paketo-buildpacks / yarn-install

A Cloud Native Buildpack for Yarn
Apache License 2.0
8 stars 8 forks source link

Bump the go-modules group across 1 directory with 19 updates #779

Closed dependabot[bot] closed 2 months ago

dependabot[bot] commented 2 months ago

Bumps the go-modules group with 13 updates in the / directory:

Package From To
github.com/paketo-buildpacks/libnodejs 0.2.0 0.3.0
github.com/paketo-buildpacks/occam 0.18.7 0.18.8
github.com/Masterminds/semver/v3 3.2.1 3.3.0
github.com/Masterminds/sprig/v3 3.2.3 3.3.0
github.com/Microsoft/hcsshim 0.12.5 0.12.6
github.com/cloudflare/circl 1.3.9 1.4.0
github.com/docker/cli 27.1.2+incompatible 27.2.0+incompatible
github.com/sylabs/sif/v2 2.18.0 2.19.1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.53.0 0.54.0
golang.org/x/crypto 0.26.0 0.27.0
golang.org/x/mod 0.20.0 0.21.0
golang.org/x/net 0.28.0 0.29.0
google.golang.org/grpc 1.65.0 1.66.0

Updates github.com/paketo-buildpacks/libnodejs from 0.2.0 to 0.3.0

Release notes

Sourced from github.com/paketo-buildpacks/libnodejs's releases.

v0.3.0

What's Changed

  • Add support for cjs and mjs files when looking for a Node.js application
  • Marshal dependencies from package.toml

Full Changelog: https://github.com/paketo-buildpacks/libnodejs/compare/v0.2.0...v0.3.0

Commits
  • 1868fa9 feat: add support for cjs files (#34)
  • f099c5f Marshal dependencies from package.toml (#33)
  • 5099ee8 build(deps): bump github.com/paketo-buildpacks/packit/v2
  • daff2f2 feat: add support for mjs files when finding apps (#31)
  • c6e737a build(deps): bump github.com/paketo-buildpacks/packit/v2
  • e1ab573 build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.1
  • 349be0c build(deps): bump github.com/paketo-buildpacks/packit/v2
  • 90f967f build(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1
  • 2e42024 build(deps): bump github.com/paketo-buildpacks/packit/v2
  • 3352dd5 build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.0
  • Additional commits viewable in compare view


Updates github.com/paketo-buildpacks/occam from 0.18.7 to 0.18.8

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.18.8

What's Changed

New Contributors

Full Changelog: https://github.com/paketo-buildpacks/occam/compare/v0.18.7...v0.18.8

Commits
  • 1193f3c Bump docker to version 26.1.5 to fix CVE-2024-41110
  • 5cd4ede Updates go mod version to 1.23.0
  • 2e5b930 Updates go mod version to 1.22.6
  • 815b014 Bump github.com/paketo-buildpacks/packit/v2 from 2.14.1 to 2.14.2
  • 74a79fb Bump github.com/paketo-buildpacks/packit/v2 from 2.14.0 to 2.14.1
  • 90134a5 Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2
  • 653a6fb Bump github.com/onsi/gomega from 1.34.0 to 1.34.1
  • ed0e429 Bump github.com/onsi/gomega from 1.33.1 to 1.34.0
  • f467245 Updates go mod version to 1.22.5
  • c97acf2 Bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1
  • Additional commits viewable in compare view


Updates github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.3.0

What's Changed

New Contributors

Full Changelog: https://github.com/Masterminds/semver/compare/v3.2.1...v3.3.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

3.3.0 (2024-08-27)

Added

Changed

  • #241: Simplify StrictNewVersion parsing (thanks @​grosser)
  • Testing support up through Go 1.23
  • Minimum version set to 1.21 as this is what's tested now
  • Fuzz testing now supports caching
Commits
  • e6e3d4d Merge pull request #249 from mattfarina/update-changelog-3.3.0
  • e80c4ea Updating changelog for 3.3.0
  • 80427ad Merge pull request #248 from mattfarina/bump-min-version
  • b610837 bumping min version in go.mod based on what's tested
  • a4cccd8 Merge pull request #246 from mattfarina/bump-go-1.23
  • 7c178cf Updating the testing version of Go used
  • 29f94c1 Merge pull request #241 from grosser/grosser/validate
  • 2cf1b16 Merge pull request #245 from mattfarina/remove-vert
  • b55476a Removing reference to vert
  • d07450b simplify StrictNewVersion
  • Additional commits viewable in compare view


Updates github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0

Release notes

Sourced from github.com/Masterminds/sprig/v3's releases.

v3.3.0

What's Changed

New Contributors

Full Changelog: https://github.com/Masterminds/sprig/compare/v3.2.3...v3.3.0

Changelog

Sourced from github.com/Masterminds/sprig/v3's changelog.

Release 3.3.0 (2024-08-29)

Added

Changed

  • #407: Removed duplicate documentation (functions were documentated in 2 places)
  • #290: Corrected copy/paster oops in math documentation (thanks @​zzhu41)
  • #369: Corrected template reference in docs (thanks @​chey)
  • #375: Added link to URL documenation (thanks @​carlpett)
  • #406: Updated the mergo dependency which had a breaking change (which was accounted for)
  • #376: Fixed documentation error (thanks @​jheyduk)
  • #404: Updated dependency tree
  • #391: Fixed misspelling (thanks @​chrishalbert)
  • #405: Updated Go versions used in testing
Commits
  • e708470 Merge pull request #408 from mattfarina/update-changelog-3.3
  • 8fc4354 Updating the changelog for the 3.3.0 release
  • cb81a32 Merge pull request #407 from mattfarina/remove-dup-math-functions
  • 2637693 Removing duplicate documentation
  • 06b9a87 Merge pull request #290 from zzhu41/patch-1
  • e663ec6 Merge pull request #369 from chey/patch-1
  • bb2f73f Merge pull request #375 from carlpett/patch-1
  • f07659e Merge pull request #400 from itzik-elayev/master
  • 98b35c1 Add closing bracket
  • 7a88928 Merge pull request #406 from mattfarina/update-mergo
  • Additional commits viewable in compare view


Updates github.com/Microsoft/hcsshim from 0.12.5 to 0.12.6

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.6

What's Changed

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.5...v0.12.6

Commits


Updates github.com/cloudflare/circl from 1.3.9 to 1.4.0

Release notes

Sourced from github.com/cloudflare/circl's releases.

CIRCL v1.4.0

Changes

New: ML-KEM compatible with FIPS-203.

Commit History

Full Changelog: https://github.com/cloudflare/circl/compare/v1.3.9...v1.4.0

Commits


Updates github.com/docker/cli from 27.1.2+incompatible to 27.2.0+incompatible

Commits
  • 3ab4256 Merge pull request #5374 from vvoland/vendor-docker
  • 88a49df vendor: github.com/docker/docker 3ab5c7d0036c (v27.2.0-dev)
  • 5d17c29 Merge pull request #5372 from thaJeztah/27.x_backport_fix_linting_issues
  • 64b9e4c cli: rename args that collided with builtins (predeclard)
  • 4b71d0d e2e/global: fix n-constant format string in call (govet)
  • 002cfcd cli/command: fix n-constant format string in call (govet)
  • d8af781 cli/command/system: remove redundant nil-check (gosimple)
  • f042ddb Merge pull request #5371 from vvoland/vendor-docker
  • 8e94ed1 vendor: github.com/docker/docker b27de4ef1634 (v27.2.0-dev)
  • 7a82aee Merge pull request #5368 from dvdksn/27x_5360
  • Additional commits viewable in compare view


Updates github.com/sylabs/sif/v2 from 2.18.0 to 2.19.1

Release notes

Sourced from github.com/sylabs/sif/v2's releases.

v2.19.1

What's Changed

Full Changelog: https://github.com/sylabs/sif/compare/v2.19.0...v2.19.1

v2.19.0

This release drops support for Go 1.21.

What's Changed

Full Changelog: https://github.com/sylabs/sif/compare/v2.18.0...v2.19.0

Commits
  • 1ed3ce5 Merge pull request #384 from tri-adam/overflow-fix
  • 6f00aba fix: check descriptor capacity during SIF creation
  • c1fcc37 fix: correct the range check for descriptor IDs
  • fd8a090 Merge pull request #383 from tri-adam/golangci-lint-v1.60
  • d2a9ddc fix: address lint with golangci-lint v1.60
  • f4453b3 ci: remove deprecated exportloopref linter
  • dd77d01 chore: bump golangci-lint to v1.60
  • 518b3a3 build(deps): bump github.com/sigstore/sigstore from 1.8.4 to 1.8.8 (#381)
  • afa5a4e Merge pull request #382 from tri-adam/go-1.23
  • 9a07943 chore: bump module to Go 1.22
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.53.0 to 0.54.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

Release v1.29.0/v0.54.0/v0.23.0/v0.9.0/v0.4.0/v0.2.0/v0.1.0

Overview

This release is the last to support Go 1.21. The next release will require at least Go 1.22.

Added

  • Add the WithSpanAttributes and WithMetricAttributes methods to set custom attributes to the stats handler in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#5133)
  • The go.opentelemetry.io/contrib/bridges/otelzap module. This module provides an OpenTelemetry logging bridge for go.uber.org/zap. (#5191)
  • Support for the OTEL_HTTP_CLIENT_COMPATIBILITY_MODE=http/dup environment variable in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to emit attributes for both the v1.20.0 and v1.26.0 semantic conventions. (#5401)
  • The go.opentelemetry.io/contrib/bridges/otelzerolog module. This module provides an OpenTelemetry logging bridge for github.com/rs/zerolog. (#5405)
  • Add WithGinFilter filter parameter in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin to allow filtering requests with *gin.Context. (#5743)
  • Support for stdoutlog exporter in go.opentelemetry.io/contrib/config. (#5850)
  • Add macOS ARM64 platform to the compatibility testing suite. (#5868)
  • Add new runtime metrics to go.opentelemetry.io/contrib/instrumentation/runtime, which are still disabled by default. (#5870)
  • Add the WithMetricsAttributesFn option to allow setting dynamic, per-request metric attributes in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#5876)
  • The go.opentelemetry.io/contrib/config package supports configuring with_resource_constant_labels for the prometheus exporter. (#5890)
  • Support Go 1.23. (#6017)

Removed

  • The deprecated go.opentelemetry.io/contrib/processors/baggagecopy package is removed. (#5853)

Fixed

  • Race condition when reading the HTTP body and writing the response in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#5916)

What's Changed

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.29.0/0.54.0/0.23.0/0.9.0/0.4.0/0.2.0/0.1.0] - 2024-08-23

This release is the last to support [Go 1.21]. The next release will require at least [Go 1.22].

Added

  • Add the WithSpanAttributes and WithMetricAttributes methods to set custom attributes to the stats handler in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#5133)
  • The go.opentelemetry.io/contrib/bridges/otelzap module. This module provides an OpenTelemetry logging bridge for go.uber.org/zap. (#5191)
  • Support for the OTEL_HTTP_CLIENT_COMPATIBILITY_MODE=http/dup environment variable in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to emit attributes for both the v1.20.0 and v1.26.0 semantic conventions. (#5401)
  • The go.opentelemetry.io/contrib/bridges/otelzerolog module. This module provides an OpenTelemetry logging bridge for github.com/rs/zerolog. (#5405)
  • Add WithGinFilter filter parameter in go.opentelemetry.io/contrib/instrumentation/github.com/gin-gonic/gin/otelgin to allow filtering requests with *gin.Context. (#5743)
  • Support for stdoutlog exporter in go.opentelemetry.io/contrib/config. (#5850)
  • Add macOS ARM64 platform to the compatibility testing suite. (#5868)
  • Add new runtime metrics to go.opentelemetry.io/contrib/instrumentation/runtime, which are still disabled by default. (#5870)
  • Add the WithMetricsAttributesFn option to allow setting dynamic, per-request metric attributes in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#5876)
  • The go.opentelemetry.io/contrib/config package supports configuring with_resource_constant_labels for the prometheus exporter. (#5890)
  • Support [Go 1.23]. (#6017)

Removed

  • The deprecated go.opentelemetry.io/contrib/processors/baggagecopy package is removed. (#5853)

Fixed

  • Race condition when reading the HTTP body and writing the response in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#5916)
Commits
  • fc25f67 Release v1.29.0/v0.54.0/v0.23.0/v0.9.0/v0.4.0/v0.2.0/v0.1.0 (#6042)
  • c42406a fix(deps): update module github.com/golangci/golangci-lint to v1.60.3 (#6039)
  • fd28620 fix(deps): update module github.com/golangci/golangci-lint to v1.60.2 (#6008)
  • 21e0a4d fix(deps): update golang.org/x/exp digest to 9b4947d (#6038)
  • 3e4b550 fix(deps): update golang.org/x/exp digest to 778ce7b (#6035)
  • e9d1d30 fix(deps): update google.golang.org/genproto/googleapis/api digest to fc7c04a...
  • 35cdd98 fix(deps): update aws-sdk-go-v2 monorepo (#6037)
  • b0a60d2 chore(deps): update k8s.io/kube-openapi digest to 76de80e (#6033)
  • 3a400b4 chore(deps): update google.golang.org/genproto/googleapis/rpc digest to fc7c0...
  • cf214e5 chore(deps): update k8s.io/utils digest to f90d014 (#6029)
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/otel from 1.28.0 to 1.29.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.29.0/0.51.0/0.5.0] 2024-08-23

This release is the last to support [Go 1.21]. The next release will require at least [Go 1.22].

Added

  • Add MacOS ARM64 platform to the compatibility testing suite. (#5577)
  • Add InstrumentationScope field to SpanStub in go.opentelemetry.io/otel/sdk/trace/tracetest, as a replacement for the deprecated InstrumentationLibrary. (#5627)
  • Make the initial release of go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc. This new module contains an OTLP exporter that transmits log telemetry using gRPC. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5629)
  • Add Walk function to TraceState in go.opentelemetry.io/otel/trace to iterate all the key-value pairs. (#5651)
  • Bridge the trace state in go.opentelemetry.io/otel/bridge/opencensus. (#5651)
  • Zero value of SimpleProcessor in go.opentelemetry.io/otel/sdk/log no longer panics. (#5665)
  • The FilterProcessor interface type is added in go.opentelemetry.io/otel/sdk/log/internal/x. This is an optional and experimental interface that log Processors can implement to instruct the Logger if a Record will be processed or not. It replaces the existing Enabled method that is removed from the Processor interface itself. It does not fall within the scope of the OpenTelemetry Go versioning and stability policy and it may be changed in backwards incompatible ways or removed in feature releases. (#5692)
  • Support [Go 1.23]. (#5720)

Changed

  • NewMemberRaw, NewKeyProperty and NewKeyValuePropertyRaw in go.opentelemetry.io/otel/baggage allow UTF-8 string in key. (#5132)
  • Processor.OnEmit in go.opentelemetry.io/otel/sdk/log now accepts a pointer to Record instead of a value so that the record modifications done in a processor are propagated to subsequent registered processors. (#5636)
  • SimpleProcessor.Enabled in go.opentelemetry.io/otel/sdk/log now returns false if the exporter is nil. (#5665)
  • Update the concurrency requirements of Exporter in go.opentelemetry.io/otel/sdk/log. (#5666)
  • SimpleProcessor in go.opentelemetry.io/otel/sdk/log synchronizes OnEmit calls. (#5666)
  • The Processor interface in go.opentelemetry.io/otel/sdk/log no longer includes the Enabled method. See the FilterProcessor interface type added in go.opentelemetry.io/otel/sdk/log/internal/x to continue providing this functionality. (#5692)
  • The SimpleProcessor type in go.opentelemetry.io/otel/sdk/log is no longer comparable. (#5693)
  • The BatchProcessor type in go.opentelemetry.io/otel/sdk/log is no longer comparable. (#5693)

Fixed

  • Correct comments for the priority of the WithEndpoint and WithEndpointURL options and their corresponding environment variables in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#5584)
  • Pass the underlying error rather than a generic retry-able failure in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp, go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp and go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp. (#5541)
  • Correct the Tracer, Meter, and Logger names used in go.opentelemetry.io/otel/example/dice. (#5612)
  • Correct the Tracer names used in go.opentelemetry.io/otel/example/namedtracer. (#5612)
  • Correct the Tracer name used in go.opentelemetry.io/otel/example/opencensus. (#5612)
  • Correct the Tracer and Meter names used in go.opentelemetry.io/otel/example/otel-collector. (#5612)
  • Correct the Tracer names used in go.opentelemetry.io/otel/example/passthrough. (#5612)
  • Correct the Meter name used in go.opentelemetry.io/otel/example/prometheus. (#5612)
  • Correct the Tracer names used in go.opentelemetry.io/otel/example/zipkin. (#5612)
  • Correct comments for the priority of the WithEndpoint and WithEndpointURL options and their corresponding environment variables in go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc and go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#5641)
  • Correct comments for the priority of the WithEndpoint and WithEndpointURL options and their corresponding environment variables in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5650)
  • Stop percent encoding header environment variables in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc and go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp (#5705)
  • Remove invalid environment variable header keys in go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc, go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp, go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc and go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp (#5705)

... (truncated)

Commits
  • 6b1d94f Release v1.29.0/v0.51.0/v0.5.0 (#5732)
  • 2a54df7 fix(deps): update module github.com/golangci/golangci-lint to v1.60.3 (#5730)
  • 4875735 fix(deps): update module github.com/golangci/golangci-lint to v1.60.2 (#5711)
  • 30fc407 fix(deps): update golang.org/x/exp digest to 9b4947d (#5729)
  • 9402143 fix(deps): update golang.org/x/exp digest to 778ce7b (#5728)
  • bc48d69 chore(deps): update google.golang.org/genproto/googleapis/rpc digest to fc7c0...
  • fe02ce7 chore(deps): update google.golang.org/genproto/googleapis/api digest to fc7c0...
  • 002c0a4 Move log.Processor.Enabled to independent FilterProcessor interfaced type...
  • dependabot[bot] commented 2 months ago

    Looks like these dependencies are updatable in another way, so this is no longer needed.