Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the go-modules group with 6 updates #414

Merged
merged 1 commit into from
Jun 19, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 19, 2024

Bumps the go-modules group with 6 updates:

Package From To
github.com/klauspost/compress 1.17.2 1.17.9
golang.org/x/crypto 0.23.0 0.24.0
golang.org/x/net 0.25.0 0.26.0
golang.org/x/sys 0.20.0 0.21.0
golang.org/x/text 0.15.0 0.16.0
google.golang.org/grpc 1.62.0 1.64.0

Updates github.com/klauspost/compress from 1.17.2 to 1.17.9

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.9

What's Changed

Full Changelog: klauspost/compress@v1.17.8...v1.17.9

v1.17.8

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.7...v1.17.8

v1.17.7

What's Changed

Full Changelog: klauspost/compress@v1.17.6...v1.17.7

v1.17.6

What's Changed

Full Changelog: klauspost/compress@v1.17.5...v1.17.6

v1.17.5

What's Changed

... (truncated)

Commits
  • 7ae2138 Upgrade zlib to upstream (#971)
  • 0396178 zstd: BuildDict fails with RLE table (#951)
  • 8411e1d zip: Upgrade to 1.22.4 upstream (#970)
  • d9f6f55 build(deps): bump the github-actions group across 1 directory with 2 updates ...
  • 5f7dd25 flate, zstd: Shave some bytes off amd64 matchLen (#963)
  • 3a0faf3 Fix arm64 vet issues (#964)
  • 8bd3916 s2: Reduce ReadFrom temporary allocations (#949)
  • c0ff47e Update README.md
  • 657dc16 chore: remove repetitive words (#946)
  • 3f77d8c build(deps): bump the github-actions group with 1 update (#944)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.23.0 to 0.24.0

Commits
  • 332fd65 go.mod: update golang.org/x dependencies
  • 0b431c7 x509roots/fallback: update bundle
  • 349231f ssh: implement CryptoPublicKey on sk keys
  • 44c9b0f ssh: allow server auth callbacks to send additional banners
  • 67b1361 sha3: reenable s390x assembly
  • 477a5b4 sha3: make APIs usable with zero allocations
  • 59b5a86 sha3: disable s390x assembly
  • 10f366e sha3: simplify XOR functions
  • See full diff in compare view

Updates golang.org/x/net from 0.25.0 to 0.26.0

Commits
  • 66e838c go.mod: update golang.org/x dependencies
  • 6249541 http2: avoid race in server handler SetReadDeadine/SetWriteDeadline
  • 603e3e6 quic: disable X25519Kyber768Draft00 in tests
  • 67e8d0c http2: report an error if goroutines outlive serverTester tests
  • 5608279 http2: avoid corruption in priority write scheduler
  • 0d515a5 http2: factor out frame read/write test functions
  • 9f5b79b http2: drop unused retry function
  • 03c24c2 http2: use synthetic time in server tests
  • 022530c http2: add a more full-featured test net.Conn
  • 410d19e http2: avoid racy access to clientStream.requestedGzip
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.20.0 to 0.21.0

Commits
  • 673e0f9 unix: skip ethtool driver test for busy interface
  • 6943ab6 unix/linux: update glibc to 2.39
  • 92f3ad6 unix: update to Linux kernel 6.9
  • f34bb9f windows: add net user enum
  • 6dfb94e unix: add types for SOCK_DIAG
  • See full diff in compare view

Updates golang.org/x/text from 0.15.0 to 0.16.0

Commits
  • 9c2f3a2 cmd/gotext: fix segfault in extract & rewrite commands
  • 59e1219 message: optimize lookupAndFormat function for better performance
  • a20a3e2 x/text: update x/tools for go/ssa range-over-func fix
  • See full diff in compare view

Updates google.golang.org/grpc from 1.62.0 to 1.64.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.64.0

API Changes

  • stats: Deprecate InPayload.Data and OutPayload.Data; they were experimental and will be deleted in the next release (#7121)

Behavior Changes

  • codec: Remove handling of environment variable GRPC_GO_ADVERTISE_COMPRESSORS to suppress setting supported compressors in grpc-accept-encoding header. Compressors will always be advertised, as they have been by default for some time (#7203)

New Features

  • resolver/dns: Add SetMinResolutionInterval to set the minimum interval at which DNS re-resolutions may occur (#6962)
  • peer/peer: Implement the fmt.Stringer interface for pretty printing Peer, and
  • metadata/metadata: Implement the fmt.Stringer interface for pretty printing MD (#7137)

Performance Improvements

  • client: Improve RPC performance by reducing work while holding a lock (#7132)

Bug Fixes

  • transport/server: Display the proper timeout value when keepalive pings are not ack'd in time (#7038)
  • channelz: Fix bug that was causing the subchannel's target to be unset (#7189)
  • stats: Fix bug where peer was not set in context when calling stats handler for OutPayload, InPayload, and End (#7096)

Dependencies

  • deps: Remove dependency on deprecated github.com/golang/protobuf module (#7122)

Documentation

  • grpc: Deprecate WithBlock, WithReturnConnectionError, FailOnNonTempDialError which are ignored by NewClient (#7097)
  • grpc: Deprecate Dial and DialContext. These will continue to be supported throughout 1.x, but are deprecated to direct users to NewClient (See #7090 for more information)
  • examples: Add custom lb example (#6691)

Release 1.63.2

Bugs

  • Fix the user agent string

Release 1.63.1

Bugs

  • grpc: fixed subchannel log messages to properly reference the parent channel (#7101)

API Changes

... (truncated)

Commits
  • fa274d7 Change version to 1.64.0 (#7218)
  • 6b413c8 xds: Surround two Infof calls that use pretty.ToJSON with V(2) checks (...
  • 2dbbcef resolver/dns: Add docstring to SetMinResolutionInterval (#7217)
  • 070d9c7 codes: replace %q to %d in error string when invalid code is an integer (#7188)
  • 5d24ee2 xds: store server config for LRS server in xdsresource.ClusterUpdate (#7191)
  • c76f686 advancedTLS: Rename get root certs related pieces (#7207)
  • f591e3b codec: remove option to suppress setting supported compressors in headers (#7...
  • b4f7947 github: remove dependabot (#7208)
  • 0561c78 client: add user-friendly error message of LB policy update timed out (#7206)
  • 9d9c1fb peer: remove change detector test (#7204)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group with 6 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.2` | `1.17.9` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.23.0` | `0.24.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.25.0` | `0.26.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.20.0` | `0.21.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.15.0` | `0.16.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.62.0` | `1.64.0` |


Updates `github.com/klauspost/compress` from 1.17.2 to 1.17.9
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.2...v1.17.9)

Updates `golang.org/x/crypto` from 0.23.0 to 0.24.0
- [Commits](golang/crypto@v0.23.0...v0.24.0)

Updates `golang.org/x/net` from 0.25.0 to 0.26.0
- [Commits](golang/net@v0.25.0...v0.26.0)

Updates `golang.org/x/sys` from 0.20.0 to 0.21.0
- [Commits](golang/sys@v0.20.0...v0.21.0)

Updates `golang.org/x/text` from 0.15.0 to 0.16.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.15.0...v0.16.0)

Updates `google.golang.org/grpc` from 1.62.0 to 1.64.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.62.0...v1.64.0)

---
updated-dependencies:
- dependency-name: github.com/klauspost/compress
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/crypto
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from a team as a code owner June 19, 2024 14:00
@dependabot dependabot bot added the failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow label Jun 19, 2024
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Jun 19, 2024
@paketo-bot paketo-bot merged commit 12e14d0 into main Jun 19, 2024
10 of 11 checks passed
@paketo-bot paketo-bot deleted the dependabot/go_modules/go-modules-510dfdda20 branch June 19, 2024 14:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow semver:patch A change requiring a patch version bump
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants