Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the all-go-mod-patch-and-minor group across 1 directory with 15 updates #3306

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 11, 2024

Bumps the all-go-mod-patch-and-minor group with 9 updates in the / directory:

Package From To
github.com/andybalholm/brotli 1.1.0 1.1.1
github.com/envoyproxy/go-control-plane 0.13.0 0.13.1
github.com/open-policy-agent/opa 0.68.0 0.70.0
github.com/open-policy-agent/opa-envoy-plugin 0.68.0-envoy-4 0.70.0-envoy-1
github.com/redis/go-redis/v9 9.6.1 9.7.0
github.com/testcontainers/testcontainers-go 0.33.0 0.34.0
github.com/tidwall/gjson 1.17.3 1.18.0
golang.org/x/oauth2 0.23.0 0.24.0
golang.org/x/sync 0.8.0 0.9.0

Updates github.com/andybalholm/brotli from 1.1.0 to 1.1.1

Commits

Updates github.com/envoyproxy/go-control-plane from 0.13.0 to 0.13.1

Release notes

Sourced from github.com/envoyproxy/go-control-plane's releases.

v0.13.1

What's Changed

Full Changelog: envoyproxy/go-control-plane@v0.13.0...v0.13.1

Commits
  • 03ea0b2 Mirrored from envoyproxy/envoy @ d049362557545b054e1a883231e64944ed0a8819
  • bec043f Mirrored from envoyproxy/envoy @ c6761de5f33e97758471c6b973a57a5c2e5db925
  • 8c942bd Mirrored from envoyproxy/envoy @ e48666365c8a0b3a62343602fd9380d58a7afd95
  • e1df533 Mirrored from envoyproxy/envoy @ 1173629e531abf758f011c2da15da739f72881c6
  • deb90cf Mirrored from envoyproxy/envoy @ 42068a59e37d0d6c313340d0175cb08cce2574bb
  • 06f4ee8 Mirrored from envoyproxy/envoy @ a3e32c92c5ae699a4daad094c6a87b58e1e84ec2
  • f61d5e4 Mirrored from envoyproxy/envoy @ 1a153166a6d1e9336ee8982d1a00ba98655c9d39
  • f6ecc7e Mirrored from envoyproxy/envoy @ 07a8c4afe8ac83632535bd118f142df70d2335be
  • 74bddf0 Mirrored from envoyproxy/envoy @ 865aa1081a0a66d13b2564382abc89129c1ba090
  • d1afc3b Mirrored from envoyproxy/envoy @ 38530270d6cb3a3a71a9b70b3de55854750b75a9
  • Additional commits viewable in compare view

Updates github.com/open-policy-agent/opa from 0.68.0 to 0.70.0

Release notes

Sourced from github.com/open-policy-agent/opa's releases.

v0.70.0

This release contains a mix of features, performance improvements, and bugfixes.

Optimized read mode for OPA's in-memory store (#7125)

A new optimized read mode has been added to the default in-memory store, where data written to the store is eagerly converted to AST values (the data format used during evaluation). This removes the time spent converting raw data values to AST during policy evaluation, thereby improving performance.

The memory footprint of the store will increase, as processed AST values generally take up more space in memory than the corresponding raw data values, but overall memory usage of OPA might remain more stable over time, as pre-converted data is shared across evaluations and isn't recomputed for each evaluation, which can cause spikes in memory usage.

This mode can be enabled for opa run, opa eval, and opa bench by setting the --optimize-store-for-read-speed flag.

More information about this feature can be found here.

Co-authored by @​johanfylling and @​ashutosh-narkar.

Topdown and Rego

  • topdown: Use new Inter-Query Value Cache for json.match_schema built-in function (#7011) authored by @​anderseknert reported by @​lcarva
  • ast: Fix location text attribute for multi-value rules with generated body (#7128) authored by @​anderseknert
  • ast: Fix regression in opa check where a file that referenced non-provided schemas failed validation (#7124) authored by @​tjons
  • test/cases/testdata: Fix bug in test by replacing unification by explicit equality check (#7093) authored by @​matajoh
  • ast: Replace use of yaml.v2 library with yaml.v3. The earlier version would parse yes/no values as boolean. The usage of yaml.v2 in the parser was unintentional and now has been updated to yaml.v3 (#7090) authored by @​anderseknert

Runtime, Tooling, SDK

  • cmd: Make opa check respect --ignore when --bundle flag is set (#7136) authored by @​anderseknert
  • server/writer: Properly handle result encoding errors which earlier on failure would emit logs such as superfluous call to WriteHeader() while still returning 200 HTTP status code. Now, errors encoding the payload properly lead to 500 HTTP status code, without extra logs. Also use Header().Set() not Header().Add() to avoid duplicate content-type headers (#7114) authored by @​srenatus
  • cmd: Support file:// format for TLS key material file flags in opa run (#7094) authored by @​alexrohozneanu
  • plugins/rest/azure: Support managed identity for App Service / Container Apps (#7085) reported and authored by @​apc-kamezaki
  • debug: Fix step-over behaviour when exiting partial rules (#7096) authored by @​johanfylling
  • util+plugins: Fix potential memory leaks with explicit timer cancellation (#7089) authored by @​philipaconrad

Docs, Website, Ecosystem

  • docs: Fix OCI example with updated flag used by the ORAS CLI (#7130) authored by @​b3n3d17
  • docs: Delete Atom editor from supported editor integrations (#7111) authored by @​KaranbirSingh7
  • docs/website: Add Styra OPA ASP.NET Core SDK integration (#7073) authored by @​philipaconrad
  • docs/website: Update compatibility information on the rego-cpp integration (#7078) authored by @​matajoh

Miscellaneous

  • Dependency updates; notably:
    • build(deps): bump github.com/containerd/containerd from 1.7.22 to 1.7.23
    • build(deps): bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5
    • build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0
    • build(deps): bump golang.org/x/time from 0.6.0 to 0.7.0
    • build(deps): bump google.golang.org/grpc from 1.67.0 to 1.67.1

v0.69.0

... (truncated)

Changelog

Sourced from github.com/open-policy-agent/opa's changelog.

0.70.0

This release contains a mix of features, performance improvements, and bugfixes.

Optimized read mode for OPA's in-memory store (#7125)

A new optimized read mode has been added to the default in-memory store, where data written to the store is eagerly converted to AST values (the data format used during evaluation). This removes the time spent converting raw data values to AST during policy evaluation, thereby improving performance.

The memory footprint of the store will increase, as processed AST values generally take up more space in memory than the corresponding raw data values, but overall memory usage of OPA might remain more stable over time, as pre-converted data is shared across evaluations and isn't recomputed for each evaluation, which can cause spikes in memory usage.

This mode can be enabled for opa run, opa eval, and opa bench by setting the --optimize-store-for-read-speed flag.

More information about this feature can be found here.

Co-authored by @​johanfylling and @​ashutosh-narkar.

Topdown and Rego

  • topdown: Use new Inter-Query Value Cache for json.match_schema built-in function (#7011) authored by @​anderseknert reported by @​lcarva
  • ast: Fix location text attribute for multi-value rules with generated body (#7128) authored by @​anderseknert
  • ast: Fix regression in opa check where a file that referenced non-provided schemas failed validation (#7124) authored by @​tjons
  • test/cases/testdata: Fix bug in test by replacing unification by explicit equality check (#7093) authored by @​matajoh
  • ast: Replace use of yaml.v2 library with yaml.v3. The earlier version would parse yes/no values as boolean. The usage of yaml.v2 in the parser was unintentional and now has been updated to yaml.v3 (#7090) authored by @​anderseknert

Runtime, Tooling, SDK

  • cmd: Make opa check respect --ignore when --bundle flag is set (#7136) authored by @​anderseknert
  • server/writer: Properly handle result encoding errors which earlier on failure would emit logs such as superfluous call to WriteHeader() while still returning 200 HTTP status code. Now, errors encoding the payload properly lead to 500 HTTP status code, without extra logs. Also use Header().Set() not Header().Add() to avoid duplicate content-type headers (#7114) authored by @​srenatus
  • cmd: Support file:// format for TLS key material file flags in opa run (#7094) authored by @​alexrohozneanu
  • plugins/rest/azure: Support managed identity for App Service / Container Apps (#7085) reported and authored by @​apc-kamezaki
  • debug: Fix step-over behaviour when exiting partial rules (#7096) authored by @​johanfylling
  • util+plugins: Fix potential memory leaks with explicit timer cancellation (#7089) authored by @​philipaconrad

Docs, Website, Ecosystem

  • docs: Fix OCI example with updated flag used by the ORAS CLI (#7130) authored by @​b3n3d17
  • docs: Delete Atom editor from supported editor integrations (#7111) authored by @​KaranbirSingh7
  • docs/website: Add Styra OPA ASP.NET Core SDK integration (#7073) authored by @​philipaconrad
  • docs/website: Update compatibility information on the rego-cpp integration (#7078) authored by @​matajoh

Miscellaneous

  • Dependency updates; notably:
    • build(deps): bump github.com/containerd/containerd from 1.7.22 to 1.7.23
    • build(deps): bump github.com/prometheus/client_golang from 1.20.4 to 1.20.5
    • build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0
    • build(deps): bump golang.org/x/time from 0.6.0 to 0.7.0
    • build(deps): bump google.golang.org/grpc from 1.67.0 to 1.67.1

0.69.0

... (truncated)

Commits
  • 2ea031e Prepare v0.70.0 release
  • 6af5e79 storage: Optimized read mode for default data storage
  • 1b797d9 Make opa check respect --ignore when --bundle flag is set (#7137)
  • 8e44b98 build(deps): bump actions/setup-go from 5.0.2 to 5.1.0 (#7138)
  • ad6ffda build(deps): bump actions/checkout from 4.2.1 to 4.2.2 (#7135)
  • 67fe53b Update Andrew Peabody to emeritus (#7133)
  • 30f3747 build(deps): bump github/codeql-action from 3.26.13 to 3.27.0
  • f7957bd 🐛 fix: oras cli changed to --config
  • 58ec50b Fix location for multivalue rules with generated bodies (#7129)
  • 555fe84 only check schemas when schemas are provided (#7124)
  • Additional commits viewable in compare view

Updates github.com/open-policy-agent/opa-envoy-plugin from 0.68.0-envoy-4 to 0.70.0-envoy-1

Release notes

Sourced from github.com/open-policy-agent/opa-envoy-plugin's releases.

v0.70.0-envoy-1

NOTES:

The minimum version of Go required to build the OPA-Envoy module is 1.22.0.

What's Changed

v0.69.0-envoy

What's Changed

Commits
  • bf7dca6 Disable git safe directory check
  • 43d7bd2 build(deps): bump github.com/open-policy-agent/opa from 0.69.0 to 0.70.0
  • 765ad70 refactor creation of prepared queries
  • 4c4c3fd Update GO version to match OPA version
  • c2f5136 build(deps): bump github.com/envoyproxy/go-control-plane
  • e818d2e build(deps): bump github.com/prometheus/client_golang
  • 8d6a285 build(deps): bump google.golang.org/protobuf from 1.34.2 to 1.35.1
  • 75df799 build(deps): bump google.golang.org/grpc from 1.67.0 to 1.67.1 (#600)
  • 47179af build(deps): bump golang.org/x/tools from 0.25.0 to 0.26.0 (#601)
  • 420d0d0 build(deps): bump github.com/open-policy-agent/opa from 0.68.0 to 0.69.0
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.20.4 to 1.20.5

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.20.5 / 2024-10-15

We decided to revert the testutil change that made our util functions less error-prone, but created a lot of work for our downstream users. Apologies for the pain! This revert should not cause any major breaking change, even if you already did the work--unless you depend on the exact error message.

Going forward, we plan to reinforce our release testing strategy [1],[2] and deliver an enhanced testutil package/module with more flexible and safer APIs.

Thanks to @​dashpole @​dgrisonnet @​kakkoyun @​ArthurSens @​vesari @​logicalhan @​krajorama @​bwplotka who helped in this patch release! 🤗

Changelog

[BUGFIX] testutil: Reverted #1424; functions using compareMetricFamilies are (again) only failing if filtered metricNames are in the expected input. #1645

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.20.5 / 2024-10-15

  • [BUGFIX] testutil: Reverted #1424; functions using compareMetricFamilies are (again) only failing if filtered metricNames are in the expected input.
Commits

Updates github.com/redis/go-redis/v9 from 9.6.1 to 9.7.0

Release notes

Sourced from github.com/redis/go-redis/v9's releases.

9.7.0

Changes

🚀 New Features

  • Support Redis search and query capabilities (#2801, #3098)
  • Support indexing and querying empty values (#3053)
  • Support for Redis JSON with RESP2 protocol (#3146)

🛠️ Improvements

We're glad to announce that we added a search and query support in the current release.

🧰 Maintenance

Contributors

We'd like to thank all the contributors who worked on this release!

@​andy-stark-redis, @​ipechorin, @​ofekshenawa and @​vladvildanov

9.7.0-beta.1

Changes

🚀 New Features

  • Support Redis search and query capabilities (#2801, #3098)
  • Support indexing and querying empty values (#3053)

🛠️ Improvements

We're glad to announce that we added a search and query support in the current release.

🧰 Maintenance

Contributors

We'd like to thank all the contributors who worked on this release!

@​andy-stark-redis, @​ipechorin, @​ofekshenawa and @​vladvildanov

9.6.2

Changes

... (truncated)

Commits

Updates github.com/testcontainers/testcontainers-go from 0.33.0 to 0.34.0

Release notes

Sourced from github.com/testcontainers/testcontainers-go's releases.

v0.34.0

What's Changed

🚀 Features

🐛 Bug Fixes

📖 Documentation

🧹 Housekeeping

... (truncated)

Commits

Updates github.com/tidwall/gjson from 1.17.3 to 1.18.0

Commits

Updates golang.org/x/crypto from 0.27.0 to 0.28.0

Commits
  • adef4cc go.mod: update golang.org/x dependencies
  • a0819fb sha3: fix cSHAKE initialization for extremely large N and or S
  • 42ee18b ssh: return ServerAuthError after too many auth failures
  • 9e92970 bn256: add missing symbols in comment
  • See full diff in compare view

Updates golang.org/x/net from 0.29.0 to 0.30.0

Commits
  • 6cc5ac4 go.mod: update golang.org/x dependencies
  • f88258d websocket: update nhooyr.io/websocket to github.com/coder/websocket
  • 7191757 http2: add support for net/http HTTP2 config field
  • 4790dc7 http2: add support for server-originated pings
  • 541dbe5 http2: add Server.WriteByteTimeout
  • 3c333c0 route: fix address parsing of messages on Darwin
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.23.0 to 0.24.0

Commits

Updates golang.org/x/sync from 0.8.0 to 0.9.0

Commits

Updates golang.org/x/term from 0.24.0 to 0.25.0

Commits

Updates golang.org/x/time from 0.6.0 to 0.7.0

Commits

Updates google.golang.org/protobuf from 1.34.2 to 1.35.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…tory with 15 updates

Bumps the all-go-mod-patch-and-minor group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.1.0` | `1.1.1` |
| [github.com/envoyproxy/go-control-plane](https://github.com/envoyproxy/go-control-plane) | `0.13.0` | `0.13.1` |
| [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `0.68.0` | `0.70.0` |
| [github.com/open-policy-agent/opa-envoy-plugin](https://github.com/open-policy-agent/opa-envoy-plugin) | `0.68.0-envoy-4` | `0.70.0-envoy-1` |
| [github.com/redis/go-redis/v9](https://github.com/redis/go-redis) | `9.6.1` | `9.7.0` |
| [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.33.0` | `0.34.0` |
| [github.com/tidwall/gjson](https://github.com/tidwall/gjson) | `1.17.3` | `1.18.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.23.0` | `0.24.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.8.0` | `0.9.0` |



Updates `github.com/andybalholm/brotli` from 1.1.0 to 1.1.1
- [Commits](andybalholm/brotli@v1.1.0...v1.1.1)

Updates `github.com/envoyproxy/go-control-plane` from 0.13.0 to 0.13.1
- [Release notes](https://github.com/envoyproxy/go-control-plane/releases)
- [Changelog](https://github.com/envoyproxy/go-control-plane/blob/main/CHANGELOG.md)
- [Commits](envoyproxy/go-control-plane@v0.13.0...v0.13.1)

Updates `github.com/open-policy-agent/opa` from 0.68.0 to 0.70.0
- [Release notes](https://github.com/open-policy-agent/opa/releases)
- [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa@v0.68.0...v0.70.0)

Updates `github.com/open-policy-agent/opa-envoy-plugin` from 0.68.0-envoy-4 to 0.70.0-envoy-1
- [Release notes](https://github.com/open-policy-agent/opa-envoy-plugin/releases)
- [Changelog](https://github.com/open-policy-agent/opa-envoy-plugin/blob/main/CHANGELOG.md)
- [Commits](open-policy-agent/opa-envoy-plugin@v0.68.0-envoy-4...v0.70.0-envoy-1)

Updates `github.com/prometheus/client_golang` from 1.20.4 to 1.20.5
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.20.4...v1.20.5)

Updates `github.com/redis/go-redis/v9` from 9.6.1 to 9.7.0
- [Release notes](https://github.com/redis/go-redis/releases)
- [Changelog](https://github.com/redis/go-redis/blob/master/CHANGELOG.md)
- [Commits](redis/go-redis@v9.6.1...v9.7.0)

Updates `github.com/testcontainers/testcontainers-go` from 0.33.0 to 0.34.0
- [Release notes](https://github.com/testcontainers/testcontainers-go/releases)
- [Commits](testcontainers/testcontainers-go@v0.33.0...v0.34.0)

Updates `github.com/tidwall/gjson` from 1.17.3 to 1.18.0
- [Commits](tidwall/gjson@v1.17.3...v1.18.0)

Updates `golang.org/x/crypto` from 0.27.0 to 0.28.0
- [Commits](golang/crypto@v0.27.0...v0.28.0)

Updates `golang.org/x/net` from 0.29.0 to 0.30.0
- [Commits](golang/net@v0.29.0...v0.30.0)

Updates `golang.org/x/oauth2` from 0.23.0 to 0.24.0
- [Commits](golang/oauth2@v0.23.0...v0.24.0)

Updates `golang.org/x/sync` from 0.8.0 to 0.9.0
- [Commits](golang/sync@v0.8.0...v0.9.0)

Updates `golang.org/x/term` from 0.24.0 to 0.25.0
- [Commits](golang/term@v0.24.0...v0.25.0)

Updates `golang.org/x/time` from 0.6.0 to 0.7.0
- [Commits](golang/time@v0.6.0...v0.7.0)

Updates `google.golang.org/protobuf` from 1.34.2 to 1.35.1

---
updated-dependencies:
- dependency-name: github.com/andybalholm/brotli
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/envoyproxy/go-control-plane
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/open-policy-agent/opa
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/open-policy-agent/opa-envoy-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/redis/go-redis/v9
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/testcontainers/testcontainers-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: github.com/tidwall/gjson
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: golang.org/x/sync
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: golang.org/x/time
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-go-mod-patch-and-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants