-
Notifications
You must be signed in to change notification settings - Fork 17
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Bump the go-modules group with 13 updates #600
Closed
Closed
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Bumps the go-modules group with 13 updates: | Package | From | To | | --- | --- | --- | | [github.com/CycloneDX/cyclonedx-go](https://github.com/CycloneDX/cyclonedx-go) | `0.7.2` | `0.8.0` | | [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.6` | `1.3.7` | | [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.10` | `1.7.11` | | [github.com/google/uuid](https://github.com/google/uuid) | `1.4.0` | `1.5.0` | | [github.com/opencontainers/runc](https://github.com/opencontainers/runc) | `1.1.10` | `1.1.11` | | [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) | `3.23.11` | `3.23.12` | | [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.15.0` | `2.15.1` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.26.0` | `0.27.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.5.0` | `0.6.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.15.0` | `0.16.0` | | [golang.org/x/tools](https://github.com/golang/tools) | `0.16.0` | `0.16.1` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.59.0` | `1.60.1` | | google.golang.org/protobuf | `1.31.0` | `1.32.0` | Updates `github.com/CycloneDX/cyclonedx-go` from 0.7.2 to 0.8.0 - [Release notes](https://github.com/CycloneDX/cyclonedx-go/releases) - [Changelog](https://github.com/CycloneDX/cyclonedx-go/blob/master/.goreleaser.yml) - [Commits](CycloneDX/cyclonedx-go@v0.7.2...v0.8.0) Updates `github.com/cloudflare/circl` from 1.3.6 to 1.3.7 - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.3.6...v1.3.7) Updates `github.com/containerd/containerd` from 1.7.10 to 1.7.11 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v1.7.10...v1.7.11) Updates `github.com/google/uuid` from 1.4.0 to 1.5.0 - [Release notes](https://github.com/google/uuid/releases) - [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md) - [Commits](google/uuid@v1.4.0...v1.5.0) Updates `github.com/opencontainers/runc` from 1.1.10 to 1.1.11 - [Release notes](https://github.com/opencontainers/runc/releases) - [Changelog](https://github.com/opencontainers/runc/blob/v1.1.11/CHANGELOG.md) - [Commits](opencontainers/runc@v1.1.10...v1.1.11) Updates `github.com/shirou/gopsutil/v3` from 3.23.11 to 3.23.12 - [Release notes](https://github.com/shirou/gopsutil/releases) - [Commits](shirou/gopsutil@v3.23.11...v3.23.12) Updates `github.com/sylabs/sif/v2` from 2.15.0 to 2.15.1 - [Release notes](https://github.com/sylabs/sif/releases) - [Changelog](https://github.com/sylabs/sif/blob/main/.goreleaser.yml) - [Commits](sylabs/sif@v2.15.0...v2.15.1) Updates `github.com/testcontainers/testcontainers-go` from 0.26.0 to 0.27.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.26.0...v0.27.0) Updates `golang.org/x/sync` from 0.5.0 to 0.6.0 - [Commits](golang/sync@v0.5.0...v0.6.0) Updates `golang.org/x/sys` from 0.15.0 to 0.16.0 - [Commits](golang/sys@v0.15.0...v0.16.0) Updates `golang.org/x/tools` from 0.16.0 to 0.16.1 - [Release notes](https://github.com/golang/tools/releases) - [Commits](golang/tools@v0.16.0...v0.16.1) Updates `google.golang.org/grpc` from 1.59.0 to 1.60.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.59.0...v1.60.1) Updates `google.golang.org/protobuf` from 1.31.0 to 1.32.0 --- updated-dependencies: - dependency-name: github.com/CycloneDX/cyclonedx-go dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/cloudflare/circl dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/containerd/containerd dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/google/uuid dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/opencontainers/runc dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/shirou/gopsutil/v3 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/sylabs/sif/v2 dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/testcontainers/testcontainers-go dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sync dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sys dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/tools dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/protobuf dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
failure:update-dependencies
An issue filed automatically when updating buildpack.toml dependencies fails in a workflow
label
Jan 4, 2024
Looks like these dependencies are updatable in another way, so this is no longer needed. |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Labels
failure:update-dependencies
An issue filed automatically when updating buildpack.toml dependencies fails in a workflow
semver:patch
A change requiring a patch version bump
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the go-modules group with 13 updates:
0.7.2
0.8.0
1.3.6
1.3.7
1.7.10
1.7.11
1.4.0
1.5.0
1.1.10
1.1.11
3.23.11
3.23.12
2.15.0
2.15.1
0.26.0
0.27.0
0.5.0
0.6.0
0.15.0
0.16.0
0.16.0
0.16.1
1.59.0
1.60.1
1.31.0
1.32.0
Updates
github.com/CycloneDX/cyclonedx-go
from 0.7.2 to 0.8.0Release notes
Sourced from github.com/CycloneDX/cyclonedx-go's releases.
