chore(deps): bump the everything-else group across 1 directory with 10 updates #2423
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
…0 updates Bumps the everything-else group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/gorilla/websocket](https://github.com/gorilla/websocket) | `1.5.1` | `1.5.3` | | [github.com/rs/cors](https://github.com/rs/cors) | `1.10.1` | `1.11.0` | | [go.etcd.io/bbolt](https://github.com/etcd-io/bbolt) | `1.3.9` | `1.3.10` | | [go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc](https://github.com/open-telemetry/opentelemetry-go) | `1.25.0` | `1.27.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.23.0` | `0.24.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.25.0` | `0.26.0` | | google.golang.org/protobuf | `1.34.1` | `1.34.2` | Updates `github.com/gorilla/websocket` from 1.5.1 to 1.5.3 - [Release notes](https://github.com/gorilla/websocket/releases) - [Commits](gorilla/websocket@v1.5.1...v1.5.3) Updates `github.com/rs/cors` from 1.10.1 to 1.11.0 - [Commits](rs/cors@v1.10.1...v1.11.0) Updates `go.etcd.io/bbolt` from 1.3.9 to 1.3.10 - [Release notes](https://github.com/etcd-io/bbolt/releases) - [Commits](etcd-io/bbolt@v1.3.9...v1.3.10) Updates `go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc` from 1.25.0 to 1.27.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.25.0...v1.27.0) Updates `golang.org/x/crypto` from 0.23.0 to 0.24.0 - [Commits](golang/crypto@v0.23.0...v0.24.0) Updates `golang.org/x/mod` from 0.16.0 to 0.17.0 - [Commits](golang/mod@v0.16.0...v0.17.0) Updates `golang.org/x/net` from 0.25.0 to 0.26.0 - [Commits](golang/net@v0.25.0...v0.26.0) Updates `golang.org/x/term` from 0.20.0 to 0.21.0 - [Commits](golang/term@v0.20.0...v0.21.0) Updates `golang.org/x/tools` from 0.19.0 to 0.21.1-0.20240508182429-e35e4ccd0d2d - [Release notes](https://github.com/golang/tools/releases) - [Commits](https://github.com/golang/tools/commits) Updates `google.golang.org/protobuf` from 1.34.1 to 1.34.2 --- updated-dependencies: - dependency-name: github.com/gorilla/websocket dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything-else - dependency-name: github.com/rs/cors dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: go.etcd.io/bbolt dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything-else - dependency-name: go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: golang.org/x/crypto dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: golang.org/x/mod dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: golang.org/x/term dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: golang.org/x/tools dependency-type: direct:production update-type: version-update:semver-minor dependency-group: everything-else - dependency-name: google.golang.org/protobuf dependency-type: direct:production update-type: version-update:semver-patch dependency-group: everything-else ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
requested review from
mvertes,
gfanton and
moul
and removed request for
a team
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
Bumps the everything-else group with 7 updates in the / directory:
1.5.11.5.31.10.11.11.01.3.91.3.101.25.01.27.00.23.00.24.00.25.00.26.01.34.11.34.2Updates
github.com/gorilla/websocketfrom 1.5.1 to 1.5.3Release notes
Sourced from github.com/gorilla/websocket's releases.
... (truncated)
Commits
ce903f6Reverts to v1.5.09ec25cafixes broken random value generation1bddf2ebumps go version & removes deprecated module usage750bf92adds GHA & Makefile configsb2c246bRevert " Update go version & add verification/testing tools (#840)"09a6babremoving error handling while closing connections58af150return errors instead of printing to logse5f1a0aexcludes errchecks linterb2a86a1Do not timeout when WriteControl deadline is zero695e909Remove hideTempErr to allow downstream users to check for errors like net.Err...Updates
github.com/rs/corsfrom 1.10.1 to 1.11.0Commits
4c32059Normalize allowed request headers and store them in a sorted set (fixes #170)...8d33ca4Complete documentation; deprecate AllowOriginRequestFunc in favour of AllowOr...af821aeMerge branch 'jub0bs-master'0bcf73fUpdate benchmarkeacc8e8Fix skewed middleware benchmarks (#165)9297f15Respect the documented precedence of options (#163)73f81b4Fix readme benchmark rendering (#161)Updates
go.etcd.io/bboltfrom 1.3.9 to 1.3.10Release notes
Sourced from go.etcd.io/bbolt's releases.
Commits
014b028Merge pull request #744 from ahrtr/cursor_202405022d48e1dEnsure a cursor can continue to iterate elements in reverse direction by call...886753cMerge pull request #717 from henrybear327/fix/remove_UnsafeSlice9e3d732Remove UnsafeSlice and use unsafe.Slice2c29534Merge pull request #713 from henrybear327/cve/CVE-2023-45288-release-1.39b60c13Address linter issues0b59bc1Bump go toolchain version to address CVE-2023-452889f3524bMerge pull request #716 from henrybear327/feat/introduce-go-version-file67a2678Adopt the .go-version approach for toolchain versioningUpdates
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpcfrom 1.25.0 to 1.27.0Changelog
Sourced from go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc's changelog.
... (truncated)
Commits
5661ff0Release v1.27.0/v0.49.0/v0.3.0 (#5392)0d3dddcFix exported instrument kind const value change (#5385)7aae7a8chore(deps): update benchmark-action/github-action-benchmark action to v1.20....8c3120fchore(deps): update module google.golang.org/genproto/googleapis/api to v0.0....d55658echore(deps): update codecov/codecov-action action to v4.4.1 (#5387)49c866ffix(deps): update module github.com/golangci/golangci-lint to v1.58.2 (#5382)999c6a0Update all semconv use to v1.25.0 (#5374)14441aeIdentify logger with schemaURL in global logger provider (#5375)ebd0adeSplit log/logtest into a recorder and a logger (#5365)0d1e77cFix package prefix of error in otlploghttp (#5371)Updates
golang.org/x/cryptofrom 0.23.0 to 0.24.0Commits
332fd65go.mod: update golang.org/x dependencies0b431c7x509roots/fallback: update bundle349231fssh: implement CryptoPublicKey on sk keys44c9b0fssh: allow server auth callbacks to send additional banners67b1361sha3: reenable s390x assembly477a5b4sha3: make APIs usable with zero allocations59b5a86sha3: disable s390x assembly10f366esha3: simplify XOR functionsUpdates
golang.org/x/modfrom 0.16.0 to 0.17.0Commits
aa51b25modfile: do not collapse if there are unattached comments within blocks87140ecsumdb/tlog: make NewTiles only generate strictly necessary tiles18d3f56modfile: fix crash on AddGoStmt in empty FileUpdates
golang.org/x/netfrom 0.25.0 to 0.26.0Commits
66e838cgo.mod: update golang.org/x dependencies6249541http2: avoid race in server handler SetReadDeadine/SetWriteDeadline603e3e6quic: disable X25519Kyber768Draft00 in tests67e8d0chttp2: report an error if goroutines outlive serverTester tests5608279http2: avoid corruption in priority write scheduler0d515a5http2: factor out frame read/write test functions9f5b79bhttp2: drop unused retry function03c24c2http2: use synthetic time in server tests022530chttp2: add a more full-featured test net.Conn410d19ehttp2: avoid racy access to clientStream.requestedGzipUpdates
golang.org/x/termfrom 0.20.0 to 0.21.0Commits
5f0bb72go.mod: update golang.org/x dependenciesUpdates
golang.org/x/toolsfrom 0.19.0 to 0.21.1-0.20240508182429-e35e4ccd0d2dCommits
Updates
google.golang.org/protobuffrom 1.34.1 to 1.34.2Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditions