Prepping for first GA of the Event Grid Basic package. (#22667)
  • Additional commits viewable in compare view


Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.5.1 to 1.5.2

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.5.2

1.5.2 (2024-04-09)

Bugs Fixed

  • ManagedIdentityCredential now specifies resource IDs correctly for Azure Container Instances

Other Changes

  • Restored v1.4.0 error behavior for empty tenant IDs
  • Upgraded dependencies
Commits
  • 299ebfe Prepare internal for release (#22339)
  • d00123d Update packages (#22338)
  • 0a332e3 Fix issue in Verify-Link.ps1 after PS 7.4 update (#22336)
  • c8ae7ed Sync eng/common directory with azure-sdk-tools for PR 7615 (#22335)
  • 9ae828c Replace ErrAuthenticationRequired with AuthenticationRequiredError (#22317)
  • 7c50f09 [Release] sdk/resourcemanager/springappdiscovery/armspringappdiscovery/0.1.0 ...
  • b36de61 Added spec location verification to the release pipeline (#22301)
  • 00f2b8b Go SDK for Azure Web PubSub Data plane (#21929)
  • 0aa2409 Sync eng/common directory with azure-sdk-tools for PR 7585 (#22312)
  • 572ba1f JSON marshaling helpers will preserve Content-Type (#22309)
  • Additional commits viewable in compare view


Updates github.com/ProtonMail/go-crypto from 1.1.0-alpha.0-proton to 1.1.0-alpha.2

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

v1.1.0-alpha.1

What's Changed

Removes the openpgp.VerifyDetachedSignatureAndSaltedHash function and the packet.SaltedHashSpecifier as they are no longer required. They were introduced for verifying the headers in cleartext messages. However, in the latest crypto-refresh specification, cleartext message headers were dropped.

Full Changelog: v1.1.0-alpha.0...v1.1.0-alpha.1

v1.1.0-alpha.1-proton

This pre-release is v1.1.0-alpha.1 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

Commits


Updates github.com/aws/aws-sdk-go-v2 from 1.25.0 to 1.27.0

Commits


Updates github.com/aws/aws-sdk-go-v2/config from 1.27.0 to 1.27.16

Commits


Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.0 to 1.17.16

Commits


Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.0 to 1.16.21

Commits


Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.28.1 to 1.32.1

Commits


Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.49.0 to 1.54.3

Commits


Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.27.0 to 1.28.10

Commits


Updates github.com/fatih/color from 1.16.0 to 1.17.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.17.0

What's Changed

New Contributors

Full Changelog: https://github.com/fatih/color/compare/v1.16.0...v1.17.0

Commits
  • b6598b1 Merge pull request #228 from klauspost/fix-println-issue-218
  • 00b1811 Fix multi-parameter println spacing
  • 04994a8 Merge pull request #224 from fatih/dependabot/go_modules/golang.org/x/sys-0.18.0
  • 7526cad Merge branch 'main' into dependabot/go_modules/golang.org/x/sys-0.18.0
  • 8d058ca Merge pull request #222 from fatih/ci-updates
  • 2ac809f Bump golang.org/x/sys from 0.17.0 to 0.18.0
  • 51a7bbf ci: update Go and Staticcheck versions
  • 799c49c Merge pull request #217 from fatih/dependabot/github_actions/actions/setup-go-5
  • f8e0ec9 Merge branch 'main' into dependabot/github_actions/actions/setup-go-5
  • 298abd8 Merge pull request #221 from fatih/dependabot/go_modules/golang.org/x/sys-0.17.0
  • Additional commits viewable in compare view


Updates github.com/golang/protobuf from 1.5.3 to 1.5.4

Release notes

Sourced from github.com/golang/protobuf's releases.

v1.5.4

Notable changes

  • update descriptor.proto to latest version
Commits


Updates github.com/hashicorp/vault/api from 1.12.0 to 1.14.0

Release notes

Sourced from github.com/hashicorp/vault/api's releases.

v1.14.0

1.14.0

June 21, 2023

BREAKING CHANGES:

  • secrets/pki: Maintaining running count of certificates will be turned off by default. To re-enable keeping these metrics available on the tidy status endpoint, enable maintain_stored_certificate_counts on tidy-config, to also publish them to the metrics consumer, enable publish_stored_certificate_count_metrics . [GH-18186]

CHANGES:

  • auth/alicloud: Updated plugin from v0.14.0 to v0.15.0 [GH-20758]
  • auth/azure: Updated plugin from v0.13.0 to v0.15.0 [GH-20816]
  • auth/centrify: Updated plugin from v0.14.0 to v0.15.1 [GH-20745]
  • auth/gcp: Updated plugin from v0.15.0 to v0.16.0 [GH-20725]
  • auth/jwt: Updated plugin from v0.15.0 to v0.16.0 [GH-20799]
  • auth/kubernetes: Update plugin to v0.16.0 [GH-20802]
  • core: Bump Go version to 1.20.5.
  • core: Remove feature toggle for SSCTs, i.e. the env var VAULT_DISABLE_SERVER_SIDE_CONSISTENT_TOKENS. [GH-20834]
  • core: Revert #19676 (VAULT_GRPC_MIN_CONNECT_TIMEOUT env var) as we decided it was unnecessary. [GH-20826]
  • database/couchbase: Updated plugin from v0.9.0 to v0.9.2 [GH-20764]
  • database/redis-elasticache: Updated plugin from v0.2.0 to v0.2.1 [GH-20751]
  • replication (enterprise): Add a new parameter for the update-primary API call that allows for setting of the primary cluster addresses directly, instead of via a token.
  • secrets/ad: Updated plugin from v0.10.1-0.20230329210417-0b2cdb26cf5d to v0.16.0 [GH-20750]
  • secrets/alicloud: Updated plugin from v0.5.4-beta1.0.20230330124709-3fcfc5914a22 to v0.15.0 [GH-20787]
  • secrets/aure: Updated plugin from v0.15.0 to v0.16.0 [GH-20777]
  • secrets/database/mongodbatlas: Updated plugin from v0.9.0 to v0.10.0 [GH-20882]
  • secrets/database/snowflake: Updated plugin from v0.7.0 to v0.8.0 [GH-20807]
  • secrets/gcp: Updated plugin from v0.15.0 to v0.16.0 [GH-20818]
  • secrets/keymgmt: Updated plugin to v0.9.1
  • secrets/kubernetes: Update plugin to v0.5.0 [GH-20802]
  • secrets/mongodbatlas: Updated plugin from v0.9.1 to v0.10.0 [GH-20742]
  • secrets/pki: Allow issuance of root CAs without AIA, when templated AIA information includes issuer_id. [GH-21209]
  • secrets/pki: Warning when issuing leafs from CSRs with basic constraints. In the future, issuance of non-CA leaf certs from CSRs with asserted IsCA Basic Constraints will be prohibited. [GH-20654]

FEATURES:

  • AWS Static Roles: The AWS Secrets Engine can manage static roles configured by users. [GH-20536]
  • Automated License Utilization Reporting: Added automated license utilization reporting, which sends minimal product-license metering data to HashiCorp without requiring you to manually collect and report them.
  • Environment Variables through Vault Agent: Introducing a new process-supervisor mode for Vault Agent which allows injecting secrets as environment variables into a child process using a new env_template configuration stanza. The process-supervisor configuration can be generated with a new vault agent generate-config helper tool. [GH-20530]
  • MongoDB Atlas Database Secrets: Adds support for client certificate credentials [GH-20425]
  • MongoDB Atlas Database Secrets: Adds support for generating X.509 certificates on dynamic roles for user authentication [GH-20882]
  • NEW PKI Workflow in UI: Completes generally available rollout of new PKI UI that provides smoother mount configuration and a more guided user experience [GH-pki-ui-improvements]

... (truncated)

Changelog

Sourced from github.com/hashicorp/vault/api's changelog.

1.14.0

June 21, 2023

SECURITY:

  • ui: key-value v2 (kv-v2) diff viewer allowed HTML injection into the Vault web UI through key values. This vulnerability, CVE-2023-2121, is fixed in Vault 1.14.0, 1.13.3, 1.12.7, and 1.11.11. [HSEC-2023-17]

BREAKING CHANGES:

  • secrets/pki: Maintaining running count of certificates will be turned off by default. To re-enable keeping these metrics available on the tidy status endpoint, enable maintain_stored_certificate_counts on tidy-config, to also publish them to the metrics consumer, enable publish_stored_certificate_count_metrics . [GH-18186]

CHANGES:

  • auth/alicloud: Updated plugin from v0.14.0 to v0.15.0 [GH-20758]
  • auth/azure: Updated plugin from v0.13.0 to v0.15.0 [GH-20816]
  • auth/centrify: Updated plugin from v0.14.0 to v0.15.1 [GH-20745]
  • auth/gcp: Updated plugin from v0.15.0 to v0.16.0 [GH-20725]
  • auth/jwt: Updated plugin from v0.15.0 to v0.16.0 [GH-20799]
  • auth/kubernetes: Update plugin to v0.16.0 [GH-20802]
  • core: Bump Go version to 1.20.5.
  • core: Remove feature toggle for SSCTs, i.e. the env var VAULT_DISABLE_SERVER_SIDE_CONSISTENT_TOKENS. [GH-20834]
  • core: Revert #19676 (VAULT_GRPC_MIN_CONNECT_TIMEOUT env var) as we decided it was unnecessary. [GH-20826]
  • database/couchbase: Updated plugin from v0.9.0 to v0.9.2 [GH-20764]
  • database/redis-elasticache: Updated plugin from v0.2.0 to v0.2.1 [GH-20751]
  • replication (enterprise): Add a new parameter for the update-primary API call that allows for setting of the primary cluster addresses directly, instead of via a token.
  • secrets/ad: Updated plugin from v0.10.1-0.20230329210417-0b2cdb26cf5d to v0.16.0 [GH-20750]
  • secrets/alicloud: Updated plugin from v0.5.4-beta1.0.20230330124709-3fcfc5914a22 to v0.15.0 [GH-20787]
  • secrets/aure: Updated plugin from v0.15.0 to v0.16.0 [GH-20777]
  • secrets/database/mongodbatlas: Updated plugin from v0.9.0 to v0.10.0 [GH-20882]
  • secrets/database/snowflake: Updated plugin from v0.7.0 to v0.8.0 [GH-20807]
  • secrets/gcp: Updated plugin from v0.15.0 to v0.16.0 [GH-20818]
  • secrets/keymgmt: Updated plugin to v0.9.1
  • secrets/kubernetes: Update plugin to v0.5.0 [GH-20802]
  • secrets/mongodbatlas: Updated plugin from v0.9.1 to v0.10.0 [GH-20742]
  • secrets/pki: Allow issuance of root CAs without AIA, when templated AIA information includes issuer_id. [GH-21209]
  • secrets/pki: Warning when issuing leafs from CSRs with basic constraints. In the future, issuance of non-CA leaf certs from CSRs with asserted IsCA Basic Constraints will be prohibited. [GH-20654]

FEATURES:

  • AWS Static Roles: The AWS Secrets Engine can manage static roles configured by users. [GH-20536]
  • Automated License Utilization Reporting: Added automated license utilization reporting, which sends minimal product-license metering data to HashiCorp without requiring you to manually collect and report them.
  • Environment Variables through Vault Agent: Introducing a new process-supervisor mode for Vault Agent which allows injecting secrets as environment variables into a child process using a new env_template configuration stanza. The process-supervisor configuration can be generated with a new vault agent generate-config helper tool. [GH-20530]

... (truncated)

Commits
  • 13a649f backport of commit f12c1285599a1519273bfa68472c598b1fd635bf (#21348)
  • dd62be3 backport of commit 3908ec9dc44352548e08f4c86f9ad76c255ce493 (#21331)
  • 0fc55a2 backport of commit d76424cb53c730da5410ec55bff3274a01212843 (#21328)
  • 7733b6a backport of commit 3347e5d56b363e58e7be556cfd0875a210c2a2ec (#21326)
  • 1990a8c backport of commit 30aac443d0037852b0a5e4b50d59a9bedc5e4445 (#21324)
  • 15631d2 backport of commit a1fdf105b3cc2e88483f3fca27729fa06bfbfa7f (#21312)
  • a14ff6e backport of commit 41f392c43ff4c9077deb1d1640349b8ba867d139 (#21307)
  • 0610df0 backport of commit 042dd57811c900c9f6e2c85b5460d50560f79105 (#21295)
  • 2fd24b1 backport of commit 8cc7be234ac34ff0f703ab092a7314ba9e65b277 (#21293)
  • 9e85fef backport of commit c5549cdac681676ae52ea173d737ee1c5d1949a2 (#21272)
  • Additional commits viewable in compare view


Updates github.com/stretchr/testify from 1.8.4 to 1.9.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.9.0

What's Changed

... (truncated)

Commits
  • bb548d0 Merge pull request #1552 from stretchr/dependabot/go_modules/github.com/stret...
  • 814075f build(deps): bump github.com/stretchr/objx from 0.5.1 to 0.5.2
  • e045612 Merge pull request #1339 from bogdandrutu/uintptr
  • 5b6926d Merge pull request #1385 from hslatman/not-implements
  • 9f97d67 Merge pull request #1550 from stretchr/release-notes
  • bcb0d3f Include the auto-release notes in releases
  • fb770f8 Merge pull request #1247 from ccoVeille/typos
  • 85d8bb6 fix typos in comments, tests and github templates
  • e2741fa Merge pull request
    felixfontein commented 1 month ago

    @dependabot rebase

dependabot[bot] commented 1 month ago

Looks like these dependencies are updatable in another way, so this is no longer needed.