k1LoW / runn

runn is a package/tool for running operations following a scenario.
https://runn.run
MIT License
417 stars 30 forks source link

chore(deps): bump the dependencies group with 6 updates #897

Closed dependabot[bot] closed 4 months ago

dependabot[bot] commented 4 months ago

Bumps the dependencies group with 6 updates:

Package From To
github.com/bufbuild/protocompile 0.11.0 0.13.0
github.com/go-playground/validator/v10 10.4.1 10.19.0
github.com/k1LoW/grpcstub 0.17.4 0.18.0
github.com/k1LoW/httpstub 0.15.1 0.16.0
github.com/pb33f/libopenapi 0.16.1 0.16.2
github.com/pb33f/libopenapi-validator 0.0.50 0.0.51

Updates github.com/bufbuild/protocompile from 0.11.0 to 0.13.0

Release notes

Sourced from github.com/bufbuild/protocompile's releases.

v0.13.0

This release includes a single addition to the protocompile.Compiler type.

What's Changed

Enhancements

  • Provide ability for caller to seed/re-use symbol table across compile jobs by @​jhump in #294

Full Changelog: https://github.com/bufbuild/protocompile/compare/v0.12.0...v0.13.0

v0.12.0

This release mostly contains performance improvements. It also includes an addition that makes it possible to implement a descriptor resolver on top of linker.Files much more efficiently, using a *linker.Symbols as an index.

What's Changed

Enhancements

Other changes

  • Disallow options that use message-set-wire-format if Protobuf runtime can't support them by @​jhump in #284
  • Changes ast.NoSourceNode so that its methods now require a pointer receiver by @​jhump in #291
    • This is a backwards-incompatible change. The impact should be low (likely even zero) since most users of this module will not be directly constructing ast.NoSourceNode values or type-asserting ast.Node values to ast.NoSourceNode. The change was made because of non-trivial performance gains, by greatly reducing the number of NoSourceNode values that need to be allocated on the heap when working with a parser.Result that has no AST.

Full Changelog: https://github.com/bufbuild/protocompile/compare/v0.11.0...v0.12.0

Commits
  • 9eb0fbf Provide ability for caller to seed/re-use symbol table across compile jobs (#...
  • 016b009 Use a profiler to improve linker performance (#291)
  • 93923d2 Use fewer allocations when building descriptors in the linker package (#290)
  • 63736ac Slight improvement to walk package (#287)
  • 292379e Fix more CI flakiness issues due to test duration (#289)
  • 792268a Add lookup methods to linker.Symbols; improve performance/reduce allocations ...
  • c75210c Fix flaky failures in CI, hitting 10s time limit (#288)
  • 5fa4f14 Disallow options that use message-set-wire-format if Protobuf runtime can't s...
  • 286a97e Bump golang.org/x/net from 0.17.0 to 0.23.0 in /internal/benchmarks (#285)
  • See full diff in compare view


Updates github.com/go-playground/validator/v10 from 10.4.1 to 10.19.0

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.19.0

What was added?

Added opt-in ability to validate private fields in PR, thanks @​nikolaianohyn via the new WithPrivateFieldValidation option when initializing validator.

Release 10.18.0

What Changed?

Updated all dependencies to address dependant alerts, #1205 and #1220

Release 10.17.0

What's new

  • Add translation of requiredXXX and excludedXXX in English/Chinese/Chinese Taiwan.

What's fixed

  • Fix errors translation to work properly for aliases.

Release 10.16.0

What's new or fixed?

  • Added new issn validator. TY @​mrcook for the PR
  • Added improvement/fix to the file url validation. TY @​nodivbyzero for the PR
  • Fix onof tag in examples. TY @​gren236 for the PR
  • Add fmt.Stringer interface support to uuid validations allowing most UUID validation libraries which implement it to work transparently now. TY @​JoshGlazebrook for the PR
  • Added new omitnil similar to omitempty but for pointers. this is mainly for code generation ease. TY @​tarampampam for the PR

Release 10.15.5

What was fixed?

Fixed CIDRIPv4 validation, ty @​martinlehoux for the PR

Release 10.15.4

What was fixed?

Corrected a regression of skipping required for time.Time accidentally introduced in v10.15.2

Release 10.15.3

What was fixed?

Fix regression for invalid type check before calling reflect values type. Thank you @​MysteriousPotato for the PR

Release 10.15.2

What was fixed?

  • Refactored #1122 to support or's in tags + updated to required behaving the same as before v10.50.0 to support the community as there was a lot of code relying on the before behaviour, correct or not.

Release 10.15.1

What was fixed?

... (truncated)

Commits


Updates github.com/k1LoW/grpcstub from 0.17.4 to 0.18.0

Release notes

Sourced from github.com/k1LoW/grpcstub's releases.

v0.18.0

What's Changed

New Features 🎉

Full Changelog: https://github.com/k1LoW/grpcstub/compare/v0.17.4...v0.18.0

Changelog

Sourced from github.com/k1LoW/grpcstub's changelog.

v0.18.0 - 2024-04-28

New Features 🎉

Commits


Updates github.com/k1LoW/httpstub from 0.15.1 to 0.16.0

Release notes

Sourced from github.com/k1LoW/httpstub's releases.

v0.16.0

What's Changed

Fix bug 🐛

Other Changes

Full Changelog: https://github.com/k1LoW/httpstub/compare/v0.15.2...v0.16.0

v0.15.2

What's Changed

Other Changes

New Contributors

Full Changelog: https://github.com/k1LoW/httpstub/compare/v0.15.1...v0.15.2

Changelog

Sourced from github.com/k1LoW/httpstub's changelog.

v0.16.0 - 2024-04-28

Fix bug 🐛

Other Changes

v0.15.2 - 2024-04-24

Other Changes

Commits
  • d557cca Merge pull request #46 from k1LoW/tagpr-from-v0.15.2
  • 8af82b3 [tagpr] update CHANGELOG.md
  • 5ab8768 [tagpr] prepare for the next release
  • 0ca6da5 Merge pull request #48 from k1LoW/update-pkgs
  • 5d6b851 Update pkgs
  • fad2074 Merge pull request #47 from k1LoW/re-new-validator
  • 5a08be3 Fix lint warn
  • f8f3c94 Add workaround for invalid validator instance after validation error
  • 79ff03e Merge pull request #45 from k1LoW/nullable
  • 9d5fffb Support nullable fields in OpenAPI 3
  • Additional commits viewable in compare view


Updates github.com/pb33f/libopenapi from 0.16.1 to 0.16.2

Release notes

Sourced from github.com/pb33f/libopenapi's releases.

v0.16.2

This fixes an issue where the MediaType.Example field was being populated when it shouldn't.

It was basically searching down into the schema and other places as well to find an example where it should have only been searching the top level node

@​TristanSpeakEasy

Commits


Updates github.com/pb33f/libopenapi-validator from 0.0.50 to 0.0.51

Release notes

Sourced from github.com/pb33f/libopenapi-validator's releases.

v0.0.51

  1. Introduces improved error handling for the JSON schema compilation process in the request validation logic. Previously, the code did not handle potential errors from the compiler, which caused the code to panic when attempting to validate the request body.

The change will improve reliability by ensuring that schema compilation errors are gracefully handled, thus improving the stability of the request body schema validation process. Additionally, this will facilitate quicker debugging and resolution of issues related to invalid schemas.

  1. Request bodies are optional by default. see https://spec.openapis.org/oas/v3.1.0#fixed-fields-10 or https://swagger.io/docs/specification/describing-request-body/ this dear library doesn't handle such cases https://github.com/pb33f/libopenapi-validator/blob/688b7a2e81d820bed7d96b28af6fdebd3d52cea9/requests/validate_body.go#L41

as we can see above, if an operation has a request body, we will require to have a content type set, however that request body could be not required which means that a content type should not be required.

@​martinsirbe @​emilien-puget

Commits
  • 5e5b19b request body is not required by default
  • 5b5766b Update tests
  • fcb62d5 Check and handle compiler err on compile req body
  • 261b77d Add test case causing panic on request body validation
  • See full diff in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions