Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump the go_modules group across 2 directories with 12 updates #9

Open
wants to merge 1 commit into
base: release-v3.22
Choose a base branch
from
Open

Bump the go_modules group across 2 directories with 12 updates #9

wants to merge 1 commit into from
+97 −61

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github May 21, 2024

Bumps the go_modules group with 9 updates in the / directory:

Package From To
github.com/buger/jsonparser 1.0.0 1.1.1
github.com/containernetworking/cni 0.8.0 0.8.1
github.com/containernetworking/plugins 0.8.5 0.8.6
github.com/prometheus/client_golang 1.7.1 1.11.1
golang.org/x/net 0.0.0-20211216030914-fe4d6282115f 0.23.0
github.com/docker/distribution 2.7.1+incompatible 2.8.2+incompatible
github.com/emicklei/go-restful 2.11.2-0.20200112161605-a7c079c43d51+incompatible 2.16.0+incompatible
google.golang.org/protobuf 1.26.0 1.33.0
gopkg.in/yaml.v3 3.0.0-20210107192922-496545a6307b 3.0.0

Bumps the go_modules group with 1 update in the /api directory: github.com/emicklei/go-restful.

Updates github.com/buger/jsonparser from 1.0.0 to 1.1.1

Release notes

Sourced from github.com/buger/jsonparser's releases.

v1.1.1

Fix CVE-2020-35381. PR buger/jsonparser#221

v1.1.0

Christmas present 🎁

Thanks to everyone who participated in the project! @​AllenX2018 @​saginadir @​xsandr @​nagesh4193 @​rrgilchrist @​floren @​AdamKorcz @​jlauinger

Commits
  • df3ea76 Merge pull request #221 from d-hat/CVE-2020-35381
  • e015c37 Merge pull request #196 from AllenX2018/fix-issue-107
  • 1e1db9e handle "[" as a malformed array index by returning NotFound
  • d15cedb introduce some tests for malformed array indexes in GetString()
  • 9b2f299 Merge pull request #220 from saginadir/patch-2
  • ee29817 Small type fix in parser.go
  • 26b9301 Merge pull request #217 from buger/fuzz-update
  • 93ae43c Update to use built-in fuzz function
  • 1239415 Merge pull request #208 from xsandr/each-array-memory-optimization
  • 71a899e Merge pull request #213 from nagesh4193/master
  • Additional commits viewable in compare view

Updates github.com/containernetworking/cni from 0.8.0 to 0.8.1

Release notes

Sourced from github.com/containernetworking/cni's releases.

CNI v0.8.1

libcni v0.8.1

This is a security release that fixes a single bug:

  • tighten up plugin-finding logic (#811).

Users of libcni are strongly encouraged to update.

Commits

Updates github.com/containernetworking/plugins from 0.8.5 to 0.8.6

Release notes

Sourced from github.com/containernetworking/plugins's releases.

CNI plugins v0.8.6

This is a minor release with some bugfixes and small improvements

New features

  • Support device id in host device plugin (#471).
  • win-bridge: add support for portMappings capability (#475).
  • Make host-device to work with virtio net device (#453).

Small improvements

  • ptp, bridge: disable accept_ra on the host-side interface (#484).
  • modify the error url of windowscontainer (#460).
  • portmap: Apply the DNAT hairpin to the whole subnet (#469). The DNAT hairpin rule only allow the container itself to access the ports it is exposing thru the host IP. Other containers in the same subnet might also want to access this service via the host IP, so apply this rule to the whole subnet instead of just for the container.
  • Unlock OS thread after netns is restored (#455).

Bugfixes

  • plugins/meta/sbr: Adjusted ipv6 address mask to /128 (#479). A /64 mask was used which routed an entire cidr based on source, not only the bound address.
  • check bridge's port state (#468). fix #463
  • Reset the route flag before moving the rule (#472).
  • replace juju/errors because of CNCF license scan (#458). ref to #457
  • loopback: Fix ipv6 address checks (#442). Fixes a minor bug in loopback plugin. The IPv6 address check loops over IPv4 addresses.

As always, thanks to all the contributors.

Commits
  • ad10b6f Merge pull request #484 from squeed/disable-ra
  • 219eb9e ptp, bridge: disable accept_ra on the host-side interface
  • f7a2fc9 Merge pull request #460 from timyinshi/windowcontainer-new
  • 6957f6c Merge pull request #479 from Nordix/issue-478
  • 02bfece plugins/meta/sbr: Adjusted ipv6 address mask to /128
  • 5af9ff4 Merge pull request #469 from AlbanBedel/portmap-hairpin-subnet
  • 44d92c1 Merge pull request #475 from vboulineau/vboulineau/hostport_windows
  • 5e0fbd8 portmap: Apply the DNAT hairpin to the whole subnet
  • a78853f Support device id in host device plugin (#471)
  • 2d2583e win-bridge: add support for portMappings capability
  • Additional commits viewable in compare view

Updates github.com/prometheus/client_golang from 1.7.1 to 1.11.1

Release notes

Sourced from github.com/prometheus/client_golang's releases.

1.11.1 / 2022-02-15

What's Changed

Full Changelog: prometheus/client_golang@v1.11.0...v1.11.1

v1.11.0 / 2021-06-07

  • [CHANGE] Add new collectors package. #862
  • [CHANGE] prometheus.NewExpvarCollector is deprecated, use collectors.NewExpvarCollector instead. #862
  • [CHANGE] prometheus.NewGoCollector is deprecated, use collectors.NewGoCollector instead. #862
  • [CHANGE] prometheus.NewBuildInfoCollector is deprecated, use collectors.NewBuildInfoCollector instead. #862
  • [FEATURE] Add new collector for database/sql#DBStats. #866
  • [FEATURE] API client: Add exemplars API support. #861
  • [ENHANCEMENT] API client: Add newer fields to Rules API. #855
  • [ENHANCEMENT] API client: Add missing fields to Targets API. #856

What's Changed

New Contributors

Full Changelog: prometheus/client_golang@v1.10.0...v1.11.0

1.10.0 / 2021-03-18

  • [CHANGE] Minimum required Go version is now 1.13.
  • [CHANGE] API client: Add matchers to LabelNames and LabesValues. #828
  • [FEATURE] API client: Add buildinfo call. #841
  • [BUGFIX] Fix build on riscv64. #833

What's Changed

... (truncated)

Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

1.19.0 / 2023-02-27

The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See prometheus/client_golang#1448 for more details). If your project uses client_golang and you want to use prometheus/common v0.48.0 or higher, please update client_golang to v1.19.0.

  • [CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). #1445 #1449
  • [FEATURE] collectors: Add version collector. #1422 #1427

1.18.0 / 2023-12-22

  • [FEATURE] promlint: Allow creation of custom metric validations. #1311
  • [FEATURE] Go programs using client_golang can be built in wasip1 OS. #1350
  • [BUGFIX] histograms: Add timer to reset ASAP after bucket limiting has happened. #1367
  • [BUGFIX] testutil: Fix comparison of metrics with empty Help strings. #1378
  • [ENHANCEMENT] Improved performance of MetricVec.WithLabelValues(...). #1360

1.17.0 / 2023-09-27

  • [CHANGE] Minimum required go version is now 1.19 (we also test client_golang against new 1.21 version). #1325
  • [FEATURE] Add support for Created Timestamps in Counters, Summaries and Historams. #1313
  • [ENHANCEMENT] Enable detection of a native histogram without observations. #1314

1.16.0 / 2023-06-15

  • [BUGFIX] api: Switch to POST for LabelNames, Series, and QueryExemplars. #1252
  • [BUGFIX] api: Fix undefined execution order in return statements. #1260
  • [BUGFIX] native histograms: Fix bug in bucket key calculation. #1279
  • [ENHANCEMENT] Reduce constrainLabels allocations for all metrics. #1272
  • [ENHANCEMENT] promhttp: Add process start time header for scrape efficiency. #1278
  • [ENHANCEMENT] promlint: Improve metricUnits runtime. #1286

1.15.1 / 2023-05-3

  • [BUGFIX] Fixed promhttp.Instrument* handlers wrongly trying to attach exemplar to unsupported metrics (e.g. summary),
    causing panics. #1253

1.15.0 / 2023-04-13

  • [BUGFIX] Fix issue with atomic variables on ppc64le. #1171
  • [BUGFIX] Support for multiple samples within same metric. #1181
  • [BUGFIX] Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149. #1187
  • [ENHANCEMENT] Add exemplars and middleware examples. #1173
  • [ENHANCEMENT] Add more context to "duplicate label names" error to enable debugging. #1177
  • [ENHANCEMENT] Add constrained labels and constrained variant for all MetricVecs. #1151
  • [ENHANCEMENT] Moved away from deprecated github.com/golang/protobuf package. #1183
  • [ENHANCEMENT] Add possibility to dynamically get label values for http instrumentation. #1066
  • [ENHANCEMENT] Add ability to Pusher to add custom headers. #1218
  • [ENHANCEMENT] api: Extend and improve efficiency of json-iterator usage. #1225
  • [ENHANCEMENT] Added (official) support for go 1.20. #1234

... (truncated)

Commits

Updates golang.org/x/net from 0.0.0-20211216030914-fe4d6282115f to 0.23.0

Commits

Updates golang.org/x/sys from 0.0.0-20210816074244-15123e1e1f71 to 0.18.0

Commits

Updates github.com/docker/distribution from 2.7.1+incompatible to 2.8.2+incompatible

Release notes

Sourced from github.com/docker/distribution's releases.

v2.8.2

What's Changed

Full Changelog: distribution/distribution@v2.8.1...v2.8.2

v2.8.2-beta.2

What's Changed

Full Changelog: distribution/distribution@v2.8.1...v2.8.2-beta.2

v2.8.2-beta.1

NOTE: This is a pre-release that does not contain any artifacts!

What's Changed

Full Changelog: distribution/distribution@v2.8.1...v2.8.2-beta.1

v2.8.1

Welcome to the v2.8.1 release of registry!

The 2.8.1 registry release fixes the Go module issues that have popped up in the v2.8.0

... (truncated)

Commits
  • 7c354a4 Merge pull request #3915 from distribution/2.8.2-release-notes
  • a173a9c Add v2.8.2 release notes
  • 4894d35 Merge pull request #3914 from vvoland/handle-forbidden-28
  • f067f66 Merge pull request #3783 from ndeloof/accept-encoding-28
  • 483ad69 registry/errors: Parse http forbidden as denied
  • 2b0f84d Revert "registry/client: set Accept: identity header when getting layers"
  • 320d6a1 Merge pull request #3912 from distribution/2.8.2-beta.2-release-notes
  • 5f3ca1b Add release notes for 2.8.2-beta.2 release
  • cb840f6 Merge pull request #3911 from thaJeztah/2.8_backport_fix_releaser_filenames
  • e884644 Dockerfile: fix filenames of artifacts
  • Additional commits viewable in compare view

Updates github.com/emicklei/go-restful from 2.11.2-0.20200112161605-a7c079c43d51+incompatible to 2.16.0+incompatible

Commits

Updates golang.org/x/crypto from 0.0.0-20210220033148-5ea612d1eb83 to 0.21.0

Commits

Updates golang.org/x/text from 0.3.6 to 0.14.0

Commits
  • 6c97a16 all: update go directive to 1.18
  • f488e19 unicode/norm: fix function name on comment
  • fb697c0 cmd/gotext: actually use -dir flag
  • f3e69ed cmd/gotext: fix misbehaviors
  • ab07ad1 all: remove repetitive words
  • e503480 encoding/japanese, language: shorten very long sub-test names
  • 2df65d7 all: regenerate for Unicode 15.0.0
  • e3c038a all: prepare for Unicode 15.0.0
  • 3a7a255 internal/export/idna: make more space for mapping index
  • d61dd50 go.mod: delete repeated "indirect"
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.26.0 to 1.33.0

Updates gopkg.in/yaml.v3 from 3.0.0-20210107192922-496545a6307b to 3.0.0

Updates github.com/emicklei/go-restful from 2.11.2-0.20200112161605-a7c079c43d51+incompatible to 2.16.0+incompatible

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
    You can disable automated security fix PRs for this repo from the Security Alerts page.

@dependabot
---
68c895b 
updated-dependencies:
- dependency-name: github.com/buger/jsonparser
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/containernetworking/cni
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/containernetworking/plugins
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  dependency-group: go_modules
- dependency-name: github.com/docker/distribution
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/emicklei/go-restful
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: golang.org/x/text
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: gopkg.in/yaml.v3
  dependency-type: indirect
  dependency-group: go_modules
- dependency-name: github.com/emicklei/go-restful
  dependency-type: indirect
  dependency-group: go_modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 21, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants