search

openfga / cli

A cross-platform CLI to interact with an OpenFGA server
https://openfga.dev
Apache License 2.0
50 stars 25 forks source link

chore(deps): bump the dependencies group across 1 directory with 4 updates #400

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 2 months ago

Bumps the dependencies group with 4 updates in the / directory: github.com/openfga/go-sdk, github.com/openfga/language/pkg/go, github.com/openfga/openfga and github.com/schollz/progressbar/v3.

Updates github.com/openfga/go-sdk from 0.6.0 to 0.6.1

Release notes

Sourced from github.com/openfga/go-sdk's releases.

v0.6.1

0.6.1 (2024-09-23)

  • refactor(OpenTelemetry): move configuration API into public package namespace (#122)
  • docs(OpenTelemetry): initial documentation and example (#123)
Changelog

Sourced from github.com/openfga/go-sdk's changelog.

v0.6.1

0.6.1 (2024-09-23)

  • refactor(OpenTelemetry): move configuration API into public package namespace (#122)
  • docs(OpenTelemetry): initial documentation and example (#123)
Commits


Updates github.com/openfga/language/pkg/go from 0.2.0-beta.0 to 0.2.0-beta.2

Release notes

Sourced from github.com/openfga/language/pkg/go's releases.

pkg/java/v0.2.0-beta.2

v0.2.0-beta.2 (2024-09-06)

Added:

  • Add getModuleForObjectTypeRelation utility method (#336)
  • Add isRelationAssignable utility method (#336)
  • Add utility validators for tuple fields and condition names (#294)

Fixed:

  • tupleuserset-not-direct is now prioritized above no-entrypoint error (#314)
  • correct based index for reported errors that was causing the wrong location to be highlighted (#331)

pkg/java/v0.2.0-beta.1

v0.2.0-beta.1 (2024-06-13)

  • Initial release

pkg/go/v0.2.0-beta.1

v0.2.0-beta.1 (2024-09-06)

Added:

  • Add GetModuleForObjectTypeRelation utility method (#336)
  • Add IsRelationAssignable utility method (#336)
  • Add utility validators for tuple fields and condition names (#294)
  • Add an initial implementation of a model graph (#307,#308,#309,#310,#316,#317,#321,#322,#330)

Note: this version does not include the validation logic that the JS and Java ports have. See issue: openfga/language#99

Commits
  • 8118aec release: js and go changelog entries (#340)
  • cd20b11 release: js and go changelog entries
  • 733d874 build: update generated code for go and js (#339)
  • 220da0e build: update generated code for js and go
  • 43e2347 ci(go): run tests on go 1.23
  • 3715b64 ci: check that generated code is updated during build
  • 7f8a568 release: release new versions of go, js and java (#338)
  • bb8a30e release: release new versions of go, js and java
  • 9a78e9b chore(deps): bump js and go dependencies (#337)
  • 9964028 chore(deps): bump js and go dependencies
  • Additional commits viewable in compare view


Updates github.com/openfga/openfga from 1.6.0 to 1.6.1

Release notes

Sourced from github.com/openfga/openfga's releases.

v1.6.1

Changed

  • Support context in assertions #1907

Added

  • Stack trace when logging panics #1904

  • Throttling metric throttled_requests_count for observing the number of throttled requests for a given throttling configuration #1863

  • New metric on number of allowed vs. non-allowed Check responses #1911

  • New datastore engine: SQLite (beta) #1615 Thanks @​DanCech!

    openfga migrate --datastore-engine sqlite --datastore-uri openfga.sqlite
openfga run --datastore-engine sqlite --datastore-uri openfga.sqlite

Fixed

  • When a request gets cancelled by a client, throw a 4xx, not a 5xx. #1905
  • Makes the pkg.logger.Logger.With immutable by creating a child logger instead of mutating the delegate one to prevent side effects 1906
  • Extend request timeout to 10s for slow tests 1926
  • Improve performance of Check API in the case that the query involves resolving a tuple to userset and/or a userset, by streaming intermediate results. #1888
Changelog

Sourced from github.com/openfga/openfga's changelog.

[1.6.1] - 2024-09-12

Changed

  • Support context in assertions #1907

Added

  • Support for graceful shutdown on SIGTERM signal, improving termination handling in containerized environments #1928. Thanks @​flex-seongbok @​Siddhant-K-code
  • Stack trace when logging panics #1904
  • Throttling metric throttled_requests_count for observing the number of throttled requests for a given throttling configuration #1863
  • New metric on number of allowed vs. non-allowed Check responses #1911

New datastore engine: SQLite (beta) #1615

openfga migrate --datastore-engine sqlite --datastore-uri openfga.sqlite
openfga run --datastore-engine sqlite --datastore-uri openfga.sqlite

Thanks @​DanCech!

Fixed

  • When a request gets cancelled by a client, throw a 4xx, not a 5xx. #1905
  • Makes the pkg.logger.Logger.With immutable by creating a child logger instead of mutating the delegate one to prevent side effects 1906
  • Extend request timeout to 10s for slow tests 1926

Performance

  • Improve performance of Check API in the case that the query involves resolving a tuple to userset and/or a userset, by streaming intermediate results. #1888
Commits
  • b985c58 docs(v1.6.1): add v1.6.1 release notes to CHANGELOG (#1925)
  • 7be1b5b Extend request timeout to 10s for slow tests (#1926)
  • f3be13c feat: add SQLite support (#1615)
  • d07302b chore(deps): bump the dependencies group with 5 updates (#1919)
  • 7420b13 chore(deps): bump snyk/actions from 9213221444c2dc9e8b2502c1e857c26d851e84a7 ...
  • 7dfc0ff chore: update to latest openfga/api (#1915)
  • 81222f5 refactor: remove unused emptyTupleIterator (#1917)
  • b8787d5 ci: reorganize 'main' workflow and delete unused workflow (#1912)
  • f4e6828 perf: stream dispatches for TTU and userset slowpath (#1888)
  • 3f4b983 fix: makes Logger.With immutable. (#1906)
  • Additional commits viewable in compare view


Updates github.com/schollz/progressbar/v3 from 3.14.6 to 3.16.0

Release notes

Sourced from github.com/schollz/progressbar/v3's releases.

v3.16.0

What's Changed

Full Changelog: https://github.com/schollz/progressbar/compare/v3.15.0...v3.16.0

v3.15.0

What's Changed

New Contributors

Full Changelog: https://github.com/schollz/progressbar/compare/v3.14.6...v3.15.0

Commits
  • f1b3580 Merge pull request #199 from chengxilo/update-spinner
  • 3d93361 feat: update the test.Now the actual is what the output would be like in the ...
  • efe17f0 fix:according to renderProgressBar, only update spinner when ignore length.
  • fbe274c fix:check whether the progressbar is visible before start the spinner change ...
  • 12ba16a import virtualterm for testing.
  • 5ad50c6 feat: make progressbar could update according to an interval or update each t...
  • d773ff3 Merge pull request #193 from luo-cheng-xi/fix-change-max
  • 191b8ab update dependencies
  • dcb591b Merge pull request #196 from luo-cheng-xi/not-now
  • 4c1391b Merge pull request #194 from luo-cheng-xi/feature-scrolling-detail
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
stacklok-cloud[bot] commented 2 months ago

Minder Vulnerability Report ✅

Minder analyzed this PR and found it does not add any new vulnerable dependencies.

Vulnerability scan of d2bd0367:

  • 🐞 vulnerable packages: 0
  • 🛠 fixes available for: 0
dependabot[bot] commented 1 month ago

Looks like these dependencies are updatable in another way, so this is no longer needed.