Bump the go-modules group with 31 updates #1056

dependabot · 2024-10-31T16:47:56Z

Bumps the go-modules group with 31 updates:

Package	From	To
github.com/Masterminds/semver/v3	`3.2.1`	`3.3.0`
github.com/onsi/gomega	`1.34.1`	`1.35.0`
github.com/paketo-buildpacks/libnodejs	`0.2.0`	`0.3.0`
github.com/paketo-buildpacks/occam	`0.18.7`	`0.18.8`
github.com/paketo-buildpacks/packit/v2	`2.14.2`	`2.15.0`
github.com/Masterminds/sprig/v3	`3.2.3`	`3.3.0`
github.com/Microsoft/hcsshim	`0.12.5`	`0.12.9`
github.com/andybalholm/brotli	`1.1.0`	`1.1.1`
github.com/bmatcuk/doublestar/v4	`4.6.1`	`4.7.1`
github.com/cloudflare/circl	`1.3.9`	`1.5.0`
github.com/cpuguy83/dockercfg	`0.3.1`	`0.3.2`
github.com/cyphar/filepath-securejoin	`0.3.1`	`0.3.4`
github.com/docker/cli	`27.1.2+incompatible`	`27.3.1+incompatible`
github.com/gabriel-vasile/mimetype	`1.4.5`	`1.4.6`
github.com/go-git/go-billy/v5	`5.5.0`	`5.6.0`
github.com/klauspost/compress	`1.17.9`	`1.17.11`
github.com/sylabs/sif/v2	`2.18.0`	`2.19.2`
github.com/tklauser/numcpus	`0.8.0`	`0.9.0`
github.com/vbatts/tar-split	`0.11.5`	`0.11.6`
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp	`0.53.0`	`0.56.0`
go.opentelemetry.io/otel	`1.28.0`	`1.31.0`
go.opentelemetry.io/otel/metric	`1.28.0`	`1.31.0`
go.opentelemetry.io/otel/trace	`1.28.0`	`1.31.0`
golang.org/x/crypto	`0.26.0`	`0.28.0`
golang.org/x/mod	`0.20.0`	`0.21.0`
golang.org/x/net	`0.28.0`	`0.30.0`
golang.org/x/sys	`0.24.0`	`0.26.0`
golang.org/x/text	`0.17.0`	`0.19.0`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20240528184218-531527333157`	`0.0.0-20240903143218-8af14fe29dc1`
google.golang.org/grpc	`1.65.0`	`1.67.0`
google.golang.org/protobuf	`1.34.2`	`1.35.1`

Updates github.com/Masterminds/semver/v3 from 3.2.1 to 3.3.0

Release notes

Sourced from github.com/Masterminds/semver/v3's releases.

v3.3.0

What's Changed

Fix: bad package in README by @sdelicata in Masterminds/semver#226

Updating the GitHub Actions and versions of Go used by @mattfarina in Masterminds/semver#229

Fix spelling in README by @robinschneider in Masterminds/semver#222

Adding go build cache to fuzz output by @mattfarina in Masterminds/semver#232

Add caching to fuzz testing by @mattfarina in Masterminds/semver#234

updating github actions by @mattfarina in Masterminds/semver#235

feat: nil version equality by @KnutZuidema in Masterminds/semver#213

add >= and <= by @grosser in Masterminds/semver#238

doc: hyphen range constraint without whitespace by @johnnychen94 in Masterminds/semver#216

Removing reference to vert by @mattfarina in Masterminds/semver#245

simplify StrictNewVersion by @grosser in Masterminds/semver#241

Updating the testing version of Go used by @mattfarina in Masterminds/semver#246

bumping min version in go.mod based on what's tested by @mattfarina in Masterminds/semver#248

Updating changelog for 3.3.0 by @mattfarina in Masterminds/semver#249

New Contributors

@sdelicata made their first contribution in Masterminds/semver#226

@robinschneider made their first contribution in Masterminds/semver#222

@KnutZuidema made their first contribution in Masterminds/semver#213

@grosser made their first contribution in Masterminds/semver#238

@johnnychen94 made their first contribution in Masterminds/semver#216

Full Changelog: Masterminds/semver@v3.2.1...v3.3.0

Changelog

Sourced from github.com/Masterminds/semver/v3's changelog.

3.3.0 (2024-08-27)

Added

#238: Add LessThanEqual and GreaterThanEqual functions (thanks @grosser)

#213: nil version equality checking (thanks @KnutZuidema)

Changed

#241: Simplify StrictNewVersion parsing (thanks @grosser)

Testing support up through Go 1.23

Minimum version set to 1.21 as this is what's tested now

Fuzz testing now supports caching

Commits

e6e3d4d Merge pull request #249 from mattfarina/update-changelog-3.3.0
e80c4ea Updating changelog for 3.3.0
80427ad Merge pull request #248 from mattfarina/bump-min-version
b610837 bumping min version in go.mod based on what's tested
a4cccd8 Merge pull request #246 from mattfarina/bump-go-1.23
7c178cf Updating the testing version of Go used
29f94c1 Merge pull request #241 from grosser/grosser/validate
2cf1b16 Merge pull request #245 from mattfarina/remove-vert
b55476a Removing reference to vert
d07450b simplify StrictNewVersion
Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.34.1 to 1.35.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.35.0

1.35.0

Features

You can now call EnforceDefaultTimeoutsWhenUsingContexts() to have Eventually honor the default timeout when passed a context. (prior to this you had to expclility add a timeout) [e4c4265]

You can call StopTrying(message).Successfully() to abort a Consistently early without failure [eeca931]

Fixes

Stop memoizing the result of HaveField to avoid unexpected errors when used with async assertions. [3bdbc4e]

Maintenance

Bump all dependencies [a05a416]

v1.34.2

1.34.2

Require Go 1.22+

Maintenance

bump ginkgo as well [c59c6dc]

bump to go 1.22 - remove x/exp dependency [8158b99]

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.35.0

Features

You can now call EnforceDefaultTimeoutsWhenUsingContexts() to have Eventually honor the default timeout when passed a context. (prior to this you had to expclility add a timeout) [e4c4265]

You can call StopTrying(message).Successfully() to abort a Consistently early without failure [eeca931]

Fixes

Stop memoizing the result of HaveField to avoid unexpected errors when used with async assertions. [3bdbc4e]

Maintenance

Bump all dependencies [a05a416]

1.34.2

Require Go 1.22+

Maintenance

bump ginkgo as well [c59c6dc]

bump to go 1.22 - remove x/exp dependency [8158b99]

Commits

d6331f9 v1.35.0
5deaf23 fix tests, but like actually this time
eeca931 Add Successfully() to StopTrying() to signal that Consistently can end early ...
3bdbc4e stop memoizing result of HaveField
e35358d sheepishly fix broken test. thanks CI
1b717d7 grrr. go mod tidy
a05a416 bump all dependencies
e4c4265 Add EnforceDefaultTimeoutsWhenUsingContexts()
7cabed6 v1.34.2
c59c6dc bump ginkgo as well
Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/libnodejs from 0.2.0 to 0.3.0

Release notes

Sourced from github.com/paketo-buildpacks/libnodejs's releases.

v0.3.0

What's Changed

Add support for cjs and mjs files when looking for a Node.js application

Marshal dependencies from package.toml

Full Changelog: paketo-buildpacks/libnodejs@v0.2.0...v0.3.0

Commits

1868fa9 feat: add support for cjs files (#34)
f099c5f Marshal dependencies from package.toml (#33)
5099ee8 build(deps): bump github.com/paketo-buildpacks/packit/v2
daff2f2 feat: add support for mjs files when finding apps (#31)
c6e737a build(deps): bump github.com/paketo-buildpacks/packit/v2
e1ab573 build(deps): bump github.com/onsi/gomega from 1.33.1 to 1.34.1
349be0c build(deps): bump github.com/paketo-buildpacks/packit/v2
90f967f build(deps): bump github.com/onsi/gomega from 1.33.0 to 1.33.1
2e42024 build(deps): bump github.com/paketo-buildpacks/packit/v2
3352dd5 build(deps): bump github.com/onsi/gomega from 1.32.0 to 1.33.0
Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/occam from 0.18.7 to 0.18.8

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.18.8

What's Changed

Bump github.com/google/go-containerregistry from 0.19.1 to 0.19.2 by @dependabot in paketo-buildpacks/occam#309

Updates go mod toolchain version to 1.22.5 by @paketo-bot in paketo-buildpacks/occam#313

Bump github.com/google/go-containerregistry from 0.19.2 to 0.20.0 by @dependabot in paketo-buildpacks/occam#315

Updates github-config by @paketo-bot in paketo-buildpacks/occam#316

Bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1 by @dependabot in paketo-buildpacks/occam#317

Updates go mod version to 1.22.5 by @paketo-bot in paketo-buildpacks/occam#318

Bump github.com/onsi/gomega from 1.33.1 to 1.34.0 by @dependabot in paketo-buildpacks/occam#321

Bump github.com/onsi/gomega from 1.34.0 to 1.34.1 by @dependabot in paketo-buildpacks/occam#322

Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2 by @dependabot in paketo-buildpacks/occam#323

Bump github.com/paketo-buildpacks/packit/v2 from 2.14.0 to 2.14.1 by @dependabot in paketo-buildpacks/occam#324

Bump github.com/paketo-buildpacks/packit/v2 from 2.14.1 to 2.14.2 by @dependabot in paketo-buildpacks/occam#326

Updates go mod version to 1.22.6 by @paketo-bot in paketo-buildpacks/occam#325

Updates go mod version to 1.23.0 by @paketo-bot in paketo-buildpacks/occam#328

Bump docker to version 26.1.5 to fix CVE-2024-41110 by @jericop in paketo-buildpacks/occam#331

New Contributors

@jericop made their first contribution in paketo-buildpacks/occam#331

Full Changelog: paketo-buildpacks/occam@v0.18.7...v0.18.8

Commits

1193f3c Bump docker to version 26.1.5 to fix CVE-2024-41110
5cd4ede Updates go mod version to 1.23.0
2e5b930 Updates go mod version to 1.22.6
815b014 Bump github.com/paketo-buildpacks/packit/v2 from 2.14.1 to 2.14.2
74a79fb Bump github.com/paketo-buildpacks/packit/v2 from 2.14.0 to 2.14.1
90134a5 Bump github.com/google/go-containerregistry from 0.20.1 to 0.20.2
653a6fb Bump github.com/onsi/gomega from 1.34.0 to 1.34.1
ed0e429 Bump github.com/onsi/gomega from 1.33.1 to 1.34.0
f467245 Updates go mod version to 1.22.5
c97acf2 Bump github.com/google/go-containerregistry from 0.20.0 to 0.20.1
Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.14.2 to 2.15.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.15.0

What's Changed

Updates github-config by @paketo-bot in paketo-buildpacks/packit#597

SyftCLIScanner: support SBOM generation with syft CLI by @arjun024 in paketo-buildpacks/packit#602

Full Changelog: paketo-buildpacks/packit@v2.14.2...v2.15.0

Commits

1ab5b00 SyftCLIScanner: support SBOM generation with syft CLI
884a7b7 Update to fix linter
c3a3e6a Updating github-config
See full diff in compare view

Updates github.com/Masterminds/sprig/v3 from 3.2.3 to 3.3.0

Release notes

Sourced from github.com/Masterminds/sprig/v3's releases.

v3.3.0

What's Changed

Updating the Go versions used in testing by @mattfarina in Masterminds/sprig#405

Change intial to initial. by @chrishalbert in Masterminds/sprig#391

Updating dependencies by @mattfarina in Masterminds/sprig#404

correct value by @jheyduk in Masterminds/sprig#376

Updating location of mergo by @mattfarina in Masterminds/sprig#406

feature: added sha512sum function by @itzik-elayev in Masterminds/sprig#400

docs: Add missing link to url functions by @carlpett in Masterminds/sprig#375

Update doc.go by @chey in Masterminds/sprig#369

Update mathf.md by @zzhu41 in Masterminds/sprig#290

Removing duplicate documentation by @mattfarina in Masterminds/sprig#407

Updating the changelog for the 3.3.0 release by @mattfarina in Masterminds/sprig#408

New Contributors

@chrishalbert made their first contribution in Masterminds/sprig#391

@jheyduk made their first contribution in Masterminds/sprig#376

@itzik-elayev made their first contribution in Masterminds/sprig#400

@carlpett made their first contribution in Masterminds/sprig#375

@chey made their first contribution in Masterminds/sprig#369

@zzhu41 made their first contribution in Masterminds/sprig#290

Full Changelog: Masterminds/sprig@v3.2.3...v3.3.0

Changelog

Sourced from github.com/Masterminds/sprig/v3's changelog.

Release 3.3.0 (2024-08-29)

Added

#400: added sha512sum function (thanks @itzik-elayev)

Changed

#407: Removed duplicate documentation (functions were documentated in 2 places)

#290: Corrected copy/paster oops in math documentation (thanks @zzhu41)

#369: Corrected template reference in docs (thanks @chey)

#375: Added link to URL documenation (thanks @carlpett)

#406: Updated the mergo dependency which had a breaking change (which was accounted for)

#376: Fixed documentation error (thanks @jheyduk)

#404: Updated dependency tree

#391: Fixed misspelling (thanks @chrishalbert)

#405: Updated Go versions used in testing

Commits

e708470 Merge pull request #408 from mattfarina/update-changelog-3.3
8fc4354 Updating the changelog for the 3.3.0 release
cb81a32 Merge pull request #407 from mattfarina/remove-dup-math-functions
2637693 Removing duplicate documentation
06b9a87 Merge pull request #290 from zzhu41/patch-1
e663ec6 Merge pull request #369 from chey/patch-1
bb2f73f Merge pull request #375 from carlpett/patch-1
f07659e Merge pull request #400 from itzik-elayev/master
98b35c1 Add closing bracket
7a88928 Merge pull request #406 from mattfarina/update-mergo
Additional commits viewable in compare view

Updates github.com/Microsoft/hcsshim from 0.12.5 to 0.12.9

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.9

What's Changed

[release/0.12] Update go to 1.22 + switch to using containerd/errdefs/pkg/errgrpc for grpc translation by @kiashok in microsoft/hcsshim#2301

Full Changelog: microsoft/hcsshim@v0.12.8...v0.12.9

v0.12.8

What's Changed

Fixing typo by @ritikaguptams in microsoft/hcsshim#2289

[release/0.12] Update containerd to v1.7.23 by @dmcgowan in microsoft/hcsshim#2295

