Skip to content

Conversation

bakito-renovate[bot]
Copy link

@bakito-renovate bakito-renovate bot commented Apr 5, 2025

This PR contains the following updates:

Package Type Update Change
al.essio.dev/pkg/shellescape indirect minor v1.5.1 -> v1.6.0
cloud.google.com/go/auth indirect minor v0.15.0 -> v0.16.0
cloud.google.com/go/iam indirect minor v1.4.1 -> v1.5.0
filippo.io/age indirect patch v1.2.1-0.20240618131852-7eedd929a6cf -> v1.2.1
github.com/Azure/go-ansiterm indirect digest d185dfc -> faa5f7b
github.com/Azure/go-autorest/autorest/adal indirect patch v0.9.22 -> v0.9.24
github.com/Azure/go-autorest/autorest/azure/auth indirect patch v0.5.7 -> v0.5.13
github.com/Azure/go-autorest/autorest/azure/cli indirect patch v0.4.2 -> v0.4.7
github.com/Azure/go-autorest/autorest/date indirect patch v0.3.0 -> v0.3.1
github.com/Azure/go-autorest/autorest/to indirect patch v0.4.0 -> v0.4.1
github.com/Azure/go-autorest/autorest/validation indirect patch v0.3.1 -> v0.3.2
github.com/Azure/go-autorest/logger indirect patch v0.2.1 -> v0.2.2
github.com/Azure/go-autorest/tracing indirect patch v0.6.0 -> v0.6.1
github.com/ProtonMail/go-crypto indirect minor v1.1.2 -> v1.2.0
github.com/armon/go-metrics indirect minor v0.4.1 -> v0.5.4
github.com/caspr-io/yamlpath indirect patch v0.0.0-20200722075116-502e8d113a9b -> v0.0.1
github.com/cloudflare/circl indirect minor v1.5.0 -> v1.6.1
github.com/coreos/go-semver indirect patch v0.3.0 -> v0.3.1
github.com/cpuguy83/go-md2man/v2 indirect patch v2.0.5 -> v2.0.6
github.com/docker/docker indirect patch v28.0.2+incompatible -> v28.0.4+incompatible
github.com/go-jose/go-jose/v4 indirect minor v4.0.4 -> v4.1.0
github.com/go-ole/go-ole indirect minor v1.2.6 -> v1.3.0
github.com/go-test/deep indirect minor v1.0.3 -> v1.1.1
github.com/hashicorp/go-secure-stdlib/parseutil indirect minor v0.1.6 -> v0.2.0
github.com/hashicorp/go-sockaddr indirect patch v1.0.2 -> v1.0.7
github.com/hashicorp/golang-lru indirect minor v0.5.4 -> v0.6.0
github.com/hashicorp/serf indirect patch v0.10.1 -> v0.10.2
github.com/klauspost/compress indirect minor v1.17.11 -> v1.18.0
github.com/lufia/plan9stats indirect digest 39d0f17 -> 8bc96cf
github.com/magiconair/properties indirect patch v1.8.9 -> v1.8.10
github.com/mattn/go-colorable indirect patch v0.1.13 -> v0.1.14
github.com/moby/sys/user indirect minor v0.3.0 -> v0.4.0
github.com/moby/term indirect patch v0.5.0 -> v0.5.2
github.com/pborman/uuid indirect patch v1.2.0 -> v1.2.1
github.com/power-devops/perfstat indirect digest 5aafc22 -> 82ca368
github.com/rs/zerolog indirect minor v1.33.0 -> v1.34.0
github.com/shirou/gopsutil/v4 indirect patch v4.25.1 -> v4.25.3
github.com/spf13/cobra indirect minor v1.7.0 -> v1.9.1
github.com/spf13/pflag indirect patch v1.0.5 -> v1.0.6
github.com/tklauser/go-sysconf indirect patch v0.3.12 -> v0.3.15
github.com/tklauser/numcpus indirect minor v0.6.1 -> v0.10.0
github.com/urfave/cli/v2 indirect patch v2.27.5 -> v2.27.6
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc indirect minor v0.59.0 -> v0.60.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp indirect minor v0.59.0 -> v0.60.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp indirect minor v1.31.0 -> v1.35.0
golang.org/x/exp indirect digest 7588d65 -> 7e4ce0a
golang.org/x/net indirect minor v0.38.0 -> v0.39.0
golang.org/x/sync indirect minor v0.12.0 -> v0.13.0
golang.org/x/text indirect minor v0.23.0 -> v0.24.0
google.golang.org/genproto indirect digest a0af3ef -> 207652e
google.golang.org/genproto/googleapis/api indirect digest a0af3ef -> 207652e
google.golang.org/genproto/googleapis/rpc indirect digest e70fdf4 -> 207652e
google.golang.org/grpc indirect patch v1.71.0 -> v1.71.1

Release Notes

alessio/shellescape (al.essio.dev/pkg/shellescape)

v1.6.0

Compare Source

What's Changed

New Contributors

Full Changelog: alessio/shellescape@v1.5.1...v1.6.0

googleapis/google-cloud-go (cloud.google.com/go/auth)

v0.16.0

Compare Source

  • Other bigquery changes:

    • JobIterator.Next returns *Job; removed JobInfo (BREAKING CHANGE).
    • UseStandardSQL is deprecated; set UseLegacySQL to true if you need
      Legacy SQL.
    • Uploader.Put will generate a random insert ID if you do not provide one.
    • Support time partitioning for load jobs.
    • Support dry-run queries.
    • A Job remembers its last retrieved status.
    • Support retrieving job configuration.
    • Support labels for jobs and tables.
    • Support dataset access lists.
    • Improve support for external data sources, including data from Bigtable and
      Google Sheets, and tables with external data.
    • Support updating a table's view configuration.
    • Fix uploading civil times with nanoseconds.
  • storage:

    • Support PubSub notifications.
    • Support Requester Pays buckets.
  • profiler: Support goroutine and mutex profile types.

FiloSottile/age (filippo.io/age)

v1.2.1: age v1.2.1: security fix

Compare Source

This release fixes a security vulnerability that could allow an attacker to execute an arbitrary binary under certain conditions.

See GHSA-32gq-x56h-299c.

Plugin names may now only contain alphanumeric characters or the four special characters +-._.

Thanks to ⬡-49016 for reporting this issue.

ProtonMail/go-crypto (github.com/ProtonMail/go-crypto)

v1.2.0

Compare Source

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.6...v1.2.0

v1.1.6

Compare Source

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.5...v1.1.6

v1.1.5

Compare Source

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.4...v1.1.5

v1.1.4

Compare Source

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.3...v1.1.4

v1.1.3

Compare Source

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.2...v1.1.3

armon/go-metrics (github.com/armon/go-metrics)

v0.5.4

Compare Source

What's Changed

Full Changelog: hashicorp/go-metrics@v0.5.3...v0.5.4

v0.5.3

Compare Source

What's Changed

Full Changelog: hashicorp/go-metrics@v0.5.2...v0.5.3

v0.5.2

Compare Source

What's Changed

Full Changelog: hashicorp/go-metrics@v0.5.1...v0.5.2

v0.5.1

Compare Source

What's Changed

Full Changelog: hashicorp/go-metrics@v0.5.0...v0.5.1

v0.5.0

Breaking Changes

  • Due to renaming the Go module from armon/go-metrics to hashicorp/go-metrics all libraries within a program that use the global metrics handler will need updating. If not they may be sending metrics to either the old modules global handler or the new modules handler.

What's Changed

Full Changelog: hashicorp/go-metrics@v0.4.1...v0.5.0

cloudflare/circl (github.com/cloudflare/circl)

v1.6.1: CIRCL v1.6.1

Compare Source

CIRCL v1.6.1

  • Fixes some point checks on the FourQ curve.
  • Hybrid KEM fails on low-order points.
What's Changed

Full Changelog: cloudflare/circl@v1.6.0...v1.6.1

v1.6.0: CIRCL v1.6.0

Compare Source

CIRCL v1.6.0

New!
What's Changed
New Contributors

Full Changelog: cloudflare/circl@v1.5.0...v1.6.0

coreos/go-semver (github.com/coreos/go-semver)

v0.3.1

Compare Source

cpuguy83/go-md2man (github.com/cpuguy83/go-md2man/v2)

v2.0.6

Compare Source

What's Changed

New Contributors

Full Changelog: cpuguy83/go-md2man@v2.0.5...v2.0.6

docker/docker (github.com/docker/docker)

v28.0.4+incompatible

Compare Source

v28.0.3+incompatible

Compare Source

go-jose/go-jose (github.com/go-jose/go-jose/v4)

v4.1.0

Compare Source

What's Changed

New Contributors

Full Changelog: go-jose/go-jose@v4.0.5...v4.1.0

v4.0.5

Compare Source

What's Changed

Fixes GHSA-c6gw-w398-hv78

Various other dependency updates, small fixes, and documentation updates in the full changelog

New Contributors

Full Changelog: go-jose/go-jose@v4.0.4...v4.0.5

go-ole/go-ole (github.com/go-ole/go-ole)

v1.3.0

Compare Source

What's Changed

New Contributors

Full Changelog: go-ole/go-ole@v1.2.6...v1.3.0

go-test/deep (github.com/go-test/deep)

v1.1.1

Compare Source

  • Added NilPointersAreZero option: causes a nil pointer to be equal to a zero value (PR #​61) (@​seveas)
  • Updated test matrix to go1.22, go1.21, and go1.20

v1.1.0

Compare Source


v1.0.9

Compare Source

  • Fixed issue #​45: Panic when comparing errors in unexported fields (PR #​54) (@​seveas)
  • Fixed issue #​46: Functions are handled differently from reflect.DeepEqual (PR #​55) (@​countcb)
  • Updated test matrix to go1.17, go1.18, and go1.19 and moved testing to GitHub Actions

v1.0.8

Compare Source

  • Updated test matrix to go1.15, go1.16, and go1.17
  • Added SECURITY.md and GitHub code analysis

v1.0.7

Compare Source

  • Fixed issue #​39: Confusing diff when comparing distinct types with the same name (PR #​44)

v1.0.6

Compare Source

  • Added NilMapsAreEmpty variable which causes a nil map to equal an empty map (PR #​43) (@​yalegko)

v1.0.5

Compare Source

  • Added NilSlicesAreEmpty variable which causes a nil slice to be equal to an empty slice (PR #​27) (@​Anaminus)

v1.0.4

Compare Source

  • Added `deep:"-"` structure field tag to ignore field (PR #​38) (@​flga)
hashicorp/go-sockaddr (github.com/hashicorp/go-sockaddr)

v1.0.7

Compare Source

What's Changed

New Contributors

Full Changelog: hashicorp/go-sockaddr@v1.0.6...v1.0.7

v1.0.6

Compare Source

v1.0.5

Compare Source

v1.0.4

Compare Source

v1.0.3

Compare Source

hashicorp/golang-lru (github.com/hashicorp/golang-lru)

v0.6.0: Tagging prior to v2

Compare Source

This is likely the last tag prior to the switch to generics and the v2 package.

hashicorp/serf (github.com/hashicorp/serf)

v0.10.2

Compare Source

What's Changed

Full Changelog: hashicorp/serf@v0.10.1...v0.10.2

klauspost/compress (github.com/klauspost/compress)

v1.18.0

Compare Source

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.11...v1.18.0

magiconair/properties (github.com/magiconair/properties)

v1.8.10

Compare Source

What's Changed

Full Changelog: magiconair/properties@v1.8.9...v1.8.10

mattn/go-colorable (github.com/mattn/go-colorable)

v0.1.14

Compare Source

moby/term (github.com/moby/term)

v0.5.2

Compare Source

v0.5.1

Compare Source

pborman/uuid (github.com/pborman/uuid)

v1.2.1: Fix golint warning

Compare Source

This release contain fixes by KosToZyB for golint warnings.

rs/zerolog (github.com/rs/zerolog)

v1.34.0

Compare Source

shirou/gopsutil (github.com/shirou/gopsutil/v4)

v4.25.3

Compare Source

Important Notice

Starting from this release, we have set the Go version in go.mod to 1.23. Moving forward, we plan to continuously update it to the second most recent Go release.

We understand that gopsutil runs on various platforms, and some applications using it may only support older Go versions. With this release, those applications might no longer be able to build. However, as discussed in #​1804, we made this change because golang.org/x/sys, which gopsutil depends on, has adopted a policy of continuously updating its Go version.

That said, we intend to be conservative about syntax changes and avoid unnecessary modifications whenever possible.

What's Changed

disk
host
process
Chore
Other Changes

New Contributors

Full Changelog: shirou/gopsutil@v4.25.2...v4.25.3

v4.25.2

Compare Source

What's Changed

cpu
net
process
Other Changes

New Contributors

Full Changelog: shirou/gopsutil@v4.25.1...v4.25.2

spf13/cobra (github.com/spf13/cobra)

v1.9.1

Compare Source

🐛 Fixes

Full Changelog: spf13/cobra@v1.9.0...v1.9.1

v1.9.0

Compare Source

✨ Features

🐛 Fixes

🤖 Completions

🧪 Testing

✍🏼 Documentation


Configuration

📅 Schedule: Branch creation - "* * * * 6" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@bakito-renovate bakito-renovate bot force-pushed the renovate/indirect-go-dependencies branch 7 times, most recently from 7c62f7c to 9a1c589 Compare April 12, 2025 04:25
@bakito-renovate bakito-renovate bot force-pushed the renovate/indirect-go-dependencies branch from 9a1c589 to 20c8b9f Compare April 14, 2025 19:47
@bakito bakito closed this Apr 15, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant