Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

update: bump the gomod-packages group across 1 directory with 9 updates #1752

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 9, 2024

Bumps the gomod-packages group with 9 updates in the / directory:

Package From To
github.com/docker/cli 27.1.2+incompatible 27.2.0+incompatible
github.com/docker/docker 27.1.2+incompatible 27.2.0+incompatible
github.com/go-playground/validator/v10 10.22.0 10.22.1
github.com/prometheus/client_golang 1.20.1 1.20.3
github.com/sigstore/sigstore 1.8.8 1.8.9
github.com/sigstore/sigstore/pkg/signature/kms/aws 1.8.8 1.8.9
github.com/sigstore/sigstore/pkg/signature/kms/azure 1.8.8 1.8.9
github.com/sigstore/sigstore/pkg/signature/kms/gcp 1.8.8 1.8.9
github.com/sigstore/sigstore/pkg/signature/kms/hashivault 1.8.8 1.8.9

Updates github.com/docker/cli from 27.1.2+incompatible to 27.2.0+incompatible

Commits
  • 3ab4256 Merge pull request #5374 from vvoland/vendor-docker
  • 88a49df vendor: github.com/docker/docker 3ab5c7d0036c (v27.2.0-dev)
  • 5d17c29 Merge pull request #5372 from thaJeztah/27.x_backport_fix_linting_issues
  • 64b9e4c cli: rename args that collided with builtins (predeclard)
  • 4b71d0d e2e/global: fix n-constant format string in call (govet)
  • 002cfcd cli/command: fix n-constant format string in call (govet)
  • d8af781 cli/command/system: remove redundant nil-check (gosimple)
  • f042ddb Merge pull request #5371 from vvoland/vendor-docker
  • 8e94ed1 vendor: github.com/docker/docker b27de4ef1634 (v27.2.0-dev)
  • 7a82aee Merge pull request #5368 from dvdksn/27x_5360
  • Additional commits viewable in compare view

Updates github.com/docker/docker from 27.1.2+incompatible to 27.2.0+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v27.2.0

27.2.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

New

  • CLI: Add support for device-code flow login when authenticating to the official registry. docker/cli#5349
  • containerd image store: docker image ls now supports --tree flag that shows a multiplatform-aware image list. This is experimental and may change at any time without any backwards compatibility. docker/cli#5353

API

  • GET /images/json response now includes Manifests field, which contains information about the sub-manifests included in the image index. This includes things like platform-specific manifests and build attestations. The new field will only be populated if the request also sets the manifests query parameter to true.

[!WARNING]

This is experimental and may change at any time without any backward compatibility.

Bug fixes and enhancements

  • CLI: Fix issue with remote contexts over SSH where the CLI would allocate a pseudoterminal when connecting to the remote host, which causes issues in rare situations. docker/cli#5351
  • Fix an issue that prevented network creation with a --ip-range ending on a 64-bit boundary. moby/moby#48326
  • CLI: IPv6 addresses shown by docker ps in port bindings are now bracketed. docker/cli#5365
  • containerd image store: Fix early error exit from docker load in cases where unpacking the image would fail. moby/moby#48376
  • containerd image store: Fix the previous image not being persisted as dangling after docker pull. moby/moby#48380

Packaging updates

v27.2.0-rc.1

27.2.0-rc.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

... (truncated)

Commits
  • 3ab5c7d Merge pull request #48383 from vvoland/48382-27.x
  • 875e8ae vendor: github.com/containerd/containerd v1.7.21
  • 1900e4d Dockerfile: update containerd binary to v1.7.21 (static binaries and CI only)
  • cd7746d Merge pull request #48380 from vvoland/48374-27.x
  • 2a13a38 Merge pull request #48376 from vvoland/48293-27.x
  • 9fd71f5 Merge pull request #48378 from corhere/backport-27.x/dockerd-manpage
  • ecd2b6f c8d/image: Add hostPlatformMatcher
  • d5b0342 man: support bringing your own go-md2man
  • 56c5c23 man: build dockerd man pages using make
  • 77b2eb5 Removed all mentions of "please" from docs and messages
  • Additional commits viewable in compare view

Updates github.com/go-playground/validator/v10 from 10.22.0 to 10.22.1

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.22.1

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.22.0...v10.22.1

Commits

Updates github.com/prometheus/client_golang from 1.20.1 to 1.20.3

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.20.3

  • [BUGFIX] histograms: Fix possible data race when appending exemplars. #1608

v1.20.2

  • [BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. #1596
Changelog

Sourced from github.com/prometheus/client_golang's changelog.

1.20.3 / 2024-09-05

  • [BUGFIX] histograms: Fix possible data race when appending exemplars. #1608

1.20.2 / 2024-08-23

  • [BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. #1596
Commits
  • ef2f87e Merge pull request #1620 from prometheus/arthursens/prepare-1.20.3
  • 937ac63 Add changelog entry for 1.20.3
  • 6e9914d Merge pull request #1608 from krajorama/index-out-of-range-native-histogram-e...
  • d6b8c89 Update comments with more explanations
  • 504566f Use simplified solution from #1609 for the data race
  • dc8e9a4 fix: native histogram: Simplify and fix addExemplar
  • dc819ce Use a trivial solution to #1605
  • e061dfa native histogram: use exemplars in concurrency test
  • 67121dc Merge pull request #1596 from mrueg/fix-uncompressed-content-header
  • 187acd4 Cut 1.20.2
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore from 1.8.8 to 1.8.9

Release notes

Sourced from github.com/sigstore/sigstore's releases.

v1.8.9

What's Changed

Full Changelog: sigstore/sigstore@v1.8.8...v1.8.9

Commits
  • 4c750b7 oauthflow: Add SubjectFromUnverifiedToken (#1826)
  • b27128f build(deps): Bump the all group in /test/e2e with 2 updates (#1824)
  • 65aaa14 build(deps): Bump github.com/jellydator/ttlcache/v3 (#1822)
  • 21ad778 build(deps): Bump github.com/jellydator/ttlcache/v3 (#1823)
  • ebbebbf build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#1821)
  • 615304f build(deps): Bump github.com/jellydator/ttlcache/v3 (#1820)
  • 6fb1d8b build(deps): Bump github.com/jellydator/ttlcache/v3 (#1819)
  • 075e85c build(deps): Bump actions/upload-artifact in the all group (#1825)
  • 0ca1da6 build(deps): Bump the gomod group across 4 directories with 3 updates (#1818)
  • 26aae9d build(deps): Bump cloud.google.com/go/kms in /pkg/signature/kms/gcp (#1817)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore/pkg/signature/kms/aws from 1.8.8 to 1.8.9

Release notes

Sourced from github.com/sigstore/sigstore/pkg/signature/kms/aws's releases.

v1.8.9

What's Changed

Full Changelog: sigstore/sigstore@v1.8.8...v1.8.9

Commits
  • 4c750b7 oauthflow: Add SubjectFromUnverifiedToken (#1826)
  • b27128f build(deps): Bump the all group in /test/e2e with 2 updates (#1824)
  • 65aaa14 build(deps): Bump github.com/jellydator/ttlcache/v3 (#1822)
  • 21ad778 build(deps): Bump github.com/jellydator/ttlcache/v3 (#1823)
  • ebbebbf build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#1821)
  • 615304f build(deps): Bump github.com/jellydator/ttlcache/v3 (#1820)
  • 6fb1d8b build(deps): Bump github.com/jellydator/ttlcache/v3 (#1819)
  • 075e85c build(deps): Bump actions/upload-artifact in the all group (#1825)
  • 0ca1da6 build(deps): Bump the gomod group across 4 directories with 3 updates (#1818)
  • 26aae9d build(deps): Bump cloud.google.com/go/kms in /pkg/signature/kms/gcp (#1817)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore/pkg/signature/kms/azure from 1.8.8 to 1.8.9

Release notes

Sourced from github.com/sigstore/sigstore/pkg/signature/kms/azure's releases.

v1.8.9

What's Changed

Full Changelog: sigstore/sigstore@v1.8.8...v1.8.9

Commits
  • 4c750b7 oauthflow: Add SubjectFromUnverifiedToken (#1826)
  • b27128f build(deps): Bump the all group in /test/e2e with 2 updates (#1824)
  • 65aaa14 build(deps): Bump github.com/jellydator/ttlcache/v3 (#1822)
  • 21ad778 build(deps): Bump github.com/jellydator/ttlcache/v3 (#1823)
  • ebbebbf build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#1821)
  • 615304f build(deps): Bump github.com/jellydator/ttlcache/v3 (#1820)
  • 6fb1d8b build(deps): Bump github.com/jellydator/ttlcache/v3 (#1819)
  • 075e85c build(deps): Bump actions/upload-artifact in the all group (#1825)
  • 0ca1da6 build(deps): Bump the gomod group across 4 directories with 3 updates (#1818)
  • 26aae9d build(deps): Bump cloud.google.com/go/kms in /pkg/signature/kms/gcp (#1817)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore/pkg/signature/kms/gcp from 1.8.8 to 1.8.9

Release notes

Sourced from github.com/sigstore/sigstore/pkg/signature/kms/gcp's releases.

v1.8.9

What's Changed

Full Changelog: sigstore/sigstore@v1.8.8...v1.8.9

Commits
  • 4c750b7 oauthflow: Add SubjectFromUnverifiedToken (#1826)
  • b27128f build(deps): Bump the all group in /test/e2e with 2 updates (#1824)
  • 65aaa14 build(deps): Bump github.com/jellydator/ttlcache/v3 (#1822)
  • 21ad778 build(deps): Bump github.com/jellydator/ttlcache/v3 (#1823)
  • ebbebbf build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#1821)
  • 615304f build(deps): Bump github.com/jellydator/ttlcache/v3 (#1820)
  • 6fb1d8b build(deps): Bump github.com/jellydator/ttlcache/v3 (#1819)
  • 075e85c build(deps): Bump actions/upload-artifact in the all group (#1825)
  • 0ca1da6 build(deps): Bump the gomod group across 4 directories with 3 updates (#1818)
  • 26aae9d build(deps): Bump cloud.google.com/go/kms in /pkg/signature/kms/gcp (#1817)
  • Additional commits viewable in compare view

Updates github.com/sigstore/sigstore/pkg/signature/kms/hashivault from 1.8.8 to 1.8.9

Release notes

Sourced from github.com/sigstore/sigstore/pkg/signature/kms/hashivault's releases.

v1.8.9

What's Changed

Full Changelog: sigstore/sigstore@v1.8.8...v1.8.9

Commits
  • 4c750b7 oauthflow: Add SubjectFromUnverifiedToken (#1826)
  • b27128f build(deps): Bump the all group in /test/e2e with 2 updates (#1824)
  • 65aaa14 build(deps): Bump github.com/jellydator/ttlcache/v3 (#1822)
  • 21ad778 build(deps): Bump github.com/jellydator/ttlcache/v3 (#1823)
  • ebbebbf build(deps): Bump google.golang.org/api in /pkg/signature/kms/gcp (#1821)
  • 615304f build(deps): Bump github.com/jellydator/ttlcache/v3 (#1820)
  • 6fb1d8b build(deps): Bump github.com/jellydator/ttlcache/v3 (#1819)
  • 075e85c build(deps): Bump actions/upload-artifact in the all group (#1825)
  • 0ca1da6 build(deps): Bump the gomod group across 4 directories with 3 updates (#1818)
  • 26aae9d build(deps): Bump cloud.google.com/go/kms in /pkg/signature/kms/gcp (#1817)
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the gomod-packages group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/docker/cli](https://github.com/docker/cli) | `27.1.2+incompatible` | `27.2.0+incompatible` |
| [github.com/docker/docker](https://github.com/docker/docker) | `27.1.2+incompatible` | `27.2.0+incompatible` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.22.0` | `10.22.1` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.1` | `1.20.3` |
| [github.com/sigstore/sigstore](https://github.com/sigstore/sigstore) | `1.8.8` | `1.8.9` |
| [github.com/sigstore/sigstore/pkg/signature/kms/aws](https://github.com/sigstore/sigstore) | `1.8.8` | `1.8.9` |
| [github.com/sigstore/sigstore/pkg/signature/kms/azure](https://github.com/sigstore/sigstore) | `1.8.8` | `1.8.9` |
| [github.com/sigstore/sigstore/pkg/signature/kms/gcp](https://github.com/sigstore/sigstore) | `1.8.8` | `1.8.9` |
| [github.com/sigstore/sigstore/pkg/signature/kms/hashivault](https://github.com/sigstore/sigstore) | `1.8.8` | `1.8.9` |



Updates `github.com/docker/cli` from 27.1.2+incompatible to 27.2.0+incompatible
- [Commits](docker/cli@v27.1.2...v27.2.0)

Updates `github.com/docker/docker` from 27.1.2+incompatible to 27.2.0+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v27.1.2...v27.2.0)

Updates `github.com/go-playground/validator/v10` from 10.22.0 to 10.22.1
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.22.0...v10.22.1)

Updates `github.com/prometheus/client_golang` from 1.20.1 to 1.20.3
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/v1.20.3/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.20.1...v1.20.3)

Updates `github.com/sigstore/sigstore` from 1.8.8 to 1.8.9
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.8.8...v1.8.9)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/aws` from 1.8.8 to 1.8.9
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.8.8...v1.8.9)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/azure` from 1.8.8 to 1.8.9
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.8.8...v1.8.9)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/gcp` from 1.8.8 to 1.8.9
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.8.8...v1.8.9)

Updates `github.com/sigstore/sigstore/pkg/signature/kms/hashivault` from 1.8.8 to 1.8.9
- [Release notes](https://github.com/sigstore/sigstore/releases)
- [Commits](sigstore/sigstore@v1.8.8...v1.8.9)

---
updated-dependencies:
- dependency-name: github.com/docker/cli
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-packages
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: gomod-packages
- dependency-name: github.com/go-playground/validator/v10
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-packages
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-packages
- dependency-name: github.com/sigstore/sigstore
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-packages
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/aws
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-packages
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/azure
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-packages
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/gcp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-packages
- dependency-name: github.com/sigstore/sigstore/pkg/signature/kms/hashivault
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: gomod-packages
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 9, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 10, 2024

Superseded by #1753.

@dependabot dependabot bot closed this Sep 10, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/develop/gomod-packages-0d692191e0 branch September 10, 2024 03:48
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants