search

paketo-buildpacks / yarn

Apache License 2.0
2 stars 11 forks source link

Bump the go-modules group with 25 updates #509

Closed dependabot[bot] closed 5 months ago

dependabot[bot] commented 5 months ago

Bumps the go-modules group with 25 updates:

Package From To
github.com/Microsoft/hcsshim 0.11.4 0.12.0
github.com/containerd/containerd 1.7.13 1.7.14
github.com/docker/cli 25.0.3+incompatible 25.0.4+incompatible
github.com/docker/docker 25.0.3+incompatible 25.0.4+incompatible
github.com/felixge/httpsnoop 1.0.3 1.0.4
github.com/go-logr/logr 1.3.0 1.4.1
github.com/golang/protobuf 1.5.3 1.5.4
github.com/klauspost/compress 1.17.6 1.17.7
github.com/knqyf263/go-rpmdb 0.0.0-20230301153543-ba94b245509b 0.1.0
github.com/shirou/gopsutil/v3 3.24.1 3.24.2
github.com/sylabs/sif/v2 2.15.1 2.15.2
github.com/testcontainers/testcontainers-go 0.27.0 0.29.1
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp 0.45.0 0.49.0
go.opentelemetry.io/otel 1.19.0 1.24.0
go.opentelemetry.io/otel/metric 1.19.0 1.24.0
go.opentelemetry.io/otel/trace 1.19.0 1.24.0
golang.org/x/crypto 0.19.0 0.20.0
golang.org/x/exp 0.0.0-20230510235704-dd950f8aeaea 0.0.0-20231006140011-7918f672742d
golang.org/x/mod 0.15.0 0.16.0
golang.org/x/net 0.21.0 0.22.0
golang.org/x/sys 0.17.0 0.18.0
golang.org/x/tools 0.17.0 0.19.0
google.golang.org/genproto/googleapis/rpc 0.0.0-20231120223509-83a465c0220f 0.0.0-20240123012728-ef4313101c80
google.golang.org/grpc 1.61.0 1.62.0
google.golang.org/protobuf 1.32.0 1.33.0

Updates github.com/Microsoft/hcsshim from 0.11.4 to 0.12.0

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.0

What's Changed

New Contributors

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0-rc.3...v0.12.0

v0.12.0-rc.3

What's Changed

Full Changelog: https://github.com/microsoft/hcsshim/compare/v0.12.0-rc.2...v0.12.0-rc.3

v0.12.0-rc.2

What's Changed

... (truncated)

Commits


Updates github.com/containerd/containerd from 1.7.13 to 1.7.14

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.14

Welcome to the v1.7.14 release of containerd!

The fourteenth patch release for containerd 1.7 contains various fixes and updates.

Highlights

  • Update builds to use go 1.21.8 (#9933)
  • Fix various timing issues with docker pusher (#9921)
  • Register imagePullThroughput and count with MiB (#9855)
  • Move high volume event logs to Trace level (#9823)

Container Runtime Interface (CRI)

  • Handle pod transition states gracefully while listing pod stats (#9905)

Runtime

  • Update runc-shim to process exec exits before init (#9928)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Wei Fu
  • Derek McGowan
  • Maksym Pavlenko
  • Krisztian Litkey
  • Akihiro Suda
  • Justin Chadwell
  • Sebastiaan van Stijn
  • Phil Estes
  • Kirtana Ashok
  • Akhil Mohan
  • Austin Vazquez
  • Etienne Champetier
  • Jordan Liggitt
  • Kohei Tokunaga
  • Mike Brown
  • Samuel Karp
  • Davanum Srinivas
  • Edgar Lee
  • Henry Wang
  • James Sturtevant
  • Laura Brehm
  • Nashwan Azhari
  • Robbie Buxton
  • Robert-André Mauchin
  • Shukui Yang

... (truncated)

Commits
  • dcf2847 Merge pull request #9953 from dmcgowan/prepare-v1.7.14
  • 1babe6b Prepare release notes for v1.7.14
  • 9138da4 Merge pull request #9951 from austinvazquez/release-1.7-backport-use-matrix-g...
  • a9bbbef Use the Go toolchain in CI matrix to build binaries
  • 17cbd50 Merge pull request #9933 from AkihiroSuda/go-1.21.8-1.7
  • 4c825b3 Merge pull request #9938 from akhilerm/cherry-pick-9777-1.7
  • 39caf53 Move inline PS scripts into files
  • 5613fae Merge pull request #9944 from dmcgowan/1.7-skip-oom-test
  • 1ca9a64 update to go 1.21.8, 1.22.1
  • 630226b Disable OOM set score unpriv test temporarily
  • Additional commits viewable in compare view


Updates github.com/docker/cli from 25.0.3+incompatible to 25.0.4+incompatible

Commits
  • 1a576c5 Merge pull request #4924 from vvoland/v25.0-4923
  • 690b156 bake: Add windows/arm64 target to bin-image-cross
  • 03114ec Merge pull request #4921 from vvoland/vendor-docker
  • 833128b vendor: github.com/docker/docker 061aa95809be396a6
  • fd4d39a Merge pull request #4920 from vvoland/vendor-docker
  • b4b35de Merge pull request #4919 from vvoland/v25.0-4918
  • ce113a7 vendor: github.com/docker/docker 9e526bc3943c
  • a3b6c9e update to go1.21.8
  • 2bf4225 Merge pull request #4908 from vvoland/vendor-docker
  • f783e8d Merge pull request #4915 from vvoland/v25.0-4839
  • Additional commits viewable in compare view


Updates github.com/docker/docker from 25.0.3+incompatible to 25.0.4+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v25.0.4

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • Restore DNS names for containers in the default "nat" network on Windows. moby/moby#47490
  • Fix docker start failing when used with --checkpoint moby/moby#47466
  • Don't enforce new validation rules for existing swarm networks moby/moby#47482
  • Restore IP connectivity between the host and containers on an internal bridge network. moby/moby#47481
  • Fix a regression introduced in v25.0 that prevented the classic builder from ADDing a tar archive with xattrs created on a non-Linux OS moby/moby#47483
  • containerd image store: Fix image pull not emitting Pulling fs layer status moby/moby#47484

API

  • To preserve backwards compatibility, make read-only mounts not recursive by default when using older clients (API version < v1.44). moby/moby#47393
  • GET /images/{id}/json omits the Created field (previously it was 0001-01-01T00:00:00Z) if the Created field is missing from the image config. moby/moby#47451
  • Populate a missing Created field in GET /images/{id}/json with 0001-01-01T00:00:00Z for API version <= 1.43. moby/moby#47387
  • Fix a regression that caused API socket connection failures to report an API version negotiation failure instead. moby/moby#47470
  • Preserve supplied endpoint configuration in a container-create API request, when a container-wide MAC address is specified, but NetworkMode name-or-id is not the same as the name-or-id used in NetworkSettings.Networks. moby/moby#47510

Packaging updates

Full Changelog: https://github.com/moby/moby/compare/v25.0.3...v25.0.4

Commits
  • 061aa95 Merge pull request #47513 from vvoland/v25.0-47498
  • d0d85f6 daemon: overlay2: remove world writable permission from the lower file
  • 5d66793 Merge pull request #47508 from vvoland/v25.0-47504
  • ef1fa23 Merge pull request #47510 from akerouanton/25.0-47441_mac_addr_config_migration
  • 0451b28 Don't create endpoint config for MAC addr config migration
  • d27fe25 dockerd-rootless-setuptool.sh: check RootlessKit functionality
  • 77de535 Dockerfile: update RootlessKit to v2.0.2
  • 9e526bc Merge pull request #47503 from vvoland/v25.0-47502
  • 2d34702 update to go1.21.8
  • 51e876c Merge pull request #47493 from akerouanton/25.0-47370_windows_natnw_dns_test
  • Additional commits viewable in compare view


Updates github.com/felixge/httpsnoop from 1.0.3 to 1.0.4

Release notes

Sourced from github.com/felixge/httpsnoop's releases.

v1.0.4

https://github.com/felixge/httpsnoop/compare/v1.0.3...v1.0.4

Commits


Updates github.com/go-logr/logr from 1.3.0 to 1.4.1

Release notes

Sourced from github.com/go-logr/logr's releases.

v1.4.1

What's Changed

Full Changelog: https://github.com/go-logr/logr/compare/v1.4.0...v1.4.1

v1.4.0

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: https://github.com/go-logr/logr/compare/v1.3.0...v1.4.0

Commits
  • dcdc3f2 slogr: fix unintended API break in v0.8.0 (#253)
  • 5d88f52 funcr: Add LogInfoLevel Option to skip logging level in the info log (#240)
  • 177005d build(deps): bump actions/upload-artifact from 3.1.3 to 4.0.0
  • e7f489a build(deps): bump github/codeql-action from 2.22.9 to 3.22.11
  • cf56c3b build(deps): bump actions/setup-go from 4 to 5
  • 2ad296e build(deps): bump github/codeql-action from 2.22.8 to 2.22.9
  • d55b4e2 Merge pull request #241 from thockin/master
  • 98ee9d9 Clean up slog testing and restore coverage
  • b228ba8 Break examples to new file
  • 6432877 Add benchmarks for slogSink
  • Additional commits viewable in compare view


Updates github.com/golang/protobuf from 1.5.3 to 1.5.4

Release notes

Sourced from github.com/golang/protobuf's releases.

v1.5.4

Notable changes

  • update descriptor.proto to latest version
Commits


Updates github.com/klauspost/compress from 1.17.6 to 1.17.7

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.7

What's Changed

Full Changelog: https://github.com/klauspost/compress/compare/v1.17.6...v1.17.7

Commits


Updates github.com/knqyf263/go-rpmdb from 0.0.0-20230301153543-ba94b245509b to 0.1.0

Commits


Updates github.com/shirou/gopsutil/v3 from 3.24.1 to 3.24.2

Release notes

Sourced from github.com/shirou/gopsutil/v3's releases.

v3.24.2

What's Changed

cpu

Documentation

New Contributors

Full Changelog: https://github.com/shirou/gopsutil/compare/v3.24.1...v3.24.2

Commits
  • e767a0f Merge pull request #1599 from shirou/feat/add_macos_on_github_action_test
  • 53fb8ca [darwin][ci]: skip frequency check on GitHub Action
  • 25c3f40 [ci]: add macos-13 and macos-14 on GitHub Action
  • 146bae2 Merge pull request #1597 from vlnaum/cwd_windows
  • d3057c2 cwd support windows doc
  • 8aeaf16 Merge pull request #1594 from jmatthew/openbsd-riscv64
  • cbbb240 Merge pull request #1595 from shirou/dependabot/github_actions/golangci/golan...
  • d0037dd chore(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0
  • 6ccc605 update list OpenBSD arch list
  • 27ffa28 add support for OpenBSD/riscv64
  • Additional commits viewable in compare view


Updates github.com/sylabs/sif/v2 from 2.15.1 to 2.15.2

Release notes

Sourced from github.com/sylabs/sif/v2's releases.

v2.15.2

What's Changed

Full Changelog: https://github.com/sylabs/sif/compare/v2.15.1...v2.15.2

Commits
  • 0ab3a72 build(deps): bump github.com/sigstore/sigstore from 1.8.1 to 1.8.2 (#354)
  • 7cb9507 Merge pull request #353 from tri-adam/go-1.22-ci
  • 5f2a42d ci: test against Go 1.22
  • 7cf41e5 Merge pull request #352 from tri-adam/fix-lint
  • 418fb7a fix: remove unused params in function literals
  • 4960f05 Merge pull request #350 from tri-adam/golangci-lint-1.56
  • 63ad8ef ci: bump golangci-lint to v1.56
  • c5ee168 build(deps): bump github.com/ProtonMail/go-crypto (#345)
  • 116a179 build(deps): bump github.com/google/go-containerregistry (#349)
  • f112619 build(deps): bump github.com/google/uuid from 1.5.0 to 1.6.0 (#348)
  • Additional commits viewable in compare view


Updates github.com/testcontainers/testcontainers-go from 0.27.0 to 0.29.1

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.29.1

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

📦 Dependency updates

  • chore(deps): bump google.golang.org/grpc from 1.61.1 to 1.62.0 in /modules/qdrant (#2281) @​dependabot
  • chore(deps): bump github.com/ClickHouse/clickhouse-go/v2 from 2.18.0 to 2.20.0 in /modules/clickhouse (#2290) @​dependabot
  • chore(deps): bump github.com/Shopify/toxiproxy/v2 from 2.7.0 to 2.8.0 in /examples/toxiproxy (#2282) @​dependabot
  • chore(deps): bump github.com/neo4j/neo4j-go-driver/v5 from 5.16.0 to 5.18.0 in /modules/neo4j (#2278) @​dependabot
  • chore(deps): bump github.com/minio/minio-go/v7 from 7.0.66 to 7.0.68 in /modules/minio (#2304) @​dependabot
  • chore(deps): bump github.com/tmc/langchaingo from 0.1.4 to 0.1.5 in /modules/ollama (#2318) @​dependabot
  • chore(deps): bump github.com/elastic/go-elasticsearch/v8 from 8.11.1 to 8.12.1 in /modules/elasticsearch (#2303) @​dependabot
  • chore(deps): bump google.golang.org/api from 0.167.0 to 0.168.0 in /modules/gcloud (#2317) @​dependabot
  • chore(deps): bump github.com/aws/aws-sdk-go-v2/credentials from 1.16.14 to 1.17.5 in /modules/localstack, github.com/aws/aws-sdk-go-v2 from 1.24.1 to 1.25.2 in /modules/localstack (#2320) @​mdelapenya
  • chore(deps): bump github.com/twmb/franz-go from 1.15.4 to 1.16.1 in /modules/redpanda, github.com/twmb/franz-go/pkg/kadm from 1.10.0 to 1.11.0 in /modules/redpanda (#2322) @​mdelapenya
  • chore(deps): bump github.com/hashicorp/vault-client-go from 0.3.3 to 0.4.3 in /modules/vault, github.com/tidwall/gjson from 1.17.0 to 1.17.1 in /modules/vault (#2321) @​mdelapenya
  • chore(deps): bump github.com/jackc/pgx/v5 from 5.5.3 to 5.5.4 in /modules/postgres, github.com/jackc/pgx/v5 from 5.5.3 to 5.5.4 in /modules/cockroachdb (#2323) @​mdelapenya
  • chore(deps): bump golang.org/x/mod from 0.12.0 to 0.16.0 (#2316) @​mdelapenya
  • chore(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 in /modulegen (#2298) @​dependabot
  • chore(deps): bump github.com/docker/docker from 25.0.2+incompatible to 25.0.3+incompatible (#2296) @​mdelapenya
  • chore(deps): bump github.com/couchbase/gocb/v2 from 2.7.1 to 2.7.2 in /modules/couchbase, github.com/tidwall/gjson from 1.17.0 to 1.17.1 in /modules/couchbase (#2297) @​mdelapenya

... (truncated)

Commits
  • 08c2385 chore: use new version (v0.29.1) in modules and examples
  • 4d7a27e fix: incorrect version
  • e48323c chore: prepare for next minor development cycle ()
  • c17ba62 chore: use new version (v0.29.0) in modules and examples
  • 12f23f8 generic.go: GenericContainer(): clearer error message (#2327)
  • cfd60e9 chore: confirm support for new mongo images (#2326)
  • 85361fe Add k3s WithManifest option (#1920)
  • 755bbb8 chore(deps): bump google.golang.org/grpc in /modules/qdrant (#2281)
  • ba92e0e chore(deps): bump github.com/ClickHouse/clickhouse-go/v2 (#2290)
  • 245c8b0 chore(deps): bump github.com/Shopify/toxiproxy/v2 in /examples/toxiproxy (#2282)
  • Additional commits viewable in compare view


Updates go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp from 0.45.0 to 0.49.0

Release notes

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's releases.

Release v1.24.0/v0.49.0/v0.18.0/v0.4.0

This release is the last to support Go 1.20. The next release will require at least Go 1.21.

Added

  • Support Go 1.22. (#5082)
  • Add support for Summary metrics to go.opentelemetry.io/contrib/bridges/prometheus. (#5089)
  • Add support for Exponential (native) Histograms in go.opentelemetry.io/contrib/bridges/prometheus. (#5093)

Removed

  • The deprecated RequestCount constant in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is removed. (#4894)
  • The deprecated RequestContentLength constant in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is removed. (#4894)
  • The deprecated ResponseContentLength constant in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is removed. (#4894)
  • The deprecated ServerLatency constant in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is removed. (#4894)

Fixed

  • Retrieving the body bytes count in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp does not cause a data race anymore. (#5080)

New Contributors

Full Changelog: https://github.com/open-telemetry/opentelemetry-go-contrib/compare/v1.23.0...v1.24.0

Release v1.23.0/v0.48.0/v0.17.0/v0.3.0

Added

  • Add client metric support to go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp. (#4707)
  • Add peer attributes to spans recorded by NewClientHandler, NewServerHandler in go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc. (#4873)
  • Add support for cloud.account.id, cloud.availability_zone and cloud.region in the AWS ECS detector. (#4860)

Changed

  • The fallback options in go.opentelemetry.io/contrib/exporters/autoexport now accept factory functions. (#4891)
    • WithFallbackMetricReader(metric.Reader) MetricOption is replaced with func WithFallbackMetricReader(func(context.Context) (metric.Reader, error)) MetricOption.
    • WithFallbackSpanExporter(trace.SpanExporter) SpanOption is replaced with WithFallbackSpanExporter(func(context.Context) (trace.SpanExporter, error)) SpanOption.
  • The http.server.request_content_length metric in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is changed to http.server.request.size.(#4707)
  • The http.server.response_content_length metric in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp is changed to http.server.response.size.(#4707)

Deprecated

  • The RequestCount, RequestContentLength, ResponseContentLength, ServerLatency constants in go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp are deprecated. (#4707)

... (truncated)

Changelog

Sourced from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp's changelog.

[1.24.0/0.49.0/0.18.0/0.4.0] - 2024-02-23

This release is the last to support [Go 1.20]. The next release will require at least [Go 1.21].

Added

  • Su... _Description has been truncated_
pacostas commented 5 months ago

@dependabot rebase

dependabot[bot] commented 5 months ago

Looks like this PR is already up-to-date with main! If you'd still like to recreate it from scratch, overwriting any edits, you can request @dependabot recreate.

pacostas commented 5 months ago

@dependabot recreate

dependabot[bot] commented 5 months ago

Looks like these dependencies are updatable in another way, so this is no longer needed.