Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update go modules #2773

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate-bot
Copy link
Contributor

@renovate-bot renovate-bot commented Dec 23, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update Pending
cloud.google.com/go/asset v1.20.3 -> v1.20.4 age adoption passing confidence require patch
cloud.google.com/go/storage v1.49.0 -> v1.50.0 age adoption passing confidence require minor
github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test v0.17.3 -> v0.17.5 age adoption passing confidence require patch
github.com/briandowns/spinner v1.23.1 -> v1.23.2 age adoption passing confidence require patch
github.com/go-git/go-git/v5 v5.13.0 -> v5.13.2 age adoption passing confidence require patch
github.com/hashicorp/terraform-config-inspect c404f82 -> efaa306 age adoption passing confidence require digest
github.com/invopop/jsonschema v0.12.0 -> v0.13.0 age adoption passing confidence require minor
github.com/open-policy-agent/opa v0.70.0 -> v1.1.0 age adoption passing confidence require major
github.com/otiai10/copy v1.14.0 -> v1.14.1 age adoption passing confidence require patch
github.com/zclconf/go-cty v1.15.1 -> v1.16.2 age adoption passing confidence require minor
golang.org/x/oauth2 v0.24.0 -> v0.26.0 age adoption passing confidence require minor
google.golang.org/api v0.214.0 -> v0.219.0 age adoption passing confidence require minor v0.220.0
google.golang.org/protobuf v1.36.1 -> v1.36.4 age adoption passing confidence require patch v1.36.5

Release Notes

briandowns/spinner (github.com/briandowns/spinner)

v1.23.2

Compare Source

go-git/go-git (github.com/go-git/go-git/v5)

v5.13.2

Compare Source

What's Changed

Full Changelog: go-git/go-git@v5.13.1...v5.13.2

v5.13.1

Compare Source

What's Changed

Full Changelog: go-git/go-git@v5.13.0...v5.13.1

invopop/jsonschema (github.com/invopop/jsonschema)

v0.13.0

Compare Source

open-policy-agent/opa (github.com/open-policy-agent/opa)

v1.1.0

Compare Source

This release contains a mix of features, performance improvements, and bugfixes.

Performance Improvements
Topdown and Rego
Runtime, Tooling, SDK
Docs, Website, Ecosystem
Miscellaneous
  • ci(nightly): Remove vendor w/o modproxy check (#​7292) authored by @​srenatus
  • Dependency updates; notably:
    • build(go): bump to 1.23.5 (7279) authored by @​srenatus
    • build(deps): upgrade github.com/dgraph-io/badger to v4 (4.5.1) (#​7239) authored by @​Juneezee
    • build(deps): bump github.com/containerd/containerd from 1.7.24 to 1.7.25
    • build(deps): bump github.com/tchap/go-patricia/v2 from 2.3.1 to 2.3.2
    • build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0
    • build(deps): bump golang.org/x/time from 0.8.0 to 0.9.0
    • build(deps): bump google.golang.org/grpc from 1.69.2 to 1.70.0
    • build(deps): bump go.opentelemetry.io deps to 1.34.0/0.59.0

v1.0.1

Compare Source

This is a bug fix release addressing the following issues:

  • build(go): bump to 1.23.5 (authored by @​srenatus).
    Addressing CVE-2024-45341 and CVE-2024-45336 vulnerabilities in the Go runtime.
  • bundle: Add info about the correct rego version to parse modules on the store, co-authored by @​ashutosh-narkar and @​johanfylling in #​7278.
    Fixing an issue where the rego-version for individual modules was lost during bundle deactivation (bundle lifecycle) if this version diverged from the active runtime rego-version.
    This could cause reloading of v0 bundles to fail when OPA was not running with the --v0-compatible flag.

v1.0.0

Compare Source

NOTES:

  • The minimum version of Go required to build the OPA module is 1.22

We are excited to announce OPA 1.0, a milestone release consolidating an improved developer experience for the future of Policy as Code. The release makes new functionality designed to simplify policy writing and improve the language's consistency the default.

Changes to Rego in OPA 1.0

Below we highlight some key changes to the defaults in OPA 1.0:

  • Using if for all rule definitions and contains for multi-value rules is now mandatory, not just when using the rego.v1 import.
  • Other new keywords (every, in) are available without any imports.
  • Previously requirements that were only run in "strict mode" (like opa check --strict) are now the default. Duplicate imports and imports which shadow each other are no longer allowed.
  • OPA 1.0 comes with a range of backwards compatibility features to aid your migrations, please see the v0 compatibility guide
    if you must continue to support v0 Rego.

Read more about the OPA 1.0 announcement here on our blog.

Following are other changes that are included in OPA 1.0.

Improvements to memory allocations

PRs #​7172, #​7190, #​7193, #​7165, #​7168, #​7191 & #​7222 together improve the memory performance of OPA. Key strategies
include reusing pointers and optimizing array and object operations, minimizing intermediate object creation, and using sync.Pool
to manage memory-heavy operations. These changes cumulatively greatly reduced the number of allocations and improved
evaluation speed by 10-20%. Additional benchmarks highlighted significant memory and speed improvements in custom
function evaluation.

Authored by @​anderseknert.

Wrap http.RoundTripper for SDK users

PR #​7180 adds an EvalHTTPRoundTrip EvalOption and query-level WithHTTPRoundTrip option.
Both use a new function type which converts an http.Transport configured by topdown to an http.RoundTripper.
This supports use cases requiring the customization of the http.send built in behavior.

Authored by @​evankanderson.

Improvements to scientific notation parsing in units.parse

PR #​7147 extends the behaviour of extractNumAndUnit to support
scientific notation values. This means values such as 1e3KB can now be handled by this function.

Authored by @​berdanA.

Support customized buckets bundle_loading_duration_ns metric

PR #​7156 extends OPA’s Prometheus configuration to allow the
setting of user defined buckets for metrics. This aids when debugging the loading of slow bundles.

Authored by @​jwu730-1.

Test suite performance improvements

PR #​7126 updates tests to improve performance. Topdown and storage/disk/
tests now run around 50% and 75% faster respectively.

Authored by @​philipaconrad.

OPA 1.0 Preparation
Topdown and Rego
Runtime, Tooling, SDK
Docs, Website, Ecosystem
Dependency Updates
  • (build) golangci-lint: v1.59.1 -> v1.60.1 by @​srenatus in #​7175
  • github.com/containerd/containerd: v1.7.23 -> v1.7.24
  • github.com/fsnotify/fsnotify: v1.7.0 -> v1.8.0
  • golang.org/x/net: v0.30.0 -> v0.33.0
  • golang.org/x/time: v0.7.0 -> v0.8.0
  • google.golang.org/grpc: v1.67.1 -> v1.69.2
  • go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp: v0.53.0 -> v0.58.0
  • go.opentelemetry.io/otel: v1.28.0 -> v1.33.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace: v1.28.0 -> v1.33.0
  • go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc: v1.28.0 -> v1.33.0
  • go.opentelemetry.io/otel/sdk: v1.28.0 -> v1.33.0
  • go.opentelemetry.io/otel/trace: v1.28.0 -> v1.33.0
otiai10/copy (github.com/otiai10/copy)

v1.14.1

Compare Source

zclconf/go-cty (github.com/zclconf/go-cty)

v1.16.2

Compare Source

v1.16.1

Compare Source

v1.16.0

Compare Source

  • convert: When converting between two different capsule types, will now try to use the "conversion from" implementation from the target type if the source type doesn't have a suitable "conversion to" implementation. (#​194)
  • convert: When converting to a map whose element type is an object type with optional attributes, will no longer construct a broken result when a final map is empty. (#​198)
googleapis/google-api-go-client (google.golang.org/api)

v0.219.0

Compare Source

Features
Documentation
  • option: Add warning about externally-provided credentials (#​2978) (45c3513)

v0.218.0

Compare Source

Features
Bug Fixes
  • internal/gensupport: Close resp body only on discarding resp (resumableupload) (#​2966) (840d496)

v0.217.0

Compare Source

Features

v0.216.0

Compare Source

Features

v0.215.0

Compare Source

Features
protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.36.4

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.3...v1.36.4

Bug fixes:
CL/642975: reflect/protodesc: fix panic when working with dynamicpb

Maintenance:
CL/643276: internal_gengo: avoid allocations in rawDescGZIP() accessors
CL/642857: internal_gengo: switch back from string literal to hex byte slice
CL/642055: internal_gengo: use unsafe.StringData() to avoid a descriptor copy
CL/638135: internal_gengo: store raw descriptor in .rodata section

v1.36.3

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.2...v1.36.3

Bug fixes:
CL/642575: reflect/protodesc: fix panic when working with dynamicpb
CL/641036: cmd/protoc-gen-go: remove json struct tags from unexported fields

User-visible changes:
CL/641876: proto: add example for GetExtension, SetExtension
CL/642015: runtime/protolazy: replace internal doc link with external link

Maintenance:
CL/641635: all: split flags.ProtoLegacyWeak out of flags.ProtoLegacy
CL/641019: internal/impl: remove unused exporter parameter
CL/641018: internal/impl: switch to reflect.Value.IsZero
CL/641035: internal/impl: clean up unneeded Go<1.12 MapRange() alternative
CL/641017: types/dynamicpb: switch atomicExtFiles to atomic.Uint64 type

v1.36.2

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.36.1...v1.36.2

Bug fixes:
CL/638515: internal/impl: fix WhichOneof() to work with synthetic oneofs