Full Changelog: microsoft/hcsshim@v0.12.7...v0.12.8

v0.12.7

What's Changed

[release/0.12] Update pkg versions in go.mod by @kiashok in microsoft/hcsshim#2275

[release/0.12] Update runc version to 1.1.14 by @kiashok in microsoft/hcsshim#2271

Full Changelog: microsoft/hcsshim@v0.12.6...v0.12.7

v0.12.6

What's Changed

[release/0.12] Backport commits from hcsshim/main to update module versions by @kiashok in microsoft/hcsshim#2237

Full Changelog: microsoft/hcsshim@v0.12.5...v0.12.6

Commits

7392335 Switch to using containerd/errdefs/pkg/errgrpc for grpc translation
79d3f32 Update go to 1.22
05636b9 Update JOB_OBJECT_ALL_ACCESS and OpenJobObject (#2095)
1550628 mobve SILOOBJECT_BASIC_INFORMATION to winapi
bf52d58 fix SILOOBJECT_BASIC_INFORMATION alignment
8d48d87 Update containerd to v1.7.23 (#2295)
4ad298f Fixing typo (#2289)
86b5333 Bump golangci/golangci-lint-action from 4 to 6
5ae96f3 Update runc to v1.1.14
8f3fccd Update pkg versions
Additional commits viewable in compare view

Updates github.com/andybalholm/brotli from 1.1.0 to 1.1.1

Commits

57434b5 Encoder: check for empty block
97e8583 matchfinder.M4: some refinements to scoring
See full diff in compare view

Updates github.com/bmatcuk/doublestar/v4 from 4.6.1 to 4.7.1

Release notes

Sourced from github.com/bmatcuk/doublestar/v4's releases.

Fixed FilepathGlob("")

To be consistent with filepath.Glob, FilepathGlob("") returns nil.

Added MatchUnvalidated, PathMatchUnvalidated

These functions provide a small performance improvement in cases where you don't care about whether or not the pattern is valid (maybe because you already ran ValidatePattern).

Commits

1e20c6d fixes #95 FilepathGlob("") should return nil
da152ef add docs for MatchUnvalidated, PathMatchUnvalidated
2832f67 closes #92 adds MatchUnvalidated
424062b added sponsor: MASV
See full diff in compare view

Updates github.com/cloudflare/circl from 1.3.9 to 1.5.0

Release notes

Sourced from github.com/cloudflare/circl's releases.

CIRCL v1.5.0

New: ML-DSA, Module-Lattice-based Digital Signature Algorithm.

What's Changed

kem: add X25519MLKEM768 TLS hybrid KEM by @bwesterb in cloudflare/circl#510

Create semgrep.yml by @hrushikeshdeshpande in cloudflare/circl#514

repo: Some fixes reported by CodeQL by @armfazh in cloudflare/circl#515

Add ML-DSA (FIPS204) by @bwesterb in cloudflare/circl#480

sign/mldsa: Add test for ML-DSA signature verification. by @armfazh in cloudflare/circl#517

Release v1.5.0 by @armfazh in cloudflare/circl#518

New Contributors

@hrushikeshdeshpande made their first contribution in cloudflare/circl#514

Full Changelog: cloudflare/circl@v1.4.0...v1.5.0

CIRCL v1.4.0

Changes

New: ML-KEM compatible with FIPS-203.

Commit History

eddilithium3: fix typos by @bwesterb in cloudflare/circl#503

Add ML-KEM (FIPS 203). by @bwesterb in cloudflare/circl#470

Add ML-KEM decapsulation key check. by @bwesterb in cloudflare/circl#507

Preparing for release v1.4.0 by @armfazh in cloudflare/circl#508

Full Changelog: cloudflare/circl@v1.3.9...v1.4.0

Commits

1310edf Release v1.5.0
0246d59 Add test for ML-DSA signature verification.
e2bbd01 Add ML-DSA (FIPS204) (#480)
2ba992f Reverting arm64 jobs since qemu can't run go1.23 binaries yet.
ab15f82 Updates golangci-lint to v1.61.0 and fixes code.
064a9ba Bump to go1.22 inner files and ci jobs.
7040592 Adding semgrepignore to also analyse test files.
51a9a33 Update semgrep.yml
cfbc696 Create semgrep.yml
2d6cd98 kem: add X25519MLKEM768 TLS hybrid KEM
Additional commits viewable in compare view

Updates github.com/cpuguy83/dockercfg from 0.3.1 to 0.3.2

Release notes

Sourced from github.com/cpuguy83/dockercfg's releases.

v0.3.2

What's Changed

chore: improve errors by @stevenh in cpuguy83/dockercfg#3

New Contributors

@stevenh made their first contribution in cpuguy83/dockercfg#3

Full Changelog: cpuguy83/dockercfg@v0.3.1...v0.3.2

Commits

a07c3d1 Merge pull request #3 from stevenh/chore/improve-errors
91bd66a chore: improve errors
See full diff in compare view

Updates github.com/cyphar/filepath-securejoin from 0.3.1 to 0.3.4

Release notes

Sourced from github.com/cyphar/filepath-securejoin's releases.

v0.3.4

This release primarily includes a fix that blocked using filepath-securejoin in Kubernetes.

Previously, some testing mocks we had resulted in us doing import "testing" in non-_test.go code, which made some downstreams like Kubernetes unhappy. This has been fixed. (#32)

Thanks to all of the contributors who made this release possible:

Aleksa Sarai [email protected]

Stephen Kitt [email protected]

Signed-off-by: Aleksa Sarai [email protected]

v0.3.3

This release primarily includes fixes for spurious errors we hit when checking that directories created by MkdirAll "look right". Upon further consideration, these checks were fundamentally buggy and didn't offer any practical protection anyway.

The mode and owner verification logic in MkdirAll has been removed. This was originally intended to protect against some theoretical attacks but upon further consideration these protections don't actually buy us anything and they were causing spurious errors with more complicated filesystem setups.

The "is the created directory empty" logic in MkdirAll has also been removed. This was not causing us issues yet, but some pseudofilesystems (such as cgroup) create non-empty directories and so this logic would've been wrong for such cases.

Thanks to all of the contributors who made this release possible:

Aleksa Sarai [email protected]

Kir Kolyshkin [email protected]

Signed-off-by: Aleksa Sarai [email protected]

v0.3.2

This release includes a few fixes for MkdirAll when dealing with S_ISUID and S_ISGID, to solve a regression runc hit when switching to MkdirAll.

Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return an explicit error saying that those bits are ignored by mkdirat(2). In the past a different error was returned, but since the silent ignoring behaviour is codified in the man pages a more explicit error seems apt. While silently ignoring these bits would be the most compatible option, it could lead to users thinking their code sets these bits when it doesn't. Programs that need to deal with compatibility can mask the bits themselves. (#23, #25)

... (truncated)

Changelog

Sourced from github.com/cyphar/filepath-securejoin's changelog.

[0.3.4] - 2024-10-09

Fixed

Previously, some testing mocks we had resulted in us doing import "testing" in non-_test.go code, which made some downstreams like Kubernetes unhappy. This has been fixed. (#32)

[0.3.3] - 2024-09-30

Fixed

The mode and owner verification logic in MkdirAll has been removed. This was originally intended to protect against some theoretical attacks but upon further consideration these protections don't actually buy us anything and they were causing spurious errors with more complicated filesystem setups.

The "is the created directory empty" logic in MkdirAll has also been removed. This was not causing us issues yet, but some pseudofilesystems (such as cgroup) create non-empty directories and so this logic would've been wrong for such cases.

[0.3.2] - 2024-09-13

Changed

Passing the S_ISUID or S_ISGID modes to MkdirAllInRoot will now return an explicit error saying that those bits are ignored by mkdirat(2). In the past a different error was returned, but since the silent ignoring behaviour is codified in the man pages a more explicit error seems apt. While silently ignoring these bits would be the most compatible option, it could lead to users thinking their code sets these bits when it doesn't. Programs that need to deal with compatibility can mask the bits themselves. (#23, #25)

Fixed

If a directory has S_ISGID set, then all child directories will have S_ISGID set when created and a different gid will be used for any inode created under the directory. Previously, the "expected owner and mode" validation in securejoin.MkdirAll did not correctly handle this. We now correctly handle this case. (#24, #25)

Commits

fd16ade VERSION: release v0.3.4
00e0710 godoc: update package documentation
0cd6be1 README: fix reference to open_tree kernel requirements
205046f README: add pkg.go.dev badge
ecb1b8e tests: procfs: clean up mock test hook
3ec6eed CHANGELOG: mention #32 fix
86e6182 merge #32 into cyphar/filepath-securejoin:main
6864912 Isolate the testing import in test code
4348fee openat: remove unused function
d0c7d67 merge #31 into cyphar/filepath-securejoin:main
Additional commits viewable in compare view

Updates github.com/docker/cli from 27.1.2+incompatible to 27.3.1+incompatible

Commits

ce12230 Merge pull request #5462 from thaJeztah/27.x_backport_bump_compose
263ba95 Merge pull request #5461 from laurazard/27.x-backport-update-VERSION
be9b9f3 Update VERSION file to v27.3.1-dev
a4149b0 Dockerfile: update compose to v2.29.7
4aac415 Merge pull request #5458 from thaJeztah/27.x_bump_engine3
8546958 vendor: github.com/docker/docker v27.3.0
f052003 Merge pull request #5457 from laurazard/backport-dropped-defer
460f1be telemetry: fix early meterprovider shutdown
e85edf8 Merge pull request #5452 from laurazard/27.3.0-match-moby-version
ca62759 vendor: github.com/docker/docker v27.3.0-rc2
Additional commits viewable in compare view

Updates github.com/gabriel-vasile/mimetype from 1.4.5 to 1.4.6

Release notes

Sourced from github.com/gabriel-vasile/mimetype's releases.

v1.4.6

What's Changed

Improve ftyp detection in gabriel-vasile/mimetype#564

CSV/TSV use a pool of buffered readers to avoid allocs by in gabriel-vasile/mimetype#573

feat: Add parquet file detection by @kwkelly in gabriel-vasile/mimetype#578

add application/xml as alias of text/xml in gabriel-vasile/mimetype#581

retract v1.4.4; closes #575 in gabriel-vasile/mimetype#591

action for benchmarking detectors in gabriel-vasile/mimetype#590

Remove GPL file by @canadacow in gabriel-vasile/mimetype#583

New Contributors

@kwkelly made their first contribution in gabriel-vasile/mimetype#578

@canadacow made their first contribution in gabriel-vasile/mimetype#583

Full Changelog: gabriel-vasile/mimetype@v1.4.5...v1.4.6

Commits

2998a94 Remove GPL test file (#583)
8a780a5 Bump actions/checkout from 4.1.7 to 4.2.1 in the github-actions group (#592)
458b62d action for benchmarking detectors (#590)
fd16da2 retract v1.4.4; closes #575. (#591)
3cf98ef Bump golang.org/x/net in the gomod group across 1 directory (#585)
9349e46 Bump the github-actions group across 1 directory with 2 updates (#586)
7798415 add benchmark action that leaves comment on PR (#588)
c6c5e4f Make mso detection work similar to what file/file does
c78cb11 add application/xml as alias; close #227 (#581)
c4abedc feat: Add parquet file detection (#578)
Additional commits viewable in compare view

Updates github.com/go-git/go-billy/v5 from 5.5.0 to 5.6.0

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.6.0

What's Changed

Adding support for wasm/wasip1 by @tryggvil in go-git/go-billy#36

Memory.ReadDir() should return an error when path isn't found. by @weberc2-tempus in go-git/go-billy#38

Adding support for WriteAt by @sfc-gh-thardie in go-git/go-billy#39

Update memfs.New() to create root directory by @onee-only in go-git/go-billy#45

Fix symlink by @pjbgf in go-git/go-billy#46

Close via defer by @spennymac in go-git/go-billy#47

General improvements to memfs by @pjbgf in go-git/go-billy#50

boundos:insideBaseDirEval: return true if baseDir is "/" by @rminnich in go-git/go-billy#48

Add wrapper for io/fs by @evankanderson in go-git/go-billy#81

New Contributors

...
Description has been truncated

Bumps the go-modules group with 31 updates: | Package | From | To | | --- | --- | --- | | [github.com/Masterminds/semver/v3](https://github.com/Masterminds/semver) | `3.2.1` | `3.3.0` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.34.1` | `1.35.0` | | [github.com/paketo-buildpacks/libnodejs](https://github.com/paketo-buildpacks/libnodejs) | `0.2.0` | `0.3.0` | | [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.18.7` | `0.18.8` | | [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.14.2` | `2.15.0` | | [github.com/Masterminds/sprig/v3](https://github.com/Masterminds/sprig) | `3.2.3` | `3.3.0` | | [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.12.5` | `0.12.9` | | [github.com/andybalholm/brotli](https://github.com/andybalholm/brotli) | `1.1.0` | `1.1.1` | | [github.com/bmatcuk/doublestar/v4](https://github.com/bmatcuk/doublestar) | `4.6.1` | `4.7.1` | | [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.9` | `1.5.0` | | [github.com/cpuguy83/dockercfg](https://github.com/cpuguy83/dockercfg) | `0.3.1` | `0.3.2` | | [github.com/cyphar/filepath-securejoin](https://github.com/cyphar/filepath-securejoin) | `0.3.1` | `0.3.4` | | [github.com/docker/cli](https://github.com/docker/cli) | `27.1.2+incompatible` | `27.3.1+incompatible` | | [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.5` | `1.4.6` | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.5.0` | `5.6.0` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.9` | `1.17.11` | | [github.com/sylabs/sif/v2](https://github.com/sylabs/sif) | `2.18.0` | `2.19.2` | | [github.com/tklauser/numcpus](https://github.com/tklauser/numcpus) | `0.8.0` | `0.9.0` | | [github.com/vbatts/tar-split](https://github.com/vbatts/tar-split) | `0.11.5` | `0.11.6` | | [go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp](https://github.com/open-telemetry/opentelemetry-go-contrib) | `0.53.0` | `0.56.0` | | [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.28.0` | `1.31.0` | | [go.opentelemetry.io/otel/metric](https://github.com/open-telemetry/opentelemetry-go) | `1.28.0` | `1.31.0` | | [go.opentelemetry.io/otel/trace](https://github.com/open-telemetry/opentelemetry-go) | `1.28.0` | `1.31.0` | | [golang.org/x/crypto](https://github.com/golang/crypto) | `0.26.0` | `0.28.0` | | [golang.org/x/mod](https://github.com/golang/mod) | `0.20.0` | `0.21.0` | | [golang.org/x/net](https://github.com/golang/net) | `0.28.0` | `0.30.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.24.0` | `0.26.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.17.0` | `0.19.0` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20240528184218-531527333157` | `0.0.0-20240903143218-8af14fe29dc1` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.65.0` | `1.67.0` | | google.golang.org/protobuf | `1.34.2` | `1.35.1` | Updates `github.com/Masterminds/semver/v3` from 3.2.1 to 3.3.0 - [Release notes](https://github.com/Masterminds/semver/releases) - [Changelog](https://github.com/Masterminds/semver/blob/master/CHANGELOG.md) - [Commits](Masterminds/semver@v3.2.1...v3.3.0) Updates `github.com/onsi/gomega` from 1.34.1 to 1.35.0 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.34.1...v1.35.0) Updates `github.com/paketo-buildpacks/libnodejs` from 0.2.0 to 0.3.0 - [Release notes](https://github.com/paketo-buildpacks/libnodejs/releases) - [Commits](paketo-buildpacks/libnodejs@v0.2.0...v0.3.0) Updates `github.com/paketo-buildpacks/occam` from 0.18.7 to 0.18.8 - [Release notes](https://github.com/paketo-buildpacks/occam/releases) - [Commits](paketo-buildpacks/occam@v0.18.7...v0.18.8) Updates `github.com/paketo-buildpacks/packit/v2` from 2.14.2 to 2.15.0 - [Release notes](https://github.com/paketo-buildpacks/packit/releases) - [Commits](paketo-buildpacks/packit@v2.14.2...v2.15.0) Updates `github.com/Masterminds/sprig/v3` from 3.2.3 to 3.3.0 - [Release notes](https://github.com/Masterminds/sprig/releases) - [Changelog](https://github.com/Masterminds/sprig/blob/master/CHANGELOG.md) - [Commits](Masterminds/sprig@v3.2.3...v3.3.0) Updates `github.com/Microsoft/hcsshim` from 0.12.5 to 0.12.9 - [Release notes](https://github.com/Microsoft/hcsshim/releases) - [Commits](microsoft/hcsshim@v0.12.5...v0.12.9) Updates `github.com/andybalholm/brotli` from 1.1.0 to 1.1.1 - [Commits](andybalholm/brotli@v1.1.0...v1.1.1) Updates `github.com/bmatcuk/doublestar/v4` from 4.6.1 to 4.7.1 - [Release notes](https://github.com/bmatcuk/doublestar/releases) - [Commits](bmatcuk/doublestar@v4.6.1...v4.7.1) Updates `github.com/cloudflare/circl` from 1.3.9 to 1.5.0 - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.3.9...v1.5.0) Updates `github.com/cpuguy83/dockercfg` from 0.3.1 to 0.3.2 - [Release notes](https://github.com/cpuguy83/dockercfg/releases) - [Commits](cpuguy83/dockercfg@v0.3.1...v0.3.2) Updates `github.com/cyphar/filepath-securejoin` from 0.3.1 to 0.3.4 - [Release notes](https://github.com/cyphar/filepath-securejoin/releases) - [Changelog](https://github.com/cyphar/filepath-securejoin/blob/main/CHANGELOG.md) - [Commits](cyphar/filepath-securejoin@v0.3.1...v0.3.4) Updates `github.com/docker/cli` from 27.1.2+incompatible to 27.3.1+incompatible - [Commits](docker/cli@v27.1.2...v27.3.1) Updates `github.com/gabriel-vasile/mimetype` from 1.4.5 to 1.4.6 - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.5...v1.4.6) Updates `github.com/go-git/go-billy/v5` from 5.5.0 to 5.6.0 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.5.0...v5.6.0) Updates `github.com/klauspost/compress` from 1.17.9 to 1.17.11 - [Release notes](https://github.com/klauspost/compress/releases) - [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml) - [Commits](klauspost/compress@v1.17.9...v1.17.11) Updates `github.com/sylabs/sif/v2` from 2.18.0 to 2.19.2 - [Release notes](https://github.com/sylabs/sif/releases) - [Changelog](https://github.com/sylabs/sif/blob/main/.goreleaser.yml) - [Commits](sylabs/sif@v2.18.0...v2.19.2) Updates `github.com/tklauser/numcpus` from 0.8.0 to 0.9.0 - [Release notes](https://github.com/tklauser/numcpus/releases) - [Commits](tklauser/numcpus@v0.8.0...v0.9.0) Updates `github.com/vbatts/tar-split` from 0.11.5 to 0.11.6 - [Release notes](https://github.com/vbatts/tar-split/releases) - [Commits](vbatts/tar-split@v0.11.5...v0.11.6) Updates `go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp` from 0.53.0 to 0.56.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go-contrib/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go-contrib/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go-contrib@zpages/v0.53.0...zpages/v0.56.0) Updates `go.opentelemetry.io/otel` from 1.28.0 to 1.31.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.31.0) Updates `go.opentelemetry.io/otel/metric` from 1.28.0 to 1.31.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.31.0) Updates `go.opentelemetry.io/otel/trace` from 1.28.0 to 1.31.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md) - [Commits](open-telemetry/opentelemetry-go@v1.28.0...v1.31.0) Updates `golang.org/x/crypto` from 0.26.0 to 0.28.0 - [Commits](golang/crypto@v0.26.0...v0.28.0) Updates `golang.org/x/mod` from 0.20.0 to 0.21.0 - [Commits](golang/mod@v0.20.0...v0.21.0) Updates `golang.org/x/net` from 0.28.0 to 0.30.0 - [Commits](golang/net@v0.28.0...v0.30.0) Updates `golang.org/x/sys` from 0.24.0 to 0.26.0 - [Commits](golang/sys@v0.24.0...v0.26.0) Updates `golang.org/x/text` from 0.17.0 to 0.19.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.17.0...v0.19.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240528184218-531527333157 to 0.0.0-20240903143218-8af14fe29dc1 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.65.0 to 1.67.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.65.0...v1.67.0) Updates `google.golang.org/protobuf` from 1.34.2 to 1.35.1 --- updated-dependencies: - dependency-name: github.com/Masterminds/semver/v3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/paketo-buildpacks/libnodejs dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/paketo-buildpacks/occam dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/paketo-buildpacks/packit/v2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/Masterminds/sprig/v3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/Microsoft/hcsshim dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/andybalholm/brotli dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/bmatcuk/doublestar/v4 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/cloudflare/circl dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/cpuguy83/dockercfg dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/cyphar/filepath-securejoin dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/docker/cli dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/go-git/go-billy/v5 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/klauspost/compress dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/sylabs/sif/v2 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/tklauser/numcpus dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/vbatts/tar-split dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/metric dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: go.opentelemetry.io/otel/trace dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/crypto dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/mod dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/net dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sys dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/text dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/protobuf dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-11-01T16:06:42Z

Superseded by #1058.

dependabot bot requested a review from a team as a code owner October 31, 2024 16:47

dependabot bot added the failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow label Oct 31, 2024

dependabot bot requested a review from mhdawson October 31, 2024 16:47

dependabot bot added the go Pull requests that update Go code label Oct 31, 2024

dependabot bot requested a review from pacostas October 31, 2024 16:47

paketo-bot added the semver:patch A change requiring a patch version bump label Oct 31, 2024

dependabot bot force-pushed the dependabot/go_modules/go-modules-0a24e5e199 branch from 87ec11e to 501a626 Compare October 31, 2024 16:57

dependabot bot closed this Nov 1, 2024

dependabot bot deleted the dependabot/go_modules/go-modules-0a24e5e199 branch November 1, 2024 16:06

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the go-modules group with 31 updates #1056

Bump the go-modules group with 31 updates #1056

dependabot bot commented on behalf of github Oct 31, 2024 •

edited

Loading

dependabot bot commented on behalf of github Nov 1, 2024

Bump the go-modules group with 31 updates #1056

Bump the go-modules group with 31 updates #1056

Conversation

dependabot bot commented on behalf of github Oct 31, 2024 • edited Loading

v3.3.0

What's Changed

New Contributors

3.3.0 (2024-08-27)

Added

Changed

v1.35.0

1.35.0

Features

Fixes

Maintenance

v1.34.2

1.34.2

Maintenance

1.35.0

Features

Fixes

Maintenance

1.34.2

Maintenance

v0.3.0

What's Changed

v0.18.8

What's Changed

New Contributors

v2.15.0

What's Changed

v3.3.0

What's Changed

New Contributors

Release 3.3.0 (2024-08-29)

Added

Changed

v0.12.9

What's Changed

v0.12.8

What's Changed

v0.12.7

What's Changed

v0.12.6

What's Changed

Fixed FilepathGlob("")

Added MatchUnvalidated, PathMatchUnvalidated

CIRCL v1.5.0

What's Changed

New Contributors

CIRCL v1.4.0

Changes

Commit History

v0.3.2

What's Changed

New Contributors

v0.3.4

v0.3.3

v0.3.2

[0.3.4] - 2024-10-09

Fixed

[0.3.3] - 2024-09-30

Fixed

[0.3.2] - 2024-09-13

Changed

Fixed

v1.4.6

What's Changed

New Contributors

v5.6.0

What's Changed

New Contributors

dependabot bot commented on behalf of github Nov 1, 2024

dependabot bot commented on behalf of github Oct 31, 2024 •

edited

Loading