ossf / package-feeds

Feed parsing for language package manager updates
Apache License 2.0
70 stars 24 forks source link

Bump gocloud.dev from 0.30.0 to 0.37.0 #440

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps gocloud.dev from 0.30.0 to 0.37.0.

Release notes

Sourced from gocloud.dev's releases.

v0.37.0

  • blob

    • s3blob: Support S3 server side encryption headers for Write and Copy.
    • gcsblob: Ensure driver sets Content-Type auto-detection properly.
  • pubsub

    • azpubsub: Ensure 401s are not retryable.
    • azpubsub: Allow configuring max_recv_batch_size in via URL.
    • mongodocstore: Fix error when calling the update function with no 'set' operations.
  • docstore

    • all: Add Offset method, useful for pagination

v0.36.0

blob

  • all: Allow disabling of ContentType auto-detection during writes.

pubsub

  • azuresb: Added a new auth method to support Service principal/kubelet identity/Workload identity auth methods.

docstore

  • all: Add in/not-in operators for Query.
  • gcpfirestore: Added a missing resource header when running query.

mysql

  • Pass TLS config directly to MySQL's config

v0.35.0

BREAKING CHANGES

This release updates the dependency on AWS/S3, which included some breaking changes; see google/go-cloud#3342 for details.

blob

  • gcsblob: Fix unauthenticated requests.

runtimevar

  • constantvar: Add support for reading the constant variable value from the environment.

docstore

  • gcpfilestore: Add support for non-default databases.

v0.34.0

  • blob

    • fileblob: Added an option to avoid using os.TempDir for temp files.
    • gcsblob: Don't hard-fail if no DefaultCredentials are found.
  • aws/rds: Switch AWS RDS CA bundle to the officially documented URL

... (truncated)

Commits


Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)