Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the go group across 1 directory with 10 updates #441

Merged
merged 2 commits into from
Jul 5, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 1, 2024

Bumps the go group with 8 updates in the / directory:

Package From To
github.com/getsentry/sentry-go 0.27.0 0.28.1
github.com/go-chi/chi/v5 5.0.12 5.1.0
github.com/pomerium/pomerium 0.25.2 0.26.1
github.com/rs/zerolog 1.32.0 1.33.0
github.com/spf13/cobra 1.8.0 1.8.1
golang.org/x/crypto 0.22.0 0.24.0
google.golang.org/grpc 1.63.2 1.64.0
google.golang.org/grpc/cmd/protoc-gen-go-grpc 1.3.0 1.4.0

Updates github.com/getsentry/sentry-go from 0.27.0 to 0.28.1

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.28.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.28.1.

Bug Fixes

  • Implement http.ResponseWriter to hook into various parts of the response process (#837)

0.28.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.28.0.

Features

  • Add a Fiber performance tracing & error reporting integration (#795)
  • Add performance tracing to the Echo integration (#722)
  • Add performance tracing to the FastHTTP integration (#732)
  • Add performance tracing to the Iris integration (#809)
  • Add performance tracing to the Negroni integration (#808)
  • Add FailureIssueThreshold & RecoveryThreshold to MonitorConfig (#775)
  • Use errors.Unwrap() to create exception groups (#792)
  • Add support for matching on strings for ClientOptions.IgnoreErrors & ClientOptions.IgnoreTransactions (#819)
  • Add http.request.method attribute for performance span data (#786)
  • Accept interface{} for span data values (#784)

Fixes

  • Fix missing stack trace for parsing error in logrusentry (#689)
Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.28.1

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.28.1.

Bug Fixes

  • Implement http.ResponseWriter to hook into various parts of the response process (#837)

0.28.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.28.0.

Features

  • Add a Fiber performance tracing & error reporting integration (#795)
  • Add performance tracing to the Echo integration (#722)
  • Add performance tracing to the FastHTTP integration (#732)
  • Add performance tracing to the Iris integration (#809)
  • Add performance tracing to the Negroni integration (#808)
  • Add FailureIssueThreshold & RecoveryThreshold to MonitorConfig (#775)
  • Use errors.Unwrap() to create exception groups (#792)
  • Add support for matching on strings for ClientOptions.IgnoreErrors & ClientOptions.IgnoreTransactions (#819)
  • Add http.request.method attribute for performance span data (#786)
  • Accept interface{} for span data values (#784)

Bug Fixes

  • Fix missing stack trace for parsing error in logrusentry (#689)
Commits

Updates github.com/go-chi/chi/v5 from 5.0.12 to 5.1.0

Release notes

Sourced from github.com/go-chi/chi/v5's releases.

v5.1.0

What's Changed

  • middleware: add Discard method to WrapResponseWriter by @​patrislav in go-chi/chi#926
    • Adds Discard() method to the middleware.WrapResponseWriter interface. This is technically an API breaking change. However after some discussion at go-chi/chi#926, we decided to move forward, and release as minor version, as we don't expect anyone to rely on this interface / implement it externally.

New Contributors

Full Changelog: go-chi/chi@v5.0.14...v5.1.0

v5.0.14

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.0.12...v5.0.14

v5.0.13

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.0.12...v5.0.13

Changelog

Sourced from github.com/go-chi/chi/v5's changelog.

Changelog

Commits
  • 67be7d9 middleware: add Discard method to WrapResponseWriter (#926)
  • 7957c0d Revert "fix(middleware): Close created writer in the compressor middleware (#...
  • f728a1c docs: Update stale links in docs for contributing (#904)
  • f10dc4a fix(middleware): Close created writer in the compressor middleware (#919)
  • ef31c0b reduce context struct size from 216 bytes to 208 bytes (#912)
  • c1f2a7a middleware: fix typo in RealIP doc (#903)
  • See full diff in compare view

Updates github.com/pomerium/pomerium from 0.25.2 to 0.26.1

Release notes

Sourced from github.com/pomerium/pomerium's releases.

v0.26.1

Security

Pomerium v0.26.1 includes multiple security updates:

  • The Pomerium user info page (at /.pomerium) unintentionally included serialized OAuth2 access and ID tokens from the logged-in user's session. These tokens are not intended to be exposed to end users, and have now been removed.

    Credit to Vadim Sheydaev, aka Enr1g for reporting this issue.

  • This release also includes an update from Envoy 1.30.1 to Envoy 1.30.3 to address multiple security issues:

    • CVE-2024-34362: Crash (use-after-free) in EnvoyQuicServerStream
    • CVE-2024-34363: Crash due to uncaught nlohmann JSON exception
    • CVE-2024-34364: Envoy OOM vector from HTTP async client with unbounded response buffer for mirror response, and other components
    • CVE-2024-32974: Crash in EnvoyQuicServerStream::OnInitialHeadersComplete()
    • CVE-2024-32975: Crash in QuicheDataReader::PeekVarInt62Length()
    • CVE-2024-32976: Endless loop while decompressing Brotli data with extra input
    • CVE-2024-23326: Envoy incorrectly accepts HTTP 200 response for entering upgrade mode
    • CVE-2024-38525: datadog tracer does not handle trace headers with unicode characters
  • The release also removes a transitive dependency on the gopkg.in/square/go-jose.v2 library which is vulnerable to GHSA-c5q2-7r4c-mv6g.

What's Changed

Security

Fixes

Full Changelog: pomerium/pomerium@v0.26.0...v0.26.1

v0.26.0 Changes

v0.26.0 includes improved support for the Pomerium Zero beta.

Breaking

Changes that are expected to cause an incompatibility.

New

... (truncated)

Commits

Updates github.com/rs/zerolog from 1.32.0 to 1.33.0

Commits

Updates github.com/spf13/cobra from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.1

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation

... (truncated)

Commits

Updates golang.org/x/crypto from 0.22.0 to 0.24.0

Commits
  • 332fd65 go.mod: update golang.org/x dependencies
  • 0b431c7 x509roots/fallback: update bundle
  • 349231f ssh: implement CryptoPublicKey on sk keys
  • 44c9b0f ssh: allow server auth callbacks to send additional banners
  • 67b1361 sha3: reenable s390x assembly
  • 477a5b4 sha3: make APIs usable with zero allocations
  • 59b5a86 sha3: disable s390x assembly
  • 10f366e sha3: simplify XOR functions
  • 905d78a go.mod: update golang.org/x dependencies
  • ebb717d ssh: validate key type in SSH_MSG_USERAUTH_PK_OK response
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.19.0 to 0.21.0

Commits
  • 673e0f9 unix: skip ethtool driver test for busy interface
  • 6943ab6 unix/linux: update glibc to 2.39
  • 92f3ad6 unix: update to Linux kernel 6.9
  • f34bb9f windows: add net user enum
  • 6dfb94e unix: add types for SOCK_DIAG
  • 7d69d98 unix: extend support for z/OS
  • 7758090 cpu: add support for sve2 detection
  • 9a28524 windows: drop go version tags for unsupported versions
  • 27dc90b unix: update to Linux kernel 6.4
  • See full diff in compare view

Updates google.golang.org/grpc from 1.63.2 to 1.64.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.64.0

API Changes

  • stats: Deprecate InPayload.Data and OutPayload.Data; they were experimental and will be deleted in the next release (#7121)

Behavior Changes

  • codec: Remove handling of environment variable GRPC_GO_ADVERTISE_COMPRESSORS to suppress setting supported compressors in grpc-accept-encoding header. Compressors will always be advertised, as they have been by default for some time (#7203)

New Features

  • resolver/dns: Add SetMinResolutionInterval to set the minimum interval at which DNS re-resolutions may occur (#6962)
  • peer/peer: Implement the fmt.Stringer interface for pretty printing Peer, and
  • metadata/metadata: Implement the fmt.Stringer interface for pretty printing MD (#7137)

Performance Improvements

  • client: Improve RPC performance by reducing work while holding a lock (#7132)

Bug Fixes

  • transport/server: Display the proper timeout value when keepalive pings are not ack'd in time (#7038)
  • channelz: Fix bug that was causing the subchannel's target to be unset (#7189)
  • stats: Fix bug where peer was not set in context when calling stats handler for OutPayload, InPayload, and End (#7096)

Dependencies

  • deps: Remove dependency on deprecated github.com/golang/protobuf module (#7122)

Documentation

  • grpc: Deprecate WithBlock, WithReturnConnectionError, FailOnNonTempDialError which are ignored by NewClient (#7097)
  • grpc: Deprecate Dial and DialContext. These will continue to be supported throughout 1.x, but are deprecated to direct users to NewClient (See #7090 for more information)
  • examples: Add custom lb example (#6691)
Commits
  • fa274d7 Change version to 1.64.0 (#7218)
  • 6b413c8 xds: Surround two Infof calls that use pretty.ToJSON with V(2) checks (...
  • 2dbbcef resolver/dns: Add docstring to SetMinResolutionInterval (#7217)
  • 070d9c7 codes: replace %q to %d in error string when invalid code is an integer (#7188)
  • 5d24ee2 xds: store server config for LRS server in xdsresource.ClusterUpdate (#7191)
  • c76f686 advancedTLS: Rename get root certs related pieces (#7207)
  • f591e3b codec: remove option to suppress setting supported compressors in headers (#7...
  • b4f7947 github: remove dependabot (#7208)
  • 0561c78 client: add user-friendly error message of LB policy update timed out (#7206)
  • 9d9c1fb peer: remove change detector test (#7204)
  • Additional commits viewable in compare view

Updates google.golang.org/grpc/cmd/protoc-gen-go-grpc from 1.3.0 to 1.4.0

Release notes

Sourced from google.golang.org/grpc/cmd/protoc-gen-go-grpc's releases.

protoc-gen-go-grpc v1.4.0

New Features

  • Add an optional implementation of streams using generics (Experimental) (#7057)
    • The new use_generic_stream_experimental=true option will cause the gRPC codegen to use prebuilt generic types to implement client and server stream objects, rather than generating new types and implementations for every RPC method. We intend to transition this to the default behavior in the next release. Please test it and provide any feedback.
    • Special Thanks: @​aarongable
  • Copy service comments to interfaces in generated code (#7243)
  • Generated code includes static method gRPC call options for integration with the upcoming OpenTelemetry metrics support (#6960)

Dependencies

Commits
  • d8960bd Change version to 1.4.0
  • d2a85bf transport: fix minor typo in 'GoAway' godoc (#1284)
  • 8de2dff Piggyback window updates for connection with those of a stream. (#1273)
  • 6fecf28 Reopening: Server shouldn't Fatalf in case it fails to encode. (#1276)
  • a8cd0c1 Avoid int32 overflow when applying initial window size setting
  • 8431165 Revert "Server shouldn't Fatalf in case it fails to encode. (#1251)" (#1274)
  • d5bc85c Server shouldn't Fatalf in case it fails to encode. (#1251)
  • 1e47334 Decouple transport flow control from application read. (#1265)
  • a113590 Update references to route_guide.proto to use new directory name (#1270)
  • 6bb7648 add MaxConcurrentStreams to benchmark_test when start the server (#1271)
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.34.0 to 1.34.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.27.0` | `0.28.1` |
| [github.com/go-chi/chi/v5](https://github.com/go-chi/chi) | `5.0.12` | `5.1.0` |
| [github.com/pomerium/pomerium](https://github.com/pomerium/pomerium) | `0.25.2` | `0.26.1` |
| [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.32.0` | `1.33.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.0` | `1.8.1` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.22.0` | `0.24.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.63.2` | `1.64.0` |
| [google.golang.org/grpc/cmd/protoc-gen-go-grpc](https://github.com/grpc/grpc-go) | `1.3.0` | `1.4.0` |



Updates `github.com/getsentry/sentry-go` from 0.27.0 to 0.28.1
- [Release notes](https://github.com/getsentry/sentry-go/releases)
- [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-go@v0.27.0...v0.28.1)

Updates `github.com/go-chi/chi/v5` from 5.0.12 to 5.1.0
- [Release notes](https://github.com/go-chi/chi/releases)
- [Changelog](https://github.com/go-chi/chi/blob/master/CHANGELOG.md)
- [Commits](go-chi/chi@v5.0.12...v5.1.0)

Updates `github.com/pomerium/pomerium` from 0.25.2 to 0.26.1
- [Release notes](https://github.com/pomerium/pomerium/releases)
- [Commits](pomerium/pomerium@v0.25.2...v0.26.1)

Updates `github.com/rs/zerolog` from 1.32.0 to 1.33.0
- [Commits](rs/zerolog@v1.32.0...v1.33.0)

Updates `github.com/spf13/cobra` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.8.0...v1.8.1)

Updates `golang.org/x/crypto` from 0.22.0 to 0.24.0
- [Commits](golang/crypto@v0.22.0...v0.24.0)

Updates `golang.org/x/sys` from 0.19.0 to 0.21.0
- [Commits](golang/sys@v0.19.0...v0.21.0)

Updates `google.golang.org/grpc` from 1.63.2 to 1.64.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.63.2...v1.64.0)

Updates `google.golang.org/grpc/cmd/protoc-gen-go-grpc` from 1.3.0 to 1.4.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.3.0...v1.4.0)

Updates `google.golang.org/protobuf` from 1.34.0 to 1.34.1

---
updated-dependencies:
- dependency-name: github.com/getsentry/sentry-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/go-chi/chi/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/pomerium/pomerium
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/rs/zerolog
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/grpc/cmd/protoc-gen-go-grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner July 1, 2024 23:07
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 1, 2024
@dependabot dependabot bot requested a review from kenjenkins July 1, 2024 23:07
@calebdoxsey calebdoxsey merged commit 949c45f into main Jul 5, 2024
6 checks passed
@calebdoxsey calebdoxsey deleted the dependabot/go_modules/go-264d1fbdd8 branch July 5, 2024 19:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant