Export EnforceDefaultTimeoutsWhenUsingContexts and DisableDefaultTimeoutsWhenUsingContext [ca36da1]
v1.35.0
1.35.0
Features
You can now call EnforceDefaultTimeoutsWhenUsingContexts() to have Eventually honor the default timeout when passed a context. (prior to this you had to expclility add a timeout) [e4c4265]
You can call StopTrying(message).Successfully() to abort a Consistently early without failure [eeca931]
Fixes
Stop memoizing the result of HaveField to avoid unexpected errors when used with async assertions. [3bdbc4e]
Maintenance
Bump all dependencies [a05a416]
v1.34.2
1.34.2
Require Go 1.22+
Maintenance
bump ginkgo as well [c59c6dc]
bump to go 1.22 - remove x/exp dependency [8158b99]
Export EnforceDefaultTimeoutsWhenUsingContexts and DisableDefaultTimeoutsWhenUsingContext [ca36da1]
1.35.0
Features
You can now call EnforceDefaultTimeoutsWhenUsingContexts() to have Eventually honor the default timeout when passed a context. (prior to this you had to expclility add a timeout) [e4c4265]
You can call StopTrying(message).Successfully() to abort a Consistently early without failure [eeca931]
Fixes
Stop memoizing the result of HaveField to avoid unexpected errors when used with async assertions. [3bdbc4e]
Maintenance
Bump all dependencies [a05a416]
1.34.2
Require Go 1.22+
Maintenance
bump ginkgo as well [c59c6dc]
bump to go 1.22 - remove x/exp dependency [8158b99]
This release is v1.1.1 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.
Release v1.1.0
What's Changed
This release adds full support for the new version of the OpenPGP standard, RFC 9580. In addition, the release introduces an improved non-backwards compatible v2 API. The API in the openpgp package remains fully backwards compatible while the new v2 API is located in a separate v2 package in openpgp.
To be consistent with filepath.Glob, FilepathGlob("") returns nil.
Added MatchUnvalidated, PathMatchUnvalidated
These functions provide a small performance improvement in cases where you don't care about whether or not the pattern is valid (maybe because you already ran ValidatePattern).
Commits
1e20c6d fixes #95 FilepathGlob("") should return nil
da152ef add docs for MatchUnvalidated, PathMatchUnvalidated
This release primarily includes a fix that blocked using
filepath-securejoin in Kubernetes.
Previously, some testing mocks we had resulted in us doing import "testing"
in non-_test.go code, which made some downstreams like Kubernetes unhappy.
This has been fixed. (#32)
Thanks to all of the contributors who made this release possible:
This release primarily includes fixes for spurious errors we hit when
checking that directories created by MkdirAll "look right". Upon further
consideration, these checks were fundamentally buggy and didn't offer
any practical protection anyway.
The mode and owner verification logic in MkdirAll has been removed. This
was originally intended to protect against some theoretical attacks but upon
further consideration these protections don't actually buy us anything and
they were causing spurious errors with more complicated filesystem setups.
The "is the created directory empty" logic in MkdirAll has also been
removed. This was not causing us issues yet, but some pseudofilesystems (such
as cgroup) create non-empty directories and so this logic would've been
wrong for such cases.
Thanks to all of the contributors who made this release possible:
This release includes a few fixes for MkdirAll when dealing with S_ISUID
and S_ISGID, to solve a regression runc hit when switching to MkdirAll.
Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return
an explicit error saying that those bits are ignored by mkdirat(2). In
the past a different error was returned, but since the silent ignoring
behaviour is codified in the man pages a more explicit error seems
apt. While silently ignoring these bits would be the most compatible
option, it could lead to users thinking their code sets these bits
when it doesn't. Programs that need to deal with compatibility can
mask the bits themselves. (#23, #25)
Previously, some testing mocks we had resulted in us doing import "testing"
in non-_test.go code, which made some downstreams like Kubernetes unhappy.
This has been fixed. (#32)
[0.3.3] - 2024-09-30
Fixed
The mode and owner verification logic in MkdirAll has been removed. This
was originally intended to protect against some theoretical attacks but upon
further consideration these protections don't actually buy us anything and
they were causing spurious errors with more complicated filesystem setups.
The "is the created directory empty" logic in MkdirAll has also been
removed. This was not causing us issues yet, but some pseudofilesystems (such
as cgroup) create non-empty directories and so this logic would've been
wrong for such cases.
[0.3.2] - 2024-09-13
Changed
Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return
an explicit error saying that those bits are ignored by mkdirat(2). In the
past a different error was returned, but since the silent ignoring behaviour
is codified in the man pages a more explicit error seems apt. While silently
ignoring these bits would be the most compatible option, it could lead to
users thinking their code sets these bits when it doesn't. Programs that need
to deal with compatibility can mask the bits themselves. (#23, #25)
Fixed
If a directory has S_ISGID set, then all child directories will have
S_ISGID set when created and a different gid will be used for any inode
created under the directory. Previously, the "expected owner and mode"
validation in securejoin.MkdirAll did not correctly handle this. We now
correctly handle this case. (#24, #25)
Bumps the go-modules group with 21 updates in the / directory:
1.34.11.35.10.2.00.3.00.18.70.18.82.14.22.15.03.2.13.3.03.2.33.3.00.12.50.12.91.1.0-alpha.5-proton1.1.21.1.01.1.14.6.14.7.11.3.91.5.00.15.10.16.10.3.10.3.20.3.10.3.427.1.2+incompatible27.3.1+incompatible1.4.51.4.65.5.05.6.02.18.02.20.00.8.00.9.00.53.00.57.00.20.00.22.0Updates
github.com/onsi/gomegafrom 1.34.1 to 1.35.1Release notes
Sourced from github.com/onsi/gomega's releases.
Changelog
Sourced from github.com/onsi/gomega's changelog.
Commits
9f5a208v1.35.1ca36da1Export EnforceDefaultTimeoutsWhenUsingContexts and DisableDefaultTimeoutsWhen...d6331f9v1.35.05deaf23fix tests, but like actually this timeeeca931Add Successfully() to StopTrying() to signal that Consistently can end early ...3bdbc4estop memoizing result of HaveFielde35358dsheepishly fix broken test. thanks CI1b717d7grrr. go mod tidya05a416bump all dependenciese4c4265Add EnforceDefaultTimeoutsWhenUsingContexts()Updates
github.com/paketo-buildpacks/libnodejsfrom 0.2.0 to 0.3.0Release notes
Sourced from github.com/paketo-buildpacks/libnodejs's releases.
Commits
1868fa9feat: add support for cjs files (#34)f099c5fMarshal dependencies from package.toml (#33)5099ee8build(deps): bump github.com/paketo-buildpacks/packit/v2daff2f2feat: add support for mjs files when finding apps (#31)c6e737abuild(deps): bump github.com/paketo-buildpacks/packit/v2e1ab573build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.1349be0cbuild(deps): bump github.com/paketo-buildpacks/packit/v290f967fbuild(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.12e42024build(deps): bump github.com/paketo-buildpacks/packit/v23352dd5build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.0Updates
github.com/paketo-buildpacks/occamfrom 0.18.7 to 0.18.8Release notes
Sourced from github.com/paketo-buildpacks/occam's releases.
Commits
1193f3cBump docker to version 26.1.5 to fix CVE-2024-411105cd4edeUpdates go mod version to 1.23.02e5b930Updates go mod version to 1.22.6815b014Bump github.com/paketo-buildpacks/packit/v2 from 2.14.1 to 2.14.274a79fbBump github.com/paketo-buildpacks/packit/v2 from 2.14.0 to 2.14.190134a5Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2653a6fbBump github.com/onsi/gomega from 1.34.0 to 1.34.1ed0e429Bump github.com/onsi/gomega from 1.33.1 to 1.34.0f467245Updates go mod version to 1.22.5c97acf2Bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1Updates
github.com/paketo-buildpacks/packit/v2from 2.14.2 to 2.15.0Release notes
Sourced from github.com/paketo-buildpacks/packit/v2's releases.
Commits
1ab5b00SyftCLIScanner: support SBOM generation with syft CLI884a7b7Update to fix linterc3a3e6aUpdating github-configUpdates
github.com/Masterminds/semver/v3from 3.2.1 to 3.3.0Release notes
Sourced from github.com/Masterminds/semver/v3's releases.
Changelog
Sourced from github.com/Masterminds/semver/v3's changelog.
Commits
e6e3d4dMerge pull request #249 from mattfarina/update-changelog-3.3.0e80c4eaUpdating changelog for 3.3.080427adMerge pull request #248 from mattfarina/bump-min-versionb610837bumping min version in go.mod based on what's testeda4cccd8Merge pull request #246 from mattfarina/bump-go-1.237c178cfUpdating the testing version of Go used29f94c1Merge pull request #241 from grosser/grosser/validate2cf1b16Merge pull request #245 from mattfarina/remove-vertb55476aRemoving reference to vertd07450bsimplify StrictNewVersionUpdates
github.com/Masterminds/sprig/v3from 3.2.3 to 3.3.0Release notes
Sourced from github.com/Masterminds/sprig/v3's releases.
Changelog
Sourced from github.com/Masterminds/sprig/v3's changelog.
Commits
e708470Merge pull request #408 from mattfarina/update-changelog-3.38fc4354Updating the changelog for the 3.3.0 releasecb81a32Merge pull request #407 from mattfarina/remove-dup-math-functions2637693Removing duplicate documentation06b9a87Merge pull request #290 from zzhu41/patch-1e663ec6Merge pull request #369 from chey/patch-1bb2f73fMerge pull request #375 from carlpett/patch-1f07659eMerge pull request #400 from itzik-elayev/master98b35c1Add closing bracket7a88928Merge pull request #406 from mattfarina/update-mergoUpdates
github.com/Microsoft/hcsshimfrom 0.12.5 to 0.12.9Release notes
Sourced from github.com/Microsoft/hcsshim's releases.
Commits
7392335Switch to using containerd/errdefs/pkg/errgrpc for grpc translation79d3f32Update go to 1.2205636b9UpdateJOB_OBJECT_ALL_ACCESSandOpenJobObject(#2095)1550628mobve SILOOBJECT_BASIC_INFORMATION to winapibf52d58fix SILOOBJECT_BASIC_INFORMATION alignment8d48d87Update containerd to v1.7.23 (#2295)4ad298fFixing typo (#2289)86b5333Bump golangci/golangci-lint-action from 4 to 65ae96f3Update runc to v1.1.148f3fccdUpdate pkg versionsUpdates
github.com/ProtonMail/go-cryptofrom 1.1.0-alpha.5-proton to 1.1.2Release notes
Sourced from github.com/ProtonMail/go-crypto's releases.
... (truncated)
Commits
2d2c789feat(cleartext): Do not include line ending separator in plaintext (#242)f8b3f21Remove cleartext Encode header argument #239 (#240)b97cc3cfeat: Validate input key size in SEIPDv2 decryption (#236)20ab0e4Replace expiring curve448 integration test vector (#235)f6ad483No v6 ECC keys with legacy OIDs (#234)77090feFix ECDH using v6 keys (#233)7852179Add support for keyserver preferences and preferred keyserver (closes #206) (...2add693Add back crypto.Signer support for ECDSA signing keys (#227)0f7b935ci: Fix CI for v1 interoptest (#229)b5837faci: Change gosop branch for gopenpgp-v2 to gosop-gopenpgp-v2 (#224)Updates
github.com/andybalholm/brotlifrom 1.1.0 to 1.1.1Commits
57434b5Encoder: check for empty block97e8583matchfinder.M4: some refinements to scoringUpdates
github.com/bmatcuk/doublestar/v4from 4.6.1 to 4.7.1Release notes
Sourced from github.com/bmatcuk/doublestar/v4's releases.
Commits
1e20c6dfixes #95 FilepathGlob("") should return nilda152efadd docs for MatchUnvalidated, PathMatchUnvalidated2832f67closes #92 adds MatchUnvalidated424062badded sponsor: MASVUpdates
github.com/cloudflare/circlfrom 1.3.9 to 1.5.0Release notes
Sourced from github.com/cloudflare/circl's releases.
Commits
1310edfRelease v1.5.00246d59Add test for ML-DSA signature verification.e2bbd01Add ML-DSA (FIPS204) (#480)2ba992fReverting arm64 jobs since qemu can't run go1.23 binaries yet.ab15f82Updates golangci-lint to v1.61.0 and fixes code.064a9baBump to go1.22 inner files and ci jobs.7040592Adding semgrepignore to also analyse test files.51a9a33Update semgrep.ymlcfbc696Create semgrep.yml2d6cd98kem: add X25519MLKEM768 TLS hybrid KEMUpdates
github.com/containerd/stargz-snapshotter/estargzfrom 0.15.1 to 0.16.1Release notes
Sourced from github.com/containerd/stargz-snapshotter/estargz's releases.
Commits
7d3230eMerge pull request #1864 from ktock/prepare-v0.16.19f207c4Merge pull request #1863 from ktock/gomodversion96bea0aPrepare for v0.16.1985b021go.mod : prevernt go upgraded to 1.2318cb40aMerge pull request #1859 from ktock/prepare-v0.16.0-afe111eeMerge pull request #1832 from ktock/gomodbump1c150e3Prepare for v0.16.027bfd5dadd todoba3e782Dockerfile: bump up dependencies6ca41f7go.mod: bump up dependenciesUpdates
github.com/cpuguy83/dockercfgfrom 0.3.1 to 0.3.2Release notes
Sourced from github.com/cpuguy83/dockercfg's releases.
Commits
a07c3d1Merge pull request #3 from stevenh/chore/improve-errors91bd66achore: improve errorsUpdates
github.com/cyphar/filepath-securejoinfrom 0.3.1 to 0.3.4Release notes
Sourced from github.com/cyphar/filepath-securejoin's releases.
... (truncated)
Changelog
Sourced from github.com/cyphar/filepath-securejoin's changelog.
Commits
fd16adeVERSION: release v0.3.400e0710godoc: update package documentation0cd6be1README: fix reference to open_tree kernel requirements205046fREADME: add pkg.go.dev badgeecb1b8etests: procfs: clean up mock test hook3ec6eedCHANGELOG: mention #32 fix86e6182merge #32 into cyphar/filepath-securejoin:mainSuperseded by #821.