chore(deps): bump the dependencies group with 2 updates

[dependabot]

Bumps the dependencies group with 2 updates: github.com/openfga/openfga and github.com/schollz/progressbar/v3.

Updates github.com/openfga/openfga from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/openfga/openfga's releases.

v1.8.0

Added

• Added start_time parameter to ReadChanges API to allow filtering by specific time #2020
• Added support for Contextual Tuples in the Expand API. #2045
• Added a flag OPENFGA_CONTEXT_PROPAGATION_TO_DATASTORE to control propagation of a request's context to the datastore. #1838
• Added OTEL measurement for access control store check latency and write latency due to authorization #2069
• Added BatchCheck API which allows multiple check operations to be performed in a single request. It requires a unique correlation_id associated with each individual check to map each result to its associated tuple. For more details, see batch check docs #2039.

Performance

• Improve Check performance in the case that the query involves resolving nested userset with type bound public access. Enable via experimental flag enable-check-optimizations. #2063

Breaking changes

• The storage adapter ReadChanges's parameter ReadChangesOptions allows filtering by StartTime #2020. As a part of the implementation, a new server setting called WithContinuationTokenSerializer was introduced. If you are using OpenFGA as a library, you will need to pass in either StringContinuationTokenSerializer, or SQLContinuationTokenSerializer, or implement your own (if you also have your own storage adapter)

• The storage adapter ReadPage return parameters changed from ([]*openfgav1.Tuple, []byte, error) to ([]*openfgav1.Tuple, string, error) #2064 If you are using a custom storage adapter or consume ReadPage func in your code, you will need to update the return type and/or handling of the ReadPage function.

• ErrMismatchObjectType error type removed from openfga package #2064 as storage is not validating this anymore. Validation moved to ReadChangesQuery implementation.

• c279d806ca1ecc09441c78cff24ae18379dc3049 Add start_time param to changes API (#2020)

• 086a62141543ab9a7f3ff8f2fc2f72ac1e7cfa55 chore(deps): bump anchore/sbom-action from 0.17.5 to 0.17.6 in the dependencies group (#2068)

• c3a39a6e43facc3e34d3047e0a9db43662a44103 chore(deps): bump github.com/grpc-ecosystem/grpc-gateway/v2 from 2.22.0 to 2.23.0 in the dependencies group (#2067)

• f1f1b54b2163b4918a9509dbb5894df39293bd27 chore: add GCI linter to group import statements (#2074)

• 0e865fd67cceb4454b9ce57476af897f078c45d8 chore: generate mocks using mockgen v0.5.0 (#2077)

• dd782e849603007fb15745393d0d1a1cf5a36ac1 chore: move check directly assignable function out to its own function (#2060)

• fc28fa3db4452ba4c9dd286e30ce554a58f878fc don't generate continuation token for empty result (#2081)

• 8a246d8daf68e46bd55de9bcfd67d1b0b351deb8 feat: add contextual tuples to Expand API (#2045)

• 62bd2b686cff1a603e816ae5011189cc68ea5e6b feat: batch check API (#2039)

• f665bc229b591655b0570aabb27ef0fcfb10b350 feat: configurable request context propagation to datastore (#1838)

• e14e957fe0ddf179d4cdb2ddbf70db1687555a5f feat: measurement on root store check + write latency due to authz (#2069)

• 3fc51658d2e48f65d953294c1c93bd8a236c16db perf: enable optimization for nested userset with public wildcard (#2063)

• ba9e25dec8fedd8a689bacd7f8e6da29b04f3971 refactor(!): remove token serialization from datastore (#2064)

• c604bda0f807bf0d95243229922e6754e0f703ba refactor: break server.go into operation-specific-files (#2071)

• af054d9693bd7ebd0420456b144c2fb6888aaf87 refactor: resolve check response (#2061)

• 8307264d6acb86e52cba7384c93518f2cd05bfa1 refactor: track datastore query count in a new datastore wrapper (#2022)

Changelog

Sourced from github.com/openfga/openfga's changelog.

[1.8.0] - 2024-11-08

Full changelog

Added

• Added start_time parameter to ReadChanges API to allow filtering by specific time #2020
• Added support for Contextual Tuples in the Expand API. #2045
• Added a flag OPENFGA_CONTEXT_PROPAGATION_TO_DATASTORE to control propagation of a request's context to the datastore. #1838
• Added OTEL measurement for access control store check latency and write latency due to authorization #2069
• Added BatchCheck API which allows multiple check operations to be performed in a single request. It requires a unique correlation_id associated with each individual check to map each result to its associated tuple. For more details, see batch check docs #2039.

Performance

• Improve Check performance in the case that the query involves resolving nested userset with type bound public access. Enable via experimental flag enable-check-optimizations. #2063

Breaking changes

• The storage adapter ReadChanges's parameter ReadChangesOptions allows filtering by StartTime #2020. As a part of the implementation, a new server setting called WithContinuationTokenSerializer was introduced. If you are using OpenFGA as a library, you will need to pass in either StringContinuationTokenSerializer, or SQLContinuationTokenSerializer, or implement your own (if you also have your own storage adapter)
• The storage adapter ReadPage return parameters changed from ([]*openfgav1.Tuple, []byte, error) to ([]*openfgav1.Tuple, string, error) #2064 If you are using a custom storage adapter or consume ReadPage func in your code, you will need to update the return type and/or handling of the ReadPage function.
• ErrMismatchObjectType error type removed from openfga package #2064 as storage is not validating this anymore. Validation moved to ReadChangesQuery implementation.

Commits

• 0cc569f docs: update changelog for v1.8.0 (#2085)
• 0e865fd chore: generate mocks using mockgen v0.5.0 (#2077)
• f1f1b54 chore: add GCI linter to group import statements (#2074)
• fc28fa3 don't generate continuation token for empty result (#2081)
• c590b88 test: refactor expand test to use full response (#2080)
• 62bd2b6 feat: batch check API (#2039)
• e3ea25d test: fix order-dependent assertion in expand test (#2079)
• f5697dd test: fix nil pointer in benchmarks (#2078)
• c604bda refactor: break server.go into operation-specific-files (#2071)
• f665bc2 feat: configurable request context propagation to datastore (#1838)
• Additional commits viewable in compare view

Updates github.com/schollz/progressbar/v3 from 3.17.0 to 3.17.1

Release notes

Sourced from github.com/schollz/progressbar/v3's releases.

v3.17.1

What's Changed

• fix: set length to unknown if set to -1 by @​MegaRedHand in schollz/progressbar#207

New Contributors

• @​MegaRedHand made their first contribution in schollz/progressbar#207

Full Changelog: schollz/progressbar@v3.17.0...v3.17.1

Commits

• 23e1221 update deps
• da94fe0 Merge pull request #207 from MegaRedHand/fix/change-max-unknown
• 9151851 fix: set length to unknown if set to -1
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[stacklok-cloud]

Minder Vulnerability Report ✅

Minder analyzed this PR and found it does not add any new vulnerable dependencies.

Vulnerability scan of 64bfdd28:

• 🐞 vulnerable packages: 0
• 🛠 fixes available for: 0