8000 chore(deps): Update go deps by renovate[bot] · Pull Request #2457 · cerbos/cerbos · GitHub
[go: up one dir, main page]
More Web Proxy on the site http://driver.im/
Skip to content

chore(deps): Update go deps #2457

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Merged
merged 2 commits into from
Jan 27, 2025
Merged

chore(deps): Update go deps #2457

merged 2 commits into from
Jan 27, 2025

Conversation

renovate[bot]
Copy link
Contributor
@renovate renovate bot commented Jan 27, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go v1.36.3-20241127180247-a33202765966.1 -> v1.36.4-20241127180247-a33202765966.1 age adoption passing confidence require patch
github.com/aws/aws-sdk-go-v2/config v1.29.1 -> v1.29.2 age adoption passing confidence require patch
github.com/aws/aws-sdk-go-v2/service/marketplacemetering v1.25.11 -> v1.25.12 age adoption passing confidence require patch
github.com/aws/smithy-go v1.22.1 -> v1.22.2 age adoption passing confidence require patch
github.com/dadav/helm-schema 5c6cc3f -> 0f18212 age adoption passing confidence require digest
github.com/dgraph-io/badger/v4 v4.5.0 -> v4.5.1 age adoption passing confidence require patch
github.com/go-git/go-git/v5 v5.13.1 -> v5.13.2 age adoption passing confidence require patch
github.com/google/cel-go v0.22.2-0.20250117215717-33a7f973decb -> v0.23.0 age adoption passing confidence require minor
github.com/goreleaser/goreleaser/v2 v2.5.1 -> v2.6.1 age adoption passing confidence require minor
github.com/grpc-ecosystem/grpc-gateway/v2 v2.25.1 -> v2.26.0 age adoption passing confidence require minor
github.com/twmb/franz-go v1.18.0 -> v1.18.1 age adoption passing confidence require patch
github.com/twmb/franz-go/pkg/kadm v1.14.0 -> v1.15.0 age adoption passing confidence require minor
google.golang.org/genproto/googleapis/api 1a7da9e -> 65684f5 age adoption passing confidence require digest
google.golang.org/grpc v1.69.4 -> v1.70.0 age adoption passing confidence require minor
google.golang.org/protobuf v1.36.4-0.20250116160514-2005adbe0cf6 -> v1.36.4 age adoption passing confidence require patch
google.golang.org/protobuf v1.36.3 -> v1.36.4 age adoption passing confidence require patch

Release Notes

aws/smithy-go (github.com/aws/smithy-go)

v1.22.2

Compare Source

dgraph-io/badger (github.com/dgraph-io/badger/v4)

v4.5.1: Badger v4.5.1

Compare Source

What's Changed

  • Fix build for GOARCH=wasm with GOOS=js or GOOS=wasip1
  • docs: Add pagination explanation to docs
  • chore(deps): bump the minor group with 2 updates
  • chore(deps): bump golang.org/x/net from 0.31.0 to 0.32.0 in the minor group
  • chore(deps): bump github.com/dgraph-io/ristretto/v2 from 2.0.0 to 2.0.1 in the patch group
  • chore(deps): bump google.golang.org/protobuf from 1.35.2 to 1.36.0 in the minor group
  • chore(deps): bump google.golang.org/protobuf from 1.36.0 to 1.36.1 in the patch group
  • chore(deps): bump the minor group with 2 updates
  • fix(info): print Total BloomFilter Size with totalBloomFilter instead of totalIndex
  • chore(deps): bump the minor group with 2 updates
  • chore(deps): bump google.golang.org/protobuf from 1.36.1 to 1.36.2 in the patch group
  • feat(info): print total size of listed keys
  • chore(deps): bump github.com/dgraph-io/ristretto/v2 from 2.0.1 to 2.1.0 in the minor group
  • chore(deps): bump google.golang.org/protobuf from 1.36.2 to 1.36.3 in the patch group

Full Changelog: hypermodeinc/badger@v4.5.0...v4.5.1

go-git/go-git (github.com/go-git/go-git/v5)

v5.13.2

Compare Source

What's Changed

Full Changelog: go-git/go-git@v5.13.1...v5.13.2

google/cel-go (github.com/google/cel-go)

v0.23.0

Compare Source

Features

  • First and last element in list support [#​1067]
  • Add support for typed conformance tests. [#​1089]
  • Add syntax for escaped field selectors. [#​1002]
  • Add optional.unwrap() / .unwrapOpt() function [#​1103]
  • Cost tracking for two-variable comprehensions and bindings [#​1104]

Fixes

PR #​1099 enables a change in the internal variable name used for comprehension result accumulation. This change may break some tests which inspect the AST contents in text form; however, will not break any existing uses of CEL during parse, check, or evaluation.

  • Improve policy compiler error message for incompatible outputs. [#​1082]
  • Fix partial evaluation with the comprehension folder objects [#​1084]
  • Introduce versioning options to all extensions [#​1075]
  • Fix a crash in mismatched output check for nested rules [#​1086]
  • improve debug output to properly quote byte strings [#​1088]
  • Fix two-variable comprehension pruning [#​1083]
  • Replace checks for valid UTF-8 in strings with go-maintained calls [#​1094]
  • Policy nested rule fix [#​1092]
  • Address non-const format string lint findings [#​1096]
  • Fix typos in ext/README.md [#​1098]
  • Add option to use inaccessible accumulator var [#​1097]
  • Add test cases for string.format covering various edge cases [#​1101]
  • Add base_config and partial_config files under restricted_destination testdata [#​1106]
  • Default enable using hidden accumulator name [#​1099]
  • Update PruneAst to support constants of optional type [#​1109]

New Contributors

Full Changelog: google/cel-go@v0.22.1...v0.23.0

goreleaser/goreleaser (github.com/goreleaser/goreleaser/v2)

v2.6.1

Compare Source

Changelog

Bug fixes
Dependency updates
Documentation updates
Other work

Full Changelog: goreleaser/goreleaser@v2.6.0...v2.6.1

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

GoReleaser logo

v2.6.0

Compare Source

Changelog

New Features
Bug fixes
Dependency updates
Documentation updates
Build process updates
Other work

Full Changelog: goreleaser/goreleaser@v2.5.1...v2.6.0

Helping out

This release is only possible thanks to all the support of some awesome people!

Want to be one of them?
You can sponsor, get a Pro License or contribute with code.

Where to go next?

GoReleaser logo

grpc-ecosystem/grpc-gateway (github.com/grpc-ecosystem/grpc-gateway/v2)

v2.26.0

Compare Source

What's Changed
New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.25.1...v2.26.0

twmb/franz-go (github.com/twmb/franz-go)

v1.18.1

Compare Source

===

This patch release contains a myriad of fixes for relatively minor bugs, a
few improvements, and updates all dependencies. Both pkg/kadm and pkg/sr
are also being released as minors in tandem with a few quality of life APIs.

Bug fixes

  • Previously, if records were successfully produced but returned with an
    invalid offset (-1), the client would erroneously return bogus offsets
    to the end users. This has been fixed to return -1. (Note this was never
    encountered in the wild).

  • Pausing topics & partitions while using PollRecords previously could result
    in incorrect accounting in BufferedFetchRecords and BufferedFetchBytes,
    permanently causing the numbers returned to be larger than reality. That is,
    it is possible the functions would return non-zero numbers even though nothing
    was buffered.

  • When consuming from a follower (i.e. you were using the Rack option and your
    cluster is configured with follower fetching), if the follower you consumed from
    had a higher log start offset than the leader, and if you were trying to consume
    from an early offset that exists on the leader but not on the follower, the client
    would enter a permanent spinloop trying to list offsets against the follower.
    This is due to KIP-320 case 3, which mentions that clients should send a ListOffsets
    to the follower -- this is not the case, Kafka actually returns NotLeaderOrFollower
    when sending that request to the follower. Now the client clears the preferred replica
    and sends the next fetch request to the leader, at which point the leader can either
    serve the request or redirect back to a different preferred replica.

Improvements

  • When finishing batches, if any records were blocked in Produce due to
    the client hitting the maximum number of buffered records, the client would broadcast
    to all waiters that a message was finished for every message finished until there were
    no other goroutines waiting to try to produce. When lingering
    is enabled, linger occurs except when the client has reached the maximum number of
    buffered records. Once the client is as max buffered records, the client tries to flush until more records can be buffered.
    If you have a few concurrent producers, they will all hang trying to buffer. As soon
    as one is signaled, it will grab the free spot, enter into the client as buffered,
    and then see the client is now again at max buffered and immediately create a batch
    rather than lingering. Thus, signalling one at a time would cause many small single-record
    batches to be created and each cause a round trip to the cluster. This would result in slow performance.
    Now, by finishing a batch at a time, the client opens many slots at a time for any producers waiting,
    and ideally they can fit into being buffered without hitting max buffered and clearing any linger state.
    Note that single-message batches can still cause the original behavior, but there is not
    much more that can be done.

  • Decompression errors encountered while consuming are now returned to the end user, rather
    than being stripped internally. Previously, stripping the error internally would result in
    the client spinlooping: it could never make forward progress and nothing ever signaled the
    end user that something was going wrong.

Relevant commits

  • 13584b5 feature kadm: always request authorized operations
  • 847095b bugfix kgo: redirect back to the leader on KIP-392 case 3 failure
  • d6d3015 feature pkg/sr: add PreReq option (and others by @​mihaitodor, thank you!)
  • 1473778 improvement kgo: return decompression errors while consuming
  • 3e9beae bugfix kgo: fix accounting when topics/partitions are {,un}paused for PollRecords
  • ead18d3 improvement kgo: broadcast batch finishes in one big blast
  • aa1c73c feature kadm: add func to decode AuthorizedOperations (thanks @​weeco!)
  • f66d495 kfake: do not listen until the cluster is fully set up
  • 2eed36e bugfix pkg/kgo: fix handling of invalid base offsets (thanks @​rodaine!)
grpc/grpc-go (google.golang.org/grpc)

v1.70.0: Release 1.70.0

Compare Source

Behavior Changes

  • client: reject service configs containing an invalid retryPolicy in accordance with gRFCs A21 and A6. (#​7905)
    • Note that this is a potential breaking change for some users using an invalid configuration, but continuing to allow this behavior would violate our cross-language compatibility requirements.

New Features

  • xdsclient: fallback to a secondary management server (if specified in the bootstrap configuration) when the primary is down is enabled by default. Can be disabled by setting the environment variable GRPC_EXPERIMENTAL_XDS_FALLBACK to false. (#​7949)
  • experimental/credentials: experimental transport credentials are added which don't enforce ALPN. (#​7980)
    • These credentials will be removed in an upcoming grpc-go release. Users must not rely on these credentials directly. Instead, they should either vendor a specific ve

Configuration

📅 Schedule: Branch creation - "* 0-3 * * 1" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
chore(deps): update go deps
e9f69ee 
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
@renovate renovate bot added area/dependencies Pull requests that update a dependency file bots kind/chore labels Jan 27, 2025
@renovate Renovate
Copy link
Contributor Author
renovate bot commented Jan 27, 2025

ℹ Artifact update notice

File name: api/genpb/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 1 additional dependency was updated

Details:

Package Change
google.golang.org/genproto/googleapis/rpc v0.0.0-20250106144421-5f5ef82da422 -> v0.0.0-20250115164207-1a7da9e5054f
File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 18 additional dependencies were updated

Details:

Package Change
github.com/ProtonMail/go-crypto v1.1.3 -> v1.1.5
github.com/aws/aws-sdk-go-v2 v1.33.0 -> v1.34.0
github.com/aws/aws-sdk-go-v2/credentials v1.17.54 -> v1.17.55
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.24 -> v1.16.25
github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.28 -> v1.3.29
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.28 -> v2.6.29
github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1 -> v1.8.2
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.12.1 -> v1.12.2
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.12.9 -> v1.12.10
github.com/aws/aws-sdk-go-v2/service/sso v1.24.11 -> v1.24.12
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.28.10 -> v1.28.11
github.com/aws/aws-sdk-go-v2/service/sts v1.33.9 -> v1.33.10
github.com/dgraph-io/ristretto/v2 v2.0.0 -> v2.1.0
github.com/go-git/go-billy/v5 v5.6.1 -> v5.6.2
github.com/google/flatbuffers v24.3.25+incompatible -> v24.12.23+incompatible
github.com/pierrec/lz4/v4 v4.1.21 -> v4.1.22
github.com/pjbgf/sha1cd v0.3.1 -> v0.3.2
go.opentelemetry.io/contrib/detectors/gcp v1.31.0 -> v1.32.0
File name: tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 13 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.23.2 -> 1.23.5
cloud.google.com/go/compute/metadata v0.5.2 -> v0.6.0
code.gitea.io/sdk/gitea v0.19.0 -> v0.20.0
github.com/ProtonMail/go-crypto v1.1.3 -> v1.1.4
github.com/caarlos0/log v0.4.6 -> v0.4.8
github.com/elliotchance/orderedmap/v2 v2.2.0 -> v2.7.0
github.com/google/go-containerregistry v0.20.2 -> v0.20.3
github.com/goreleaser/chglog v0.6.1 -> v0.6.2
github.com/goreleaser/nfpm/v2 v2.41.1 -> v2.41.2
go.opentelemetry.io/otel/sdk v1.32.0 -> v1.33.0
golang.org/x/oauth2 v0.24.0 -> v0.25.0
golang.org/x/time v0.6.0 -> v0.8.0
google.golang.org/genproto/googleapis/api v0.0.0-20250106144421-5f5ef82da422 -> v0.0.0-20250115164207-1a7da9e5054f
google.golang.org/genproto/googleapis/rpc v0.0.0-20250106144421-5f5ef82da422 -> v0.0.0-20250115164207-1a7da9e5054f

@charithe
Run generate
6cafabb 
Signed-off-by: Charith Ellawala <charith@cerbos.dev>
@charithe charithe changed the title chore(deps): update go deps chore(deps): Update go deps Jan 27, 2025
@renovate Renovate
Copy link
Contributor Author
renovate bot commented Jan 27, 2025

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠️ Warning: custom changes will be lost.

@charithe charithe merged commit 2abd268 into main Jan 27, 2025
23 checks passed
@charithe charithe deleted the renovate/go-deps branch January 27, 2025 09:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@charithe charithe charithe approved these changes

Assignees
No one assigned
Labels
area/dependencies Pull requests that update a dependency file bots kind/chore
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@charithe
0