search

paketo-buildpacks / go-dist

A Cloud Native Buildpack for Go
Apache License 2.0
25 stars 12 forks source link

Bump the go-modules group across 1 directory with 19 updates #844

Closed dependabot[bot] closed 3 months ago

dependabot[bot] commented 3 months ago

Bumps the go-modules group with 15 updates in the / directory:

Package From To
github.com/Microsoft/hcsshim 0.12.4 0.12.5
github.com/cyphar/filepath-securejoin 0.2.5 0.3.0
github.com/go-logr/logr 1.4.1 1.4.2
github.com/google/go-containerregistry 0.19.2 0.20.1
github.com/mattn/go-runewidth 0.0.15 0.0.16
github.com/moby/sys/sequential 0.5.0 0.6.0
github.com/shirou/gopsutil/v3 3.23.12 3.24.5
github.com/skeema/knownhosts 1.2.2 1.3.0
github.com/spdx/tools-golang 0.5.4 0.5.5
github.com/sylabs/sif/v2 2.17.0 2.18.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.49.0 0.53.0
golang.org/x/crypto 0.24.0 0.25.0
golang.org/x/mod 0.17.0 0.19.0
golang.org/x/net 0.25.0 0.27.0
google.golang.org/grpc 1.62.0 1.65.0

Updates github.com/Microsoft/hcsshim from 0.12.4 to 0.12.5

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.5

What's Changed

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.4...v0.12.5

Commits
  • e970943 Modifying network flag EnableIov.
  • 4f77a09 Hcsshim wrapper over HNS API needed for exclusion of management mac addresses...
  • 3b5bd8a [release/0.12] vendor: github.com/containerd/containerd v17.18
  • 40cdbc8 Adding state attribute to the HNSEndpoint struct to support hyperv containers...
  • See full diff in compare view


Updates github.com/cyphar/filepath-securejoin from 0.2.5 to 0.3.0

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.3.0

This release contains no changes to SecureJoin.

However, it does introduce a new *os.File-based API which is much safer to use for most usecases. These are adapted from libpathrs and are the bare minimum to be able to operate more safely on an untrusted rootfs where an attacker has write access (something that SecureJoin cannot protect against). The new APIs are:

  • OpenInRoot, which resolves a path inside a rootfs and returns an *os.File handle to the path. Note that the file handle returned by OpenInRoot is an O_PATH handle, which cannot be used for reading or writing (as well as some other operations -- see open(2) for more details).

  • Reopen, which takes an O_PATH file handle and safely re-opens it to "upgrade" it to a regular handle.

  • MkdirAll, which is a safe implementation of os.MkdirAll that can be used to create directory trees inside a rootfs.

As these are new APIs, it is possible they may change in the future. However, they should be safe to start migrating to as we have extensive tests ensuring they behave correctly and are safe against various races and other attacks.

Signed-off-by: Aleksa Sarai cyphar@cyphar.com

Commits
  • b984b9c VERSION: bump to 0.3.0
  • 6ae6d58 merge #15 into cyphar/filepath-securejoin:main
  • 0a923e5 README: update to describe and strongly recommend new APIs
  • ebb9f1f mkdirall: switch away from O_PATH for mkdir loop
  • 975d7b3 open: add OpenInRoot and Reopen tests
  • 1e6990b open: add Open(at)InRoot and Reopen
  • 96f72c6 procfs: make procSelfFdReadlink more generic with generics
  • a91c705 lookup: clean up test helper
  • fbc8097 proc: do not export internal PROC_ constants
  • ce95b91 gha: update actions/checkout to v4
  • Additional commits viewable in compare view


Updates github.com/go-logr/logr from 1.4.1 to 1.4.2

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.2

What's Changed

Dependencies:

Full Changelog: https://github.com/go-logr/logr/compare/v1.4.1...v1.4.2

Commits
  • 1205f42 Merge pull request #295 from go-logr/dependabot/github_actions/actions/checko...
  • ccedcbd Merge pull request #294 from go-logr/dependabot/github_actions/github/codeql-...
  • bead577 build(deps): bump actions/checkout from 4.1.5 to 4.1.6
  • a492d95 build(deps): bump github/codeql-action from 3.25.4 to 3.25.5
  • 19ad07c build(deps): bump ossf/scorecard-action from 2.3.1 to 2.3.3
  • 1c97a21 build(deps): bump actions/checkout from 4.1.4 to 4.1.5
  • f70c5b5 build(deps): bump github/codeql-action from 3.25.3 to 3.25.4
  • 4ade8d3 build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1
  • 88d98bd Merge pull request #289 from go-logr/dependabot/github_actions/golangci/golan...
  • 432cd86 Merge pull request #288 from go-logr/dependabot/github_actions/actions/setup-...
  • Additional commits viewable in compare view


Updates github.com/google/go-containerregistry from 0.19.2 to 0.20.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.20.1

What's Changed

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.20.0...v0.20.1

v0.20.0

What's Changed

New Contributors

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.19.2...v0.20.0

Commits


Updates github.com/mattn/go-runewidth from 0.0.15 to 0.0.16

Commits


Updates github.com/moby/sys/sequential from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/moby/sys/sequential's releases.

signal/v0.6.0

What's Changed

New Contributors

Full Changelog: https://github.com/moby/sys/compare/signal/v0.5.0...signal/v0.6.0

mountinfo v0.6.0

New functionality

  • Add MountedFast by @​kolyshkin in moby/sys#100 Note: most users should keep using Mounted, which already incorporates all optimizations from MountedFast

Full changelog: https://github.com/moby/sys/compare/mountinfo/v0.5.0...mountinfo/v0.6.0

sequential v0.6.0

What's Changed

  • sequential: remove fileFlagSequentialScan const
  • sequential: consistently use x/sys/windows for consts
  • sequential: open(File)Sequential: remove unused arg
  • sequential: move error-handling to openFileSequential
  • sequential: simplify docs for non-Windows implementations
  • sequential: update docs for Windows-implementation
  • bump golang.org/x/sys to v0.1.0

Full Changelog: https://github.com/moby/sys/compare/sequential/v0.5.0...sequential/v0.6.0

Commits
  • 03b9f8d Merge pull request #94 from thaJeztah/bump_mountinfo
  • bdd898e mount: update github.com/moby/sys/mountinfo v0.5.0
  • fbd276c Merge pull request #93 from kolyshkin/ci-f35
  • afb7f50 Merge pull request #92 from kolyshkin/more-linters
  • 9372d68 ci: bump Fedora to 35
  • 9a90d6d Format code with gofumpt, enable linter
  • 85e4bfd Makefile: update golangci-lint to 1.43.0
  • f0fb439 .gitattributes: add
  • b016007 ci: add unconvert and errorlint linters to golanci
  • 6056970 Fix errorlint warnings
  • Additional commits viewable in compare view


Updates github.com/shirou/gopsutil/v3 from 3.23.12 to 3.24.5

Release notes

Sourced from github.com/shirou/gopsutil/v3's releases.

v3.24.5

What's Changed

cpu

process

Other Changes

New Contributors

Full Changelog: https://github.com/shirou/gopsutil/compare/v3.24.4...v3.24.5

v3.24.4

What's Changed

net

New Contributors

Full Changelog: https://github.com/shirou/gopsutil/compare/v3.24.3...v3.24.4

v3.24.3

What's Changed

disk

host

load

process

New Contributors

... (truncated)

Commits
  • 4336530 Merge pull request #1649 from shirou/feat/add_process_cwd_openbsd
  • cb52f7a Merge pull request #1651 from Dylan-M/aix_support
  • 125da53 Update the README charts with the AIX information
  • ff4ae36 Remove extraneous development note comments
  • df9c9bf Update min version in the readme to match new required min version.
  • 1d7b4a3 Revert accidental change of go version in go.mod (wasn't supposed to commit).
  • 9bf502f Fix logic errors, syntax errors, and typos
  • b133d60 Ignore host_aix_ppc64 for now
  • b4d95a4 Raise minimum go version to 1.18 (required by changes) and run go mod tidy
  • 0917790 Remove inappropriate package addition
  • Additional commits viewable in compare view


Updates github.com/skeema/knownhosts from 1.2.2 to 1.3.0

Commits
  • 9485bde docs: add PR template and CONTRIBUTING.md guide; minor README tweaks
  • 8b8ca37 host matching: handle wildcards with non-standard port (#10)
  • 7c797a4 Merge pull request #9 from skeema/certs-backwards-compat
  • 53a26cc Minor adjustments based on initial PR feedback
  • 69b4a62 certs: reimplement previous commit to maintain backwards compat
  • d314bf3 Support cert authorities
  • 5832aa8 ci: send coverage to Coveralls; upgrade action versions
  • 7acc57b go.mod: update golang.org/x dependencies
  • See full diff in compare view


Updates github.com/spdx/tools-golang from 0.5.4 to 0.5.5

Release notes

Sourced from github.com/spdx/tools-golang's releases.

v0.5.5

What's Changed

New Contributors

Full Changelog: https://github.com/spdx/tools-golang/compare/v0.5.4...v0.5.5

Commits
  • 9db247b fix: provide a clearer error when using an invalid originator (#246)
  • 57d4b8e fix: panic if JSON relationship array contains null (#239)
  • 606f188 chore: update makefile to include bootstrap and go mod tidy (#243)
  • 282609e fix: properly normalize Windows paths (#242)
  • See full diff in compare view


Updates github.com/sylabs/sif/v2 from 2.17.0 to 2.18.0

Release notes

Sourced from github.com/sylabs/sif/v2's releases.

v2.18.0

What's Changed

Full Changelog: https://github.com/sylabs/sif/compare/v2.17.1...v2.18.0

v2.17.1

What's Changed

Full Changelog: https://github.com/sylabs/sif/compare/v2.17.0...v2.17.1

Commits
  • a2a8352 Merge pull request #374 from tri-adam/delete-objects
  • 68683b4 feat: add DeleteObjects
  • 94b0b65 build(deps): bump github.com/google/go-containerregistry (#376)
  • 48f265f Merge pull request #373 from tri-adam/compaction
  • e8dad67 refactor: improve delete compaction logic
  • 8783e3b refactor: improve compaction logic for AddObject
  • e3aa617 Merge pull request #375 from tri-adam/update-readme
  • 8f557d5 docs: update links to Go docs
  • de30604 Merge pull request #368 from tri-adam/go-1.23-rc
  • 9ea2328 ci: add testing against Go 1.23 RC
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.49.0 to 0.53.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

Release v1.28.0/v0.53.0/v0.22.0/v0.8.0/v0.3.0/v0.1.0

Overview

Added

  • Add the new go.opentelemetry.io/contrib/detectors/azure/azurevm package to provide a resource detector for Azure VMs. (#5422)
  • Add support to configure views when creating MeterProvider using the config package. (#5654)
  • The go.opentelemetry.io/contrib/config add support to configure periodic reader interval and timeout. (#5661)
  • Add log support for the autoexport package. (#5733)
  • Add support for disabling the old runtime metrics using the OTEL_GO_X_DEPRECATED_RUNTIME_METRICS=false environment variable. (#5747)
  • Add support for signal-specific protocols environment variables (OTEL_EXPORTER_OTLP_TRACES_PROTOCOL, OTEL_EXPORTER_OTLP_LOGS_PROTOCOL, OTEL_EXPORTER_OTLP_METRICS_PROTOCOL) in go.opentelemetry.io/contrib/exporters/autoexport. (#5816)
  • The go.opentelemetry.io/contrib/processors/minsev module is added. This module provides and experimental logging processor with a configurable threshold for the minimum severity records must have to be recorded. (#5817)
  • The go.opentelemetry.io/contrib/processors/baggagecopy module. This module is a replacement of go.opentelemetry.io/contrib/processors/baggage/baggagetrace. (#5824)

Changed

  • Improve performance of go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
  • Improve performance of go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
  • Update go.opentelemetry.io/contrib/config to latest released configuration schema which introduces breaking changes where Attributes is now a map[string]interface{}. (#5758)
  • Upgrade all dependencies of go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0. (#5847)

Fixed

  • Custom attributes targeting metrics recorded by the go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are not ignored anymore. (#5129)
  • The double setup in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace/example that caused duplicate traces. (#5564)
  • The superfluous response.WriteHeader call in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp when the response writer is flushed. (#5634)
  • Use c.FullPath() method to set http.route attribute in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#5734)
  • Out-of-bounds panic in case of invalid span ID in go.opentelemetry.io/contrib/propagators/b3. (#5754)

Deprecated

  • The go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5550. (#5645)
  • The go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5552. (#5646)
  • The go.opentelemetry.io/contrib/samplers/aws/xray package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5554. (#5647)
  • The go.opentelemetry.io/contrib/processors/baggage/baggagetrace package is deprecated. Use the added go.opentelemetry.io/contrib/processors/baggagecopy package instead. (#5824)
    • Use baggagecopy.NewSpanProcessor as a replacement for baggagetrace.New.
      • NewSpanProcessor accepts a Fitler function type that selects which baggage members are added to a span.
      • NewSpanProcessor returns a *baggagecopy.SpanProcessor instead of a trace.SpanProcessor interface. The returned type still implements the interface.

#5550: open-telemetry/opentelemetry-go-contrib#5550 #5552: open-telemetry/opentelemetry-go-contrib#5552 #5554: open-telemetry/opentelemetry-go-contrib#5554

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.28.0/0.53.0/0.22.0/0.8.0/0.3.0/0.1.0] - 2024-07-02

Added

  • Add the new go.opentelemetry.io/contrib/detectors/azure/azurevm package to provide a resource detector for Azure VMs. (#5422)
  • Add support to configure views when creating MeterProvider using the config package. (#5654)
  • The go.opentelemetry.io/contrib/config add support to configure periodic reader interval and timeout. (#5661)
  • Add log support for the autoexport package. (#5733)
  • Add support for disabling the old runtime metrics using the OTEL_GO_X_DEPRECATED_RUNTIME_METRICS=false environment variable. (#5747)
  • Add support for signal-specific protocols environment variables (OTEL_EXPORTER_OTLP_TRACES_PROTOCOL, OTEL_EXPORTER_OTLP_LOGS_PROTOCOL, OTEL_EXPORTER_OTLP_METRICS_PROTOCOL) in go.opentelemetry.io/contrib/exporters/autoexport. (#5816)
  • The go.opentelemetry.io/contrib/processors/minsev module is added. This module provides and experimental logging processor with a configurable threshold for the minimum severity records must have to be recorded. (#5817)
  • The go.opentelemetry.io/contrib/processors/baggagecopy module. This module is a replacement of go.opentelemetry.io/contrib/processors/baggage/baggagetrace. (#5824)

Changed

  • Improve performance of go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
  • Improve performance of go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp with the usage of WithAttributeSet() instead of WithAttribute(). (#5664)
  • Update go.opentelemetry.io/contrib/config to latest released configuration schema which introduces breaking changes where Attributes is now a map[string]interface{}. (#5758)
  • Upgrade all dependencies of go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0. (#5847)

Fixed

  • Custom attributes targeting metrics recorded by the go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are not ignored anymore. (#5129)
  • The double setup in go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace/example that caused duplicate traces. (#5564)
  • The superfluous response.WriteHeader call in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp when the response writer is flushed. (#5634)
  • Use c.FullPath() method to set http.route attribute in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin. (#5734)
  • Out-of-bounds panic in case of invalid span ID in go.opentelemetry.io/contrib/propagators/b3. (#5754)

Deprecated

  • The go.opentelemetry.io/contrib/instrumentation/github.com/labstack/echo/otelecho package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5550. (#5645)
  • The go.opentelemetry.io/contrib/instrumentation/gopkg.in/macaron.v1/otelmacaron package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5552. (#5646)
  • The go.opentelemetry.io/contrib/samplers/aws/xray package is deprecated. If you would like to become a Code Owner of this module and prevent it from being removed, see #5554. (#5647)
  • The go.opentelemetry.io/contrib/processors/baggage/baggagetrace package is deprecated. Use the added go.opentelemetry.io/contrib/processors/baggagecopy package instead. (#5824)
    • Use baggagecopy.NewSpanProcessor as a replacement for baggagetrace.New.
      • NewSpanProcessor accepts a Fitler function type that selects which baggage members are added to a span.
      • NewSpanProcessor returns a *baggagecopy.SpanProcessor instead of a trace.SpanProcessor interface. The returned type still implements the interface.

#5550: open-telemetry/opentelemetry-go-contrib#5550 #5552: open-telemetry/opentelemetry-go-contrib#5552 #5554: open-telemetry/opentelemetry-go-contrib#5554

[1.27.0/0.52.0/0.21.0/0.7.0/0.2.0] - 2024-05-21

... (truncated)

Commits
  • af75717 Release v1.28.0/v0.53.0/v0.22.0/v0.8.0/v0.3.0/v0.1.0 (#5847)
  • b6a9271 fix(deps): update module github.com/aws/aws-sdk-go to v1.54.13 (#5843)
  • 66306fe Add @​XSAM and @​dmathieu as repository maintainers (#5838)
  • f783d1f Upgrade Go versions in CI (#5845)
  • d6e791c fix(deps): update module github.com/aws/aws-sdk-go-v2/service/s3 to v1.58.0 (...
  • efde831 Remove otelmongo deprecation while we onboard a Code Owner (#5840)
  • 32d3e6a fix(deps): update module google.golang.org/grpc to v1.65.0 (#5837)
  • 1ce0d1c Revert toolchain addition to autoexport (#5841)
  • 53f34f2 fix(deps): update module cloud.google.com/go/compute/metadata to v0.4.0 (#5835)
  • 56e279e fix(deps): update module github.com/aws/aws-sdk-go to v1.54.12 (#5834)
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/otel from 1.24.0 to 1.28.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.28.0/0.50.0/0.4.0] 2024-07-02

Added

  • The IsEmpty method is added to the Instrument type in go.opentelemetry.io/otel/sdk/metric. This method is used to check if an Instrument instance is a zero-value. (#5431)
  • Store and provide the emitted context.Context in ScopeRecords of go.opentelemetry.io/otel/sdk/log/logtest. (#5468)
  • The go.opentelemetry.io/otel/semconv/v1.26.0 package. The package contains semantic conventions from the v1.26.0 version of the OpenTelemetry Semantic Conventions. (#5476)
  • The AssertRecordEqual method to go.opentelemetry.io/otel/log/logtest to allow comparison of two log records in tests. (#5499)
  • The WithHeaders option to go.opentelemetry.io/otel/exporters/zipkin to allow configuring custom http headers while exporting spans. (#5530)

Changed

  • Tracer.Start in go.opentelemetry.io/otel/trace/noop no longer allocates a span for empty span context. (#5457)
  • Upgrade go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0 in go.opentelemetry.io/otel/example/otel-collector. (#5490)
  • Upgrade go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0 in go.opentelemetry.io/otel/example/zipkin. (#5490)
  • Upgrade go.opentelemetry.io/otel/semconv/v1.25.0 to go.opentelemetry.io/otel/semconv/v1.26.0 in go.opentelemetry.io/otel/exporters/zipkin. (#5490)
    • The exporter no longer exports the deprecated &qu... _Description has been truncated_
dependabot[bot] commented 3 months ago

Superseded by #846.