Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): Bump the go group across 1 directory with 18 updates #1686

Merged
merged 4 commits into from
Dec 1, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 25, 2024

Bumps the go group with 11 updates in the / directory:

Package From To
cloud.google.com/go/storage 1.45.0 1.47.0
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys 1.2.0 1.3.0
github.com/ProtonMail/go-crypto 1.1.0-beta.0-proton 1.1.2
github.com/aws/aws-sdk-go-v2 1.32.2 1.32.5
github.com/aws/aws-sdk-go-v2/config 1.28.0 1.28.5
github.com/aws/aws-sdk-go-v2/feature/s3/manager 1.17.34 1.17.40
github.com/aws/aws-sdk-go-v2/service/kms 1.37.2 1.37.6
github.com/stretchr/testify 1.9.0 1.10.0
golang.org/x/net 0.30.0 0.31.0
google.golang.org/api 0.203.0 0.209.0
google.golang.org/grpc 1.67.1 1.68.0

Updates cloud.google.com/go/storage from 1.45.0 to 1.47.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

storage: v1.47.0

1.47.0 (2024-11-14)

Features

  • storage: Introduce dp detector based on grpc metrics (#11100) (60c2323)

Bug Fixes

storage: v1.46.0

1.46.0 (2024-10-31)

Features

  • storage: Add grpc metrics experimental options (#10984) (5b7397b)

Bug Fixes

  • storage: Skip only specific transport tests. (#11016) (d40fbff)
  • storage: Update google.golang.org/api to v0.203.0 (8bb87d5)
  • storage: WARNING: On approximately Dec 1, 2024, an update to Protobuf will change service registration function signatures to use an interface instead of a concrete type in generated .pb.go files. This change is expected to affect very few if any users of this client library. For more information, see googleapis/google-cloud-go#11020. (2b8ca4b)

Miscellaneous Chores

  • storage/internal: Remove notification, service account, and hmac RPCS. These API have been migrated to Storage Control and are available via the JSON API. (#11008) (e0759f4)

pubsub: v1.45.1

1.45.1 (2024-10-24)

Bug Fixes

  • pubsub: Update google.golang.org/api to v0.203.0 (8bb87d5)
  • pubsub: WARNING: On approximately Dec 1, 2024, an update to Protobuf will change service registration function signatures to use an interface instead of a concrete type in generated .pb.go files. This change is expected to affect very few if any users of this client library. For more information, see googleapis/google-cloud-go#11020. (8bb87d5)

Documentation

  • pubsub: Add doc links to top level package doc (#11029) (fe2ec56)
Commits
  • 703c26a chore(main): release spanner 1.47.0 (#7960)
  • b726d41 feat(aiplatform): add UpdateExplanationDataset to aiplatform (#8118)
  • fc49c78 feat(spanner): add databoost property for batch transactions (#8152)
  • 005d2df fix(internal/retry): never return nil from GRPCStatus() (#8128)
  • b429aa1 chore(internal/postprocessor): fix profiler & errorreporting shortnames (#8131)
  • 4e80088 chore(deps): update gax-go and google.golang.org/api (#8117)
  • e43ebeb chore(postprocessor): add update steps (#8103)
  • 72d0127 test: skip flaky test (#8129)
  • 20573e2 chore(postprocessor): fix missing format specifier (#8112)
  • 28aa098 chore(postprocessor): update manual entries (#8111)
  • Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys from 1.2.0 to 1.3.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys's releases.

sdk/resourcemanager/eventhub/armeventhub/v1.3.0

1.3.0 (2024-07-24)

Features Added

  • New value PublicNetworkAccessFlagSecuredByPerimeter added to enum type PublicNetworkAccessFlag
  • New enum type ApplicationGroupPolicyType with values ApplicationGroupPolicyTypeThrottlingPolicy
  • New enum type CaptureIdentityType with values CaptureIdentityTypeSystemAssigned, CaptureIdentityTypeUserAssigned
  • New enum type CleanupPolicyRetentionDescription with values CleanupPolicyRetentionDescriptionCompact, CleanupPolicyRetentionDescriptionDelete
  • New enum type MetricID with values MetricIDIncomingBytes, MetricIDIncomingMessages, MetricIDOutgoingBytes, MetricIDOutgoingMessages
  • New enum type NetworkSecurityPerimeterConfigurationProvisioningState with values NetworkSecurityPerimeterConfigurationProvisioningStateAccepted, NetworkSecurityPerimeterConfigurationProvisioningStateCanceled, NetworkSecurityPerimeterConfigurationProvisioningStateCreating, NetworkSecurityPerimeterConfigurationProvisioningStateDeleted, NetworkSecurityPerimeterConfigurationProvisioningStateDeleting, NetworkSecurityPerimeterConfigurationProvisioningStateFailed, NetworkSecurityPerimeterConfigurationProvisioningStateInvalidResponse, NetworkSecurityPerimeterConfigurationProvisioningStateSucceeded, NetworkSecurityPerimeterConfigurationProvisioningStateSucceededWithIssues, NetworkSecurityPerimeterConfigurationProvisioningStateUnknown, NetworkSecurityPerimeterConfigurationProvisioningStateUpdating
  • New enum type NspAccessRuleDirection with values NspAccessRuleDirectionInbound, NspAccessRuleDirectionOutbound
  • New enum type ProvisioningState with values ProvisioningStateActive, ProvisioningStateCanceled, ProvisioningStateCreating, ProvisioningStateDeleting, ProvisioningStateFailed, ProvisioningStateScaling, ProvisioningStateSucceeded, ProvisioningStateUnknown
  • New enum type PublicNetworkAccess with values PublicNetworkAccessDisabled, PublicNetworkAccessEnabled, PublicNetworkAccessSecuredByPerimeter
  • New enum type ResourceAssociationAccessMode with values ResourceAssociationAccessModeAuditMode, ResourceAssociationAccessModeEnforcedMode, ResourceAssociationAccessModeLearningMode, ResourceAssociationAccessModeNoAssociationMode, ResourceAssociationAccessModeUnspecifiedMode
  • New enum type TLSVersion with values TLSVersionOne0, TLSVersionOne1, TLSVersionOne2
  • New function NewApplicationGroupClient(string, azcore.TokenCredential, *arm.ClientOptions) (*ApplicationGroupClient, error)
  • New function *ApplicationGroupClient.CreateOrUpdateApplicationGroup(context.Context, string, string, string, ApplicationGroup, *ApplicationGroupClientCreateOrUpdateApplicationGroupOptions) (ApplicationGroupClientCreateOrUpdateApplicationGroupResponse, error)
  • New function *ApplicationGroupClient.Delete(context.Context, string, string, string, *ApplicationGroupClientDeleteOptions) (ApplicationGroupClientDeleteResponse, error)
  • New function *ApplicationGroupClient.Get(context.Context, string, string, string, *ApplicationGroupClientGetOptions) (ApplicationGroupClientGetResponse, error)
  • New function *ApplicationGroupClient.NewListByNamespacePager(string, string, *ApplicationGroupClientListByNamespaceOptions) *runtime.Pager[ApplicationGroupClientListByNamespaceResponse]
  • New function *ApplicationGroupPolicy.GetApplicationGroupPolicy() *ApplicationGroupPolicy
  • New function *ClientFactory.NewApplicationGroupClient() *ApplicationGroupClient
  • New function *ClientFactory.NewNetworkSecurityPerimeterConfigurationClient() *NetworkSecurityPerimeterConfigurationClient
  • New function *ClientFactory.NewNetworkSecurityPerimeterConfigurationsClient() *NetworkSecurityPerimeterConfigurationsClient
  • New function *ThrottlingPolicy.GetApplicationGroupPolicy() *ApplicationGroupPolicy
  • New function NewNetworkSecurityPerimeterConfigurationClient(string, azcore.TokenCredential, *arm.ClientOptions) (*NetworkSecurityPerimeterConfigurationClient, error)
  • New function *NetworkSecurityPerimeterConfigurationClient.List(context.Context, string, string, *NetworkSecurityPerimeterConfigurationClientListOptions) (NetworkSecurityPerimeterConfigurationClientListResponse, error)
  • New function NewNetworkSecurityPerimeterConfigurationsClient(string, azcore.TokenCredential, *arm.ClientOptions) (*NetworkSecurityPerimeterConfigurationsClient, error)
  • New function *NetworkSecurityPerimeterConfigurationsClient.BeginCreateOrUpdate(context.Context, string, string, string, *NetworkSecurityPerimeterConfigurationsClientBeginCreateOrUpdateOptions) (*runtime.Poller[NetworkSecurityPerimeterConfigurationsClientCreateOrUpdateResponse], error)
  • New struct ApplicationGroup
  • New struct ApplicationGroupListResult
  • New struct ApplicationGroupProperties
  • New struct CaptureIdentity
  • New struct NetworkSecurityPerimeter
  • New struct NetworkSecurityPerimeterConfiguration
  • New struct NetworkSecurityPerimeterConfigurationList
  • New struct NetworkSecurityPerimeterConfigurationProperties
  • New struct NetworkSecurityPerimeterConfigurationPropertiesProfile
  • New struct NetworkSecurityPerimeterConfigurationPropertiesResourceAssociation
  • New struct NspAccessRule
  • New struct NspAccessRuleProperties
  • New struct NspAccessRulePropertiesSubscriptionsItem
  • New struct ProvisioningIssue
  • New struct ProvisioningIssueProperties
  • New struct RetentionDescription
  • New struct ThrottlingPolicy
  • New field ProvisioningState, SupportsScaling in struct ClusterProperties
  • New field Identity in struct Destination
  • New field MinimumTLSVersion, PublicNetworkAccess in struct EHNamespaceProperties
  • New field RetentionDescription, UserMetadata in struct Properties

... (truncated)

Commits
  • 3a7a4f3 Prepare azcore v1.3.0 for release (#19759)
  • 6a1b839 Request.SetBody() allows overwriting with an empty body (#19754)
  • 5210814 AzureCLICredential reports token expiration time in UTC (#19761)
  • 2679c6b Adding tests for FilterBlobs and fixing encoding issue (#19742)
  • 00a8837 [azeventhubs] Fixing issues with connection and link robustness for Event Hub...
  • 1e67666 Revert "Migrate eng/common (except job-matrix) to Ubuntu 22.04 (#5005)" for p...
  • ca6a318 Sync eng/common directory with azure-sdk-tools for PR 5027 (#19753)
  • 377d008 Updating changelogs for release next week (#19752)
  • 53c0f49 Updating codeowners (#19751)
  • 794c96c Migrate eng/common (except job-matrix) to Ubuntu 22.04 (#19746)
  • Additional commits viewable in compare view

Updates github.com/ProtonMail/go-crypto from 1.1.0-beta.0-proton to 1.1.2

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

Release v1.1.2

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.1...v1.1.2

Release v1.1.2-proton

What's Changed

This release is v1.1.2 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

Release v1.1.1

What's Changed

Full Changelog: ProtonMail/go-crypto@v1.1.0...v1.1.1

Release v1.1.1-proton

What's Changed

This release is v1.1.1 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

Release v1.1.0

What's Changed

This release adds full support for the new version of the OpenPGP standard, RFC 9580. In addition, the release introduces an improved non-backwards compatible v2 API. The API in the openpgp package remains fully backwards compatible while the new v2 API is located in a separate v2 package in openpgp.

For the full changes since v1.0.0, see the previous release notes. For the full changelog, see ProtonMail/go-crypto@v1.0.0...v1.1.0.

Changes since v1.1.0-beta.0:

  • Replace expiring curve448 integration test vector by @​lubux
  • Validate input key size in SEIPDv2 decryption by @​lubux

Changelog since v1.1.0-beta.0: ProtonMail/go-crypto@v1.1.0-beta.0...v1.1.0.

Release v1.1.0-proton

What's Changed

This release is v1.1.0 with support for symmetric keys and automatic forwarding, both of which are not standardized yet.

Commits
  • 2d2c789 feat(cleartext): Do not include line ending separator in plaintext (#242)
  • f8b3f21 Remove cleartext Encode header argument #239 (#240)
  • b97cc3c feat: Validate input key size in SEIPDv2 decryption (#236)
  • 20ab0e4 Replace expiring curve448 integration test vector (#235)
  • ef6d672 Fix SEIPDv2 packet parsing error messages (#215)
  • 4333135 Randomize v4 and v5 signatures via custom notation (#209)
  • 196c8f5 Allow parsing empty Key Flags subpackets (#214)
  • c25e074 Put support for reading v5 packets behind a feature flag (#212)
  • 3df78a3 Restrict S2K types (#213)
  • 3272cd7 ECDH with a v6 key must use the full fingerprint (#211)
  • Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.32.2 to 1.32.5

Commits

Updates github.com/aws/aws-sdk-go-v2/config from 1.28.0 to 1.28.5

Commits

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.41 to 1.17.46

Commits

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.34 to 1.17.40

Commits

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.37.2 to 1.37.6

Commits

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.66.1 to 1.68.0

Commits

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.32.2 to 1.33.1

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/service/sts's changelog.

Release (2023-05-04)

General Highlights

  • Dependency Update: Updated to the latest SDK module versions

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.26.0
    • Feature: Adds support for filtering by metric names in CloudWatch Metric Streams.
  • github.com/aws/aws-sdk-go-v2/service/configservice: v1.32.0
    • Feature: Updated ResourceType enum with new resource types onboarded by AWS Config in April 2023.
  • github.com/aws/aws-sdk-go-v2/service/connect: v1.54.1
    • Documentation: Remove unused InvalidParameterException from CreateParticipant API
  • github.com/aws/aws-sdk-go-v2/service/ecs: v1.27.0
    • Feature: Documentation update for new error type NamespaceNotFoundException for CreateCluster and UpdateCluster
  • github.com/aws/aws-sdk-go-v2/service/networkfirewall: v1.28.0
    • Feature: This release adds support for the Suricata REJECT option in midstream exception configurations.
  • github.com/aws/aws-sdk-go-v2/service/opensearch: v1.17.0
    • Feature: DescribeDomainNodes: A new API that provides configuration information for nodes part of the domain
  • github.com/aws/aws-sdk-go-v2/service/quicksight: v1.35.0
    • Feature: Add support for Topic, Dataset parameters and VPC
  • github.com/aws/aws-sdk-go-v2/service/rekognition: v1.27.0
    • Feature: This release adds a new attribute FaceOccluded. Additionally, you can now select attributes individually (e.g. ["DEFAULT", "FACE_OCCLUDED", "AGE_RANGE"] instead of ["ALL"]), which can reduce response time.
  • github.com/aws/aws-sdk-go-v2/service/s3: v1.33.1
    • Documentation: Documentation updates for Amazon S3
  • github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.77.0
    • Feature: We added support for ml.inf2 and ml.trn1 family of instances on Amazon SageMaker for deploying machine learning (ML) models for Real-time and Asynchronous inference. You can use these instances to achieve high performance at a low cost for generative artificial intelligence (AI) models.
  • github.com/aws/aws-sdk-go-v2/service/securityhub: v1.31.0
    • Feature: Add support for Finding History.
  • github.com/aws/aws-sdk-go-v2/service/sqs: v1.21.0
    • Feature: This release enables customers to call SQS using AWS JSON-1.0 protocol.

Release (2023-05-03)

Module Highlights

  • github.com/aws/aws-sdk-go-v2/service/appsync: v1.20.0
    • Feature: Private API support for AWS AppSync. With Private APIs, you can now create GraphQL APIs that can only be accessed from your Amazon Virtual Private Cloud ("VPC").
  • github.com/aws/aws-sdk-go-v2/service/ec2: v1.96.0
    • Feature: Adds an SDK paginator for GetNetworkInsightsAccessScopeAnalysisFindings
  • github.com/aws/aws-sdk-go-v2/service/inspector2: v1.12.0
    • Feature: This feature provides deep inspection for linux based instance
  • github.com/aws/aws-sdk-go-v2/service/iottwinmaker: v1.12.0
    • Feature: This release adds a field for GetScene API to return error code and message from dependency services.
  • github.com/aws/aws-sdk-go-v2/service/networkfirewall: v1.27.0
    • Feature: AWS Network Firewall now supports policy level HOME_NET variable overrides.
  • github.com/aws/aws-sdk-go-v2/service/opensearch: v1.16.0
    • Feature: Amazon OpenSearch Service adds the option to deploy a domain across multiple Availability Zones, with each AZ containing a complete copy of data and with nodes in one AZ acting as a standby. This option provides 99.99% availability and consistent performance in the event of infrastructure failure.
  • github.com/aws/aws-sdk-go-v2/service/wellarchitected: v1.20.0
    • Feature: This release deepens integration with AWS Service Catalog AppRegistry to improve workload resource discovery.

Release (2023-05-02)

... (truncated)

Commits

Updates github.com/stretchr/testify from 1.9.0 to 1.10.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.10.0

What's Changed

Functional Changes

Fixes

Documantation, Build & CI

New Contributors

... (truncated)

Commits
  • 89cbdd9 Merge pull request #1626 from arjun-1/fix-functional-options-diff-indirect-calls
  • 07bac60 Merge pull request #1667 from sikehish/flaky
  • 716de8d Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI
  • 118fb83 NotSame should fail if args are not pointers #1661 (#1664)
  • 7d99b2b attempt 2
  • 05f87c0 more similar
  • ea7129e better fmt
  • a1b9c9e Merge pull request #1663 from ybrustin/master
  • 8302de9 Merge branch 'master' into master
  • 89352f7 Merge pull request #1518 from hendrywiranto/adjust-readme-remove-v2
  • Additional commits viewable in compare view

Updates golang.org/x/net from 0.30.0 to 0.31.0

Commits
  • 334afa0 go.mod: update golang.org/x dependencies
  • d7f220d quic: add LocalAddr and RemoteAddr to quic.Conn
  • 858db1a http2: surface errors occurring very early in a client conn's lifetime
  • 0aa844c http2: support unencrypted HTTP/2 handoff from net/http
  • f35fec9 http2: detect hung client connections by confirming stream resets
  • e883dae README: don't recommend go get
  • 511cc3a html: add Node.{Ancestors,ChildNodes,Descendants}()
  • 4783315 http2: limit 1xx based on size, do not limit when delivered
  • 5716b98 internal/socket: execute gofmt
  • 42b1186 http2: support ResponseController.EnableFullDuplex
  • See full diff in compare view

Updates golang.org/x/sys from 0.26.0 to 0.27.0

Commits
  • e0753d4 Revert "windows/mkwinsyscall: use syscall.SyscallN instead of syscall.Syscall...
  • c29efe3 windows: add iphlpapi functions for change notifications
  • 8f2aa9f cpu: conditionally re-enable AVX512 support on darwin/amd64
  • 054f1fc README: don't recommend go get
  • ca04041 unix: extend z/OS support
  • 18e038c unix: move NETLINK_* consts to own section
  • d045236 windows: implement Ftruncate using a single syscall on Windows
  • cff53d5 unix: gofmt after CL 610296
  • 123459f unix: update z/OS implementation of fcntl and mmap
  • df4a4da unix/linux: adjust Dockerfile ENV key value format
  • Additional commits viewable in compare view

Updates golang.org/x/term from 0.25.0 to 0.26.0

Commits

Updates google.golang.org/api from 0.203.0 to 0.209.0

Release notes

Sourced from google.golang.org/api's releases.

v0.209.0

0.209.0 (2024-11-21)

Features

v0.208.0

0.208.0 (2024-11-20)

Features

  • all: Auto-regenerate discovery clients (#2881) (44435a9)
  • gensupport: Per-chunk transfer timeout configs (09fa125)
  • gensupport: Per-chunk transfer timeout configs (#2865) (09fa125)

v0.207.0

0.207.0 (2024-11-19)

Features

v0.206.0

0.206.0 (2024-11-14)

Features

  • all: Auto-regenerate discovery clients (#2862) (c552a34)
  • all: Auto-regenerate discovery clients (

@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Nov 25, 2024
@felixfontein felixfontein force-pushed the dependabot/go_modules/go-380d3566d7 branch from 5abb725 to 03d50c2 Compare November 30, 2024 21:06
dependabot bot and others added 2 commits November 30, 2024 22:07
Bumps the go group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [cloud.google.com/go/storage](https://github.com/googleapis/google-cloud-go) | `1.45.0` | `1.47.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys](https://github.com/Azure/azure-sdk-for-go) | `1.2.0` | `1.3.0` |
| [github.com/ProtonMail/go-crypto](https://github.com/ProtonMail/go-crypto) | `1.1.0-beta.0-proton` | `1.1.2` |
| [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.32.2` | `1.32.5` |
| [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.28.0` | `1.28.5` |
| [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.34` | `1.17.40` |
| [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.37.2` | `1.37.6` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.9.0` | `1.10.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.30.0` | `0.31.0` |
| [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.203.0` | `0.209.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.67.1` | `1.68.0` |



Updates `cloud.google.com/go/storage` from 1.45.0 to 1.47.0
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v1.45.0...spanner/v1.47.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys` from 1.2.0 to 1.3.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md)
- [Commits](Azure/azure-sdk-for-go@v1.2...sdk/azcore/v1.3.0)

Updates `github.com/ProtonMail/go-crypto` from 1.1.0-beta.0-proton to 1.1.2
- [Release notes](https://github.com/ProtonMail/go-crypto/releases)
- [Commits](ProtonMail/go-crypto@v1.1.0-beta.0-proton...v1.1.2)

Updates `github.com/aws/aws-sdk-go-v2` from 1.32.2 to 1.32.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.32.2...v1.32.5)

Updates `github.com/aws/aws-sdk-go-v2/config` from 1.28.0 to 1.28.5
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@v1.28.0...config/v1.28.5)

Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.41 to 1.17.46
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.41...credentials/v1.17.46)

Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.34 to 1.17.40
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@credentials/v1.17.34...credentials/v1.17.40)

Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.37.2 to 1.37.6
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/ssm/v1.37.2...service/kms/v1.37.6)

Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.66.1 to 1.68.0
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Commits](aws/aws-sdk-go-v2@service/s3/v1.66.1...service/s3/v1.68.0)

Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.32.2 to 1.33.1
- [Release notes](https://github.com/aws/aws-sdk-go-v2/releases)
- [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/service/s3/v1.33.1/CHANGELOG.md)
- [Commits](aws/aws-sdk-go-v2@v1.32.2...service/s3/v1.33.1)

Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.9.0...v1.10.0)

Updates `golang.org/x/net` from 0.30.0 to 0.31.0
- [Commits](golang/net@v0.30.0...v0.31.0)

Updates `golang.org/x/sys` from 0.26.0 to 0.27.0
- [Commits](golang/sys@v0.26.0...v0.27.0)

Updates `golang.org/x/term` from 0.25.0 to 0.26.0
- [Commits](golang/term@v0.25.0...v0.26.0)

Updates `google.golang.org/api` from 0.203.0 to 0.209.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.203.0...v0.209.0)

Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20241015192408-796eee8c2d53 to 0.0.0-20241113202542-65e8d215514f
- [Commits](https://github.com/googleapis/go-genproto/commits)

Updates `google.golang.org/grpc` from 1.67.1 to 1.68.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.67.1...v1.68.0)

Updates `google.golang.org/protobuf` from 1.35.1 to 1.35.2

---
updated-dependencies:
- dependency-name: cloud.google.com/go/storage
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/ProtonMail/go-crypto
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/config
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/credentials
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/kms
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/s3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/aws/aws-sdk-go-v2/service/sts
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/sys
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/genproto/googleapis/rpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Felix Fontein <felix@fontein.de>
@felixfontein felixfontein force-pushed the dependabot/go_modules/go-380d3566d7 branch from 03d50c2 to 0fb45bf Compare November 30, 2024 21:07
Signed-off-by: Felix Fontein <felix@fontein.de>
Signed-off-by: Felix Fontein <felix@fontein.de>
@felixfontein
Copy link
Contributor

@getsops/maintainers I added a Python script to patch go.mod after running go mod tidy to restore the go/toolchain entries in CI before we verify that there are no changes. Otherwise CI basically always fails. If nobody objects, I'll merge this tomorrow.

.github/utils/patch-go.mod.py Show resolved Hide resolved
.github/workflows/cli.yml Show resolved Hide resolved
Copy link
Contributor

@devstein devstein left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Surprised there isn't an existing solution for this

Heated discussion around this at: golang/go#65847

.github/workflows/cli.yml Show resolved Hide resolved
@felixfontein felixfontein merged commit f76921b into main Dec 1, 2024
15 checks passed
@felixfontein felixfontein deleted the dependabot/go_modules/go-380d3566d7 branch December 1, 2024 08:18
@felixfontein
Copy link
Contributor

@devstein thanks for reviewing this!

tmeijn pushed a commit to tmeijn/dotfiles that referenced this pull request Dec 5, 2024
This MR contains the following updates:

| Package | Update | Change |
|---|---|---|
| [getsops/sops](https://github.com/getsops/sops) | patch | `v3.9.1` -> `v3.9.2` |

MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot).

**Proposed changes to behavior should be submitted there as MRs.**

---

### Release Notes

<details>
<summary>getsops/sops (getsops/sops)</summary>

### [`v3.9.2`](https://github.com/getsops/sops/releases/tag/v3.9.2)

[Compare Source](getsops/sops@v3.9.1...v3.9.2)

#### Installation

To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release.

For instance, if you are using Linux on an AMD64 architecture:

```shell

### Download the binary
curl -LO https://github.com/getsops/sops/releases/download/v3.9.2/sops-v3.9.2.linux.amd64

### Move the binary in to your PATH
mv sops-v3.9.2.linux.amd64 /usr/local/bin/sops

### Make the binary executable
chmod +x /usr/local/bin/sops
```

##### Verify checksums file signature

The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands:

```shell

### Download the checksums file, certificate and signature
curl -LO https://github.com/getsops/sops/releases/download/v3.9.2/sops-v3.9.2.checksums.txt
curl -LO https://github.com/getsops/sops/releases/download/v3.9.2/sops-v3.9.2.checksums.pem
curl -LO https://github.com/getsops/sops/releases/download/v3.9.2/sops-v3.9.2.checksums.sig

### Verify the checksums file
cosign verify-blob sops-v3.9.2.checksums.txt \
  --certificate sops-v3.9.2.checksums.pem \
  --signature sops-v3.9.2.checksums.sig \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com
```

##### Verify binary integrity

To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature:

```shell

### Verify the binary using the checksums file
sha256sum -c sops-v3.9.2.checksums.txt --ignore-missing
```

##### Verify artifact provenance

The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.9.2.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool:

```shell

### Download the metadata file
curl -LO  https://github.com/getsops/sops/releases/download/v3.9.2/sops-v3.9.2.intoto.jsonl

### Verify the provenance of the artifact
slsa-verifier verify-artifact <artifact> \
  --provenance-path sops-v3.9.2.intoto.jsonl \
  --source-uri github.com/getsops/sops \
  --source-tag v3.9.2
```

#### Container Images

The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies.

These container images are available for the following architectures: `linux/amd64` and `linux/arm64`.

##### GitHub Container Registry

-   `ghcr.io/getsops/sops:v3.9.2`
-   `ghcr.io/getsops/sops:v3.9.2-alpine`

##### Quay.io

-   `quay.io/getsops/sops:v3.9.2`
-   `quay.io/getsops/sops:v3.9.2-alpine`

##### Verify container image signature

The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command:

```shell
cosign verify ghcr.io/getsops/sops:v3.9.2 \
  --certificate-identity-regexp=https://github.com/getsops \
  --certificate-oidc-issuer=https://token.actions.githubusercontent.com \
  -o text
```

##### Verify container image provenance

The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers).

#### Software Bill of Materials

The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`.

#### What's Changed

-   build(deps): Bump the go group with 11 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1645
-   build(deps): Bump the ci group with 4 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1644
-   build(deps): Bump the go group with 12 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1649
-   build(deps): Bump the ci group with 5 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1648
-   build(deps): Bump the go group with 6 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1653
-   build(deps): Bump the ci group with 2 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1654
-   build(deps): Bump serde_json from 1.0.128 to 1.0.132 in /functional-tests in the rust group by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1655
-   fix(azkv): handle whitespace in Azure Key Vault URLs by [@&#8203;sEpt0r](https://github.com/sEpt0r) in getsops/sops#1652
-   build(deps): Bump the go group with 7 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1662
-   build(deps): Bump the ci group with 5 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1664
-   build(deps): Bump the rust group in /functional-tests with 2 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1663
-   build(deps): Bump the ci group across 1 directory with 3 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1673
-   build(deps): Bump the rust group in /functional-tests with 2 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1670
-   build(deps): Bump github/codeql-action from 3.27.1 to 3.27.4 in the ci group by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1677
-   build(deps): Bump the rust group in /functional-tests with 3 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1676
-   build(deps): Bump the ci group with 2 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1685
-   build(deps): Bump the go group across 1 directory with 18 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1686
-   Correctly handle comments during JSON serialization by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1647
-   Update Rust dependencies by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1689
-   fix(config): remove unused variables and align error casing by [@&#8203;nicklasfrahm](https://github.com/nicklasfrahm) in getsops/sops#1687
-   keyservice: update protobuf to a recent release, and make go code generation reproducible by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1688
-   build(deps): Bump the go group with 8 updates by [@&#8203;dependabot](https://github.com/dependabot) in getsops/sops#1693
-   Release 3.9.2 by [@&#8203;felixfontein](https://github.com/felixfontein) in getsops/sops#1691

#### New Contributors

-   [@&#8203;sEpt0r](https://github.com/sEpt0r) made their first contribution in getsops/sops#1652
-   [@&#8203;nicklasfrahm](https://github.com/nicklasfrahm) made their first contribution in getsops/sops#1687

**Full Changelog**: getsops/sops@v3.9.1...v3.9.2

</details>

---

### Configuration

📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.

♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 **Ignore**: Close this MR and you won't be reminded about this update again.

---

 - [ ] <!-- rebase-check -->If you want to rebase/retry this MR, check this box

---

This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40NDAuNyIsInVwZGF0ZWRJblZlciI6IjM3LjQ0MC43IiwidGFyZ2V0QnJhbmNoIjoibWFpbiIsImxhYmVscyI6WyJSZW5vdmF0ZSBCb3QiXX0=-->
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants