This releases fixes a small bug in errors.Is and greatly simplifies the set of indirect dependencies via go.mod.
This is useful because some of the older (now-unused) dependencies were reported as "vulnerable" by some security checking tools.
Better Sentry reports
This release enhances the composition of Sentry reports to reveal more details about errors. In particular, it does a better job of revealing information that was always redacted as unsafe in previous versions.
Some examples of data that is now included, that wasn't previously:
the underlying errors behind barriers and assertion failures
some Go runtime errors (e.g. context canceled, os.PathError, etc)
custom error types that have a safe formatter function even though they don't report safe strings via the SafeDetails interface
context.DeadlineExceeded is now preserved across the network, including keeping its reference so it can be compared by reference (#89).
a bug was fixed whereby a call cycle (and stack overflow) would happen when calling errors.Is on an error that delegates its Error method to Format or SafeFormatError (#90).
the errors library does not any more depend on a custom fork of sentry-go, and now uses the upstream library directly (#92). Special thanks to @jhchabran for this contribution.
Commits
3fdcae9 Merge pull request #101 from knz/20230124-deps
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps github.com/cockroachdb/errors from 1.8.6 to 1.9.1.
Release notes
Sourced from github.com/cockroachdb/errors's releases.
Commits
3fdcae9Merge pull request #101 from knz/20230124-deps432f2c0Simplify dependencies.d402f91Merge pull request #98 from knz/20220920-comp509daddmarkers: avoid panic on non-comparable structs2170583Merge pull request #95 from cockroachdb/remove-travis-yml93f7e36Delete .travis.yml676eef5Merge pull request #94 from knz/20220304-barrier-detailsfeb9d32barriers: use a redactable string as message payloada73e1b6report: rework the composition to use redacted verbose printouts7d46ef1barriers: reveal more safe details about the masked errorDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)