search

openfga / cli

A cross-platform CLI to interact with an OpenFGA server
https://openfga.dev
Apache License 2.0
50 stars 26 forks source link

chore(deps): bump the dependencies group with 3 updates #340

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 6 months ago

Bumps the dependencies group with 3 updates: github.com/openfga/go-sdk, github.com/openfga/openfga and github.com/spf13/viper.

Updates github.com/openfga/go-sdk from 0.3.7 to 0.4.0

Release notes

Sourced from github.com/openfga/go-sdk's releases.

v0.4.0

0.4.0 (2024-05-30)

  • feat!: remove store ID from API config, allow store ID override per-request (see README for additional documentation and examples)
  • fix: only retry on client credential requests that are 429 or 5xx

⚠️ BREAKING CHANGE: ⚠️

This version removes the StoreId from the API client configuration. Instead, the StoreId parameter must now be passed to each of the API methods that require a store ID.

If you are using api_open_fga.go directly, you will now need to pass the StoreId parameter.

Changelog

Sourced from github.com/openfga/go-sdk's changelog.

v0.4.0

0.4.0 (2024-05-30)

  • feat!: remove store ID from API config, allow store ID override per-request (see README for additional documentation and examples)
  • fix: only retry on client credential requests that are 429 or 5x

BREAKING CHANGE:

This version removes the StoreId from the API client configuration. Instead, the StoreId parameter must now be passed to each of the API methods that require a store ID.

If you are using api_open_fga.go directly, you will now need to pass the StoreId parameter.

Commits
  • 0b68a06 release: v0.4.0 (#103)
  • 30659f7 fix: only retry on client credential requests that are 429 or 5xx (#102)
  • 392f47a feat!: remove store ID from API config, allow override per-request (#101)
  • 4d3ff71 chore(deps): bump codecov/codecov-action from 4.4.0 to 4.4.1 in the dependenc...
  • aedab4d chore(deps): bump the dependencies group with 2 updates (#99)
  • 94a867c chore(deps): bump actions/checkout from 4.1.4 to 4.1.5 in the dependencies gr...
  • See full diff in compare view


Updates github.com/openfga/openfga from 1.5.4-rc1 to 1.5.4

Release notes

Sourced from github.com/openfga/openfga's releases.

v1.5.4

Added

  • ListUsers API which answers the question "what users are related to a specific object?". This feature is experimental and can be enabled by configuring OPENFGA_EXPERIMENTALS=enable-list-users. Also see Performing a ListUsers call and ListUsers API docs. Known Limitation: Child usersets that are negated from their parent are currently not returned as excluded_users #1433
  • ListObjects throttling to manage resource usage of expensive queries. Throttling improves overall query performance by limiting the number of dispatches, which are the recursive sub-operations of a ListObjects query #1571
  • Per-request dispatch throttling threshold configuration via context #1546
  • Self-defining usersets for Check, ListObjects and ListUsers. These are implicit tuples that exist by virtue of set theory. For example, the userset document:1#viewer implicitly possess the viewer relation for document:1 #1521
  • Panic recovery handling for all APIs #1557
  • Logging of non-sensitive server configuration on startup #1609
  • Appropriate error codes for throttled requests indicating if a request should be retried #1552
  • Minor performance improvements in Check API by reducing quantity of spans created #1550, #1589

Fixed

  • Goroutine leak occurring during initial server validation #1617
  • Stricter filtering of invalid tuples with ListObjects #1563
  • Panic on server close if caching is enabled #1568
  • Prevent calling datastore if context has error #1593

Changed

  • request_id is now same as trace_id (e.g. 1e20da43269fe07e3d2ac018c0aad2d1) if tracing is enabled. Otherwise, remains an UUID (e.g. 38fee7ac-4bfe-4cf6-baa2-8b5ec296b485) #1576 - thank you, @​00chorch

Removed

  • request_duration_by_query_count_ms metric #1579
Changelog

Sourced from github.com/openfga/openfga's changelog.

[1.5.4] - 2024-05-29

Full changelog

Added

  • ListUsers API which answers the question "what users are related to a specific object?". This feature is experimental and can be enabled by configuring OPENFGA_EXPERIMENTALS=enable-list-users. Also see Performing a ListUsers call and ListUsers API docs. Known Limitation: Child usersets that are negated from their parent are currently not returned as excluded_users #1433
  • ListObjects throttling to manage resource usage of expensive queries. Throttling improves overall query performance by limiting the number of dispatches, which are the recursive sub-operations of a ListObjects query #1571
  • Per-request dispatch throttling threshold configuration via context #1546
  • Self-defining usersets for Check, ListObjects and ListUsers. These are implicit tuples that exist by virtue of set theory. For example, the userset document:1#viewer implicitly possess the viewer relation for document:1 #1521
  • Panic recovery handling for all APIs #1557
  • Logging of non-sensitive server configuration on startup #1609
  • Appropriate error codes for throttled requests indicating if a request should be retried #1552
  • Minor performance improvements in Check API by reducing quantity of spans created #1550, #1589

Fixed

  • Goroutine leak occurring during initial server validation #1617
  • Stricter filtering of invalid tuples with ListObjects #1563
  • Panic on server close if caching is enabled #1568
  • Prevent calling datastore if context has error #1593

Changed

  • request_id is now same as trace_id (e.g. 1e20da43269fe07e3d2ac018c0aad2d1) if tracing is enabled. Otherwise, remains an UUID (e.g. 38fee7ac-4bfe-4cf6-baa2-8b5ec296b485) #1576 - thank you, @​00chorch

Removed

  • request_duration_by_query_count_ms metric #1579

[1.5.3] - 2024-04-16

Full changelog

Added

  • Apply tags to requests that have been intentionally throttled (openfga/openfga#1531). This will add a new log field titled "throttled" to such requests.

Fixed

Changed

Security

... (truncated)

Commits
  • 5feb1c8 docs(v1.5.4): add v1.5.4 release notes to CHANGELOG (#1644)
  • 39589af chore(deps): bump protobuf dependency for openfga/api (#1648)
  • 8812d3e chore: revert "feat: Added Contextual Tuples to Assertions API (#1610)" (#1646)
  • 89736da ListUsers API (#1433)
  • b0b3501 chore(deps): bump snyk/actions from 8349f9043a8b7f0f3ee8885bf28f0b388d2446e8 ...
  • 7ea96f3 chore(deps): bump chainguard/static from 873e970 to 288b818 in the depend...
  • ba10408 chore(deps): bump the dependencies group with 4 updates (#1630)
  • e8f0200 feat: List objects dispatch throttling with seperate queues and configuration...
  • 225d676 chore(deps): bump the dependencies group across 1 directory with 6 updates (#...
  • d4f941f chore(deps): bump chainguard/static from dea7cbb to 873e970 in the depend...
  • Additional commits viewable in compare view


Updates github.com/spf13/viper from 1.18.2 to 1.19.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.19.0

What's Changed

Bug Fixes 🐛

Dependency Updates ⬆️

... (truncated)

Commits
  • b9733f0 build(deps): bump actions/checkout from 4.1.4 to 4.1.6
  • 6ecc5c8 build(deps): bump cachix/install-nix-action from 26 to 27
  • 248c6fd build(deps): bump github/codeql-action from 3.25.4 to 3.25.7
  • abea773 Update references to bketelsen/crypt
  • f17acb4 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1
  • 8e285a5 build(deps): bump github/codeql-action from 3.25.2 to 3.25.4
  • 4017620 build(deps): bump actions/setup-go from 5.0.0 to 5.0.1
  • b67e814 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
  • 4a182c7 build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2
  • 45a0e12 build(deps): bump mheap/github-action-required-labels
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
stacklok-cloud[bot] commented 6 months ago

Minder Vulnerability Report ✅

Minder analyzed this PR and found no vulnerable dependencies.

Vulnerability scan of fd25af1f:

  • 🐞 vulnerable packages: 0
  • 🛠 fixes available for: 0
dependabot[bot] commented 5 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.