-
Notifications
You must be signed in to change notification settings - Fork 17
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump the go-modules group with 25 updates #555
Closed
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the go-modules group with 25 updates: | Package | From | To | | --- | --- | --- | | [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.7.1` | `0.7.2` | | [github.com/cenkalti/backoff/v4](https://github.com/cenkalti/backoff) | `4.2.0` | `4.2.1` | | [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.0` | `1.7.7` | | [github.com/docker/distribution](https://github.com/docker/distribution) | `2.8.2+incompatible` | `2.8.3+incompatible` | | [github.com/docker/docker-credential-helpers](https://github.com/docker/docker-credential-helpers) | `0.7.0` | `0.8.0` | | [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.2` | `1.4.3` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.4.1` | `5.5.0` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.6.1` | `5.9.0` | | [github.com/google/go-cmp](https://github.com/google/go-cmp) | `0.5.9` | `0.6.0` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.15.1` | `0.16.1` | | [github.com/google/uuid](https://github.com/google/uuid) | `1.3.0` | `1.3.1` | | [github.com/jinzhu/copier](https://github.com/jinzhu/copier) | `0.3.5` | `0.4.0` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.16.5` | `1.17.0` | | [github.com/mattn/go-runewidth](https://github.com/mattn/go-runewidth) | `0.0.14` | `0.0.15` | | [github.com/moby/patternmatcher](https://github.com/moby/patternmatcher) | `0.5.0` | `0.6.0` | | [github.com/opencontainers/runc](https://github.com/opencontainers/runc) | `1.1.5` | `1.1.9` | | [github.com/pierrec/lz4/v4](https://github.com/pierrec/lz4) | `4.1.17` | `4.1.18` | | [github.com/skeema/knownhosts](https://github.com/skeema/knownhosts) | `1.2.0` | `1.2.1` | | [github.com/spdx/tools-golang](https://github.com/spdx/tools-golang) | `0.5.0` | `0.5.3` | | [github.com/spf13/afero](https://github.com/spf13/afero) | `1.9.5` | `1.10.0` | | [github.com/spf13/cast](https://github.com/spf13/cast) | `1.5.0` | `1.5.1` | | [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.11.3` | `2.15.0` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.21.0` | `0.25.0` | | [github.com/vbatts/tar-split](https://github.com/vbatts/tar-split) | `0.11.3` | `0.11.5` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.57.0` | `1.58.3` | Updates `github.com/CycloneDX/cyclonedx-go` from 0.7.1 to 0.7.2 - [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases) - [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml) - [Commits](CycloneDX/cyclonedx-go@v0.7.1...v0.7.2) Updates `github.com/cenkalti/backoff/v4` from 4.2.0 to 4.2.1 - [Commits](cenkalti/backoff@v4.2.0...v4.2.1) Updates `github.com/containerd/containerd` from 1.7.0 to 1.7.7 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v1.7.0...v1.7.7) Updates `github.com/docker/distribution` from 2.8.2+incompatible to 2.8.3+incompatible - [Release notes](https://github.com/docker/distribution/releases) - [Commits](distribution/distribution@v2.8.2...v2.8.3) Updates `github.com/docker/docker-credential-helpers` from 0.7.0 to 0.8.0 - [Release notes](https://github.com/docker/docker-credential-helpers/releases) - [Commits](docker/docker-credential-helpers@v0.7.0...v0.8.0) Updates `github.com/gabriel-vasile/mimetype` from 1.4.2 to 1.4.3 - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.2...v1.4.3) Updates `github.com/go-git/go-billy/v5` from 5.4.1 to 5.5.0 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.4.1...v5.5.0) Updates `github.com/go-git/go-git/v5` from 5.6.1 to 5.9.0 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.6.1...v5.9.0) Updates `github.com/google/go-cmp` from 0.5.9 to 0.6.0 - [Release notes](https://github.com/google/go-cmp/releases) - [Commits](google/go-cmp@v0.5.9...v0.6.0) Updates `github.com/google/go-containerregistry` from 0.15.1 to 0.16.1 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml) - [Commits](google/go-containerregistry@v0.15.1...v0.16.1) Updates `github.com/google/uuid` from 1.3.0 to 1.3.1 - [Release notes](https://github.com/google/uuid/releases) - [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md) - [Commits](google/uuid@v1.3.0...v1.3.1) Updates `github.com/jinzhu/copier` from 0.3.5 to 0.4.0 - [Commits](jinzhu/copier@v0.3.5...v0.4.0) Updates `github.com/klauspost/compress` from 1.16.5 to 1.17.0 - [Release notes](https://github.com/klauspost/compress/releases) - [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml) - [Commits](klauspost/compress@v1.16.5...v1.17.0) Updates `github.com/mattn/go-runewidth` from 0.0.14 to 0.0.15 - [Commits](mattn/go-runewidth@v0.0.14...v0.0.15) Updates `github.com/moby/patternmatcher` from 0.5.0 to 0.6.0 - [Release notes](https://github.com/moby/patternmatcher/releases) - [Commits](moby/patternmatcher@v0.5.0...v0.6.0) Updates `github.com/opencontainers/runc` from 1.1.5 to 1.1.9 - [Release notes](https://github.com/opencontainers/runc/releases) - [Changelog](https://github.com/opencontainers/runc/blob/v1.1.9/CHANGELOG.md) - [Commits](opencontainers/runc@v1.1.5...v1.1.9) Updates `github.com/pierrec/lz4/v4` from 4.1.17 to 4.1.18 - [Commits](pierrec/lz4@v4.1.17...v4.1.18) Updates `github.com/skeema/knownhosts` from 1.2.0 to 1.2.1 - [Commits](skeema/knownhosts@v1.2.0...v1.2.1) Updates `github.com/spdx/tools-golang` from 0.5.0 to 0.5.3 - [Release notes](https://github.com/spdx/tools-golang/releases) - [Changelog](https://github.com/spdx/tools-golang/blob/main/RELEASE-NOTES.md) - [Commits](spdx/tools-golang@v0.5.0...v0.5.3) Updates `github.com/spf13/afero` from 1.9.5 to 1.10.0 - [Release notes](https://github.com/spf13/afero/releases) - [Commits](spf13/afero@v1.9.5...v1.10.0) Updates `github.com/spf13/cast` from 1.5.0 to 1.5.1 - [Release notes](https://github.com/spf13/cast/releases) - [Commits](spf13/cast@v1.5.0...v1.5.1) Updates `github.com/sylabs/sif/v2` from 2.11.3 to 2.15.0 - [Release notes](https://github.com/sylabs/sif/releases) - [Changelog](https://github.com/sylabs/sif/blob/main/.goreleaser.yml) - [Commits](sylabs/sif@v2.11.3...v2.15.0) Updates `github.com/testcontainers/testcontainers-go` from 0.21.0 to 0.25.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.21.0...v0.25.0) Updates `github.com/vbatts/tar-split` from 0.11.3 to 0.11.5 - [Release notes](https://github.com/vbatts/tar-split/releases) - [Commits](vbatts/tar-split@v0.11.3...v0.11.5) Updates `google.golang.org/grpc` from 1.57.0 to 1.58.3 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.57.0...v1.58.3) --- updated-dependencies: - dependency-name: github.com/CycloneDX/cyclonedx-go dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/cenkalti/backoff/v4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/containerd/containerd dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/docker/distribution dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/docker/docker-credential-helpers dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/go-git/go-billy/v5 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/go-git/go-git/v5 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/google/go-cmp dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/google/go-containerregistry dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/google/uuid dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/jinzhu/copier dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/klauspost/compress dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/mattn/go-runewidth dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/moby/patternmatcher dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/opencontainers/runc dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/pierrec/lz4/v4 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/skeema/knownhosts dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/spdx/tools-golang dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/spf13/afero dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/spf13/cast dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/sylabs/sif/v2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/testcontainers/testcontainers-go dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/vbatts/tar-split dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
failure:update-dependencies
An issue filed automatically when updating buildpack.toml dependencies fails in a workflow
label
Oct 12, 2023
Looks like these dependencies are updatable in another way, so this is no longer needed. |
dependabot
bot
deleted the
dependabot/go_modules/go-modules-d51e0b6d56
branch
October 16, 2023 20:36
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
failure:update-dependencies
An issue filed automatically when updating buildpack.toml dependencies fails in a workflow
semver:patch
A change requiring a patch version bump
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the go-modules group with 25 updates:
0.7.1
0.7.2
4.2.0
4.2.1
1.7.0
1.7.7
2.8.2+incompatible
2.8.3+incompatible
0.7.0
0.8.0
1.4.2
1.4.3
5.4.1
5.5.0
5.6.1
5.9.0
0.5.9
0.6.0
0.15.1
0.16.1
1.3.0
1.3.1
0.3.5
0.4.0
1.16.5
1.17.0
0.0.14
0.0.15
0.5.0
0.6.0
1.1.5
1.1.9
4.1.17
4.1.18
1.2.0
1.2.1
0.5.0
0.5.3
1.9.5
1.10.0
1.5.0
1.5.1
2.11.3
2.15.0
0.21.0
0.25.0
0.11.3
0.11.5
1.57.0
1.58.3
Updates
github.com/CycloneDX/cyclonedx-go
from 0.7.1 to 0.7.2Release notes
Sourced from github.com/CycloneDX/cyclonedx-go's releases.
Commits
83031d6
Merge pull request #117 from CycloneDX/dependabot/github_actions/golangci/gol...8b51c39
build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.00ed4535
Merge pull request #114 from CycloneDX/dependabot/github_actions/goreleaser/g...6360fe1
build(deps): bump goreleaser/goreleaser-action from 4.3.0 to 4.4.05c1db8e
Merge pull request #113 from CycloneDX/dependabot/github_actions/actions/setu...d772b54
build(deps): bump actions/setup-go from 4.0.1 to 4.1.03d592d2
Merge pull request #112 from CycloneDX/dependabot/docker/gitpod/workspace-go-...668553d
build(deps): bump gitpod/workspace-go fromd7a41f5
tof37c673
fdeec7e
Merge pull request #111 from CycloneDX/idea-project-icon4e20914
misc(dx): add project icon for intellij and golandUpdates
github.com/cenkalti/backoff/v4
from 4.2.0 to 4.2.1Commits
a04a6fe
set minimum permissions for go.yamla214dad
spelling: intervalaf9bd1c
spelling: foundUpdates
github.com/containerd/containerd
from 1.7.0 to 1.7.7Release notes
Sourced from github.com/containerd/containerd's releases.
... (truncated)
Commits
8c08766
Merge pull request #9194 from dcantah/release-notes-1.7.7a34fa56
Prepare release notes for v1.7.78664fca
Merge pull request #9149 from jsturtevant/cherry-pick-9142-on-1-76ca0aeb
Allow for images with artifacts to pull72e0200
Merge pull request #9193 from vvoland/remotes-docker-mounted-fix-1.7814f6c2
Merge pull request #9134 from Kern--/release/1.7781d395
Merge pull request #9188 from dmcgowan/backport-1.7-localhost-http-fallback7df492a
remotes/docker: Fix MountedFrom prefixed with target repository7779ce6
remotes: always try to establish tls connection when tls configuredb3db314
Bump x/net to 0.13Updates
github.com/docker/distribution
from 2.8.2+incompatible to 2.8.3+incompatibleRelease notes
Sourced from github.com/docker/distribution's releases.
Commits
4772604
Merge pull request #4088 from distribution/2.8.3-release-notesa4fa699
Add v2.8.3 release notes1eb2c30
Merge pull request #4068 from milosgajdos/2_8-dont-close-request-body5e6b1b5
Do not close HTTP request body in HTTP handler2b76378
Merge pull request #4064 from thaJeztah/2.8_backport_nodigestset29b00e8
digestset: deprecate package in favor of go-digest/digestsetd1ab243
[release/2.8] vendor: github.com/opencontainers/go-digest v1.0.011eb419
Merge pull request #4063 from thaJeztah/2.8_backport_switch_reference3dda067
deprecate reference package, migrate to github.com/distribution/referenceda05539
Merge pull request #4053 from thaJeztah/2.8_backport_set-content-type-client-...Updates
github.com/docker/docker-credential-helpers
from 0.7.0 to 0.8.0Release notes
Sourced from github.com/docker/docker-credential-helpers's releases.
Commits
8396edb
Merge pull request #297 from thaJeztah/update_go_1.20.6a3d1ffc
update go to go1.20.6c03d56c
deb: update to golang bullseye7f48455
Merge pull request #294 from thaJeztah/use_designated_domains_step1a90e3fa
secretservice: use designated domains in tests (RFC2606)ffb3232
pass: use designated domains in tests (RFC2606)1050848
client: use designated domains in tests (RFC2606)7d66ae0
osxkeychain: use designated domains in tests (RFC2606)13475b4
credentials: use designated domains in tests (RFC2606)91af1de
registryurl: use designated domains in tests (RFC2606)Updates
github.com/gabriel-vasile/mimetype
from 1.4.2 to 1.4.3Release notes
Sourced from github.com/gabriel-vasile/mimetype's releases.
Commits
e64d6bd
enable reusing records in csv/tsv detection (#443)b4da7ba
Bump the gomod group with 1 update (#441)918baec
Bump the github-actions group with 4 updates (#442)9df6903
Switch csv and tsv method 'sv' from ReadAll() to stream each record with Read...85b2cdc
Merge pull request #414 from gabriel-vasile/dependabot/github_actions/github-...24e5745
Merge pull request #412 from gabriel-vasile/dependabot/go_modules/gomod-939bd...6bd9427
Bump the github-actions group with 5 updates4f0da4f
Bump the gomod group with 1 update1a4b844
Group all dependabot PRs together (#409)f5a14c2
Remove old travis build status link from readme (#407)Updates
github.com/go-git/go-billy/v5
from 5.4.1 to 5.5.0Release notes
Sourced from github.com/go-git/go-billy/v5's releases.
Commits
5c1dfec
Merge pull request #34 from pjbgf/bump-scj3994cd7
osfs: Add WithDeduplicatePathe223a66
Bump github.com/cyphar/filepath-securejoinca80085
Merge pull request #33 from pjbgf/default74a6e60
Re-introduce osfs.Default1d4d3d3
Merge pull request #31 from pjbgf/new-osfs3c59de8
osfs: Add new BoundOS typedafe8bc
build: Bump Go to 1.19326c59f
Merge pull request #30 from pjbgf/updatesc88853b
*: Add CodeQL workflowUpdates
github.com/go-git/go-git/v5
from 5.6.1 to 5.9.0Release notes
Sourced from github.com/go-git/go-git/v5's releases.
... (truncated)
Commits
e24e0f7
*: Bump go-billy to v5.5.0ff0bd08
Merge pull request #837 from pjbgf/bumpcbbeb49
*: Bump to Go 1.19cf3a75c
*: Bump dependencies51e9c9f
Merge pull request #835 from matejrisek/feature/do-not-swallow-vcs-host-errors5ad72db
plumbing: Do not swallow http message coming from VCS providers.0377d06
Merge pull request #821 from daolis/bug/resetfix753b0d5
git: worktree, reset ignored files that are part of the worktree: Fixes #819cd3a21c
Merge pull request #832 from svghadi/CVE-2023-37788f71a449
*: Bump goproxy dep. Fixes #826Updates
github.com/google/go-cmp
from 0.5.9 to 0.6.0Release notes
Sourced from github.com/google/go-cmp's releases.
Commits
c3ad843
Add cmpopts.EquateComparable (#340)e250a55
Use of hotlinking of Go identifiers (#337)8a3e8dd
set workflow permission to read-only (#327)8cea5de
Pin GitHub action versions (#332)3bb304a
Run tests for Go 1.20 version (#322)571a56b
Remove purego fallbacks (#325)Updates
github.com/google/go-containerregistry
from 0.15.1 to 0.16.1Release notes
Sourced from github.com/google/go-containerregistry's releases.
... (truncated)
Commits
a54d642
fix: pin to goreleaser v1.18 to unblock release (#1763)ea19b57
Return OCI Index content-type for referrers response (#1762)b850480
Drop localhost to support crane registry serve in a container (#1746)fe268b7
Don't try cross-origin mounting against dockerhub (#1743)2472cbb
Let the filesystem handle atomicity (#1735)db818dc
Use RWLock, limit scope of locking, write digest first (#1734)44a6e2e
Allow concurrent blob Sets, use RWMutex (#1733)9010ce1
Correct crane registry help text (#1732)03ad2ac
add --blobs-to-disk to 'crane registry serve' (#1731)4e4b03a
Don't load into daemon if the image already exists (#1724)Updates
github.com/google/uuid
from 1.3.0 to 1.3.1Release notes
Sourced from github.com/google/uuid's releases.
Changelog
Sourced from github.com/google/uuid's changelog.
Commits
b3cae7c
chore(master): release 1.3.1 (#127)7b8f57c
fix(ci): switch to release-please app (#126)