Bump cuelang.org/go from 0.4.1 to 0.4.2

[dependabot]

Bumps cuelang.org/go from 0.4.1 to 0.4.2.

Release notes

Sourced from cuelang.org/go's releases.

v0.4.2

This patch release largely focuses on bug fixes, but also includes some additions to the cmd/cue cmd tooling layer and builtins. Some of the bug fixes were identified as part of preparing for an upcoming CUE talk at FOSDEM.

Thank you to @​brandonbloom, @​eonpatapon, @​obowersa and @​seh for contributing to this release!

Core evaluator

A number of bug fixes relating to edge cases of CUE evaluation. Notably, 1374dc99007937166e204302792df34c46138df0 fixes some subtle bugs where fields can be missed if patterns are inserted too late.

0aaf4c69be6394bcb20c0a659382f48b9cffec33 disallows _ as a field label, fixing a bug where the following CUE was previously accepted as valid:

_: 5

This now results in:

cannot use _ as label:
    ./x.cue:1:1

Tooling layer (cmd/cue cmd)

@​eonpatapon added Mkdir, MkdirAll to pkg/tool/file. cue-lang/cue#1502 was raised as a follow-up, a wider review of how the pkg/… API needs to change pre v1.

Spec

@​seh contributed to the "Declarations and scope" section, clarifying that top-level let identifiers are scoped to the containing file block.

cmd/cue

@​slewiskelly highlighted a regression introduced as far back as aaf6e846d8450663dd4fd265021a969d02a2bf4e where cmd/cue is used to validate data using a schema. In this regression, CUE inadvertently marks the failures as "fatal", instead of "incomplete" (that is, could be satisfied by making a value more concrete). 04812bfb515de3300ac21ca181542f8ea02c9ea1 disables schema checking for now whilst we consider a more precise solution.

Builtins

Both pkg/encoding/yaml and pkg/encoding/json now support UnmarshalStream.

Changelog

• 6bc922c8 tools/trim: prevent nil-pointer panic
• 9aeaf704 pkg/encoding/json: implement UnmarshalStream
• 480b28b1 pkg/encoding/yaml: implement UnmarshalStream
• 880863af encoing/json: made independent of pkg/encoding/json
• 802a8520 cmd/cue/cmd: only consider "kind" field for known tasks
• bd3b6eaf cmd/cue: add newline between imported objects
• 04812bfb cmd/cue: fix spurious errors
• 2fe5251e doc/ref/spec.md: clarify scope of top-level let ID

... (truncated)

Commits

• 6bc922c tools/trim: prevent nil-pointer panic
• 9aeaf70 pkg/encoding/json: implement UnmarshalStream
• 480b28b pkg/encoding/yaml: implement UnmarshalStream
• 880863a encoing/json: made independent of pkg/encoding/json
• 802a852 cmd/cue/cmd: only consider "kind" field for known tasks
• bd3b6ea cmd/cue: add newline between imported objects
• 04812bf cmd/cue: fix spurious errors
• 2fe5251 doc/ref/spec.md: clarify scope of top-level let ID
• 556f57f doc/tutorial: fix typo in 55_defs.txt
• f0d03f3 cue/ast: fix typo in docstring
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)