paketo-buildpacks / npm-install

A Cloud Native Buildpack for npm
Apache License 2.0
10 stars 17 forks source link

Bump the go-modules group with 27 updates #654

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 7 months ago

Bumps the go-modules group with 27 updates:

Package From To
github.com/onsi/gomega 1.31.1 1.32.0
github.com/Microsoft/hcsshim 0.11.4 0.12.2
github.com/cenkalti/backoff/v4 4.2.1 4.3.0
github.com/containerd/containerd 1.7.13 1.7.14
github.com/distribution/reference 0.5.0 0.6.0
github.com/felixge/httpsnoop 1.0.3 1.0.4
github.com/go-logr/logr 1.3.0 1.4.1
github.com/golang/protobuf 1.5.3 1.5.4
github.com/google/go-containerregistry 0.19.0 0.19.1
github.com/klauspost/compress 1.17.6 1.17.7
github.com/knqyf263/go-rpmdb 0.0.0-20230301153543-ba94b245509b 0.1.0
github.com/shirou/gopsutil/v3 3.24.1 3.24.2
github.com/skeema/knownhosts 1.2.1 1.2.2
github.com/sylabs/sif/v2 2.15.1 2.16.0
github.com/testcontainers/testcontainers-go 0.27.0 0.29.1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.45.0 0.49.0
go.opentelemetry.io/otel 1.19.0 1.24.0
go.opentelemetry.io/otel/metric 1.19.0 1.24.0
go.opentelemetry.io/otel/trace 1.19.0 1.24.0
golang.org/x/crypto 0.19.0 0.20.0
golang.org/x/exp 0.0.0-20230510235704-dd950f8aeaea 0.0.0-20231006140011-7918f672742d
golang.org/x/mod 0.15.0 0.16.0
golang.org/x/net 0.21.0 0.22.0
golang.org/x/sys 0.17.0 0.18.0
golang.org/x/tools 0.17.0 0.19.0
google.golang.org/genproto/googleapis/rpc 0.0.0-20231120223509-83a465c0220f 0.0.0-20240123012728-ef4313101c80
google.golang.org/grpc 1.61.0 1.62.0

Updates github.com/onsi/gomega from 1.31.1 to 1.32.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.32.0

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

Commits
  • 4379951 v1.32.0
  • a350b95 Maintain source backwards compatibility
  • a6c8875 Fix failing test
  • 436a197 Migrate github.com/golang/protobuf to google.golang.org/protobuf
  • 32ef35e chore: test with Go 1.22 (#733)
  • a0d0387 Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717)
  • b71e477 Bump github-pages and jekyll-feed in /docs (#732)
  • f460154 docs: fix typo and broken anchor link to gstruct
  • a2862e4 docs: fix HaveEach matcher signature
  • See full diff in compare view


Updates github.com/Microsoft/hcsshim from 0.11.4 to 0.12.2

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.2

No release notes provided.

v0.12.1

What's Changed

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0...v0.12.1

v0.12.0

What's Changed

New Contributors

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0-rc.3...v0.12.0

v0.12.0-rc.3

What's Changed

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0-rc.2...v0.12.0-rc.3

v0.12.0-rc.2

What's Changed

... (truncated)

Commits


Updates github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0

Commits
  • 720b789 remove travis badge from readme
  • a83af7f feat(backoff): Add functional options for ExponentialBackOff Closes #136
  • See full diff in compare view


Updates github.com/containerd/containerd from 1.7.13 to 1.7.14

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.14

Welcome to the v1.7.14 release of containerd!

The fourteenth patch release for containerd 1.7 contains various fixes and updates.

Highlights

  • Update builds to use go 1.21.8 (#9933)
  • Fix various timing issues with docker pusher (#9921)
  • Register imagePullThroughput and count with MiB (#9855)
  • Move high volume event logs to Trace level (#9823)

Container Runtime Interface (CRI)

  • Handle pod transition states gracefully while listing pod stats (#9905)

Runtime

  • Update runc-shim to process exec exits before init (#9928)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Wei Fu
  • Derek McGowan
  • Maksym Pavlenko
  • Krisztian Litkey
  • Akihiro Suda
  • Justin Chadwell
  • Sebastiaan van Stijn
  • Phil Estes
  • Kirtana Ashok
  • Akhil Mohan
  • Austin Vazquez
  • Etienne Champetier
  • Jordan Liggitt
  • Kohei Tokunaga
  • Mike Brown
  • Samuel Karp
  • Davanum Srinivas
  • Edgar Lee
  • Henry Wang
  • James Sturtevant
  • Laura Brehm
  • Nashwan Azhari
  • Robbie Buxton
  • Robert-André Mauchin
  • Shukui Yang

... (truncated)

Commits
  • dcf2847 Merge pull request #9953 from dmcgowan/prepare-v1.7.14
  • 1babe6b Prepare release notes for v1.7.14
  • 9138da4 Merge pull request #9951 from austinvazquez/release-1.7-backport-use-matrix-g...
  • a9bbbef Use the Go toolchain in CI matrix to build binaries
  • 17cbd50 Merge pull request #9933 from AkihiroSuda/go-1.21.8-1.7
  • 4c825b3 Merge pull request #9938 from akhilerm/cherry-pick-9777-1.7
  • 39caf53 Move inline PS scripts into files
  • 5613fae Merge pull request #9944 from dmcgowan/1.7-skip-oom-test
  • 1ca9a64 update to go 1.21.8, 1.22.1
  • 630226b Disable OOM set score unpriv test temporarily
  • Additional commits viewable in compare view


Updates github.com/distribution/reference from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/distribution/reference's releases.

v0.6.0

What's Changed

New Contributors

Full Changelog: https://github.com/distribution/reference/compare/v0.5.0...v0.6.0

Commits
  • ff14faf Merge pull request #9 from ozairasim/exclude-domain-from-name-length-validation
  • 2a66312 Merge pull request #10 from xrstf/patch-1
  • 094e717 fix typo in readme
  • aaca75e Exclude domain from name length check
  • 8507c7f Merge pull request #7 from thaJeztah/cleanup_splitDockerDomain
  • 89ee7ec refactor splitDockerDomain to include more documentation
  • a3fb784 Merge pull request #5 from thaJeztah/rm_deprecated
  • 4894124 remove deprecated SplitHostname
  • See full diff in compare view


Updates github.com/felixge/httpsnoop from 1.0.3 to 1.0.4

Release notes

Sourced from github.com/felixge/httpsnoop's releases.

v1.0.4

https://github.com/felixge/httpsnoop/compare/v1.0.3...v1.0.4

Commits


Updates github.com/go-logr/logr from 1.3.0 to 1.4.1

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.1

What's Changed

Full Changelog: https://github.com/go-logr/logr/compare/v1.4.0...v1.4.1

v1.4.0

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: https://github.com/go-logr/logr/compare/v1.3.0...v1.4.0

Commits
  • dcdc3f2 slogr: fix unintended API break in v0.8.0 (#253)
  • 5d88f52 funcr: Add LogInfoLevel Option to skip logging level in the info log (#240)
  • 177005d build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
  • e7f489a build(deps): bump github/codeql-action from 2.22.9 to 3.22.11
  • cf56c3b build(deps): bump actions/setup-go from 4 to 5
  • 2ad296e build(deps): bump github/codeql-action from 2.22.8 to 2.22.9
  • d55b4e2 Merge pull request #241 from thockin/master
  • 98ee9d9 Clean up slog testing and restore coverage
  • b228ba8 Break examples to new file
  • 6432877 Add benchmarks for slogSink
  • Additional commits viewable in compare view


Updates github.com/golang/protobuf from 1.5.3 to 1.5.4

Release notes

Sourced from github.com/golang/protobuf's releases.

v1.5.4

Notable changes

  • update descriptor.proto to latest version
Commits


Updates github.com/google/go-containerregistry from 0.19.0 to 0.19.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.19.1

What's Changed

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.19.0...v0.19.1

Commits


Updates github.com/klauspost/compress from 1.17.6 to 1.17.7

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.7

What's Changed

Full Changelog: https://github.com/klauspost/compress/compare/v1.17.6...v1.17.7

Commits


Updates github.com/knqyf263/go-rpmdb from 0.0.0-20230301153543-ba94b245509b to 0.1.0

Commits


Updates github.com/shirou/gopsutil/v3 from 3.24.1 to 3.24.2

Release notes

Sourced from github.com/shirou/gopsutil/v3's releases.

v3.24.2

What's Changed

cpu

Documentation

New Contributors

Full Changelog: https://github.com/shirou/gopsutil/compare/v3.24.1...v3.24.2

Commits
  • e767a0f Merge pull request #1599 from shirou/feat/add_macos_on_github_action_test
  • 53fb8ca [darwin][ci]: skip frequency check on GitHub Action
  • 25c3f40 [ci]: add macos-13 and macos-14 on GitHub Action
  • 146bae2 Merge pull request #1597 from vlnaum/cwd_windows
  • d3057c2 cwd support windows doc
  • 8aeaf16 Merge pull request #1594 from jmatthew/openbsd-riscv64
  • cbbb240 Merge pull request #1595 from shirou/dependabot/github_actions/golangci/golan...
  • d0037dd chore(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0
  • 6ccc605 update list OpenBSD arch list
  • 27ffa28 add support for OpenBSD/riscv64
  • Additional commits viewable in compare view


Updates github.com/skeema/knownhosts from 1.2.1 to 1.2.2

Commits
  • e73fcfc Merge pull request #6 from trzsz/main
  • bd8e67e HostKeyAlgorithms: add rsa-sha2-256 and rsa-sha2-512 for ssh-rsa
  • f2b518c docs: bump year to 2024
  • 379d675 ci: bump GOVERSION and fix golint
  • See full diff in compare view


Updates github.com/sylabs/sif/v2 from 2.15.1 to 2.16.0

Release notes

Sourced from github.com/sylabs/sif/v2's releases.

v2.16.0

This release drops support for Go 1.20.

What's Changed

Full Changelog: https://github.com/sylabs/sif/compare/v2.15.2...v2.16.0

v2.15.2

What's Changed

Full Changelog: https://github.com/sylabs/sif/compare/v2.15.1...v2.15.2

Commits
  • 796011b Merge pull request #351 from tri-adam/go-1.22
  • df206d4 refactor: simplify minID calculation
  • 7ad27b6 refactor: simplify slice logic
  • 096293c chore: bump module Go version to 1.21
  • dd1e34c build(deps): bump github.com/google/go-containerregistry (#356)
  • 7d96323 build(deps): bump gopkg.in/go-jose/go-jose.v2 from 2.6.1 to 2.6.3 (#355)
  • 0ab3a72 build(deps): bump github.com/sigstore/sigstore from 1.8.1 to 1.8.2 (#354)
  • 7cb9507 Merge pull request #353 from tri-adam/go-1.22-ci
  • 5f2a42d ci: test against Go 1.22
  • 7cf41e5 Merge pull request #352 from tri-adam/fix-lint
  • Additional commits viewable in compare view


Updates github.com/testcontainers/testcontainers-go from 0.27.0 to 0.29.1

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.29.1

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

  • chore(deps): bump google.golang.org/grpc from 1.61.1 to 1.62.0 in /modules/qdrant (#2281) @​dependabot
  • chore(deps): bump github.com/ClickHouse/clickhouse-go/v2 from 2.18.0 to 2.20.0 in /modules/clickhouse (#2290) @​dependabot
  • chore(deps): bump github.com/Shopify/toxiproxy/v2 from 2.7.0 to 2.8.0 in /examples/toxiproxy (#2282) @​dependabot
  • chore(deps): bump github.com/neo4j/neo4j-go-driver/v5 from 5.16.0 to 5.18.0 in /modules/neo4j (#2278) @​dependabot
  • chore(deps): bump github.com/minio/minio-go/v7 from 7.0.66 to 7.0.68 in /modules/minio (#2304) @​dependabot
  • chore(deps): bump github.com/tmc/langchaingo from 0.1.4 to 0.1.5 in /modules/ollama (#2318) @​dependabot
  • chore(deps): bump github.com/elastic/go-elasticsearch/v8 from 8.11.1 to 8.12.1 in /modules/elasticsearch (#2303) @​dependabot
  • chore(deps): bump google.golang.org/api from 0.167.0 to 0.168.0 in /modules/gcloud (#2317) @​dependabot
  • chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.14 to 1.17.5 in /modules/localstack, github.com/aws/aws-sdk-go-v2 from 1.24.1 to 1.25.2 in /modules/localstack (#2320) @​mdelapenya
  • chore(deps): bump github.com/twmb/franz-go from 1.15.4 to 1.16.1 in /modules/redpanda, github.com/twmb/franz-go/pkg/kadm from 1.10.0 to 1.11.0 in /modules/redpanda (#2322) @​mdelapenya
  • chore(deps): bump github.com/hashicorp/vault-client-go from 0.3.3 to 0.4.3 in /modules/vault, github.com/tidwall/gjson from 1.17.0 to 1.17.1 in /modules/vault (#2321) @​mdelapenya
  • chore(deps): bump github.com/jackc/pgx/v5 from 5.5.3 to 5.5.4 in /modules/postgres, github.com/jackc/pgx/v5 from 5.5.3 to 5.5.4 in /modules/cockroachdb (#2323) @​mdelapenya
  • chore(deps): bump golang.org/x/mod from 0.12.0 to 0.16.0 (#2316) @​mdelapenya
  • chore(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 in /modulegen (#2298) @​dependabot
  • chore(deps): bump github.com/docker/docker from 25.0.2+incompatible to 25.0.3+incompatible (#2296) @​mdelapenya
  • chore(deps): bump github.com/couchbase/gocb/v2 from 2.7.1 to 2.7.2 in /modules/couchbase, github.com/tidwall/gjson from 1.17.0 to 1.17.1 in /modules/couchbase (#2297) @​mdelapenya

... (truncated)

Commits
  • 08c2385 chore: use new version (v0.29.1) in modules and examples
  • 4d7a27e fix: incorrect version
  • e48323c chore: prepare for next minor development cycle ()
  • c17ba62 chore: use new version (v0.29.0) in modules and examples
  • 12f23f8 generic.go: GenericContainer(): clearer error message (#2327)
  • cfd60e9 chore: confirm support for new mongo images (#2326)
  • 85361fe Add k3s WithManifest option (#1920)
  • 755bbb8 chore(deps): bump google.golang.org/grpc in /modules/qdrant (#2281)
  • ba92e0e chore(deps): bump github.com/ClickHouse/clickhouse-go/v2 (#2290)
  • 245c8b0 chore(deps): bump github.com/Shopify/toxiproxy/v2 in /examples/toxiproxy (#2282)
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.45.0 to 0.49.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

Release v1.24.0/v0.49.0/v0.18.0/v0.4.0

This release is the last to support Go 1.20. The next release will require at least Go 1.21.

Added

  • Support Go 1.22. (#5082)
  • Add support for Summary metrics to go.opentelemetry.io/contrib/bridges/prometheus. (#5089)
  • Add support for Exponential (native) Histograms in go.opentelemetry.io/contrib/bridges/prometheus. (#5093)

Removed

  • The deprecated RequestCount constant in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is removed. (#4894)
  • The deprecated RequestContentLength constant in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is removed. (#4894)
  • The deprecated ResponseContentLength constant in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is removed. (#4894)
  • The deprecated ServerLatency constant in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is removed. (#4894)

Fixed

  • Retrieving the body bytes count in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp does not cause a data race anymore. (#5080)

New Contributors

Full Changelog: https://github.com/open-telemetry/opentelemetry-go-contrib/compare/v1.23.0...v1.24.0

Release v1.23.0/v0.48.0/v0.17.0/v0.3.0

Added

  • Add client metric support to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#4707)
  • Add peer attributes to spans recorded by NewClientHandler, NewServerHandler in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#4873)
  • Add support for cloud.account.id, cloud.availability_zone and cloud.region in the AWS ECS detector. (
    dependabot[bot] commented 7 months ago

    Looks like these dependencies are updatable in another way, so this is no longer needed.