osbuild / image-builder

Image Builder service for console.redhat.com
Apache License 2.0
49 stars 44 forks source link

build(deps): bump the go-deps group across 1 directory with 3 updates #1344

Closed dependabot[bot] closed 1 month ago

dependabot[bot] commented 1 month ago

Bumps the go-deps group with 3 updates in the / directory: github.com/getsentry/sentry-go, github.com/jackc/pgx/v5 and github.com/osbuild/images.

Updates github.com/getsentry/sentry-go from 0.28.1 to 0.29.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.29.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.29.0.

Breaking Changes

  • Remove the sentrymartini integration (#861)
  • The WrapResponseWriter has been moved from the sentryhttp package to the internal/httputils package. If you've imported it previosuly, you'll need to copy the implementation in your project. (#871)

Features

  • Add new convenience methods to continue a trace and propagate tracing headers for error-only use cases. (#862)

    If you are not using one of our integrations, you can manually continue an incoming trace by using sentry.ContinueTrace() by providing the sentry-trace and baggage header received from a downstream SDK.

    hub := sentry.CurrentHub()
    sentry.ContinueTrace(hub, r.Header.Get(sentry.SentryTraceHeader), r.Header.Get(sentry.SentryBaggageHeader)),
    

    You can use hub.GetTraceparent() and hub.GetBaggage() to fetch the necessary header values for outgoing HTTP requests.

    hub := sentry.GetHubFromContext(ctx)
    req, _ := http.NewRequest("GET", "http://localhost:3000", nil)
    req.Header.Add(sentry.SentryTraceHeader, hub.GetTraceparent())
    req.Header.Add(sentry.SentryBaggageHeader, hub.GetBaggage())
    

Bug Fixes

  • Initialize HTTPTransport.limit if nil (#844)
  • Fix sentry.StartTransaction() returning a transaction with an outdated context on existing transactions (#854)
  • Treat Proxy-Authorization as a sensitive header (#859)
  • Add support for the http.Hijacker interface to the sentrynegroni package (#871)
  • Go version >= 1.23: Use value from http.Request.Pattern for HTTP transaction names when using sentryhttp & sentrynegroni (#875)
  • Go version >= 1.21: Fix closure functions name grouping (#877)

Misc

  • Collect span origins (#849)
Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.29.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.29.0.

Breaking Changes

  • Remove the sentrymartini integration (#861)
  • The WrapResponseWriter has been moved from the sentryhttp package to the internal/httputils package. If you've imported it previosuly, you'll need to copy the implementation in your project. (#871)

Features

  • Add new convenience methods to continue a trace and propagate tracing headers for error-only use cases. (#862)

    If you are not using one of our integrations, you can manually continue an incoming trace by using sentry.ContinueTrace() by providing the sentry-trace and baggage header received from a downstream SDK.

    hub := sentry.CurrentHub()
    sentry.ContinueTrace(hub, r.Header.Get(sentry.SentryTraceHeader), r.Header.Get(sentry.SentryBaggageHeader)),
    

    You can use hub.GetTraceparent() and hub.GetBaggage() to fetch the necessary header values for outgoing HTTP requests.

    hub := sentry.GetHubFromContext(ctx)
    req, _ := http.NewRequest("GET", "http://localhost:3000", nil)
    req.Header.Add(sentry.SentryTraceHeader, hub.GetTraceparent())
    req.Header.Add(sentry.SentryBaggageHeader, hub.GetBaggage())
    

Bug Fixes

  • Initialize HTTPTransport.limit if nil (#844)
  • Fix sentry.StartTransaction() returning a transaction with an outdated context on existing transactions (#854)
  • Treat Proxy-Authorization as a sensitive header (#859)
  • Add support for the http.Hijacker interface to the sentrynegroni package (#871)
  • Go version >= 1.23: Use value from http.Request.Pattern for HTTP transaction names when using sentryhttp & sentrynegroni (#875)
  • Go version >= 1.21: Fix closure functions name grouping (#877)

Misc

  • Collect span origins (#849)
Commits


Updates github.com/jackc/pgx/v5 from 5.7.0 to 5.7.1

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.7.1 (September 10, 2024)

  • Fix data race in tracelog.TraceLog
  • Update puddle to v2.2.2. This removes the import of nanotime via linkname.
  • Update golang.org/x/crypto and golang.org/x/text
Commits
  • 672c4a3 Release v5.7.1
  • f8a5a5c Update golang.org/x/crypto and golang.org/x/text
  • ab36c2c Upgrade puddle to v2.2.2
  • ce66b1d Fix data race with TraceLog.Config initialization
  • See full diff in compare view


Updates github.com/osbuild/images from 0.84.0 to 0.86.0

Release notes

Sourced from github.com/osbuild/images's releases.

0.86.0

Changes with 0.86.0

  • Add RHEL 9.6 repos and start testing (#920)
    • Author: Achilleas Koutsou, Reviewers: Simon de Vlieger
  • Add default OpenSCAP datastream for RHEL10 & cs10 images (#924)
    • Author: Gianluca Zuccarelli, Reviewers: Tomáš Hozza
  • Remove dnsmasq from base package set for edge-commit in RHEL 9.6+ (THEEDGE-4012) (#921)
    • Author: Achilleas Koutsou, Reviewers: Simon de Vlieger
  • cmd: add new otk-make-grub2-inst-stage external (#916)
    • Author: Michael Vogt, Reviewers: Simon de Vlieger

— Somewhere on the Internet, 2024-09-16

0.85.0

Changes with 0.85.0

  • Revert "manifest: switch to halt --eject to avoid auto-reboot" (#915)
    • Author: Michael Vogt, Reviewers: Achilleas Koutsou
  • Update osbuild dependency commit ID to latest (#913)
    • Author: SchutzBot, Reviewers: Achilleas Koutsou
  • cmd/otk-*: do basic input validation to avoid crashing too easily (#896)
    • Author: Michael Vogt, Reviewers: Achilleas Koutsou, Simon de Vlieger
  • pkg/osbuild: replace openscap with compliance in rhsm facts (#914)
    • Author: Sanne Raymaekers, Reviewers: Gianluca Zuccarelli

— Somewhere on the Internet, 2024-09-10

Commits
  • 70fce2f cmd: add new otk-make-grub2-inst-stage external
  • 1cbbfed test/oscap: add RHEL10 oscap test
  • 1fe4cb0 pkg/oscap: add default RHEL10 datastream
  • aaaf2dd distro/rhel9: drop dnsmasq from edge-commit package set
  • 5efb06c gitlab: add RHEL 9.6 build configs
  • a8d82a1 test: add RHEL 9.6 test repositories
  • dc9903b cmd/otk-*: do basic input validation to avoid crashing too easily
  • 4cc61ea Revert "manifest: switch to halt --eject to avoid auto-reboot"
  • cadc2d2 pkg/osbuild: replace openscap with compliance in rhsm facts
  • b9a4a36 schutzfile: Update osbuild dependency commit ID
  • See full diff in compare view


You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions
dependabot[bot] commented 1 month ago

Looks like these dependencies are updatable in another way, so this is no longer needed.