Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update misc modules - autoclosed #168

Closed
wants to merge 1 commit into from
Closed

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Apr 20, 2023

Mend Renovate

This PR contains the following updates:

Package Type Update Change
github.com/cloudflare/circl replace patch v1.3.3 -> v1.3.5
github.com/containers/image/v5 require minor v5.23.1 -> v5.28.0
github.com/golang-jwt/jwt/v4 replace minor v4.4.3 -> v4.5.0
github.com/prometheus/client_golang require minor v1.14.0 -> v1.17.0
github.com/spf13/cobra require minor v1.6.1 -> v1.7.0
golang.org/x/net replace minor v0.16.0 -> v0.17.0
golang.org/x/sync require minor v0.1.0 -> v0.4.0
google.golang.org/grpc replace minor v1.56.2 -> v1.59.0

Release Notes

cloudflare/circl (github.com/cloudflare/circl)

v1.3.5

Compare Source

v1.3.4

Compare Source

containers/image (github.com/containers/image/v5)

v5.28.0

Compare Source

What's Changed

New Contributors

Full Changelog: containers/image@v5.27.0...v5.28.0

v5.27.0

Compare Source

  • New copy.Options.EnsureCompressionVariantsExist allows creating images that are consumable by existing gzip-only consumers, but include a Zstd-compressed version is preferred by c/image.
  • OCI images using Zstd compression now carry a io.github.containers.compression.zstd annotation in the OCI image index.

v5.26.2

Compare Source

What's Changed

Full Changelog: containers/image@v5.26.1...v5.26.2

v5.26.1

Compare Source

Full Changelog: containers/image@v5.26.0...v5.26.1
[release-5.26] Bump to v5.26.1
[release-5.26] Bump c/storage to 1.48.0

v5.26.0

Compare Source

What's Changed

New Contributors

Full Changelog: containers/image@v5.25.0...v5.26.0

v5.25.0

Compare Source

What's Changed

New Contributors

Full Changelog: containers/image@v5.24.2...v5.25.0

v5.24.2

Compare Source

Relax retry heuristics

v5.24.1

Compare Source

  • Try to reconnect on some aborted layer downloads

v5.24.0

Compare Source

Now supports both creating and verifying sigstore signatures that use
Fulcio and Rekor.
A New API for signing images during copy.
docker-archive: now can read non-seekable streams.
Improved error messages for registry errors.

  • Introduce oci/{archive,layout}.ImageNotFoundError
  • Don't use any default path fallbacks if the user specified a path
  • Introduce signature/sigstore.NewSigner
  • Introduce signature/simplesigning.NewSigner
  • Add pkg/cli/sigstore
  • Add functional-option NewPRSigstoreSigned
  • Add signature/sigstore.GenerateKeyPair
  • Avoid confusion about 404 on lookaside
  • Heuristically warn about lookaside servers serving HTML
  • Add a limit for the total number of signatures in lookaside
  • Update the public.ecr.aws error with current data
  • Add a test for isManifestUnknownError
  • Consolidate handleErrorResponse calls to registryHTTPResponseToError
  • Discard any but the first element of errcode.Errors
  • Add more detailed error tests
  • Make invalid HTTP bodies unwrappable as unexpectedHTTPResponseError
  • Use registryHTTPResponseToError on /tags/list failure
  • Simplify error messages using the default error text
  • Use registryHttpResponseToError in many more places
  • set directory transport destination as thread-safe
  • Recognize invalid error responses of registry.redhat.io
  • Make the pseudo-config used in sigstore attachments a bit more valid
  • Convert TestSignatureStorageBaseURL to table-based
  • Don't call net/url.URL.Parse when we mean net/url.Parse
  • Rename all "url" variables to something else
  • Fix documentation comment of the stubs package
  • Simplify ociReference.getManifestDescriptor
  • Simplify ociReference.getManifestDescriptor a bit
  • Fix typos
  • Remove unnecessary conversions
  • Actually test the caller-requested function
  • Remove ineffective assignments
  • Fix an always-true condition
  • Fix unordered list formatting in containers-policy.json(5)
  • docker/reference: reduce regex compilations
  • docker/reference/regexp.go: constify strings
  • docker/reference.literal: return QuoteMeta directly
  • docker/reference.expression: use strings.Join()
  • Run (gofmt -s)
  • Don't incorrectly report success on failure paths
  • Clarify the semantics of the optional.creator field in simple signature payload
  • Call x509.SystemCertPool directly instead of tlsconfig.SystemCertPool
  • Remove sockets.DialerFromEnvironment
  • Use io.SeekStart instead of a hard-coded 0
  • Add support for non-seekable files in docker-archive: sources
  • Add comments to BlobInfo to warn against adding more edit fields
  • Split test data from TestV1RegistriesConfNonempty and TestV2RegistriesConfNonempty
  • Reject files mixing v1 and v2 registries.conf, even with empty fields
  • Fix a typo
  • Move the "human-readable description" of a helper into setAuthToCredHelper
  • Correctly report a credHelpers location in SetCredentials
  • Add missing documentation of build tags
  • Fix comments about exponential backoff with Retry-After
  • storage source: Don't store small blobs on disk in GetBlob()
  • config: use authPath struct consistently
  • config: Make parsing function a method on authFile
  • storage: Immediately unlink tmpfile
  • Don't duplicate the getPathToAuth rules for user-specified paths in getAuthPaths
  • Move killGPGAgent into a helper package
  • Terminate the GPG agent spawned by c/image/signature tests
  • Speed up pkg/blobcache tests
  • Turn copy.TestCreateSignature into a table-based test
  • Reorder the tests in copy.TestCreateSignature
  • Add a test case for signing dir: with an explicit identity
  • Fix a documentation typo
  • Return a generic signature.Signature from SignDockerManifestWithPrivateKeyFileUnstable
  • Introduce Signer = internal/signer.Signer, and internal/signer.SignerImplementation
  • Introd

Configuration

📅 Schedule: Branch creation - "after 6am on thursday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot requested a review from a team as a code owner April 20, 2023 11:01
@renovate renovate bot added dependencies Pull requests that update a dependency file renovate PR created by RenovateBot labels Apr 20, 2023
@renovate
Copy link
Contributor Author

renovate bot commented Apr 20, 2023

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum
Command failed: docker run --rm --name=renovate_a_sidecar --label=renovate_a_child --memory=3584m -v "/tmp/worker/c6394a/c4234e/repos/github/giantswarm/crsync":"/tmp/worker/c6394a/c4234e/repos/github/giantswarm/crsync" -v "/tmp/worker/c6394a/c4234e/cache":"/tmp/worker/c6394a/c4234e/cache" -e GOPATH -e GOPROXY -e GOSUMDB -e GOFLAGS -e CGO_ENABLED -e GIT_CONFIG_KEY_0 -e GIT_CONFIG_VALUE_0 -e GIT_CONFIG_KEY_1 -e GIT_CONFIG_VALUE_1 -e GIT_CONFIG_KEY_2 -e GIT_CONFIG_VALUE_2 -e GIT_CONFIG_COUNT -e CONTAINERBASE_CACHE_DIR -w "/tmp/worker/c6394a/c4234e/repos/github/giantswarm/crsync" ghcr.io/containerbase/sidecar:9.23.4 bash -l -c "install-tool golang 1.21.3 && go get -d -t ./... && go mod tidy && go mod tidy"
go: downloading github.com/giantswarm/microerror v0.4.0
go: downloading github.com/giantswarm/micrologger v1.0.0
go: downloading github.com/spf13/cobra v1.7.0
go: downloading github.com/prometheus/client_golang v1.17.0
go: downloading golang.org/x/sync v0.4.0
go: downloading golang.org/x/time v0.3.0
go: downloading github.com/containers/image/v5 v5.28.0
go: downloading github.com/go-kit/log v0.2.1
go: downloading github.com/go-logr/logr v1.2.4
go: downloading github.com/go-stack/stack v1.8.1
go: downloading github.com/inconshreveable/mousetrap v1.1.0
go: downloading github.com/spf13/pflag v1.0.5
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.2.0
go: downloading github.com/prometheus/client_model v0.4.1-0.20230718164431-9a2bf3000d16
go: downloading github.com/cespare/xxhash v1.1.0
go: downloading github.com/prometheus/common v0.44.0
go: downloading github.com/prometheus/procfs v0.11.1
go: downloading golang.org/x/sys v0.13.0
go: downloading google.golang.org/protobuf v1.31.0
go: downloading github.com/containers/storage v1.50.1
go: downloading github.com/opencontainers/go-digest v1.0.0
go: downloading github.com/docker/distribution v2.8.2+incompatible
go: downloading github.com/opencontainers/image-spec v1.1.0-rc4
go: downloading github.com/docker/go-connections v0.4.0
go: downloading github.com/sirupsen/logrus v1.9.3
go: downloading golang.org/x/exp v0.0.0-20230817173708-d852ddb80c63
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/go-logfmt/logfmt v0.6.0
go: downloading github.com/matttproud/golang_protobuf_extensions v1.0.4
go: downloading github.com/containers/ocicrypt v1.1.8
go: downloading github.com/containers/libtrust v0.0.0-20230121012942-c1716e8a8d01
go: downloading github.com/docker/docker v24.0.6+incompatible
go: downloading github.com/docker/docker-credential-helpers v0.8.0
go: downloading github.com/hashicorp/go-multierror v1.1.1
go: downloading github.com/BurntSushi/toml v1.3.2
go: downloading github.com/gorilla/mux v1.8.0
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/golang/protobuf v1.5.3
go: downloading github.com/klauspost/compress v1.16.7
go: downloading github.com/klauspost/pgzip v1.2.6
go: downloading github.com/ulikunitz/xz v0.5.11
go: downloading github.com/hashicorp/errwrap v1.1.0
go: downloading github.com/opencontainers/runtime-spec v1.1.0
go: downloading github.com/syndtr/gocapability v0.0.0-20200815063812-42c35b437635
go: downloading github.com/vbatts/tar-split v0.11.5
go: downloading github.com/docker/go-units v0.5.0
go: downloading github.com/opencontainers/runc v1.1.9
go: downloading github.com/json-iterator/go v1.1.12
go: downloading github.com/moby/sys/mountinfo v0.6.2
go: downloading github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd
go: downloading github.com/modern-go/reflect2 v1.0.2
go: github.com/golang-jwt/jwt/v4@v4.5.0 used for two different module paths (github.com/dgrijalva/jwt-go and github.com/golang-jwt/jwt/v4)

@renovate renovate bot force-pushed the renovate/misc-modules branch 2 times, most recently from 4fe1fbb to d8ad8a3 Compare May 4, 2023 17:19
@renovate renovate bot force-pushed the renovate/misc-modules branch 3 times, most recently from 60f9de5 to 2b51305 Compare June 15, 2023 11:34
@renovate renovate bot force-pushed the renovate/misc-modules branch 2 times, most recently from f9e4b5e to f35620f Compare June 30, 2023 13:21
@renovate renovate bot changed the title Update misc modules Update misc modules - autoclosed Oct 26, 2023
@renovate renovate bot closed this Oct 26, 2023
@renovate renovate bot deleted the renovate/misc-modules branch October 26, 2023 12:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file renovate PR created by RenovateBot
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants