lyft / clutch

Extensible platform for infrastructure management
https://clutch.sh
Apache License 2.0
1.67k stars 116 forks source link

housekeeping: Update module github.com/coreos/go-oidc/v3 to v3.11.0 #3063

Closed renovate[bot] closed 1 month ago

renovate[bot] commented 2 months ago

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/coreos/go-oidc/v3 v3.5.0 -> v3.11.0 age adoption passing confidence

Release Notes

coreos/go-oidc (github.com/coreos/go-oidc/v3) ### [`v3.11.0`](https://togithub.com/coreos/go-oidc/releases/tag/v3.11.0) [Compare Source](https://togithub.com/coreos/go-oidc/compare/v3.10.0...v3.11.0) #### What's Changed - oidc: verify support for algs from discovery by [@​ericchiang](https://togithub.com/ericchiang) in [https://github.com/coreos/go-oidc/pull/430](https://togithub.com/coreos/go-oidc/pull/430) - chore(deps): bump dependencies to address security issues by [@​clambin](https://togithub.com/clambin) in [https://github.com/coreos/go-oidc/pull/432](https://togithub.com/coreos/go-oidc/pull/432) - oidc: ignore cancellation of remote key set context by [@​ericchiang](https://togithub.com/ericchiang) in [https://github.com/coreos/go-oidc/pull/433](https://togithub.com/coreos/go-oidc/pull/433) #### New Contributors - [@​clambin](https://togithub.com/clambin) made their first contribution in [https://github.com/coreos/go-oidc/pull/432](https://togithub.com/coreos/go-oidc/pull/432) **Full Changelog**: https://github.com/coreos/go-oidc/compare/v3.10.0...v3.11.0 ### [`v3.10.0`](https://togithub.com/coreos/go-oidc/releases/tag/v3.10.0) [Compare Source](https://togithub.com/coreos/go-oidc/compare/v3.9.0...v3.10.0) #### What's Changed - fix minor typo by [@​bgerrity](https://togithub.com/bgerrity) in [https://github.com/coreos/go-oidc/pull/414](https://togithub.com/coreos/go-oidc/pull/414) - updated github actions by [@​ericchiang](https://togithub.com/ericchiang) in [https://github.com/coreos/go-oidc/pull/419](https://togithub.com/coreos/go-oidc/pull/419) - add staticcheck to github actions by [@​ericchiang](https://togithub.com/ericchiang) in [https://github.com/coreos/go-oidc/pull/420](https://togithub.com/coreos/go-oidc/pull/420) - update go-jose to v4 by [@​ericchiang](https://togithub.com/ericchiang) in [https://github.com/coreos/go-oidc/pull/421](https://togithub.com/coreos/go-oidc/pull/421) #### New Contributors - [@​bgerrity](https://togithub.com/bgerrity) made their first contribution in [https://github.com/coreos/go-oidc/pull/414](https://togithub.com/coreos/go-oidc/pull/414) **Full Changelog**: https://github.com/coreos/go-oidc/compare/v3.9.0...v3.10.0 ### [`v3.9.0`](https://togithub.com/coreos/go-oidc/releases/tag/v3.9.0) [Compare Source](https://togithub.com/coreos/go-oidc/compare/v3.8.0...v3.9.0) #### What's Changed - build(deps): bump github.com/go-jose/go-jose/v3 from 3.0.0 to 3.0.1 by [@​dependabot](https://togithub.com/dependabot) in [https://github.com/coreos/go-oidc/pull/399](https://togithub.com/coreos/go-oidc/pull/399) #### New Contributors - [@​dependabot](https://togithub.com/dependabot) made their first contribution in [https://github.com/coreos/go-oidc/pull/399](https://togithub.com/coreos/go-oidc/pull/399) **Full Changelog**: https://github.com/coreos/go-oidc/compare/v3.8.0...v3.9.0 ### [`v3.8.0`](https://togithub.com/coreos/go-oidc/releases/tag/v3.8.0) [Compare Source](https://togithub.com/coreos/go-oidc/compare/v3.7.0...v3.8.0) #### What's Changed - support provider device_authorization_endpoint by [@​cbodonnell](https://togithub.com/cbodonnell) in [https://github.com/coreos/go-oidc/pull/365](https://togithub.com/coreos/go-oidc/pull/365) #### New Contributors - [@​cbodonnell](https://togithub.com/cbodonnell) made their first contribution in [https://github.com/coreos/go-oidc/pull/365](https://togithub.com/coreos/go-oidc/pull/365) **Full Changelog**: https://github.com/coreos/go-oidc/compare/v3.7.0...v3.8.0 ### [`v3.7.0`](https://togithub.com/coreos/go-oidc/releases/tag/v3.7.0) [Compare Source](https://togithub.com/coreos/go-oidc/compare/v3.6.0...v3.7.0) #### What's Changed - io/ioutil deprecated by [@​testwill](https://togithub.com/testwill) in [https://github.com/coreos/go-oidc/pull/380](https://togithub.com/coreos/go-oidc/pull/380) - oidc: use %w verb for wrapping errors by [@​rliebz](https://togithub.com/rliebz) in [https://github.com/coreos/go-oidc/pull/381](https://togithub.com/coreos/go-oidc/pull/381) - vulnerability: bump dependencies \[CVE-2023-44487] by [@​joshua-auchincloss](https://togithub.com/joshua-auchincloss) in [https://github.com/coreos/go-oidc/pull/393](https://togithub.com/coreos/go-oidc/pull/393) #### New Contributors - [@​testwill](https://togithub.com/testwill) made their first contribution in [https://github.com/coreos/go-oidc/pull/380](https://togithub.com/coreos/go-oidc/pull/380) - [@​rliebz](https://togithub.com/rliebz) made their first contribution in [https://github.com/coreos/go-oidc/pull/381](https://togithub.com/coreos/go-oidc/pull/381) - [@​joshua-auchincloss](https://togithub.com/joshua-auchincloss) made their first contribution in [https://github.com/coreos/go-oidc/pull/393](https://togithub.com/coreos/go-oidc/pull/393) **Full Changelog**: https://github.com/coreos/go-oidc/compare/v3.6.0...v3.7.0 ### [`v3.6.0`](https://togithub.com/coreos/go-oidc/releases/tag/v3.6.0) [Compare Source](https://togithub.com/coreos/go-oidc/compare/v3.5.0...v3.6.0) #### What's Changed - oidc: restrict use of context.Background() by [@​ericchiang](https://togithub.com/ericchiang) in [https://github.com/coreos/go-oidc/pull/364](https://togithub.com/coreos/go-oidc/pull/364) - \*: gofmt all and update dependencies by [@​ericchiang](https://togithub.com/ericchiang) in [https://github.com/coreos/go-oidc/pull/369](https://togithub.com/coreos/go-oidc/pull/369) - oidc: add UserInfoEndpoint returning the discocvered URL by [@​raggi](https://togithub.com/raggi) in [https://github.com/coreos/go-oidc/pull/375](https://togithub.com/coreos/go-oidc/pull/375) - Add EdDSA algorithm support by [@​lritter14](https://togithub.com/lritter14) in [https://github.com/coreos/go-oidc/pull/378](https://togithub.com/coreos/go-oidc/pull/378) #### New Contributors - [@​raggi](https://togithub.com/raggi) made their first contribution in [https://github.com/coreos/go-oidc/pull/375](https://togithub.com/coreos/go-oidc/pull/375) - [@​lritter14](https://togithub.com/lritter14) made their first contribution in [https://github.com/coreos/go-oidc/pull/378](https://togithub.com/coreos/go-oidc/pull/378) **Full Changelog**: https://github.com/coreos/go-oidc/compare/v3.5.0...v3.6.0

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR was generated by Mend Renovate. View the repository job log.

renovate[bot] commented 2 months ago

ℹ Artifact update notice

File name: backend/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

Details:

Package Change
golang.org/x/net v0.24.0 -> v0.27.0
golang.org/x/oauth2 v0.17.0 -> v0.21.0
golang.org/x/sync v0.6.0 -> v0.7.0
golang.org/x/crypto v0.22.0 -> v0.25.0
golang.org/x/mod v0.15.0 -> v0.17.0
golang.org/x/sys v0.19.0 -> v0.22.0
golang.org/x/term v0.19.0 -> v0.22.0
golang.org/x/text v0.14.0 -> v0.16.0
golang.org/x/tools v0.18.0 -> v0.21.1-0.20240508182429-e35e4ccd0d2d
github-actions[bot] commented 1 month ago

This PR has been marked as stale after 7 or more days of inactivity. Please have a maintainer add the on hold label if this PR should remain open. If there is no further activity or the on hold label is not added, this PR will be closed in 3 days.

renovate[bot] commented 1 month ago

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (v3.11.0). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.