getsops / sops

Simple and flexible tool for managing secrets
https://getsops.io/
Mozilla Public License 2.0
16.58k stars 865 forks source link

build(deps): Bump the go group across 1 directory with 15 updates #1542

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps the go group with 9 updates in the / directory:

Package From To
cloud.google.com/go/storage 1.39.1 1.42.0
filippo.io/age 1.1.1 1.2.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity 1.6.0 1.7.0
github.com/ProtonMail/go-crypto 1.1.0-alpha.2 1.1.0-alpha.3-proton
github.com/aws/aws-sdk-go-v2 1.27.2 1.30.0
github.com/aws/aws-sdk-go-v2/config 1.27.18 1.27.21
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.16.24 1.17.1
github.com/aws/aws-sdk-go-v2/service/kms 1.32.3 1.34.1
google.golang.org/protobuf 1.34.1 1.34.2

Updates cloud.google.com/go/storage from 1.39.1 to 1.42.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.42.0

1.42.0 (2024-06-10)

Features

  • storage: Add new package transfermanager. This package is intended for parallel uploads and downloads, and is in preview. It is not stable, and is likely to change. (#10045) (cde5cbb)
  • storage: Add bucket HierarchicalNamespace (#10315) (b92406c), refs #10146
  • storage: Add BucketName to BucketHandle (#10127) (203cc59)

Bug Fixes

  • storage: Set invocation headers on xml reads (#10250) (c87e1ab)

Documentation

storage: v1.41.0

1.41.0 (2024-05-13)

Features

  • storage/control: Make Managed Folders operations public (264a6dc)
  • storage: Support for soft delete policies and restore (#9520) (985deb2)

Bug Fixes

  • storage/control: An existing resource pattern value projects/{project}/buckets/{bucket}/managedFolders/{managedFolder=**} to resource definition storage.googleapis.com/ManagedFolder is removed (3e25053)
  • storage: Add internaloption.WithDefaultEndpointTemplate (3b41408)
  • storage: Bump x/net to v0.24.0 (ba31ed5)
  • storage: Disable gax retries for gRPC (#9747) (bbfc0ac)
  • storage: More strongly match regex (#9706) (3cfc8eb), refs #9705
  • storage: Retry net.OpError on connection reset (#10154) (54fab10), refs #9478
  • storage: Wrap error when MaxAttempts is hit (#9767) (9cb262b), refs #9720

Documentation

  • storage/control: Update storage control documentation and add PHP for publishing (1d757c6)
Commits
  • 22e90d9 chore(main): release spanner 1.42.0 (#7130)
  • 2552e09 fix(spanner): fallback to check grpc error message if ResourceType is nil for...
  • 6bb95ef feat(spanner): add database roles (#5701)
  • f2b1f1b chore(bigquery/storage/managedwriter): internal refactor (flow controller, id...
  • bcc9fcd test(bigtable): expand integration tests for read stats (#7143)
  • ab332ce fix(internal/gapicgen): disable rest for non-rest APIs (#7157)
  • dc89409 chore(main): release pubsublite 1.6.0 (#7129)
  • 5fa8555 feat(pubsublite): create/update export subscriptions (#6885)
  • 176f533 feat(pubsublite): unload idle partition publishers (#7105)
  • 28f3572 feat(all): enable REGAPIC and REST numeric enums (#6999)
  • Additional commits viewable in compare view


Updates filippo.io/age from 1.1.1 to 1.2.0

Release notes

Sourced from filippo.io/age's releases.

age v1.2.0

A small release to build the release binaries with a more recent Go toolchain, and to fix a couple CLI edge cases (FiloSottile/age#491, FiloSottile/age#555).

The Go module now exposes a plugin package that provides an age plugin client. That is, Recipient and Identity implementations that invoke a plugin binary, allowing the use of age plugins in Go programs.

Finally, Recipients can now return a set of "labels" by implementing RecipientWithLabels. This allows replicating the special behavior of the scrypt Recipient in third-party Recipients, or applying policy useful for authenticated or post-quantum Recipients.

// RecipientWithLabels can be optionally implemented by a Recipient, in which
// case Encrypt will use WrapWithLabels instead of Wrap.
//
// Encrypt will succeed only if the labels returned by all the recipients
// (assuming the empty set for those that don't implement RecipientWithLabels)
// are the same.
//
// This can be used to ensure a recipient is only used with other recipients
// with equivalent properties (for example by setting a "postquantum" label) or
// to ensure a recipient is always used alone (by returning a random label, for
// example to preserve its authentication properties).
type RecipientWithLabels interface {
    WrapWithLabels(fileKey []byte) (s []*Stanza, labels []string, err error)
}
Commits
  • bbe6ce5 .github/workflows: update artifacts Actions
  • 1e1bada .github/workflows: go-version stable, not latest
  • 2293a9a .github/workflows: use latest Go for bootstrap
  • 01fe9cd README: add pkgx installation instructions
  • bd0511b cmd/age: detect output/input file reuse when possible
  • febaade cmd/age: create file for empty decryptions
  • 0a40718 doc: regenerate groff and html man pages
  • 7ed4868 .github/workflows: apparently setup-go has no defaults
  • 2a761fc .github/workflows: update GitHub Actions
  • 98e7afc all: upgrade dependencies
  • Additional commits viewable in compare view


Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.6.0 to 1.7.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/messaging/azservicebus/v1.7.0

1.7.0 (2024-04-02)

Features Added

  • Add in ability to handle emulator connection strings. (PR#22663)

sdk/internal/v1.7.0

1.7.0 (2024-05-01)

Features Added

  • Support for local repo override (via presence of eng/target_proxy_version.txt) of invoked test-proxy version.

  • RemoveRegisteredSanitizers selectively disables sanitizers the test proxy enables by default since version 1.0.0-dev.20240422.1

Breaking Changes

  • Deprecated the go-vcr based test recording API. Its methods now return errors or panic.
  • Changed value of recording.SanitizedValue from "sanitized" to "Sanitized" to match the test proxy

sdk/azidentity/v1.7.0

1.7.0 (2024-06-20)

Features Added

  • AzurePipelinesCredential authenticates an Azure Pipelines service connection with workload identity federation

Breaking Changes

These changes affect only code written against a beta version such as v1.7.0-beta.1

  • Removed the persistent token caching API. It will return in v1.8.0-beta.1

sdk/azidentity/v1.7.0-beta.1

1.7.0-beta.1 (2024-06-10)

Features Added

  • Restored AzurePipelinesCredential and persistent token caching API

Breaking Changes

These changes affect only code written against a beta version such as v1.6.0-beta.4

  • Values which NewAzurePipelinesCredential read from environment variables in prior versions are now parameters
  • Renamed AzurePipelinesServiceConnectionCredentialOptions to AzurePipelinesCredentialOptions

Bugs Fixed

  • Managed identity bug fixes
Commits


Updates github.com/ProtonMail/go-crypto from 1.1.0-alpha.2 to 1.1.0-alpha.3-proton

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

v1.1.0-alpha.3-proton

This pre-release is v1.1.0-alpha.3 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

v1.1.0-alpha.1-proton

This pre-release is v1.1.0-alpha.1 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

v1.1.0-alpha.0-proton

This pre-release is v1.1.0-alpha.0 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

v1.1.0-alpha.3

What's Changed

  • New functions to verify signature hash tags
  • Allow parsing certifications explicitly marked as exportable
  • Sorting signature sub-packets by their ID when serializing
  • Mark creation time, issuer key ID, and key flag signature sub-packets as critical
  • When AEAD is in use, the session key length is now determined by the cipher specified in the AEAD preference.

Full Changelog: v1.1.0-alpha.2...v1.1.0-alpha.3

Commits
  • dfc5210 Fix HMAC generation (#204)
  • a0d3abb Replace ioutil.ReadAll with io.ReadAll
  • 12d80ee fix(v2): Adapt NewForwardingEntity to refactored NewEntity
  • 00db3be fix(v2): Do not allow encrpytion with a forwarding key
  • 49c1020 feat: Add symmetric keys to v2
  • bce9b31 fix: Address warnings
  • e202bef feat: Add forwarding to v2 api
  • 2a86d28 fix: Address rebase on version 2 issues
  • a425074 Use fingerprints instead of KeyIDs
  • b55bb97 Create a copy of the encrypted key when forwarding
  • Additional commits viewable in compare view


Updates github.com/aws/aws-sdk-go-v2 from 1.27.2 to 1.30.0

Commits


Updates github.com/aws/aws-sdk-go-v2/config from 1.27.18 to 1.27.21

Commits


Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.18 to 1.17.21

Commits


Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.16.24 to 1.17.1

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/feature/s3/manager's changelog.

Release (2022-10-24)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/feature/ec2/imds: v1.12.19
    • Bug Fix: Fixes an issue that prevented logging of the API request or responses when the respective log modes were enabled.
  • github.com/aws/aws-sdk-go-v2/service/acmpca: v1.19.0
    • Feature: AWS Private Certificate Authority (AWS Private CA) now offers usage modes which are combination of features to address specific use cases.
  • github.com/aws/aws-sdk-go-v2/service/batch: v1.19.0
    • Feature: This release adds support for AWS Batch on Amazon EKS.
  • github.com/aws/aws-sdk-go-v2/service/datasync: v1.19.0
    • Feature: Added support for self-signed certificates when using object storage locations; added BytesCompressed to the TaskExecution response.
  • github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.50.0
    • Feature: SageMaker Inference Recommender now supports a new API ListInferenceRecommendationJobSteps to return the details of all the benchmark we create for an inference recommendation job.

Release (2022-10-21)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2: v1.17.0
    • Feature: Adds aws.IsCredentialsProvider for inspecting CredentialProvider types when needing to determine if the underlying implementation type matches a target type. This resolves an issue where CredentialsCache could mask AnonymousCredentials providers, breaking downstream detection logic.
  • github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider: v1.21.0
    • Feature: This release adds a new "DeletionProtection" field to the UserPool in Cognito. Application admins can configure this value with either ACTIVE or INACTIVE value. Setting this field to ACTIVE will prevent a user pool from accidental deletion.
  • github.com/aws/aws-sdk-go-v2/service/eventbridge: v1.16.16
    • Bug Fix: The SDK client has been updated to utilize the aws.IsCredentialsProvider function for determining if aws.AnonymousCredentials has been configured for the CredentialProvider.
  • github.com/aws/aws-sdk-go-v2/service/s3: v1.29.0
    • Feature: S3 on Outposts launches support for automatic bucket-style alias. You can use the automatic access point alias instead of an access point ARN for any object-level operation in an Outposts bucket.
    • Bug Fix: The SDK client has been updated to utilize the aws.IsCredentialsProvider function for determining if aws.AnonymousCredentials has been configured for the CredentialProvider.
  • github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.49.0
    • Feature: CreateInferenceRecommenderjob API now supports passing endpoint details directly, that will help customers to identify the max invocation and max latency they can achieve for their model and the associated endpoint along with getting recommendations on other instances.
  • github.com/aws/aws-sdk-go-v2/service/sts: v1.17.0
    • Feature: Add presign functionality for sts:AssumeRole operation

Release (2022-10-20)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/devopsguru: v1.20.0
    • Feature: This release adds information about the resources DevOps Guru is analyzing.
  • github.com/aws/aws-sdk-go-v2/service/globalaccelerator: v1.15.0
    • Feature: Global Accelerator now supports AddEndpoints and RemoveEndpoints operations for standard endpoint groups.
  • github.com/aws/aws-sdk-go-v2/service/resiliencehub: v1.7.0
    • Feature: In this release, we are introducing support for regional optimization for AWS Resilience Hub applications. It also includes a few documentation updates to improve clarity.
  • github.com/aws/aws-sdk-go-v2/service/rum: v1.7.0
    • Feature: CloudWatch RUM now supports Extended CloudWatch Metrics with Additional Dimensions

Release (2022-10-19)

... (truncated)

Commits


Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.32.3 to 1.34.1

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/service/kms's changelog.

Release (2023-06-15)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.25.0
    • Feature: This release introduces 2 Audit Manager features: CSV exports and new manual evidence options. You can now export your evidence finder results in CSV format. In addition, you can now add manual evidence to a control by entering free-form text or uploading a file from your browser.
  • github.com/aws/aws-sdk-go-v2/service/efs: v1.20.3
    • Documentation: Documentation updates for EFS.
  • github.com/aws/aws-sdk-go-v2/service/guardduty: v1.23.2
    • Documentation: Updated descriptions for some APIs.
  • github.com/aws/aws-sdk-go-v2/service/location: v1.24.0
    • Feature: Amazon Location Service adds categories to places, including filtering on those categories in searches. Also, you can now add metadata properties to your geofences.

Release (2023-06-13)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/cloudtrail: v1.27.0
    • Feature: This feature allows users to view dashboards for CloudTrail Lake event data stores.
  • github.com/aws/aws-sdk-go-v2/service/codegurusecurity: v1.0.0
    • Release: New AWS service client module
    • Feature: Initial release of Amazon CodeGuru Security APIs
  • github.com/aws/aws-sdk-go-v2/service/drs: v1.14.0
    • Feature: Added APIs to support network replication and recovery using AWS Elastic Disaster Recovery.
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.100.0
    • Feature: This release introduces a new feature, EC2 Instance Connect Endpoint, that enables you to connect to a resource over TCP, without requiring the resource to have a public IPv4 address.
  • github.com/aws/aws-sdk-go-v2/service/imagebuilder: v1.23.5
    • Documentation: Change the Image Builder ImagePipeline dateNextRun field to more accurately describe the data.
  • github.com/aws/aws-sdk-go-v2/service/lightsail: v1.27.0
    • Feature: This release adds pagination for the Get Certificates API operation.
  • github.com/aws/aws-sdk-go-v2/service/s3: v1.34.0
    • Feature: Integrate double encryption feature to SDKs.
    • Bug Fix: Fix HeadObject to return types.Nound when an object does not exist. Fixes 2084
  • github.com/aws/aws-sdk-go-v2/service/securityhub: v1.33.0
    • Feature: Add support for Security Hub Automation Rules
  • github.com/aws/aws-sdk-go-v2/service/simspaceweaver: v1.3.0
    • Feature: This release fixes using aws-us-gov ARNs in API calls and adds documentation for snapshot APIs.
  • github.com/aws/aws-sdk-go-v2/service/verifiedpermissions: v1.0.0
    • Release: New AWS service client module
    • Feature: GA release of Amazon Verified Permissions.
  • github.com/aws/aws-sdk-go-v2/service/wafv2: v1.35.0
    • Feature: You can now detect and block fraudulent account creation attempts with the new AWS WAF Fraud Control account creation fraud prevention (ACFP) managed rule group AWSManagedRulesACFPRuleSet.
  • github.com/aws/aws-sdk-go-v2/service/wellarchitected: v1.21.0
    • Feature: AWS Well-Architected now supports Profiles that help customers prioritize which questions to focus on first by providing a list of prioritized questions that are better aligned with their business goals and outcomes.

Release (2023-06-12)

... (truncated)

Commits


Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.55.1 to 1.56.1

Commits


Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.28.12 to 1.29.1

Commits


Updates google.golang.org/api from 0.180.0 to 0.183.0

Release notes

Sourced from google.golang.org/api's releases.

v0.183.0

0.183.0 (2024-06-04)

Features

Bug Fixes

v0.182.0

0.182.0 (2024-05-28)

Features

v0.181.0

0.181.0 (2024-05-16)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.183.0 (2024-06-04)

Features

Bug Fixes

0.182.0 (2024-05-28)

Features

0.181.0 (2024-05-16)

Features

Commits


Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20240509183442-62759503f434 to 0.0.0-20240528184218-531527333157

<... _Description has been truncated_
felixfontein commented 3 months ago

@dependabot rebase

dependabot[bot] commented 3 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.