fix(deps): update all non-major gomod dependencies #53
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Contributor
Author
ℹ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
red-hat-konflux
bot
force-pushed
the
konflux/mintmaker/main/all-minor-patch-gomod
branch
13 times, most recently
from
4e489fd to
a639c2c
Compare
red-hat-konflux
bot
force-pushed
the
konflux/mintmaker/main/all-minor-patch-gomod
branch
16 times, most recently
from
2d0e3be to
c433811
Compare
red-hat-konflux
bot
force-pushed
the
konflux/mintmaker/main/all-minor-patch-gomod
branch
18 times, most recently
from
ba51056 to
f242925
Compare
red-hat-konflux
bot
force-pushed
the
konflux/mintmaker/main/all-minor-patch-gomod
branch
10 times, most recently
from
a1f6701 to
f6ebce0
Compare
Signed-off-by: red-hat-konflux <126015336+red-hat-konflux[bot]@users.noreply.github.com>
red-hat-konflux
bot
force-pushed
the
konflux/mintmaker/main/all-minor-patch-gomod
branch
from
f6ebce0 to
696a283
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v3.2.1->v3.4.0v4.1.3->v4.3.0v2.1.2->v2.3.0v1.13.0->v1.18.0v4.5.0->v4.5.2v1.0.0->v1.2.5v1.5.2->v1.5.4v1.3.0->v1.6.0v1.0.0->v1.0.1v0.1.13->v0.1.14v0.0.16->v0.0.20v1.0.2->v1.0.4v1.0.21->v1.0.27v0.3.1->v0.3.2v0.1.66->v0.1.76v0.1.338->v0.1.485v1.13.0->v1.23.2v0.2.0->v0.6.2v0.37.0->v0.67.4v0.8.0->v0.19.2v1.7.0->v1.10.1v1.0.5->v1.0.10v0.7.0->v0.47.0v0.5.0->v0.38.0v0.5.0->v0.37.0v0.7.0->v0.31.0v1.28.1->v1.36.10Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
Masterminds/semver (github.com/Masterminds/semver/v3)
v3.4.0Compare Source
There are a few changes in this release to highlight:
Constraintsnow has a propertyIncludePrerelease. When set to true theCheckandValidatemethods will include prereleases.>1.0.0-beta.1 < 2. In the past this would not have included prereleases because each constraint needed to have a prerelease. Now, only one constraint needs to have a prerelease. This is considered a long standing bug fix. Note, this does not carry across OR groups. For example,>1.0.0-beta.1 < 2 || > 3. In this case, prereleases will not be included when evaluating against>3.NewVersioncoercion with leading "0"'s is restored. This can be disabled by setting the package level propertyCoerceNewVersiontofalse.What's Changed
New Contributors
Full Changelog: Masterminds/semver@v3.3.1...v3.4.0
v3.3.1Compare Source
What's Changed
Full Changelog: Masterminds/semver@v3.3.0...v3.3.1
v3.3.0Compare Source
What's Changed
New Contributors
Full Changelog: Masterminds/semver@v3.2.1...v3.3.0
cenkalti/backoff (github.com/cenkalti/backoff/v4)
v4.3.0Compare Source
v4.2.1Compare Source
v4.2.0Compare Source
cespare/xxhash (github.com/cespare/xxhash/v2)
v2.3.0Compare Source
v2.2.0Compare Source
fatih/color (github.com/fatih/color)
v1.18.0Compare Source
What's Changed
New Contributors
Full Changelog: fatih/color@v1.17.0...v1.18.0
v1.17.0Compare Source
What's Changed
New Contributors
Full Changelog: fatih/color@v1.16.0...v1.17.0
v1.16.0Compare Source
What's Changed
Dependency updates
New Contributors
Full Changelog: fatih/color@v1.15.0...v1.16.0
v1.15.0Compare Source
What's Changed
New Contributors
Full Changelog: fatih/color@v1.14.1...v1.15.0
v1.14.1Compare Source
What's Changed
Full Changelog: fatih/color@v1.14.0...v1.14.1
v1.14.0Compare Source
What's Changed
SetWriterandUnsetWriterby @fatih in #182New Contributors
Full Changelog: fatih/color@v1.13.0...v1.14.0
golang-jwt/jwt (github.com/golang-jwt/jwt/v4)
v4.5.2Compare Source
See GHSA-mh63-6h87-95cp
Full Changelog: golang-jwt/jwt@v4.5.1...v4.5.2
v4.5.1Compare Source
Security
Unclear documentation of the error behavior in
ParseWithClaimsin <= 4.5.0 could lead to situation where users are potentially not checking errors in the way they should be. Especially, if a token is both expired and invalid, the errors returned byParseWithClaimsreturn both error codes. If users only check for thejwt.ErrTokenExpiredusingerror.Is, they will ignore the embeddedjwt.ErrTokenSignatureInvalidand thus potentially accept invalid tokens.This issue was documented in GHSA-29wx-vh33-7x7r and fixed in this release.
Note:
v5was not affected by this issue. So upgrading to this release version is also recommended.What's Changed
ParseWithClaimsfromv5branch. This fixes GHSA-29wx-vh33-7x7r.Full Changelog: golang-jwt/jwt@v4.5.0...v4.5.1
golang/glog (github.com/golang/glog)
v1.2.5Compare Source
What's Changed
Full Changelog: golang/glog@v1.2.4...v1.2.5
v1.2.4Compare Source
What's Changed
Full Changelog: golang/glog@v1.2.3...v1.2.4
v1.2.3Compare Source
What's Changed
Full Changelog: golang/glog@v1.2.2...v1.2.3
v1.2.2Compare Source
What's Changed
Full Changelog: golang/glog@v1.2.1...v1.2.2
v1.2.1Compare Source
What's Changed
Full Changelog: golang/glog@v1.2.0...v1.2.1
v1.2.0Compare Source
What's Changed
Full Changelog: golang/glog@v1.1.2...v1.2.0
v1.1.2Compare Source
Bugfix release.
What's Changed
Full Changelog: golang/glog@v1.1.1...v1.1.2
v1.1.1Compare Source
Bugfixes since the larger v1.1.0, which have been addressed.
v1.1.0Compare Source
Tagging v1.1.0 after syncing glog with internal changes
golang/protobuf (github.com/golang/protobuf)
v1.5.4Compare Source
Notable changes
v1.5.3Compare Source
Notable changes
*( #1363) jsonpb: accept 'null' as a valid representation of NullValue in unmarshal
google/uuid (github.com/google/uuid)
v1.6.0Compare Source
Features
Bug Fixes
v1.5.0Compare Source
Features
v1.4.0Compare Source
Features
Fixes
v1.3.1Compare Source
Bug Fixes
gorilla/css (github.com/gorilla/css)
v1.0.1Compare Source
What's Changed
New Contributors
Full Changelog: gorilla/css@v1.0.0...v1.0.1
mattn/go-colorable (github.com/mattn/go-colorable)
v0.1.14Compare Source
mattn/go-isatty (github.com/mattn/go-isatty)
v0.0.20Compare Source
v0.0.19Compare Source
v0.0.18Compare Source
v0.0.17Compare Source
matttproud/golang_protobuf_extensions (github.com/matttproud/golang_protobuf_extensions)
v1.0.4Compare Source
Summary: This is an emergency re-tag of v1.0.2 since v1.0.3 broke API
compatibility for legacy users. See the description of v1.0.2 for details.
v1.0.3Compare Source
DO NOT USE: Use v1.0.4 instead. What is described in v1.0.3 will be
transitioned to a new major version.
Summary: Modernization of this package to Go standards in 2022, mostly
through internal cleanups.
New Features: None
The last time this package was significantly modified was 2016, which predates
cmp, subtests, the modern Protocol Buffer implementation, and numerous Gopractices that emerged in the intervening years. The new release is tested
against Go 1.19, though I expect it would work with Go 1.13 just fine.
Finally, I declared bankruptcy on the vendored test fixtures and opted for
creating my own. This is due to the underlying implementation of the generated
code in conjunction with working with a moving target that is an external data
model representation.
microcosm-cc/bluemonday (github.com/microcosm-cc/bluemonday)
v1.0.27Compare Source
v1.0.26: Update golang.org/x/net to latest and force latest versionCompare Source
Bumping version and ensuring latest golang.org/x/net as the HTTP rapid reset is triggering primitive vuln scanners, we do not implement a HTTP2 server and are not vulnerable but a minor bump can still help reduce noise for those searching for what they need to upgrade and patch.
Nothing else is in this release aside from the dependency updates and some staticcheck messages being resolved that should not modify behaviour.
v1.0.25: Addedsrcrewriter to allow for proxying inline assets.Compare Source
What's Changed
New Contributors
Full Changelog: microcosm-cc/bluemonday@v1.0.24...v1.0.25
v1.0.24: Added AllowURLSchemesMatchingCompare Source
This is a feature release, there are no security fixes in this release.
What's Changed
New Contributors
Full Changelog: microcosm-cc/bluemonday@v1.0.23...v1.0.24
v1.0.23: Resolve golang.org/x/net CVE-2022-41723Compare Source
What's Changed
New Contributors
Full Changelog: microcosm-cc/bluemonday@v1.0.22...v1.0.23
v1.0.22: Addpictureto list of elements allowed without attributesCompare Source
This is not a security update!
This is a usability update as some HTML elements are valid without attributes however the default behaviour is to strip these out of an abundance of caution. The
pictureelement https://developer.mozilla.org/en-US/docs/Web/HTML/Element/picture is one such element where it merely changes the browser rendering such that one of the child elements will be rendered.The
pictureelement was not present in the allowlist when it should have been, and so this release fixes that as per #161 .nwidger/jsoncolor (github.com/nwidger/jsoncolor)
v0.3.2Compare Source
openshift-online/ocm-cli (github.com/openshift-online/ocm-cli)
v0.1.76: Release 0.1.76Compare Source
-e034b6b Update Konflux references to
2418e94-5066ea0 Filter wif configs in interactive mode (#660)
-878f5e3 Initial refactor to prepare to move the connection builder and config packages to ocm-common
-1ea2e05 lint
-2c66dc0 removes redundant api url
-65bf8cf Add role prefix flag on create wif-config (#662)
-a39ce2e Grant access to support group during WifConfig creation (#663)
-0275d67 Revert "Grant access to support group during WifConfig creation (#663)" (#664)
-7cddc94 Wif creation improvements, including logic to grant support access as part of wif creation. (#666)
-7f41626 Update Konflux references
-b9a750c UpdatesToKonflux (#668)
-e4aa770 OCM-10615 | Implement 'gcp wif-config update' command (#667)
-cf6e500 Dry-run wif config delete before tearing down cloud resources (#670)
-e18ea10 OCM-11842 | feat: Updates to support GCP-PSC clusters (#672)
-893acd5 wif-enable gcp-inquiries (#673)
-664b2c4 Replace wif dry-run flag with mode (#671)
-df87894 Update Konflux references (#669)
v0.1.75: Release 0.1.75Compare Source
-416843e OSD-24332 Adding CNI Type to the printed output.
-ca71863 Introduce gcp WIF sub-commands to manage wif-configs (#619)
-5f9697b multi arch release images (#631)
-951d7cd Red Hat Konflux update ocm-cli (#633)
-2604647 Limit Konflux Pipeline Runs (#634)
-9645301 Update Konflux references (#635)
-c797dfb Update Konflux references to
0dc3087-28b521d support hermetic build (#636)
-3117d6b Update Konflux references to
9eee3cf-d228140 Update Konflux references to
71270c3-0ff233b update konflux pipeline (#641)
-ae2093b Update Konflux references
-2ae4aa0 Update Konflux references
-bdd172b Update Konflux references to
f93024e-d750acc Red Hat Konflux update ocm-cli Signed-off-by: red-hat-konflux konflux@no-reply.konflux-ci.dev
-0bbcf6e Update Konflux references
-21ff6b8 Replace wif models and client with sdk (#643)
-c3d52e2 Update Konflux build (#651)
-8073ef8 release_version (#652)
-e9a014d Update Konflux references
-78317e9 Add 'wif-config' flag as cluster create option
-49f4e41 Set project number on wif config creation
-e441c1b Update Konflux references
-ca8d9db Support listing and parameters in 'gcp get wif-config' (#656)
v0.1.74: Release 0.1.74Compare Source
3423d52OCM-1888: Add docs for ocm delete account subcommands and arguments42a6c63OCM-4965: Keyring configuration storage (#600)01c0241OCM-6528 | feat: add describe ingress cmddebb035OCM-8013| feat: Dockerfile for Konflux builds79d7322konflux-tekton build pipelinese79a4bfRed Hat Konflux update ocm-cli5ea7344Trigger pipeline only if event title starts with Konfluxedd560cBump ocm-sdk-go to v0.1.422 (#620)5e4c99bAdds ability to change api url via env var (#621)2a1f92eOCM-1398: support 'user' as variable for ocm configa248a57Update Konflux references (#617)8448029Update Konflux references tofa168cd(#623)441189fRed Hat Konflux purge ocm-cli (#624)v0.1.73: Release 0.1.73Compare Source
165b90eOCM-4783 | feat: display warnings after cluster creation0973f7bDisplay a cluster history URL in cluster describead98440Fix minor formatting issue with cluster describeea1c988OCM-4962 | Feat | Add OAuth login using PKCE (#590)98944f7OCM-5759 | feat: Add Device Code Flow (#591)ff1c142Display only platform-relevant field in cluster describefab7ccfOCM-5281 | Feat | Add region validation from ocm-shards and list regions command (#586)f279dc7Use Hostname() to set --hosted-domaind0f8459improving ocm login and ocm list rh-region url resolution to reuse the url saved in config before falling back to api.openshift.comd894c2aOCM-6407 | edit option sends an empty payload9cf11efOCM-6450 | No update cluster with empty config1caf2d0OCM-5941 | add enable delete protection parametera056c70OCM-6140 | feat: allow customization of the domain prefix when creating a cluster5aa159fOCM-6030 | chore: bump sdk to v0.1.40703500feOCM-6140: make name width to be 54 chars to fix truncation issue in case of longer name > 28 chars6d1fd05OCM-6030 | feat: allow to edit component routes of ingress383d362Make auth and deviceConfiguration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.Documentation
Find out how to configure dependency updates in MintMaker documentation or see all available configuration options in Renovate documentation.