1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2024-12-31 01:53:50 +02:00
Commit Graph

428 Commits

Author SHA1 Message Date
dependabot[bot]
00b2175855
feat(deps): bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible (#3909)
Bumps [github.com/docker/docker](https://github.com/docker/docker) from
23.0.1+incompatible to 23.0.3+incompatible.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/docker/releases">github.com/docker/docker's
releases</a>.</em></p>
<blockquote>
<h2>v23.0.3</h2>
<h2>23.0.3</h2>
<blockquote>
<p><strong>Note</strong></p>
<p>Due to an issue with CentOS 9 Stream's package repositories, packages
for
CentOS 9 are currently unavailable. Packages for CentOS 9 may be added
later,
or as part of the next (23.0.4) patch release.</p>
</blockquote>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>Fixed a number of issues that can cause Swarm encrypted overlay
networks
to fail to uphold their guarantees, addressing <a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841">CVE-2023-28841</a>,
<a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840">CVE-2023-28840</a>,
and
<a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842">CVE-2023-28842</a>.
<ul>
<li>A lack of kernel support for encrypted overlay networks now reports
as an error.</li>
<li>Encrypted overlay networks are eagerly set up, rather than waiting
for
multiple nodes to attach.</li>
<li>Encrypted overlay networks are now usable on Red Hat Enterprise
Linux 9
through the use of the <code>xt_bpf</code> kernel module.</li>
<li>Users of Swarm overlay networks should review <a
href="https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw">GHSA-vwm3-crmr-xfxw</a>
to ensure that unintentional exposure has not occurred.</li>
</ul>
</li>
</ul>
<h3>Packaging Updates</h3>
<ul>
<li>Update containerd to <a
href="https://github.com/containerd/containerd/releases/tag/v1.6.20">v1.6.20</a>.</li>
<li>Update runc to <a
href="https://github.com/opencontainers/runc/releases/tag/v1.1.5">v1.1.5</a>.</li>
</ul>
<h2>v23.0.2</h2>
<h2>23.0.2</h2>
<p>For a full list of pull requests and changes in this release, refer
to the relevant GitHub milestones:</p>
<ul>
<li><a
href="https://github.com/docker/cli/milestone/75?closed=1">docker/cli,
23.0.2 milestone</a></li>
<li><a
href="https://github.com/moby/moby/milestone/114?closed=1">moby/moby,
23.0.2 milestone</a></li>
</ul>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>Fully resolve missing checks for <code>apparmor_parser</code> when
an AppArmor enabled kernel is detected. <a
href="https://redirect.github.com/containerd/containerd/pull/8087">containerd/containerd#8087</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45043">moby/moby#45043</a></li>
<li>Ensure that credentials are redacted from Git URLs when generating
BuildKit buildinfo. Fixes <a
href="https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc">CVE-2023-26054</a>.
<a
href="https://redirect.github.com/moby/moby/pull/45110">moby/moby#45110</a></li>
<li>Fix anonymous volumes created by a <code>VOLUME</code> line in a
Dockerfile being excluded from volume prune. <a
href="https://redirect.github.com/moby/moby/pull/45159">moby/moby#45159</a></li>
<li>Fix a failure to properly propagate errors during removal of volumes
on a Swarm node. <a
href="https://redirect.github.com/moby/moby/pull/45155">moby/moby#45155</a></li>
<li>Temporarily work around a bug in BuildKit <code>COPY --link</code>
by disabling mergeop/diffop optimization. <a
href="https://redirect.github.com/moby/moby/pull/45112">moby/moby#45112</a></li>
<li>Properly clean up child tasks when a parent Swarm job is removed. <a
href="https://redirect.github.com/moby/swarmkit/pull/3112">moby/swarmkit#3112</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li>
<li>Fix Swarm service creation logic so that both a GenericResource and
a non-default network can be used together. <a
href="https://redirect.github.com/moby/swarmkit/pull/3082">moby/swarmkit#3082</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li>
<li>Fix Swarm CSI support requiring the CSI plugin to offer staging
endpoints in order to publish a volume. <a
href="https://redirect.github.com/moby/swarmkit/pull/3116">moby/swarmkit#3116</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li>
<li>Fix a panic caused by log buffering in some configurations. <a
href="https://redirect.github.com/containerd/fifo/pull/47">containerd/fifo#47</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45051">moby/moby#45051</a></li>
<li>Log errors in the REST to Swarm gRPC API translation layer at the
debug level to reduce redundancy and noise. <a
href="https://redirect.github.com/moby/moby/pull/45016">moby/moby#45016</a></li>
<li>Fix a DNS resolution issue affecting containers created with
<code>--dns-opt</code> or <code>--dns-search</code> when
<code>systemd-resolved</code> is used outside the container. <a
href="https://redirect.github.com/moby/moby/pull/45000">moby/moby#45000</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="59118bff50"><code>59118bf</code></a>
Merge pull request from GHSA-232p-vwff-86mp</li>
<li><a
href="219f21bf07"><code>219f21b</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/docker/issues/45196">#45196</a>
from vvoland/integration-restart-race-23</li>
<li><a
href="b87f7f18b8"><code>b87f7f1</code></a>
libnet/d/overlay: insert the input-drop rule</li>
<li><a
href="c6bf3071fe"><code>c6bf307</code></a>
StartWithLogFile: Fix d.cmd race</li>
<li><a
href="7f49ca259b"><code>7f49ca2</code></a>
TestDaemonRestartKillContainers: Fix loop capture</li>
<li><a
href="98cbcb8003"><code>98cbcb8</code></a>
libnet/d/overlay: add BPF-powered VNI matcher</li>
<li><a
href="5c5fac2374"><code>5c5fac2</code></a>
libnet/d/overlay: extract VNI match rule builder</li>
<li><a
href="c492a22287"><code>c492a22</code></a>
libn/d/overlay: enforce encryption on sandbox init</li>
<li><a
href="018edb0284"><code>018edb0</code></a>
libnet/d/overlay: document some encryption code</li>
<li><a
href="a1fd2f22f6"><code>a1fd2f2</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/docker/issues/45157">#45157</a>
from thaJeztah/23.0_backport_update_shfmt</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/docker/compare/v23.0.1...v23.0.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/docker&package-manager=go_modules&previous-version=23.0.1+incompatible&new-version=23.0.3+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-05 10:17:59 -03:00
dependabot[bot]
c4d5cf96d9
feat(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#3908)
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from
1.6.1 to 1.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/spf13/cobra/releases">github.com/spf13/cobra's
releases</a>.</em></p>
<blockquote>
<h2>v1.7.0</h2>
<h3> Features</h3>
<ul>
<li>Allow to preserve ordering of completions in <code>bash</code>,
<code>zsh</code>, <code>pwsh</code>, &amp; <code>fish</code>: <a
href="https://github.com/h4ck3rk3y"><code>@​h4ck3rk3y</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1903">#1903</a></li>
<li>Add support for PowerShell 7.2+ in completions: <a
href="https://github.com/oldium"><code>@​oldium</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1916">#1916</a></li>
<li>Allow sourcing zsh completion script: <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1917">#1917</a></li>
</ul>
<h3>🐛 Bug fixes</h3>
<ul>
<li>Don't remove flag values that match sub-command name: <a
href="https://github.com/brianpursley"><code>@​brianpursley</code></a>
<a
href="https://redirect.github.com/spf13/cobra/issues/1781">#1781</a></li>
<li>Fix powershell completions not returning single word: <a
href="https://github.com/totkeks"><code>@​totkeks</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1850">#1850</a></li>
<li>Remove masked <code>template</code> import variable name: <a
href="https://github.com/yashLadha"><code>@​yashLadha</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1879">#1879</a></li>
<li>Correctly detect completions with dash in argument: <a
href="https://github.com/oncilla"><code>@​oncilla</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1817">#1817</a></li>
</ul>
<h3>🧪 Testing &amp; CI/CD</h3>
<ul>
<li>Deprecate Go 1.15 in CI: <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1866">#1866</a></li>
<li>Deprecate Go 1.16 in CI: <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1926">#1926</a></li>
<li>Add testing for Go 1.20 in CI: <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1925">#1925</a></li>
<li>Add tests to illustrate unknown flag bug: <a
href="https://github.com/brianpursley"><code>@​brianpursley</code></a>
<a
href="https://redirect.github.com/spf13/cobra/issues/1854">#1854</a></li>
</ul>
<h3>🔧 Maintenance</h3>
<ul>
<li>Update main image to better handle dark backgrounds: <a
href="https://github.com/Deleplace"><code>@​Deleplace</code></a> and <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1883">#1883</a></li>
<li>Fix <code>stale.yaml</code> mispellings: <a
href="https://github.com/enrichman"><code>@​enrichman</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1863">#1863</a></li>
<li>Remove stale bot from GitHub actions: <a
href="https://github.com/jpmcb"><code>@​jpmcb</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1908">#1908</a></li>
<li>Add makefile target for installing dependencies: <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1865">#1865</a></li>
<li>Add Sia to projects using Cobra: <a
href="https://github.com/mike76-dev"><code>@​mike76-dev</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1844">#1844</a></li>
<li>Add <code>Vitess</code> and <code>Arewefastyet</code> to projects
using cobra: <a
href="https://github.com/frouioui"><code>@​frouioui</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1932">#1932</a></li>
<li>Fixup for Kubescape github org: <a
href="https://github.com/dwertent"><code>@​dwertent</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1874">#1874</a></li>
<li>Fix route for GitHub workflows badge: <a
href="https://github.com/sh-cho"><code>@​sh-cho</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1884">#1884</a></li>
<li>Fixup for GoDoc style documentation: <a
href="https://github.com/yashLadha"><code>@​yashLadha</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1885">#1885</a></li>
<li>Various bash scripting improvements for completion: <a
href="https://github.com/scop"><code>@​scop</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1702">#1702</a></li>
<li>Add Constellation to projects using Cobra: <a
href="https://github.com/datosh"><code>@​datosh</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1829">#1829</a></li>
</ul>
<h3>✏️ Documentation</h3>
<ul>
<li>Add documentation about disabling completion descriptions: <a
href="https://github.com/Shihta"><code>@​Shihta</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1901">#1901</a></li>
<li>Improve <code>MarkFlagsMutuallyExclusive</code> example in user
guide: <a href="https://github.com/janhn"><code>@​janhn</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1904">#1904</a></li>
<li>Update <code>shell_completions.md</code>: <a
href="https://github.com/gusega"><code>@​gusega</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1907">#1907</a></li>
<li>Update copywrite year: <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1927">#1927</a></li>
<li>Document suggested layout of subcommands: <a
href="https://github.com/lcarva"><code>@​lcarva</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1930">#1930</a></li>
<li>Replace deprecated ExactValidArgs with MatchAll in doc: <a
href="https://github.com/doniacld"><code>@​doniacld</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1836">#1836</a></li>
</ul>
<hr />
<p>This release contains several long running fixes, improvements to
powershell completions, and further optimizations for completions.</p>
<p>Thank you everyone who contributed to this release and all your hard
work! Cobra and this community would never be possible without all of
you! 🐍</p>
<p>Full changelog: <a
href="https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0">https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4dd4b25de3"><code>4dd4b25</code></a>
Update main image to better handle dark background (<a
href="https://redirect.github.com/spf13/cobra/issues/1883">#1883</a>)</li>
<li><a
href="45360a55cc"><code>45360a5</code></a>
Allow sourcing zsh completion script (<a
href="https://redirect.github.com/spf13/cobra/issues/1917">#1917</a>)</li>
<li><a
href="c8a20a16ba"><code>c8a20a1</code></a>
Document suggested layout for subcommands (<a
href="https://redirect.github.com/spf13/cobra/issues/1930">#1930</a>)</li>
<li><a
href="b197a24504"><code>b197a24</code></a>
Update projects_using_cobra.md (<a
href="https://redirect.github.com/spf13/cobra/issues/1932">#1932</a>)</li>
<li><a
href="9e6b58afc7"><code>9e6b58a</code></a>
update copyright year (<a
href="https://redirect.github.com/spf13/cobra/issues/1927">#1927</a>)</li>
<li><a
href="fb3652402b"><code>fb36524</code></a>
ci: test Golang 1.20 (<a
href="https://redirect.github.com/spf13/cobra/issues/1925">#1925</a>)</li>
<li><a
href="c7300f0bdd"><code>c7300f0</code></a>
ci: deprecate go 1.16 (<a
href="https://redirect.github.com/spf13/cobra/issues/1926">#1926</a>)</li>
<li><a
href="567ea8ebc9"><code>567ea8e</code></a>
Add support for PowerShell 7.2+ (<a
href="https://redirect.github.com/spf13/cobra/issues/1916">#1916</a>)</li>
<li><a
href="3daa4b9c36"><code>3daa4b9</code></a>
Add keeporder to shell completion (<a
href="https://redirect.github.com/spf13/cobra/issues/1903">#1903</a>)</li>
<li><a
href="a516d4132c"><code>a516d41</code></a>
Removes stale bot from GitHub action (<a
href="https://redirect.github.com/spf13/cobra/issues/1908">#1908</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/cobra&package-manager=go_modules&previous-version=1.6.1&new-version=1.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-05 09:21:25 -03:00
dependabot[bot]
ecf77c948f
feat(deps): bump github.com/disgoorg/disgo from 0.15.3 to 0.16.0 (#3905) 2023-04-04 08:25:49 -03:00
Kazuki Matsumaru
b495c905d5
fix: set parallelism to match Linux container CPU (#3901)
<!--

Hi, thanks for contributing!

Please make sure you read our CONTRIBUTING guide.

Also, add tests and the respective documentation changes as well.

-->

Currently Goreleaser uses `runtime.NumCPU()` as the default value if
`--parallelism` is not set.
However, this will get the number of CPUs on the host even when
Goreleaser is run in a container with a limit on the maximum number of
CPUs that can be used (typically in a Kubernetes pod).
Actually, `docker run --cpus=1 goreleaser/goreleaser --debug` shows
`parallelism: 4` on my machine.
This behavior causes CPU throttling, which increases execution time and,
in the worst case, terminates with an error.
I ran into this problem with Jenkins where the agent runs on pod
([Kubernetes plugin for
Jenkins](https://plugins.jenkins.io/kubernetes/)).

This commit introduces
[automaxprocs](https://github.com/uber-go/automaxprocs) to fix this
issue.
This library sets `GOMAXPROCS` to match Linux container CPU quota.
I have also looked for a library that can get CPU quota more directly,
but this seems to be the best I could find.
The reason it is set in a different notation from the automaxprocs
README is to prevent logs from being displayed
([comment](https://github.com/uber-go/automaxprocs/issues/18#issuecomment-511330567)).

I would have liked to write a test, but this change is dependent on the
number of CPUs in the execution environment, so I could not.
Instead, I wrote a Dockerfile for testing

```Dockerfile
FROM golang:1.20.2

WORKDIR /go/app
RUN sh -c "$(curl --location https://taskfile.dev/install.sh)" -- -d -b /usr/local/bin
COPY . .
RUN task build
```

and confirmed built binary shows expected parallelism by following
commands:

```sh
docker build --file Dockerfile.test . -t test-goreleaser
docker run --cpus=1 test-goreleaser ./goreleaser build --snapshot --debug # parallelism: 1
docker run test-goreleaser ./goreleaser build --snapshot --debug # parallelism: 4
```

I also ran the built binary on my Macbook and it was fine.
2023-04-02 17:16:41 -03:00
dependabot[bot]
43731e252c
feat(deps): bump github.com/google/ko from 0.12.0 to 0.13.0 (#3880)
Bumps [github.com/google/ko](https://github.com/google/ko) from 0.12.0
to 0.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/ko/releases">github.com/google/ko's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.0</h2>
<h2>What's Changed</h2>
<ul>
<li>SPDX: Fix package manager label by <a
href="https://github.com/puerco"><code>@​puerco</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/801">ko-build/ko#801</a></li>
<li>SPDX 2.3 support by <a
href="https://github.com/puerco"><code>@​puerco</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/803">ko-build/ko#803</a></li>
<li>ci: build and test using 1.18 and 1.19 (drop 1.17) by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/812">ko-build/ko#812</a></li>
<li>removes repo move message by <a
href="https://github.com/mchmarny"><code>@​mchmarny</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/814">ko-build/ko#814</a></li>
<li>feat: write sbom result to disk by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/822">ko-build/ko#822</a></li>
<li>feat: adding support for using multiple keychain for sending sbom
results to a different repository by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/821">ko-build/ko#821</a></li>
<li>Move docs to ko.build by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/749">ko-build/ko#749</a></li>
<li>Update setup-ko version by <a
href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li>
<li>Add -- usage in readme by <a
href="https://github.com/jwcesign"><code>@​jwcesign</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/840">ko-build/ko#840</a></li>
<li>add CONTRIBUTING, code of conduct, roadmap by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/837">ko-build/ko#837</a></li>
<li>attempt to fix GH Pages publishing by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/843">ko-build/ko#843</a></li>
<li>doc: fix link to Installation page in Getting Started by <a
href="https://github.com/antoineco"><code>@​antoineco</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/846">ko-build/ko#846</a></li>
<li>.ko.yaml: bump golang 1.18 -&gt; 1.19 by <a
href="https://github.com/srenatus"><code>@​srenatus</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/848">ko-build/ko#848</a></li>
<li>truncate -image-refs file by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/855">ko-build/ko#855</a></li>
<li>update docs: fix broken links, align with README by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/854">ko-build/ko#854</a></li>
<li>Handle KO_DOCKER_REPO=ko.local/repo and --bare correctly by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/820">ko-build/ko#820</a></li>
<li>another docs update by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/856">ko-build/ko#856</a></li>
<li>ko.build: support some common shortlinks by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/872">ko-build/ko#872</a></li>
<li>install: fail with 404 instead of gzip error when url was wrong by
<a href="https://github.com/grosser"><code>@​grosser</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/879">ko-build/ko#879</a></li>
<li>feat: deduplicate tags by <a
href="https://github.com/bluebrown"><code>@​bluebrown</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/884">ko-build/ko#884</a></li>
<li>install mkdocs-redirect when publishing site by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/873">ko-build/ko#873</a></li>
<li>nit: replace one-item slice with const by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/885">ko-build/ko#885</a></li>
<li>Temp fix for SLSA generators by <a
href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/886">ko-build/ko#886</a></li>
<li>Fix verifier by <a
href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/891">ko-build/ko#891</a></li>
<li>Fix link in static-assets.md by <a
href="https://github.com/yuryu"><code>@​yuryu</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/893">ko-build/ko#893</a></li>
<li>add KO_DEFAULTBASEIMAGE usage to docs by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/895">ko-build/ko#895</a></li>
<li>Publish an tagged image on release by <a
href="https://github.com/vdemeester"><code>@​vdemeester</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/868">ko-build/ko#868</a></li>
<li>Add option to configure default platforms by <a
href="https://github.com/ReToCode"><code>@​ReToCode</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/897">ko-build/ko#897</a></li>
<li>Fix broken SLSA link by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/899">ko-build/ko#899</a></li>
<li>add MAINTAINERS.md by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/905">ko-build/ko#905</a></li>
<li>fix: possible race condition when applying templates to
flags/ldflags by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/913">ko-build/ko#913</a></li>
<li>update docs to reflect actual default base image by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/903">ko-build/ko#903</a></li>
<li>remove repeated error message on failure by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/921">ko-build/ko#921</a></li>
<li>website: update CNCF announcement by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/920">ko-build/ko#920</a></li>
<li>fix KO_CONFIG_PATH pointing to a file by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/923">ko-build/ko#923</a></li>
<li>upgrade to cosign v2.0.0-rc.0 by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/933">ko-build/ko#933</a></li>
<li>Feature: Add ECR presubmit testing. by <a
href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/934">ko-build/ko#934</a></li>
<li>remove 'ko deps' by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/937">ko-build/ko#937</a></li>
<li>feat: Add KO_GO_PATH env var by <a
href="https://github.com/embano1"><code>@​embano1</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/930">ko-build/ko#930</a></li>
<li>add ko.build/slack short link by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/945">ko-build/ko#945</a></li>
<li>update link to ko goreleaser docs by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/936">ko-build/ko#936</a></li>
<li>add ko community meeting details by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/938">ko-build/ko#938</a></li>
<li>fix cosign by adding --yes by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/973">ko-build/ko#973</a></li>
<li>fix: handle docker's unknown/unknown platform in index manifests by
<a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/975">ko-build/ko#975</a></li>
<li>fix file extension for cyclonedx by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/974">ko-build/ko#974</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ianlewis"><code>@​ianlewis</code></a>
made their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e22e7a15ff"><code>e22e7a1</code></a>
bump ggcr dep to <a
href="https://github.com/main"><code>@​main</code></a> (<a
href="https://redirect.github.com/google/ko/issues/976">#976</a>)</li>
<li><a
href="8e075ae1f1"><code>8e075ae</code></a>
fix file extension for cyclonedx (<a
href="https://redirect.github.com/google/ko/issues/974">#974</a>)</li>
<li><a
href="11670b7498"><code>11670b7</code></a>
fix: handle docker's unknown/unknown platform in index manifests (<a
href="https://redirect.github.com/google/ko/issues/975">#975</a>)</li>
<li><a
href="7ce947817e"><code>7ce9478</code></a>
fix cosign by adding --yes (<a
href="https://redirect.github.com/google/ko/issues/973">#973</a>)</li>
<li><a
href="9302da78dc"><code>9302da7</code></a>
Bump k8s.io/apimachinery from 0.26.1 to 0.26.2 (<a
href="https://redirect.github.com/google/ko/issues/972">#972</a>)</li>
<li><a
href="a1588838ba"><code>a158883</code></a>
Bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (<a
href="https://redirect.github.com/google/ko/issues/971">#971</a>)</li>
<li><a
href="86b6c2854f"><code>86b6c28</code></a>
Bump actions/checkout from 2 to 3 (<a
href="https://redirect.github.com/google/ko/issues/966">#966</a>)</li>
<li><a
href="0bd12fb106"><code>0bd12fb</code></a>
Bump slsa-framework/slsa-github-generator from 1.2.1 to 1.5.0 (<a
href="https://redirect.github.com/google/ko/issues/967">#967</a>)</li>
<li><a
href="d5125daacd"><code>d5125da</code></a>
Bump github.com/sigstore/cosign/v2 from 2.0.0-rc.2 to 2.0.0 (<a
href="https://redirect.github.com/google/ko/issues/965">#965</a>)</li>
<li><a
href="03f4aed682"><code>03f4aed</code></a>
add ko community meeting details (<a
href="https://redirect.github.com/google/ko/issues/938">#938</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/ko/compare/v0.12.0...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-29 14:38:57 -03:00
dependabot[bot]
c7a2818e2d
feat(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5 (#3896)
Bumps
[github.com/opencontainers/runc](https://github.com/opencontainers/runc)
from 1.1.2 to 1.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/opencontainers/runc/releases">github.com/opencontainers/runc's
releases</a>.</em></p>
<blockquote>
<h2>runc 1.1.5 -- &quot;囚われた屈辱は 反撃の嚆矢だ&quot;</h2>
<p>This is the fifth patch release in the 1.1.z series of runc, which
fixes
three CVEs found in runc.</p>
<ul>
<li>
<p>CVE-2023-25809 is a vulnerability involving rootless containers where
(under specific configurations), the container would have write access
to the /sys/fs/cgroup/user.slice/... cgroup hierarchy. No other
hierarchies on the host were affected. This vulnerability was
discovered by Akihiro Suda.
<a
href="https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc">https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc</a></p>
</li>
<li>
<p>CVE-2023-27561 was a regression which effectively re-introduced
CVE-2019-19921. This bug was present from v1.0.0-rc95 to v1.1.4. This
regression was discovered by <a
href="https://github.com/Beuc"><code>@​Beuc</code></a>.
<a
href="https://github.com/advisories/GHSA-vpvm-3wq2-2wvm">https://github.com/advisories/GHSA-vpvm-3wq2-2wvm</a></p>
</li>
<li>
<p>CVE-2023-28642 is a variant of CVE-2023-27561 and was fixed by the
same
patch. This variant of the above vulnerability was reported by Lei
Wang.
<a
href="https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c">https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c</a></p>
</li>
</ul>
<p>In addition, the following other fixes are included in this
release:</p>
<ul>
<li>Fix the inability to use <code>/dev/null</code> when inside a
container. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li>
<li>Fix changing the ownership of host's <code>/dev/null</code> caused
by fd redirection
(a regression in 1.1.1). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li>
<li>Fix rare runc exec/enter unshare error on older kernels, including
CentOS &lt; 7.7. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li>
<li>nsexec: Check for errors in <code>write_log()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li>
</ul>
<h3>Static Linking Notices</h3>
<p>The <code>runc</code> binary distributed with this release are
<em>statically linked</em> with
the following <a
href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html">GNU
LGPL-2.1</a> licensed libraries, with <code>runc</code> acting
as a &quot;work that uses the Library&quot;:</p>
<ul>
<li><a href="https://github.com/seccomp/libseccomp">libseccomp</a></li>
</ul>
<p>The versions of these libraries were not modified from their upstream
versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the
attached
runc source code) may be used to exercise your rights under the
LGPL-2.1.</p>
<p>However we strongly suggest that you make use of your distribution's
packages
or download them from the authoritative upstream sources, especially
since
these libraries are related to the security of your containers.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/opencontainers/runc/blob/v1.1.5/CHANGELOG.md">github.com/opencontainers/runc's
changelog</a>.</em></p>
<blockquote>
<h2>[1.1.5] - 2023-03-29</h2>
<blockquote>
<p>囚われた屈辱は
反撃の嚆矢だ</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Prohibit container's <code>/proc</code> and <code>/sys</code> to be
symlinks (CVE-2019-19921,
CVE-2023-27561, CVE-2023-28642, <a
href="https://redirect.github.com/opencontainers/runc/issues/3785">#3785</a>)</li>
<li>rootless: rework /sys/fs/cgroup mounts to avoid exposing the host's
cgroup
hierarchy into the container. (CVE-2023-25809)</li>
<li>Fix the inability to use <code>/dev/null</code> when inside a
container. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li>
<li>Fix changing the ownership of host's <code>/dev/null</code> caused
by fd redirection
(a regression in 1.1.1). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li>
<li>Fix rare runc exec/enter unshare error on older kernels, inlcuding
CentOS &lt; 7.7. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li>
<li>nsexec: Check for errors in <code>write_log()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li>
<li>Various CI fixes and updates. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3618">#3618</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3630">#3630</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3640">#3640</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3729">#3729</a>)</li>
</ul>
<h2>[1.1.4] - 2022-08-24</h2>
<blockquote>
<p>If you look for perfection, you'll never be content.</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Fix mounting via wrong proc fd.
When the user and mount namespaces are used, and the bind mount is
followed by
the cgroup mount in the spec, the cgroup was mounted using the bind
mount's
mount fd. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3511">#3511</a>)</li>
<li>Switch <code>kill()</code> in <code>libcontainer/nsenter</code> to
<code>sane_kill()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3536">#3536</a>)</li>
<li>Fix &quot;permission denied&quot; error from <code>runc run</code>
on <code>noexec</code> fs. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3541">#3541</a>)</li>
<li>Fix failed exec after <code>systemctl daemon-reload</code>.
Due to a regression in v1.1.3, the <code>DeviceAllow=char-pts rwm</code>
rule was no
longer added and was causing an error <code>open /dev/pts/0: operation
not permitted: unknown</code>
when systemd was reloaded. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3554">#3554</a>)</li>
<li>Various CI fixes. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3538">#3538</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3558">#3558</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3562">#3562</a>)</li>
</ul>
<h2>[1.1.3] - 2022-06-09</h2>
<blockquote>
<p>In the beginning there was nothing, which exploded.</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Our seccomp <code>-ENOSYS</code> stub now correctly handles
multiplexed syscalls on
s390 and s390x. This solves the issue where syscalls the host kernel did
not
support would return <code>-EPERM</code> despite the existence of the
<code>-ENOSYS</code> stub
code (this was due to how s390x does syscall multiplexing). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3478">#3478</a>)</li>
<li>Retry on dbus disconnect logic in libcontainer/cgroups/systemd now
works as
intended; this fix does not affect runc binary itself but is important
for
libcontainer users such as Kubernetes. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3476">#3476</a>)</li>
<li>Inability to compile with recent clang due to an issue with
duplicate</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f19387a6be"><code>f19387a</code></a>
VERSION: release v1.1.5</li>
<li><a
href="58a9abee21"><code>58a9abe</code></a>
Merge pull request from GHSA-m8cg-xc2p-r3fc</li>
<li><a
href="27fb72c7ff"><code>27fb72c</code></a>
merge branch 'pr-3776' into release-1.1</li>
<li><a
href="8ec02ea1b1"><code>8ec02ea</code></a>
nsexec: retry unshare on EINVAL</li>
<li><a
href="059d7730fc"><code>059d773</code></a>
merge branch 'pr-3785' into release-1.1</li>
<li><a
href="0abab45c9b"><code>0abab45</code></a>
Prohibit /proc and /sys to be symlinks</li>
<li><a
href="0e6b818a2b"><code>0e6b818</code></a>
rootless: fix /sys/fs/cgroup mounts</li>
<li><a
href="c6781d100a"><code>c6781d1</code></a>
Merge pull request <a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>
from kinvolk/rata/nsfixes-backport</li>
<li><a
href="f6e2cd3baf"><code>f6e2cd3</code></a>
nsexec: Check for errors in write_log()</li>
<li><a
href="3775df9fcb"><code>3775df9</code></a>
Merge pull request <a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>
from kolyshkin/1.1-fix-dev-null</li>
<li>Additional commits viewable in <a
href="https://github.com/opencontainers/runc/compare/v1.1.2...v1.1.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/opencontainers/runc&package-manager=go_modules&previous-version=1.1.2&new-version=1.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-29 14:37:12 -03:00
dependabot[bot]
55154b9aea
feat(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 (#3892)
Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from
0.3.14 to 0.3.15.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fb3c082091"><code>fb3c082</code></a>
Update stackaid dependencies for imdario/mergo</li>
<li><a
href="c9e40b59db"><code>c9e40b5</code></a>
Merge pull request <a
href="https://redirect.github.com/imdario/mergo/issues/227">#227</a>
from eh-steve/should-not-dereference</li>
<li><a
href="acd16ec124"><code>acd16ec</code></a>
Merge branch 'master' into should-not-dereference</li>
<li><a
href="62d1cf2897"><code>62d1cf2</code></a>
Update stackaid dependencies for imdario/mergo</li>
<li><a
href="dcef160919"><code>dcef160</code></a>
Merge pull request <a
href="https://redirect.github.com/imdario/mergo/issues/226">#226</a>
from ronaudinho/fix/202</li>
<li><a
href="404749e66d"><code>404749e</code></a>
Update stackaid dependencies for imdario/mergo</li>
<li><a
href="bd316d34ac"><code>bd316d3</code></a>
Merge pull request <a
href="https://redirect.github.com/imdario/mergo/issues/221">#221</a>
from zhiyu0729/issue220</li>
<li><a
href="5b9bbdb8b6"><code>5b9bbdb</code></a>
Update stackaid dependencies for imdario/mergo</li>
<li><a
href="90db0ad2f4"><code>90db0ad</code></a>
Merge pull request <a
href="https://redirect.github.com/imdario/mergo/issues/170">#170</a>
from mdeltour/fix/naming-typo</li>
<li><a
href="0e73161ca2"><code>0e73161</code></a>
Add WithoutDereference config to prevent incorrect bool pointer
merges</li>
<li>Additional commits viewable in <a
href="https://github.com/imdario/mergo/compare/v0.3.14...v0.3.15">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/imdario/mergo&package-manager=go_modules&previous-version=0.3.14&new-version=0.3.15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-03-27 13:53:18 -03:00
dependabot[bot]
34fd422742
feat(deps): bump github.com/disgoorg/disgo from 0.15.2 to 0.15.3 (#3882)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.15.2 to 0.15.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix goroutine leaks from reconnects &amp; resumes by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/246">disgoorg/disgo#246</a></li>
<li>Added Len func to each XCache interface by <a
href="https://github.com/TisLeo"><code>@​TisLeo</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/248">disgoorg/disgo#248</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/TisLeo"><code>@​TisLeo</code></a> made
their first contribution in <a
href="https://redirect.github.com/disgoorg/disgo/pull/248">disgoorg/disgo#248</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.15.2...v0.15.3">https://github.com/disgoorg/disgo/compare/v0.15.2...v0.15.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8369a3b972"><code>8369a3b</code></a>
Added Len func to each XCache interface (<a
href="https://redirect.github.com/disgoorg/disgo/issues/248">#248</a>)</li>
<li><a
href="381f278234"><code>381f278</code></a>
maybe fix goroutine leaks from reconnects &amp; resumes (<a
href="https://redirect.github.com/disgoorg/disgo/issues/246">#246</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.15.2...v0.15.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.15.2&new-version=0.15.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-21 14:35:33 -03:00
dependabot[bot]
b96dba0333
feat(deps): bump github.com/google/go-containerregistry from 0.13.0 to 0.14.0 (#3878)
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry)
from 0.13.0 to 0.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.14.0</h2>
<h2>Changelog</h2>
<ul>
<li>9306ebad Allow crane edit to generate non-image artifacts (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1545">#1545</a>)</li>
<li>de35f0f7 Allow setting Content-Type in crane edit manifest (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1551">#1551</a>)</li>
<li>4b081f80 Avoid v1.Manifest in crane edit config (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1583">#1583</a>)</li>
<li>1cfe1fc2 Bump aws-actions/configure-aws-credentials from 1.7.0 to
2.0.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1593">#1593</a>)</li>
<li>da1008fb Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1548">#1548</a>)</li>
<li>86be45fb Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1547">#1547</a>)</li>
<li>62f183e5 Bump goreleaser/goreleaser-action from 4.1.1 to 4.2.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1556">#1556</a>)</li>
<li>1b8dc2ba Bump slsa-framework/slsa-github-generator from 1.2.2 to
1.5.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1580">#1580</a>)</li>
<li>11843ba2 Enforce proper sha256 usage (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1544">#1544</a>)</li>
<li>2ceebaaf Implement crane index subcommand (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1561">#1561</a>)</li>
<li>9f42e028 Set mediaType for empty.ImageIndex in RawManifest (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1562">#1562</a>)</li>
<li>759b19f7 Support artifactType, for images whose config.mediaType is
not a config (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1541">#1541</a>)</li>
<li>b3c23b4c Support for OCI 1.1+ referrers via API (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1546">#1546</a>)</li>
<li>061ee6bf Support for OCI 1.1+ referrers via fallback tag (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1543">#1543</a>)</li>
<li>67703048 Update descriptor &quot;data&quot; field (when valid)
during &quot;crane edit config&quot; (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1584">#1584</a>)</li>
<li>76bac933 Update release.yml (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1540">#1540</a>)</li>
<li>eb7d746c authn: also read mount secrets (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1560">#1560</a>)</li>
<li>e94d4089 bump deps using ./hack/bump-deps.sh (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1592">#1592</a>)</li>
<li>4e95ae2b crane: add --flatten for index append (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1566">#1566</a>)</li>
<li>ff810c18 crane: add serve subcommand (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1586">#1586</a>)</li>
<li>8ea5e0e8 crane: support --omit-digest-tags in crane ls (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1528">#1528</a>)</li>
<li>824efc77 fix(mutate): also set timestamps only present in some
formats (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1550">#1550</a>)</li>
<li>e04520bc fix: Fix the crane release url and add more steps (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1532">#1532</a>)</li>
<li>d8722327 hash: use generic instantiation (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1538">#1538</a>)</li>
<li>57f010d2 replace manual slsa-verifier installation with action (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1585">#1585</a>)</li>
<li>9cd098e3 skip tls verification if default transport is used with
insecure option (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1559">#1559</a>)</li>
<li>36249683 tarball: pass imageToTags (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1563">#1563</a>)</li>
</ul>
<h3>Container Images</h3>
<p><a
href="https://gcr.io/go-containerregistry/crane:v0.14.0">https://gcr.io/go-containerregistry/crane:v0.14.0</a>
<a
href="https://gcr.io/go-containerregistry/gcrane:v0.14.0">https://gcr.io/go-containerregistry/gcrane:v0.14.0</a></p>
<p>For example:</p>
<pre><code>docker pull gcr.io/go-containerregistry/crane:v0.14.0
docker pull gcr.io/go-containerregistry/gcrane:v0.14.0
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4b081f801f"><code>4b081f8</code></a>
Avoid v1.Manifest in crane edit config (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1583">#1583</a>)</li>
<li><a
href="1cfe1fc25f"><code>1cfe1fc</code></a>
Bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1593">#1593</a>)</li>
<li><a
href="e94d40893b"><code>e94d408</code></a>
bump deps using ./hack/bump-deps.sh (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1592">#1592</a>)</li>
<li><a
href="ff810c186c"><code>ff810c1</code></a>
crane: add serve subcommand (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1586">#1586</a>)</li>
<li><a
href="57f010d26a"><code>57f010d</code></a>
replace manual slsa-verifier installation with action (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1585">#1585</a>)</li>
<li><a
href="6770304899"><code>6770304</code></a>
Update descriptor &quot;data&quot; field (when valid) during &quot;crane
edit config&quot; (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1584">#1584</a>)</li>
<li><a
href="1b8dc2babc"><code>1b8dc2b</code></a>
Bump slsa-framework/slsa-github-generator from 1.2.2 to 1.5.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1580">#1580</a>)</li>
<li><a
href="8ea5e0e8f0"><code>8ea5e0e</code></a>
crane: support --omit-digest-tags in crane ls (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1528">#1528</a>)</li>
<li><a
href="4e95ae2b72"><code>4e95ae2</code></a>
crane: add --flatten for index append (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1566">#1566</a>)</li>
<li><a
href="4a0e0af4bf"><code>4a0e0af</code></a>
docs: Update crane installation and verification instructions (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1567">#1567</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.13.0...v0.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-20 09:58:29 -03:00
dependabot[bot]
f62a2e48ce
feat(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1 (#3877)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps
[google.golang.org/protobuf](https://github.com/protocolbuffers/protobuf-go)
from 1.29.0 to 1.29.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/protocolbuffers/protobuf-go/releases">google.golang.org/protobuf's
releases</a>.</em></p>
<blockquote>
<h2>v1.29.1</h2>
<ul>
<li><a
href="https://github.com/protocolbuffers/protobuf-go/blob/HEAD/#v1.29.1-notable-changes">Notable
changes</a></li>
</ul>
<h2>Notable changes <!-- raw HTML omitted --><!-- raw HTML omitted
--></h2>
<p><strong>Bug fixes</strong></p>
<ul>
<li><a href="https://go.dev/cl/475995">CL/475995</a>:
internal/encoding/text: fix parsing of incomplete numbers</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="095a62b71f"><code>095a62b</code></a>
all: release v1.29.1</li>
<li><a
href="edaf511a7a"><code>edaf511</code></a>
internal/encoding/text: fix parsing of incomplete numbers</li>
<li><a
href="fe5bc54041"><code>fe5bc54</code></a>
all: start v1.29.0-devel</li>
<li><a
href="d3c9826520"><code>d3c9826</code></a>
all: release v1.29.0</li>
<li>See full diff in <a
href="https://github.com/protocolbuffers/protobuf-go/compare/v1.29.0...v1.29.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/protobuf&package-manager=go_modules&previous-version=1.29.0&new-version=1.29.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-19 23:20:13 -03:00
Carlos Alexandro Becker
dec5fb8e17
feat(deps): bump github.com/goreleaser/nfpm/v2 from v2.26.0 to v2.27.1 (#3876)
latest and greatest, just released, nfpm version!

---------

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-19 23:19:22 -03:00
Carlos Alexandro Becker
12b01f6734
feat(deps): bump github.com/caarlos0/log from v0.2.1 to v0.2.2 (#3875)
update caarlos0/log

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-19 22:47:02 -03:00
dependabot[bot]
13d92b4f89
feat(deps): bump github.com/xanzy/go-gitlab from 0.80.2 to 0.81.0 (#3855)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.80.2 to 0.81.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7c78a6c1e0"><code>7c78a6c</code></a>
Update dependencies</li>
<li><a
href="711e0b4cc5"><code>711e0b4</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1663">#1663</a>
from xanzy/feature/rate-limiter</li>
<li><a
href="40e5bfd65b"><code>40e5bfd</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1665">#1665</a>
from PatrickRice-KSC/add-omit-empty-to-project-options</li>
<li><a
href="77f5aac6fb"><code>77f5aac</code></a>
Fix lint errors</li>
<li><a
href="8f5194d531"><code>8f5194d</code></a>
Add omitempty and test</li>
<li><a
href="824308adfd"><code>824308a</code></a>
Prevent additional call to config the rate limiter</li>
<li><a
href="ae46dbc110"><code>ae46dbc</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1661">#1661</a>
from KingCrunch/feature/add-missing-fields-to-project</li>
<li><a
href="1e98371450"><code>1e98371</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1662">#1662</a>
from timofurrer/deploy-token</li>
<li><a
href="74e732fb03"><code>74e732f</code></a>
Tweak PR just a little…</li>
<li><a
href="507b9ece5e"><code>507b9ec</code></a>
Expose Revoked and Expired field for Deploy Tokens</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.80.2...v0.81.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.80.2&new-version=0.81.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-19 22:28:33 -03:00
dependabot[bot]
9bdfc55e67
feat(deps): bump github.com/caarlos0/env/v7 from 7.0.0 to 7.1.0 (#3848)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [github.com/caarlos0/env/v7](https://github.com/caarlos0/env) from
7.0.0 to 7.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/env/releases">github.com/caarlos0/env/v7's
releases</a>.</em></p>
<blockquote>
<h2>v7.1.0</h2>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>b135bbd86c4110736a91edf6ac242ef0d4b43bd7: feat: error types (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/240">#240</a>)
(<a href="https://github.com/akutuev"><code>@​akutuev</code></a>)</li>
<li>17f0a63edccb660238923ac0d02ab0432edb100d: feat: implement Is on
AggregateError (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/254">#254</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>266f68b264d486a75ebf4b2371aab58a072b52fc: feat: support map kind env
(<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/244">#244</a>)
(<a href="https://github.com/ken8203"><code>@​ken8203</code></a>)</li>
<li>c08b0f906b39a1fbc978eeeb262840f9acd735ff: feat: use field name by
default (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/253">#253</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>dfd68b2d5d324ecfe910012fe415a24c64d34e4b: fix: improve map handling,
coverage (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>e5472ec015521ddbef81bfa12e752e86ee09fa4a: fix: remove untested
behavior (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Documentation updates</h3>
<ul>
<li>65ba2db37013ed6bc2ebfadbbd2dc251ee528e0e: docs: caveats (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>f434e985558517cce98d345ea72faa1082e50640: docs: document how to
handle error (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>2d26ce1cd4c10a7fa055c643cfde3a4a295f8e6d: docs: fix examples (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>91e69e8f885b30466508baca6220fec4e4307338: docs: maps (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>850c2d8068a4e311cf2bd6f65a22dce5a66d5edd: docs: update to v7 (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/249">#249</a>)
(<a
href="https://github.com/alexandear"><code>@​alexandear</code></a>)</li>
</ul>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="17f0a63edc"><code>17f0a63</code></a>
feat: implement Is on AggregateError (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/254">#254</a>)</li>
<li><a
href="2d26ce1cd4"><code>2d26ce1</code></a>
docs: fix examples</li>
<li><a
href="c08b0f906b"><code>c08b0f9</code></a>
feat: use field name by default (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/253">#253</a>)</li>
<li><a
href="65ba2db370"><code>65ba2db</code></a>
docs: caveats</li>
<li><a
href="91e69e8f88"><code>91e69e8</code></a>
docs: maps</li>
<li><a
href="dfd68b2d5d"><code>dfd68b2</code></a>
fix: improve map handling, coverage</li>
<li><a
href="266f68b264"><code>266f68b</code></a>
feat: support map kind env (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/244">#244</a>)</li>
<li><a
href="f434e98555"><code>f434e98</code></a>
docs: document how to handle error</li>
<li><a
href="e5472ec015"><code>e5472ec</code></a>
fix: remove untested behavior</li>
<li><a
href="b135bbd86c"><code>b135bbd</code></a>
feat: error types (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/240">#240</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/caarlos0/env/compare/v7.0.0...v7.1.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/env/v7&package-manager=go_modules&previous-version=7.0.0&new-version=7.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-19 22:24:58 -03:00
dependabot[bot]
dfdbad17f7
feat(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 (#3849)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.6.0
to 0.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h1>gopls/v0.7.0</h1>
<h2>Features</h2>
<h3>Postfix completions</h3>
<p>Postfix completions are a new style of completions that can save you
time by inserting more complex pieces of commonly-written code. All of
the results end with <code>!</code>. This feature was added
experimentally in <code>gopls/v0.6.10</code> and is now enabled by
default.</p>
<p>See this example:</p>
<p><img
src="https://user-images.githubusercontent.com/5856771/114612163-c5df9800-9c6f-11eb-959c-8fe529018a21.gif"
alt="ezgif-3-a82b2077ff38" /></p>
<h3>New commands: <a
href="https://github.com/golang/tools/blob/master/gopls/doc/commands.md#retrieves-a-list-of-packages">List
known packages</a> and <a
href="https://github.com/golang/tools/blob/master/gopls/doc/commands.md#asks-the-server-to-add-an-import-path-to-a-given-go-file">add
import</a></h3>
<p>These commands can be used to manually list available packages to
import and then add an import to your file. They are currently not used
by any known clients, but they will be made available through the
Command Palette in VS Code in the next VS Code Go release.</p>
<h2>Improvements</h2>
<h3>Memory usage</h3>
<p>Improved trimming of the ASTs of dependency packages results in
reduced memory usage, especially for projects with many dependencies.
This may result in some hard-to-diagnose bugs that we're not yet aware
of, so please report any surprising behavior via <a
href="https://golang.org/issues/new">https://golang.org/issues/new</a>.</p>
<h2>Fixes</h2>
<p>A full list of all issues fixed can be found in the <a
href="https://github.com/golang/go/milestone/213?closed=1">gopls/v0.7.0
milestone</a>. To report a new problem, please file a new issue at <a
href="https://golang.org/issues/new">https://golang.org/issues/new</a>.</p>
<h2>Thank you to our contributors!</h2>
<p><a href="https://github.com/muirdm"><code>@​muirdm</code></a> <a
href="https://github.com/marwan-at-work"><code>@​marwan-at-work</code></a>
<a href="https://github.com/dominikh"><code>@​dominikh</code></a> <a
href="https://github.com/leitzler"><code>@​leitzler</code></a> <a
href="https://github.com/OneOfOne"><code>@​OneOfOne</code></a> <a
href="https://github.com/zyctree"><code>@​zyctree</code></a> <a
href="https://github.com/ShoshinNikita"><code>@​ShoshinNikita</code></a>
<a
href="https://github.com/KarthikNayak"><code>@​KarthikNayak</code></a>
<a href="https://github.com/suzmue"><code>@​suzmue</code></a> <a
href="https://github.com/bcmills"><code>@​bcmills</code></a></p>
<h1>gopls/v0.6.11</h1>
<p>This release contains mainly bug fixes. A full list of all issues
fixed can be found in the <a
href="https://github.com/golang/go/milestone/211?closed=1">gopls/v0.6.11
milestone</a>. To report a new problem, please file a new issue at <a
href="https://golang.org/issues/new">https://golang.org/issues/new</a>.</p>
<h2>Thank you to our contributors!</h2>
<p><a
href="https://github.com/ShoshinNikita"><code>@​ShoshinNikita</code></a>
<a href="https://github.com/sakateka"><code>@​sakateka</code></a> <a
href="https://github.com/muirdm"><code>@​muirdm</code></a> Will Langford
<a href="https://github.com/empire"><code>@​empire</code></a> <a
href="https://github.com/justplesh"><code>@​justplesh</code></a> <a
href="https://github.com/suzmue"><code>@​suzmue</code></a></p>
<h1>gopls/v0.6.10</h1>
<h2>Features</h2>
<h3><code>t.Fatal</code> snippet</h3>
<p>If you trigger completion in a test function, on the line after a
call to a function that returns an error, you will be offered a
completion snippet for:</p>
<pre lang="go"><code>if err != nil {
    t.Fatal(err)
}
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="031fc75960"><code>031fc75</code></a>
gopls/internal/regtest/bench: don't run the iwl test with -short</li>
<li><a
href="f477bf4a41"><code>f477bf4</code></a>
gopls/internal/lsp/source/completion: avoid Snapshot.CachedPackages</li>
<li><a
href="b72edd12e5"><code>b72edd1</code></a>
gopls/internal/lsp/filecache: GOPLS_CACHE -&gt; GOPLSCACHE</li>
<li><a
href="d566927635"><code>d566927</code></a>
gopls/internal/lsp/regtest: add <a
href="https://github.com/suggestedfix"><code>@​suggestedfix</code></a>
marker</li>
<li><a
href="fdb0da65a1"><code>fdb0da6</code></a>
gopls/internal/regtest/bench: add a benchmark for diagnosing a
change</li>
<li><a
href="6eb432f3b0"><code>6eb432f</code></a>
gopls/internal/regtest/bench: add benchmarks in a wider variety of
repos</li>
<li><a
href="c91d0b88c3"><code>c91d0b8</code></a>
gopls/internal/lsp/source: guard against concurrent writes in xrefs</li>
<li><a
href="c0742f584b"><code>c0742f5</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="21d2256f2c"><code>21d2256</code></a>
gopls/internal/lsp/cache: make type-checking incremental</li>
<li><a
href="ae05609bd0"><code>ae05609</code></a>
internal/lsp/cache: add an LRU parse cache</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.6.0...v0.7.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.6.0&new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-19 22:18:07 -03:00
dependabot[bot]
41bb6dcddf
feat(deps): bump gocloud.dev from 0.28.0 to 0.29.0 (#3837)
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.28.0 to
0.29.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-cloud/releases">gocloud.dev's
releases</a>.</em></p>
<blockquote>
<h2>v0.29.0</h2>
<p><strong>BREAKING CHANGES</strong></p>
<ul>
<li>Updated to latest <code>azureblob</code>, which had some
non-backward-compatible changes (again).</li>
</ul>
<p><strong>all</strong></p>
<ul>
<li>Defaulting to <code>go</code> version <code>1.2</code>.</li>
<li><strong>aws</strong>: Added support for custom endpoints for AWS SDK
v2.</li>
<li><strong>gcp</strong>: Updated imports for
<code>credentialspb</code>.</li>
</ul>
<p><strong>blob</strong></p>
<ul>
<li><strong>azureblob</strong>: Updated to latest (breaking
change).</li>
</ul>
<p><strong>pubsub</strong></p>
<ul>
<li><strong>kafkapub</strong>: Fixed nil Options pointer
dereference.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="62397121ec"><code>6239712</code></a>
all: prep for release (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3236">#3236</a>)</li>
<li><a
href="973ec87371"><code>973ec87</code></a>
all: prep for release (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3235">#3235</a>)</li>
<li><a
href="3348a6a4a0"><code>3348a6a</code></a>
aws: fix typo on awssdk=v2 docstring</li>
<li><a
href="ec0a2bbc3f"><code>ec0a2bb</code></a>
pubsub/rabbitpubsub: give rabbitmq more time to come up (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3233">#3233</a>)</li>
<li><a
href="082a495894"><code>082a495</code></a>
docstore/gcpfirestore: update proto import (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3229">#3229</a>)</li>
<li><a
href="53ba9013f0"><code>53ba901</code></a>
pubsub/gcppubsub: update proto import (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3230">#3230</a>)</li>
<li><a
href="b3612581b1"><code>b361258</code></a>
runtimevar/gcpsecretmanager: update proto import (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3231">#3231</a>)</li>
<li><a
href="e5235d85eb"><code>e5235d8</code></a>
blob/gcsblob: update proto import (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3228">#3228</a>)</li>
<li><a
href="7cd8b2b9f6"><code>7cd8b2b</code></a>
secrets/gcpkms: update proto import (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3227">#3227</a>)</li>
<li><a
href="8cddf16323"><code>8cddf16</code></a>
all: update deps BREAKING_CHANGE_OK (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3225">#3225</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-cloud/compare/v0.28.0...v0.29.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.28.0&new-version=0.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 13:07:00 -03:00
dependabot[bot]
dde6a23590
feat(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0 (#3839)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.6.0
to 0.7.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="776e461a4e"><code>776e461</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="ebe92624d1"><code>ebe9262</code></a>
ssh: add support for <a
href="mailto:aes256-gcm@openssh.com">aes256-gcm@openssh.com</a></li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.6.0...v0.7.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.6.0&new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 11:53:48 -03:00
dependabot[bot]
284574d9f5
feat(deps): bump golang.org/x/oauth2 from 0.5.0 to 0.6.0 (#3840)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.5.0
to 0.6.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="62b4eedd72"><code>62b4eed</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="885f294722"><code>885f294</code></a>
google: Add support for OAuth2 token exchange over mTLS</li>
<li><a
href="6f9c1a18cc"><code>6f9c1a1</code></a>
google: use Credentials instead of deprecated DefaultCredentials</li>
<li><a
href="c82d0e16dc"><code>c82d0e1</code></a>
google/internal/externalaccount: Removed URL validation for google URLs
in AD...</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.5.0...v0.6.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.5.0&new-version=0.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 11:37:04 -03:00
dependabot[bot]
4ea080ce49
feat(deps): bump github.com/disgoorg/disgo from 0.15.1 to 0.15.2 (#3819)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.15.1 to 0.15.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix voice by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="a3ddd4aaca</a></li>
<li>add helper to sync commands for guilds or globally by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="3dbf6a6c06</a></li>
<li>simplify oauth2 by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/241">disgoorg/disgo#241</a></li>
<li>add <code>CustomMessage</code> to
<code>AutoModerationActionMetadata</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/243">disgoorg/disgo#243</a></li>
</ul>
<h1>Breaking Changes</h1>
<ul>
<li>removal of <code>oauth2.SessionController</code></li>
<li><code>oauth2.Session</code> is now a struct instead of
interface</li>
<li>removal of <code>identifier</code> param in
<code>oauth2.Client.StartSession()</code> and
<code>oauth2.Client.RefreshSession()</code></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.15.1...v0.15.2">https://github.com/disgoorg/disgo/compare/v0.15.1...v0.15.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2ac4b5df9b"><code>2ac4b5d</code></a>
use handler.SyncCommands in handler example</li>
<li><a
href="a3ddd4aaca"><code>a3ddd4a</code></a>
fix voice ip discovery packet size</li>
<li><a
href="3dbf6a6c06"><code>3dbf6a6</code></a>
handler add helper to sync commands for guilds or globally</li>
<li><a
href="2fc89bc438"><code>2fc89bc</code></a>
minor refactor &amp; cleanup of oauth2 suff</li>
<li><a
href="0b775b65f2"><code>0b775b6</code></a>
fix json tag name</li>
<li><a
href="9ab5fbde32"><code>9ab5fbd</code></a>
Bump golang.org/x/sys in /_examples/application_commands/http (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/244">#244</a>)</li>
<li><a
href="14761a3785"><code>14761a3</code></a>
Bump golang.org/x/sys from 0.0.0-20211019181941-9d821ace8654 to 0.1.0
(<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/245">#245</a>)</li>
<li><a
href="8cb8e68a90"><code>8cb8e68</code></a>
add CustomMessage to AutoModerationActionMetadata (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/243">#243</a>)</li>
<li><a
href="a32b7f1d36"><code>a32b7f1</code></a>
fix README example (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/242">#242</a>)</li>
<li><a
href="faa79470af"><code>faa7947</code></a>
simplify oauth2 by removing session controller &amp; converting a
session to a st...</li>
<li>Additional commits viewable in <a
href="https://github.com/disgoorg/disgo/compare/v0.15.1...v0.15.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.15.1&new-version=0.15.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-02 09:36:10 -03:00
Carlos Alexandro Becker
acc9eea154
feat(deps): update env to v7 (#3814)
env v7!

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-01 01:20:37 -03:00
dependabot[bot]
d658b04ad7
feat(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 (#3809)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify)
from 1.8.1 to 1.8.2.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f36bfe3c33"><code>f36bfe3</code></a>
Fix Subset/NotSubset when map is missing keys from the subset (<a
href="https://github-redirect.dependabot.com/stretchr/testify/issues/1261">#1261</a>)</li>
<li><a
href="0ab3ce1249"><code>0ab3ce1</code></a>
Fix <code>CallerInfo()</code> source file paths (<a
href="https://github-redirect.dependabot.com/stretchr/testify/issues/1288">#1288</a>)</li>
<li><a
href="2b00d33aec"><code>2b00d33</code></a>
Fix Call.Unset() panic (issue <a
href="https://github-redirect.dependabot.com/stretchr/testify/issues/1236">#1236</a>)
(<a
href="https://github-redirect.dependabot.com/stretchr/testify/issues/1250">#1250</a>)</li>
<li><a
href="9acc22213e"><code>9acc222</code></a>
fix: fix bug for check unsafe.Pointer isNil (<a
href="https://github-redirect.dependabot.com/stretchr/testify/issues/1319">#1319</a>)</li>
<li><a
href="1333b5d3bd"><code>1333b5d</code></a>
Add sub-tests to Suite (<a
href="https://github-redirect.dependabot.com/stretchr/testify/issues/1246">#1246</a>)</li>
<li>See full diff in <a
href="https://github.com/stretchr/testify/compare/v1.8.1...v1.8.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=go_modules&previous-version=1.8.1&new-version=1.8.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-27 09:34:15 -03:00
dependabot[bot]
2b454c283f
feat(deps): bump github.com/google/go-github/v50 from 50.0.0 to 50.1.0 (#3802) 2023-02-24 09:58:33 -03:00
dependabot[bot]
970fad38b0
feat(deps): bump github.com/disgoorg/disgo from 0.15.0 to 0.15.1 (#3785)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.15.0 to 0.15.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.1</h2>
<h2>What's Changed</h2>
<ul>
<li><code>handler</code> package improvements by <a
href="https://github.com/Thunder33345"><code>@​Thunder33345</code></a>
in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/240">disgoorg/disgo#240</a></li>
<li>add noop ratelimiter by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="24260e4bca</a></li>
<li>fix some minor broken/incorrect stuff by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/237">disgoorg/disgo#237</a></li>
<li>allow easy replacing of rest url by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/236">disgoorg/disgo#236</a></li>
<li>add <code>MessageFlagSuppressNotifications</code> and
<code>MessageFlagFailedToMentionSomeRolesInThread</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="9cbba0bb75</a></li>
<li>add stage message types by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="12bf0cce55</a></li>
<li>add <code>ConnectionTypeInstagram</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/234">disgoorg/disgo#234</a></li>
<li>add <code>NSFW</code> and <code>VideoQualityMode</code> to
<code>GuildStageVoiceChannelUpdate</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="0f4d6ca243</a></li>
<li>add <code>StorePageAsset</code> cdn endpoint by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="84cfc8d278</a></li>
<li>match <code>MemberFlags</code> const names with other flags by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="4aca7c2ba9</a></li>
</ul>
<h2>Breaking</h2>
<ul>
<li><code>MemberFlags</code> consts have been renamed to follow
appropriate flag naming</li>
<li>renamed <code>Router.HandleCommand</code> to
<code>Router.Command</code></li>
<li>renamed <code>Router.HandleAutocomplete</code> to
<code>Router.Autocomplete</code></li>
<li>renamed <code>Router.HandleComponent</code> to
<code>Router.Component</code></li>
<li>renamed <code>Router.HandleModal</code> to
<code>Router.Modal</code></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.15.0...v0.15.1">https://github.com/disgoorg/disgo/compare/v0.15.0...v0.15.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="604780dafa"><code>604780d</code></a>
handler improvements (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/240">#240</a>)</li>
<li><a
href="12bf0cce55"><code>12bf0cc</code></a>
add stage message types (again)</li>
<li><a
href="0f4d6ca243"><code>0f4d6ca</code></a>
add NSFW and VideoQualityMode to GuildStageVoiceChannelUpdate</li>
<li><a
href="356ddcbf0f"><code>356ddcb</code></a>
fix StickerPackBanner cdn endpoint path</li>
<li><a
href="84cfc8d278"><code>84cfc8d</code></a>
add StorePageAsset cdn endpoint</li>
<li><a
href="c377083bc3"><code>c377083</code></a>
add ConnectionTypeInstagram (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/234">#234</a>)</li>
<li><a
href="5c4a0c559b"><code>5c4a0c5</code></a>
fix double slash in endpoint</li>
<li><a
href="24260e4bca"><code>24260e4</code></a>
add noop rate limiter and proxy example and always send shard info</li>
<li><a
href="b780a98e18"><code>b780a98</code></a>
fix field name capitalization</li>
<li><a
href="4aca7c2ba9"><code>4aca7c2</code></a>
match flag const names</li>
<li>Additional commits viewable in <a
href="https://github.com/disgoorg/disgo/compare/v0.15.0...v0.15.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.15.0&new-version=0.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-02-17 13:02:28 -03:00
dependabot[bot]
3f34afcecc
feat(deps): bump github.com/xanzy/go-gitlab from 0.80.0 to 0.80.2 (#3786)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.80.0 to 0.80.2.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b91e64b2b0"><code>b91e64b</code></a>
Reorder a few project fields</li>
<li><a
href="0fa6158375"><code>0fa6158</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1636">#1636</a>
from apricote/project-import-url</li>
<li><a
href="1ab89ad306"><code>1ab89ad</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1651">#1651</a>
from xanzy/feature/links</li>
<li><a
href="1fd8df4983"><code>1fd8df4</code></a>
Add release links</li>
<li><a
href="e837f2de87"><code>e837f2d</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1650">#1650</a>
from blacknon/master</li>
<li><a
href="df4112ac7b"><code>df4112a</code></a>
Rename the option structs and add missing <code>url</code> tags</li>
<li><a
href="f8929bf7ef"><code>f8929bf</code></a>
update. <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/pull/1650#discussion_r1102998538">xanzy/go-gitlab#1650</a></li>
<li><a
href="172b5e0c3f"><code>172b5e0</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1648">#1648</a>
from theoriginalstove/1501-add-changelog-api-support</li>
<li><a
href="39bce07acd"><code>39bce07</code></a>
Refactor…</li>
<li><a
href="3f26370513"><code>3f26370</code></a>
style: added whitespace between license and package name in new
files</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.80.0...v0.80.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.80.0&new-version=0.80.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-17 13:02:17 -03:00
Carlos A Becker
8b41864109
fix: GO-2023-1571
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-02-17 10:51:13 -03:00
dependabot[bot]
f3f6d94a5c
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.25.1 to 2.26.0 (#3779)
Bumps
[github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from
2.25.1 to 2.26.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.26.0</h2>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>34276432d6614e28108b2851b298c86342c41e4c: feat(deps): bump
github.com/goreleaser/chglog from 0.4.0 to 0.4.1 (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/616">#616</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>4d89ab846ee135cbcf3085316bf15c739e8f1cc8: fix: use --clean instead
of --rm-dist (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/nfpm/compare/v2.25.1...v2.26.0">https://github.com/goreleaser/nfpm/compare/v2.25.1...v2.26.0</a></p>
<hr />
<ul>
<li>Check out <a href="https://goreleaser.com">GoReleaser</a>: it
integrates nFPM to the release pipeline of your Go projects.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="34276432d6"><code>3427643</code></a>
feat(deps): bump github.com/goreleaser/chglog from 0.4.0 to 0.4.1 (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/616">#616</a>)</li>
<li><a
href="4d89ab846e"><code>4d89ab8</code></a>
fix: use --clean instead of --rm-dist</li>
<li>See full diff in <a
href="https://github.com/goreleaser/nfpm/compare/v2.25.1...v2.26.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/goreleaser/nfpm/v2&package-manager=go_modules&previous-version=2.25.1&new-version=2.26.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

**Note:** Dependabot was ignoring updates to this dependency, but since
you've updated it yourself we've started tracking it for you again. 🤖

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 11:28:36 -03:00
dependabot[bot]
b572e8a834
feat(deps): bump golang.org/x/tools from 0.5.0 to 0.6.0 (#3778)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.5.0
to 0.6.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h1>gopls/v0.6.0</h1>
<h2>Features</h2>
<h3>Default to <code>-mod=readonly</code></h3>
<p>In Go 1.16, the Go command will no longer modify user's
<code>go.mod</code> and <code>go.sum</code> files automatically (<a
href="https://tip.golang.org/doc/go1.16#tools">https://tip.golang.org/doc/go1.16#tools</a>).
In order to match this behavior, <code>gopls</code> now also uses
<code>-mod=readonly</code> when running the <code>go</code> command. Any
errors reported by the <code>go</code> command will be presented with a
suggested fix to make the necessary fixes to your <code>go.mod</code> or
<code>go.sum</code> files. As a consequence, your workspace may be in a
partially broken state while you have errors in your <code>go.mod</code>
or <code>go.sum</code> file. <a
href="https://github-redirect.dependabot.com/golang/go/issues/42266">golang/go#42266</a>
will mitigate this, but it will likely not be resolved until
February.</p>
<p><strong>Not recommended</strong>: If you must opt out of this
behavior, you can set the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#allowmodfilemodifications-bool"><code>allowModfileModifications</code></a>
configuration to <code>true</code>.</p>
<h3>Default to <code>GOPROXY=off</code></h3>
<p><code>gopls</code> no longer accesses the network implicitly. This
should improve latency in all cases, but it also means that
<code>gopls</code> will no longer automatically download modules that
are not found in your local module cache. The one exception is that
<code>gopls</code> will still download dependencies on start-up, so it
will continue to work as expected if you have cloned a repository for
the first time. If <code>gopls</code> detects a missing module, it will
offer you a suggested fix that downloads it.</p>
<p><strong>Not recommended</strong>: If you must opt out of this
behavior, you can set the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#allowimplicitnetworkaccess-bool"><code>allowImplicitNetworkaccess</code></a>
configuration to <code>true</code>.</p>
<h3>Inclusion/exclusion filters for directories</h3>
<p><code>gopls</code> now supports excluding certain directories in your
workspace from analysis. This may be useful if you are only working on a
subset of a large repository. Note that these filters are not propagated
to the <code>go</code> command, so <code>gopls</code> will still load
metadata for these directories, which may be expensive.
<strong>Configure the included/excluded directories through the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#directoryfilters-string"><code>directoryFilters</code></a>
setting.</strong></p>
<h3>Debouncing for diagnostics</h3>
<p>Diagnostics are now reported instantly only for the packages
currently being edited. Diagnostics for other packages in the workspace
will now only be computed after 250 milliseconds, meaning that, if you
are actively typing, <code>gopls</code> will not start these more costly
operations. This should significantly reduce CPU utilization. This
debounce delay can be optionally configured via the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#experimentaldiagnosticsdelay-timeduration"><code>experimentalDiagnosticsDelay</code></a>
setting.</p>
<h3>&quot;Upgrade direct dependencies&quot; code lens</h3>
<p>In <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.5.4"><code>gopls/v0.5.4</code></a>,
we removed the per-require &quot;Upgrade dependency&quot; code lens, as
it was very high latency, and its UX did not meet user needs. Some users
have expressed disappointment about this, so, to bridge the gap, we have
separated the existing &quot;Upgrade all dependencies&quot; code lens
into two: &quot;Upgrade transitive dependencies&quot; and &quot;Upgrade
direct dependencies&quot;. The first is the equivalent of running
<code>go get -u all</code>, while the second <code>go get</code>s each
of your module's requires independently. We are continuing to work on
improving these features and will likely bring back the &quot;Upgrade
dependency&quot; code lens as a suggested fix (learn more: <a
href="https://github-redirect.dependabot.com/golang/go/issues/38339">golang/go#38339</a>).</p>
<h3>Support for filling a partially-populated struct</h3>
<p>The &quot;Fill struct&quot; suggested fix will now be suggested for
structs that have some, but not all, fields set.</p>
<h3>Experimental</h3>
<h4>Field alignment analyzer</h4>
<p>A new analyzer has been added to suggest reordering fields in a
struct in order to achieve the optimal alignment in memory. It is still
off by default, but can be enabled by adding the following to your
<code>gopls</code> settings:</p>
<pre lang="json5"><code>&quot;analyses&quot;: {		
	&quot;fieldalignment&quot;: true
}
</code></pre>
<h2>Fixes</h2>
<h3>Improvements to diagnostics tracking</h3>
<p>Diagnostic messages were not being updated correctly when the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#codelenses-mapstringbool"><code>GC
details</code></a> code lens was toggled on. New handling to
differentiate diagnostics by sources should have resolved this
issue.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d0863f03da"><code>d0863f0</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="545ca87cb5"><code>545ca87</code></a>
gopls/internal/regtest/marker: require go/packages</li>
<li><a
href="1ace7dbcb0"><code>1ace7db</code></a>
go,gopls: remove license from package doc comments</li>
<li><a
href="ebad375bab"><code>ebad375</code></a>
gopls/internal/lsp/protocol: prevent license rendering in godoc</li>
<li><a
href="10a39ef32d"><code>10a39ef</code></a>
gopls/internal/lsp/regtest: address additional comments on
marker.go</li>
<li><a
href="69920f2e63"><code>69920f2</code></a>
gopls/internal/regtest/marker: add missing tests for hover</li>
<li><a
href="24a13c6fad"><code>24a13c6</code></a>
gopls/internal/regtest: fill out features of the new marker tests</li>
<li><a
href="2b149ce94b"><code>2b149ce</code></a>
gopls/internal/regtest: add a regtest-based version of the marker
tests</li>
<li><a
href="edddc5fc32"><code>edddc5f</code></a>
go/packages: don't discard errors loading export data</li>
<li><a
href="a762c82c1b"><code>a762c82</code></a>
go/ssa: add MultiConvert instruction</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.5.0...v0.6.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.5.0&new-version=0.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-13 11:28:09 -03:00
dependabot[bot]
c903398719
feat(deps): bump github.com/xanzy/go-gitlab from 0.79.1 to 0.80.0 (#3774)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.79.1 to 0.80.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9e8a56f022"><code>9e8a56f</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1645">#1645</a>
from blacknon/master</li>
<li><a
href="c6a3d13acd"><code>c6a3d13</code></a>
Merge remote-tracking branch 'refs/remotes/origin/master'</li>
<li><a
href="2544230e10"><code>2544230</code></a>
UpdateSnippetOptionにFilesを追加</li>
<li><a
href="9e38892900"><code>9e38892</code></a>
Formatted the project using gofumpt</li>
<li><a
href="f46a273ab9"><code>f46a273</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1597">#1597</a>
from abdellaui/bugfix/rename_projects_NameRegexDelet...</li>
<li><a
href="79679f4c0b"><code>79679f4</code></a>
Tweak PR a little…</li>
<li><a
href="4b328c1100"><code>4b328c1</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1612">#1612</a>
from FantasyTeddy/update-protected-branches</li>
<li><a
href="1b76c1c3c7"><code>1b76c1c</code></a>
Few minor tweaks…</li>
<li><a
href="51f101e636"><code>51f101e</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1642">#1642</a>
from theoriginalstove/1583-custom-headers</li>
<li><a
href="ab870cff19"><code>ab870cf</code></a>
Tweak the PR a little</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.79.1...v0.80.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.79.1&new-version=0.80.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-10 10:13:06 -03:00
dependabot[bot]
5fa826eb7f
feat(deps): bump golang.org/x/crypto from 0.5.0 to 0.6.0 (#3768)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.5.0
to 0.6.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a9f661cb6e"><code>a9f661c</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="310bfa40f1"><code>310bfa4</code></a>
cryptobyte: reject negative Unwrite argument</li>
<li><a
href="59ff47295c"><code>59ff472</code></a>
all: fix some comments</li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.5.0...v0.6.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.5.0&new-version=0.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-09 08:55:39 -03:00
dependabot[bot]
3e63d739f8
feat(deps): bump golang.org/x/oauth2 from 0.4.0 to 0.5.0 (#3769)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.4.0
to 0.5.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="adbaf66a0b"><code>adbaf66</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="e07593a4c4"><code>e07593a</code></a>
oauth2: remove direct dependency on golang.org/x/net</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.4.0...v0.5.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.4.0&new-version=0.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-09 08:52:48 -03:00
dependabot[bot]
503f13e632
chore(deps): bump github.com/jarcoal/httpmock from 1.2.0 to 1.3.0 (#3760)
Bumps [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock)
from 1.2.0 to 1.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jarcoal/httpmock/releases">github.com/jarcoal/httpmock's
releases</a>.</em></p>
<blockquote>
<h2>v1.3.0</h2>
<p>New features:</p>
<ul>
<li>new <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Matcher">matcher
feature</a>, allowing to create a <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a>
based on <a
href="https://pkg.go.dev/net/http#Request">net/http.Request</a> content
(header or body for example), so not only on method and URL as before.
See the following new registering functions &amp; methods:
<ul>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterMatcherResponder">RegisterMatcherResponder</a>
&amp; <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterMatcherResponder">MockTransport.RegisterMatcherResponder</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterRegexpMatcherResponder">RegisterRegexpMatcherResponder</a>
&amp; <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterRegexpMatcherResponder">MockTransport.RegisterRegexpMatcherResponder</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#RegisterMatcherResponderWithQuery">RegisterMatcherResponderWithQuery</a>
&amp; <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#MockTransport.RegisterMatcherResponderWithQuery">MockTransport.RegisterMatcherResponderWithQuery</a>;</li>
</ul>
</li>
<li>add following <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a>
methods, allowing to easily add some headers to the returned <a
href="https://pkg.go.dev/net/http#Response">net/http.Response</a>
without the need to craft a <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder">Responder</a>
by hand:
<ul>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.SetContentLength">SetContentLength</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.HeaderAdd">HeaderAdd</a>,</li>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Responder.HeaderSet">HeaderSet</a>.</li>
</ul>
</li>
</ul>
<p>Miscellaneous:</p>
<ul>
<li>documentation now uses new go1.19 doc features;</li>
<li>go minimal version required is now 1.13;</li>
<li>CI tests using go1.20 &amp; golangci-lint v1.51.0.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e977d517e9"><code>e977d51</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/139">#139</a>
from jarcoal/go120</li>
<li><a
href="df3afac771"><code>df3afac</code></a>
ci: test with go1.20</li>
<li><a
href="837f061d50"><code>837f061</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/138">#138</a>
from jarcoal/headers</li>
<li><a
href="d4ab20c68d"><code>d4ab20c</code></a>
feat: add Responder.{SetContentLength,HeaderAdd,HeaderSet} methods</li>
<li><a
href="db50b7669d"><code>db50b76</code></a>
perf(matchers): simplify http.NoBody case</li>
<li><a
href="b9e83a2877"><code>b9e83a2</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/136">#136</a>
from jarcoal/matchers</li>
<li><a
href="f69cd5e7f9"><code>f69cd5e</code></a>
feat: introduce new matchers feature</li>
<li><a
href="a55e9610f3"><code>a55e961</code></a>
refactor: go1.13 required now, so drop go1.9 to go1.12 support</li>
<li><a
href="f6c487638c"><code>f6c4876</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/jarcoal/httpmock/issues/134">#134</a>
from jarcoal/go119</li>
<li><a
href="638f16c700"><code>638f16c</code></a>
docs: uses new go1.19 doc features</li>
<li>Additional commits viewable in <a
href="https://github.com/jarcoal/httpmock/compare/v1.2.0...v1.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jarcoal/httpmock&package-manager=go_modules&previous-version=1.2.0&new-version=1.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-07 09:45:00 -03:00
dependabot[bot]
618a3694ad
chore(deps): bump github.com/muesli/termenv from 0.13.0 to 0.14.0 (#3761)
Bumps [github.com/muesli/termenv](https://github.com/muesli/termenv)
from 0.13.0 to 0.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/muesli/termenv/releases">github.com/muesli/termenv's
releases</a>.</em></p>
<blockquote>
<h2>v0.14.0</h2>
<h2>What's Changed</h2>
<ul>
<li>feat: add OSC-777 support for system notifications by <a
href="https://github.com/muesli"><code>@​muesli</code></a> in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/99">muesli/termenv#99</a></li>
<li>feat: skip TTY checks by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/109">muesli/termenv#109</a></li>
<li>feat: copy to primary clipboard by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/110">muesli/termenv#110</a></li>
<li>feat(mouse): add extended mouse sequences by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/104">muesli/termenv#104</a></li>
<li>fix: compiling js/wasm/plan9/aix failed missing method ColorProfile
by <a
href="https://github.com/mschneider82"><code>@​mschneider82</code></a>
in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/106">muesli/termenv#106</a></li>
<li>fix(output): check for nil tty writer by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/97">muesli/termenv#97</a></li>
<li>chore: use consts for sequences by <a
href="https://github.com/muesli"><code>@​muesli</code></a> in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/102">muesli/termenv#102</a></li>
<li>chore: rename to Notify for consistency by <a
href="https://github.com/muesli"><code>@​muesli</code></a> in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/103">muesli/termenv#103</a></li>
<li>chore(test): add mouse, copy, and hyperlink tests by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/112">muesli/termenv#112</a></li>
<li>docs: put feature matrix in a detail tag by <a
href="https://github.com/muesli"><code>@​muesli</code></a> in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/100">muesli/termenv#100</a></li>
<li>docs: document Copy method in README by <a
href="https://github.com/muesli"><code>@​muesli</code></a> in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/101">muesli/termenv#101</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/mschneider82"><code>@​mschneider82</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/muesli/termenv/pull/106">muesli/termenv#106</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/muesli/termenv/compare/v0.13.0...v0.14.0">https://github.com/muesli/termenv/compare/v0.13.0...v0.14.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0822a5ca94"><code>0822a5c</code></a>
chore(examples): update ssh example</li>
<li><a
href="3582eeb6b9"><code>3582eeb</code></a>
feat(output): add unsafe option</li>
<li><a
href="b8d620baee"><code>b8d620b</code></a>
chore(test): add mouse, copy, and hyperlink tests</li>
<li><a
href="a33f7dcbca"><code>a33f7dc</code></a>
feat: copy to primary clipboard (<a
href="https://github-redirect.dependabot.com/muesli/termenv/issues/110">#110</a>)</li>
<li><a
href="38481645b0"><code>3848164</code></a>
fix(termenv): remove unused method</li>
<li><a
href="7d897462ce"><code>7d89746</code></a>
fix: compiling js/wasm/plan9/aix failed missing method ColorProfile and
Enabl...</li>
<li><a
href="20a0c5be6d"><code>20a0c5b</code></a>
build(deps): bump github.com/mattn/go-isatty from 0.0.16 to 0.0.17</li>
<li><a
href="925ea91a33"><code>925ea91</code></a>
feat: use OutputOption</li>
<li><a
href="bb31c0cd6d"><code>bb31c0c</code></a>
fix(output): check for nil tty writer</li>
<li><a
href="d578fd168a"><code>d578fd1</code></a>
docs: add extended mouse support to matrix</li>
<li>Additional commits viewable in <a
href="https://github.com/muesli/termenv/compare/v0.13.0...v0.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/muesli/termenv&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-07 09:35:50 -03:00
Carlos Alexandro Becker
81914757da
build: use go1.20 (#3757)
update everything to go 1.20

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-05 13:39:39 -03:00
Carlos Alexandro Becker
9b7603ac74
fix: force specific version of go-crypto (#3756)
refs #3745

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-02-05 12:09:06 -03:00
Carlos A Becker
1dbb55854d
fix: make the warning clearer
refs #3745

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-02-01 22:34:24 -03:00
Carlos A Becker
b0a59a1185
Revert "feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.23.0 to 2.24.0 (#3715)"
This reverts commit 7375a39591.
2023-02-01 20:07:53 -03:00
dependabot[bot]
a6d558af0a
feat(deps): bump github.com/xanzy/go-gitlab from 0.79.0 to 0.79.1 (#3739)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.79.0 to 0.79.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4620d0f31d"><code>4620d0f</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1638">#1638</a>
from PatrickRice-KSC/revert-project-member-change</li>
<li><a
href="e21596f6d3"><code>e21596f</code></a>
Revert the change to project member accepting ISO time</li>
<li>See full diff in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.79.0...v0.79.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.79.0&new-version=0.79.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-02-01 09:15:23 -03:00
Carlos A Becker
71f3952f18
feat(deps): update go-github from v48 to v50 2023-01-26 23:36:02 -03:00
dependabot[bot]
12d5ed0b0b
feat(deps): bump github.com/disgoorg/disgo from 0.14.1 to 0.15.0 (#3718)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.14.1 to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.0</h2>
<h2>What's Changed</h2>
<ul>
<li>voice support by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/164">disgoorg/disgo#164</a></li>
<li>cache refactor by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/211">disgoorg/disgo#211</a></li>
<li>simple interaction handler by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/222">disgoorg/disgo#222</a></li>
<li>small gateway cleanup by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/213">disgoorg/disgo#213</a></li>
<li>log unknown events &amp; ops on debug by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/228">disgoorg/disgo#228</a></li>
<li>add <code>EventGuildAuditLogEntryCreate</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/232">disgoorg/disgo#232</a></li>
<li>add <code>after</code> param to audit log endpoints by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/227">disgoorg/disgo#227</a></li>
<li>add support for thread member pagination by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/231">disgoorg/disgo#231</a></li>
<li>add support for gif stickers by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/230">disgoorg/disgo#230</a></li>
<li>add <code>MemberFlags</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/233">disgoorg/disgo#233</a></li>
<li>add <code>MessageTypeInteractionPremiumUpsell</code> and
<code>MessageTypeGuildApplicationPremiumSubscription</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a></li>
<li>add <code>ConnectionTypeTikTok</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/210">disgoorg/disgo#210</a></li>
<li>add <code>GuildConnections</code> to <code>RoleTag</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/224">disgoorg/disgo#224</a></li>
<li>add missing <code>SystemChannelFlags</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="2f7b02b6da</a></li>
<li>add <code>IntegrationExpireBehavior</code> type by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="0df3fba6c9</a></li>
</ul>
<h2>Breaking</h2>
<ul>
<li><code>GetAuditLog</code> function signature was changed to include
the <code>after</code> parameter</li>
<li><code>GetThreadMember</code> function signature was changed to
include the <code>withMember</code> parameter</li>
<li><code>Caches.X().Get</code>, <code>Caches.X().Put</code>,
<code>Caches.X().Remove</code>, etc have been replaced with
<code>Caches.X()</code>, <code>Caches.AddX()</code>,
<code>Caches.RemoveX()</code>, etc</li>
<li><code>WithCacheFlags</code> has been renamed to
<code>WithCaches</code></li>
<li><code>Connect</code> and <code>Disconnect</code> has been replaced
with <code>UpdateVoiceState</code></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.14.1...v0.15.0">https://github.com/disgoorg/disgo/compare/v0.14.1...v0.15.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1030fa904b"><code>1030fa9</code></a>
add flags helper (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/235">#235</a>)</li>
<li><a
href="48a0d77805"><code>48a0d77</code></a>
simple command, autocomplete, component &amp; modals handler (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/222">#222</a>)</li>
<li><a
href="6565a1f870"><code>6565a1f</code></a>
change MessageFlags type to int</li>
<li><a
href="48d18102ed"><code>48d1810</code></a>
add MemberFlags (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/233">#233</a>)</li>
<li><a
href="b3f872d7fd"><code>b3f872d</code></a>
add EventGuildAuditLogEntryCreate (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/232">#232</a>)</li>
<li><a
href="81cf08ca89"><code>81cf08c</code></a>
fix unmarshalling of EventUnknown</li>
<li><a
href="05c2c2793a"><code>05c2c27</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/231">#231</a>
from disgoorg/patch/thread-member-pagination</li>
<li><a
href="0ed77b1064"><code>0ed77b1</code></a>
fix method signature &amp; add helper method</li>
<li><a
href="539176413f"><code>5391764</code></a>
fix topi moment</li>
<li><a
href="63c2ad47fd"><code>63c2ad4</code></a>
Update discord/thread_member.go</li>
<li>Additional commits viewable in <a
href="https://github.com/disgoorg/disgo/compare/v0.14.1...v0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-25 10:33:05 -03:00
dependabot[bot]
f979a6347e
feat(deps): bump github.com/xanzy/go-gitlab from 0.78.0 to 0.79.0 (#3717)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.78.0 to 0.79.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="36b86c5b7f"><code>36b86c5</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1632">#1632</a>
from timofurrer/get-pull-mirror</li>
<li><a
href="5d8c3e5c45"><code>5d8c3e5</code></a>
Change model name</li>
<li><a
href="dda6e96e5e"><code>dda6e96</code></a>
Update projects.go</li>
<li><a
href="8ea7323dc6"><code>8ea7323</code></a>
Update projects.go</li>
<li><a
href="5d94d607fe"><code>5d94d60</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1635">#1635</a>
from mycrEEpy/user-login-failed-event</li>
<li><a
href="d2a481edeb"><code>d2a481e</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1634">#1634</a>
from PatrickRice-KSC/align-pages-domain-attributes</li>
<li><a
href="c56397a6c8"><code>c56397a</code></a>
Add missing system hook event for user_failed_login</li>
<li><a
href="7ac72bd6ad"><code>7ac72bd</code></a>
Add the ability to retrieve certificate information to Pages
Domains</li>
<li><a
href="ceca19a225"><code>ceca19a</code></a>
Implement function to get pull mirror details from a project</li>
<li><a
href="cec93a2c94"><code>cec93a2</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1631">#1631</a>
from mrf/mrf/1630-projectmember-struct-expires-date</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.78.0...v0.79.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.78.0&new-version=0.79.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-25 10:32:51 -03:00
dependabot[bot]
54ef103bfc
feat(deps): bump github.com/google/go-containerregistry from 0.12.1 to 0.13.0 (#3716)
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry)
from 0.12.1 to 0.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.0</h2>
<h2>What's Changed</h2>
<ul>
<li>Bump slsa-framework/slsa-github-generator to 1.2.2 by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1489">google/go-containerregistry#1489</a></li>
<li>Features: Allow eliding <code>serviceaccount</code> lookups. by <a
href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1490">google/go-containerregistry#1490</a></li>
<li>Bump golangci/golangci-lint-action from 3.3.0 to 3.3.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1491">google/go-containerregistry#1491</a></li>
<li>add source archive checksum into the checksums.txt by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1492">google/go-containerregistry#1492</a></li>
<li>Fix calculating tarball size when duplicated layers exist by <a
href="https://github.com/tydra-wang"><code>@​tydra-wang</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1495">google/go-containerregistry#1495</a></li>
<li>Add support for zstd compression by <a
href="https://github.com/LFrobeen"><code>@​LFrobeen</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1487">google/go-containerregistry#1487</a></li>
<li>docs: pull latest instead of debug by <a
href="https://github.com/AndrewCharlesHay"><code>@​AndrewCharlesHay</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1497">google/go-containerregistry#1497</a></li>
<li>Make credential warning slightly more accurate by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1499">google/go-containerregistry#1499</a></li>
<li>Make unit tests substantially faster by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1498">google/go-containerregistry#1498</a></li>
<li>Use the default retry predicate in transport by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1502">google/go-containerregistry#1502</a></li>
<li>Revert &quot;docs: pull latest instead of debug (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1497">#1497</a>)&quot;
by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1504">google/go-containerregistry#1504</a></li>
<li>Update Arch Linux install instructions by <a
href="https://github.com/kpcyrd"><code>@​kpcyrd</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1508">google/go-containerregistry#1508</a></li>
<li>Fix various lints by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1507">google/go-containerregistry#1507</a></li>
<li>Fix missing doc comment by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1509">google/go-containerregistry#1509</a></li>
<li>Treat empty registry config as anonymous by <a
href="https://github.com/lcarva"><code>@​lcarva</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1512">google/go-containerregistry#1512</a></li>
<li>Bump goreleaser/goreleaser-action from 3.2.0 to 4.1.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1511">google/go-containerregistry#1511</a></li>
<li>Bump actions/stale from 6 to 7 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1519">google/go-containerregistry#1519</a></li>
<li>Race http fallback ping by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1521">google/go-containerregistry#1521</a></li>
<li>FIX mutate.Time not respecting history by <a
href="https://github.com/miguelvalerio"><code>@​miguelvalerio</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1520">google/go-containerregistry#1520</a></li>
<li>test: use <code>T.TempDir</code> to create temporary test directory
by <a href="https://github.com/Juneezee"><code>@​Juneezee</code></a> in
<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1522">google/go-containerregistry#1522</a></li>
<li>crane: add digest --full by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1524">google/go-containerregistry#1524</a></li>
<li>Hack around DockerHub plugin scope handling by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1527">google/go-containerregistry#1527</a></li>
<li>crane: support --full-ref for crane ls by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1525">google/go-containerregistry#1525</a></li>
<li>Revert plugin scope hack by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1531">google/go-containerregistry#1531</a></li>
<li>clarify crane download readme by <a
href="https://github.com/dtanner"><code>@​dtanner</code></a> in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1533">google/go-containerregistry#1533</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/LFrobeen"><code>@​LFrobeen</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1487">google/go-containerregistry#1487</a></li>
<li><a
href="https://github.com/AndrewCharlesHay"><code>@​AndrewCharlesHay</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1497">google/go-containerregistry#1497</a></li>
<li><a href="https://github.com/kpcyrd"><code>@​kpcyrd</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1508">google/go-containerregistry#1508</a></li>
<li><a
href="https://github.com/miguelvalerio"><code>@​miguelvalerio</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1520">google/go-containerregistry#1520</a></li>
<li><a href="https://github.com/Juneezee"><code>@​Juneezee</code></a>
made their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1522">google/go-containerregistry#1522</a></li>
<li><a href="https://github.com/dtanner"><code>@​dtanner</code></a> made
their first contribution in <a
href="https://github-redirect.dependabot.com/google/go-containerregistry/pull/1533">google/go-containerregistry#1533</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.12.1...v0.13.0">https://github.com/google/go-containerregistry/compare/v0.12.1...v0.13.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="1e09daa93e"><code>1e09daa</code></a>
clarify crane download readme (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1533">#1533</a>)</li>
<li><a
href="8e08d51670"><code>8e08d51</code></a>
Revert &quot;Hack around DockerHub plugin scope handling&quot; (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1531">#1531</a>)</li>
<li><a
href="5ad0a76120"><code>5ad0a76</code></a>
crane: support --full-ref for crane ls (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1525">#1525</a>)</li>
<li><a
href="b063f6aeac"><code>b063f6a</code></a>
Hack around DockerHub plugin scope handling (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1527">#1527</a>)</li>
<li><a
href="e797859b62"><code>e797859</code></a>
crane: add digest --full (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1524">#1524</a>)</li>
<li><a
href="3986cf4645"><code>3986cf4</code></a>
test: use <code>T.TempDir</code> to create temporary test directory (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1522">#1522</a>)</li>
<li><a
href="9db616f1da"><code>9db616f</code></a>
FIX mutate.Time not respecting history (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1520">#1520</a>)</li>
<li><a
href="804866391d"><code>8048663</code></a>
Race http fallback ping (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1521">#1521</a>)</li>
<li><a
href="e64ff3accb"><code>e64ff3a</code></a>
Bump actions/stale from 6 to 7 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1519">#1519</a>)</li>
<li><a
href="9bd82373fd"><code>9bd8237</code></a>
Bump goreleaser/goreleaser-action from 3.2.0 to 4.1.0 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1511">#1511</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.12.1...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.12.1&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-25 09:45:54 -03:00
dependabot[bot]
7375a39591
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.23.0 to 2.24.0 (#3715)
Bumps
[github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from
2.23.0 to 2.24.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.24.0</h2>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>656cf867f939c28734a180911890b0cf9c5d38a9: feat(deps): bump
github.com/goreleaser/chglog from 0.2.2 to 0.3.0 (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/604">#604</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>b547d33731995914394f3aface4bd98fd108c827: feat(deps): bump
github.com/klauspost/compress from 1.15.13 to 1.15.14 (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/599">#599</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>32c13de89c90d7a44b69a7cd3e02b374f527ffc9: feat(deps): bump
github.com/klauspost/compress from 1.15.14 to 1.15.15 (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/605">#605</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>c195d93dfbedde1116c88964d7a054adcf0187f2: feat: expand variables in
platform field (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/601">#601</a>)
(<a
href="https://github.com/afbjorklund"><code>@​afbjorklund</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>daae772558f0c72d5fe270575133f1e6f0f25fa0: fix: do not allow empty
items in deb.provides (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/606">#606</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/nfpm/compare/v2.23.0...v2.24.0">https://github.com/goreleaser/nfpm/compare/v2.23.0...v2.24.0</a></p>
<hr />
<ul>
<li>Check out <a href="https://goreleaser.com">GoReleaser</a>: it
integrates nFPM to the release pipeline of your Go projects.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="daae772558"><code>daae772</code></a>
fix: do not allow empty items in deb.provides (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/606">#606</a>)</li>
<li><a
href="656cf867f9"><code>656cf86</code></a>
feat(deps): bump github.com/goreleaser/chglog from 0.2.2 to 0.3.0 (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/604">#604</a>)</li>
<li><a
href="32c13de89c"><code>32c13de</code></a>
feat(deps): bump github.com/klauspost/compress from 1.15.14 to 1.15.15
(<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/605">#605</a>)</li>
<li><a
href="c816571b14"><code>c816571</code></a>
test: improve test code (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/602">#602</a>)</li>
<li><a
href="c195d93dfb"><code>c195d93</code></a>
feat: expand variables in platform field (<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/601">#601</a>)</li>
<li><a
href="b547d33731"><code>b547d33</code></a>
feat(deps): bump github.com/klauspost/compress from 1.15.13 to 1.15.14
(<a
href="https://github-redirect.dependabot.com/goreleaser/nfpm/issues/599">#599</a>)</li>
<li><a
href="d0f5dde746"><code>d0f5dde</code></a>
docs: update cmd docs</li>
<li><a
href="5b082c88bc"><code>5b082c8</code></a>
docs: udpate</li>
<li><a
href="475f856f83"><code>475f856</code></a>
test: fix wrong path</li>
<li><a
href="11d8f44aa5"><code>11d8f44</code></a>
docs: update cmd docs</li>
<li>See full diff in <a
href="https://github.com/goreleaser/nfpm/compare/v2.23.0...v2.24.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/goreleaser/nfpm/v2&package-manager=go_modules&previous-version=2.23.0&new-version=2.24.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-24 10:00:51 -03:00
dependabot[bot]
571cde5d9e
feat(deps): bump golang.org/x/tools from 0.2.0 to 0.5.0 (#3700)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.2.0
to 0.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.5.0</h2>
<p>A full list of issues closed can be found in the <a
href="https://github.com/golang/go/milestone/138?closed=1">gopls/v0.5.0
milestone</a>.</p>
<h2>Memory usage</h2>
<ul>
<li>Rewrite of caching model, resulting in significant memory usage
improvements (<a
href="https://github.com/heschik"><code>@​heschik</code></a>).</li>
</ul>
<h2>New features</h2>
<ul>
<li>Extract to function: Support for extracting code blocks that contain
return statements (<a
href="https://github.com/joshbaum"><code>@​joshbaum</code></a>).</li>
<li>Workspace symbols: Support for <a
href="https://github.com/junegunn/fzf#search-syntax">fzf-style search
syntax</a> (<a
href="https://github.com/findleyr"><code>@​findleyr</code></a>). The
following syntax is supported:
<ul>
<li><code>'</code> for exact matching</li>
<li><code>^</code> for prefix matching</li>
<li><code>$</code> for suffix matching</li>
</ul>
</li>
</ul>
<p><strong>Note</strong>: This feature does not yet work in VS Code. See
<a
href="https://github-redirect.dependabot.com/golang/vscode-go/issues/647">golang/vscode-go#647</a>
and <a
href="https://github-redirect.dependabot.com/microsoft/vscode/issues/106788">microsoft/vscode#106788</a>.</p>
<ul>
<li>An experimental new code lens to view GC optimization details (<a
href="https://github.com/pjweinb"><code>@​pjweinb</code></a>). Once the
code lens is enabled, you will see a <code>Toggle gc details</code>
annotation at the top of your file. Clicking it will show optimization
diagnostics produced by the Go compiler, and clicking it once again will
hide these diagnostics. Enable the code lens by adding the following to
your settings:
<pre lang="json5"><code>&quot;codelens&quot;: {
	&quot;gc_details&quot;: true
}
</code></pre>
</li>
<li><code>go mod tidy</code> and <code>go mod vendor</code> code lenses
for <code>go.mod</code> files (<a
href="https://github.com/dandua98"><code>@​dandua98</code></a>).</li>
<li>Support for filling in matching in-scope variables instead of just
empty values in fillstruct and fillreturns (<a
href="https://github.com/joshbaum"><code>@​joshbaum</code></a>).</li>
<li>Autocompletion within import statements (<a
href="https://github.com/dandua98"><code>@​dandua98</code></a>).</li>
<li>Autocompletion within package declarations (<a
href="https://github.com/dandua98"><code>@​dandua98</code></a>).</li>
</ul>
<h2>Improvements</h2>
<ul>
<li>Improvements to workspace symbols ranking and fuzzy matching (<a
href="https://github.com/findleyr"><code>@​findleyr</code></a>, <a
href="https://github.com/myitcv"><code>@​myitcv</code></a>).</li>
<li>Better completion suggestions in type switch case clauses and for
calls to <code>append</code>, function literals, and unnamed types (<a
href="https://github.com/muirdm"><code>@​muirdm</code></a>).</li>
</ul>
<h2>Thank you</h2>
<p>Thank you to everyone who contributed to this release!</p>
<p><a href="https://github.com/heschik"><code>@​heschik</code></a>
<a href="https://github.com/findleyr"><code>@​findleyr</code></a>
<a href="https://github.com/pjweinb"><code>@​pjweinb</code></a>
<a href="https://github.com/joshbaum"><code>@​joshbaum</code></a>
<a href="https://github.com/mcjcloud"><code>@​mcjcloud</code></a>
<a href="https://github.com/dandua98"><code>@​dandua98</code></a>
<a href="https://github.com/muirdm"><code>@​muirdm</code></a>
<a href="https://github.com/leitzler"><code>@​leitzler</code></a>
<a href="https://github.com/myitcv"><code>@​myitcv</code></a>
<a href="https://github.com/matloob"><code>@​matloob</code></a>
<a href="https://github.com/tennashi"><code>@​tennashi</code></a>
<a href="https://github.com/ainar-g"><code>@​ainar-g</code></a>
<a href="https://github.com/hasheddan"><code>@​hasheddan</code></a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7db99dd126"><code>7db99dd</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="1e0dff28f4"><code>1e0dff2</code></a>
gopls/internal/regtest: avoid race in
TestSwitchFromGOPATHToModuleMode</li>
<li><a
href="0441b432ca"><code>0441b43</code></a>
gopls/internal/lsp/cache: use specific mutexes for module data</li>
<li><a
href="33071fbe1a"><code>33071fb</code></a>
internal/robustio: move robustio</li>
<li><a
href="b01e7a4e75"><code>b01e7a4</code></a>
gopls/internal/regtest/watch: don't run
TestSwitchFromGOPATHToModuleMode</li>
<li><a
href="e417ea36ba"><code>e417ea3</code></a>
gopls: remove dead analysis code</li>
<li><a
href="1a08d01ac9"><code>1a08d01</code></a>
gopls/internal/lsp: update replace directives in go.mod for package
renaming</li>
<li><a
href="eac36cb2ac"><code>eac36cb</code></a>
gopls/internal/regtest: port experimental workspace tests to
go.work</li>
<li><a
href="224a61b354"><code>224a61b</code></a>
gopls/internal/lsp/source: delete Snapshot.WriteEnv method</li>
<li><a
href="81e741e32f"><code>81e741e</code></a>
gopls/internal/lsp/safetoken: funnel more calls through this
package</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.2.0...v0.5.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.2.0&new-version=0.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-17 08:56:54 -03:00
dependabot[bot]
599ed6527d
feat(deps): bump github.com/google/go-containerregistry from 0.11.0 to 0.12.1 (#3699)
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry)
from 0.11.0 to 0.12.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.12.1</h2>
<h2>Changelog</h2>
<ul>
<li>426de7d4 Bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1475">#1475</a>)</li>
<li>6442b027 Bump goreleaser/goreleaser-action from 3.1.0 to 3.2.0 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1476">#1476</a>)</li>
<li>76ae8192 Fix context.DeadlineExceeded comparison (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1488">#1488</a>)</li>
<li>1711cefd Fix missing body.Close() in bearer auth (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1482">#1482</a>)</li>
<li>02f47e13 bump version of slsa generator (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1468">#1468</a>)</li>
<li>353a1176 crane: add catalog argument use annotation (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1473">#1473</a>)</li>
<li>a0cca8a0 k8schain: Log and proceed if secret or SA are not found (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1472">#1472</a>)</li>
</ul>
<h3>Container Images</h3>
<p><a
href="https://gcr.io/go-containerregistry/crane:v0.12.1">https://gcr.io/go-containerregistry/crane:v0.12.1</a>
<a
href="https://gcr.io/go-containerregistry/gcrane:v0.12.1">https://gcr.io/go-containerregistry/gcrane:v0.12.1</a></p>
<p>For example:</p>
<pre><code>docker pull gcr.io/go-containerregistry/crane:v0.12.1
docker pull gcr.io/go-containerregistry/gcrane:v0.12.1
</code></pre>
<h2>v0.12.0</h2>
<h2>Changelog</h2>
<ul>
<li>9b4fdd50 Bump actions/setup-go from 2 to 3 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1463">#1463</a>)</li>
<li>7268da01 Bump actions/stale from 5 to 6 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1452">#1452</a>)</li>
<li>7196cf3d Bump aws-actions/configure-aws-credentials from 1.6.1 to
1.7.0 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1424">#1424</a>)</li>
<li>8eae069f Bump codecov/codecov-action from 3.1.0 to 3.1.1 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1453">#1453</a>)</li>
<li>969699e7 Bump deps using ./hack/bump-deps.sh (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1467">#1467</a>)</li>
<li>c1f9836a Bump opencontainers/image-spec (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1423">#1423</a>)</li>
<li>49cdb8b4 Correct usage of authn.NewKeychainFromHelper in docs (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1419">#1419</a>)</li>
<li>3ba4c511 Fix tar PAX format handling (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1414">#1414</a>)</li>
<li>24a1c335 Ignore docker config if it's a directory (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1420">#1420</a>)</li>
<li>a0f66878 Make ErrBadName checkable via errors.Is() (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1462">#1462</a>)</li>
<li>19e3eff7 Retry ECONNRESET errors (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1415">#1415</a>)</li>
<li>5749ee68 Support the platform specific authentication of krane in
&quot;auth get&quot; command (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1413">#1413</a>)</li>
<li>e3b94c7e allow remote.DefaultTransport to be overridden by an
http.RoundTripper (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1449">#1449</a>)</li>
<li>f981b4c0 deps: update goreleaser-action for bug (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1444">#1444</a>)</li>
<li>771a9b44 e2e: pull and export stdin and stdout (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1436">#1436</a>)</li>
<li>87b3a796 feat: Add krane to release archive (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1443">#1443</a>)</li>
<li>2859a0d0 feat: generate slsa provenance on github release artifacts
(<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1438">#1438</a>)</li>
<li>9a5c14ad fix crane's root.go after DefaultTransport change (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1450">#1450</a>)</li>
<li>2b54510b fix: consider base image media type when appending layers
(<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1437">#1437</a>)</li>
<li>d3ed4089 registry: implement blob deletion (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1432">#1432</a>)</li>
<li>3413eb6c registry: implement pagination (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1430">#1430</a>)</li>
<li>e2d575cf update crane installation instructions and release
verification (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1440">#1440</a>)</li>
</ul>
<h3>Container Images</h3>
<p><a
href="https://gcr.io/go-containerregistry/crane:v0.12.0">https://gcr.io/go-containerregistry/crane:v0.12.0</a>
<a
href="https://gcr.io/go-containerregistry/gcrane:v0.12.0">https://gcr.io/go-containerregistry/gcrane:v0.12.0</a></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="76ae8192ef"><code>76ae819</code></a>
Fix context.DeadlineExceeded comparison (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1488">#1488</a>)</li>
<li><a
href="353a117661"><code>353a117</code></a>
crane: add catalog argument use annotation (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1473">#1473</a>)</li>
<li><a
href="1711cefd7e"><code>1711cef</code></a>
Fix missing body.Close() in bearer auth (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1482">#1482</a>)</li>
<li><a
href="426de7d42a"><code>426de7d</code></a>
Bump golangci/golangci-lint-action from 3.2.0 to 3.3.0 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1475">#1475</a>)</li>
<li><a
href="6442b027bf"><code>6442b02</code></a>
Bump goreleaser/goreleaser-action from 3.1.0 to 3.2.0 (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1476">#1476</a>)</li>
<li><a
href="a0cca8a048"><code>a0cca8a</code></a>
k8schain: Log and proceed if secret or SA are not found (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1472">#1472</a>)</li>
<li><a
href="02f47e132c"><code>02f47e1</code></a>
bump version of slsa generator (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1468">#1468</a>)</li>
<li><a
href="3413eb6ce4"><code>3413eb6</code></a>
registry: implement pagination (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1430">#1430</a>)</li>
<li><a
href="d3ed40890c"><code>d3ed408</code></a>
registry: implement blob deletion (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1432">#1432</a>)</li>
<li><a
href="969699e7d1"><code>969699e</code></a>
Bump deps using ./hack/bump-deps.sh (<a
href="https://github-redirect.dependabot.com/google/go-containerregistry/issues/1467">#1467</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.11.0...v0.12.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.11.0&new-version=0.12.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-17 08:55:56 -03:00
Carlos Alexandro Becker
2450746e5c
feat: add ko support (#3653)
continuing the PR by @developer-guy 


- [x] should be a publisher, as it does publish the images it builds
every time
- [x] `Default` method does not work
- [x] the `fromConfig` thing should probably be on the defaults, too
- [x] wire `--skip-ko`
- [x] documentation
- [x] more tests
- [x] use same registry as docker tests does
- [ ] see if we can make the log output match goreleaser's
- [ ] ??

closes #2556
closes #3490

Signed-off-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
Co-authored-by: actions-user <actions@github.com>
Co-authored-by: Jason Hall <jason@chainguard.dev>
Co-authored-by: Batuhan Apaydın <batuhan.apaydin@trendyol.com>
2023-01-16 22:34:49 -03:00
dependabot[bot]
793def693d
feat(deps): bump golang.org/x/crypto from 0.3.0 to 0.5.0 (#3695)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.3.0
to 0.5.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3d872d0428"><code>3d872d0</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="bc7d1d1eb5"><code>bc7d1d1</code></a>
bcrypt: reject passwords longer than 72 bytes</li>
<li><a
href="7e3ac2043e"><code>7e3ac20</code></a>
internal/wycheproof: also use Verify in TestECDSA</li>
<li><a
href="23edec0b38"><code>23edec0</code></a>
ssh: ensure that handshakeTransport goroutines have finished before
Close ret...</li>
<li><a
href="f495dc37d5"><code>f495dc3</code></a>
acme: eliminate arbitrary timeouts in tests</li>
<li><a
href="eb2c406296"><code>eb2c406</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="2c476679df"><code>2c47667</code></a>
cryptobyte: add support for ReadASN1Integer into []byte</li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.3.0...v0.5.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.3.0&new-version=0.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-12 08:59:07 -03:00
dependabot[bot]
3fd95e1737
feat(deps): bump gocloud.dev from 0.27.0 to 0.28.0 (#3689)
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.27.0 to
0.28.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-cloud/releases">gocloud.dev's
releases</a>.</em></p>
<blockquote>
<h2>v0.28.0</h2>
<p><strong>BREAKING CHANGES</strong>:</p>
<ul>
<li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure
SDK.</li>
<li><strong>blob/azureblob</strong>: Updated to match recent breaking
changes in the Azure packages (yes, again).</li>
<li><strong>pubsub/awssnssqs</strong>: Fixed <code>BeforeSend</code> to
take a pointer to the <code>SendMessageBatchRequestEntry</code> struct,
so that it can be modified.</li>
</ul>
<p><strong>blob</strong></p>
<ul>
<li><strong>memblob</strong>: Fixed bug where use of
<code>BeforeCopy</code> callback would drop the actual copying.</li>
<li><strong>azureblob</strong>: Updated to match recent breaking changes
in the Azure packages.</li>
</ul>
<p><strong>pubsub</strong></p>
<ul>
<li><strong>all</strong>: Simplified and improved batch sizing, should
resolve issues with too-frequent polling in some situations.</li>
<li><strong>azurepubsub</strong>: Made <code>ListenerTimeout</code>
configurable.</li>
<li><strong>gcppubsub</strong> and <strong>awssnssqs</strong>: Support
lazy mode for <code>Nack</code> (where no explicit <code>Nack</code> is
sent).</li>
<li><strong>awssnssqs</strong>: Fixed <code>BeforeSend</code> to take a
pointer to the <code>SendMessageBatchRequestEntry</code> struct, so that
it can be modified.</li>
</ul>
<p><strong>secrets</strong></p>
<ul>
<li><strong>secrets/azurekeyvault</strong>: Updated to latest Azure SDK.
Use azidentity.NewDefaultAzureCredential.</li>
</ul>
<p><strong>sql</strong></p>
<ul>
<li><strong>gcp/cloudsql</strong>: Fixed IAM login.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2416609049"><code>2416609</code></a>
all: prep for v0.28.0 (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3207">#3207</a>)</li>
<li><a
href="13f46eb806"><code>13f46eb</code></a>
pubsub: simplify and improve batch sizing, especially for low message
rates</li>
<li><a
href="8f2c2b9a39"><code>8f2c2b9</code></a>
pubsub/memsub: Add Options for batching (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3205">#3205</a>)</li>
<li><a
href="fe0a3d75fe"><code>fe0a3d7</code></a>
pubsub/awssqs: Fix BeforeSend/As to enable changes to the sqs input
message (...</li>
<li><a
href="dfaf95af34"><code>dfaf95a</code></a>
secrets/azurekeyvault: Use azidentity.NewDefaultAzureCredential to
support ot...</li>
<li><a
href="1e26311532"><code>1e26311</code></a>
blob: Remove some debug logging (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3197">#3197</a>)</li>
<li><a
href="43ed5a4998"><code>43ed5a4</code></a>
pubsub/gcppubsub: Support lazy mode for Nacks (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3195">#3195</a>)</li>
<li><a
href="be80e70b3d"><code>be80e70</code></a>
pubsub/awssnssqs: Support lazy mode for Nacks (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3194">#3194</a>)</li>
<li><a
href="7d690993a5"><code>7d69099</code></a>
blob/azblob: Update to latest, and restore As for dirlist (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3191">#3191</a>)</li>
<li><a
href="e942f3c339"><code>e942f3c</code></a>
blob/azblob: Restore As for List entry (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3188">#3188</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-cloud/compare/v0.27.0...v0.28.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.27.0&new-version=0.28.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 09:09:51 -03:00
dependabot[bot]
da1dca2f91
feat(deps): bump golang.org/x/oauth2 from 0.3.0 to 0.4.0 (#3693)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.3.0
to 0.4.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="34ffb07a99"><code>34ffb07</code></a>
go.mod: update golang.org/x dependencies</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.3.0...v0.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.3.0&new-version=0.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-11 09:03:51 -03:00
dependabot[bot]
0fe8b8dc21
feat(deps): bump github.com/xanzy/go-gitlab from 0.77.0 to 0.78.0 (#3690)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.77.0 to 0.78.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ce77452fb9"><code>ce77452</code></a>
Tweaked the ordering a little</li>
<li><a
href="dcaa030fdb"><code>dcaa030</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1620">#1620</a>
from Alexand/feat/add-enterprise-to-metadata</li>
<li><a
href="c856bb4ab9"><code>c856bb4</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1615">#1615</a>
from cyd01/master</li>
<li><a
href="06174d15a6"><code>06174d1</code></a>
Merge branch 'xanzy:master' into master</li>
<li><a
href="24f4ce1139"><code>24f4ce1</code></a>
Reorder strurt properties to match the docs</li>
<li><a
href="5681370e4b"><code>5681370</code></a>
Add enterprise attribute to metadata endpoint</li>
<li><a
href="3e2faf7564"><code>3e2faf7</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1618">#1618</a>
from linkdotnet/fix/<a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1578">#1578</a></li>
<li><a
href="1c9b5e4284"><code>1c9b5e4</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1616">#1616</a>
from robbydyer/pl_event_failure_reason</li>
<li><a
href="baf8093b63"><code>baf8093</code></a>
fix: Tags in Package as complex object</li>
<li><a
href="57255c811d"><code>57255c8</code></a>
Ordering, newlines</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.77.0...v0.78.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.77.0&new-version=0.78.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-10 08:55:31 -03:00
dependabot[bot]
31f8811302
feat(deps): bump golang.org/x/text from 0.5.0 to 0.6.0 (#3681)
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.5.0 to
0.6.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ec5565b1b7"><code>ec5565b</code></a>
README.md: update documentation of module versioning</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.5.0...v0.6.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.5.0&new-version=0.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-01-07 17:20:26 -03:00