Commits
b9654ae
Merge pull request #90 from CycloneDX/spec-v1.564eb0c8
fix: remove format linters that require extra toolingc7a84ac
feat(spec1-5): handle deprecation of toolsf856daa
feat(spec1-5): add support for formulation2fbde0e
feat(spec1-5): add support for identity, occurrences, and callstack evidence61dd91e
feat(spec1-5): add support for machine learningf831960
feat(spec1-5): updatevalid-vulnerability
test snapshotsfe3a904
feat(spec1-5): add support for ssvc scoring method7d2713f
feat(spec1-5): add support for vulnerability proof of concept2ae5445
feat(spec1-5): add support for additional compositions and composition identityUpdates
github.com/cloudflare/circl
from 1.3.6 to 1.3.7Release notes
Sourced from github.com/cloudflare/circl's releases.
Commits
c48866b
Releasing CIRCL v1.3.775ef91e
kyber: remove division by q in ciphertext compression899732a
build(deps): bump golang.org/x/cryptoUpdates
github.com/containerd/containerd
from 1.7.10 to 1.7.11Release notes
Sourced from github.com/containerd/containerd's releases.
... (truncated)
Commits
64b8a81
Merge pull request #9491 from dmcgowan/prepare-1.7.11ea5a477
Merge pull request #9352 from thaJeztah/1.7_update_golang_1.20.1167d356c
Merge pull request from GHSA-7ww5-4wqc-m92cdfae68b
Prepare release notes for v1.7.11de6d8a8
Merge pull request #9482 from ambarve/sn_cleanup_1.7ed7c689
Don't block snapshot garbage collection on Remove failures467de56
Merge pull request #9481 from ruiwen-zhao/cri-ud94f8ff
Merge pull request #9483 from dmcgowan/backport-1.7-fix-otel-http1fdefdd
Add warning for CRIU config usage8e06899
Merge pull request #9479 from ruiwen-zhao/cri-api-warningUpdates
github.com/google/uuid
from 1.4.0 to 1.5.0Release notes
Sourced from github.com/google/uuid's releases.
Changelog
Sourced from github.com/google/uuid's changelog.
Commits
4d47f8e
chore(master): release 1.5.0 (#145)9ee7366
feat: Validate UUID without creating new UUID (#141)b35aa6a
add uuid version 6 and 7 (#139)Updates
github.com/opencontainers/runc
from 1.1.10 to 1.1.11Release notes
Sourced from github.com/opencontainers/runc's releases.
Changelog
Sourced from github.com/opencontainers/runc's changelog.
Commits
4bccb38
VERSION: release 1.1.11930fde5
Merge pull request #4144 from cyphar/1.1-ns-path-handling617db78
configs: make id mappings int64 to better handle 32-bite65d4ca
specconv: temporarily allow userns path and mapping if they match2dd8368
integration: add mega-test for joining namespaces8f8cb45
configs: disallow ambiguous userns and timens configurations0c8e2cc
*: actually support joining a userns with a new container75d99b4
Merge pull request #4131 from harche/backport87792ce
libct/cg: add swapOnlyUsage in MemoryStats4f13093
Merge pull request #4140 from thaJeztah/1.1_backport_update_securejoinUpdates
github.com/shirou/gopsutil/v3
from 3.23.11 to 3.23.12Release notes
Sourced from github.com/shirou/gopsutil/v3's releases.
Commits
df3c7bd
Merge pull request #1573 from scop/feat/udev-fs-labeladaeba0
feat(disk): look for filesystem labels from udev on Linux4870f6f
Merge pull request #1569 from scop/perf/regex-compile08afc01
Merge pull request #1570 from scop/perf/unnecessary-regexps11bc5b3
Avoid some uses of regexps362fa4b
Avoid repeated regexp compilations108235a
Merge pull request #1561 from keeword/masterf308985
Merge pull request #1563 from shirou/dependabot/github_actions/actions/upload...5ce87a6
chore(deps): bump actions/upload-artifact from 3.1.3 to 4.0.04b820ed
Merge pull request #1564 from shirou/revert-1559-dependabot/github_actions/ac...Updates
github.com/sylabs/sif/v2
from 2.15.0 to 2.15.1Release notes
Sourced from github.com/sylabs/sif/v2's releases.
Commits
c428dc6
Merge pull request #341 from tri-adam/bump-crypto3af14f4
build(deps): bump github.com/ProtonMail/go-crypto from v0.0.0-20230717121422-...4fa5c1d
Merge pull request #339 from sylabs/dependabot/go_modules/main/github.com/sec...cb18ad9
refactor: adapt to breaking change in dsse package702020f
build(deps): bump github.com/secure-systems-lab/go-securesystemslibbb85aa2
build(deps): bump golang.org/x/crypto from 0.15.0 to 0.17.0 (#338)3685695
build(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 (#337)252b6fb
build(deps): bump github.com/sigstore/sigstore from 1.7.5 to 1.7.6 (#336)85920b1
build(deps): bump github.com/google/go-containerregistry (#335)a8b0ecf
build(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#334)Updates
github.com/testcontainers/testcontainers-go
from 0.26.0 to 0.27.0Release notes
Sourced from github.com/testcontainers/testcontainers-go's releases.
... (truncated)
Commits
8d0f53a
chore: use new version (v0.27.0) in modules and examplesc3a1834
chore: do not read config but instead pass the hub prefix to the prependHub m...1bac302
fix: remove docker.io from Ryuk image name (#2046)61a37cb
adds gotestsum to install tools (#2043)1c45958
Add neo4j license agreement customization options (#2036)974afd9
chore: bump Ryuk to 0.6.0 (#2040)cb51b9b
chore(deps): bump github.com/containerd/containerd from 1.7.7 to 1.7.11 (#2011)9f68760
feat: support configuring Ryuk verbose mode at config level (#2038)5faf6f4
chore: lookup exposed ports in the image from Config, not from ContainerConfi...a9f0ac8
chore(deps): bump golang.org/x/crypto to 0.17.0 in /modules (#2006)Updates
golang.org/x/sync
from 0.5.0 to 0.6.0Commits
59c1ca1
errgroup: add reference to sync.WaitGroupUpdates
golang.org/x/sys
from 0.15.0 to 0.16.0Commits
0829ab1
windows: add SetFileValidData32cdffc
unix: don't redefine constants already defined in glibc headersf0c7190
unix: remove extra trailing newlines in zsyscall_openbsd_*.go5ff87d7
unix: add Netfilter and NFTables constantsUpdates
golang.org/x/tools
from 0.16.0 to 0.16.1Commits
2acb2e6
gopls/internal/test/marker: minor clean up of marker test doc28b92af
internal/typeparams: eliminate remainining compatibility shimsee35f8e
gopls/internal/lsp/source: hovering over broken packages is not an error67611a1
internal/typeparams: eliminate type aliases23c86e8
internal/typeparams: delete const Enabled=true and simplifye46688f
gopls/internal/analysis/fillstruct: don't panic with invalid fields8bd7553
gopls/internal/util/goversion: warn about EOL for Go 1.18bc9cd15
gopls/internal/settings: remove MemoryMode optionbbc30f1
gopls/protocol: Allow AnnotatedTextEditsf40889d
gopls/internal/analysis/stubmethods: fix OOB panic in fromValueSpecUpdates
google.golang.org/grpc
from 1.59.0 to 1.60.1Release notes
Sourced from google.golang.org/grpc's releases.
Commits
dbbcf59
Update version.go to 1.60.1 (#6865)6e384cf
Cherry-pick #6856 to v1.60.x release branch (#6864)6430548
Change version to 1.60.1-dev (#6793)297d8dd
Cherry-pick #6841 to v1.60.x release branch (#6847)3580447
Change version to 1.60.0 (#6792)71e67a9
Cherry-pick #6834 to v1.60.x release branch (#6839)cb6581d
Cherry-pick #6804 and dependencies to v1.60.x release branch (#6838)dd39cdb
credentials: if not set, restrict to TLS v1.2+ and CipherSuites per RFC7540 (...8645f95
resolver: remove ClientConn.NewServiceConfig (#6784)8b17a4d
vet: various cleanups (#6780)Updates
google.golang.org/protobuf
from 1.31.0 to 1.32.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditions