Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: bump the all group in /cli with 9 updates #1935

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 6, 2023

Bumps the all group in /cli with 9 updates:

Package From To
cloud.google.com/go/asset 1.15.1 1.15.3
cloud.google.com/go/storage 1.33.0 1.34.1
github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test 0.9.2 0.10.0
github.com/fatih/color 1.15.0 1.16.0
github.com/jedib0t/go-pretty/v6 6.4.8 6.4.9
github.com/migueleliasweb/go-github-mock 0.0.20 0.0.22
github.com/open-policy-agent/opa 0.57.1 0.58.0
github.com/spf13/cobra 1.7.0 1.8.0
golang.org/x/text 0.13.0 0.14.0

Updates cloud.google.com/go/asset from 1.15.1 to 1.15.3

Commits
  • 559b86a chore: release main (#8706)
  • 174da47 fix(all): update golang.org/x/net to v0.17.0 (#8705)
  • 89eeeff chore: release main (#8664)
  • 0e43b40 feat(shopping): new clients (#8699)
  • 9c502c2 fix: Update go_package and Go importpath (#8667)
  • 4284639 chore(ci): update Go version to 1.21 (#8695)
  • c73963f fix(bigquery): handle storage read api Recv call errors (#8666)
  • 65cb8bd chore(all): update module golang.org/x/net to v0.17.0 [SECURITY] (#8691)
  • 7b19ae2 chore(internal/postprocessor): add config for shopping/type (#8690)
  • 45d4f21 chore(deps): bump golang.org/x/net from 0.10.0 to 0.17.0 in /internal/example...
  • Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.33.0 to 1.34.1

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.34.1

1.34.1 (2023-11-01)

Bug Fixes

  • storage: Bump google.golang.org/api to v0.149.0 (8d2ab9f)
Commits

Updates github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test from 0.9.2 to 0.10.0

Release notes

Sourced from github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test's releases.

infra/blueprint-test: v0.10.0

0.10.0 (2023-11-01)

Features

CLI Release v0.9.4

No release notes provided.

CLI Release v0.9.3

No release notes provided.

Commits

Updates github.com/fatih/color from 1.15.0 to 1.16.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.16.0

What's Changed

Dependency updates

New Contributors

Full Changelog: fatih/color@v1.15.0...v1.16.0

Commits
  • 0f9779e Merge pull request #213 from fatih/dependabot/go_modules/golang.org/x/sys-0.14.0
  • 0c78604 Bump golang.org/x/sys from 0.13.0 to 0.14.0
  • 96e0f73 Merge pull request #208 from fatih/dependabot/github_actions/actions/checkout-4
  • 4c66e32 Bump actions/checkout from 3 to 4
  • 2fb03d6 Merge pull request #202 from fatih/dependabot/github_actions/actions/setup-go-4
  • 8ba7bbd Bump actions/setup-go from 3 to 4
  • e3f97f3 Merge pull request #209 from fatih/dependabot/go_modules/golang.org/x/sys-0.13.0
  • e146575 Bump golang.org/x/sys from 0.10.0 to 0.13.0
  • d2d7a5e Merge pull request #212 from fatih/dependabot/go_modules/github.com/mattn/go-...
  • f3e45da Merge branch 'main' into dependabot/go_modules/github.com/mattn/go-isatty-0.0.20
  • Additional commits viewable in compare view

Updates github.com/jedib0t/go-pretty/v6 from 6.4.8 to 6.4.9

Release notes

Sourced from github.com/jedib0t/go-pretty/v6's releases.

v6.4.9

Bug-Fixes

  • table
    • do not merge content cells with empty ones (#280)
Commits

Updates github.com/migueleliasweb/go-github-mock from 0.0.20 to 0.0.22

Release notes

Sourced from github.com/migueleliasweb/go-github-mock's releases.

v0.0.22

What's Changed

New Contributors

Full Changelog: migueleliasweb/go-github-mock@v0.0.20...v0.0.22

v0.0.21

What's Changed

New Contributors

Full Changelog: migueleliasweb/go-github-mock@v0.0.20...v0.0.21

Commits
  • be5e2c5 Small README improvements
  • 5771525 README.md improvements
  • 8a5c184 docs(readme): add a section on mocking rate limits
  • abf52fe refactor: split out middleware for later re-use
  • dd18230 refactor: clean up error checking
  • 24b24ab feat: add WithRateLimit as a new MockBackendOption
  • ebbb938 Update GH definitions
  • ef74c7b upgrade go-github to v56
  • See full diff in compare view

Updates github.com/open-policy-agent/opa from 0.57.1 to 0.58.0

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v0.58.0

NOTES:

  • All published OPA images now run with a non-root uid/gid. The uid:gid is set to 1000:1000 for all images. As a result there is no longer a need for the -rootless image variant and hence it will not be published as part of future releases. This change is in line with container security best practices. OPA can still be run with root privileges by explicitly setting the user, either with the --user argument for docker run, or by specifying the securityContext in the Kubernetes Pod specification.

This release contains a mix of performance improvements, bugfixes and security fixes for third-party libraries.

Runtime, Tooling, SDK

  • cmd/test: Display lines not covered if code coverage threshold not met in verbose reporting mode (#2562) authored by @​johanfylling
  • cmd/test: Don't round up test coverage calculation as it could lead to inaccurate code coverage results (#6307) authored by @​anderseknert
  • cmd/fmt: Don't format functions without a value to include = true as it is implied (#6323) authored by @​anderseknert
  • server: Remove deprecated partial query parameter from REST API. This option has been deprecated since v0.23.0 (#2266) authored by @​ashutosh-narkar
  • Add support for configurable prometheus buckets for the http_request_duration_seconds metric (#6238) authored by @​AdrianArnautu
  • plugins/bundle: Update bundle plugin state on a reconfigure operation when existing bundle is not modified (#6311) authored by @​asadk12
  • internal/pathwatcher: Fix how paths to watch by a fsnotify watcher are determined to avoid monitoring unintended directories and files (#6277) authored by @​ashutosh-narkar

Topdown and Rego

  • topdown: Fix issue with build optimization producing support modules with forbidden characters in first var of rule ref (#6338) authored by @​johanfylling
  • topdown: Fix panic in build optimization when policy contains rules with a general ref in the head (#6339) authored by @​johanfylling
  • topdown: Avoid unnecessary conversion of small numbers by caching them and thereby helping to speed up some arithmetic operations (#6021) authored by @​ashutosh-narkar
  • ast+rego: Disable compiler stages for IR-based eval paths (#6335) authored by @​srenatus
  • built-in/walk: Skip path creation if path is assigned a wildcard to achieve faster walk-ing (#6267) authored by @​anderseknert
  • ast: Add regression test for edge case where partial rule hides recursion cycle (#6318) authored by @​johanfylling

Docs

  • Drop EXPERIMENTAL status of reported prom metrics (#6298) authored by @​ashutosh-narkar
  • Update documentation on GCS bundles for case where the resource (the object in the GCS bucket) contains slashes (/) or other special characters (#6264) authored by @​dennisg
  • Provide a more clear description of negation in the policy language section (#6275) authored by @​gusega

Website + Ecosystem

  • Fix un-versioned built-in docs issue so that only the built-ins for a given doc version are displayed (#6269) authored by @​charlieegan3

Miscellaneous

  • ci: Remove hub tool in GitHub workflows in favor of GitHub CLI tool (#6326) authored by @​ashutosh-narkar
  • Dependency updates; notably:
    • bump go.opentelemetry.io modules (#6292) authored by @​cksidharthan
    • aquasecurity/trivy-action from 0.12.0 to 0.13.0
    • github.com/containerd/containerd from 1.7.6 to 1.7.7
    • github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0
    • golang.org/x/net from 0.15.0 to 0.17.0
    • google.golang.org/grpc from 1.58.2 to 1.59.0 (addresses vulnerability GHSA-m425-mq94-257g)
    • oras.land/oras-go/v2 from 2.3.0 to 2.3.1
    • sigs.k8s.io/yaml from 1.3.0 to 1.4.0
Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

0.58.0

NOTES:

  • All published OPA images now run with a non-root uid/gid. The uid:gid is set to 1000:1000 for all images. As a result there is no longer a need for the -rootless image variant and hence it will not be published as part of future releases. This change is in line with container security best practices. OPA can still be run with root privileges by explicitly setting the user, either with the --user argument for docker run, or by specifying the securityContext in the Kubernetes Pod specification.

This release contains a mix of performance improvements, bugfixes and security fixes for third-party libraries.

Runtime, Tooling, SDK

  • cmd/test: Display lines not covered if code coverage threshold not met in verbose reporting mode (#2562) authored by @​johanfylling
  • cmd/test: Don't round up test coverage calculation as it could lead to inaccurate code coverage results (#6307) authored by @​anderseknert
  • cmd/fmt: Don't format functions without a value to include = true as it is implied (#6323) authored by @​anderseknert
  • server: Remove deprecated partial query parameter from REST API. This option has been deprecated since v0.23.0 (#2266) authored by @​ashutosh-narkar
  • Add support for configurable prometheus buckets for the http_request_duration_seconds metric (#6238) authored by @​AdrianArnautu
  • plugins/bundle: Update bundle plugin state on a reconfigure operation when existing bundle is not modified (#6311) authored by @​asadk12
  • internal/pathwatcher: Fix how paths to watch by a fsnotify watcher are determined to avoid monitoring unintended directories and files (#6277) authored by @​ashutosh-narkar

Topdown and Rego

  • topdown: Fix issue with build optimization producing support modules with forbidden characters in first var of rule ref (#6338) authored by @​johanfylling
  • topdown: Fix panic in build optimization when policy contains rules with a general ref in the head (#6339) authored by @​johanfylling
  • topdown: Avoid unnecessary conversion of small numbers by caching them and thereby helping to speed up some arithmetic operations (#6021) authored by @​ashutosh-narkar
  • ast+rego: Disable compiler stages for IR-based eval paths (#6335) authored by @​srenatus
  • built-in/walk: Skip path creation if path is assigned a wildcard to achieve faster walk-ing (#6267) authored by @​anderseknert
  • ast: Add regression test for edge case where partial rule hides recursion cycle (#6318) authored by @​johanfylling

Docs

  • Drop EXPERIMENTAL status of reported prom metrics (#6298) authored by @​ashutosh-narkar
  • Update documentation on GCS bundles for case where the resource (the object in the GCS bucket) contains slashes (/) or other special characters (#6264) authored by @​dennisg
  • Provide a more clear description of negation in the policy language section (#6275) authored by @​gusega

Website + Ecosystem

  • Fix un-versioned built-in docs issue so that only the built-ins for a given doc version are displayed (#6269) authored by @​charlieegan3

Miscellaneous

  • ci: Remove hub tool in GitHub workflows in favor of GitHub CLI tool (#6326) authored by @​ashutosh-narkar
  • Dependency updates; notably:
    • bump go.opentelemetry.io modules (#6292) authored by @​cksidharthan
    • aquasecurity/trivy-action from 0.12.0 to 0.13.0
    • github.com/containerd/containerd from 1.7.6 to 1.7.7
    • github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0
    • golang.org/x/net from 0.15.0 to 0.17.0
    • google.golang.org/grpc from 1.58.2 to 1.59.0 (addresses vulnerability GHSA-m425-mq94-257g)
    • oras.land/oras-go/v2 from 2.3.0 to 2.3.1
    • sigs.k8s.io/yaml from 1.3.0 to 1.4.0
Commits
  • 69a381c Prepare v0.58.0 release
  • 132cc4b docs: Update generated CLI docs
  • a470a21 Rename --future-compat CLI flag
  • d7e9d13 topdown: Fixing issues with optimizing rules with refs in the head
  • 98c300c Rename future.compat import
  • 483d941 build(deps): bump aquasecurity/trivy-action from 0.12.0 to 0.13.0 (#6347)
  • 2bd8d58 build(deps): bump sigs.k8s.io/yaml from 1.3.0 to 1.4.0
  • 89e02ef build(deps): bump oras.land/oras-go/v2 from 2.3.0 to 2.3.1 (#6337)
  • 1246ad2 build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0
  • 544fd03 ast+rego: disable compiler stages for IR-based eval paths (#6335)
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.7.0 to 1.8.0

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.0

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation


Thank you everyone who contributed to this release and all your hard work! Cobra and this community would never be possible without all of you!!!! 🐍

Full Changelog: spf13/cobra@v1.7.0...v1.8.0

Commits
  • a0a6ae0 Improve API to get flag completion function (#2063)
  • 890302a Support usage as plugin for tools like kubectl (#2018)
  • 48cea5c build(deps): bump actions/checkout from 3 to 4 (#2028)
  • 22953d8 Replace all non-alphanumerics in active help env var program prefix (#1940)
  • 00b68a1 Add tests for flag completion registration (#2053)
  • b711e87 Don't complete --help flag when flag parsing disabled (#2061)
  • 8b1eba4 Fix linter errors (#2052)
  • 4cafa37 Allow running persistent run hooks of all parents (#2044)
  • 5c962a2 build(deps): bump github.com/cpuguy83/go-md2man/v2 from 2.0.2 to 2.0.3 (#2047)
  • efe8fa3 build(deps): bump actions/setup-go from 3 to 4 (#1934)
  • Additional commits viewable in compare view

Updates golang.org/x/text from 0.13.0 to 0.14.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all group in /cli with 9 updates:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/asset](https://github.com/googleapis/google-cloud-go) | `1.15.1` | `1.15.3` |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.33.0` | `1.34.1` |
| [github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test](https://github.com/GoogleCloudPlatform/cloud-foundation-toolkit) | `0.9.2` | `0.10.0` |
| [github.com/fatih/color](https://github.com/fatih/color) | `1.15.0` | `1.16.0` |
| [github.com/jedib0t/go-pretty/v6](https://github.com/jedib0t/go-pretty) | `6.4.8` | `6.4.9` |
| [github.com/migueleliasweb/go-github-mock](https://github.com/migueleliasweb/go-github-mock) | `0.0.20` | `0.0.22` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `0.57.1` | `0.58.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.7.0` | `1.8.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.13.0` | `0.14.0` |


Updates `cloud.google.com/go/asset` from 1.15.1 to 1.15.3
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@kms/v1.15.1...kms/v1.15.3)

Updates `cloud.google.com/go/storage` from 1.33.0 to 1.34.1
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v1.33.0...spanner/v1.34.1)

Updates `github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test` from 0.9.2 to 0.10.0
- [Release notes](https://github.com/GoogleCloudPlatform/cloud-foundation-toolkit/releases)
- [Changelog](https://github.com/GoogleCloudPlatform/cloud-foundation-toolkit/blob/master/release-please-config.json)
- [Commits](cli/v0.9.2...infra/blueprint-test/v0.10.0)

Updates `github.com/fatih/color` from 1.15.0 to 1.16.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.15.0...v1.16.0)

Updates `github.com/jedib0t/go-pretty/v6` from 6.4.8 to 6.4.9
- [Release notes](https://github.com/jedib0t/go-pretty/releases)
- [Commits](jedib0t/go-pretty@v6.4.8...v6.4.9)

Updates `github.com/migueleliasweb/go-github-mock` from 0.0.20 to 0.0.22
- [Release notes](https://github.com/migueleliasweb/go-github-mock/releases)
- [Commits](migueleliasweb/go-github-mock@v0.0.20...v0.0.22)

Updates `github.com/open-policy-agent/opa` from 0.57.1 to 0.58.0
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v0.57.1...v0.58.0)

Updates `github.com/spf13/cobra` from 1.7.0 to 1.8.0
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.7.0...v1.8.0)

Updates `golang.org/x/text` from 0.13.0 to 0.14.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.13.0...v0.14.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/asset
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: cloud.google.com/go/storage
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/GoogleCloudPlatform/cloud-foundation-toolkit/infra/blueprint-test
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/fatih/color
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/jedib0t/go-pretty/v6
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/migueleliasweb/go-github-mock
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
- dependency-name: golang.org/x/text
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 6, 2023
@dpebot
Copy link
Collaborator

dpebot commented Nov 6, 2023

/gcbrun

Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 7, 2023

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Nov 7, 2023
@dependabot dependabot bot deleted the dependabot/go_modules/cli/all-943eb1dc58 branch November 7, 2023 15:06
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant