fix(deps): update gomod minor dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/Nerzal/gocloak/v13	v13.8.0 -> v13.9.0
github.com/gin-gonic/gin	v1.9.1 -> v1.10.0
github.com/prometheus/client_golang	v1.17.0 -> v1.19.1
golang.org/x/crypto	v0.17.0 -> v0.23.0
google.golang.org/grpc	v1.61.2 -> v1.64.0

---

Release Notes

Nerzal/gocloak (github.com/Nerzal/gocloak/v13)

v13.9.0

Compare Source

What's Changed

• chore: omit nil check by @​testwill in https://github.com/Nerzal/gocloak/pull/440
• chore: upgraded to golang-jwt v5 by @​robbert229 in https://github.com/Nerzal/gocloak/pull/446
• Bump golang.org/x/net from 0.7.0 to 0.17.0 by @​dependabot in https://github.com/Nerzal/gocloak/pull/447
• Bump golang.org/x/crypto from 0.14.0 to 0.17.0 by @​dependabot in https://github.com/Nerzal/gocloak/pull/453
• [Minor change] Add aggregate attribute to client scope model by @​vikram-deepfactor in https://github.com/Nerzal/gocloak/pull/455
• Add support for permission_resource_format/permission_resource_matchi… by @​tomqwpl in https://github.com/Nerzal/gocloak/pull/461
• Add support for users-management-permissions get/put by @​tomqwpl in https://github.com/Nerzal/gocloak/pull/463

New Contributors

• @​testwill made their first contribution in https://github.com/Nerzal/gocloak/pull/440
• @​robbert229 made their first contribution in https://github.com/Nerzal/gocloak/pull/446
• @​vikram-deepfactor made their first contribution in https://github.com/Nerzal/gocloak/pull/455
• @​tomqwpl made their first contribution in https://github.com/Nerzal/gocloak/pull/461

Full Changelog: Nerzal/gocloak@v13.8.0...v13.9.0

gin-gonic/gin (github.com/gin-gonic/gin)

v1.10.0

Compare Source

Changelog

Features

• 5f458dd: feat(auth): add proxy-server authentication (#​3877) (@​EndlessParadox1)
• 7a865dc: feat(bind): ShouldBindBodyWith shortcut and change doc (#​3871) (@​RedCrazyGhost)
• a182195: feat(binding): Support custom BindUnmarshaler for binding. (#​3933) (@​dkkb)
• fd1faad: feat(binding): support override default binding implement (#​3514) (@​ssfyn)
• ac5e84d: feat(engine): Added OptionFunc and With (#​3572) (@​flc1125)
• c6ae2e6: feat(logger): ability to skip logs based on user-defined logic (#​3593) (@​palvaneh)

Bug fixes

• d4e4136: Revert "fix(uri): query binding bug (#​3236)" (#​3899) (@​appleboy)
• 3dc1cd6: fix(binding): binding error while not upload file (#​3819) (#​3820) (@​clearcodecn)
• 82bcd6d: fix(binding): dereference pointer to struct (#​3199) (@​echovl)
• 2b1da2b: fix(context): make context Value method adhere to Go standards (#​3897) (@​FarmerChillax)
• f70dd00: fix(engine): fix unit test (#​3878) (@​flc1125)
• 86ff4a6: fix(header): Allow header according to RFC 7231 (HTTP 405) (#​3759) (@​Crocmagnon)
• 09f8224: fix(route): Add fullPath in context copy (#​3784) (@​KarthikReddyPuli)
• 9f598a3: fix(router): catch-all conflicting wildcard (#​3812) (@​FirePing32)
• 4a40f8f: fix(sec): upgrade golang.org/x/crypto to 0.17.0 (#​3832) (@​chncaption)
• 386d244: fix(tree): correctly expand the capacity of params (#​3502) (@​georgijd-form3)
• 8790d08: fix(uri): query binding bug (#​3236) (@​illiafox)
• 44d0dd7: fix: Add pointer support for url query params (#​3659) (#​3666) (@​omkar-foss)
• 646312a: fix: protect Context.Keys map when call Copy method (#​3873) (@​kingcanfish)

Enhancements

• d4a6426: chore(CI): update release args (#​3595) (@​qloog)
• bb3519d: chore(IP): add TrustedPlatform constant for Fly.io. (#​3839) (@​ab)
• 1b3c085: chore(debug): add ability to override the debugPrint statement (#​2337) (@​josegonzalez)
• a64286a: chore(deps): update dependencies to latest versions (#​3835) (@​appleboy)
• 9c61295: chore(header): Add support for RFC 9512: application/yaml (#​3851) (@​vincentbernat)
• a481ee2: chore(http): use white color for HTTP 1XX (#​3741) (@​viralparmarme)
• c964ad3: chore(optimize): the ShouldBindUri method of the Context struct (#​3911) (@​1911860538)
• 739d2d9: chore(perf): Optimize the Copy method of the Context struct (#​3859) (@​1911860538)
• 3ea8bd9: chore(refactor): modify interface check way (#​3855) (@​demoManito)
• ab8042e: chore(request): check reader if it's nil before reading (#​3419) (@​noahyao1024)
• 0d9dbbb: chore(security): upgrade Protobuf for CVE-2024-24786 (#​3893) (@​Fotkurz)
• ecdbbbe: chore: refactor CI and update dependencies (#​3848) (@​appleboy)
• 39089af: chore: refactor configuration files for better readability (#​3951) (@​appleboy)
• 160c173: chore: update GitHub Actions configuration (#​3792) (@​appleboy)
• 0397e5e: chore: update changelog categories and improve documentation (#​3917) (@​appleboy)
• 62b50cf: chore: update dependencies to latest versions (#​3694) (@​appleboy)
• 638aa19: chore: update external dependencies to latest versions (#​3950) (@​appleboy)
• c6f90df: chore: update various Go dependencies to latest versions (#​3901) (@​appleboy)

Build process updates

• 78f4687: build(codecov): Added a codecov configuration (#​3891) (@​flc1125)
• 56dc72c: ci(Makefile): vet command add .PHONY (#​3915) (@​imalasong)
• 8ab47c6: ci(lint): update tooling and workflows for consistency (#​3834) (@​appleboy)
• 8acbe65: ci(release): refactor changelog regex patterns and exclusions (#​3914) (@​appleboy)
• 000fdb3: ci(testing): add go1.22 version (#​3842) (@​appleboy)

Documentation updates

• 990c44a: docs(context): Added deprecation comments to BindWith (#​3880) (@​flc1125)
• 861ffb9: docs(middleware): comments to function BasicAuthForProxy (#​3881) (@​EndlessParadox1)
• ee70b30: docs: Add document to constant AuthProxyUserKey and BasicAuthForProxy. (#​3887) (@​EndlessParadox1)
• f75144a: docs: fix typo in comment (#​3868) (@​testwill)
• 83fc767: docs: fix typo in function documentation (#​3872) (@​TotomiEcio)
• 49f45a5: docs: remove redundant comments (#​3765) (@​WeiTheShinobi)
• 75ccf94: feat: update version constant to v1.10.0 (#​3952) (@​appleboy)

Others

• 02e754b: Upgrade golang.org/x/net -> v0.13.0 (#​3684) (@​cpcf)
• 97eab7d: test(git): gitignore add develop tools (#​3370) (@​demoManito)
• ae15646: test(http): use constant instead of numeric literal (#​3863) (@​testwill)
• fd60a24: test(path): Optimize unit test execution results (#​3883) (@​flc1125)
• bb2d8cf: test(render): increased unit tests coverage (#​3691) (@​araujo88)

prometheus/client_golang (github.com/prometheus/client_golang)

v1.19.1

Compare Source

What's Changed

• Security patches for golang.org/x/sys and google.golang.org/protobuf

New Contributors

• @​lukasauk made their first contribution in https://github.com/prometheus/client_golang/pull/1494

Full Changelog: prometheus/client_golang@v1.19.0...v1.19.1

v1.19.0

Compare Source

What's Changed

The module prometheus/common v0.48.0 introduced an incompatibility when used together with client_golang (See https://github.com/prometheus/client_golang/pull/1448 for more details). If your project uses client_golang and you want to use prometheus/common v0.48.0 or higher, please update client_golang to v1.19.0.

• [CHANGE] Minimum required go version is now 1.20 (we also test client_golang against new 1.22 version). #​1445 #​1449
• [FEATURE] collectors: Add version collector. #​1422 #​1427

New Contributors

• @​michurin made their first contribution in https://github.com/prometheus/client_golang/pull/1423
• @​kavu made their first contribution in https://github.com/prometheus/client_golang/pull/1445
• @​ywwg made their first contribution in https://github.com/prometheus/client_golang/pull/1448

Full Changelog: prometheus/client_golang@v1.18.0...v1.19.0

v1.18.0

Compare Source

What's Changed

• [FEATURE] promlint: Allow creation of custom metric validations. #​1311
• [FEATURE] Go programs using client_golang can be built in wasip1 OS. #​1350
• [BUGFIX] histograms: Add timer to reset ASAP after bucket limiting has happened. #​1367
• [BUGFIX] testutil: Fix comparison of metrics with empty Help strings. #​1378
• [ENHANCEMENT] Improved performance of MetricVec.WithLabelValues(...). #​1360

New Contributors

• @​srenatus made their first contribution in https://github.com/prometheus/client_golang/pull/1350
• @​jadolg made their first contribution in https://github.com/prometheus/client_golang/pull/1342
• @​manas-rust made their first contribution in https://github.com/prometheus/client_golang/pull/1383
• @​bluekeyes made their first contribution in https://github.com/prometheus/client_golang/pull/1378
• @​tsipo made their first contribution in https://github.com/prometheus/client_golang/pull/1387

Full Changelog: prometheus/client_golang@v1.17.0...v1.18.0

grpc/grpc-go (google.golang.org/grpc)

v1.64.0: Release 1.64.0

Compare Source

API Changes

• stats: Deprecate InPayload.Data and OutPayload.Data; they were experimental and will be deleted in the next release (#​7121)

Behavior Changes

• codec: Remove handling of environment variable GRPC_GO_ADVERTISE_COMPRESSORS to suppress setting supported compressors in grpc-accept-encoding header. Compressors will always be advertised, as they have been by default for some time (#​7203)

New Features

• resolver/dns: Add SetMinResolutionInterval to set the minimum interval at which DNS re-resolutions may occur (#​6962)
  • Special Thanks: @​HomayoonAlimohammadi
• peer/peer: Implement the fmt.Stringer interface for pretty printing Peer, and
• metadata/metadata: Implement the fmt.Stringer interface for pretty printing MD (#​7137)
  • Special Thanks: @​AnomalRoil

Performance Improvements

• client: Improve RPC performance by reducing work while holding a lock (#​7132)

Bug Fixes

• transport/server: Display the proper timeout value when keepalive pings are not ack'd in time (#​7038)
  • Special Thanks: @​BatmanAoD
• channelz: Fix bug that was causing the subchannel's target to be unset (#​7189)
• stats: Fix bug where peer was not set in context when calling stats handler for OutPayload, InPayload, and End (#​7096)

Dependencies

• deps: Remove dependency on deprecated github.com/golang/protobuf module (#​7122)

Documentation

• grpc: Deprecate WithBlock, WithReturnConnectionError, FailOnNonTempDialError which are ignored by NewClient (#​7097)
  • Special Thanks: @​pellared
• grpc: Deprecate Dial and DialContext. These will continue to be supported throughout 1.x, but are deprecated to direct users to NewClient (See #​7090 for more information)
• examples: Add custom lb example (#​6691)

v1.63.2: Release 1.63.2

Compare Source

Bugs

• Fix the user agent string

v1.63.1: Release 1.63.1

Compare Source

• grpc: un-deprecate Dial and DialContext and cherry-pick

v1.63.0: Release 1.63.0

Compare Source

Behavior Changes

• grpc: Return canonical target string from resolver.Address.String() (experimental) (#​6923)
• client & server: when using write buffer pooling, use input value for buffer size instead of size*2 (#​6983)
  • Special Thanks: @​raghav-stripe

New Features

• grpc: add ClientConn.CanonicalTarget() to return the canonical target string. (#​7006)
• xds: implement LRS named metrics support (gRFC A64) (#​7027)
  • Special Thanks: @​danielzhaotongliu
• grpc: introduce grpc.NewClient to allow users to create new clients in idle mode and with "dns" as the default resolver (#​7010)
  • Special Thanks: @​bruuuuuuuce

API Changes

• grpc: stabilize experimental method ClientConn.Target() (#​7006)

Bug Fixes

• xds: fix an issue that would cause the client to send an empty list of resources for LDS/CDS upon reconnecting with the management server (#​7026)
• server: Fix some errors returned by a server when using a grpc.Server as an http.Handler with the Go stdlib HTTP server (#​6989)
• resolver/dns: add SetResolvingTimeout to allow configuring the DNS resolver's global timeout (#​6917)
  • Special Thanks: @​and1truong
• Set the security level of Windows named pipes to NoSecurity (#​6956)
  • Special Thanks: @​irsl

v1.62.2: Release 1.62.2

Compare Source

Dependencies

• Update http2 library to address vulnerability CVE-2023-45288

v1.62.1: Release 1.62.1

Compare Source

Bug Fixes

• xds: fix a bug that results in no matching virtual host found RPC errors due to a difference between the target and LDS resource names (#​6997)
• server: fixed stats handler data InPayload.Length for unary RPC calls (#​6766)
  • Special Thanks: @​hueypark
• grpc: the experimental RecvBufferPool DialOption and ServerOption are now active during unary RPCs with compression (#​6766)
  • Special Thanks: @​hueypark
• grpc: trim whitespaces in accept-encoding header before determining compressors
  • Special Thanks: @​sercand

v1.62.0: Release 1.62.0

Compare Source

New Features

• grpc: Add StaticMethod CallOption as a signal to stats handler that a method is safe to use as an instrument key (#​6986)

Behavior Changes

• grpc: Return canonical target string from ClientConn.Target() and resolver.Address.String() (#​6923)

Bug Fixes

• server: wait to close connection until incoming socket is drained (with timeout) to prevent data loss on client-side (#​6977)
  • Special Thanks: @​s-matyukevich for discovering the root cause

Performance Improvements

• *: Allow building without x/net/trace by using grpcnotrace to enable dead code elimination (#​6954)
  • Special Thanks: @​hugelgupf
• rand: improve performance and simplify implementation of grpcrand by adopting math/rand's top-level functions for go version 1.21.0 and newer. (#​6925)
  • Special Thanks: @​kmirzavaziri

Dependencies

• *: Use google.golang.org/protobuf/proto instead of github.com/golang/protobuf. (#​6919)
  • Special Thanks: @​Clement-Jean

[!NOTE]
The above change in proto library usage introduces a minor behavior change within those libraries. The old github.com/golang/protobuf library would error if given a nil message to Marshal, while the new google.golang.org/protobuf library will successfully output zero bytes in this case. This means server method handlers that did return nil, nil will now return an empty message and no error, while it used to return an error. This also affects the client side, where clients sending nil messages used to fail without sending the RPC, and now they will send an empty message.

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Mend Renovate. View repository job log here.