chore(deps): bump the gomod group with 8 updates #456

dependabot · 2024-07-01T00:55:33Z

Bumps the gomod group with 8 updates:

Package	From	To
github.com/moby/spdystream	`0.2.0`	`0.4.0`
github.com/nats-io/nats.go	`1.35.0`	`1.36.0`
github.com/zitadel/oidc/v3	`3.24.0`	`3.25.1`
golang.org/x/crypto	`0.23.0`	`0.24.0`
golang.org/x/oauth2	`0.20.0`	`0.21.0`
k8s.io/api	`0.30.1`	`0.30.2`
k8s.io/apimachinery	`0.30.1`	`0.30.2`
k8s.io/client-go	`0.30.1`	`0.30.2`

Updates github.com/moby/spdystream from 0.2.0 to 0.4.0

Release notes

Sourced from github.com/moby/spdystream's releases.

[v0.4.0] fix goroutine leak and remove unused code

What's Changed

Avoid 10 minute goroutine leak in error case for handled errors by @liggitt in moby/spdystream#99

Remove unused websocket package by @dmcgowan in moby/spdystream#98

New Contributors

@liggitt made their first contribution in moby/spdystream#99

Full Changelog: moby/spdystream@v0.3.0...v0.4.0

[v0.3.0] Release with fixes for a race condition

What's Changed

gha: update go versions by @thaJeztah in moby/spdystream#90

Fix Ping data-race by @tigrato in moby/spdystream#91

Fix unit test races (carry #48) by @thaJeztah in moby/spdystream#89

Fixed data race in Stream.IsFInished() by @code-qote in moby/spdystream#96

New Contributors

@tigrato made their first contribution in moby/spdystream#91

@code-qote made their first contribution in moby/spdystream#96

Full Changelog: moby/spdystream@v0.2.0...v0.3.0

Commits

258380d Merge pull request #98 from dmcgowan/remove-ws-package
a3b79af Merge pull request #99 from liggitt/closeleak
5c84296 Avoid 10 minute goroutine leak in error case for handled errors
42b2632 Remove unused websocket package
0c1fc43 Merge pull request #96 from code-qote/fix-stream-is-finished-data-race
478d001 Merge pull request #89 from thaJeztah/carry_48_fix_unit_test_race
31503b1 Fix unit test races
06348fb Merge pull request #91 from tigrato/fix-ping-data-race
6cf8949 fixed data race
3473c0b Fix Ping data-race
Additional commits viewable in compare view

Updates github.com/nats-io/nats.go from 1.35.0 to 1.36.0

Release notes

Sourced from github.com/nats-io/nats.go's releases.

Release v1.36.0

Changelog

Fixed

JetStream:

Set OptStartSeq correctly in OrderedConsumerConfig and simplify ordered consumer creation (#1644, #1645)

Fix invalid handling of mismatched sequence when using Messages() for ordered consumer (#1646)

Changed

JetStream:

Remove ConsumerInfo() calls in Consume() and Messages() after reconnect (#1643)

Improved

Fixed compatibility tests (#1637)

Fixed comment typos. Thanks @agcom for the contribution (#1638, #1639)

Complete Changes

nats-io/nats.go@v1.35.0...v1.36.0

Commits

370bc4f Release v1.36.0 (#1647)
66b92a9 [FIXED] Remove ConsumerInfo() calls in Consume() and Messages() after r...
5dbd825 [IMPROVED] Handle error and reset ordered consumer in Messages() (#1646)
005a6f2 [IMPROVED] Ordered consumer creation and initial config settings (#1645)
1deccaf [FIXED] Set OptStartSeq correctly in OrderedConsumerConfig (#1644)
69922ce [IMPROVED] Fix typo inconnect (#1638)
c93d277 [IMPROVED] Fix MaxAckPending default value comment unit typo (#1639)
41975ba [FIXED] Object Store compatibility tests (#1637)
See full diff in compare view

Updates github.com/zitadel/oidc/v3 from 3.24.0 to 3.25.1

Release notes

Sourced from github.com/zitadel/oidc/v3's releases.

v3.25.1

3.25.1 (2024-06-14)

Bug Fixes

example: set content-type in the userinfo response (#614) (da4e683)

v3.25.0

3.25.0 (2024-06-13)

Features

op: allow scope without openid (#613) (a7b5355)

Commits

da4e683 fix(example): set content-type in the userinfo response (#614)
a7b5355 feat(op): allow scope without openid (#613)
9ecdd0c chore(deps): bump golang.org/x/oauth2 from 0.20.0 to 0.21.0 (#611)
7a8f8ad chore(deps): bump golang.org/x/text from 0.15.0 to 0.16.0 (#612)
7037344 --- (#610)
7714a3b --- (#609)
See full diff in compare view

Updates golang.org/x/crypto from 0.23.0 to 0.24.0

Commits

332fd65 go.mod: update golang.org/x dependencies
0b431c7 x509roots/fallback: update bundle
349231f ssh: implement CryptoPublicKey on sk keys
44c9b0f ssh: allow server auth callbacks to send additional banners
67b1361 sha3: reenable s390x assembly
477a5b4 sha3: make APIs usable with zero allocations
59b5a86 sha3: disable s390x assembly
10f366e sha3: simplify XOR functions
See full diff in compare view

Updates golang.org/x/oauth2 from 0.20.0 to 0.21.0

Commits

5fd4241 google: update compute token refresh
See full diff in compare view

Updates k8s.io/api from 0.30.1 to 0.30.2

Commits

118f81c Update dependencies to v0.30.2 tag
See full diff in compare view

Updates k8s.io/apimachinery from 0.30.1 to 0.30.2

Commits

See full diff in compare view

Updates k8s.io/client-go from 0.30.1 to 0.30.2

Commits

592d891 Update dependencies to v0.30.2 tag
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod group with 8 updates: | Package | From | To | | --- | --- | --- | | [github.com/moby/spdystream](https://github.com/moby/spdystream) | `0.2.0` | `0.4.0` | | [github.com/nats-io/nats.go](https://github.com/nats-io/nats.go) | `1.35.0` | `1.36.0` | | [github.com/zitadel/oidc/v3](https://github.com/zitadel/oidc) | `3.24.0` | `3.25.1` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.23.0` | `0.24.0` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.20.0` | `0.21.0` | | [k8s.io/api](https://github.com/kubernetes/api) | `0.30.1` | `0.30.2` | | [k8s.io/apimachinery](https://github.com/kubernetes/apimachinery) | `0.30.1` | `0.30.2` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.30.1` | `0.30.2` | Updates `github.com/moby/spdystream` from 0.2.0 to 0.4.0 - [Release notes](https://github.com/moby/spdystream/releases) - [Commits](moby/spdystream@v0.2.0...v0.4.0) Updates `github.com/nats-io/nats.go` from 1.35.0 to 1.36.0 - [Release notes](https://github.com/nats-io/nats.go/releases) - [Commits](nats-io/nats.go@v1.35.0...v1.36.0) Updates `github.com/zitadel/oidc/v3` from 3.24.0 to 3.25.1 - [Release notes](https://github.com/zitadel/oidc/releases) - [Changelog](https://github.com/zitadel/oidc/blob/main/.releaserc.js) - [Commits](zitadel/oidc@v3.24.0...v3.25.1) Updates `golang.org/x/crypto` from 0.23.0 to 0.24.0 - [Commits](golang/crypto@v0.23.0...v0.24.0) Updates `golang.org/x/oauth2` from 0.20.0 to 0.21.0 - [Commits](golang/oauth2@v0.20.0...v0.21.0) Updates `k8s.io/api` from 0.30.1 to 0.30.2 - [Commits](kubernetes/api@v0.30.1...v0.30.2) Updates `k8s.io/apimachinery` from 0.30.1 to 0.30.2 - [Commits](kubernetes/apimachinery@v0.30.1...v0.30.2) Updates `k8s.io/client-go` from 0.30.1 to 0.30.2 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.30.1...v0.30.2) --- updated-dependencies: - dependency-name: github.com/moby/spdystream dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/nats-io/nats.go dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: github.com/zitadel/oidc/v3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: golang.org/x/oauth2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gomod - dependency-name: k8s.io/api dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: k8s.io/apimachinery dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod - dependency-name: k8s.io/client-go dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gomod ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 1, 2024

github-actions bot enabled auto-merge July 1, 2024 00:55

smlx approved these changes Jul 1, 2024

View reviewed changes

github-actions bot merged commit 120e4d4 into main Jul 1, 2024
11 checks passed

github-actions bot deleted the dependabot/go_modules/gomod-046431d543 branch July 1, 2024 03:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the gomod group with 8 updates #456

chore(deps): bump the gomod group with 8 updates #456

dependabot bot commented on behalf of github Jul 1, 2024

chore(deps): bump the gomod group with 8 updates #456

chore(deps): bump the gomod group with 8 updates #456

Conversation

dependabot bot commented on behalf of github Jul 1, 2024

[v0.4.0] fix goroutine leak and remove unused code

What's Changed

New Contributors

[v0.3.0] Release with fixes for a race condition

What's Changed

New Contributors

Release v1.36.0

Changelog

Fixed

Changed

Improved

Complete Changes

v3.25.1

3.25.1 (2024-06-14)

Bug Fixes

v3.25.0

3.25.0 (2024-06-13)

Features