paketo-buildpacks / npm-install

A Cloud Native Buildpack for npm
Apache License 2.0
10 stars 17 forks source link

Bump the go-modules group with 7 updates #566

Closed dependabot[bot] closed 1 year ago

dependabot[bot] commented 1 year ago

Bumps the go-modules group with 7 updates:

Package From To
github.com/Microsoft/hcsshim 0.11.1 0.11.2
github.com/docker/cli 24.0.6+incompatible 24.0.7+incompatible
github.com/docker/docker 24.0.6+incompatible 24.0.7+incompatible
github.com/go-ole/go-ole 1.2.6 1.3.0
github.com/google/uuid 1.3.1 1.4.0
github.com/shirou/gopsutil/v3 3.23.8 3.23.9
github.com/testcontainers/testcontainers-go 0.25.0 0.26.0

Updates github.com/Microsoft/hcsshim from 0.11.1 to 0.11.2

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.11.2

What's Changed

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.11.1...v0.11.2

Commits
  • f7a3166 Support adding mount to running containers
  • 8dcd949 Create tools package to isolate dependencies (#1840)
  • ad5f5af Version control and vendor mockgen (#1802)
  • fabb1a3 Add linter exclusion for test networkagent
  • 23693bc Add support for nodenetsvc v0 and readme to test network agent
  • bc73897 Add new entries in golangci.yml to prevent linter errors from deprecated ncpr...
  • 4f1c7ff Add deprecated option to all types and fields for ncproxy v0 apis
  • 421836c Create a v0 nodenetsvc api and plumb through ncproxy code
  • a7d3976 When fetch pid counts the contianer can be in an invalid state sometimes
  • 0ff2f71 Add file wide deprecated option to ncproxygrpc v0 api
  • Additional commits viewable in compare view


Updates github.com/docker/cli from 24.0.6+incompatible to 24.0.7+incompatible

Commits
  • afdd53b Merge pull request #4629 from thaJeztah/24.0_update_engine
  • 12c309f Merge pull request #4628 from thaJeztah/24.0_backport_bump_compress
  • f427198 vendor: github.com/docker/docker v24.0.6
  • 1777018 vendor: github.com/klauspost/compress v1.17.2
  • cde0441 vendor: github.com/klauspost/compress v1.16.5
  • d9f94d5 Merge pull request #4618 from thaJeztah/24.0_backport_cli-issue-502
  • 54d83fb Add docker ps status descriptions
  • 30a185e Merge pull request #4609 from thaJeztah/24.0_backport_x_net
  • d43c48d vendor: golang.org/x/net v0.17.0
  • 1919679 vendor: golang.org/x/crypto v0.14.0
  • Additional commits viewable in compare view


Updates github.com/docker/docker from 24.0.6+incompatible to 24.0.7+incompatible

Commits
  • 311b9ff Merge pull request #46697 from thaJeztah/24.0_backport_restart_nocancel
  • af60804 Merge pull request from GHSA-jq35-85cj-fj4p
  • 3cf363e Merge pull request #46709 from thaJeztah/24.0_backport_bump_compress
  • 05d7386 daemon: daemon.containerRestart: don't cancel restart on context cancel
  • 649c944 Merge pull request #46703 from thaJeztah/24.0_backport_atomic-layer-data-write
  • 9b20b1a Merge pull request #46702 from thaJeztah/24.0_backport_releaseNetwork_Network...
  • dd37b0b vendor: github.com/klauspost/compress v1.17.2
  • 7058c0d vendor: github.com/klauspost/compress v1.16.5
  • 57bd388 daemon: overlay2: Write layer metadata atomically
  • 05d95fd daemon: release sandbox even when NetworkDisabled
  • Additional commits viewable in compare view


Updates github.com/go-ole/go-ole from 1.2.6 to 1.3.0

Release notes

Sourced from github.com/go-ole/go-ole's releases.

v1.3.0

What's Changed

New Contributors

Full Changelog: https://github.com/go-ole/go-ole/compare/v1.2.6...v1.3.0

Commits
  • de26f2b Merge pull request #248 from patilsanty/com_initsecurity
  • 5ed15d5 Merge pull request #240 from go-ole/dependabot/go_modules/golang.org/x/sys-0.1.0
  • 63dcd8b Bump golang.org/x/sys from 0.0.0-20190916202348-b4ddaad3f8a3 to 0.1.0
  • c9f24b1 Merge pull request #249 from go-ole/feature/update-ci
  • 8b358bc Update appveyor.yml
  • bd0dc6d Update appveyor.yml
  • 62c6a38 Update appveyor.yml
  • ec6b9c7 Update appveyor.yml
  • 9073484 Update appveyor.yml
  • 039e9cf Update appveyor.yml
  • Additional commits viewable in compare view


Updates github.com/google/uuid from 1.3.1 to 1.4.0

Release notes

Sourced from github.com/google/uuid's releases.

v1.4.0

1.4.0 (2023-10-26)

Features

  • UUIDs slice type with Strings() convenience method (#133) (cd5fbbd)

Fixes

  • Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior)
Changelog

Sourced from github.com/google/uuid's changelog.

1.4.0 (2023-10-26)

Features

  • UUIDs slice type with Strings() convenience method (#133) (cd5fbbd)

Fixes

  • Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior)
Commits
  • 8de8764 chore(master): release 1.4.0 (#134)
  • 7c22e97 Clarify the documentation of Parse to state its job is to parse, not validate...
  • cd5fbbd feat: UUIDs slice type with Strings() convenience method (#133)
  • 47f5b39 docs: fix a typo in CONTRIBUTING.md (#130)
  • 542ddab chore(tests): add Fuzz tests (#128)
  • 06716f6 chore(tests): Add json.Unmarshal test with empty value cases (#116)
  • See full diff in compare view


Updates github.com/shirou/gopsutil/v3 from 3.23.8 to 3.23.9

Release notes

Sourced from github.com/shirou/gopsutil/v3's releases.

v3.23.9

What's Changed

cpu

host

load

mem

New Contributors

Full Changelog: https://github.com/shirou/gopsutil/compare/v3.23.8...v3.23.9

Commits
  • 826376d Merge pull request #1530 from darkgeek/feature/netbsd-arm64-port
  • 66ee833 Makefile: revert back to original one
  • 826037f Fix build_test on amd64 NetBSD
  • 7ffb24d Merge branch 'shirou:master' into feature/netbsd-arm64-port
  • def3572 format the code
  • 4a46201 cpu && host: fix compile time errors
  • 734a7a6 disk: we should use frsize as the real block size
  • dd0253b disk: fix various bugs
  • 2fabf15 Merge pull request #1527 from tossp/add-load-for-windows
  • 03d43fb [load][windows] Fix DATA RACE in load. Avg()
  • Additional commits viewable in compare view


Updates github.com/testcontainers/testcontainers-go from 0.25.0 to 0.26.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.26.0

What's Changed

🔒 Security

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

... (truncated)

Commits
  • a98de5a chore: use new version (v0.26.0) in modules and examples
  • 636c3cb feat: add image-keep option for built images (#1785)
  • 25a7e3f chore(deps): bump github.com/opencontainers/image-spec from 1.1.0-rc4 to 1.1....
  • 8a5f197 chore(deps): bump github.com/containerd/containerd from 1.7.6 to 1.7.7 (#1742)
  • 284cf81 chore(deps): bump golang.org/x/sys from 0.12.0 to 0.13.0 (#1730)
  • 3d3a9a7 docs: remove OpenSSF scorecard (#1823)
  • b9398b9 Auto-cleanup of k6 build cache (#1788)
  • e52cd03 Add OpenSSF Scorecards GitHub Action (#1795)
  • caaf25a chore(deps): bump google.golang.org/grpc from 1.57.0 to 1.57.1 (#1822)
  • febb04c chore: expose SessionID (#1793)
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself) - `@dependabot ignore ` will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself) - `@dependabot unignore ` will remove all of the ignore conditions of the specified dependency - `@dependabot unignore ` will remove the ignore condition of the specified dependency and ignore conditions