search

ohsu-comp-bio / funnel

Funnel is a toolkit for distributed task execution via a simple, standard API.
https://ohsu-comp-bio.github.io/funnel
MIT License
121 stars 32 forks source link

build(deps): bump the dependabot group with 4 updates #1057

Closed dependabot[bot] closed 3 weeks ago

dependabot[bot] commented 3 weeks ago

Bumps the dependabot group with 4 updates: github.com/docker/docker, go.mongodb.org/mongo-driver, google.golang.org/api and google.golang.org/grpc.

Updates github.com/docker/docker from 27.2.1+incompatible to 27.3.0+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v27.3.0

27.3.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • containerd image store: Fix docker image prune -a untagging images used by containers started from images referenced by a digested reference. moby/moby#48488
  • Add a --feature flag to the daemon options. moby/moby#48487
  • Updated the handling of the --gpus=0 flag to be consistent with the NVIDIA Container Runtime. moby/moby#48483 (docker/cli#5432)
  • Support WSL2 mirrored-mode networking's use of interface loopback0 for packets from the Windows host. moby/moby#48514
  • Fix an issue that prevented communication between containers on an IPv4 bridge network when running with --iptables=false, --ip6tables=true (the default), a firewall with a DROP rule for forwarded packets on hosts where the br_netfilter kernel module was not normally loaded. moby/moby#48511
  • CLI: Fix issue where docker volume update command would cause the CLI to panic if no argument/volume was passed. docker/cli#5426
  • docker/cli#5432

Packaging updates

v27.3.0-rc.2

27.3.0-rc.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • containerd image store: Fix docker image prune -a untagging images used by containers started from images referenced by a digested reference. moby/moby#48488
  • Add a --feature flag to the daemon options. moby/moby#48487
  • Updated the handling of the --gpus=0 flag to be consistent with the NVIDIA Container Runtime. moby/moby#48483 (docker/cli#5432)
  • Support WSL2 mirrored-mode networking's use of interface loopback0 for packets from the Windows host. moby/moby#48514
  • Fix an issue that prevented communication between containers on an IPv4 bridge network when running with --iptables=false, --ip6tables=true (the default), a firewall with a DROP rule for forwarded packets on hosts where the br_netfilter kernel module was not normally loaded. moby/moby#48511
  • CLI: Fix issue where docker volume update command would cause the CLI to panic if no argument/volume was passed. docker/cli#5426
  • docker/cli#5432

Packaging updates

... (truncated)

Commits
  • 41ca978 Merge pull request #48525 from thaJeztah/27.x_backport_govulncheck_permissions
  • a6b772b gha: govulncheck: make sure read permissions are set
  • 856359c Merge pull request #48514 from robmry/backport-27.x/wsl2_mirrored_loopback0_w...
  • cd21af7 Do not DNAT packets from WSL2's loopback0
  • 8516f3b Merge pull request #48510 from thaJeztah/27.x_backport_bump_buildx_compose
  • 3a7779a Merge pull request #48511 from robmry/backport-27.x/48375_bridge_netfiltering
  • 5c499fc Only enable bridge netfiltering when needed
  • 98f24aa Merge pull request #48506 from thaJeztah/27.x_backport_man_dockerd_logformat
  • 8adc8e4 Dockerfile: update compose to v2.29.4
  • 576fc88 Dockerfile: update buildx to v0.17.1
  • Additional commits viewable in compare view


Updates go.mongodb.org/mongo-driver from 1.16.1 to 1.17.0

Release notes

Sourced from go.mongodb.org/mongo-driver's releases.

MongoDB Go Driver 1.17.0

The MongoDB Go Driver Team is pleased to release version 1.17.0 of the official MongoDB Go driver.

Release Notes

This release adds support for client authentication using OpenID Connect (MONGODB-OIDC), and for the Queryable Encryption Range Protocol. The driver now supports MongoDB 8.0. Additionally, IndexView has been extended to include methods for dropping indexes by key (i.e. DropOneWithKey and DropWithKey).

[!NOTE]

This is the last planned minor release in the 1.x series. Future driver versions will be in the 2.x series. The v1.17.x will still receive security and bug fixes for a year.

Queryable Encryption Range Protocol

Added range protocol support for Queryable Encryption.

MONGODB-OIDC

Added support OpenID Connect (OIDC) authentication for workload identities. A workload identity is an identity you assign to a software workload, such as an application, service, script, or container, to authenticate and access other services and resources.

See the documentation for more details.

For a full list of tickets included in this release, please see the links below:

Full Changelog: v1.16.1...v1.17.0

Documentation for the Go driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go driver is greatly appreciated!

Commits
  • 5484657 BUMP v1.17.0
  • be25b9a GODRIVER-3302 Handle malformatted message length properly. (#1758)
  • 4757f44 GODRIVER-3312 Use remaining test secrets from the vault [v1] (#1811)
  • 6bcc3dc Remove GCP from supplied callback example (#1809)
  • b133d71 GODRIVER-2587 Implement modifyCollection for the unified test runner (#1796) ...
  • c5b9705 GODRIVER-3331 Fix default authSource for SRV connections (#1795)
  • 485e74d GODRIVER-2758: Add documentation examples (#1759)
  • ac03e73 GODRIVER-3324 Upgrade CI Go to 1.22 and golangci-lint to 1.59.1. (#1783)
  • 56e75b2 GODRIVER-3195 Sync updated QE Range tests (#1789) [v1] (#1790)
  • 783cc6c GODRIVER-3290 Mention the final 1.x release in the release notes (#1788)
  • Additional commits viewable in compare view


Updates google.golang.org/api from 0.196.0 to 0.198.0

Release notes

Sourced from google.golang.org/api's releases.

v0.198.0

0.198.0 (2024-09-19)

Features

v0.197.0

0.197.0 (2024-09-10)

Features

Bug Fixes

  • transport: Set UniverseDomain in http.NewClient for new auth (#2773) (140d0a5)
Changelog

Sourced from google.golang.org/api's changelog.

0.198.0 (2024-09-19)

Features

0.197.0 (2024-09-10)

Features

Bug Fixes

  • transport: Set UniverseDomain in http.NewClient for new auth (#2773) (140d0a5)
Commits


Updates google.golang.org/grpc from 1.66.1 to 1.66.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.66.2

Dependencies

  • Remove unintentional dependency on the testing package (#7579)
  • Remove unintentional dependency on the flate package (#7595)

Bug Fixes

  • client: fix a bug that prevented memory reuse after handling unary RPCs (#7571)
Commits


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
netlify[bot] commented 3 weeks ago

Deploy Preview for ohsu-comp-bio-funnel canceled.

Name Link
Latest commit dcc50db53e6382dfa1b91fedce16d0cea67c2687
Latest deploy log https://app.netlify.com/sites/ohsu-comp-bio-funnel/deploys/66ed620744f4540008fe975f
dependabot[bot] commented 3 weeks ago

Superseded by #1059.