Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[release_v1]: Bump the all-modules group in /sda-download with 8 updates #1456

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 3, 2025

Bumps the all-modules group in /sda-download with 8 updates:

Package From To
github.com/aws/aws-sdk-go 1.55.5 1.55.6
github.com/dgraph-io/ristretto 0.1.1 0.2.0
github.com/lestrrat-go/jwx/v2 2.1.1 2.1.4
github.com/neicnordic/crypt4gh 1.12.0 1.14.0
github.com/stretchr/testify 1.9.0 1.10.0
golang.org/x/crypto 0.26.0 0.33.0
google.golang.org/grpc 1.65.0 1.70.0
google.golang.org/protobuf 1.34.2 1.35.2

Updates github.com/aws/aws-sdk-go from 1.55.5 to 1.55.6

Release notes

Sourced from github.com/aws/aws-sdk-go's releases.

Release v1.55.6 (2025-01-15)

SDK Bugs

  • Fix broken printf for go1.24
Commits
  • e1db430 release v1.55.6 (2025-01-15) (#5341)
  • 5ab6103 changelog
  • 394e0e3 Merge pull request #5340 from djedward/main
  • 19d98e3 Fix improper use of Printf-style functions
  • 7112c0a Merge pull request #5325 from ashishdhingra/user/ashdhin/IssueTemplateRegress...
  • 8d6a0f9 chore: Modified bug issue template to add checkbox to report potential regres...
  • 02c1f72 Update PULL_REQUEST_TEMPLATE.md
  • See full diff in compare view

Updates github.com/dgraph-io/ristretto from 0.1.1 to 0.2.0

Release notes

Sourced from github.com/dgraph-io/ristretto's releases.

v0.2.0

What's Changed

*`docs(readme): Use new Wait method by @​angadn in dgraph-io/ristretto#327

Full Changelog: hypermodeinc/ristretto@v0.1.1...v0.2.0

Changelog

Sourced from github.com/dgraph-io/ristretto's changelog.

[v0.2.0] - 2024-10-06

Added

Fixed

Full Changelog: hypermodeinc/ristretto@v0.1.1...v0.2.0

Commits

Updates github.com/lestrrat-go/jwx/v2 from 2.1.1 to 2.1.4

Release notes

Sourced from github.com/lestrrat-go/jwx/v2's releases.

v2.1.4

What's Changed

Full Changelog: lestrrat-go/jwx@v2.1.3...v2.1.4

v2.1.3

What's Changed

Full Changelog: lestrrat-go/jwx@v2.1.2...v2.1.3

v2.1.2

What's Changed

New Contributors

Full Changelog: lestrrat-go/jwx@v2.1.1...v2.1.2

Changelog

Sourced from github.com/lestrrat-go/jwx/v2's changelog.

v2.1.4 Feb 25 2025

  • Update code to work with go1.24
  • Update tests to work with recent latchset/jose
  • Fix build pipeline to work with latest golangci-lint

v2.1.3 24 Nov 2024

  • [jwe] Test has been fixed to work under 32-bit systems.

v2.1.2 25 Oct 2024

  • [jwt] jwt.ParseRequest now uses %w to embed errors returned from jwt.ParseHeader, jwt.ParseCookie, and jwt.ParseForm, allowing users to correctly call errors.Is(err, jwt.ErrTokenExpired) and the like. Previously the error returned from jwt.ParseRequest showed in human readable format what the problem was, but it was not programmatically possible to determine the error type using errors.Is (#1175)
Commits

Updates github.com/neicnordic/crypt4gh from 1.12.0 to 1.14.0

Release notes

Sourced from github.com/neicnordic/crypt4gh's releases.

v1.14.0

Changelog

  • 2ae276982f6a2db300fe8265552d126086a22ca5 Merge pull request #188 from neicnordic/Feature/go_version_1.24

v1.13.0

Changelog

  • d38ba1d66aabdc38f84ba949deb7b1b5a4f4e8fe remove debugging stuff
Commits
  • 2ae2769 Merge pull request #188 from neicnordic/Feature/go_version_1.24
  • cd1397d Bump version
  • 0db135f Update Go to version 1.24
  • 04547f7 Bump goreleaser/goreleaser-action from 6.1.0 to 6.2.1
  • 5bdde6c Bump golangci/golangci-lint-action from 6.2.0 to 6.5.0
  • ba24a8f update version
  • 756fef7 Bump the all-modules group with 2 updates
  • b52bb41 Merge pull request #182 from neicnordic/dependabot/github_actions/codecov/cod...
  • 0058403 Bump codecov/codecov-action from 5.1.2 to 5.3.1
  • 7b0648a Merge pull request #181 from neicnordic/dependabot/github_actions/golangci/go...
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.9.0 to 1.10.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.10.0

What's Changed

Functional Changes

Fixes

Documantation, Build & CI

New Contributors

... (truncated)

Commits
  • 89cbdd9 Merge pull request #1626 from arjun-1/fix-functional-options-diff-indirect-calls
  • 07bac60 Merge pull request #1667 from sikehish/flaky
  • 716de8d Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI
  • 118fb83 NotSame should fail if args are not pointers #1661 (#1664)
  • 7d99b2b attempt 2
  • 05f87c0 more similar
  • ea7129e better fmt
  • a1b9c9e Merge pull request #1663 from ybrustin/master
  • 8302de9 Merge branch 'master' into master
  • 89352f7 Merge pull request #1518 from hendrywiranto/adjust-readme-remove-v2
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.26.0 to 0.33.0

Commits
  • 9290511 go.mod: update golang.org/x dependencies
  • fa5273e x509roots/fallback: update bundle
  • a8ea4be ssh: add ServerConfig.PreAuthConnCallback, ServerPreAuthConn (banner) interface
  • 71d3a4c acme: support challenges that require the ACME client to send a non-empty JSO...
  • 8929309 go.mod: update golang.org/x dependencies
  • 4a75ba5 all: make function and struct comments match the names
  • b4f1988 ssh: make the public key cache a 1-entry FIFO cache
  • 7042ebc openpgp/clearsign: just use rand.Reader in tests
  • 3e90321 go.mod: update golang.org/x dependencies
  • 8c4e668 x509roots/fallback: update bundle
  • Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.65.0 to 1.70.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.70.0

Behavior Changes

  • client: reject service configs containing an invalid retryPolicy in accordance with gRFCs A21 and A6. (#7905)
    • Note that this is a potential breaking change for some users using an invalid configuration, but continuing to allow this behavior would violate our cross-language compatibility requirements.

New Features

  • xdsclient: fallback to a secondary management server (if specified in the bootstrap configuration) when the primary is down is enabled by default. Can be disabled by setting the environment variable GRPC_EXPERIMENTAL_XDS_FALLBACK to false. (#7949)
  • experimental/credentials: experimental transport credentials are added which don't enforce ALPN. (#7980)
    • These credentials will be removed in an upcoming grpc-go release. Users must not rely on these credentials directly. Instead, they should either vendor a specific version of gRPC or copy the relevant credentials into their own codebase if absolutely necessary.

Bug Fixes

  • xds: fix a possible deadlock that happens when both the client application and the xDS management server (responsible for configuring the client) are using the xds:/// scheme in their target URIs. (#8011)

Performance

  • server: for unary requests, free raw request message data as soon as parsing is finished instead of waiting until the method handler returns. (#7998)

Documentation

  • examples/features/gracefulstop: add example to demonstrate server graceful stop. (#7865)

Release 1.69.4

Bug Fixes

  • rbac: fix support for :path header matchers, which would previously never successfully match (#7965).

Documentation

  • examples/features/csm_observability: update example client and server to use the helloworld service instead of echo service (#7945).

Release 1.69.3 was accidentally tagged on the master branch and will be deleted. Please update to 1.69.4 instead.

Release 1.69.2

Bug Fixes

  • stats/experimental: add type aliases for symbols (Metrics/etc) that were moved to the stats package (#7929).
  • client: set user-agent string to the correct version.

Release 1.69.0

Known Issues

  • The recently added grpc.NewClient function is incompatible with forward proxies, because it resolves the target hostname on the client instead of passing the hostname to the proxy. A fix is expected to be a part of grpc-go v1.70. (#7556)

New Features

  • stats/opentelemetry: Introduce new APIs to enable OpenTelemetry instrumentation for metrics on servers and clients (#7874)
  • xdsclient: add support to fallback to lower priority servers when higher priority ones are down (#7701)
  • dns: Add support for link local IPv6 addresses (#7889)
  • The new experimental pickfirst LB policy (disabled by default) supports Happy Eyeballs, interleaving IPv4 and IPv6 address as described in RFC-8305 section 4, to attempt connections to multiple backends concurrently. The experimental pickfirst policy can be enabled by setting the environment variable GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST to true. (#7725, #7742)

... (truncated)

Commits
  • 98a0092 Change version to 1.70.0 (#7984)
  • bf380de Cherrypick #7998, #8011, #8010 into 1.70.x (#8028)
  • 54b3eb9 experimental/credentials: Add credentials that don't enforce ALPN (#7980) (#8...
  • 62b9185 clustetresolver: Copy endpoints.Addresses slice from DNS updates to avoid dat...
  • 724f450 examples/features/csm_observability: use helloworld client and server instead...
  • e8d5feb rbac: add method name to :path in headers (#7965)
  • e912015 cleanup: Fix usages of non-constant format strings (#7959)
  • 681334a cleanup: replace dial with newclient (#7943)
  • 063d352 internal/resolver: introduce a new resolver to handle target URI and proxy ad...
  • 10c7e13 outlierdetection: Support health listener for ejection updates (#7908)
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.34.2 to 1.35.2

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the all-modules group in /sda-download with 8 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) | `1.55.5` | `1.55.6` |
| [github.com/dgraph-io/ristretto](https://github.com/dgraph-io/ristretto) | `0.1.1` | `0.2.0` |
| [github.com/lestrrat-go/jwx/v2](https://github.com/lestrrat-go/jwx) | `2.1.1` | `2.1.4` |
| [github.com/neicnordic/crypt4gh](https://github.com/neicnordic/crypt4gh) | `1.12.0` | `1.14.0` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.9.0` | `1.10.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.26.0` | `0.33.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.65.0` | `1.70.0` |
| google.golang.org/protobuf | `1.34.2` | `1.35.2` |


Updates `github.com/aws/aws-sdk-go` from 1.55.5 to 1.55.6
- [Release notes](https://github.com/aws/aws-sdk-go/releases)
- [Changelog](https://github.com/aws/aws-sdk-go/blob/main/CHANGELOG_PENDING.md)
- [Commits](aws/aws-sdk-go@v1.55.5...v1.55.6)

Updates `github.com/dgraph-io/ristretto` from 0.1.1 to 0.2.0
- [Release notes](https://github.com/dgraph-io/ristretto/releases)
- [Changelog](https://github.com/hypermodeinc/ristretto/blob/main/CHANGELOG.md)
- [Commits](hypermodeinc/ristretto@v0.1.1...v0.2.0)

Updates `github.com/lestrrat-go/jwx/v2` from 2.1.1 to 2.1.4
- [Release notes](https://github.com/lestrrat-go/jwx/releases)
- [Changelog](https://github.com/lestrrat-go/jwx/blob/v2.1.4/Changes)
- [Commits](lestrrat-go/jwx@v2.1.1...v2.1.4)

Updates `github.com/neicnordic/crypt4gh` from 1.12.0 to 1.14.0
- [Release notes](https://github.com/neicnordic/crypt4gh/releases)
- [Changelog](https://github.com/neicnordic/crypt4gh/blob/master/.goreleaser.yml)
- [Commits](neicnordic/crypt4gh@v1.12.0...v1.14.0)

Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.9.0...v1.10.0)

Updates `golang.org/x/crypto` from 0.26.0 to 0.33.0
- [Commits](golang/crypto@v0.26.0...v0.33.0)

Updates `google.golang.org/grpc` from 1.65.0 to 1.70.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.65.0...v1.70.0)

Updates `google.golang.org/protobuf` from 1.34.2 to 1.35.2

---
updated-dependencies:
- dependency-name: github.com/aws/aws-sdk-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-modules
- dependency-name: github.com/dgraph-io/ristretto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-modules
- dependency-name: github.com/lestrrat-go/jwx/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-modules
- dependency-name: github.com/neicnordic/crypt4gh
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-modules
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-modules
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-modules
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-modules
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team March 3, 2025 19:49
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 3, 2025
@jbygdell jbygdell closed this Mar 4, 2025
Copy link
Contributor Author

dependabot bot commented on behalf of github Mar 4, 2025

This pull request was built based on a group rule. Closing it will not ignore any of these versions in future pull requests.

To ignore these dependencies, configure ignore rules in dependabot.yml

@dependabot dependabot bot deleted the dependabot/go_modules/sda-download/release_v1/all-modules-3408499630 branch March 4, 2025 07:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant