1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2025-01-10 03:47:03 +02:00
Commit Graph

634 Commits

Author SHA1 Message Date
dependabot[bot]
2f1162a2a4
feat(deps): bump golang.org/x/tools from 0.15.0 to 0.16.0 (#4444)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.15.0
to 0.16.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a9ef4cfeac"><code>a9ef4cf</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="d9b9452656"><code>d9b9452</code></a>
gopls/internal/lsp/cache: move quick-fix bundling logic to the cache
pkg</li>
<li><a
href="1733061d5f"><code>1733061</code></a>
go/analysis/passes/testinggoroutine: report by enclosing regions</li>
<li><a
href="b19be0fa71"><code>b19be0f</code></a>
gopls/internal/cmd/help_test.go: document</li>
<li><a
href="daa4aa59ed"><code>daa4aa5</code></a>
gopls/internal/lsp/source: stubmethods: fix out-of-bounds index</li>
<li><a
href="a586d0db84"><code>a586d0d</code></a>
go/types/internal/play: show more types.Scope detail</li>
<li><a
href="53ad329bd9"><code>53ad329</code></a>
gopls/internal/lsp/source: move edit logic into the protocol
package</li>
<li><a
href="3c677e3f7d"><code>3c677e3</code></a>
gopls/internal/lsp/cache: move SuggestedFixFromCommand into cache</li>
<li><a
href="ab6af7d4bb"><code>ab6af7d</code></a>
gopls/internal/lsp/source: extract InDir to a new pathutil package</li>
<li><a
href="e7d61d9d57"><code>e7d61d9</code></a>
gopls/internal/lsp/cache: simplify named error values</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.15.0...v0.16.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.15.0&new-version=0.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-28 10:15:02 -03:00
dependabot[bot]
5587cb2cb7
feat(deps): bump golang.org/x/oauth2 from 0.14.0 to 0.15.0 (#4445)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from
0.14.0 to 0.15.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6e9ec9323d"><code>6e9ec93</code></a>
go.mod: update golang.org/x dependencies</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.14.0...v0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.14.0&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-28 09:22:27 -03:00
dependabot[bot]
f9203badeb
feat(deps): bump github.com/disgoorg/disgo from 0.16.12 to 0.17.0 (#4434)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.12 to 0.17.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c4ffb0537d"><code>c4ffb05</code></a>
fix checking timeouts when calculating permissions</li>
<li><a
href="7e8c825d82"><code>7e8c825</code></a>
Address Discord having shitty API design</li>
<li><a
href="c9a23642bd"><code>c9a2364</code></a>
Add new expressions and events permissions (<a
href="https://redirect.github.com/disgoorg/disgo/issues/292">#292</a>)</li>
<li><a
href="f19739c45e"><code>f19739c</code></a>
update dependencies</li>
<li><a
href="0c2c0328fa"><code>0c2c032</code></a>
migrate to slog &amp; go 1.21 (<a
href="https://redirect.github.com/disgoorg/disgo/issues/294">#294</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.12...v0.17.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.12&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-23 17:38:25 -03:00
dependabot[bot]
334cb890a5
feat(deps): bump github.com/google/ko from 0.15.0 to 0.15.1 (#4435)
Bumps [github.com/google/ko](https://github.com/google/ko) from 0.15.0
to 0.15.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/ko/releases">github.com/google/ko's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Don't AppendDescriptor until we've written config by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1175">ko-build/ko#1175</a></li>
<li>Add more locking around on-disk image cache by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1176">ko-build/ko#1176</a></li>
<li>Fix &quot;AM&quot; Time Typo by <a
href="https://github.com/StephenGrider"><code>@​StephenGrider</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1179">ko-build/ko#1179</a></li>
<li>docs: add MacPorts install info by <a
href="https://github.com/herbygillot"><code>@​herbygillot</code></a> in
<a
href="https://redirect.github.com/ko-build/ko/pull/1180">ko-build/ko#1180</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/StephenGrider"><code>@​StephenGrider</code></a>
made their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1179">ko-build/ko#1179</a></li>
<li><a
href="https://github.com/herbygillot"><code>@​herbygillot</code></a>
made their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1180">ko-build/ko#1180</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ko-build/ko/compare/v0.15.0...v0.15.1">https://github.com/ko-build/ko/compare/v0.15.0...v0.15.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2e9e58b187"><code>2e9e58b</code></a>
Bump k8s.io/apimachinery from 0.28.3 to 0.28.4</li>
<li><a
href="84d3803370"><code>84d3803</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1177">#1177</a> from
ko-build/dependabot/go_modules/github.com/sigst...</li>
<li><a
href="512ca9c0fb"><code>512ca9c</code></a>
Bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1</li>
<li><a
href="4aceae1ddf"><code>4aceae1</code></a>
update test</li>
<li><a
href="a271b54fe5"><code>a271b54</code></a>
Bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1</li>
<li><a
href="cfc13deeb6"><code>cfc13de</code></a>
Bump golang.org/x/tools from 0.14.0 to 0.15.0</li>
<li><a
href="59038b983f"><code>59038b9</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1180">#1180</a> from
herbygillot/patch-1</li>
<li><a
href="63cd511412"><code>63cd511</code></a>
docs: add MacPorts install info</li>
<li><a
href="f1f5fb3afb"><code>f1f5fb3</code></a>
Update community.md (<a
href="https://redirect.github.com/google/ko/issues/1179">#1179</a>)</li>
<li><a
href="c92ea35f27"><code>c92ea35</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1178">#1178</a> from
ko-build/dependabot/github_actions/sigstore/cos...</li>
<li>Additional commits viewable in <a
href="https://github.com/google/ko/compare/v0.15.0...v0.15.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.15.0&new-version=0.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-23 17:38:08 -03:00
dependabot[bot]
182e103330
feat(deps): bump github.com/xanzy/go-gitlab from 0.93.2 to 0.94.0 (#4433)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.93.2 to 0.94.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="793bc3cdf5"><code>793bc3c</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1829">#1829</a>
from mauamy/feat/add-member-roles</li>
<li><a
href="99ab72b8c2"><code>99ab72b</code></a>
Make the code match the rest of the package</li>
<li><a
href="ec84ef5626"><code>ec84ef5</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1788">#1788</a>
from mycrEEpy/update-go</li>
<li><a
href="664c0acc48"><code>664c0ac</code></a>
Simplify the Ptr func</li>
<li><a
href="2bf8cd2ee2"><code>2bf8cd2</code></a>
update deprecation docs</li>
<li><a
href="ce857a2572"><code>ce857a2</code></a>
update readme examples</li>
<li><a
href="a2fd184003"><code>a2fd184</code></a>
update minimum go version to 1.19; add Ptr function to use generics for
alloc...</li>
<li><a
href="5a3d963c32"><code>5a3d963</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1827">#1827</a>
from pwlandoll/feat/815-keyset-pagination</li>
<li><a
href="5bd3fc74a9"><code>5bd3fc7</code></a>
Small tweaks, nothing exiting :)</li>
<li><a
href="d906aaa47a"><code>d906aaa</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1834">#1834</a>
from ppeble/pipelines-add-name-field</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.93.2...v0.94.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.93.2&new-version=0.94.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-23 17:37:49 -03:00
dependabot[bot]
3c6dcd8dcd
feat(deps): bump github.com/sigstore/cosign/v2 from 2.1.1 to 2.2.1 (#4419)
Bumps
[github.com/sigstore/cosign/v2](https://github.com/sigstore/cosign) from
2.1.1 to 2.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign/releases">github.com/sigstore/cosign/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.2.1</h2>
<p><strong>Note: This release comes with a fix for CVE-2023-46737
described in this <a
href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github
Security Advisory</a>. Please upgrade to this release ASAP</strong></p>
<h2>Enhancements</h2>
<ul>
<li>feat: Support basic auth and bearer auth login to registry (<a
href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li>
<li>add support for ignoring certificates with pkcs11 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li>
<li>Support ReplaceOp in Signatures (<a
href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li>
<li>feat: added ability to get image digest back via triangulate (<a
href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li>
<li>feat: add <code>--only</code> flag in <code>cosign copy</code> to
copy sign, att &amp; sbom (<a
href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li>
<li>feat: add support attaching a Rekor bundle to a container (<a
href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li>
<li>feat: add support outputting rekor response on signing (<a
href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li>
<li>feat: improve dockerfile verify subcommand (<a
href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li>
<li>Add guard flag for experimental OCI 1.1 verify. (<a
href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li>
<li>Deprecate SBOM attachments (<a
href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li>
<li>feat: dedent line in cosign copy doc (<a
href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li>
<li>feat: add platform flag to cosign copy command (<a
href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li>
<li>Add SLSA 1.0 attestation support to cosign. Closes <a
href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a>
(<a
href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li>
<li>attest: pass OCI remote opts to att resolver. (<a
href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Merge pull request from GHSA-vfp6-jrw2-99g9</li>
<li>fix: allow cosign download sbom when image is absent (<a
href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li>
<li>ci: add a OCI registry test for referrers support (<a
href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li>
<li>Fix ReplaceSignatures (<a
href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li>
<li>Stop using deprecated in_toto.ProvenanceStatement (<a
href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li>
<li>Fixes <a
href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>,
disable SCT checking for a cosign verification when usin… (<a
href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li>
<li>fix: update error in <code>SignedEntity</code> to be more
descriptive (<a
href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li>
<li>Fail timestamp verification if no root is provided (<a
href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Add some docs about verifying in an air-gapped environment (<a
href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li>
<li>Update CONTRIBUTING.md (<a
href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li>
<li>docs: improves the Contribution guidelines (<a
href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li>
<li>Remove security policy (<a
href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li>
</ul>
<h2>Others</h2>
<ul>
<li>Set go to min 1.21 and update dependencies (<a
href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li>
<li>Update contact for code of conduct (<a
href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li>
<li>Update .ko.yaml (<a
href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li>
</ul>
<h2>Contributors</h2>
<ul>
<li>AdamKorcz</li>
<li>Andres Galante</li>
<li>Appu</li>
<li>Billy Lynch</li>
<li>Bob Callaway</li>
<li>Caleb Woodbine</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/cosign/blob/main/CHANGELOG.md">github.com/sigstore/cosign/v2's
changelog</a>.</em></p>
<blockquote>
<h1>v2.2.1</h1>
<p><strong>Note: This release comes with a fix for CVE-2023-46737
described in this <a
href="https://github.com/sigstore/cosign/security/advisories/GHSA-vfp6-jrw2-99g9">Github
Security Advisory</a>. Please upgrade to this release ASAP</strong></p>
<h2>Enhancements</h2>
<ul>
<li>feat: Support basic auth and bearer auth login to registry (<a
href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li>
<li>add support for ignoring certificates with pkcs11 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li>
<li>Support ReplaceOp in Signatures (<a
href="https://redirect.github.com/sigstore/cosign/issues/3315">#3315</a>)</li>
<li>feat: added ability to get image digest back via triangulate (<a
href="https://redirect.github.com/sigstore/cosign/issues/3255">#3255</a>)</li>
<li>feat: add <code>--only</code> flag in <code>cosign copy</code> to
copy sign, att &amp; sbom (<a
href="https://redirect.github.com/sigstore/cosign/issues/3247">#3247</a>)</li>
<li>feat: add support attaching a Rekor bundle to a container (<a
href="https://redirect.github.com/sigstore/cosign/issues/3246">#3246</a>)</li>
<li>feat: add support outputting rekor response on signing (<a
href="https://redirect.github.com/sigstore/cosign/issues/3248">#3248</a>)</li>
<li>feat: improve dockerfile verify subcommand (<a
href="https://redirect.github.com/sigstore/cosign/issues/3264">#3264</a>)</li>
<li>Add guard flag for experimental OCI 1.1 verify. (<a
href="https://redirect.github.com/sigstore/cosign/issues/3272">#3272</a>)</li>
<li>Deprecate SBOM attachments (<a
href="https://redirect.github.com/sigstore/cosign/issues/3256">#3256</a>)</li>
<li>feat: dedent line in cosign copy doc (<a
href="https://redirect.github.com/sigstore/cosign/issues/3244">#3244</a>)</li>
<li>feat: add platform flag to cosign copy command (<a
href="https://redirect.github.com/sigstore/cosign/issues/3234">#3234</a>)</li>
<li>Add SLSA 1.0 attestation support to cosign. Closes <a
href="https://redirect.github.com/sigstore/cosign/issues/2860">#2860</a>
(<a
href="https://redirect.github.com/sigstore/cosign/issues/3219">#3219</a>)</li>
<li>attest: pass OCI remote opts to att resolver. (<a
href="https://redirect.github.com/sigstore/cosign/issues/3225">#3225</a>)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Merge pull request from GHSA-vfp6-jrw2-99g9</li>
<li>fix: allow cosign download sbom when image is absent (<a
href="https://redirect.github.com/sigstore/cosign/issues/3245">#3245</a>)</li>
<li>ci: add a OCI registry test for referrers support (<a
href="https://redirect.github.com/sigstore/cosign/issues/3253">#3253</a>)</li>
<li>Fix ReplaceSignatures (<a
href="https://redirect.github.com/sigstore/cosign/issues/3292">#3292</a>)</li>
<li>Stop using deprecated in_toto.ProvenanceStatement (<a
href="https://redirect.github.com/sigstore/cosign/issues/3243">#3243</a>)</li>
<li>Fixes <a
href="https://redirect.github.com/sigstore/cosign/issues/3236">#3236</a>,
disable SCT checking for a cosign verification when usin… (<a
href="https://redirect.github.com/sigstore/cosign/issues/3237">#3237</a>)</li>
<li>fix: update error in <code>SignedEntity</code> to be more
descriptive (<a
href="https://redirect.github.com/sigstore/cosign/issues/3233">#3233</a>)</li>
<li>Fail timestamp verification if no root is provided (<a
href="https://redirect.github.com/sigstore/cosign/issues/3224">#3224</a>)</li>
</ul>
<h2>Documentation</h2>
<ul>
<li>Add some docs about verifying in an air-gapped environment (<a
href="https://redirect.github.com/sigstore/cosign/issues/3321">#3321</a>)</li>
<li>Update CONTRIBUTING.md (<a
href="https://redirect.github.com/sigstore/cosign/issues/3268">#3268</a>)</li>
<li>docs: improves the Contribution guidelines (<a
href="https://redirect.github.com/sigstore/cosign/issues/3257">#3257</a>)</li>
<li>Remove security policy (<a
href="https://redirect.github.com/sigstore/cosign/issues/3230">#3230</a>)</li>
</ul>
<h2>Others</h2>
<ul>
<li>Set go to min 1.21 and update dependencies (<a
href="https://redirect.github.com/sigstore/cosign/issues/3327">#3327</a>)</li>
<li>Update contact for code of conduct (<a
href="https://redirect.github.com/sigstore/cosign/issues/3266">#3266</a>)</li>
<li>Update .ko.yaml (<a
href="https://redirect.github.com/sigstore/cosign/issues/3240">#3240</a>)</li>
</ul>
<h2>Contributors</h2>
<ul>
<li>AdamKorcz</li>
<li>Andres Galante</li>
<li>Appu</li>
<li>Billy Lynch</li>
<li>Bob Callaway</li>
<li>Caleb Woodbine</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="12cbf9ea17"><code>12cbf9e</code></a>
add changelog for v2.2.1 release (<a
href="https://redirect.github.com/sigstore/cosign/issues/3344">#3344</a>)</li>
<li><a
href="827f24e9d4"><code>827f24e</code></a>
feat: Support basic auth and bearer auth login to registry (<a
href="https://redirect.github.com/sigstore/cosign/issues/3310">#3310</a>)</li>
<li><a
href="8ac891ff0e"><code>8ac891f</code></a>
Merge pull request from GHSA-vfp6-jrw2-99g9</li>
<li><a
href="8b366c497b"><code>8b366c4</code></a>
add support for ignoring certificates with pkcs11 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3334">#3334</a>)</li>
<li><a
href="23920de562"><code>23920de</code></a>
chore(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3342">#3342</a>)</li>
<li><a
href="e022e1c132"><code>e022e1c</code></a>
chore(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3341">#3341</a>)</li>
<li><a
href="28c59c5eca"><code>28c59c5</code></a>
add missing groups key (<a
href="https://redirect.github.com/sigstore/cosign/issues/3339">#3339</a>)</li>
<li><a
href="8e5bdcc0ff"><code>8e5bdcc</code></a>
chore(deps): bump github.com/google/certificate-transparency-go (<a
href="https://redirect.github.com/sigstore/cosign/issues/3338">#3338</a>)</li>
<li><a
href="510cac4ef5"><code>510cac4</code></a>
chore(deps): bump github.com/sigstore/rekor from 1.3.2 to 1.3.3 (<a
href="https://redirect.github.com/sigstore/cosign/issues/3336">#3336</a>)</li>
<li><a
href="063902b1d7"><code>063902b</code></a>
chore(deps): bump github.com/buildkite/agent/v3 from 3.57.0 to 3.58.0
(<a
href="https://redirect.github.com/sigstore/cosign/issues/3337">#3337</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sigstore/cosign/compare/v2.1.1...v2.2.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/cosign/v2&package-manager=go_modules&previous-version=2.1.1&new-version=2.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 13:39:49 -03:00
dependabot[bot]
a5ae5cd20a
feat(deps): bump github.com/disgoorg/disgo from 0.16.11 to 0.16.12 (#4422)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.11 to 0.16.12.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.12</h2>
<h2>What's Changed</h2>
<ul>
<li>Update subscription objects to match the docs by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/322">disgoorg/disgo#322</a></li>
<li>Fix problem with oauth2 endpoints by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/323">disgoorg/disgo#323</a></li>
<li>Fix incorrect expiration in oauth sessions by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="c50b92ff0a</a></li>
<li>Fix missnamed creator json tag in emoji by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="0162c707df</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.11...v0.16.12">https://github.com/disgoorg/disgo/compare/v0.16.11...v0.16.12</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0162c707df"><code>0162c70</code></a>
fix missnamed creator json tag in emoji</li>
<li><a
href="631c26135b"><code>631c261</code></a>
fix problem with oauth2 endpoints (<a
href="https://redirect.github.com/disgoorg/disgo/issues/323">#323</a>)</li>
<li><a
href="c50b92ff0a"><code>c50b92f</code></a>
fix incorrect expiration in oauth sessions</li>
<li><a
href="5a9ed6695b"><code>5a9ed66</code></a>
Update subscription objects to match the docs (<a
href="https://redirect.github.com/disgoorg/disgo/issues/322">#322</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.11...v0.16.12">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.11&new-version=0.16.12)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 13:39:36 -03:00
dependabot[bot]
a73fcfc5d9
feat(deps): bump golang.org/x/oauth2 from 0.13.0 to 0.14.0 (#4416)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from
0.13.0 to 0.14.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e067960af8"><code>e067960</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="4c91c17b32"><code>4c91c17</code></a>
google: adds header to security considerations section</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.13.0...v0.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 13:39:25 -03:00
dependabot[bot]
5c2cbb3417
feat(deps): bump golang.org/x/tools from 0.14.0 to 0.15.0 (#4417)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.14.0
to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.14.1</h2>
<p>This release contains just two changes:</p>
<ul>
<li>A workaround for a regression affecting some users of
<code>GOPACKAGESDRIVER</code>: <a
href="https://redirect.github.com/golang/go/issues/63751">golang/go#63751</a>,
for example those using gopls with an older version of <a
href="https://bazel.build/">Bazel</a>. When the <a
href="https://pkg.go.dev/golang.org/x/tools/go/packages"><code>go/packages</code></a>
driver is missing compiler or architecture information, gopls now
assumes a default value rather than failing to load package
information.</li>
<li>A fix for a minor bug in the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.14.0">new</a>
&quot;remove unused parameter&quot; refactoring: <a
href="https://redirect.github.com/golang/go/issues/63755">golang/go#63755</a>.
Notably, this bug was discovered via an automated report from someone
who had opted in to <a href="https://telemetry.go.dev/privacy">Go
telemetry</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="729e159c03"><code>729e159</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="38ed81a6b5"><code>38ed81a</code></a>
gopls/internal/regtest/marker: porting extract tests</li>
<li><a
href="bbf8380961"><code>bbf8380</code></a>
gopls/internal/regtest/marker: use golden diffs for suggested fixes</li>
<li><a
href="51df92b224"><code>51df92b</code></a>
go/ssa: two minor cleanups</li>
<li><a
href="e7fb31ad45"><code>e7fb31a</code></a>
internal/cmd/deadcode: rename -format to -f</li>
<li><a
href="c538b4e994"><code>c538b4e</code></a>
internal/cmd/deadcode: add -whylive=function flag</li>
<li><a
href="b753e58b84"><code>b753e58</code></a>
internal/lsp/helper: fix misspelled &quot;Code generated&quot;
comment</li>
<li><a
href="2638d66336"><code>2638d66</code></a>
internal/cmd/deadcode: omit package/func keywords in default output</li>
<li><a
href="118c362a56"><code>118c362</code></a>
gopls/internal/lsp/source: fix signatureHelp with pointer receivers</li>
<li><a
href="4124316da0"><code>4124316</code></a>
gopls/internal/lsp/cache: remove baseCtx from the View</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.14.0...v0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.14.0&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-18 12:18:36 -03:00
dependabot[bot]
3a552a9df5
feat(deps): bump golang.org/x/sync from 0.4.0 to 0.5.0 (#4408)
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.4.0 to
0.5.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="10739b037d"><code>10739b0</code></a>
all: update go directive to 1.18</li>
<li>See full diff in <a
href="https://github.com/golang/sync/compare/v0.4.0...v0.5.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/sync&package-manager=go_modules&previous-version=0.4.0&new-version=0.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 12:51:07 -03:00
dependabot[bot]
f20320b9e6
feat(deps): bump github.com/spf13/cobra from 1.7.0 to 1.8.0 (#4410)
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from
1.7.0 to 1.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/spf13/cobra/releases">github.com/spf13/cobra's
releases</a>.</em></p>
<blockquote>
<h2>v1.8.0</h2>
<h2> Features</h2>
<ul>
<li>Support usage as plugin for tools like kubectl by <a
href="https://github.com/nirs"><code>@​nirs</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2018">spf13/cobra#2018</a>
- this means that programs that utilize a &quot;plugin-like&quot;
structure have much better support and usage (like for completions,
command paths, etc.)</li>
<li>Move documentation sources to site/content by <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1428">spf13/cobra#1428</a></li>
<li>Add 'one required flag' group by <a
href="https://github.com/marevers"><code>@​marevers</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1952">spf13/cobra#1952</a>
- this includes a new <code>MarkFlagsOneRequired</code> API for flags
which can be used to mark a flag group as required and cause command
failure if at least one is not used when invoked.</li>
<li>Customizable error message prefix by <a
href="https://github.com/5ouma"><code>@​5ouma</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2023">spf13/cobra#2023</a>
- This adds the <code>SetErrPrefix</code> and <code>ErrPrefix</code>
APIs on the <code>Command</code> struct to allow for setting a custom
prefix for errors</li>
<li>feat: add getters for flag completions by <a
href="https://github.com/avirtopeanu-ionos"><code>@​avirtopeanu-ionos</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/1943">spf13/cobra#1943</a></li>
<li>Feature: allow running persistent run hooks of all parents by <a
href="https://github.com/vkhoroz"><code>@​vkhoroz</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2044">spf13/cobra#2044</a></li>
<li>Improve API to get flag completion function by <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in
<a
href="https://redirect.github.com/spf13/cobra/pull/2063">spf13/cobra#2063</a></li>
</ul>
<h2>🐛 Bug fixes</h2>
<ul>
<li>Fix typo in fish completions by <a
href="https://github.com/twpayne"><code>@​twpayne</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1945">spf13/cobra#1945</a></li>
<li>Fix grammar: 'allows to' by <a
href="https://github.com/supertassu"><code>@​supertassu</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1978">spf13/cobra#1978</a></li>
<li>powershell: escape variable with curly brackets by <a
href="https://github.com/Luap99"><code>@​Luap99</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1960">spf13/cobra#1960</a></li>
<li>Don't complete --help flag when flag parsing disabled by <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in
<a
href="https://redirect.github.com/spf13/cobra/pull/2061">spf13/cobra#2061</a></li>
<li>Replace all non-alphanumerics in active help env var program prefix
by <a href="https://github.com/scop"><code>@​scop</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1940">spf13/cobra#1940</a></li>
</ul>
<h2>🔧 Maintenance</h2>
<ul>
<li>build(deps): bump golangci/golangci-lint-action from 3.4.0 to 3.5.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/1971">spf13/cobra#1971</a></li>
<li>build(deps): bump golangci/golangci-lint-action from 3.5.0 to 3.6.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/1976">spf13/cobra#1976</a></li>
<li>build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/2021">spf13/cobra#2021</a></li>
<li>build(deps): bump actions/setup-go from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1934">spf13/cobra#1934</a></li>
<li>build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to
2.0.3 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2047">spf13/cobra#2047</a></li>
<li>build(deps): bump actions/checkout from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2028">spf13/cobra#2028</a></li>
<li>command: temporarily disable G602 due to <a
href="https://redirect.github.com/securego/gosec/issues/1005">securego/gosec#1005</a>
by <a href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2022">spf13/cobra#2022</a></li>
</ul>
<h2>🧪 Testing &amp; CI/CD</h2>
<ul>
<li>test: make fish_completions_test more robust by <a
href="https://github.com/branchvincent"><code>@​branchvincent</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/1980">spf13/cobra#1980</a></li>
<li>golangci: enable 'unused' and disable deprecated replaced by it by
<a href="https://github.com/umarcor"><code>@​umarcor</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/1983">spf13/cobra#1983</a></li>
<li>cleanup: minor corrections to unit tests by <a
href="https://github.com/JunNishimura"><code>@​JunNishimura</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/2003">spf13/cobra#2003</a></li>
<li>ci: test golang 1.21 by <a
href="https://github.com/nunoadrego"><code>@​nunoadrego</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2024">spf13/cobra#2024</a></li>
<li>Fix linter errors by <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in
<a
href="https://redirect.github.com/spf13/cobra/pull/2052">spf13/cobra#2052</a></li>
<li>Add tests for flag completion registration by <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> in
<a
href="https://redirect.github.com/spf13/cobra/pull/2053">spf13/cobra#2053</a></li>
</ul>
<h2>✏️ Documentation</h2>
<ul>
<li>doc: fix typo, Deperecated -&gt; Deprecated by <a
href="https://github.com/callthingsoff"><code>@​callthingsoff</code></a>
in <a
href="https://redirect.github.com/spf13/cobra/pull/2000">spf13/cobra#2000</a></li>
<li>Add notes to doc about the execution condition of *PreRun and
*PostRun functions by <a
href="https://github.com/haoming29"><code>@​haoming29</code></a> in <a
href="https://redirect.github.com/spf13/cobra/pull/2041">spf13/cobra#2041</a></li>
</ul>
<hr />
<p>Thank you everyone who contributed to this release and all your hard
work! Cobra and this community would never be possible without all of
you!!!! 🐍</p>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0">https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a0a6ae020b"><code>a0a6ae0</code></a>
Improve API to get flag completion function (<a
href="https://redirect.github.com/spf13/cobra/issues/2063">#2063</a>)</li>
<li><a
href="890302a35f"><code>890302a</code></a>
Support usage as plugin for tools like kubectl (<a
href="https://redirect.github.com/spf13/cobra/issues/2018">#2018</a>)</li>
<li><a
href="48cea5c87b"><code>48cea5c</code></a>
build(deps): bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/spf13/cobra/issues/2028">#2028</a>)</li>
<li><a
href="22953d8845"><code>22953d8</code></a>
Replace all non-alphanumerics in active help env var program prefix (<a
href="https://redirect.github.com/spf13/cobra/issues/1940">#1940</a>)</li>
<li><a
href="00b68a1c26"><code>00b68a1</code></a>
Add tests for flag completion registration (<a
href="https://redirect.github.com/spf13/cobra/issues/2053">#2053</a>)</li>
<li><a
href="b711e8760b"><code>b711e87</code></a>
Don't complete --help flag when flag parsing disabled (<a
href="https://redirect.github.com/spf13/cobra/issues/2061">#2061</a>)</li>
<li><a
href="8b1eba4761"><code>8b1eba4</code></a>
Fix linter errors (<a
href="https://redirect.github.com/spf13/cobra/issues/2052">#2052</a>)</li>
<li><a
href="4cafa37bc4"><code>4cafa37</code></a>
Allow running persistent run hooks of all parents (<a
href="https://redirect.github.com/spf13/cobra/issues/2044">#2044</a>)</li>
<li><a
href="5c962a221e"><code>5c962a2</code></a>
build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3
(<a
href="https://redirect.github.com/spf13/cobra/issues/2047">#2047</a>)</li>
<li><a
href="efe8fa3e44"><code>efe8fa3</code></a>
build(deps): bump actions/setup-go from 3 to 4 (<a
href="https://redirect.github.com/spf13/cobra/issues/1934">#1934</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/spf13/cobra/compare/v1.7.0...v1.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/cobra&package-manager=go_modules&previous-version=1.7.0&new-version=1.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 12:44:28 -03:00
dependabot[bot]
a9b3d49e59
feat(deps): bump golang.org/x/text from 0.13.0 to 0.14.0 (#4409)
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.13.0 to
0.14.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="6c97a165dd"><code>6c97a16</code></a>
all: update go directive to 1.18</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.13.0...v0.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-11-06 12:44:16 -03:00
dependabot[bot]
3009ac1989 feat(deps): bump github.com/docker/docker
Bumps [github.com/docker/docker](https://github.com/docker/docker) from 24.0.6+incompatible to 24.0.7+incompatible.
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](https://github.com/docker/docker/compare/v24.0.6...v24.0.7)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 13:42:51 -03:00
dependabot[bot]
8cb018bc42 feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.33.1 to 2.34.0
Bumps [github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from 2.33.1 to 2.34.0.
- [Release notes](https://github.com/goreleaser/nfpm/releases)
- [Changelog](https://github.com/goreleaser/nfpm/blob/main/.goreleaser.yml)
- [Commits](https://github.com/goreleaser/nfpm/compare/v2.33.1...v2.34.0)

---
updated-dependencies:
- dependency-name: github.com/goreleaser/nfpm/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-30 11:49:56 -03:00
dependabot[bot]
b1271d2559 feat(deps): bump github.com/google/uuid from 1.3.1 to 1.4.0
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.3.1 to 1.4.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](https://github.com/google/uuid/compare/v1.3.1...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-27 08:11:55 -03:00
dependabot[bot]
5071b5ed39 feat(deps): bump google.golang.org/grpc from 1.58.2 to 1.58.3
Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.58.2 to 1.58.3.
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](https://github.com/grpc/grpc-go/compare/v1.58.2...v1.58.3)

---
updated-dependencies:
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-10-25 22:52:03 -03:00
dependabot[bot]
b233c68349
feat(deps): bump github.com/xanzy/go-gitlab from 0.93.1 to 0.93.2 (#4381)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.93.1 to 0.93.2.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e78abac2dc"><code>e78abac</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1825">#1825</a>
from stevexuereb/fix/application-settings</li>
<li><a
href="ddc846cfa7"><code>ddc846c</code></a>
fix: application settings marshalling</li>
<li><a
href="b6f640592c"><code>b6f6405</code></a>
Rename master to main</li>
<li><a
href="9886bf83fa"><code>9886bf8</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1810">#1810</a>
from oSoloTurk/master</li>
<li><a
href="5553955487"><code>5553955</code></a>
Minor tweaks preparing to merge</li>
<li><a
href="61a2bebe76"><code>61a2beb</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1824">#1824</a>
from xanzy/feat/notes</li>
<li><a
href="bb35e1a383"><code>bb35e1a</code></a>
Fixes <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1822">#1822</a></li>
<li><a
href="8d77cca289"><code>8d77cca</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1809">#1809</a>
from PatrickRice-KSC/add-notification-events</li>
<li><a
href="e93019f2f0"><code>e93019f</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1820">#1820</a>
from xuxiaowei-com-cn/xuxiaowei/appearance</li>
<li><a
href="6ee683f42d"><code>6ee683f</code></a>
Refactor PR so it matches the rest of the package</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.93.1...v0.93.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.93.1&new-version=0.93.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-23 08:27:09 -03:00
dependabot[bot]
a00c3db123
feat(deps): bump github.com/google/ko from 0.14.1 to 0.15.0 (#4373)
Bumps [github.com/google/ko](https://github.com/google/ko) from 0.14.1
to 0.15.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/ko/releases">github.com/google/ko's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.0</h2>
<h2>What's Changed</h2>
<ul>
<li>implement dumb cache for images by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1102">ko-build/ko#1102</a></li>
<li>fixed typo in configuration.md by <a
href="https://github.com/samlaf"><code>@​samlaf</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li>
<li>pkg/commands: fix dropped errors by <a
href="https://github.com/alrs"><code>@​alrs</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li>
<li>ci: add govulncheck by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1110">ko-build/ko#1110</a></li>
<li>chore: remove refs to deprecated io/ioutil by <a
href="https://github.com/testwill"><code>@​testwill</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li>
<li>Update install docs to install ko using Scoop by <a
href="https://github.com/pgrunm"><code>@​pgrunm</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li>
<li>include go build output in build error by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1127">ko-build/ko#1127</a></li>
<li>Use go1.21, clean up ci and drop go1.19 by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1137">ko-build/ko#1137</a></li>
<li>Update e2e.yaml by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1141">ko-build/ko#1141</a></li>
<li>handle newfound lint errors by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1142">ko-build/ko#1142</a></li>
<li>fix test broken by lint fix by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1143">ko-build/ko#1143</a></li>
<li>Bump actions/checkout from 3.6.0 to 4.0.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1136">ko-build/ko#1136</a></li>
<li>fix env var for go env by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1140">ko-build/ko#1140</a></li>
<li>docs: add docs for TF and Lambda by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1139">ko-build/ko#1139</a></li>
<li>docs: add Lambda and TF pages to sidebar by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1144">ko-build/ko#1144</a></li>
<li>include example using go packages by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1145">ko-build/ko#1145</a></li>
<li>fix the release workflow and install instructions by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1150">ko-build/ko#1150</a></li>
<li>update missing places that was using go1.20 by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1163">ko-build/ko#1163</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/samlaf"><code>@​samlaf</code></a> made
their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1105">ko-build/ko#1105</a></li>
<li><a href="https://github.com/alrs"><code>@​alrs</code></a> made their
first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1109">ko-build/ko#1109</a></li>
<li><a href="https://github.com/testwill"><code>@​testwill</code></a>
made their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1092">ko-build/ko#1092</a></li>
<li><a href="https://github.com/pgrunm"><code>@​pgrunm</code></a> made
their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1118">ko-build/ko#1118</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0">https://github.com/ko-build/ko/compare/v0.14.1...v0.15.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="31035ad202"><code>31035ad</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1164">#1164</a> from
ko-build/dependabot/go_modules/golang.org/x/net...</li>
<li><a
href="ba952fd091"><code>ba952fd</code></a>
Bump golang.org/x/net from 0.16.0 to 0.17.0</li>
<li><a
href="277f5d7435"><code>277f5d7</code></a>
update missing places that was using go1.20 (<a
href="https://redirect.github.com/google/ko/issues/1163">#1163</a>)</li>
<li><a
href="b8b3b21f83"><code>b8b3b21</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1162">#1162</a> from
ko-build/dependabot/go_modules/github.com/googl...</li>
<li><a
href="4890ab2887"><code>4890ab2</code></a>
Bump github.com/google/go-cmp from 0.5.9 to 0.6.0</li>
<li><a
href="30b62aee3f"><code>30b62ae</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1161">#1161</a> from
ko-build/dependabot/go_modules/github.com/spf13...</li>
<li><a
href="449bcb6192"><code>449bcb6</code></a>
Bump github.com/spf13/viper from 1.16.0 to 1.17.0</li>
<li><a
href="c543dd83cc"><code>c543dd8</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1160">#1160</a> from
ko-build/dependabot/go_modules/golang.org/x/too...</li>
<li><a
href="c1ae5f5ce4"><code>c1ae5f5</code></a>
Bump golang.org/x/tools from 0.13.0 to 0.14.0</li>
<li><a
href="e50d2fd5ff"><code>e50d2fd</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1159">#1159</a> from
ko-build/dependabot/go_modules/golang.org/x/syn...</li>
<li>Additional commits viewable in <a
href="https://github.com/google/ko/compare/v0.14.1...v0.15.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.14.1&new-version=0.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-17 12:47:47 -03:00
dependabot[bot]
8d121c8681
feat(deps): bump github.com/caarlos0/log from 0.4.3 to 0.4.4 (#4372)
Bumps [github.com/caarlos0/log](https://github.com/caarlos0/log) from
0.4.3 to 0.4.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/log/releases">github.com/caarlos0/log's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.4</h2>
<h2>Changelog</h2>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
<h2>v0.4.4</h2>
<h2>Changelog</h2>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="614b0a8e4b"><code>614b0a8</code></a>
chore(deps): bump github.com/charmbracelet/lipgloss from 0.9.0 to 0.9.1
(<a
href="https://redirect.github.com/caarlos0/log/issues/25">#25</a>)</li>
<li>See full diff in <a
href="https://github.com/caarlos0/log/compare/v0.4.3...v0.4.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/log&package-manager=go_modules&previous-version=0.4.3&new-version=0.4.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-16 08:18:55 -03:00
Carlos Alexandro Becker
1a243dfc0d
feat(deps): update go-github to v56
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-10-14 22:04:41 +00:00
dependabot[bot]
c72b730258
feat(deps): bump github.com/charmbracelet/lipgloss from 0.9.0 to 0.9.1 (#4367)
Bumps
[github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss)
from 0.9.0 to 0.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/lipgloss/releases">github.com/charmbracelet/lipgloss's
releases</a>.</em></p>
<blockquote>
<h2>v0.9.1</h2>
<p>This bugfix release changes the Table <code>Headers</code> API to
accept <code>[]string</code> for consistency with <code>Row</code> /
<code>Rows</code> and downgrades Lip Gloss to Go version
<code>v1.17</code>.</p>
<h2>What's Changed</h2>
<ul>
<li>Table Headers type from <code>[]any</code> → <code>[]string</code>
by <a href="https://github.com/maaslalani"><code>@​maaslalani</code></a>
in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/234">charmbracelet/lipgloss#234</a></li>
<li>Downgrade Lip Gloss to <code>v1.17</code> by <a
href="https://github.com/maaslalani"><code>@​maaslalani</code></a> in <a
href="https://redirect.github.com/charmbracelet/lipgloss/pull/234">charmbracelet/lipgloss#234</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1">https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f093bc1509"><code>f093bc1</code></a>
Make headers <code>[]string</code> (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/234">#234</a>)</li>
<li><a
href="42db873617"><code>42db873</code></a>
test(table): ensure README example works</li>
<li>See full diff in <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.9.0...v0.9.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/lipgloss&package-manager=go_modules&previous-version=0.9.0&new-version=0.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-14 18:57:21 -03:00
dependabot[bot]
35b0d4c0b5
feat(deps): bump github.com/caarlos0/log from 0.4.2 to 0.4.3 (#4366)
Bumps [github.com/caarlos0/log](https://github.com/caarlos0/log) from
0.4.2 to 0.4.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/log/releases">github.com/caarlos0/log's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.3</h2>
<h2>Changelog</h2>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f01ba34cc7"><code>f01ba34</code></a>
chore(deps): bump github.com/charmbracelet/lipgloss from 0.8.0 to 0.9.0
(<a
href="https://redirect.github.com/caarlos0/log/issues/24">#24</a>)</li>
<li><a
href="ea95b5bf18"><code>ea95b5b</code></a>
chore(deps): bump goreleaser/goreleaser-action from 4 to 5 (<a
href="https://redirect.github.com/caarlos0/log/issues/23">#23</a>)</li>
<li><a
href="273756e9f7"><code>273756e</code></a>
chore(deps): bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/caarlos0/log/issues/22">#22</a>)</li>
<li><a
href="f63049b4a4"><code>f63049b</code></a>
chore(deps): bump github.com/charmbracelet/lipgloss from 0.7.1 to 0.8.0
(<a
href="https://redirect.github.com/caarlos0/log/issues/21">#21</a>)</li>
<li>See full diff in <a
href="https://github.com/caarlos0/log/compare/v0.4.2...v0.4.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/log&package-manager=go_modules&previous-version=0.4.2&new-version=0.4.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-14 18:50:22 -03:00
dependabot[bot]
c15ebb8703
feat(deps): bump golang.org/x/net from 0.16.0 to 0.17.0 (#4365)
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.16.0 to
0.17.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b225e7ca6d"><code>b225e7c</code></a>
http2: limit maximum handler goroutines to MaxConcurrentStreams</li>
<li>See full diff in <a
href="https://github.com/golang/net/compare/v0.16.0...v0.17.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/net&package-manager=go_modules&previous-version=0.16.0&new-version=0.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-13 15:34:49 -03:00
dependabot[bot]
766a3f2d90
feat(deps): bump github.com/charmbracelet/lipgloss from 0.8.0 to 0.9.0 (#4364)
Bumps
[github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss)
from 0.8.0 to 0.9.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/lipgloss/releases">github.com/charmbracelet/lipgloss's
releases</a>.</em></p>
<blockquote>
<h2>v0.9.0</h2>
<h1>My, how the tables have turned</h1>
<p>Now you can draw <code>Table</code>s with Lip Gloss! 💅</p>
<!-- raw HTML omitted -->
<p>View <a
href="https://github.com/charmbracelet/lipgloss/tree/master/examples/table/pokemon/main.go">the
source code</a>.</p>
<h2>Let's get started</h2>
<pre lang="go"><code>import
&quot;github.com/charmbracelet/lipgloss/table&quot;
</code></pre>
<p>Define some rows of data.</p>
<pre lang="go"><code>rows := [][]string{
    {&quot;Chinese&quot;, &quot;您好&quot;, &quot;你好&quot;},
    {&quot;Japanese&quot;, &quot;こんにちは&quot;, &quot;やあ&quot;},
    {&quot;Arabic&quot;, &quot;أهلين&quot;, &quot;أهلا&quot;},
    {&quot;Russian&quot;, &quot;Здравствуйте&quot;, &quot;Привет&quot;},
    {&quot;Spanish&quot;, &quot;Hola&quot;, &quot;¿Qué tal?&quot;},
}
</code></pre>
<p>Use the table package to style and render the table.</p>
<pre lang="go"><code>t := table.New().
    Border(lipgloss.NormalBorder()).

BorderStyle(lipgloss.NewStyle().Foreground(lipgloss.Color(&quot;99&quot;))).
    StyleFunc(func(row, col int) lipgloss.Style {
        switch {
        case row == 0:
            return HeaderStyle
        case row%2 == 0:
            return EvenRowStyle
        default:
            return OddRowStyle
        }
    }).
Headers(&quot;LANGUAGE&quot;, &quot;FORMAL&quot;, &quot;INFORMAL&quot;).
    Rows(rows...)
<p>// You can also add tables row-by-row
t.Row(&quot;English&quot;, &quot;You look absolutely fabulous.&quot;,
&quot;How's it going?&quot;)
</code></pre></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4476263d05"><code>4476263</code></a>
Feature: Tables (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/218">#218</a>)</li>
<li><a
href="408dcf3b9e"><code>408dcf3</code></a>
feat: add <code>Middle</code> borders (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/230">#230</a>)</li>
<li><a
href="93cd5e0d35"><code>93cd5e0</code></a>
feat: bump minimum go version to 1.18 (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/216">#216</a>)</li>
<li><a
href="b766f24d45"><code>b766f24</code></a>
feat(deps): bump github.com/mattn/go-runewidth from 0.0.14 to 0.0.15 (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/215">#215</a>)</li>
<li><a
href="b0eb95dbc1"><code>b0eb95d</code></a>
fix(border): both GetHorizontalBorderSize and GetVerticalBorderSize (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/225">#225</a>)</li>
<li><a
href="2d2a577e2d"><code>2d2a577</code></a>
fix(border): GetBorderRightSize (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/224">#224</a>)</li>
<li><a
href="18166eaa8a"><code>18166ea</code></a>
chore(deps): bump actions/checkout from 3 to 4 (<a
href="https://redirect.github.com/charmbracelet/lipgloss/issues/222">#222</a>)</li>
<li>See full diff in <a
href="https://github.com/charmbracelet/lipgloss/compare/v0.8.0...v0.9.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/lipgloss&package-manager=go_modules&previous-version=0.8.0&new-version=0.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-11 09:05:53 -03:00
Carlos Alexandro Becker
6b00bb9664
refactor: use ordered.First (#4362) 2023-10-10 23:16:27 -03:00
dependabot[bot]
8203f919b0
feat(deps): bump golang.org/x/oauth2 from 0.12.0 to 0.13.0 (#4352)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from
0.12.0 to 0.13.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3c5dbf08cc"><code>3c5dbf0</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="11625ccb95"><code>11625cc</code></a>
google: add authorized_user conditional to
Credentials.UniverseDomain</li>
<li><a
href="8d6d45b6cd"><code>8d6d45b</code></a>
google: add Credentials.UniverseDomain to support TPC</li>
<li><a
href="43b6a7ba19"><code>43b6a7b</code></a>
google: adding support for external account authorized user</li>
<li><a
href="14b275c918"><code>14b275c</code></a>
oauth2: workaround misspelling of verification_uri</li>
<li><a
href="18352fc433"><code>18352fc</code></a>
google/internal/externalaccount: adding BYOID Metrics</li>
<li><a
href="9095a51613"><code>9095a51</code></a>
oauth2: clarify error if endpoint missing DeviceAuthURL</li>
<li><a
href="2d9e4a2adf"><code>2d9e4a2</code></a>
oauth2/google: remove meta validations for aws external credentials</li>
<li><a
href="55cd552a36"><code>55cd552</code></a>
oauth2: support PKCE</li>
<li><a
href="e3fb0fb3af"><code>e3fb0fb</code></a>
oauth2: support device flow</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.12.0...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-10 09:54:00 -03:00
dependabot[bot]
53189c1e00
feat(deps): bump golang.org/x/tools from 0.13.0 to 0.14.0 (#4359)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.13.0
to 0.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.13.2</h2>
<p><code>golang/go#61813</code></p>
<h2>gopls/v0.13.1</h2>
<p>This is a patch release to fix three issues with the v0.13.0
release:</p>
<ul>
<li><a
href="https://redirect.github.com/golang/go/issues/61670">golang/go#61670</a>:
broken imports due to corrupted export data</li>
<li><a
href="https://redirect.github.com/golang/go/issues/61693">golang/go#61693</a>:
panic in stubmethods with variadic args</li>
<li><a
href="https://redirect.github.com/golang/go/issues/61692">golang/go#61692</a>:
gofumpt integration panics when used with the new go directive syntax in
go.mod files (e.g. <code>go 1.21rc3</code>)</li>
</ul>
<p>Incidentally, this release also picks up a few fixes for references
and renaming. See the <a
href="https://github.com/golang/go/milestone/325?closed=1">milestone</a>
for the complete list of resolved issues.</p>
<p>Thank you to all who reported bugs. If are still encountering
problems, please <a
href="https://github.com/golang/go/issues/new?assignees=&amp;labels=gopls+Tools&amp;projects=&amp;template=03-gopls.md&amp;title=x%2Ftools%2Fgopls%3A+">file
an issue</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3f4194ee29"><code>3f4194e</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="1e4ce7c30c"><code>1e4ce7c</code></a>
internal/refactor/inline: yet more tweaks to everything test</li>
<li><a
href="ee20ddf1f7"><code>ee20ddf</code></a>
internal/refactor/inline: permit return conversions in tailcall</li>
<li><a
href="db1d1e0d33"><code>db1d1e0</code></a>
gopls/internal/lsp: go to definition from embed directive</li>
<li><a
href="2be977ecc5"><code>2be977e</code></a>
internal/refactor/inline: work around channel type misformatting</li>
<li><a
href="0ba9c8439e"><code>0ba9c84</code></a>
internal/fuzzy: several improvements for symbol matching</li>
<li><a
href="c2725ad840"><code>c2725ad</code></a>
gopls: update x/telemetry dependency</li>
<li><a
href="e8722c0103"><code>e8722c0</code></a>
go/types/internal/play: show types.Selection information</li>
<li><a
href="a819c616c8"><code>a819c61</code></a>
internal/refactor/inline: eliminate unnecessary binding decl</li>
<li><a
href="102b64b540"><code>102b64b</code></a>
internal/refactor/inline: tweak everything-test docs again</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.13.0...v0.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-10 09:49:58 -03:00
dependabot[bot]
3034bfe7fb
feat(deps): bump github.com/xanzy/go-gitlab from 0.93.0 to 0.93.1 (#4358)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.93.0 to 0.93.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="c7a9790526"><code>c7a9790</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1817">#1817</a>
from diggerhq/fix-list-merge-reques-diffs-typo</li>
<li><a
href="99e75d5d0d"><code>99e75d5</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1818">#1818</a>
from airclovis/feat-add-time-spent-summary</li>
<li><a
href="68d5594373"><code>68d5594</code></a>
feature: Add summary support in AddSpentTimeOptions</li>
<li><a
href="822d1b5bc0"><code>822d1b5</code></a>
Update merge_requests.go</li>
<li><a
href="2ae422a8b2"><code>2ae422a</code></a>
fix typo ListMergeRequesDiffs -&gt; ListMergeRequestDiffs</li>
<li>See full diff in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.93.0...v0.93.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.93.0&new-version=0.93.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-10 09:36:01 -03:00
Carlos Alexandro Becker
c43a50cbcb
feat(deps): update charmbracelet/keygen
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-10-07 15:17:16 +00:00
dependabot[bot]
f9cc204afc
feat(deps): bump golang.org/x/sync from 0.3.0 to 0.4.0 (#4353)
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.3.0 to
0.4.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="22ba2078e1"><code>22ba207</code></a>
singleflight: add panicError.Unwrap method</li>
<li>See full diff in <a
href="https://github.com/golang/sync/compare/v0.3.0...v0.4.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/sync&package-manager=go_modules&previous-version=0.3.0&new-version=0.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-06 11:11:49 -03:00
dependabot[bot]
0ccd8f46ab
feat(deps): bump github.com/invopop/jsonschema from 0.11.0 to 0.12.0 (#4348)
Bumps
[github.com/invopop/jsonschema](https://github.com/invopop/jsonschema)
from 0.11.0 to 0.12.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9b6bb6e8f1"><code>9b6bb6e</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/108">#108</a>
from invopop/schema-property-alias</li>
<li><a
href="f45517cf07"><code>f45517c</code></a>
Typo</li>
<li><a
href="ab81e2aa64"><code>ab81e2a</code></a>
Fixing linting</li>
<li><a
href="933814a23a"><code>933814a</code></a>
support for JSONSchemaAlias y JSONSchemaProperty methods</li>
<li><a
href="0108689b9f"><code>0108689</code></a>
Support for JSONSchemaAlias method</li>
<li><a
href="12cbc49539"><code>12cbc49</code></a>
Updating test output with new number parsing</li>
<li><a
href="cada51da56"><code>cada51d</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/96">#96</a>
from Hotdawg/regex_with_equals</li>
<li><a
href="9d905a2555"><code>9d905a2</code></a>
Limit split on genericKeywords</li>
<li><a
href="080d97dda9"><code>080d97d</code></a>
Merge branch 'invopop:main' into regex_with_equals</li>
<li><a
href="8a098cbcb6"><code>8a098cb</code></a>
Fix linter issue</li>
<li>See full diff in <a
href="https://github.com/invopop/jsonschema/compare/v0.11.0...v0.12.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/invopop/jsonschema&package-manager=go_modules&previous-version=0.11.0&new-version=0.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-05 09:48:15 -03:00
dependabot[bot]
25a8aae4a6
feat(deps): bump github.com/xanzy/go-gitlab from 0.92.3 to 0.93.0 (#4349)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.92.3 to 0.93.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e10421747d"><code>e104217</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1814">#1814</a>
from timofurrer/feature/user-pat</li>
<li><a
href="bce1c13bb8"><code>bce1c13</code></a>
Support CreatePersonalAccessTokenForCurrentUser endpoint</li>
<li><a
href="285184db25"><code>285184d</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1813">#1813</a>
from mitar/patch-1</li>
<li><a
href="9085e187c1"><code>9085e18</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1815">#1815</a>
from xuxiaowei-com-cn/xuxiaowei/DeleteProjectArtifacts</li>
<li><a
href="6aff7b6843"><code>6aff7b6</code></a>
 delete artifacts eligible for deletion in a project</li>
<li><a
href="c92eb1bf2c"><code>c92eb1b</code></a>
Make sure response is fully consumed.</li>
<li><a
href="8cb9c32b5f"><code>8cb9c32</code></a>
Fixes <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1811">#1811</a></li>
<li>See full diff in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.92.3...v0.93.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.92.3&new-version=0.93.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-05 09:47:51 -03:00
dependabot[bot]
614e562b75
feat(deps): bump github.com/invopop/jsonschema from 0.9.0 to 0.11.0 (#4343)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps
[github.com/invopop/jsonschema](https://github.com/invopop/jsonschema)
from 0.9.0 to 0.11.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ab48bdbf03"><code>ab48bdb</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/105">#105</a>
from cloudquery/fix/zero-max-min-length</li>
<li><a
href="d10980697d"><code>d109806</code></a>
fix unsigned int handling (0 is a valid value)</li>
<li><a
href="2bf120dd69"><code>2bf120d</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/94">#94</a>
from evilnoxx/main</li>
<li><a
href="d8087c4d69"><code>d8087c4</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/103">#103</a>
from cloudquery/fix/recurse-array-unprocessed-only</li>
<li><a
href="9c0d982c4f"><code>9c0d982</code></a>
process only unprocessed tags in recursion</li>
<li><a
href="73900b4415"><code>73900b4</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/101">#101</a>
from cloudquery/fix/array-item-tags</li>
<li><a
href="6f925514cc"><code>6f92551</code></a>
move to separate test</li>
<li><a
href="5fe0827aab"><code>5fe0827</code></a>
use toJSONNumber</li>
<li><a
href="7c6ea7a4bd"><code>7c6ea7a</code></a>
tests</li>
<li><a
href="72e420b2e3"><code>72e420b</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/100">#100</a>
from cloudquery/fix/min-max-ptr</li>
<li>Additional commits viewable in <a
href="https://github.com/invopop/jsonschema/compare/v0.9.0...v0.11.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/invopop/jsonschema&package-manager=go_modules&previous-version=0.9.0&new-version=0.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-04 09:34:24 -03:00
dependabot[bot]
687db06e12
feat(deps): bump github.com/disgoorg/disgo from 0.16.9 to 0.16.11 (#4337)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.9 to 0.16.11.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.11 - App Subscriptions</h2>
<h2>What's Changed</h2>
<ul>
<li>Add app subscriptions by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/319">disgoorg/disgo#319</a></li>
<li>Update Applications by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/290">disgoorg/disgo#290</a></li>
<li>Add <code>GuildScheduledEventID</code> to
<code>StageInstanceCreate</code> by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/215">disgoorg/disgo#215</a></li>
<li>Fix voice resuming sending <code>OpcodeIdentify</code> by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="4d0bbb2a45</a></li>
<li>Fix inconsistent interaction response types &amp; response method
naming by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="d0d82cecaa</a></li>
</ul>
<h2>Breaking Changes</h2>
<ul>
<li><code>CreateModal</code> -&gt; <code>Modal</code>,
<code>Result</code> -&gt; <code>AutocompleteResult</code></li>

<li><code>InteractionResponseTypeApplicationCommandAutocompleteResult</code>
-&gt; <code>InteractionResponseTypeAutocompleteResult</code></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.10...v0.16.11">https://github.com/disgoorg/disgo/compare/v0.16.10...v0.16.11</a></p>
<h2>v0.16.10 - Select Menu Default Values</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix a regression where voice channels weren't handled as message
channels by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/310">disgoorg/disgo#310</a></li>
<li>Add default values to select menus by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/315">disgoorg/disgo#315</a></li>
<li>Add <code>DefaultThreadRateLimitPerUser</code> to channel creates by
<a href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/314">disgoorg/disgo#314</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.9...v0.16.10">https://github.com/disgoorg/disgo/compare/v0.16.9...v0.16.10</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="44dfd8e2f6"><code>44dfd8e</code></a>
fix test example</li>
<li><a
href="d0d82cecaa"><code>d0d82ce</code></a>
fix inconsistent interaction response types &amp; response method
naming</li>
<li><a
href="2570fd3a42"><code>2570fd3</code></a>
Add app subscriptions (<a
href="https://redirect.github.com/disgoorg/disgo/issues/319">#319</a>)</li>
<li><a
href="4d0bbb2a45"><code>4d0bbb2</code></a>
fix voice resuming sending OpcodeIdentify</li>
<li><a
href="86c1d26706"><code>86c1d26</code></a>
Update Applications (<a
href="https://redirect.github.com/disgoorg/disgo/issues/290">#290</a>)</li>
<li><a
href="012c4f50d6"><code>012c4f5</code></a>
Add GuildScheduledEventID to StageInstanceCreate (<a
href="https://redirect.github.com/disgoorg/disgo/issues/215">#215</a>)</li>
<li><a
href="c9986e891d"><code>c9986e8</code></a>
Add default values to select menus (<a
href="https://redirect.github.com/disgoorg/disgo/issues/315">#315</a>)</li>
<li><a
href="3129dd50ea"><code>3129dd5</code></a>
Add DefaultThreadRateLimitPerUser to channel creates (<a
href="https://redirect.github.com/disgoorg/disgo/issues/314">#314</a>)</li>
<li><a
href="16e4552c54"><code>16e4552</code></a>
Fix voice and stage channel structure (<a
href="https://redirect.github.com/disgoorg/disgo/issues/310">#310</a>)</li>
<li><a
href="9880cbcca4"><code>9880cbc</code></a>
Add missing func to interface</li>
<li>Additional commits viewable in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.9...v0.16.11">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.9&new-version=0.16.11)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-04 09:33:55 -03:00
dependabot[bot]
2fb93f346e
feat(deps): bump github.com/xanzy/go-gitlab from 0.91.1 to 0.92.3 (#4338)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.91.1 to 0.92.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2692fa8f0c"><code>2692fa8</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1805">#1805</a>
from takp/fix-shared_runners_setting-for-group-resource</li>
<li><a
href="4260457203"><code>4260457</code></a>
Reorder fields to match the docs</li>
<li><a
href="6c2d2284b6"><code>6c2d228</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1804">#1804</a>
from billiechar/add-repository-storage</li>
<li><a
href="89ff954009"><code>89ff954</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1807">#1807</a>
from pullpo-io/master</li>
<li><a
href="618236b6f2"><code>618236b</code></a>
Remove blank line</li>
<li><a
href="91f2456166"><code>91f2456</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1808">#1808</a>
from GaikwadPratik/mr-diff-path-fix</li>
<li><a
href="f0362ede80"><code>f0362ed</code></a>
fix: correction in rest end point path</li>
<li><a
href="79f8c53d44"><code>79f8c53</code></a>
Support <code>shared_runners_setting</code> in Group response</li>
<li><a
href="2d3576e486"><code>2d3576e</code></a>
Add ObjectAttributes.Name to PipelineEvent</li>
<li><a
href="3a1cb8bd94"><code>3a1cb8b</code></a>
Add repository storage to forked details</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.91.1...v0.92.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.91.1&new-version=0.92.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-10-04 09:33:43 -03:00
Carlos Alexandro Becker
4fce326d55
feat(deps): bump github.com/goreleaser/nfpm/v2 from v2.33.0 to v2.33.1
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-22 02:49:05 +00:00
Carlos Alexandro Becker
2f351a6ece
feat(deps): bump github.com/invopop/jsonschema from 0.8.0 to 0.9.0
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-22 02:17:31 +00:00
dependabot[bot]
e8aa640dac
feat(deps): bump golang.org/x/tools from 0.12.0 to 0.13.0 (#4315)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.12.0
to 0.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.13.0</h2>
<p><strong>These are release notes are identical to that of
gopls@v0.13.0-pre.3. Thanks to all who tested the
prerelease!</strong></p>
<pre><code>go install golang.org/x/tools/gopls@v0.13.0
</code></pre>
<p>This release fixes several bugs and mitigates a few performance
regressions. It also somewhat reduces the latency and CPU cost of most
operations, and includes a few small additional features.</p>
<h1>Performance improvements</h1>
<p>While <a href="mailto:gopls@v0.12.x">gopls@v0.12.x</a> drastically
reduced memory usage, several operations got around 50% slower due to
additional I/O reading from the filesystem and time spent decoding
indexes. This release optimizes those additional operations to (in most
cases) achieve parity or better with the equivalent operation in
gopls@v0.11.0. Additionally, this release reduces total CPU while typing
or performing common operations.</p>
<h2>Faster code actions</h2>
<p>This release includes a particularly large performance improvement in
the evaluation of code actions (including formatting/goimports on save).
In the past, there have been several reasons why this operation was
expensive -- VS Code users may recognize the <code>getting code actions
from &quot;Go&quot;</code> pop-up. This release fundamentally changes
the way code actions are evaluated so that almost all of the work is
pre-computed. As a result, formatting and adding or removing imports on
save should be much faster.</p>
<h2>Analysis performance</h2>
<p>A notable exception to CPU performance parity with gopls@v0.11.0 is
running static analysis. In this case, the additional cost incurred by
<a href="mailto:gopls@v0.12.x">gopls@v0.12.x</a> was not a regression,
but rather the cost of analyzing many more packages to enable
&quot;deep&quot; static analysis (see &quot;Improved static
analysis&quot; in the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.12.0">gopls@v0.12.0
release notes</a>.</p>
<p>In smaller repositories, the cost of this additional analysis is
negligible -- analysis does not run until you stop typing, and typically
just re-evaluates the changed package. However, it was discovered that
in large workspaces that import low-level packages with a very large API
surface (such as a cloud provider SDK or proto library), certain
quadratic factors involved with the encoding/decoding of analysis
results can dominate the cost of analysis, and result in enormous
resource consumption: overloading the CPU and exhausting all memory.</p>
<p>This release partially mitigates those quadratic factors,
significantly reducing their cost and limiting concurrency so that they
do not exhaust all resources. However, fully eliminating these factors
will require additional work to fix their quadratic nature. Until that
is done, analysis may continue to be costly on certain repos, especially
if <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#staticcheck-bool"><code>&quot;staticcheck&quot;</code></a>
is enabled (because staticcheck does more deep analysis than the default
set of analyzers).</p>
<p>In the meantime, a notification is added to make you aware when
analysis is slow, and provide an update on the progress of indexing
&quot;deep&quot; analysis results. Canceling this notification will
cancel the ongoing analysis, but it will resume after the next change.
If you don't want to see these notifications, you can set the new <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#analysisprogressreporting-bool"><code>&quot;analysisProgressReporting&quot;</code></a>
setting to <code>&quot;false&quot;</code>.
<img
src="https://github.com/golang/tools/assets/57144380/4335a3c9-245b-409d-ab5c-5bbb650b7234"
alt="image" />.</p>
<h1>New Features</h1>
<h2>Highlight deprecated symbols</h2>
<p>Deprecated symbols and packages are now marked as such. To turn off
this feature, disable the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/analyzers.md#deprecated"><code>&quot;deprecated&quot;</code></a>
analysis.</p>
<p><img
src="https://github.com/golang/tools/assets/57144380/f6714035-f37b-487a-a110-591388bb5677"
alt="image" /></p>
<h2>Stub methods to fix missing method errors</h2>
<p>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/analyzers.md#stubmethods"><code>&quot;stubmethods&quot;</code></a>
refactoring is now available as a quick-fix for errors related to
missing methods.
<img
src="https://github.com/golang/tools/assets/57144380/715c3025-8beb-4cd5-bb8c-970be197b897"
alt="image" /></p>
<h2>Improvements to function extraction</h2>
<p>Function extraction now puts <code>context.Context</code> parameters
first in the resulting extracted function. See <a
href="https://redirect.github.com/golang/go/issues/60738">golang/go#60738</a>
for details.</p>
<h2>Improvements to the embeddirective analyzer</h2>
<p>The embed directive analyzer now verifies the location of
<code>//go:embed</code> directives, and provides a quick-fix to add
missing <code>&quot;embed&quot;</code> imports.
<img
src="https://github.com/golang/tools/assets/57144380/acbe8599-3a2d-40cd-856e-3451ea03c939"
alt="image" /></p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b5e55d1984"><code>b5e55d1</code></a>
go/analysis/analysistest: give better hint in SuggestedFix
assertion</li>
<li><a
href="a807ccf39a"><code>a807ccf</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="21090a2aa8"><code>21090a2</code></a>
gopls/internal/lsp/cache: use persistent.Set in a couple places</li>
<li><a
href="38b898b246"><code>38b898b</code></a>
internal/persistent: add Set</li>
<li><a
href="44f7796438"><code>44f7796</code></a>
gopls: add and enable the slog analyzer</li>
<li><a
href="2c6ba93996"><code>2c6ba93</code></a>
gopls: tidy for 1.17+</li>
<li><a
href="5a9656936d"><code>5a96569</code></a>
gopls/internal/lsp/cmd: don't use x/exp/slices</li>
<li><a
href="77c6ac601f"><code>77c6ac6</code></a>
gopls/internal/telemetry: don't schedule the next upload</li>
<li><a
href="010e045c4e"><code>010e045</code></a>
internal/persistent: use generics</li>
<li><a
href="a1a928ddbe"><code>a1a928d</code></a>
gopls: remove dead code</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.12.0...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it,
as requested by @caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-21 09:22:02 -03:00
dependabot[bot]
d5766b264a
feat(deps): bump golang.org/x/oauth2 from 0.11.0 to 0.12.0 (#4312)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from
0.11.0 to 0.12.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="07085280e4"><code>0708528</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="a835fc4358"><code>a835fc4</code></a>
oauth2: move global auth style cache to be per-Config</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.11.0...v0.12.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.11.0&new-version=0.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it,
as requested by @caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-20 11:32:20 -03:00
dependabot[bot]
f012ac6214
feat(deps): bump code.gitea.io/sdk/gitea from 0.15.1 to 0.16.0 (#4313)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps code.gitea.io/sdk/gitea from 0.15.1 to 0.16.0.


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=code.gitea.io/sdk/gitea&package-manager=go_modules&previous-version=0.15.1&new-version=0.16.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it,
as requested by @caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-20 11:32:07 -03:00
dependabot[bot]
32ab7762be
feat(deps): bump github.com/disgoorg/disgo from 0.16.8 to 0.16.9 (#4316)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.8 to 0.16.9.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.9 - Custom Status</h2>
<h2>What's Changed</h2>
<ul>
<li>Add support for setting a custom status by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/295">disgoorg/disgo#295</a></li>
<li>Add role subscriptions by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/218">disgoorg/disgo#218</a></li>
<li>Add <code>IntegrationType</code> to
<code>OptionalAuditLogEntryInfo</code> by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/300">disgoorg/disgo#300</a></li>
<li>Add guild navigation mentions by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/286">disgoorg/disgo#286</a></li>
<li>Add super reactions by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/291">disgoorg/disgo#291</a></li>
<li>Add activity opts (<code>WithActivityState</code>) by <a
href="https://github.com/topi314"><code>@​topi314</code></a> and <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/297">disgoorg/disgo#297</a></li>
<li>Add error handler to router by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="ed27e154d0</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.8...v0.16.9">https://github.com/disgoorg/disgo/compare/v0.16.8...v0.16.9</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="cdef17ea69"><code>cdef17e</code></a>
Add super reactions (<a
href="https://redirect.github.com/disgoorg/disgo/issues/291">#291</a>)</li>
<li><a
href="16c4e0a4d8"><code>16c4e0a</code></a>
Add guild navigation mentions (<a
href="https://redirect.github.com/disgoorg/disgo/issues/286">#286</a>)</li>
<li><a
href="0feca769e6"><code>0feca76</code></a>
Add IntegrationType to OptionalAuditLogEntryInfo (<a
href="https://redirect.github.com/disgoorg/disgo/issues/300">#300</a>)</li>
<li><a
href="ed27e154d0"><code>ed27e15</code></a>
add error handler to router (<a
href="https://redirect.github.com/disgoorg/disgo/issues/299">#299</a>)</li>
<li><a
href="7bf4cb16be"><code>7bf4cb1</code></a>
Add role subscriptions (<a
href="https://redirect.github.com/disgoorg/disgo/issues/218">#218</a>)</li>
<li><a
href="de3966110c"><code>de39661</code></a>
fix incorrect Type() for YouTubeIntegration</li>
<li><a
href="6d891abd10"><code>6d891ab</code></a>
set unset member guild id on unmarshal</li>
<li><a
href="49ab66b44e"><code>49ab66b</code></a>
add activity opts (<a
href="https://redirect.github.com/disgoorg/disgo/issues/297">#297</a>)</li>
<li><a
href="76d3e4d6f1"><code>76d3e4d</code></a>
Add support for setting a custom status (<a
href="https://redirect.github.com/disgoorg/disgo/issues/295">#295</a>)</li>
<li><a
href="864959c63a"><code>864959c</code></a>
update dependencies</li>
<li>Additional commits viewable in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.8...v0.16.9">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.8&new-version=0.16.9)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it,
as requested by @caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-20 11:30:35 -03:00
dependabot[bot]
50c50014bc
feat(deps): bump golang.org/x/crypto from 0.12.0 to 0.13.0 (#4314)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from
0.12.0 to 0.13.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0d375be9b6"><code>0d375be</code></a>
go.mod: update golang.org/x dependencies</li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.12.0...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-20 11:16:02 -03:00
Carlos Alexandro Becker
e5be52441c
feat(deps): bump github.com/goreleaser/nfpm/v2 from v2.32.0 to v2.33.0
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-19 12:02:17 +00:00
dependabot[bot]
febccfb9ec
feat(deps): bump gocloud.dev from 0.33.0 to 0.34.0 (#4306)
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.33.0 to
0.34.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-cloud/releases">gocloud.dev's
releases</a>.</em></p>
<blockquote>
<h2>v0.34.0</h2>
<ul>
<li>
<p><strong>blob</strong></p>
<ul>
<li><strong>fileblob</strong>: Added an option to avoid using
<code>os.TempDir</code> for temp files.</li>
<li><strong>gcsblob</strong>: Don't hard-fail if no DefaultCredentials
are found.</li>
</ul>
</li>
<li>
<p><strong>aws/rds</strong>: Switch AWS RDS CA bundle to the officially
documented URL</p>
</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="22c0c79912"><code>22c0c79</code></a>
all: prelease (<a
href="https://redirect.github.com/google/go-cloud/issues/3308">#3308</a>)</li>
<li><a
href="55ed7f7110"><code>55ed7f7</code></a>
aws/rds: Switch AWS RDS CA bundle to the officially documented URL (<a
href="https://redirect.github.com/google/go-cloud/issues/3307">#3307</a>)</li>
<li><a
href="d6f90a4d2b"><code>d6f90a4</code></a>
Clean up deployment instructions a bit more</li>
<li><a
href="dfd6143fbc"><code>dfd6143</code></a>
Update website deployment instructions</li>
<li><a
href="62841e782d"><code>62841e7</code></a>
blob/gcsblob: Don't hard-fail if no DefaultCredentials are found (<a
href="https://redirect.github.com/google/go-cloud/issues/3306">#3306</a>)</li>
<li><a
href="1b4bd150ca"><code>1b4bd15</code></a>
blob/s3blob: Fix example (<a
href="https://redirect.github.com/google/go-cloud/issues/3305">#3305</a>)</li>
<li><a
href="7298f99c27"><code>7298f99</code></a>
all: update to go 1.21 (<a
href="https://redirect.github.com/google/go-cloud/issues/3301">#3301</a>)</li>
<li><a
href="dee61a596a"><code>dee61a5</code></a>
blob/fileblob: Fix for URL parameter for no_tmp_dir option. (<a
href="https://redirect.github.com/google/go-cloud/issues/3300">#3300</a>)</li>
<li><a
href="cfe20caf3c"><code>cfe20ca</code></a>
blob/fileblob: Add docstring about tempdirs (<a
href="https://redirect.github.com/google/go-cloud/issues/3296">#3296</a>)</li>
<li><a
href="9b62f468b3"><code>9b62f46</code></a>
blob/fileblob: Add an option to avoid using os.TempDir for temp files
(<a
href="https://redirect.github.com/google/go-cloud/issues/3295">#3295</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-cloud/compare/v0.33.0...v0.34.0">compare
view</a></li>
</ul>
</details>
<br />

<details>
<summary>Most Recent Ignore Conditions Applied to This Pull
Request</summary>

| Dependency Name | Ignore Conditions |
| --- | --- |
| gocloud.dev | [>= 0.25.a, < 0.26] |
</details>


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.33.0&new-version=0.34.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-19 08:47:21 -03:00
dependabot[bot]
7ce0481bf1
feat(deps): bump golang.org/x/text from 0.12.0 to 0.13.0 (#4307)
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.12.0 to
0.13.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f488e191e6"><code>f488e19</code></a>
unicode/norm: fix function name on comment</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.12.0...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-19 08:47:10 -03:00
dependabot[bot]
c3e20c4180
feat(deps): bump github.com/invopop/jsonschema from 0.7.0 to 0.8.0 (#4308)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps
[github.com/invopop/jsonschema](https://github.com/invopop/jsonschema)
from 0.7.0 to 0.8.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0382c8ee65"><code>0382c8e</code></a>
Updating release github action definition</li>
<li><a
href="0f7909057f"><code>0f79090</code></a>
Updating readme example</li>
<li><a
href="b954aa23f1"><code>b954aa2</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/39">#39</a>
from arvidfm/additional-properties</li>
<li><a
href="0d62e119b7"><code>0d62e11</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/93">#93</a>
from invopop/default-number-fix</li>
<li><a
href="a4408ec0e9"><code>a4408ec</code></a>
Ensure default floats or ints are converted correctly</li>
<li><a
href="0ff6727c86"><code>0ff6727</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/92">#92</a>
from invopop/anyof-ref</li>
<li><a
href="4c3020b1ad"><code>4c3020b</code></a>
Adding anyof_ref tag, moving oneof_ref out of examples</li>
<li><a
href="88a348b426"><code>88a348b</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/69">#69</a>
from gmlewis/i68-oneof-ref</li>
<li><a
href="aadda03996"><code>aadda03</code></a>
tiny refactor to get field name tag from a method</li>
<li><a
href="2d282ecc80"><code>2d282ec</code></a>
Merge pull request <a
href="https://redirect.github.com/invopop/jsonschema/issues/75">#75</a>
from balki/yamltag</li>
<li>Additional commits viewable in <a
href="https://github.com/invopop/jsonschema/compare/v0.7.0...v0.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/invopop/jsonschema&package-manager=go_modules&previous-version=0.7.0&new-version=0.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-19 08:43:56 -03:00
dependabot[bot]
15da7c27da
feat(deps): bump github.com/slack-go/slack from 0.12.2 to 0.12.3 (#4305)
Bumps [github.com/slack-go/slack](https://github.com/slack-go/slack)
from 0.12.2 to 0.12.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/slack-go/slack/releases">github.com/slack-go/slack's
releases</a>.</em></p>
<blockquote>
<h2>v0.12.3</h2>
<h2>What's Changed</h2>
<h3>Bug fixes</h3>
<ul>
<li>Safer socketmode by <a
href="https://github.com/iaburton"><code>@​iaburton</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1150">slack-go/slack#1150</a></li>
<li>add <code>omitempty</code> to ConfirmationBlockObject.Deny by <a
href="https://github.com/kamil-gwozdz"><code>@​kamil-gwozdz</code></a>
in <a
href="https://redirect.github.com/slack-go/slack/pull/1224">slack-go/slack#1224</a></li>
</ul>
<h3>Security</h3>
<ul>
<li>Redact tokens in SendMessage debug log by <a
href="https://github.com/daabr"><code>@​daabr</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1215">slack-go/slack#1215</a></li>
</ul>
<h3>Enhancements / Improvements</h3>
<ul>
<li>socketmode example: use embedded api client in socketmode client by
<a href="https://github.com/kittydoor"><code>@​kittydoor</code></a> in
<a
href="https://redirect.github.com/slack-go/slack/pull/1164">slack-go/slack#1164</a></li>
<li>Sends an invitation to a Slack Connect channel by <a
href="https://github.com/nopcoder"><code>@​nopcoder</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1216">slack-go/slack#1216</a></li>
<li>Add support for manifests and config tokens by <a
href="https://github.com/stijndcl"><code>@​stijndcl</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1220">slack-go/slack#1220</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/daabr"><code>@​daabr</code></a> made
their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1215">slack-go/slack#1215</a></li>
<li><a
href="https://github.com/kamil-gwozdz"><code>@​kamil-gwozdz</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1224">slack-go/slack#1224</a></li>
<li><a href="https://github.com/nopcoder"><code>@​nopcoder</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1216">slack-go/slack#1216</a></li>
<li><a href="https://github.com/stijndcl"><code>@​stijndcl</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1220">slack-go/slack#1220</a></li>
<li><a href="https://github.com/iaburton"><code>@​iaburton</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1150">slack-go/slack#1150</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/slack-go/slack/compare/v0.12.2...v0.12.3">https://github.com/slack-go/slack/compare/v0.12.2...v0.12.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="65cefedcde"><code>65cefed</code></a>
Merge pull request <a
href="https://redirect.github.com/slack-go/slack/issues/1150">#1150</a>
from iaburton/safer-socketmode</li>
<li><a
href="c806c9c909"><code>c806c9c</code></a>
Merge pull request <a
href="https://redirect.github.com/slack-go/slack/issues/1220">#1220</a>
from stijndcl/manifests</li>
<li><a
href="3dc3db8986"><code>3dc3db8</code></a>
Re-phrase example docs</li>
<li><a
href="217f2de7e7"><code>217f2de</code></a>
Add examples</li>
<li><a
href="35d0f96c7c"><code>35d0f96</code></a>
Merge pull request <a
href="https://redirect.github.com/slack-go/slack/issues/1216">#1216</a>
from nopcoder/master</li>
<li><a
href="49c50d064d"><code>49c50d0</code></a>
Merge pull request <a
href="https://redirect.github.com/slack-go/slack/issues/1224">#1224</a>
from kamil-gwozdz/kamil-gwozdz-patch-1</li>
<li><a
href="80f6b07130"><code>80f6b07</code></a>
Merge pull request <a
href="https://redirect.github.com/slack-go/slack/issues/1215">#1215</a>
from daabr/master</li>
<li><a
href="8f8f4e9daf"><code>8f8f4e9</code></a>
add <code>omitempty</code> to ConfirmationBlockObject.Deny</li>
<li><a
href="2f5b296c90"><code>2f5b296</code></a>
Small bugfix</li>
<li><a
href="b9a30c0d15"><code>b9a30c0</code></a>
Pass config token as param</li>
<li>Additional commits viewable in <a
href="https://github.com/slack-go/slack/compare/v0.12.2...v0.12.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/slack-go/slack&package-manager=go_modules&previous-version=0.12.2&new-version=0.12.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-19 08:43:35 -03:00
dependabot[bot]
517ca56486
feat(deps): bump github.com/xanzy/go-gitlab from 0.90.0 to 0.91.1 (#4304)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.90.0 to 0.91.1.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0d372da030"><code>0d372da</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1787">#1787</a>
from GaikwadPratik/merge_trains_fix</li>
<li><a
href="e4640349a8"><code>e464034</code></a>
fix: squash is bool parameter not string</li>
<li><a
href="da51eb19f3"><code>da51eb1</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1786">#1786</a>
from xanzy/bugfix/label-details</li>
<li><a
href="2205d5b7ca"><code>2205d5b</code></a>
Add custom MergRequest unmarshal logic for label details</li>
<li><a
href="cf347744dc"><code>cf34774</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1778">#1778</a>
from dannydd88/feature/job_token_access_settings</li>
<li><a
href="170162387f"><code>1701623</code></a>
Minor tweaks…</li>
<li><a
href="8b167f4982"><code>8b167f4</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1780">#1780</a>
from beekeep/feat/update-project-protected-envs</li>
<li><a
href="facdd3cc69"><code>facdd3c</code></a>
Keep comment line width below 80 chars</li>
<li><a
href="a3c81a73bd"><code>a3c81a7</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1779">#1779</a>
from beekeep/feat/group-protected-envs</li>
<li><a
href="fab9f865d0"><code>fab9f86</code></a>
Keep comment line width below 80 chars</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.90.0...v0.91.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.90.0&new-version=0.91.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-09-19 08:43:17 -03:00
Carlos Alexandro Becker
ca495c5dc2
chore: go mod tidy
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-13 17:03:05 +00:00
Carlos Alexandro Becker
4240a0fdb9
feat(deps): udpate go-github to v55
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-09-11 13:53:33 +00:00
Carlos Alexandro Becker
53bcbe951a
feat(deps): update go-github to v54 (#4251)
<!--

Hi, thanks for contributing!

Please make sure you read our CONTRIBUTING guide.

Also, add tests and the respective documentation changes as well.

-->


<!-- If applied, this commit will... -->

...

<!-- Why is this change being made? -->

...

<!-- # Provide links to any relevant tickets, URLs or other resources
-->

...

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-08-24 10:50:36 -03:00
dependabot[bot]
0852883072
feat(deps): bump github.com/charmbracelet/lipgloss from 0.7.1 to 0.8.0 (#4260) 2023-08-23 12:46:30 +00:00
dependabot[bot]
139bf1e761
feat(deps): bump github.com/google/uuid from 1.3.0 to 1.3.1 (#4257)
Bumps [github.com/google/uuid](https://github.com/google/uuid) from
1.3.0 to 1.3.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/uuid/releases">github.com/google/uuid's
releases</a>.</em></p>
<blockquote>
<h2>v1.3.1</h2>
<h2><a
href="https://github.com/google/uuid/compare/v1.3.0...v1.3.1">1.3.1</a>
(2023-08-18)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>Use .EqualFold() to parse urn prefixed UUIDs (<a
href="https://redirect.github.com/google/uuid/issues/118">#118</a>) (<a
href="574e687494">574e687</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/google/uuid/blob/master/CHANGELOG.md">github.com/google/uuid's
changelog</a>.</em></p>
<blockquote>
<h2><a
href="https://github.com/google/uuid/compare/v1.3.0...v1.3.1">1.3.1</a>
(2023-08-18)</h2>
<h3>Bug Fixes</h3>
<ul>
<li>Use .EqualFold() to parse urn prefixed UUIDs (<a
href="https://redirect.github.com/google/uuid/issues/118">#118</a>) (<a
href="574e687494">574e687</a>)</li>
</ul>
<h2>Changelog</h2>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b3cae7c306"><code>b3cae7c</code></a>
chore(master): release 1.3.1 (<a
href="https://redirect.github.com/google/uuid/issues/127">#127</a>)</li>
<li><a
href="7b8f57cbcc"><code>7b8f57c</code></a>
fix(ci): switch to release-please app (<a
href="https://redirect.github.com/google/uuid/issues/126">#126</a>)</li>
<li><a
href="e69e468f7c"><code>e69e468</code></a>
chore(ci): configure release-please, update contrib (<a
href="https://redirect.github.com/google/uuid/issues/122">#122</a>)</li>
<li><a
href="97c970d2a5"><code>97c970d</code></a>
chore(ci): add apidiff check for API compatibility (<a
href="https://redirect.github.com/google/uuid/issues/123">#123</a>)</li>
<li><a
href="53f93a84e6"><code>53f93a8</code></a>
docs: change godoc URL in README (<a
href="https://redirect.github.com/google/uuid/issues/124">#124</a>)</li>
<li><a
href="0b416df5d0"><code>0b416df</code></a>
docs: update link to RFC 4122 (<a
href="https://redirect.github.com/google/uuid/issues/93">#93</a>)</li>
<li><a
href="75e1ac5ba6"><code>75e1ac5</code></a>
docs: shell format go tool command (<a
href="https://redirect.github.com/google/uuid/issues/111">#111</a>)</li>
<li><a
href="d71986992e"><code>d719869</code></a>
docs: fix typo node_js docs (<a
href="https://redirect.github.com/google/uuid/issues/117">#117</a>)</li>
<li><a
href="574e687494"><code>574e687</code></a>
fix: Use .EqualFold() to parse urn prefixed UUIDs (<a
href="https://redirect.github.com/google/uuid/issues/118">#118</a>)</li>
<li><a
href="c91929c8bf"><code>c91929c</code></a>
Merge pull request <a
href="https://redirect.github.com/google/uuid/issues/121">#121</a> from
noahdietz/setup-codeowners-and-actions</li>
<li>Additional commits viewable in <a
href="https://github.com/google/uuid/compare/v1.3.0...v1.3.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/uuid&package-manager=go_modules&previous-version=1.3.0&new-version=1.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-22 09:40:01 -03:00
dependabot[bot]
d9b8e0f7f7
feat(deps): bump github.com/jarcoal/httpmock from 1.3.0 to 1.3.1 (#4253)
Bumps [github.com/jarcoal/httpmock](https://github.com/jarcoal/httpmock)
from 1.3.0 to 1.3.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/jarcoal/httpmock/releases">github.com/jarcoal/httpmock's
releases</a>.</em></p>
<blockquote>
<h2>v1.3.1</h2>
<p>Fix:</p>
<ul>
<li><a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#BodyContainsBytes">BodyContainsBytes</a>
&amp; <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#BodyContainsString">BodyContainsString</a>
used with <a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Matcher.And">And</a>/<a
href="https://pkg.go.dev/github.com/jarcoal/httpmock#Matcher.Or">Or</a>
by <a href="https://github.com/maxatome"><code>@​maxatome</code></a> in
<a
href="https://redirect.github.com/jarcoal/httpmock/issues/146">#146</a>
thanks to <a
href="https://github.com/Moon1706"><code>@​Moon1706</code></a> for the
report → <a
href="https://redirect.github.com/jarcoal/httpmock/issues/145">#145</a>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8b32cd6f52"><code>8b32cd6</code></a>
fix: BodyContainsBytes &amp; BodyContainsString used with And/Or</li>
<li><a
href="497153dd46"><code>497153d</code></a>
ci: test against go 1.21 &amp; use golangci-lint 1.54.1</li>
<li><a
href="070d3c85e0"><code>070d3c8</code></a>
ci: switch to install-go v3.4</li>
<li><a
href="1ddb9fa5c4"><code>1ddb9fa</code></a>
refactor: make golangci-lint v1.52.2 happy</li>
<li><a
href="507a05e862"><code>507a05e</code></a>
ci: add workflow_dispatch as event trigger</li>
<li>See full diff in <a
href="https://github.com/jarcoal/httpmock/compare/v1.3.0...v1.3.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/jarcoal/httpmock&package-manager=go_modules&previous-version=1.3.0&new-version=1.3.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-17 08:33:17 -03:00
dependabot[bot]
5bf89f21eb
feat(deps): bump golang.org/x/tools from 0.11.1 to 0.12.0 (#4237)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.11.1
to 0.12.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.12.0</h2>
<p>This release contains a major rewrite of the way gopls computes and
stores package information, with the goal of reducing memory usage and
allowing gopls to scale to larger repositories. This change can also
significantly reduce startup time when workspaces are reopened, as gopls
now uses a file-based cache to persist data across sessions. With these
optimizations, gopls is finally able to <a
href="https://go.dev/issues/48738">fully analyze dependencies</a> using
the <a
href="https://pkg.go.dev/golang.org/x/tools/go/analysis">golang.org/x/tools/go/analysis</a>
framework, resulting in improved accuracy for analysis diagnostics.</p>
<p>You can install this release with <code>go install</code>:</p>
<pre><code>go install golang.org/x/tools/gopls@v0.12.0
</code></pre>
<h1>Support changes</h1>
<p>As gopls matures, we're trying to simplify its configuration so that
gopls Just Works in more scenarios, and so that we have fewer
configuration combinations to test. This means that we will be gradually
deprecating settings that affect the core behavior of gopls.</p>
<h2>Removed experimental configuration options</h2>
<p>As announced in the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.10.0">v0.10.0
release notes</a>, this release removes support for the
<code>experimentalWorkspaceModule</code> and
<code>experimentalWatchedFileDelay</code> settings. The
<code>experimentalPackageCacheKey</code> setting is also removed, as it
is irrelevant in the new design.</p>
<p>The <code>experimentalWorkspaceModule</code> setting in particular
may still be in use by some users. This setting has been superseded by
built-in support for multi-module workspaces in the <code>go</code>
command, via <a href="https://go.dev/doc/tutorial/workspaces">Go
workspaces</a>. To get the equivalent behavior in gopls@v0.12.0, please
create a <code>go.work</code> file in your workspace using all desired
modules. To use all modules in your workspace, run:</p>
<pre><code>go work use -r .
</code></pre>
<h2>Dropped support for Go 1.13-1.15, deprecated support for Go
1.16-1.17</h2>
<p>As announced in the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.10.0">v0.10.0
release notes</a>, this release drops support for Go 1.13-1.15, and in
fact does not build with these Go versions.</p>
<p>Additionally, <code>gopls@v0.12.x</code> will be the final sequence
of versions supporting Go 1.16-1.17, and therefore displays a
deprecation notice when used with these Go versions.</p>
<h2>Supported operating systems</h2>
<p>Given that our users are almost entirely on Linux, Windows, or
Darwin, we are discussing narrowing our support to focus on those
operating systems, in <a
href="https://redirect.github.com/golang/go/issues/59981">golang/go#59981</a>.</p>
<h1>Performance improvements</h1>
<p>The banner feature of this release is an internal redesign that
significantly improves the way gopls scales in larger codebases.
Performance, particularly memory usage, has <a
href="https://redirect.github.com/golang/go/issues/36943">long</a> <a
href="https://redirect.github.com/golang/go/issues/37790">been</a> <a
href="https://redirect.github.com/golang/go/issues/43968">a</a> <a
href="https://redirect.github.com/golang/go/issues/44981">pain</a> <a
href="https://redirect.github.com/golang/go/issues/45363">point</a> <a
href="https://redirect.github.com/golang/go/issues/45457">for</a> <a
href="https://redirect.github.com/golang/go/issues/46897">our</a> <a
href="https://redirect.github.com/golang/go/issues/47855">users</a>.</p>
<h2>Reduced memory usage</h2>
<p>Previous releases of gopls held typed syntax trees for all packages,
in memory, all the time. With this release, these large data structures
are ephemeral: as soon as they are constructed, an index of information
derived from them is saved persistently to a file-based cache, and the
data structures are recycled. The index for each package includes the
locations of declaring and referring identifiers; the set of exported
declarations and their types; the method sets of each interface; and any
diagnostics and facts (see below) produced during analysis. The index
holds all the information needed to serve global-scope LSP queries such
as “references”, “implementations”, and so on.</p>
<p>Moving package information to a file-based cache greatly reduces the
amount of RAM gopls uses, by almost an order of magnitude in larger
projects. The table below shows the reductions in steady-state memory
usage for three open-source Go repositories.</p>
<table>
<thead>
<tr>
<th>Project</th>
<th>Packages</th>
<th>In-use bytes v0.11.0</th>
<th>v0.12.0</th>
<th>Change</th>
</tr>
</thead>
<tbody>
<tr>
<td>gopls</td>
<td>405</td>
<td>497MB</td>
<td>232MB</td>
<td>-53%</td>
</tr>
<tr>
<td>kubernetes</td>
<td>3137</td>
<td>3090MB</td>
<td>832MB</td>
<td>-73%</td>
</tr>
<tr>
<td>google-cloud-go + submods</td>
<td>7657</td>
<td>5039MB</td>
<td>863MB</td>
<td>-83%</td>
</tr>
</tbody>
</table>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="229f8486be"><code>229f848</code></a>
gopls/internal/lsp/source: enable new defers analyzer</li>
<li><a
href="2dc7ebab28"><code>2dc7eba</code></a>
go/analysis: use parser.SkipObjectResolution</li>
<li><a
href="f91c023a9b"><code>f91c023</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="e0783a89e9"><code>e0783a8</code></a>
internal/gcimporter: remove bug report on objectpath failure</li>
<li><a
href="75f6f9c0b0"><code>75f6f9c</code></a>
gopls/internal/bug: add gopls/bug telemetry counter</li>
<li><a
href="4b271f9c71"><code>4b271f9</code></a>
gopls: add gopls/client telemetry counters</li>
<li><a
href="d0b18e25a0"><code>d0b18e2</code></a>
go/analysis/passes/copylock: fix infinite recursion</li>
<li><a
href="5b4d426665"><code>5b4d426</code></a>
gopls/internal/hooks: clean language version before passing to
gofumpt</li>
<li><a
href="2160c5f15f"><code>2160c5f</code></a>
gopls/internal/lsp/analysis: fix stubmethods with variadic
parameters</li>
<li><a
href="3d20bbe0fb"><code>3d20bbe</code></a>
internal/gcimporter: add a missing return if objectpath fails</li>
<li>See full diff in <a
href="https://github.com/golang/tools/compare/v0.11.1...v0.12.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.11.1&new-version=0.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-08 09:32:22 -03:00
dependabot[bot]
4e731ed23f
feat(deps): bump golang.org/x/oauth2 from 0.10.0 to 0.11.0 (#4233)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from
0.10.0 to 0.11.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2e4a4e2bfb"><code>2e4a4e2</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="ac6658e9cb"><code>ac6658e</code></a>
all: update go version to 1.18</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.10.0...v0.11.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.10.0&new-version=0.11.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it,
as requested by @caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-07 11:02:40 -03:00
dependabot[bot]
1d189e7a59
feat(deps): bump golang.org/x/crypto from 0.11.0 to 0.12.0 (#4235)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from
0.11.0 to 0.12.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b4ddeeda5b"><code>b4ddeed</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="edc325d13a"><code>edc325d</code></a>
ssh: fix call to Fatalf from a non-test goroutine</li>
<li><a
href="eab9315960"><code>eab9315</code></a>
ssh: add diffie-hellman-group16-sha512 kex</li>
<li><a
href="ddfa82138e"><code>ddfa821</code></a>
ssh: ignore invalid MACs and KEXs just like we do for ciphers</li>
<li><a
href="d08e19beac"><code>d08e19b</code></a>
x509roots/fallback: update bundle</li>
<li><a
href="12e1fcd8c0"><code>12e1fcd</code></a>
internal/wycheproof: skip all tests in short test mode</li>
<li><a
href="3f8f0645c2"><code>3f8f064</code></a>
ssh: prefer sha256 based RSA key algorithms</li>
<li><a
href="5df3b59941"><code>5df3b59</code></a>
ssh: disable client agent tests on Windows</li>
<li><a
href="2e82bdd171"><code>2e82bdd</code></a>
fix TestValidTerminalMode: missing output from echo SHELL $SHELL</li>
<li><a
href="64e0e99383"><code>64e0e99</code></a>
ssh: fix RSA certificate and public key authentication with older
clients</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/crypto/compare/v0.11.0...v0.12.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.11.0&new-version=0.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it,
as requested by @caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-07 10:04:32 -03:00
dependabot[bot]
b76c3ddb1f
feat(deps): bump github.com/xanzy/go-gitlab from 0.89.0 to 0.90.0 (#4232)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.89.0 to 0.90.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3b7542aae1"><code>3b7542a</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1768">#1768</a>
from PascalRoose/patch-project-emails-enabled</li>
<li><a
href="4a212a4f31"><code>4a212a4</code></a>
Tweak struct field tags</li>
<li><a
href="d426fac447"><code>d426fac</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1767">#1767</a>
from billiechar/billiechar-group-repository-storage</li>
<li><a
href="de4ff04d98"><code>de4ff04</code></a>
Update ordering</li>
<li><a
href="9c0749405e"><code>9c07494</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1769">#1769</a>
from PatrickRice-KSC/add-new-runner-api-support</li>
<li><a
href="f4834ae192"><code>f4834ae</code></a>
Bring the PR inline with the rest of the package</li>
<li><a
href="25e4cfa498"><code>25e4cfa</code></a>
Update the response and options based on new API documentation and
examples</li>
<li><a
href="b5d9b2ed31"><code>b5d9b2e</code></a>
Fix comments</li>
<li><a
href="6069191e14"><code>6069191</code></a>
Add runner service</li>
<li><a
href="81c2f1c609"><code>81c2f1c</code></a>
Fix: projects emails_disabled to emails_enabled</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.89.0...v0.90.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.89.0&new-version=0.90.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-07 10:04:22 -03:00
dependabot[bot]
1cf6390eb1
feat(deps): bump github.com/disgoorg/disgo from 0.16.7 to 0.16.8 (#4234)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.7 to 0.16.8.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.8 - Media Channels</h2>
<h2>What's Changed</h2>
<ul>
<li>Add Media Channels by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/285">disgoorg/disgo#285</a></li>
<li>Add avatar decorations by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/217">disgoorg/disgo#217</a></li>
<li>Add onboarding updates by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/267">disgoorg/disgo#267</a></li>
<li>Add <code>RoleFlags</code> by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/287">disgoorg/disgo#287</a></li>
<li>Add <code>AttachmentFlags</code> by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/288">disgoorg/disgo#288</a></li>
<li>Add <code>MessageAuthorID</code> to reaction add events by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="23637a7340</a></li>
<li>Add <code>withCounts</code> parameter to to
<code>/users/@me/guilds</code> funcs by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="836b4a9882</a></li>
<li>Add monetization audit log events by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="09a5cb21c9</a></li>
<li>Add <code>Go</code> &amp; <code>Defer</code> middleware to
<code>handler</code> to run handlers in separate goroutines &amp; auto
defer interactions by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="b331ced0cf</a></li>
<li>Add enforce all handler patterns start with <code>/</code> to fix
some bugs by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="8f83c45072</a></li>
<li>Fix unknown gateway message data unmarshalling by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="79b8080c1b</a></li>
<li>Rename <code>ImageFormat</code> to <code>FileFormat</code> by <a
href="https://github.com/mlnrDev"><code>@​mlnrDev</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/284">disgoorg/disgo#284</a></li>
</ul>
<h2>Breaking Changes</h2>
<ul>
<li><code>LastThreadID</code> -&gt; <code>LastPostID</code>,
<code>ForumTag</code> -&gt; <code>ChannelTag</code>,
<code>GuildForumThreadChannelUpdate</code> -&gt;
<code>GuildPostUpdate</code>, <code>ForumThreadCreate</code> -&gt;
<code>ThreadChannelPostCreate</code>, <code>ForumThread</code> -&gt;
<code>ThreadChannelPost</code> and <code>rest.CreateThreadInForum</code>
-&gt; <code>rest.CreatePostInThreadChannel</code></li>
<li><code>GetCurrentUserGuilds</code>,
<code>GetCurrentUserGuildsPage</code> and <code>GetGuilds</code> now
accept an extra <code>withCounts</code> parameter</li>
<li><code>ImageFormat</code> has been renamed to
<code>FileFormat</code></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.7...v0.16.8">https://github.com/disgoorg/disgo/compare/v0.16.7...v0.16.8</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="b0885debf8"><code>b0885de</code></a>
Add Media Channels (<a
href="https://redirect.github.com/disgoorg/disgo/issues/285">#285</a>)</li>
<li><a
href="e8c9c8b1f6"><code>e8c9c8b</code></a>
update disgoorg/log to v1.2.1</li>
<li><a
href="201bf30a6f"><code>201bf30</code></a>
make MessageAuthorID a pointer</li>
<li><a
href="d57b40f1f6"><code>d57b40f</code></a>
i forgor</li>
<li><a
href="836b4a9882"><code>836b4a9</code></a>
add with_counts to /users/<code>@​me/guilds</code> funcs</li>
<li><a
href="09a5cb21c9"><code>09a5cb2</code></a>
add monetization audit log events</li>
<li><a
href="23637a7340"><code>23637a7</code></a>
add MessageAuthorID to EventMessageReactionAdd</li>
<li><a
href="93dc710363"><code>93dc710</code></a>
Add avatar decorations (<a
href="https://redirect.github.com/disgoorg/disgo/issues/217">#217</a>)</li>
<li><a
href="5e4729f52d"><code>5e4729f</code></a>
Add AttachmentFlags (<a
href="https://redirect.github.com/disgoorg/disgo/issues/288">#288</a>)</li>
<li><a
href="f786e69866"><code>f786e69</code></a>
Add onboarding updates (<a
href="https://redirect.github.com/disgoorg/disgo/issues/267">#267</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.7...v0.16.8">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.7&new-version=0.16.8)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-07 10:04:06 -03:00
dependabot[bot]
07c1440b62
feat(deps): bump golang.org/x/text from 0.11.0 to 0.12.0 (#4236)
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.11.0 to
0.12.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fb697c0580"><code>fb697c0</code></a>
cmd/gotext: actually use -dir flag</li>
<li><a
href="f3e69ed4a8"><code>f3e69ed</code></a>
cmd/gotext: fix misbehaviors</li>
<li><a
href="ab07ad1b65"><code>ab07ad1</code></a>
all: remove repetitive words</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.11.0...v0.12.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.11.0&new-version=0.12.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once CI passes on it, as requested by
@caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-07 09:36:30 -03:00
dependabot[bot]
b242ed0fb7
feat(deps): bump github.com/google/go-containerregistry from 0.15.2 to 0.16.1 (#4229)
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry)
from 0.15.2 to 0.16.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.1</h2>
<p>Release is broken due to goreleaser error, 0.16.1 has the fix</p>
<h2>What's Changed</h2>
<ul>
<li>bump deps using ./hack/bump-deps.sh by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1702">google/go-containerregistry#1702</a></li>
<li>Allow crane to export schema 1 images by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1704">google/go-containerregistry#1704</a></li>
<li>fixed a goroutine leak by <a
href="https://github.com/ktarplee"><code>@​ktarplee</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1705">google/go-containerregistry#1705</a></li>
<li>retry HTTP 522 errors by default by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1707">google/go-containerregistry#1707</a></li>
<li>Limit size of manifest by <a
href="https://github.com/AdamKorcz"><code>@​AdamKorcz</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1711">google/go-containerregistry#1711</a></li>
<li>Add crane auth token by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1709">google/go-containerregistry#1709</a></li>
<li>Bump codecov/codecov-action from 3.1.3 to 3.1.4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1710">google/go-containerregistry#1710</a></li>
<li>Pass scopes through crane auth token by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1713">google/go-containerregistry#1713</a></li>
<li>fix: add bounds checking to addendum layer mutations to prevent
panic by <a
href="https://github.com/aaron-prindle"><code>@​aaron-prindle</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1715">google/go-containerregistry#1715</a></li>
<li>Surface better error messages in crane index by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1722">google/go-containerregistry#1722</a></li>
<li>crane: add missing name option in crane index commands by <a
href="https://github.com/HubertZhang"><code>@​HubertZhang</code></a> in
<a
href="https://redirect.github.com/google/go-containerregistry/pull/1723">google/go-containerregistry#1723</a></li>
<li>crane: Respect cmd.OutOrStdout by <a
href="https://github.com/kyleconroy"><code>@​kyleconroy</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1728">google/go-containerregistry#1728</a></li>
<li>Make ErrSchema1 checkable via errors.Is() by <a
href="https://github.com/Laitr0n"><code>@​Laitr0n</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1721">google/go-containerregistry#1721</a></li>
<li>Don't load into daemon if the image already exists by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1724">google/go-containerregistry#1724</a></li>
<li>add --blobs-to-disk to 'crane registry serve' by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1731">google/go-containerregistry#1731</a></li>
<li>Correct crane registry help text by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1732">google/go-containerregistry#1732</a></li>
<li>Allow concurrent blob Sets, use RWMutex by <a
href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1733">google/go-containerregistry#1733</a></li>
<li>Use RWLock, limit scope of locking, write digest first by <a
href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1734">google/go-containerregistry#1734</a></li>
<li>Let the filesystem handle atomicity by <a
href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1735">google/go-containerregistry#1735</a></li>
<li>Don't try cross-origin mounting against dockerhub by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1743">google/go-containerregistry#1743</a></li>
<li>Drop localhost to support crane registry serve in a container by <a
href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1746">google/go-containerregistry#1746</a></li>
<li>Return OCI Index content-type for referrers response by <a
href="https://github.com/jdolitsky"><code>@​jdolitsky</code></a> in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1762">google/go-containerregistry#1762</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/AdamKorcz"><code>@​AdamKorcz</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1711">google/go-containerregistry#1711</a></li>
<li><a
href="https://github.com/HubertZhang"><code>@​HubertZhang</code></a>
made their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1723">google/go-containerregistry#1723</a></li>
<li><a
href="https://github.com/kyleconroy"><code>@​kyleconroy</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1728">google/go-containerregistry#1728</a></li>
<li><a href="https://github.com/Laitr0n"><code>@​Laitr0n</code></a> made
their first contribution in <a
href="https://redirect.github.com/google/go-containerregistry/pull/1721">google/go-containerregistry#1721</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/google/go-containerregistry/compare/v0.15.2...v0.16.1">https://github.com/google/go-containerregistry/compare/v0.15.2...v0.16.1</a></p>
<h3>Container Images</h3>
<p><a
href="https://gcr.io/go-containerregistry/crane:v0.16.1">https://gcr.io/go-containerregistry/crane:v0.16.1</a>
<a
href="https://gcr.io/go-containerregistry/gcrane:v0.16.1">https://gcr.io/go-containerregistry/gcrane:v0.16.1</a></p>
<p>For example:</p>
<pre><code>docker pull gcr.io/go-containerregistry/crane:v0.16.1
docker pull gcr.io/go-containerregistry/gcrane:v0.16.1
</code></pre>
<h2>v0.16.0</h2>
<p>Release is broken due to goreleaser error, 0.16.1 has the fix</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="a54d64203c"><code>a54d642</code></a>
fix: pin to goreleaser v1.18 to unblock release (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1763">#1763</a>)</li>
<li><a
href="ea19b57966"><code>ea19b57</code></a>
Return OCI Index content-type for referrers response (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1762">#1762</a>)</li>
<li><a
href="b850480338"><code>b850480</code></a>
Drop localhost to support crane registry serve in a container (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1746">#1746</a>)</li>
<li><a
href="fe268b7c97"><code>fe268b7</code></a>
Don't try cross-origin mounting against dockerhub (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1743">#1743</a>)</li>
<li><a
href="2472cbbbf2"><code>2472cbb</code></a>
Let the filesystem handle atomicity (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1735">#1735</a>)</li>
<li><a
href="db818dce39"><code>db818dc</code></a>
Use RWLock, limit scope of locking, write digest first (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1734">#1734</a>)</li>
<li><a
href="44a6e2ebcc"><code>44a6e2e</code></a>
Allow concurrent blob Sets, use RWMutex (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1733">#1733</a>)</li>
<li><a
href="9010ce1fe2"><code>9010ce1</code></a>
Correct crane registry help text (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1732">#1732</a>)</li>
<li><a
href="03ad2ac196"><code>03ad2ac</code></a>
add --blobs-to-disk to 'crane registry serve' (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1731">#1731</a>)</li>
<li><a
href="4e4b03ab89"><code>4e4b03a</code></a>
Don't load into daemon if the image already exists (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1724">#1724</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.15.2...v0.16.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.15.2&new-version=0.16.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-08-03 09:34:13 -03:00
dependabot[bot]
de5fae23dd feat(deps): bump gocloud.dev from 0.32.0 to 0.33.0
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.32.0 to 0.33.0.
- [Release notes](https://github.com/google/go-cloud/releases)
- [Commits](https://github.com/google/go-cloud/compare/v0.32.0...v0.33.0)

---
updated-dependencies:
- dependency-name: gocloud.dev
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-08-02 14:02:35 -03:00
Carlos Alexandro Becker
51d9fc67a9
feat(deps): use mergo 1.0.0 2023-07-31 16:32:36 +00:00
dependabot[bot]
bf3dc65b89
feat(deps): bump golang.org/x/tools from 0.11.0 to 0.11.1 (#4220) 2023-07-31 14:32:00 +00:00
dependabot[bot]
43c53f4793
feat(deps): bump github.com/atc0005/go-teams-notify/v2 from 2.7.1 to 2.8.0 (#4216) 2023-07-31 14:14:23 +00:00
dependabot[bot]
db2a3f3e72 feat(deps): bump github.com/xanzy/go-gitlab from 0.88.0 to 0.89.0
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab) from 0.88.0 to 0.89.0.
- [Changelog](https://github.com/xanzy/go-gitlab/blob/master/releases_test.go)
- [Commits](https://github.com/xanzy/go-gitlab/compare/v0.88.0...v0.89.0)

---
updated-dependencies:
- dependency-name: github.com/xanzy/go-gitlab
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
2023-07-31 10:59:47 -03:00
dependabot[bot]
f3a285f71a
feat(deps): bump the gomod-deps group with 3 updates (#4200)
Bumps the gomod-deps group with 3 updates:
[github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab),
[gocloud.dev](https://github.com/google/go-cloud) and
[go.uber.org/automaxprocs](https://github.com/uber-go/automaxprocs).

Updates `github.com/xanzy/go-gitlab` from 0.86.0 to 0.88.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7e3c23c9c2"><code>7e3c23c</code></a>
Update pipeline tests</li>
<li><a
href="2ac3eea05f"><code>2ac3eea</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1758">#1758</a>
from billiechar/billiechar-snippet-moves</li>
<li><a
href="ddb5ca0974"><code>ddb5ca0</code></a>
Update the PR to make the code consistent</li>
<li><a
href="a4d27d6848"><code>a4d27d6</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1759">#1759</a>
from PatrickRice-KSC/add-missing-housekeeping-setting</li>
<li><a
href="a42af8593e"><code>a42af85</code></a>
Change PipelineTestCases.SystemOutput to interface{}</li>
<li><a
href="89486a0530"><code>89486a0</code></a>
Add missing housekeeping setting</li>
<li><a
href="852645c772"><code>852645c</code></a>
Update tests</li>
<li><a
href="f2c344ca14"><code>f2c344c</code></a>
Use separate options for each schedule</li>
<li><a
href="86dd6321cd"><code>86dd632</code></a>
Add snippet repository storage move APIs</li>
<li><a
href="3c1f9bfa0d"><code>3c1f9bf</code></a>
Use io.ReadAll instead of ioutil.ReadAll</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.86.0...v0.88.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `gocloud.dev` from 0.30.0 to 0.32.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-cloud/releases">gocloud.dev's
releases</a>.</em></p>
<blockquote>
<h2>v0.32.0</h2>
<p>Redoing <code>v0.31.0</code> since I think I messed up the tags.
Copying the release notes:</p>
<p><strong>all</strong></p>
<ul>
<li>Update <code>go</code> version in <code>go.mod</code> to maintain
cleaner <code>go.mod</code> and <code>go.sum</code> files.</li>
</ul>
<p><strong>blob</strong></p>
<ul>
<li><strong>all</strong>: Pass through reader/writer to
<code>WriteTo</code>/<code>ReadFrom</code> if available
(optimization).</li>
<li><strong>all</strong>: Make <code>blob.Bucket</code> implement
<code>io/fs.FS</code> and <code>io/fs.SubFS</code>.</li>
<li><strong>gcsblob</strong>: Add support for forcing an unauthenticated
client.</li>
</ul>
<p><strong>server</strong></p>
<ul>
<li>Make <code>requestlog</code> internal structs implement
<code>http.Flusher</code>.</li>
<li>Don't always read the full request in order to calculate the request
size; use <code>Content-Length</code> when available.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="728b7c1395"><code>728b7c1</code></a>
all: prerelease take 2 (<a
href="https://redirect.github.com/google/go-cloud/issues/3278">#3278</a>)</li>
<li><a
href="838a8fd9b6"><code>838a8fd</code></a>
all: prerelease (<a
href="https://redirect.github.com/google/go-cloud/issues/3277">#3277</a>)</li>
<li><a
href="0f33c81c8d"><code>0f33c81</code></a>
all: add dragonfly build to test suite (<a
href="https://redirect.github.com/google/go-cloud/issues/3268">#3268</a>)</li>
<li><a
href="bfd1b284ad"><code>bfd1b28</code></a>
all: update dependencies (<a
href="https://redirect.github.com/google/go-cloud/issues/3276">#3276</a>)</li>
<li><a
href="8d4590ac1e"><code>8d4590a</code></a>
server/requestlog: Don't consume entire body just to get a request size
(<a
href="https://redirect.github.com/google/go-cloud/issues/3274">#3274</a>)</li>
<li><a
href="a1d9f4295c"><code>a1d9f42</code></a>
server/requestlog: make responseStats implement http.Flusher (<a
href="https://redirect.github.com/google/go-cloud/issues/3275">#3275</a>)</li>
<li><a
href="8cab06ea13"><code>8cab06e</code></a>
blob/gcsblob: add support for forcing an authenticated client (<a
href="https://redirect.github.com/google/go-cloud/issues/3273">#3273</a>)</li>
<li><a
href="0e5728dd33"><code>0e5728d</code></a>
blob: make blob.Bucket implement io/fs.FS and io/fs.SubFS (<a
href="https://redirect.github.com/google/go-cloud/issues/3272">#3272</a>)</li>
<li><a
href="a655179223"><code>a655179</code></a>
all: update go.mod files to go 1.19 (<a
href="https://redirect.github.com/google/go-cloud/issues/3271">#3271</a>)</li>
<li><a
href="8385fc39c7"><code>8385fc3</code></a>
blob: pass through reader/writer to
<code>WriteTo</code>/<code>ReadFrom</code> if available (<a
href="https://redirect.github.com/google/go-cloud/issues/3267">#3267</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-cloud/compare/v0.30.0...v0.32.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `go.uber.org/automaxprocs` from 1.5.2 to 1.5.3
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/uber-go/automaxprocs/releases">go.uber.org/automaxprocs's
releases</a>.</em></p>
<blockquote>
<h2>v1.5.3</h2>
<ul>
<li>Fix mountinfo parsing when super options have fields with
spaces.</li>
<li>Fix division by zero while parsing cgroups.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/uber-go/automaxprocs/blob/master/CHANGELOG.md">go.uber.org/automaxprocs's
changelog</a>.</em></p>
<blockquote>
<h2>v1.5.3 (2023-07-19)</h2>
<ul>
<li>Fix mountinfo parsing when super options have fields with
spaces.</li>
<li>Fix division by zero while parsing cgroups.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e83e959d88"><code>e83e959</code></a>
Release v1.5.3 (<a
href="https://redirect.github.com/uber-go/automaxprocs/issues/77">#77</a>)</li>
<li><a
href="94404505e0"><code>9440450</code></a>
Update actions (<a
href="https://redirect.github.com/uber-go/automaxprocs/issues/76">#76</a>)</li>
<li><a
href="4b0a5c9c3c"><code>4b0a5c9</code></a>
set CI perms to readonly (<a
href="https://redirect.github.com/uber-go/automaxprocs/issues/75">#75</a>)</li>
<li><a
href="c64632e175"><code>c64632e</code></a>
Drop Go 1.17 and Go 1.18 from CI (<a
href="https://redirect.github.com/uber-go/automaxprocs/issues/74">#74</a>)</li>
<li><a
href="60f22786b2"><code>60f2278</code></a>
fix: mountinfo parsing (<a
href="https://redirect.github.com/uber-go/automaxprocs/issues/73">#73</a>)</li>
<li><a
href="d064ede19d"><code>d064ede</code></a>
Fix division by zero (<a
href="https://redirect.github.com/uber-go/automaxprocs/issues/71">#71</a>)</li>
<li>See full diff in <a
href="https://github.com/uber-go/automaxprocs/compare/v1.5.2...v1.5.3">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-20 09:56:26 -03:00
Carlos Alexandro Becker
cc18ad5184
feat(nfpm): update + rpm prefixes support
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-07-14 01:55:47 +00:00
dependabot[bot]
49d6a1561b
feat(deps): bump the gomod-deps group with 3 updates (#4165)
Bumps the gomod-deps group with 3 updates:
[golang.org/x/crypto](https://github.com/golang/crypto),
[golang.org/x/oauth2](https://github.com/golang/oauth2) and
[golang.org/x/tools](https://github.com/golang/tools).

Updates `golang.org/x/crypto` from 0.10.0 to 0.11.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e98487292d"><code>e984872</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="183630ada7"><code>183630a</code></a>
x509roots: generate a stable sort, for real this time</li>
<li><a
href="a9e447dde7"><code>a9e447d</code></a>
x509roots/fallback: add //go:build go1.20 to bundle.go</li>
<li><a
href="64c3993f5c"><code>64c3993</code></a>
ssh: add hmac-sha2-512</li>
<li><a
href="5fe8145aca"><code>5fe8145</code></a>
x509roots: remove list hash and generation date, change ordering</li>
<li><a
href="043e94c17a"><code>043e94c</code></a>
x509roots: fix generate script argument checking</li>
<li><a
href="0d502d7cd6"><code>0d502d7</code></a>
x509roots: use &quot;generate&quot; build tag</li>
<li><a
href="0ff60057bb"><code>0ff6005</code></a>
ssh/test: set a timeout and WaitDelay on sshd subcommands</li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.10.0...v0.11.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `golang.org/x/oauth2` from 0.9.0 to 0.10.0
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ec5679f607"><code>ec5679f</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="989acb1bfe"><code>989acb1</code></a>
all: update dependencies to their latest versions</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.9.0...v0.10.0">compare
view</a></li>
</ul>
</details>
<br />

Updates `golang.org/x/tools` from 0.10.0 to 0.11.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.11.0</h2>
<p>This is a small release containing new integrations of vulnerability
analysis.</p>
<p>Vulnerability analysis for go.mod files can be enabled by configuring
the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>&quot;vulncheck&quot;</code></a>
setting to <code>&quot;Imports&quot;</code>. For more information on
vulnerability management, see the <a
href="https://go.dev/blog/vuln">Vulnerability Management for Go</a> blog
post.</p>
<h2>Support changes</h2>
<p>This release removes support for the
<code>&quot;experimentalUseInvalidMetadata&quot;</code> setting, as
described in the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.10.0">v0.10.0</a>
release. Other settings slated for deprecation in that release remain
temporarily supported, but will be removed in v0.12.0.</p>
<h2>New Features</h2>
<h3>Analyzing dependencies for vulnerabilities</h3>
<p>This release offers two different options for detecting
vulnerabilities in dependencies. Both are backed by the Go vulnerability
database (<a href="https://vuln.go.dev">https://vuln.go.dev</a>) and
complement each other.</p>
<ul>
<li>Imports-based scanning, enabled by the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>&quot;vulncheck&quot;:
&quot;Imports&quot;</code></a> setting, reports vulnerabilities by
scanning the set of packages imported in the workspace. This is fast,
but may report more false positives.</li>
<li>Integration of the <a
href="https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck">golang.org/x/vuln/cmd/govulncheck</a>
command-line tool performs a more precise analysis based on-call graph
reachability, with fewer false positives. Because it is slower to
compute, it must be manually triggered by using &quot;Run govulncheck to
verify&quot; code actions or the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#run-govulncheck"><code>&quot;codelenses.run_govulncheck&quot;</code></a>
code lens on <code>go.mod</code> files.</li>
</ul>
<p><a
href="https://user-images.githubusercontent.com/4999471/206977512-a821107d-9ffb-4456-9b27-6a6a4f900ba6.mp4">https://user-images.githubusercontent.com/4999471/206977512-a821107d-9ffb-4456-9b27-6a6a4f900ba6.mp4</a></p>
<!-- raw HTML omitted -->
<h3>Additional checks for the <code>loopclosure</code> analyzer</h3>
<p>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/analyzers.md#loopclosure"><code>loopclosure</code></a>
analyzer, which reports problematic references from a nested function to
a variable of an enclosing loop, has been improved to catch more cases.
In particular, it now reports when subtests <a
href="https://pkg.go.dev/testing#T.Parallel">run in parallel</a> with
the loop, a mistake that often results in all but the final test case
being skipped.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/206764370-7fc3c464-af04-4e4e-bb10-a6a0a89a99e3.png"
alt="image" /></p>
<h2>Configuration changes</h2>
<ul>
<li>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#vulncheck-enum"><code>&quot;vulncheck&quot;</code></a>
setting controls vulnerability analysis based on the Go vulnerability
database. If set to <code>&quot;Imports&quot;</code>, gopls will compute
diagnostics related to vulnerabilities in dependencies, and will present
them in go.mod files.</li>
<li>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#run-govulncheck"><code>&quot;codelenses.run_govulncheck&quot;</code></a>
setting controls the presence of code lenses that run the <a
href="https://pkg.go.dev/golang.org/x/vuln/cmd/govulncheck">govulncheck</a>
command, which takes longer but produces more accurate vulnerability
reporting based on call-graph reachability.</li>
</ul>
<h2>Bug fixes</h2>
<p>This version of gopls includes fixes to several bugs, notably:</p>
<ul>
<li><code>golang/go#57053</code></li>
<li><code>golang/go#55837</code><a
href="https://redirect.github.com/golang/go/issues/56450">golang/go#56450</a>).</li>
<li><code>golang/go#54816</code></li>
</ul>
<p>A full list of all issues fixed can be found in the <a
href="https://github.com/golang/go/milestone/293?closed=1">gopls/v0.11.0</a>
milestone.
To report a new problem, please file a new issue at <a
href="https://go.dev/issues/new">https://go.dev/issues/new</a>.</p>
<h2>Thank you to our contributors</h2>
<p><a href="https://github.com/Arsen6331"><code>@​Arsen6331</code></a>,
<a href="https://github.com/SN9NV"><code>@​SN9NV</code></a>, <a
href="https://github.com/adonovan"><code>@​adonovan</code></a>, <a
href="https://github.com/bcmills"><code>@​bcmills</code></a>, <a
href="https://github.com/dle8"><code>@​dle8</code></a>, <a
href="https://github.com/findleyr"><code>@​findleyr</code></a>, <a
href="https://github.com/hyangah"><code>@​hyangah</code></a>, <a
href="https://github.com/pjweinbgo"><code>@​pjweinbgo</code></a>, <a
href="https://github.com/suzmue"><code>@​suzmue</code></a></p>
<h2>gopls/v0.10.1</h2>
<p>This release contains a fix for <a
href="https://redirect.github.com/golang/go/issues/56505">golang/go#56505</a>:
a new crash during method completion on variables of type
<code>*error</code>.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="675bf3c243"><code>675bf3c</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="ad52c1ca35"><code>ad52c1c</code></a>
go/ssa/interp: support conversions to slices of named bytes</li>
<li><a
href="14ec3c023f"><code>14ec3c0</code></a>
gopls/doc/contributing.md: document error handling strategies</li>
<li><a
href="c495364167"><code>c495364</code></a>
go/packages/gopackages: document -mode flag</li>
<li><a
href="87ad891fe3"><code>87ad891</code></a>
gopls/internal/lsp/source/typerefs: move test into _test.go</li>
<li><a
href="27fd94e099"><code>27fd94e</code></a>
internal/fastwalk: doc formatting fixes (including godoc links)</li>
<li><a
href="d362be0cdb"><code>d362be0</code></a>
gopls/internal/lsp/filecache: reduce GC frequency</li>
<li><a
href="969078be46"><code>969078b</code></a>
Revert &quot;go/analysis: add Sizes that matches gc size
computations&quot;</li>
<li><a
href="5aa6acb96f"><code>5aa6acb</code></a>
go/analysis: add Sizes that matches gc size computations</li>
<li><a
href="5a89a3bf26"><code>5a89a3b</code></a>
go/vcs: delete</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.10.0...v0.11.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-07-12 09:53:29 -03:00
Carlos Alexandro Becker
6b46a1a6aa
fix: go install
closes #4154

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-29 12:55:30 +00:00
Carlos Alexandro Becker
a6e6e7098d
feat(deps): update env to v9
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-28 16:29:19 +00:00
Carlos Alexandro Becker
79881fc1f4
feat(deps): update log
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-28 13:00:32 +00:00
dependabot[bot]
c495b94987
feat(deps): bump github.com/muesli/termenv from 0.15.1 to 0.15.2 (#4148)
Bumps [github.com/muesli/termenv](https://github.com/muesli/termenv)
from 0.15.1 to 0.15.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/muesli/termenv/releases">github.com/muesli/termenv's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.2</h2>
<h2>What's Changed</h2>
<ul>
<li>build(deps): bump actions/setup-go from 3 to 4 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/126">muesli/termenv#126</a></li>
<li>build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18
by <a href="https://github.com/dependabot"><code>@​dependabot</code></a>
in <a
href="https://redirect.github.com/muesli/termenv/pull/128">muesli/termenv#128</a></li>
<li>fix: Cloud Shell supports RGB colors by <a
href="https://github.com/muesli"><code>@​muesli</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/127">muesli/termenv#127</a></li>
<li>build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 by <a
href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/129">muesli/termenv#129</a></li>
<li>fix: wezterm is truecolor by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/muesli/termenv/pull/139">muesli/termenv#139</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/muesli/termenv/compare/v0.15.1...v0.15.2">https://github.com/muesli/termenv/compare/v0.15.1...v0.15.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="51d72d34e2"><code>51d72d3</code></a>
fix: wezterm is truecolor (<a
href="https://redirect.github.com/muesli/termenv/issues/139">#139</a>)</li>
<li><a
href="b57cbb1109"><code>b57cbb1</code></a>
fix: lint</li>
<li><a
href="e02986697d"><code>e029866</code></a>
build(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0</li>
<li><a
href="9b3e79975a"><code>9b3e799</code></a>
fix: Cloud Shell supports RGB colors</li>
<li><a
href="73a40463ff"><code>73a4046</code></a>
build(deps): bump github.com/mattn/go-isatty from 0.0.17 to 0.0.18</li>
<li><a
href="39f5d6e779"><code>39f5d6e</code></a>
build(deps): bump actions/setup-go from 3 to 4</li>
<li>See full diff in <a
href="https://github.com/muesli/termenv/compare/v0.15.1...v0.15.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/muesli/termenv&package-manager=go_modules&previous-version=0.15.1&new-version=0.15.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-28 09:46:00 -03:00
dependabot[bot]
d27c2974ff
feat(deps): bump github.com/charmbracelet/keygen from 0.4.2 to 0.4.3 (#4149)
Bumps
[github.com/charmbracelet/keygen](https://github.com/charmbracelet/keygen)
from 0.4.2 to 0.4.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/keygen/releases">github.com/charmbracelet/keygen's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.3</h2>
<h2>Changelog</h2>
<h3>Bug fixes</h3>
<ul>
<li>85d0702110001be573050fee0d6d7003a2a81404: fix: do not recreate key
if public key don't exist (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Documentation updates</h3>
<ul>
<li>ae518268d3d88fba0f880e9f2521d9d3b6b70c2b: docs: update license (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<hr />
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
<p>Thoughts? Questions? We love hearing from you. Feel free to reach out
on <a href="https://twitter.com/charmcli">Twitter</a>, <a
href="https://mastodon.technology/@charm">The Fediverse</a>, or on <a
href="https://charm.sh/chat">Discord</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="85d0702110"><code>85d0702</code></a>
fix: do not recreate key if public key don't exist</li>
<li><a
href="ae518268d3"><code>ae51826</code></a>
docs: update license</li>
<li>See full diff in <a
href="https://github.com/charmbracelet/keygen/compare/v0.4.2...v0.4.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/keygen&package-manager=go_modules&previous-version=0.4.2&new-version=0.4.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-28 09:45:38 -03:00
dependabot[bot]
8d94703b5a
feat(deps): bump github.com/google/ko from 0.13.0 to 0.14.1 (#4132)
Bumps [github.com/google/ko](https://github.com/google/ko) from 0.13.0
to 0.14.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/ko/releases">github.com/google/ko's
releases</a>.</em></p>
<blockquote>
<h2>v0.14.1</h2>
<h2>What's Changed</h2>
<ul>
<li>fix: Use attestation-name output by <a
href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/980">ko-build/ko#980</a></li>
<li>Upgrade to go120 by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/984">ko-build/ko#984</a></li>
<li>fix release workflow by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/977">ko-build/ko#977</a></li>
<li>fix deprecated attestation name by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/983">ko-build/ko#983</a></li>
<li>refactor release job by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/986">ko-build/ko#986</a></li>
<li>use git hash instead of git tag by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/988">ko-build/ko#988</a></li>
<li>Correct a typo in resolver.go by <a
href="https://github.com/felixonmars"><code>@​felixonmars</code></a> in
<a
href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li>
<li>feat: add riscv64 to goreleaser goarch by <a
href="https://github.com/ernado"><code>@​ernado</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li>
<li>try to fix codeql workflow by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/994">ko-build/ko#994</a></li>
<li>Push images faster by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1005">ko-build/ko#1005</a></li>
<li>Don't publish tags twice by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1010">ko-build/ko#1010</a></li>
<li>Add context to many gobuild errors by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1016">ko-build/ko#1016</a></li>
<li>Fix --local with KO_DOCKER_REPO by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1017">ko-build/ko#1017</a></li>
<li>Fix: Incorporate platform architecture by <a
href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1029">ko-build/ko#1029</a></li>
<li>Update community.md by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1035">ko-build/ko#1035</a></li>
<li>mention ko tekton task by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1039">ko-build/ko#1039</a></li>
<li>Update community.md by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1037">ko-build/ko#1037</a></li>
<li>Fix kind image loading for MacOS by <a
href="https://github.com/aidy"><code>@​aidy</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li>
<li>Revert &quot;Fix kind image loading for MacOS&quot; by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1054">ko-build/ko#1054</a></li>
<li>update boilerplate file to be KO Build Authors by <a
href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/1056">ko-build/ko#1056</a></li>
<li>Pin setup-ko to previous release by <a
href="https://github.com/jonjohnsonjr"><code>@​jonjohnsonjr</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/1082">ko-build/ko#1082</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/felixonmars"><code>@​felixonmars</code></a>
made their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/989">ko-build/ko#989</a></li>
<li><a href="https://github.com/ernado"><code>@​ernado</code></a> made
their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/990">ko-build/ko#990</a></li>
<li><a href="https://github.com/aidy"><code>@​aidy</code></a> made their
first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1026">ko-build/ko#1026</a></li>
<li><a href="https://github.com/luhring"><code>@​luhring</code></a> made
their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/1073">ko-build/ko#1073</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1">https://github.com/ko-build/ko/compare/v0.13.0...v0.14.1</a></p>
<h2>v0.14.0</h2>
<p>No release notes provided.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="200db7243f"><code>200db72</code></a>
Pin setup-ko to previous release (<a
href="https://redirect.github.com/google/ko/issues/1082">#1082</a>)</li>
<li><a
href="4366ded82c"><code>4366ded</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1079">#1079</a> from
ko-build/dependabot/github_actions/slsa-framewo...</li>
<li><a
href="adbea950c1"><code>adbea95</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1078">#1078</a> from
ko-build/dependabot/github_actions/goreleaser/g...</li>
<li><a
href="6175237fe6"><code>6175237</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1077">#1077</a> from
ko-build/dependabot/go_modules/github.com/spf13...</li>
<li><a
href="5e5fe2e703"><code>5e5fe2e</code></a>
Merge pull request <a
href="https://redirect.github.com/google/ko/issues/1076">#1076</a> from
ko-build/dependabot/github_actions/aws-actions/...</li>
<li><a
href="dc9b3eebef"><code>dc9b3ee</code></a>
Bump github.com/spf13/viper from 1.15.0 to 1.16.0</li>
<li><a
href="ed445128e2"><code>ed44512</code></a>
Bump golang.org/x/tools from 0.9.3 to 0.10.0 (<a
href="https://redirect.github.com/google/ko/issues/1080">#1080</a>)</li>
<li><a
href="fcd95ec958"><code>fcd95ec</code></a>
Bump slsa-framework/slsa-github-generator from 1.6.0 to 1.7.0</li>
<li><a
href="974f09cdea"><code>974f09c</code></a>
Bump goreleaser/goreleaser-action from 4.2.0 to 4.3.0</li>
<li><a
href="893f6e877f"><code>893f6e8</code></a>
Bump aws-actions/configure-aws-credentials from 2.1.0 to 2.2.0</li>
<li>Additional commits viewable in <a
href="https://github.com/google/ko/compare/v0.13.0...v0.14.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 13:56:50 -03:00
Carlos Alexandro Becker
d085b3ad44
feat(deps): bump github.com/google/go-github/v53 50.1.0 to 53.2.0 (#4146)
updated!

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-26 13:41:47 -03:00
dependabot[bot]
b2d08b38c8
feat(deps): bump github.com/disgoorg/disgo from 0.16.6 to 0.16.7 (#4145)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.6 to 0.16.7.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.7</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix nil pointer dereference in
<code>gatewayHandlerTypingStart</code> by <a
href="https://github.com/jkdlgy"><code>@​jkdlgy</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/280">disgoorg/disgo#280</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.6...v0.16.7">https://github.com/disgoorg/disgo/compare/v0.16.6...v0.16.7</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="39854144d8"><code>3985414</code></a>
remove member caching from typing &amp; message reaction events</li>
<li><a
href="f4a652fadc"><code>f4a652f</code></a>
Fix nil pointer dereference in gatewayHandlerTypingStart (<a
href="https://redirect.github.com/disgoorg/disgo/issues/280">#280</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.6...v0.16.7">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.6&new-version=0.16.7)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-26 13:24:57 -03:00
Carlos Alexandro Becker
161e6fee78
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.1 to 2.31.0 (#4144)
latest and greatest
2023-06-26 13:20:47 -03:00
dependabot[bot]
9a21cbe32c
feat(deps): bump github.com/xanzy/go-gitlab from 0.85.0 to 0.86.0 (#4131)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.85.0 to 0.86.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0886867b3b"><code>0886867</code></a>
Update CI and CONTRIBUTION.md</li>
<li><a
href="57a8f8f705"><code>57a8f8f</code></a>
Fix two linter warnings</li>
<li><a
href="d4057c786d"><code>d4057c7</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1646">#1646</a>
from theoriginalstove/1643-contributing-guide</li>
<li><a
href="c1a78fc6ad"><code>c1a78fc</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1740">#1740</a>
from PatrickRice-KSC/add-admin-permission-const</li>
<li><a
href="9f3d9fad76"><code>9f3d9fa</code></a>
Add admin permission const</li>
<li><a
href="85fa21c71b"><code>85fa21c</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1732">#1732</a>
from Mareo/add-support-for-discord-service</li>
<li><a
href="1a7fd5cf74"><code>1a7fd5c</code></a>
Update README.md</li>
<li><a
href="39ca669228"><code>39ca669</code></a>
Update CONTRIBUTING.md</li>
<li><a
href="9fc3c91b5d"><code>9fc3c91</code></a>
Add support for Discord service</li>
<li>See full diff in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.85.0...v0.86.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.85.0&new-version=0.86.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-21 15:56:09 -03:00
dependabot[bot]
e2eb95d5cf
feat(deps): bump gocloud.dev from 0.29.0 to 0.30.0 (#4129)
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.29.0 to
0.30.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-cloud/releases">gocloud.dev's
releases</a>.</em></p>
<blockquote>
<h2>v0.30.0</h2>
<p><strong>blob</strong></p>
<ul>
<li><strong>all</strong>: Add <code>Upload</code> and
<code>Download</code> methods that may be more efficient for some
drivers.</li>
<li><strong>s3blob</strong>: Add support for per-request
<code>s3v2.Options</code>.</li>
<li><strong>s3blob</strong>: Stop escaping second <code>/</code> in
<code>//</code>; it's no longer necessary.</li>
</ul>
<p><strong>pubsub</strong></p>
<ul>
<li><strong>gcppubsub</strong>: Make it possible to configure
<code>max_send_batch_size</code>.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d2d5bedb50"><code>d2d5bed</code></a>
all: prep for release (<a
href="https://redirect.github.com/google/go-cloud/issues/3263">#3263</a>)</li>
<li><a
href="c2e172b5a7"><code>c2e172b</code></a>
all: update dependencies (<a
href="https://redirect.github.com/google/go-cloud/issues/3262">#3262</a>)</li>
<li><a
href="098177a48c"><code>098177a</code></a>
blob/s3blob: fix the 'awssdk' argument examples</li>
<li><a
href="2e4fad43f0"><code>2e4fad4</code></a>
all: remove refs to deprecated xerrors</li>
<li><a
href="1db413f1b3"><code>1db413f</code></a>
pubsub/gcppubsub: make it possible to configure max_send_batch_size</li>
<li><a
href="0c8428bf43"><code>0c8428b</code></a>
blob: Add Upload and Download methods that may be more efficient for
some dri...</li>
<li><a
href="54c71241a5"><code>54c7124</code></a>
all: cleanup duplicate import statements</li>
<li><a
href="28b1328ae4"><code>28b1328</code></a>
all: minor code simplifications for returned boolean expressions</li>
<li><a
href="2a407f5e6a"><code>2a407f5</code></a>
blob/gcsblob: Refresh goldens</li>
<li><a
href="0cc16c8ae1"><code>0cc16c8</code></a>
all: update goldens (<a
href="https://redirect.github.com/google/go-cloud/issues/3252">#3252</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-cloud/compare/v0.29.0...v0.30.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.29.0&new-version=0.30.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-20 09:04:08 -03:00
Carlos Alexandro Becker
7d7e02b739
chore: update schema
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-06-16 16:48:59 +00:00
dependabot[bot]
5f908bd121
feat(deps): bump golang.org/x/tools from 0.9.3 to 0.10.0 (#4121) 2023-06-16 13:24:19 -03:00
dependabot[bot]
7af206fab5
feat(deps): bump golang.org/x/sync from 0.2.0 to 0.3.0 (#4109) 2023-06-15 14:23:43 +00:00
dependabot[bot]
277339bf1f
feat(deps): bump golang.org/x/oauth2 from 0.8.0 to 0.9.0 (#4103) 2023-06-14 12:48:43 +00:00
dependabot[bot]
a3efb28d47
feat(deps): bump golang.org/x/crypto from 0.9.0 to 0.10.0 (#4101)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.9.0
to 0.10.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8e447d8cc5"><code>8e447d8</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="22c9997952"><code>22c9997</code></a>
go.mod: tell x repo tagging to ignore dep on net</li>
<li><a
href="d0b316056b"><code>d0b3160</code></a>
x509roots: add new module</li>
<li><a
href="16222386f4"><code>1622238</code></a>
Add support for &quot;<a
href="mailto:hmac-sha2-512-etm@openssh.com">hmac-sha2-512-etm@openssh.com</a>&quot;</li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.9.0...v0.10.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.9.0&new-version=0.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-14 09:36:28 -03:00
dependabot[bot]
f568ef9868
feat(deps): bump github.com/disgoorg/disgo from 0.16.5 to 0.16.6 (#4089)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.5 to 0.16.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.6</h2>
<h2>What's Changed</h2>
<ul>
<li>add support for the new username system by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/273">disgoorg/disgo#273</a></li>
<li>fix presence event handler by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/275">disgoorg/disgo#275</a></li>
<li>fix get webhooks by <a
href="https://github.com/ikafly144"><code>@​ikafly144</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/272">disgoorg/disgo#272</a></li>
<li>fix incorrect type for <code>WithChannelTypes</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="4547c17ccf</a></li>
<li>remove <code>AllowedMentions</code> from
<code>NewMessageUpdateBuilder()</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="0b0b6db253</a></li>
<li>add <code>SyncID</code> to <code>Activity</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="3defaebde6</a></li>
<li>move set into cache package by <a
href="https://github.com/topi314"><code>@​topi314</code></a> in <a
href="a783e34ad0</a></li>
</ul>
<h2>Breaking Changes</h2>
<ul>
<li>moved <code>github.com/disgoorg/disgo/internal/set</code> into
<code>github.com/disgoorg/disgo/cache</code></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ikafly144"><code>@​ikafly144</code></a>
made their first contribution in <a
href="https://redirect.github.com/disgoorg/disgo/pull/272">disgoorg/disgo#272</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.5...v0.16.6">https://github.com/disgoorg/disgo/compare/v0.16.5...v0.16.6</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f810691d7b"><code>f810691</code></a>
reforamt isActivityUpdated check</li>
<li><a
href="863ddf334f"><code>863ddf3</code></a>
fix presence event handler (<a
href="https://redirect.github.com/disgoorg/disgo/issues/275">#275</a>)</li>
<li><a
href="844ef78b99"><code>844ef78</code></a>
remove invalid interaction methods from autocomplete</li>
<li><a
href="4547c17ccf"><code>4547c17</code></a>
fix incorrect type for WithChannelTypes</li>
<li><a
href="9b3d573a10"><code>9b3d573</code></a>
add docs to User and Member funcs</li>
<li><a
href="ab0ddbc19b"><code>ab0ddbc</code></a>
Add support for the new username system (<a
href="https://redirect.github.com/disgoorg/disgo/issues/273">#273</a>)</li>
<li><a
href="0b0b6db253"><code>0b0b6db</code></a>
remove AllowedMentions from NewMessageUpdateBuilder()</li>
<li><a
href="e0e8d5b1ee"><code>e0e8d5b</code></a>
fix get webhooks (<a
href="https://redirect.github.com/disgoorg/disgo/issues/272">#272</a>)</li>
<li><a
href="3defaebde6"><code>3defaeb</code></a>
add SyncID to Activity</li>
<li><a
href="a783e34ad0"><code>a783e34</code></a>
move set into cache package</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.5...v0.16.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.5&new-version=0.16.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-12 08:56:36 -03:00
dependabot[bot]
cb4c9ec0ff
feat(deps): bump github.com/atc0005/go-teams-notify/v2 from 2.7.0 to 2.7.1 (#4090)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps
[github.com/atc0005/go-teams-notify/v2](https://github.com/atc0005/go-teams-notify)
from 2.7.0 to 2.7.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/atc0005/go-teams-notify/releases">github.com/atc0005/go-teams-notify/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.7.1</h2>
<h2>Changed</h2>
<ul>
<li>Dependencies
<ul>
<li><code>github.com/stretchr/testify</code>
<ul>
<li><code>v1.8.1</code> to <code>v1.8.2</code></li>
</ul>
</li>
</ul>
</li>
<li>CI
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/198">GH-198</a>)
Add Go Module Validation, Dependency Updates jobs</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/200">GH-200</a>)
Drop <code>Push Validation</code> workflow</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/201">GH-201</a>)
Rework workflow scheduling</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/203">GH-203</a>)
Remove <code>Push Validation</code> workflow status badge</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/207">GH-207</a>)
Update vuln analysis GHAW to use on.push hook</li>
</ul>
</li>
<li><code>Adaptive Card</code> format
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/206">GH-206</a>)
Update <code>AdaptiveCardMaxVersion</code> to 1.5</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/216">GH-216</a>)
Refactor <code>TopLevelCard.Validate</code></li>
</ul>
</li>
<li>Other
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/212">GH-212</a>)
Update <code>InList</code>, <code>InListIfFieldValNotEmpty</code>
validators</li>
</ul>
</li>
</ul>
<h2>Fixed</h2>
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/208">GH-208</a>)
Validation of <code>(adaptivecard.Attachment).Content</code> is
missing</li>
</ul>
<h2>References</h2>
<ul>
<li>See the <a
href="https://github.com/atc0005/go-teams-notify/milestone/12?closed=1"><code>v2.7.1</code>
milestone</a> for the issues associated with this release.</li>
<li>See our <a
href="https://github.com/atc0005/go-teams-notify/blob/master/CHANGELOG.md">CHANGELOG</a>
for more information.</li>
</ul>
<h2>v2.7.1-rc.3</h2>
<h2>WARNING</h2>
<p>This is a release candidate (RC) release. Unless issues are
discovered &amp; reported, this will become the next v2.7.1 stable
release.</p>
<p>Please test and provide feedback so that any blocking issues can be
resolved before the v2.7.1 release.</p>
<p>Thanks in advance!</p>
<h2>Changed</h2>
<ul>
<li>Dependencies
<ul>
<li><code>github.com/stretchr/testify</code>
<ul>
<li><code>v1.8.1</code> to <code>v1.8.2</code></li>
</ul>
</li>
</ul>
</li>
<li>CI
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/198">GH-198</a>)
Add Go Module Validation, Dependency Updates jobs</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/200">GH-200</a>)
Drop <code>Push Validation</code> workflow</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/201">GH-201</a>)
Rework workflow scheduling</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/203">GH-203</a>)
Remove <code>Push Validation</code> workflow status badge</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/207">GH-207</a>)
Update vuln analysis GHAW to use on.push hook</li>
</ul>
</li>
<li><code>Adaptive Card</code> format
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/206">GH-206</a>)
Update <code>AdaptiveCardMaxVersion</code> to 1.5</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/216">GH-216</a>)
Refactor <code>TopLevelCard.Validate</code></li>
</ul>
</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/atc0005/go-teams-notify/blob/master/CHANGELOG.md">github.com/atc0005/go-teams-notify/v2's
changelog</a>.</em></p>
<blockquote>
<h2>[v2.7.1] - 2023-06-09</h2>
<h3>Changed</h3>
<ul>
<li>Dependencies
<ul>
<li><code>github.com/stretchr/testify</code>
<ul>
<li><code>v1.8.1</code> to <code>v1.8.2</code></li>
</ul>
</li>
</ul>
</li>
<li>CI
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/198">GH-198</a>)
Add Go Module Validation, Dependency Updates jobs</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/200">GH-200</a>)
Drop <code>Push Validation</code> workflow</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/201">GH-201</a>)
Rework workflow scheduling</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/203">GH-203</a>)
Remove <code>Push Validation</code> workflow status badge</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/207">GH-207</a>)
Update vuln analysis GHAW to use on.push hook</li>
</ul>
</li>
<li><code>Adaptive Card</code> format
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/206">GH-206</a>)
Update <code>AdaptiveCardMaxVersion</code> to 1.5</li>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/216">GH-216</a>)
Refactor <code>TopLevelCard.Validate</code></li>
</ul>
</li>
<li>Other
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/212">GH-212</a>)
Update <code>InList</code>, <code>InListIfFieldValNotEmpty</code>
validators</li>
</ul>
</li>
</ul>
<h3>Fixed</h3>
<ul>
<li>(<a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/208">GH-208</a>)
Validation of <code>(adaptivecard.Attachment).Content</code> is
missing</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ff587f738f"><code>ff587f7</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/223">#223</a>
from atc0005/update-changelog-for-v2.7.1-release</li>
<li><a
href="9f9ca98acb"><code>9f9ca98</code></a>
Update CHANGELOG for v2.7.1 release</li>
<li><a
href="51498b8e23"><code>51498b8</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/219">#219</a>
from atc0005/minor-changelog-format-tweaks</li>
<li><a
href="fc09c758b5"><code>fc09c75</code></a>
Minor CHANGELOG formatting tweaks</li>
<li><a
href="0af7ea6f64"><code>0af7ea6</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/217">#217</a>
from atc0005/update-changelog-for-v2.7.1-release</li>
<li><a
href="3583e65222"><code>3583e65</code></a>
Update CHANGELOG for v2.7.1 release</li>
<li><a
href="f4e728a820"><code>f4e728a</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/216">#216</a>
from atc0005/refactor-toplevelcard-validate</li>
<li><a
href="f413f376be"><code>f413f37</code></a>
Refactor TopLevelCard.Validate</li>
<li><a
href="cc081820a7"><code>cc08182</code></a>
Merge pull request <a
href="https://redirect.github.com/atc0005/go-teams-notify/issues/213">#213</a>
from atc0005/update-changelog-for-v2.7.1-release</li>
<li><a
href="4684ebf5e6"><code>4684ebf</code></a>
Update CHANGELOG for v2.7.1 release</li>
<li>Additional commits viewable in <a
href="https://github.com/atc0005/go-teams-notify/compare/v2.7.0...v2.7.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/atc0005/go-teams-notify/v2&package-manager=go_modules&previous-version=2.7.0&new-version=2.7.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-12 08:56:14 -03:00
dependabot[bot]
fb8871669d
feat(deps): bump github.com/xanzy/go-gitlab from 0.84.0 to 0.85.0 (#4091)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.84.0 to 0.85.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2e614fe73c"><code>2e614fe</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1734">#1734</a>
from jasonwliu/master</li>
<li><a
href="e7ee48984a"><code>e7ee489</code></a>
fix type for SystemOutput</li>
<li><a
href="ddfebb340c"><code>ddfebb3</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1731">#1731</a>
from avkudryashov/master</li>
<li><a
href="3420585002"><code>3420585</code></a>
Add the missing field named path.</li>
<li><a
href="6d7ebb9d08"><code>6d7ebb9</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1729">#1729</a>
from C0mp4ct/add_regex_to_branches</li>
<li><a
href="628b54e473"><code>628b54e</code></a>
Add regex option to Branches API</li>
<li>See full diff in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.84.0...v0.85.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.84.0&new-version=0.85.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-12 08:55:46 -03:00
dependabot[bot]
91d492033a
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.30.0 to 2.30.1 (#4079)
Bumps
[github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from
2.30.0 to 2.30.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.30.1</h2>
<h2>Changelog</h2>
<h3>Other work</h3>
<ul>
<li>a72ecd200bcaa81de3fc23f21f8b7f02060ee448: docs: update cmd docs (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/nfpm/compare/v2.30.0...v2.30.1">https://github.com/goreleaser/nfpm/compare/v2.30.0...v2.30.1</a></p>
<h2>Helping out</h2>
<p>This release is only possible thanks to <strong>all</strong> the
support of <strong>awesome people</strong>!</p>
<p>Want to be one of them?
You can <a href="https://goreleaser.com/sponsors/">sponsor</a> or <a
href="https://goreleaser.com/contributing">contribute with code</a>.</p>
<h2>Where to go next?</h2>
<ul>
<li>nFPM is a satellite project from GoReleaser. <a
href="https://goreleaser.com">Check it out</a>!</li>
<li>Find examples and commented usage of all options in our <a
href="https://nfpm.goreleaser.com/">website</a>.</li>
<li>Reach out on <a href="https://discord.gg/RGEBtg8vQ6">Discord</a> and
<a href="https://twitter.com/goreleaser">Twitter</a>!</li>
</ul>
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="3e5d930439"><code>3e5d930</code></a>
chore: remove space from asset name (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/674">#674</a>)</li>
<li><a
href="a72ecd200b"><code>a72ecd2</code></a>
docs: update cmd docs</li>
<li>See full diff in <a
href="https://github.com/goreleaser/nfpm/compare/v2.30.0...v2.30.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/goreleaser/nfpm/v2&package-manager=go_modules&previous-version=2.30.0&new-version=2.30.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-07 08:25:15 -03:00
dependabot[bot]
2e2bde5090
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.29.0 to 2.30.0 (#4074) 2023-06-06 08:46:09 -03:00
dependabot[bot]
d049166630
feat(deps): bump golang.org/x/tools from 0.9.2 to 0.9.3 (#4067)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.9.2
to 0.9.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.9.3</h2>
<p><em>Move fast and fix things...</em><code>golang/go#54395</code></p>
<p>As always, thank you for filing issues!</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0dda7d614e"><code>0dda7d6</code></a>
go/pointer: remove replace directive</li>
<li><a
href="98f1b4dee8"><code>98f1b4d</code></a>
gopls/internal/lsp/cache: check number of orphaned files after
filtering</li>
<li><a
href="a260315e30"><code>a260315</code></a>
go/pointer: create submodule</li>
<li>See full diff in <a
href="https://github.com/golang/tools/compare/v0.9.2...v0.9.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.9.2&new-version=0.9.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-05 13:06:11 -03:00
dependabot[bot]
80fddf0384
feat(deps): bump github.com/xanzy/go-gitlab from 0.83.0 to 0.84.0 (#4061)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.83.0 to 0.84.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="46b2e30896"><code>46b2e30</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1727">#1727</a>
from Pvlerick/add-approval_rules-in-protected_enviro...</li>
<li><a
href="cad317938a"><code>cad3179</code></a>
Final few tweaks</li>
<li><a
href="d59139c6d1"><code>d59139c</code></a>
fixup: adding ID to test suite</li>
<li><a
href="542beb6b06"><code>542beb6</code></a>
Review comments</li>
<li><a
href="948b6bf966"><code>948b6bf</code></a>
Add approval_rules in protected_environments</li>
<li><a
href="8f031c3c21"><code>8f031c3</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1725">#1725</a>
from wtertius/add_queued_duration_to_bridge</li>
<li><a
href="0e5a87514a"><code>0e5a875</code></a>
Add <code>queued_duration</code> field to bridge</li>
<li><a
href="32985e37f3"><code>32985e3</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1724">#1724</a>
from mgross-ebner/master</li>
<li><a
href="5b481c92f2"><code>5b481c9</code></a>
fix type for Weight</li>
<li><a
href="f5772c8149"><code>f5772c8</code></a>
adapt test payload</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.83.0...v0.84.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.83.0&new-version=0.84.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-01 10:58:24 -03:00
dependabot[bot]
062ab90e5b
feat(deps): bump golang.org/x/tools from 0.9.1 to 0.9.2 (#4062)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.9.1
to 0.9.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.9.2</h2>
<p>This release contains many bug fixes, particularly related to
problems that would require restarting gopls.</p>
<p><strong>Note about network usage</strong>: among these fixes was a
change to allow network usage when reloading the workspace. Reloading
occurs when a <code>go.mod</code>, <code>go.sum</code>, or
<code>go.work</code> file changes on disk. In the past, gopls would only
allow network during the first workspace load. This resulted in
confusing behavior when, for example, a new dependency is added to a
<code>go.mod</code> file and gopls could not load it, but loading
succeeded on restart. See <a
href="https://go.dev/issues/54069">#54069</a> for more details.</p>
<h2>Configuration changes</h2>
<h3>directoryFilters at arbitrary depth</h3>
<p>The <a
href="https://github.com/golang/tools/blob/master/gopls/doc/settings.md#directoryfilters-string"><code>&quot;directoryFilters&quot;</code></a>
setting now supports excluding directories at arbitrary depth, using the
<code>**</code> operator. (note that for v0.9.2, the default value for
this setting is still <code>[&quot;-node_modules]&quot;</code>. In the
next release, this will change to
<code>[&quot;-**/node_modules&quot;]</code>).</p>
<h2>Bug fixes and Performance improvements...</h2>
<p>This release contains the following notable bug fixes / performance
improvements:</p>
<ul>
<li><strong>Additional change optimization</strong> - Following up on
the work to optimize change processing from the <a
href="https://github.com/golang/tools/releases/tag/gopls%2Fv0.9.0">v0.9.0
release</a>, this release contains additional optimizations that result
in around 50% faster change processing (measured via edits in the
Kubernetes repo).</li>
<li><strong>Fix for a long-standing memory leak</strong> - <a
href="https://go.dev/issues/53780">#53780</a> fixed a long-standing bug
that caused gopls to hold on to its initial state, gradually leaking
memory as state changed during the editing session.</li>
<li><strong>Fewer restarts</strong> - This release contains many fixes
for cache-invalidation bugs that would cause gopls to get confused and
require restarting. Additionally, see the note at top about enabling the
network when reloading the workspace. We believe we are close to our
goal that restarting gopls should never be required to fix workspace
errors. If you encounter such a bug, please file an issue!</li>
</ul>
<p>A full list of all issues fixed can be found in the <a
href="https://github.com/golang/go/milestone/274?closed=1">gopls/v0.9.2
milestone</a>.
To report a new problem, please file a new issue at <a
href="https://go.dev/issues/new">https://go.dev/issues/new</a>.</p>
<h2>Thank you to our contributors!</h2>
<p>Thank you for your contribution, <a
href="https://github.com/alandonovan"><code>@​alandonovan</code></a>, <a
href="https://github.com/antoineco"><code>@​antoineco</code></a>, <a
href="https://github.com/dle8"><code>@​dle8</code></a>, <a
href="https://github.com/euroelessar"><code>@​euroelessar</code></a>, <a
href="https://github.com/findleyr"><code>@​findleyr</code></a>, <a
href="https://github.com/hyangah"><code>@​hyangah</code></a>, <a
href="https://github.com/jamalc"><code>@​jamalc</code></a>, <a
href="https://github.com/mssdvd"><code>@​mssdvd</code></a>, <a
href="https://github.com/pjweinbgo"><code>@​pjweinbgo</code></a>, <a
href="https://github.com/rentziass"><code>@​rentziass</code></a>, and <a
href="https://github.com/suzmue"><code>@​suzmue</code></a>!</p>
<h2>What's next</h2>
<p>The next planned gopls release is <a
href="https://github.com/golang/go/milestone/278">v0.10.0</a>. We’re
excited about features and improvements on the horizon, for example:</p>
<ul>
<li>Package renaming (<a
href="https://go.dev/issues/41567">#41567</a>)</li>
<li>More accurate static-analysis (<a
href="https://go.dev/issues/48738">#48738</a>)</li>
<li>Improved support for the new 1.19 doc comment format (<a
href="https://go.dev/issues/54260">#54260</a>)</li>
<li>Making it easier to work with <code>go.work</code> files (many
issues, for example <a href="https://go.dev/issues/53880">#53880</a> or
<a href="https://go.dev/issues/54261">#54261</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="96844c3594"><code>96844c3</code></a>
cmd/{guru,callgraph}: stop using go/pointer</li>
<li><a
href="cd694d8db4"><code>cd694d8</code></a>
go/packages: include
&quot;unsafe&quot;.GoFiles=[&quot;unsafe.go&quot;]</li>
<li><a
href="33c741de78"><code>33c741d</code></a>
gopls/internal/lsp: add min/max builtin</li>
<li><a
href="933c7ccb15"><code>933c7cc</code></a>
internal/lsp/source: use exact match in import highlighting</li>
<li><a
href="5974258e68"><code>5974258</code></a>
gopls/internal/lsp: clear vuln diagnostics on config changes</li>
<li><a
href="f3faea1982"><code>f3faea1</code></a>
go/packages: pass -pgo=off on go1.21 and later</li>
<li><a
href="5f74ec7da5"><code>5f74ec7</code></a>
internal/lsp/debug: add links to profiles and GC</li>
<li><a
href="ed90c6d201"><code>ed90c6d</code></a>
internal/diff: unexport various identifiers</li>
<li><a
href="827f5aa2c3"><code>827f5aa</code></a>
gopls/internal/lsp/source: test references bug on struct{p.T}</li>
<li><a
href="a12e1a6aee"><code>a12e1a6</code></a>
go/ssa/interp: implement min/max builtins</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.9.1...v0.9.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.9.1&new-version=0.9.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-06-01 09:49:50 -03:00
dependabot[bot]
f704a41292
feat(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 (#4059)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify)
from 1.8.3 to 1.8.4.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f97607b898"><code>f97607b</code></a>
Create GitHub release when new release tag is pushed (<a
href="https://redirect.github.com/stretchr/testify/issues/1354">#1354</a>)</li>
<li>See full diff in <a
href="https://github.com/stretchr/testify/compare/v1.8.3...v1.8.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=go_modules&previous-version=1.8.3&new-version=1.8.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-31 10:52:51 -03:00
dependabot[bot]
eb6b88ce35
feat(deps): bump github.com/imdario/mergo from 0.3.15 to 0.3.16 (#4045)
Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from
0.3.15 to 0.3.16.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/imdario/mergo/releases">github.com/imdario/mergo's
releases</a>.</em></p>
<blockquote>
<h2>Announcement: v1.0.0 will be released on June 18th</h2>
<p><em>This release doesn't contain code changes.</em></p>
<p>After 10 years, with many corner cases covered, very few issues
pending (at least, comparing them with the usage of the library as part
of Docker, Kubernetes, Datadog's agent, etc.), and a very stable API, I
think it's time to release a 1.0.0 version.</p>
<p>This version will be released under a vanity URL: dario.cat/mergo</p>
<p>PS: although I'll make sure that github.com/imdario/mergo will be
available, I'm going to also change my GitHub handle, so expect for a
few minutes to not be able to pull from github.com/imdario as I fork it
from the new handle to the old one.</p>
<p>PS2: I'm creating a discussion for this release to make sure we can
have a conversation around the topic, and anything else about Mergo that
you care about.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="14fe2b165b"><code>14fe2b1</code></a>
fix: OpenSSF scorecard generation</li>
<li><a
href="4cde94b0b5"><code>4cde94b</code></a>
fix: remove Travis link and fix tests actions</li>
<li><a
href="df62a52b84"><code>df62a52</code></a>
chore: README and GitHub actions</li>
<li>See full diff in <a
href="https://github.com/imdario/mergo/compare/v0.3.15...v0.3.16">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/imdario/mergo&package-manager=go_modules&previous-version=0.3.15&new-version=0.3.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-29 10:01:51 -03:00
dependabot[bot]
7c6201f5f5
feat(deps): bump github.com/sigstore/rekor from 1.1.1 to 1.2.0 (#4044)
Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor)
from 1.1.1 to 1.2.0.
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/rekor/blob/main/CHANGELOG.md">github.com/sigstore/rekor's
changelog</a>.</em></p>
<blockquote>
<h1>v1.2.0</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>add client method to generate TLE struct (<a
href="https://redirect.github.com/sigstore/rekor/issues/1498">#1498</a>)</li>
<li>add dsse type (<a
href="https://redirect.github.com/sigstore/rekor/issues/1487">#1487</a>)</li>
<li>support other KMS providers (AWS, Azure, Hashicorp) in addition to
GCP (<a
href="https://redirect.github.com/sigstore/rekor/issues/1488">#1488</a>)</li>
<li>Add concurrency to backfill-redis (<a
href="https://redirect.github.com/sigstore/rekor/issues/1504">#1504</a>)</li>
<li>omit informational message if machine-parseable output has been
requested (<a
href="https://redirect.github.com/sigstore/rekor/issues/1486">#1486</a>)</li>
<li>Publish stable checkpoint periodically to Redis (<a
href="https://redirect.github.com/sigstore/rekor/issues/1461">#1461</a>)</li>
<li>Add intoto v0.0.2 to backfill script (<a
href="https://redirect.github.com/sigstore/rekor/issues/1500">#1500</a>)</li>
<li>add new method to test insertability of proposed entries into log
(<a
href="https://redirect.github.com/sigstore/rekor/issues/1410">#1410</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>use t.Skip() in fuzzers (<a
href="https://redirect.github.com/sigstore/rekor/issues/1506">#1506</a>)</li>
<li>improve fuzzing coverage (<a
href="https://redirect.github.com/sigstore/rekor/issues/1499">#1499</a>)</li>
<li>Remove watcher script (<a
href="https://redirect.github.com/sigstore/rekor/issues/1484">#1484</a>)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Merge pull request from GHSA-frqx-jfcm-6jjr</li>
<li>Remove requirement of PayloadHash for intoto 0.0.1 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1490">#1490</a>)</li>
<li>fix lint errors, bump linter up to 1.52 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1485">#1485</a>)</li>
<li>Remove dependencies from pkg/util (<a
href="https://redirect.github.com/sigstore/rekor/issues/1469">#1469</a>)</li>
</ul>
<h2>Contributors</h2>
<ul>
<li>Bob Callaway</li>
<li>Carlos Tadeu Panato Junior</li>
<li>Ceridwen Coghlan</li>
<li>Cody Soyland</li>
<li>Hayden B</li>
<li>Miloslav Trmač</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="20a995116b"><code>20a9951</code></a>
update for v1.2.0 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1507">#1507</a>)</li>
<li><a
href="140c5add10"><code>140c5ad</code></a>
Merge pull request from GHSA-frqx-jfcm-6jjr</li>
<li><a
href="85bb2bc7a3"><code>85bb2bc</code></a>
use t.Skip() in fuzzers (<a
href="https://redirect.github.com/sigstore/rekor/issues/1506">#1506</a>)</li>
<li><a
href="3adca0d252"><code>3adca0d</code></a>
Add concurrency to backfill-redis (<a
href="https://redirect.github.com/sigstore/rekor/issues/1504">#1504</a>)</li>
<li><a
href="795a23619d"><code>795a236</code></a>
add client method to generate TLE struct (<a
href="https://redirect.github.com/sigstore/rekor/issues/1498">#1498</a>)</li>
<li><a
href="161a796f91"><code>161a796</code></a>
build(deps): bump github/codeql-action from 2.3.3 to 2.3.4 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1505">#1505</a>)</li>
<li><a
href="35c4489abc"><code>35c4489</code></a>
add dsse type (<a
href="https://redirect.github.com/sigstore/rekor/issues/1487">#1487</a>)</li>
<li><a
href="d318e2bf43"><code>d318e2b</code></a>
support other KMS providers (AWS, Azure, Hashicorp) in addition to GCP
(<a
href="https://redirect.github.com/sigstore/rekor/issues/1488">#1488</a>)</li>
<li><a
href="d508ebad91"><code>d508eba</code></a>
Remove requirement of PayloadHash for intoto 0.0.1 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1490">#1490</a>)</li>
<li><a
href="b387701f27"><code>b387701</code></a>
Add intoto v0.0.2 to backfill script (<a
href="https://redirect.github.com/sigstore/rekor/issues/1500">#1500</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sigstore/rekor/compare/v1.1.1...v1.2.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/rekor&package-manager=go_modules&previous-version=1.1.1&new-version=1.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-27 00:24:50 -03:00
dependabot[bot]
760aca268a
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.28.0 to 2.29.0 (#4030)
Bumps
[github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from
2.28.0 to 2.29.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.29.0</h2>
<h2>Changelog</h2>
<h3>Security updates</h3>
<ul>
<li>ed9abdf63d5012cc884f2a83b4ab2b42b3680d30: sec: fix for
CVE-2023-32698 (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>9ac328846c8b562562c6edfa910f3163ddbe4adc: fix: deb arm64 (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>312fd85338c26a44d330ed07f318d0640a11dcbb: fix: improve goarch to pkg
conversion (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>f64a311eefea340cd3f20cd4568de41b4c5e9aa6: fix: improve umask tests
and documentation (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>b1f3fef606dd1106ca163e5c7f4da0023f308c96: fix: md5sums entries and
lintian errors/warnings (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/656">#656</a>)
(<a href="https://github.com/malaupa"><code>@​malaupa</code></a>)</li>
<li>c20618cdd39ed938f9bf9b97461ce830429fa60c: fix: mips architecture (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>9524bb8a26d3915e84a4df956d2ec064e836c4a3: fix: mips
softfloat/hardfloat handling (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Dependency updates</h3>
<ul>
<li>c2f47813a3d824bef5c3455669bd9b50081b89fc: feat(deps): bump
github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/649">#649</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>c24e1b4d99a451a1e023565b2930bc5512224c0e: feat(deps): bump
github.com/klauspost/compress from 1.16.3 to 1.16.4 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/646">#646</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>fccdae5dfcb9214ec38d631628074e1c129c204d: feat(deps): bump
github.com/klauspost/compress from 1.16.4 to 1.16.5 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/651">#651</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>a1fb0477f0f57fde4d673bee8afb8a20273eb7af: feat(deps): bump
github.com/klauspost/pgzip from 1.2.5 to 1.2.6 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/654">#654</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>561c39b135794aefb877769910e322d614b20d9d: feat(deps): bump
github.com/stretchr/testify from 1.8.2 to 1.8.3 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/661">#661</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
</ul>
<h3>Build process updates</h3>
<ul>
<li>4593dcb36ae178ccb5e6514b93499bf81d70529e: build: improve changelog
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>e01884ecba1964027fa87bbdb9bf5341408b2ef7: build: improve release
notes (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Other work</h3>
<ul>
<li>ab59aadf2347b47379cc6c764c00f4e3a5d196e6: docs: fix schema.json URL
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>590a3ff6f78deeca9bc6803518a173e53c3e65f9: docs: fix verify
instructions (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/647">#647</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>dce0853e6360835e450db726a3c13e0886f7aad6: docs: goarch to packager
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>2b9864a79ed85b4818d1ae1fa3cdfd76a3f8e4f7: docs: update SECURITY.md
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>858b78b7c12cf9b54a79956655ef8acf3207e3c4: docs: update cmd docs (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>1ba5a445d794977df0ee19ec333b36562f2b0e94: docs: update cmd docs (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/nfpm/compare/v2.28.0...v2.29.0">https://github.com/goreleaser/nfpm/compare/v2.28.0...v2.29.0</a></p>
<h2>Helping out</h2>
<p>This release is only possible thanks to <strong>all</strong> the
support of <strong>awesome people</strong>!</p>
<p>Want to be one of them?
You can <a href="https://goreleaser.com/sponsors/">sponsor</a> or <a
href="https://goreleaser.com/contributing">contribute with code</a>.</p>
<h2>Where to go next?</h2>
<ul>
<li>nFPM is a satellite project from GoReleaser. <a
href="https://goreleaser.com">Check it out</a>!</li>
<li>Find examples and commented usage of all options in our <a
href="https://nfpm.goreleaser.com/">website</a>.</li>
<li>Reach out on <a href="https://discord.gg/RGEBtg8vQ6">Discord</a> and
<a href="https://twitter.com/goreleaser">Twitter</a>!</li>
</ul>
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ed9abdf63d"><code>ed9abdf</code></a>
sec: fix for CVE-2023-32698</li>
<li><a
href="4593dcb36a"><code>4593dcb</code></a>
build: improve changelog</li>
<li><a
href="e01884ecba"><code>e01884e</code></a>
build: improve release notes</li>
<li><a
href="f6f8048d47"><code>f6f8048</code></a>
test: stabilize arch test</li>
<li><a
href="7d6a77bee6"><code>7d6a77b</code></a>
test: fix arch tests</li>
<li><a
href="815b388464"><code>815b388</code></a>
test: fix</li>
<li><a
href="9524bb8a26"><code>9524bb8</code></a>
fix: mips softfloat/hardfloat handling</li>
<li><a
href="a8c16744a1"><code>a8c1674</code></a>
test: fix files test</li>
<li><a
href="66c3d277cf"><code>66c3d27</code></a>
test: fixes</li>
<li><a
href="f64a311eef"><code>f64a311</code></a>
fix: improve umask tests and documentation</li>
<li>Additional commits viewable in <a
href="https://github.com/goreleaser/nfpm/compare/v2.28.0...v2.29.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/goreleaser/nfpm/v2&package-manager=go_modules&previous-version=2.28.0&new-version=2.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-24 09:16:40 -03:00
dependabot[bot]
dab69c9b5a
feat(deps): bump github.com/disgoorg/disgo from 0.16.4 to 0.16.5 (#4025)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.4 to 0.16.5.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="125d0727da"><code>125d072</code></a>
fix unmarshalling &amp; marshalling of InteractionChannel</li>
<li><a
href="67ddd7c006"><code>67ddd7c</code></a>
change Interaction.Channel from PartialChannel to
InteractionChannel</li>
<li><a
href="3eb45b6149"><code>3eb45b6</code></a>
fix nil pointer on user leaving voice channel and no audioReceiver being
setup</li>
<li><a
href="554e2695e2"><code>554e269</code></a>
add GatewayMessageDataUnknown &amp; don't error on unknown voice gateway
message</li>
<li><a
href="6b794ba092"><code>6b794ba</code></a>
rename BoostProgressBarEnabled to PremiumProgressBarEnabled</li>
<li><a
href="c3f2beb13f"><code>c3f2beb</code></a>
add Stickers to GuildPreview</li>
<li><a
href="6cda94940a"><code>6cda949</code></a>
Add raid protection (<a
href="https://redirect.github.com/disgoorg/disgo/issues/223">#223</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.4...v0.16.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.4&new-version=0.16.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 09:56:41 -03:00
dependabot[bot]
efafe86ead
feat(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#4022)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify)
from 1.8.2 to 1.8.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4c93d8f201"><code>4c93d8f</code></a>
EqualExportedValues: Handle nested pointer, slice and map fields (<a
href="https://redirect.github.com/stretchr/testify/issues/1379">#1379</a>)</li>
<li><a
href="4b2f4d2bcf"><code>4b2f4d2</code></a>
add EventuallyWithT assertion (<a
href="https://redirect.github.com/stretchr/testify/issues/1264">#1264</a>)</li>
<li><a
href="b3106d772c"><code>b3106d7</code></a>
allow testing for functional options (<a
href="https://redirect.github.com/stretchr/testify/issues/1023">#1023</a>)</li>
<li><a
href="437071b948"><code>437071b</code></a>
assert: fix error message formatting for NotContains (<a
href="https://redirect.github.com/stretchr/testify/issues/1362">#1362</a>)</li>
<li><a
href="c5fc9d6b6b"><code>c5fc9d6</code></a>
Compare public elements of struct (<a
href="https://redirect.github.com/stretchr/testify/issues/1309">#1309</a>)</li>
<li>See full diff in <a
href="https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=go_modules&previous-version=1.8.2&new-version=1.8.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 10:42:28 -03:00
dependabot[bot]
f462f55556
feat(deps): bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible (#4006)
Bumps
[github.com/docker/distribution](https://github.com/docker/distribution)
from 2.8.1+incompatible to 2.8.2+incompatible.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/distribution/releases">github.com/docker/distribution's
releases</a>.</em></p>
<blockquote>
<h2>v2.8.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Revert registry/client: set <code>Accept: identity</code> header
when getting layers by <a
href="https://github.com/ndeloof"><code>@​ndeloof</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3783">distribution/distribution#3783</a></li>
<li>Parse <code>http</code> forbidden as denied by <a
href="https://github.com/vvoland"><code>@​vvoland</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3914">distribution/distribution#3914</a></li>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2022-28391">CVE-2022-28391</a>
by bumping alpine from 3.14 to 3.16 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> (<a
href="https://redirect.github.com/distribution/distribution/pull/3650">#3650</a>)</li>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2023-2253">CVE-2023-2253</a>
runaway allocation on /v2/_catalog by <a
href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a
href="521ea3d973"><code>521ea3d9</code></a></li>
<li>Fix panic in inmemory driver by <a
href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li>
<li>bump up golang version (alternative) by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li>
<li>Dockerfile: update xx to v1.2.1 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li>
<li>update to go1.19.9 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li>
<li>Add code to handle pagination of parts. Fixes max layer size of 10GB
bug by <a
href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li>
<li>Dockerfile: fix filenames of artifacts by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3911">distribution/distribution#3911</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2</a></p>
<h2>v2.8.2-beta.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2022-28391">CVE-2022-28391</a>
by bumping alpine from 3.14 to 3.16 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> (<a
href="https://redirect.github.com/distribution/distribution/pull/3650">#3650</a>)</li>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2023-2253">CVE-2023-2253</a>
runaway allocation on /v2/_catalog by <a
href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a
href="521ea3d973"><code>521ea3d9</code></a></li>
<li>Fix panic in inmemory driver by <a
href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li>
<li>bump up golang version (alternative) by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li>
<li>Dockerfile: update xx to v1.2.1 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li>
<li>update to go1.19.9 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li>
<li>Add code to handle pagination of parts. Fixes max layer size of 10GB
bug by <a
href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li>
<li>Dockerfile: fix filenames of artifacts by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3911">distribution/distribution#3911</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.2">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.2</a></p>
<h2>v2.8.2-beta.1</h2>
<h3><strong>NOTE: This is a pre-release that does not contain any
artifacts!</strong></h3>
<h2>What's Changed</h2>
<ul>
<li>Fix runaway allocation on /v2/_catalog by <a
href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a
href="521ea3d973"><code>521ea3d9</code></a></li>
<li>Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3650">distribution/distribution#3650</a></li>
<li>Fix panic in inmemory driver by <a
href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li>
<li>bump up golang version (alternative) by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li>
<li>Dockerfile: update xx to v1.2.1 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li>
<li>update to go1.19.9 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li>
<li>Add code to handle pagination of parts. Fixes max layer size of 10GB
bug by <a
href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.1">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7c354a4b40"><code>7c354a4</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/distribution/issues/3915">#3915</a>
from distribution/2.8.2-release-notes</li>
<li><a
href="a173a9c625"><code>a173a9c</code></a>
Add v2.8.2 release notes</li>
<li><a
href="4894d35ecc"><code>4894d35</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/distribution/issues/3914">#3914</a>
from vvoland/handle-forbidden-28</li>
<li><a
href="f067f66d3d"><code>f067f66</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/distribution/issues/3783">#3783</a>
from ndeloof/accept-encoding-28</li>
<li><a
href="483ad69da3"><code>483ad69</code></a>
registry/errors: Parse http forbidden as denied</li>
<li><a
href="2b0f84df21"><code>2b0f84d</code></a>
Revert &quot;registry/client: set Accept: identity header when getting
layers&quot;</li>
<li><a
href="320d6a141f"><code>320d6a1</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/distribution/issues/3912">#3912</a>
from distribution/2.8.2-beta.2-release-notes</li>
<li><a
href="5f3ca1b2fb"><code>5f3ca1b</code></a>
Add release notes for 2.8.2-beta.2 release</li>
<li><a
href="cb840f63b3"><code>cb840f6</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/distribution/issues/3911">#3911</a>
from thaJeztah/2.8_backport_fix_releaser_filenames</li>
<li><a
href="e884644fff"><code>e884644</code></a>
Dockerfile: fix filenames of artifacts</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/distribution/compare/v2.8.1...v2.8.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/distribution&package-manager=go_modules&previous-version=2.8.1+incompatible&new-version=2.8.2+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-11 21:58:37 -03:00