search

mvisonneau / gitlab-ci-pipelines-exporter

Prometheus / OpenMetrics exporter for GitLab CI pipelines insights
Apache License 2.0
1.26k stars 239 forks source link

build(deps): bump github.com/go-playground/validator/v10 from 10.11.1 to 10.12.0 #623

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps github.com/go-playground/validator/v10 from 10.11.1 to 10.12.0.

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.12.0

What is new?

  • Added eth_addr_checksum validation.
  • Added eg_ignore_case and ne_ignore_case
  • Added http_url validation for http(s) URL's
  • Added cron validation.
  • Added unique validation ability to validate struct fields.
  • Added base64rawurl validation for base64 url without = padding
  • Added mongodb objectID validation
  • Added filepath validation.
  • Added dirpath validation.
  • Added luhn_checksum validation.
  • Added cve validation.
  • Added kosovo to country codes.
  • Added Latvian translations.
  • Added multiple missing language translations.

What was fixed?

  • Fixed multiple documentation grammar issues.
  • Updated all dependencies to address any lingering CVE issues be reported by tools, even if not able to exploit through this package.
  • Fixed excluded_unless validation.
  • Fix unique validation for map with Pointer values.
  • Fixed unique validation for struct field when itis a nil pointer.
  • Fixed multiple language validation.
  • Fixed notblank validation to cover all whitespace characters

What was changed?

  • Tweaked eth_addr validation while adding eth_addr_checksum.
  • Updated Struct Level validation example for enum+ example.
  • Removed unnecessary cast allowing mocking of ValidationErrors

Release 10.11.2

What was fixed

  • Merged some PR and updated deps to address some CVE's in those libraries.
Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
dependabot[bot] commented 1 year ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.