1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-04 03:11:55 +02:00
Commit Graph

581 Commits

Author SHA1 Message Date
dependabot[bot]
5bdb3a8078
chore(deps): bump github.com/xanzy/go-gitlab from 0.95.2 to 0.96.0 (#4554)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.95.2 to 0.96.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="63caa488c1"><code>63caa48</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1866">#1866</a>
from cenkalti/notes</li>
<li><a
href="42426a3f2b"><code>42426a3</code></a>
Try to follow order in the docs</li>
<li><a
href="4bbd9e29e1"><code>4bbd9e2</code></a>
add missing fields in Note struct</li>
<li><a
href="57c03d9cba"><code>57c03d9</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1863">#1863</a>
from TheCodear/feat/update-project-variables</li>
<li><a
href="28f5cd4ed8"><code>28f5cd4</code></a>
Fix test after reodering</li>
<li><a
href="c3f82c2c7a"><code>c3f82c2</code></a>
format source code</li>
<li><a
href="80a3897b5a"><code>80a3897</code></a>
update project variables client with description field</li>
<li><a
href="4e7fdb74c0"><code>4e7fdb7</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1864">#1864</a>
from xuxiaowei-com-cn/project_level_variables/descri...</li>
<li><a
href="8e7e14bedd"><code>8e7e14b</code></a>
Update ordering</li>
<li><a
href="1256139f16"><code>1256139</code></a>
 Project-level CI/CD variables API: add description</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.95.2...v0.96.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.95.2&new-version=0.96.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-18 13:29:32 -03:00
dependabot[bot]
c1a21fdfc4
chore(deps): bump github.com/aws/aws-sdk-go from 1.49.21 to 1.49.22 (#4547)
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go)
from 1.49.21 to 1.49.22.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/aws/aws-sdk-go/releases">github.com/aws/aws-sdk-go's
releases</a>.</em></p>
<blockquote>
<h1>Release v1.49.22 (2024-01-16)</h1>
<h3>Service Client Updates</h3>
<ul>
<li><code>service/iot</code>: Updates service API
<ul>
<li>Revert release of LogTargetTypes</li>
</ul>
</li>
<li><code>service/iotfleetwise</code>: Updates service API and
documentation</li>
<li><code>service/macie2</code>: Updates service API and
documentation</li>
<li><code>service/payment-cryptography</code>: Updates service API and
documentation</li>
<li><code>service/personalize</code>: Updates service documentation</li>
<li><code>service/personalize-runtime</code>: Updates service
documentation</li>
<li><code>service/rekognition</code>: Updates service API and
documentation
<ul>
<li>This release adds ContentType and TaxonomyLevel attributes to
DetectModerationLabels and GetMediaAnalysisJob API responses.</li>
</ul>
</li>
<li><code>service/securityhub</code>: Updates service documentation</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d9a3e6a5dd"><code>d9a3e6a</code></a>
Release v1.49.22 (2024-01-16) (<a
href="https://redirect.github.com/aws/aws-sdk-go/issues/5143">#5143</a>)</li>
<li>See full diff in <a
href="https://github.com/aws/aws-sdk-go/compare/v1.49.21...v1.49.22">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/aws/aws-sdk-go&package-manager=go_modules&previous-version=1.49.21&new-version=1.49.22)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-17 08:47:48 -03:00
dependabot[bot]
738418d490 chore(deps): bump github.com/aws/aws-sdk-go from 1.49.19 to 1.49.21
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.49.19 to 1.49.21.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.49.19...v1.49.21)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-15 08:50:16 -03:00
dependabot[bot]
73ad0d1068 chore(deps): bump golang.org/x/tools from 0.16.1 to 0.17.0
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.16.1 to 0.17.0.
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](https://github.com/golang/tools/compare/v0.16.1...v0.17.0)

---
updated-dependencies:
- dependency-name: golang.org/x/tools
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-12 09:23:41 -03:00
dependabot[bot]
72b8163776 chore(deps): bump github.com/aws/aws-sdk-go from 1.49.18 to 1.49.19
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.49.18 to 1.49.19.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.49.18...v1.49.19)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-12 09:20:05 -03:00
dependabot[bot]
5c0c82afa2 feat(deps): bump github.com/aws/aws-sdk-go from 1.49.17 to 1.49.18
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.49.17 to 1.49.18.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.49.17...v1.49.18)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-11 15:02:03 -03:00
dependabot[bot]
2de878e418 feat(deps): bump github.com/aws/aws-sdk-go from 1.49.0 to 1.49.17
Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.49.0 to 1.49.17.
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Commits](https://github.com/aws/aws-sdk-go/compare/v1.49.0...v1.49.17)

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-01-10 08:38:23 -03:00
Carlos Alexandro Becker
4af022b98a chore: go mod tidy
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2024-01-09 09:13:08 -03:00
dependabot[bot]
835ee39ff4
feat(deps): bump golang.org/x/oauth2 from 0.15.0 to 0.16.0 (#4528) 2024-01-09 11:41:23 +00:00
dependabot[bot]
f0bf2d756e
feat(deps): bump github.com/cloudflare/circl from 1.3.5 to 1.3.7 (#4525) 2024-01-09 11:32:59 +00:00
dependabot[bot]
bbb6b5ce00
fix(deps): bump gocloud.dev from 0.35.0 to 0.36.0 (#4506)
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.35.0 to
0.36.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-cloud/releases">gocloud.dev's
releases</a>.</em></p>
<blockquote>
<h2>v0.36.0</h2>
<p><strong>blob</strong></p>
<ul>
<li><strong>all</strong>: Allow disabling of <code>ContentType</code>
auto-detection during writes.</li>
</ul>
<p><strong>pubsub</strong></p>
<ul>
<li><strong>azuresb</strong>: Added a new auth method to support Service
principal/kubelet identity/Workload identity auth methods.</li>
</ul>
<p><strong>docstore</strong></p>
<ul>
<li><strong>all</strong>: Add in/not-in operators for Query.</li>
<li><strong>gcpfirestore</strong>: Added a missing resource header when
running query.</li>
</ul>
<p><strong>mysql</strong></p>
<ul>
<li>Pass TLS config directly to MySQL's config</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="01064b751a"><code>01064b7</code></a>
all: prerelease</li>
<li><a
href="92114ef433"><code>92114ef</code></a>
mysql: pass TLS config directly to MySQL's config (<a
href="https://redirect.github.com/google/go-cloud/issues/3348">#3348</a>)</li>
<li><a
href="97fe9d0425"><code>97fe9d0</code></a>
docstore/all: Add in/not-in operators for Query</li>
<li><a
href="4fe95eea2d"><code>4fe95ee</code></a>
blob/all: Allow disabling of ContentType auto-detection during writes
(<a
href="https://redirect.github.com/google/go-cloud/issues/3371">#3371</a>)</li>
<li><a
href="1dbbbb3e64"><code>1dbbbb3</code></a>
pubsub/azuresb: minor comments and fixes (<a
href="https://redirect.github.com/google/go-cloud/issues/3370">#3370</a>)</li>
<li><a
href="2090984208"><code>2090984</code></a>
all: update golang.org/x/crypto (<a
href="https://redirect.github.com/google/go-cloud/issues/3369">#3369</a>)</li>
<li><a
href="ddc7b99101"><code>ddc7b99</code></a>
pubsub/azuresb: new auth method to support Service principal/kubelet
identit...</li>
<li><a
href="c770de8217"><code>c770de8</code></a>
docstore/gcpfirestore: Add missing resource header when running
query</li>
<li><a
href="e86400ea40"><code>e86400e</code></a>
pubsub/awssnssqs: Remove hack for broken AWS error codes now that
they've fix...</li>
<li><a
href="8c8f558aff"><code>8c8f558</code></a>
all: postrelease (<a
href="https://redirect.github.com/google/go-cloud/issues/3351">#3351</a>)</li>
<li>See full diff in <a
href="https://github.com/google/go-cloud/compare/v0.35.0...v0.36.0">compare
view</a></li>
</ul>
</details>
<br />

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| gocloud.dev | [>= 0.25.a, < 0.26] |
</details>


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.35.0&new-version=0.36.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-06 12:49:45 -03:00
dependabot[bot]
dcdd6234fa
fix(deps): bump golang.org/x/sync from 0.5.0 to 0.6.0 (#4518)
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.5.0 to
0.6.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="59c1ca1e46"><code>59c1ca1</code></a>
errgroup: add reference to sync.WaitGroup</li>
<li>See full diff in <a
href="https://github.com/golang/sync/compare/v0.5.0...v0.6.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/sync&package-manager=go_modules&previous-version=0.5.0&new-version=0.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-06 12:35:37 -03:00
dependabot[bot]
45d2152f61
fix(deps): bump code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1 (#4512)
Bumps code.gitea.io/sdk/gitea from 0.17.0 to 0.17.1.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.17.0&new-version=0.17.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-06 09:10:04 -03:00
dependabot[bot]
2a452665fb
fix(deps): bump github.com/goreleaser/nfpm/v2 from 2.35.1 to 2.35.2 (#4519)
Bumps
[github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from
2.35.1 to 2.35.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.35.2</h2>
<h2>Changelog</h2>
<h3>Security updates</h3>
<ul>
<li>440588e9d22bbb413014921baea0b81be3048769: sec(deps): bump
github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/759">#759</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>beb0f7314e098689ee29cd957134107ad535f85e: fix: properly handle files
owned by fs (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/760">#760</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Build process updates</h3>
<ul>
<li>e15b21b0fba2f098ac7292a89126079ecf3e58fc: build: add packagers shell
to flake.nix (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>19f03e44c39065d55675c04c794c1668801e1f06: build: fix flake (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>a117582d8c23e97635bf55502f9a7eef8c3e35ba: build: use nix flake (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/761">#761</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Other work</h3>
<ul>
<li>37b28fd4a368a94e4e285bdabbd3c1641f28cff4: ci: release for ppc64le
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>2b60d2191cef2110a15f62095eb7a909c78f7970: docs: update cmd docs (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>c6f2eb7008f081ef5e1e448083dfbaeacd604c77: docs: validate jsonschema
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/nfpm/compare/v2.35.1...v2.35.2">https://github.com/goreleaser/nfpm/compare/v2.35.1...v2.35.2</a></p>
<h2>Helping out</h2>
<p>This release is only possible thanks to <strong>all</strong> the
support of <strong>awesome people</strong>!</p>
<p>Want to be one of them?
You can <a href="https://goreleaser.com/sponsors/">sponsor</a> or <a
href="https://goreleaser.com/contributing">contribute with code</a>.</p>
<h2>Where to go next?</h2>
<ul>
<li>nFPM is a satellite project from GoReleaser. <a
href="https://goreleaser.com">Check it out</a>!</li>
<li>Find examples and commented usage of all options in our <a
href="https://nfpm.goreleaser.com/">website</a>.</li>
<li>Reach out on <a href="https://discord.gg/RGEBtg8vQ6">Discord</a> and
<a href="https://twitter.com/goreleaser">Twitter</a>!</li>
</ul>
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="19f03e44c3"><code>19f03e4</code></a>
build: fix flake</li>
<li><a
href="beb0f7314e"><code>beb0f73</code></a>
fix: properly handle files owned by fs (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/760">#760</a>)</li>
<li><a
href="37b28fd4a3"><code>37b28fd</code></a>
ci: release for ppc64le</li>
<li><a
href="fcd64f5959"><code>fcd64f5</code></a>
chore(deps): bump anchore/sbom-action from 0.15.1 to 0.15.2 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/762">#762</a>)</li>
<li><a
href="e15b21b0fb"><code>e15b21b</code></a>
build: add packagers shell to flake.nix</li>
<li><a
href="b744dfbd5b"><code>b744dfb</code></a>
chore: add .editorconfig</li>
<li><a
href="c6f2eb7008"><code>c6f2eb7</code></a>
docs: validate jsonschema</li>
<li><a
href="a117582d8c"><code>a117582</code></a>
build: use nix flake (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/761">#761</a>)</li>
<li><a
href="440588e9d2"><code>440588e</code></a>
sec(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/759">#759</a>)</li>
<li><a
href="2b60d2191c"><code>2b60d21</code></a>
docs: update cmd docs</li>
<li>See full diff in <a
href="https://github.com/goreleaser/nfpm/compare/v2.35.1...v2.35.2">compare
view</a></li>
</ul>
</details>
<br />

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| github.com/goreleaser/nfpm/v2 | [>= 2.24.a, < 2.25] |
</details>


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/goreleaser/nfpm/v2&package-manager=go_modules&previous-version=2.35.1&new-version=2.35.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-01-05 09:43:35 -03:00
Carlos Alexandro Becker
2ab840b675
fix: remove disgo dependency (#4521)
closes #4520

it was easy enough to remove it :)
2024-01-05 09:34:56 -03:00
dependabot[bot]
e91a0f513e
sec(deps): bump github.com/go-git/go-git/v5 from 5.7.0 to 5.11.0 (#4505)
Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git)
from 5.7.0 to 5.11.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's
releases</a>.</em></p>
<blockquote>
<h2>v5.11.0</h2>
<h2>What's Changed</h2>
<ul>
<li>git: validate reference names (<a
href="https://redirect.github.com/go-git/go-git/issues/929">#929</a>) by
<a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/950">go-git/go-git#950</a></li>
<li>git: stop iterating at oldest shallow when pulling. Fixes <a
href="https://redirect.github.com/go-git/go-git/issues/305">#305</a> by
<a href="https://github.com/dhoizner"><code>@​dhoizner</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li>
<li>plumbing: object, enable renames in getFileStatsFromFilePatches by
<a href="https://github.com/djmoch"><code>@​djmoch</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li>
<li>storage: filesystem, Add option to set a specific FS for alternates
by <a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/953">go-git/go-git#953</a></li>
<li>Align worktree validation with upstream and remove build warnings by
<a href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/958">go-git/go-git#958</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/dhoizner"><code>@​dhoizner</code></a>
made their first contribution in <a
href="https://redirect.github.com/go-git/go-git/pull/939">go-git/go-git#939</a></li>
<li><a href="https://github.com/djmoch"><code>@​djmoch</code></a> made
their first contribution in <a
href="https://redirect.github.com/go-git/go-git/pull/941">go-git/go-git#941</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0">https://github.com/go-git/go-git/compare/v5.10.1...v5.11.0</a></p>
<h2>v5.10.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Worktree, ignore ModeSocket files by <a
href="https://github.com/steiler"><code>@​steiler</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li>
<li>git: add tracer package by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/916">go-git/go-git#916</a></li>
<li>remote: Flip clause for fast-forward only check by <a
href="https://github.com/adityasaky"><code>@​adityasaky</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/875">go-git/go-git#875</a></li>
<li>plumbing: transport/ssh, Fix nil pointer dereference caused when an
unreachable proxy server is set. Fixes <a
href="https://redirect.github.com/go-git/go-git/issues/900">#900</a> by
<a href="https://github.com/anandf"><code>@​anandf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li>
<li>plumbing: uppload-server-info, implement upload-server-info by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/896">go-git/go-git#896</a></li>
<li>plumbing: optimise memory consumption for filesystem storage by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/799">go-git/go-git#799</a></li>
<li>plumbing: format/packfile, Refactor patch delta by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/908">go-git/go-git#908</a></li>
<li>plumbing: fix empty uploadpack request error by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/932">go-git/go-git#932</a></li>
<li>plumbing: transport/git, Improve tests error message by <a
href="https://github.com/pjbgf"><code>@​pjbgf</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/752">go-git/go-git#752</a></li>
<li>plumbing: format/pktline, Respect pktline error-line errors by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/936">go-git/go-git#936</a></li>
<li>utils: remove ioutil.Pipe and use std library io.Pipe by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/922">go-git/go-git#922</a></li>
<li>utils: move trace to utils by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/931">go-git/go-git#931</a></li>
<li>cli: separate go module for cli by <a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>
in <a
href="https://redirect.github.com/go-git/go-git/pull/914">go-git/go-git#914</a></li>
<li>build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/887">go-git/go-git#887</a></li>
<li>build: bump actions/setup-go from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/891">go-git/go-git#891</a></li>
<li>build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/888">go-git/go-git#888</a></li>
<li>build: bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/890">go-git/go-git#890</a></li>
<li>build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/907">go-git/go-git#907</a></li>
<li>build: bump golang.org/x/text from 0.13.0 to 0.14.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/906">go-git/go-git#906</a></li>
<li>build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/917">go-git/go-git#917</a></li>
<li>build: bump golang.org/x/net from 0.17.0 to 0.18.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/918">go-git/go-git#918</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/anandf"><code>@​anandf</code></a> made
their first contribution in <a
href="https://redirect.github.com/go-git/go-git/pull/901">go-git/go-git#901</a></li>
<li><a href="https://github.com/steiler"><code>@​steiler</code></a> made
their first contribution in <a
href="https://redirect.github.com/go-git/go-git/pull/930">go-git/go-git#930</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1">https://github.com/go-git/go-git/compare/v5.10.0...v5.10.1</a></p>
<h2>v5.10.0</h2>
<h2>What's Changed</h2>
<ul>
<li>PlainInitOptions.Bare and allow using InitOptions with
PlainInitWithOptions by <a
href="https://github.com/ThinkChaos"><code>@​ThinkChaos</code></a> in <a
href="https://redirect.github.com/go-git/go-git/pull/782">go-git/go-git#782</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5d08d3bd94"><code>5d08d3b</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/958">#958</a>
from pjbgf/workval</li>
<li><a
href="5bd1d8f4ab"><code>5bd1d8f</code></a>
build: Ensure checkout is the first operation</li>
<li><a
href="b2c1982477"><code>b2c1982</code></a>
git: worktree, Align validation with upstream rules</li>
<li><a
href="cec7da63ca"><code>cec7da6</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/953">#953</a>
from pjbgf/alternates</li>
<li><a
href="8b47ceb1aa"><code>8b47ceb</code></a>
storage: filesystem, Add option to set a specific FS for alternates</li>
<li><a
href="4f61489104"><code>4f61489</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/941">#941</a>
from djmoch/filestats-rename</li>
<li><a
href="ae552ce0bf"><code>ae552ce</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/939">#939</a>
from dhoizner/fix-pull-after-shallow</li>
<li><a
href="cc1895b905"><code>cc1895b</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/950">#950</a>
from aymanbagabas/validate-ref</li>
<li><a
href="de1d5a5978"><code>de1d5a5</code></a>
git: validate reference names</li>
<li><a
href="d87110b492"><code>d87110b</code></a>
Merge pull request <a
href="https://redirect.github.com/go-git/go-git/issues/948">#948</a>
from go-git/dependabot/go_modules/cli/go-git/github.c...</li>
<li>Additional commits viewable in <a
href="https://github.com/go-git/go-git/compare/v5.7.0...v5.11.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/go-git/go-git/v5&package-manager=go_modules&previous-version=5.7.0&new-version=5.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-28 09:46:28 -03:00
Carlos Alexandro Becker
6e9ed0561e
feat(deps): update nfpm to latest
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-12-26 08:52:35 -03:00
dependabot[bot]
782dd54b1f
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.34.0 to 2.35.0 (#4492)
Bumps
[github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from
2.34.0 to 2.35.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.35.0</h2>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>9c4fc0e886dabcd359967cdeca9107973e93c4b9: feat: reproducible
packages (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/748">#748</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>3485ec3edaba34f90ab57c287ac71eaabfc816be: fix(deb): blank line in
package description (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/742">#742</a>)
(<a href="https://github.com/abemedia"><code>@​abemedia</code></a>)</li>
<li>60cff806c953650d9bda31fda43452003552784b: fix: Ensure reproducable
Deb package (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/747">#747</a>)
(<a href="https://github.com/keliramu"><code>@​keliramu</code></a>)</li>
<li>2c8f9e0d70ccc37e2eb6433daccc3ca2f67841a1: fix: config merge (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>216b17ffff80a5faad835fc53cbe461322d4bf6a: fix: example should not
have prefixed version (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>cdd9a621e98bb5e1b41798b74b720a3273e743ab: fix: use parent
owner/group on typedir (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/754">#754</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Dependency updates</h3>
<ul>
<li>a8707cd42874f46a192ec2ef9918d3a75631afb6: feat(deps): bump
github.com/klauspost/compress from 1.17.2 to 1.17.3 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/737">#737</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>6f2eb59cd263e4a8516ca6addb40e4a5d87b1084: feat(deps): bump
github.com/klauspost/compress from 1.17.3 to 1.17.4 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/745">#745</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>6c241370ccdd5718730556f2b8c13e4733d0fda7: feat(deps): bump
github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/732">#732</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>d56350e61f34f7a596d2383b365da633798aed97: feat(deps): bump
golang.org/x/crypto from 0.14.0 to 0.17.0 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/756">#756</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
</ul>
<h3>Build process updates</h3>
<ul>
<li>560c42ca3c87a2938e3b9cc841ec6cde05c8984b: build: added shell.nix (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/743">#743</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>29c85136454eabe774558c1b67e3ecf025269f55: build: setup nur and
winget (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Other work</h3>
<ul>
<li>c4f2da3568bdd0d2882a02a29b60101f944e0f33: docs: correct GOARCH docs
(<a
href="https://redirect.github.com/goreleaser/nfpm/issues/733">#733</a>)
(<a
href="https://github.com/cognifloyd"><code>@​cognifloyd</code></a>)</li>
<li>aaaa3fbb8625a9fe03ba2cb5e2c0f050d2393e6b: docs: fix systemd note (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>f0941db79b18d292a921e0ea778fcf5d1c282e0e: docs: update cmd docs (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>7439013fb5dc9357e84aabb36823a21c1b97e8ba: docs: update cmd docs (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/nfpm/compare/v2.34.0...v2.35.0">https://github.com/goreleaser/nfpm/compare/v2.34.0...v2.35.0</a></p>
<h2>Helping out</h2>
<p>This release is only possible thanks to <strong>all</strong> the
support of <strong>awesome people</strong>!</p>
<p>Want to be one of them?
You can <a href="https://goreleaser.com/sponsors/">sponsor</a> or <a
href="https://goreleaser.com/contributing">contribute with code</a>.</p>
<h2>Where to go next?</h2>
<ul>
<li>nFPM is a satellite project from GoReleaser. <a
href="https://goreleaser.com">Check it out</a>!</li>
<li>Find examples and commented usage of all options in our <a
href="https://nfpm.goreleaser.com/">website</a>.</li>
<li>Reach out on <a href="https://discord.gg/RGEBtg8vQ6">Discord</a> and
<a href="https://twitter.com/goreleaser">Twitter</a>!</li>
</ul>
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="29c8513645"><code>29c8513</code></a>
build: setup nur and winget</li>
<li><a
href="cdd9a621e9"><code>cdd9a62</code></a>
fix: use parent owner/group on typedir (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/754">#754</a>)</li>
<li><a
href="d56350e61f"><code>d56350e</code></a>
feat(deps): bump golang.org/x/crypto from 0.14.0 to 0.17.0 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/756">#756</a>)</li>
<li><a
href="99bf0d0cf9"><code>99bf0d0</code></a>
test: testifylint fixes (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/753">#753</a>)</li>
<li><a
href="8c91e5ebef"><code>8c91e5e</code></a>
chore(deps): bump github/codeql-action from 2 to 3 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/752">#752</a>)</li>
<li><a
href="e43aa7f7d1"><code>e43aa7f</code></a>
chore(deps): bump sigstore/cosign-installer from 3.2.0 to 3.3.0 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/751">#751</a>)</li>
<li><a
href="2c8f9e0d70"><code>2c8f9e0</code></a>
fix: config merge</li>
<li><a
href="7439013fb5"><code>7439013</code></a>
docs: update cmd docs</li>
<li><a
href="9c4fc0e886"><code>9c4fc0e</code></a>
feat: reproducible packages (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/748">#748</a>)</li>
<li><a
href="c3142513c9"><code>c314251</code></a>
chore(deps): bump actions/setup-go from 4 to 5 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/749">#749</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/goreleaser/nfpm/compare/v2.34.0...v2.35.0">compare
view</a></li>
</ul>
</details>
<br />

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| github.com/goreleaser/nfpm/v2 | [>= 2.24.a, < 2.25] |
</details>


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/goreleaser/nfpm/v2&package-manager=go_modules&previous-version=2.34.0&new-version=2.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-21 09:16:43 -03:00
dependabot[bot]
3bae110184
feat(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 (#4485) 2023-12-19 23:27:05 -03:00
dependabot[bot]
e39548dde7
feat(deps): bump github.com/google/uuid from 1.4.0 to 1.5.0 (#4476)
Bumps [github.com/google/uuid](https://github.com/google/uuid) from
1.4.0 to 1.5.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/uuid/releases">github.com/google/uuid's
releases</a>.</em></p>
<blockquote>
<h2>v1.5.0</h2>
<h2><a
href="https://github.com/google/uuid/compare/v1.4.0...v1.5.0">1.5.0</a>
(2023-12-12)</h2>
<h3>Features</h3>
<ul>
<li>Validate UUID without creating new UUID (<a
href="https://redirect.github.com/google/uuid/issues/141">#141</a>) (<a
href="9ee7366e66">9ee7366</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/google/uuid/blob/master/CHANGELOG.md">github.com/google/uuid's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/google/uuid/compare/v1.4.0...v1.5.0">1.5.0</a>
(2023-12-12)</h2>
<h3>Features</h3>
<ul>
<li>Validate UUID without creating new UUID (<a
href="https://redirect.github.com/google/uuid/issues/141">#141</a>) (<a
href="9ee7366e66">9ee7366</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4d47f8eb06"><code>4d47f8e</code></a>
chore(master): release 1.5.0 (<a
href="https://redirect.github.com/google/uuid/issues/145">#145</a>)</li>
<li><a
href="9ee7366e66"><code>9ee7366</code></a>
feat: Validate UUID without creating new UUID (<a
href="https://redirect.github.com/google/uuid/issues/141">#141</a>)</li>
<li><a
href="b35aa6a595"><code>b35aa6a</code></a>
add uuid version 6 and 7 (<a
href="https://redirect.github.com/google/uuid/issues/139">#139</a>)</li>
<li>See full diff in <a
href="https://github.com/google/uuid/compare/v1.4.0...v1.5.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/uuid&package-manager=go_modules&previous-version=1.4.0&new-version=1.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 15:11:53 -03:00
dependabot[bot]
7b5a85839a
feat(deps): bump golang.org/x/tools from 0.16.0 to 0.16.1 (#4478)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.16.0
to 0.16.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2acb2e697b"><code>2acb2e6</code></a>
gopls/internal/test/marker: minor clean up of marker test doc</li>
<li><a
href="28b92af286"><code>28b92af</code></a>
internal/typeparams: eliminate remainining compatibility shims</li>
<li><a
href="ee35f8ea92"><code>ee35f8e</code></a>
gopls/internal/lsp/source: hovering over broken packages is not an
error</li>
<li><a
href="67611a11a1"><code>67611a1</code></a>
internal/typeparams: eliminate type aliases</li>
<li><a
href="23c86e8ed6"><code>23c86e8</code></a>
internal/typeparams: delete const Enabled=true and simplify</li>
<li><a
href="e46688f413"><code>e46688f</code></a>
gopls/internal/analysis/fillstruct: don't panic with invalid fields</li>
<li><a
href="8bd7553f7c"><code>8bd7553</code></a>
gopls/internal/util/goversion: warn about EOL for Go 1.18</li>
<li><a
href="bc9cd159c5"><code>bc9cd15</code></a>
gopls/internal/settings: remove MemoryMode option</li>
<li><a
href="bbc30f1f81"><code>bbc30f1</code></a>
gopls/protocol: Allow AnnotatedTextEdits</li>
<li><a
href="f40889dc8b"><code>f40889d</code></a>
gopls/internal/analysis/stubmethods: fix OOB panic in fromValueSpec</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.16.0...v0.16.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.16.0&new-version=0.16.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 15:11:38 -03:00
dependabot[bot]
a096097646
feat(deps): bump github.com/xanzy/go-gitlab from 0.95.1 to 0.95.2 (#4477)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.95.1 to 0.95.2.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e69c57e317"><code>e69c57e</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1854">#1854</a>
from HebertCL/chore/fix_settings_update_typo</li>
<li><a
href="873225b89b"><code>873225b</code></a>
Small typo fix</li>
<li>See full diff in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.95.1...v0.95.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.95.1&new-version=0.95.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-13 08:59:22 -03:00
dependabot[bot]
52de4ac124
feat(deps): bump gocloud.dev from 0.34.0 to 0.35.0 (#4467)
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.34.0 to
0.35.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-cloud/releases">gocloud.dev's
releases</a>.</em></p>
<blockquote>
<h2>v0.35.0</h2>
<p><strong>BREAKING CHANGES</strong></p>
<p>This release updates the dependency on AWS/S3, which included some
breaking changes; see <a
href="https://redirect.github.com/google/go-cloud/pull/3342">google/go-cloud#3342</a>
for details.</p>
<p><strong>blob</strong></p>
<ul>
<li><em>gcsblob</em>: Fix unauthenticated requests.</li>
</ul>
<p><strong>runtimevar</strong></p>
<ul>
<li><em>constantvar</em>: Add support for reading the constant variable
value from the environment.</li>
</ul>
<p><strong>docstore</strong></p>
<ul>
<li><em>gcpfilestore</em>: Add support for non-default databases.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="27e0bca95d"><code>27e0bca</code></a>
all: prep for release (<a
href="https://redirect.github.com/google/go-cloud/issues/3350">#3350</a>)</li>
<li><a
href="53ccd8db26"><code>53ccd8d</code></a>
all: update deps, including a breaking S3 change (<a
href="https://redirect.github.com/google/go-cloud/issues/3342">#3342</a>)</li>
<li><a
href="fa413a39cd"><code>fa413a3</code></a>
docstore/gcpfilestore: add support for non-default databases. (<a
href="https://redirect.github.com/google/go-cloud/issues/3345">#3345</a>)</li>
<li><a
href="c04000b964"><code>c04000b</code></a>
secrets/hashivault: Update go-jose per dependabot (<a
href="https://redirect.github.com/google/go-cloud/issues/3346">#3346</a>)</li>
<li><a
href="6d5d289081"><code>6d5d289</code></a>
pubsub/natspubsub: upgrade a dependency (<a
href="https://redirect.github.com/google/go-cloud/issues/3336">#3336</a>)</li>
<li><a
href="375e097193"><code>375e097</code></a>
pubsub/natspubsub: Update dependency (<a
href="https://redirect.github.com/google/go-cloud/issues/3331">#3331</a>)</li>
<li><a
href="35ac324ff7"><code>35ac324</code></a>
all: update dependencies (<a
href="https://redirect.github.com/google/go-cloud/issues/3329">#3329</a>)</li>
<li><a
href="4a18be0f4a"><code>4a18be0</code></a>
secrets/awskms: update the example for the AWS ARN use case (<a
href="https://redirect.github.com/google/go-cloud/issues/3320">#3320</a>)</li>
<li><a
href="486d484a8f"><code>486d484</code></a>
kafkapubsub: rename dependency Shopify/sarama to IBM/sarama (<a
href="https://redirect.github.com/google/go-cloud/issues/3319">#3319</a>)</li>
<li><a
href="db7e808e31"><code>db7e808</code></a>
runtimevar/constantvar: Add support for reading the constantvar from an
envir...</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-cloud/compare/v0.34.0...v0.35.0">compare
view</a></li>
</ul>
</details>
<br />

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| gocloud.dev | [>= 0.25.a, < 0.26] |
</details>


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.34.0&new-version=0.35.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 07:55:26 -03:00
dependabot[bot]
48d4d04c71
feat(deps): bump github.com/xanzy/go-gitlab from 0.94.0 to 0.95.1 (#4468)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.94.0 to 0.95.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9463f2eb23"><code>9463f2e</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1853">#1853</a>
from xanzy/fix/labels</li>
<li><a
href="e8b85a2984"><code>e8b85a2</code></a>
Fix renaming <code>Labels</code> to <code>LabelOptions</code></li>
<li><a
href="c26aaf25a1"><code>c26aaf2</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1851">#1851</a>
from giuliohome/master</li>
<li><a
href="62bfc4a3f6"><code>62bfc4a</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1849">#1849</a>
from inputvalidation/force-stop-environment</li>
<li><a
href="f3442204d3"><code>f344220</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1848">#1848</a>
from mycrEEpy/service-user</li>
<li><a
href="151995e6e9"><code>151995e</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1847">#1847</a>
from liuhaogui/v0.94.1</li>
<li><a
href="d97e90570a"><code>d97e905</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1846">#1846</a>
from eranor/feat/add-group-milestone-delete-method</li>
<li><a
href="d3e39bd6bc"><code>d3e39bd</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1845">#1845</a>
from puskunalis/puskunalis/add-unidiff</li>
<li><a
href="0cb04be365"><code>0cb04be</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1831">#1831</a>
from ysmilda/main</li>
<li><a
href="a49cd36f2b"><code>a49cd36</code></a>
Make it backwards compatible for now</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.94.0...v0.95.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.94.0&new-version=0.95.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-11 07:44:58 -03:00
dependabot[bot]
00ea9f97ed
feat(deps): bump code.gitea.io/sdk/gitea from 0.16.0 to 0.17.0 (#4459)
Bumps code.gitea.io/sdk/gitea from 0.16.0 to 0.17.0.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.16.0&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-12-05 09:19:49 -03:00
Carlos Alexandro Becker
853275f379
feat(deps): update go-github to v57
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-12-04 07:45:55 -03:00
dependabot[bot]
3458c7f34e
feat(deps): bump github.com/google/go-containerregistry from 0.16.1 to 0.17.0 (#4452)
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry)
from 0.16.1 to 0.17.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.17.0</h2>
<h2>What's Changed</h2>
<ul>
<li>🦅 Validate index architectures match children 🦅 by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1776">google/go-containerregistry#1776</a></li>
<li>Set Content-Length for blob uploads by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1781">google/go-containerregistry#1781</a></li>
<li>Don't wrap DefaultKeychain with refreshes by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1791">google/go-containerregistry#1791</a></li>
<li>Build releases with Go 1.21 by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1840">google/go-containerregistry#1840</a></li>
<li>fix: mimic oci-layout in diskblobhandler by <a
href="https://github.com/thesayyn"><code>@​thesayyn</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1810">google/go-containerregistry#1810</a></li>
<li>tag: add command explanation to the long help by <a
href="https://github.com/abitrolly"><code>@​abitrolly</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1843">google/go-containerregistry#1843</a></li>
<li>feat: implement gc command by <a
href="https://github.com/thesayyn"><code>@​thesayyn</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1811">google/go-containerregistry#1811</a></li>
<li>feat: allow port and disk path to be overriden by <a
href="https://github.com/thesayyn"><code>@​thesayyn</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1848">google/go-containerregistry#1848</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.16.1...v0.17.0">https://github.com/google/go-containerregistry/compare/v0.16.1...v0.17.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4fdaa32ee9"><code>4fdaa32</code></a>
feat: allow port and disk path to be overriden (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1848">#1848</a>)</li>
<li><a
href="ceb0580d9c"><code>ceb0580</code></a>
feat: implement gc command (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1811">#1811</a>)</li>
<li><a
href="5a53a12f09"><code>5a53a12</code></a>
tag: add command explanation to the long help (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1843">#1843</a>)</li>
<li><a
href="c722ce9e66"><code>c722ce9</code></a>
fix: mimic oci-layout (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1810">#1810</a>)</li>
<li><a
href="b2485cb31c"><code>b2485cb</code></a>
Build releases with Go 1.21 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1840">#1840</a>)</li>
<li><a
href="dbcd01c402"><code>dbcd01c</code></a>
Don't wrap DefaultKeychain with refreshes (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1791">#1791</a>)</li>
<li><a
href="a748190e18"><code>a748190</code></a>
Set Content-Length for blob uploads (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1781">#1781</a>)</li>
<li><a
href="190ad0e4d5"><code>190ad0e</code></a>
Validate index architectures match children (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1776">#1776</a>)</li>
<li>See full diff in <a
href="https://github.com/google/go-containerregistry/compare/v0.16.1...v0.17.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.16.1&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-30 10:05:03 -03:00
dependabot[bot]
2f1162a2a4
feat(deps): bump golang.org/x/tools from 0.15.0 to 0.16.0 (#4444)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.15.0
to 0.16.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a9ef4cfeac"><code>a9ef4cf</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="d9b9452656"><code>d9b9452</code></a>
gopls/internal/lsp/cache: move quick-fix bundling logic to the cache
pkg</li>
<li><a
href="1733061d5f"><code>1733061</code></a>
go/analysis/passes/testinggoroutine: report by enclosing regions</li>
<li><a
href="b19be0fa71"><code>b19be0f</code></a>
gopls/internal/cmd/help_test.go: document</li>
<li><a
href="daa4aa59ed"><code>daa4aa5</code></a>
gopls/internal/lsp/source: stubmethods: fix out-of-bounds index</li>
<li><a
href="a586d0db84"><code>a586d0d</code></a>
go/types/internal/play: show more types.Scope detail</li>
<li><a
href="53ad329bd9"><code>53ad329</code></a>
gopls/internal/lsp/source: move edit logic into the protocol
package</li>
<li><a
href="3c677e3f7d"><code>3c677e3</code></a>
gopls/internal/lsp/cache: move SuggestedFixFromCommand into cache</li>
<li><a
href="ab6af7d4bb"><code>ab6af7d</code></a>
gopls/internal/lsp/source: extract InDir to a new pathutil package</li>
<li><a
href="e7d61d9d57"><code>e7d61d9</code></a>
gopls/internal/lsp/cache: simplify named error values</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.15.0...v0.16.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.15.0&new-version=0.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-28 10:15:02 -03:00
dependabot[bot]
5587cb2cb7
feat(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 (#4445)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from
0.14.0 to 0.15.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6e9ec9323d"><code>6e9ec93</code></a>
go.mod: update golang.org/x dependencies</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.14.0...v0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.14.0&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-28 09:22:27 -03:00
dependabot[bot]
f9203badeb
feat(deps): bump github.com/disgoorg/disgo from 0.16.12 to 0.17.0 (#4434)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.12 to 0.17.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c4ffb0537d"><code>c4ffb05</code></a>
fix checking timeouts when calculating permissions</li>
<li><a
href="7e8c825d82"><code>7e8c825</code></a>
Address Discord having shitty API design</li>
<li><a
href="c9a23642bd"><code>c9a2364</code></a>
Add new expressions and events permissions (<a
href="https://redirect.github.com/disgoorg/disgo/issues/292">#292</a>)</li>
<li><a
href="f19739c45e"><code>f19739c</code></a>
update dependencies</li>
<li><a
href="0c2c0328fa"><code>0c2c032</code></a>
migrate to slog &amp; go 1.21 (<a
href="https://redirect.github.com/disgoorg/disgo/issues/294">#294</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.12...v0.17.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.12&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-23 17:38:25 -03:00
dependabot[bot]
334cb890a5
feat(deps): bump github.com/google/ko from 0.15.0 to 0.15.1 (#4435)
Bumps [github.com/google/ko](https://github.com/google/ko) from 0.15.0
to 0.15.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/ko/releases">github.com/google/ko's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Don't AppendDescriptor until we've written config by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1175">ko-build/ko#1175</a></li>
<li>Add more locking around on-disk image cache by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1176">ko-build/ko#1176</a></li>
<li>Fix &quot;AM&quot; Time Typo by <a
href="https://github.com/StephenGrider"><code>@​StephenGrider</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1179">ko-build/ko#1179</a></li>
<li>docs: add MacPorts install info by <a
href="https://github.com/herbygillot"><code>@​herbygillot</code></a> in
<a
href="https://redirect.github.com/ko-build/ko/pull/1180">ko-build/ko#1180</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/StephenGrider"><code>@​StephenGrider</code></a>
made their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1179">ko-build/ko#1179</a></li>
<li><a
href="https://github.com/herbygillot"><code>@​herbygillot</code></a>
made their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1180">ko-build/ko#1180</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ko-build/ko/compare/v0.15.0...v0.15.1">https://github.com/ko-build/ko/compare/v0.15.0...v0.15.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2e9e58b187"><code>2e9e58b</code></a>
Bump k8s.io/apimachinery from 0.28.3 to 0.28.4</li>
<li><a
href="84d3803370"><code>84d3803</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1177">#1177</a> from
ko-build/dependabot/go_modules/github.com/sigst...</li>
<li><a
href="512ca9c0fb"><code>512ca9c</code></a>
Bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1</li>
<li><a
href="4aceae1ddf"><code>4aceae1</code></a>
update test</li>
<li><a
href="a271b54fe5"><code>a271b54</code></a>
Bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1</li>
<li><a
href="cfc13deeb6"><code>cfc13de</code></a>
Bump golang.org/x/tools from 0.14.0 to 0.15.0</li>
<li><a
href="59038b983f"><code>59038b9</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1180">#1180</a> from
herbygillot/patch-1</li>
<li><a
href="63cd511412"><code>63cd511</code></a>
docs: add MacPorts install info</li>
<li><a
href="f1f5fb3afb"><code>f1f5fb3</code></a>
Update community.md (<a
href="https://redirect.github.com/google/ko/issues/1179">#1179</a>)</li>
<li><a
href="c92ea35f27"><code>c92ea35</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1178">#1178</a> from
ko-build/dependabot/github_actions/sigstore/cos...</li>
<li>Additional commits viewable in <a
href="https://github.com/google/ko/compare/v0.15.0...v0.15.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.15.0&new-version=0.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-23 17:38:08 -03:00
dependabot[bot]
182e103330
feat(deps): bump github.com/xanzy/go-gitlab from 0.93.2 to 0.94.0 (#4433)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.93.2 to 0.94.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="793bc3cdf5"><code>793bc3c</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1829">#1829</a>
from mauamy/feat/add-member-roles</li>
<li><a
href="99ab72b8c2"><code>99ab72b</code></a>
Make the code match the rest of the package</li>
<li><a
href="ec84ef5626"><code>ec84ef5</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1788">#1788</a>
from mycrEEpy/update-go</li>
<li><a
href="664c0acc48"><code>664c0ac</code></a>
Simplify the Ptr func</li>
<li><a
href="2bf8cd2ee2"><code>2bf8cd2</code></a>
update deprecation docs</li>
<li><a
href="ce857a2572"><code>ce857a2</code></a>
update readme examples</li>
<li><a
href="a2fd184003"><code>a2fd184</code></a>
update minimum go version to 1.19; add Ptr function to use generics for
alloc...</li>
<li><a
href="5a3d963c32"><code>5a3d963</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1827">#1827</a>
from pwlandoll/feat/815-keyset-pagination</li>
<li><a
href="5bd3fc74a9"><code>5bd3fc7</code></a>
Small tweaks, nothing exiting :)</li>
<li><a
href="d906aaa47a"><code>d906aaa</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1834">#1834</a>
from ppeble/pipelines-add-name-field</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.93.2...v0.94.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.93.2&new-version=0.94.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-23 17:37:49 -03:00
dependabot[bot]
3c6dcd8dcd
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419)
Bumps
[github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from
2.1.1 to 2.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.2.1</h2>
<p><strong>Note: This release comes with a fix for CVE-2023-46737
described in this <a
href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github
Security Advisory</a>. Please upgrade to this release ASAP</strong></p>
<h2>Enhancements</h2>
<ul>
<li>feat: Support basic auth and bearer auth login to registry (<a
href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li>
<li>add support for ignoring certificates with pkcs11 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li>
<li>Support ReplaceOp in Signatures (<a
href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li>
<li>feat: added ability to get image digest back via triangulate (<a
href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li>
<li>feat: add <code>--only</code> flag in <code>cosign copy</code> to
copy sign, att &amp; sbom (<a
href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li>
<li>feat: add support attaching a Rekor bundle to a container (<a
href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li>
<li>feat: add support outputting rekor response on signing (<a
href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li>
<li>feat: improve dockerfile verify subcommand (<a
href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li>
<li>Add guard flag for experimental OCI 1.1 verify. (<a
href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li>
<li>Deprecate SBOM attachments (<a
href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li>
<li>feat: dedent line in cosign copy doc (<a
href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li>
<li>feat: add platform flag to cosign copy command (<a
href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li>
<li>Add SLSA 1.0 attestation support to cosign. Closes <a
href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a>
(<a
href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li>
<li>attest: pass OCI remote opts to att resolver. (<a
href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Merge pull request from GHSA-vfp6-jrw2-99g9</li>
<li>fix: allow cosign download sbom when image is absent (<a
href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li>
<li>ci: add a OCI registry test for referrers support (<a
href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li>
<li>Fix ReplaceSignatures (<a
href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li>
<li>Stop using deprecated in_toto.ProvenanceStatement (<a
href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li>
<li>Fixes <a
href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>,
disable SCT checking for a cosign verification when usin… (<a
href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li>
<li>fix: update error in <code>SignedEntity</code> to be more
descriptive (<a
href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li>
<li>Fail timestamp verification if no root is provided (<a
href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Add some docs about verifying in an air-gapped environment (<a
href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li>
<li>Update CONTRIBUTING.md (<a
href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li>
<li>docs: improves the Contribution guidelines (<a
href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li>
<li>Remove security policy (<a
href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li>
</ul>
<h2>Others</h2>
<ul>
<li>Set go to min 1.21 and update dependencies (<a
href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li>
<li>Update contact for code of conduct (<a
href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li>
<li>Update .ko.yaml (<a
href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li>
</ul>
<h2>Contributors</h2>
<ul>
<li>AdamKorcz</li>
<li>Andres Galante</li>
<li>Appu</li>
<li>Billy Lynch</li>
<li>Bob Callaway</li>
<li>Caleb Woodbine</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's
changelog</a>.</em></p>
<blockquote>
<h1>v2.2.1</h1>
<p><strong>Note: This release comes with a fix for CVE-2023-46737
described in this <a
href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github
Security Advisory</a>. Please upgrade to this release ASAP</strong></p>
<h2>Enhancements</h2>
<ul>
<li>feat: Support basic auth and bearer auth login to registry (<a
href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li>
<li>add support for ignoring certificates with pkcs11 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li>
<li>Support ReplaceOp in Signatures (<a
href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li>
<li>feat: added ability to get image digest back via triangulate (<a
href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li>
<li>feat: add <code>--only</code> flag in <code>cosign copy</code> to
copy sign, att &amp; sbom (<a
href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li>
<li>feat: add support attaching a Rekor bundle to a container (<a
href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li>
<li>feat: add support outputting rekor response on signing (<a
href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li>
<li>feat: improve dockerfile verify subcommand (<a
href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li>
<li>Add guard flag for experimental OCI 1.1 verify. (<a
href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li>
<li>Deprecate SBOM attachments (<a
href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li>
<li>feat: dedent line in cosign copy doc (<a
href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li>
<li>feat: add platform flag to cosign copy command (<a
href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li>
<li>Add SLSA 1.0 attestation support to cosign. Closes <a
href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a>
(<a
href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li>
<li>attest: pass OCI remote opts to att resolver. (<a
href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Merge pull request from GHSA-vfp6-jrw2-99g9</li>
<li>fix: allow cosign download sbom when image is absent (<a
href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li>
<li>ci: add a OCI registry test for referrers support (<a
href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li>
<li>Fix ReplaceSignatures (<a
href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li>
<li>Stop using deprecated in_toto.ProvenanceStatement (<a
href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li>
<li>Fixes <a
href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>,
disable SCT checking for a cosign verification when usin… (<a
href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li>
<li>fix: update error in <code>SignedEntity</code> to be more
descriptive (<a
href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li>
<li>Fail timestamp verification if no root is provided (<a
href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Add some docs about verifying in an air-gapped environment (<a
href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li>
<li>Update CONTRIBUTING.md (<a
href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li>
<li>docs: improves the Contribution guidelines (<a
href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li>
<li>Remove security policy (<a
href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li>
</ul>
<h2>Others</h2>
<ul>
<li>Set go to min 1.21 and update dependencies (<a
href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li>
<li>Update contact for code of conduct (<a
href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li>
<li>Update .ko.yaml (<a
href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li>
</ul>
<h2>Contributors</h2>
<ul>
<li>AdamKorcz</li>
<li>Andres Galante</li>
<li>Appu</li>
<li>Billy Lynch</li>
<li>Bob Callaway</li>
<li>Caleb Woodbine</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="12cbf9ea17"><code>12cbf9e</code></a>
add changelog for v2.2.1 release (<a
href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li>
<li><a
href="827f24e9d4"><code>827f24e</code></a>
feat: Support basic auth and bearer auth login to registry (<a
href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li>
<li><a
href="8ac891ff0e"><code>8ac891f</code></a>
Merge pull request from GHSA-vfp6-jrw2-99g9</li>
<li><a
href="8b366c497b"><code>8b366c4</code></a>
add support for ignoring certificates with pkcs11 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li>
<li><a
href="23920de562"><code>23920de</code></a>
chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li>
<li><a
href="e022e1c132"><code>e022e1c</code></a>
chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li>
<li><a
href="28c59c5eca"><code>28c59c5</code></a>
add missing groups key (<a
href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li>
<li><a
href="8e5bdcc0ff"><code>8e5bdcc</code></a>
chore(deps): bump github.com/google/certificate-transparency-go (<a
href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li>
<li><a
href="510cac4ef5"><code>510cac4</code></a>
chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li>
<li><a
href="063902b1d7"><code>063902b</code></a>
chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0
(<a
href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 13:39:49 -03:00
dependabot[bot]
a5ae5cd20a
feat(deps): bump github.com/disgoorg/disgo from 0.16.11 to 0.16.12 (#4422)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.11 to 0.16.12.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.12</h2>
<h2>What's Changed</h2>
<ul>
<li>Update subscription objects to match the docs by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/322">disgoorg/disgo#322</a></li>
<li>Fix problem with oauth2 endpoints by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/323">disgoorg/disgo#323</a></li>
<li>Fix incorrect expiration in oauth sessions by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="c50b92ff0a</a></li>
<li>Fix missnamed creator json tag in emoji by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="0162c707df</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.11...v0.16.12">https://github.com/disgoorg/disgo/compare/v0.16.11...v0.16.12</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0162c707df"><code>0162c70</code></a>
fix missnamed creator json tag in emoji</li>
<li><a
href="631c26135b"><code>631c261</code></a>
fix problem with oauth2 endpoints (<a
href="https://redirect.github.com/disgoorg/disgo/issues/323">#323</a>)</li>
<li><a
href="c50b92ff0a"><code>c50b92f</code></a>
fix incorrect expiration in oauth sessions</li>
<li><a
href="5a9ed6695b"><code>5a9ed66</code></a>
Update subscription objects to match the docs (<a
href="https://redirect.github.com/disgoorg/disgo/issues/322">#322</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.11...v0.16.12">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.11&new-version=0.16.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 13:39:36 -03:00
dependabot[bot]
a73fcfc5d9
feat(deps): bump golang.org/x/oauth2 from 0.13.0 to 0.14.0 (#4416)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from
0.13.0 to 0.14.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e067960af8"><code>e067960</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="4c91c17b32"><code>4c91c17</code></a>
google: adds header to security considerations section</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.13.0...v0.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 13:39:25 -03:00
dependabot[bot]
5c2cbb3417
feat(deps): bump golang.org/x/tools from 0.14.0 to 0.15.0 (#4417)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.14.0
to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.14.1</h2>
<p>This release contains just two changes:</p>
<ul>
<li>A workaround for a regression affecting some users of
<code>GOPACKAGESDRIVER</code>: <a
href="https://redirect.github.com/golang/go/issues/63751">golang/go#63751</a>,
for example those using gopls with an older version of <a
href="https://bazel.build/">Bazel</a>. When the <a
href="https://pkg.go.dev/golang.org/x/tools/go/packages"><code>go/packages</code></a>
driver is missing compiler or architecture information, gopls now
assumes a default value rather than failing to load package
information.</li>
<li>A fix for a minor bug in the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.14.0">new</a>
&quot;remove unused parameter&quot; refactoring: <a
href="https://redirect.github.com/golang/go/issues/63755">golang/go#63755</a>.
Notably, this bug was discovered via an automated report from someone
who had opted in to <a href="https://telemetry.go.dev/privacy">Go
telemetry</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="729e159c03"><code>729e159</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="38ed81a6b5"><code>38ed81a</code></a>
gopls/internal/regtest/marker: porting extract tests</li>
<li><a
href="bbf8380961"><code>bbf8380</code></a>
gopls/internal/regtest/marker: use golden diffs for suggested fixes</li>
<li><a
href="51df92b224"><code>51df92b</code></a>
go/ssa: two minor cleanups</li>
<li><a
href="e7fb31ad45"><code>e7fb31a</code></a>
internal/cmd/deadcode: rename -format to -f</li>
<li><a
href="c538b4e994"><code>c538b4e</code></a>
internal/cmd/deadcode: add -whylive=function flag</li>
<li><a
href="b753e58b84"><code>b753e58</code></a>
internal/lsp/helper: fix misspelled &quot;Code generated&quot;
comment</li>
<li><a
href="2638d66336"><code>2638d66</code></a>
internal/cmd/deadcode: omit package/func keywords in default output</li>
<li><a
href="118c362a56"><code>118c362</code></a>
gopls/internal/lsp/source: fix signatureHelp with pointer receivers</li>
<li><a
href="4124316da0"><code>4124316</code></a>
gopls/internal/lsp/cache: remove baseCtx from the View</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.14.0...v0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.14.0&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 12:18:36 -03:00
dependabot[bot]
3a552a9df5
feat(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (#4408)
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.4.0 to
0.5.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="10739b037d"><code>10739b0</code></a>
all: update go directive to 1.18</li>
<li>See full diff in <a
href="https://github.com/golang/sync/compare/v0.4.0...v0.5.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/sync&package-manager=go_modules&previous-version=0.4.0&new-version=0.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 12:51:07 -03:00
dependabot[bot]
f20320b9e6
feat(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#4410)
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from
1.7.0 to 1.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/spf13/cobra/releases">github.com/spf13/cobra's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.0</h2>
<h2> Features</h2>
<ul>
<li>Support usage as plugin for tools like kubectl by <a
href="https://github.com/nirs"><code>@​nirs</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2018">spf13/cobra#2018</a>
- this means that programs that utilize a &quot;plugin-like&quot;
structure have much better support and usage (like for completions,
command paths, etc.)</li>
<li>Move documentation sources to site/content by <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1428">spf13/cobra#1428</a></li>
<li>Add 'one required flag' group by <a
href="https://github.com/marevers"><code>@​marevers</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1952">spf13/cobra#1952</a>
- this includes a new <code>MarkFlagsOneRequired</code> API for flags
which can be used to mark a flag group as required and cause command
failure if at least one is not used when invoked.</li>
<li>Customizable error message prefix by <a
href="https://github.com/5ouma"><code>@​5ouma</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2023">spf13/cobra#2023</a>
- This adds the <code>SetErrPrefix</code> and <code>ErrPrefix</code>
APIs on the <code>Command</code> struct to allow for setting a custom
prefix for errors</li>
<li>feat: add getters for flag completions by <a
href="https://github.com/avirtopeanu-ionos"><code>@​avirtopeanu-ionos</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/1943">spf13/cobra#1943</a></li>
<li>Feature: allow running persistent run hooks of all parents by <a
href="https://github.com/vkhoroz"><code>@​vkhoroz</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2044">spf13/cobra#2044</a></li>
<li>Improve API to get flag completion function by <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in
<a
href="https://redirect.github.com/spf13/cobra/pull/2063">spf13/cobra#2063</a></li>
</ul>
<h2>🐛 Bug fixes</h2>
<ul>
<li>Fix typo in fish completions by <a
href="https://github.com/twpayne"><code>@​twpayne</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1945">spf13/cobra#1945</a></li>
<li>Fix grammar: 'allows to' by <a
href="https://github.com/supertassu"><code>@​supertassu</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1978">spf13/cobra#1978</a></li>
<li>powershell: escape variable with curly brackets by <a
href="https://github.com/Luap99"><code>@​Luap99</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1960">spf13/cobra#1960</a></li>
<li>Don't complete --help flag when flag parsing disabled by <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in
<a
href="https://redirect.github.com/spf13/cobra/pull/2061">spf13/cobra#2061</a></li>
<li>Replace all non-alphanumerics in active help env var program prefix
by <a href="https://github.com/scop"><code>@​scop</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1940">spf13/cobra#1940</a></li>
</ul>
<h2>🔧 Maintenance</h2>
<ul>
<li>build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/1971">spf13/cobra#1971</a></li>
<li>build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/1976">spf13/cobra#1976</a></li>
<li>build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/2021">spf13/cobra#2021</a></li>
<li>build(deps): bump actions/setup-go from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1934">spf13/cobra#1934</a></li>
<li>build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to
2.0.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2047">spf13/cobra#2047</a></li>
<li>build(deps): bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2028">spf13/cobra#2028</a></li>
<li>command: temporarily disable G602 due to <a
href="https://redirect.github.com/securego/gosec/issues/1005">securego/gosec#1005</a>
by <a href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2022">spf13/cobra#2022</a></li>
</ul>
<h2>🧪 Testing &amp; CI/CD</h2>
<ul>
<li>test: make fish_completions_test more robust by <a
href="https://github.com/branchvincent"><code>@​branchvincent</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/1980">spf13/cobra#1980</a></li>
<li>golangci: enable 'unused' and disable deprecated replaced by it by
<a href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1983">spf13/cobra#1983</a></li>
<li>cleanup: minor corrections to unit tests by <a
href="https://github.com/JunNishimura"><code>@​JunNishimura</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/2003">spf13/cobra#2003</a></li>
<li>ci: test golang 1.21 by <a
href="https://github.com/nunoadrego"><code>@​nunoadrego</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2024">spf13/cobra#2024</a></li>
<li>Fix linter errors by <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in
<a
href="https://redirect.github.com/spf13/cobra/pull/2052">spf13/cobra#2052</a></li>
<li>Add tests for flag completion registration by <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in
<a
href="https://redirect.github.com/spf13/cobra/pull/2053">spf13/cobra#2053</a></li>
</ul>
<h2>✏️ Documentation</h2>
<ul>
<li>doc: fix typo, Deperecated -&gt; Deprecated by <a
href="https://github.com/callthingsoff"><code>@​callthingsoff</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/2000">spf13/cobra#2000</a></li>
<li>Add notes to doc about the execution condition of *PreRun and
*PostRun functions by <a
href="https://github.com/haoming29"><code>@​haoming29</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2041">spf13/cobra#2041</a></li>
</ul>
<hr />
<p>Thank you everyone who contributed to this release and all your hard
work! Cobra and this community would never be possible without all of
you!!!! 🐍</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0">https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a0a6ae020b"><code>a0a6ae0</code></a>
Improve API to get flag completion function (<a
href="https://redirect.github.com/spf13/cobra/issues/2063">#2063</a>)</li>
<li><a
href="890302a35f"><code>890302a</code></a>
Support usage as plugin for tools like kubectl (<a
href="https://redirect.github.com/spf13/cobra/issues/2018">#2018</a>)</li>
<li><a
href="48cea5c87b"><code>48cea5c</code></a>
build(deps): bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/spf13/cobra/issues/2028">#2028</a>)</li>
<li><a
href="22953d8845"><code>22953d8</code></a>
Replace all non-alphanumerics in active help env var program prefix (<a
href="https://redirect.github.com/spf13/cobra/issues/1940">#1940</a>)</li>
<li><a
href="00b68a1c26"><code>00b68a1</code></a>
Add tests for flag completion registration (<a
href="https://redirect.github.com/spf13/cobra/issues/2053">#2053</a>)</li>
<li><a
href="b711e8760b"><code>b711e87</code></a>
Don't complete --help flag when flag parsing disabled (<a
href="https://redirect.github.com/spf13/cobra/issues/2061">#2061</a>)</li>
<li><a
href="8b1eba4761"><code>8b1eba4</code></a>
Fix linter errors (<a
href="https://redirect.github.com/spf13/cobra/issues/2052">#2052</a>)</li>
<li><a
href="4cafa37bc4"><code>4cafa37</code></a>
Allow running persistent run hooks of all parents (<a
href="https://redirect.github.com/spf13/cobra/issues/2044">#2044</a>)</li>
<li><a
href="5c962a221e"><code>5c962a2</code></a>
build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3
(<a
href="https://redirect.github.com/spf13/cobra/issues/2047">#2047</a>)</li>
<li><a
href="efe8fa3e44"><code>efe8fa3</code></a>
build(deps): bump actions/setup-go from 3 to 4 (<a
href="https://redirect.github.com/spf13/cobra/issues/1934">#1934</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/cobra&package-manager=go_modules&previous-version=1.7.0&new-version=1.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 12:44:28 -03:00
dependabot[bot]
a9b3d49e59
feat(deps): bump golang.org/x/text from 0.13.0 to 0.14.0 (#4409)
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.13.0 to
0.14.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6c97a165dd"><code>6c97a16</code></a>
all: update go directive to 1.18</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.13.0...v0.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 12:44:16 -03:00
dependabot[bot]
3009ac1989 feat(deps): bump github.com/docker/docker
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.6+incompatible to 24.0.7+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v24.0.6...v24.0.7)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 13:42:51 -03:00
dependabot[bot]
8cb018bc42 feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.33.1 to 2.34.0
Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.33.1 to 2.34.0.
- [Release notes](https://github.com/goreleaser/nfpm/releases)
- [Changelog](https://github.com/goreleaser/nfpm/blob/main/.goreleaser.yml)
- [Commits](https://github.com/goreleaser/nfpm/compare/v2.33.1...v2.34.0)

---
updated-dependencies:
- dependency-name: github.com/goreleaser/nfpm/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 11:49:56 -03:00
dependabot[bot]
b1271d2559 feat(deps): bump github.com/google/uuid from 1.3.1 to 1.4.0
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/uuid/compare/v1.3.1...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-27 08:11:55 -03:00
dependabot[bot]
5071b5ed39 feat(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.2 to 1.58.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.2...v1.58.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-25 22:52:03 -03:00
dependabot[bot]
b233c68349
feat(deps): bump github.com/xanzy/go-gitlab from 0.93.1 to 0.93.2 (#4381)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.93.1 to 0.93.2.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e78abac2dc"><code>e78abac</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1825">#1825</a>
from stevexuereb/fix/application-settings</li>
<li><a
href="ddc846cfa7"><code>ddc846c</code></a>
fix: application settings marshalling</li>
<li><a
href="b6f640592c"><code>b6f6405</code></a>
Rename master to main</li>
<li><a
href="9886bf83fa"><code>9886bf8</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1810">#1810</a>
from oSoloTurk/master</li>
<li><a
href="5553955487"><code>5553955</code></a>
Minor tweaks preparing to merge</li>
<li><a
href="61a2bebe76"><code>61a2beb</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1824">#1824</a>
from xanzy/feat/notes</li>
<li><a
href="bb35e1a383"><code>bb35e1a</code></a>
Fixes <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1822">#1822</a></li>
<li><a
href="8d77cca289"><code>8d77cca</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1809">#1809</a>
from PatrickRice-KSC/add-notification-events</li>
<li><a
href="e93019f2f0"><code>e93019f</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1820">#1820</a>
from xuxiaowei-com-cn/xuxiaowei/appearance</li>
<li><a
href="6ee683f42d"><code>6ee683f</code></a>
Refactor PR so it matches the rest of the package</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.93.1...v0.93.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.93.1&new-version=0.93.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-23 08:27:09 -03:00
dependabot[bot]
a00c3db123
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373)
Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1
to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/ko/releases">github.com/google/ko's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.0</h2>
<h2>What's Changed</h2>
<ul>
<li>implement dumb cache for images by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li>
<li>fixed typo in configuration.md by <a
href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li>
<li>pkg/commands: fix dropped errors by <a
href="https://github.com/alrs"><code>@​alrs</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li>
<li>ci: add govulncheck by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li>
<li>chore: remove refs to deprecated io/ioutil by <a
href="https://github.com/testwill"><code>@​testwill</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li>
<li>Update install docs to install ko using Scoop by <a
href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li>
<li>include go build output in build error by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li>
<li>Use go1.21, clean up ci and drop go1.19 by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li>
<li>Update e2e.yaml by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li>
<li>handle newfound lint errors by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li>
<li>fix test broken by lint fix by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li>
<li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li>
<li>fix env var for go env by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li>
<li>docs: add docs for TF and Lambda by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li>
<li>docs: add Lambda and TF pages to sidebar by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li>
<li>include example using go packages by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li>
<li>fix the release workflow and install instructions by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li>
<li>update missing places that was using go1.20 by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made
their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li>
<li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their
first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li>
<li><a href="https://github.com/testwill"><code>@​testwill</code></a>
made their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li>
<li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made
their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="31035ad202"><code>31035ad</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from
ko-build/dependabot/go_modules/golang.org/x/net...</li>
<li><a
href="ba952fd091"><code>ba952fd</code></a>
Bump golang.org/x/net from 0.16.0 to 0.17.0</li>
<li><a
href="277f5d7435"><code>277f5d7</code></a>
update missing places that was using go1.20 (<a
href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li>
<li><a
href="b8b3b21f83"><code>b8b3b21</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from
ko-build/dependabot/go_modules/github.com/googl...</li>
<li><a
href="4890ab2887"><code>4890ab2</code></a>
Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li>
<li><a
href="30b62aee3f"><code>30b62ae</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from
ko-build/dependabot/go_modules/github.com/spf13...</li>
<li><a
href="449bcb6192"><code>449bcb6</code></a>
Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li>
<li><a
href="c543dd83cc"><code>c543dd8</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from
ko-build/dependabot/go_modules/golang.org/x/too...</li>
<li><a
href="c1ae5f5ce4"><code>c1ae5f5</code></a>
Bump golang.org/x/tools from 0.13.0 to 0.14.0</li>
<li><a
href="e50d2fd5ff"><code>e50d2fd</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from
ko-build/dependabot/go_modules/golang.org/x/syn...</li>
<li>Additional commits viewable in <a
href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 12:47:47 -03:00
dependabot[bot]
8d121c8681
feat(deps): bump github.com/caarlos0/log from 0.4.3 to 0.4.4 (#4372)
Bumps [github.com/caarlos0/log](https://github.com/caarlos0/log) from
0.4.3 to 0.4.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/log/releases">github.com/caarlos0/log's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.4</h2>
<h2>Changelog</h2>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
<h2>v0.4.4</h2>
<h2>Changelog</h2>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="614b0a8e4b"><code>614b0a8</code></a>
chore(deps): bump github.com/charmbracelet/lipgloss from 0.9.0 to 0.9.1
(<a
href="https://redirect.github.com/caarlos0/log/issues/25">#25</a>)</li>
<li>See full diff in <a
href="https://github.com/caarlos0/log/compare/v0.4.3...v0.4.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/log&package-manager=go_modules&previous-version=0.4.3&new-version=0.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-16 08:18:55 -03:00
Carlos Alexandro Becker
1a243dfc0d
feat(deps): update go-github to v56
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-10-14 22:04:41 +00:00
dependabot[bot]
c72b730258
feat(deps): bump github.com/charmbracelet/lipgloss from 0.9.0 to 0.9.1 (#4367)
Bumps
[github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss)
from 0.9.0 to 0.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/lipgloss/releases">github.com/charmbracelet/lipgloss's
releases</a>.</em></p>
<blockquote>
<h2>v0.9.1</h2>
<p>This bugfix release changes the Table <code>Headers</code> API to
accept <code>[]string</code> for consistency with <code>Row</code> /
<code>Rows</code> and downgrades Lip Gloss to Go version
<code>v1.17</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>Table Headers type from <code>[]any</code> → <code>[]string</code>
by <a href="https://github.com/maaslalani"><code>@​maaslalani</code></a>
in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/234">charmbracelet/lipgloss#234</a></li>
<li>Downgrade Lip Gloss to <code>v1.17</code> by <a
href="https://github.com/maaslalani"><code>@​maaslalani</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/234">charmbracelet/lipgloss#234</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1">https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f093bc1509"><code>f093bc1</code></a>
Make headers <code>[]string</code> (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/234">#234</a>)</li>
<li><a
href="42db873617"><code>42db873</code></a>
test(table): ensure README example works</li>
<li>See full diff in <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/lipgloss&package-manager=go_modules&previous-version=0.9.0&new-version=0.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-14 18:57:21 -03:00
dependabot[bot]
35b0d4c0b5
feat(deps): bump github.com/caarlos0/log from 0.4.2 to 0.4.3 (#4366)
Bumps [github.com/caarlos0/log](https://github.com/caarlos0/log) from
0.4.2 to 0.4.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/log/releases">github.com/caarlos0/log's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.3</h2>
<h2>Changelog</h2>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f01ba34cc7"><code>f01ba34</code></a>
chore(deps): bump github.com/charmbracelet/lipgloss from 0.8.0 to 0.9.0
(<a
href="https://redirect.github.com/caarlos0/log/issues/24">#24</a>)</li>
<li><a
href="ea95b5bf18"><code>ea95b5b</code></a>
chore(deps): bump goreleaser/goreleaser-action from 4 to 5 (<a
href="https://redirect.github.com/caarlos0/log/issues/23">#23</a>)</li>
<li><a
href="273756e9f7"><code>273756e</code></a>
chore(deps): bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/caarlos0/log/issues/22">#22</a>)</li>
<li><a
href="f63049b4a4"><code>f63049b</code></a>
chore(deps): bump github.com/charmbracelet/lipgloss from 0.7.1 to 0.8.0
(<a
href="https://redirect.github.com/caarlos0/log/issues/21">#21</a>)</li>
<li>See full diff in <a
href="https://github.com/caarlos0/log/compare/v0.4.2...v0.4.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/log&package-manager=go_modules&previous-version=0.4.2&new-version=0.4.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-14 18:50:22 -03:00
dependabot[bot]
c15ebb8703
feat(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 (#4365)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.16.0 to
0.17.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b225e7ca6d"><code>b225e7c</code></a>
http2: limit maximum handler goroutines to MaxConcurrentStreams</li>
<li>See full diff in <a
href="https://github.com/golang/net/compare/v0.16.0...v0.17.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/net&package-manager=go_modules&previous-version=0.16.0&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-13 15:34:49 -03:00