search

traPtitech / NeoShowcase

PaaS (Platform as a Service) on Docker 🐳 or k8s ☸
MIT License
53 stars 4 forks source link

build(deps): bump the non-majors group with 18 updates #886

Closed dependabot[bot] closed 7 months ago

dependabot[bot] commented 7 months ago

Bumps the non-majors group with 18 updates:

Package From To
connectrpc.com/connect 1.15.0 1.16.0
github.com/aws/aws-sdk-go 1.50.29 1.51.11
github.com/cert-manager/cert-manager 1.14.3 1.14.4
github.com/gliderlabs/ssh 0.3.6 0.3.7
github.com/go-git/go-git/v5 5.11.0 5.12.0
github.com/go-sql-driver/mysql 1.7.1 1.8.1
github.com/moby/buildkit 0.12.5 0.13.1
github.com/motoki317/sc 1.7.1 1.8.0
github.com/prometheus/common 0.48.0 0.51.1
github.com/regclient/regclient 0.5.7 0.6.0
github.com/traefik/traefik/v2 2.10.7 2.11.0
golang.org/x/crypto 0.19.0 0.21.0
golang.org/x/net 0.21.0 0.22.0
google.golang.org/grpc 1.62.0 1.62.1
google.golang.org/protobuf 1.32.0 1.33.0
k8s.io/api 0.29.2 0.29.3
k8s.io/apimachinery 0.29.2 0.29.3
k8s.io/client-go 0.29.2 0.29.3

Updates connectrpc.com/connect from 1.15.0 to 1.16.0

Release notes

Sourced from connectrpc.com/connect's releases.

v1.16.0

This release is mostly bug fixes but also reconciles connect-go with recent updates to the specification regarding mapping of RPC error codes to/from HTTP status codes (see connectrpc RFC 003)

What's Changed

Other changes

  • Revise RPC error code HTTP status code mappings per latest changes to spec by @​jhump in #706

Enhancements

  • Only send a grpc-status-details-bin trailer in the gRPC protocol if the error has details by @​bhollis in #713

Bugfixes

  • Fix ErrorWriter IsSupported check to report false on ambiguous content-type and options indicate connect protocol version header is required by @​emcfarlane in #700
  • In Connect unary protocol, fallback to code based on HTTP status if unable to deserialize code from JSON body by @​jhump in #702
  • Fix ErrorWriter to recognize protocols, even if content-type indicates unrecognized codec by @​emcfarlane in #701
  • Fix some places in the framework that weren't correctly recognizing and returning context-based error code (e.g. "canceled" or "deadline_exceeded") by @​jhump in #709
  • Use "unimplemented" code for stream cardinality violations by @​jhump in #712
  • Restrict which metadata in an error can be propagated into response metadata by @​emcfarlane in #711

New Contributors

Full Changelog: https://github.com/connectrpc/connect-go/compare/v1.15.0...v1.16.0

Commits
  • 0208427 Prepare for v1.16.0 (#714)
  • dbd9097 Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 in /internal/conformanc...
  • 90df12f Only send a serialized Status in the gRPC protocol if it has details (#713)
  • 7b3b344 Restrict metadata headers in error propagation (#711)
  • fbcf0ff Use "unimplemented" code for cardinality violations (#712)
  • c22fe4f Update a couple of more places where we should return a context error if ther...
  • befee1d Update to latest protobuf-go, v1.33.0 (#707)
  • 872a6fd Fix ErrorWriter to be codec agnostic (#701)
  • e3f35a6 Revise code mappings per latest changes to spec (#706)
  • 75d634f In Connect unary protocol, fallback to code based on HTTP status if unable to...
  • Additional commits viewable in compare view


Updates github.com/aws/aws-sdk-go from 1.50.29 to 1.51.11

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.51.11 (2024-03-29)

Service Client Updates

  • service/b2bi: Updates service API and documentation
  • service/codebuild: Updates service API
    • Add new fleet status code for Reserved Capacity.
  • service/codeconnections: Adds new service
  • service/internetmonitor: Updates service API and documentation
  • service/iotwireless: Updates service API and documentation
  • service/marketplace-catalog: Updates service API and documentation
  • service/sagemaker: Updates service API and documentation
    • This release adds support for custom images for the CodeEditor App on SageMaker Studio

Release v1.51.10 (2024-03-28)

Service Client Updates

  • service/compute-optimizer: Updates service API and documentation
  • service/ec2: Updates service API
    • Amazon EC2 C7gd, M7gd and R7gd metal instances with up to 3.8 TB of local NVMe-based SSD block-level storage have up to 45% improved real-time NVMe storage performance than comparable Graviton2-based instances.
  • service/eks: Updates service API
  • service/guardduty: Updates service API and documentation
    • Add EC2 support for GuardDuty Runtime Monitoring auto management.
  • service/oam: Updates service API
  • service/quicksight: Updates service API and documentation
    • Amazon QuickSight: Adds support for setting up VPC Endpoint restrictions for accessing QuickSight Website.

Release v1.51.9 (2024-03-27)

Service Client Updates

  • service/batch: Updates service API and documentation
    • This feature allows AWS Batch to support configuration of imagePullSecrets and allowPrivilegeEscalation for jobs running on EKS
  • service/bedrock-agent: Updates service API and documentation
  • service/bedrock-agent-runtime: Updates service API and documentation
  • service/elasticache: Updates service API and documentation
    • Added minimum capacity to Amazon ElastiCache Serverless. This feature allows customer to ensure minimum capacity even without current load
  • service/secretsmanager: Updates service documentation
    • Documentation updates for Secrets Manager

Release v1.51.8 (2024-03-26)

Service Client Updates

  • service/bedrock-agent-runtime: Updates service API and documentation
  • service/ce: Updates service API, documentation, and paginators
  • service/ec2: Updates service API and documentation
    • Documentation updates for Elastic Compute Cloud (EC2).
  • service/ecs: Updates service documentation

... (truncated)

Commits


Updates github.com/cert-manager/cert-manager from 1.14.3 to 1.14.4

Release notes

Sourced from github.com/cert-manager/cert-manager's releases.

v1.14.4

cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.

cert-manager 1.14 brings a variety of features, security improvements and bug fixes, including: support for creating X.509 certificates with "Other Name" fields, and support for creating CA certificates with "Name Constraints" and "Authority Information Accessors" extensions.

⚠️ Known Issues

  • ACME Issuer (Let's Encrypt): wrong certificate chain may be used if preferredChain is configured: see release docs for more info and mitigations

ℹ️ Documentation

Release notes Upgrade notes Installation instructions

🔧 Breaking changes

See Breaking changes in v1.14.0 release notes

📜 Changes since v1.14.3

Bug or Regression

Other (Cleanup or Flake)

Commits
  • f5ddc41 Merge pull request #6842 from inteon/release-1.14_base
  • e5d4a42 bump debian12 base images
  • 716ff1c Merge pull request #6834 from inteon/release-1.14_cve
  • a362957 upgrade Helm to fix CVE-2024-26147
  • f89a561 Merge pull request #6829 from inteon/release-1.14_cve
  • 56e0adf upgrade google.golang.org/protobuf fixing GO-2024-2611
  • 234ba0b Merge pull request #6825 from jetstack-bot/cherry-pick-6823-to-release-1.14
  • 4401df0 bump go to 1.21.8
  • 756f8bb Merge pull request #6819 from jetstack-bot/cherry-pick-6816-to-release-1.14
  • 945b69a prevent fuzzer from generating impossible configurations
  • Additional commits viewable in compare view


Updates github.com/gliderlabs/ssh from 0.3.6 to 0.3.7

Release notes

Sourced from github.com/gliderlabs/ssh's releases.

v0.3.7

What's Changed

New Contributors

Full Changelog: https://github.com/gliderlabs/ssh/compare/v0.3.6...v0.3.7

Commits


Updates github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.12.0

What's Changed

New Contributors

Full Changelog: https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0

Commits
  • 302ddde Merge pull request #1060 from go-git/dependabot/go_modules/github.com/gliderl...
  • 6bba34d build: bump github.com/gliderlabs/ssh from 0.3.6 to 0.3.7
  • feaeb36 Merge pull request #937 from matejrisek/feature/rename-short-fields
  • 7959a42 Merge pull request #1052 from go-git/dependabot/go_modules/github.com/skeema/...
  • 4c17ce7 build: bump github.com/skeema/knownhosts from 1.2.1 to 1.2.2
  • 3f77e6f Merge pull request #1048 from pjbgf/fix-reset-validation
  • 6af38e0 Merge pull request #1047 from avoidalone/master
  • e6c3e58 Merge pull request #1044 from pjbgf/ff-merge
  • 04f7b23 *: fix some comments
  • f4f1a87 Merge pull request #971 from nodivbyzero/fix-177-diff-print-file-stats
  • Additional commits viewable in compare view


Updates github.com/go-sql-driver/mysql from 1.7.1 to 1.8.1

Release notes

Sourced from github.com/go-sql-driver/mysql's releases.

v1.8.1

What's Changed

Bugfixes:

  • fix race condition when context is canceled in #1562 and #1570

Full Changelog: https://github.com/go-sql-driver/mysql/compare/v1.8.0...v1.8.1

v1.8.0

What's Changed

Major changes

  • Use SET NAMES charset COLLATE collation. by @​methane in go-sql-driver/mysql#1437

    • Older go-mysql-driver used collation_id in the handshake packet. But it caused collation mismatch in some situation.
    • If you don't specify charset nor collation, go-mysql-driver sends SET NAMES utf8mb4 for new connection. This uses server's default collation for utf8mb4.
    • If you specify charset, go-mysql-driver sends SET NAMES <charset>. This uses the server's default collation for <charset>.
    • If you specify collation and/or charset, go-mysql-driver sends SET NAMES charset COLLATE collation.

  • PathEscape dbname in DSN. by @​methane in go-sql-driver/mysql#1432

    • This is backward incompatible in rare case. Check your DSN.

  • Drop Go 1.13-17 support by @​methane in go-sql-driver/mysql#1420

    • Use Go 1.18+

  • Parse numbers on text protocol too by @​methane in go-sql-driver/mysql#1452

    • When text protocol is used, go-mysql-driver passed bare []byte to database/sql for avoid unnecessary allocation and conversion.
    • If user specified *any to Scan(), database/sql passed the []byte into the target variabe.
    • This confused users because most user doesn't know when text/binary protocol used.
    • go-mysql-driver 1.8 converts integer/float values into int64/double even in text protocol. This doesn't increase allocation compared to []byte and conversion cost is negilible.

  • New options start using the Functional Option Pattern to avoid increasing technical debt in the Config object. Future version may introduce Functional Option for existing options, but not for now.

Other changes

... (truncated)

Changelog

Sourced from github.com/go-sql-driver/mysql's changelog.

Version 1.8.1 (2024-03-26)

Bugfixes:

  • fix race condition when context is canceled in #1562 and #1570

Version 1.8.0 (2024-03-09)

Major Changes:

  • Use SET NAMES charset COLLATE collation. by @​methane in #1437
    • Older go-mysql-driver used collation_id in the handshake packet. But it caused collation mismatch in some situation.
    • If you don't specify charset nor collation, go-mysql-driver sends SET NAMES utf8mb4 for new connection. This uses server's default collation for utf8mb4.
    • If you specify charset, go-mysql-driver sends SET NAMES <charset>. This uses the server's default collation for <charset>.
    • If you specify collation and/or charset, go-mysql-driver sends SET NAMES charset COLLATE collation.
  • PathEscape dbname in DSN. by @​methane in #1432
    • This is backward incompatible in rare case. Check your DSN.
  • Drop Go 1.13-17 support by @​methane in #1420
    • Use Go 1.18+
  • Parse numbers on text protocol too by @​methane in #1452
    • When text protocol is used, go-mysql-driver passed bare []byte to database/sql for avoid unnecessary allocation and conversion.
    • If user specified *any to Scan(), database/sql passed the []byte into the target variable.
    • This confused users because most user doesn't know when text/binary protocol used.
    • go-mysql-driver 1.8 converts integer/float values into int64/double even in text protocol. This doesn't increase allocation compared to []byte and conversion cost is negatable.
  • New options start using the Functional Option Pattern to avoid increasing technical debt in the Config object. Future version may introduce Functional Option for existing options, but not for now.

Other changes:

Commits


Updates github.com/moby/buildkit from 0.12.5 to 0.13.1

Release notes

Sourced from github.com/moby/buildkit's releases.

v0.13.1

buildkit 0.13.1

Welcome to the 0.13.1 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Notable Changes

  • Fix handling of deleted blobs when importing cache from Github Actions cache backend #4771
  • Fix unclean shutdown error on WCOW on Ctrl-C #4774
  • Mitigate issue with mounting OpenTelemetry socket in containers in some installations #4778
  • Fix parsing ./.git source path as Git URL. #4776

Dependency Changes

This release has no dependency changes

Previous release can be found at v0.13.0

v0.13.0

buildkit 0.13.0

Welcome to the 0.13.0 release of buildkit!

Please try out the release binaries and report any issues at https://github.com/moby/buildkit/issues.

Contributors

  • Tõnis Tiigi
  • CrazyMax
  • Justin Chadwell
  • Sebastiaan van Stijn
  • Akihiro Suda
  • Jonathan A. Sternberg
  • Kohei Tokunaga
  • David Karlsson
  • Leandro Santiago
  • Gabriel Adrian Samfira
  • Chris Goller
  • Anthony Nandaa
  • Erik Sipsma
  • Paweł Gronowski
  • Jakub Ciolek

... (truncated)

Commits
  • 2ae42e0 Merge pull request #4779 from tonistiigi/v0.13.1-picks
  • 0aff323 oci: make mounting oci socket optional
  • 9e593c0 git: ensure file-looking git refs aren't parsed as URLs
  • 50fbf50 remotecache: fix missing CheckDescriptor method
  • 62eec44 solver: stub out sysSampler close
  • 3f62976 Merge pull request #4742 from crazy-max/v0.13_cherry-picks
  • f64b48e fix(docs): add the containers feature enabling step
  • 525ea4f ci: enable multi-platform lint only for upstream repo
  • ee081eb docs: replace references to the master branch with v0.13
  • 2afc050 Merge pull request #4735 from moby/v0.13.0-picks
  • Additional commits viewable in compare view


Updates github.com/motoki317/sc from 1.7.1 to 1.8.0

Release notes

Sourced from github.com/motoki317/sc's releases.

v1.8.0

Changes

  • Added size-related statistics to Stats() method.
  • Contexts passed to replaceFn no longer propagates cancellation signals.
    • Cancel propagation inside request coalescing is not usually desirable, as it represents multiple value requests. If only one request that initiated the replaceFn call cancels the context, all other waiting goroutines get the same "context canceled" error, which is usually not something desirable.
    • The library now requires Go >= 1.21 as it uses context.WithoutCancel().
  • Allow context value propagation (but without cancel propagation) for all replaceFn call paths, including background update.
    • BREAKING This change breaks the signature of Notify() method, but you can just supply context.Background() to keep the old behavior.
    • This should better support use-cases like distributed tracing.

Full Changelog: https://github.com/motoki317/sc/compare/v1.7.1...v1.8.0

Commits
  • 42c201c Update go to 1.21
  • 4661a01 Breaking signature: Allow context propagation (but without cancel propagation...
  • c24560d Prevent cancel propagation into replaceFn
  • f680c50 Add size-related cache stats
  • See full diff in compare view


Updates github.com/prometheus/common from 0.48.0 to 0.51.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.51.1

What's Changed

Full Changelog: https://github.com/prometheus/common/compare/v0.51.0...v0.51.1

v0.51.0

What's Changed

New Contributors

Full Changelog: https://github.com/prometheus/common/compare/v0.50.0...v0.51.0

v0.50.0

What's Changed

Full Changelog: https://github.com/prometheus/common/compare/v0.49.0...v0.50.0

v0.49.0

What's Changed

... (truncated)

Commits
  • e821827 Retract v0.50.0 (#610)
  • 2807775 Update common Prometheus files (#609)
  • 617b51d Synchronize common files from prometheus/prometheus (#606)
  • 057bec8 Merge pull request #608 from vesari/avoid-total-suffix-repetition
  • da75ecd Correct logic in sample naming for counters, add new test
  • b0624a8 Fix string slice definition for FormatFlagOptions. (#607)
  • e7f4912 expfmt: Add a way to generate different OpenMetrics Formats (#596)
  • d4cebf6 Merge pull request #604 from prometheus/repo_sync
  • 44e573e Update common Prometheus files
  • 944239f Bump google.golang.org/protobuf from 1.32.0 to 1.33.0 (#601)
  • Additional commits viewable in compare view


Updates github.com/regclient/regclient from 0.5.7 to 0.6.0

Release notes

Sourced from github.com/regclient/regclient's releases.

v0.6.0

Release v0.6.0

Breaking:

  • regctl artifact put no longer includes the filename annotation by default. Use --file-title to include. ([PR 659][pr-659])
  • Dropping Go 1.19 support ([PR 656][pr-656])
  • The platform string for windows images no longer includes the non-standard OS Version value. ([PR 685][pr-685])

Fixes:

  • Allow pushing artifacts without an artifactType value. ([PR 658][pr-658])
  • Image mod where created image is in a different repository ([PR 662][pr-662])
  • Improve returned errors from regclient.ImageCopy. ([PR 663][pr-663])
  • Cancel blob uploads on failures. ([PR 666][pr-666])
  • Allow ctrl-c on regctl registry login ([PR 671][pr-671])
  • Promoting annotations should ignore child manifests that have been removed from the tree. ([PR 675][pr-675])
  • Pin base image digest in build scripts to match Dockerfile pins. ([PR 678][pr-678])
  • Error wrapping fixed in several locations. ([PR 682][pr-682])
  • Platform selection now finds the best match rather than the first compatible match. ([PR 685][pr-685])
  • Update registry versions in CI tests. ([PR 687][pr-687])
  • Missing lines from diff context. ([PR 688][pr-688])
  • Replace syft packages with syft scan. ([PR 695][pr-695])
  • Image mod can manage the data file on the config descriptor of artifacts. ([PR 697][pr-697])

Features:

  • Adding Go 1.22 support ([PR 656][pr-656])
  • Add BlobDelete support for ocidir references. ([PR 669][pr-669])
  • Add regctl blob delete command. ([PR 669][pr-669])
  • Support formatting output on regctl registry config. ([PR 673][pr-673])
  • Add image mod ability to promote common annotations in the child images to the index. ([PR 674][pr-674])
  • Specifying windows OS Version now uses a comma separated syntax in the platform string. ([PR 685][pr-685])
  • Detect AMD64 variant when looking up local platform. ([PR 692][pr-692])
  • Add ability to set the config platform setting with regctl image mod. ([PR 693][pr-693])
  • Image mod support for setting the entrypoint and cmd. ([PR 694][pr-694])

Deprecations:

  • Erro... _Description has been truncated_