1
0
mirror of https://github.com/goreleaser/goreleaser.git synced 2024-12-29 01:44:39 +02:00
Commit Graph

458 Commits

Author SHA1 Message Date
dependabot[bot]
760aca268a
feat(deps): bump github.com/goreleaser/nfpm/v2 from 2.28.0 to 2.29.0 (#4030)
Bumps
[github.com/goreleaser/nfpm/v2](https://github.com/goreleaser/nfpm) from
2.28.0 to 2.29.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/goreleaser/nfpm/releases">github.com/goreleaser/nfpm/v2's
releases</a>.</em></p>
<blockquote>
<h2>v2.29.0</h2>
<h2>Changelog</h2>
<h3>Security updates</h3>
<ul>
<li>ed9abdf63d5012cc884f2a83b4ab2b42b3680d30: sec: fix for
CVE-2023-32698 (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>9ac328846c8b562562c6edfa910f3163ddbe4adc: fix: deb arm64 (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>312fd85338c26a44d330ed07f318d0640a11dcbb: fix: improve goarch to pkg
conversion (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>f64a311eefea340cd3f20cd4568de41b4c5e9aa6: fix: improve umask tests
and documentation (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>b1f3fef606dd1106ca163e5c7f4da0023f308c96: fix: md5sums entries and
lintian errors/warnings (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/656">#656</a>)
(<a href="https://github.com/malaupa"><code>@​malaupa</code></a>)</li>
<li>c20618cdd39ed938f9bf9b97461ce830429fa60c: fix: mips architecture (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>9524bb8a26d3915e84a4df956d2ec064e836c4a3: fix: mips
softfloat/hardfloat handling (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Dependency updates</h3>
<ul>
<li>c2f47813a3d824bef5c3455669bd9b50081b89fc: feat(deps): bump
github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/649">#649</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>c24e1b4d99a451a1e023565b2930bc5512224c0e: feat(deps): bump
github.com/klauspost/compress from 1.16.3 to 1.16.4 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/646">#646</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>fccdae5dfcb9214ec38d631628074e1c129c204d: feat(deps): bump
github.com/klauspost/compress from 1.16.4 to 1.16.5 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/651">#651</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>a1fb0477f0f57fde4d673bee8afb8a20273eb7af: feat(deps): bump
github.com/klauspost/pgzip from 1.2.5 to 1.2.6 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/654">#654</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
<li>561c39b135794aefb877769910e322d614b20d9d: feat(deps): bump
github.com/stretchr/testify from 1.8.2 to 1.8.3 (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/661">#661</a>)
(<a
href="https://github.com/dependabot"><code>@​dependabot</code></a>[bot])</li>
</ul>
<h3>Build process updates</h3>
<ul>
<li>4593dcb36ae178ccb5e6514b93499bf81d70529e: build: improve changelog
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>e01884ecba1964027fa87bbdb9bf5341408b2ef7: build: improve release
notes (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Other work</h3>
<ul>
<li>ab59aadf2347b47379cc6c764c00f4e3a5d196e6: docs: fix schema.json URL
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>590a3ff6f78deeca9bc6803518a173e53c3e65f9: docs: fix verify
instructions (<a
href="https://redirect.github.com/goreleaser/nfpm/issues/647">#647</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>dce0853e6360835e450db726a3c13e0886f7aad6: docs: goarch to packager
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>2b9864a79ed85b4818d1ae1fa3cdfd76a3f8e4f7: docs: update SECURITY.md
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>858b78b7c12cf9b54a79956655ef8acf3207e3c4: docs: update cmd docs (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>1ba5a445d794977df0ee19ec333b36562f2b0e94: docs: update cmd docs (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/goreleaser/nfpm/compare/v2.28.0...v2.29.0">https://github.com/goreleaser/nfpm/compare/v2.28.0...v2.29.0</a></p>
<h2>Helping out</h2>
<p>This release is only possible thanks to <strong>all</strong> the
support of <strong>awesome people</strong>!</p>
<p>Want to be one of them?
You can <a href="https://goreleaser.com/sponsors/">sponsor</a> or <a
href="https://goreleaser.com/contributing">contribute with code</a>.</p>
<h2>Where to go next?</h2>
<ul>
<li>nFPM is a satellite project from GoReleaser. <a
href="https://goreleaser.com">Check it out</a>!</li>
<li>Find examples and commented usage of all options in our <a
href="https://nfpm.goreleaser.com/">website</a>.</li>
<li>Reach out on <a href="https://discord.gg/RGEBtg8vQ6">Discord</a> and
<a href="https://twitter.com/goreleaser">Twitter</a>!</li>
</ul>
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ed9abdf63d"><code>ed9abdf</code></a>
sec: fix for CVE-2023-32698</li>
<li><a
href="4593dcb36a"><code>4593dcb</code></a>
build: improve changelog</li>
<li><a
href="e01884ecba"><code>e01884e</code></a>
build: improve release notes</li>
<li><a
href="f6f8048d47"><code>f6f8048</code></a>
test: stabilize arch test</li>
<li><a
href="7d6a77bee6"><code>7d6a77b</code></a>
test: fix arch tests</li>
<li><a
href="815b388464"><code>815b388</code></a>
test: fix</li>
<li><a
href="9524bb8a26"><code>9524bb8</code></a>
fix: mips softfloat/hardfloat handling</li>
<li><a
href="a8c16744a1"><code>a8c1674</code></a>
test: fix files test</li>
<li><a
href="66c3d277cf"><code>66c3d27</code></a>
test: fixes</li>
<li><a
href="f64a311eef"><code>f64a311</code></a>
fix: improve umask tests and documentation</li>
<li>Additional commits viewable in <a
href="https://github.com/goreleaser/nfpm/compare/v2.28.0...v2.29.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/goreleaser/nfpm/v2&package-manager=go_modules&previous-version=2.28.0&new-version=2.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-24 09:16:40 -03:00
dependabot[bot]
dab69c9b5a
feat(deps): bump github.com/disgoorg/disgo from 0.16.4 to 0.16.5 (#4025)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.4 to 0.16.5.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="125d0727da"><code>125d072</code></a>
fix unmarshalling &amp; marshalling of InteractionChannel</li>
<li><a
href="67ddd7c006"><code>67ddd7c</code></a>
change Interaction.Channel from PartialChannel to
InteractionChannel</li>
<li><a
href="3eb45b6149"><code>3eb45b6</code></a>
fix nil pointer on user leaving voice channel and no audioReceiver being
setup</li>
<li><a
href="554e2695e2"><code>554e269</code></a>
add GatewayMessageDataUnknown &amp; don't error on unknown voice gateway
message</li>
<li><a
href="6b794ba092"><code>6b794ba</code></a>
rename BoostProgressBarEnabled to PremiumProgressBarEnabled</li>
<li><a
href="c3f2beb13f"><code>c3f2beb</code></a>
add Stickers to GuildPreview</li>
<li><a
href="6cda94940a"><code>6cda949</code></a>
Add raid protection (<a
href="https://redirect.github.com/disgoorg/disgo/issues/223">#223</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.4...v0.16.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.4&new-version=0.16.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-23 09:56:41 -03:00
dependabot[bot]
efafe86ead
feat(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#4022)
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify)
from 1.8.2 to 1.8.3.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4c93d8f201"><code>4c93d8f</code></a>
EqualExportedValues: Handle nested pointer, slice and map fields (<a
href="https://redirect.github.com/stretchr/testify/issues/1379">#1379</a>)</li>
<li><a
href="4b2f4d2bcf"><code>4b2f4d2</code></a>
add EventuallyWithT assertion (<a
href="https://redirect.github.com/stretchr/testify/issues/1264">#1264</a>)</li>
<li><a
href="b3106d772c"><code>b3106d7</code></a>
allow testing for functional options (<a
href="https://redirect.github.com/stretchr/testify/issues/1023">#1023</a>)</li>
<li><a
href="437071b948"><code>437071b</code></a>
assert: fix error message formatting for NotContains (<a
href="https://redirect.github.com/stretchr/testify/issues/1362">#1362</a>)</li>
<li><a
href="c5fc9d6b6b"><code>c5fc9d6</code></a>
Compare public elements of struct (<a
href="https://redirect.github.com/stretchr/testify/issues/1309">#1309</a>)</li>
<li>See full diff in <a
href="https://github.com/stretchr/testify/compare/v1.8.2...v1.8.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=go_modules&previous-version=1.8.2&new-version=1.8.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-19 10:42:28 -03:00
dependabot[bot]
f462f55556
feat(deps): bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible (#4006)
Bumps
[github.com/docker/distribution](https://github.com/docker/distribution)
from 2.8.1+incompatible to 2.8.2+incompatible.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/distribution/releases">github.com/docker/distribution's
releases</a>.</em></p>
<blockquote>
<h2>v2.8.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Revert registry/client: set <code>Accept: identity</code> header
when getting layers by <a
href="https://github.com/ndeloof"><code>@​ndeloof</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3783">distribution/distribution#3783</a></li>
<li>Parse <code>http</code> forbidden as denied by <a
href="https://github.com/vvoland"><code>@​vvoland</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3914">distribution/distribution#3914</a></li>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2022-28391">CVE-2022-28391</a>
by bumping alpine from 3.14 to 3.16 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> (<a
href="https://redirect.github.com/distribution/distribution/pull/3650">#3650</a>)</li>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2023-2253">CVE-2023-2253</a>
runaway allocation on /v2/_catalog by <a
href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a
href="521ea3d973"><code>521ea3d9</code></a></li>
<li>Fix panic in inmemory driver by <a
href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li>
<li>bump up golang version (alternative) by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li>
<li>Dockerfile: update xx to v1.2.1 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li>
<li>update to go1.19.9 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li>
<li>Add code to handle pagination of parts. Fixes max layer size of 10GB
bug by <a
href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li>
<li>Dockerfile: fix filenames of artifacts by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3911">distribution/distribution#3911</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2</a></p>
<h2>v2.8.2-beta.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2022-28391">CVE-2022-28391</a>
by bumping alpine from 3.14 to 3.16 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> (<a
href="https://redirect.github.com/distribution/distribution/pull/3650">#3650</a>)</li>
<li>Fix <a
href="https://www.cve.org/CVERecord?id=CVE-2023-2253">CVE-2023-2253</a>
runaway allocation on /v2/_catalog by <a
href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a
href="521ea3d973"><code>521ea3d9</code></a></li>
<li>Fix panic in inmemory driver by <a
href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li>
<li>bump up golang version (alternative) by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li>
<li>Dockerfile: update xx to v1.2.1 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li>
<li>update to go1.19.9 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li>
<li>Add code to handle pagination of parts. Fixes max layer size of 10GB
bug by <a
href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li>
<li>Dockerfile: fix filenames of artifacts by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3911">distribution/distribution#3911</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.2">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.2</a></p>
<h2>v2.8.2-beta.1</h2>
<h3><strong>NOTE: This is a pre-release that does not contain any
artifacts!</strong></h3>
<h2>What's Changed</h2>
<ul>
<li>Fix runaway allocation on /v2/_catalog by <a
href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a
href="521ea3d973"><code>521ea3d9</code></a></li>
<li>Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3650">distribution/distribution#3650</a></li>
<li>Fix panic in inmemory driver by <a
href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li>
<li>bump up golang version (alternative) by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li>
<li>Dockerfile: update xx to v1.2.1 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li>
<li>update to go1.19.9 by <a
href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li>
<li>Add code to handle pagination of parts. Fixes max layer size of 10GB
bug by <a
href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a
href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.1">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7c354a4b40"><code>7c354a4</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/distribution/issues/3915">#3915</a>
from distribution/2.8.2-release-notes</li>
<li><a
href="a173a9c625"><code>a173a9c</code></a>
Add v2.8.2 release notes</li>
<li><a
href="4894d35ecc"><code>4894d35</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/distribution/issues/3914">#3914</a>
from vvoland/handle-forbidden-28</li>
<li><a
href="f067f66d3d"><code>f067f66</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/distribution/issues/3783">#3783</a>
from ndeloof/accept-encoding-28</li>
<li><a
href="483ad69da3"><code>483ad69</code></a>
registry/errors: Parse http forbidden as denied</li>
<li><a
href="2b0f84df21"><code>2b0f84d</code></a>
Revert &quot;registry/client: set Accept: identity header when getting
layers&quot;</li>
<li><a
href="320d6a141f"><code>320d6a1</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/distribution/issues/3912">#3912</a>
from distribution/2.8.2-beta.2-release-notes</li>
<li><a
href="5f3ca1b2fb"><code>5f3ca1b</code></a>
Add release notes for 2.8.2-beta.2 release</li>
<li><a
href="cb840f63b3"><code>cb840f6</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/distribution/issues/3911">#3911</a>
from thaJeztah/2.8_backport_fix_releaser_filenames</li>
<li><a
href="e884644fff"><code>e884644</code></a>
Dockerfile: fix filenames of artifacts</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/distribution/compare/v2.8.1...v2.8.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/distribution&package-manager=go_modules&previous-version=2.8.1+incompatible&new-version=2.8.2+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-11 21:58:37 -03:00
dependabot[bot]
4508ba71c7
feat(deps): bump github.com/klauspost/pgzip from 1.2.5 to 1.2.6 (#3985) 2023-05-11 12:38:19 +00:00
dependabot[bot]
6f5e94c2fb
feat(deps): bump golang.org/x/crypto from 0.8.0 to 0.9.0 (#4001) 2023-05-11 12:21:54 +00:00
dependabot[bot]
455730c619
feat(deps): bump github.com/disgoorg/disgo from 0.16.3 to 0.16.4 (#3996)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.3 to 0.16.4.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.4</h2>
<h2>What's Changed</h2>
<ul>
<li>fix missing user in resolved member by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="e9b9dd1605</a></li>
<li>fix missing user in target member by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="779858bdba</a></li>
<li>fix nil guild id in message delete event by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="66a0ba4e04</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.3...v0.16.4">https://github.com/disgoorg/disgo/compare/v0.16.3...v0.16.4</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="66a0ba4e04"><code>66a0ba4</code></a>
fix nil guild id in message delete event</li>
<li><a
href="779858bdba"><code>779858b</code></a>
fix missing user in target member</li>
<li><a
href="e9b9dd1605"><code>e9b9dd1</code></a>
fix missing user in resolved member</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.3...v0.16.4">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.3&new-version=0.16.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
Dependabot will merge this PR once it's up-to-date and CI passes on it,
as requested by @caarlos0.

[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-11 09:07:20 -03:00
dependabot[bot]
f8bf6f068a
feat(deps): bump golang.org/x/oauth2 from 0.7.0 to 0.8.0 (#4002)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.7.0
to 0.8.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="839de2255f"><code>839de22</code></a>
google: don't check for IsNotExist for well-known file</li>
<li><a
href="0690208dba"><code>0690208</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="451d5d662f"><code>451d5d6</code></a>
internal: remove repeated definite articles</li>
<li><a
href="cfe200d5bb"><code>cfe200d</code></a>
oauth2: parse RFC 6749 error response</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.7.0...v0.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.7.0&new-version=0.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-11 08:47:42 -03:00
dependabot[bot]
83e754614e
feat(deps): bump golang.org/x/tools from 0.8.0 to 0.9.1 (#3999)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.8.0
to 0.9.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.9.1</h2>
<p>This release fixes a regression in the v0.9.0 release: a crash when
running the <code>go:generate</code><code>golang/go#53781</code></p>
<p>Thank you to all those who filed crash reports, and apologies for the
breakage!</p>
<h2>gopls@v0.9.0</h2>
<p>This release contains significant performance improvements
(especially in incremental processing after source changes), bug fixes,
and support for the LSP “<a
href="https://redirect.github.com/microsoft/language-server-protocol/issues/956">inlay
hints</a>” feature, along with several other minor enhancements.</p>
<h2>Performance improvements</h2>
<p>Source edits cause gopls to invalidate and recompute information
about the workspace, most of which has not changed. Previously, gopls
would spend significant CPU copying data structures, sometimes more than
100ms per keystroke in a large workspace. This release includes many
optimizations to avoid copying data needlessly, including a new <a
href="https://cs.opensource.google/go/x/tools/+/gopls-release-branch.0.9:internal/persistent/map.go;l=26-37">map
representation</a> to achieve copying in constant time. Special thanks
to <a
href="https://github.com/euroelessar"><code>@​euroelessar</code></a> for
the design and implementation of this data structure.</p>
<p>As a result of these improvements, gopls should be more responsive
while typing in large codebases, though it will still use a lot of
memory.</p>
<p>Time to process a change notification in the Kubernetes repo:
<img
src="https://user-images.githubusercontent.com/57144380/176967584-a8040048-6357-40d5-9d80-c448281f6482.png"
alt="image" /></p>
<h2>New Features</h2>
<h3>Inlay hints</h3>
<p>Added support for displaying inlay hints of composite literal field
names and types, constant values, function parameter names, function
type params, and short variable declarations. You can try these out in
the <a
href="https://github.com/golang/vscode-go/blob/master/docs/nightly.md">vscode-go
nightly</a> by <a
href="https://github.com/golang/vscode-go/blob/master/docs/settings.md#goinlayhintsassignvariabletypes">enabling
inlay hints settings</a>.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/176967591-a7b767b3-d447-4691-9486-10f957dc9a0f.gif"
alt="image3" /></p>
<h3>Package References</h3>
<p>Find references on <code>package foo</code> now lists locations where
the given package is imported.</p>
<h3>Quick-fix to add field names to struct literals</h3>
<p>A new quick fix adds field names to struct literals with unkeyed
fields.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/176967261-6acbe0e7-7698-46ea-8deb-cbd913296034.gif"
alt="image1" /></p>
<h2>Bug fixes</h2>
<p>This release includes the following notable bugfixes:</p>
<ul>
<li>Fixes for goimports performance and correctness when using a go.work
file (<a href="https://go.dev/issue/52784">#52784</a>)</li>
<li>Fix a crash during renaming in a package that uses generics (<a
href="https://go.dev/issue/52940">#52940</a>)</li>
<li>Fix gopls getting confused when moving a file from the
<code>foo_test</code> package to <code>foo</code> package (<a
href="https://redirect.github.com/golang/go/issues/45317">#45317</a>)</li>
</ul>
<p>A full list of all issues fixed can be found in the <a
href="https://github.com/golang/go/milestone/260">gopls/v0.9.0
milestone</a>.
To report a new problem, please file a new issue at <a
href="https://go.dev/issues/new">https://go.dev/issues/new</a>.</p>
<h2>Thank you to our contributors!</h2>
<p>Thank you for your contribution, <a
href="https://github.com/alandonovan"><code>@​alandonovan</code></a>, <a
href="https://github.com/euroelessar"><code>@​euroelessar</code></a>, <a
href="https://github.com/findleyr"><code>@​findleyr</code></a>, <a
href="https://github.com/hyangah"><code>@​hyangah</code></a>, <a
href="https://github.com/jamalc"><code>@​jamalc</code></a>, <a
href="https://github.com/jba"><code>@​jba</code></a>, <a
href="https://github.com/marwan-at-work"><code>@​marwan-at-work</code></a>,
<a href="https://github.com/suzmue"><code>@​suzmue</code></a>, and <a
href="https://github.com/dle8"><code>@​dle8</code></a>!</p>
<h2>What’s Next?</h2>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4609d79b05"><code>4609d79</code></a>
cmd/bisect: add -compile and -godebug shorthands</li>
<li><a
href="ddfa2200ae"><code>ddfa220</code></a>
internal/fuzzy: improvements to the symbol scoring algorithm</li>
<li><a
href="344924276c"><code>3449242</code></a>
go/types/objectpath: don't panic when receiver is missing a method</li>
<li><a
href="0809ec2e45"><code>0809ec2</code></a>
gopls/internal/lsp/source: document {All,Workspace}Metadata</li>
<li><a
href="8f7fb01dd4"><code>8f7fb01</code></a>
go/analysis/unitchecker: add test of go vet on std</li>
<li><a
href="23e52a3e12"><code>23e52a3</code></a>
bisect: diagnose bad targets better</li>
<li><a
href="d5af8894fe"><code>d5af889</code></a>
gopls: set GOWORK=off for loads from debug and safetoken tests</li>
<li><a
href="c93329a947"><code>c93329a</code></a>
go/analysis/passes/printf: reshorten diagnostic about %s in Println
call</li>
<li><a
href="62197261cf"><code>6219726</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="f4d143ebcd"><code>f4d143e</code></a>
go/ssa: cleanup TestGenericBodies to pickup package name</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.8.0...v0.9.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.8.0&new-version=0.9.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-10 11:02:44 -03:00
Carlos Alexandro Becker
337f34ef01
chore: go mod tidy
Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-04 02:33:35 +00:00
dependabot[bot]
38b82f1117
feat(deps): bump github.com/sigstore/rekor from 1.0.1 to 1.1.1 (#3979)
Bumps [github.com/sigstore/rekor](https://github.com/sigstore/rekor)
from 1.0.1 to 1.1.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/rekor/releases">github.com/sigstore/rekor's
releases</a>.</em></p>
<blockquote>
<h1>v1.1.1</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>Refactor Trillian client with exported methods (<a
href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li>
<li>Switch to official redis-go client (<a
href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li>
<li>Remove replace in go.mod (<a
href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li>
<li>Add Rekor OID info. (<a
href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>remove legacy encrypted cosign key (<a
href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li>
<li>swap cjson dependency (<a
href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li>
<li>Update release readme (<a
href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Merge pull request from GHSA-2h5h-59f5-c5x9</li>
</ul>
<h2>Contributors</h2>
<ul>
<li>Billy Lynch</li>
<li>Bob Callaway</li>
<li>Carlos Tadeu Panato Junior</li>
<li>Ceridwen Coghlan</li>
<li>Hayden B</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1">https://github.com/sigstore/rekor/compare/v1.1.0...v1.1.1</a></p>
<h1>v1.1.0</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>improve validation on intoto v0.0.2 type (<a
href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li>
<li>add feature to limit HTTP request body length to process (<a
href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li>
<li>add information about the file size limit (<a
href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li>
<li>Add script to backfill Redis from Rekor (<a
href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li>
<li>Feature: add search support for sha512 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>fuzzing: refactor OSS-Fuzz build script (<a
href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li>
<li>Update cloudbuild for cosign 2.0 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li>
<li>Tests - Additional sharding tests (<a
href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li>
<li>jar type: add fuzzer for 3rd-party dep (<a
href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li>
<li>update cosign to 2.0.0 and builder image and also cosign flags (<a
href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li>
<li>fuzzing: move alpine utils to fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li>
<li>fuzzing: add seed for alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li>
<li>jar: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li>
<li>fuzzing: open writer later in fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li>
<li>fuzzing: remove tar operations in alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li>
<li>alpine: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li>
<li>hashedrekord: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li>
<li>fuzzing: add call to IndexKeys in multiple fuzzers (<a
href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li>
<li>fuzzing: improve cose fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li>
<li>fuzzing: improve fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/sigstore/rekor/blob/main/CHANGELOG.md">github.com/sigstore/rekor's
changelog</a>.</em></p>
<blockquote>
<h1>v1.1.1</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>Refactor Trillian client with exported methods (<a
href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li>
<li>Switch to official redis-go client (<a
href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li>
<li>Remove replace in go.mod (<a
href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li>
<li>Add Rekor OID info. (<a
href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>remove legacy encrypted cosign key (<a
href="https://redirect.github.com/sigstore/rekor/issues/1446">#1446</a>)</li>
<li>swap cjson dependency (<a
href="https://redirect.github.com/sigstore/rekor/issues/1441">#1441</a>)</li>
<li>Update release readme (<a
href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li>
</ul>
<h2>Bug Fixes</h2>
<ul>
<li>Merge pull request from GHSA-2h5h-59f5-c5x9</li>
</ul>
<h2>Contributors</h2>
<ul>
<li>Billy Lynch</li>
<li>Bob Callaway</li>
<li>Carlos Tadeu Panato Junior</li>
<li>Ceridwen Coghlan</li>
<li>Hayden B</li>
</ul>
<h1>v1.1.0</h1>
<h2>Functional Enhancements</h2>
<ul>
<li>improve validation on intoto v0.0.2 type (<a
href="https://redirect.github.com/sigstore/rekor/issues/1351">#1351</a>)</li>
<li>add feature to limit HTTP request body length to process (<a
href="https://redirect.github.com/sigstore/rekor/issues/1334">#1334</a>)</li>
<li>add information about the file size limit (<a
href="https://redirect.github.com/sigstore/rekor/issues/1313">#1313</a>)</li>
<li>Add script to backfill Redis from Rekor (<a
href="https://redirect.github.com/sigstore/rekor/issues/1163">#1163</a>)</li>
<li>Feature: add search support for sha512 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1142">#1142</a>)</li>
</ul>
<h2>Quality Enhancements</h2>
<ul>
<li>fuzzing: refactor OSS-Fuzz build script (<a
href="https://redirect.github.com/sigstore/rekor/issues/1377">#1377</a>)</li>
<li>Update cloudbuild for cosign 2.0 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1375">#1375</a>)</li>
<li>Tests - Additional sharding tests (<a
href="https://redirect.github.com/sigstore/rekor/issues/1180">#1180</a>)</li>
<li>jar type: add fuzzer for 3rd-party dep (<a
href="https://redirect.github.com/sigstore/rekor/issues/1360">#1360</a>)</li>
<li>update cosign to 2.0.0 and builder image and also cosign flags (<a
href="https://redirect.github.com/sigstore/rekor/issues/1368">#1368</a>)</li>
<li>fuzzing: move alpine utils to fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1335">#1335</a>)</li>
<li>fuzzing: add seed for alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1342">#1342</a>)</li>
<li>jar: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1327">#1327</a>)</li>
<li>fuzzing: open writer later in fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1326">#1326</a>)</li>
<li>fuzzing: remove tar operations in alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1322">#1322</a>)</li>
<li>alpine: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1316">#1316</a>)</li>
<li>hashedrekord: add v001 fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1315">#1315</a>)</li>
<li>fuzzing: add call to IndexKeys in multiple fuzzers (<a
href="https://redirect.github.com/sigstore/rekor/issues/1302">#1302</a>)</li>
<li>fuzzing: improve cose fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1300">#1300</a>)</li>
<li>fuzzing: improve fuzz utils (<a
href="https://redirect.github.com/sigstore/rekor/issues/1298">#1298</a>)</li>
<li>fuzzing: improve alpine fuzzer (<a
href="https://redirect.github.com/sigstore/rekor/issues/1273">#1273</a>)</li>
<li>fuzzing: go mod edit go-fuzz-headers (<a
href="https://redirect.github.com/sigstore/rekor/issues/1272">#1272</a>)</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0c1914e5e9"><code>0c1914e</code></a>
update CHANGELOG for v1.1.1 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1462">#1462</a>)</li>
<li><a
href="cf42ace826"><code>cf42ace</code></a>
Merge pull request from GHSA-2h5h-59f5-c5x9</li>
<li><a
href="46ac0b224e"><code>46ac0b2</code></a>
Refactor Trillian client with exported methods (<a
href="https://redirect.github.com/sigstore/rekor/issues/1454">#1454</a>)</li>
<li><a
href="5d6e9723b1"><code>5d6e972</code></a>
build(deps): bump github.com/redis/go-redis/v9 from 9.0.3 to 9.0.4 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1460">#1460</a>)</li>
<li><a
href="baa14ce4eb"><code>baa14ce</code></a>
Switch to official redis-go client (<a
href="https://redirect.github.com/sigstore/rekor/issues/1459">#1459</a>)</li>
<li><a
href="059e097a0b"><code>059e097</code></a>
build(deps): bump github.com/go-playground/validator/v10 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1457">#1457</a>)</li>
<li><a
href="1f75c79256"><code>1f75c79</code></a>
Update release readme (<a
href="https://redirect.github.com/sigstore/rekor/issues/1456">#1456</a>)</li>
<li><a
href="98163f336c"><code>98163f3</code></a>
build(deps): bump github/codeql-action from 2.3.1 to 2.3.2 (<a
href="https://redirect.github.com/sigstore/rekor/issues/1455">#1455</a>)</li>
<li><a
href="24cb647106"><code>24cb647</code></a>
Remove replace in go.mod (<a
href="https://redirect.github.com/sigstore/rekor/issues/1444">#1444</a>)</li>
<li><a
href="39bd69bc7c"><code>39bd69b</code></a>
Add Rekor OID info. (<a
href="https://redirect.github.com/sigstore/rekor/issues/1390">#1390</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/sigstore/rekor/compare/v1.0.1...v1.1.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/sigstore/rekor&package-manager=go_modules&previous-version=1.0.1&new-version=1.1.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-03 23:11:29 -03:00
dependabot[bot]
2e589fd0ec
feat(deps): bump github.com/caarlos0/log from 0.4.0 to 0.4.1 (#3977)
Bumps [github.com/caarlos0/log](https://github.com/caarlos0/log) from
0.4.0 to 0.4.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/log/releases">github.com/caarlos0/log's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.1</h2>
<h2>Changelog</h2>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="aea58aebca"><code>aea58ae</code></a>
chore(deps): bump github.com/stretchr/testify from 1.7.1 to 1.8.2 (<a
href="https://redirect.github.com/caarlos0/log/issues/16">#16</a>)</li>
<li>See full diff in <a
href="https://github.com/caarlos0/log/compare/v0.4.0...v0.4.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/log&package-manager=go_modules&previous-version=0.4.0&new-version=0.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-03 09:52:49 -03:00
Carlos Alexandro Becker
6fd5fd45ea
feat: improve output (#3966)
- log keys will be ordered as intended instead of sorted
- paths always relative to cwd

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-05-02 09:06:35 -03:00
dependabot[bot]
57e104d49c
feat(deps): bump github.com/disgoorg/disgo from 0.16.2 to 0.16.3 (#3964)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.2 to 0.16.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.3</h2>
<h2>What's Changed</h2>
<ul>
<li>Add voice messages by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/265">disgoorg/disgo#265</a></li>
<li>Add <code>Reaction()</code> to emojis by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/266">disgoorg/disgo#266</a></li>
<li>Fix(caches): properly calculate permissions' bitfield by <a
href="https://github.com/ZenShibata"><code>@​ZenShibata</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/268">disgoorg/disgo#268</a></li>
<li>Fix: reset write &amp; read deadline in voice conn open by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="ccbf79c87c</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.2...v0.16.3">https://github.com/disgoorg/disgo/compare/v0.16.2...v0.16.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ccbf79c87c"><code>ccbf79c</code></a>
reset write &amp; read deadline in voice conn open</li>
<li><a
href="57b63ff2ee"><code>57b63ff</code></a>
Add Reaction() to emojis (<a
href="https://redirect.github.com/disgoorg/disgo/issues/266">#266</a>)</li>
<li><a
href="38bc148d39"><code>38bc148</code></a>
fix(caches): properly calculate permissions' bitfield (<a
href="https://redirect.github.com/disgoorg/disgo/issues/268">#268</a>)</li>
<li><a
href="7086ffd506"><code>7086ffd</code></a>
rename automod badge to
ApplicationFlagAutoModerationRuleCreateBadge</li>
<li><a
href="f7f72a88b7"><code>f7f72a8</code></a>
move PermissionSendVoiceMessages to PermissionsAllText</li>
<li><a
href="c02850603d"><code>c028506</code></a>
Add voice messages (<a
href="https://redirect.github.com/disgoorg/disgo/issues/265">#265</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.2...v0.16.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.2&new-version=0.16.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-05-01 09:56:52 -03:00
Carlos Alexandro Becker
9aeea7b430
feat: new --version output (#3962)
using the same output as most cloud-native Go-written CLI's use, i.e.
using
[sigs.k8s.io/release-utils](https://github.com/kubernetes-sigs/release-utils).

---------

Signed-off-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-04-30 14:19:55 -03:00
dependabot[bot]
c4b1bbecac
feat(deps): bump github.com/charmbracelet/keygen from 0.4.1 to 0.4.2 (#3957)
Bumps
[github.com/charmbracelet/keygen](https://github.com/charmbracelet/keygen)
from 0.4.1 to 0.4.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/keygen/releases">github.com/charmbracelet/keygen's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.2</h2>
<h2>Changelog</h2>
<h3>Bug fixes</h3>
<ul>
<li>d0a251916f5749a6411978ddd02f9fe856cf2c8c: fix: expand file path (<a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>)</li>
</ul>
<hr />
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
<p>Thoughts? Questions? We love hearing from you. Feel free to reach out
on <a href="https://twitter.com/charmcli">Twitter</a>, <a
href="https://mastodon.technology/@charm">The Fediverse</a>, or on <a
href="https://charm.sh/chat">Discord</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="d0a251916f"><code>d0a2519</code></a>
fix: expand file path</li>
<li>See full diff in <a
href="https://github.com/charmbracelet/keygen/compare/v0.4.1...v0.4.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/keygen&package-manager=go_modules&previous-version=0.4.1&new-version=0.4.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-25 08:23:09 -03:00
dependabot[bot]
5d8fe3ddce
feat(deps): bump github.com/xanzy/go-gitlab from 0.82.0 to 0.83.0 (#3955)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.82.0 to 0.83.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="9560b5bd1b"><code>9560b5b</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1704">#1704</a>
from cloudquery/master</li>
<li><a
href="5950ae0e18"><code>5950ae0</code></a>
newline</li>
<li><a
href="ad8af11b52"><code>ad8af11</code></a>
ignore vendor</li>
<li><a
href="36a0985154"><code>36a0985</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1702">#1702</a>
from cloudquery/feat/group_members/email</li>
<li><a
href="cc52c831af"><code>cc52c83</code></a>
fix typo</li>
<li><a
href="1234260007"><code>1234260</code></a>
revert gitignore change</li>
<li><a
href="931c6625bc"><code>931c662</code></a>
Add <code>email</code> field to <code>GroupMember</code></li>
<li><a
href="195295c1d3"><code>195295c</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1689">#1689</a>
from smit-modi/issue-comment-event</li>
<li><a
href="f459ed34e6"><code>f459ed3</code></a>
Fixed order</li>
<li><a
href="e7028c3cfe"><code>e7028c3</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1670">#1670</a>
from skast96/feature/project_templates</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.82.0...v0.83.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.82.0&new-version=0.83.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-24 08:47:21 -03:00
dependabot[bot]
2d5cb60771
feat(deps): bump github.com/charmbracelet/keygen from 0.3.0 to 0.4.1 (#3932)
Bumps
[github.com/charmbracelet/keygen](https://github.com/charmbracelet/keygen)
from 0.3.0 to 0.4.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/charmbracelet/keygen/releases">github.com/charmbracelet/keygen's
releases</a>.</em></p>
<blockquote>
<h2>v0.4.1</h2>
<h2>Changelog</h2>
<h3>Bug fixes</h3>
<ul>
<li>ba5b3746062cbc051702c188911f44c1e2b5c986: fix: don't trim key path
(<a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>)</li>
</ul>
<hr />
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
<p>Thoughts? Questions? We love hearing from you. Feel free to reach out
on <a href="https://twitter.com/charmcli">Twitter</a>, <a
href="https://mastodon.technology/@charm">The Fediverse</a>, or on <a
href="https://charm.sh/chat">Discord</a>.</p>
<h2>v0.4.0</h2>
<h1>Breaking Change</h1>
<ul>
<li>Keygen no longer appends the key type to the file path.</li>
<li>Use functional options to specify key type, passphrase, and other
options.</li>
<li><code>PrivateKeyPEM</code> is now <code>RawPrivateKey</code></li>
<li><code>RawProtectedPrivateKey</code> returns the password protected
PEM encoded private key.</li>
<li><code>PublicKey</code> is now <code>RawAuthorizedKey</code>.</li>
<li><code>AuthorizedKey</code> returns the authorized key stripped out
of comments and options (the ssh pubic key only).</li>
<li><code>PrivateKey</code> now returns the underlying
<code>crypto.PrivateKey</code></li>
<li>Use <code>Signer</code> to get an <code>ssh.Signer</code> from your
key pair.</li>
</ul>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>ab32d1ae447e5d74a47dd64ec2e75d0a827ccc9b: feat(ci): add workflows
and goreleaser (<a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>)</li>
<li>6ed037835403e5da4a2aa10e5c8568ff4a3bad41: feat: add more tests (<a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>)</li>
<li>37c7434ac69d79048521a7e4bfa0f9dfbb0c1f23: feat: bump dependencies
(<a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>)</li>
<li>8d80e760657463eda55e2f0c773ed3fe3b3e3b08: feat: return ssh.Signer
(<a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>)</li>
<li>6c0cbbb70022377d611d25d98836e016b2c145a5: feat: specify ECDSA
elliptic curve (<a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>30d86a9582001686d63de3f79e4e90a7b6a62a9e: fix: update x/crypto (<a
href="https://redirect.github.com/charmbracelet/keygen/issues/8">#8</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Documentation updates</h3>
<ul>
<li>eef068dedc6af24e8eda0c99db3a03c988b46cff: docs: new readme footer
(<a href="https://github.com/muesli"><code>@​muesli</code></a>)</li>
<li>f7556041d69b45aef018df2269d29e6d018ae6cc: docs: update example in
readme (<a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>)</li>
</ul>
<h3>Other work</h3>
<ul>
<li>472a463d0e8df9e768b350d75ee57a8c9baf69d6: ref: change api to expose
ssh.PublicKey and authorizd_key (<a
href="https://github.com/aymanbagabas"><code>@​aymanbagabas</code></a>)</li>
</ul>
<hr />
<p><!-- raw HTML omitted --><!-- raw HTML omitted --><!-- raw HTML
omitted --></p>
<p>Thoughts? Questions? We love hearing from you. Feel free to reach out
on <a href="https://twitter.com/charmcli">Twitter</a>, <a
href="https://mastodon.technology/@charm">The Fediverse</a>, or on <a
href="https://charm.sh/chat">Discord</a>.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="ba5b374606"><code>ba5b374</code></a>
fix: don't trim key path</li>
<li><a
href="6ed0378354"><code>6ed0378</code></a>
feat: add more tests</li>
<li><a
href="6c0cbbb700"><code>6c0cbbb</code></a>
feat: specify ECDSA elliptic curve</li>
<li><a
href="8d80e76065"><code>8d80e76</code></a>
feat: return ssh.Signer</li>
<li><a
href="3dbbf0ca45"><code>3dbbf0c</code></a>
chore: go mod tidy</li>
<li><a
href="37c7434ac6"><code>37c7434</code></a>
feat: bump dependencies</li>
<li><a
href="472a463d0e"><code>472a463</code></a>
ref: change api to expose ssh.PublicKey and authorizd_key</li>
<li><a
href="30d86a9582"><code>30d86a9</code></a>
fix: update x/crypto (<a
href="https://redirect.github.com/charmbracelet/keygen/issues/8">#8</a>)</li>
<li><a
href="eef068dedc"><code>eef068d</code></a>
docs: new readme footer</li>
<li><a
href="f7556041d6"><code>f755604</code></a>
docs: update example in readme</li>
<li>Additional commits viewable in <a
href="https://github.com/charmbracelet/keygen/compare/v0.3.0...v0.4.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/charmbracelet/keygen&package-manager=go_modules&previous-version=0.3.0&new-version=0.4.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-04-23 14:21:33 -03:00
dependabot[bot]
777b5a1ddb
feat(deps): bump github.com/ory/dockertest/v3 from 3.9.1 to 3.10.0 (#3947)
Bumps [github.com/ory/dockertest/v3](https://github.com/ory/dockertest)
from 3.9.1 to 3.10.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="0d540538ba"><code>0d54053</code></a>
chore(deps): bump actions/stale from 4 to 8 (<a
href="https://redirect.github.com/ory/dockertest/issues/430">#430</a>)</li>
<li><a
href="355d9264da"><code>355d926</code></a>
chore(deps): bump actions/setup-node from 2.pre.beta to 3.6.0 (<a
href="https://redirect.github.com/ory/dockertest/issues/429">#429</a>)</li>
<li><a
href="afee4d2c07"><code>afee4d2</code></a>
Replace pkg/errors with native error wrapping (<a
href="https://redirect.github.com/ory/dockertest/issues/433">#433</a>)</li>
<li><a
href="5d9a022f39"><code>5d9a022</code></a>
docs: fix typo in FakeGoogleCloudStorage example (<a
href="https://redirect.github.com/ory/dockertest/issues/434">#434</a>)</li>
<li><a
href="e733223e53"><code>e733223</code></a>
fix: use std context lib (<a
href="https://redirect.github.com/ory/dockertest/issues/404">#404</a>)</li>
<li><a
href="51627a0245"><code>51627a0</code></a>
chore(deps): bump golang.org/x/sys from 0.6.0 to 0.7.0 (<a
href="https://redirect.github.com/ory/dockertest/issues/432">#432</a>)</li>
<li><a
href="7b0c8dc1f6"><code>7b0c8dc</code></a>
chore: bump workflow actions; configure dependabot (<a
href="https://redirect.github.com/ory/dockertest/issues/424">#424</a>)</li>
<li><a
href="1b74b04e7d"><code>1b74b04</code></a>
refactor: replace deprecated ioutil with io and os (<a
href="https://redirect.github.com/ory/dockertest/issues/423">#423</a>)</li>
<li><a
href="87ce1b9537"><code>87ce1b9</code></a>
ci: ignore wrongly reported CVE (<a
href="https://redirect.github.com/ory/dockertest/issues/425">#425</a>)</li>
<li><a
href="7bcb18d4d9"><code>7bcb18d</code></a>
fix: explicitly convert s.Rdev to uint64 (<a
href="https://redirect.github.com/ory/dockertest/issues/420">#420</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/ory/dockertest/compare/v3.9.1...v3.10.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/ory/dockertest/v3&package-manager=go_modules&previous-version=3.9.1&new-version=3.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-23 14:09:35 -03:00
dependabot[bot]
44c6f733eb
feat(deps): bump github.com/slack-go/slack from 0.12.1 to 0.12.2 (#3943)
Bumps [github.com/slack-go/slack](https://github.com/slack-go/slack)
from 0.12.1 to 0.12.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/slack-go/slack/releases">github.com/slack-go/slack's
releases</a>.</em></p>
<blockquote>
<h2>v0.12.2</h2>
<h2>What's Changed</h2>
<h3>Bug fixes</h3>
<ul>
<li>fix: change period to comma by <a
href="https://github.com/yokishava"><code>@​yokishava</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1147">slack-go/slack#1147</a></li>
</ul>
<h3>Enhancements / Improvements</h3>
<ul>
<li>add datetimepicker component by <a
href="https://github.com/hussachai"><code>@​hussachai</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1145">slack-go/slack#1145</a></li>
<li>add 2FA type to slack user by <a
href="https://github.com/imilchev"><code>@​imilchev</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1183">slack-go/slack#1183</a></li>
<li>add support for user_profile_changed callback event by <a
href="https://github.com/verygoodsoftwarenotvirus"><code>@​verygoodsoftwarenotvirus</code></a>
in <a
href="https://redirect.github.com/slack-go/slack/pull/1182">slack-go/slack#1182</a></li>
<li>Export the Binder type in slacktest by <a
href="https://github.com/kpaulisse"><code>@​kpaulisse</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1177">slack-go/slack#1177</a></li>
<li>socketmode remove duplicate debug logging by <a
href="https://github.com/kittydoor"><code>@​kittydoor</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1165">slack-go/slack#1165</a></li>
<li>Implement context-aware RunEventLoop by <a
href="https://github.com/lololozhkin"><code>@​lololozhkin</code></a> in
<a
href="https://redirect.github.com/slack-go/slack/pull/1169">slack-go/slack#1169</a></li>
<li>Add ReplyUsers to Msg Struct by <a
href="https://github.com/aleksa11010"><code>@​aleksa11010</code></a> in
<a
href="https://redirect.github.com/slack-go/slack/pull/1180">slack-go/slack#1180</a></li>
</ul>
<h3>Misc</h3>
<ul>
<li>Test with Go 1.18~1.20 by <a
href="https://github.com/kanata2"><code>@​kanata2</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1186">slack-go/slack#1186</a></li>
<li>Update README for slacktest by <a
href="https://github.com/kanata2"><code>@​kanata2</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1187">slack-go/slack#1187</a></li>
<li>Add actions/stale action by <a
href="https://github.com/kanata2"><code>@​kanata2</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1188">slack-go/slack#1188</a></li>
<li>Increase operations-per-run by <a
href="https://github.com/kanata2"><code>@​kanata2</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1189">slack-go/slack#1189</a></li>
<li>Bump up golangci-lint and its action to latest by <a
href="https://github.com/kanata2"><code>@​kanata2</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1193">slack-go/slack#1193</a></li>
<li>gofmt by <a
href="https://github.com/kanata2"><code>@​kanata2</code></a> in <a
href="https://redirect.github.com/slack-go/slack/pull/1194">slack-go/slack#1194</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/hussachai"><code>@​hussachai</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1145">slack-go/slack#1145</a></li>
<li><a href="https://github.com/imilchev"><code>@​imilchev</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1183">slack-go/slack#1183</a></li>
<li><a
href="https://github.com/verygoodsoftwarenotvirus"><code>@​verygoodsoftwarenotvirus</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1182">slack-go/slack#1182</a></li>
<li><a href="https://github.com/kpaulisse"><code>@​kpaulisse</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1177">slack-go/slack#1177</a></li>
<li><a href="https://github.com/kittydoor"><code>@​kittydoor</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1165">slack-go/slack#1165</a></li>
<li><a
href="https://github.com/lololozhkin"><code>@​lololozhkin</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1169">slack-go/slack#1169</a></li>
<li><a
href="https://github.com/aleksa11010"><code>@​aleksa11010</code></a>
made their first contribution in <a
href="https://redirect.github.com/slack-go/slack/pull/1180">slack-go/slack#1180</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/slack-go/slack/compare/v0.12.1...v0.12.2">https://github.com/slack-go/slack/compare/v0.12.1...v0.12.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="646e50d95d"><code>646e50d</code></a>
Merge pull request <a
href="https://redirect.github.com/slack-go/slack/issues/1194">#1194</a>
from slack-go/fix-lintter-error</li>
<li><a
href="2b2e893679"><code>2b2e893</code></a>
gofmt</li>
<li><a
href="58c5a5f2de"><code>58c5a5f</code></a>
Merge pull request <a
href="https://redirect.github.com/slack-go/slack/issues/1180">#1180</a>
from aleksa11010/patch-1</li>
<li><a
href="5281ebe9fc"><code>5281ebe</code></a>
Merge pull request <a
href="https://redirect.github.com/slack-go/slack/issues/1169">#1169</a>
from lololozhkin/socketmode-runEventLoopContext</li>
<li><a
href="7f50a7897b"><code>7f50a78</code></a>
Merge pull request <a
href="https://redirect.github.com/slack-go/slack/issues/1193">#1193</a>
from slack-go/update-linter</li>
<li><a
href="54fa87ea90"><code>54fa87e</code></a>
Add setup-go step</li>
<li><a
href="39c7b2ab3b"><code>39c7b2a</code></a>
Add git repository's checkout option</li>
<li><a
href="d5e621e78f"><code>d5e621e</code></a>
Bump up golangci-lint and its action to latest</li>
<li><a
href="b4b5a6428b"><code>b4b5a64</code></a>
Merge pull request <a
href="https://redirect.github.com/slack-go/slack/issues/1165">#1165</a>
from kittydoor/socketmode-remove-duplicate-debug</li>
<li><a
href="002a1c6136"><code>002a1c6</code></a>
Merge pull request <a
href="https://redirect.github.com/slack-go/slack/issues/1189">#1189</a>
from slack-go/increase-operations-per-run</li>
<li>Additional commits viewable in <a
href="https://github.com/slack-go/slack/compare/v0.12.1...v0.12.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/slack-go/slack&package-manager=go_modules&previous-version=0.12.1&new-version=0.12.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-23 13:52:54 -03:00
dependabot[bot]
fd3244ffff
feat(deps): bump github.com/Masterminds/semver/v3 from 3.2.0 to 3.2.1 (#3927)
Bumps
[github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver)
from 3.2.0 to 3.2.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/Masterminds/semver/releases">github.com/Masterminds/semver/v3's
releases</a>.</em></p>
<blockquote>
<h2>v3.2.1</h2>
<h3>Changed</h3>
<ul>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/198">#198</a>:
Improved testing around pre-release names</li>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/200">#200</a>:
Improved code scanning with addition of CodeQL</li>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/201">#201</a>:
Testing now includes Go 1.20. Go 1.17 has been dropped</li>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/202">#202</a>:
Migrated Fuzz testing to Go built-in Fuzzing. CI runs daily</li>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/203">#203</a>:
Docs updated for security details</li>
</ul>
<h3>Fixed</h3>
<ul>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/199">#199</a>:
Fixed issue with range transformations</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/Masterminds/semver/compare/v3.2.0...v3.2.1">https://github.com/Masterminds/semver/compare/v3.2.0...v3.2.1</a></p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/Masterminds/semver/blob/master/CHANGELOG.md">github.com/Masterminds/semver/v3's
changelog</a>.</em></p>
<blockquote>
<h2>3.2.1 (2023-04-10)</h2>
<h3>Changed</h3>
<ul>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/198">#198</a>:
Improved testing around pre-release names</li>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/200">#200</a>:
Improved code scanning with addition of CodeQL</li>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/201">#201</a>:
Testing now includes Go 1.20. Go 1.17 has been dropped</li>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/202">#202</a>:
Migrated Fuzz testing to Go built-in Fuzzing. CI runs daily</li>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/203">#203</a>:
Docs updated for security details</li>
</ul>
<h3>Fixed</h3>
<ul>
<li><a
href="https://redirect.github.com/Masterminds/semver/issues/199">#199</a>:
Fixed issue with range transformations</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e06051f8fc"><code>e06051f</code></a>
Merge pull request <a
href="https://redirect.github.com/Masterminds/semver/issues/203">#203</a>
from mattfarina/update-readme-fuzz</li>
<li><a
href="36ea773e91"><code>36ea773</code></a>
Updating docs for security, fuzz, codeql, gosec</li>
<li><a
href="e683c4bc93"><code>e683c4b</code></a>
Merge pull request <a
href="https://redirect.github.com/Masterminds/semver/issues/202">#202</a>
from mattfarina/move-fuzz</li>
<li><a
href="e485a0d5ff"><code>e485a0d</code></a>
Migrating Fuzz testing to Go built-in testing</li>
<li><a
href="4e0f582ff0"><code>4e0f582</code></a>
Merge pull request <a
href="https://redirect.github.com/Masterminds/semver/issues/201">#201</a>
from mattfarina/bump-go-1.20</li>
<li><a
href="0605d1d86a"><code>0605d1d</code></a>
Updating Go for 1.20</li>
<li><a
href="cc175775be"><code>cc17577</code></a>
Merge pull request <a
href="https://redirect.github.com/Masterminds/semver/issues/200">#200</a>
from mattfarina/codeql</li>
<li><a
href="bf2d190013"><code>bf2d190</code></a>
Adding CodeQL scanning</li>
<li><a
href="2c5535be35"><code>2c5535b</code></a>
Merge pull request <a
href="https://redirect.github.com/Masterminds/semver/issues/199">#199</a>
from mattfarina/bug-197</li>
<li><a
href="b1bb76193b"><code>b1bb761</code></a>
Fix issue with - ranges being transformed to something imparsible</li>
<li>Additional commits viewable in <a
href="https://github.com/Masterminds/semver/compare/v3.2.0...v3.2.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/Masterminds/semver/v3&package-manager=go_modules&previous-version=3.2.0&new-version=3.2.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-23 13:52:42 -03:00
dependabot[bot]
a16e671488
feat(deps): bump github.com/disgoorg/disgo from 0.16.1 to 0.16.2 (#3926)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.1 to 0.16.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.2</h2>
<h2>What's Changed</h2>
<ul>
<li>Fix interaction events by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/264">disgoorg/disgo#264</a></li>
</ul>
<h2>Beaking Changes</h2>
<ul>
<li>Renamed <code>events.XInteractionCreate.Channel</code> to
<code>events.XInteractionCreate.MessageChannel</code></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.1...v0.16.2">https://github.com/disgoorg/disgo/compare/v0.16.1...v0.16.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4929351010"><code>4929351</code></a>
Fix interaction events (<a
href="https://redirect.github.com/disgoorg/disgo/issues/264">#264</a>)</li>
<li><a
href="a50f1ef2d3"><code>a50f1ef</code></a>
fix verified roles examples</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.1...v0.16.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.1&new-version=0.16.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-23 13:52:33 -03:00
dependabot[bot]
e263d1464c
feat(deps): bump github.com/disgoorg/disgo from 0.16.0 to 0.16.1 (#3922)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.16.0 to 0.16.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.16.1</h2>
<h2>What's Changed</h2>
<ul>
<li>Add <code>Channel</code> to interactions by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/261">disgoorg/disgo#261</a></li>
<li>Add <code>OnHeartbeatAck</code> to <code>ListenerAdapter</code>
(fixes <a
href="https://redirect.github.com/disgoorg/disgo/issues/263">#263</a>)
by <a href="https://github.com/caneleex"><code>@​caneleex</code></a> in
<a
href="250d1c9a92</a></li>
</ul>
<h2>Deprecations</h2>
<ul>
<li><code>ChannelID</code> in interactions has been deprecated. Use
<code>Channel()</code> instead</li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.16.0...v0.16.1">https://github.com/disgoorg/disgo/compare/v0.16.0...v0.16.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="250d1c9a92"><code>250d1c9</code></a>
Add OnHeartbeatAck to ListenerAdapter</li>
<li><a
href="a3e65bd695"><code>a3e65bd</code></a>
Add Channel to interactions (<a
href="https://redirect.github.com/disgoorg/disgo/issues/261">#261</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.16.0...v0.16.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.16.0&new-version=0.16.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-10 08:53:49 -03:00
dependabot[bot]
427251f36e
feat(deps): bump golang.org/x/crypto from 0.7.0 to 0.8.0 (#3923)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.7.0
to 0.8.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="00fd4ff485"><code>00fd4ff</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="018c28f8a1"><code>018c28f</code></a>
all: fix some comments</li>
<li><a
href="9cd0187c09"><code>9cd0187</code></a>
curve25519: use crypto/ecdh on Go 1.20</li>
<li><a
href="c6a20f9984"><code>c6a20f9</code></a>
ssh: document that ParseRawPrivateKey supports Ed25519 keys</li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.7.0...v0.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.7.0&new-version=0.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-10 08:53:25 -03:00
dependabot[bot]
30f543c853
feat(deps): bump golang.org/x/tools from 0.7.0 to 0.8.0 (#3918)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.7.0
to 0.8.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h2>gopls/v0.8.0</h2>
<h2>Go version support</h2>
<h3>Support for Go 1.18</h3>
<p>Version 0.8.0 of gopls supports features added to Go 1.18,
specifically:</p>
<ul>
<li>Support for multi-module workspaces using <code>go.work</code>
files.</li>
<li>Diagnostics for Fuzz tests.</li>
<li>Improved support for generics.</li>
</ul>
<p>To use these features, gopls must be installed using Go 1.18. See <a
href="https://go.dev/dl/">go.dev/dl</a> for the latest status of Go 1.18
-- as of writing Go 1.18 is not yet released, but Go 1.18 RC1 may be
used.</p>
<h3>Dropped support for Go 1.12</h3>
<p>Version 0.8.0 of gopls no longer supports building at Go 1.12. See <a
href="https://redirect.github.com/golang/go/issues/50827">golang/go#50827</a>
for more details.</p>
<h2>New Features</h2>
<h3><code>go.work</code> integration</h3>
<p>Gopls now supports multi-module workspaces using <code>go.work</code>
files. To use this feature, create a <code>go.work</code> file that
includes the modules you want to work on, and then open your editor to
the directory containing <code>go.work</code>. For more information, see
the <a href="https://go.dev/ref/mod#workspaces"><code>go.work</code>
reference</a>, or the <a
href="https://github.com/golang/tools/blob/master/gopls/doc/workspace.md">gopls
documentation</a> for multi-module workspaces.</p>
<h3>Diagnostics for Fuzz tests</h3>
<p>When writing <a href="https://go.dev/doc/fuzz/">Fuzz tests</a>, gopls
provides diagnostics for invalid arguments to <code>Fuzz</code>.
<img
src="https://user-images.githubusercontent.com/57144380/156475335-0a277e11-c113-460a-837b-d066b42898a6.png"
alt="image" /></p>
<h3>Improved support for generics</h3>
<h4>Honor the language version configured in <code>go.mod</code></h4>
<p>gopls now provides diagnostics for language features based on the <a
href="https://go.dev/ref/mod#go-mod-file-go"><code>go</code>
directive</a> in the applicable <code>go.mod</code> file for a
package.</p>
<p>For some errors related to incompatible language versions, gopls
offers a quick-fix to update the <code>go.mod</code> Go version. (note
that if the <code>go.mod</code> file is open, it may need to be saved in
order for language version changes to take effect)
<img
src="https://user-images.githubusercontent.com/57144380/156476752-7aacf34b-2835-41cb-b80d-7bf5103a43a0.gif"
alt="gomodedit" /></p>
<h4>Improved completion with type parameters</h4>
<p>Gopls autocompletion is improved in several contexts when using
generic types.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/156477933-a1aab4c7-06cd-4cac-85e6-a847b6515b91.gif"
alt="genericvarcompl" /></p>
<h3>New code action to add missing method stubs</h3>
<p>Gopls now provides a code action to implement missing methods.</p>
<p><img
src="https://user-images.githubusercontent.com/57144380/156479262-482958e2-69a3-4a97-81a5-5dd27ac250ba.gif"
alt="implementiface" /></p>
<h3>Improved performance and accuracy for workspace symbol requests</h3>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="5ef3193183"><code>5ef3193</code></a>
gopls/internal/lsp/source/typerefs: reexpress tests wrt
ExternalRefs</li>
<li><a
href="c5f768a46c"><code>c5f768a</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="7c33a56129"><code>7c33a56</code></a>
gopls/internal/lsp/source: show both the original declaration and the
value o...</li>
<li><a
href="4d205d81b5"><code>4d205d8</code></a>
gopls/doc: add instructions for using go.work with the Go
distribution</li>
<li><a
href="d5076cc64d"><code>d5076cc</code></a>
gopls/internal/lsp/cache: don't trace a region for MetadataForFile</li>
<li><a
href="f79636135d"><code>f796361</code></a>
gopls/internal/lsp: add tracing instrumentation for all Server
methods</li>
<li><a
href="e10450195e"><code>e104501</code></a>
gopls/internal/astutil: TestPurgeFuncBodies requires source code for
std</li>
<li><a
href="6520870190"><code>6520870</code></a>
gopls/internal/lsp/source/typerefs: allow for duplicate decls</li>
<li><a
href="902fdcadc1"><code>902fdca</code></a>
gopls/internal/lsp/source/typerefs: purge func bodies before
parsing</li>
<li><a
href="58c9a6328c"><code>58c9a63</code></a>
go/packages/internal/nodecount: count ast.Node frequency</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.7.0...v0.8.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.7.0&new-version=0.8.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-07 11:52:48 -03:00
dependabot[bot]
01b14f9b7a
feat(deps): bump golang.org/x/oauth2 from 0.6.0 to 0.7.0 (#3919)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.6.0
to 0.7.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="36075149c5"><code>3607514</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="4abfd87339"><code>4abfd87</code></a>
google: add CredentialsParams.EarlyTokenRefresh</li>
<li><a
href="1e7f329364"><code>1e7f329</code></a>
oauth2: add ReuseTokenSourceWithExpiry</li>
<li><a
href="86850e0723"><code>86850e0</code></a>
oauth2: fix typo</li>
<li><a
href="a6e37e7441"><code>a6e37e7</code></a>
google: Updating 3pi documentation</li>
<li><a
href="54b70c833f"><code>54b70c8</code></a>
google: update missing auth help URL</li>
<li><a
href="2fc4ef5a6f"><code>2fc4ef5</code></a>
README: encourage issues and proposals before changes</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.6.0...v0.7.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.6.0&new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-07 11:48:13 -03:00
dependabot[bot]
6565383ef2
feat(deps): bump golang.org/x/text from 0.8.0 to 0.9.0 (#3917)
Bumps [golang.org/x/text](https://github.com/golang/text) from 0.8.0 to
0.9.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="48e4a4a957"><code>48e4a4a</code></a>
all: fix some comments</li>
<li>See full diff in <a
href="https://github.com/golang/text/compare/v0.8.0...v0.9.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.8.0&new-version=0.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-07 11:47:50 -03:00
dependabot[bot]
ed2e378c87
feat(deps): bump github.com/xanzy/go-gitlab from 0.81.0 to 0.82.0 (#3911)
Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.81.0 to 0.82.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="20cdbe7f77"><code>20cdbe7</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1682">#1682</a>
from timofurrer/variables-raw</li>
<li><a
href="197113e10b"><code>197113e</code></a>
Implement raw field for instance variables API</li>
<li><a
href="b88a1b2a51"><code>b88a1b2</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1680">#1680</a>
from bmsareias/fix-UptadeProtectedBranch</li>
<li><a
href="71bce5a6b6"><code>71bce5a</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1673">#1673</a>
from chenggui53/update-project-event-struct</li>
<li><a
href="34980c231f"><code>34980c2</code></a>
Fix tests</li>
<li><a
href="cb40c20b4a"><code>cb40c20</code></a>
add push data</li>
<li><a
href="febd628d67"><code>febd628</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1678">#1678</a>
from MakingPRs/issue-field</li>
<li><a
href="295e7008ab"><code>295e700</code></a>
Merge pull request <a
href="https://redirect.github.com/xanzy/go-gitlab/issues/1677">#1677</a>
from MakingPRs/master</li>
<li><a
href="c70482aa21"><code>c70482a</code></a>
Change order of Epic fields to reflect docs</li>
<li><a
href="3f5e72f6f5"><code>3f5e72f</code></a>
Change order of Issue fields to reflect docs</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.81.0...v0.82.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.81.0&new-version=0.82.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-06 22:57:19 -03:00
Carlos A Becker
137ed3be74
feat(deps): update caarlos0/env to v8
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-04-07 01:50:09 +00:00
Carlos A Becker
e9e392d371
feat(deps): update nfpm to v2.28.0
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-04-06 03:51:14 +00:00
dependabot[bot]
00b2175855
feat(deps): bump github.com/docker/docker from 23.0.1+incompatible to 23.0.3+incompatible (#3909)
Bumps [github.com/docker/docker](https://github.com/docker/docker) from
23.0.1+incompatible to 23.0.3+incompatible.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/docker/docker/releases">github.com/docker/docker's
releases</a>.</em></p>
<blockquote>
<h2>v23.0.3</h2>
<h2>23.0.3</h2>
<blockquote>
<p><strong>Note</strong></p>
<p>Due to an issue with CentOS 9 Stream's package repositories, packages
for
CentOS 9 are currently unavailable. Packages for CentOS 9 may be added
later,
or as part of the next (23.0.4) patch release.</p>
</blockquote>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>Fixed a number of issues that can cause Swarm encrypted overlay
networks
to fail to uphold their guarantees, addressing <a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841">CVE-2023-28841</a>,
<a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840">CVE-2023-28840</a>,
and
<a
href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842">CVE-2023-28842</a>.
<ul>
<li>A lack of kernel support for encrypted overlay networks now reports
as an error.</li>
<li>Encrypted overlay networks are eagerly set up, rather than waiting
for
multiple nodes to attach.</li>
<li>Encrypted overlay networks are now usable on Red Hat Enterprise
Linux 9
through the use of the <code>xt_bpf</code> kernel module.</li>
<li>Users of Swarm overlay networks should review <a
href="https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw">GHSA-vwm3-crmr-xfxw</a>
to ensure that unintentional exposure has not occurred.</li>
</ul>
</li>
</ul>
<h3>Packaging Updates</h3>
<ul>
<li>Update containerd to <a
href="https://github.com/containerd/containerd/releases/tag/v1.6.20">v1.6.20</a>.</li>
<li>Update runc to <a
href="https://github.com/opencontainers/runc/releases/tag/v1.1.5">v1.1.5</a>.</li>
</ul>
<h2>v23.0.2</h2>
<h2>23.0.2</h2>
<p>For a full list of pull requests and changes in this release, refer
to the relevant GitHub milestones:</p>
<ul>
<li><a
href="https://github.com/docker/cli/milestone/75?closed=1">docker/cli,
23.0.2 milestone</a></li>
<li><a
href="https://github.com/moby/moby/milestone/114?closed=1">moby/moby,
23.0.2 milestone</a></li>
</ul>
<h3>Bug fixes and enhancements</h3>
<ul>
<li>Fully resolve missing checks for <code>apparmor_parser</code> when
an AppArmor enabled kernel is detected. <a
href="https://redirect.github.com/containerd/containerd/pull/8087">containerd/containerd#8087</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45043">moby/moby#45043</a></li>
<li>Ensure that credentials are redacted from Git URLs when generating
BuildKit buildinfo. Fixes <a
href="https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc">CVE-2023-26054</a>.
<a
href="https://redirect.github.com/moby/moby/pull/45110">moby/moby#45110</a></li>
<li>Fix anonymous volumes created by a <code>VOLUME</code> line in a
Dockerfile being excluded from volume prune. <a
href="https://redirect.github.com/moby/moby/pull/45159">moby/moby#45159</a></li>
<li>Fix a failure to properly propagate errors during removal of volumes
on a Swarm node. <a
href="https://redirect.github.com/moby/moby/pull/45155">moby/moby#45155</a></li>
<li>Temporarily work around a bug in BuildKit <code>COPY --link</code>
by disabling mergeop/diffop optimization. <a
href="https://redirect.github.com/moby/moby/pull/45112">moby/moby#45112</a></li>
<li>Properly clean up child tasks when a parent Swarm job is removed. <a
href="https://redirect.github.com/moby/swarmkit/pull/3112">moby/swarmkit#3112</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li>
<li>Fix Swarm service creation logic so that both a GenericResource and
a non-default network can be used together. <a
href="https://redirect.github.com/moby/swarmkit/pull/3082">moby/swarmkit#3082</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li>
<li>Fix Swarm CSI support requiring the CSI plugin to offer staging
endpoints in order to publish a volume. <a
href="https://redirect.github.com/moby/swarmkit/pull/3116">moby/swarmkit#3116</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li>
<li>Fix a panic caused by log buffering in some configurations. <a
href="https://redirect.github.com/containerd/fifo/pull/47">containerd/fifo#47</a>,
<a
href="https://redirect.github.com/moby/moby/pull/45051">moby/moby#45051</a></li>
<li>Log errors in the REST to Swarm gRPC API translation layer at the
debug level to reduce redundancy and noise. <a
href="https://redirect.github.com/moby/moby/pull/45016">moby/moby#45016</a></li>
<li>Fix a DNS resolution issue affecting containers created with
<code>--dns-opt</code> or <code>--dns-search</code> when
<code>systemd-resolved</code> is used outside the container. <a
href="https://redirect.github.com/moby/moby/pull/45000">moby/moby#45000</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="59118bff50"><code>59118bf</code></a>
Merge pull request from GHSA-232p-vwff-86mp</li>
<li><a
href="219f21bf07"><code>219f21b</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/docker/issues/45196">#45196</a>
from vvoland/integration-restart-race-23</li>
<li><a
href="b87f7f18b8"><code>b87f7f1</code></a>
libnet/d/overlay: insert the input-drop rule</li>
<li><a
href="c6bf3071fe"><code>c6bf307</code></a>
StartWithLogFile: Fix d.cmd race</li>
<li><a
href="7f49ca259b"><code>7f49ca2</code></a>
TestDaemonRestartKillContainers: Fix loop capture</li>
<li><a
href="98cbcb8003"><code>98cbcb8</code></a>
libnet/d/overlay: add BPF-powered VNI matcher</li>
<li><a
href="5c5fac2374"><code>5c5fac2</code></a>
libnet/d/overlay: extract VNI match rule builder</li>
<li><a
href="c492a22287"><code>c492a22</code></a>
libn/d/overlay: enforce encryption on sandbox init</li>
<li><a
href="018edb0284"><code>018edb0</code></a>
libnet/d/overlay: document some encryption code</li>
<li><a
href="a1fd2f22f6"><code>a1fd2f2</code></a>
Merge pull request <a
href="https://redirect.github.com/docker/docker/issues/45157">#45157</a>
from thaJeztah/23.0_backport_update_shfmt</li>
<li>Additional commits viewable in <a
href="https://github.com/docker/docker/compare/v23.0.1...v23.0.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/docker&package-manager=go_modules&previous-version=23.0.1+incompatible&new-version=23.0.3+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-05 10:17:59 -03:00
dependabot[bot]
c4d5cf96d9
feat(deps): bump github.com/spf13/cobra from 1.6.1 to 1.7.0 (#3908)
Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from
1.6.1 to 1.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/spf13/cobra/releases">github.com/spf13/cobra's
releases</a>.</em></p>
<blockquote>
<h2>v1.7.0</h2>
<h3> Features</h3>
<ul>
<li>Allow to preserve ordering of completions in <code>bash</code>,
<code>zsh</code>, <code>pwsh</code>, &amp; <code>fish</code>: <a
href="https://github.com/h4ck3rk3y"><code>@​h4ck3rk3y</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1903">#1903</a></li>
<li>Add support for PowerShell 7.2+ in completions: <a
href="https://github.com/oldium"><code>@​oldium</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1916">#1916</a></li>
<li>Allow sourcing zsh completion script: <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1917">#1917</a></li>
</ul>
<h3>🐛 Bug fixes</h3>
<ul>
<li>Don't remove flag values that match sub-command name: <a
href="https://github.com/brianpursley"><code>@​brianpursley</code></a>
<a
href="https://redirect.github.com/spf13/cobra/issues/1781">#1781</a></li>
<li>Fix powershell completions not returning single word: <a
href="https://github.com/totkeks"><code>@​totkeks</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1850">#1850</a></li>
<li>Remove masked <code>template</code> import variable name: <a
href="https://github.com/yashLadha"><code>@​yashLadha</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1879">#1879</a></li>
<li>Correctly detect completions with dash in argument: <a
href="https://github.com/oncilla"><code>@​oncilla</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1817">#1817</a></li>
</ul>
<h3>🧪 Testing &amp; CI/CD</h3>
<ul>
<li>Deprecate Go 1.15 in CI: <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1866">#1866</a></li>
<li>Deprecate Go 1.16 in CI: <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1926">#1926</a></li>
<li>Add testing for Go 1.20 in CI: <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1925">#1925</a></li>
<li>Add tests to illustrate unknown flag bug: <a
href="https://github.com/brianpursley"><code>@​brianpursley</code></a>
<a
href="https://redirect.github.com/spf13/cobra/issues/1854">#1854</a></li>
</ul>
<h3>🔧 Maintenance</h3>
<ul>
<li>Update main image to better handle dark backgrounds: <a
href="https://github.com/Deleplace"><code>@​Deleplace</code></a> and <a
href="https://github.com/marckhouzam"><code>@​marckhouzam</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1883">#1883</a></li>
<li>Fix <code>stale.yaml</code> mispellings: <a
href="https://github.com/enrichman"><code>@​enrichman</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1863">#1863</a></li>
<li>Remove stale bot from GitHub actions: <a
href="https://github.com/jpmcb"><code>@​jpmcb</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1908">#1908</a></li>
<li>Add makefile target for installing dependencies: <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1865">#1865</a></li>
<li>Add Sia to projects using Cobra: <a
href="https://github.com/mike76-dev"><code>@​mike76-dev</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1844">#1844</a></li>
<li>Add <code>Vitess</code> and <code>Arewefastyet</code> to projects
using cobra: <a
href="https://github.com/frouioui"><code>@​frouioui</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1932">#1932</a></li>
<li>Fixup for Kubescape github org: <a
href="https://github.com/dwertent"><code>@​dwertent</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1874">#1874</a></li>
<li>Fix route for GitHub workflows badge: <a
href="https://github.com/sh-cho"><code>@​sh-cho</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1884">#1884</a></li>
<li>Fixup for GoDoc style documentation: <a
href="https://github.com/yashLadha"><code>@​yashLadha</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1885">#1885</a></li>
<li>Various bash scripting improvements for completion: <a
href="https://github.com/scop"><code>@​scop</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1702">#1702</a></li>
<li>Add Constellation to projects using Cobra: <a
href="https://github.com/datosh"><code>@​datosh</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1829">#1829</a></li>
</ul>
<h3>✏️ Documentation</h3>
<ul>
<li>Add documentation about disabling completion descriptions: <a
href="https://github.com/Shihta"><code>@​Shihta</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1901">#1901</a></li>
<li>Improve <code>MarkFlagsMutuallyExclusive</code> example in user
guide: <a href="https://github.com/janhn"><code>@​janhn</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1904">#1904</a></li>
<li>Update <code>shell_completions.md</code>: <a
href="https://github.com/gusega"><code>@​gusega</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1907">#1907</a></li>
<li>Update copywrite year: <a
href="https://github.com/umarcor"><code>@​umarcor</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1927">#1927</a></li>
<li>Document suggested layout of subcommands: <a
href="https://github.com/lcarva"><code>@​lcarva</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1930">#1930</a></li>
<li>Replace deprecated ExactValidArgs with MatchAll in doc: <a
href="https://github.com/doniacld"><code>@​doniacld</code></a> <a
href="https://redirect.github.com/spf13/cobra/issues/1836">#1836</a></li>
</ul>
<hr />
<p>This release contains several long running fixes, improvements to
powershell completions, and further optimizations for completions.</p>
<p>Thank you everyone who contributed to this release and all your hard
work! Cobra and this community would never be possible without all of
you! 🐍</p>
<p>Full changelog: <a
href="https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0">https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4dd4b25de3"><code>4dd4b25</code></a>
Update main image to better handle dark background (<a
href="https://redirect.github.com/spf13/cobra/issues/1883">#1883</a>)</li>
<li><a
href="45360a55cc"><code>45360a5</code></a>
Allow sourcing zsh completion script (<a
href="https://redirect.github.com/spf13/cobra/issues/1917">#1917</a>)</li>
<li><a
href="c8a20a16ba"><code>c8a20a1</code></a>
Document suggested layout for subcommands (<a
href="https://redirect.github.com/spf13/cobra/issues/1930">#1930</a>)</li>
<li><a
href="b197a24504"><code>b197a24</code></a>
Update projects_using_cobra.md (<a
href="https://redirect.github.com/spf13/cobra/issues/1932">#1932</a>)</li>
<li><a
href="9e6b58afc7"><code>9e6b58a</code></a>
update copyright year (<a
href="https://redirect.github.com/spf13/cobra/issues/1927">#1927</a>)</li>
<li><a
href="fb3652402b"><code>fb36524</code></a>
ci: test Golang 1.20 (<a
href="https://redirect.github.com/spf13/cobra/issues/1925">#1925</a>)</li>
<li><a
href="c7300f0bdd"><code>c7300f0</code></a>
ci: deprecate go 1.16 (<a
href="https://redirect.github.com/spf13/cobra/issues/1926">#1926</a>)</li>
<li><a
href="567ea8ebc9"><code>567ea8e</code></a>
Add support for PowerShell 7.2+ (<a
href="https://redirect.github.com/spf13/cobra/issues/1916">#1916</a>)</li>
<li><a
href="3daa4b9c36"><code>3daa4b9</code></a>
Add keeporder to shell completion (<a
href="https://redirect.github.com/spf13/cobra/issues/1903">#1903</a>)</li>
<li><a
href="a516d4132c"><code>a516d41</code></a>
Removes stale bot from GitHub action (<a
href="https://redirect.github.com/spf13/cobra/issues/1908">#1908</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/spf13/cobra/compare/v1.6.1...v1.7.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/cobra&package-manager=go_modules&previous-version=1.6.1&new-version=1.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-04-05 09:21:25 -03:00
dependabot[bot]
ecf77c948f
feat(deps): bump github.com/disgoorg/disgo from 0.15.3 to 0.16.0 (#3905) 2023-04-04 08:25:49 -03:00
Kazuki Matsumaru
b495c905d5
fix: set parallelism to match Linux container CPU (#3901)
<!--

Hi, thanks for contributing!

Please make sure you read our CONTRIBUTING guide.

Also, add tests and the respective documentation changes as well.

-->

Currently Goreleaser uses `runtime.NumCPU()` as the default value if
`--parallelism` is not set.
However, this will get the number of CPUs on the host even when
Goreleaser is run in a container with a limit on the maximum number of
CPUs that can be used (typically in a Kubernetes pod).
Actually, `docker run --cpus=1 goreleaser/goreleaser --debug` shows
`parallelism: 4` on my machine.
This behavior causes CPU throttling, which increases execution time and,
in the worst case, terminates with an error.
I ran into this problem with Jenkins where the agent runs on pod
([Kubernetes plugin for
Jenkins](https://plugins.jenkins.io/kubernetes/)).

This commit introduces
[automaxprocs](https://github.com/uber-go/automaxprocs) to fix this
issue.
This library sets `GOMAXPROCS` to match Linux container CPU quota.
I have also looked for a library that can get CPU quota more directly,
but this seems to be the best I could find.
The reason it is set in a different notation from the automaxprocs
README is to prevent logs from being displayed
([comment](https://github.com/uber-go/automaxprocs/issues/18#issuecomment-511330567)).

I would have liked to write a test, but this change is dependent on the
number of CPUs in the execution environment, so I could not.
Instead, I wrote a Dockerfile for testing

```Dockerfile
FROM golang:1.20.2

WORKDIR /go/app
RUN sh -c "$(curl --location https://taskfile.dev/install.sh)" -- -d -b /usr/local/bin
COPY . .
RUN task build
```

and confirmed built binary shows expected parallelism by following
commands:

```sh
docker build --file Dockerfile.test . -t test-goreleaser
docker run --cpus=1 test-goreleaser ./goreleaser build --snapshot --debug # parallelism: 1
docker run test-goreleaser ./goreleaser build --snapshot --debug # parallelism: 4
```

I also ran the built binary on my Macbook and it was fine.
2023-04-02 17:16:41 -03:00
dependabot[bot]
43731e252c
feat(deps): bump github.com/google/ko from 0.12.0 to 0.13.0 (#3880)
Bumps [github.com/google/ko](https://github.com/google/ko) from 0.12.0
to 0.13.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/ko/releases">github.com/google/ko's
releases</a>.</em></p>
<blockquote>
<h2>v0.13.0</h2>
<h2>What's Changed</h2>
<ul>
<li>SPDX: Fix package manager label by <a
href="https://github.com/puerco"><code>@​puerco</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/801">ko-build/ko#801</a></li>
<li>SPDX 2.3 support by <a
href="https://github.com/puerco"><code>@​puerco</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/803">ko-build/ko#803</a></li>
<li>ci: build and test using 1.18 and 1.19 (drop 1.17) by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/812">ko-build/ko#812</a></li>
<li>removes repo move message by <a
href="https://github.com/mchmarny"><code>@​mchmarny</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/814">ko-build/ko#814</a></li>
<li>feat: write sbom result to disk by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/822">ko-build/ko#822</a></li>
<li>feat: adding support for using multiple keychain for sending sbom
results to a different repository by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/821">ko-build/ko#821</a></li>
<li>Move docs to ko.build by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/749">ko-build/ko#749</a></li>
<li>Update setup-ko version by <a
href="https://github.com/ianlewis"><code>@​ianlewis</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li>
<li>Add -- usage in readme by <a
href="https://github.com/jwcesign"><code>@​jwcesign</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/840">ko-build/ko#840</a></li>
<li>add CONTRIBUTING, code of conduct, roadmap by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/837">ko-build/ko#837</a></li>
<li>attempt to fix GH Pages publishing by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/843">ko-build/ko#843</a></li>
<li>doc: fix link to Installation page in Getting Started by <a
href="https://github.com/antoineco"><code>@​antoineco</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/846">ko-build/ko#846</a></li>
<li>.ko.yaml: bump golang 1.18 -&gt; 1.19 by <a
href="https://github.com/srenatus"><code>@​srenatus</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/848">ko-build/ko#848</a></li>
<li>truncate -image-refs file by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/855">ko-build/ko#855</a></li>
<li>update docs: fix broken links, align with README by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/854">ko-build/ko#854</a></li>
<li>Handle KO_DOCKER_REPO=ko.local/repo and --bare correctly by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/820">ko-build/ko#820</a></li>
<li>another docs update by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/856">ko-build/ko#856</a></li>
<li>ko.build: support some common shortlinks by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/872">ko-build/ko#872</a></li>
<li>install: fail with 404 instead of gzip error when url was wrong by
<a href="https://github.com/grosser"><code>@​grosser</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/879">ko-build/ko#879</a></li>
<li>feat: deduplicate tags by <a
href="https://github.com/bluebrown"><code>@​bluebrown</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/884">ko-build/ko#884</a></li>
<li>install mkdocs-redirect when publishing site by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/873">ko-build/ko#873</a></li>
<li>nit: replace one-item slice with const by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/885">ko-build/ko#885</a></li>
<li>Temp fix for SLSA generators by <a
href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/886">ko-build/ko#886</a></li>
<li>Fix verifier by <a
href="https://github.com/laurentsimon"><code>@​laurentsimon</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/891">ko-build/ko#891</a></li>
<li>Fix link in static-assets.md by <a
href="https://github.com/yuryu"><code>@​yuryu</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/893">ko-build/ko#893</a></li>
<li>add KO_DEFAULTBASEIMAGE usage to docs by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/895">ko-build/ko#895</a></li>
<li>Publish an tagged image on release by <a
href="https://github.com/vdemeester"><code>@​vdemeester</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/868">ko-build/ko#868</a></li>
<li>Add option to configure default platforms by <a
href="https://github.com/ReToCode"><code>@​ReToCode</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/897">ko-build/ko#897</a></li>
<li>Fix broken SLSA link by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/899">ko-build/ko#899</a></li>
<li>add MAINTAINERS.md by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/905">ko-build/ko#905</a></li>
<li>fix: possible race condition when applying templates to
flags/ldflags by <a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/913">ko-build/ko#913</a></li>
<li>update docs to reflect actual default base image by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/903">ko-build/ko#903</a></li>
<li>remove repeated error message on failure by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/921">ko-build/ko#921</a></li>
<li>website: update CNCF announcement by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/920">ko-build/ko#920</a></li>
<li>fix KO_CONFIG_PATH pointing to a file by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/923">ko-build/ko#923</a></li>
<li>upgrade to cosign v2.0.0-rc.0 by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/933">ko-build/ko#933</a></li>
<li>Feature: Add ECR presubmit testing. by <a
href="https://github.com/mattmoor"><code>@​mattmoor</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/934">ko-build/ko#934</a></li>
<li>remove 'ko deps' by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/937">ko-build/ko#937</a></li>
<li>feat: Add KO_GO_PATH env var by <a
href="https://github.com/embano1"><code>@​embano1</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/930">ko-build/ko#930</a></li>
<li>add ko.build/slack short link by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/945">ko-build/ko#945</a></li>
<li>update link to ko goreleaser docs by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/936">ko-build/ko#936</a></li>
<li>add ko community meeting details by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/938">ko-build/ko#938</a></li>
<li>fix cosign by adding --yes by <a
href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/973">ko-build/ko#973</a></li>
<li>fix: handle docker's unknown/unknown platform in index manifests by
<a href="https://github.com/imjasonh"><code>@​imjasonh</code></a> in <a
href="https://redirect.github.com/ko-build/ko/pull/975">ko-build/ko#975</a></li>
<li>fix file extension for cyclonedx by <a
href="https://github.com/developer-guy"><code>@​developer-guy</code></a>
in <a
href="https://redirect.github.com/ko-build/ko/pull/974">ko-build/ko#974</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/ianlewis"><code>@​ianlewis</code></a>
made their first contribution in <a
href="https://redirect.github.com/ko-build/ko/pull/836">ko-build/ko#836</a></li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="e22e7a15ff"><code>e22e7a1</code></a>
bump ggcr dep to <a
href="https://github.com/main"><code>@​main</code></a> (<a
href="https://redirect.github.com/google/ko/issues/976">#976</a>)</li>
<li><a
href="8e075ae1f1"><code>8e075ae</code></a>
fix file extension for cyclonedx (<a
href="https://redirect.github.com/google/ko/issues/974">#974</a>)</li>
<li><a
href="11670b7498"><code>11670b7</code></a>
fix: handle docker's unknown/unknown platform in index manifests (<a
href="https://redirect.github.com/google/ko/issues/975">#975</a>)</li>
<li><a
href="7ce947817e"><code>7ce9478</code></a>
fix cosign by adding --yes (<a
href="https://redirect.github.com/google/ko/issues/973">#973</a>)</li>
<li><a
href="9302da78dc"><code>9302da7</code></a>
Bump k8s.io/apimachinery from 0.26.1 to 0.26.2 (<a
href="https://redirect.github.com/google/ko/issues/972">#972</a>)</li>
<li><a
href="a1588838ba"><code>a158883</code></a>
Bump sigstore/cosign-installer from 2.8.1 to 3.0.1 (<a
href="https://redirect.github.com/google/ko/issues/971">#971</a>)</li>
<li><a
href="86b6c2854f"><code>86b6c28</code></a>
Bump actions/checkout from 2 to 3 (<a
href="https://redirect.github.com/google/ko/issues/966">#966</a>)</li>
<li><a
href="0bd12fb106"><code>0bd12fb</code></a>
Bump slsa-framework/slsa-github-generator from 1.2.1 to 1.5.0 (<a
href="https://redirect.github.com/google/ko/issues/967">#967</a>)</li>
<li><a
href="d5125daacd"><code>d5125da</code></a>
Bump github.com/sigstore/cosign/v2 from 2.0.0-rc.2 to 2.0.0 (<a
href="https://redirect.github.com/google/ko/issues/965">#965</a>)</li>
<li><a
href="03f4aed682"><code>03f4aed</code></a>
add ko community meeting details (<a
href="https://redirect.github.com/google/ko/issues/938">#938</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/ko/compare/v0.12.0...v0.13.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/ko&package-manager=go_modules&previous-version=0.12.0&new-version=0.13.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-29 14:38:57 -03:00
dependabot[bot]
c7a2818e2d
feat(deps): bump github.com/opencontainers/runc from 1.1.2 to 1.1.5 (#3896)
Bumps
[github.com/opencontainers/runc](https://github.com/opencontainers/runc)
from 1.1.2 to 1.1.5.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/opencontainers/runc/releases">github.com/opencontainers/runc's
releases</a>.</em></p>
<blockquote>
<h2>runc 1.1.5 -- &quot;囚われた屈辱は 反撃の嚆矢だ&quot;</h2>
<p>This is the fifth patch release in the 1.1.z series of runc, which
fixes
three CVEs found in runc.</p>
<ul>
<li>
<p>CVE-2023-25809 is a vulnerability involving rootless containers where
(under specific configurations), the container would have write access
to the /sys/fs/cgroup/user.slice/... cgroup hierarchy. No other
hierarchies on the host were affected. This vulnerability was
discovered by Akihiro Suda.
<a
href="https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc">https://github.com/opencontainers/runc/security/advisories/GHSA-m8cg-xc2p-r3fc</a></p>
</li>
<li>
<p>CVE-2023-27561 was a regression which effectively re-introduced
CVE-2019-19921. This bug was present from v1.0.0-rc95 to v1.1.4. This
regression was discovered by <a
href="https://github.com/Beuc"><code>@​Beuc</code></a>.
<a
href="https://github.com/advisories/GHSA-vpvm-3wq2-2wvm">https://github.com/advisories/GHSA-vpvm-3wq2-2wvm</a></p>
</li>
<li>
<p>CVE-2023-28642 is a variant of CVE-2023-27561 and was fixed by the
same
patch. This variant of the above vulnerability was reported by Lei
Wang.
<a
href="https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c">https://github.com/opencontainers/runc/security/advisories/GHSA-g2j6-57v7-gm8c</a></p>
</li>
</ul>
<p>In addition, the following other fixes are included in this
release:</p>
<ul>
<li>Fix the inability to use <code>/dev/null</code> when inside a
container. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li>
<li>Fix changing the ownership of host's <code>/dev/null</code> caused
by fd redirection
(a regression in 1.1.1). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li>
<li>Fix rare runc exec/enter unshare error on older kernels, including
CentOS &lt; 7.7. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li>
<li>nsexec: Check for errors in <code>write_log()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li>
</ul>
<h3>Static Linking Notices</h3>
<p>The <code>runc</code> binary distributed with this release are
<em>statically linked</em> with
the following <a
href="https://www.gnu.org/licenses/old-licenses/lgpl-2.1.en.html">GNU
LGPL-2.1</a> licensed libraries, with <code>runc</code> acting
as a &quot;work that uses the Library&quot;:</p>
<ul>
<li><a href="https://github.com/seccomp/libseccomp">libseccomp</a></li>
</ul>
<p>The versions of these libraries were not modified from their upstream
versions,
but in order to comply with the LGPL-2.1 (§6(a)), we have attached the
complete source code for those libraries which (when combined with the
attached
runc source code) may be used to exercise your rights under the
LGPL-2.1.</p>
<p>However we strongly suggest that you make use of your distribution's
packages
or download them from the authoritative upstream sources, especially
since
these libraries are related to the security of your containers.</p>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/opencontainers/runc/blob/v1.1.5/CHANGELOG.md">github.com/opencontainers/runc's
changelog</a>.</em></p>
<blockquote>
<h2>[1.1.5] - 2023-03-29</h2>
<blockquote>
<p>囚われた屈辱は
反撃の嚆矢だ</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Prohibit container's <code>/proc</code> and <code>/sys</code> to be
symlinks (CVE-2019-19921,
CVE-2023-27561, CVE-2023-28642, <a
href="https://redirect.github.com/opencontainers/runc/issues/3785">#3785</a>)</li>
<li>rootless: rework /sys/fs/cgroup mounts to avoid exposing the host's
cgroup
hierarchy into the container. (CVE-2023-25809)</li>
<li>Fix the inability to use <code>/dev/null</code> when inside a
container. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3620">#3620</a>)</li>
<li>Fix changing the ownership of host's <code>/dev/null</code> caused
by fd redirection
(a regression in 1.1.1). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3674">#3674</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>)</li>
<li>Fix rare runc exec/enter unshare error on older kernels, inlcuding
CentOS &lt; 7.7. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3776">#3776</a>)</li>
<li>nsexec: Check for errors in <code>write_log()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>)</li>
<li>Various CI fixes and updates. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3618">#3618</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3630">#3630</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3640">#3640</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3729">#3729</a>)</li>
</ul>
<h2>[1.1.4] - 2022-08-24</h2>
<blockquote>
<p>If you look for perfection, you'll never be content.</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Fix mounting via wrong proc fd.
When the user and mount namespaces are used, and the bind mount is
followed by
the cgroup mount in the spec, the cgroup was mounted using the bind
mount's
mount fd. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3511">#3511</a>)</li>
<li>Switch <code>kill()</code> in <code>libcontainer/nsenter</code> to
<code>sane_kill()</code>. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3536">#3536</a>)</li>
<li>Fix &quot;permission denied&quot; error from <code>runc run</code>
on <code>noexec</code> fs. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3541">#3541</a>)</li>
<li>Fix failed exec after <code>systemctl daemon-reload</code>.
Due to a regression in v1.1.3, the <code>DeviceAllow=char-pts rwm</code>
rule was no
longer added and was causing an error <code>open /dev/pts/0: operation
not permitted: unknown</code>
when systemd was reloaded. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3554">#3554</a>)</li>
<li>Various CI fixes. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3538">#3538</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3558">#3558</a>,
<a
href="https://redirect.github.com/opencontainers/runc/issues/3562">#3562</a>)</li>
</ul>
<h2>[1.1.3] - 2022-06-09</h2>
<blockquote>
<p>In the beginning there was nothing, which exploded.</p>
</blockquote>
<h3>Fixed</h3>
<ul>
<li>Our seccomp <code>-ENOSYS</code> stub now correctly handles
multiplexed syscalls on
s390 and s390x. This solves the issue where syscalls the host kernel did
not
support would return <code>-EPERM</code> despite the existence of the
<code>-ENOSYS</code> stub
code (this was due to how s390x does syscall multiplexing). (<a
href="https://redirect.github.com/opencontainers/runc/issues/3478">#3478</a>)</li>
<li>Retry on dbus disconnect logic in libcontainer/cgroups/systemd now
works as
intended; this fix does not affect runc binary itself but is important
for
libcontainer users such as Kubernetes. (<a
href="https://redirect.github.com/opencontainers/runc/issues/3476">#3476</a>)</li>
<li>Inability to compile with recent clang due to an issue with
duplicate</li>
</ul>
<!-- raw HTML omitted -->
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="f19387a6be"><code>f19387a</code></a>
VERSION: release v1.1.5</li>
<li><a
href="58a9abee21"><code>58a9abe</code></a>
Merge pull request from GHSA-m8cg-xc2p-r3fc</li>
<li><a
href="27fb72c7ff"><code>27fb72c</code></a>
merge branch 'pr-3776' into release-1.1</li>
<li><a
href="8ec02ea1b1"><code>8ec02ea</code></a>
nsexec: retry unshare on EINVAL</li>
<li><a
href="059d7730fc"><code>059d773</code></a>
merge branch 'pr-3785' into release-1.1</li>
<li><a
href="0abab45c9b"><code>0abab45</code></a>
Prohibit /proc and /sys to be symlinks</li>
<li><a
href="0e6b818a2b"><code>0e6b818</code></a>
rootless: fix /sys/fs/cgroup mounts</li>
<li><a
href="c6781d100a"><code>c6781d1</code></a>
Merge pull request <a
href="https://redirect.github.com/opencontainers/runc/issues/3721">#3721</a>
from kinvolk/rata/nsfixes-backport</li>
<li><a
href="f6e2cd3baf"><code>f6e2cd3</code></a>
nsexec: Check for errors in write_log()</li>
<li><a
href="3775df9fcb"><code>3775df9</code></a>
Merge pull request <a
href="https://redirect.github.com/opencontainers/runc/issues/3731">#3731</a>
from kolyshkin/1.1-fix-dev-null</li>
<li>Additional commits viewable in <a
href="https://github.com/opencontainers/runc/compare/v1.1.2...v1.1.5">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/opencontainers/runc&package-manager=go_modules&previous-version=1.1.2&new-version=1.1.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-29 14:37:12 -03:00
dependabot[bot]
55154b9aea
feat(deps): bump github.com/imdario/mergo from 0.3.14 to 0.3.15 (#3892)
Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from
0.3.14 to 0.3.15.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="fb3c082091"><code>fb3c082</code></a>
Update stackaid dependencies for imdario/mergo</li>
<li><a
href="c9e40b59db"><code>c9e40b5</code></a>
Merge pull request <a
href="https://redirect.github.com/imdario/mergo/issues/227">#227</a>
from eh-steve/should-not-dereference</li>
<li><a
href="acd16ec124"><code>acd16ec</code></a>
Merge branch 'master' into should-not-dereference</li>
<li><a
href="62d1cf2897"><code>62d1cf2</code></a>
Update stackaid dependencies for imdario/mergo</li>
<li><a
href="dcef160919"><code>dcef160</code></a>
Merge pull request <a
href="https://redirect.github.com/imdario/mergo/issues/226">#226</a>
from ronaudinho/fix/202</li>
<li><a
href="404749e66d"><code>404749e</code></a>
Update stackaid dependencies for imdario/mergo</li>
<li><a
href="bd316d34ac"><code>bd316d3</code></a>
Merge pull request <a
href="https://redirect.github.com/imdario/mergo/issues/221">#221</a>
from zhiyu0729/issue220</li>
<li><a
href="5b9bbdb8b6"><code>5b9bbdb</code></a>
Update stackaid dependencies for imdario/mergo</li>
<li><a
href="90db0ad2f4"><code>90db0ad</code></a>
Merge pull request <a
href="https://redirect.github.com/imdario/mergo/issues/170">#170</a>
from mdeltour/fix/naming-typo</li>
<li><a
href="0e73161ca2"><code>0e73161</code></a>
Add WithoutDereference config to prevent incorrect bool pointer
merges</li>
<li>Additional commits viewable in <a
href="https://github.com/imdario/mergo/compare/v0.3.14...v0.3.15">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/imdario/mergo&package-manager=go_modules&previous-version=0.3.14&new-version=0.3.15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Carlos Alexandro Becker <caarlos0@users.noreply.github.com>
2023-03-27 13:53:18 -03:00
dependabot[bot]
34fd422742
feat(deps): bump github.com/disgoorg/disgo from 0.15.2 to 0.15.3 (#3882)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.15.2 to 0.15.3.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.3</h2>
<h2>What's Changed</h2>
<ul>
<li>fix goroutine leaks from reconnects &amp; resumes by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/246">disgoorg/disgo#246</a></li>
<li>Added Len func to each XCache interface by <a
href="https://github.com/TisLeo"><code>@​TisLeo</code></a> in <a
href="https://redirect.github.com/disgoorg/disgo/pull/248">disgoorg/disgo#248</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a href="https://github.com/TisLeo"><code>@​TisLeo</code></a> made
their first contribution in <a
href="https://redirect.github.com/disgoorg/disgo/pull/248">disgoorg/disgo#248</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.15.2...v0.15.3">https://github.com/disgoorg/disgo/compare/v0.15.2...v0.15.3</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="8369a3b972"><code>8369a3b</code></a>
Added Len func to each XCache interface (<a
href="https://redirect.github.com/disgoorg/disgo/issues/248">#248</a>)</li>
<li><a
href="381f278234"><code>381f278</code></a>
maybe fix goroutine leaks from reconnects &amp; resumes (<a
href="https://redirect.github.com/disgoorg/disgo/issues/246">#246</a>)</li>
<li>See full diff in <a
href="https://github.com/disgoorg/disgo/compare/v0.15.2...v0.15.3">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.15.2&new-version=0.15.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-21 14:35:33 -03:00
dependabot[bot]
b96dba0333
feat(deps): bump github.com/google/go-containerregistry from 0.13.0 to 0.14.0 (#3878)
Bumps
[github.com/google/go-containerregistry](https://github.com/google/go-containerregistry)
from 0.13.0 to 0.14.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-containerregistry/releases">github.com/google/go-containerregistry's
releases</a>.</em></p>
<blockquote>
<h2>v0.14.0</h2>
<h2>Changelog</h2>
<ul>
<li>9306ebad Allow crane edit to generate non-image artifacts (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1545">#1545</a>)</li>
<li>de35f0f7 Allow setting Content-Type in crane edit manifest (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1551">#1551</a>)</li>
<li>4b081f80 Avoid v1.Manifest in crane edit config (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1583">#1583</a>)</li>
<li>1cfe1fc2 Bump aws-actions/configure-aws-credentials from 1.7.0 to
2.0.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1593">#1593</a>)</li>
<li>da1008fb Bump golangci/golangci-lint-action from 3.3.1 to 3.4.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1548">#1548</a>)</li>
<li>86be45fb Bump goreleaser/goreleaser-action from 4.1.0 to 4.1.1 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1547">#1547</a>)</li>
<li>62f183e5 Bump goreleaser/goreleaser-action from 4.1.1 to 4.2.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1556">#1556</a>)</li>
<li>1b8dc2ba Bump slsa-framework/slsa-github-generator from 1.2.2 to
1.5.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1580">#1580</a>)</li>
<li>11843ba2 Enforce proper sha256 usage (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1544">#1544</a>)</li>
<li>2ceebaaf Implement crane index subcommand (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1561">#1561</a>)</li>
<li>9f42e028 Set mediaType for empty.ImageIndex in RawManifest (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1562">#1562</a>)</li>
<li>759b19f7 Support artifactType, for images whose config.mediaType is
not a config (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1541">#1541</a>)</li>
<li>b3c23b4c Support for OCI 1.1+ referrers via API (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1546">#1546</a>)</li>
<li>061ee6bf Support for OCI 1.1+ referrers via fallback tag (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1543">#1543</a>)</li>
<li>67703048 Update descriptor &quot;data&quot; field (when valid)
during &quot;crane edit config&quot; (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1584">#1584</a>)</li>
<li>76bac933 Update release.yml (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1540">#1540</a>)</li>
<li>eb7d746c authn: also read mount secrets (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1560">#1560</a>)</li>
<li>e94d4089 bump deps using ./hack/bump-deps.sh (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1592">#1592</a>)</li>
<li>4e95ae2b crane: add --flatten for index append (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1566">#1566</a>)</li>
<li>ff810c18 crane: add serve subcommand (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1586">#1586</a>)</li>
<li>8ea5e0e8 crane: support --omit-digest-tags in crane ls (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1528">#1528</a>)</li>
<li>824efc77 fix(mutate): also set timestamps only present in some
formats (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1550">#1550</a>)</li>
<li>e04520bc fix: Fix the crane release url and add more steps (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1532">#1532</a>)</li>
<li>d8722327 hash: use generic instantiation (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1538">#1538</a>)</li>
<li>57f010d2 replace manual slsa-verifier installation with action (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1585">#1585</a>)</li>
<li>9cd098e3 skip tls verification if default transport is used with
insecure option (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1559">#1559</a>)</li>
<li>36249683 tarball: pass imageToTags (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1563">#1563</a>)</li>
</ul>
<h3>Container Images</h3>
<p><a
href="https://gcr.io/go-containerregistry/crane:v0.14.0">https://gcr.io/go-containerregistry/crane:v0.14.0</a>
<a
href="https://gcr.io/go-containerregistry/gcrane:v0.14.0">https://gcr.io/go-containerregistry/gcrane:v0.14.0</a></p>
<p>For example:</p>
<pre><code>docker pull gcr.io/go-containerregistry/crane:v0.14.0
docker pull gcr.io/go-containerregistry/gcrane:v0.14.0
</code></pre>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="4b081f801f"><code>4b081f8</code></a>
Avoid v1.Manifest in crane edit config (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1583">#1583</a>)</li>
<li><a
href="1cfe1fc25f"><code>1cfe1fc</code></a>
Bump aws-actions/configure-aws-credentials from 1.7.0 to 2.0.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1593">#1593</a>)</li>
<li><a
href="e94d40893b"><code>e94d408</code></a>
bump deps using ./hack/bump-deps.sh (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1592">#1592</a>)</li>
<li><a
href="ff810c186c"><code>ff810c1</code></a>
crane: add serve subcommand (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1586">#1586</a>)</li>
<li><a
href="57f010d26a"><code>57f010d</code></a>
replace manual slsa-verifier installation with action (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1585">#1585</a>)</li>
<li><a
href="6770304899"><code>6770304</code></a>
Update descriptor &quot;data&quot; field (when valid) during &quot;crane
edit config&quot; (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1584">#1584</a>)</li>
<li><a
href="1b8dc2babc"><code>1b8dc2b</code></a>
Bump slsa-framework/slsa-github-generator from 1.2.2 to 1.5.0 (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1580">#1580</a>)</li>
<li><a
href="8ea5e0e8f0"><code>8ea5e0e</code></a>
crane: support --omit-digest-tags in crane ls (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1528">#1528</a>)</li>
<li><a
href="4e95ae2b72"><code>4e95ae2</code></a>
crane: add --flatten for index append (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1566">#1566</a>)</li>
<li><a
href="4a0e0af4bf"><code>4a0e0af</code></a>
docs: Update crane installation and verification instructions (<a
href="https://redirect.github.com/google/go-containerregistry/issues/1567">#1567</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-containerregistry/compare/v0.13.0...v0.14.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/google/go-containerregistry&package-manager=go_modules&previous-version=0.13.0&new-version=0.14.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-20 09:58:29 -03:00
dependabot[bot]
f62a2e48ce
feat(deps): bump google.golang.org/protobuf from 1.29.0 to 1.29.1 (#3877)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps
[google.golang.org/protobuf](https://github.com/protocolbuffers/protobuf-go)
from 1.29.0 to 1.29.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/protocolbuffers/protobuf-go/releases">google.golang.org/protobuf's
releases</a>.</em></p>
<blockquote>
<h2>v1.29.1</h2>
<ul>
<li><a
href="https://github.com/protocolbuffers/protobuf-go/blob/HEAD/#v1.29.1-notable-changes">Notable
changes</a></li>
</ul>
<h2>Notable changes <!-- raw HTML omitted --><!-- raw HTML omitted
--></h2>
<p><strong>Bug fixes</strong></p>
<ul>
<li><a href="https://go.dev/cl/475995">CL/475995</a>:
internal/encoding/text: fix parsing of incomplete numbers</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="095a62b71f"><code>095a62b</code></a>
all: release v1.29.1</li>
<li><a
href="edaf511a7a"><code>edaf511</code></a>
internal/encoding/text: fix parsing of incomplete numbers</li>
<li><a
href="fe5bc54041"><code>fe5bc54</code></a>
all: start v1.29.0-devel</li>
<li><a
href="d3c9826520"><code>d3c9826</code></a>
all: release v1.29.0</li>
<li>See full diff in <a
href="https://github.com/protocolbuffers/protobuf-go/compare/v1.29.0...v1.29.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/protobuf&package-manager=go_modules&previous-version=1.29.0&new-version=1.29.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)
You can disable automated security fix PRs for this repo from the
[Security Alerts
page](https://github.com/goreleaser/goreleaser/network/alerts).

</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-19 23:20:13 -03:00
Carlos Alexandro Becker
dec5fb8e17
feat(deps): bump github.com/goreleaser/nfpm/v2 from v2.26.0 to v2.27.1 (#3876)
latest and greatest, just released, nfpm version!

---------

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-19 23:19:22 -03:00
Carlos Alexandro Becker
12b01f6734
feat(deps): bump github.com/caarlos0/log from v0.2.1 to v0.2.2 (#3875)
update caarlos0/log

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-19 22:47:02 -03:00
dependabot[bot]
13d92b4f89
feat(deps): bump github.com/xanzy/go-gitlab from 0.80.2 to 0.81.0 (#3855)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [github.com/xanzy/go-gitlab](https://github.com/xanzy/go-gitlab)
from 0.80.2 to 0.81.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="7c78a6c1e0"><code>7c78a6c</code></a>
Update dependencies</li>
<li><a
href="711e0b4cc5"><code>711e0b4</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1663">#1663</a>
from xanzy/feature/rate-limiter</li>
<li><a
href="40e5bfd65b"><code>40e5bfd</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1665">#1665</a>
from PatrickRice-KSC/add-omit-empty-to-project-options</li>
<li><a
href="77f5aac6fb"><code>77f5aac</code></a>
Fix lint errors</li>
<li><a
href="8f5194d531"><code>8f5194d</code></a>
Add omitempty and test</li>
<li><a
href="824308adfd"><code>824308a</code></a>
Prevent additional call to config the rate limiter</li>
<li><a
href="ae46dbc110"><code>ae46dbc</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1661">#1661</a>
from KingCrunch/feature/add-missing-fields-to-project</li>
<li><a
href="1e98371450"><code>1e98371</code></a>
Merge pull request <a
href="https://github-redirect.dependabot.com/xanzy/go-gitlab/issues/1662">#1662</a>
from timofurrer/deploy-token</li>
<li><a
href="74e732fb03"><code>74e732f</code></a>
Tweak PR just a little…</li>
<li><a
href="507b9ece5e"><code>507b9ec</code></a>
Expose Revoked and Expired field for Deploy Tokens</li>
<li>Additional commits viewable in <a
href="https://github.com/xanzy/go-gitlab/compare/v0.80.2...v0.81.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/xanzy/go-gitlab&package-manager=go_modules&previous-version=0.80.2&new-version=0.81.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-19 22:28:33 -03:00
dependabot[bot]
9bdfc55e67
feat(deps): bump github.com/caarlos0/env/v7 from 7.0.0 to 7.1.0 (#3848)
[//]: # (dependabot-start)
⚠️  **Dependabot is rebasing this PR** ⚠️ 

Rebasing might not happen immediately, so don't worry if this takes some
time.

Note: if you make any changes to this PR yourself, they will take
precedence over the rebase.

---

[//]: # (dependabot-end)

Bumps [github.com/caarlos0/env/v7](https://github.com/caarlos0/env) from
7.0.0 to 7.1.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/caarlos0/env/releases">github.com/caarlos0/env/v7's
releases</a>.</em></p>
<blockquote>
<h2>v7.1.0</h2>
<h2>Changelog</h2>
<h3>New Features</h3>
<ul>
<li>b135bbd86c4110736a91edf6ac242ef0d4b43bd7: feat: error types (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/240">#240</a>)
(<a href="https://github.com/akutuev"><code>@​akutuev</code></a>)</li>
<li>17f0a63edccb660238923ac0d02ab0432edb100d: feat: implement Is on
AggregateError (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/254">#254</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>266f68b264d486a75ebf4b2371aab58a072b52fc: feat: support map kind env
(<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/244">#244</a>)
(<a href="https://github.com/ken8203"><code>@​ken8203</code></a>)</li>
<li>c08b0f906b39a1fbc978eeeb262840f9acd735ff: feat: use field name by
default (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/253">#253</a>)
(<a href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Bug fixes</h3>
<ul>
<li>dfd68b2d5d324ecfe910012fe415a24c64d34e4b: fix: improve map handling,
coverage (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>e5472ec015521ddbef81bfa12e752e86ee09fa4a: fix: remove untested
behavior (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
</ul>
<h3>Documentation updates</h3>
<ul>
<li>65ba2db37013ed6bc2ebfadbbd2dc251ee528e0e: docs: caveats (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>f434e985558517cce98d345ea72faa1082e50640: docs: document how to
handle error (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>2d26ce1cd4c10a7fa055c643cfde3a4a295f8e6d: docs: fix examples (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>91e69e8f885b30466508baca6220fec4e4307338: docs: maps (<a
href="https://github.com/caarlos0"><code>@​caarlos0</code></a>)</li>
<li>850c2d8068a4e311cf2bd6f65a22dce5a66d5edd: docs: update to v7 (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/249">#249</a>)
(<a
href="https://github.com/alexandear"><code>@​alexandear</code></a>)</li>
</ul>
<hr />
<p><em>Released with <a href="https://goreleaser.com/pro">GoReleaser
Pro</a>!</em></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="17f0a63edc"><code>17f0a63</code></a>
feat: implement Is on AggregateError (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/254">#254</a>)</li>
<li><a
href="2d26ce1cd4"><code>2d26ce1</code></a>
docs: fix examples</li>
<li><a
href="c08b0f906b"><code>c08b0f9</code></a>
feat: use field name by default (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/253">#253</a>)</li>
<li><a
href="65ba2db370"><code>65ba2db</code></a>
docs: caveats</li>
<li><a
href="91e69e8f88"><code>91e69e8</code></a>
docs: maps</li>
<li><a
href="dfd68b2d5d"><code>dfd68b2</code></a>
fix: improve map handling, coverage</li>
<li><a
href="266f68b264"><code>266f68b</code></a>
feat: support map kind env (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/244">#244</a>)</li>
<li><a
href="f434e98555"><code>f434e98</code></a>
docs: document how to handle error</li>
<li><a
href="e5472ec015"><code>e5472ec</code></a>
fix: remove untested behavior</li>
<li><a
href="b135bbd86c"><code>b135bbd</code></a>
feat: error types (<a
href="https://github-redirect.dependabot.com/caarlos0/env/issues/240">#240</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/caarlos0/env/compare/v7.0.0...v7.1.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/caarlos0/env/v7&package-manager=go_modules&previous-version=7.0.0&new-version=7.1.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-19 22:24:58 -03:00
dependabot[bot]
dfdbad17f7
feat(deps): bump golang.org/x/tools from 0.6.0 to 0.7.0 (#3849)
Bumps [golang.org/x/tools](https://github.com/golang/tools) from 0.6.0
to 0.7.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/golang/tools/releases">golang.org/x/tools's
releases</a>.</em></p>
<blockquote>
<h1>gopls/v0.7.0</h1>
<h2>Features</h2>
<h3>Postfix completions</h3>
<p>Postfix completions are a new style of completions that can save you
time by inserting more complex pieces of commonly-written code. All of
the results end with <code>!</code>. This feature was added
experimentally in <code>gopls/v0.6.10</code> and is now enabled by
default.</p>
<p>See this example:</p>
<p><img
src="https://user-images.githubusercontent.com/5856771/114612163-c5df9800-9c6f-11eb-959c-8fe529018a21.gif"
alt="ezgif-3-a82b2077ff38" /></p>
<h3>New commands: <a
href="https://github.com/golang/tools/blob/master/gopls/doc/commands.md#retrieves-a-list-of-packages">List
known packages</a> and <a
href="https://github.com/golang/tools/blob/master/gopls/doc/commands.md#asks-the-server-to-add-an-import-path-to-a-given-go-file">add
import</a></h3>
<p>These commands can be used to manually list available packages to
import and then add an import to your file. They are currently not used
by any known clients, but they will be made available through the
Command Palette in VS Code in the next VS Code Go release.</p>
<h2>Improvements</h2>
<h3>Memory usage</h3>
<p>Improved trimming of the ASTs of dependency packages results in
reduced memory usage, especially for projects with many dependencies.
This may result in some hard-to-diagnose bugs that we're not yet aware
of, so please report any surprising behavior via <a
href="https://golang.org/issues/new">https://golang.org/issues/new</a>.</p>
<h2>Fixes</h2>
<p>A full list of all issues fixed can be found in the <a
href="https://github.com/golang/go/milestone/213?closed=1">gopls/v0.7.0
milestone</a>. To report a new problem, please file a new issue at <a
href="https://golang.org/issues/new">https://golang.org/issues/new</a>.</p>
<h2>Thank you to our contributors!</h2>
<p><a href="https://github.com/muirdm"><code>@​muirdm</code></a> <a
href="https://github.com/marwan-at-work"><code>@​marwan-at-work</code></a>
<a href="https://github.com/dominikh"><code>@​dominikh</code></a> <a
href="https://github.com/leitzler"><code>@​leitzler</code></a> <a
href="https://github.com/OneOfOne"><code>@​OneOfOne</code></a> <a
href="https://github.com/zyctree"><code>@​zyctree</code></a> <a
href="https://github.com/ShoshinNikita"><code>@​ShoshinNikita</code></a>
<a
href="https://github.com/KarthikNayak"><code>@​KarthikNayak</code></a>
<a href="https://github.com/suzmue"><code>@​suzmue</code></a> <a
href="https://github.com/bcmills"><code>@​bcmills</code></a></p>
<h1>gopls/v0.6.11</h1>
<p>This release contains mainly bug fixes. A full list of all issues
fixed can be found in the <a
href="https://github.com/golang/go/milestone/211?closed=1">gopls/v0.6.11
milestone</a>. To report a new problem, please file a new issue at <a
href="https://golang.org/issues/new">https://golang.org/issues/new</a>.</p>
<h2>Thank you to our contributors!</h2>
<p><a
href="https://github.com/ShoshinNikita"><code>@​ShoshinNikita</code></a>
<a href="https://github.com/sakateka"><code>@​sakateka</code></a> <a
href="https://github.com/muirdm"><code>@​muirdm</code></a> Will Langford
<a href="https://github.com/empire"><code>@​empire</code></a> <a
href="https://github.com/justplesh"><code>@​justplesh</code></a> <a
href="https://github.com/suzmue"><code>@​suzmue</code></a></p>
<h1>gopls/v0.6.10</h1>
<h2>Features</h2>
<h3><code>t.Fatal</code> snippet</h3>
<p>If you trigger completion in a test function, on the line after a
call to a function that returns an error, you will be offered a
completion snippet for:</p>
<pre lang="go"><code>if err != nil {
    t.Fatal(err)
}
&lt;/tr&gt;&lt;/table&gt; 
</code></pre>
</blockquote>
<p>... (truncated)</p>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="031fc75960"><code>031fc75</code></a>
gopls/internal/regtest/bench: don't run the iwl test with -short</li>
<li><a
href="f477bf4a41"><code>f477bf4</code></a>
gopls/internal/lsp/source/completion: avoid Snapshot.CachedPackages</li>
<li><a
href="b72edd12e5"><code>b72edd1</code></a>
gopls/internal/lsp/filecache: GOPLS_CACHE -&gt; GOPLSCACHE</li>
<li><a
href="d566927635"><code>d566927</code></a>
gopls/internal/lsp/regtest: add <a
href="https://github.com/suggestedfix"><code>@​suggestedfix</code></a>
marker</li>
<li><a
href="fdb0da65a1"><code>fdb0da6</code></a>
gopls/internal/regtest/bench: add a benchmark for diagnosing a
change</li>
<li><a
href="6eb432f3b0"><code>6eb432f</code></a>
gopls/internal/regtest/bench: add benchmarks in a wider variety of
repos</li>
<li><a
href="c91d0b88c3"><code>c91d0b8</code></a>
gopls/internal/lsp/source: guard against concurrent writes in xrefs</li>
<li><a
href="c0742f584b"><code>c0742f5</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="21d2256f2c"><code>21d2256</code></a>
gopls/internal/lsp/cache: make type-checking incremental</li>
<li><a
href="ae05609bd0"><code>ae05609</code></a>
internal/lsp/cache: add an LRU parse cache</li>
<li>Additional commits viewable in <a
href="https://github.com/golang/tools/compare/v0.6.0...v0.7.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/tools&package-manager=go_modules&previous-version=0.6.0&new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-19 22:18:07 -03:00
dependabot[bot]
41bb6dcddf
feat(deps): bump gocloud.dev from 0.28.0 to 0.29.0 (#3837)
Bumps [gocloud.dev](https://github.com/google/go-cloud) from 0.28.0 to
0.29.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/google/go-cloud/releases">gocloud.dev's
releases</a>.</em></p>
<blockquote>
<h2>v0.29.0</h2>
<p><strong>BREAKING CHANGES</strong></p>
<ul>
<li>Updated to latest <code>azureblob</code>, which had some
non-backward-compatible changes (again).</li>
</ul>
<p><strong>all</strong></p>
<ul>
<li>Defaulting to <code>go</code> version <code>1.2</code>.</li>
<li><strong>aws</strong>: Added support for custom endpoints for AWS SDK
v2.</li>
<li><strong>gcp</strong>: Updated imports for
<code>credentialspb</code>.</li>
</ul>
<p><strong>blob</strong></p>
<ul>
<li><strong>azureblob</strong>: Updated to latest (breaking
change).</li>
</ul>
<p><strong>pubsub</strong></p>
<ul>
<li><strong>kafkapub</strong>: Fixed nil Options pointer
dereference.</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="62397121ec"><code>6239712</code></a>
all: prep for release (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3236">#3236</a>)</li>
<li><a
href="973ec87371"><code>973ec87</code></a>
all: prep for release (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3235">#3235</a>)</li>
<li><a
href="3348a6a4a0"><code>3348a6a</code></a>
aws: fix typo on awssdk=v2 docstring</li>
<li><a
href="ec0a2bbc3f"><code>ec0a2bb</code></a>
pubsub/rabbitpubsub: give rabbitmq more time to come up (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3233">#3233</a>)</li>
<li><a
href="082a495894"><code>082a495</code></a>
docstore/gcpfirestore: update proto import (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3229">#3229</a>)</li>
<li><a
href="53ba9013f0"><code>53ba901</code></a>
pubsub/gcppubsub: update proto import (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3230">#3230</a>)</li>
<li><a
href="b3612581b1"><code>b361258</code></a>
runtimevar/gcpsecretmanager: update proto import (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3231">#3231</a>)</li>
<li><a
href="e5235d85eb"><code>e5235d8</code></a>
blob/gcsblob: update proto import (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3228">#3228</a>)</li>
<li><a
href="7cd8b2b9f6"><code>7cd8b2b</code></a>
secrets/gcpkms: update proto import (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3227">#3227</a>)</li>
<li><a
href="8cddf16323"><code>8cddf16</code></a>
all: update deps BREAKING_CHANGE_OK (<a
href="https://github-redirect.dependabot.com/google/go-cloud/issues/3225">#3225</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/google/go-cloud/compare/v0.28.0...v0.29.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=gocloud.dev&package-manager=go_modules&previous-version=0.28.0&new-version=0.29.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 13:07:00 -03:00
dependabot[bot]
dde6a23590
feat(deps): bump golang.org/x/crypto from 0.6.0 to 0.7.0 (#3839)
Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.6.0
to 0.7.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="776e461a4e"><code>776e461</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="ebe92624d1"><code>ebe9262</code></a>
ssh: add support for <a
href="mailto:aes256-gcm@openssh.com">aes256-gcm@openssh.com</a></li>
<li>See full diff in <a
href="https://github.com/golang/crypto/compare/v0.6.0...v0.7.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.6.0&new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 11:53:48 -03:00
dependabot[bot]
284574d9f5
feat(deps): bump golang.org/x/oauth2 from 0.5.0 to 0.6.0 (#3840)
Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.5.0
to 0.6.0.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="62b4eedd72"><code>62b4eed</code></a>
go.mod: update golang.org/x dependencies</li>
<li><a
href="885f294722"><code>885f294</code></a>
google: Add support for OAuth2 token exchange over mTLS</li>
<li><a
href="6f9c1a18cc"><code>6f9c1a1</code></a>
google: use Credentials instead of deprecated DefaultCredentials</li>
<li><a
href="c82d0e16dc"><code>c82d0e1</code></a>
google/internal/externalaccount: Removed URL validation for google URLs
in AD...</li>
<li>See full diff in <a
href="https://github.com/golang/oauth2/compare/v0.5.0...v0.6.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/oauth2&package-manager=go_modules&previous-version=0.5.0&new-version=0.6.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-06 11:37:04 -03:00
dependabot[bot]
4ea080ce49
feat(deps): bump github.com/disgoorg/disgo from 0.15.1 to 0.15.2 (#3819)
Bumps [github.com/disgoorg/disgo](https://github.com/disgoorg/disgo)
from 0.15.1 to 0.15.2.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/disgoorg/disgo/releases">github.com/disgoorg/disgo's
releases</a>.</em></p>
<blockquote>
<h2>v0.15.2</h2>
<h2>What's Changed</h2>
<ul>
<li>fix voice by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="a3ddd4aaca</a></li>
<li>add helper to sync commands for guilds or globally by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="3dbf6a6c06</a></li>
<li>simplify oauth2 by <a
href="https://github.com/TopiSenpai"><code>@​TopiSenpai</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/241">disgoorg/disgo#241</a></li>
<li>add <code>CustomMessage</code> to
<code>AutoModerationActionMetadata</code> by <a
href="https://github.com/caneleex"><code>@​caneleex</code></a> in <a
href="https://github-redirect.dependabot.com/disgoorg/disgo/pull/243">disgoorg/disgo#243</a></li>
</ul>
<h1>Breaking Changes</h1>
<ul>
<li>removal of <code>oauth2.SessionController</code></li>
<li><code>oauth2.Session</code> is now a struct instead of
interface</li>
<li>removal of <code>identifier</code> param in
<code>oauth2.Client.StartSession()</code> and
<code>oauth2.Client.RefreshSession()</code></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/disgoorg/disgo/compare/v0.15.1...v0.15.2">https://github.com/disgoorg/disgo/compare/v0.15.1...v0.15.2</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="2ac4b5df9b"><code>2ac4b5d</code></a>
use handler.SyncCommands in handler example</li>
<li><a
href="a3ddd4aaca"><code>a3ddd4a</code></a>
fix voice ip discovery packet size</li>
<li><a
href="3dbf6a6c06"><code>3dbf6a6</code></a>
handler add helper to sync commands for guilds or globally</li>
<li><a
href="2fc89bc438"><code>2fc89bc</code></a>
minor refactor &amp; cleanup of oauth2 suff</li>
<li><a
href="0b775b65f2"><code>0b775b6</code></a>
fix json tag name</li>
<li><a
href="9ab5fbde32"><code>9ab5fbd</code></a>
Bump golang.org/x/sys in /_examples/application_commands/http (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/244">#244</a>)</li>
<li><a
href="14761a3785"><code>14761a3</code></a>
Bump golang.org/x/sys from 0.0.0-20211019181941-9d821ace8654 to 0.1.0
(<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/245">#245</a>)</li>
<li><a
href="8cb8e68a90"><code>8cb8e68</code></a>
add CustomMessage to AutoModerationActionMetadata (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/243">#243</a>)</li>
<li><a
href="a32b7f1d36"><code>a32b7f1</code></a>
fix README example (<a
href="https://github-redirect.dependabot.com/disgoorg/disgo/issues/242">#242</a>)</li>
<li><a
href="faa79470af"><code>faa7947</code></a>
simplify oauth2 by removing session controller &amp; converting a
session to a st...</li>
<li>Additional commits viewable in <a
href="https://github.com/disgoorg/disgo/compare/v0.15.1...v0.15.2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/disgoorg/disgo&package-manager=go_modules&previous-version=0.15.1&new-version=0.15.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2023-03-02 09:36:10 -03:00
Carlos Alexandro Becker
acc9eea154
feat(deps): update env to v7 (#3814)
env v7!

Signed-off-by: Carlos A Becker <caarlos0@users.noreply.github.com>
2023-03-01 01:20:37 -03:00