Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the go-mod-magefiles group across 1 directory with 4 updates #21

Conversation

dependabot[bot]
Copy link

@dependabot dependabot bot commented on behalf of github May 20, 2024

Bumps the go-mod-magefiles group with 3 updates in the /magefiles directory: github.com/bufbuild/buf, github.com/golangci/golangci-lint and github.com/grpc-ecosystem/grpc-gateway/v2.

Updates github.com/bufbuild/buf from 1.31.0 to 1.32.0

Release notes

Sourced from github.com/bufbuild/buf's releases.

v1.32.0

This release contains the (completely backwards-compatible) next generation of the Buf CLI. The Buf CLI and its associated configuration have been completely overhauled to support monorepos as first-class citizens. We'd call it a v2 of buf, but it's not. Buf is enterprise-grade software, and we want you to be minimally impacted. The v1.32.0 release of buf introduces v2 config formats for both buf.yaml and buf.gen.yaml. All your current commands and v1 configuration continue to work, so you can upgrade to v2 configuration when appropriate.

To read more about what's new, check out our blog and our docs:


  • Add version v2 for buf.yaml and buf.gen.yaml configuration files.
  • Add buf config migrate to migrate configuration files to the latest version (now v2).
  • Move buf mod init to buf config init. buf mod init is now deprecated.
  • Move buf mod ls-lint-rules to buf config ls-lint-rules. buf mod ls-lint-rules is now deprecated.
  • Move buf mod ls-breaking-rules to buf config ls-breaking-rules. buf mod ls-breaking-rules is now deprecated.
  • Move buf mod prune to buf dep prune. buf mod prune is now deprecated.
  • Move buf mod update to buf dep update. buf mod update is now deprecated.
  • Move buf mod {clear-cache,cc} to buf registry cc. buf mod {clear-cache,cc} is now deprecated.
  • Move buf beta graph to stable as buf dep graph.
  • Change the default visibility of buf push --create-visibility to private when the --create flag is set. Users are no longer required to set --create-visibility when running buf push --create.
  • Add buf push --label, which allows users to set labels when pushing new commits to the BSR.
  • Add buf push --source-control-url, which allows users to associate commits pushed to the BSR with a URL to a source code repository.
  • Add buf push --create-default-label, which allows users to set a default label for a repository when calling buf push --create.
  • Add buf push --git-metadata, which automatically sets appropriate --label, --source-control-url, and --create-default-label flags based on the current Git repository.
  • Add buf convert --validate to apply protovalidate rules to incoming messages specified with --from.
  • Deprecate buf mod open.
  • Delete buf beta migrate-v1beta1 This is now replaced with buf config migrate.
  • Add buf registry sdk version to get the version of a Generated SDK for a module and plugin.
  • Add buf beta registry archive and buf beta registry unarchive commands for archiving and unarchiving labels on the BSR.
  • Add support for Protobuf Editions. This allows buf to be used with sources that use edition 2023, instead of proto2 or proto3 syntax. This also updates the protoc-gen-buf-breaking and protoc-gen-buf-lint Protobuf plugins to support files that use edition 2023.
  • Update buf breaking rules to work with Protobuf Editions. To support Editions, some rules have been deprecated and replaced with Editions-aware rules. All deprecated rules continue to work for existing users.
    • FIELD_SAME_CTYPE has been replaced with FIELD_SAME_CPP_STRING_TYPE, which considers both ctype field options and new (pb.cpp).string_type features when deciding on backwards compatibility.
    • FIELD_SAME_LABEL has been replaced with three rules that all check "cardinality". The new rules can distinguish between maps and other repeated fields and between implicit and explicit field presence. The new rules are:
      1. FIELD_SAME_CARDINALITY in the FILE and PACKAGE categories.
      2. FIELD_WIRE_COMPATIBLE_CARDINALITY in the WIRE category.
      3. FIELD_WIRE_JSON_COMPATIBLE_CARDINALITY in the WIRE_JSON category.
    • FILE_SAME_JAVA_STRING_CHECK_UTF8 has been replaced with FIELD_SAME_JAVA_UTF8_VALIDATION, which considers both the java_string_check_utf8 file option and (pb.java).utf8_validation features when deciding on backwards compatibility.
    • Add to the existing FILE_SAME_SYNTAX rule with a few related rules that can catch the same sort of compatibility issues, but in an Editions source file that changes feature values:
      1. MESSAGE_SAME_JSON_FORMAT and ENUM_SAME_JSON_FORMAT catch changes to the json_format feature, which controls whether support for the JSON format is best-effort or properly supported. When supported, the compiler performs more checks relating to field name collisions for the JSON format as well as for FieldMask usage.
      2. FIELD_SAME_UTF8_VALIDATION catches changes to the utf8_validation feature, which controls validation of string values.
      3. ENUM_SAME_TYPE catches changes to an enum's type, open vs. closed.
  • Add support for extensions to buf breaking. All existing rules for fields are now applied to extensions, except for FIELD_NO_DELETE (and its variants). There are also new EXTENSION_NO_DELETE and PACKAGE_EXTENSION_NO_DELETE rules for catching deletions of an extension. The new rules are not active by default in existing v1 and v1beta1 configurations, for backwards-compatibility reasons. Migrate your config to v2 to use them.
  • Add support for top-level extensions to buf lint. It previously only checked extensions that were defined inside of messages.
  • Add a new FIELD_NOT_REQUIRED lint rule that prevents use of required in proto2 files and of features.field_presence = LEGACY_REQUIRED in Editions files. This new rule is not active by default in existing v1 and v1beta1 configurations, for backwards-compatibility reasons. Migrate your config to v2 to use them.

v1.32.0-beta.1

This is the first beta release of the next generation of the Buf CLI. This beta release is being used by some of our customers to ensure we've kept compatibility, and to try some of its new features. Don't worry - the next generation of the buf CLI continues to be v1, and is completely backwards-compatible - all of your workflows will continue to work. Buf is enterprise-grade software, and we want you to be minimally impacted.

There's some exciting improvements coming in the next generation of the buf CLI, and we look forward to sharing it more widely in the coming weeks. If you'd like to be part of the private beta, email us with the subject line "Beta" and we'll be happy to talk - we'll add more users as we have capacity. While you are free to give this beta release a spin without being added to our private beta, we wouldn't recommend using it outside of our private beta just yet!

Changelog

Sourced from github.com/bufbuild/buf's changelog.

[v1.32.0] - 2024-05-16

  • Add version v2 for buf.yaml and buf.gen.yaml configuration files.
  • Add buf config migrate to migrate configuration files to the latest version (now v2).
  • Move buf mod init to buf config init. buf mod init is now deprecated.
  • Move buf mod ls-lint-rules to buf config ls-lint-rules. buf mod ls-lint-rules is now deprecated.
  • Move buf mod ls-breaking-rules to buf config ls-breaking-rules. buf mod ls-breaking-rules is now deprecated.
  • Move buf mod prune to buf dep prune. buf mod prune is now deprecated.
  • Move buf mod update to buf dep update. buf mod update is now deprecated.
  • Move buf mod {clear-cache,cc} to buf registry cc. buf mod {clear-cache,cc} is now deprecated.
  • Move buf beta graph to stable as buf dep graph.
  • Change the default visibility of buf push --create-visibility to private when the --create flag is set. Users are no longer required to set --create-visibility when running buf push --create.
  • Add buf push --label, which allows users to set labels when pushing new commits to the BSR.
  • Add buf push --source-control-url, which allows users to associate commits pushed to the BSR with a URL to a source code repository.
  • Add buf push --create-default-label, which allows users to set a default label for a repository when calling buf push --create.
  • Add buf push --git-metadata, which automatically sets appropriate --label, --source-control-url, and --create-default-label flags based on the current Git repository.
  • Add buf convert --validate to apply protovalidate rules to incoming messages specified with --from.
  • Deprecate buf mod open.
  • Delete buf beta migrate-v1beta1 This is now replaced with buf config migrate.
  • Add buf registry sdk version to get the version of a Generated SDK for a module and plugin.
  • Add buf beta registry archive and buf beta registry unarchive commands for archiving and unarchiving labels on the BSR.
  • Add support for Protobuf Editions. This allows buf to be used with sources that use edition 2023, instead of proto2 or proto3 syntax. This also updates the protoc-gen-buf-breaking and protoc-gen-buf-lint Protobuf plugins to support files that use edition 2023.
  • Update buf breaking rules to work with Protobuf Editions. To support Editions, some rules have been deprecated and replaced with Editions-aware rules. All deprecated rules continue to work for existing users.
    • FIELD_SAME_CTYPE has been replaced with FIELD_SAME_CPP_STRING_TYPE, which considers both ctype field options and new (pb.cpp).string_type features when deciding on backwards compatibility.
    • FIELD_SAME_LABEL has been replaced with three rules that all check "cardinality". The new rules can distinguish between maps and other repeated fields and between implicit and explicit field presence. The new rules are:
      1. FIELD_SAME_CARDINALITY in the FILE and PACKAGE categories.
      2. FIELD_WIRE_COMPATIBLE_CARDINALITY in the WIRE category.
      3. FIELD_WIRE_JSON_COMPATIBLE_CARDINALITY in the WIRE_JSON category.
    • FILE_SAME_JAVA_STRING_CHECK_UTF8 has been replaced with FIELD_SAME_JAVA_UTF8_VALIDATION, which considers both the java_string_check_utf8 file option and (pb.java).utf8_validation features when deciding on backwards compatibility.
    • Add to the existing FILE_SAME_SYNTAX rule with a few related rules that can catch the same

... (truncated)

Commits
  • c8b0995 Release v1.32.0 (#2984)
  • 6004e28 Add --git-metadata flag to buf push (#2953)
  • d740a18 Only archive and unarchive labels for target modules (#2983)
  • bcf427c Change buf beta registry label archive/unarchive to `buf beta registry arch...
  • 4a0f6b4 Avoid pruning unused dependencies for buf dep update (#2966)
  • 06b7cf2 Merge and make upgrade
  • 408c043 Cleanup CHANGELOG.md (#2979)
  • 6f13392 Bump buf.build/gen/go/bufbuild/protovalidate/protocolbuffers/go from 1.33.0-2...
  • fc1ec89 Tweak configuration of JSON format rules for buf breaking (#2978)
  • fb0e9ac Update buf breaking checks to support extensions (#2960)
  • Additional commits viewable in compare view

Updates github.com/golangci/golangci-lint from 1.58.0 to 1.58.2

Release notes

Sourced from github.com/golangci/golangci-lint's releases.

v1.58.2

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

  • 7c87a9e6 build(deps): bump github.com/Antonboom/nilnil from 0.1.8 to 0.1.9 (#4716)
  • 3fbc2f52 build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#4725)
  • 8fe47a93 build(deps): bump github.com/lasiar/canonicalheader from 1.0.6 to 1.1.1 (#4715)
  • 8c4cfb61 build(deps): bump github.com/securego/gosec/v2 from 2.19.0 to 2.20.0 (#4724)
  • 35eaf609 build(deps): bump go-simpler.org/musttag from 0.12.1 to 0.12.2 (#4710)
  • 7f6606a7 build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (#4722)

v1.58.1

golangci-lint is a free and open-source project built by volunteers.

If you value it, consider supporting us, the maintainers and linter authors.

We appreciate it! ❤️

For key updates, see the changelog.

Changelog

  • dc281531 build(deps): bump github.com/4meepo/tagalign from 1.3.3 to 1.3.4 (#4705)
  • 9116634a build(deps): bump github.com/ghostiam/protogetter from 0.3.5 to 0.3.6 (#4707)
  • d64e1de7 build(deps): bump golang.org/x/tools from 0.20.0 to 0.21.0 (#4706)
  • ee97dbf7 build(deps): bump golangci/golangci-lint-action from 5.1.0 to 5.3.0 (#4701)
  • 4532eb98 fix: gochecknoinits shadow name (#4698)
  • 6767d7c2 fix: remove GitHub Action problem matchers (#4700)
Changelog

Sourced from github.com/golangci/golangci-lint's changelog.

v1.58.2

  1. Updated linters
    • canonicalheader: from 1.0.6 to 1.1.1
    • gosec: from 2.19.0 to 2.20.0
    • musttag: from 0.12.1 to 0.12.2
    • nilnil: from 0.1.8 to 0.1.9
  2. Documentation
    • Improve integrations and install pages

v1.58.1

  1. Updated linters
    • tagalign: from 1.3.3 to 1.3.4
    • protogetter: from 0.3.5 to 0.3.6
    • gochecknoinits: fix analyzer name
  2. Fixes
    • Restores previous gihub-actions output format (removes GitHub Action problem matchers)
Commits
  • 8c4cfb6 build(deps): bump github.com/securego/gosec/v2 from 2.19.0 to 2.20.0 (#4724)
  • 3fbc2f5 build(deps): bump github.com/fatih/color from 1.16.0 to 1.17.0 (#4725)
  • 7f6606a build(deps): bump golangci/golangci-lint-action from 5.3.0 to 6.0.1 (#4722)
  • 78ade26 docs: improve integrations and install pages (#4719)
  • 27355d9 docs: uses org account for GitHub Sponsor
  • 1df156c docs: funding and social networks
  • f17b3ef docs: funding and social networks
  • 7c87a9e build(deps): bump github.com/Antonboom/nilnil from 0.1.8 to 0.1.9 (#4716)
  • 8fe47a9 build(deps): bump github.com/lasiar/canonicalheader from 1.0.6 to 1.1.1 (#4715)
  • c90d06b dev: set CGO_ENABLED=1 when running "test" task (#4712)
  • Additional commits viewable in compare view

Updates github.com/grpc-ecosystem/grpc-gateway/v2 from 2.19.1 to 2.20.0

Release notes

Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.

v2.20.0

What's Changed

New Contributors

Full Changelog: grpc-ecosystem/grpc-gateway@v2.19.1...v2.20.0

Commits
  • 2da4beb fix: handle X-Forwarded-* headers correctly (#4334)
  • 9660e4a chore(deps): update googleapis digest to 61a066c
  • d031ccd chore(deps): update googleapis digest to ca6e6eb
  • 377fdbf fix(deps): update module google.golang.org/grpc to v1.64.0
  • 01ea057 chore(deps): update googleapis digest to 584e0de
  • c298362 fix(4245): setting appropriate log level for error logs (#4327)
  • 33ca56e chore(deps): update googleapis digest to e3a34df
  • db700b4 Update README.md
  • f917396 chore(deps): update googleapis digest to 7e73d48
  • 4bba94f fix(deps): update module google.golang.org/genproto/googleapis/rpc to v0.0.0-...
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.34.0 to 1.34.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

updated-dependencies:
- dependency-name: github.com/bufbuild/buf
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod-magefiles
- dependency-name: github.com/golangci/golangci-lint
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod-magefiles
- dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-mod-magefiles
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-mod-magefiles
...

Signed-off-by: dependabot[bot] <support@github.com>
Copy link
Author

dependabot bot commented on behalf of github May 20, 2024

The following labels could not be found: area/dependencies.

Copy link
Author

dependabot bot commented on behalf of github May 22, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this May 22, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/magefiles/go-mod-magefiles-7182db1589 branch May 22, 2024 18:23
@github-actions github-actions bot locked and limited conversation to collaborators May 22, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
0 participants