2018-10-29 02:54:15 +02:00
|
|
|
module github.com/goreleaser/goreleaser
|
|
|
|
|
|
2023-08-15 16:15:04 +02:00
|
|
|
go 1.21
|
2019-09-09 15:17:30 +02:00
|
|
|
|
2018-10-29 02:54:15 +02:00
|
|
|
require (
|
2023-09-20 16:32:07 +02:00
|
|
|
code.gitea.io/sdk/gitea v0.16.0
|
2023-07-31 18:32:36 +02:00
|
|
|
dario.cat/mergo v1.0.0
|
2023-04-23 18:52:42 +02:00
|
|
|
github.com/Masterminds/semver/v3 v3.2.1
|
2023-07-31 16:14:23 +02:00
|
|
|
github.com/atc0005/go-teams-notify/v2 v2.8.0
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20220517224237-e6f29200ae04
|
2022-08-17 15:58:18 +02:00
|
|
|
github.com/caarlos0/ctrlc v1.2.0
|
2023-06-28 18:29:19 +02:00
|
|
|
github.com/caarlos0/env/v9 v9.0.0
|
2022-01-10 16:10:35 +02:00
|
|
|
github.com/caarlos0/go-reddit/v3 v3.0.1
|
2021-03-22 13:45:18 +02:00
|
|
|
github.com/caarlos0/go-shellwords v1.0.12
|
2023-04-30 19:19:55 +02:00
|
|
|
github.com/caarlos0/go-version v0.1.1
|
2023-06-28 15:00:32 +02:00
|
|
|
github.com/caarlos0/log v0.4.2
|
2023-06-28 14:45:38 +02:00
|
|
|
github.com/charmbracelet/keygen v0.4.3
|
2023-08-23 14:46:30 +02:00
|
|
|
github.com/charmbracelet/lipgloss v0.8.0
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/chrismellard/docker-credential-acr-env v0.0.0-20220327082430-c57b701bfc08
|
2021-12-21 05:03:48 +02:00
|
|
|
github.com/dghubble/go-twitter v0.0.0-20211115160449-93a8679adecb
|
2022-12-08 14:41:38 +02:00
|
|
|
github.com/dghubble/oauth1 v0.7.2
|
2023-09-20 16:30:35 +02:00
|
|
|
github.com/disgoorg/disgo v0.16.9
|
2022-10-17 13:52:12 +02:00
|
|
|
github.com/disgoorg/snowflake/v2 v2.0.1
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/distribution/distribution/v3 v3.0.0-20221021092657-c47a966fded8
|
2021-10-29 19:02:33 +02:00
|
|
|
github.com/go-telegram-bot-api/telegram-bot-api v4.6.4+incompatible
|
2023-08-03 14:34:13 +02:00
|
|
|
github.com/google/go-containerregistry v0.16.1
|
2023-09-11 15:53:33 +02:00
|
|
|
github.com/google/go-github/v55 v55.0.0
|
2023-06-26 18:56:50 +02:00
|
|
|
github.com/google/ko v0.14.1
|
2023-08-22 14:40:01 +02:00
|
|
|
github.com/google/uuid v1.3.1
|
2022-02-12 04:17:13 +02:00
|
|
|
github.com/goreleaser/fileglob v1.3.0
|
2023-09-19 14:02:17 +02:00
|
|
|
github.com/goreleaser/nfpm/v2 v2.33.0
|
2022-12-28 17:24:21 +02:00
|
|
|
github.com/hashicorp/go-multierror v1.1.1
|
2023-09-19 13:43:56 +02:00
|
|
|
github.com/invopop/jsonschema v0.8.0
|
2023-08-17 13:33:17 +02:00
|
|
|
github.com/jarcoal/httpmock v1.3.1
|
2023-05-11 14:38:19 +02:00
|
|
|
github.com/klauspost/pgzip v1.2.6
|
2022-11-18 01:40:00 +02:00
|
|
|
github.com/mattn/go-mastodon v0.0.6
|
2019-06-29 16:02:40 +02:00
|
|
|
github.com/mitchellh/go-homedir v1.1.0
|
2022-06-22 13:46:38 +02:00
|
|
|
github.com/muesli/mango-cobra v1.2.0
|
2022-01-18 15:17:52 +02:00
|
|
|
github.com/muesli/roff v0.1.0
|
2023-06-28 14:46:00 +02:00
|
|
|
github.com/muesli/termenv v0.15.2
|
2023-04-23 19:09:35 +02:00
|
|
|
github.com/ory/dockertest/v3 v3.10.0
|
2023-09-19 13:43:35 +02:00
|
|
|
github.com/slack-go/slack v0.12.3
|
2023-04-05 14:21:25 +02:00
|
|
|
github.com/spf13/cobra v1.7.0
|
2023-05-31 15:52:51 +02:00
|
|
|
github.com/stretchr/testify v1.8.4
|
2022-12-13 14:44:34 +02:00
|
|
|
github.com/ulikunitz/xz v0.5.11
|
2022-08-22 14:29:27 +02:00
|
|
|
github.com/withfig/autocomplete-tools/integrations/cobra v1.2.1
|
2023-09-19 13:43:17 +02:00
|
|
|
github.com/xanzy/go-gitlab v0.91.1
|
2023-09-19 13:47:21 +02:00
|
|
|
gocloud.dev v0.34.0
|
2023-09-20 16:16:02 +02:00
|
|
|
golang.org/x/crypto v0.13.0
|
2023-09-20 16:32:20 +02:00
|
|
|
golang.org/x/oauth2 v0.12.0
|
2023-06-15 16:23:43 +02:00
|
|
|
golang.org/x/sync v0.3.0
|
2023-09-19 13:47:10 +02:00
|
|
|
golang.org/x/text v0.13.0
|
feat(deps): bump golang.org/x/tools from 0.11.1 to 0.12.0 (#4237)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.11.1
to 0.12.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.12.0</h2>
<p>This release contains a major rewrite of the way gopls computes and
stores package information, with the goal of reducing memory usage and
allowing gopls to scale to larger repositories. This change can also
significantly reduce startup time when workspaces are reopened, as gopls
now uses a file-based cache to persist data across sessions. With these
optimizations, gopls is finally able to <a
href="https://go.dev/issues/48738">fully analyze dependencies</a> using
the <a
href="https://pkg.go.dev/golang.org/x/tools/go/analysis">golang.org/x/tools/go/analysis</a>
framework, resulting in improved accuracy for analysis diagnostics.</p>
<p>You can install this release with <code>go install</code>:</p>
<pre><code>go install golang.org/x/tools/gopls@v0.12.0
</code></pre>
<h1>Support changes</h1>
<p>As gopls matures, we're trying to simplify its configuration so that
gopls Just Works in more scenarios, and so that we have fewer
configuration combinations to test. This means that we will be gradually
deprecating settings that affect the core behavior of gopls.</p>
<h2>Removed experimental configuration options</h2>
<p>As announced in the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.10.0">v0.10.0
release notes</a>, this release removes support for the
<code>experimentalWorkspaceModule</code> and
<code>experimentalWatchedFileDelay</code> settings. The
<code>experimentalPackageCacheKey</code> setting is also removed, as it
is irrelevant in the new design.</p>
<p>The <code>experimentalWorkspaceModule</code> setting in particular
may still be in use by some users. This setting has been superseded by
built-in support for multi-module workspaces in the <code>go</code>
command, via <a href="https://go.dev/doc/tutorial/workspaces">Go
workspaces</a>. To get the equivalent behavior in gopls@v0.12.0, please
create a <code>go.work</code> file in your workspace using all desired
modules. To use all modules in your workspace, run:</p>
<pre><code>go work use -r .
</code></pre>
<h2>Dropped support for Go 1.13-1.15, deprecated support for Go
1.16-1.17</h2>
<p>As announced in the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.10.0">v0.10.0
release notes</a>, this release drops support for Go 1.13-1.15, and in
fact does not build with these Go versions.</p>
<p>Additionally, <code>gopls@v0.12.x</code> will be the final sequence
of versions supporting Go 1.16-1.17, and therefore displays a
deprecation notice when used with these Go versions.</p>
<h2>Supported operating systems</h2>
<p>Given that our users are almost entirely on Linux, Windows, or
Darwin, we are discussing narrowing our support to focus on those
operating systems, in <a
href="https://redirect.github.com/golang/go/issues/59981">golang/go#59981</a>.</p>
<h1>Performance improvements</h1>
<p>The banner feature of this release is an internal redesign that
significantly improves the way gopls scales in larger codebases.
Performance, particularly memory usage, has <a
href="https://redirect.github.com/golang/go/issues/36943">long</a> <a
href="https://redirect.github.com/golang/go/issues/37790">been</a> <a
href="https://redirect.github.com/golang/go/issues/43968">a</a> <a
href="https://redirect.github.com/golang/go/issues/44981">pain</a> <a
href="https://redirect.github.com/golang/go/issues/45363">point</a> <a
href="https://redirect.github.com/golang/go/issues/45457">for</a> <a
href="https://redirect.github.com/golang/go/issues/46897">our</a> <a
href="https://redirect.github.com/golang/go/issues/47855">users</a>.</p>
<h2>Reduced memory usage</h2>
<p>Previous releases of gopls held typed syntax trees for all packages,
in memory, all the time. With this release, these large data structures
are ephemeral: as soon as they are constructed, an index of information
derived from them is saved persistently to a file-based cache, and the
data structures are recycled. The index for each package includes the
locations of declaring and referring identifiers; the set of exported
declarations and their types; the method sets of each interface; and any
diagnostics and facts (see below) produced during analysis. The index
holds all the information needed to serve global-scope LSP queries such
as “references”, “implementations”, and so on.</p>
<p>Moving package information to a file-based cache greatly reduces the
amount of RAM gopls uses, by almost an order of magnitude in larger
projects. The table below shows the reductions in steady-state memory
usage for three open-source Go repositories.</p>
<table>
<thead>
<tr>
<th>Project</th>
<th>Packages</th>
<th>In-use bytes v0.11.0</th>
<th>v0.12.0</th>
<th>Change</th>
</tr>
</thead>
<tbody>
<tr>
<td>gopls</td>
<td>405</td>
<td>497MB</td>
<td>232MB</td>
<td>-53%</td>
</tr>
<tr>
<td>kubernetes</td>
<td>3137</td>
<td>3090MB</td>
<td>832MB</td>
<td>-73%</td>
</tr>
<tr>
<td>google-cloud-go + submods</td>
<td>7657</td>
<td>5039MB</td>
<td>863MB</td>
<td>-83%</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/tools/commit/229f8486be036a365bbcaf1172d01d089ea59965"><code>229f848</code></a>
gopls/internal/lsp/source: enable new defers analyzer</li>
<li><a
href="https://github.com/golang/tools/commit/2dc7ebab284bdfe6bb7ae8b77c3cccb0049e13ce"><code>2dc7eba</code></a>
go/analysis: use parser.SkipObjectResolution</li>
<li><a
href="https://github.com/golang/tools/commit/f91c023a9b093f57e379f719591d5e3725e07600"><code>f91c023</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/tools/commit/e0783a89e9a456f9b64aa66717db398a20e7921d"><code>e0783a8</code></a>
internal/gcimporter: remove bug report on objectpath failure</li>
<li><a
href="https://github.com/golang/tools/commit/75f6f9c0b004228b5a2a6f4c6a7a9719321e29bd"><code>75f6f9c</code></a>
gopls/internal/bug: add gopls/bug telemetry counter</li>
<li><a
href="https://github.com/golang/tools/commit/4b271f9c7195c9e700572e4ea43cf1121b12e6ee"><code>4b271f9</code></a>
gopls: add gopls/client telemetry counters</li>
<li><a
href="https://github.com/golang/tools/commit/d0b18e25a0aba0090de3d8b744fb001bf16763cf"><code>d0b18e2</code></a>
go/analysis/passes/copylock: fix infinite recursion</li>
<li><a
href="https://github.com/golang/tools/commit/5b4d4266651c799fcd0de7475fcaf3afd7512a58"><code>5b4d426</code></a>
gopls/internal/hooks: clean language version before passing to
gofumpt</li>
<li><a
href="https://github.com/golang/tools/commit/2160c5f15ff7f02edd7dce655540bb17619ca99b"><code>2160c5f</code></a>
gopls/internal/lsp/analysis: fix stubmethods with variadic
parameters</li>
<li><a
href="https://github.com/golang/tools/commit/3d20bbe0fb2f6c3c3b340ce4d0bbcd1ad880071c"><code>3d20bbe</code></a>
internal/gcimporter: add a missing return if objectpath fails</li>
<li>See full diff in <a
href="https://github.com/golang/tools/compare/v0.11.1...v0.12.0">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-08 14:32:22 +02:00
|
|
|
golang.org/x/tools v0.12.0
|
2021-10-26 20:02:03 +02:00
|
|
|
gopkg.in/mail.v2 v2.3.1
|
2022-06-02 14:01:47 +02:00
|
|
|
gopkg.in/yaml.v3 v3.0.1
|
2021-10-26 20:02:03 +02:00
|
|
|
)
|
|
|
|
|
|
2023-09-20 16:32:07 +02:00
|
|
|
require (
|
|
|
|
|
github.com/davidmz/go-pageant v1.0.2 // indirect
|
|
|
|
|
github.com/go-fed/httpsig v1.1.0 // indirect
|
|
|
|
|
github.com/imdario/mergo v0.3.16 // indirect
|
|
|
|
|
)
|
2023-07-31 18:32:36 +02:00
|
|
|
|
2021-08-25 01:49:11 +02:00
|
|
|
require (
|
2023-08-02 10:25:44 +02:00
|
|
|
cloud.google.com/go v0.110.7 // indirect
|
|
|
|
|
cloud.google.com/go/compute v1.23.0 // indirect
|
2023-02-05 17:09:06 +02:00
|
|
|
cloud.google.com/go/compute/metadata v0.2.3 // indirect
|
2023-07-20 14:56:26 +02:00
|
|
|
cloud.google.com/go/iam v1.1.1 // indirect
|
2023-08-02 10:25:44 +02:00
|
|
|
cloud.google.com/go/kms v1.15.0 // indirect
|
2023-07-20 14:56:26 +02:00
|
|
|
cloud.google.com/go/storage v1.31.0 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/AlekSi/pointer v1.2.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go v68.0.0+incompatible // indirect
|
2023-07-20 14:56:26 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.7.0 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.3.0 // indirect
|
|
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/internal v1.3.0 // indirect
|
|
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/keyvault/azkeys v0.10.0 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/keyvault/internal v0.7.1 // indirect
|
2023-07-20 14:56:26 +02:00
|
|
|
github.com/Azure/azure-sdk-for-go/sdk/storage/azblob v1.1.0 // indirect
|
2023-06-26 18:56:50 +02:00
|
|
|
github.com/Azure/go-ansiterm v0.0.0-20230124172434-306776ec8161 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/Azure/go-autorest v14.2.0+incompatible // indirect
|
2023-05-27 05:24:50 +02:00
|
|
|
github.com/Azure/go-autorest/autorest v0.11.29 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/adal v0.9.23 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/azure/auth v0.5.12 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/azure/cli v0.4.6 // indirect
|
|
|
|
|
github.com/Azure/go-autorest/autorest/date v0.3.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/Azure/go-autorest/autorest/to v0.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/Azure/go-autorest/logger v0.2.1 // indirect
|
|
|
|
|
github.com/Azure/go-autorest/tracing v0.6.0 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/AzureAD/microsoft-authentication-library-for-go v1.0.0 // indirect
|
2023-06-26 18:56:50 +02:00
|
|
|
github.com/BurntSushi/toml v1.2.1 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/Masterminds/goutils v1.1.1 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/Masterminds/sprig/v3 v3.2.3 // indirect
|
2023-06-26 18:56:50 +02:00
|
|
|
github.com/Microsoft/go-winio v0.6.1 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/ProtonMail/go-crypto v0.0.0-20230626094100-7e9e0395ebec // indirect
|
|
|
|
|
github.com/acomagu/bufpipe v1.0.4 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/alessio/shellescape v1.4.1 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/asaskevich/govalidator v0.0.0-20230301143203-a9d515a09cc2 // indirect
|
2023-08-02 10:25:44 +02:00
|
|
|
github.com/aws/aws-sdk-go v1.44.314 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2 v1.20.0 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/aws/protocol/eventstream v1.4.11 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/config v1.18.32 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/credentials v1.13.31 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.13.7 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/feature/s3/manager v1.11.76 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/internal/configsources v1.1.37 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.4.31 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/internal/ini v1.3.38 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/internal/v4a v1.1.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/ecr v1.17.5 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.13.5 // indirect
|
2023-08-02 10:25:44 +02:00
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.9.12 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/checksum v1.1.32 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.9.31 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/internal/s3shared v1.15.0 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/kms v1.24.1 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/s3 v1.38.1 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/sso v1.13.1 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/ssooidc v1.15.1 // indirect
|
|
|
|
|
github.com/aws/aws-sdk-go-v2/service/sts v1.21.1 // indirect
|
|
|
|
|
github.com/aws/smithy-go v1.14.0 // indirect
|
2023-03-20 03:47:02 +02:00
|
|
|
github.com/aymanbagabas/go-osc52/v2 v2.0.1 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/beorn7/perks v1.0.1 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/blakesmith/ar v0.0.0-20190502131153-809d4375e1fb // indirect
|
2023-04-23 19:21:33 +02:00
|
|
|
github.com/caarlos0/sshmarshal v0.1.0 // indirect
|
2021-12-21 05:03:48 +02:00
|
|
|
github.com/cavaliergopher/cpio v1.0.1 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/cenkalti/backoff/v4 v4.2.0 // indirect
|
|
|
|
|
github.com/cespare/xxhash/v2 v2.2.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/cloudflare/circl v1.3.3 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/containerd/continuity v0.3.0 // indirect
|
2023-03-20 14:58:29 +02:00
|
|
|
github.com/containerd/stargz-snapshotter/estargz v0.14.3 // indirect
|
2022-06-21 14:29:43 +02:00
|
|
|
github.com/cpuguy83/go-md2man/v2 v2.0.2 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/davecgh/go-spew v1.1.1 // indirect
|
2021-12-21 05:03:48 +02:00
|
|
|
github.com/dghubble/sling v1.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/dimchansky/utfbom v1.1.1 // indirect
|
2023-05-23 14:56:41 +02:00
|
|
|
github.com/disgoorg/json v1.1.0 // indirect
|
2023-08-07 15:04:06 +02:00
|
|
|
github.com/disgoorg/log v1.2.1 // indirect
|
2023-08-03 14:34:13 +02:00
|
|
|
github.com/docker/cli v24.0.0+incompatible // indirect
|
2023-05-12 02:58:37 +02:00
|
|
|
github.com/docker/distribution v2.8.2+incompatible // indirect
|
2023-06-26 18:56:50 +02:00
|
|
|
github.com/docker/docker v24.0.2+incompatible // indirect
|
2023-01-17 13:55:56 +02:00
|
|
|
github.com/docker/docker-credential-helpers v0.7.0 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/docker/go-connections v0.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/docker/go-metrics v0.0.1 // indirect
|
2023-04-24 13:47:21 +02:00
|
|
|
github.com/docker/go-units v0.5.0
|
2023-05-02 14:06:35 +02:00
|
|
|
github.com/elliotchance/orderedmap/v2 v2.2.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/emirpasic/gods v1.18.1 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/evanphx/json-patch/v5 v5.6.0 // indirect
|
|
|
|
|
github.com/fsnotify/fsnotify v1.6.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/go-git/gcfg v1.5.1-0.20230307220236-3a3c6141e376 // indirect
|
|
|
|
|
github.com/go-git/go-billy/v5 v5.4.1 // indirect
|
|
|
|
|
github.com/go-git/go-git/v5 v5.7.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/go-openapi/analysis v0.21.4 // indirect
|
|
|
|
|
github.com/go-openapi/errors v0.20.3 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/go-openapi/jsonpointer v0.19.6 // indirect
|
|
|
|
|
github.com/go-openapi/jsonreference v0.20.2 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/go-openapi/loads v0.21.2 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/go-openapi/runtime v0.26.0 // indirect
|
|
|
|
|
github.com/go-openapi/spec v0.20.9 // indirect
|
|
|
|
|
github.com/go-openapi/strfmt v0.21.7 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/go-openapi/swag v0.22.3 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/go-openapi/validate v0.22.1 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/gobwas/glob v0.2.3 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/gogo/protobuf v1.3.2 // indirect
|
2023-05-27 05:24:50 +02:00
|
|
|
github.com/golang-jwt/jwt/v4 v4.5.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da // indirect
|
2023-03-20 03:28:33 +02:00
|
|
|
github.com/golang/protobuf v1.5.3 // indirect
|
2022-09-29 03:06:58 +02:00
|
|
|
github.com/google/go-cmp v0.5.9 // indirect
|
2021-10-14 14:32:52 +02:00
|
|
|
github.com/google/go-querystring v1.1.0 // indirect
|
2023-07-20 14:56:26 +02:00
|
|
|
github.com/google/rpmpack v0.5.0 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/google/s2a-go v0.1.4 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/google/safetext v0.0.0-20220905092116-b49f7bc46da2 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/google/shlex v0.0.0-20191202100458-e7afc7fbc510 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/google/wire v0.5.0 // indirect
|
2023-06-20 14:04:08 +02:00
|
|
|
github.com/googleapis/enterprise-certificate-proxy v0.2.5 // indirect
|
2023-07-20 14:56:26 +02:00
|
|
|
github.com/googleapis/gax-go/v2 v2.12.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/goreleaser/chglog v0.5.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/gorilla/mux v1.8.0 // indirect
|
2022-08-18 21:22:41 +02:00
|
|
|
github.com/gorilla/websocket v1.5.0 // indirect
|
2022-12-28 17:24:21 +02:00
|
|
|
github.com/hashicorp/errwrap v1.1.0 // indirect
|
2022-06-02 14:02:24 +02:00
|
|
|
github.com/hashicorp/go-cleanhttp v0.5.2 // indirect
|
2023-03-20 03:28:33 +02:00
|
|
|
github.com/hashicorp/go-retryablehttp v0.7.2 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/hashicorp/go-version v1.6.0 // indirect
|
|
|
|
|
github.com/hashicorp/hcl v1.0.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/huandu/xstrings v1.3.3 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/iancoleman/orderedmap v0.2.0 // indirect
|
2023-03-20 14:58:29 +02:00
|
|
|
github.com/inconshreveable/mousetrap v1.1.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/jbenet/go-context v0.0.0-20150711004518-d14ea06fba99 // indirect
|
|
|
|
|
github.com/jmespath/go-jmespath v0.4.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/josharian/intern v1.0.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/kevinburke/ssh_config v1.2.0 // indirect
|
2023-09-19 14:02:17 +02:00
|
|
|
github.com/klauspost/compress v1.17.0 // indirect
|
2022-10-05 14:49:30 +02:00
|
|
|
github.com/kylelemons/godebug v1.1.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/letsencrypt/boulder v0.0.0-20221109233200-85aa52084eaf // indirect
|
2022-06-22 02:11:15 +02:00
|
|
|
github.com/lucasb-eyer/go-colorful v1.2.0 // indirect
|
2023-02-05 17:09:06 +02:00
|
|
|
github.com/magiconair/properties v1.8.7 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/mailru/easyjson v0.7.7 // indirect
|
2023-06-28 14:46:00 +02:00
|
|
|
github.com/mattn/go-isatty v0.0.18 // indirect
|
2022-10-13 00:04:48 +02:00
|
|
|
github.com/mattn/go-runewidth v0.0.14 // indirect
|
2023-03-06 18:07:00 +02:00
|
|
|
github.com/matttproud/golang_protobuf_extensions v1.0.4 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/mitchellh/copystructure v1.2.0 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/mitchellh/mapstructure v1.5.0 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/mitchellh/reflectwalk v1.0.2 // indirect
|
2023-06-26 18:56:50 +02:00
|
|
|
github.com/moby/term v0.0.0-20221205130635-1aeaba878587 // indirect
|
2022-02-04 20:51:42 +02:00
|
|
|
github.com/muesli/mango v0.1.0 // indirect
|
|
|
|
|
github.com/muesli/mango-pflag v0.1.0 // indirect
|
2022-09-12 04:06:01 +02:00
|
|
|
github.com/muesli/reflow v0.3.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/oklog/ulid v1.3.1 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/opencontainers/go-digest v1.0.0 // indirect
|
2023-06-26 18:56:50 +02:00
|
|
|
github.com/opencontainers/image-spec v1.1.0-rc3 // indirect
|
feat(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5 (#3896)
Bumps
[github.com/opencontainers/runc](https://github.com/opencontainers/runc)
from 1.1.2 to 1.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/opencontainers/runc/releases">github.com/opencontainers/runc's
releases</a>.</em></p>
<blockquote>
<h2>runc 1.1.5 -- "囚われた屈辱は 反撃の嚆矢だ"</h2>
<p>This is the fifth patch release in the 1.1.z series of runc, which
fixes
three CVEs found in runc.</p>
<ul>
<li>
<p>CVE-2023-25809 is a vulnerability involving rootless containers where
(under specific configurations), the container would have write access
to the /sys/fs/cgroup/user.slice/... cgroup hierarchy. No other
hierarchies on the host were affected. This vulnerability was
discovered by Akihiro Suda.
<a
href="https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc">https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc</a></p>
</li>
<li>
<p>CVE-2023-27561 was a regression which effectively re-introduced
CVE-2019-19921. This bug was present from v1.0.0-rc95 to v1.1.4. This
regression was discovered by <a
href="https://github.com/Beuc"><code>@Beuc</code></a>.
<a
href="https://github.com/advisories/GHSA-vpvm-3wq2-2wvm">https://github.com/advisories/GHSA-vpvm-3wq2-2wvm</a></p>
</li>
<li>
<p>CVE-2023-28642 is a variant of CVE-2023-27561 and was fixed by the
same
patch. This variant of the above vulnerability was reported by Lei
Wang.
<a
href="https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c">https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c</a></p>
</li>
</ul>
<p>In addition, the following other fixes are included in this
release:</p>
<ul>
<li>Fix the inability to use <code>/dev/null</code> when inside a
container. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li>
<li>Fix changing the ownership of host's <code>/dev/null</code> caused
by fd redirection
(a regression in 1.1.1). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li>
<li>Fix rare runc exec/enter unshare error on older kernels, including
CentOS < 7.7. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li>
<li>nsexec: Check for errors in <code>write_log()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li>
</ul>
<h3>Static Linking Notices</h3>
<p>The <code>runc</code> binary distributed with this release are
<em>statically linked</em> with
the following <a
href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html">GNU
LGPL-2.1</a> licensed libraries, with <code>runc</code> acting
as a "work that uses the Library":</p>
<ul>
<li><a href="https://github.com/seccomp/libseccomp">libseccomp</a></li>
</ul>
<p>The versions of these libraries were not modified from their upstream
versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the
attached
runc source code) may be used to exercise your rights under the
LGPL-2.1.</p>
<p>However we strongly suggest that you make use of your distribution's
packages
or download them from the authoritative upstream sources, especially
since
these libraries are related to the security of your containers.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/opencontainers/runc/blob/v1.1.5/CHANGELOG.md">github.com/opencontainers/runc's
changelog</a>.</em></p>
<blockquote>
<h2>[1.1.5] - 2023-03-29</h2>
<blockquote>
<p>囚われた屈辱は
反撃の嚆矢だ</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Prohibit container's <code>/proc</code> and <code>/sys</code> to be
symlinks (CVE-2019-19921,
CVE-2023-27561, CVE-2023-28642, <a
href="https://redirect.github.com/opencontainers/runc/issues/3785">#3785</a>)</li>
<li>rootless: rework /sys/fs/cgroup mounts to avoid exposing the host's
cgroup
hierarchy into the container. (CVE-2023-25809)</li>
<li>Fix the inability to use <code>/dev/null</code> when inside a
container. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li>
<li>Fix changing the ownership of host's <code>/dev/null</code> caused
by fd redirection
(a regression in 1.1.1). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li>
<li>Fix rare runc exec/enter unshare error on older kernels, inlcuding
CentOS < 7.7. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li>
<li>nsexec: Check for errors in <code>write_log()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li>
<li>Various CI fixes and updates. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3618">#3618</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3630">#3630</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3640">#3640</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3729">#3729</a>)</li>
</ul>
<h2>[1.1.4] - 2022-08-24</h2>
<blockquote>
<p>If you look for perfection, you'll never be content.</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Fix mounting via wrong proc fd.
When the user and mount namespaces are used, and the bind mount is
followed by
the cgroup mount in the spec, the cgroup was mounted using the bind
mount's
mount fd. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3511">#3511</a>)</li>
<li>Switch <code>kill()</code> in <code>libcontainer/nsenter</code> to
<code>sane_kill()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3536">#3536</a>)</li>
<li>Fix "permission denied" error from <code>runc run</code>
on <code>noexec</code> fs. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3541">#3541</a>)</li>
<li>Fix failed exec after <code>systemctl daemon-reload</code>.
Due to a regression in v1.1.3, the <code>DeviceAllow=char-pts rwm</code>
rule was no
longer added and was causing an error <code>open /dev/pts/0: operation
not permitted: unknown</code>
when systemd was reloaded. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3554">#3554</a>)</li>
<li>Various CI fixes. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3538">#3538</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3558">#3558</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3562">#3562</a>)</li>
</ul>
<h2>[1.1.3] - 2022-06-09</h2>
<blockquote>
<p>In the beginning there was nothing, which exploded.</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Our seccomp <code>-ENOSYS</code> stub now correctly handles
multiplexed syscalls on
s390 and s390x. This solves the issue where syscalls the host kernel did
not
support would return <code>-EPERM</code> despite the existence of the
<code>-ENOSYS</code> stub
code (this was due to how s390x does syscall multiplexing). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3478">#3478</a>)</li>
<li>Retry on dbus disconnect logic in libcontainer/cgroups/systemd now
works as
intended; this fix does not affect runc binary itself but is important
for
libcontainer users such as Kubernetes. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3476">#3476</a>)</li>
<li>Inability to compile with recent clang due to an issue with
duplicate</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/opencontainers/runc/commit/f19387a6bec4944c770f7668ab51c4348d9c2f38"><code>f19387a</code></a>
VERSION: release v1.1.5</li>
<li><a
href="https://github.com/opencontainers/runc/commit/58a9abee210c5a72ab10904f96e0026f684f24e3"><code>58a9abe</code></a>
Merge pull request from GHSA-m8cg-xc2p-r3fc</li>
<li><a
href="https://github.com/opencontainers/runc/commit/27fb72c7ffdbd509b3c15b2bdb4df3d2192bfe7b"><code>27fb72c</code></a>
merge branch 'pr-3776' into release-1.1</li>
<li><a
href="https://github.com/opencontainers/runc/commit/8ec02ea1b14edac85a6e9a2b622ae44e15e11ccd"><code>8ec02ea</code></a>
nsexec: retry unshare on EINVAL</li>
<li><a
href="https://github.com/opencontainers/runc/commit/059d7730fc102052c90fea52c7b3c6f04fbbc487"><code>059d773</code></a>
merge branch 'pr-3785' into release-1.1</li>
<li><a
href="https://github.com/opencontainers/runc/commit/0abab45c9b97c113ff2cdc16f3a7388444c3fbec"><code>0abab45</code></a>
Prohibit /proc and /sys to be symlinks</li>
<li><a
href="https://github.com/opencontainers/runc/commit/0e6b818a2b0d24fdb6697614e5c5f115bbe8e3a5"><code>0e6b818</code></a>
rootless: fix /sys/fs/cgroup mounts</li>
<li><a
href="https://github.com/opencontainers/runc/commit/c6781d100a73d2dcef84e9376d85fff02235a2ed"><code>c6781d1</code></a>
Merge pull request <a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>
from kinvolk/rata/nsfixes-backport</li>
<li><a
href="https://github.com/opencontainers/runc/commit/f6e2cd3baf661e1f377088e13084ccb5aadf41e6"><code>f6e2cd3</code></a>
nsexec: Check for errors in write_log()</li>
<li><a
href="https://github.com/opencontainers/runc/commit/3775df9fcb7828594114866e1df346f44d22ad16"><code>3775df9</code></a>
Merge pull request <a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>
from kolyshkin/1.1-fix-dev-null</li>
<li>Additional commits viewable in <a
href="https://github.com/opencontainers/runc/compare/v1.1.2...v1.1.5">compare
view</a></li>
</ul>
</details>
<br />
[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-29 19:37:12 +02:00
|
|
|
github.com/opencontainers/runc v1.1.5 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/pelletier/go-toml v1.9.5 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/pelletier/go-toml/v2 v2.0.8 // indirect
|
|
|
|
|
github.com/pjbgf/sha1cd v0.3.0 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
github.com/pkg/browser v0.0.0-20210911075715-681adbf594b8 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/pkg/errors v0.9.1 // indirect
|
|
|
|
|
github.com/pmezard/go-difflib v1.0.0 // indirect
|
2023-05-27 05:24:50 +02:00
|
|
|
github.com/prometheus/client_golang v1.15.1 // indirect
|
|
|
|
|
github.com/prometheus/client_model v0.4.0 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
github.com/prometheus/common v0.42.0 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/prometheus/procfs v0.9.0 // indirect
|
2022-09-12 04:06:01 +02:00
|
|
|
github.com/rivo/uniseg v0.4.2 // indirect
|
2021-11-14 03:23:11 +02:00
|
|
|
github.com/russross/blackfriday/v2 v2.1.0 // indirect
|
2022-08-18 21:22:41 +02:00
|
|
|
github.com/sasha-s/go-csync v0.0.0-20210812194225-61421b77c44b // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/sergi/go-diff v1.2.0 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/shopspring/decimal v1.2.0 // indirect
|
2023-06-26 18:56:50 +02:00
|
|
|
github.com/sigstore/cosign/v2 v2.0.3-0.20230523133326-0544abd8fc8a // indirect
|
2023-05-27 05:24:50 +02:00
|
|
|
github.com/sigstore/rekor v1.2.0 // indirect
|
|
|
|
|
github.com/sigstore/sigstore v1.6.4 // indirect
|
2023-08-03 14:34:13 +02:00
|
|
|
github.com/sirupsen/logrus v1.9.1 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/skeema/knownhosts v1.1.1 // indirect
|
|
|
|
|
github.com/spf13/afero v1.9.5 // indirect
|
|
|
|
|
github.com/spf13/cast v1.5.1 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/spf13/jwalterweatherman v1.1.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
github.com/spf13/pflag v1.0.5 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/spf13/viper v1.16.0 // indirect
|
2023-02-05 17:09:06 +02:00
|
|
|
github.com/subosito/gotenv v1.4.2 // indirect
|
2021-10-26 20:02:03 +02:00
|
|
|
github.com/technoweenie/multipartstreamer v1.0.1 // indirect
|
2023-03-29 19:38:57 +02:00
|
|
|
github.com/theupdateframework/go-tuf v0.5.2 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/titanous/rocacheck v0.0.0-20171023193734-afe73141d399 // indirect
|
2022-11-18 01:40:00 +02:00
|
|
|
github.com/tomnomnom/linkheader v0.0.0-20180905144013-02ca5825eb80 // indirect
|
2023-06-26 18:56:50 +02:00
|
|
|
github.com/vbatts/tar-split v0.11.3 // indirect
|
2023-06-26 18:20:47 +02:00
|
|
|
github.com/xanzy/ssh-agent v0.3.3 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415 // indirect
|
|
|
|
|
github.com/xeipuuv/gojsonschema v1.2.0 // indirect
|
2022-08-16 06:00:17 +02:00
|
|
|
gitlab.com/digitalxero/go-conventional-commit v1.0.7 // indirect
|
2023-05-04 04:11:29 +02:00
|
|
|
go.mongodb.org/mongo-driver v1.11.3 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
go.opencensus.io v0.24.0 // indirect
|
2023-07-20 14:56:26 +02:00
|
|
|
go.uber.org/automaxprocs v1.5.3
|
2023-09-20 16:30:35 +02:00
|
|
|
golang.org/x/exp v0.0.0-20230801115018-d63ba01acd4b
|
feat(deps): bump the gomod-deps group with 3 updates (#4165)
Bumps the gomod-deps group with 3 updates:
[golang.org/x/crypto](https://github.com/golang/crypto),
[golang.org/x/oauth2](https://github.com/golang/oauth2) and
[golang.org/x/tools](https://github.com/golang/tools).
Updates `golang.org/x/crypto` from 0.10.0 to 0.11.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/crypto/commit/e98487292dcad4efaa6033b245ee014f90d177a2"><code>e984872</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/crypto/commit/183630ada7e00d6d4743f43479b7d4ea51de715e"><code>183630a</code></a>
x509roots: generate a stable sort, for real this time</li>
<li><a
href="https://github.com/golang/crypto/commit/a9e447dde7f8f364232efb5072e3ff89b24308da"><code>a9e447d</code></a>
x509roots/fallback: add //go:build go1.20 to bundle.go</li>
<li><a
href="https://github.com/golang/crypto/commit/64c3993f5c824fe7febbf8561179da523a4e98ea"><code>64c3993</code></a>
ssh: add hmac-sha2-512</li>
<li><a
href="https://github.com/golang/crypto/commit/5fe8145acacf736d52576b87b17c416731e0c4a8"><code>5fe8145</code></a>
x509roots: remove list hash and generation date, change ordering</li>
<li><a
href="https://github.com/golang/crypto/commit/043e94c17aa993f4d1026a2f692b8980e7740df2"><code>043e94c</code></a>
x509roots: fix generate script argument checking</li>
<li><a
href="https://github.com/golang/crypto/commit/0d502d7cd64920c6d2cce3950ead89a5c4eb5e69"><code>0d502d7</code></a>
x509roots: use "generate" build tag</li>
<li><a
href="https://github.com/golang/crypto/commit/0ff60057bbafb685e9f9a97af5261f484f8283d1"><code>0ff6005</code></a>
ssh/test: set a timeout and WaitDelay on sshd subcommands</li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.10.0...v0.11.0">compare
view</a></li>
</ul>
</details>
<br />
Updates `golang.org/x/oauth2` from 0.9.0 to 0.10.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/oauth2/commit/ec5679f607c139709bdc4c2608494d56b95611fe"><code>ec5679f</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/oauth2/commit/989acb1bfed17be45134185bd228d89675a68f19"><code>989acb1</code></a>
all: update dependencies to their latest versions</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.9.0...v0.10.0">compare
view</a></li>
</ul>
</details>
<br />
Updates `golang.org/x/tools` from 0.10.0 to 0.11.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.11.0</h2>
<p>This is a small release containing new integrations of vulnerability
analysis.</p>
<p>Vulnerability analysis for go.mod files can be enabled by configuring
the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>"vulncheck"</code></a>
setting to <code>"Imports"</code>. For more information on
vulnerability management, see the <a
href="https://go.dev/blog/vuln">Vulnerability Management for Go</a> blog
post.</p>
<h2>Support changes</h2>
<p>This release removes support for the
<code>"experimentalUseInvalidMetadata"</code> setting, as
described in the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.10.0">v0.10.0</a>
release. Other settings slated for deprecation in that release remain
temporarily supported, but will be removed in v0.12.0.</p>
<h2>New Features</h2>
<h3>Analyzing dependencies for vulnerabilities</h3>
<p>This release offers two different options for detecting
vulnerabilities in dependencies. Both are backed by the Go vulnerability
database (<a href="https://vuln.go.dev">https://vuln.go.dev</a>) and
complement each other.</p>
<ul>
<li>Imports-based scanning, enabled by the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>"vulncheck":
"Imports"</code></a> setting, reports vulnerabilities by
scanning the set of packages imported in the workspace. This is fast,
but may report more false positives.</li>
<li>Integration of the <a
href="https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck">golang.org/x/vuln/cmd/govulncheck</a>
command-line tool performs a more precise analysis based on-call graph
reachability, with fewer false positives. Because it is slower to
compute, it must be manually triggered by using "Run govulncheck to
verify" code actions or the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#run-govulncheck"><code>"codelenses.run_govulncheck"</code></a>
code lens on <code>go.mod</code> files.</li>
</ul>
<p><a
href="https://user-images.githubusercontent.com/4999471/206977512-a821107d-9ffb-4456-9b27-6a6a4f900ba6.mp4">https://user-images.githubusercontent.com/4999471/206977512-a821107d-9ffb-4456-9b27-6a6a4f900ba6.mp4</a></p>
<!-- raw HTML omitted -->
<h3>Additional checks for the <code>loopclosure</code> analyzer</h3>
<p>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/analyzers.md#loopclosure"><code>loopclosure</code></a>
analyzer, which reports problematic references from a nested function to
a variable of an enclosing loop, has been improved to catch more cases.
In particular, it now reports when subtests <a
href="https://pkg.go.dev/testing#T.Parallel">run in parallel</a> with
the loop, a mistake that often results in all but the final test case
being skipped.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/206764370-7fc3c464-af04-4e4e-bb10-a6a0a89a99e3.png"
alt="image" /></p>
<h2>Configuration changes</h2>
<ul>
<li>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>"vulncheck"</code></a>
setting controls vulnerability analysis based on the Go vulnerability
database. If set to <code>"Imports"</code>, gopls will compute
diagnostics related to vulnerabilities in dependencies, and will present
them in go.mod files.</li>
<li>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#run-govulncheck"><code>"codelenses.run_govulncheck"</code></a>
setting controls the presence of code lenses that run the <a
href="https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck">govulncheck</a>
command, which takes longer but produces more accurate vulnerability
reporting based on call-graph reachability.</li>
</ul>
<h2>Bug fixes</h2>
<p>This version of gopls includes fixes to several bugs, notably:</p>
<ul>
<li><code>golang/go#57053</code></li>
<li><code>golang/go#55837</code><a
href="https://redirect.github.com/golang/go/issues/56450">golang/go#56450</a>).</li>
<li><code>golang/go#54816</code></li>
</ul>
<p>A full list of all issues fixed can be found in the <a
href="https://github.com/golang/go/milestone/293?closed=1">gopls/v0.11.0</a>
milestone.
To report a new problem, please file a new issue at <a
href="https://go.dev/issues/new">https://go.dev/issues/new</a>.</p>
<h2>Thank you to our contributors</h2>
<p><a href="https://github.com/Arsen6331"><code>@Arsen6331</code></a>,
<a href="https://github.com/SN9NV"><code>@SN9NV</code></a>, <a
href="https://github.com/adonovan"><code>@adonovan</code></a>, <a
href="https://github.com/bcmills"><code>@bcmills</code></a>, <a
href="https://github.com/dle8"><code>@dle8</code></a>, <a
href="https://github.com/findleyr"><code>@findleyr</code></a>, <a
href="https://github.com/hyangah"><code>@hyangah</code></a>, <a
href="https://github.com/pjweinbgo"><code>@pjweinbgo</code></a>, <a
href="https://github.com/suzmue"><code>@suzmue</code></a></p>
<h2>gopls/v0.10.1</h2>
<p>This release contains a fix for <a
href="https://redirect.github.com/golang/go/issues/56505">golang/go#56505</a>:
a new crash during method completion on variables of type
<code>*error</code>.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/tools/commit/675bf3c243d60cbba429fad9924e520e8a86074f"><code>675bf3c</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/tools/commit/ad52c1ca35fb661c53eedbdee5f3b0e3c33e54e1"><code>ad52c1c</code></a>
go/ssa/interp: support conversions to slices of named bytes</li>
<li><a
href="https://github.com/golang/tools/commit/14ec3c023fa0003b489ce1abe0484924ea5276f8"><code>14ec3c0</code></a>
gopls/doc/contributing.md: document error handling strategies</li>
<li><a
href="https://github.com/golang/tools/commit/c4953641676aa4639fcbd2ca825c43cedeaa9e8c"><code>c495364</code></a>
go/packages/gopackages: document -mode flag</li>
<li><a
href="https://github.com/golang/tools/commit/87ad891fe35467be3d692a3f37fef9fb5cb08dcd"><code>87ad891</code></a>
gopls/internal/lsp/source/typerefs: move test into _test.go</li>
<li><a
href="https://github.com/golang/tools/commit/27fd94e099b2bbd4c660f0b140af121af9a943c8"><code>27fd94e</code></a>
internal/fastwalk: doc formatting fixes (including godoc links)</li>
<li><a
href="https://github.com/golang/tools/commit/d362be0cdb73ca5215ecaaf1514120c6b8b955e9"><code>d362be0</code></a>
gopls/internal/lsp/filecache: reduce GC frequency</li>
<li><a
href="https://github.com/golang/tools/commit/969078be460fb5efe195a1d4c69e3701298e9a21"><code>969078b</code></a>
Revert "go/analysis: add Sizes that matches gc size
computations"</li>
<li><a
href="https://github.com/golang/tools/commit/5aa6acb96f843a0257c5c1c0e52753bcd18b77b3"><code>5aa6acb</code></a>
go/analysis: add Sizes that matches gc size computations</li>
<li><a
href="https://github.com/golang/tools/commit/5a89a3bf267ef12790327b8692c88654845bc78d"><code>5a89a3b</code></a>
go/vcs: delete</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.10.0...v0.11.0">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-12 14:53:29 +02:00
|
|
|
golang.org/x/mod v0.12.0 // indirect
|
2023-09-20 16:32:20 +02:00
|
|
|
golang.org/x/net v0.15.0 // indirect
|
2023-09-20 16:16:02 +02:00
|
|
|
golang.org/x/sys v0.12.0 // indirect
|
|
|
|
|
golang.org/x/term v0.12.0 // indirect
|
2023-01-10 13:55:31 +02:00
|
|
|
golang.org/x/time v0.3.0 // indirect
|
2023-01-11 14:09:51 +02:00
|
|
|
golang.org/x/xerrors v0.0.0-20220907171357-04be3eba64a2 // indirect
|
2023-08-02 10:25:44 +02:00
|
|
|
google.golang.org/api v0.134.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
google.golang.org/appengine v1.6.7 // indirect
|
2023-08-02 10:25:44 +02:00
|
|
|
google.golang.org/genproto v0.0.0-20230731193218-e0aa005b6bdf // indirect
|
|
|
|
|
google.golang.org/genproto/googleapis/api v0.0.0-20230731193218-e0aa005b6bdf // indirect
|
|
|
|
|
google.golang.org/genproto/googleapis/rpc v0.0.0-20230731193218-e0aa005b6bdf // indirect
|
|
|
|
|
google.golang.org/grpc v1.57.0 // indirect
|
feat(deps): bump the gomod-deps group with 3 updates (#4165)
Bumps the gomod-deps group with 3 updates:
[golang.org/x/crypto](https://github.com/golang/crypto),
[golang.org/x/oauth2](https://github.com/golang/oauth2) and
[golang.org/x/tools](https://github.com/golang/tools).
Updates `golang.org/x/crypto` from 0.10.0 to 0.11.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/crypto/commit/e98487292dcad4efaa6033b245ee014f90d177a2"><code>e984872</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/crypto/commit/183630ada7e00d6d4743f43479b7d4ea51de715e"><code>183630a</code></a>
x509roots: generate a stable sort, for real this time</li>
<li><a
href="https://github.com/golang/crypto/commit/a9e447dde7f8f364232efb5072e3ff89b24308da"><code>a9e447d</code></a>
x509roots/fallback: add //go:build go1.20 to bundle.go</li>
<li><a
href="https://github.com/golang/crypto/commit/64c3993f5c824fe7febbf8561179da523a4e98ea"><code>64c3993</code></a>
ssh: add hmac-sha2-512</li>
<li><a
href="https://github.com/golang/crypto/commit/5fe8145acacf736d52576b87b17c416731e0c4a8"><code>5fe8145</code></a>
x509roots: remove list hash and generation date, change ordering</li>
<li><a
href="https://github.com/golang/crypto/commit/043e94c17aa993f4d1026a2f692b8980e7740df2"><code>043e94c</code></a>
x509roots: fix generate script argument checking</li>
<li><a
href="https://github.com/golang/crypto/commit/0d502d7cd64920c6d2cce3950ead89a5c4eb5e69"><code>0d502d7</code></a>
x509roots: use "generate" build tag</li>
<li><a
href="https://github.com/golang/crypto/commit/0ff60057bbafb685e9f9a97af5261f484f8283d1"><code>0ff6005</code></a>
ssh/test: set a timeout and WaitDelay on sshd subcommands</li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.10.0...v0.11.0">compare
view</a></li>
</ul>
</details>
<br />
Updates `golang.org/x/oauth2` from 0.9.0 to 0.10.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/oauth2/commit/ec5679f607c139709bdc4c2608494d56b95611fe"><code>ec5679f</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/oauth2/commit/989acb1bfed17be45134185bd228d89675a68f19"><code>989acb1</code></a>
all: update dependencies to their latest versions</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.9.0...v0.10.0">compare
view</a></li>
</ul>
</details>
<br />
Updates `golang.org/x/tools` from 0.10.0 to 0.11.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.11.0</h2>
<p>This is a small release containing new integrations of vulnerability
analysis.</p>
<p>Vulnerability analysis for go.mod files can be enabled by configuring
the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>"vulncheck"</code></a>
setting to <code>"Imports"</code>. For more information on
vulnerability management, see the <a
href="https://go.dev/blog/vuln">Vulnerability Management for Go</a> blog
post.</p>
<h2>Support changes</h2>
<p>This release removes support for the
<code>"experimentalUseInvalidMetadata"</code> setting, as
described in the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.10.0">v0.10.0</a>
release. Other settings slated for deprecation in that release remain
temporarily supported, but will be removed in v0.12.0.</p>
<h2>New Features</h2>
<h3>Analyzing dependencies for vulnerabilities</h3>
<p>This release offers two different options for detecting
vulnerabilities in dependencies. Both are backed by the Go vulnerability
database (<a href="https://vuln.go.dev">https://vuln.go.dev</a>) and
complement each other.</p>
<ul>
<li>Imports-based scanning, enabled by the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>"vulncheck":
"Imports"</code></a> setting, reports vulnerabilities by
scanning the set of packages imported in the workspace. This is fast,
but may report more false positives.</li>
<li>Integration of the <a
href="https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck">golang.org/x/vuln/cmd/govulncheck</a>
command-line tool performs a more precise analysis based on-call graph
reachability, with fewer false positives. Because it is slower to
compute, it must be manually triggered by using "Run govulncheck to
verify" code actions or the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#run-govulncheck"><code>"codelenses.run_govulncheck"</code></a>
code lens on <code>go.mod</code> files.</li>
</ul>
<p><a
href="https://user-images.githubusercontent.com/4999471/206977512-a821107d-9ffb-4456-9b27-6a6a4f900ba6.mp4">https://user-images.githubusercontent.com/4999471/206977512-a821107d-9ffb-4456-9b27-6a6a4f900ba6.mp4</a></p>
<!-- raw HTML omitted -->
<h3>Additional checks for the <code>loopclosure</code> analyzer</h3>
<p>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/analyzers.md#loopclosure"><code>loopclosure</code></a>
analyzer, which reports problematic references from a nested function to
a variable of an enclosing loop, has been improved to catch more cases.
In particular, it now reports when subtests <a
href="https://pkg.go.dev/testing#T.Parallel">run in parallel</a> with
the loop, a mistake that often results in all but the final test case
being skipped.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/206764370-7fc3c464-af04-4e4e-bb10-a6a0a89a99e3.png"
alt="image" /></p>
<h2>Configuration changes</h2>
<ul>
<li>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>"vulncheck"</code></a>
setting controls vulnerability analysis based on the Go vulnerability
database. If set to <code>"Imports"</code>, gopls will compute
diagnostics related to vulnerabilities in dependencies, and will present
them in go.mod files.</li>
<li>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#run-govulncheck"><code>"codelenses.run_govulncheck"</code></a>
setting controls the presence of code lenses that run the <a
href="https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck">govulncheck</a>
command, which takes longer but produces more accurate vulnerability
reporting based on call-graph reachability.</li>
</ul>
<h2>Bug fixes</h2>
<p>This version of gopls includes fixes to several bugs, notably:</p>
<ul>
<li><code>golang/go#57053</code></li>
<li><code>golang/go#55837</code><a
href="https://redirect.github.com/golang/go/issues/56450">golang/go#56450</a>).</li>
<li><code>golang/go#54816</code></li>
</ul>
<p>A full list of all issues fixed can be found in the <a
href="https://github.com/golang/go/milestone/293?closed=1">gopls/v0.11.0</a>
milestone.
To report a new problem, please file a new issue at <a
href="https://go.dev/issues/new">https://go.dev/issues/new</a>.</p>
<h2>Thank you to our contributors</h2>
<p><a href="https://github.com/Arsen6331"><code>@Arsen6331</code></a>,
<a href="https://github.com/SN9NV"><code>@SN9NV</code></a>, <a
href="https://github.com/adonovan"><code>@adonovan</code></a>, <a
href="https://github.com/bcmills"><code>@bcmills</code></a>, <a
href="https://github.com/dle8"><code>@dle8</code></a>, <a
href="https://github.com/findleyr"><code>@findleyr</code></a>, <a
href="https://github.com/hyangah"><code>@hyangah</code></a>, <a
href="https://github.com/pjweinbgo"><code>@pjweinbgo</code></a>, <a
href="https://github.com/suzmue"><code>@suzmue</code></a></p>
<h2>gopls/v0.10.1</h2>
<p>This release contains a fix for <a
href="https://redirect.github.com/golang/go/issues/56505">golang/go#56505</a>:
a new crash during method completion on variables of type
<code>*error</code>.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/golang/tools/commit/675bf3c243d60cbba429fad9924e520e8a86074f"><code>675bf3c</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="https://github.com/golang/tools/commit/ad52c1ca35fb661c53eedbdee5f3b0e3c33e54e1"><code>ad52c1c</code></a>
go/ssa/interp: support conversions to slices of named bytes</li>
<li><a
href="https://github.com/golang/tools/commit/14ec3c023fa0003b489ce1abe0484924ea5276f8"><code>14ec3c0</code></a>
gopls/doc/contributing.md: document error handling strategies</li>
<li><a
href="https://github.com/golang/tools/commit/c4953641676aa4639fcbd2ca825c43cedeaa9e8c"><code>c495364</code></a>
go/packages/gopackages: document -mode flag</li>
<li><a
href="https://github.com/golang/tools/commit/87ad891fe35467be3d692a3f37fef9fb5cb08dcd"><code>87ad891</code></a>
gopls/internal/lsp/source/typerefs: move test into _test.go</li>
<li><a
href="https://github.com/golang/tools/commit/27fd94e099b2bbd4c660f0b140af121af9a943c8"><code>27fd94e</code></a>
internal/fastwalk: doc formatting fixes (including godoc links)</li>
<li><a
href="https://github.com/golang/tools/commit/d362be0cdb73ca5215ecaaf1514120c6b8b955e9"><code>d362be0</code></a>
gopls/internal/lsp/filecache: reduce GC frequency</li>
<li><a
href="https://github.com/golang/tools/commit/969078be460fb5efe195a1d4c69e3701298e9a21"><code>969078b</code></a>
Revert "go/analysis: add Sizes that matches gc size
computations"</li>
<li><a
href="https://github.com/golang/tools/commit/5aa6acb96f843a0257c5c1c0e52753bcd18b77b3"><code>5aa6acb</code></a>
go/analysis: add Sizes that matches gc size computations</li>
<li><a
href="https://github.com/golang/tools/commit/5a89a3bf267ef12790327b8692c88654845bc78d"><code>5a89a3b</code></a>
go/vcs: delete</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.10.0...v0.11.0">compare
view</a></li>
</ul>
</details>
<br />
Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.
[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)
---
<details>
<summary>Dependabot commands and options</summary>
<br />
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
</details>
Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-12 14:53:29 +02:00
|
|
|
google.golang.org/protobuf v1.31.0 // indirect
|
2021-10-26 20:02:03 +02:00
|
|
|
gopkg.in/alexcesaro/quotedprintable.v3 v3.0.0-20150716171945-2caba252f4dc // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
gopkg.in/ini.v1 v1.67.0 // indirect
|
|
|
|
|
gopkg.in/square/go-jose.v2 v2.6.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
gopkg.in/warnings.v0 v0.1.2 // indirect
|
2022-12-15 15:25:52 +02:00
|
|
|
gopkg.in/yaml.v2 v2.4.0 // indirect
|
2023-06-26 18:56:50 +02:00
|
|
|
sigs.k8s.io/kind v0.20.0 // indirect
|
2023-01-17 03:34:49 +02:00
|
|
|
sigs.k8s.io/yaml v1.3.0 // indirect
|
2021-08-25 01:49:11 +02:00
|
|
|
)
|
