honeycombio / beeline-go

Legacy instrumentation for golang apps with Honeycomb
https://honeycomb.io
Apache License 2.0
74 stars 48 forks source link

maint(deps): bump the minor-patch group across 1 directory with 5 updates #443

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 2 months ago

Bumps the minor-patch group with 4 updates in the / directory: github.com/gin-gonic/gin, github.com/jmoiron/sqlx, github.com/labstack/echo/v4 and google.golang.org/grpc.

Updates github.com/gin-gonic/gin from 1.9.1 to 1.10.0

Release notes

Sourced from github.com/gin-gonic/gin's releases.

v1.10.0

Changelog

Features

  • 5f458dd1a6d631f324e4af9a4f5429ffdf199342: feat(auth): add proxy-server authentication (#3877) (@​EndlessParadox1)
  • 7a865dcf1dbe6ec52e074b1ddce830d278eb72cf: feat(bind): ShouldBindBodyWith shortcut and change doc (#3871) (@​RedCrazyGhost)
  • a18219566ca25fc51e6d2886bed849c6c3a0cd12: feat(binding): Support custom BindUnmarshaler for binding. (#3933) (@​dkkb)
  • fd1faaded01aef14a3955ec076f1cbeb9cb87775: feat(binding): support override default binding implement (#3514) (@​ssfyn)
  • ac5e84d93ce34359bfd2f346cb2971ea754d83e3: feat(engine): Added OptionFunc and With (#3572) (@​flc1125)
  • c6ae2e69666a2b36203b29650ee75d172c725c66: feat(logger): ability to skip logs based on user-defined logic (#3593) (@​palvaneh)

Bug fixes

  • d4e413648824333726ef65de5defc457e9dbf095: Revert "fix(uri): query binding bug (#3236)" (#3899) (@​appleboy)
  • 3dc1cd6572b4e3a0cd170a15debe546c2c72294f: fix(binding): binding error while not upload file (#3819) (#3820) (@​clearcodecn)
  • 82bcd6d39bfe9c22032764ff3b0b6f8ef1673e49: fix(binding): dereference pointer to struct (#3199) (@​echovl)
  • 2b1da2b0b38dfc5d5841266037c0c8b249eca1dd: fix(context): make context Value method adhere to Go standards (#3897) (@​FarmerChillax)
  • f70dd00b00bc0a46cb18b55bfe1f918d5d29b511: fix(engine): fix unit test (#3878) (@​flc1125)
  • 86ff4a64c7efe1a1c875529835eeef9e15de1e86: fix(header): Allow header according to RFC 7231 (HTTP 405) (#3759) (@​Crocmagnon)
  • 09f8224593e31edf3c58ab3f13bc31ef53473733: fix(route): Add fullPath in context copy (#3784) (@​KarthikReddyPuli)
  • 9f598a31aafb92d675f38f1c8371e4ac76f858bf: fix(router): catch-all conflicting wildcard (#3812) (@​FirePing32)
  • 4a40f8f1a49b9086b461d97e167c3b9628d8b923: fix(sec): upgrade golang.org/x/crypto to 0.17.0 (#3832) (@​chncaption)
  • 386d244068db3693f938db4ead6d1f5f85942e3f: fix(tree): correctly expand the capacity of params (#3502) (@​georgijd-form3)
  • 8790d08909fc4d193c6c787c9c72f3089168f411: fix(uri): query binding bug (#3236) (@​illiafox)
  • 44d0dd70924dd154e3b98bc340accc53484efa9c: fix: Add pointer support for url query params (#3659) (#3666) (@​omkar-foss)
  • 646312aef6a34095476ac846b0920db5fb24b2ea: fix: protect Context.Keys map when call Copy method (#3873) (@​kingcanfish)

Enhancements

  • d4a64265f21993368c90602c18e778bf04ef36db: chore(CI): update release args (#3595) (@​qloog)
  • bb3519d26f52835cf00e5e430b52651a9c378c97: chore(IP): add TrustedPlatform constant for Fly.io. (#3839) (@​ab)
  • 1b3c0859693fc85290c01ba098b1440d4776549f: chore(debug): add ability to override the debugPrint statement (#2337) (@​josegonzalez)
  • a64286a7760be2031209686ce4d36e99d42dd419: chore(deps): update dependencies to latest versions (#3835) (@​appleboy)
  • 9c61295efeea99f6c9d1722294f1bf61d8e464d6: chore(header): Add support for RFC 9512: application/yaml (#3851) (@​vincentbernat)
  • a481ee2897af1e368de5c919fbeb21b89aa26fc7: chore(http): use white color for HTTP 1XX (#3741) (@​viralparmarme)
  • c964ad370bbe007f1b18a7570f058a66f05fbe1f: chore(optimize): the ShouldBindUri method of the Context struct (#3911) (@​1911860538)
  • 739d2d9c80e0298dafb5df1c30bae35d63935d6c: chore(perf): Optimize the Copy method of the Context struct (#3859) (@​1911860538)
  • 3ea8bd99fbb4e499d70a0c8e1ce2ce4b7c6348b6: chore(refactor): modify interface check way (#3855) (@​demoManito)
  • ab8042e9e5370bbe0e93ea5adc6e74ae4c5df95e: chore(request): check reader if it's nil before reading (#3419) (@​noahyao1024)
  • 0d9dbbb44551a872d30fd89d4d55ba0515d646fd: chore(security): upgrade Protobuf for CVE-2024-24786 (#3893) (@​Fotkurz)
  • ecdbbbe9483dd12222f2085f717a2c7cb5ac55fe: chore: refactor CI and update dependencies (#3848) (@​appleboy)
  • 39089af62535b27aa63608f341c0a339aa88f64e: chore: refactor configuration files for better readability (#3951) (@​appleboy)
  • 160c1730efd30046239c802d5b9f895a708c3f4c: chore: update GitHub Actions configuration (#3792) (@​appleboy)
  • 0397e5e0c0f8f8176c29f7edd8f1bff8e45df780: chore: update changelog categories and improve documentation (#3917) (@​appleboy)
  • 62b50cfbc0de877207ff74c160a23dff6394f563: chore: update dependencies to latest versions (#3694) (@​appleboy)
  • 638aa19e7d30513f7bc777c62ff8558fd5f90ea5: chore: update external dependencies to latest versions (#3950) (@​appleboy)
  • c6f90df4e0c888c69524307cc35952ec2e7ead41: chore: update various Go dependencies to latest versions (#3901) (@​appleboy)

Build process updates

  • 78f4687875d72d10392f8a77008cbefdec4c0aa0: build(codecov): Added a codecov configuration (#3891) (@​flc1125)
  • 56dc72c4d5b1076fc9c6b81f57299739c11910b8: ci(Makefile): vet command add .PHONY (#3915) (@​imalasong)
  • 8ab47c694ea93fdb442b617961ce9b3171151749: ci(lint): update tooling and workflows for consistency (#3834) (@​appleboy)
  • 8acbe657f1c140e3fba38f869978cab2376500c9: ci(release): refactor changelog regex patterns and exclusions (#3914) (@​appleboy)
  • 000fdb3ac95c7c318440afbd98eaf60f7430a1db: ci(testing): add go1.22 version (#3842) (@​appleboy)

Documentation updates

... (truncated)

Changelog

Sourced from github.com/gin-gonic/gin's changelog.

Gin v1.10.0

Features

Bug fixes

Enhancements

Build process updates

... (truncated)

Commits
  • 75ccf94 feat: update version constant to v1.10.0 (#3952)
  • 39089af chore: refactor configuration files for better readability (#3951)
  • 638aa19 chore: update external dependencies to latest versions (#3950)
  • a182195 feat(binding): Support custom BindUnmarshaler for binding. (#3933)
  • b4f66e9 chore(deps): bump github.com/bytedance/sonic from 1.11.3 to 1.11.6 (#3940)
  • f80ade7 chore(deps): bump golangci/golangci-lint-action from 4 to 5 (#3941)
  • 0397e5e chore: update changelog categories and improve documentation (#3917)
  • c6f90df chore: update various Go dependencies to latest versions (#3901)
  • 8acbe65 ci(release): refactor changelog regex patterns and exclusions (#3914)
  • 56dc72c ci(Makefile): vet command add .PHONY (#3915)
  • Additional commits viewable in compare view


Updates github.com/jmoiron/sqlx from 1.3.5 to 1.4.0

Release notes

Sourced from github.com/jmoiron/sqlx's releases.

Update dependencies to their latest stable versions

This release has updated all dependencies to their latest stable version.

And now, for the auto-generated description:


What's Changed

New Contributors

Full Changelog: https://github.com/jmoiron/sqlx/compare/v1.3.5...v1.4.0

Commits


Updates github.com/labstack/echo/v4 from 4.11.4 to 4.12.0

Release notes

Sourced from github.com/labstack/echo/v4's releases.

v4.12.0 - 2024-04-15

Security

Enhancements

New Contributors

Full Changelog: https://github.com/labstack/echo/compare/v4.11.4...v4.12.0

Changelog

Sourced from github.com/labstack/echo/v4's changelog.

v4.12.0 - 2024-04-15

Security

Enhancements

Commits
  • 88c379f Changelog for v4.12.0 (#2626)
  • e0f2a02 proxy middleware should use http proxy for SSE requests (#2624)
  • 3062025 Update golang.org/x/* deps (#2625)
  • 447c92d When route is registered with empty path it is normalized to /. Make sure t...
  • d549290 Remove maxparam dependence from Context (#2611)
  • 011acb4 default binder can bind pointer to slice as struct field. For example `*[]str...
  • c57fcb3 Default binder can use UnmarshalParams(params []string) error interface to ...
  • a3b0ba2 Fix Real IP logic (#2550)
  • 3598f29 Change type definition blocks to single declarations. This helps copy/pasting...
  • 5f7bedf update makefile
  • Additional commits viewable in compare view


Updates google.golang.org/grpc from 1.62.1 to 1.65.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.65.0

Dependencies

  • Change support policy to cover only the latest TWO releases of Go, matching the policy for Go itself. See #7249 for more information. (#7250)
  • Update x/net/http2 to address CVE-2023-45288 (#7282)

Behavior Changes

  • credentials/tls: clients and servers will now reject connections that don't support ALPN when environment variable GRPC_ENFORCE_ALPN_ENABLED is set to "true" (case insensitive). (#7184)
    • NOTE: this behavior will become the default in a future release.
  • metadata: remove String method from MD to make printing more consistent (#7373)

New Features

  • grpc: add WithMaxCallAttempts to configure gRPC's retry behavior per-channel. (#7229)

Bug Fixes

  • ringhash: properly apply endpoint weights instead of ignoring them (#7156)
  • xds: fix a bug that could cause xds-enabled servers to stop accepting new connections after handshaking errors (#7128)

Release 1.64.1

Dependencies

  • Update x/net/http2 to address CVE-2023-45288 (#7352)
  • metadata: remove String method from MD to make printing consistent (#7374)

Release 1.64.0

API Changes

  • stats: Deprecate InPayload.Data and OutPayload.Data; they were experimental and will be deleted in the next release (#7121)

Behavior Changes

  • codec: Remove handling of environment variable GRPC_GO_ADVERTISE_COMPRESSORS to suppress setting supported compressors in grpc-accept-encoding header. Compressors will always be advertised, as they have been by default for some time (#7203)

New Features

  • resolver/dns: Add SetMinResolutionInterval to set the minimum interval at which DNS re-resolutions may occur (#6962)
  • peer/peer: Implement the fmt.Stringer interface for pretty printing Peer, and
  • metadata/metadata: Implement the fmt.Stringer interface for pretty printing MD (#7137)

Performance Improvements

... (truncated)

Commits
  • 2da9769 Change version to 1.65.0 (#7306)
  • ede96b7 metadata: remove String method (#7373)
  • 64be203 grpc: Readd pick first name (#7336) (#7341)
  • 25e33a6 examples: Add CSM Observability example (#7302) (#7318)
  • 04a5f46 xds/internal/xdsclient: Emit unknown for CSM Labels if not present in CDS (#7...
  • cff5c3e stats/opentelemetry: Add e2e testing for CSM Observability (#7279) (#7316)
  • 9b970fd dns: fix constant 30s backoff for re-resolution (#7262) (#7311)
  • 6d23620 documentation: on server, use FromIncomingContext for retrieving context and...
  • 7e5898e xds: unify xDS client creation APIs meant for testing (#7268)
  • 5d7bd7a interop/xds: Interop client and server changes for CSM Observability (#7280)
  • Additional commits viewable in compare view


Updates google.golang.org/protobuf from 1.33.0 to 1.34.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 2 months ago

Dependabot tried to add @honeycombio/telemetry-team as a reviewer to this PR, but received the following error from GitHub:

POST https://api.github.com/repos/honeycombio/beeline-go/pulls/443/requested_reviewers: 422 - Reviews may only be requested from collaborators. One or more of the teams you specified is not a collaborator of the honeycombio/beeline-go repository. // See: https://docs.github.com/rest/pulls/review-requests#request-reviewers-for-a-pull-request
dependabot[bot] commented 1 month ago

Looks like these dependencies are updatable in another way, so this is no longer needed.