Bump the go-modules group with 38 updates

Bumps the go-modules group with 38 updates:

Package	From	To
github.com/onsi/gomega	`1.30.0`	`1.32.0`
github.com/paketo-buildpacks/occam	`0.18.0`	`0.18.2`
github.com/CycloneDX/cyclonedx-go	`0.7.2`	`0.8.0`
github.com/Microsoft/hcsshim	`0.11.4`	`0.12.2`
github.com/anchore/stereoscope	`0.0.0-20230412183729-8602f1afc574`	`0.0.1`
github.com/andybalholm/brotli	`1.0.6`	`1.1.0`
github.com/cenkalti/backoff/v4	`4.2.1`	`4.3.0`
github.com/cloudflare/circl	`1.3.6`	`1.3.7`
github.com/containerd/containerd	`1.7.11`	`1.7.15`
github.com/distribution/reference	`0.5.0`	`0.6.0`
github.com/docker/docker-credential-helpers	`0.8.0`	`0.8.1`
github.com/docker/go-connections	`0.4.0`	`0.5.0`
github.com/go-git/go-git/v5	`5.11.0`	`5.12.0`
github.com/golang/protobuf	`1.5.3`	`1.5.4`
github.com/google/go-containerregistry	`0.17.0`	`0.19.1`
github.com/google/uuid	`1.4.0`	`1.6.0`
github.com/klauspost/compress	`1.17.4`	`1.17.7`
github.com/knqyf263/go-rpmdb	`0.0.0-20230301153543-ba94b245509b`	`0.1.0`
github.com/pierrec/lz4/v4	`4.1.19`	`4.1.21`
github.com/rivo/uniseg	`0.4.4`	`0.4.7`
github.com/sassoftware/go-rpmutils	`0.2.0`	`0.3.0`
github.com/sergi/go-diff	`1.3.1`	`1.3.2-0.20230802210424-5b0b94c5c0d3`
github.com/shirou/gopsutil/v3	`3.23.11`	`3.24.3`
github.com/skeema/knownhosts	`1.2.1`	`1.2.2`
github.com/sylabs/sif/v2	`2.15.0`	`2.16.0`
github.com/testcontainers/testcontainers-go	`0.26.0`	`0.30.0`
github.com/ulikunitz/xz	`0.5.11`	`0.5.12`
github.com/wagoodman/go-progress	`0.0.0-20230301185719-21920a456ad5`	`0.0.0-20230925121702-07e42b3cdba0`
github.com/yusufpapurcu/wmi	`1.2.3`	`1.2.4`
golang.org/x/crypto	`0.17.0`	`0.21.0`
golang.org/x/exp	`0.0.0-20230510235704-dd950f8aeaea`	`0.0.0-20231006140011-7918f672742d`
golang.org/x/mod	`0.14.0`	`0.16.0`
golang.org/x/net	`0.19.0`	`0.22.0`
golang.org/x/sync	`0.5.0`	`0.6.0`
golang.org/x/sys	`0.15.0`	`0.18.0`
golang.org/x/tools	`0.16.0`	`0.16.1`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20231120223509-83a465c0220f`	`0.0.0-20240123012728-ef4313101c80`
google.golang.org/grpc	`1.59.0`	`1.62.0`

Updates github.com/onsi/gomega from 1.30.0 to 1.32.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.32.0

1.32.0

Maintenance

Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @jbduncan !). Please open an issue if you run into one.

chore: test with Go 1.22 (#733) [32ef35e]

Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

docs: fix typo and broken anchor link to gstruct [f460154]

docs: fix HaveEach matcher signature [a2862e4]

v1.31.1

1.31.1

Fixes

Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]

Update test in case keeping msg is desired [ad1a367]

Maintenance

Show how to import the format sub package [24e958d]

tidy up go.sum [26661b8]

bump dependencies [bde8f7a]

v1.31.0

1.31.0

Features

Async assertions include context cancellation cause if present [121c37f]

Maintenance

Bump minimum go version [dee1e3c]

docs: fix typo in example usage "occured" -> "occurred" [49005fe]

Bump actions/setup-go from 4 to 5 (#714) [f1c8757]

Bump github/codeql-action from 2 to 3 (#715) [9836e76]

Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.2 (#713) [54726f0]

Bump golang.org/x/net from 0.17.0 to 0.19.0 (#711) [df97ecc]

docs: fix HaveExactElement typo (#712) [a672c86]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.32.0

Maintenance

Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @jbduncan !). Please open an issue if you run into one.

chore: test with Go 1.22 (#733) [32ef35e]

Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

docs: fix typo and broken anchor link to gstruct [f460154]

docs: fix HaveEach matcher signature [a2862e4]

1.31.1

Fixes

Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]

Update test in case keeping msg is desired [ad1a367]

Maintenance

Show how to import the format sub package [24e958d]

tidy up go.sum [26661b8]

bump dependencies [bde8f7a]

1.31.0

Features

Async assertions include context cancellation cause if present [121c37f]

Maintenance

Bump minimum go version [dee1e3c]

docs: fix typo in example usage "occured" -> "occurred" [49005fe]

Bump actions/setup-go from 4 to 5 (#714) [f1c8757]

Bump github/codeql-action from 2 to 3 (#715) [9836e76]

Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.2 (#713) [54726f0]

Bump golang.org/x/net from 0.17.0 to 0.19.0 (#711) [df97ecc]

docs: fix HaveExactElement typo (#712) [a672c86]

Commits

4379951 v1.32.0
a350b95 Maintain source backwards compatibility
a6c8875 Fix failing test
436a197 Migrate github.com/golang/protobuf to google.golang.org/protobuf
32ef35e chore: test with Go 1.22 (#733)
a0d0387 Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717)
b71e477 Bump github-pages and jekyll-feed in /docs (#732)
f460154 docs: fix typo and broken anchor link to gstruct
a2862e4 docs: fix HaveEach matcher signature
762b171 v1.31.1
Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/occam from 0.18.0 to 0.18.2

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.18.2

What's Changed

Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12 by @dependabot in paketo-buildpacks/occam#274

Full Changelog: https://github.com/paketo-buildpacks/occam/compare/v0.18.1...v0.18.2

v0.18.1

No release notes provided.

Commits

f37d228 Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12
1d68391 tests: adding tests for NewContainerFromInspectOutput function
13e5704 fix: avoid accessing undefined host ports on while creating a new container f...
0fb0353 Bump github.com/containerd/containerd from 1.7.7 to 1.7.11
See full diff in compare view

Updates github.com/CycloneDX/cyclonedx-go from 0.7.2 to 0.8.0

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.8.0

This release ships with almost complete support for v1.5 of the CycloneDX specification.

The only exception being the extended data flow support, as used in SaaS BOMs.

Unfortunately, there are also breaking changes in this release:

The type of Metadata.Tools has changed from *[]Tool to *ToolsChoice, to facilitate the deprecation of Tool in the spec

ToolsChoice holds both legacy *[]Tool, as well as the new *[]Component and *[]Service fields

The Tool type, as well as the ToolsChoice.Tools field are marked as deprecated

During encoding and decoding, it is asserted that only one of both options can be present, in accordance with the "One of" constraint of the spec

When encoding to lower spec versions than v1.5 (using EncodeVersion), Components and Services are automatically converted to legacy Tools

It is strongly recommended to use Components and Services. However, when consuming BOMs, applications should still expect legacy Tools to be present, and handle them accordingly.

Changelog

Fixes

64eb0c84b3d909db47c5154c17d075f68b0c85ae: fix: remove format linters that require extra tooling (@nscuro)

Building and Packaging

696aa66151e800a672c9ec860f30d8716ae6a025: build(deps): bump actions/checkout from 3.5.3 to 4.1.0 (@dependabot[bot])

b50b319d1580d5b624cfc866bc108b589b328157: build(deps): bump actions/checkout from 4.1.0 to 4.1.1 (@dependabot[bot])

5cad1b0a7dad106950790fad960be5f7e62b2110: build(deps): bump actions/setup-go from 4.1.0 to 5.0.0 (@dependabot[bot])

b0910619560e5b0b0fae51dc97c4a343983873fb: build(deps): bump gitpod/workspace-go from d3603c7 to 94ae638 (@dependabot[bot])

9e310b6d641245c89aa01f07a21b50c38f04b087: build(deps): bump gitpod/workspace-go from f37c673 to d3603c7 (@dependabot[bot])

89494fd98291ca8115e02cab78e2e47360352f00: build(deps): bump goreleaser/goreleaser-action from 4.4.0 to 5.0.0 (@dependabot[bot])

Others

61dd91e0bbe730454bef42bc0c1b0a3f97411c02: feat(spec1-5): add support for machine learning (@nscuro)

f831960f0887c1f60681924e4d4382cd4bb52ff0: feat(spec1-5): update valid-vulnerability test snapshots (@nscuro)

ffc9a4eb9204f5a31b7fb1d6cd907e6cc3e93578: ci: enable more linters (@mmorel-35)

3feda7530db8c959381261e44a96b201f79f908c: feat(spec1-5): add additional external reference types (@nscuro)

bd66a368c5116c0420f49157a217e71cde1544be: feat(spec1-5): add support for CVSSv4 scoring method (@nscuro)

d597bb9076e1856b9f2d3bb9d420728df8d43d9a: feat(spec1-5): add support for firstIssued and lastUpdated in vuln analysis (@nscuro)

2ae5445d02b8e6e7391a8a0eb4d1a5bb8a6f377c: feat(spec1-5): add support for additional compositions and composition identity (@nscuro)

f856daa3212521eaf5f1dd69424b9c98eee2db52: feat(spec1-5): add support for formulation (@nscuro)

2fbde0e17ac5876ff525ccdc9d1eebf90918d306: feat(spec1-5): add support for identity, occurrences, and callstack evidence (@nscuro)

745a35a73d395923303817de650a60fe82cf8ec8: feat(spec1-5): add support for licensing (@nscuro)

b02255f3784c608100b2ae3d1123e41500a50ff3: feat(spec1-5): add support for lifecycles (@nscuro)

fe3a9040862e5fa088e84efb004fd9e338a783d7: feat(spec1-5): add support for ssvc scoring method (@nscuro)

7d2713f4459184df4628b839e4c01bae7fd6abcf: feat(spec1-5): add support for vulnerability proof of concept (@nscuro)

25b250ac0efea93283362584394a16ca602e260f: feat(spec1-5): add support for vulnerability rejected timestamps (@nscuro)

c7a84ac4ba209f5860b1aedffa2f1e71414e4508: feat(spec1-5): handle deprecation of tools (@nscuro)

Commits

b9654ae Merge pull request #90 from CycloneDX/spec-v1.5
64eb0c8 fix: remove format linters that require extra tooling
c7a84ac feat(spec1-5): handle deprecation of tools
f856daa feat(spec1-5): add support for formulation
2fbde0e feat(spec1-5): add support for identity, occurrences, and callstack evidence
61dd91e feat(spec1-5): add support for machine learning
f831960 feat(spec1-5): update valid-vulnerability test snapshots
fe3a904 feat(spec1-5): add support for ssvc scoring method
7d2713f feat(spec1-5): add support for vulnerability proof of concept
2ae5445 feat(spec1-5): add support for additional compositions and composition identity
Additional commits viewable in compare view

Updates github.com/Microsoft/hcsshim from 0.11.4 to 0.12.2

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.2

No release notes provided.

v0.12.1

What's Changed

Add spans and drop large size high volume trace logs by @kiashok in microsoft/hcsshim#2068

Updating permissions and github release action versions (#2078) by @hgarvison in microsoft/hcsshim#2079

fix: move permissions to the correct job (#2080) by @anmaxvl in microsoft/hcsshim#2081

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0...v0.12.1

v0.12.0

What's Changed

adding option of using buffered image reader for faster dmverity hashing by @SethHollandsworth in microsoft/hcsshim#2013

Fix process handle leak when launching a job container by @kevpar in microsoft/hcsshim#2020

Revert "gcs: Support routing container stdio to sidecar" by @kevpar in microsoft/hcsshim#2023

internal/exec: Fix stdio pipe problems by @kevpar in microsoft/hcsshim#2021

Allow mounting multiple dev nodes per assigned device by @katiewasnothere in microsoft/hcsshim#2003

tests: update docker images by @anmaxvl in microsoft/hcsshim#2012

Don't create container scratch per base layer by @ambarve in microsoft/hcsshim#2002

Removing internal tests from hcsshim's cri-containerd tests by @yyatmsft in microsoft/hcsshim#1998

Fix CodeQL pipeline failure by @helsaawy in microsoft/hcsshim#2032

Update Cmd IO handling by @helsaawy in microsoft/hcsshim#1937

[deps] Omni-bus dependency update by @helsaawy in microsoft/hcsshim#2039

Upgrade to go1.21 by @kiashok in microsoft/hcsshim#2033

New Contributors

@yyatmsft made their first contribution in microsoft/hcsshim#1998

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0-rc.3...v0.12.0

v0.12.0-rc.3

What's Changed

SNP Direct DM-Verity Boot by @darracott in microsoft/hcsshim#1952

tests: update test images used for cri-containerd tests by @anmaxvl in microsoft/hcsshim#1991

Add CodeQL suppression for tar extraction code by @ambarve in microsoft/hcsshim#2006

Update nvidia hook log file paths to use container bundle path as base dir by @katiewasnothere in microsoft/hcsshim#1999

Switch to using new errdefs repo by @kiashok in microsoft/hcsshim#2016

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0-rc.2...v0.12.0-rc.3

v0.12.0-rc.2

What's Changed

CI: add CodeQL workflow and schedule by @anmaxvl in microsoft/hcsshim#1962

Add additional registry values to uVM via annotation by @helsaawy in microsoft/hcsshim#1963

uvmboot and gcs.test bug fix by @helsaawy in microsoft/hcsshim#1966

Add support for Linux kernel 6.x to fetch attestation report by @takuro-sato in microsoft/hcsshim#1886

cimfs: Add cim layer mount/unmount functionality. by @ambarve in microsoft/hcsshim#1955

... (truncated)

Commits

ad1ccf5 fix: move permissions to the correct job (#2080) (#2081)
6588c1c Updating permissions and github release action versions (#2078) (#2079)
202f90a Add spans and drop large size high volume trace logs
fe8c673 update newBinaryCmd URL path handling (#2041)
85086d7 Upgrade to go1.21 + fix lint errors
8039310 [deps] Omni-bus dependency update (#2039)
7458e58 Update Cmd IO handling (#1937)
5f9910a Fix CodeQL pipeline failure (#2032)
c56a09c Merge pull request #1998 from yyatmsft/removeInternalTests2
c767380 Don't create container scratch per base layer (#2002)
Additional commits viewable in compare view

Updates github.com/anchore/stereoscope from 0.0.0-20230412183729-8602f1afc574 to 0.0.1

Release notes

Sourced from github.com/anchore/stereoscope's releases.

v0.0.1

Security Fixes

Fix tar path traversal issue by @wagoodman in anchore/stereoscope#214

Full Changelog: https://github.com/anchore/stereoscope/commits/v0.0.1

Commits

See full diff in compare view

Updates github.com/andybalholm/brotli from 1.0.6 to 1.1.0

Commits

17e5901 Make my matchfinder work more accessible.
cf812c0 matchfinder: add M0
1b6cf36 matchfinder: remove MultiHash
265f3af matchfinder: penalize score for overlapping matches
a8d524a matchfinder: replace Score function with DistanceBitCost
578645e matchfinder: add MultiHash
24b2bfa matchfinder.M4: add Score function
4a024e3 matchfinder.M4: add match chain
3a1c5cd Fix typo in comment.
0d2aef3 matchfinder.M4: factor out extendMatch2
Additional commits viewable in compare view

Updates github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0

Commits

720b789 remove travis badge from readme
a83af7f feat(backoff): Add functional options for ExponentialBackOff Closes #136
See full diff in compare view

Updates github.com/cloudflare/circl from 1.3.6 to 1.3.7

Release notes

Sourced from github.com/cloudflare/circl's releases.

CIRCL v1.3.7

What's Changed

build(deps): bump golang.org/x/crypto from 0.3.1-0.20221117191849-2c476679df9a to 0.17.0 by @dependabot in cloudflare/circl#467

kyber: remove division by q in ciphertext compression by @bwesterb in cloudflare/circl#468

Releasing CIRCL v1.3.7 by @armfazh in cloudflare/circl#469

New Contributors

@dependabot made their first contribution in cloudflare/circl#467

Full Changelog: https://github.com/cloudflare/circl/compare/v1.3.6...v1.3.7

Commits

c48866b Releasing CIRCL v1.3.7
75ef91e kyber: remove division by q in ciphertext compression
899732a build(deps): bump golang.org/x/crypto
See full diff in compare view

Updates github.com/containerd/containerd from 1.7.11 to 1.7.15

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.15

Welcome to the v1.7.15 release of containerd!

The fifteenth patch release for containerd 1.7 contains various fixes; one for a regression introduced in v1.7.14 in the way process exits were handled.

Highlights

Adds mediatype to OCI index record on export (#9990)

Runtime

Fix runc shim to only defer init process exits (#10037)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

Derek McGowan

Phil Estes

Austin Vazquez

Laura Brehm

Sebastiaan van Stijn

Talon

Changes

Prepare for v1.7.15 release (#10039)

4d4759b54 Prep v1.7.15 release

Fix runc shim to only defer init process exits (#10037)

21df46766 runc-shim: only defer init process exits

Fix compile from version control system (source) use case (#10012)

2a054213e Fix compile from version control system (source) use case

Adds mediatype to OCI index record on export (#9990)

6605c47a4 adds mediatype to oci index record

vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 (#9975)

e6d91d843 vendor: github.com/golang/protobuf v1.5.4

2d136c5f5 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0

a1a7af7a3 build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0

Dependency Changes

github.com/golang/protobuf v1.5.3 -> v1.5.4

google.golang.org/protobuf v1.31.0 -> v1.33.0

... (truncated)

Commits

926c958 Merge pull request #10039 from estesp/prep-1.7.15
4d4759b Prep v1.7.15 release
52fc8ab Merge pull request #10037 from laurazard/backport-1.7-exec-fix
21df467 runc-shim: only defer init process exits
0dcf21c Merge pull request #10012 from austinvazquez/release-1.7-fix-offline-compilation
2a05421 Fix compile from version control system (source) use case
ec5222f Merge pull request #9990 from daghack/oci-add-mediatype-1.7
6605c47 adds mediatype to oci index record
be5ec97 Merge pull request #9975 from thaJeztah/1.7_bump_protobuf
e6d91d8 vendor: github.com/golang/protobuf v1.5.4
Additional commits viewable in compare view

Updates github.com/distribution/reference from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/distribution/reference's releases.

v0.6.0

What's Changed

remove deprecated SplitHostname by @thaJeztah in distribution/reference#5

refactor splitDockerDomain to include more documentation by @thaJeztah in distribution/reference#7

fix typo in readme by @xrstf in distribution/reference#10

Exclude domain from name length check by @ozairasim in distribution/reference#9

New Contributors

@xrstf made their first contribution in distribution/reference#10

@ozairasim made their first contribution in distribution/reference#9

Full Changelog: https://github.com/distribution/reference/compare/v0.5.0...v0.6.0

Commits

ff14faf Merge pull request #9 from ozairasim/exclude-domain-from-name-length-validation
2a66312 Merge pull request #10 from xrstf/patch-1
094e717 fix typo in readme
aaca75e Exclude domain from name length check
8507c7f Merge pull request #7 from thaJeztah/cleanup_splitDockerDomain
89ee7ec refactor splitDockerDomain to include more documentation
a3fb784 Merge pull request #5 from thaJeztah/rm_deprecated
4894124 remove deprecated SplitHostname
See full diff in compare view

Updates github.com/docker/docker-credential-helpers from 0.8.0 to 0.8.1

Release notes

Sourced from github.com/docker/docker-credential-helpers's releases.

v0.8.1

What's Changed

vendor: github.com/danieljoos/wincred v1.2.1 docker/docker-credential-helpers#307

move trimming whitespace to error-check helpers docker/docker-credential-helpers#306

Dockerfile: update golangci-lint to v1.55.2 docker/docker-credential-helpers#309

update to go1.21.6 docker/docker-credential-helpers#308

Full Changelog: https://github.com/docker/docker-credential-helpers/compare/v0.8.0...v0.8.1

Commits

292722b Merge pull request #308 from thaJeztah/update_golang_1.21.6
979dcc4 Merge pull request #309 from thaJeztah/update_golangci
f411a65 Dockerfile: update golangci-lint to v1.55.2
9629bd7 update to go1.21.6
f642c26 Merge pull request #306 from thaJeztah/err_checks
8fc3306 Merge pull request #307 from thaJeztah/bump_wincred
6a3e64c move trimming whitespace to error-check helpers
218f178 vendor: github.com/danieljoos/wincred v1.2.1
See full diff in compare view

Updates github.com/docker/go-connections from 0.4.0 to 0.5.0

Commits

fa09c95 Merge pull request #108 from thaJeztah/carry_6
7a67a58 Swap CloseRead and CloseWrite
481d3d2 Merge pull request #107 from thaJeztah/drop_legacy_go
9548f9f tlsconfig: remove deprecated io/ioutil
c564c21 drop support for go1.17 and older
7cbebcf gha: update actions
2cf423f tlsconfig: move allTLSVersions var
dca283b tlsconfig: drop support for go1.12 and older
21876c5 tlsconfig: drop support for go1.6 and older
4d174db tlsconfig: drop support for go1.4 and older
Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.12.0

What's Changed

git: Worktree.AddWithOptions: add skipStatus option when providing a specific path by @moranCohen26 in go-git/go-git#994

git: Signer: fix usage of crypto.Signer interface by @wlynch in go-git/go-git#1029

git: Remote, fetch, adds the prune option. by @juliens in go-git/go-git#366

git: Add crypto.Signer option to CommitOptions. by @wlynch in go-git/go-git#996

git: Worktree checkout tag hash id (#959) by @aymanbagabas in go-git/go-git#966

git: Worktree, Don't panic on empty or root path when checking if it is valid by @tim775 in go-git/go-git#1042

git: Add commit validation for Reset by @pjbgf in go-git/go-git#1048

git: worktree_commit, Fix amend commit to apply changes. Fixes #1024 by @onee-only in go-git/go-git#1045

git: Implement Merge function with initial FastForwardMerge support by @pjbgf in go-git/go-git#1044

plumbing: object, Make first commit visible on logs filtered with filename. Fixes #191 by @onee-only in go-git/go-git#1036

plumbing: no panic in printStats function. Fixes #177 by @nodivbyzero in go-git/go-git#971

plumbing: object, Optimize logging with file. by @onee-only in go-git/go-git#1046

plumbing: object, check legitimacy in (*Tree).Encode by @niukuo in go-git/go-git#967

plumbing: format/gitattributes, close file in ReadAttributesFile by @prskr in go-git/go-git#1018

plumbing: check setAuth error. Fixes #185 by @nodivbyzero in go-git/go-git#969

plumbing: object, fix variable defaultUtf8CommitMessageEncoding name spell error by @Jerry-yz in go-git/go-git#987

utils: merkletrie, calculate filesystem node's hash lazily. by @candid82 in go-git/go-git#825

utils: update comment in node.go's Hash() by @codablock in go-git/go-git#992

_example: fix 404 link and added ssh-agent clone link by @grinish21 in go-git/go-git#1022

_example: checkout-branch example by @dlambda in go-git/go-git#446

_example: example for git clone using ssh-agent by @pjbgf in go-git/go-git#998

New Contributors

@candid82 made their first contribution in go-git/go-git#825

@codablock made their first contribution in go-git/go-git#992

@Jerry-yz made their first contribution in go-git/go-git#987

@wlynch made their first contribution in go-git/go-git#996

@moranCohen26 made their first contribution in go-git/go-git#994

@grinish21 made their first contribution in go-git/go-git#1022

@prskr made their first contribution in go-git/go-git#1018

@dlambda made their first contribution in go-git/go-git#446

@juliens made their first contribution in go-git/go-git#366

@onee-only made their first contribution in go-git/go-git#1036

@tim775 made their first contribution in go-git/go-git#1042

@niukuo made their first contribution in go-git/go-git#967

@avoidalone made their first contribution in go-git/go-git#1047

Full Changelog: https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0

Commits

302ddde Merge pull request #1060 from go-git/dependabot/go_modules/github.com/gliderl...
6bba34d build: bump github.com/gliderlabs/ssh from 0.3.6 to 0.3.7
feaeb36 Merge pull request #937 from matejrisek/feature/rename-short-fields
7959a42 Merge pull request #1052 from go-git/dependabot/go_modules/github.com/skeema/...
4c17ce7 build: bump github.com/skeema/knownhosts from 1.2.1 to 1.2.2
3f77e6f Merge pull request #1048 from pjbgf/fix-reset-validation
6af38e0 Merge pull request #1047 from avoidalone/master
e6c3e58 Merge pull request #1044 from pjbgf/ff-merge
04f7b23 *: fix some comments
f4f1a87 Merge pull request #971 from nodivbyzero/fix-177-diff-print-file-stats
Additional commits viewable in compare view

Updates github.com/golang/protobuf from 1.5.3 to 1.5.4

Release notes

Sourced from github.com/golang/protobuf's releases.

v1.5.4

Notable changes

update descriptor.proto to latest version

Commits

75de7c0 Merge pull request #1597 from golang/updatedesc
b7697bb all: update descriptor.proto to latest version
See full diff in compare view

Updates github.com/google/go-containerregistry from 0.17.0 to 0.19.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.19.1

What's Changed

Bump golang.org/x/net from 0.10.0 to 0.17.0 in /pkg/authn/k8schain by @dependabot in google/go-containerregistry#1815

Bump golang.org/x/ packages by @jonjohnsonjr in google/go-containerregistry#1892

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.19.0...v0.19.1

v0.19.0

What's Changed

Work around docker v25 tarballs by @jonjohnsonjr in google/go-containerregistry#1872

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.18.0...v0.19.0

v0.18.0

What's Changed

fix: goreleaser config by @caarlos0 in google/go-containerregistry#1764

Always print pushed digest in crane push by @aw185176 in google/go-containerregistry#1860

New Contributors

@caarlos0 made their first contribution in google/go-containerregistry#1764

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.17.0...v0.18.0

Commits

dependabot[bot] commented 6 months ago

Superseded by #619.

paketo-buildpacks / pip

Bump the go-modules group with 38 updates #618

v1.32.0

1.32.0

Maintenance

v1.31.1

1.31.1

Fixes

Maintenance

v1.31.0

1.31.0

Features

Maintenance

1.32.0

Maintenance

1.31.1

Fixes

Maintenance

1.31.0

Features

Maintenance

v0.18.2

What's Changed

v0.18.1

v0.8.0

Changelog

Fixes

Building and Packaging

Others

v0.12.2

v0.12.1

What's Changed

v0.12.0

What's Changed

New Contributors

v0.12.0-rc.3

What's Changed

v0.12.0-rc.2

What's Changed

v0.0.1

Security Fixes

CIRCL v1.3.7

What's Changed

New Contributors

containerd 1.7.15

Highlights

Runtime

Contributors

Changes

Dependency Changes

v0.6.0

What's Changed

New Contributors

v0.8.1

What's Changed

v5.12.0

What's Changed

New Contributors

v1.5.4

v0.19.1

What's Changed

v0.19.0

What's Changed

v0.18.0

What's Changed

New Contributors