fix(deps): update misc non-major dependencies

[renovate]

This PR contains the following updates:

Package	Type	Update	Change	Age	Adoption	Passing	Confidence
envoyproxy/protoc-gen-validate		minor	0.9.1 -> 0.10.1
github.com/gorilla/handlers	require	patch	v1.5.1 -> v1.5.2
github.com/otiai10/copy	require	minor	v1.9.0 -> v1.14.0
github.com/sirupsen/logrus	require	patch	v1.9.0 -> v1.9.3
github.com/spf13/viper	require	minor	v1.14.0 -> v1.19.0
github.com/stretchr/testify	require	minor	v1.8.1 -> v1.10.0
google.golang.org/grpc/cmd/protoc-gen-go-grpc		minor	v1.2.0 -> v1.5.1
google.golang.org/protobuf		minor	v1.28.1 -> v1.36.1
google.golang.org/protobuf	require	minor	v1.28.1 -> v1.36.1
grpc-tools (source)		patch	1.12.3 -> 1.12.4
grpc-web (source)		minor	1.4.2 -> 1.5.0
grpc_tools_node_protoc_ts		patch	5.3.2 -> 5.3.3
mypy-protobuf		minor	3.4.0 -> 3.6.0
protoc-gen-grpc-web		minor	1.4.1 -> 1.5.0
protocolbuffers/protobuf-javascript		patch	v3.21.2 -> v3.21.4
ts-proto		minor	1.138.0 -> 1.181.2

---

Release Notes

envoyproxy/protoc-gen-validate (envoyproxy/protoc-gen-validate)

v0.10.1

Compare Source

What's Changed

• Fix long rendering in TimestampValidation in Java generator by @​lujiajing1126 in https://github.com/bufbuild/protoc-gen-validate/pull/782
• Break dependency on google::protobuf::UTF8FirstLetterNumBytes() by @​yanavlasov in https://github.com/bufbuild/protoc-gen-validate/pull/814
• Upgrade go to 1.19.7 by @​elliotmjackson in https://github.com/bufbuild/protoc-gen-validate/pull/821

New Contributors

• @​lujiajing1126 made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/782
• @​yanavlasov made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/814

Full Changelog: bufbuild/protoc-gen-validate@v0.10.0...v0.10.1

v0.10.0

Compare Source

What's Changed

• Proposal: Improve Makefile by @​dio in https://github.com/bufbuild/protoc-gen-validate/pull/735
• docs: fix installation by @​suzuki-shunsuke in https://github.com/bufbuild/protoc-gen-validate/pull/765
• fix(bazel): make pgv compiler usable by @​alexeagle in https://github.com/bufbuild/protoc-gen-validate/pull/766
• In/NotIn and const rules show enum values for enum type by @​elb3k in https://github.com/bufbuild/protoc-gen-validate/pull/699
• Add PR Title Linter by @​rubensf in https://github.com/bufbuild/protoc-gen-validate/pull/775
• Migrate to google.golang.org/protobuf (v2) via protoc-gen-star v2 by @​pdecks in https://github.com/bufbuild/protoc-gen-validate/pull/783
• Pin Token Exchange Version by @​rubensf in https://github.com/bufbuild/protoc-gen-validate/pull/806

New Contributors

• @​suzuki-shunsuke made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/765
• @​alexeagle made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/766
• @​elb3k made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/699
• @​pdecks made their first contribution in https://github.com/bufbuild/protoc-gen-validate/pull/783

Dependency Changes

• Bump setuptools from 65.5.0 to 65.5.1 by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/763
• Bump versions-maven-plugin from 2.13.0 to 2.14.2 in /java by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/761
• Bump github.com/lyft/protoc-gen-star from 0.6.1 to 0.6.2 by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/759
• Bump grpc-bom from 1.51.0 to 1.51.1 in /java by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/758
• Bump google.protobuf.version from 3.21.10 to 3.21.12 in /java by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/757
• Bump golang.org/x/net from 0.2.0 to 0.4.0 by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/751
• Bump wheel from 0.36.2 to 0.38.1 by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/762
• Bump golang.org/x/tools from 0.3.0 to 0.4.0 by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/753
• Bump proto-google-common-protos from 2.11.0 to 2.12.0 in /java by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/767
• Bump assertj-core from 3.23.1 to 3.24.1 in /java by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/768
• Bump golang.org/x/net from 0.4.0 to 0.5.0 by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/769
• Bump golang.org/x/net from 0.5.0 to 0.7.0 by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/796
• Bump golang.org/x/net from 0.5.0 to 0.7.0 in /tests by @​dependabot in https://github.com/bufbuild/protoc-gen-validate/pull/792
• Update all deps by @​elliotmjackson in https://github.com/bufbuild/protoc-gen-validate/pull/820

Full Changelog: bufbuild/protoc-gen-validate@v0.9.1...v0.10.0

gorilla/handlers (github.com/gorilla/handlers)

v1.5.2

Compare Source

What's Changed

• build: CircleCI 2.1 + build matrix by @​elithrar in https://github.com/gorilla/handlers/pull/199
• Update README.md by @​coreydaley in https://github.com/gorilla/handlers/pull/239
• added makefile, github-actions and updated go version by @​bharat-rajani in https://github.com/gorilla/handlers/pull/241
• Update issues.yml by @​coreydaley in https://github.com/gorilla/handlers/pull/242
• Replace 200, HEAD and OPTIONS with constants from net/http by @​iBug in https://github.com/gorilla/handlers/pull/243
• update GitHub workflows by @​coreydaley in https://github.com/gorilla/handlers/pull/251

New Contributors

• @​coreydaley made their first contribution in https://github.com/gorilla/handlers/pull/239
• @​bharat-rajani made their first contribution in https://github.com/gorilla/handlers/pull/241
• @​iBug made their first contribution in https://github.com/gorilla/handlers/pull/243

Full Changelog: gorilla/handlers@v1.5.1...v1.5.2

otiai10/copy (github.com/otiai10/copy)

v1.14.0: Concurrency Option

Compare Source

v1.12.0

Compare Source

v1.11.0: Add OnError option

Compare Source

so that users can suppress specific errors.

v1.10.0

Compare Source

sirupsen/logrus (github.com/sirupsen/logrus)

v1.9.3

Compare Source

• Fix a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines sirupsen/logrus@f9291a5 (re-apply https://github.com/sirupsen/logrus/pull/1376)
• Fix panic in Writer sirupsen/logrus@d40e25c

Full Changelog: sirupsen/logrus@v1.9.2...v1.9.3

v1.9.2

Compare Source

• Revert https://github.com/sirupsen/logrus/pull/1376, which introduced a regression in v1.9.1

Full Changelog: sirupsen/logrus@v1.9.1...v1.9.2

v1.9.1

Compare Source

What's Changed

• Fix data race in hooks.test package by @​FrancoisWagner in https://github.com/sirupsen/logrus/pull/1362
• Add instructions to use different log levels for local and syslog by @​tommyblue in https://github.com/sirupsen/logrus/pull/1372
• This commit fixes a potential denial of service vulnerability in logrus.Writer() that could be triggered by logging text longer than 64kb without newlines. by @​ozfive in https://github.com/sirupsen/logrus/pull/1376
• Use text when shows the logrus output by @​xieyuschen in https://github.com/sirupsen/logrus/pull/1339

New Contributors

• @​FrancoisWagner made their first contribution in https://github.com/sirupsen/logrus/pull/1362
• @​tommyblue made their first contribution in https://github.com/sirupsen/logrus/pull/1372
• @​ozfive made their first contribution in https://github.com/sirupsen/logrus/pull/1376
• @​xieyuschen made their first contribution in https://github.com/sirupsen/logrus/pull/1339

Full Changelog: sirupsen/logrus@v1.9.0...v1.9.1

spf13/viper (github.com/spf13/viper)

v1.19.0

Compare Source

What's Changed

Bug Fixes 🐛

• fix!: hide struct binding behind a feature flag by @​sagikazarmark in https://github.com/spf13/viper/pull/1720

Dependency Updates ⬆️

• build(deps): bump github/codeql-action from 2.22.8 to 2.22.9 by @​dependabot in https://github.com/spf13/viper/pull/1705
• build(deps): bump actions/setup-go from 4.1.0 to 5.0.0 by @​dependabot in https://github.com/spf13/viper/pull/1703
• build(deps): bump github/codeql-action from 2.22.9 to 3.22.11 by @​dependabot in https://github.com/spf13/viper/pull/1713
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.0 to 2.1.1 by @​dependabot in https://github.com/spf13/viper/pull/1711
• build(deps): bump golang.org/x/crypto from 0.16.0 to 0.17.0 by @​dependabot in https://github.com/spf13/viper/pull/1722
• build(deps): bump github/codeql-action from 3.22.11 to 3.23.0 by @​dependabot in https://github.com/spf13/viper/pull/1734
• build(deps): bump actions/dependency-review-action from 3.1.4 to 3.1.5 by @​dependabot in https://github.com/spf13/viper/pull/1731
• build(deps): bump mheap/github-action-required-labels from 5.1.0 to 5.2.0 by @​dependabot in https://github.com/spf13/viper/pull/1743
• build(deps): bump github/codeql-action from 3.23.0 to 3.23.2 by @​dependabot in https://github.com/spf13/viper/pull/1742
• build(deps): bump actions/dependency-review-action from 3.1.5 to 4.0.0 by @​dependabot in https://github.com/spf13/viper/pull/1739
• build(deps): bump cachix/install-nix-action from 24 to 25 by @​dependabot in https://github.com/spf13/viper/pull/1737
• build(deps): bump github/codeql-action from 3.23.2 to 3.24.0 by @​dependabot in https://github.com/spf13/viper/pull/1751
• build(deps): bump github/codeql-action from 3.24.0 to 3.24.1 by @​dependabot in https://github.com/spf13/viper/pull/1760
• build(deps): bump actions/dependency-review-action from 4.0.0 to 4.1.0 by @​dependabot in https://github.com/spf13/viper/pull/1761
• build(deps): bump golangci/golangci-lint-action from 3.7.0 to 4.0.0 by @​dependabot in https://github.com/spf13/viper/pull/1757
• build(deps): bump mheap/github-action-required-labels from 5.2.0 to 5.3.0 by @​dependabot in https://github.com/spf13/viper/pull/1759
• build(deps): bump github/codeql-action from 3.24.1 to 3.24.3 by @​dependabot in https://github.com/spf13/viper/pull/1763
• build(deps): bump github.com/sagikazarmark/crypt from 0.17.0 to 0.18.0 by @​dependabot in https://github.com/spf13/viper/pull/1774
• build(deps): bump github/codeql-action from 3.24.3 to 3.24.5 by @​dependabot in https://github.com/spf13/viper/pull/1770
• build(deps): bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @​dependabot in https://github.com/spf13/viper/pull/1776
• build(deps): bump github/codeql-action from 3.24.5 to 3.24.6 by @​dependabot in https://github.com/spf13/viper/pull/1775
• build(deps): bump cachix/install-nix-action from 25 to 26 by @​dependabot in https://github.com/spf13/viper/pull/1778
• build(deps): bump actions/dependency-review-action from 4.1.0 to 4.1.3 by @​dependabot in https://github.com/spf13/viper/pull/1767
• build(deps): bump github/codeql-action from 3.24.6 to 3.24.9 by @​dependabot in https://github.com/spf13/viper/pull/1790
• build(deps): bump mheap/github-action-required-labels from 5.3.0 to 5.4.0 by @​dependabot in https://github.com/spf13/viper/pull/1789
• build(deps): bump actions/checkout from 4.1.1 to 4.1.2 by @​dependabot in https://github.com/spf13/viper/pull/1780
• build(deps): bump actions/dependency-review-action from 4.1.3 to 4.2.4 by @​dependabot in https://github.com/spf13/viper/pull/1793
• chore: upgrade crypt by @​sagikazarmark in https://github.com/spf13/viper/pull/1794
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.1.1 to 2.2.0 by @​dependabot in https://github.com/spf13/viper/pull/1788
• build(deps): bump actions/dependency-review-action from 4.2.4 to 4.2.5 by @​dependabot in https://github.com/spf13/viper/pull/1796
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.0 to 2.2.1 by @​dependabot in https://github.com/spf13/viper/pull/1804
• build(deps): bump github/codeql-action from 3.24.9 to 3.25.1 by @​dependabot in https://github.com/spf13/viper/pull/1806
• build(deps): bump golang.org/x/net from 0.22.0 to 0.23.0 by @​dependabot in https://github.com/spf13/viper/pull/1807
• build(deps): bump actions/checkout from 4.1.2 to 4.1.3 by @​dependabot in https://github.com/spf13/viper/pull/1808
• build(deps): bump actions/checkout from 4.1.3 to 4.1.4 by @​dependabot in https://github.com/spf13/viper/pull/1813
• build(deps): bump github/codeql-action from 3.25.1 to 3.25.2 by @​dependabot in https://github.com/spf13/viper/pull/1811
• build(deps): bump mheap/github-action-required-labels from 5.4.0 to 5.4.1 by @​dependabot in https://github.com/spf13/viper/pull/1817
• build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2 by @​dependabot in https://github.com/spf13/viper/pull/1821
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2 by @​dependabot in https://github.com/spf13/viper/pull/1822
• build(deps): bump actions/setup-go from 5.0.0 to 5.0.1 by @​dependabot in https://github.com/spf13/viper/pull/1824
• build(deps): bump github/codeql-action from 3.25.2 to 3.25.4 by @​dependabot in https://github.com/spf13/viper/pull/1828
• build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1 by @​dependabot in https://github.com/spf13/viper/pull/1829
• build(deps): bump github/codeql-action from 3.25.4 to 3.25.7 by @​dependabot in https://github.com/spf13/viper/pull/1844
• build(deps): bump cachix/install-nix-action from 26 to 27 by @​dependabot in https://github.com/spf13/viper/pull/1833
• build(deps): bump actions/checkout from 4.1.4 to 4.1.6 by @​dependabot in https://github.com/spf13/viper/pull/1835

Other Changes

• Update links to Golang Modules documentation by @​tobb10001 in https://github.com/spf13/viper/pull/1758
• chore: add Go 1.22 support by @​sagikazarmark in https://github.com/spf13/viper/pull/1762
• fix #​1700: update tests to use local viper instance by @​smukk9 in https://github.com/spf13/viper/pull/1791
• Update references to bketelsen/crypt by @​skitt in https://github.com/spf13/viper/pull/1842

New Contributors

• @​tobb10001 made their first contribution in https://github.com/spf13/viper/pull/1758
• @​smukk9 made their first contribution in https://github.com/spf13/viper/pull/1791
• @​skitt made their first contribution in https://github.com/spf13/viper/pull/1842

Full Changelog: spf13/viper@v1.18.1...v1.19.0

v1.18.2

Compare Source

tl;dr Skip 1.18.0 and 1.18.1 and upgrade to this version instead.

This release fixes a regression that appears in rare circumstances when using Unmarshal or UnmarshalExact to decode values onto pointers with multiple indirection (eg. pointer to a pointer, etc). The change was introduced in 1.18.0 as a means to resolve a long-standing bug when decoding environment variables to structs.

The feature is now disabled by default and can be enabled using the viper_bind_struct build tag. It's also considered experimental at this point, so breaking changes may be introduced in the future.

What's Changed

Bug Fixes 🐛

• feat!: hide struct binding behind a feature flag by @​sagikazarmark in https://github.com/spf13/viper/pull/1715

Full Changelog: spf13/viper@v1.18.1...v1.18.2

v1.18.1

Compare Source

What's Changed

Bug Fixes 🐛

• Merge missing struct keys inside UnmarshalExact by @​krakowski in https://github.com/spf13/viper/pull/1704

Full Changelog: spf13/viper@v1.18.0...v1.18.1

v1.18.0

Compare Source

Major changes

Highlighting some of the changes for better visibility.

Please share your feedback in the Discussion forum. Thanks! ❤️

AutomaticEnv works with Unmarshal

Previously, environment variables that weren't bound manually or had no defaults could not be mapped by Unmarshal. (The problem is explained in details in this issue: #​761)

#​1429 introduced a solution that solves that issue.

What's Changed

Enhancements 🚀

• chore: rename files according to enabled build tags by @​alexandear in https://github.com/spf13/viper/pull/1642
• test: replace ifs with asserts to simplify tests by @​alexandear in https://github.com/spf13/viper/pull/1656
• ci: enable test shuffle and fix tests by @​alexandear in https://github.com/spf13/viper/pull/1643
• fix: gocritic lint issues by @​alexandear in https://github.com/spf13/viper/pull/1696

Bug Fixes 🐛

• Implement viper.BindStruct for automatic unmarshalling from environment variables by @​krakowski in https://github.com/spf13/viper/pull/1429
• fix isPathShadowedInFlatMap type cast bug by @​linuxsong in https://github.com/spf13/viper/pull/1585

Dependency Updates ⬆️

• build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 by @​dependabot in https://github.com/spf13/viper/pull/1661
• build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by @​dependabot in https://github.com/spf13/viper/pull/1659
• build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by @​dependabot in https://github.com/spf13/viper/pull/1663
• build(deps): bump actions/github-script from 6.4.1 to 7.0.1 by @​dependabot in https://github.com/spf13/viper/pull/1686
• build(deps): bump github/codeql-action from 2.22.3 to 2.22.8 by @​dependabot in https://github.com/spf13/viper/pull/1688
• build(deps): bump github.com/spf13/afero from 1.10.0 to 1.11.0 by @​dependabot in https://github.com/spf13/viper/pull/1692
• build(deps): bump actions/dependency-review-action from 3.1.0 to 3.1.4 by @​dependabot in https://github.com/spf13/viper/pull/1690
• build(deps): bump cachix/install-nix-action from 23 to 24 by @​dependabot in https://github.com/spf13/viper/pull/1689
• build(deps): bump github.com/nats-io/nkeys from 0.4.5 to 0.4.6 by @​dependabot in https://github.com/spf13/viper/pull/1672
• build(deps): bump github.com/spf13/cast from 1.5.1 to 1.6.0 by @​dependabot in https://github.com/spf13/viper/pull/1691
• build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 by @​dependabot in https://github.com/spf13/viper/pull/1668
• chore: update dependencies by @​sagikazarmark in https://github.com/spf13/viper/pull/1694
• chore: update crypt by @​sagikazarmark in https://github.com/spf13/viper/pull/1701

Other Changes

• Add info about multiple hosts for remote config by @​KaymeKaydex in https://github.com/spf13/viper/pull/1684
• refactor: drop fsonitfy wrapper by @​sagikazarmark in https://github.com/spf13/viper/pull/1693
• Note Get* behavior on parse failure by @​scop in https://github.com/spf13/viper/pull/1687
• fix: godot lint issues by @​alexandear in https://github.com/spf13/viper/pull/1657

New Contributors

• @​KaymeKaydex made their first contribution in https://github.com/spf13/viper/pull/1684
• @​krakowski made their first contribution in https://github.com/spf13/viper/pull/1429
• @​linuxsong made their first contribution in https://github.com/spf13/viper/pull/1585

Full Changelog: spf13/viper@v1.17.0...v1.18.0

v1.17.0

Compare Source

Major changes

Highlighting some of the changes for better visibility.

Please share your feedback in the Discussion forum. Thanks! ❤️

Minimum Go version: 1.19

Viper now requires Go 1.19

This change ensures we can stay up to date with modern practices and dependencies.

log/slog support [BREAKING]

Viper v1.11.0 added an experimental Logger interface to allow custom implementations (besides jwalterweatherman).

In addition, it also exposed an experimental WithLogger function allowing to set a custom logger.

This release deprecates that interface in favor of log/slog released in Go 1.21.

[!WARNING]
WithLogger accepts an *slog.Logger from now on.

To preserve backwards compatibility with older Go versions, prior to Go 1.21 Viper accepts a *golang.org/x/exp/slog.Logger.

The experimental flag is removed.

New finder implementation [BREAKING]

As of this release, Viper uses a new library to look for files, called locafero.

The new library is better covered by tests and has been built from scratch as a general purpose file finder library.

The implementation is experimental and is hidden behind a finder build tag.

[!WARNING]
The io/fs based implementation (that used to be hidden behind a finder build tag) has been removed.

What's Changed

Exciting New Features 🎉

• Add NATS support by @​hooksie1 in https://github.com/spf13/viper/pull/1590
• Add slog support by @​sagikazarmark in https://github.com/spf13/viper/pull/1627

Enhancements 🚀

• chore: add local development environment using nix by @​sagikazarmark in https://github.com/spf13/viper/pull/1572
• feat: add func GetEnvPrefix by @​baruchiro in https://github.com/spf13/viper/pull/1565
• Improve dev env by @​sagikazarmark in https://github.com/spf13/viper/pull/1575
• fix: code optimization by @​testwill in https://github.com/spf13/viper/pull/1557
• test: remove not needed testutil.Setenv by @​alexandear in https://github.com/spf13/viper/pull/1610
• new finder library based on afero by @​sagikazarmark in https://github.com/spf13/viper/pull/1625
• refactor: make use of strings.Cut by @​scop in https://github.com/spf13/viper/pull/1650

Breaking Changes 🛠

• feat: drop support for Go 1.17 by @​sagikazarmark in https://github.com/spf13/viper/pull/1574

Dependency Updates ⬆️

• build(deps): bump mheap/github-action-required-labels from 4 to 5 by @​dependabot in https://github.com/spf13/viper/pull/1563
• build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by @​dependabot in https://github.com/spf13/viper/pull/1558
• build(deps): bump cachix/install-nix-action from 21 to 22 by @​dependabot in https://github.com/spf13/viper/pull/1573
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.8 to 2.0.9 by @​dependabot in https://github.com/spf13/viper/pull/1586
• chore: upgrade crypt by @​sagikazarmark in https://github.com/spf13/viper/pull/1589
• build(deps): bump actions/checkout from 3.5.3 to 4.0.0 by @​dependabot in https://github.com/spf13/viper/pull/1616
• build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by @​dependabot in https://github.com/spf13/viper/pull/1615
• build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.9 to 2.1.0 by @​dependabot in https://github.com/spf13/viper/pull/1614
• build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8 by @​dependabot in https://github.com/spf13/viper/pull/1605
• build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by @​dependabot in https://github.com/spf13/viper/pull/1604
• build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by @​dependabot in https://github.com/spf13/viper/pull/1593
• build(deps): bump github.com/subosito/gotenv from 1.4.2 to 1.6.0 by @​dependabot in https://github.com/spf13/viper/pull/1603
• build(deps): bump cachix/install-nix-action from 22 to 23 by @​dependabot in https://github.com/spf13/viper/pull/1620
• chore(deps): update crypt by @​sagikazarmark in https://github.com/spf13/viper/pull/1621
• build(deps): bump actions/dependency-review-action from 3.0.8 to 3.1.0 by @​dependabot in https://github.com/spf13/viper/pull/1623
• Bump minimum Go version to 1.19 by @​sagikazarmark in https://github.com/spf13/viper/pull/1626
• build(deps): bump github/codeql-action from 2.21.5 to 2.21.6 by @​dependabot in https://github.com/spf13/viper/pull/1632
• build(deps): bump github/codeql-action from 2.21.6 to 2.21.7 by @​dependabot in https://github.com/spf13/viper/pull/1634
• build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by @​dependabot in https://github.com/spf13/viper/pull/1641
• build(deps): bump github.com/spf13/afero from 1.9.5 to 1.10.0 by @​dependabot in https://github.com/spf13/viper/pull/1640
• build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by @​dependabot in https://github.com/spf13/viper/pull/1638
• build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by @​dependabot in https://github.com/spf13/viper/pull/1648
• chore(deps): update crypt by @​sagikazarmark in https://github.com/spf13/viper/pull/1652

Other Changes

• [StepSecurity] ci: Harden GitHub Actions by @​step-security-bot in https://github.com/spf13/viper/pull/1592
• Add Vitess to list of projects using Viper by @​systay in https://github.com/spf13/viper/pull/1619
• docs: fix typos in comments by @​alexandear in https://github.com/spf13/viper/pull/1609
• ci: add Go 1.21 to the test matrix by @​sagikazarmark in https://github.com/spf13/viper/pull/1622
• Remove usages of deprecated io/ioutil; simplify viper tests by @​alexandear in https://github.com/spf13/viper/pull/1631
• chore: remove deprecated build tags by @​alexandear in https://github.com/spf13/viper/pull/1630
• refactor: replace 'interface{}' with 'any' by @​alexandear in https://github.com/spf13/viper/pull/1646
• test: refactor asserts by @​alexandear in https://github.com/spf13/viper/pull/1644
• docs: add set subset KV example by @​yhliyr in https://github.com/spf13/viper/pull/1647
• Make deps fixes by @​bersace in https://github.com/spf13/viper/pull/1628

New Contributors

• @​goldeneggg made their first contribution in https://github.com/spf13/viper/pull/1561
• @​baruchiro made their first contribution in https://github.com/spf13/viper/pull/1565
• @​testwill made their first contribution in https://github.com/spf13/viper/pull/1557
• @​step-security-bot ma

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gwy/templates/go.mod.tmpl

Command failed: go get -d -t ./...
go: go.mod file not found in current directory or any parent directory.
	'go get' is no longer supported outside a module.
	To build and install a command, use 'go install' with a version,
	like 'go install example.com/cmd@latest'
	For more information, see https://golang.org/doc/go-get-install-deprecation
	or run 'go help get' or 'go help install'.

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gwy/templates/go.mod.tmpl

Command failed: go get -d -t ./...
go: go.mod file not found in current directory or any parent directory.
	'go get' is no longer supported outside a module.
	To build and install a command, use 'go install' with a version,
	like 'go install example.com/cmd@latest'
	For more information, see https://golang.org/doc/go-get-install-deprecation
	or run 'go help get' or 'go help install'.