go: bump github.com/fxamacker/cbor/v2 from 2.4.0 to 2.6.0 in /go

dependabot[bot] commented 6 months ago

Bumps github.com/fxamacker/cbor/v2 from 2.4.0 to 2.6.0.

Release notes

Sourced from github.com/fxamacker/cbor/v2's releases.

v2.6.0

This release adds important new features, optimizations, bug fixes, and 3 new contributors. Fuzz tests passed 5+ billion execs for CBOR encoding and decoding functions. Minimum officially supported Go is bumped to Go 1.17.

⭐ Features and Optimizations

Add FieldNameMatching decode option. by @benluddy in fxamacker/cbor#433

Add option to decode CBOR bignum to interface{} as *big.Int by @fxamacker in fxamacker/cbor#456

Add 2 more options for decoding CBOR integers to interface{} by @fxamacker in fxamacker/cbor#457

Add encoding option to specify how omitempty fields are encoded by @dinhxuanvu in fxamacker/cbor#453

New options for encoding Go strings to and from CBOR byte strings by @benluddy in fxamacker/cbor#465

Add options to support byte string map keys as struct field names by @benluddy in fxamacker/cbor#472

Add option to specify how to decode unrecognized CBOR tag to any by @ssuriyan7 in fxamacker/cbor#475

🚀 Notable Optimizations

Improve memory allocs 🗜️ and speed 🚀 of encoding maps by using Go 1.18-1.20 features by @dinhxuanvu in fxamacker/cbor#468

benchstat results provided by @dinhxuanvu

NOTE: Go 1.17 is the minimum version supported by v2.6.0. Go 1.20+ will use optimizations introduced by PR 468.

🛠 Improvements

Refactor valid() to reject negative values for integer modes by @fxamacker in fxamacker/cbor#434

Refactor tests to improve consistency and readability by @fxamacker in fxamacker/cbor#458

Add another test and fix lint errors by @fxamacker in fxamacker/cbor#466

Refactor map encoding to prep for Go version bump by @fxamacker in fxamacker/cbor#473

Add UnrecognizedTagToAny option to TestDecOptions by @fxamacker in fxamacker/cbor#484

Update go.mod to require go 1.17 by @fxamacker in fxamacker/cbor#489

🐞 Bug Fixes

Fix panic when decoding CBOR nil to *cbor.SimpleValue by @fxamacker in fxamacker/cbor#461

Fix cbor.SimpleValue encoding and decoding by @fxamacker in fxamacker/cbor#464

Fix EncOption/DecOption unset fields on mode regurgitation. by @benluddy in fxamacker/cbor#480

📖 Docs and CI

Update README for error handling of CBOR extraneous data by @fxamacker in fxamacker/cbor#426

Update README for changes in cbor v2.5.0 by @fxamacker in fxamacker/cbor#427

Update CI and README by @fxamacker in fxamacker/cbor#430

Update README to add FIDO Alliance, Let's Encrypt, Matrix.org by @fxamacker in fxamacker/cbor#431

Pin actions/checkout and actions/setup-go by @x448 in fxamacker/cbor#436

Enable more linters by @fxamacker in fxamacker/cbor#437

Bump github/codeql-action from 2.22.5 to 2.22.8 by @dependabot in fxamacker/cbor#443

Document behavior of Unmarshal of unrecognized tags into interface{} by @benluddy in fxamacker/cbor#448

Bump github/codeql-action from 2.22.8 to 3.22.12 by @dependabot in fxamacker/cbor#455

Bump github/codeql-action from 3.22.12 to 3.23.0 by @dependabot in fxamacker/cbor#469

... (truncated)

Commits

1f67e1e Merge pull request #489 from fxamacker/fxamacker/require-go-1.17-in-go.mod
793a058 Update README.md for cbor v2.6.0
4778e46 Update go.mod to require go 1.17
d81df7a Merge pull request #487 from fxamacker/dependabot/github_actions/github/codeq...
ade4c60 Bump github/codeql-action from 3.23.0 to 3.24.0
2da2d67 Merge pull request #484 from fxamacker/fxamacker/test-new-decoding-option-in-...
d68ecb4 Add UnrecognizedTagToAny option to TestDecOptions
dd2eb91 Merge pull request #475 from ssuriyan7/return-tag-content-option
c8f2df8 Merge pull request #480 from benluddy/options-mode-options-roundtrip-fix
2c841f6 Add decoding option for return type of data with an unknown tag
Additional commits viewable in compare view

You can trigger a rebase of this PR by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

netlify[bot] commented 6 months ago

Deploy Preview for oasisprotocol-oasis-core canceled.

Name	Link
Latest commit	d64c4952afd75971da4335928a25085d077aa276
Latest deploy log	https://app.netlify.com/sites/oasisprotocol-oasis-core/deploys/66392882614e4d000863ad8f

dependabot[bot] commented 4 weeks ago

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

oasisprotocol / oasis-core