Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update tool deps #581

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update tool deps #581

wants to merge 1 commit into from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 31, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/google/osv-scanner v1.9.0 -> v1.9.1 age adoption passing confidence
go.opentelemetry.io/build-tools/crosslink v0.14.0 -> v0.15.0 age adoption passing confidence
go.opentelemetry.io/build-tools/multimod v0.14.0 -> v0.15.0 age adoption passing confidence
go.opentelemetry.io/collector/cmd/builder v0.112.0 -> v0.113.0 age adoption passing confidence
go.opentelemetry.io/collector/cmd/mdatagen v0.112.0 -> v0.113.0 age adoption passing confidence

Release Notes

google/osv-scanner (github.com/google/osv-scanner)

v1.9.1

Compare Source

Features:
Fixes:
  • Bug #​604 Use correct path separator in SARIF output when on Windows.
  • Bug #​330 Warn about and ignore duplicate entries in SBOMs.
  • Bug #​1325 Set CharsetReader and Entity when reading pom.xml.
  • Bug #​1310 Update spdx license ids.
  • Bug #​1288 Sort sbom packages by PURL.
  • Bug #​1285 Improve handling if docker exits with a non-zero code when trying to scan images
API Changes:
  • Deprecate auxillary public packages: As part of the V2 update described above, we have started deprecating some of the auxillary packages
    which are not commonly used to give us more room to make better API designs. These include:
    • config
    • depsdev
    • grouper
    • spdx
open-telemetry/opentelemetry-go-build-tools (go.opentelemetry.io/build-tools/crosslink)

v0.15.0

Compare Source

💡 Enhancements 💡
  • all: bump minimum Go version to 1.22 (#​605)
  • multimod: Improve error message when the Go proxy misbehaves (#​610)
🧰 Bug fixes 🧰
  • chloggen: Fix bug that directed all output to stderr (#​612)
open-telemetry/opentelemetry-collector (go.opentelemetry.io/collector/cmd/builder)

v0.113.0

Compare Source

🛑 Breaking changes 🛑
  • internal/fanoutconsumer: Extract internal/fanoutconsumer as a separate go module (#​11441)
  • builder: Remove builder support to build old version, and the otelcol_version config (#​11405)
    User should remove this property from their config, to build older versions use older builders.
  • receiver: Make receivertest into its own module (#​11462)
  • builder: Remove deprecated flags from Builder (#​11576)
    Here is the list of flags | --name, --description, --version, --otelcol-version, --go, --module
  • internal/sharedcomponent: Extract internal/sharedcomponent as a separate go module (#​11442)
💡 Enhancements 💡
  • mdatagen: Add otlp as supported distribution (#​11527)
  • batchprocessor: Move single shard batcher creation to the constructor (#​11594)
  • service: add support for using the otelzap bridge and emit logs using the OTel Go SDK (#​10544)
🧰 Bug fixes 🧰
  • service: ensure traces and logs emitted by the otel go SDK use the same resource information (#​11578)
  • config/configgrpc: Patch for bug in the grpc-go NewClient that makes the way the hostname is resolved incompatible with the way proxy setting are applied. (#​11537)
  • builder: Update builder default providers to lastest stable releases (#​11566)

Configuration

📅 Schedule: Branch creation - "before 5am" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added dependencies Pull requests that update a dependency file renovatebot labels Oct 31, 2024
Copy link
Contributor Author

renovate bot commented Oct 31, 2024

ℹ Artifact update notice

File name: internal/tools/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 18 additional dependencies were updated

Details:

Package Change
deps.dev/api/v3 v3.0.0-20240923041156-0312db85d6d6 -> v3.0.0-20241010035105-b3ba03369df1
deps.dev/util/maven v0.0.0-20240923041156-0312db85d6d6 -> v0.0.0-20241010035105-b3ba03369df1
deps.dev/util/resolve v0.0.0-20240923041156-0312db85d6d6 -> v0.0.0-20241010035105-b3ba03369df1
deps.dev/util/semver v0.0.0-20240923041156-0312db85d6d6 -> v0.0.0-20241010035105-b3ba03369df1
github.com/cpuguy83/go-md2man/v2 v2.0.4 -> v2.0.5
github.com/jedib0t/go-pretty/v6 v6.5.9 -> v6.6.0
github.com/tidwall/gjson v1.17.3 -> v1.18.0
github.com/urfave/cli/v2 v2.27.4 -> v2.27.5
go.opentelemetry.io/build-tools v0.14.0 -> v0.15.0
go.opentelemetry.io/collector/component v0.112.0 -> v0.113.0
go.opentelemetry.io/collector/config/configtelemetry v0.112.0 -> v0.113.0
go.opentelemetry.io/collector/confmap v1.18.0 -> v1.19.0
go.opentelemetry.io/collector/confmap/provider/fileprovider v1.18.0 -> v1.19.0
go.opentelemetry.io/collector/filter v0.112.0 -> v0.113.0
go.opentelemetry.io/collector/pdata v1.18.0 -> v1.19.0
golang.org/x/exp v0.0.0-20240909161429-701f63a606c0 -> v0.0.0-20241009180824-f66d83c29e7c
google.golang.org/genproto/googleapis/api v0.0.0-20240814211410-ddb44dafa142 -> v0.0.0-20241007155032-5fefd90f89a9
google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1 -> v0.0.0-20241007155032-5fefd90f89a9

@github-actions github-actions bot added the go label Oct 31, 2024
@renovate renovate bot changed the title fix(deps): update module github.com/google/osv-scanner to v1.9.1 fix(deps): update tool deps Nov 5, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go renovatebot
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants