chore(deps): bump the go_modules group across 1 directory with 9 updates #5
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps the go_modules group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/Azure/azure-sdk-for-go/sdk/azidentity](https://github.com/Azure/azure-sdk-for-go) | `1.2.1` | `1.6.0` | | [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) | `3.0.0` | `3.0.3` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.53.0` | `1.56.3` | | [github.com/docker/distribution](https://github.com/docker/distribution) | `2.8.1+incompatible` | `2.8.2+incompatible` | | [github.com/docker/docker](https://github.com/docker/docker) | `20.10.17+incompatible` | `25.0.6+incompatible` | | [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.4.2` | `4.5.1` | Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.2.1 to 1.6.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md) - [Commits](Azure/azure-sdk-for-go@sdk/azidentity/v1.2.1...sdk/azcore/v1.6.0) Updates `github.com/go-jose/go-jose/v3` from 3.0.0 to 3.0.3 - [Release notes](https://github.com/go-jose/go-jose/releases) - [Changelog](https://github.com/go-jose/go-jose/blob/v3.0.3/CHANGELOG.md) - [Commits](go-jose/go-jose@v3.0.0...v3.0.3) Updates `golang.org/x/crypto` from 0.6.0 to 0.24.0 - [Commits](golang/crypto@v0.6.0...v0.24.0) Updates `google.golang.org/grpc` from 1.53.0 to 1.56.3 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.53.0...v1.56.3) Updates `github.com/docker/distribution` from 2.8.1+incompatible to 2.8.2+incompatible - [Release notes](https://github.com/docker/distribution/releases) - [Commits](distribution/distribution@v2.8.1...v2.8.2) Updates `github.com/docker/docker` from 20.10.17+incompatible to 25.0.6+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v20.10.17...v25.0.6) Updates `github.com/golang-jwt/jwt/v4` from 4.4.2 to 4.5.1 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](golang-jwt/jwt@v4.4.2...v4.5.1) Updates `golang.org/x/net` from 0.6.0 to 0.26.0 - [Commits](golang/net@v0.6.0...v0.26.0) Updates `google.golang.org/protobuf` from 1.28.1 to 1.30.0 --- updated-dependencies: - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/go-jose/go-jose/v3 dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-type: direct:production dependency-group: go_modules - dependency-name: google.golang.org/grpc dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/docker/distribution dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/docker/docker dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/golang-jwt/jwt/v4 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-type: indirect dependency-group: go_modules - dependency-name: google.golang.org/protobuf dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
dependencies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the go_modules group with 6 updates in the / directory:
1.2.11.6.03.0.03.0.31.53.01.56.32.8.1+incompatible2.8.2+incompatible20.10.17+incompatible25.0.6+incompatible4.4.24.5.1Updates
github.com/Azure/azure-sdk-for-go/sdk/azidentityfrom 1.2.1 to 1.6.0Release notes
Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.
... (truncated)
Commits
36f766dadd sdk/resourcemanager/cosmos/armcosmos live test (#20705)c005ed6sdk/resourcemanager/network/armnetwork live test (#20331)5fa7df4add sdk/resourcemanager/compute/armcompute live test (#20048)0d22aedadd sdk/resourcemanager/eventhub/armeventhub live test (#20686)2a8d96dadd sdk/resourcemanager/postgresql/armpostgresql live test (#20685)b2cddab[Release] sdk/resourcemanager/paloaltonetworksngfw/armpanngfw/0.1.0 (#20437)ed7f3c7Fix azidentity troubleshooting guide link (#20736)6dfd0cb[azeventhubs] Fixing checkpoint store race condition (#20727)745d967pass along the artifact name so we can override it later (#20732)20b4dd8Update changelog with latest features (#20730)Updates
github.com/go-jose/go-jose/v3from 3.0.0 to 3.0.3Release notes
Sourced from github.com/go-jose/go-jose/v3's releases.
Changelog
Sourced from github.com/go-jose/go-jose/v3's changelog.
Commits
add6a28v3: backport decompression limit fix (#107)11bb4e7doc: in v3 branch's README, point to v4 as latest (#101)863f73bv3.0.2: Update changelog (#95)bdbc794Update golang.org/x/crypto to v0.19 (backport) (#94)25bce79Updated go-jose v3.0.0 to v3.0.1 in jose-util (#70)aa386dfjwe/CompactSerialize: improve performance. (#67)053c9bfDecryptMulti: handle decompression error (#19)ca9011bBump go version to 1.21.4 to satisfy govulncheck (#68)c8399dfRevert pull request #10 (multiple audiences) (#24)ec819e9Add a security.md doc for contacting us about potential security vulnerabilit...Updates
golang.org/x/cryptofrom 0.6.0 to 0.24.0Commits
332fd65go.mod: update golang.org/x dependencies0b431c7x509roots/fallback: update bundle349231fssh: implement CryptoPublicKey on sk keys44c9b0fssh: allow server auth callbacks to send additional banners67b1361sha3: reenable s390x assembly477a5b4sha3: make APIs usable with zero allocations59b5a86sha3: disable s390x assembly10f366esha3: simplify XOR functions905d78ago.mod: update golang.org/x dependenciesebb717dssh: validate key type in SSH_MSG_USERAUTH_PK_OK responseUpdates
google.golang.org/grpcfrom 1.53.0 to 1.56.3Release notes
Sourced from google.golang.org/grpc's releases.
... (truncated)
Commits
1055b48Update version.go to 1.56.3 (#6713)5efd7bdserver: prohibit more than MaxConcurrentStreams handlers from running at once...bd1f038Upgrade version.go to 1.56.3-dev (#6434)faab873Update version.go to v1.56.2 (#6432)6b0b291status: fix panic when servers return a wrapped error with status OK (#6374) ...ed56401[PSM interop] Don't fail target if sub-target already failed (#6390) (#6405)cd6a794Update version.go to v1.56.2-dev (#6387)5b67e5eUpdate version.go to v1.56.1 (#6386)d0f5150client: handle empty address lists correctly in addrConn.updateAddrs (#6354) ...997c1eaChange version to 1.56.1-dev (#6345)Updates
github.com/docker/distributionfrom 2.8.1+incompatible to 2.8.2+incompatibleRelease notes
Sourced from github.com/docker/distribution's releases.
Commits
7c354a4Merge pull request #3915 from distribution/2.8.2-release-notesa173a9cAdd v2.8.2 release notes4894d35Merge pull request #3914 from vvoland/handle-forbidden-28f067f66Merge pull request #3783 from ndeloof/accept-encoding-28483ad69registry/errors: Parse http forbidden as denied2b0f84dRevert "registry/client: set Accept: identity header when getting layers"320d6a1Merge pull request #3912 from distribution/2.8.2-beta.2-release-notes5f3ca1bAdd release notes for 2.8.2-beta.2 releasecb840f6Merge pull request #3911 from thaJeztah/2.8_backport_fix_releaser_filenamese884644Dockerfile: fix filenames of artifactsUpdates
github.com/docker/dockerfrom 20.10.17+incompatible to 25.0.6+incompatibleRelease notes
Sourced from github.com/docker/docker's releases.
... (truncated)
Commits
b08a51fMerge pull request #48231 from austinvazquez/backport-vendor-otel-v0.46.1-to-...d151b0fvendor: OTEL v0.46.1 / v1.21.0c6ba9a5Merge pull request #48225 from austinvazquez/backport-workflow-artifact-reten...4673a3cMerge pull request #48227 from austinvazquez/backport-backport-branch-check-t...30f8908github/ci: Check if backport is opened against the expected branch7454d6aci: update workflow artifacts retention65cc597Merge commit from forkb722836Merge pull request #48199 from austinvazquez/update-containerd-binary-to-1.7.20e8ecb9cupdate containerd binary to v1.7.20e6cae1fupdate containerd binary to v1.7.19Updates
github.com/golang-jwt/jwt/v4from 4.4.2 to 4.5.1Release notes
Sourced from github.com/golang-jwt/jwt/v4's releases.
Commits
7b1c1c0Merge commit from fork9358574Allow strict base64 decoding (#259)2f0984aUsingtparsefor nicer CI test display (#251)2101c1fNo pointer embedding in the example (#255)35053d4Removed unneeded if statement (#241)0c4e387Add doc comment to ParseWithClaims (#232)bfea432Include https://github.com/golang-jwt/jwe in README (#229)d81acbfBump matrix to support latest go version (go1.19) (#231)fdaf0ebImplement a BearerExtractor (#226)f2878bbfix: link update for README.md for v4 (#217)Updates
golang.org/x/netfrom 0.6.0 to 0.26.0Commits
66e838cgo.mod: update golang.org/x dependencies6249541http2: avoid race in server handler SetReadDeadine/SetWriteDeadline603e3e6quic: disable X25519Kyber768Draft00 in tests67e8d0chttp2: report an error if goroutines outlive serverTester tests5608279http2: avoid corruption in priority write scheduler0d515a5http2: factor out frame read/write test functions9f5b79bhttp2: drop unused retry function03c24c2http2: use synthetic time in server tests022530chttp2: add a more full-featured test net.Conn410d19ehttp2: avoid racy access to clientStream.requestedGzipUpdates
google.golang.org/protobuffrom 1.28.1 to 1.30.0Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.