You can now call EnforceDefaultTimeoutsWhenUsingContexts() to have Eventually honor the default timeout when passed a context. (prior to this you had to expclility add a timeout) [e4c4265]
You can call StopTrying(message).Successfully() to abort a Consistently early without failure [eeca931]
Fixes
Stop memoizing the result of HaveField to avoid unexpected errors when used with async assertions. [3bdbc4e]
Maintenance
Bump all dependencies [a05a416]
v1.34.2
1.34.2
Require Go 1.22+
Maintenance
bump ginkgo as well [c59c6dc]
bump to go 1.22 - remove x/exp dependency [8158b99]
You can now call EnforceDefaultTimeoutsWhenUsingContexts() to have Eventually honor the default timeout when passed a context. (prior to this you had to expclility add a timeout) [e4c4265]
You can call StopTrying(message).Successfully() to abort a Consistently early without failure [eeca931]
Fixes
Stop memoizing the result of HaveField to avoid unexpected errors when used with async assertions. [3bdbc4e]
Maintenance
Bump all dependencies [a05a416]
1.34.2
Require Go 1.22+
Maintenance
bump ginkgo as well [c59c6dc]
bump to go 1.22 - remove x/exp dependency [8158b99]
To be consistent with filepath.Glob, FilepathGlob("") returns nil.
Added MatchUnvalidated, PathMatchUnvalidated
These functions provide a small performance improvement in cases where you don't care about whether or not the pattern is valid (maybe because you already ran ValidatePattern).
Commits
1e20c6d fixes #95 FilepathGlob("") should return nil
da152ef add docs for MatchUnvalidated, PathMatchUnvalidated
This release splits the errdefs package into the github.com/containerd/errdefs package which only contains error definitions as well as basic functions to check for those definitions and the github.com/containerd/errdefs/pkg package which containers functionality for using the errdefs, such as error serialization and adding more data to errors.
This release primarily includes a fix that blocked using
filepath-securejoin in Kubernetes.
Previously, some testing mocks we had resulted in us doing import "testing"
in non-_test.go code, which made some downstreams like Kubernetes unhappy.
This has been fixed. (#32)
Thanks to all of the contributors who made this release possible:
This release primarily includes fixes for spurious errors we hit when
checking that directories created by MkdirAll "look right". Upon further
consideration, these checks were fundamentally buggy and didn't offer
any practical protection anyway.
The mode and owner verification logic in MkdirAll has been removed. This
was originally intended to protect against some theoretical attacks but upon
further consideration these protections don't actually buy us anything and
they were causing spurious errors with more complicated filesystem setups.
The "is the created directory empty" logic in MkdirAll has also been
removed. This was not causing us issues yet, but some pseudofilesystems (such
as cgroup) create non-empty directories and so this logic would've been
wrong for such cases.
Thanks to all of the contributors who made this release possible:
This release includes a few fixes for MkdirAll when dealing with S_ISUID
and S_ISGID, to solve a regression runc hit when switching to MkdirAll.
Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return
an explicit error saying that those bits are ignored by mkdirat(2). In
the past a different error was returned, but since the silent ignoring
behaviour is codified in the man pages a more explicit error seems
apt. While silently ignoring these bits would be the most compatible
option, it could lead to users thinking their code sets these bits
when it doesn't. Programs that need to deal with compatibility can
mask the bits themselves. (#23, #25)
Previously, some testing mocks we had resulted in us doing import "testing"
in non-_test.go code, which made some downstreams like Kubernetes unhappy.
This has been fixed. (#32)
[0.3.3] - 2024-09-30
Fixed
The mode and owner verification logic in MkdirAll has been removed. This
was originally intended to protect against some theoretical attacks but upon
further consideration these protections don't actually buy us anything and
they were causing spurious errors with more complicated filesystem setups.
The "is the created directory empty" logic in MkdirAll has also been
removed. This was not causing us issues yet, but some pseudofilesystems (such
as cgroup) create non-empty directories and so this logic would've been
wrong for such cases.
[0.3.2] - 2024-09-13
Changed
Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return
an explicit error saying that those bits are ignored by mkdirat(2). In the
past a different error was returned, but since the silent ignoring behaviour
is codified in the man pages a more explicit error seems apt. While silently
ignoring these bits would be the most compatible option, it could lead to
users thinking their code sets these bits when it doesn't. Programs that need
to deal with compatibility can mask the bits themselves. (#23, #25)
Fixed
If a directory has S_ISGID set, then all child directories will have
S_ISGID set when created and a different gid will be used for any inode
created under the directory. Previously, the "expected owner and mode"
validation in securejoin.MkdirAll did not correctly handle this. We now
correctly handle this case. (#24, #25)
dependabot[bot]
commented
3 weeks ago
Bumps the go-modules group with 21 updates in the / directory:
1.34.11.35.00.18.70.18.82.14.22.15.01.0.01.0.13.2.13.3.03.2.33.3.00.12.50.12.91.1.01.1.14.6.14.7.11.3.91.5.00.3.10.3.20.3.10.3.427.1.1+incompatible27.3.1+incompatible1.4.51.4.65.5.05.6.01.17.91.17.112.18.02.19.20.8.00.9.00.11.50.11.60.53.00.56.00.20.00.21.0Updates
github.com/onsi/gomegafrom 1.34.1 to 1.35.0Release notes
Sourced from github.com/onsi/gomega's releases.
Changelog
Sourced from github.com/onsi/gomega's changelog.
Commits
d6331f9v1.35.05deaf23fix tests, but like actually this timeeeca931Add Successfully() to StopTrying() to signal that Consistently can end early ...3bdbc4estop memoizing result of HaveFielde35358dsheepishly fix broken test. thanks CI1b717d7grrr. go mod tidya05a416bump all dependenciese4c4265Add EnforceDefaultTimeoutsWhenUsingContexts()7cabed6v1.34.2c59c6dcbump ginkgo as wellUpdates
github.com/paketo-buildpacks/occamfrom 0.18.7 to 0.18.8Release notes
Sourced from github.com/paketo-buildpacks/occam's releases.
Commits
1193f3cBump docker to version 26.1.5 to fix CVE-2024-411105cd4edeUpdates go mod version to 1.23.02e5b930Updates go mod version to 1.22.6815b014Bump github.com/paketo-buildpacks/packit/v2 from 2.14.1 to 2.14.274a79fbBump github.com/paketo-buildpacks/packit/v2 from 2.14.0 to 2.14.190134a5Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2653a6fbBump github.com/onsi/gomega from 1.34.0 to 1.34.1ed0e429Bump github.com/onsi/gomega from 1.33.1 to 1.34.0f467245Updates go mod version to 1.22.5c97acf2Bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1Updates
github.com/paketo-buildpacks/packit/v2from 2.14.2 to 2.15.0Release notes
Sourced from github.com/paketo-buildpacks/packit/v2's releases.
Commits
1ab5b00SyftCLIScanner: support SBOM generation with syft CLI884a7b7Update to fix linterc3a3e6aUpdating github-configUpdates
dario.cat/mergofrom 1.0.0 to 1.0.1Release notes
Sourced from dario.cat/mergo's releases.
Commits
59ea6a9Merge pull request #251 from joshkaplinsky/joshkaplinsky/without-dereference-...96f24afMerge pull request #253 from vsemichev/master2f1a615fixes issue #187. adds test to verify the fix.4da170bfixes issue #187. attempt #3a13a117fixes issue #187. attempt #26b830fffixes issue #187f33862aWithoutDereference should respect structscde9f0eMerge pull request #246 from darccio/darccio/v1-frozenf1e2fe5chore: frozen v17f7b4afUpdate FUNDING.ymlUpdates
github.com/Masterminds/semver/v3from 3.2.1 to 3.3.0Release notes
Sourced from github.com/Masterminds/semver/v3's releases.
Changelog
Sourced from github.com/Masterminds/semver/v3's changelog.
Commits
e6e3d4dMerge pull request #249 from mattfarina/update-changelog-3.3.0e80c4eaUpdating changelog for 3.3.080427adMerge pull request #248 from mattfarina/bump-min-versionb610837bumping min version in go.mod based on what's testeda4cccd8Merge pull request #246 from mattfarina/bump-go-1.237c178cfUpdating the testing version of Go used29f94c1Merge pull request #241 from grosser/grosser/validate2cf1b16Merge pull request #245 from mattfarina/remove-vertb55476aRemoving reference to vertd07450bsimplify StrictNewVersionUpdates
github.com/Masterminds/sprig/v3from 3.2.3 to 3.3.0Release notes
Sourced from github.com/Masterminds/sprig/v3's releases.
Changelog
Sourced from github.com/Masterminds/sprig/v3's changelog.
Commits
e708470Merge pull request #408 from mattfarina/update-changelog-3.38fc4354Updating the changelog for the 3.3.0 releasecb81a32Merge pull request #407 from mattfarina/remove-dup-math-functions2637693Removing duplicate documentation06b9a87Merge pull request #290 from zzhu41/patch-1e663ec6Merge pull request #369 from chey/patch-1bb2f73fMerge pull request #375 from carlpett/patch-1f07659eMerge pull request #400 from itzik-elayev/master98b35c1Add closing bracket7a88928Merge pull request #406 from mattfarina/update-mergoUpdates
github.com/Microsoft/hcsshimfrom 0.12.5 to 0.12.9Release notes
Sourced from github.com/Microsoft/hcsshim's releases.
Commits
7392335Switch to using containerd/errdefs/pkg/errgrpc for grpc translation79d3f32Update go to 1.2205636b9UpdateJOB_OBJECT_ALL_ACCESSandOpenJobObject(#2095)1550628mobve SILOOBJECT_BASIC_INFORMATION to winapibf52d58fix SILOOBJECT_BASIC_INFORMATION alignment8d48d87Update containerd to v1.7.23 (#2295)4ad298fFixing typo (#2289)86b5333Bump golangci/golangci-lint-action from 4 to 65ae96f3Update runc to v1.1.148f3fccdUpdate pkg versionsUpdates
github.com/andybalholm/brotlifrom 1.1.0 to 1.1.1Commits
57434b5Encoder: check for empty block97e8583matchfinder.M4: some refinements to scoringUpdates
github.com/bmatcuk/doublestar/v4from 4.6.1 to 4.7.1Release notes
Sourced from github.com/bmatcuk/doublestar/v4's releases.
Commits
1e20c6dfixes #95 FilepathGlob("") should return nilda152efadd docs for MatchUnvalidated, PathMatchUnvalidated2832f67closes #92 adds MatchUnvalidated424062badded sponsor: MASVUpdates
github.com/cloudflare/circlfrom 1.3.9 to 1.5.0Release notes
Sourced from github.com/cloudflare/circl's releases.
Commits
1310edfRelease v1.5.00246d59Add test for ML-DSA signature verification.e2bbd01Add ML-DSA (FIPS204) (#480)2ba992fReverting arm64 jobs since qemu can't run go1.23 binaries yet.ab15f82Updates golangci-lint to v1.61.0 and fixes code.064a9baBump to go1.22 inner files and ci jobs.7040592Adding semgrepignore to also analyse test files.51a9a33Update semgrep.ymlcfbc696Create semgrep.yml2d6cd98kem: add X25519MLKEM768 TLS hybrid KEMUpdates
github.com/containerd/errdefsfrom 0.1.0 to 0.3.0Release notes
Sourced from github.com/containerd/errdefs's releases.
Commits
9fd32fcMerge pull request #19 from dmcgowan/pkg-package3dabb2bMerge pull request #20 from austinvazquez/upgrade-ci303a6eaUpdate to Go 1.22.8 in CIe70104eUpgrade to golangci-lint@v1.61.0ffe5586Upgrade to golangci/golangci-lint-action@v6908b04bUpgrade to actions/checkout@v4608b83cUpgrade to actions/setup-go@v58e82ae4Upgrade macOS runner image to macOS 1346a6522Add errdefs/pkg package02b65bcMerge pull request #18 from dmcgowan/add-missing-interfacesUpdates
github.com/cpuguy83/dockercfgfrom 0.3.1 to 0.3.2Release notes
Sourced from github.com/cpuguy83/dockercfg's releases.
Commits
a07c3d1Merge pull request #3 from stevenh/chore/improve-errors91bd66achore: improve errorsUpdates
github.com/cyphar/filepath-securejoinfrom 0.3.1 to 0.3.4Release notes
Sourced from github.com/cyphar/filepath-securejoin's releases.
... (truncated)
Changelog
Sourced from github.com/cyphar/filepath-securejoin's changelog.
Commits
fd16adeVERSION: release v0.3.400e0710godoc: update package documentation0cd6be1README: fix reference to open_tree kernel requirements205046fREADME: add pkg.go.dev badgeecb1b8etests: procfs: clean up mock test hook3ec6eedCHANGELOG: mention #32 fix86e6182merge #32 into cyphar/filepath-securejoin:main6864912Isolate the testing import in test code4348feeopenat: remove unused functiond0c7d67merge #31 into cyphar/filepath-securejoin:mainUpdates
github.com/docker/clifrom 27.1.1+incompatible to 27.3.1+incompatibleCommits
ce12230Merge pull request #5462 from thaJeztah/27.x_backport_bump_compose263ba95Merge pull request #5461 from laurazard/27.x-backport-update-VERSIONbe9b9f3UpdateVERSIONfile tov27.3.1-deva4149b0Dockerfile: update compose to v2.29.74aac415Merge pull request #5458 from thaJeztah/27.x_bump_engine38546958vendor: github.com/docker/docker v27.3.0f052003Merge pull request #5457 from laurazard/backport-dropped-defer460f1betelemetry: fix early meterprovider shutdowne85edf8Merge pull request #5452 from laurazard/27.3.0-match-moby-versionca62759vendor: github.com/docker/docker v27.3.0-rc2Updates
github.com/gabriel-vasile/mimetypefrom 1.4.5 to 1.4.6Release notes
Sourced from github.com/gabriel-vasile/mimetype's releases.