fix(deps): bump the external group across 1 directory with 26 updates#3107
Open
dependabot[bot] wants to merge 2 commits intomainfrom
Open
fix(deps): bump the external group across 1 directory with 26 updates#3107dependabot[bot] wants to merge 2 commits intomainfrom
dependabot[bot] wants to merge 2 commits intomainfrom
Conversation
Contributor
Benchmark results, click to expandBenchmark authorization.GetDecisions Results:
Benchmark authorization.v2.GetMultiResourceDecision Results:
Benchmark Statistics
Bulk Benchmark Results
TDF3 Benchmark Results:
|
Contributor
Bumps the external group with 15 updates in the /service directory: | Package | From | To | | --- | --- | --- | | [buf.build/go/protovalidate](https://github.com/bufbuild/protovalidate-go) | `1.0.0` | `1.1.3` | | [github.com/casbin/casbin/v2](https://github.com/casbin/casbin) | `2.108.0` | `2.135.0` | | [github.com/docker/docker](https://github.com/docker/docker) | `28.5.1+incompatible` | `28.5.2+incompatible` | | [github.com/eko/gocache/lib/v4](https://github.com/eko/gocache) | `4.2.0` | `4.2.3` | | [github.com/go-chi/cors](https://github.com/go-chi/cors) | `1.2.1` | `1.2.2` | | [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.26.0` | `10.30.1` | | [github.com/go-viper/mapstructure/v2](https://github.com/go-viper/mapstructure) | `2.4.0` | `2.5.0` | | [github.com/grpc-ecosystem/grpc-gateway/v2](https://github.com/grpc-ecosystem/grpc-gateway) | `2.27.3` | `2.28.0` | | [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.7.5` | `5.8.0` | | [github.com/lib/pq](https://github.com/lib/pq) | `1.10.9` | `1.11.2` | | [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3) | `1.14.29` | `1.14.34` | | [github.com/open-policy-agent/opa](https://github.com/open-policy-agent/opa) | `1.5.1` | `1.14.0` | | [github.com/pressly/goose/v3](https://github.com/pressly/goose) | `3.24.3` | `3.27.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.40.0` | `1.41.0` | | [go.opentelemetry.io/otel/exporters/stdout/stdouttrace](https://github.com/open-telemetry/opentelemetry-go) | `1.39.0` | `1.41.0` | Updates `buf.build/go/protovalidate` from 1.0.0 to 1.1.3 - [Release notes](https://github.com/bufbuild/protovalidate-go/releases) - [Commits](bufbuild/protovalidate-go@v1.0.0...v1.1.3) Updates `github.com/casbin/casbin/v2` from 2.108.0 to 2.135.0 - [Release notes](https://github.com/casbin/casbin/releases) - [Commits](casbin/casbin@v2.108.0...v2.135.0) Updates `github.com/docker/docker` from 28.5.1+incompatible to 28.5.2+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v28.5.1...v28.5.2) Updates `github.com/eko/gocache/lib/v4` from 4.2.0 to 4.2.3 - [Release notes](https://github.com/eko/gocache/releases) - [Commits](eko/gocache@lib/v4.2.0...lib/v4.2.3) Updates `github.com/go-chi/cors` from 1.2.1 to 1.2.2 - [Release notes](https://github.com/go-chi/cors/releases) - [Commits](go-chi/cors@v1.2.1...v1.2.2) Updates `github.com/go-playground/validator/v10` from 10.26.0 to 10.30.1 - [Release notes](https://github.com/go-playground/validator/releases) - [Commits](go-playground/validator@v10.26.0...v10.30.1) Updates `github.com/go-viper/mapstructure/v2` from 2.4.0 to 2.5.0 - [Release notes](https://github.com/go-viper/mapstructure/releases) - [Changelog](https://github.com/go-viper/mapstructure/blob/main/CHANGELOG.md) - [Commits](go-viper/mapstructure@v2.4.0...v2.5.0) Updates `github.com/grpc-ecosystem/grpc-gateway/v2` from 2.27.3 to 2.28.0 - [Release notes](https://github.com/grpc-ecosystem/grpc-gateway/releases) - [Commits](grpc-ecosystem/grpc-gateway@v2.27.3...v2.28.0) Updates `github.com/jackc/pgx/v5` from 5.7.5 to 5.8.0 - [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md) - [Commits](jackc/pgx@v5.7.5...v5.8.0) Updates `github.com/lib/pq` from 1.10.9 to 1.11.2 - [Release notes](https://github.com/lib/pq/releases) - [Changelog](https://github.com/lib/pq/blob/master/CHANGELOG.md) - [Commits](lib/pq@v1.10.9...v1.11.2) Updates `github.com/mattn/go-sqlite3` from 1.14.29 to 1.14.34 - [Release notes](https://github.com/mattn/go-sqlite3/releases) - [Commits](mattn/go-sqlite3@v1.14.29...v1.14.34) Updates `github.com/open-policy-agent/opa` from 1.5.1 to 1.14.0 - [Release notes](https://github.com/open-policy-agent/opa/releases) - [Changelog](https://github.com/open-policy-agent/opa/blob/main/CHANGELOG.md) - [Commits](open-policy-agent/opa@v1.5.1...v1.14.0) Updates `github.com/pressly/goose/v3` from 3.24.3 to 3.27.0 - [Release notes](https://github.com/pressly/goose/releases) - [Changelog](https://github.com/pressly/goose/blob/main/CHANGELOG.md) - [Commits](pressly/goose@v3.24.3...v3.27.0) Updates `github.com/spf13/cobra` from 1.9.1 to 1.10.2 - [Release notes](https://github.com/spf13/cobra/releases) - [Commits](spf13/cobra@v1.9.1...v1.10.2) Updates `github.com/spf13/viper` from 1.20.1 to 1.21.0 - [Release notes](https://github.com/spf13/viper/releases) - [Commits](spf13/viper@v1.20.1...v1.21.0) Updates `go.opentelemetry.io/otel` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace` from 1.39.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc` from 1.39.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0) Updates `go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp` from 1.39.0 to 1.40.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.40.0) Updates `go.opentelemetry.io/otel/exporters/stdout/stdouttrace` from 1.39.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.39.0...v1.41.0) Updates `go.opentelemetry.io/otel/sdk` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) Updates `go.opentelemetry.io/otel/trace` from 1.40.0 to 1.41.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.40.0...v1.41.0) Updates `golang.org/x/net` from 0.47.0 to 0.50.0 - [Commits](golang/net@v0.47.0...v0.50.0) Updates `google.golang.org/grpc` from 1.77.0 to 1.79.1 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.77.0...v1.79.1) Updates `google.golang.org/protobuf` from 1.36.10 to 1.36.11 Updates `golang.org/x/text` from 0.32.0 to 0.34.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.32.0...v0.34.0) --- updated-dependencies: - dependency-name: buf.build/go/protovalidate dependency-version: 1.1.3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/casbin/casbin/v2 dependency-version: 2.135.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/docker/docker dependency-version: 28.5.2+incompatible dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: github.com/eko/gocache/lib/v4 dependency-version: 4.2.3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: github.com/go-chi/cors dependency-version: 1.2.2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: github.com/go-playground/validator/v10 dependency-version: 10.30.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/go-viper/mapstructure/v2 dependency-version: 2.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/grpc-ecosystem/grpc-gateway/v2 dependency-version: 2.28.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/jackc/pgx/v5 dependency-version: 5.8.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/lib/pq dependency-version: 1.11.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/mattn/go-sqlite3 dependency-version: 1.14.34 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: github.com/open-policy-agent/opa dependency-version: 1.14.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/pressly/goose/v3 dependency-version: 3.27.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/spf13/cobra dependency-version: 1.10.2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: github.com/spf13/viper dependency-version: 1.21.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel dependency-version: 1.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp dependency-version: 1.40.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/exporters/stdout/stdouttrace dependency-version: 1.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: go.opentelemetry.io/otel/trace dependency-version: 1.41.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: golang.org/x/net dependency-version: 0.50.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: google.golang.org/grpc dependency-version: 1.79.1 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external - dependency-name: google.golang.org/protobuf dependency-version: 1.36.11 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: external - dependency-name: golang.org/x/text dependency-version: 0.34.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: external ... Signed-off-by: dependabot[bot] <support@github.com>
2e5c4dc to
2c3e117
Compare
Contributor
Benchmark results, click to expandBenchmark authorization.GetDecisions Results:
Benchmark authorization.v2.GetMultiResourceDecision Results:
Benchmark Statistics
Bulk Benchmark Results
TDF3 Benchmark Results:
|
Contributor
Fixes govulncheck failure caused by HTTP/2 frame handling panic vulnerability in golang.org/x/net@v0.50.0 and below. Signed-off-by: Scott Hamrick <2623452+cshamrick@users.noreply.github.com>
Contributor
Benchmark results, click to expandBenchmark authorization.GetDecisions Results:
Benchmark authorization.v2.GetMultiResourceDecision Results:
Benchmark Statistics
Bulk Benchmark Results
TDF3 Benchmark Results:
|
Contributor
Contributor
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the external group with 15 updates in the /service directory:
1.0.01.1.32.108.02.135.028.5.1+incompatible28.5.2+incompatible4.2.04.2.31.2.11.2.210.26.010.30.12.4.02.5.02.27.32.28.05.7.55.8.01.10.91.11.21.14.291.14.341.5.11.14.03.24.33.27.01.40.01.41.01.39.01.41.0Updates
buf.build/go/protovalidatefrom 1.0.0 to 1.1.3Release notes
Sourced from buf.build/go/protovalidate's releases.
Commits
61167beFix registry chain for pb.Map in NativeToValue (#309)58d9ffbBump the go group across 1 directory with 2 updates (#308)89a14f7Fix a few godoc comments and update golangci-lint (#306)e666f1aFix base type adapter missing builtin types (#305)3707b74Implement registry chaining for CEL type isolation (#302)a87f1c9Avoid heap escape on kvPairs evaluation (#301)c2ae600Wrap protoreflect.Map with type information so we don't need to cast to map[a...5dd4789Avoid copying types.Registry on env.Extend (#299)d9f7a10Expand benchmark tests (#298)b90590aAlways provide all available variables (#297)Updates
github.com/casbin/casbin/v2from 2.108.0 to 2.135.0Release notes
Sourced from github.com/casbin/casbin/v2's releases.
... (truncated)
Commits
5fc9fd8feat: remove Travis script and issue templates5d3134dfeat: fix inconsistent backslash handling between matcher literals and CSV-pa...0a13664feat: fix stale g() function cache in BuildRoleLinks causing incorrect permis...4b6c4c8feat: improve README1eef59afeat: fix EscapeAssertion (matcher) incorrectly matching p./r. patterns insid...bb1e443feat: fix duplicate CI workflow runs and optimize to test only Go 1.21 (#1571)91b9cf2feat: add OrBAC (Organisation-Based Access Control) model support (#1567)87e9956feat: add ContextEnforcer: add ctx to AddPolicy and other APIs (#1553)1ef00acfeat: enable concurrent transactions using optimistic locking, versioning and...0c5a574feat: add PBAC model support and test (#1548)Updates
github.com/docker/dockerfrom 28.5.1+incompatible to 28.5.2+incompatibleRelease notes
Sourced from github.com/docker/docker's releases.
Commits
89c5e8fMerge pull request #51396 from thaJeztah/28.x_backport_api_docs9b93878Merge pull request #51395 from thaJeztah/28.x_backport_rootless_reject6178456Merge pull request #51398 from vvoland/51397-28.x0cae4e5vendor: github.com/moby/buildkit v0.25.233cc06fMerge pull request #51394 from vvoland/51393-28.xd525277api/docs: remove BuildCache.Parent field for API v1.42 and up2fbc51bdockerd-rootless.sh: reject DOCKERD_ROOTLESS_ROOTLESSKIT_NET=hostbd98008integration-cli: Adjust nofile limits1967515Dockerfile: update runc binary to v1.3.34489660Merge pull request #51387 from thaJeztah/28.x_bump_goUpdates
github.com/eko/gocache/lib/v4from 4.2.0 to 4.2.3Release notes
Sourced from github.com/eko/gocache/lib/v4's releases.
... (truncated)
Commits
5654fdfMerge pull request #300 from geigerj0/bump-deps3fabe46bump all deps7747003bump depsb4334a5bump depsf037427bump deps003ae39Merge pull request #296 from Neo2308/feature/master/hide-mock-interfaces42bb50eRename import to resolve warnings21cb8b5Added mocksc0e14c1Hide mock interfaces from users277d34aMerge pull request #295 from eko/memcache-mocksUpdates
github.com/go-chi/corsfrom 1.2.1 to 1.2.2Release notes
Sourced from github.com/go-chi/cors's releases.
Commits
3a53812Fix Origin header check (#38)f8fbaeeUpdate Go version in CI (#32)b41f767fix test_default error message #28 (#29)76ca797Fix broken link (#25)9aca617Update README with install (#22)Updates
github.com/go-playground/validator/v10from 10.26.0 to 10.30.1Release notes
Sourced from github.com/go-playground/validator/v10's releases.
... (truncated)
Commits
5010f83Fix 1513 update ISO 3166-2 codes (#1514)e8627a1fix: Revert min limit of e164 regex (#1516)65b1bccFeat: uds_exists validator (#1482)e9b900cfix: resolve panic when using cross-field validators with ValidateMap (#1508)7aba81cfix: resolve panic when using aliases with OR operator (#1507)4d600befix: add missing translations for alpha validators (#1510)b0e4ba2docs: document omitzero (#1509)79fba72Bump github.com/gabriel-vasile/mimetype from 1.4.11 to 1.4.12 (#1505)c3c9084Bump golang.org/x/crypto from 0.45.0 to 0.46.0 (#1504)afce000excluded_unlessbug fix (#1307)Updates
github.com/go-viper/mapstructure/v2from 2.4.0 to 2.5.0Release notes
Sourced from github.com/go-viper/mapstructure/v2's releases.
Commits
9aa3f77Merge pull request #166 from go-viper/unmarshal2ae32a61doc: add more documentation320c8c9test: cover unmarshaler to map5b22829feat: add unmarshaler interfacefd74c75Merge pull request #137 from andreev-fn/opt-root-namedee4661Merge pull request #59 from DarkiT/main5605df4chore: cover more test cases, fix edge cases, add docs6166631fix(mapstructure): add multi-tag support and regression tests6471aa6Merge pull request #149 from thespags/maindbffaaachore: add more tests and clarification to the documentationUpdates
github.com/grpc-ecosystem/grpc-gateway/v2from 2.27.3 to 2.28.0Release notes
Sourced from github.com/grpc-ecosystem/grpc-gateway/v2's releases.
... (truncated)
Commits
13a31f4fix(protoc-gen-openapiv2): fix panic on enum resolution in nested messages (#...8e678ffchore(deps): update googleapis digest to 27ffde2 (#6369)41651ffchore(deps): update googleapis digest to b026ba8 (#6368)d083140chore(deps): update googleapis digest to 537554c (#6365)eb2fadachore(deps): update googleapis digest to 7b25d8c (#6364)d8dddc9chore(deps): update googleapis digest to 6781051 (#6363)3c4354fchore(deps): update googleapis digest to 055f92c (#6362)b2eb1b5fix(deps): update module google.golang.org/grpc to v1.79.1 (#6361)61b9d73chore(deps): update googleapis digest to d84d3c2 (#6360)e0880e3chore(deps): update googleapis digest to 6eead6e (#6359)Updates
github.com/jackc/pgx/v5from 5.7.5 to 5.8.0Changelog
Sourced from github.com/jackc/pgx/v5's changelog.
Commits
fe8740aRelease v5.8.0e5dde5aSkip test on CockroachDB06f2d82Remove trailing space2cf78ddMerge pull request #2448 from DengChan/column_type_lenth_varbit2d1c4efSkip tests on CockroachDB1a5fa7fArray and Composite codecs handle typed nils5736d09ColumnTypeLength method return the type length for varbit type.4c1308cRevert "stdlib matches native pgx scanning support"14ce2b7Skip test on CockroachDB65b2724Merge pull request #2443 from jameshartig/x-invalidate-cache-in-execUpdates
github.com/lib/pqfrom 1.10.9 to 1.11.2Release notes
Sourced from github.com/lib/pq's releases.