deps: update Go dependencies #779
Open
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![renovate[bot]](https://avatars.githubusercontent.com/in/2740?s=60&v=4){kind=small}
ℹ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
✅ Deploy Preview for marblerun-docs canceled.
|
renovate
bot
force-pushed
the
renovate/go-dependencies
branch
3 times, most recently
from
41e443b to
dcdf8b6
Compare
renovate
bot
force-pushed
the
renovate/go-dependencies
branch
4 times, most recently
from
ebe6eab to
3e8ccb3
Compare
renovate
bot
force-pushed
the
renovate/go-dependencies
branch
5 times, most recently
from
fb6ecbe to
1a3fe95
Compare
renovate
bot
force-pushed
the
renovate/go-dependencies
branch
3 times, most recently
from
77ef7b7 to
ee53fbc
Compare
renovate
bot
force-pushed
the
renovate/go-dependencies
branch
from
ee53fbc to
14b414c
Compare
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v1.16.2->v1.16.3v1.6.0->v1.7.0v2.1.0->v2.2.0v1.11.0->v1.12.0v1.0.5->v1.0.6v0.31.0->v0.32.0v0.28.0->v0.29.0v1.68.1->v1.70.0v1.35.2->v1.36.4v3.16.3->v3.17.0v0.31.3->v0.32.1v0.31.3->v0.32.1v0.31.3->v0.32.1v0.19.3->v0.20.1Release Notes
cert-manager/cert-manager (github.com/cert-manager/cert-manager)
v1.16.3Compare Source
cert-manager is the easiest way to automatically manage certificates in Kubernetes and OpenShift clusters.
v1.16.3 is a patch release mainly focused around bumping dependencies to address reported CVEs: CVE-2024-45337 and CVE-2024-45338.
We don't believe that cert-manager is actually vulnerable; this release is instead intended to satisfy vulnerability scanners.
It also includes a bug fix to the new
renewBeforePercentagefield. If you were usingrenewBeforePercentage, see PR #7421 for more information.Changes
Bug
golang.org/x/netandgolang.org/x/cryptoto address CVE-2024-45337 and CVE-2024-45338 (#7485, @erikgb)renewBeforePercentageto comply with its spec (#7441, @cert-manager-bot)Other
edgelesssys/ego (github.com/edgelesssys/ego)
v1.7.0Compare Source
v1.6.1Compare Source
EDG_LOG_FORMAT=jsonto enable JSON-structured logs for EGo's startup code instead of plain log outputgrpc-ecosystem/go-grpc-middleware (github.com/grpc-ecosystem/go-grpc-middleware/v2)
v2.2.0Compare Source
What's Changed
New Contributors
Full Changelog: grpc-ecosystem/go-grpc-middleware@v2.1.0...v2.2.0
spf13/afero (github.com/spf13/afero)
v1.12.0Compare Source
What's Changed
New Contributors
Full Changelog: spf13/afero@v1.11.0...v1.12.0
spf13/pflag (github.com/spf13/pflag)
v1.0.6Compare Source
What's Changed
pkg/flagcompatibility by @mckern in https://github.com/spf13/pflag/pull/220New Contributors
Full Changelog: spf13/pflag@v1.0.5...v1.0.6
grpc/grpc-go (google.golang.org/grpc)
v1.70.0: Release 1.70.0Compare Source
Behavior Changes
New Features
GRPC_EXPERIMENTAL_XDS_FALLBACKtofalse. (#7949)Bug Fixes
Performance
Documentation
v1.69.4: Release 1.69.4Compare Source
Bug Fixes
Documentation
v1.69.2: Release 1.69.2Compare Source
Bug Fixes
Metrics/etc) that were moved to the stats package (#7929).v1.69.0: Release 1.69.0Compare Source
Known Issues
grpc.NewClientfunction is incompatible with forward proxies, because it resolves the target hostname on the client instead of passing the hostname to the proxy. A fix is expected to be a part of grpc-go v1.70. (#7556)New Features
pickfirstLB policy (disabled by default) supports Happy Eyeballs, interleaving IPv4 and IPv6 address as described in RFC-8305 section 4, to attempt connections to multiple backends concurrently. The experimentalpickfirstpolicy can be enabled by setting the environment variableGRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRSTtotrue. (#7725, #7742)pick_firstload balancing policy (#7839)MethodHandler, which is the type of an already-exported field inMethodDesc(#7796)Bug Fixes
Behavior Changes
pick_firstLB policy to manage connections (#7826)API Changes
balancer.SubConninterface to force implementors to embed a delegate implementation. This requirement is present in the interface documentation, but wasn't enforced earlier. (#7840)Performance Improvements
ReadAll()method for more efficientio.Readerconsumption (#7653)Documentation
v1.68.2: Release 1.68.2Compare Source
Dependencies
stats/opentelemetrymodule and instead add the experimental packages it contains directly into the maingoogle.golang.org/grpcmodule (#7936)protocolbuffers/protobuf-go (google.golang.org/protobuf)
v1.36.4Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.36.3...v1.36.4
Bug fixes:
CL/642975: reflect/protodesc: fix panic when working with dynamicpb
Maintenance:
CL/643276: internal_gengo: avoid allocations in rawDescGZIP() accessors
CL/642857: internal_gengo: switch back from string literal to hex byte slice
CL/642055: internal_gengo: use unsafe.StringData() to avoid a descriptor copy
CL/638135: internal_gengo: store raw descriptor in .rodata section
v1.36.3Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.36.2...v1.36.3
Bug fixes:
CL/642575: reflect/protodesc: fix panic when working with dynamicpb
CL/641036: cmd/protoc-gen-go: remove json struct tags from unexported fields
User-visible changes:
CL/641876: proto: add example for GetExtension, SetExtension
CL/642015: runtime/protolazy: replace internal doc link with external link
Maintenance:
CL/641635: all: split flags.ProtoLegacyWeak out of flags.ProtoLegacy
CL/641019: internal/impl: remove unused exporter parameter
CL/641018: internal/impl: switch to reflect.Value.IsZero
CL/641035: internal/impl: clean up unneeded Go<1.12 MapRange() alternative
CL/641017: types/dynamicpb: switch atomicExtFiles to atomic.Uint64 type
v1.36.2Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.36.1...v1.36.2
Bug fixes:
CL/638515: internal/impl: fix WhichOneof() to work with synthetic oneofs
v1.36.1Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.36.0...v1.36.1
Bug fixes:
CL/638495: internal/impl: revert IsSynthetic() check to fix panic
Maintenance:
CL/637475: internal/errors: delete compatibility code for Go before 1.13
v1.36.0Compare Source
Full Changelog: protocolbuffers/protobuf-go@v1.35.2...v1.36.0
User-visible changes:
CL/635139: src/google/protobuf: document UnmarshalJSON / API level behavior
CL/635138: reflect/protoreflect: use [] syntax to reference method
CL/635137: proto: add reference to size semantics with lazy decoding to comment
CL/634818: compiler/protogen: allow overriding API level from --go_opt
CL/634817: cmd/protoc-gen-go: generate _protoopaque variant for hybrid
CL/634816: all: regenerate.bash for Opaque API
CL/634815: all: Release the Opaque API
CL/634015: types/descriptorpb: regenerate using latest protobuf v29.1 release
CL/632735: internal/impl: skip synthetic oneofs in messageInfo
CL/627876: all: start v1.35.2-devel
helm/helm (helm.sh/helm/v3)
v3.17.0: Helm v3.17.0Compare Source
Helm v3.17.0 is a feature release. Users are encouraged to upgrade for the best experience.
The community keeps growing, and we'd love to see you there!
Notable Changes
--take-ownershipflag for install and upgrade commandstoYamlPrettytemplate functionInstallation and Upgrading
Download Helm v3.17.0. The common platform binaries are here:
This release was signed with 208D D36E D5BB 3745 A167 43A4 C7C6 FBB5 B91C 1155 and can be found at @r6by keybase account. Please use the attached signatures for verifying this release using gpg.
The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with
bash.What's Next
Changelog
301108e(Matt Farina)949b2e6(Terry Howe)aba95b9(Terry Howe)c3e5217(Terry Howe)33a0ee7(dependabot[bot])79993d2(cx)037c18a(Matt Farina)9f620b8(Matt Farina)ba180a3(dnskr)7321579(Niladri Halder)build-testaction ondev-v3branch2042f7d(George Jenkins)a3a9e4f(Matt Farina)c7cd177(dependabot[bot])ca61226(dependabot[bot])9421fac(dependabot[bot])562eb54(dependabot[bot])6ba4c6e(dependabot[bot])ac16258(dependabot[bot])edf7b66(Mayank Shah)b9d58a1(Mayank Shah)2541e46(Mayank Shah)c40cf00(George Jenkins)3c2ab91(Ryan Nowak)7a22dd2(Evans Mungai)885e938(Mayank Shah)7efa286(Mayank Shah)c3a5f27(Mayank Shah)b5a83ea(Matt Farina)a2d289f(dependabot[bot])e4062e7(wangjingcun)6f2f7d4(Taylor Jasko)helm/pkg/kube/client_test.goto coverwait.go9fd943b(Alex Johnson)0cc78c6(Zach Burgess)029e983(Matt Farina)f4f4a6b(Suleiman Dibirov)a51ea6e(Tianle Xu)f983342(dependabot[bot])c867af8(dependabot[bot])de9e138(wangjingcun)e4304bd(dependabot[bot])7e6b34d(Robert Sirchia)16a4e37(Robert Sirchia)bdaa93b(Evans Mungai)3c4d0bb(Evans Mungai)d25b0d9(Evans Mungai)3a5805e(Evans Mungai)a205af7(Robert Sirchia)4a15cc3(George Jenkins)999b851(Robert Sirchia)79a1f2c(Andreas Karis)ca58464(Jon Olsson)fe4d0d9(dependabot[bot])8b85934(Evans Mungai)75c124a(Evans Mungai)b45680c(dependabot[bot])140a376(dependabot[bot])ab3c589(Luis Davim)d517450(dependabot[bot])30de3bb(Bryan Honof)076bb1f(Josh Dolitsky)f5fcae8(George Jenkins)02ef83f(George Jenkins)4c54d15(dependabot[bot])cdbef2b([email protected])9e192b2(dependabot[bot])36f0b42(Robert Sirchia)d5df067(dependabot[bot])7925733(dependabot[bot])9c36d1f(George Jenkins)2cd8d54(dependabot[bot])de18ac1(Terry Howe)4735f2b(myeunee)a8750f4(Robert Sirchia)b203cc1(Adam Korczynski)e432f39(Adam Korczynski)49cb14a(Yarden Shoham)ef85fa7(Nathan Baulch)ff9dd26(Nathan Baulch)62069eb(Robert Sirchia)114db17(Robert Sirchia)8642225(Robert Sirchia)5217ea8(Robert Sirchia)9134b9e(dependabot[bot])144e7b0(dependabot[bot])ddead08(Rui Chen)611fae3(Robert Sirchia)c81bd89(Matt Farina)e7b25ba(Robert Sirchia)a55c0b4(Calvin A. Allen)2b6f76c(Richard Hooper)06afebb(dependabot[bot])9f6925e(dependabot[bot])5326d79(Robert Sirchia)d911881(Robert Sirchia)1aa640f(Robert Sirchia)0eae854(Robert Sirchia)438221f(Robert Sirchia)3ef6dd4(Robert Sirchia)5f15f53(Robert Sirchia)4df7d56(Robert Sirchia)d644da6(Matt Farina)a77ad1a(dependabot[bot])88fa81e(Robert Sirchia)76b9d96(Robert Sirchia)38dd4a7(Robert Sirchia)1ad6af9(Robert Sirchia)e46e0dd(Robert Sirchia)6757f8a(Robert Sirchia)031b344(Robert Sirchia)7e3df4b(Robert Sirchia)b351fdc(Robert Sirchia)6761729(Robert Sirchia)b4caed9(harshitasao)a71eaea(Rauno Viskus)ae17dea(harshitasao)0687961(Evans Mungai)Configuration
📅 Schedule: Branch creation - "before 8am on monday" (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.