Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump github.com/xmidt-org/arrange from 0.4.0 to 0.5.0 #60

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 19, 2023

Bumps github.com/xmidt-org/arrange from 0.4.0 to 0.5.0.

Release notes

Sourced from github.com/xmidt-org/arrange's releases.

v0.5.0

Changelog

Other Work

  • 3cc95cf342edb681bd5726ca14440e2fa814ce61: Bump github.com/spf13/viper from 1.12.0 to 1.15.0 (#87) (@​dependabot[bot])
  • 0523e201651a7402eaeb141f9e0a9659011ad17f: Bump github.com/spf13/viper from 1.15.0 to 1.16.0 (#103) (@​dependabot[bot])
  • 451664259ff0829a88426acfd243e9a7c6027d62: Bump github.com/stretchr/testify from 1.8.0 to 1.8.2 (#91) (@​dependabot[bot])
  • 163554beb7c5bf9db1655296a422cace80da4ece: Bump github.com/stretchr/testify from 1.8.2 to 1.8.3 (#102) (@​dependabot[bot])
  • 2ff769279b5621445932ba81342a8fc4f4c30994: Bump go.uber.org/dig from 1.15.0 to 1.16.1 (#86) (@​dependabot[bot])
  • 762b150462a3e1ec94082bd77a37a70d176f6835: Bump go.uber.org/dig from 1.16.1 to 1.17.0 (#99) (@​dependabot[bot])
  • 199ed8554274ace1a0358e194981b9fe4c2ffdcf: Bump go.uber.org/fx from 1.18.1 to 1.19.2 (#88) (@​dependabot[bot])
  • 46d3c83e84cbcd0b1e2a1cfd621845e0a1d04760: Bump go.uber.org/fx from 1.19.2 to 1.19.3 (#100) (@​dependabot[bot])
  • 7377b764ba9f0f29986273227d0c879723218dc2: Bump go.uber.org/fx from 1.19.3 to 1.20.0 (#107) (@​dependabot[bot])
  • baf62525dd5ebbed451844481f2d79c5d39ad696: Bump go.uber.org/multierr from 1.8.0 to 1.9.0 (#82) (@​dependabot[bot])
  • ce8cec515760758f76a06ad76526871cf6847ca0: Bump go.uber.org/multierr from 1.9.0 to 1.10.0 (#94) (@​dependabot[bot])
  • 3b90c88b586d4ba9a9bbd6a9bedc18e1e8f7eb29: MockRoundTripper and friends to ease client testing (@​johnabass)
  • ea6efb41cbe99f31bc2838073adee20ee0fbbcc4: ServerFactory may now be used as a server option (@​johnabass)
  • 75043693cff301be8881dd04a8dbfe3d20dac966: Use the new shared workflow. (@​schmidtw)
  • dca1247e239f6e84675e366ae209479412a4ff67: added Push/Pop scoping to TagBuilder (@​johnabass)
  • 7a2ec64ba641923a69c29bae00ace1343935b131: added TLSSuite for unit tests that need certificates (@​johnabass)
  • 261fb4868374b2a0c57341c745643643848dcfb6: added a ConnState server option (@​johnabass)
  • 273e37102f40c4ede8da9f41ab77ea846752b2fd: added a basic tag builder as a compiler-friendly alternative to specifying tags in annotations (@​johnabass)
  • d30748c9cd7fc473333f1215669cf2264df0cd20: added composability to BaseContext (@​johnabass)
  • 6af4643c7b45b02e59ef4f8bba0665babc94c714: added generic middleware (@​johnabass)
  • 1893b25fdd1fdef03f8d3e7eb2095605db6b42a1: augmented ConnContext to allow for function chaining and flexibility for user-defined types (@​johnabass)
  • 347a2831f2b33add83858ef1b2fd1d6dc4163d08: better RoundTripper closure implementation (@​johnabass)
  • ceff63b3b9fa9234656c92a14240b8d93d21d6c9: cleaned up tests; verify raw vs reflect values (@​johnabass)
  • 29c14c9471dc41412a952c613b9a09de2b19e376: created a different version of VisitDependencies for reflect.Values (@​johnabass)
  • 063787f3a44a05c3a67d1c555171c807c18ab3c3: factored out listener creation into NewListener for better reusability (@​johnabass)
  • b63b6dbe8061b7d4ffc48b309b6053c16ca23692: implemented Provide functions for simple client usage in the typical (intended) use cases (@​johnabass)
  • e094ebf585d63d5b2bfa95dd395e613b3d66554b: interim (@​johnabass)
  • b265527c1f3cec95accbc024420a735646c2f45a: listener capture allows access to the bound net.Addr during tests (@​johnabass)
  • 6d479a6cb3fa981249de3515e6ba9fb723e1402d: major refactor of the client infrastructure (@​johnabass)
  • 06b752e6af52c38ce280237dab246a55dd16ec76: middleware support (@​johnabass)
  • 34436a3ac929368b5b5a22e7f15927ca07dd5c90: migrate header logic into httpaux (@​johnabass)
  • 9a98544a084830548b263b1181dd07584ced4082: pruned fx.Printer and writer infrastructure (@​johnabass)
  • 7b3e0f78a609e11b4572c65ca64939980bf694df: pruned fx.Printer infrastructure (@​johnabass)
  • 2224ec178cd1a81f374914eb9790ae80119ad3c1: pruned this unused file (@​johnabass)
  • 3dec5b6212dc429e0f2f023fc620600fb5e9ad63: refactor to allow one type to be both a server and a client option (@​johnabass)
  • a9848913e9ecd0adef6e979169e04690291f048a: refactored options into a generics approach to simplify and reduce code (@​johnabass)
  • 8223b68046231c26f4112105dc3dcee3e2a1f271: refactored server construction to leverage more fx features and reduce code surface area (@​johnabass)
  • 3cda8bf3a4c393446261c136c5b6398e8755d0c4: refactoring server binding to better accomodate listener middleware (@​johnabass)
  • 54d7e009d65f832e4231eee76dea4c8681e8eef2: relax VisitDependencies to allow interface{} values as is (@​johnabass)
  • c41b68542fda132bd05575324121266b06df30ce: removed direct Viper support (@​johnabass)
  • 998e8b9c80b34cd4f856c81d57a7ed52d2de60b3: removed direct compiletime Viper support (@​johnabass)
  • c17b0669c9b8b1aba9ef643135a0ed6964620c2d: removed reflection utilities, which were centered on a complately different design (@​johnabass)
  • 99278bcf1a486ea1558cebce69d1851d48f393de: resolve conflict with main (@​johnabass)
  • cc681309b10ef888186a5612dcd5856b42835b91: simpler utility methods for create fx application objects under tests (@​johnabass)
  • f75a2f9f1dcb40877395104b3974f36d025a6371: simplified server Provide functions that handle binding to the lifecycle (@​johnabass)
  • 2508c422c6293c40488a5c729d242ab8cca8d618: updated (@​johnabass)
  • 6a21f15081d93d0652b6fd12ac1287dbf0318ad5: updated (@​johnabass)

... (truncated)

Changelog

Sourced from github.com/xmidt-org/arrange's changelog.

Changelog

All notable changes to this project will be documented in this file.

The format is based on Keep a Changelog and this project adheres to Semantic Versioning.

[Unreleased]

  • VisitDependencyValues handles reflect.Value dependencies
  • Use a generic Type() function for extracting runtime types
Commits
  • 682b416 Merge pull request #121 from xmidt-org/feature/move-lifecycle-into-provide
  • c6b6fef chore: unit tests for a couple of edge cases
  • 5dbace9 chore: incorporate simpler listen capture
  • f9f9c5a chore: refactored to make ListenReceive easier to use
  • f75a2f9 simplified server Provide functions that handle binding to the lifecycle
  • 5f6be07 chore: use a custom context key type to quiet the linter
  • d54242d Merge pull request #120 from xmidt-org/feature/new-listener
  • 844a3a8 chore: clarified a godoc comment
  • 063787f factored out listener creation into NewListener for better reusability
  • cb1eae0 Merge pull request #119 from xmidt-org/feature/docs
  • Additional commits viewable in compare view

Dependabot compatibility score

You can trigger a rebase of this PR by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 19, 2023
@github-actions github-actions bot enabled auto-merge (squash) July 19, 2023 23:01
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/xmidt-org/arrange-0.5.0 branch from e4c091c to ab36ec1 Compare August 2, 2023 23:06
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/xmidt-org/arrange-0.5.0 branch from ab36ec1 to 1f86a53 Compare August 7, 2023 13:24
@guardrails
Copy link

guardrails bot commented Aug 7, 2023

⚠️ We detected 1 security issue in this pull request:

Vulnerable Libraries (1)
Severity Details
High pkg:golang/github.com/xmidt-org/[email protected] upgrade to: > v0.5.0

More info on how to fix Vulnerable Libraries in Go.


👉 Go to the dashboard for detailed results.

📥 Happy? Share your feedback with us.

Bumps [github.com/xmidt-org/arrange](https://github.com/xmidt-org/arrange) from 0.4.0 to 0.5.0.
- [Release notes](https://github.com/xmidt-org/arrange/releases)
- [Changelog](https://github.com/xmidt-org/arrange/blob/main/CHANGELOG.md)
- [Commits](xmidt-org/arrange@v0.4.0...v0.5.0)

---
updated-dependencies:
- dependency-name: github.com/xmidt-org/arrange
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/github.com/xmidt-org/arrange-0.5.0 branch from 1f86a53 to ac5bde8 Compare August 9, 2023 23:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants