chore(deps): update go modules

[renovate-bot]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence	Type	Update	Pending
cloud.google.com/go/asset	v1.16.0 -> v1.17.1					require	minor	v1.17.2
cloud.google.com/go/storage	v1.36.0 -> v1.37.0					require	minor	v1.38.0
github.com/google/go-github/v57	v57.0.0 -> v59.0.0					require	major
github.com/jedib0t/go-pretty/v6	v6.4.9 -> v6.5.4					require	minor
github.com/open-policy-agent/opa	v0.59.0 -> v0.61.0					require	minor
golang.org/x/exp	02704c9 -> ec58324					require	digest
golang.org/x/oauth2	v0.15.0 -> v0.17.0					require	minor
google.golang.org/api	v0.154.0 -> v0.163.0					require	minor	v0.165.0 (+1)
google.golang.org/protobuf	v1.31.0 -> v1.32.0					require	minor

---

Release Notes

google/go-github (github.com/google/go-github/v57)

v59.0.0

Compare Source

This release contains the following breaking API changes:

• Add suspended as option to AdminService.CreateUser() (#​3049)

...and the following additional changes:

• Bump go-github from v57 to v58 in /scrape (#​3046)
• Fix issue in AcceptedError handling for UploadSarif (#​3047)
• Fix typos (#​3048)
• Add MergedAt field to PullRequestLinks (#​3053)
• Add default workflow permissions for enterprise/org/repo (#​3054)
• Bump actions/cache from 3 to 4 (#​3055)
• Add Topics to EditChange struct (#​3057)
• Add list repo org variables and secrets (#​3058)
• Fix leaked client transport on copy (#​3051)
• Bump codecov/codecov-action from 3.1.4 to 3.1.5 (#​3061)
• Bump github.com/getkin/kin-openapi from 0.122.0 to 0.123.0 in /tools (#​3062)
• Add custom properties on Repository and PushEventRepository (#​3065)
• Add support for deployment protection rules (#​3050)
• Bump codecov/codecov-action from 3.1.5 to 4.0.1 (#​3066)
• Add ListWorkflowJobsAttempt method to ActionsService (#​3060)
• Bump version of go-github to v59.0.0 (#​3068)

v58.0.0

Compare Source

This release contains the following breaking API changes:

• Fix broken CreateOrUpdateRepoCustomPropertyValues (#​3023)
• Remove ambiguous fields from AuditEntry (#​3017)

...and the following additional changes:

• Bump go-github from v56 to v57 in /scrape (#​3010)
• Update metadata (#​3012)
• Bump actions/setup-go from 4 to 5 (#​3027)
• Add scanning validity checks (#​3026)
• Add Referrer field to AuditEntry (#​3032)
• Add code_search and dependency_snapshots for RateLimits (#​3019)
• Support temporary private fork creation via API (#​3025)
• Escape package names to support names which include a slash (#​3002)
• Don't update httpClient passed to NewClient (#​3011)
• Add GetAllCustomPropertyValues for repositories (#​3020)
• Add Copilot endpoints (#​2973)
• Fix copilot API payload (#​3034)
• Bump golang.org/x/crypto from 0.14.0 to 0.17.0 in /example (#​3033)
• Fix example/go.sum (#​3035)
• Bump github.com/getkin/kin-openapi from 0.120.0 to 0.122.0 in /tools (#​3015)
• Bump github.com/cloudflare/circl from 1.3.3 to 1.3.7 in /example (#​3039)
• Add Repo and Action to IssueEvent (#​3040)
• Bump golang.org/x/sync from 0.5.0 to 0.6.0 in /tools (#​3041)
• Bump golang.org/x/net from 0.19.0 to 0.20.0 in /scrape (#​3042)
• Bump version of go-github to v58.0.0 (#​3045)

jedib0t/go-pretty (github.com/jedib0t/go-pretty/v6)

v6.5.4

Compare Source

What's Changed

• table: fix SuppressTrailingSpaces removing spaces from the beginning by @​ilya-lesikov in https://github.com/jedib0t/go-pretty/pull/295
• table: fix documentation for merges by @​jedib0t in https://github.com/jedib0t/go-pretty/pull/296

New Contributors

• @​ilya-lesikov made their first contribution in https://github.com/jedib0t/go-pretty/pull/295

Full Changelog: jedib0t/go-pretty@v6.5.3...v6.5.4

v6.5.3

Compare Source

Bug-Fixes

• table & list:
  • process "\r" correctly (moving the cursor back to start of line)

v6.5.2

Compare Source

Bug-Fixes

• table & list:
  • process "\r" correctly (erase everything preceding it in the line)

v6.5.1

Compare Source

Features

• progress
  • auto-trim output to fit terminal width

v6.5.0

Compare Source

Features

• table
  • SuppressTrailingSpaces() to remove trailing spaces in tables without borders; thanks @​shreddedbacon

Bug-Fixes

• table
  • handle negative column WidthMax values gracefully; fixes #​285

open-policy-agent/opa (github.com/open-policy-agent/opa)

v0.61.0

Compare Source

This release contains a mix of new features and bugfixes.

Runtime, SDK

• Adding --v1-compatible flag to all previously unsupported command line commands (#​6520) authored by @​johanfylling
• Don't load files in tarball exceeding size_limit_bytes (#​6514) authored by @​anderseknert reported by @​dolevf
• Allow TLS cipher suites to be set for the OPA server (#​6537) authored by @​ashutosh-narkar
• Removing deprecated fields and functions related to rego-v1 compatibility (#​6542) authored by @​johanfylling
• bundle: Make func newDescriptor and withCloser public (#​6517) authored by @​antgubarev
• runtime/logging: Do not panic when rctx is missing (#​6506) authored by @​srenatus

Topdown

• topdown: Clean expired http.send cache entries periodically (#​5320) authored by @​rudrakhp reported by @​lukyer

Docs

• docs: Add documentation for new cache config parameters (#​6518) authored by @​rudrakhp
• docs: Update docker-authorization.md to use new plugin version (#​6539) authored by @​denis-accesa
• docs: Fix a typo in _index.md (#​6491) authored by @​trungnguyen
• docs: Add a new debugging page (#​6513) authored by @​charlieegan3
• docs: Update log masking policy examples to be Rego v1 compatible (#​6545) authored by @​ashutosh-narkar
• docs: Update version for non docs pages (#​6526) authored by @​charlieegan3
• Integrations, Ecosystem:
  • docs: Add dependency-management-data logo (#​6543) authored by @​jamietanna
  • docs: Updated Rond links (#​6524) authored by @​ugho16
  • docs: Correctly size integration logos (#​6544) authored by @​charlieegan3
  • docs: Validate ecosystem keys (#​6522) authored by @​charlieegan3

Miscellaneous

• linters+testdata: Reformat all yaml testcases for linting. (#​6511) authored by @​philipaconrad
• Dependency updates, notably:
  • bump github.com/containerd/containerd from 1.7.11 to 1.7.12
  • bump github.com/go-logr/logr from 1.3.0 to 1.4.1
  • bump github.com/google/uuid from 1.5.0 to 1.6.0
  • bump github.com/prometheus/client_golang from v1.16.0 to v1.18.0
  • bump google.golang.org/grpc from 1.60.1 to 1.61.0

v0.60.0

Compare Source

v0.60.0

Runtime, Tooling, SDK

• OPA can be run in 1.0 compatibility mode by using the new --v1-compatible flag. When this mode is enabled, the current release of OPA will behave as OPA v1.0 will eventually behave by default. This flag is currently supported on the build, check, fmt, eval and test commands (#​6478) authored by @​johanfylling
• Extend the telemetry report to include the minimum compatible version of policies loaded into OPA (#​6361) co-authored by @​srenatus and @​ashutosh-narkar
• server: Support fsnotify based reloading of certificate, key and CA cert pool when they change on disk (#​5788) authored by @​charlieegan3
• Add option on the unit test runner to surface builtin errors. This should help with debugging errors generated while running unit tests (#​6489) authored by @​jalseth
• Fix issue in opa fmt where the assignment operator and term in the rule head of chain rules are removed from the re-written rule head (#​6467) authored by @​anderseknert
• cmd/fmt: Replace dependency on diff tool with an external golang library function (#​6284) authored by @​colinjlacy

Topdown and Rego

• topdown/providers: Preserve user provided http headers in the providers.aws.sign_req builtin command (#​6456) authored by @​c2zwdjnlcg
• rego: Allow custom builtin function registration to provide a description for the builtin (#​6449) authored by @​lcarva
• ast+cmd: Allow bundle to contain calls to unknown functions when inspected (#​6457) authored by @​johanfylling

Docs

• Add section on the changes proposed for a future OPA v1.0 and update Rego examples to be OPA v1.0 compliant(#​6453) authored by @​johanfylling
• Clarify behavior of the sprintf builtin command when used with the %T marker (#​6487) authored by @​lcarva

Website + Ecosystem

• Ecosystem: Digger (#​6464) authored by @​anderseknert

Miscellaneous

• Update Makefile to allow custom GOFLAGS to be provided to the golang executable (#​6458) authored by @​cova-fe
• Dependency updates; notably:
  • bump golang 1.21.4 -> 1.21.5 (#​6460) authored by @​srenatus
  • bump aquasecurity/trivy-action from 0.14.0 to 0.16.0
  • bump github.com/containerd/containerd from 1.7.9 to 1.7.11
  • bump google.golang.org/grpc from 1.59.0 to 1.60.1
  • bump github.com/google/uuid from 1.4.0 to 1.5.0

googleapis/google-api-go-client (google.golang.org/api)

v0.163.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​2401) (62ceaad)
• all: Auto-regenerate discovery clients (#​2403) (47834b5)
• all: Auto-regenerate discovery clients (#​2405) (2271ef7)

v0.162.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​2388) (f2f2d22)
• all: Auto-regenerate discovery clients (#​2391) (c8e77f6)
• all: Auto-regenerate discovery clients (#​2392) (e5a7a15)
• all: Auto-regenerate discovery clients (#​2394) (140fb54)
• all: Auto-regenerate discovery clients (#​2395) (169ead6)
• all: Auto-regenerate discovery clients (#​2398) (eddfeb9)

Bug Fixes

• transport: Enforce 1s timeout on requests to MDS universe_domain (#​2393) (6862015)

v0.161.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​2386) (03042ec)

Bug Fixes

• gen: Reject repeated object query params (#​2383) (f29f327), refs #​2379
• transport: Skip s2a for now if service has direct path enabled (#​2385) (54c764a)

v0.160.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​2380) (8f26f51)
• all: Auto-regenerate discovery clients (#​2382) (5534cf2)
• all: Auto-regenerate discovery clients (#​2384) (fee4c8f)

v0.159.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​2377) (a8d9414)

Bug Fixes

• transport: Relax universe checks (#​2376) (55b0516)

v0.158.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​2361) (6c3b622)
• all: Auto-regenerate discovery clients (#​2365) (f40db7f)
• all: Auto-regenerate discovery clients (#​2366) (e0db6a5)
• all: Auto-regenerate discovery clients (#​2369) (45c097f)
• all: Auto-regenerate discovery clients (#​2372) (2d69d97)
• all: Auto-regenerate discovery clients (#​2374) (d266978)
• impersonate: Add universe domain support (#​2296) (6ef1144)
• transport: Add universe domain support (#​2355) (69626e3)

Bug Fixes

• internal: Support internaloption.WithDefaultUniverseDomain (#​2373) (b21a1fa)
• transport/grpc: Add universe domain verification (#​2375) (df17254)
• transport: Not enable s2a when there is endpoint override (#​2368) (73fc7fd)

v0.157.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​2345) (c3e43a1)
• all: Auto-regenerate discovery clients (#​2348) (763c331)
• all: Auto-regenerate discovery clients (#​2349) (3bf8f4f)
• all: Auto-regenerate discovery clients (#​2352) (5bf46ee)
• all: Auto-regenerate discovery clients (#​2353) (da330c2)
• all: Auto-regenerate discovery clients (#​2354) (0d002f9)
• all: Auto-regenerate discovery clients (#​2358) (72a8ffd)

Documentation

• option: Update WithDefaultEndpointTemplate docs (#​2356) (74a1558)

v0.156.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​2332) (014a8e0)
• all: Auto-regenerate discovery clients (#​2336) (bd4dad1)
• all: Auto-regenerate discovery clients (#​2337) (ceefb9b)
• all: Auto-regenerate discovery clients (#​2339) (d008b6e)
• all: Auto-regenerate discovery clients (#​2341) (3f90b98)
• all: Auto-regenerate discovery clients (#​2343) (811e925)
• all: Auto-regenerate discovery clients (#​2344) (05de776)
• google-api-go-generator: Add universe domain support (#​2335) (9e45101)

v0.155.0

Compare Source

Features

• all: Auto-regenerate discovery clients (#​2302) (e2d35d5)
• all: Auto-regenerate discovery clients (#​2306) (101074c)
• all: Auto-regenerate discovery clients (#​2307) (96c0dea)
• all: Auto-regenerate discovery clients (#​2308) (8c26aa7)
• all: Auto-regenerate discovery clients (#​2309) (a9a45c4)
• all: Auto-regenerate discovery clients (#​2312) (bb522ac)
• all: Auto-regenerate discovery clients (#​2316) (f01739e)
• all: Auto-regenerate discovery clients (#​2317) (16c2b92)
• all: Auto-regenerate discovery clients (#​2318) (78596d4)
• all: Auto-regenerate discovery clients (#​2319) (6b9df05)
• all: Auto-regenerate discovery clients (#​2320) (96bbfbe)
• all: Auto-regenerate discovery clients (#​2322) (1102aec)
• all: Auto-regenerate discovery clients (#​2324) (cc0275b)
• all: Auto-regenerate discovery clients (#​2327) (aa81823)
• all: Auto-regenerate discovery clients (#​2328) (9502f9c)
• all: Auto-regenerate discovery clients (#​2330) (03de26a)
• all: Auto-regenerate discovery clients (#​2331) (858fb57)
• option/internaloption: Add WithDefaultEndpointTemplate (#​2313) (9e6e0c7), refs #​2264
• transport: Add support for API keys for gprc (#​2326) (9dbfb73), refs #​485

Bug Fixes

• transport: Fix memory leak in grpc.Dial (#​2329) (240f763), refs #​2321

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.32.0

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.31.0...v1.32.0

This release contains commit protocolbuffers/protobuf-go@bfcd647, which fixes a denial of service vulnerability by preventing a stack overflow through a default maximum recursion limit. See https://github.com/golang/protobuf/issues/1583 and https://github.com/golang/protobuf/issues/1584 for details.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun

[dpebot]

/gcbrun