search

paketo-buildpacks / python

Apache License 2.0
41 stars 9 forks source link

Bump the go-modules group with 18 updates #813

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps the go-modules group with 18 updates:

Package From To
github.com/onsi/gomega 1.31.1 1.32.0
github.com/paketo-buildpacks/occam 0.18.2 0.18.3
github.com/Microsoft/hcsshim 0.12.0 0.12.2
github.com/cenkalti/backoff/v4 4.2.1 4.3.0
github.com/containerd/containerd 1.7.13 1.7.15
github.com/distribution/reference 0.5.0 0.6.0
github.com/docker/docker 25.0.5+incompatible 26.0.1+incompatible
github.com/google/go-containerregistry 0.19.0 0.19.1
github.com/klauspost/compress 1.17.7 1.17.8
github.com/shirou/gopsutil/v3 3.24.2 3.24.3
github.com/testcontainers/testcontainers-go 0.28.0 0.30.0
github.com/ulikunitz/xz 0.5.11 0.5.12
golang.org/x/mod 0.16.0 0.17.0
golang.org/x/net 0.22.0 0.24.0
golang.org/x/sync 0.6.0 0.7.0
golang.org/x/sys 0.18.0 0.19.0
golang.org/x/tools 0.19.0 0.20.0
google.golang.org/grpc 1.62.1 1.63.2

Updates github.com/onsi/gomega from 1.31.1 to 1.32.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.32.0

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

Commits
  • 4379951 v1.32.0
  • a350b95 Maintain source backwards compatibility
  • a6c8875 Fix failing test
  • 436a197 Migrate github.com/golang/protobuf to google.golang.org/protobuf
  • 32ef35e chore: test with Go 1.22 (#733)
  • a0d0387 Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717)
  • b71e477 Bump github-pages and jekyll-feed in /docs (#732)
  • f460154 docs: fix typo and broken anchor link to gstruct
  • a2862e4 docs: fix HaveEach matcher signature
  • See full diff in compare view


Updates github.com/paketo-buildpacks/occam from 0.18.2 to 0.18.3

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.18.3

What's Changed

Full Changelog: https://github.com/paketo-buildpacks/occam/compare/v0.18.2...v0.18.3

Commits
  • ea10e39 update fakes
  • 059d6bc Bump github.com/google/go-containerregistry from 0.14.0 to 0.19.1
  • 1f22679 Bump github.com/docker/docker
  • 37cf400 Bump github.com/onsi/gomega from 1.30.0 to 1.32.0
  • 122482e Bump github.com/testcontainers/testcontainers-go from 0.26.0 to 0.30.0 (#285)
  • 393f58f Bump google.golang.org/protobuf from 1.31.0 to 1.33.0
  • See full diff in compare view


Updates github.com/Microsoft/hcsshim from 0.12.0 to 0.12.2

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.2

No release notes provided.

v0.12.1

What's Changed

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0...v0.12.1

Commits


Updates github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0

Commits
  • 720b789 remove travis badge from readme
  • a83af7f feat(backoff): Add functional options for ExponentialBackOff Closes #136
  • See full diff in compare view


Updates github.com/containerd/containerd from 1.7.13 to 1.7.15

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.15

Welcome to the v1.7.15 release of containerd!

The fifteenth patch release for containerd 1.7 contains various fixes; one for a regression introduced in v1.7.14 in the way process exits were handled.

Highlights

  • Adds mediatype to OCI index record on export (#9990)

Runtime

  • Fix runc shim to only defer init process exits (#10037)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Derek McGowan
  • Phil Estes
  • Austin Vazquez
  • Laura Brehm
  • Sebastiaan van Stijn
  • Talon

Changes

  • Prepare for v1.7.15 release (#10039)
  • Fix runc shim to only defer init process exits (#10037)
    • 21df46766 runc-shim: only defer init process exits
  • Fix compile from version control system (source) use case (#10012)
    • 2a054213e Fix compile from version control system (source) use case
  • Adds mediatype to OCI index record on export (#9990)
    • 6605c47a4 adds mediatype to oci index record
  • vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 (#9975)
    • e6d91d843 vendor: github.com/golang/protobuf v1.5.4
    • 2d136c5f5 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
    • a1a7af7a3 build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0

Dependency Changes

  • github.com/golang/protobuf v1.5.3 -> v1.5.4
  • google.golang.org/protobuf v1.31.0 -> v1.33.0

... (truncated)

Commits
  • 926c958 Merge pull request #10039 from estesp/prep-1.7.15
  • 4d4759b Prep v1.7.15 release
  • 52fc8ab Merge pull request #10037 from laurazard/backport-1.7-exec-fix
  • 21df467 runc-shim: only defer init process exits
  • 0dcf21c Merge pull request #10012 from austinvazquez/release-1.7-fix-offline-compilation
  • 2a05421 Fix compile from version control system (source) use case
  • ec5222f Merge pull request #9990 from daghack/oci-add-mediatype-1.7
  • 6605c47 adds mediatype to oci index record
  • be5ec97 Merge pull request #9975 from thaJeztah/1.7_bump_protobuf
  • e6d91d8 vendor: github.com/golang/protobuf v1.5.4
  • Additional commits viewable in compare view


Updates github.com/distribution/reference from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/distribution/reference's releases.

v0.6.0

What's Changed

New Contributors

Full Changelog: https://github.com/distribution/reference/compare/v0.5.0...v0.6.0

Commits
  • ff14faf Merge pull request #9 from ozairasim/exclude-domain-from-name-length-validation
  • 2a66312 Merge pull request #10 from xrstf/patch-1
  • 094e717 fix typo in readme
  • aaca75e Exclude domain from name length check
  • 8507c7f Merge pull request #7 from thaJeztah/cleanup_splitDockerDomain
  • 89ee7ec refactor splitDockerDomain to include more documentation
  • a3fb784 Merge pull request #5 from thaJeztah/rm_deprecated
  • 4894124 remove deprecated SplitHostname
  • See full diff in compare view


Updates github.com/docker/docker from 25.0.5+incompatible to 26.0.1+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v26.0.1

26.0.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • Fix a regression that meant network interface specific --sysctl options prevented container startup. moby/moby#47646
  • Remove erroneous platform from image config OCI descriptor in docker save output. moby/moby#47694
  • containerd image store: OCI archives produced by docker save will now have a non-empty mediaType field in index.json moby/moby#47701
  • Fix a regression that prevented the internal resolver from forwarding requests from IPvlan L3 networks to external resolvers. moby/moby#47705
  • Prevent the use of external resolvers in IPvlan and Macvlan networks created with no parent interface specified. moby/moby#47705

Packaging updates

v26.0.0

26.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Security

This release contains a security fix for [CVE-2024-29018], a potential data exfiltration from 'internal' networks via authoritative DNS servers.

New

  • Add Subpath field to the VolumeOptions making it possible to mount a subpath of a volume. moby/moby#45687
  • Add volume-subpath support to the mount flag (--mount type=volume,...,volume-subpath=<subpath>). docker/cli#4331
  • Accept = separators and [ipv6] in compose files for docker stack deploy. docker/cli#4860
  • rootless: Add support for enabling host loopback by setting the DOCKERD_ROOTLESS_ROOTLESSKIT_DISABLE_HOST_LOOPBACK environment variable to false (defaults to true). This lets containers connect to the host by using IP address 10.0.2.2. moby/moby#47352
  • containerd image store: docker image ls no longer creates duplicates entries for multi-platform images. moby/moby#45967
  • containerd image store: Send Prometheus metrics. moby/moby#47555

Bug fixes and enhancements

  • [CVE-2024-29018]: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. moby/moby#47589
  • Ensure that a generated MAC address is not restored when a container is restarted, but a configured MAC address is preserved. moby/moby#47233

... (truncated)

Commits
  • 60b9add Merge pull request #47705 from robmry/backport-26.0/47662_ipvlan_l3_dns
  • 8ad7f86 Run ipvlan tests even if 'modprobe ipvlan' fails
  • dc27552 Stop macvlan with no parent from using ext-dns
  • 7b570f0 Enable DNS proxying for ipvlan-l3
  • 8cdcc4f Move dummy DNS server to integration/internal/network
  • ed752f6 Merge pull request #47701 from vvoland/v26.0-47691
  • 9db1b6f Merge pull request #47702 from vvoland/v26.0-47647
  • 6261281 Merge pull request #47700 from vvoland/v26.0-47673
  • 90355e5 Merge pull request #47696 from vvoland/v26.0-47658
  • 72615b1 github/ci: Check if backport is opened against the expected branch
  • Additional commits viewable in compare view


Updates github.com/google/go-containerregistry from 0.19.0 to 0.19.1

Release notes

Sourced from github.com/google/go-containerregistry's releases.

v0.19.1

What's Changed

Full Changelog: https://github.com/google/go-containerregistry/compare/v0.19.0...v0.19.1

Commits


Updates github.com/klauspost/compress from 1.17.7 to 1.17.8

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.8

What's Changed

New Contributors

Full Changelog: https://github.com/klauspost/compress/compare/v1.17.7...v1.17.8

Commits


Updates github.com/shirou/gopsutil/v3 from 3.24.2 to 3.24.3

Release notes

Sourced from github.com/shirou/gopsutil/v3's releases.

v3.24.3

What's Changed

disk

host

load

process

New Contributors

Full Changelog: https://github.com/shirou/gopsutil/compare/v3.24.2...v3.24.3

Commits
  • e230f52 Merge pull request #1612 from eric1234/correct-process-counts
  • ce0395f Merge pull request #1609 from shirou/feat/process_freebsd_arm64_type_generated
  • 1d9f956 Merge pull request #1615 from majorteach/master
  • 71b8173 chore: fix typo
  • cded180 Total Processes in MiscStat Corrected
  • 6100124 Merge pull request #1611 from shirou/dependabot/github_actions/actions/cache-...
  • 83660da chore(deps): bump actions/cache from 4.0.1 to 4.0.2
  • 1e5c5ae Merge pull request #1604 from shirou/dependabot/go_modules/github.com/stretch...
  • 6df531f chore(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0
  • c731c53 Merge pull request #1605 from shirou/dependabot/go_modules/golang.org/x/sys-0...
  • Additional commits viewable in compare view


Updates github.com/testcontainers/testcontainers-go from 0.28.0 to 0.30.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.30.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

... (truncated)

Commits
  • fe33f3a chore: use new version (v0.30.0) in modules and examples
  • 4a079a0 Fix url creation to handle query params when using HTTP wait strategy (#2466)
  • 8ee975e fix: data race on container run (#2345)
  • e8b8e55 fix: logging deadlock (#2346)
  • 55ca42a feat(k6):Add remote test scripts (#2350)
  • 697c264 feat: optimizes file copies to and from containers (#2450)
  • 88622f0 fix(exec): updates the Multiplexed opt to combine stdout and stderr (#2452)
  • db61369 Upgrade neo4j module to use features from v0.29.1 of testcontainers-go (#2463)
  • 2d89e90 bug:Fix AMQPS url (#2462)
  • d24cf91 chore: more compose updates in comments
  • Additional commits viewable in compare view


Updates github.com/ulikunitz/xz from 0.5.11 to 0.5.12

Commits
  • 4f11dce Update README.md and SECURITY.md to address security questions
  • f56ebbf TODO.md: fix a typo
  • See full diff in compare view


Updates golang.org/x/mod from 0.16.0 to 0.17.0

Commits
  • aa51b25 modfile: do not collapse if there are unattached comments within blocks
  • 87140ec sumdb/tlog: make NewTiles only generate strictly necessary tiles
  • 18d3f56 modfile: fix crash on AddGoStmt in empty File
  • See full diff in compare view


Updates golang.org/x/net from 0.22.0 to 0.24.0

Commits
  • 7bbe320 go.mod: update golang.org/x dependencies
  • c48da13 http2: fix TestServerContinuationFlood flakes
  • 762b58d http2: fix tipos in comment
  • ba87210 http2: close connections when receiving too many headers
  • ebc8168 all: fix some typos
  • 3678185 http2: make TestCanonicalHeaderCacheGrowth faster
  • 448c44f http2: remove clientTester
  • c7877ac http2: convert the remaining clientTester tests to testClientConn
  • d8870b0 http2: use synthetic time in TestIdleConnTimeout
  • d73acff http2: only set up deadline when Server.IdleTimeout is positive
  • Additional commits viewable in compare view


Updates golang.org/x/sync from 0.6.0 to 0.7.0

Commits


Updates golang.org/x/sys from 0.18.0 to 0.19.0

Commits
  • cabba82 windows: use uint32 for serial comm flags for consistency
  • 1a50d97 windows: add serial comm functions
  • 95f07ec x/sys/windows: add func windows.DisconnectNamedPipe(handle Handle) (err error)
  • 4be02d3 unix: expose mmap calls on z/OS
  • See full diff in compare view


Updates golang.org/x/tools from 0.19.0 to 0.20.0

Commits
  • 11c692e gopls/internal/test/marker/testdata: skip hover size tests on 32-bit arm
  • fc660e5 go.mod: update golang.org/x dependencies
  • 6590f47 internal/gcimporter: renable tests of issue50259.go
  • f1d5252 gopls/internal/golang: Hover: show wasted % of struct space
  • 951bb40 gopls/internal/test/integration/misc: fix flaky test
  • c9b0c65 gopls/internal/analysis/fillreturns: skip test if gotypesalias=1
  • c623a28 gopls/internal/cache: fix crash in snapshot.Analyze with patch versions
  • f345449 gopls/internal/server: filter diagnostics to "best" views
  • 42d590c gopls/internal/test/integration: add a WriteGoSum run option
  • 53d35a5 gopls/internal/golang: RenderPackageDoc: fix doc links
  • Additional commits viewable in compare view


Updates google.golang.org/grpc from 1.62.1 to 1.63.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.63.2

Bugs

  • Fix the user agent string

Release 1.63.1

Bugs

  • grpc: fixed subchannel log messages to properly reference the parent channel (#7101)

API Changes

  • grpc: remove Deprecated tag from Dial and DialContext; these will be deprecated in v1.64 instead (#7103)

Release 1.63.0

Behavior Changes

  • grpc: Return canonical target string from resolver.Address.String() (experimental) (#6923)
  • client & server: when using write buffer pooling, use input value for buffer size instead of size*2 (#6983)

New Features

  • grpc: add ClientConn.CanonicalTarget() to return the canonical target string. (#7006)
  • xds: implement LRS named metrics support (gRFC A64) (#7027)
  • grpc: introduce grpc.NewClient to allow users to create new clients in idle mode and with "dns" as the default resolver (#7010)

API Changes

  • grpc: stabilize experimental method ClientConn.Target() (#7006)

Bug Fixes

  • xds: fix an issue that would cause the client to send an empty list of resources for LDS/CDS upon reconnecting with the management server (#7026)
  • server: Fix some errors returned by a server when using a grpc.Server as an http.Handler with the Go stdlib HTTP server (#6989)
  • resolver/dns: add SetResolvingTimeout to allow configuring the DNS resolver's global timeout (#6917)
  • Set the security level of Windows named pipes to NoSecurity (#6956)

Release 1.62.2

Dependencies

Commits
  • d32e66c Change version to 1.63.2 (#7104)
  • 92f6dd0 channelz: pass parent pointer instead of parent ID to RegisterSubChannel (#7101)
  • 0f6ef0f grpc: un-deprecate Dial and DialContext
  • 58dc749 Change version to 1.63.1-dev (#7051)
  • c68f456 Change version to 1.63.0 (#7050)
  • 6369167 *: update http2 dependency (#7082)
  • 8854761 cherry-pick: channelz: fix race accessing channelMap without lock (#7079) (#7...
  • e62770d channelz: add LocalAddr to listen sockets and test (#7062) (#7063)
  • 4ffccf1 googlec2p: use xdstp style template for client LDS resource name (#7048)
  • faf9964 gracefulswitch: add ParseConfig and make UpdateClientConnState call SwitchTo ...
  • Additional commits viewable in compare view


Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore major version` will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself) - `@dependabot ignore minor version` will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's m... _Description has been truncated_
dependabot[bot] commented 5 months ago

Superseded by #815.