build(deps): Bump the go group with 10 updates

[dependabot]

Bumps the go group with 10 updates:

Package	From	To
cloud.google.com/go/kms	1.15.5	1.15.6
cloud.google.com/go/storage	1.36.0	1.37.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity	1.4.0	1.5.1
github.com/ProtonMail/go-crypto	0.0.0-20230923063757-afb1ddc0824c	1.1.0-alpha.0
github.com/aws/aws-sdk-go-v2	1.24.0	1.24.1
github.com/aws/aws-sdk-go-v2/config	1.26.2	1.26.6
github.com/aws/aws-sdk-go-v2/feature/s3/manager	1.15.9	1.15.15
github.com/aws/aws-sdk-go-v2/service/kms	1.27.7	1.27.9
github.com/hashicorp/vault/api	1.10.0	1.11.0
google.golang.org/api	0.160.0	0.161.0

Updates cloud.google.com/go/kms from 1.15.5 to 1.15.6

Release notes

Sourced from cloud.google.com/go/kms's releases.

kms: v1.15.6

1.15.6 (2024-01-30)

Bug Fixes

• kms: Enable universe domain resolution options (fd1d569)

Commits

• 115646c chore: release main (#9312)
• ca86474 chore(main): release pubsub 1.36.1 (#9334)
• fd1d569 chore: bump gapic modules (#9324)
• 51ead97 chore(all): update deps (#9320)
• 4315cdf feat(visionai): new clients (#9333)
• 4d56af1 docs(aiplatform): add comments for FeatureOnlineStoreService and ModelMonitor...
• 1782dc3 chore(main): release spanner 1.56.0 (#9271)
• 5f156e8 feat(spanner/spansql): add support for CREATE VIEW with SQL SECURITY DEFINER ...
• e577006 chore(internal/actions): add touch flag to changefinder (#9325)
• dce9db4 deps(bigqueyry): bump google.golang.org/api to 0.160.0 (#9323)
• Additional commits viewable in compare view

Updates cloud.google.com/go/storage from 1.36.0 to 1.37.0

Release notes

Sourced from cloud.google.com/go/storage's releases.

pubsub: v1.36.1

1.36.1 (2024-01-30)

Bug Fixes

• pubsub: Enable universe domain resolution options (fd1d569)

Commits

• 088a730 chore(main): release spanner 1.37.0 (#6424)
• c220ca2 refactor(storage): replace manual retries in tests (#6510)
• c85704f fix(storage): allow to use age=0 in OLM conditions (#6204)
• 1937ba4 chore(storage): include grpc enable direct path option (#6569)
• ad68f56 build: renamed gRPC service config for Batch v1 API (#6567)
• 01788cc chore(internal/godocfx): update legacy appengine package stem (#6565)
• 279af69 feat: add new aliasgen tool (#6500)
• bea4028 docs(bigquery): add numeric and bignumeric to RowIterator docs (#6560)
• e8955d9 test(pubsub): use background context for nack test (#6563)
• ceba364 chore(storage): bump apiary dependency (#6562)
• Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.4.0 to 1.5.1

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.5.1

1.5.1 (2024-01-17)

Bugs Fixed

• InteractiveBrowserCredential handles AdditionallyAllowedTenants correctly

sdk/azidentity/v1.5.0

1.5.0 (2024-01-16)

Breaking Changes

These changes affect only code written against a beta version such as v1.5.0-beta.1

• Removed persistent token caching. It will return in v1.6.0-beta.1

Bugs Fixed

• Credentials now preserve MSAL headers e.g. X-Client-Sku

Other Changes

• Upgraded dependencies

sdk/internal/v1.5.1

1.5.1 (2023-12-06)

Bugs Fixed

• Recording will restore the original scheme/host after making a successful HTTP(s) call.

Commits

• 0270c00 Refactor 4bc279bfefcf94d2049aee9801efd418a12e0314 (#22111)
• 12830d0 Prep internal for release (#22110)
• 4bc279b Restore scheme/host when recording HTTP(S) (#22102)
• f8be4a3 suffix .go (#22096)
• 12712c9 Add AzureCLICredentialOptions.Subscription (#21962)
• c85cf6c Add docs on writing testable examples (#22084)
• 8404d16 Add CODEOWNERS linter baseline error file (#22083)
• 943ecbb Sync eng/common directory with azure-sdk-tools for PR 7346 (#22063)
• c23f220 Lets not treat https code 401 as broken link (#22072)
• 0d3efbd Sync eng/common directory with azure-sdk-tools for PR 7334 (#22068)
• Additional commits viewable in compare view

Updates github.com/ProtonMail/go-crypto from 0.0.0-20230923063757-afb1ddc0824c to 1.1.0-alpha.0

Release notes

Sourced from github.com/ProtonMail/go-crypto's releases.

v1.1.0-alpha.0

What's Changed

This major pre-release adds full support for the OpenPGP crypto refresh. In addition, the pre-release introduces an improved non-backwards compatible v2 API. The API in the openpgp package remains fully backwards compatible while the new v2 API is located in a separate v2 package in openpgp.

Full Changelog: v1.0.0...v1.1.0-alpha.0

V2 API

Import

The v2 API can be imported as:

openpgp ProtonMail/go-crypto/openpgp/v2

V2 API Breaking Changes

openpgp.v2.Entity struct fields have changed:

• SelfSignature *packet.Signature removed
• Signatures []*packet.Signature removed
• DirectSignatures []*packet.VerifiableSignature added
• Revocations []*packet.VerifiableSignature changed type

Methods of openpgp.v2.Entity that changed:

• PrimaryIdentity(date time.Time) now requires a time argument.
• EncryptionKey(date time.Time, config *packet.Config) now requires a new config argument.
• CertificationKey(date time.Time, config *packet.Config) now requires a new config argument.
• CertificationKeyById(date time.Time, id uint64, config *packet.Config) now requires a new config argument.
• SigningKey(date time.Time, config *packet.Config) now requires a new config argument.
• SigningKeyById(date time.Time, id uint64, config *packet.Config) now requires a new config argument.
• Revoke(reason packet.ReasonForRevocation, reasonText string, config *packet.Config) is renamed to RevokeKey.

Removed methods of openpgp.v2.Entity:

• RevokeSubkey(...) is replaced by (Subkey).Revoke(...)

openpgp.v2.Subkey struct fields have changed:

• Sig *packet.Signature removed
• Bindings []*packet.VerifiableSignature added
• Primary *Entity added, pointing to the primary key.
• Revocations []*packet.VerifiableSignature changed type

Methods of openpgp.v2.Subkey that changed:

• Revoked(selfCertification *packet.Signature, date time.Time) now requires a selfCertification argument.

openpgp.v2.Identity struct fields have changed:

• SelfSignature *packet.Signature removed
• Signatures []*packet.Signature removed
• SelfCertifications []*packet.VerifiableSignature added
• OtherCertifications []*packet.VerifiableSignature added

... (truncated)

Commits

• See full diff in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.24.0 to 1.24.1

Commits

• 47dd1b1 Release 2024-01-04
• 23145e3 Regenerated Clients
• 00e57bb Update API model
• 73e1a99 Merge pull request #2441 from RanVaknin/fix-documentation-config
• 0f8ad11 Fix SRA auth trailing checksum retry bug (#2438)
• efbc5aa Release 2024-01-03
• 78357bb Regenerated Clients
• e465ddd Update endpoints model
• 384ad3b Update API model
• 1126a91 changelog added
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.26.2 to 1.26.6

Commits

• 857d527 Release 2024-01-22
• 7a35dff Regenerated Clients
• 054bc1d Update API model
• 4c897d4 fix: remove invalid escaping of shared config values (#2461)
• c07adfa Release 2024-01-19
• 48f2836 Regenerated Clients
• 8e4e15a Update endpoints model
• c3b27fc Update API model
• a75d769 Release 2024-01-18
• cd71142 Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.15.9 to 1.15.15

Commits

• 205e0e8 Release 2022-08-01
• 99d2053 Regenerated Clients
• ea67b72 Update API model
• cb92592 Fix go1.19 vet failures (#1779)
• 4d902d7 Release 2022-07-29
• 29ae884 Regenerated Clients
• cbad747 Update endpoints model
• 14164db Update API model
• 8df2ee0 Release 2022-07-28
• 965e75f Regenerated Clients
• Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.27.7 to 1.27.9

Commits

• 289bbd8 Release 2022-09-02
• 4169b1a Regenerated Clients
• e02802d Update SDK's smithy-go dependency to v1.13.2
• 9f98fe2 Update endpoints model
• 824a8eb Update API model
• 05a6aab Release 2022-09-01
• 5a4fbfe Regenerated Clients
• b9fde2d Update endpoints model
• 1808140 Update API model
• d47c319 Release 2022-08-31
• Additional commits viewable in compare view

Updates github.com/hashicorp/vault/api from 1.10.0 to 1.11.0

Release notes

Sourced from github.com/hashicorp/vault/api's releases.

v1.11.0

1.11.0

Unreleased

CHANGES:

• auth/aws: Add RoleSession to DisplayName when using assumeRole for authentication [GH-14954]
• auth: Remove support for legacy MFA (https://www.vaultproject.io/docs/v1.10.x/auth/mfa) [GH-14869]
• core: A request that fails path validation due to relative path check will now be responded to with a 400 rather than 500. [GH-14328]
• core: Bump Go version to 1.17.9. [GH-go-ver-1110]
• licensing (enterprise): Remove support for stored licenses and associated sys/license and sys/license/signed endpoints in favor of autoloaded licenses.
• replication (enterprise): The /sys/replication/performance/primary/mount-filter endpoint has been removed. Please use Paths Filter instead.
• ui: Upgrade Ember to version 3.28 [GH-14763]

FEATURES:

• Non-Disruptive Intermediate/Root Certificate Rotation: This allows import, generation and configuration of any number of keys and/or issuers within a PKI mount, providing operators the ability to rotate certificates in place without affecting existing client configurations. [GH-15277]
• api/command: Global -output-policy flag to determine minimum required policy HCL for a given operation [GH-14899]
• nomad: Bootstrap Nomad ACL system if no token is provided [GH-12451]
• storage/dynamodb: Added AWS_DYNAMODB_REGION environment variable. [GH-15054]

IMPROVEMENTS:

• agent/auto-auth: Add min_backoff to the method stanza for configuring initial backoff duration. [GH-15204]
• agent: Update consult-template to v0.29.0 [GH-15293]
• agent: Upgrade hashicorp/consul-template version for sprig template functions and improved writeTo function [GH-15092]
• api: Add ability to pass certificate as PEM bytes to api.Client. [GH-14753]
• api: Add context-aware functions to vault/api for each API wrapper function. [GH-14388]
• api: Added MFALogin() for handling MFA flow when using login helpers. [GH-14900]
• api: If the parameters supplied over the API payload are ignored due to not being what the endpoints were expecting, or if the parameters supplied get replaced by the values in the endpoint's path itself, warnings will be added to the non-empty responses listing all the ignored and replaced parameters. [GH-14962]
• api: Provide a helper method WithNamespace to create a cloned client with a new NS [GH-14963]
• api: Use the context passed to the api/auth Login helpers. [GH-14775]
• auth/okta: Add support for Google provider TOTP type in the Okta auth method [GH-14985]
• auth: enforce a rate limit for TOTP passcode validation attempts [GH-14864]
• cli/debug: added support for retrieving metrics from DR clusters if unauthenticated_metrics_access is enabled [GH-15316]
• cli/vault: warn when policy name contains upper-case letter [GH-14670]
• cli: Alternative flag-based syntax for KV to mitigate confusion from automatically appended /data [GH-14807]
• cockroachdb: add high-availability support [GH-12965]
• core (enterprise): Include termination_time in sys/license/status response
• core (enterprise): Include termination time in license inspect command output
• core : check uid and permissions of config dir, config file, plugin dir and plugin binaries [GH-14817]
• core,transit: Allow callers to choose random byte source including entropy augmentation sources for the sys/tools/random and transit/random endpoints. [GH-15213]

... (truncated)

Changelog

Sourced from github.com/hashicorp/vault/api's changelog.

1.11.0

June 20, 2022

CHANGES:

• auth/aws: Add RoleSession to DisplayName when using assumeRole for authentication [GH-14954]
• auth/kubernetes: If kubernetes_ca_cert is unset, and there is no pod-local CA available, an error will be surfaced when writing config instead of waiting for login. [GH-15584]
• auth: Remove support for legacy MFA (https://www.vaultproject.io/docs/v1.10.x/auth/mfa) [GH-14869]
• core/fips: Disable and warn about entropy augmentation in FIPS 140-2 Inside mode [GH-15858]
• core: A request that fails path validation due to relative path check will now be responded to with a 400 rather than 500. [GH-14328]
• core: Bump Go version to 1.17.11. [GH-go-ver-1110]
• database & storage: Change underlying driver library from lib/pq to pgx. This change affects Redshift & Postgres database secrets engines, and CockroachDB & Postgres storage engines [GH-15343]
• licensing (enterprise): Remove support for stored licenses and associated sys/license and sys/license/signed endpoints in favor of autoloaded licenses.
• replication (enterprise): The /sys/replication/performance/primary/mount-filter endpoint has been removed. Please use Paths Filter instead.
• secret/pki: Remove unused signature_bits parameter from intermediate CSR generation; this parameter doesn't control the final certificate's signature algorithm selection as that is up to the signing CA [GH-15478]
• secrets/kubernetes: Split additional_metadata into extra_annotations and extra_labels parameters [GH-15655]
• secrets/pki: A new aliased api path (/pki/issuer/:issuer_ref/sign-self-issued) providing the same functionality as the existing API(/pki/root/sign-self-issued) does not require sudo capabilities but the latter still requires it in an effort to maintain backwards compatibility. [GH-15211]
• secrets/pki: Err on unknown role during sign-verbatim. [GH-15543]
• secrets/pki: Existing CRL API (/pki/crl) now returns an X.509 v2 CRL instead of a v1 CRL. [GH-15100]
• secrets/pki: The ca_chain response field within issuing (/pki/issue/:role) and signing APIs will now include the root CA certificate if the mount is aware of it. [GH-15155]
• secrets/pki: existing Delete Root API (pki/root) will now delete all issuers and keys within the mount path. [GH-15004]
• secrets/pki: existing Generate Root (pki/root/generate/:type), Set Signed Intermediate (/pki/intermediate/set-signed) APIs will add new issuers/keys to a mount instead of warning that an existing CA exists [GH-14975]
• secrets/pki: the signed CA certificate from the sign-intermediate api will now appear within the ca_chain response field along with the issuer's ca chain. [GH-15524]
• ui: Upgrade Ember to version 3.28 [GH-14763]

