Bump the go-modules group across 1 directory with 35 updates #797

dependabot · 2024-11-11T20:08:36Z

Bumps the go-modules group with 23 updates in the / directory:

Package	From	To
github.com/onsi/gomega	`1.34.1`	`1.35.1`
github.com/paketo-buildpacks/occam	`0.18.7`	`0.18.8`
github.com/paketo-buildpacks/packit/v2	`2.14.2`	`2.15.0`
dario.cat/mergo	`1.0.0`	`1.0.1`
github.com/Masterminds/semver/v3	`3.2.1`	`3.3.0`
github.com/Masterminds/sprig/v3	`3.2.3`	`3.3.0`
github.com/Microsoft/hcsshim	`0.12.5`	`0.12.9`
github.com/ProtonMail/go-crypto	`1.1.0-alpha.5-proton`	`1.1.2`
github.com/andybalholm/brotli	`1.1.0`	`1.1.1`
github.com/bmatcuk/doublestar/v4	`4.6.1`	`4.7.1`
github.com/cloudflare/circl	`1.3.9`	`1.5.0`
github.com/cpuguy83/dockercfg	`0.3.1`	`0.3.2`
github.com/cyphar/filepath-securejoin	`0.3.1`	`0.3.4`
github.com/docker/cli	`27.1.1+incompatible`	`27.3.1+incompatible`
github.com/gabriel-vasile/mimetype	`1.4.5`	`1.4.6`
github.com/go-git/go-billy/v5	`5.5.0`	`5.6.0`
github.com/klauspost/compress	`1.17.9`	`1.17.11`
github.com/sylabs/sif/v2	`2.18.0`	`2.20.0`
github.com/tklauser/numcpus	`0.8.0`	`0.9.0`
github.com/vbatts/tar-split	`0.11.5`	`0.11.6`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`0.53.0`	`0.57.0`
golang.org/x/mod	`0.20.0`	`0.22.0`
golang.org/x/sync	`0.8.0`	`0.9.0`

Updates github.com/onsi/gomega from 1.34.1 to 1.35.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.35.1

1.35.1

Fixes

Export EnforceDefaultTimeoutsWhenUsingContexts and DisableDefaultTimeoutsWhenUsingContext [ca36da1]

v1.35.0

1.35.0

Features

You can now call EnforceDefaultTimeoutsWhenUsingContexts() to have Eventually honor the default timeout when passed a context. (prior to this you had to expclility add a timeout) [e4c4265]

You can call StopTrying(message).Successfully() to abort a Consistently early without failure [eeca931]

Fixes

Stop memoizing the result of HaveField to avoid unexpected errors when used with async assertions. [3bdbc4e]

Maintenance

Bump all dependencies [a05a416]

v1.34.2

1.34.2

Require Go 1.22+

Maintenance

bump ginkgo as well [c59c6dc]

bump to go 1.22 - remove x/exp dependency [8158b99]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.35.1

Fixes

Export EnforceDefaultTimeoutsWhenUsingContexts and DisableDefaultTimeoutsWhenUsingContext [ca36da1]

1.35.0

Features

You can now call EnforceDefaultTimeoutsWhenUsingContexts() to have Eventually honor the default timeout when passed a context. (prior to this you had to expclility add a timeout) [e4c4265]

You can call StopTrying(message).Successfully() to abort a Consistently early without failure [eeca931]

Fixes

Stop memoizing the result of HaveField to avoid unexpected errors when used with async assertions. [3bdbc4e]

Maintenance

Bump all dependencies [a05a416]

1.34.2

Require Go 1.22+

Maintenance

bump ginkgo as well [c59c6dc]

bump to go 1.22 - remove x/exp dependency [8158b99]

Commits

9f5a208 v1.35.1
ca36da1 Export EnforceDefaultTimeoutsWhenUsingContexts and DisableDefaultTimeoutsWhen...
d6331f9 v1.35.0
5deaf23 fix tests, but like actually this time
eeca931 Add Successfully() to StopTrying() to signal that Consistently can end early ...
3bdbc4e stop memoizing result of HaveField
e35358d sheepishly fix broken test. thanks CI
1b717d7 grrr. go mod tidy
a05a416 bump all dependencies
e4c4265 Add EnforceDefaultTimeoutsWhenUsingContexts()
Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/occam from 0.18.7 to 0.18.8

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.18.8

What's Changed

Bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @dependabot in paketo-buildpacks/occam#309

Updates go mod toolchain version to 1.22.5 by @paketo-bot in paketo-buildpacks/occam#313

Bump github.com/google/go-containerregistry from 0.19.2 to 0.20.0 by @dependabot in paketo-buildpacks/occam#315

Updates github-config by @paketo-bot in paketo-buildpacks/occam#316

Bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 by @dependabot in paketo-buildpacks/occam#317

Updates go mod version to 1.22.5 by @paketo-bot in paketo-buildpacks/occam#318

Bump github.com/onsi/gomega from 1.33.1 to 1.34.0 by @dependabot in paketo-buildpacks/occam#321

Bump github.com/onsi/gomega from 1.34.0 to 1.34.1 by @dependabot in paketo-buildpacks/occam#322

Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @dependabot in paketo-buildpacks/occam#323

Bump github.com/paketo-buildpacks/packit/v2 from 2.14.0 to 2.14.1 by @dependabot in paketo-buildpacks/occam#324

Bump github.com/paketo-buildpacks/packit/v2 from 2.14.1 to 2.14.2 by @dependabot in paketo-buildpacks/occam#326

Updates go mod version to 1.22.6 by @paketo-bot in paketo-buildpacks/occam#325

Updates go mod version to 1.23.0 by @paketo-bot in paketo-buildpacks/occam#328

Bump docker to version 26.1.5 to fix CVE-2024-41110 by @jericop in paketo-buildpacks/occam#331

New Contributors

@jericop made their first contribution in paketo-buildpacks/occam#331

Full Changelog: paketo-buildpacks/occam@v0.18.7...v0.18.8

Commits

1193f3c Bump docker to version 26.1.5 to fix CVE-2024-41110
5cd4ede Updates go mod version to 1.23.0
2e5b930 Updates go mod version to 1.22.6
815b014 Bump github.com/paketo-buildpacks/packit/v2 from 2.14.1 to 2.14.2
74a79fb Bump github.com/paketo-buildpacks/packit/v2 from 2.14.0 to 2.14.1
90134a5 Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2
653a6fb Bump github.com/onsi/gomega from 1.34.0 to 1.34.1
ed0e429 Bump github.com/onsi/gomega from 1.33.1 to 1.34.0
f467245 Updates go mod version to 1.22.5
c97acf2 Bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1
Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.14.2 to 2.15.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.15.0

What's Changed

Updates github-config by @paketo-bot in paketo-buildpacks/packit#597

SyftCLIScanner: support SBOM generation with syft CLI by @arjun024 in paketo-buildpacks/packit#602

Full Changelog: paketo-buildpacks/packit@v2.14.2...v2.15.0

Commits

1ab5b00 SyftCLIScanner: support SBOM generation with syft CLI
884a7b7 Update to fix linter
c3a3e6a Updating github-config
See full diff in compare view

Updates dario.cat/mergo from 1.0.0 to 1.0.1

Release notes

Sourced from dario.cat/mergo's releases.

v1.0.1

What's Changed

fixes issue #187 by @vsemichev in darccio/mergo#253

fix: WithoutDereference should respect non-nil struct pointers by @joshkaplinsky in darccio/mergo#251

New Contributors

@vsemichev made their first contribution in darccio/mergo#253

@joshkaplinsky made their first contribution in darccio/mergo#251

Full Changelog: darccio/mergo@v1.0.0...v1.0.1

Commits

59ea6a9 Merge pull request #251 from joshkaplinsky/joshkaplinsky/without-dereference-...
96f24af Merge pull request #253 from vsemichev/master
2f1a615 fixes issue #187. adds test to verify the fix.
4da170b fixes issue #187. attempt #3
a13a117 fixes issue #187. attempt #2
6b830ff fixes issue #187
f33862a WithoutDereference should respect structs
cde9f0e Merge pull request #246 from darccio/darccio/v1-frozen
f1e2fe5 chore: frozen v1
7f7b4af Update FUNDING.yml
Additional commits viewable in compare view

Updates github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.3.0

What's Changed

Fix: bad package in README by @sdelicata in Masterminds/semver#226

Updating the GitHub Actions and versions of Go used by @mattfarina in Masterminds/semver#229

Fix spelling in README by @robinschneider in Masterminds/semver#222

Adding go build cache to fuzz output by @mattfarina in Masterminds/semver#232

Add caching to fuzz testing by @mattfarina in Masterminds/semver#234

updating github actions by @mattfarina in Masterminds/semver#235

feat: nil version equality by @KnutZuidema in Masterminds/semver#213

add >= and <= by @grosser in Masterminds/semver#238

doc: hyphen range constraint without whitespace by @johnnychen94 in Masterminds/semver#216

Removing reference to vert by @mattfarina in Masterminds/semver#245

simplify StrictNewVersion by @grosser in Masterminds/semver#241

Updating the testing version of Go used by @mattfarina in Masterminds/semver#246

bumping min version in go.mod based on what's tested by @mattfarina in Masterminds/semver#248

Updating changelog for 3.3.0 by @mattfarina in Masterminds/semver#249

New Contributors

@sdelicata made their first contribution in Masterminds/semver#226

@robinschneider made their first contribution in Masterminds/semver#222

@KnutZuidema made their first contribution in Masterminds/semver#213

@grosser made their first contribution in Masterminds/semver#238

@johnnychen94 made their first contribution in Masterminds/semver#216

Full Changelog: Masterminds/semver@v3.2.1...v3.3.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

3.3.0 (2024-08-27)

Added

#238: Add LessThanEqual and GreaterThanEqual functions (thanks @grosser)

#213: nil version equality checking (thanks @KnutZuidema)

Changed

#241: Simplify StrictNewVersion parsing (thanks @grosser)

Testing support up through Go 1.23

Minimum version set to 1.21 as this is what's tested now

Fuzz testing now supports caching

Commits

e6e3d4d Merge pull request #249 from mattfarina/update-changelog-3.3.0
e80c4ea Updating changelog for 3.3.0
80427ad Merge pull request #248 from mattfarina/bump-min-version
b610837 bumping min version in go.mod based on what's tested
a4cccd8 Merge pull request #246 from mattfarina/bump-go-1.23
7c178cf Updating the testing version of Go used
29f94c1 Merge pull request #241 from grosser/grosser/validate
2cf1b16 Merge pull request #245 from mattfarina/remove-vert
b55476a Removing reference to vert
d07450b simplify StrictNewVersion
Additional commits viewable in compare view

Updates github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0

Release notes

Sourced from github.com/Masterminds/sprig/v3's releases.

v3.3.0

What's Changed

Updating the Go versions used in testing by @mattfarina in Masterminds/sprig#405

Change intial to initial. by @chrishalbert in Masterminds/sprig#391

Updating dependencies by @mattfarina in Masterminds/sprig#404

correct value by @jheyduk in Masterminds/sprig#376

Updating location of mergo by @mattfarina in Masterminds/sprig#406

feature: added sha512sum function by @itzik-elayev in Masterminds/sprig#400

docs: Add missing link to url functions by @carlpett in Masterminds/sprig#375

Update doc.go by @chey in Masterminds/sprig#369

Update mathf.md by @zzhu41 in Masterminds/sprig#290

Removing duplicate documentation by @mattfarina in Masterminds/sprig#407

Updating the changelog for the 3.3.0 release by @mattfarina in Masterminds/sprig#408

New Contributors

@chrishalbert made their first contribution in Masterminds/sprig#391

@jheyduk made their first contribution in Masterminds/sprig#376

@itzik-elayev made their first contribution in Masterminds/sprig#400

@carlpett made their first contribution in Masterminds/sprig#375

@chey made their first contribution in Masterminds/sprig#369

@zzhu41 made their first contribution in Masterminds/sprig#290

Full Changelog: Masterminds/sprig@v3.2.3...v3.3.0

Changelog

Sourced from github.com/Masterminds/sprig/v3's changelog.

Release 3.3.0 (2024-08-29)

Added

#400: added sha512sum function (thanks @itzik-elayev)

Changed

#407: Removed duplicate documentation (functions were documentated in 2 places)

#290: Corrected copy/paster oops in math documentation (thanks @zzhu41)

#369: Corrected template reference in docs (thanks @chey)

#375: Added link to URL documenation (thanks @carlpett)

#406: Updated the mergo dependency which had a breaking change (which was accounted for)

#376: Fixed documentation error (thanks @jheyduk)

#404: Updated dependency tree

#391: Fixed misspelling (thanks @chrishalbert)

#405: Updated Go versions used in testing

Commits

e708470 Merge pull request #408 from mattfarina/update-changelog-3.3
8fc4354 Updating the changelog for the 3.3.0 release
cb81a32 Merge pull request #407 from mattfarina/remove-dup-math-functions
2637693 Removing duplicate documentation
06b9a87 Merge pull request #290 from zzhu41/patch-1
e663ec6 Merge pull request #369 from chey/patch-1
bb2f73f Merge pull request #375 from carlpett/patch-1
f07659e Merge pull request #400 from itzik-elayev/master
98b35c1 Add closing bracket
7a88928 Merge pull request #406 from mattfarina/update-mergo
Additional commits viewable in compare view

Updates github.com/Microsoft/hcsshim from 0.12.5 to 0.12.9

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.9

What's Changed

[release/0.12] Update go to 1.22 + switch to using containerd/errdefs/pkg/errgrpc for grpc translation by @kiashok in microsoft/hcsshim#2301

Full Changelog: microsoft/hcsshim@v0.12.8...v0.12.9

v0.12.8

What's Changed

Fixing typo by @ritikaguptams in microsoft/hcsshim#2289

[release/0.12] Update containerd to v1.7.23 by @dmcgowan in microsoft/hcsshim#2295

Full Changelog: microsoft/hcsshim@v0.12.7...v0.12.8

v0.12.7

What's Changed

[release/0.12] Update pkg versions in go.mod by @kiashok in microsoft/hcsshim#2275

[release/0.12] Update runc version to 1.1.14 by @kiashok in microsoft/hcsshim#2271

Full Changelog: microsoft/hcsshim@v0.12.6...v0.12.7

v0.12.6

What's Changed

[release/0.12] Backport commits from hcsshim/main to update module versions by @kiashok in microsoft/hcsshim#2237

Full Changelog: microsoft/hcsshim@v0.12.5...v0.12.6

Commits

7392335 Switch to using containerd/errdefs/pkg/errgrpc for grpc translation
79d3f32 Update go to 1.22
05636b9 Update JOB_OBJECT_ALL_ACCESS and OpenJobObject (#2095)
1550628 mobve SILOOBJECT_BASIC_INFORMATION to winapi
bf52d58 fix SILOOBJECT_BASIC_INFORMATION alignment
8d48d87 Update containerd to v1.7.23 (#2295)
4ad298f Fixing typo (#2289)
86b5333 Bump golangci/golangci-lint-action from 4 to 6
5ae96f3 Update runc to v1.1.14
8f3fccd Update pkg versions
Additional commits viewable in compare view

Updates github.com/ProtonMail/go-crypto from 1.1.0-alpha.5-proton to 1.1.2

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

Release v1.1.2

What's Changed

Cleartext Framework: Exclude the line-ending separator when decoding plaintext by @lubux in ProtonMail/go-crypto#242

Full Changelog: ProtonMail/go-crypto@v1.1.1...v1.1.2

Release v1.1.2-proton

What's Changed

This release is v1.1.2 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

Release v1.1.1

What's Changed

Fix clearsign.Encode backwards compatibility #239 by @mdosch in ProtonMail/go-crypto#240

Full Changelog: ProtonMail/go-crypto@v1.1.0...v1.1.1

Release v1.1.1-proton

What's Changed

This release is v1.1.1 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

Release v1.1.0

What's Changed

This release adds full support for the new version of the OpenPGP standard, RFC 9580. In addition, the release introduces an improved non-backwards compatible v2 API. The API in the openpgp package remains fully backwards compatible while the new v2 API is located in a separate v2 package in openpgp.

For the full changes since v1.0.0, see the previous release notes. For the full changelog, see ProtonMail/go-crypto@v1.0.0...v1.1.0.

Changes since v1.1.0-beta.0:

Replace expiring curve448 integration test vector by @lubux

Validate input key size in SEIPDv2 decryption by @lubux

Changelog since v1.1.0-beta.0: ProtonMail/go-crypto@v1.1.0-beta.0...v1.1.0.

Release v1.1.0-proton

What's Changed

This release is v1.1.0 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

v1.1.0-beta.0-proton

This pre-release is v1.1.0-beta.0 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

v1.1.0-beta.0

What's Changed

Allow Salted S2K for high-entropy passphrases by @twiss in ProtonMail/go-crypto#219

fix data race in getEd25519Sk by @DmitriyMV in ProtonMail/go-crypto#220

Add back crypto.Signer support for ECDSA signing keys. by @doryiii in ProtonMail/go-crypto#227

... (truncated)

Commits

2d2c789 feat(cleartext): Do not include line ending separator in plaintext (#242)
f8b3f21 Remove cleartext Encode header argument #239 (#240)
b97cc3c feat: Validate input key size in SEIPDv2 decryption (#236)
20ab0e4 Replace expiring curve448 integration test vector (#235)
f6ad483 No v6 ECC keys with legacy OIDs (#234)
77090fe Fix ECDH using v6 keys (#233)
7852179 Add support for keyserver preferences and preferred keyserver (closes #206) (...
2add693 Add back crypto.Signer support for ECDSA signing keys (#227)
0f7b935 ci: Fix CI for v1 interoptest (#229)
b5837fa ci: Change gosop branch for gopenpgp-v2 to gosop-gopenpgp-v2 (#224)
Additional commits viewable in compare view

Updates github.com/andybalholm/brotli from 1.1.0 to 1.1.1

Commits

57434b5 Encoder: check for empty block
97e8583 matchfinder.M4: some refinements to scoring
See full diff in compare view

Updates github.com/bmatcuk/doublestar/v4 from 4.6.1 to 4.7.1

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Fixed FilepathGlob("")

To be consistent with filepath.Glob, FilepathGlob("") returns nil.

Added MatchUnvalidated, PathMatchUnvalidated

These functions provide a small performance improvement in cases where you don't care about whether or not the pattern is valid (maybe because you already ran ValidatePattern).

Commits

1e20c6d fixes #95 FilepathGlob("") should return nil
da152ef add docs for MatchUnvalidated, PathMatchUnvalidated
2832f67 closes #92 adds MatchUnvalidated
424062b added sponsor: MASV
See full diff in compare view

Updates github.com/cloudflare/circl from 1.3.9 to 1.5.0

Release notes

Sourced from github.com/cloudflare/circl's releases.

CIRCL v1.5.0

New: ML-DSA, Module-Lattice-based Digital Signature Algorithm.

What's Changed

kem: add X25519MLKEM768 TLS hybrid KEM by @bwesterb in cloudflare/circl#510

Create semgrep.yml by @hrushikeshdeshpande in cloudflare/circl#514

repo: Some fixes reported by CodeQL by @armfazh in cloudflare/circl#515

Add ML-DSA (FIPS204) by @bwesterb in cloudflare/circl#480

sign/mldsa: Add test for ML-DSA signature verification. by @armfazh in cloudflare/circl#517

Release v1.5.0 by @armfazh in cloudflare/circl#518

New Contributors

@hrushikeshdeshpande made their first contribution in cloudflare/circl#514

Full Changelog: cloudflare/circl@v1.4.0...v1.5.0

CIRCL v1.4.0

Changes

New: ML-KEM compatible with FIPS-203.

Commit History

eddilithium3: fix typos by @bwesterb in cloudflare/circl#503

Add ML-KEM (FIPS 203). by @bwesterb in cloudflare/circl#470

Add ML-KEM decapsulation key check. by @bwesterb in cloudflare/circl#507

Preparing for release v1.4.0 by @armfazh in cloudflare/circl#508

Full Changelog: cloudflare/circl@v1.3.9...v1.4.0

Commits

1310edf Release v1.5.0
0246d59 Add test for ML-DSA signature verification.
e2bbd01 Add ML-DSA (FIPS204) (#480)
2ba992f Reverting arm64 jobs since qemu can't run go1.23 binaries yet.
ab15f82 Updates golangci-lint to v1.61.0 and fixes code.
064a9ba Bump to go1.22 inner files and ci jobs.
7040592 Adding semgrepignore to also analyse test files.
51a9a33 Update semgrep.yml
cfbc696 Create semgrep.yml
2d6cd98 kem: add X25519MLKEM768 TLS hybrid KEM
Additional commits viewable in compare view

Updates github.com/containerd/errdefs from 0.1.0 to 0.3.0

Release notes

Sourced from github.com/containerd/errdefs's releases.

v0.3.0

This release splits the errdefs package into the github.com/containerd/errdefs package which only contains error definitions as well as basic functions to check for those definitions and the github.com/containerd/errdefs/pkg package which containers functionality for using the errdefs, such as error serialization and adding more data to errors.

What's Changed

Update GitHub Actions packages and runners by @austinvazquez in containerd/errdefs#20

Add errdefs/pkg package by @dmcgowan in containerd/errdefs#19

Full Changelog: containerd/errdefs@v0.2.0...v0.3.0

pkg/v0.3.0

What's Changed

Update pkg errodefs to v0.3.0 by @dmcgowan in containerd/errdefs#21

Full Changelog: containerd/errdefs@v0.3.0...pkg/v0.3.0

v0.2.0

What's Changed

Add more grpc types by @dmcgowan in containerd/errdefs#3

Split gRPC and HTTP error utility into seperate packages by @austinvazquez in containerd/errdefs#5

Fix Cancelled interface typo by @dmcgowan in containerd/errdefs#6

Add stack support by @dmcgowan in containerd/errdefs#8

Add a resolve error function to return first error by @dmcgowan in containerd/errdefs#9

Add support for custom error messages by @dmcgowan in containerd/errdefs#10

Add support for grpc error details and multiple errors by @dmcgowan in containerd/errdefs#7

Complete interface definitions for errors by @dmcgowan in containerd/errdefs#18

New Contributors

@austinvazquez made their first contribution in containerd/errdefs#5

Full Changelog: containerd/errdefs@v0.1.0...v0.2.0

Commits

9fd32fc Merge pull request #19 from dmcgowan/pkg-package
3dabb2b Merge pull request #20 from austinvazquez/upgrade-ci
303a6ea Update to Go 1.22.8 in CI
e70104e Upgrade to [email protected]
ffe5586 Upgrade to golangci/golangci-lint-action@v6
908b04b Upgrade to actions/checkout@v4
608b83c Upgrade to actions/setup-go@v5
8e82ae4 Upgrade macOS runner image to macOS 13
46a6522 Add errdefs/pkg package
02b65bc Merge pull request #18 from dmcgowan/add-missing-interfaces
Additional commits viewable in compare view

Updates github.com/cpuguy83/dockercfg from 0.3.1 to 0.3.2

Release notes

Sourced from github.com/cpuguy83/dockercfg's releases.

v0.3.2

What's Changed

chore: improve errors by @stevenh in cpuguy83/dockercfg#3

New Contributors

@stevenh made their first contribution in cpuguy83/dockercfg#3

Full Changelog: cpuguy83/dockercfg@v0.3.1...v0.3.2

Commits

a07c3d1 Merge pull request #3 from stevenh/chore/improve-errors
91bd66a chore: improve errors
See full diff in compare view

Updates github.com/cyphar/filepath-securejoin from 0.3.1 to 0.3.4

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.3.4

This release primarily includes a fix that blocked using filepath-securejoin in Kubernetes.

Previously, some testing mocks we had resulted in us doing import "testing" in non-_test.go code, which made some downstreams like Kubernetes unhappy. This has been fixed. (#32)

Thanks to all of the contributors who made this release possible:

Aleksa Sarai [email protected]

Stephen Kitt [email protected]

Signed-off-by: Aleksa Sarai [email protected]

v0.3.3

This release primarily includes fixes for spurious errors we hit when checking that directories created by MkdirAll "look right". Upon further consideration, these checks were fundamentally buggy and didn't offer any practical protection anyway.

The mode and owner verification logic in MkdirAll has been removed. This was originally intended to protect against some theoretical attacks but upon further consideration these protections don't actually buy us anything and they were causing spurious errors with more complicated filesystem setups.

The "is the created directory empty" logic in MkdirAll has also been removed. This was not causing us issues yet, but some pseudofilesystems (such as cgroup) create non-empty directories and so this logic would've been wrong for such cases.

Thanks to all of the contributors who made this release possible:

Aleksa Sarai [email protected]

Kir Kolyshkin [email protected]

Signed-off-by: Aleksa Sarai [email protected]

v0.3.2

This release includes a few fixes for MkdirAll when dealing with S_ISUID and S_ISGID, to solve a regression runc hit when switching to MkdirAll.

Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return an explicit error saying that those bits are ignored by mkdirat(2). In the past a different error was returned, but since the silent ignoring behaviour is codified in the man pages a more explicit error seems apt. While silently ignoring these bits would be the most compatible option, it could lead to users thinking their code sets these bits when it doesn't. Programs that need to deal with compatibility can mask the bits themselves. (#23, #25)

... (truncated)

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.3.4] - 2024-10-09

Fixed

Previously, some testing mocks we had resulted in us doing import "testing" in non-_test.go code, which made some downstreams like Kubernetes unhappy. This has been fixed. (#32)

[0.3.3] - 2024-09-30

Fixed

The mode and owner verification logic in MkdirAll has been removed. This was originally intended to protect against some theoretical attacks but upon further consideration these protections don't actually buy us anything and they were causing spurious errors with more complicated filesystem setups.

The "is the created directory empty" logic in MkdirAll has also been removed. This was not causing us issues yet, but some pseudofilesystems (such as cgroup) create non-empty directories and so this logic wou...
Description has been truncated

