Skip to content
This repository was archived by the owner on Nov 27, 2025. It is now read-only.

Bump the go-dependencies group across 1 directory with 11 updates#402

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-dependencies-e8532d7993
Open

Bump the go-dependencies group across 1 directory with 11 updates#402
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/go-dependencies-e8532d7993

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 15, 2024 •
edited
Loading

Bumps the go-dependencies group with 8 updates in the / directory:

Package From To
github.com/briandowns/spinner 1.23.0 1.23.1
github.com/charmbracelet/lipgloss 0.10.0 0.12.1
github.com/spf13/cobra 1.8.0 1.8.1
github.com/spf13/viper 1.18.2 1.19.0
go.opentelemetry.io/proto/otlp 1.2.0 1.3.1
go.pinniped.dev 0.29.0 0.32.0
github.com/fatih/color 1.16.0 1.17.0
github.com/itchyny/gojq 0.12.15 0.12.16

Updates github.com/briandowns/spinner from 1.23.0 to 1.23.1

Release notes

Sourced from github.com/briandowns/spinner's releases.

v1.23.1

What's Changed

New Contributors

Full Changelog: briandowns/spinner@v1.23.0...v1.23.1

Commits

Updates github.com/charmbracelet/lipgloss from 0.10.0 to 0.12.1

Release notes

Sourced from github.com/charmbracelet/lipgloss's releases.

v0.12.1

This release fixes a regression with regard to border calculations introduced in Lip Gloss v0.11.1.

Thoughts? Questions? We love hearing from you. Feel free to reach out on Twitter, The Fediverse, or on Discord.

v0.12.0

Lists, Check ✓

This release adds a new sub-package for rendering trees and lists.

import "github.com/charmbracelet/lipgloss/list"

Define a new list.

l := list.New("A", "B", "C")

Print the list.

fmt.Println(l)
// • A
// • B
// • C

Lists have the ability to nest.

l := list.New(
  "A", list.New("Artichoke"),
  "B", list.New("Baking Flour", "Bananas", "Barley", "Bean Sprouts"),
  "C", list.New("Cashew Apple", "Cashews", "Coconut Milk", "Curry Paste", "Currywurst"),
  "D", list.New("Dill", "Dragonfruit", "Dried Shrimp"),
  "E", list.New("Eggs"),
  "F", list.New("Fish Cake", "Furikake"),
  "J", list.New("Jicama"),
  "K", list.New("Kohlrabi"),
  "L", list.New("Leeks", "Lentils", "Licorice Root"),
)

... (truncated)

Commits

Updates github.com/spf13/cobra from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.1

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation

... (truncated)

Commits

Updates github.com/spf13/viper from 1.18.2 to 1.19.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.19.0

What's Changed

Bug Fixes 🐛

Dependency Updates ⬆️

... (truncated)

Commits
  • b9733f0 build(deps): bump actions/checkout from 4.1.4 to 4.1.6
  • 6ecc5c8 build(deps): bump cachix/install-nix-action from 26 to 27
  • 248c6fd build(deps): bump github/codeql-action from 3.25.4 to 3.25.7
  • abea773 Update references to bketelsen/crypt
  • f17acb4 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1
  • 8e285a5 build(deps): bump github/codeql-action from 3.25.2 to 3.25.4
  • 4017620 build(deps): bump actions/setup-go from 5.0.0 to 5.0.1
  • b67e814 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
  • 4a182c7 build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2
  • 45a0e12 build(deps): bump mheap/github-action-required-labels
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/proto/otlp from 1.2.0 to 1.3.1

Release notes

Sourced from go.opentelemetry.io/proto/otlp's releases.

Release v1.3.1

Release of the v1.3.1 version of the OTLP including the new Profiles signal.

⚠️ This release includes new experimental packages that do not follow semantic versioning. See the versioning policy for details.

What's Changed

New Contributors

Full Changelog: open-telemetry/opentelemetry-proto-go@v1.2.0...v1.3.1

Commits
  • a300cca Release v1.3.1 (#170)
  • fef4f4c Explain stability guarantees for experimental packages (#177)
  • 4ef95d5 Bump github.com/grpc-ecosystem/grpc-gateway/v2 in /otlp (#175)
  • 7586915 Bump google.golang.org/grpc from 1.63.2 to 1.64.0 in /otlp (#174)
  • 7dff8c9 Bump golang.org/x/net from 0.21.0 to 0.23.0 in /otlp (#173)
  • f1398ea Bump google.golang.org/protobuf from 1.34.0 to 1.34.1 in /otlp (#172)
  • 549cd09 Bump google.golang.org/protobuf from 1.34.0 to 1.34.1 in /slim/otlp (#171)
  • cfa3298 Add Versioning Policy to README (#167)
  • af7b8fb Bump google.golang.org/grpc from 1.63.0 to 1.63.2 in /otlp (#165)
  • 4055d99 Bump google.golang.org/protobuf from 1.33.0 to 1.34.0 in /slim/otlp (#169)
  • Additional commits viewable in compare view

Updates go.pinniped.dev from 0.29.0 to 0.32.0

Release notes

Sourced from go.pinniped.dev's releases.

v0.32.0

Release v0.32.0

Release Image

Image Registry
ghcr.io/vmware-tanzu/pinniped/pinniped-server:v0.32.0 GitHub Container Registry
docker.io/getpinniped/pinniped-server:v0.32.0 DockerHub

These images can also be referenced by their digest: sha256:f76fa757678f1ab2492be698dc33afbec5ce22b32eebb8a648d5196f9e63ce35.

Changes

This release includes a new feature for limiting TLS ciphers and upgrades all project dependencies.

Minor Changes

  • The TLS v1.2 cipher suites used by the Pinniped Supervisor and Pinniped Concierge can now be configured to be further limited beyond Pinniped's already limited default lists of ciphers. This is configured by a new setting in the ConfigMap for the Supervisor or Concierge. Refer to the documentation of allowed_ciphers_for_tls_onedottwo in deploy/supervisor/values.yaml and deploy/concierge/values.yaml. (#1952)
  • Some small test fixes and linter improvements. (#1992, #1991, #1949, #1947, #1983)
  • Updates the Kubernetes libraries to v0.30.2, and updates all other project dependencies. (#1990, #1989, #1988, #1986, #1981)

Diffs

A complete list of changes (45 commits, 250 changed files with 6,589 additions and 4,911 deletions) can be found here.

v0.31.0

Release v0.31.0

Release Image

Image Registry
ghcr.io/vmware-tanzu/pinniped/pinniped-server:v0.31.0 GitHub Container Registry
docker.io/getpinniped/pinniped-server:v0.31.0 DockerHub

These images can also be referenced by their digest: sha256:d07ee61c059b36337e17893c91b7bd4ac3c13d0258f9de11759d5b42b7b2060d.

Changes

This release adds support for using GitHub as an identity provider, along with other new features, and upgrades project dependencies.

Major Changes

  • The Pinniped Supervisor now supports using GitHub as an identity provider using browser-based authentication, configured via a new custom resource called GitHubIdentityProvider. (#1978)
    • Both github.com and GitHub Enterprise are supported.
    • Administrators can optionally limit authentication by GitHub organization membership.
    • GitHub team membership is automatically mapped to Kubernetes group membership.
    • Frequent session refreshes check that the user's GitHub access token is still valid, revalidate the user's identity, and update the user's group memberships. In a typical setup, any changes to org or team membership will be reflected to end-user sessions within about 5 minutes.
    • As with any identity provider in the Supervisor, the administrator can optionally configure policies to restrict authentication by username and group (GitHub team) membership, and can modify usernames and group memberships by configuring CEL expressions on the FederationDomain.

... (truncated)

Commits
  • 84308f3 Merge pull request #1992 from vmware-tanzu/update_flaky_test
  • 88bcdba rewrite flaky category test
  • b50d138 Merge pull request #1991 from vmware-tanzu/update_codegen_kube_versions
  • b345727 bump codegen kube versions
  • fc6de7e Merge pull request #1990 from vmware-tanzu/pinny/bump-deps
  • 6b87bc3 Bump dependencies
  • 238df12 Merge pull request #1952 from vmware-tanzu/jtc/issue-1605-limit-tls-ciphers-f...
  • f7f32f2 some mild refactoring of ptls common.go (mostly renames)
  • 1f8ac0f Also probe aggregated API ports in new ciphers test
  • 75ff3ef fix lint
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.19.0 to 0.21.0

Commits
  • 5fd4241 google: update compute token refresh
  • 84cb9f7 oauth2: fix typo in comment
  • 4b7f0bd go.mod: update cloud.google.com/go/compute/metadata dependency
  • e11eea8 microsoft: added DeviceAuthURL to AzureADEndpoint
  • See full diff in compare view

Updates golang.org/x/term from 0.19.0 to 0.21.0

Commits

Updates github.com/fatih/color from 1.16.0 to 1.17.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.17.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.16.0...v1.17.0

Commits
  • b6598b1 Merge pull request #228 from klauspost/fix-println-issue-218
  • 00b1811 Fix multi-parameter println spacing
  • 04994a8 Merge pull request #224 from fatih/dependabot/go_modules/golang.org/x/sys-0.18.0
  • 7526cad Merge branch 'main' into dependabot/go_modules/golang.org/x/sys-0.18.0
  • 8d058ca Merge pull request #222 from fatih/ci-updates
  • 2ac809f Bump golang.org/x/sys from 0.17.0 to 0.18.0
  • 51a7bbf ci: update Go and Staticcheck versions
  • 799c49c Merge pull request #217 from fatih/dependabot/github_actions/actions/setup-go-5
  • f8e0ec9 Merge branch 'main' into dependabot/github_actions/actions/setup-go-5
  • 298abd8 Merge pull request #221 from fatih/dependabot/go_modules/golang.org/x/sys-0.17.0
  • Additional commits viewable in compare view

Updates github.com/itchyny/gojq from 0.12.15 to 0.12.16

Release notes

Sourced from github.com/itchyny/gojq's releases.

Release v0.12.16

  • fix offset of query parsing error on multi-byte characters
  • fix tests of exp10 and atan2 failing on some platforms
  • fix debug/1 to be available only when debug/0 is defined
  • improve parser to allow binary operators as object values
  • improve compiler to emit error if query is missing
Changelog

Sourced from github.com/itchyny/gojq's changelog.

v0.12.16 (2024-06-01)

  • fix offset of query parsing error on multi-byte characters
  • fix tests of exp10 and atan2 failing on some platforms
  • fix debug/1 to be available only when debug/0 is defined
  • improve parser to allow binary operators as object values
  • improve compiler to emit error if query is missing
Commits
  • 0607aa5 bump up version to 0.12.16
  • 0709341 update CHANGELOG.md for v0.12.16
  • 1324e6e update dependencies
  • 01355e9 improve parser to allow binary operators as object values
  • a41a5f8 fix debug/1 function to be available only when debug/0 is defined
  • f694c1b fix a benchmark test BenchmarkCompile
  • f2559f6 remove private compare function
  • 0cd3a66 improve compiler to abort with error if query is missing
  • 422cc9d refactor stringify function declarations of query
  • 1130c4e refactor program body, rename rules, remove empty actions in parser
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.34.0 to 1.34.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the go-dependencies group across 1 directory with 11 updates
a351d4e 
Bumps the go-dependencies group with 8 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/briandowns/spinner](https://github.com/briandowns/spinner) | `1.23.0` | `1.23.1` |
| [github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss) | `0.10.0` | `0.12.1` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.0` | `1.8.1` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.18.2` | `1.19.0` |
| [go.opentelemetry.io/proto/otlp](https://github.com/open-telemetry/opentelemetry-proto-go) | `1.2.0` | `1.3.1` |
| [go.pinniped.dev](https://github.com/vmware-tanzu/pinniped) | `0.29.0` | `0.32.0` |
| [github.com/fatih/color](https://github.com/fatih/color) | `1.16.0` | `1.17.0` |
| [github.com/itchyny/gojq](https://github.com/itchyny/gojq) | `0.12.15` | `0.12.16` |



Updates `github.com/briandowns/spinner` from 1.23.0 to 1.23.1
- [Release notes](https://github.com/briandowns/spinner/releases)
- [Commits](briandowns/spinner@v1.23.0...v1.23.1)

Updates `github.com/charmbracelet/lipgloss` from 0.10.0 to 0.12.1
- [Release notes](https://github.com/charmbracelet/lipgloss/releases)
- [Changelog](https://github.com/charmbracelet/lipgloss/blob/master/.goreleaser.yml)
- [Commits](charmbracelet/lipgloss@v0.10.0...v0.12.1)

Updates `github.com/spf13/cobra` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.8.0...v1.8.1)

Updates `github.com/spf13/viper` from 1.18.2 to 1.19.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.18.2...v1.19.0)

Updates `go.opentelemetry.io/proto/otlp` from 1.2.0 to 1.3.1
- [Release notes](https://github.com/open-telemetry/opentelemetry-proto-go/releases)
- [Commits](open-telemetry/opentelemetry-proto-go@v1.2.0...v1.3.1)

Updates `go.pinniped.dev` from 0.29.0 to 0.32.0
- [Release notes](https://github.com/vmware-tanzu/pinniped/releases)
- [Commits](vmware/pinniped@v0.29.0...v0.32.0)

Updates `golang.org/x/oauth2` from 0.19.0 to 0.21.0
- [Commits](golang/oauth2@v0.19.0...v0.21.0)

Updates `golang.org/x/term` from 0.19.0 to 0.21.0
- [Commits](golang/term@v0.19.0...v0.21.0)

Updates `github.com/fatih/color` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.16.0...v1.17.0)

Updates `github.com/itchyny/gojq` from 0.12.15 to 0.12.16
- [Release notes](https://github.com/itchyny/gojq/releases)
- [Changelog](https://github.com/itchyny/gojq/blob/main/CHANGELOG.md)
- [Commits](itchyny/gojq@v0.12.15...v0.12.16)

Updates `google.golang.org/protobuf` from 1.34.0 to 1.34.1

---
updated-dependencies:
- dependency-name: github.com/briandowns/spinner
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/charmbracelet/lipgloss
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: github.com/spf13/viper
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.opentelemetry.io/proto/otlp
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.pinniped.dev
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/fatih/color
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/itchyny/gojq
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot requested a review from pnickolov as a code owner July 15, 2024 01:24
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jul 15, 2024
@dependabot dependabot bot mentioned this pull request Jul 15, 2024
Closed
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Reviewers

@pnickolov pnickolov Awaiting requested review from pnickolov pnickolov is a code owner

At least 1 approving review is required to merge this pull request.

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants