search

gnolang / gno

Gno: An interpreted, stack-based Go virtual machine to build succinct and composable apps + Gno.land: a blockchain for timeless code and fair open-source.
https://gno.land/
Other
880 stars 364 forks source link

chore(deps): bump the everything-else group across 1 directory with 10 updates #2423

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 3 months ago

Bumps the everything-else group with 7 updates in the / directory:

Package From To
github.com/gorilla/websocket 1.5.1 1.5.3
github.com/rs/cors 1.10.1 1.11.0
go.etcd.io/bbolt 1.3.9 1.3.10
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc 1.25.0 1.27.0
golang.org/x/crypto 0.23.0 0.24.0
golang.org/x/net 0.25.0 0.26.0
google.golang.org/protobuf 1.34.1 1.34.2

Updates github.com/gorilla/websocket from 1.5.1 to 1.5.3

Release notes

Sourced from github.com/gorilla/websocket's releases.

v1.5.3

Important change

This reverts the websockets package back to https://github.com/gorilla/websocket/commit/931041c5ee6de24fe9cba1aa16f1a0b910284d6d

What's Changed

New Contributors

Full Changelog: https://github.com/gorilla/websocket/compare/v1.5.1...v1.5.3

v1.5.2

What's Changed

... (truncated)

Commits
  • ce903f6 Reverts to v1.5.0
  • 9ec25ca fixes broken random value generation
  • 1bddf2e bumps go version & removes deprecated module usage
  • 750bf92 adds GHA & Makefile configs
  • b2c246b Revert " Update go version & add verification/testing tools (#840)"
  • 09a6bab removing error handling while closing connections
  • 58af150 return errors instead of printing to logs
  • e5f1a0a excludes errchecks linter
  • b2a86a1 Do not timeout when WriteControl deadline is zero
  • 695e909 Remove hideTempErr to allow downstream users to check for errors like net.Err...
  • Additional commits viewable in compare view


Updates github.com/rs/cors from 1.10.1 to 1.11.0

Commits
  • 4c32059 Normalize allowed request headers and store them in a sorted set (fixes #170)...
  • 8d33ca4 Complete documentation; deprecate AllowOriginRequestFunc in favour of AllowOr...
  • af821ae Merge branch 'jub0bs-master'
  • 0bcf73f Update benchmark
  • eacc8e8 Fix skewed middleware benchmarks (#165)
  • 9297f15 Respect the documented precedence of options (#163)
  • 73f81b4 Fix readme benchmark rendering (#161)
  • See full diff in compare view


Updates go.etcd.io/bbolt from 1.3.9 to 1.3.10

Release notes

Sourced from go.etcd.io/bbolt's releases.

v1.3.10

See the CHANGELOG for more details.

Commits
  • 014b028 Merge pull request #744 from ahrtr/cursor_20240502
  • 2d48e1d Ensure a cursor can continue to iterate elements in reverse direction by call...
  • 886753c Merge pull request #717 from henrybear327/fix/remove_UnsafeSlice
  • 9e3d732 Remove UnsafeSlice and use unsafe.Slice
  • 2c29534 Merge pull request #713 from henrybear327/cve/CVE-2023-45288-release-1.3
  • 9b60c13 Address linter issues
  • 0b59bc1 Bump go toolchain version to address CVE-2023-45288
  • 9f3524b Merge pull request #716 from henrybear327/feat/introduce-go-version-file
  • 67a2678 Adopt the .go-version approach for toolchain versioning
  • See full diff in compare view


Updates go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc from 1.25.0 to 1.27.0

Changelog

Sourced from go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc's changelog.

[1.27.0/0.49.0/0.3.0] 2024-05-21

Added

  • Add example for go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#5242)
  • Add RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest to facilitate testing exporter and processor implementations. (#5258)
  • Add RecordFactory in go.opentelemetry.io/otel/log/logtest to facilitate testing bridge implementations. (#5263)
  • The count of dropped records from the BatchProcessor in go.opentelemetry.io/otel/sdk/log is logged. (#5276)
  • Add metrics in the otel-collector example. (#5283)
  • Add the synchronous gauge instrument to go.opentelemetry.io/otel/metric. (#5304)
    • An int64 or float64 synchronous gauge instrument can now be created from a Meter.
    • All implementations of the API (go.opentelemetry.io/otel/metric/noop, go.opentelemetry.io/otel/sdk/metric) are updated to support this instrument.
  • Add logs to go.opentelemetry.io/otel/example/dice. (#5349)

Changed

  • The Shutdown method of Exporter in go.opentelemetry.io/otel/exporters/stdout/stdouttrace ignores the context cancellation and always returns nil. (#5189)
  • The ForceFlush and Shutdown methods of the exporter returned by New in go.opentelemetry.io/otel/exporters/stdout/stdoutmetric ignore the context cancellation and always return nil. (#5189)
  • Apply the value length limits to Record attributes in go.opentelemetry.io/otel/sdk/log. (#5230)
  • De-duplicate map attributes added to a Record in go.opentelemetry.io/otel/sdk/log. (#5230)
  • go.opentelemetry.io/otel/exporters/stdout/stdoutlog won't print timestamps when WithoutTimestamps option is set. (#5241)
  • The go.opentelemetry.io/otel/exporters/stdout/stdoutlog exporter won't print AttributeValueLengthLimit and AttributeCountLimit fields now, instead it prints the DroppedAttributes field. (#5272)
  • Improved performance in the Stringer implementation of go.opentelemetry.io/otel/baggage.Member by reducing the number of allocations. (#5286)
  • Set the start time for last-value aggregates in go.opentelemetry.io/otel/sdk/metric. (#5305)
  • The Span in go.opentelemetry.io/otel/sdk/trace will record links without span context if either non-empty TraceState or attributes are provided. (#5315)
  • Upgrade all dependencies of go.opentelemetry.io/otel/semconv/v1.24.0 to go.opentelemetry.io/otel/semconv/v1.25.0. (#5374)

Fixed

  • Comparison of unordered maps for go.opentelemetry.io/otel/log.KeyValue and go.opentelemetry.io/otel/log.Value. (#5306)
  • Fix the empty output of go.opentelemetry.io/otel/log.Value in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#5311)
  • Split the behavior of Recorder in go.opentelemetry.io/otel/log/logtest so it behaves as a LoggerProvider only. (#5365)
  • Fix wrong package name of the error message when parsing endpoint URL in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5371)
  • Identify the Logger returned from the global LoggerProvider in go.opentelemetry.io/otel/log/global with its schema URL. (#5375)

[1.26.0/0.48.0/0.2.0-alpha] 2024-04-24

Added

  • Add Recorder in go.opentelemetry.io/otel/log/logtest to facilitate testing the log bridge implementations. (#5134)
  • Add span flags to OTLP spans and links exported by go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#5194)
  • Make the initial alpha release of go.opentelemetry.io/otel/sdk/log. This new module contains the Go implementation of the OpenTelemetry Logs SDK. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • Make the initial alpha release of go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. This new module contains an OTLP exporter that transmits log telemetry using HTTP. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • Make the initial alpha release of go.opentelemetry.io/otel/exporters/stdout/stdoutlog.

... (truncated)

Commits
  • 5661ff0 Release v1.27.0/v0.49.0/v0.3.0 (#5392)
  • 0d3dddc Fix exported instrument kind const value change (#5385)
  • 7aae7a8 chore(deps): update benchmark-action/github-action-benchmark action to v1.20....
  • 8c3120f chore(deps): update module google.golang.org/genproto/googleapis/api to v0.0....
  • d55658e chore(deps): update codecov/codecov-action action to v4.4.1 (#5387)
  • 49c866f fix(deps): update module github.com/golangci/golangci-lint to v1.58.2 (#5382)
  • 999c6a0 Update all semconv use to v1.25.0 (#5374)
  • 14441ae Identify logger with schemaURL in global logger provider (#5375)
  • ebd0ade Split log/logtest into a recorder and a logger (#5365)
  • 0d1e77c Fix package prefix of error in otlploghttp (#5371)
  • Additional commits viewable in compare view


Updates golang.org/x/crypto from 0.23.0 to 0.24.0

Commits
  • 332fd65 go.mod: update golang.org/x dependencies
  • 0b431c7 x509roots/fallback: update bundle
  • 349231f ssh: implement CryptoPublicKey on sk keys
  • 44c9b0f ssh: allow server auth callbacks to send additional banners
  • 67b1361 sha3: reenable s390x assembly
  • 477a5b4 sha3: make APIs usable with zero allocations
  • 59b5a86 sha3: disable s390x assembly
  • 10f366e sha3: simplify XOR functions
  • See full diff in compare view


Updates golang.org/x/mod from 0.16.0 to 0.17.0

Commits
  • aa51b25 modfile: do not collapse if there are unattached comments within blocks
  • 87140ec sumdb/tlog: make NewTiles only generate strictly necessary tiles
  • 18d3f56 modfile: fix crash on AddGoStmt in empty File
  • See full diff in compare view


Updates golang.org/x/net from 0.25.0 to 0.26.0

Commits
  • 66e838c go.mod: update golang.org/x dependencies
  • 6249541 http2: avoid race in server handler SetReadDeadine/SetWriteDeadline
  • 603e3e6 quic: disable X25519Kyber768Draft00 in tests
  • 67e8d0c http2: report an error if goroutines outlive serverTester tests
  • 5608279 http2: avoid corruption in priority write scheduler
  • 0d515a5 http2: factor out frame read/write test functions
  • 9f5b79b http2: drop unused retry function
  • 03c24c2 http2: use synthetic time in server tests
  • 022530c http2: add a more full-featured test net.Conn
  • 410d19e http2: avoid racy access to clientStream.requestedGzip
  • Additional commits viewable in compare view


Updates golang.org/x/term from 0.20.0 to 0.21.0

Commits


Updates golang.org/x/tools from 0.19.0 to 0.21.1-0.20240508182429-e35e4ccd0d2d

Commits


Updates google.golang.org/protobuf from 1.34.1 to 1.34.2

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 2 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.