2018-10-29 02:54:15 +02:00
|
|
|
module github.com/goreleaser/goreleaser
|
|
|
|
|
|
2023-02-05 18:39:39 +02:00
|
|
|
go 1.20
|
2019-09-09 15:17:30 +02:00
|
|
|
|
2018-10-29 02:54:15 +02:00
|
|
|
require (
|
2022-01-10 15:57:19 +02:00
|
|
|
code.gitea.io/sdk/gitea v0.15.1
|
2023-04-23 18:52:42 +02:00
|
|
|
github.com/Masterminds/semver/v3 v3.2.1
|
2022-12-15 19:19:31 +02:00
|
|
|
github.com/atc0005/go-teams-notify/v2 v2.7.0
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20220517224237-e6f29200ae04
|
2022-08-17 15:58:18 +02:00
|
|
|
github.com/caarlos0/ctrlc v1.2.0
|
2023-04-07 03:50:09 +02:00
|
|
|
github.com/caarlos0/env/v8 v8.0.0
|
2022-01-10 16:10:35 +02:00
|
|
|
github.com/caarlos0/go-reddit/v3 v3.0.1
|
2021-03-22 13:45:18 +02:00
|
|
|
github.com/caarlos0/go-shellwords v1.0.12
|
2023-04-30 19:19:55 +02:00
|
|
|
github.com/caarlos0/go-version v0.1.1
|
2023-05-03 14:52:49 +02:00
|
|
|
github.com/caarlos0/log v0.4.1
|
2023-04-25 13:23:09 +02:00
|
|
|
github.com/charmbracelet/keygen v0.4.2
|
2023-03-20 03:47:02 +02:00
|
|
|
github.com/charmbracelet/lipgloss v0.7.1
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/chrismellard/docker-credential-acr-env v0.0.0-20220327082430-c57b701bfc08
|
2021-12-21 05:03:48 +02:00
|
|
|
github.com/dghubble/go-twitter v0.0.0-20211115160449-93a8679adecb
|
2022-12-08 14:41:38 +02:00
|
|
|
github.com/dghubble/oauth1 v0.7.2
|
2023-05-23 14:56:41 +02:00
|
|
|
github.com/disgoorg/disgo v0.16.5
|
2022-10-17 13:52:12 +02:00
|
|
|
github.com/disgoorg/snowflake/v2 v2.0.1
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/distribution/distribution/v3 v3.0.0-20221021092657-c47a966fded8
|
2021-10-29 19:02:33 +02:00
|
|
|
github.com/go-telegram-bot-api/telegram-bot-api v4.6.4+incompatible
|
2023-03-20 14:58:29 +02:00
|
|
|
github.com/google/go-containerregistry v0.14.0
|
2023-02-24 14:58:33 +02:00
|
|
|
github.com/google/go-github/v50 v50.1.0
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/google/ko v0.13.0
|
2022-01-10 15:29:04 +02:00
|
|
|
github.com/google/uuid v1.3.0
|
2022-02-12 04:17:13 +02:00
|
|
|
github.com/goreleaser/fileglob v1.3.0
|
2023-05-24 14:16:40 +02:00
|
|
|
github.com/goreleaser/nfpm/v2 v2.29.0
|
2022-12-28 17:24:21 +02:00
|
|
|
github.com/hashicorp/go-multierror v1.1.1
|
2023-03-27 18:53:18 +02:00
|
|
|
github.com/imdario/mergo v0.3.15
|
2022-11-09 13:35:33 +02:00
|
|
|
github.com/invopop/jsonschema v0.7.0
|
chore(deps): bump github.com/jarcoal/httpmock from 1.2.0 to 1.3.0 (#3760)
Bumps [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock)
from 1.2.0 to 1.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jarcoal/httpmock/releases">github.com/jarcoal/httpmock's
releases</a>.</em></p>
<blockquote>
<h2>v1.3.0</h2>
<p>New features:</p>
<ul>
<li>new <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Matcher">matcher
feature</a>, allowing to create a <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a>
based on <a
href="https://pkg.go.dev/net/http#Request">net/http.Request</a> content
(header or body for example), so not only on method and URL as before.
See the following new registering functions & methods:
<ul>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterMatcherResponder">RegisterMatcherResponder</a>
& <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterMatcherResponder">MockTransport.RegisterMatcherResponder</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterRegexpMatcherResponder">RegisterRegexpMatcherResponder</a>
& <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterRegexpMatcherResponder">MockTransport.RegisterRegexpMatcherResponder</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterMatcherResponderWithQuery">RegisterMatcherResponderWithQuery</a>
& <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterMatcherResponderWithQuery">MockTransport.RegisterMatcherResponderWithQuery</a>;</li>
</ul>
</li>
<li>add following <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a>
methods, allowing to easily add some headers to the returned <a
href="https://pkg.go.dev/net/http#Response">net/http.Response</a>
without the need to craft a <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a>
by hand:
<ul>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.SetContentLength">SetContentLength</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.HeaderAdd">HeaderAdd</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.HeaderSet">HeaderSet</a>.</li>
</ul>
</li>
</ul>
<p>Miscellaneous:</p>
<ul>
<li>documentation now uses new go1.19 doc features;</li>
<li>go minimal version required is now 1.13;</li>
<li>CI tests using go1.20 & golangci-lint v1.51.0.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/jarcoal/httpmock/commit/e977d517e968810981a6178211fd88ccf508857a"><code>e977d51</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/139">#139</a>
from jarcoal/go120</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/df3afac771d156978fe08468e6d5470a86b7a75c"><code>df3afac</code></a>
ci: test with go1.20</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/837f061d506d01fe5154306d55a0a7ce046523de"><code>837f061</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/138">#138</a>
from jarcoal/headers</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/d4ab20c68d8b0c8ac08908ef5dc7bbc80d9b462f"><code>d4ab20c</code></a>
feat: add Responder.{SetContentLength,HeaderAdd,HeaderSet} methods</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/db50b7669db74ba622c08cb8be04231521d194a9"><code>db50b76</code></a>
perf(matchers): simplify http.NoBody case</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/b9e83a2877b27d4625b82d138c3ff57fb47f3757"><code>b9e83a2</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/136">#136</a>
from jarcoal/matchers</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/f69cd5e7f9cf588f1052ed212557a6e381ffcfa7"><code>f69cd5e</code></a>
feat: introduce new matchers feature</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/a55e9610f3ebbdd6e579dc9233d035e71042436f"><code>a55e961</code></a>
refactor: go1.13 required now, so drop go1.9 to go1.12 support</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/f6c487638cbd1275690adef582e09253a3c559da"><code>f6c4876</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/134">#134</a>
from jarcoal/go119</li>
<li><a
href="https://github.com/jarcoal/httpmock/commit/638f16c7002a28ec479fb817d266c96a50c2e17f"><code>638f16c</code></a>
docs: uses new go1.19 doc features</li>
<li>Additional commits viewable in <a
href="https://github.com/jarcoal/httpmock/compare/v1.2.0...v1.3.0">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-07 14:45:00 +02:00
|
|
|
github.com/jarcoal/httpmock v1.3.0
|
2023-05-11 14:38:19 +02:00
|
|
|
github.com/klauspost/pgzip v1.2.6
|
2022-11-18 01:40:00 +02:00
|
|
|
github.com/mattn/go-mastodon v0.0.6
|
2019-06-29 16:02:40 +02:00
|
|
|
github.com/mitchellh/go-homedir v1.1.0
|
2022-06-22 13:46:38 +02:00
|
|
|
github.com/muesli/mango-cobra v1.2.0
|
2022-01-18 15:17:52 +02:00
|
|
|
github.com/muesli/roff v0.1.0
|
2023-03-20 03:47:02 +02:00
|
|
|
github.com/muesli/termenv v0.15.1
|
2023-04-23 19:09:35 +02:00
|
|
|
github.com/ory/dockertest/v3 v3.10.0
|
2023-04-23 18:52:54 +02:00
|
|
|
github.com/slack-go/slack v0.12.2
|
2023-04-05 14:21:25 +02:00
|
|
|
github.com/spf13/cobra v1.7.0
|
2023-05-19 15:42:28 +02:00
|
|
|
github.com/stretchr/testify v1.8.3
|
2022-12-13 14:44:34 +02:00
|
|
|
github.com/ulikunitz/xz v0.5.11
|
2022-08-22 14:29:27 +02:00
|
|
|
github.com/withfig/autocomplete-tools/integrations/cobra v1.2.1
|
2023-04-24 13:47:21 +02:00
|
|
|
github.com/xanzy/go-gitlab v0.83.0
|
2023-03-06 18:07:00 +02:00
|
|
|
gocloud.dev v0.29.0
|
2023-05-11 14:21:54 +02:00
|
|
|
golang.org/x/crypto v0.9.0
|
2023-05-11 13:47:42 +02:00
|
|
|
golang.org/x/oauth2 v0.8.0
|
feat(deps): bump golang.org/x/tools from 0.8.0 to 0.9.1 (#3999)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.8.0
to 0.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.9.1</h2>
<p>This release fixes a regression in the v0.9.0 release: a crash when
running the <code>go:generate</code><code>golang/go#53781</code></p>
<p>Thank you to all those who filed crash reports, and apologies for the
breakage!</p>
<h2>gopls@v0.9.0</h2>
<p>This release contains significant performance improvements
(especially in incremental processing after source changes), bug fixes,
and support for the LSP “<a
href="https://redirect.github.com/microsoft/language-server-protocol/issues/956">inlay
hints</a>” feature, along with several other minor enhancements.</p>
<h2>Performance improvements</h2>
<p>Source edits cause gopls to invalidate and recompute information
about the workspace, most of which has not changed. Previously, gopls
would spend significant CPU copying data structures, sometimes more than
100ms per keystroke in a large workspace. This release includes many
optimizations to avoid copying data needlessly, including a new <a
href="https://cs.opensource.google/go/x/tools/+/gopls-release-branch.0.9:internal/persistent/map.go;l=26-37">map
representation</a> to achieve copying in constant time. Special thanks
to <a
href="https://github.com/euroelessar"><code>@euroelessar</code></a> for
the design and implementation of this data structure.</p>
<p>As a result of these improvements, gopls should be more responsive
while typing in large codebases, though it will still use a lot of
memory.</p>
<p>Time to process a change notification in the Kubernetes repo:
<img
src="https://user-images.githubusercontent.com/57144380/176967584-a8040048-6357-40d5-9d80-c448281f6482.png"
alt="image" /></p>
<h2>New Features</h2>
<h3>Inlay hints</h3>
<p>Added support for displaying inlay hints of composite literal field
names and types, constant values, function parameter names, function
type params, and short variable declarations. You can try these out in
the <a
href="https://github.com/golang/vscode-go/blob/master/docs/nightly.md">vscode-go
nightly</a> by <a
href="https://github.com/golang/vscode-go/blob/master/docs/settings.md#goinlayhintsassignvariabletypes">enabling
inlay hints settings</a>.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/176967591-a7b767b3-d447-4691-9486-10f957dc9a0f.gif"
alt="image3" /></p>
<h3>Package References</h3>
<p>Find references on <code>package foo</code> now lists locations where
the given package is imported.</p>
<h3>Quick-fix to add field names to struct literals</h3>
<p>A new quick fix adds field names to struct literals with unkeyed
fields.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/176967261-6acbe0e7-7698-46ea-8deb-cbd913296034.gif"
alt="image1" /></p>
<h2>Bug fixes</h2>
<p>This release includes the following notable bugfixes:</p>
<ul>
<li>Fixes for goimports performance and correctness when using a go.work
file (<a href="https://go.dev/issue/52784">#52784</a>)</li>
<li>Fix a crash during renaming in a package that uses generics (<a
href="https://go.dev/issue/52940">#52940</a>)</li>
<li>Fix gopls getting confused when moving a file from the
<code>foo_test</code> package to <code>foo</code> package (<a
href="https://redirect.github.com/golang/go/issues/45317">#45317</a>)</li>
</ul>
<p>A full list of all issues fixed can be found in the <a
href="https://github.com/golang/go/milestone/260">gopls/v0.9.0
milestone</a>.
To report a new problem, please file a new issue at <a
href="https://go.dev/issues/new">https://go.dev/issues/new</a>.</p>
<h2>Thank you to our contributors!</h2>
<p>Thank you for your contribution, <a
href="https://github.com/alandonovan"><code>@alandonovan</code></a>, <a
href="https://github.com/euroelessar"><code>@euroelessar</code></a>, <a
href="https://github.com/findleyr"><code>@findleyr</code></a>, <a
href="https://github.com/hyangah"><code>@hyangah</code></a>, <a
href="https://github.com/jamalc"><code>@jamalc</code></a>, <a
href="https://github.com/jba"><code>@jba</code></a>, <a
href="https://github.com/marwan-at-work"><code>@marwan-at-work</code></a>,
<a href="https://github.com/suzmue"><code>@suzmue</code></a>, and <a
href="https://github.com/dle8"><code>@dle8</code></a>!</p>
<h2>What’s Next?</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/tools/commit/4609d79b05b5ef86867bd70209b7077e22d30cb2"><code>4609d79</code></a>
cmd/bisect: add -compile and -godebug shorthands</li>
<li><a
href="https://github.com/golang/tools/commit/ddfa2200ae0bde969aa31087e186187f4fa91da0"><code>ddfa220</code></a>
internal/fuzzy: improvements to the symbol scoring algorithm</li>
<li><a
href="https://github.com/golang/tools/commit/344924276c19e46abf4b452856ebf4a49004f37b"><code>3449242</code></a>
go/types/objectpath: don't panic when receiver is missing a method</li>
<li><a
href="https://github.com/golang/tools/commit/0809ec2e45f644b158912c8a2a5947fd3ec38373"><code>0809ec2</code></a>
gopls/internal/lsp/source: document {All,Workspace}Metadata</li>
<li><a
href="https://github.com/golang/tools/commit/8f7fb01dd42992a819cb33b7532bf3d9b1a109be"><code>8f7fb01</code></a>
go/analysis/unitchecker: add test of go vet on std</li>
<li><a
href="https://github.com/golang/tools/commit/23e52a3e12e9073cdc59ae714289d11dd3b9fb1c"><code>23e52a3</code></a>
bisect: diagnose bad targets better</li>
<li><a
href="https://github.com/golang/tools/commit/d5af8894fe9036e6e97095f53ab3b213ff4d7935"><code>d5af889</code></a>
gopls: set GOWORK=off for loads from debug and safetoken tests</li>
<li><a
href="https://github.com/golang/tools/commit/c93329a94714470b8e9b0a2ce2fc2ed526ec3d3d"><code>c93329a</code></a>
go/analysis/passes/printf: reshorten diagnostic about %s in Println
call</li>
<li><a
href="https://github.com/golang/tools/commit/62197261cfa31386d0264edd27256e59c8a998cf"><code>6219726</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/tools/commit/f4d143ebcdfc1b05588abf1b220f2b1773097d46"><code>f4d143e</code></a>
go/ssa: cleanup TestGenericBodies to pickup package name</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.8.0...v0.9.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-10 16:02:44 +02:00
|
|
|
golang.org/x/sync v0.2.0
|
2023-04-07 16:47:50 +02:00
|
|
|
golang.org/x/text v0.9.0
|
feat(deps): bump golang.org/x/tools from 0.8.0 to 0.9.1 (#3999)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.8.0
to 0.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.9.1</h2>
<p>This release fixes a regression in the v0.9.0 release: a crash when
running the <code>go:generate</code><code>golang/go#53781</code></p>
<p>Thank you to all those who filed crash reports, and apologies for the
breakage!</p>
<h2>gopls@v0.9.0</h2>
<p>This release contains significant performance improvements
(especially in incremental processing after source changes), bug fixes,
and support for the LSP “<a
href="https://redirect.github.com/microsoft/language-server-protocol/issues/956">inlay
hints</a>” feature, along with several other minor enhancements.</p>
<h2>Performance improvements</h2>
<p>Source edits cause gopls to invalidate and recompute information
about the workspace, most of which has not changed. Previously, gopls
would spend significant CPU copying data structures, sometimes more than
100ms per keystroke in a large workspace. This release includes many
optimizations to avoid copying data needlessly, including a new <a
href="https://cs.opensource.google/go/x/tools/+/gopls-release-branch.0.9:internal/persistent/map.go;l=26-37">map
representation</a> to achieve copying in constant time. Special thanks
to <a
href="https://github.com/euroelessar"><code>@euroelessar</code></a> for
the design and implementation of this data structure.</p>
<p>As a result of these improvements, gopls should be more responsive
while typing in large codebases, though it will still use a lot of
memory.</p>
<p>Time to process a change notification in the Kubernetes repo:
<img
src="https://user-images.githubusercontent.com/57144380/176967584-a8040048-6357-40d5-9d80-c448281f6482.png"
alt="image" /></p>
<h2>New Features</h2>
<h3>Inlay hints</h3>
<p>Added support for displaying inlay hints of composite literal field
names and types, constant values, function parameter names, function
type params, and short variable declarations. You can try these out in
the <a
href="https://github.com/golang/vscode-go/blob/master/docs/nightly.md">vscode-go
nightly</a> by <a
href="https://github.com/golang/vscode-go/blob/master/docs/settings.md#goinlayhintsassignvariabletypes">enabling
inlay hints settings</a>.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/176967591-a7b767b3-d447-4691-9486-10f957dc9a0f.gif"
alt="image3" /></p>
<h3>Package References</h3>
<p>Find references on <code>package foo</code> now lists locations where
the given package is imported.</p>
<h3>Quick-fix to add field names to struct literals</h3>
<p>A new quick fix adds field names to struct literals with unkeyed
fields.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/176967261-6acbe0e7-7698-46ea-8deb-cbd913296034.gif"
alt="image1" /></p>
<h2>Bug fixes</h2>
<p>This release includes the following notable bugfixes:</p>
<ul>
<li>Fixes for goimports performance and correctness when using a go.work
file (<a href="https://go.dev/issue/52784">#52784</a>)</li>
<li>Fix a crash during renaming in a package that uses generics (<a
href="https://go.dev/issue/52940">#52940</a>)</li>
<li>Fix gopls getting confused when moving a file from the
<code>foo_test</code> package to <code>foo</code> package (<a
href="https://redirect.github.com/golang/go/issues/45317">#45317</a>)</li>
</ul>
<p>A full list of all issues fixed can be found in the <a
href="https://github.com/golang/go/milestone/260">gopls/v0.9.0
milestone</a>.
To report a new problem, please file a new issue at <a
href="https://go.dev/issues/new">https://go.dev/issues/new</a>.</p>
<h2>Thank you to our contributors!</h2>
<p>Thank you for your contribution, <a
href="https://github.com/alandonovan"><code>@alandonovan</code></a>, <a
href="https://github.com/euroelessar"><code>@euroelessar</code></a>, <a
href="https://github.com/findleyr"><code>@findleyr</code></a>, <a
href="https://github.com/hyangah"><code>@hyangah</code></a>, <a
href="https://github.com/jamalc"><code>@jamalc</code></a>, <a
href="https://github.com/jba"><code>@jba</code></a>, <a
href="https://github.com/marwan-at-work"><code>@marwan-at-work</code></a>,
<a href="https://github.com/suzmue"><code>@suzmue</code></a>, and <a
href="https://github.com/dle8"><code>@dle8</code></a>!</p>
<h2>What’s Next?</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/tools/commit/4609d79b05b5ef86867bd70209b7077e22d30cb2"><code>4609d79</code></a>
cmd/bisect: add -compile and -godebug shorthands</li>
<li><a
href="https://github.com/golang/tools/commit/ddfa2200ae0bde969aa31087e186187f4fa91da0"><code>ddfa220</code></a>
internal/fuzzy: improvements to the symbol scoring algorithm</li>
<li><a
href="https://github.com/golang/tools/commit/344924276c19e46abf4b452856ebf4a49004f37b"><code>3449242</code></a>
go/types/objectpath: don't panic when receiver is missing a method</li>
<li><a
href="https://github.com/golang/tools/commit/0809ec2e45f644b158912c8a2a5947fd3ec38373"><code>0809ec2</code></a>
gopls/internal/lsp/source: document {All,Workspace}Metadata</li>
<li><a
href="https://github.com/golang/tools/commit/8f7fb01dd42992a819cb33b7532bf3d9b1a109be"><code>8f7fb01</code></a>
go/analysis/unitchecker: add test of go vet on std</li>
<li><a
href="https://github.com/golang/tools/commit/23e52a3e12e9073cdc59ae714289d11dd3b9fb1c"><code>23e52a3</code></a>
bisect: diagnose bad targets better</li>
<li><a
href="https://github.com/golang/tools/commit/d5af8894fe9036e6e97095f53ab3b213ff4d7935"><code>d5af889</code></a>
gopls: set GOWORK=off for loads from debug and safetoken tests</li>
<li><a
href="https://github.com/golang/tools/commit/c93329a94714470b8e9b0a2ce2fc2ed526ec3d3d"><code>c93329a</code></a>
go/analysis/passes/printf: reshorten diagnostic about %s in Println
call</li>
<li><a
href="https://github.com/golang/tools/commit/62197261cfa31386d0264edd27256e59c8a998cf"><code>6219726</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/tools/commit/f4d143ebcdfc1b05588abf1b220f2b1773097d46"><code>f4d143e</code></a>
go/ssa: cleanup TestGenericBodies to pickup package name</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.8.0...v0.9.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-10 16:02:44 +02:00
|
|
|
golang.org/x/tools v0.9.1
|
2021-10-26 20:02:03 +02:00
|
|
|
gopkg.in/mail.v2 v2.3.1
|
2022-06-02 14:01:47 +02:00
|
|
|
gopkg.in/yaml.v3 v3.0.1
|
2021-10-26 20:02:03 +02:00
|
|
|
)
|
|
|
|
|
|
2023-02-02 03:34:24 +02:00
|
|
|
// DO NOT UPDATE THIS!! needs to be v0.0.0-20210512092938-c05353c2d58c
|
|
|
|
|
require github.com/ProtonMail/go-crypto v0.0.0-20210512092938-c05353c2d58c // indirect
|
|
|
|
|
|
2021-08-25 01:49:11 +02:00
|
|
|
require (
|
2023-05-04 04:11:29 +02:00
|
|
|
cloud.google.com/go v0.110.0 // indirect
|
|
|
|
|
cloud.google.com/go/compute v1.19.0 // indirect
|
2023-02-05 17:09:06 +02:00
|
|
|
cloud.google.com/go/compute/metadata v0.2.3 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
cloud.google.com/go/iam v0.13.0 // indirect
|
|
|
|
|
cloud.google.com/go/kms v1.10.1 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
cloud.google.com/go/storage v1.29.0 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/AlekSi/pointer v1.2.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go v68.0.0+incompatible // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.3.1 // indirect
|
|
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.2.1 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/internal v1.1.2 // indirect
|
|
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys v0.9.0 // indirect
|
|
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal v0.7.1 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.0.0 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/Azure/go-autorest/autorest v0.11.28 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/adal v0.9.22 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/azure/auth v0.5.12 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/azure/cli v0.4.6 // indirect
|
|
|
|
|
github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/to v0.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/Azure/go-autorest/logger v0.2.1 // indirect
|
|
|
|
|
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/AzureAD/microsoft-authentication-library-for-go v0.8.1 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/BurntSushi/toml v1.1.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/Masterminds/goutils v1.1.1 // indirect
|
|
|
|
|
github.com/Masterminds/semver v1.5.0 // indirect
|
|
|
|
|
github.com/Masterminds/sprig v2.22.0+incompatible // indirect
|
2023-01-17 13:55:56 +02:00
|
|
|
github.com/Microsoft/go-winio v0.6.0 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/acomagu/bufpipe v1.0.3 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/alessio/shellescape v1.4.1 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go v1.44.248 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2 v1.17.8 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.10 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/config v1.18.21 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/credentials v1.13.20 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.2 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.51 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.32 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.26 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/internal/ini v1.3.33 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/internal/v4a v1.0.19 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/ecr v1.17.5 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.13.5 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.11 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.23 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.26 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.13.22 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/kms v1.20.11 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/s3 v1.30.2 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/sso v1.12.8 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.14.8 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/sts v1.18.9 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/aws/smithy-go v1.13.5 // indirect
|
2023-03-20 03:47:02 +02:00
|
|
|
github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb // indirect
|
2023-04-23 19:21:33 +02:00
|
|
|
github.com/caarlos0/sshmarshal v0.1.0 // indirect
|
2021-12-21 05:03:48 +02:00
|
|
|
github.com/cavaliergopher/cpio v1.0.1 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/cenkalti/backoff/v4 v4.2.0 // indirect
|
|
|
|
|
github.com/cespare/xxhash/v2 v2.2.0 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/containerd/continuity v0.3.0 // indirect
|
2023-03-20 14:58:29 +02:00
|
|
|
github.com/containerd/stargz-snapshotter/estargz v0.14.3 // indirect
|
2022-06-21 14:29:43 +02:00
|
|
|
github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
2021-12-21 05:03:48 +02:00
|
|
|
github.com/dghubble/sling v1.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/dimchansky/utfbom v1.1.1 // indirect
|
2023-05-23 14:56:41 +02:00
|
|
|
github.com/disgoorg/json v1.1.0 // indirect
|
2022-08-18 21:22:41 +02:00
|
|
|
github.com/disgoorg/log v1.2.0 // indirect
|
2023-03-20 14:58:29 +02:00
|
|
|
github.com/docker/cli v23.0.1+incompatible // indirect
|
2023-05-12 02:58:37 +02:00
|
|
|
github.com/docker/distribution v2.8.2+incompatible // indirect
|
feat(deps): bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible (#3909)
Bumps [github.com/docker/docker](https://github.com/docker/docker) from
23.0.1+incompatible to 23.0.3+incompatible.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/docker/releases">github.com/docker/docker's
releases</a>.</em></p>
<blockquote>
<h2>v23.0.3</h2>
<h2>23.0.3</h2>
<blockquote>
<p><strong>Note</strong></p>
<p>Due to an issue with CentOS 9 Stream's package repositories, packages
for
CentOS 9 are currently unavailable. Packages for CentOS 9 may be added
later,
or as part of the next (23.0.4) patch release.</p>
</blockquote>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>Fixed a number of issues that can cause Swarm encrypted overlay
networks
to fail to uphold their guarantees, addressing <a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841">CVE-2023-28841</a>,
<a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840">CVE-2023-28840</a>,
and
<a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842">CVE-2023-28842</a>.
<ul>
<li>A lack of kernel support for encrypted overlay networks now reports
as an error.</li>
<li>Encrypted overlay networks are eagerly set up, rather than waiting
for
multiple nodes to attach.</li>
<li>Encrypted overlay networks are now usable on Red Hat Enterprise
Linux 9
through the use of the <code>xt_bpf</code> kernel module.</li>
<li>Users of Swarm overlay networks should review <a
href="https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw">GHSA-vwm3-crmr-xfxw</a>
to ensure that unintentional exposure has not occurred.</li>
</ul>
</li>
</ul>
<h3>Packaging Updates</h3>
<ul>
<li>Update containerd to <a
href="https://github.com/containerd/containerd/releases/tag/v1.6.20">v1.6.20</a>.</li>
<li>Update runc to <a
href="https://github.com/opencontainers/runc/releases/tag/v1.1.5">v1.1.5</a>.</li>
</ul>
<h2>v23.0.2</h2>
<h2>23.0.2</h2>
<p>For a full list of pull requests and changes in this release, refer
to the relevant GitHub milestones:</p>
<ul>
<li><a
href="https://github.com/docker/cli/milestone/75?closed=1">docker/cli,
23.0.2 milestone</a></li>
<li><a
href="https://github.com/moby/moby/milestone/114?closed=1">moby/moby,
23.0.2 milestone</a></li>
</ul>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>Fully resolve missing checks for <code>apparmor_parser</code> when
an AppArmor enabled kernel is detected. <a
href="https://redirect.github.com/containerd/containerd/pull/8087">containerd/containerd#8087</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45043">moby/moby#45043</a></li>
<li>Ensure that credentials are redacted from Git URLs when generating
BuildKit buildinfo. Fixes <a
href="https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc">CVE-2023-26054</a>.
<a
href="https://redirect.github.com/moby/moby/pull/45110">moby/moby#45110</a></li>
<li>Fix anonymous volumes created by a <code>VOLUME</code> line in a
Dockerfile being excluded from volume prune. <a
href="https://redirect.github.com/moby/moby/pull/45159">moby/moby#45159</a></li>
<li>Fix a failure to properly propagate errors during removal of volumes
on a Swarm node. <a
href="https://redirect.github.com/moby/moby/pull/45155">moby/moby#45155</a></li>
<li>Temporarily work around a bug in BuildKit <code>COPY --link</code>
by disabling mergeop/diffop optimization. <a
href="https://redirect.github.com/moby/moby/pull/45112">moby/moby#45112</a></li>
<li>Properly clean up child tasks when a parent Swarm job is removed. <a
href="https://redirect.github.com/moby/swarmkit/pull/3112">moby/swarmkit#3112</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li>
<li>Fix Swarm service creation logic so that both a GenericResource and
a non-default network can be used together. <a
href="https://redirect.github.com/moby/swarmkit/pull/3082">moby/swarmkit#3082</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li>
<li>Fix Swarm CSI support requiring the CSI plugin to offer staging
endpoints in order to publish a volume. <a
href="https://redirect.github.com/moby/swarmkit/pull/3116">moby/swarmkit#3116</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li>
<li>Fix a panic caused by log buffering in some configurations. <a
href="https://redirect.github.com/containerd/fifo/pull/47">containerd/fifo#47</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45051">moby/moby#45051</a></li>
<li>Log errors in the REST to Swarm gRPC API translation layer at the
debug level to reduce redundancy and noise. <a
href="https://redirect.github.com/moby/moby/pull/45016">moby/moby#45016</a></li>
<li>Fix a DNS resolution issue affecting containers created with
<code>--dns-opt</code> or <code>--dns-search</code> when
<code>systemd-resolved</code> is used outside the container. <a
href="https://redirect.github.com/moby/moby/pull/45000">moby/moby#45000</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/moby/moby/commit/59118bff500fc0d95d0560a9788735a8d89568ce"><code>59118bf</code></a>
Merge pull request from GHSA-232p-vwff-86mp</li>
<li><a
href="https://github.com/moby/moby/commit/219f21bf07502b447095649b5a2764661737f164"><code>219f21b</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/docker/issues/45196">#45196</a>
from vvoland/integration-restart-race-23</li>
<li><a
href="https://github.com/moby/moby/commit/b87f7f18b82fbb647b5142c6e5459a88a7652d02"><code>b87f7f1</code></a>
libnet/d/overlay: insert the input-drop rule</li>
<li><a
href="https://github.com/moby/moby/commit/c6bf3071fee48b79c2d48faf8855b8afe0a1e951"><code>c6bf307</code></a>
StartWithLogFile: Fix d.cmd race</li>
<li><a
href="https://github.com/moby/moby/commit/7f49ca259bfea1c08bb3019d0db3aa894ff157a6"><code>7f49ca2</code></a>
TestDaemonRestartKillContainers: Fix loop capture</li>
<li><a
href="https://github.com/moby/moby/commit/98cbcb8003b7cf8da35fb5d05f5babbe142ab7c8"><code>98cbcb8</code></a>
libnet/d/overlay: add BPF-powered VNI matcher</li>
<li><a
href="https://github.com/moby/moby/commit/5c5fac237425c4bf79d2f048c1850f855f0182aa"><code>5c5fac2</code></a>
libnet/d/overlay: extract VNI match rule builder</li>
<li><a
href="https://github.com/moby/moby/commit/c492a22287557860831a7c4f523b8e53692bb822"><code>c492a22</code></a>
libn/d/overlay: enforce encryption on sandbox init</li>
<li><a
href="https://github.com/moby/moby/commit/018edb02849100de701d6ab6fb932ffb68843e4b"><code>018edb0</code></a>
libnet/d/overlay: document some encryption code</li>
<li><a
href="https://github.com/moby/moby/commit/a1fd2f22f6ee07ab5bf241e7b33c75e395bfa9e5"><code>a1fd2f2</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/docker/issues/45157">#45157</a>
from thaJeztah/23.0_backport_update_shfmt</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/docker/compare/v23.0.1...v23.0.3">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-05 15:17:59 +02:00
|
|
|
github.com/docker/docker v23.0.3+incompatible // indirect
|
2023-01-17 13:55:56 +02:00
|
|
|
github.com/docker/docker-credential-helpers v0.7.0 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/docker/go-connections v0.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/docker/go-metrics v0.0.1 // indirect
|
2023-04-24 13:47:21 +02:00
|
|
|
github.com/docker/go-units v0.5.0
|
2023-05-02 14:06:35 +02:00
|
|
|
github.com/elliotchance/orderedmap/v2 v2.2.0 // indirect
|
2023-02-02 01:07:53 +02:00
|
|
|
github.com/emirpasic/gods v1.12.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/evanphx/json-patch/v5 v5.6.0 // indirect
|
|
|
|
|
github.com/fsnotify/fsnotify v1.6.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/go-git/gcfg v1.5.0 // indirect
|
2023-02-02 01:07:53 +02:00
|
|
|
github.com/go-git/go-billy/v5 v5.3.1 // indirect
|
|
|
|
|
github.com/go-git/go-git/v5 v5.4.2 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/go-openapi/analysis v0.21.4 // indirect
|
|
|
|
|
github.com/go-openapi/errors v0.20.3 // indirect
|
|
|
|
|
github.com/go-openapi/jsonpointer v0.19.5 // indirect
|
|
|
|
|
github.com/go-openapi/jsonreference v0.20.0 // indirect
|
|
|
|
|
github.com/go-openapi/loads v0.21.2 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/go-openapi/runtime v0.26.0 // indirect
|
|
|
|
|
github.com/go-openapi/spec v0.20.9 // indirect
|
|
|
|
|
github.com/go-openapi/strfmt v0.21.7 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/go-openapi/swag v0.22.3 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/go-openapi/validate v0.22.1 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/gobwas/glob v0.2.3 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
github.com/golang-jwt/jwt/v4 v4.4.3 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
2023-03-20 03:28:33 +02:00
|
|
|
github.com/golang/protobuf v1.5.3 // indirect
|
2022-09-29 03:06:58 +02:00
|
|
|
github.com/google/go-cmp v0.5.9 // indirect
|
2021-10-14 14:32:52 +02:00
|
|
|
github.com/google/go-querystring v1.1.0 // indirect
|
2023-05-04 04:33:35 +02:00
|
|
|
github.com/google/s2a-go v0.1.2 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/google/wire v0.5.0 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/googleapis/enterprise-certificate-proxy v0.2.3 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/googleapis/gax-go/v2 v2.8.0 // indirect
|
2023-03-20 04:19:22 +02:00
|
|
|
github.com/goreleaser/chglog v0.4.2 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/gorilla/mux v1.8.0 // indirect
|
2022-08-18 21:22:41 +02:00
|
|
|
github.com/gorilla/websocket v1.5.0 // indirect
|
2022-12-28 17:24:21 +02:00
|
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
2022-06-02 14:02:24 +02:00
|
|
|
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
|
2023-03-20 03:28:33 +02:00
|
|
|
github.com/hashicorp/go-retryablehttp v0.7.2 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/hashicorp/go-version v1.6.0 // indirect
|
|
|
|
|
github.com/hashicorp/hcl v1.0.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/huandu/xstrings v1.3.2 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/iancoleman/orderedmap v0.2.0 // indirect
|
2023-03-20 14:58:29 +02:00
|
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
|
|
|
|
|
github.com/jmespath/go-jmespath v0.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/josharian/intern v1.0.0 // indirect
|
2023-02-02 01:07:53 +02:00
|
|
|
github.com/kevinburke/ssh_config v1.1.0 // indirect
|
2023-05-24 14:16:40 +02:00
|
|
|
github.com/klauspost/compress v1.16.5 // indirect
|
2022-10-05 14:49:30 +02:00
|
|
|
github.com/kylelemons/godebug v1.1.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf // indirect
|
2022-06-22 02:11:15 +02:00
|
|
|
github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
|
2023-02-05 17:09:06 +02:00
|
|
|
github.com/magiconair/properties v1.8.7 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/mailru/easyjson v0.7.7 // indirect
|
2023-02-07 14:35:50 +02:00
|
|
|
github.com/mattn/go-isatty v0.0.17 // indirect
|
2022-10-13 00:04:48 +02:00
|
|
|
github.com/mattn/go-runewidth v0.0.14 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/mitchellh/copystructure v1.2.0 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/mitchellh/mapstructure v1.5.0 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/mitchellh/reflectwalk v1.0.2 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6 // indirect
|
2022-02-04 20:51:42 +02:00
|
|
|
github.com/muesli/mango v0.1.0 // indirect
|
|
|
|
|
github.com/muesli/mango-pflag v0.1.0 // indirect
|
2022-09-12 04:06:01 +02:00
|
|
|
github.com/muesli/reflow v0.3.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/oklog/ulid v1.3.1 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/opencontainers/go-digest v1.0.0 // indirect
|
2023-01-17 13:55:56 +02:00
|
|
|
github.com/opencontainers/image-spec v1.1.0-rc2 // indirect
|
feat(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5 (#3896)
Bumps
[github.com/opencontainers/runc](https://github.com/opencontainers/runc)
from 1.1.2 to 1.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/opencontainers/runc/releases">github.com/opencontainers/runc's
releases</a>.</em></p>
<blockquote>
<h2>runc 1.1.5 -- "囚われた屈辱は 反撃の嚆矢だ"</h2>
<p>This is the fifth patch release in the 1.1.z series of runc, which
fixes
three CVEs found in runc.</p>
<ul>
<li>
<p>CVE-2023-25809 is a vulnerability involving rootless containers where
(under specific configurations), the container would have write access
to the /sys/fs/cgroup/user.slice/... cgroup hierarchy. No other
hierarchies on the host were affected. This vulnerability was
discovered by Akihiro Suda.
<a
href="https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc">https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc</a></p>
</li>
<li>
<p>CVE-2023-27561 was a regression which effectively re-introduced
CVE-2019-19921. This bug was present from v1.0.0-rc95 to v1.1.4. This
regression was discovered by <a
href="https://github.com/Beuc"><code>@Beuc</code></a>.
<a
href="https://github.com/advisories/GHSA-vpvm-3wq2-2wvm">https://github.com/advisories/GHSA-vpvm-3wq2-2wvm</a></p>
</li>
<li>
<p>CVE-2023-28642 is a variant of CVE-2023-27561 and was fixed by the
same
patch. This variant of the above vulnerability was reported by Lei
Wang.
<a
href="https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c">https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c</a></p>
</li>
</ul>
<p>In addition, the following other fixes are included in this
release:</p>
<ul>
<li>Fix the inability to use <code>/dev/null</code> when inside a
container. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li>
<li>Fix changing the ownership of host's <code>/dev/null</code> caused
by fd redirection
(a regression in 1.1.1). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li>
<li>Fix rare runc exec/enter unshare error on older kernels, including
CentOS < 7.7. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li>
<li>nsexec: Check for errors in <code>write_log()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li>
</ul>
<h3>Static Linking Notices</h3>
<p>The <code>runc</code> binary distributed with this release are
<em>statically linked</em> with
the following <a
href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html">GNU
LGPL-2.1</a> licensed libraries, with <code>runc</code> acting
as a "work that uses the Library":</p>
<ul>
<li><a href="https://github.com/seccomp/libseccomp">libseccomp</a></li>
</ul>
<p>The versions of these libraries were not modified from their upstream
versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the
attached
runc source code) may be used to exercise your rights under the
LGPL-2.1.</p>
<p>However we strongly suggest that you make use of your distribution's
packages
or download them from the authoritative upstream sources, especially
since
these libraries are related to the security of your containers.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/opencontainers/runc/blob/v1.1.5/CHANGELOG.md">github.com/opencontainers/runc's
changelog</a>.</em></p>
<blockquote>
<h2>[1.1.5] - 2023-03-29</h2>
<blockquote>
<p>囚われた屈辱は
反撃の嚆矢だ</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Prohibit container's <code>/proc</code> and <code>/sys</code> to be
symlinks (CVE-2019-19921,
CVE-2023-27561, CVE-2023-28642, <a
href="https://redirect.github.com/opencontainers/runc/issues/3785">#3785</a>)</li>
<li>rootless: rework /sys/fs/cgroup mounts to avoid exposing the host's
cgroup
hierarchy into the container. (CVE-2023-25809)</li>
<li>Fix the inability to use <code>/dev/null</code> when inside a
container. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li>
<li>Fix changing the ownership of host's <code>/dev/null</code> caused
by fd redirection
(a regression in 1.1.1). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li>
<li>Fix rare runc exec/enter unshare error on older kernels, inlcuding
CentOS < 7.7. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li>
<li>nsexec: Check for errors in <code>write_log()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li>
<li>Various CI fixes and updates. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3618">#3618</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3630">#3630</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3640">#3640</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3729">#3729</a>)</li>
</ul>
<h2>[1.1.4] - 2022-08-24</h2>
<blockquote>
<p>If you look for perfection, you'll never be content.</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Fix mounting via wrong proc fd.
When the user and mount namespaces are used, and the bind mount is
followed by
the cgroup mount in the spec, the cgroup was mounted using the bind
mount's
mount fd. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3511">#3511</a>)</li>
<li>Switch <code>kill()</code> in <code>libcontainer/nsenter</code> to
<code>sane_kill()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3536">#3536</a>)</li>
<li>Fix "permission denied" error from <code>runc run</code>
on <code>noexec</code> fs. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3541">#3541</a>)</li>
<li>Fix failed exec after <code>systemctl daemon-reload</code>.
Due to a regression in v1.1.3, the <code>DeviceAllow=char-pts rwm</code>
rule was no
longer added and was causing an error <code>open /dev/pts/0: operation
not permitted: unknown</code>
when systemd was reloaded. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3554">#3554</a>)</li>
<li>Various CI fixes. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3538">#3538</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3558">#3558</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3562">#3562</a>)</li>
</ul>
<h2>[1.1.3] - 2022-06-09</h2>
<blockquote>
<p>In the beginning there was nothing, which exploded.</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Our seccomp <code>-ENOSYS</code> stub now correctly handles
multiplexed syscalls on
s390 and s390x. This solves the issue where syscalls the host kernel did
not
support would return <code>-EPERM</code> despite the existence of the
<code>-ENOSYS</code> stub
code (this was due to how s390x does syscall multiplexing). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3478">#3478</a>)</li>
<li>Retry on dbus disconnect logic in libcontainer/cgroups/systemd now
works as
intended; this fix does not affect runc binary itself but is important
for
libcontainer users such as Kubernetes. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3476">#3476</a>)</li>
<li>Inability to compile with recent clang due to an issue with
duplicate</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/opencontainers/runc/commit/f19387a6bec4944c770f7668ab51c4348d9c2f38"><code>f19387a</code></a>
VERSION: release v1.1.5</li>
<li><a
href="https://github.com/opencontainers/runc/commit/58a9abee210c5a72ab10904f96e0026f684f24e3"><code>58a9abe</code></a>
Merge pull request from GHSA-m8cg-xc2p-r3fc</li>
<li><a
href="https://github.com/opencontainers/runc/commit/27fb72c7ffdbd509b3c15b2bdb4df3d2192bfe7b"><code>27fb72c</code></a>
merge branch 'pr-3776' into release-1.1</li>
<li><a
href="https://github.com/opencontainers/runc/commit/8ec02ea1b14edac85a6e9a2b622ae44e15e11ccd"><code>8ec02ea</code></a>
nsexec: retry unshare on EINVAL</li>
<li><a
href="https://github.com/opencontainers/runc/commit/059d7730fc102052c90fea52c7b3c6f04fbbc487"><code>059d773</code></a>
merge branch 'pr-3785' into release-1.1</li>
<li><a
href="https://github.com/opencontainers/runc/commit/0abab45c9b97c113ff2cdc16f3a7388444c3fbec"><code>0abab45</code></a>
Prohibit /proc and /sys to be symlinks</li>
<li><a
href="https://github.com/opencontainers/runc/commit/0e6b818a2b0d24fdb6697614e5c5f115bbe8e3a5"><code>0e6b818</code></a>
rootless: fix /sys/fs/cgroup mounts</li>
<li><a
href="https://github.com/opencontainers/runc/commit/c6781d100a73d2dcef84e9376d85fff02235a2ed"><code>c6781d1</code></a>
Merge pull request <a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>
from kinvolk/rata/nsfixes-backport</li>
<li><a
href="https://github.com/opencontainers/runc/commit/f6e2cd3baf661e1f377088e13084ccb5aadf41e6"><code>f6e2cd3</code></a>
nsexec: Check for errors in write_log()</li>
<li><a
href="https://github.com/opencontainers/runc/commit/3775df9fcb7828594114866e1df346f44d22ad16"><code>3775df9</code></a>
Merge pull request <a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>
from kolyshkin/1.1-fix-dev-null</li>
<li>Additional commits viewable in <a
href="https://github.com/opencontainers/runc/compare/v1.1.2...v1.1.5">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-29 19:37:12 +02:00
|
|
|
github.com/opencontainers/runc v1.1.5 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/pelletier/go-toml v1.9.5 // indirect
|
2023-02-05 17:09:06 +02:00
|
|
|
github.com/pelletier/go-toml/v2 v2.0.6 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
|
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/prometheus/client_golang v1.15.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/prometheus/client_model v0.3.0 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/prometheus/common v0.42.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/prometheus/procfs v0.9.0 // indirect
|
2022-09-12 04:06:01 +02:00
|
|
|
github.com/rivo/uniseg v0.4.2 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/russross/blackfriday/v2 v2.1.0 // indirect
|
2022-08-18 21:22:41 +02:00
|
|
|
github.com/sasha-s/go-csync v0.0.0-20210812194225-61421b77c44b // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/sergi/go-diff v1.2.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/sigstore/cosign/v2 v2.0.0 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/sigstore/rekor v1.1.1 // indirect
|
|
|
|
|
github.com/sigstore/sigstore v1.6.3 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/sirupsen/logrus v1.9.0 // indirect
|
2023-02-05 17:09:06 +02:00
|
|
|
github.com/spf13/afero v1.9.3 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/spf13/cast v1.5.0 // indirect
|
|
|
|
|
github.com/spf13/jwalterweatherman v1.1.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/spf13/pflag v1.0.5 // indirect
|
2023-02-05 17:09:06 +02:00
|
|
|
github.com/spf13/viper v1.15.0 // indirect
|
|
|
|
|
github.com/subosito/gotenv v1.4.2 // indirect
|
2021-10-26 20:02:03 +02:00
|
|
|
github.com/technoweenie/multipartstreamer v1.0.1 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/theupdateframework/go-tuf v0.5.2 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
|
2022-11-18 01:40:00 +02:00
|
|
|
github.com/tomnomnom/linkheader v0.0.0-20180905144013-02ca5825eb80 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/vbatts/tar-split v0.11.2 // indirect
|
2023-02-02 01:07:53 +02:00
|
|
|
github.com/xanzy/ssh-agent v0.3.1 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
|
|
|
|
|
github.com/xeipuuv/gojsonschema v1.2.0 // indirect
|
2022-08-16 06:00:17 +02:00
|
|
|
gitlab.com/digitalxero/go-conventional-commit v1.0.7 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
go.mongodb.org/mongo-driver v1.11.3 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
go.opencensus.io v0.24.0 // indirect
|
fix: set parallelism to match Linux container CPU (#3901)
<!--
Hi, thanks for contributing!
Please make sure you read our CONTRIBUTING guide.
Also, add tests and the respective documentation changes as well.
-->
Currently Goreleaser uses `runtime.NumCPU()` as the default value if
`--parallelism` is not set.
However, this will get the number of CPUs on the host even when
Goreleaser is run in a container with a limit on the maximum number of
CPUs that can be used (typically in a Kubernetes pod).
Actually, `docker run --cpus=1 goreleaser/goreleaser --debug` shows
`parallelism: 4` on my machine.
This behavior causes CPU throttling, which increases execution time and,
in the worst case, terminates with an error.
I ran into this problem with Jenkins where the agent runs on pod
([Kubernetes plugin for
Jenkins](https://plugins.jenkins.io/kubernetes/)).
This commit introduces
[automaxprocs](https://github.com/uber-go/automaxprocs) to fix this
issue.
This library sets `GOMAXPROCS` to match Linux container CPU quota.
I have also looked for a library that can get CPU quota more directly,
but this seems to be the best I could find.
The reason it is set in a different notation from the automaxprocs
README is to prevent logs from being displayed
([comment](https://github.com/uber-go/automaxprocs/issues/18#issuecomment-511330567)).
I would have liked to write a test, but this change is dependent on the
number of CPUs in the execution environment, so I could not.
Instead, I wrote a Dockerfile for testing
```Dockerfile
FROM golang:1.20.2
WORKDIR /go/app
RUN sh -c "$(curl --location https://taskfile.dev/install.sh)" -- -d -b /usr/local/bin
COPY . .
RUN task build
```
and confirmed built binary shows expected parallelism by following
commands:
```sh
docker build --file Dockerfile.test . -t test-goreleaser
docker run --cpus=1 test-goreleaser ./goreleaser build --snapshot --debug # parallelism: 1
docker run test-goreleaser ./goreleaser build --snapshot --debug # parallelism: 4
```
I also ran the built binary on my Macbook and it was fine.
2023-04-02 22:16:41 +02:00
|
|
|
go.uber.org/automaxprocs v1.5.2
|
2023-03-06 18:07:00 +02:00
|
|
|
golang.org/x/exp v0.0.0-20230124195608-d38c7dcee874 // indirect
|
feat(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 (#3918)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.7.0
to 0.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.8.0</h2>
<h2>Go version support</h2>
<h3>Support for Go 1.18</h3>
<p>Version 0.8.0 of gopls supports features added to Go 1.18,
specifically:</p>
<ul>
<li>Support for multi-module workspaces using <code>go.work</code>
files.</li>
<li>Diagnostics for Fuzz tests.</li>
<li>Improved support for generics.</li>
</ul>
<p>To use these features, gopls must be installed using Go 1.18. See <a
href="https://go.dev/dl/">go.dev/dl</a> for the latest status of Go 1.18
-- as of writing Go 1.18 is not yet released, but Go 1.18 RC1 may be
used.</p>
<h3>Dropped support for Go 1.12</h3>
<p>Version 0.8.0 of gopls no longer supports building at Go 1.12. See <a
href="https://redirect.github.com/golang/go/issues/50827">golang/go#50827</a>
for more details.</p>
<h2>New Features</h2>
<h3><code>go.work</code> integration</h3>
<p>Gopls now supports multi-module workspaces using <code>go.work</code>
files. To use this feature, create a <code>go.work</code> file that
includes the modules you want to work on, and then open your editor to
the directory containing <code>go.work</code>. For more information, see
the <a href="https://go.dev/ref/mod#workspaces"><code>go.work</code>
reference</a>, or the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/workspace.md">gopls
documentation</a> for multi-module workspaces.</p>
<h3>Diagnostics for Fuzz tests</h3>
<p>When writing <a href="https://go.dev/doc/fuzz/">Fuzz tests</a>, gopls
provides diagnostics for invalid arguments to <code>Fuzz</code>.
<img
src="https://user-images.githubusercontent.com/57144380/156475335-0a277e11-c113-460a-837b-d066b42898a6.png"
alt="image" /></p>
<h3>Improved support for generics</h3>
<h4>Honor the language version configured in <code>go.mod</code></h4>
<p>gopls now provides diagnostics for language features based on the <a
href="https://go.dev/ref/mod#go-mod-file-go"><code>go</code>
directive</a> in the applicable <code>go.mod</code> file for a
package.</p>
<p>For some errors related to incompatible language versions, gopls
offers a quick-fix to update the <code>go.mod</code> Go version. (note
that if the <code>go.mod</code> file is open, it may need to be saved in
order for language version changes to take effect)
<img
src="https://user-images.githubusercontent.com/57144380/156476752-7aacf34b-2835-41cb-b80d-7bf5103a43a0.gif"
alt="gomodedit" /></p>
<h4>Improved completion with type parameters</h4>
<p>Gopls autocompletion is improved in several contexts when using
generic types.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/156477933-a1aab4c7-06cd-4cac-85e6-a847b6515b91.gif"
alt="genericvarcompl" /></p>
<h3>New code action to add missing method stubs</h3>
<p>Gopls now provides a code action to implement missing methods.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/156479262-482958e2-69a3-4a97-81a5-5dd27ac250ba.gif"
alt="implementiface" /></p>
<h3>Improved performance and accuracy for workspace symbol requests</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/tools/commit/5ef3193183ecbeb75ee5b12e4d0d76129ec4da3d"><code>5ef3193</code></a>
gopls/internal/lsp/source/typerefs: reexpress tests wrt
ExternalRefs</li>
<li><a
href="https://github.com/golang/tools/commit/c5f768a46c019dd04f52de3b4bd3c20f190047f4"><code>c5f768a</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/tools/commit/7c33a561290d6022b3c6bb0bc9b3cc465183f4d2"><code>7c33a56</code></a>
gopls/internal/lsp/source: show both the original declaration and the
value o...</li>
<li><a
href="https://github.com/golang/tools/commit/4d205d81b5a0f7cb051584b8964b7a0fd6d502c2"><code>4d205d8</code></a>
gopls/doc: add instructions for using go.work with the Go
distribution</li>
<li><a
href="https://github.com/golang/tools/commit/d5076cc64d484da83963b1ae098aef830c21c448"><code>d5076cc</code></a>
gopls/internal/lsp/cache: don't trace a region for MetadataForFile</li>
<li><a
href="https://github.com/golang/tools/commit/f79636135d4e197cc6d78393efad122130a1d8e6"><code>f796361</code></a>
gopls/internal/lsp: add tracing instrumentation for all Server
methods</li>
<li><a
href="https://github.com/golang/tools/commit/e10450195ecc38d4292a65e2650a45ba28116631"><code>e104501</code></a>
gopls/internal/astutil: TestPurgeFuncBodies requires source code for
std</li>
<li><a
href="https://github.com/golang/tools/commit/65208701901cc838949d44fd9cc58ea2c18329a4"><code>6520870</code></a>
gopls/internal/lsp/source/typerefs: allow for duplicate decls</li>
<li><a
href="https://github.com/golang/tools/commit/902fdcadc132d6f7a844f6e6df47af75dd9b5d37"><code>902fdca</code></a>
gopls/internal/lsp/source/typerefs: purge func bodies before
parsing</li>
<li><a
href="https://github.com/golang/tools/commit/58c9a6328cdc0c2bd336231261203f748e113fa5"><code>58c9a63</code></a>
go/packages/internal/nodecount: count ast.Node frequency</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.7.0...v0.8.0">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-07 16:52:48 +02:00
|
|
|
golang.org/x/mod v0.10.0 // indirect
|
feat(deps): bump golang.org/x/tools from 0.8.0 to 0.9.1 (#3999)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.8.0
to 0.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.9.1</h2>
<p>This release fixes a regression in the v0.9.0 release: a crash when
running the <code>go:generate</code><code>golang/go#53781</code></p>
<p>Thank you to all those who filed crash reports, and apologies for the
breakage!</p>
<h2>gopls@v0.9.0</h2>
<p>This release contains significant performance improvements
(especially in incremental processing after source changes), bug fixes,
and support for the LSP “<a
href="https://redirect.github.com/microsoft/language-server-protocol/issues/956">inlay
hints</a>” feature, along with several other minor enhancements.</p>
<h2>Performance improvements</h2>
<p>Source edits cause gopls to invalidate and recompute information
about the workspace, most of which has not changed. Previously, gopls
would spend significant CPU copying data structures, sometimes more than
100ms per keystroke in a large workspace. This release includes many
optimizations to avoid copying data needlessly, including a new <a
href="https://cs.opensource.google/go/x/tools/+/gopls-release-branch.0.9:internal/persistent/map.go;l=26-37">map
representation</a> to achieve copying in constant time. Special thanks
to <a
href="https://github.com/euroelessar"><code>@euroelessar</code></a> for
the design and implementation of this data structure.</p>
<p>As a result of these improvements, gopls should be more responsive
while typing in large codebases, though it will still use a lot of
memory.</p>
<p>Time to process a change notification in the Kubernetes repo:
<img
src="https://user-images.githubusercontent.com/57144380/176967584-a8040048-6357-40d5-9d80-c448281f6482.png"
alt="image" /></p>
<h2>New Features</h2>
<h3>Inlay hints</h3>
<p>Added support for displaying inlay hints of composite literal field
names and types, constant values, function parameter names, function
type params, and short variable declarations. You can try these out in
the <a
href="https://github.com/golang/vscode-go/blob/master/docs/nightly.md">vscode-go
nightly</a> by <a
href="https://github.com/golang/vscode-go/blob/master/docs/settings.md#goinlayhintsassignvariabletypes">enabling
inlay hints settings</a>.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/176967591-a7b767b3-d447-4691-9486-10f957dc9a0f.gif"
alt="image3" /></p>
<h3>Package References</h3>
<p>Find references on <code>package foo</code> now lists locations where
the given package is imported.</p>
<h3>Quick-fix to add field names to struct literals</h3>
<p>A new quick fix adds field names to struct literals with unkeyed
fields.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/176967261-6acbe0e7-7698-46ea-8deb-cbd913296034.gif"
alt="image1" /></p>
<h2>Bug fixes</h2>
<p>This release includes the following notable bugfixes:</p>
<ul>
<li>Fixes for goimports performance and correctness when using a go.work
file (<a href="https://go.dev/issue/52784">#52784</a>)</li>
<li>Fix a crash during renaming in a package that uses generics (<a
href="https://go.dev/issue/52940">#52940</a>)</li>
<li>Fix gopls getting confused when moving a file from the
<code>foo_test</code> package to <code>foo</code> package (<a
href="https://redirect.github.com/golang/go/issues/45317">#45317</a>)</li>
</ul>
<p>A full list of all issues fixed can be found in the <a
href="https://github.com/golang/go/milestone/260">gopls/v0.9.0
milestone</a>.
To report a new problem, please file a new issue at <a
href="https://go.dev/issues/new">https://go.dev/issues/new</a>.</p>
<h2>Thank you to our contributors!</h2>
<p>Thank you for your contribution, <a
href="https://github.com/alandonovan"><code>@alandonovan</code></a>, <a
href="https://github.com/euroelessar"><code>@euroelessar</code></a>, <a
href="https://github.com/findleyr"><code>@findleyr</code></a>, <a
href="https://github.com/hyangah"><code>@hyangah</code></a>, <a
href="https://github.com/jamalc"><code>@jamalc</code></a>, <a
href="https://github.com/jba"><code>@jba</code></a>, <a
href="https://github.com/marwan-at-work"><code>@marwan-at-work</code></a>,
<a href="https://github.com/suzmue"><code>@suzmue</code></a>, and <a
href="https://github.com/dle8"><code>@dle8</code></a>!</p>
<h2>What’s Next?</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/tools/commit/4609d79b05b5ef86867bd70209b7077e22d30cb2"><code>4609d79</code></a>
cmd/bisect: add -compile and -godebug shorthands</li>
<li><a
href="https://github.com/golang/tools/commit/ddfa2200ae0bde969aa31087e186187f4fa91da0"><code>ddfa220</code></a>
internal/fuzzy: improvements to the symbol scoring algorithm</li>
<li><a
href="https://github.com/golang/tools/commit/344924276c19e46abf4b452856ebf4a49004f37b"><code>3449242</code></a>
go/types/objectpath: don't panic when receiver is missing a method</li>
<li><a
href="https://github.com/golang/tools/commit/0809ec2e45f644b158912c8a2a5947fd3ec38373"><code>0809ec2</code></a>
gopls/internal/lsp/source: document {All,Workspace}Metadata</li>
<li><a
href="https://github.com/golang/tools/commit/8f7fb01dd42992a819cb33b7532bf3d9b1a109be"><code>8f7fb01</code></a>
go/analysis/unitchecker: add test of go vet on std</li>
<li><a
href="https://github.com/golang/tools/commit/23e52a3e12e9073cdc59ae714289d11dd3b9fb1c"><code>23e52a3</code></a>
bisect: diagnose bad targets better</li>
<li><a
href="https://github.com/golang/tools/commit/d5af8894fe9036e6e97095f53ab3b213ff4d7935"><code>d5af889</code></a>
gopls: set GOWORK=off for loads from debug and safetoken tests</li>
<li><a
href="https://github.com/golang/tools/commit/c93329a94714470b8e9b0a2ce2fc2ed526ec3d3d"><code>c93329a</code></a>
go/analysis/passes/printf: reshorten diagnostic about %s in Println
call</li>
<li><a
href="https://github.com/golang/tools/commit/62197261cfa31386d0264edd27256e59c8a998cf"><code>6219726</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/tools/commit/f4d143ebcdfc1b05588abf1b220f2b1773097d46"><code>f4d143e</code></a>
go/ssa: cleanup TestGenericBodies to pickup package name</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.8.0...v0.9.1">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-10 16:02:44 +02:00
|
|
|
golang.org/x/net v0.10.0 // indirect
|
|
|
|
|
golang.org/x/sys v0.8.0 // indirect
|
|
|
|
|
golang.org/x/term v0.8.0 // indirect
|
2023-01-10 13:55:31 +02:00
|
|
|
golang.org/x/time v0.3.0 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
google.golang.org/api v0.119.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
google.golang.org/appengine v1.6.7 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1 // indirect
|
|
|
|
|
google.golang.org/grpc v1.54.0 // indirect
|
|
|
|
|
google.golang.org/protobuf v1.30.0 // indirect
|
2021-10-26 20:02:03 +02:00
|
|
|
gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
gopkg.in/ini.v1 v1.67.0 // indirect
|
|
|
|
|
gopkg.in/square/go-jose.v2 v2.6.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
gopkg.in/warnings.v0 v0.1.2 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
gopkg.in/yaml.v2 v2.4.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
sigs.k8s.io/kind v0.17.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
sigs.k8s.io/yaml v1.3.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
)
|