FEATURES:

• Autopilot Improvements (Enterprise): Autopilot on Vault Enterprise now supports automated upgrades and redundancy zones when using integrated storage.
• KeyMgmt UI: Add UI support for managing the Key Management Secrets Engine [GH-15523]
• Kubernetes Secrets Engine: This new secrets engine generates Kubernetes service account tokens, service accounts, role bindings, and roles dynamically. [GH-15551]
• Non-Disruptive Intermediate/Root Certificate Rotation: This allows import, generation and configuration of any number of keys and/or issuers within a PKI mount, providing operators the ability to rotate certificates in place without affecting existing client configurations. [GH-15277]
• Print minimum required policy for any command: The global CLI flag -output-policy can now be used with any command to print out the minimum required policy HCL for that operation, including whether the given path requires the "sudo" capability. [GH-14899]
• Snowflake Database Plugin: Adds ability to manage RSA key pair credentials for dynamic and static Snowflake users. [GH-15376]
• Transit BYOK: Allow import of externally-generated keys into the Transit secrets engine. [GH-15414]
• nomad: Bootstrap Nomad ACL system if no token is provided [GH-12451]

... (truncated)

Commits

• ea296cc Backport PKI Intermediate Revocation bug fix and test improvements (#16054)
• d4bf262 backport of commit b0cbc03f00ec19b5bebb2eb5078d8512e2281b1d (#16050)
• 76b1768 backport of commit 2a69947b3b9f267b15a7c1e64c853d4eeb9846a7 (#16045)
• 46e0ecc backport of commit 3d01a88e614547a821062ca57957b07a1e6bc557 (#16041)
• 5f8a2cf Backport PR for 16007 (#16030)
• 87df46e backport of commit c09ae6ac5e90adc8c1a42b54a905877eb60c18ad (#16027)
• de6a5c3 backport of commit a58c6ecd9f0d4a148e81af0783d5ecc2f79b31f1 (#16022)
• 81c4cc5 backport of commit 93eaf3c86019443a3d89891430ef0126667c3bfc (#16014)
• c52c917 backport of commit e74c45abbd5414819276106d1150205845b608c0 (#16006)
• 46c19d0 Use new -mount syntax for all KV subcommands in 1.11 docs (#16002) (#16004)
• Additional commits viewable in compare view

Updates google.golang.org/api from 0.160.0 to 0.161.0

Release notes

Sourced from google.golang.org/api's releases.

v0.161.0

0.161.0 (2024-01-30)

Features

• all: Auto-regenerate discovery clients (#2386) (03042ec)

Bug Fixes

• gen: Reject repeated object query params (#2383) (f29f327), refs #2379
• transport: Skip s2a for now if service has direct path enabled (#2385) (54c764a)

Changelog

Sourced from google.golang.org/api's changelog.

0.161.0 (2024-01-30)

Features

• all: Auto-regenerate discovery clients (#2386) (03042ec)

Bug Fixes

• gen: Reject repeated object query params (#2383) (f29f327), refs #2379
• transport: Skip s2a for now if service has direct path enabled (#2385) (54c764a)

Commits

• befbd36 chore(main): release 0.161.0 (#2387)
• f29f327 fix(gen): reject repeated object query params (#2383)
• 54c764a fix(transport): skip s2a for now if service has direct path enabled (#2385)
• 03042ec feat(all): auto-regenerate discovery clients (#2386)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions