Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update go updates #16

Merged
merged 1 commit into from Feb 13, 2024
Merged

Update go updates #16

merged 1 commit into from Feb 13, 2024

Conversation

platform-engineering-bot
Copy link
Contributor

@platform-engineering-bot platform-engineering-bot commented Dec 11, 2023

This PR contains the following updates:

Package Type Update Change
github.com/emicklei/go-restful indirect major v2.9.5+incompatible -> v3.11.2
github.com/go-logr/logr indirect minor v1.2.4 -> v1.4.1
github.com/go-openapi/jsonpointer indirect minor v0.19.6 -> v0.20.2
github.com/go-openapi/jsonreference indirect patch v0.20.2 -> v0.20.4
github.com/go-openapi/swag indirect patch v0.22.3 -> v0.22.9
github.com/google/gnostic indirect minor v0.5.7-v3refs -> v0.7.0
github.com/google/go-cmp indirect minor v0.5.9 -> v0.6.0
golang.org/x/net indirect minor v0.17.0 -> v0.21.0
golang.org/x/oauth2 indirect minor v0.8.0 -> v0.17.0
golang.org/x/sys indirect minor v0.13.0 -> v0.17.0
golang.org/x/term indirect minor v0.13.0 -> v0.17.0
golang.org/x/text indirect minor v0.13.0 -> v0.14.0
golang.org/x/time indirect minor v0.3.0 -> v0.5.0
google.golang.org/appengine indirect major v1.6.7 -> v2.0.5
google.golang.org/protobuf indirect minor v1.31.0 -> v1.32.0
gopkg.in/yaml.v2 indirect major v2.4.0 -> v3.0.1
k8s.io/klog/v2 indirect minor v2.100.1 -> v2.120.1
k8s.io/kube-openapi indirect digest 3ee0da9 -> 7a0d5b4
k8s.io/utils indirect digest d93618c -> e7106e6
sigs.k8s.io/structured-merge-diff/v4 indirect minor v4.2.3 -> v4.4.1
sigs.k8s.io/yaml indirect minor v1.3.0 -> v1.4.0

Release Notes

emicklei/go-restful (github.com/emicklei/go-restful)

v3.11.2

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.1

Compare Source

  • fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.0

Compare Source

  • restored behavior as <= v3.9.0 with option to change path strategy using TrimRightSlashEnabled.

v3.10.2

Compare Source

  • introduced MergePathStrategy to be able to revert behaviour of path concatenation to 3.9.0
    see comment in Readme how to customize this behaviour.

v3.10.1

Compare Source

  • fix broken 3.10.0 by using path package for joining paths

v3.10.0

Compare Source

  • changed tokenizer to match std route match behavior; do not trimright the path (#​511)
  • Add MIME_ZIP (#​512)
  • Add MIME_ZIP and HEADER_ContentDisposition (#​513)
  • Changed how to get query parameter issue #​510

v3.9.0

Compare Source

v3.8.0

Compare Source

  • use exact matching of allowed domain entries, issue #​489 (#​493)
    • this changes fixes [security] Authorization Bypass Through User-Controlled Key
      by changing the behaviour of the AllowedDomains setting in the CORS filter.
      To support the previous behaviour, the CORS filter type now has a AllowedDomainFunc
      callback mechanism which is called when a simple domain match fails.
  • add test and fix for POST without body and Content-type, issue #​492 (#​496)
  • [Minor] Bad practice to have a mix of Receiver types. (#​491)

v3.7.4

Compare Source

v3.7.3

Compare Source

v3.7.2

Compare Source

  • restored FilterChain (#​482 by SVilgelm)

v3.7.1

Compare Source

  • fix problem with contentEncodingEnabled setting (#​479)

v3.7.0

Compare Source

  • feat(parameter): adds additional openapi mappings (#​478)

v3.6.0

Compare Source

  • add support for vendor extensions (#​477 thx erraggy)

v3.5.2

Compare Source

  • fix removing absent route from webservice (#​472)

v3.5.1

Compare Source

  • fix handling no match access selected path
  • remove obsolete field

v3.5.0

Compare Source

v3.4.0

Compare Source

  • Added OPTIONS to WebService

v3.3.3

Compare Source

v3.3.1

Compare Source

  • Added check on writer to prevent compression of response twice. #​447

v3.3.0

Compare Source

  • Enable content encoding on Handle and ServeHTTP (#​446)
  • List available representations in 406 body (#​437)
  • Convert to string using rune() (#​443)

v3.2.0

Compare Source

v3.1.0

Compare Source

  • support describing response headers (#​426)
  • fix openapi examples (#​425)

v3.0.0

  • fix: use request/response resulting from filter chain
  • add Go module
    Module consumer should use github.com/emicklei/go-restful/v3 as import path

v2.10.0

  • support for Custom Verbs (thanks Vinci Xu <277040271@​qq.com>)
  • fixed static example (thanks Arthur yang_yapo@126.com)
  • simplify code (thanks Christian Muehlhaeuser muesli@gmail.com)
  • added JWT HMAC with SHA-512 authentication code example (thanks Amim Knabben amim.knabben@gmail.com)

v2.9.6

  • small optimization in filter code

v2.11.1

  • fix WriteError return value (#​415)

v2.11.0

  • allow prefix and suffix in path variable expression (#​414)

v2.9.6

  • support google custome verb (#​413)

v2.9.5

  • fix panic in Response.WriteError if err == nil

v2.9.4

  • fix issue #​400 , parsing mime type quality
  • Route Builder added option for contentEncodingEnabled (#​398)

v2.9.3

  • Avoid return of 415 Unsupported Media Type when request body is empty (#​396)

v2.9.2

  • Reduce allocations in per-request methods to improve performance (#​395)

v2.9.1

  • Fix issue with default responses and invalid status code 0. (#​393)

v2.9.0

  • add per Route content encoding setting (overrides container setting)

v2.8.0

  • add Request.QueryParameters()
  • add json-iterator (via build tag)
  • disable vgo module (until log is moved)

v2.7.1

  • add vgo module

v2.6.1

  • add JSONNewDecoderFunc to allow custom JSON Decoder usage (go 1.10+)

v2.6.0

  • Make JSR 311 routing and path param processing consistent
  • Adding description to RouteBuilder.Reads()
  • Update example for Swagger12 and OpenAPI

2017-09-13

  • added route condition functions using .If(func) in route building.

2017-02-16

  • solved issue #​304, make operation names unique

2017-01-30

[IMPORTANT] For swagger users, change your import statement to:	
swagger "github.com/emicklei/go-restful-swagger12"
  • moved swagger 1.2 code to go-restful-swagger12
  • created TAG 2.0.0

2017-01-27

  • remove defer request body close
  • expose Dispatch for testing filters and Routefunctions
  • swagger response model cannot be array
  • created TAG 1.0.0

2016-12-22

  • (API change) Remove code related to caching request content. Removes SetCacheReadEntity(doCache bool)

2016-11-26

  • Default change! now use CurlyRouter (was RouterJSR311)
  • Default change! no more caching of request content
  • Default change! do not recover from panics

2016-09-22

  • fix the DefaultRequestContentType feature

2016-02-14

  • take the qualify factor of the Accept header mediatype into account when deciding the contentype of the response
  • add constructors for custom entity accessors for xml and json

2015-09-27

  • rename new WriteStatusAnd... to WriteHeaderAnd... for consistency

2015-09-25

  • fixed problem with changing Header after WriteHeader (issue 235)

2015-09-14

  • changed behavior of WriteHeader (immediate write) and WriteEntity (no status write)
  • added support for custom EntityReaderWriters.

2015-08-06

  • add support for reading entities from compressed request content
  • use sync.Pool for compressors of http response and request body
  • add Description to Parameter for documentation in Swagger UI

2015-03-20

  • add configurable logging

2015-03-18

  • if not specified, the Operation is derived from the Route function

2015-03-17

  • expose Parameter creation functions
  • make trace logger an interface
  • fix OPTIONSFilter
  • customize rendering of ServiceError
  • JSR311 router now handles wildcards
  • add Notes to Route

2014-11-27

  • (api add) PrettyPrint per response. (as proposed in #​167)

2014-11-12

  • (api add) ApiVersion(.) for documentation in Swagger UI

2014-11-10

  • (api change) struct fields tagged with "description" show up in Swagger UI

2014-10-31

  • (api change) ReturnsError -> Returns
  • (api add) RouteBuilder.Do(aBuilder) for DRY use of RouteBuilder
  • fix swagger nested structs
  • sort Swagger response messages by code

2014-10-23

  • (api add) ReturnsError allows you to document Http codes in swagger
  • fixed problem with greedy CurlyRouter
  • (api add) Access-Control-Max-Age in CORS
  • add tracing functionality (injectable) for debugging purposes
  • support JSON parse 64bit int
  • fix empty parameters for swagger
  • WebServicesUrl is now optional for swagger
  • fixed duplicate AccessControlAllowOrigin in CORS
  • (api change) expose ServeMux in container
  • (api add) added AllowedDomains in CORS
  • (api add) ParameterNamed for detailed documentation

2014-04-16

  • (api add) expose constructor of Request for testing.

2014-06-27

  • (api add) ParameterNamed gives access to a Parameter definition and its data (for further specification).
  • (api add) SetCacheReadEntity allow scontrol over whether or not the request body is being cached (default true for compatibility reasons).

2014-07-03

  • (api add) CORS can be configured with a list of allowed domains

2014-03-12

  • (api add) Route path parameters can use wildcard or regular expressions. (requires CurlyRouter)

2014-02-26

  • (api add) Request now provides information about the matched Route, see method SelectedRoutePath

2014-02-17

  • (api change) renamed parameter constants (go-lint checks)

2014-01-10

2014-01-07

  • (api change) Write* methods in Response now return the error or nil.
  • added example of serving HTML from a Go template.
  • fixed comparing Allowed headers in CORS (is now case-insensitive)

2013-11-13

  • (api add) Response knows how many bytes are written to the response body.

2013-10-29

  • (api add) RecoverHandler(handler RecoverHandleFunction) to change how panic recovery is handled. Default behavior is to log and return a stacktrace. This may be a security issue as it exposes sourcecode information.

2013-10-04

  • (api add) Response knows what HTTP status has been written
  • (api add) Request can have attributes (map of string->interface, also called request-scoped variables

2013-09-12

  • (api change) Router interface simplified
  • Implemented CurlyRouter, a Router that does not use|allow regular expressions in paths

2013-08-05

  • add OPTIONS support
  • add CORS support

2013-08-27

  • fixed some reported issues (see github)
  • (api change) deprecated use of WriteError; use WriteErrorString instead

2014-04-15

  • (fix) v1.0.1 tag: fix Issue 111: WriteErrorString

2013-08-08

  • (api add) Added implementation Container: a WebServices collection with its own http.ServeMux allowing multiple endpoints per program. Existing uses of go-restful will register their services to the DefaultContainer.
  • (api add) the swagger package has be extended to have a UI per container.
  • if panic is detected then a small stack trace is printed (thanks to runner-mei)
  • (api add) WriteErrorString to Response

Important API changes:

  • (api remove) package variable DoNotRecover no longer works ; use restful.DefaultContainer.DoNotRecover(true) instead.

  • (api remove) package variable EnableContentEncoding no longer works ; use restful.DefaultContainer.EnableContentEncoding(true) instead.

2013-07-06

  • (api add) Added support for response encoding (gzip and deflate(zlib)). This feature is disabled on default (for backwards compatibility). Use restful.EnableContentEncoding = true in your initialization to enable this feature.

2013-06-19

  • (improve) DoNotRecover option, moved request body closer, improved ReadEntity

2013-06-03

  • (api change) removed Dispatcher interface, hide PathExpression
  • changed receiver names of type functions to be more idiomatic Go

2013-06-02

  • (optimize) Cache the RegExp compilation of Paths.

2013-05-22

  • (api add) Added support for request/response filter functions

2013-05-18

  • (api add) Added feature to change the default Http Request Dispatch function (travis cline)
  • (api change) Moved Swagger Webservice to swagger package (see example restful-user)

[2012-11-14 .. 2013-05-18>

2012-11-14

  • Initial commit

v3.0.1

Compare Source

v3.0.0

Compare Source

v2.16.0+incompatible

Compare Source

v2.15.0+incompatible

Compare Source

v2.14.3+incompatible

Compare Source

v2.14.2+incompatible

Compare Source

v2.14.1+incompatible

Compare Source

v2.14.0+incompatible

Compare Source

v2.13.0+incompatible

Compare Source

v2.12.0+incompatible

Compare Source

v2.11.2+incompatible

Compare Source

v2.11.1+incompatible

Compare Source

v2.11.0+incompatible

Compare Source

v2.10.0+incompatible

Compare Source

v2.9.6+incompatible

Compare Source

go-logr/logr (github.com/go-logr/logr)

v1.4.1

Compare Source

What's Changed

Full Changelog: go-logr/logr@v1.4.0...v1.4.1

v1.4.0

Compare Source

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

New Contributors

Full Changelog: go-logr/logr@v1.3.0...v1.4.0

v1.3.0

Compare Source

This release adds support for slog in a new, self-contained logr/slogr package. Implementers of a logr.LogSink are encouraged, but not required, to extend their implementation to improve the quality of log output coming from a slog API call.

Breaking change: the call depth for LogSink.Enabled when called via Logger.Enabled was fixed to be the same as for other call paths. Implementers of a LogSink who have worked around this bug will need to remove their workarounds.

Security best practices were improved. Only Go versions >= 1.18 are supported by this release.

What's Changed


New Contributors

Full Changelog: go-logr/logr@v1.2.4...v1.3.0

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.20.2

Compare Source

v0.20.1

Compare Source

v0.20.0

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.20.4

Compare Source

v0.20.3

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

v0.22.9

Compare Source

v0.22.8

Compare Source

v0.22.7

Compare Source

v0.22.6

Compare Source

v0.22.5

Compare Source

v0.22.4

Compare Source

google/gnostic (github.com/google/gnostic)

v0.7.0

Compare Source

v0.6.9

Compare Source

v0.6.8: protoc-gen-openapi and export improvements.

Compare Source

This contains several improvements to protoc-gen-openapi from @​jeffsawatzky , including the ability to use proto annotations to add fragments to generated OpenAPI documents (#​324). It also adds some missing OpenAPI compiler code that Jeff uncovered when testing the new fragment overlay feature - maps of strings were not properly exported in ToRawInfo() methods in both OpenAPI packages (v2 and v3). Thanks, Jeff!

v0.6.7

Compare Source

v0.6.6: Module cleanup

Compare Source

We had a series of problems related to a multi-module configuration and its reversion that all now appear to be fixed in this release. Individual components in the cmd directory are now (again) part of the main module and can be independently installed with the following:

go install github.com/google/gnostic/cmd/disco@latest
go install github.com/google/gnostic/cmd/parse-linter-output@latest
go install github.com/google/gnostic/cmd/petstore-builder@latest
go install github.com/google/gnostic/cmd/protoc-gen-jsonschema@latest
go install github.com/google/gnostic/cmd/protoc-gen-openapi@latest
go install github.com/google/gnostic/cmd/report@latest
go install github.com/google/gnostic/cmd/report-messages@latest
go install github.com/google/gnostic/cmd/vocabulary-operations@latest

Verified with Go 1.16, 1.17, and 1.18beta1.

v0.6.5

Compare Source

v0.6.4

Compare Source

v0.6.3

Compare Source

v0.6.2: Single-module repo with retraction of v0.6.0 multimodule experiment

Compare Source

This adds a retract statement to go.mod to exclude v0.6.0 from dependency updates. Thanks @​morphar and @​shenqidebaozi for quickly catching and fixing problems with the multimodule configuration!

v0.6.1: Single-module repo

Compare Source

v0.6.0: Multimodule repo: apps are in "cmd". protoc-gen-openapi improvements. protoc-gen-jsonschema.

Compare Source

This renames the former apps directory to cmd and adds a go.mod for each cmd subdirectory. These directories contain demonstrations and various gnostic-related applications, and putting each in a separate module clarifies dependencies and reduces the apparent dependencies of gnostic itself (as listed in the top-level go.mod). Thanks @​shenqidebaozi for making this change and @​morphar for advising.

This also includes significant improvements to protoc-gen-openapi from @​morphar and @​tonybase and a new protoc-gen-jsonschema pluigin contributed by @​morphar.

v0.5.7

Compare Source

google/go-cmp (github.com/google/go-cmp)

v0.6.0

Compare Source

New API:

  • (#​340) Add cmpopts.EquateComparable

Documentation changes:

  • (#​337) Use of hotlinking of Go identifiers

Build changes:

  • (#​325) Remove purego fallbacks

Testing changes:

  • (#​322) Run tests for Go 1.20 version
  • (#​332) Pin GitHub action versions
  • (#​327) set workflow permission to read-only
golang/appengine (google.golang.org/appengine)

v2.0.5

Compare Source

What's Changed

New Contributors

Full Changelog: golang/appengine@v2.0.4...v2.0.5

v2.0.4

Compare Source

What's Changed

New Contributors

Full Changelog: golang/appengine@v2.0.3...v2.0.4

v2.0.3

Compare Source

What's Changed

New Contributors

Full Changelog: golang/appengine@v2.0.2...v2.0.3

v2.0.2: Release App Engine golang SDK v2.0.2

Compare Source

What's Changed

New Contributors

Full Changelog: golang/appengine@v2.0.1...v2.0.2

v2.0.1: Version 2.0.1

Compare Source

  • delay: let user use unique function keys using delay.MustRegister
  • aefix: fix v2/aefix to work with appengine/v2
  • Clean up interfaces for legacy APIs that will be supported for Go 1.12+

v1.6.8

Compare Source

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.32.0

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.31.0...v1.32.0

This release contains commit protocolbuffers/protobuf-go@bfcd647, which fixes a denial of service vulnerability by preventing a stack overflow through a default maximum recursion limit. See https://github.com/golang/protobuf/issues/1583 and https://github.com/golang/protobuf/issues/1584 for details.

go-yaml/yaml (gopkg.in/yaml.v2)

v3.0.1

Compare Source

v3.0.0

Compare Source

kubernetes/klog (k8s.io/klog/v2)

v2.120.1: Prepare klog release for Kubernetes v1.30 (Take 2)

Compare Source

What's Changed

Full Changelog: kubernetes/klog@v2.120.0...v2.120.1

v2.120.0: Prepare klog release for Kubernetes v1.30 (Take 1)

Compare Source

What's Changed

New Contributors

Full Changelog: kubernetes/klog@v2.110.1...v2.120.0

v2.110.1: Prepare klog release for Kubernetes v1.29 (Take 1)

Compare Source

What's Changed

New Contributors

Full Changelog: kubernetes/klog@v2.100.1...v2.110.1

kubernetes-sigs/structured-merge-diff (sigs.k8s.io/structured-merge-diff/v4)

v4.4.1

Compare Source

v4.4.0

Compare Source

v4.3.0

Compare Source

kubernetes-sigs/yaml (sigs.k8s.io/yaml)

v1.4.0

Compare Source

  • Adds a goyaml.v2 subpackage containing a fork of gopkg.in/yaml.v2 at v2.4.0
  • Adds a goyaml.v3 subpackage containing a fork

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Renovate Bot.

@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 4 times, most recently from a0e0e51 to f26551a Compare December 21, 2023 08:19
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 7 times, most recently from eb6dddb to cdda34d Compare December 27, 2023 19:14
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 8 times, most recently from a2b9efd to 0312f67 Compare January 8, 2024 19:16
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 3 times, most recently from 7d95e01 to 4650cd9 Compare January 15, 2024 02:04
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 4 times, most recently from 3d9114a to b9c9109 Compare January 22, 2024 18:21
@platform-engineering-bot platform-engineering-bot force-pushed the renovate/go-updates branch 4 times, most recently from 4ebba5f to 5db3f3a Compare January 30, 2024 19:15
Signed-off-by: Platform Engineering Bot <platform-engineering@redhat.com>
@jaredoconnell jaredoconnell merged commit 0aa687e into main Feb 13, 2024
3 checks passed
@jaredoconnell jaredoconnell deleted the renovate/go-updates branch February 13, 2024 16:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants