Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update module github.com/protonmail/gopenpgp/v2 to v3 #142

Open
wants to merge 1 commit into
base: main
Choose a base branch
from

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 7, 2024

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
github.com/ProtonMail/gopenpgp/v2 v2.8.2 -> v3.1.2 age adoption passing confidence

Release Notes

ProtonMail/gopenpgp (github.com/ProtonMail/gopenpgp/v2)

v3.1.2

Compare Source

What's Changed

Changed
  • Update go-crypto fork to v1.1.5

Full Changelog: ProtonMail/gopenpgp@v3.1.1...v3.1.2

v3.1.1

Compare Source

What's Changed

Changed
  • Update go-crypto fork to v1.1.4

Full Changelog: ProtonMail/gopenpgp@v3.1.0...v3.1.1

v3.1.0

Compare Source

What's Changed

Added
Changed

Full Changelog: ProtonMail/gopenpgp@v3.0.0...v3.1.0

v3.0.0

Compare Source

What's Changed

New simplified and unified API

GopenPGP v3 introduces a new unified API for high level OpenPGP operations. In comparison to GopenPGP v2, where similar functions were dispersed across different types and required varying implementations for the same operations, GopenPGP v3 consolidates these functions into a consistent interface. Now, operations such as Sign, Verify, Encrypt, Decrypt, and Key generation are each accessible through a unified, builder like API, simplifying integration and enhancing code readability across cryptographic workflows.

However, applications migrating from v2 to v3 will need to update their API calls, as the changes are not backward-compatible. This means that all previous API calls must be rewritten to align with the new, unified API structure. GopenPGP v3 supports the migration process by offering extensive documentation and practical examples. We recommend upgrading to v3 for the latest features and improvements, but we'll continue to support GopenPGP v2 for the time being. Our support includes ongoing bug fixes and minor feature updates to ensure stability and functionality for existing users.

For usage examples of the new API, see the README. For the full documentation, see https://pkg.go.dev/github.com/ProtonMail/gopenpgp/v3.

Profiles

GopenPGP v3 introduces the concept of profiles, enabling applications to configure OpenPGP algorithm selection based on their specific needs. For most applications, the provided preset profiles offer robust and secure defaults, eliminating the need for additional configuration.

RFC 9580 and Interoperability

GopenPGP v3 adds full support for the latest OpenPGP specification, RFC 9580. Compliance with the specification has also been significantly enhanced, as confirmed by the results in the OpenPGP interoperability test suite. These enhancements in GopenPGP v3 are possible by leveraging a new API in the go-crypto fork, which enables a range of improvements in functionality, compliance, and performance.

Go Mobile Support

GopenPGP v3 aims to be fully compatible with Gomobile to provide an API for mobile platforms. For this reason, the library defaults to a builder-like pattern, which is less commonly used in Go. All code that is only relevant for mobile platforms has been moved to the mobile module.

Extending Functionality

GopenPGP v3 introduces a streaming interface across all APIs, enabling memory efficient processing of large data.
Additionally, it extends the library's functionality with various improvements, such as:

  • Consider all signatures in a message during verification and allow inspection of each.
  • Support signing with multiple keys.
  • Support encrypting to an "anonymous recipient", where the recipient KeyID is represented as all zeros in the message.
  • Add support for the intended recipient feature as specified in RFC 9580.
  • Ensure consistent behaviour across all APIs.
  • Support generating v6 keys as specified in RFC 9580.

Full Changelog: ProtonMail/gopenpgp@v2.7.5...v3.0.0.

Changelog since v3.0.0-beta.0: ProtonMail/gopenpgp@v3.0.0-beta.0...v3.0.0.


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

Copy link
Contributor Author

renovate bot commented Nov 7, 2024

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: mod upgrade --mod-name=github.com/ProtonMail/gopenpgp/v2 -t=3
go: downloading github.com/ProtonMail/gopenpgp/v3 v3.1.2
go: downloading gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c
go: downloading github.com/google/go-cmp v0.6.0
go: downloading github.com/kr/pretty v0.3.1
go: downloading github.com/codahale/rfc6979 v0.0.0-20141003034818-6a90f24967eb
go: downloading go.uber.org/goleak v1.3.0
go: downloading github.com/AdamKorcz/go-fuzz-headers-1 v0.0.0-20230919221257-8b5d3ce2d11d
go: downloading github.com/go-test/deep v1.1.1
go: downloading github.com/frankban/quicktest v1.14.6
go: downloading github.com/kr/text v0.2.0
go: downloading github.com/rogpeppe/go-internal v1.12.0
go: downloading go.opentelemetry.io/otel/sdk v1.29.0
go: downloading github.com/sassoftware/relic/v7 v7.6.2
go: downloading github.com/google/trillian v1.6.0
go: downloading github.com/google/tink/go v1.7.0
go: downloading github.com/sigstore/sigstore/pkg/signature/kms/aws v1.8.8
go: downloading github.com/sigstore/sigstore/pkg/signature/kms/azure v1.8.8
go: downloading github.com/sigstore/sigstore/pkg/signature/kms/gcp v1.8.8
go: downloading github.com/sigstore/sigstore/pkg/signature/kms/hashivault v1.8.8
go: downloading go.step.sm/crypto v0.51.2
go: downloading github.com/awslabs/amazon-ecr-credential-helper/ecr-login v0.0.0-20231024185945-8841054dbdb8
go: downloading github.com/chrismellard/docker-credential-acr-env v0.0.0-20230304212654-82a0ddb27589
go: downloading github.com/mozillazg/docker-credential-acr-helper v0.4.0
go: downloading sigs.k8s.io/release-utils v0.8.4
go: downloading github.com/sigstore/sigstore-go v0.6.1
go: downloading gotest.tools/v3 v3.0.3
go: downloading gotest.tools v2.2.0+incompatible
go: downloading github.com/hashicorp/go-hclog v1.6.3
go: downloading software.sslmate.com/src/go-pkcs12 v0.4.0
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20240903143218-8af14fe29dc1
go: downloading google.golang.org/genproto v0.0.0-20240903143218-8af14fe29dc1
go: downloading google.golang.org/grpc v1.66.0
go: downloading github.com/jmhodges/clock v1.2.0
go: downloading github.com/prometheus/client_golang v1.20.2
go: downloading github.com/prometheus/client_model v0.6.1
go: downloading github.com/onsi/ginkgo v1.16.5
go: downloading github.com/onsi/gomega v1.29.0
go: downloading github.com/aws/aws-sdk-go v1.55.5
go: downloading google.golang.org/api v0.196.0
go: downloading github.com/hashicorp/vault/api v1.14.0
go: downloading github.com/aws/aws-sdk-go-v2 v1.30.5
go: downloading github.com/aws/aws-sdk-go-v2/config v1.27.33
go: downloading github.com/aws/aws-sdk-go-v2/service/kms v1.35.7
go: downloading github.com/jellydator/ttlcache/v3 v3.2.0
go: downloading github.com/Azure/azure-sdk-for-go/sdk/azcore v1.14.0
go: downloading github.com/Azure/azure-sdk-for-go v68.0.0+incompatible
go: downloading github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.7.0
go: downloading github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.1.0
go: downloading github.com/go-jose/go-jose/v3 v3.0.3
go: downloading cloud.google.com/go/kms v1.19.0
go: downloading cloud.google.com/go v0.115.1
go: downloading github.com/Azure/go-autorest/autorest/azure/auth v0.5.12
go: downloading github.com/Azure/go-autorest/autorest v0.11.29
go: downloading github.com/Azure/go-autorest v14.2.0+incompatible
go: downloading github.com/common-nighthawk/go-figure v0.0.0-20210622060536-734e95fb86be
go: downloading github.com/sigstore/fulcio v1.6.3
go: downloading cuelang.org/go v0.9.2
go: downloading github.com/go-piv/piv-go v1.11.0
go: downloading github.com/open-policy-agent/opa v0.68.0
go: downloading github.com/in-toto/attestation v1.1.0
go: downloading github.com/fatih/color v1.16.0
go: downloading github.com/mattn/go-colorable v0.1.13
go: downloading github.com/mattn/go-isatty v0.0.20
go: downloading github.com/howeyc/gopass v0.0.0-20210920133722-c8aef6fb66ef
go: downloading github.com/zalando/go-keyring v0.2.3
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.3.0
go: downloading github.com/cespare/xxhash v1.1.0
go: downloading github.com/prometheus/common v0.55.0
go: downloading github.com/prometheus/procfs v0.15.1
go: downloading cloud.google.com/go/compute/metadata v0.5.0
go: downloading cloud.google.com/go/compute v1.25.1
go: downloading cloud.google.com/go/auth v0.9.3
go: downloading github.com/cenkalti/backoff/v3 v3.2.2
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/hashicorp/go-rootcerts v1.0.2
go: downloading github.com/hashicorp/go-secure-stdlib/parseutil v0.1.7
go: downloading github.com/hashicorp/go-secure-stdlib/strutil v0.1.2
go: downloading github.com/aws/smithy-go v1.20.4
go: downloading github.com/aws/aws-sdk-go-v2/credentials v1.17.32
go: downloading github.com/aws/aws-sdk-go-v2/feature/ec2/imds v1.16.13
go: downloading github.com/aws/aws-sdk-go-v2/internal/ini v1.8.1
go: downloading github.com/aws/aws-sdk-go-v2/service/sso v1.22.7
go: downloading github.com/aws/aws-sdk-go-v2/service/ssooidc v1.26.7
go: downloading github.com/aws/aws-sdk-go-v2/service/sts v1.30.7
go: downloading github.com/aws/aws-sdk-go-v2/internal/configsources v1.3.17
go: downloading github.com/Azure/azure-sdk-for-go/sdk/internal v1.10.0
go: downloading github.com/AzureAD/microsoft-authentication-library-for-go v1.2.2
go: downloading github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.0.0
go: downloading cloud.google.com/go/iam v1.2.0
go: downloading cloud.google.com/go/longrunning v0.6.0
go: downloading github.com/googleapis/gax-go/v2 v2.13.0
go: downloading filippo.io/edwards25519 v1.1.0
go: downloading github.com/aws/aws-sdk-go-v2/service/ecr v1.20.2
go: downloading github.com/aws/aws-sdk-go-v2/service/ecrpublic v1.18.2
go: downloading github.com/Azure/go-autorest/autorest/adal v0.9.23
go: downloading github.com/Azure/go-autorest/autorest/azure/cli v0.4.6
go: downloading github.com/Azure/go-autorest/logger v0.2.1
go: downloading github.com/dimchansky/utfbom v1.1.1
go: downloading github.com/AliyunContainerService/ack-ram-tool/pkg/credentials/provider v0.14.0
go: downloading github.com/alibabacloud-go/cr-20160607 v1.0.1
go: downloading github.com/alibabacloud-go/cr-20181201 v1.0.10
go: downloading github.com/alibabacloud-go/darabonba-openapi v0.2.1
go: downloading github.com/alibabacloud-go/tea-utils v1.4.5
go: downloading github.com/alibabacloud-go/tea v1.2.1
go: downloading github.com/aliyun/credentials-go v1.3.2
go: downloading github.com/coreos/go-oidc/v3 v3.11.0
go: downloading github.com/coreos/go-oidc v2.1.0+incompatible
go: downloading github.com/segmentio/ksuid v1.0.4
go: downloading github.com/skratchdot/open-golang v0.0.0-20200116055534-eef842397966
go: downloading github.com/theupdateframework/go-tuf/v2 v2.0.1
go: downloading github.com/alessio/shellescape v1.4.1
go: downloading github.com/danieljoos/wincred v1.2.0
go: downloading github.com/godbus/dbus/v5 v5.1.0
go: downloading github.com/nxadm/tail v1.4.11
go: downloading github.com/jmespath/go-jmespath v0.4.0
go: downloading cloud.google.com/go/auth/oauth2adapt v0.2.4
go: downloading github.com/google/s2a-go v0.1.8
go: downloading go.opencensus.io v0.24.0
go: downloading go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.54.0
go: downloading github.com/hashicorp/go-sockaddr v1.0.5
go: downloading github.com/ryanuber/go-glob v1.0.0
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/accept-encoding v1.11.4
go: downloading github.com/aws/aws-sdk-go-v2/service/internal/presigned-url v1.11.19
go: downloading github.com/aws/aws-sdk-go-v2/internal/endpoints/v2 v2.6.17
go: downloading github.com/kylelemons/godebug v1.1.0
go: downloading github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c
go: downloading go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.54.0
go: downloading github.com/Azure/go-autorest/tracing v0.6.0
go: downloading github.com/Azure/go-autorest/autorest/date v0.3.0
go: downloading github.com/golang-jwt/jwt/v4 v4.5.0
go: downloading github.com/alibabacloud-go/endpoint-util v1.1.1
go: downloading github.com/alibabacloud-go/openapi-util v0.1.0
go: downloading github.com/alibabacloud-go/alibabacloud-gateway-spi v0.0.4
go: downloading github.com/alibabacloud-go/tea-xml v1.1.3
go: downloading github.com/alibabacloud-go/debug v1.0.0
go: downloading github.com/buildkite/agent/v3 v3.81.0
go: downloading github.com/spiffe/go-spiffe/v2 v2.3.0
go: downloading github.com/cockroachdb/apd/v3 v3.2.1
go: downloading cuelabs.dev/go/oci/ociregistry v0.0.0-20240404174027-a39bec0462d2
go: downloading github.com/OneOfOne/xxhash v1.2.8
go: downloading github.com/gobwas/glob v0.2.3
go: downloading github.com/rcrowley/go-metrics v0.0.0-20201227073835-cf1acfcdf475
go: downloading github.com/gorilla/mux v1.8.1
go: downloading github.com/tchap/go-patricia/v2 v2.3.1
go: downloading github.com/yashtewari/glob-intersection v0.2.0
go: downloading gopkg.in/tomb.v1 v1.0.0-20141024135613-dd632973f1e7
go: downloading github.com/googleapis/enterprise-certificate-proxy v0.3.3
go: downloading github.com/felixge/httpsnoop v1.0.4
go: downloading github.com/golang-jwt/jwt/v5 v5.2.1
go: downloading github.com/tjfoc/gmsm v1.4.1
go: downloading github.com/clbanning/mxj/v2 v2.7.0
go: downloading github.com/buildkite/go-pipeline v0.13.1
go: downloading github.com/buildkite/roko v1.2.0
go: downloading github.com/pborman/uuid v1.2.1
go: downloading github.com/zeebo/errs v1.3.0
go: downloading github.com/Microsoft/go-winio v0.6.2
go: downloading github.com/emicklei/proto v1.12.1
go: downloading github.com/protocolbuffers/txtpbfmt v0.0.0-20231025115547-084445ff1adf
go: downloading github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415
go: downloading github.com/go-ini/ini v1.67.0
go: downloading github.com/agnivade/levenshtein v1.1.1
go: downloading github.com/onsi/ginkgo/v2 v2.13.0
go: downloading github.com/golang/groupcache v0.0.0-20210331224755-41bb18bfe9da
go: downloading github.com/buildkite/interpolate v0.1.3
go: downloading github.com/oleiade/reflections v1.1.0
go: downloading github.com/mitchellh/go-wordwrap v1.0.1
go: downloading github.com/xeipuuv/gojsonpointer v0.0.0-20190905194746-02993c407bfb
go: downloading github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572
go: downloading golang.org/x/tools v0.23.0
go: downloading github.com/google/pprof v0.0.0-20231023181126-ff6d637d2a7b
go: finding module for package github.com/ProtonMail/gopenpgp/v3/helper
go: github.com/ekristen/cast/pkg/utils imports
	github.com/ProtonMail/gopenpgp/v3/helper: module github.com/ProtonMail/gopenpgp/v3@latest found (v3.1.2), but does not contain package github.com/ProtonMail/gopenpgp/v3/helper
exit status 1

@renovate renovate bot force-pushed the renovate/git.luolix.top-protonmail-gopenpgp-v2-3.x branch from 54de016 to 19113b5 Compare November 7, 2024 18:11
@renovate renovate bot force-pushed the renovate/git.luolix.top-protonmail-gopenpgp-v2-3.x branch 2 times, most recently from 77a3567 to 4679921 Compare November 26, 2024 17:14
@renovate renovate bot force-pushed the renovate/git.luolix.top-protonmail-gopenpgp-v2-3.x branch 2 times, most recently from 47558e2 to f9a4e67 Compare January 7, 2025 17:54
@renovate renovate bot force-pushed the renovate/git.luolix.top-protonmail-gopenpgp-v2-3.x branch from f9a4e67 to cadcf4a Compare January 15, 2025 17:08
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants