search

mach-composer / mach-composer-cli

MACH composer is an orchestration tool for modern MACH ecosystems, powered by Terraform infrastructure-as-code underneath.
https://docs.machcomposer.io
MIT License
47 stars 10 forks source link

chore(deps): bump the go group across 1 directory with 8 updates #417

Closed dependabot[bot] closed 4 weeks ago

dependabot[bot] commented 1 month ago

Bumps the go group with 7 updates in the / directory:

Package From To
github.com/hashicorp/go-retryablehttp 0.7.6 0.7.7
github.com/rs/zerolog 1.32.0 1.33.0
github.com/spf13/cobra 1.8.0 1.8.1
github.com/spf13/viper 1.18.2 1.19.0
golang.org/x/oauth2 0.20.0 0.21.0
github.com/mach-composer/mach-composer-plugin-sdk/v2 2.0.0 2.0.1
golang.org/x/mod 0.17.0 0.18.0

Updates github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7

Changelog

Sourced from github.com/hashicorp/go-retryablehttp's changelog.

0.7.7 (May 30, 2024)

BUG FIXES:

  • client: avoid potentially leaking URL-embedded basic authentication credentials in logs (#158)
Commits
  • 1542b31 v0.7.7
  • defb9f4 v0.7.7
  • a99f07b Merge pull request #158 from dany74q/danny/redacted-url-in-logs
  • 8a28c57 Merge branch 'main' into danny/redacted-url-in-logs
  • 86e852d Merge pull request #227 from hashicorp/dependabot/github_actions/actions/chec...
  • 47fe99e Bump actions/checkout from 4.1.5 to 4.1.6
  • 490fc06 Merge pull request #226 from testwill/ioutil
  • f3e9417 chore: remove refs to deprecated io/ioutil
  • See full diff in compare view


Updates github.com/rs/zerolog from 1.32.0 to 1.33.0

Commits


Updates github.com/spf13/cobra from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.1

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation

... (truncated)

Commits


Updates github.com/spf13/viper from 1.18.2 to 1.19.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.19.0

What's Changed

Bug Fixes 🐛

Dependency Updates ⬆️

... (truncated)

Commits
  • b9733f0 build(deps): bump actions/checkout from 4.1.4 to 4.1.6
  • 6ecc5c8 build(deps): bump cachix/install-nix-action from 26 to 27
  • 248c6fd build(deps): bump github/codeql-action from 3.25.4 to 3.25.7
  • abea773 Update references to bketelsen/crypt
  • f17acb4 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1
  • 8e285a5 build(deps): bump github/codeql-action from 3.25.2 to 3.25.4
  • 4017620 build(deps): bump actions/setup-go from 5.0.0 to 5.0.1
  • b67e814 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
  • 4a182c7 build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2
  • 45a0e12 build(deps): bump mheap/github-action-required-labels
  • Additional commits viewable in compare view


Updates golang.org/x/oauth2 from 0.20.0 to 0.21.0

Commits


Updates github.com/google/uuid from 1.5.0 to 1.6.0

Release notes

Sourced from github.com/google/uuid's releases.

v1.6.0

1.6.0 (2024-01-16)

Features

Bug Fixes

Changelog

Sourced from github.com/google/uuid's changelog.

1.6.0 (2024-01-16)

Features

Bug Fixes

Commits


Updates github.com/mach-composer/mach-composer-plugin-sdk/v2 from 2.0.0 to 2.0.1

Changelog

Sourced from github.com/mach-composer/mach-composer-plugin-sdk/v2's changelog.

v2.0.1 - 2024-05-17

Dependency

  • chore(deps): bump github/codeql-action from 2 to 3 in the github-actions group across 1 directory
  • chore(deps): bump github.com/hashicorp/go-plugin from 1.6.0 to 1.6.1 in the go group
Commits
  • 0a0f7fc Merge pull request #14 from mach-composer/release/v2.0.1
  • ea3a14b Release v2.0.1
  • 4eb1571 Merge pull request #15 from mach-composer/dependabot/go_modules/go-8aa7a72b71
  • b144d85 chore(deps): add changelog for dependabot updates
  • 8a11fbf chore(deps): bump github.com/hashicorp/go-plugin in the go group
  • 4a31eb7 Create Dependency-20240510-142032.yaml
  • f4598f2 Merge pull request #13 from mach-composer/dependabot/github_actions/github-ac...
  • 09e6121 Merge pull request #11 from mach-composer/dependabot/go_modules/go-8442f99f56
  • 3fb67c2 chore(deps): bump github/codeql-action
  • aa8bea7 chore(deps): bump the go group with 3 updates
  • Additional commits viewable in compare view


Updates golang.org/x/mod from 0.17.0 to 0.18.0

Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 4 weeks ago

Looks like these dependencies are updatable in another way, so this is no longer needed.