Bumps the go-modules group with 23 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.34.1` | `1.35.1` | | [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.18.7` | `0.18.8` | | [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.14.2` | `2.15.0` | | [dario.cat/mergo](https://github.com/imdario/mergo) | `1.0.0` | `1.0.1` | | [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.2.1` | `3.3.0` | | [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig) | `3.2.3` | `3.3.0` | | [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.12.5` | `0.12.9` | | [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.1.0-alpha.5-proton` | `1.1.2` | | [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.1.0` | `1.1.1` | | [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.6.1` | `4.7.1` | | [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.9` | `1.5.0` | | [github.com/cpuguy83/dockercfg](https://github.com/cpuguy83/dockercfg) | `0.3.1` | `0.3.2` | | [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.3.1` | `0.3.4` | | [github.com/docker/cli](https://github.com/docker/cli) | `27.1.1+incompatible` | `27.3.1+incompatible` | | [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.5` | `1.4.6` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.5.0` | `5.6.0` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.9` | `1.17.11` | | [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.18.0` | `2.20.0` | | [github.com/tklauser/numcpus](https://github.com/tklauser/numcpus) | `0.8.0` | `0.9.0` | | [github.com/vbatts/tar-split](https://github.com/vbatts/tar-split) | `0.11.5` | `0.11.6` | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.53.0` | `0.57.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.20.0` | `0.22.0` | | [golang.org/x/sync](https://github.com/golang/sync) | `0.8.0` | `0.9.0` | Updates `github.com/onsi/gomega` from 1.34.1 to 1.35.1 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.34.1...v1.35.1) Updates `github.com/paketo-buildpacks/occam` from 0.18.7 to 0.18.8 - [Release notes](https://github.com/paketo-buildpacks/occam/releases) - [Commits](paketo-buildpacks/occam@v0.18.7...v0.18.8) Updates `github.com/paketo-buildpacks/packit/v2` from 2.14.2 to 2.15.0 - [Release notes](https://github.com/paketo-buildpacks/packit/releases) - [Commits](paketo-buildpacks/packit@v2.14.2...v2.15.0) Updates `dario.cat/mergo` from 1.0.0 to 1.0.1 - [Release notes](https://github.com/imdario/mergo/releases) - [Commits](darccio/mergo@v1.0.0...v1.0.1) Updates `github.com/Masterminds/semver/v3` from 3.2.1 to 3.3.0 - [Release notes](https://github.com/Masterminds/semver/releases) - [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md) - [Commits](Masterminds/semver@v3.2.1...v3.3.0) Updates `github.com/Masterminds/sprig/v3` from 3.2.3 to 3.3.0 - [Release notes](https://github.com/Masterminds/sprig/releases) - [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md) - [Commits](Masterminds/sprig@v3.2.3...v3.3.0) Updates `github.com/Microsoft/hcsshim` from 0.12.5 to 0.12.9 - [Release notes](https://github.com/Microsoft/hcsshim/releases) - [Commits](microsoft/hcsshim@v0.12.5...v0.12.9) Updates `github.com/ProtonMail/go-crypto` from 1.1.0-alpha.5-proton to 1.1.2 - [Release notes](https://github.com/ProtonMail/go-crypto/releases) - [Commits](ProtonMail/go-crypto@v1.1.0-alpha.5-proton...v1.1.2) Updates `github.com/andybalholm/brotli` from 1.1.0 to 1.1.1 - [Commits](andybalholm/brotli@v1.1.0...v1.1.1) Updates `github.com/bmatcuk/doublestar/v4` from 4.6.1 to 4.7.1 - [Release notes](https://github.com/bmatcuk/doublestar/releases) - [Commits](bmatcuk/doublestar@v4.6.1...v4.7.1) Updates `github.com/cloudflare/circl` from 1.3.9 to 1.5.0 - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.3.9...v1.5.0) Updates `github.com/containerd/errdefs` from 0.1.0 to 0.3.0 - [Release notes](https://github.com/containerd/errdefs/releases) - [Commits](containerd/errdefs@v0.1.0...v0.3.0) Updates `github.com/cpuguy83/dockercfg` from 0.3.1 to 0.3.2 - [Release notes](https://github.com/cpuguy83/dockercfg/releases) - [Commits](cpuguy83/dockercfg@v0.3.1...v0.3.2) Updates `github.com/cyphar/filepath-securejoin` from 0.3.1 to 0.3.4 - [Release notes](https://github.com/cyphar/filepath-securejoin/releases) - [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md) - [Commits](cyphar/filepath-securejoin@v0.3.1...v0.3.4) Updates `github.com/docker/cli` from 27.1.1+incompatible to 27.3.1+incompatible - [Commits](docker/cli@v27.1.1...v27.3.1) Updates `github.com/gabriel-vasile/mimetype` from 1.4.5 to 1.4.6 - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.5...v1.4.6) Updates `github.com/go-git/go-billy/v5` from 5.5.0 to 5.6.0 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.5.0...v5.6.0) Updates `github.com/klauspost/compress` from 1.17.9 to 1.17.11 - [Release notes](https://github.com/klauspost/compress/releases) - [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml) - [Commits](klauspost/compress@v1.17.9...v1.17.11) Updates `github.com/moby/sys/user` from 0.2.0 to 0.3.0 - [Release notes](https://github.com/moby/sys/releases) - [Commits](moby/sys@user/v0.2.0...user/v0.3.0) Updates `github.com/sylabs/sif/v2` from 2.18.0 to 2.20.0 - [Release notes](https://github.com/sylabs/sif/releases) - [Changelog](https://github.com/sylabs/sif/blob/main/.goreleaser.yml) - [Commits](sylabs/sif@v2.18.0...v2.20.0) Updates `github.com/tklauser/numcpus` from 0.8.0 to 0.9.0 - [Release notes](https://github.com/tklauser/numcpus/releases) - [Commits](tklauser/numcpus@v0.8.0...v0.9.0) Updates `github.com/vbatts/tar-split` from 0.11.5 to 0.11.6 - [Release notes](https://github.com/vbatts/tar-split/releases) - [Commits](vbatts/tar-split@v0.11.5...v0.11.6) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.53.0 to 0.57.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.53.0...zpages/v0.57.0) Updates `go.opentelemetry.io/otel` from 1.28.0 to 1.32.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.32.0) Updates `go.opentelemetry.io/otel/metric` from 1.28.0 to 1.32.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.32.0) Updates `go.opentelemetry.io/otel/trace` from 1.28.0 to 1.32.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.32.0) Updates `golang.org/x/crypto` from 0.26.0 to 0.28.0 - [Commits](golang/crypto@v0.26.0...v0.28.0) Updates `golang.org/x/mod` from 0.20.0 to 0.22.0 - [Commits](golang/mod@v0.20.0...v0.22.0) Updates `golang.org/x/net` from 0.28.0 to 0.30.0 - [Commits](golang/net@v0.28.0...v0.30.0) Updates `golang.org/x/sync` from 0.8.0 to 0.9.0 - [Commits](golang/sync@v0.8.0...v0.9.0) Updates `golang.org/x/sys` from 0.23.0 to 0.26.0 - [Commits](golang/sys@v0.23.0...v0.26.0) Updates `golang.org/x/text` from 0.17.0 to 0.19.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.17.0...v0.19.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240528184218-531527333157 to 0.0.0-20240903143218-8af14fe29dc1 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.65.0 to 1.67.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.65.0...v1.67.0) Updates `google.golang.org/protobuf` from 1.34.2 to 1.35.1 --- updated-dependencies: - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/paketo-buildpacks/occam dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/paketo-buildpacks/packit/v2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: dario.cat/mergo dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/Masterminds/semver/v3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/Masterminds/sprig/v3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/Microsoft/hcsshim dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/ProtonMail/go-crypto dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/andybalholm/brotli dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/bmatcuk/doublestar/v4 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/cloudflare/circl dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/containerd/errdefs dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/cpuguy83/dockercfg dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/cyphar/filepath-securejoin dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/docker/cli dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/go-git/go-billy/v5 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/klauspost/compress dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/moby/sys/user dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/sylabs/sif/v2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/tklauser/numcpus dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/vbatts/tar-split dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/metric dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/trace dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/crypto dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/mod dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/net dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sync dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sys dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/text dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/protobuf dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-11-13T20:48:32Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot requested a review from a team as a code owner November 11, 2024 20:08

dependabot bot requested a review from mhdawson November 11, 2024 20:08

dependabot bot added the failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow label Nov 11, 2024

dependabot bot requested a review from pacostas November 11, 2024 20:08

dependabot bot mentioned this pull request Nov 11, 2024

Bump the go-modules group across 1 directory with 35 updates #795

Closed

paketo-bot added the semver:patch A change requiring a patch version bump label Nov 11, 2024

dependabot bot closed this Nov 13, 2024

dependabot bot deleted the dependabot/go_modules/go-modules-7fdb9d5789 branch November 13, 2024 20:48

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the go-modules group across 1 directory with 35 updates #797

Bump the go-modules group across 1 directory with 35 updates #797

dependabot bot commented on behalf of github Nov 11, 2024 •

edited

Loading

dependabot bot commented on behalf of github Nov 13, 2024

Bump the go-modules group across 1 directory with 35 updates #797

Bump the go-modules group across 1 directory with 35 updates #797

Conversation

dependabot bot commented on behalf of github Nov 11, 2024 • edited Loading

v1.35.1

1.35.1

Fixes

v1.35.0

1.35.0

Features

Fixes

Maintenance

v1.34.2

1.34.2

Maintenance

1.35.1

Fixes

1.35.0

Features

Fixes

Maintenance

1.34.2

Maintenance

v0.18.8

What's Changed

New Contributors

v2.15.0

What's Changed

v1.0.1

What's Changed

New Contributors

v3.3.0

What's Changed

New Contributors

3.3.0 (2024-08-27)

Added

Changed

v3.3.0

What's Changed

New Contributors

Release 3.3.0 (2024-08-29)

Added

Changed

v0.12.9

What's Changed

v0.12.8

What's Changed

v0.12.7

What's Changed

v0.12.6

What's Changed

Release v1.1.2

What's Changed

Release v1.1.2-proton

What's Changed

Release v1.1.1

What's Changed

Release v1.1.1-proton

What's Changed

Release v1.1.0

What's Changed

Release v1.1.0-proton

What's Changed

v1.1.0-beta.0-proton

v1.1.0-beta.0

What's Changed

Fixed FilepathGlob("")

Added MatchUnvalidated, PathMatchUnvalidated

CIRCL v1.5.0

What's Changed

New Contributors

CIRCL v1.4.0

Changes

Commit History

v0.3.0

What's Changed

pkg/v0.3.0

What's Changed

v0.2.0

What's Changed

dependabot bot commented on behalf of github Nov 11, 2024 •

edited

Loading