Bump the go-modules group across 1 directory with 47 updates

Bumps the go-modules group with 29 updates in the / directory:

Package	From	To
github.com/BurntSushi/toml	`1.3.2`	`1.4.0`
github.com/onsi/gomega	`1.30.0`	`1.33.1`
github.com/paketo-buildpacks/occam	`0.18.0`	`0.18.6`
github.com/CycloneDX/cyclonedx-go	`0.7.2`	`0.9.0`
github.com/Microsoft/go-winio	`0.6.1`	`0.6.2`
github.com/Microsoft/hcsshim	`0.11.4`	`0.12.3`
github.com/andybalholm/brotli	`1.0.6`	`1.1.0`
github.com/cenkalti/backoff/v4	`4.2.1`	`4.3.0`
github.com/cloudflare/circl	`1.3.7`	`1.3.8`
github.com/cyphar/filepath-securejoin	`0.2.4`	`0.2.5`
github.com/distribution/reference	`0.5.0`	`0.6.0`
github.com/docker/cli	`26.1.3+incompatible`	`26.1.4+incompatible`
github.com/docker/docker-credential-helpers	`0.8.0`	`0.8.2`
github.com/gabriel-vasile/mimetype	`1.4.3`	`1.4.4`
github.com/go-git/go-git/v5	`5.11.0`	`5.12.0`
github.com/huandu/xstrings	`1.4.0`	`1.5.0`
github.com/klauspost/compress	`1.17.4`	`1.17.8`
github.com/knqyf263/go-rpmdb	`0.0.0-20230301153543-ba94b245509b`	`0.1.1`
github.com/pierrec/lz4/v4	`4.1.19`	`4.1.21`
github.com/rivo/uniseg	`0.4.4`	`0.4.7`
github.com/sassoftware/go-rpmutils	`0.2.0`	`0.4.0`
github.com/shopspring/decimal	`1.3.1`	`1.4.0`
github.com/spdx/tools-golang	`0.5.3`	`0.5.4`
github.com/sylabs/sif/v2	`2.15.0`	`2.16.0`
github.com/tklauser/go-sysconf	`0.3.13`	`0.3.14`
github.com/yusufpapurcu/wmi	`1.2.3`	`1.2.4`
golang.org/x/crypto	`0.23.0`	`0.24.0`
golang.org/x/mod	`0.17.0`	`0.18.0`
golang.org/x/net	`0.25.0`	`0.26.0`

Updates github.com/BurntSushi/toml from 1.3.2 to 1.4.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.4.0

This version requires Go 1.18

Add toml.Marshal() (#405)

Require 2-digit hour (#320)

Wrap UnmarshalTOML() and UnmarshalText() return values in ParseError for position information (#398)

Fix inline tables with dotted keys inside inline arrays (e.g. k=[{a.b=1}]) (#400)

Commits

1e2c053 Undeprecate PrimitiveDecode and MetaData.PrimitiveDecode()
f8f7e48 Update toml-test
9a80667 Add -json flag to tomlv
3203540 fuzz: move fuzz_targets from oss-fuzz (#406)
77ce858 Add Marshal Function (#405)
0e879cb Fix panic when trying to set subkey for a value that's not a table
c299e75 Update toml-test
4223137 Fix inline tables with dotted keys inside inline arrays (#400)
45e7e49 Update toml-test
c320c2d Fix utf8.RuneError test
Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.30.0 to 1.33.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.33.1

1.33.1

Fixes

fix confusing eventually docs [3a66379]

Maintenance

Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]

v1.33.0

1.33.0

Features

Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.

Maintenance

Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]

Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]

Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]

v1.32.0

1.32.0

Maintenance

Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @jbduncan !). Please open an issue if you run into one.

chore: test with Go 1.22 (#733) [32ef35e]

Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

docs: fix typo and broken anchor link to gstruct [f460154]

docs: fix HaveEach matcher signature [a2862e4]

v1.31.1

1.31.1

Fixes

Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]

Update test in case keeping msg is desired [ad1a367]

Maintenance

Show how to import the format sub package [24e958d]

tidy up go.sum [26661b8]

bump dependencies [bde8f7a]

v1.31.0

1.31.0

... (truncated)

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.33.1

Fixes

fix confusing eventually docs [3a66379]

Maintenance

Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]

1.33.0

Features

Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.

Maintenance

Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]

Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]

Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]

1.32.0

Maintenance

Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @jbduncan !). Please open an issue if you run into one.

chore: test with Go 1.22 (#733) [32ef35e]

Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

docs: fix typo and broken anchor link to gstruct [f460154]

docs: fix HaveEach matcher signature [a2862e4]

1.31.1

Fixes

Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]

Update test in case keeping msg is desired [ad1a367]

Maintenance

Show how to import the format sub package [24e958d]

tidy up go.sum [26661b8]

bump dependencies [bde8f7a]

1.31.0

Features

Async assertions include context cancellation cause if present [121c37f]

Maintenance

Bump minimum go version [dee1e3c]

... (truncated)

Commits

8a658bb v1.33.1
e9bc35a Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
3a66379 fix confusing eventually docs
f2e65fc v1.33.0
02e8706 docs: Receive(POINTER, MATCHER)
ec1f186 feat: receiver matcher accepting (POINTER, MATCHER), includes unit tests
9999deb Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745)
cb5ff21 Bump github-pages from 229 to 230 in /docs (#735)
bac6596 Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746)
4379951 v1.32.0
Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/occam from 0.18.0 to 0.18.6

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.18.6

What's Changed

Bump github.com/docker/docker from 26.0.1+incompatible to 26.0.2+incompatible by @dependabot in paketo-buildpacks/occam#290

Bump github.com/onsi/gomega from 1.32.0 to 1.33.0 by @dependabot in paketo-buildpacks/occam#291

Bump github.com/paketo-buildpacks/packit/v2 from 2.12.0 to 2.13.0 by @dependabot in paketo-buildpacks/occam#292

Bump github.com/docker/docker from 26.0.2+incompatible to 26.1.0+incompatible by @dependabot in paketo-buildpacks/occam#293

Bump github.com/onsi/gomega from 1.33.0 to 1.33.1 by @dependabot in paketo-buildpacks/occam#294

Bump github.com/docker/docker from 26.1.0+incompatible to 26.1.1+incompatible by @dependabot in paketo-buildpacks/occam#295

Bump github.com/paketo-buildpacks/packit/v2 from 2.13.0 to 2.14.0 by @dependabot in paketo-buildpacks/occam#296

Bump github.com/docker/docker from 26.1.1+incompatible to 26.1.2+incompatible by @dependabot in paketo-buildpacks/occam#298

Bump github.com/testcontainers/testcontainers-go from 0.30.0 to 0.31.0 by @dependabot in paketo-buildpacks/occam#297

Bump github.com/docker/docker from 26.1.2+incompatible to 26.1.3+incompatible by @dependabot in paketo-buildpacks/occam#299

Updates github-config by @paketo-bot in paketo-buildpacks/occam#289

Updates github-config by @paketo-bot in paketo-buildpacks/occam#303

Adds support of buildpackages in buildpack store and updates freezer by @ForestEckhardt in paketo-buildpacks/occam#302

Full Changelog: https://github.com/paketo-buildpacks/occam/compare/v0.18.5...v0.18.6

v0.18.5

What's Changed

use go 1.20 by @sophiewigmore in paketo-buildpacks/occam#288

Full Changelog: https://github.com/paketo-buildpacks/occam/compare/v0.18.4...v0.18.5

v0.18.4

What's Changed

remove toolchain from go.mod by @sophiewigmore in paketo-buildpacks/occam#287

Full Changelog: https://github.com/paketo-buildpacks/occam/compare/v0.18.3...v0.18.4

v0.18.3

What's Changed

Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 by @dependabot in paketo-buildpacks/occam#280

Bump github.com/testcontainers/testcontainers-go from 0.26.0 to 0.30.0 by @dependabot in paketo-buildpacks/occam#285

Bump github.com/onsi/gomega from 1.30.0 to 1.32.0 by @dependabot in paketo-buildpacks/occam#282

Bump github.com/docker/docker from 25.0.5+incompatible to 26.0.1+incompatible by @dependabot in paketo-buildpacks/occam#286

Bump github.com/google/go-containerregistry from 0.14.0 to 0.19.1 by @dependabot in paketo-buildpacks/occam#281

Full Changelog: https://github.com/paketo-buildpacks/occam/compare/v0.18.2...v0.18.3

v0.18.2

What's Changed

Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12 by @dependabot in paketo-buildpacks/occam#274

Full Changelog: https://github.com/paketo-buildpacks/occam/compare/v0.18.1...v0.18.2

... (truncated)

Commits

e9fee75 Adds support of buildpackages in buildpack store and updates freezer (#302)
dda57be Updating github-config
f0b937b Use stable go version everywhere.
354d744 Bump to go 1.21
64bc107 Updating github-config
d00fe4b Bump github.com/docker/docker
37502e4 Bump github.com/testcontainers/testcontainers-go from 0.30.0 to 0.31.0
ae2aafe Bump github.com/docker/docker
5672c5a Bump github.com/paketo-buildpacks/packit/v2 from 2.13.0 to 2.14.0
463c43d Bump github.com/docker/docker
Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.12.0 to 2.14.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.14.0

What's Changed

Fixes mirror bug when originalHost is excluded by @TisVictress in paketo-buildpacks/packit#569

Bump github.com/onsi/gomega from 1.33.0 to 1.33.1 by @dependabot in paketo-buildpacks/packit#571

Support reading service bindings from VCAP_SERVICES env var by @pbusko in paketo-buildpacks/packit#566

New Contributors

@pbusko made their first contribution in paketo-buildpacks/packit#566 🥳

Full Changelog: https://github.com/paketo-buildpacks/packit/compare/v2.13.0...v2.14.0

v2.13.0

What's Changed

Bump github.com/onsi/gomega from 1.28.1 to 1.29.0 by @dependabot in paketo-buildpacks/packit#531

Bump github.com/google/uuid from 1.3.1 to 1.4.0 by @dependabot in paketo-buildpacks/packit#533

Updates github-config by @paketo-bot in paketo-buildpacks/packit#532

Bump github.com/onsi/gomega from 1.29.0 to 1.30.0 by @dependabot in paketo-buildpacks/packit#536

Updates github-config by @paketo-bot in paketo-buildpacks/packit#534

Bump github.com/google/uuid from 1.4.0 to 1.5.0 by @dependabot in paketo-buildpacks/packit#541

Bump github.com/onsi/gomega from 1.30.0 to 1.31.0 by @dependabot in paketo-buildpacks/packit#544

Bump github.com/onsi/gomega from 1.31.0 to 1.31.1 by @dependabot in paketo-buildpacks/packit#547

Bump github.com/google/uuid from 1.5.0 to 1.6.0 by @dependabot in paketo-buildpacks/packit#548

Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in paketo-buildpacks/packit#556

Bump github.com/onsi/gomega from 1.31.1 to 1.32.0 by @dependabot in paketo-buildpacks/packit#560

Bump github.com/ulikunitz/xz from 0.5.11 to 0.5.12 by @dependabot in paketo-buildpacks/packit#562

Bump github.com/onsi/gomega from 1.32.0 to 1.33.0 by @dependabot in paketo-buildpacks/packit#568

Allows users to set a dependency mirror by @TisVictress in paketo-buildpacks/packit#563

New Contributors

@TisVictress made their first contribution in paketo-buildpacks/packit#563

Full Changelog: https://github.com/paketo-buildpacks/packit/compare/v2.12.0...v2.13.0

Commits

13393ec Support reading service bindings from VCAP_SERVICES env var (#566)
35d8f76 Bump github.com/onsi/gomega from 1.33.0 to 1.33.1
ce376b7 Fixes mirror bug when originalHost is excluded (#569)
4c9f338 Allows users to set a dependency mirror (#563)
4e9c21d Bump github.com/onsi/gomega from 1.32.0 to 1.33.0
dd77ec5 Bump github.com/ulikunitz/xz from 0.5.11 to 0.5.12
95b8056 Bump github.com/onsi/gomega from 1.31.1 to 1.32.0
777a503 Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
c1b785b Bump github.com/google/uuid from 1.5.0 to 1.6.0
b31dc83 Bump github.com/onsi/gomega from 1.31.0 to 1.31.1
Additional commits viewable in compare view

Updates github.com/CycloneDX/cyclonedx-go from 0.7.2 to 0.9.0

Release notes

Sourced from github.com/CycloneDX/cyclonedx-go's releases.

v0.9.0

Changelog

Features

729c284798ebe341ced210b661362f77d68cd655: feat: Add CycloneDX 1.6 fields swhid and omniborId (@snyk-tim)

b5d35959767efce95f50e96bf752c47fbe374496: feat: add manufacturer and authors (@snyk-tim)

c52e698d2fe3fbd60df6ff397f44e7b0ea15a4bc: feat: raise baseline go version to 1.20 (@nscuro)

Fixes

9166e10fdecaadd8a97ceed9636261d351d90a65: fix: ioutil -> io (@nscuro)

349fc8cd072e90d81c0328f1d9dab16aa30fcf60: fix: add bom-ref to OrganizationalEntity/Contact (@snyk-tim)

c97da90e259e0051e02e07300c75ad5e37a0311b: fix: handle breaking changes in skywalking-eyes (@nscuro)

Building and Packaging

ec6291e9ce9efbbb5d0010de4d8668fcbd05d148: build(deps): bump actions/checkout from 4.1.1 to 4.1.5 (@dependabot[bot])

899fe391ca4d756f1d5ba84478d3bc8795003cba: build(deps): bump actions/checkout from 4.1.5 to 4.1.6 (@dependabot[bot])

8674ed5ecc38b65e03908b5a74308c95039068a9: build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 (@dependabot[bot])

db3a1144a2ce30b85e5985d2755fa3e4a81c5ca8: build(deps): bump apache/skywalking-eyes from 0.4.0 to 0.6.0 (@dependabot[bot])

a3bd05518575f14d917685a02c689f81eedaad5c: build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 (@dependabot[bot])

1179dd9051112c3b44a6cc577964c7d501a7258b: build(deps): bump gitpod/workspace-go from 8b9a0f6 to 8d15123 (@dependabot[bot])

d98494ea11dbb6550705d46d2473aa2a4a18e642: build(deps): bump gitpod/workspace-go from 9118b93 to 8b9a0f6 (@dependabot[bot])

1e2a3a09e86d720729a3ab7ec55ed3ffa75164a5: build(deps): bump gitpod/workspace-go from 94ae638 to 9118b93 (@dependabot[bot])

d4d6e35fcfb08d14589b4a693aac3f28978b640b: build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 (@dependabot[bot])

521d1ce7b555013f2b78d8c4a21954815863ab44: build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1 (@dependabot[bot])

f1ebafe5e2d2af3a3d551eb23c583a93b7ebccbf: build(deps): bump goreleaser/goreleaser-action from 5.0.0 to 5.1.0 (@dependabot[bot])

Others

16d2143b3d74b77af8a309b331e1bc46a445f495: Fix(1.6): Added missing omitempty in NistQuantumSecurityLevel (@Petzys)

ffec473428073e1266169e97c1c64de95e89981b: chore: add license header (@mcombuechen)

1f8fdcc0047611a8baacfcd214c5ba3821fefd51: feat(1.6): add BOM.Declarations (@mcombuechen)

62b53429289d6cc6884b111256588150e3fed308: feat(1.6): add BOM.Definitions (@mcombuechen)

c33b9cb58eaa14e89740182fbde2a0cc888bc457: feat(1.6): add CBOM types (@Petzys)

10e10c8bc8fcac6f90c914828786f11e404919b8: feat(1.6): add JSON schema, XML namespace (@mcombuechen)

2dc599a8ad0f2be20e9bfc55ba75764758e6c7b8: feat(1.6): add License.Acknowledgement (@mcombuechen)

7a32fde7e9e9e5fb44f8f8aafadd83a21ff82aaf: feat(1.6): add PostalAddress type (@mcombuechen)

b8e4529773c3d12b172729567574ea6201231682: feat(1.6): add SpecVersion for v1.6 (@mcombuechen)

c8778287f29dd21bff18a4f27f71f495de7b4991: feat(1.6): add environmentalConsiderations (@mcombuechen)

e0e9c670e1617adbdd147cff7cc0747769a4e723: feat(1.6): add schema definitions for CycloneDX 1.6 (@mcombuechen)

b1636c2d6bb8aca4161402958a8d894aab7d66b5: feat(1.6): extend EvidenceOccurrence (@mcombuechen)

b4b3b94a60b1665c1d0492744032a9375ef751b1: fix(1.6): convert occurrences of OrganizationalEntity (@mcombuechen)

9332ca660b772bc538b3c274ceb3d9f81caa0eb8: fix(1.6): fix json, xml labels on BOM.Definitions (@mcombuechen)

v0.8.0

This release ships with almost complete support for v1.5 of the CycloneDX specification.

The only exception being the extended data flow support, as used in SaaS BOMs.

Unfortunately, there are also breaking changes in this release:

The type of Metadata.Tools has changed from *[]Tool to *ToolsChoice, to facilitate the deprecation of Tool in the spec

ToolsChoice holds both legacy *[]Tool, as well as the new *[]Component and *[]Service fields

The Tool type, as well as the ToolsChoice.Tools field are marked as deprecated

During encoding and decoding, it is asserted that only one of both options can be present, in accordance with the "One of" constraint of the spec

When encoding to lower spec versions than v1.5 (using EncodeVersion), Components and Services are automatically converted to legacy Tools

... (truncated)

Commits

98a070d Merge pull request #184 from CycloneDX/go-1.20
07eb476 Merge pull request #139 from CycloneDX/dependabot/github_actions/apache/skywa...
9166e10 fix: ioutil -> io
c97da90 fix: handle breaking changes in skywalking-eyes
c52e698 feat: raise baseline go version to 1.20
b1ff85b Merge pull request #181 from CycloneDX/dependabot/docker/gitpod/workspace-go-...
64d6336 Merge pull request #182 from CycloneDX/spec/1.6
199cd18 Merge pull request #183 from snyk/fix/convert-lic-header
ffec473 chore: add license header
1179dd9 build(deps): bump gitpod/workspace-go from 8b9a0f6 to 8d15123
Additional commits viewable in compare view

Updates github.com/ForestEckhardt/freezer from 0.0.12 to 0.1.0

Release notes

Sourced from github.com/ForestEckhardt/freezer's releases.

v0.1.0

What's Changed

Updates fetchers to create buildpackages by @ForestEckhardt in ForestEckhardt/freezer#11

Full Changelog: https://github.com/ForestEckhardt/freezer/compare/v0.0.12...v0.1.0

Commits

a57bf55 Updates fetchers to create buildpackages
See full diff in compare view

Updates github.com/Microsoft/go-winio from 0.6.1 to 0.6.2

Release notes

Sourced from github.com/Microsoft/go-winio's releases.

v0.6.2

What's Changed

[etw] Add String() functions, JSON field option by @helsaawy in microsoft/go-winio#285

enable dependency updates by @helsaawy in microsoft/go-winio#287

Isolate tools dependencies in tools package by @helsaawy in microsoft/go-winio#293

Update tests; run fuzzing by @helsaawy in microsoft/go-winio#294

Add support for flushing and disconnecting named pipes by @dgolub in microsoft/go-winio#292

Add ResolvePath tests by @helsaawy in microsoft/go-winio#276

[lint] Fix errors from #276 by @helsaawy in microsoft/go-winio#296

Switch from sycall to windows by @helsaawy in microsoft/go-winio#295

[lint] Remove deprecated tar.TypeRegA by @helsaawy in microsoft/go-winio#300

sd.go: fix calculation of security descriptor length in SddlToSecurit… by @dblohm7 in microsoft/go-winio#299

fix: already typo by @testwill in microsoft/go-winio#303

pipe.go: add DialPipeAccessImpLevel by @dblohm7 in microsoft/go-winio#302

Bug: Close hvsock handle on listen error; fix tests by @helsaawy in microsoft/go-winio#310

fileinfo: internally fix FileBasicInfo memory alignment by @dagood in microsoft/go-winio#312

Update go1.21 and CI by @helsaawy in microsoft/go-winio#315

New Contributors

@dgolub made their first contribution in microsoft/go-winio#292

@dblohm7 made their first contribution in microsoft/go-winio#299

@testwill made their first contribution in microsoft/go-winio#303

@dagood made their first contribution in microsoft/go-winio#312

Full Changelog: https://github.com/microsoft/go-winio/compare/v0.6.1...v0.6.2

Commits

3c9576c Update go1.21 and CI (#315)
008bc6e fileinfo: internally fix FileBasicInfo memory alignment (#312)
bc421d9 Bug: Close hvsock handle on listen error; fix tests (#310)
553a715 Merge pull request #302 from dblohm7/implevel2
1963303 pipe.go: add DialPipeAccessImpLevel
e6aebd6 fix: already typo (#303)
eb5b095 sd.go: fix calculation of security descriptor length in SddlToSecurityDescrip...
87c84cf [lint] Remove deprecated tar.TypeRegA (#300)
9f0d5dc Switch from sycall to windows (#295)
fec52bd [lint] Fix errors from #276 (#296)
Additional commits viewable in compare view

Updates github.com/Microsoft/hcsshim from 0.11.4 to 0.12.3

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.3

What's Changed

[release/0.12] Update go-winio to v0.6.2 by @kiashok in microsoft/hcsshim#2114

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.2...v0.12.3

v0.12.2

No release notes provided.

v0.12.1

What's Changed

Add spans and drop large size high volume trace logs by @kiashok in microsoft/hcsshim#2068

Updating permissions and github release action versions (#2078) by @hgarvison in microsoft/hcsshim#2079

fix: move permissions to the correct job (#2080) by @anmaxvl in microsoft/hcsshim#2081

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0...v0.12.1

v0.12.0

What's Changed

adding option of using buffered image reader for faster dmverity hashing by @SethHollandsworth in microsoft/hcsshim#2013

Fix process handle leak when launching a job container by @kevpar in microsoft/hcsshim#2020

Revert "gcs: Support routing container stdio to sidecar" by @kevpar in microsoft/hcsshim#2023

internal/exec: Fix stdio pipe problems by @kevpar in microsoft/hcsshim#2021

Allow mounting multiple dev nodes per assigned device by @katiewasnothere in microsoft/hcsshim#2003

tests: update docker images by @anmaxvl in microsoft/hcsshim#2012

Don't create container scratch per base layer by @ambarve in microsoft/hcsshim#2002

Removing internal tests from hcsshim's cri-containerd tests by @yyatmsft in microsoft/hcsshim#1998

Fix CodeQL pipeline failure by @helsaawy in microsoft/hcsshim#2032

Update Cmd IO handling by @helsaawy in microsoft/hcsshim#1937

[deps] Omni-bus dependency update by @helsaawy in microsoft/hcsshim#2039

Upgrade to go1.21 by @kiashok in microsoft/hcsshim#2033

New Contributors

@yyatmsft made their first contribution in microsoft/hcsshim#1998

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0-rc.3...v0.12.0

v0.12.0-rc.3

What's Changed

SNP Direct DM-Verity Boot by @darracott in microsoft/hcsshim#1952

tests: update test images used for cri-containerd tests by @anmaxvl in microsoft/hcsshim#1991

Add CodeQL suppression for tar extraction code by @ambarve in microsoft/hcsshim#2006

Update nvidia hook log file paths to use container bundle path as base dir by @katiewasnothere in microsoft/hcsshim#1999

Switch to using new errdefs repo by @kiashok in microsoft/hcsshim#2016

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0-rc.2...v0.12.0-rc.3

... (truncated)

Commits

c950974 Update go-winio to v0.6.2 & fix lint errors
ad1ccf5 fix: move permissions to the correct job (#2080) (#2081)
6588c1c Updating permissions and github release action versions (#2078) (#2079)
202f90a Add spans and drop large size high volume trace logs
fe8c673 update newBinaryCmd URL path handling (#2041)
85086d7 Upgrade to go1.21 + fix lint errors
8039310 [deps] Omni-bus dependency update (#2039)
7458e58 Update Cmd IO handling (#1937)
5f9910a Fix CodeQL pipeline failure (#2032)
c56a09c Merge pull request #1998 from yyatmsft/removeInternalTests2
Additional commits viewable in compare view

Updates github.com/andybalholm/brotli from 1.0.6 to 1.1.0

Commits

17e5901 Make my matchfinder work more accessible.
cf812c0 matchfinder: add M0
1b6cf36 matchfinder: remove MultiHash
265f3af matchfinder: penalize score for overlapping matches
a8d524a matchfinder: replace Score function with DistanceBitCost
578645e matchfinder: add MultiHash
24b2bfa matchfinder.M4: add Score function
4a024e3 matchfinder.M4: add match chain
3a1c5cd Fix typo in comment.
0d2aef3 matchfinder.M4: factor out extendMatch2
Additional commits viewable in compare view

Updates github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0

Commits

720b789 remove travis badge from readme
a83af7f feat(backoff): Add functional options for ExponentialBackOff Closes #136
See full diff in compare view

Updates github.com/cloudflare/circl from 1.3.7 to 1.3.8

Release notes

Sourced from github.com/cloudflare/circl's releases.

CIRCL v1.3.8

New

BLS Signatures on top of BLS12-381.

Adopt faster squaring in pairings.

BlindRSA compliant with RFC9474.

(Verifiable) Secret Sharing compatible with the Group interface (elliptic curves).

Notice

Update on cpabe/tkn20 ciphertexts, read more at https://github.com/cloudflare/circl/wiki/tkn20-Ciphertext-Format-(v1.3.8)

What's Changed

Implement Granger-Scott faster squaring in the cyclotomic subgroup. by @armfazh in cloudflare/circl#449

Updates avo and CIRCL's own dependency. by @armfazh in cloudflare/circl#474

Updating documentation for OPRF package. by @armfazh in cloudflare/circl#475

group: removes order method from group interface by @armfazh in cloudflare/circl#356

zk/dleq: Adding DLEQ proofs for Qn, the subgroup of squares in (Z/nZ)* by @armfazh in cloudflare/circl#451

Reduce x/crypto and x/sys versions to match Go 1.21 by @Lekensteyn in cloudflare/circl#476

Bump GitHub Actions versions and use Go 1.22 and 1.21 by @Lekensteyn in cloudflare/circl#477

Adding rule for constant values by @armfazh in cloudflare/circl#478

Add BLS signatures over BLS12-381 by @armfazh in cloudflare/circl#446

group: Implements Shamir and Feldman secret sharing. by @armfazh in cloudflare/circl#348

blindrsa: add support for all variants of RFC9474 by @armfazh in cloudflare/circl#479

Explicitly installs Go with version before CodeQL analysis. by @armfazh in cloudflare/circl#481

Bumps golangci-lint action by @armfazh in cloudflare/circl#485

ecc/bls12381: Ensures pairing operations don't overwrite their input by @armfazh in cloudflare/circl#494

Align to the purego build tag, removing noasm build tag by @mattyclarkson in cloudflare/circl#492

cpabe: Serializing ciphertext with 32-bit prefixes. by @armfazh in cloudflare/circl#490

New Contributors

@mattyclarkson made their first contribution in cloudflare/circl#492

Full Changelog: https://github.com/cloudflare/circl/compare/v1.3.7...v1.3.8

Commits

4bb5601 Serializing ciphertext with 32-bit prefixes.
a4252c7 Test functions working with ciphertext.
64431bb Testing long plaintext.
fe2b663 Using SHAKE128 as a fixed prgn for golden files.
2c600ff Align to the purego build tag, removing noasm build tag
a4b7601 Ensure pairing functions don't overwrite the input.
b4f1578 Test that shows pairing functions overwrite its input.
bba8f1a Bumps golangci-lint action (#485)

paketo-buildpacks / poetry

Bump the go-modules group across 1 directory with 47 updates #401

v1.4.0

v1.33.1

1.33.1

Fixes

Maintenance

v1.33.0

1.33.0

Features

Maintenance

v1.32.0

1.32.0

Maintenance

v1.31.1

1.31.1

Fixes

Maintenance

v1.31.0

1.31.0

1.33.1

Fixes

Maintenance

1.33.0

Features

Maintenance

1.32.0

Maintenance

1.31.1

Fixes

Maintenance

1.31.0

Features

Maintenance

v0.18.6

What's Changed

v0.18.5

What's Changed

v0.18.4

What's Changed

v0.18.3

What's Changed

v0.18.2

What's Changed

v2.14.0

What's Changed

New Contributors

v2.13.0

What's Changed

New Contributors

v0.9.0

Changelog

Features

Fixes

Building and Packaging

Others

v0.8.0

v0.1.0

What's Changed

v0.6.2

What's Changed

New Contributors

v0.12.3

What's Changed

v0.12.2

v0.12.1

What's Changed

v0.12.0

What's Changed

New Contributors

v0.12.0-rc.3

What's Changed

CIRCL v1.3.8

New

Notice

What's Changed

New Contributors