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate bot added the dependencies Pull requests that update a dependency file label Dec 23, 2024
@renovate-bot renovate-bot requested review from q2w and a team as code owners December 23, 2024 23:46
@dpebot
Copy link
Collaborator

dpebot commented Dec 23, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 229bc1f to 0c27975 Compare December 24, 2024 00:13
@dpebot
Copy link
Collaborator

dpebot commented Dec 24, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 0c27975 to 488617e Compare December 28, 2024 16:21
@dpebot
Copy link
Collaborator

dpebot commented Dec 28, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 488617e to 0e4ccef Compare December 30, 2024 17:35
@dpebot
Copy link
Collaborator

dpebot commented Dec 30, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 0e4ccef to 6694e46 Compare December 30, 2024 17:37
@dpebot
Copy link
Collaborator

dpebot commented Dec 30, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 6694e46 to 4642c61 Compare December 30, 2024 18:07
@dpebot
Copy link
Collaborator

dpebot commented Dec 30, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 4642c61 to 7cba3f7 Compare December 30, 2024 18:45
@dpebot
Copy link
Collaborator

dpebot commented Dec 30, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 7cba3f7 to 6547053 Compare December 30, 2024 20:54
@dpebot
Copy link
Collaborator

dpebot commented Dec 30, 2024

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 6547053 to 9111c77 Compare January 2, 2025 20:21
@renovate-bot renovate-bot changed the title chore(deps): update module github.com/open-policy-agent/opa to v1 chore(deps): update go modules Jan 2, 2025
Copy link

ℹ Artifact update notice

File name: cli/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 4 additional dependencies were updated

Details:

Package Change
github.com/ProtonMail/go-crypto v1.0.0 -> v1.1.3
github.com/cyphar/filepath-securejoin v0.2.4 -> v0.3.6
github.com/go-git/go-billy/v5 v5.5.0 -> v5.6.1
github.com/skeema/knownhosts v1.2.2 -> v1.3.0

@dpebot
Copy link
Collaborator

dpebot commented Jan 2, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 9111c77 to aa9064d Compare January 2, 2025 21:27
@renovate-bot renovate-bot changed the title chore(deps): update go modules chore(deps): update module github.com/open-policy-agent/opa to v1 Jan 2, 2025
Copy link

forking-renovate bot commented Jan 2, 2025

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: cli/go.sum
Command failed: go get -d -t ./...
go: -d flag is deprecated. -d=true is a no-op
go: downloading github.com/go-git/go-git/v5 v5.13.2
go: downloading google.golang.org/api v0.219.0
go: downloading golang.org/x/oauth2 v0.26.0
go: downloading github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test v0.17.5
go: downloading github.com/hashicorp/terraform-config-inspect v0.0.0-20250203082807-efaa306e97b4
go: downloading google.golang.org/protobuf v1.36.4
go: downloading github.com/zclconf/go-cty v1.16.2
go: downloading github.com/invopop/jsonschema v0.13.0
go: downloading github.com/otiai10/copy v1.14.1
go: downloading github.com/open-policy-agent/opa v1.1.0
go: downloading cloud.google.com/go/asset v1.20.4
go: downloading cloud.google.com/go/storage v1.50.0
go: downloading github.com/briandowns/spinner v1.23.2
go: downloading golang.org/x/sys v0.29.0
go: downloading github.com/ProtonMail/go-crypto v1.1.5
go: downloading github.com/go-git/go-billy/v5 v5.6.2
go: downloading golang.org/x/term v0.28.0
go: downloading github.com/googleapis/gax-go/v2 v2.14.1
go: downloading golang.org/x/time v0.9.0
go: downloading sigs.k8s.io/kustomize/kyaml v0.19.0
go: downloading github.com/otiai10/mint v1.6.3
go: downloading google.golang.org/grpc v1.70.0
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20250115164207-1a7da9e5054f
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20250124145028-65684f501c47
go: downloading go.opentelemetry.io/contrib/detectors/gcp v1.32.0
go: downloading go.opentelemetry.io/otel v1.34.0
go: downloading go.opentelemetry.io/otel/sdk/metric v1.32.0
go: downloading go.opentelemetry.io/otel/sdk v1.34.0
go: downloading github.com/golang/glog v1.2.3
go: downloading k8s.io/api v0.32.1
go: downloading k8s.io/apimachinery v0.32.1
go: downloading golang.org/x/crypto v0.32.0
go: downloading github.com/cyphar/filepath-securejoin v0.3.6
go: downloading github.com/pjbgf/sha1cd v0.3.2
go: downloading cloud.google.com/go/auth v0.14.0
go: downloading cloud.google.com/go/auth/oauth2adapt v0.2.7
go: downloading github.com/google/s2a-go v0.1.9
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.59.0
go: downloading golang.org/x/net v0.34.0
go: downloading k8s.io/kube-openapi v0.0.0-20241212222426-2c72e554b1e7
go: downloading github.com/tchap/go-patricia/v2 v2.3.2
go: downloading go.opentelemetry.io/otel/trace v1.34.0
go: downloading go.opentelemetry.io/otel/metric v1.34.0
go: downloading k8s.io/utils v0.0.0-20241104100929-3ea5e8cea738
go: downloading k8s.io/klog/v2 v2.130.1
go: downloading sigs.k8s.io/structured-merge-diff/v4 v4.4.2
go: downloading github.com/klauspost/compress v1.17.11
go: downloading github.com/go-openapi/swag v0.23.0
go: downloading github.com/google/gnostic-models v0.6.9
go: downloading github.com/go-openapi/jsonpointer v0.21.0
go: downloading k8s.io/client-go v0.32.1
go: downloading sigs.k8s.io/json v0.0.0-20241010143419-9aa6b5e7a4b3
go: downloading github.com/fxamacker/cbor/v2 v2.7.0
go: downloading cel.dev/expr v0.19.0
go: downloading github.com/x448/float16 v0.8.4
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.34.0
go: downloading go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.34.0
go: downloading go.opentelemetry.io/proto/otlp v1.5.0
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.25.1
go: downloading gopkg.in/evanphx/json-patch.v4 v4.12.0
go: downloading google.golang.org/grpc/stats/opentelemetry v0.0.0-20241028142157-ada6787961b3
go: github.com/GoogleCloudPlatform/cloud-foundation-toolkit/cli/scorecard imports
	cloud.google.com/go/storage imports
	google.golang.org/grpc/stats/opentelemetry: ambiguous import: found package google.golang.org/grpc/stats/opentelemetry in multiple modules:
	google.golang.org/grpc v1.70.0 (/tmp/renovate/cache/others/go/pkg/mod/google.golang.org/[email protected]/stats/opentelemetry)
	google.golang.org/grpc/stats/opentelemetry v0.0.0-20241028142157-ada6787961b3 (/tmp/renovate/cache/others/go/pkg/mod/google.golang.org/grpc/stats/[email protected])

@dpebot
Copy link
Collaborator

dpebot commented Jan 2, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from aa9064d to 64042f1 Compare January 2, 2025 22:59
@dpebot
Copy link
Collaborator

dpebot commented Jan 2, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 64042f1 to 4c499fb Compare January 2, 2025 23:44
@dpebot
Copy link
Collaborator

dpebot commented Jan 2, 2025

/gcbrun

@dpebot
Copy link
Collaborator

dpebot commented Jan 30, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from c1f928c to 8277131 Compare January 30, 2025 22:11
@dpebot
Copy link
Collaborator

dpebot commented Jan 30, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 8277131 to 0a89ea9 Compare January 31, 2025 01:16
@dpebot
Copy link
Collaborator

dpebot commented Jan 31, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 0a89ea9 to fe2d0b7 Compare January 31, 2025 14:22
@dpebot
Copy link
Collaborator

dpebot commented Jan 31, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from fe2d0b7 to 2ec2614 Compare February 3, 2025 16:25
@dpebot
Copy link
Collaborator

dpebot commented Feb 3, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 2ec2614 to 2bebb79 Compare February 3, 2025 22:53
@dpebot
Copy link
Collaborator

dpebot commented Feb 3, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 2bebb79 to ce7707f Compare February 4, 2025 19:16
@dpebot
Copy link
Collaborator

dpebot commented Feb 4, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from ce7707f to f27bb2a Compare February 4, 2025 19:34
@dpebot
Copy link
Collaborator

dpebot commented Feb 4, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from f27bb2a to 7a4b89f Compare February 5, 2025 22:09
@dpebot
Copy link
Collaborator

dpebot commented Feb 5, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 7a4b89f to 56c2d0e Compare February 6, 2025 03:02
@dpebot
Copy link
Collaborator

dpebot commented Feb 6, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 56c2d0e to 05022b9 Compare February 10, 2025 11:46
@dpebot
Copy link
Collaborator

dpebot commented Feb 10, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 05022b9 to 6d0bc57 Compare February 10, 2025 19:00
@dpebot
Copy link
Collaborator

dpebot commented Feb 10, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 6d0bc57 to 27dcd3c Compare February 10, 2025 19:10
@dpebot
Copy link
Collaborator

dpebot commented Feb 10, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 27dcd3c to 71e277e Compare February 11, 2025 01:06
@dpebot
Copy link
Collaborator

dpebot commented Feb 11, 2025

/gcbrun

@renovate-bot renovate-bot force-pushed the renovate/cli-go-modules branch from 71e277e to 7267bf9 Compare February 11, 2025 01:13
@dpebot
Copy link
Collaborator

dpebot commented Feb 11, 2025

/gcbrun

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file do not merge
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants