Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]
v1.33.0
1.33.0
Features
Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.
Maintenance
Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]
Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]
Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]
v1.32.0
1.32.0
Maintenance
Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]
This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @jbduncan !). Please open an issue if you run into one.
Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]
1.33.0
Features
Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.
Maintenance
Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]
Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]
Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]
1.32.0
Maintenance
Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]
This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @jbduncan !). Please open an issue if you run into one.
Unfortunately, there are also breaking changes in this release:
The type of Metadata.Tools has changed from *[]Tool to *ToolsChoice, to facilitate the deprecation of Tool in the spec
ToolsChoice holds both legacy *[]Tool, as well as the new *[]Component and *[]Service fields
The Tool type, as well as the ToolsChoice.Tools field are marked as deprecated
During encoding and decoding, it is asserted that only one of both options can be present, in accordance with the "One of" constraint of the spec
When encoding to lower spec versions than v1.5 (using EncodeVersion), Components and Services are automatically converted to legacy Tools
It is strongly recommended to use Components and Services. However, when consuming BOMs, applications should still expect legacy Tools to be present, and handle them accordingly.
Changelog
Fixes
64eb0c84b3d909db47c5154c17d075f68b0c85ae: fix: remove format linters that require extra tooling (@nscuro)
Building and Packaging
696aa66151e800a672c9ec860f30d8716ae6a025: build(deps): bump actions/checkout from 3.5.3 to 4.1.0 (@dependabot[bot])
b50b319d1580d5b624cfc866bc108b589b328157: build(deps): bump actions/checkout from 4.1.0 to 4.1.1 (@dependabot[bot])
5cad1b0a7dad106950790fad960be5f7e62b2110: build(deps): bump actions/setup-go from 4.1.0 to 5.0.0 (@dependabot[bot])
b0910619560e5b0b0fae51dc97c4a343983873fb: build(deps): bump gitpod/workspace-go from d3603c7 to 94ae638 (@dependabot[bot])
9e310b6d641245c89aa01f07a21b50c38f04b087: build(deps): bump gitpod/workspace-go from f37c673 to d3603c7 (@dependabot[bot])
89494fd98291ca8115e02cab78e2e47360352f00: build(deps): bump goreleaser/goreleaser-action from 4.4.0 to 5.0.0 (@dependabot[bot])
Others
61dd91e0bbe730454bef42bc0c1b0a3f97411c02: feat(spec1-5): add support for machine learning (@nscuro)
f831960f0887c1f60681924e4d4382cd4bb52ff0: feat(spec1-5): update valid-vulnerability test snapshots (@nscuro)
ffc9a4eb9204f5a31b7fb1d6cd907e6cc3e93578: ci: enable more linters (@mmorel-35)
This release makes some minor improvements to SecureJoin:
Some changes were made to how lexical components are handled during
resolution. There is no change in behaviour, and both implementations
are safe, however the newer implementation is much easier to reason
about.
The error returned when a symlink loop has been detected will now
reference the correct path. #10
Bumps the go-modules group with 25 updates in the / directory:
1.3.21.4.01.30.01.33.10.18.00.18.52.12.02.14.00.7.20.8.00.6.10.6.20.11.40.12.31.0.61.1.04.2.14.3.01.3.61.3.80.2.40.2.50.5.00.6.00.8.00.8.21.4.31.4.45.11.05.12.01.5.31.5.41.17.41.17.80.0.0-20230301153543-ba94b245509b0.1.14.1.194.1.210.4.40.4.70.2.00.4.01.3.11.4.00.5.30.5.42.15.02.16.01.33.01.34.1Updates
github.com/BurntSushi/tomlfrom 1.3.2 to 1.4.0Release notes
Sourced from github.com/BurntSushi/toml's releases.
Commits
1e2c053Undeprecate PrimitiveDecode and MetaData.PrimitiveDecode()f8f7e48Update toml-test9a80667Add -json flag to tomlv3203540fuzz: move fuzz_targets from oss-fuzz (#406)77ce858Add Marshal Function (#405)0e879cbFix panic when trying to set subkey for a value that's not a tablec299e75Update toml-test4223137Fix inline tables with dotted keys inside inline arrays (#400)45e7e49Update toml-testc320c2dFix utf8.RuneError testUpdates
github.com/onsi/gomegafrom 1.30.0 to 1.33.1Release notes
Sourced from github.com/onsi/gomega's releases.
... (truncated)
Changelog
Sourced from github.com/onsi/gomega's changelog.
... (truncated)
Commits
8a658bbv1.33.1e9bc35aBump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.23a66379fix confusing eventually docsf2e65fcv1.33.002e8706docs: Receive(POINTER, MATCHER)ec1f186feat: receiver matcher accepting (POINTER, MATCHER), includes unit tests9999debBump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745)cb5ff21Bump github-pages from 229 to 230 in /docs (#735)bac6596Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746)4379951v1.32.0Updates
github.com/paketo-buildpacks/occamfrom 0.18.0 to 0.18.5Release notes
Sourced from github.com/paketo-buildpacks/occam's releases.
Commits
f23ed80use go 1.20 (#288)4e0efearemove toolchain from go.modea10e39update fakes059d6bcBump github.com/google/go-containerregistry from 0.14.0 to 0.19.11f22679Bump github.com/docker/docker37cf400Bump github.com/onsi/gomega from 1.30.0 to 1.32.0122482eBump github.com/testcontainers/testcontainers-go from 0.26.0 to 0.30.0 (#285)393f58fBump google.golang.org/protobuf from 1.31.0 to 1.33.0f37d228Bump github.com/opencontainers/runc from 1.1.5 to 1.1.121d68391tests: adding tests for NewContainerFromInspectOutput functionUpdates
github.com/paketo-buildpacks/packit/v2from 2.12.0 to 2.14.0Release notes
Sourced from github.com/paketo-buildpacks/packit/v2's releases.
Commits
13393ecSupport reading service bindings from VCAP_SERVICES env var (#566)35d8f76Bump github.com/onsi/gomega from 1.33.0 to 1.33.1ce376b7Fixes mirror bug when originalHost is excluded (#569)4c9f338Allows users to set a dependency mirror (#563)4e9c21dBump github.com/onsi/gomega from 1.32.0 to 1.33.0dd77ec5Bump github.com/ulikunitz/xz from 0.5.11 to 0.5.1295b8056Bump github.com/onsi/gomega from 1.31.1 to 1.32.0777a503Bump github.com/stretchr/testify from 1.8.4 to 1.9.0c1b785bBump github.com/google/uuid from 1.5.0 to 1.6.0b31dc83Bump github.com/onsi/gomega from 1.31.0 to 1.31.1Updates
github.com/CycloneDX/cyclonedx-gofrom 0.7.2 to 0.8.0Release notes
Sourced from github.com/CycloneDX/cyclonedx-go's releases.
Commits
b9654aeMerge pull request #90 from CycloneDX/spec-v1.564eb0c8fix: remove format linters that require extra toolingc7a84acfeat(spec1-5): handle deprecation of toolsf856daafeat(spec1-5): add support for formulation2fbde0efeat(spec1-5): add support for identity, occurrences, and callstack evidence61dd91efeat(spec1-5): add support for machine learningf831960feat(spec1-5): updatevalid-vulnerabilitytest snapshotsfe3a904feat(spec1-5): add support for ssvc scoring method7d2713ffeat(spec1-5): add support for vulnerability proof of concept2ae5445feat(spec1-5): add support for additional compositions and composition identityUpdates
github.com/Microsoft/go-winiofrom 0.6.1 to 0.6.2Release notes
Sourced from github.com/Microsoft/go-winio's releases.
Commits
3c9576cUpdate go1.21 and CI (#315)008bc6efileinfo: internally fix FileBasicInfo memory alignment (#312)bc421d9Bug: Close hvsock handle on listen error; fix tests (#310)553a715Merge pull request #302 from dblohm7/implevel21963303pipe.go: add DialPipeAccessImpLevele6aebd6fix: already typo (#303)eb5b095sd.go: fix calculation of security descriptor length in SddlToSecurityDescrip...87c84cf[lint] Remove deprecated tar.TypeRegA (#300)9f0d5dcSwitch from sycall to windows (#295)fec52bd[lint] Fix errors from #276 (#296)Updates
github.com/Microsoft/hcsshimfrom 0.11.4 to 0.12.3Release notes
Sourced from github.com/Microsoft/hcsshim's releases.
... (truncated)
Commits
c950974Update go-winio to v0.6.2 & fix lint errorsad1ccf5fix: move permissions to the correct job (#2080) (#2081)6588c1cUpdating permissions and github release action versions (#2078) (#2079)202f90aAdd spans and drop large size high volume trace logsfe8c673updatenewBinaryCmdURL path handling (#2041)85086d7Upgrade to go1.21 + fix lint errors8039310[deps] Omni-bus dependency update (#2039)7458e58Update Cmd IO handling (#1937)5f9910aFix CodeQL pipeline failure (#2032)c56a09cMerge pull request #1998 from yyatmsft/removeInternalTests2Updates
github.com/andybalholm/brotlifrom 1.0.6 to 1.1.0Commits
17e5901Make my matchfinder work more accessible.cf812c0matchfinder: add M01b6cf36matchfinder: remove MultiHash265f3afmatchfinder: penalize score for overlapping matchesa8d524amatchfinder: replace Score function with DistanceBitCost578645ematchfinder: add MultiHash24b2bfamatchfinder.M4: add Score function4a024e3matchfinder.M4: add match chain3a1c5cdFix typo in comment.0d2aef3matchfinder.M4: factor out extendMatch2Updates
github.com/cenkalti/backoff/v4from 4.2.1 to 4.3.0Commits
720b789remove travis badge from readmea83af7ffeat(backoff): Add functional options for ExponentialBackOff Closes #136Updates
github.com/cloudflare/circlfrom 1.3.6 to 1.3.8Release notes
Sourced from github.com/cloudflare/circl's releases.
Commits
4bb5601Serializing ciphertext with 32-bit prefixes.a4252c7Test functions working with ciphertext.64431bbTesting long plaintext.fe2b663Using SHAKE128 as a fixed prgn for golden files.2c600ffAlign to thepuregobuild tag, removingnoasmbuild taga4b7601Ensure pairing functions don't overwrite the input.b4f1578Test that shows pairing functions overwrite its input.bba8f1aBumps golangci-lint action (#485)dc430ecExplicitly installs Go with version before CodeQL analysis.fd7a97fRename test file extension.Updates
github.com/cyphar/filepath-securejoinfrom 0.2.4 to 0.2.5Release notes
Sourced from github.com/cyphar/filepath-securejoin's releases.
Commits
d861a11VERSION: release v0.2.587bc53ajoin: fix ELOOP error pathe9be397join: don't allow .. and . in working path during resolution75cdbeagha: update Go versionsb69b737VERSION: back to developmentUpdates
github.com/distribution/referencefrom 0.5.0 to 0.6.0Release notes
Sourced from github.com/distribution/reference's releases.
Commits
ff14fafMerge pull request #9 from ozairasim/exclude-domain-from-name-length-validation2a66312Merge pull request #10 from xrstf/patch-1094e717fix typo in readmeaaca75eExclude domain from name length check8507c7fMerge pull requestLooks like these dependencies are updatable in another way, so this is no longer needed.