Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the production-dependencies group across 1 directory with 9 updates #3520

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 5, 2024

Bumps the production-dependencies group with 9 updates in the / directory:

Package From To
github.com/antlr4-go/antlr/v4 4.13.0 4.13.1
github.com/google/cel-go 0.20.1 0.21.0
github.com/jackc/pgx/v5 5.5.5 5.6.0
github.com/spf13/cobra 1.8.0 1.8.1
github.com/tetratelabs/wazero 1.7.2 1.7.3
golang.org/x/sync 0.7.0 0.8.0
google.golang.org/grpc 1.63.2 1.65.0
google.golang.org/protobuf 1.34.1 1.34.2
modernc.org/sqlite 1.29.9 1.31.1

Updates github.com/antlr4-go/antlr/v4 from 4.13.0 to 4.13.1

Release notes

Sourced from github.com/antlr4-go/antlr/v4's releases.

Release 4.13.1

The 4.13.1 release has:

  • Some minor performance improvements
  • An optional build tag -tags antlr.nomutex which allows a build without using mutexes, when the user knows they will not use it with multiple go routines. (Note, somewhat experimental)

Note that I did not remove the sort.Slices calls. They will not be experimental for long and are implemented efficently. Please make a fork if you must use it without this dependency. Maybe review whether you need to do so for the sake of one call.

Commits

Updates github.com/google/cel-go from 0.20.1 to 0.21.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.21.0

Features

  • Math extensions update to include bitwise ops and floating point helpers #923
  • Better support custom types with custom type registries #931
  • repl: implement %parse #933
  • Fixed partial variables extended bug and split PartialVarsEnvExtended test into two #955
  • Added partial evaluations example #959
  • Enable conformance tests for extensions #930
  • Update cel-spec and enable optional_type conformance tests #919
  • Improve token representation in AST #932
  • Add function accessor to Env #978

CEL Policy Compiler

Policies which use CEL often evolve to express complex logic using multiple statements and decision criteria. The CEL Policy Compiler provides an extensible format for parsing, compiling, and composing expression graphs. Below is a simple example which can easily be compiled to a single CEL expression.

name: "my-policy"
rule:
  variables:
    - name: greeting
      expression: "'%s, %s!'"
    - name: people
      expression: >
       ['Tristan', 'Calla', 'Antoine', 'Jonathan', 'Sokwhan', 'Rebecca']
  match:
    - condition: "request.user in variables.people"
      output: "variables.greeting.format(['hello', request.user])"
    - output: "variables.greeting.format(['goodbye', 'stranger'])"
  • Simple Policy Compiler #924
  • Introduce protobuf message testing to policies #961
  • Generate policy explanations during compilation #977
  • Variable and nested rule limits #989
  • Improved support for nested rules #991]

Fixes

  • Delete dangling source info from macro expansion #934
  • Do not re-use ID twice in exists_one macro #935
  • Avoid iterating over the source multiple times during parse #936
  • Fix for working with byte arrays by #958
  • Stabilize macro id generation during optimization #962
  • String formatting panic fix for non-literal format strings #987
  • Add nil checking for wrapperspb's types #960

... (truncated)

Commits
  • 3545aac Improved support for nested rules (#991)
  • 5bcdb8b Check for output type agreement during the compile phase (#992)
  • 1f51886 Use bytes interface value for zero native type struct fields instead of dynam...
  • c9164bc Variable and nested rule limits (#989)
  • 5cbef66 Prevent self-append for Issues (#988)
  • 25457de Add nil checking for wrapperspb's types (#960)
  • badfce0 Fix panic in formatting string for non-literal formats (#987)
  • 9e64eb7 Decompose the compile and compose methods (#986)
  • 37d5b96 Add a function to return a policy whose output is the explanation. (#977)
  • bc96f3b Fix math.bitShiftRight for negative int (#983)
  • Additional commits viewable in compare view

Updates github.com/jackc/pgx/v5 from 5.5.5 to 5.6.0

Changelog

Sourced from github.com/jackc/pgx/v5's changelog.

5.6.0 (May 25, 2024)

  • Add StrictNamedArgs (Tomas Zahradnicek)
  • Add support for macaddr8 type (Carlos Pérez-Aradros Herce)
  • Add SeverityUnlocalized field to PgError / Notice
  • Performance optimization of RowToStructByPos/Name (Zach Olstein)
  • Allow customizing context canceled behavior for pgconn
  • Add ScanLocation to pgtype.Timestamp[tz]Codec
  • Add custom data to pgconn.PgConn
  • Fix ResultReader.Read() to handle nil values
  • Do not encode interval microseconds when they are 0 (Carlos Pérez-Aradros Herce)
  • pgconn.SafeToRetry checks for wrapped errors (tjasko)
  • Failed connection attempts include all errors
  • Optimize LargeObject.Read (Mitar)
  • Add tracing for connection acquire and release from pool (ngavinsir)
  • Fix encode driver.Valuer not called when nil
  • Add support for custom JSON marshal and unmarshal (Mitar)
  • Use Go default keepalive for TCP connections (Hans-Joachim Kliemeck)
Commits
  • 572d7ff Release v5.6.0
  • b4911f1 Merge pull request #2019 from jackc/fix-encode-driver-valuer-on-pointer
  • 24c0a5e remove keepalive and rely on GOLANG default (since go 1.13 default is 15s)
  • 9ca9203 Move typed nil handling to Map.Encode from anynil
  • 79cab46 Only use anynil inside of pgtype
  • 6ea2d24 Remove anynil.NormalizeSlice
  • c1075bf Remove some special casing for QueryExecModeExec
  • cf6074f Remove unused anynil.Normalize
  • 13beb38 Fix encode driver.Valuer on nil-able non-pointers
  • fec45c8 Refactor appendParamsForQueryExecModeExec
  • Additional commits viewable in compare view

Updates github.com/spf13/cobra from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.1

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation

... (truncated)

Commits

Updates github.com/tetratelabs/wazero from 1.7.2 to 1.7.3

Release notes

Sourced from github.com/tetratelabs/wazero's releases.

v1.7.3

Time to celebrate the new wazero release! This time has not only the important bugs fixes just like before, but more importantly comes with the drastic "compilation time" performance improvements!

Bug fixes

Compilation perf improvements

@​mathetake worked so hard to improve the compilation performance which some users had raised issue about since the release of the optimizing compiler in 1.7.0. The idea is that even though this is partly because it is "optimizing", there are still rooms for improvements in its codebase to use less CPU/memory.

The below is the compilation time benchmark on the various standard library tests for Zig, Go and TinyGo compared to the previous v1.7.2. You can see the huge results up to like 50% faster and ~50% less memory usage. Note that this doesn't affect any runtime performance -- that means your code runs just exactly like before while having faster compilation!😎

goos: darwin
goarch: arm64
pkg: github.com/tetratelabs/wazero/internal/integration_test/stdlibs
                                                   │   old.txt    │              new.txt               │
                                                   │    sec/op    │   sec/op     vs base               │
Zig/Compile/test-opt.wasm-10                           4.872 ± 2%    3.389 ± 3%  -30.44% (p=0.001 n=7)
Zig/Compile/test.wasm-10                               5.926 ± 2%    4.162 ± 1%  -29.76% (p=0.001 n=7)
TinyGo/Compile/container_heap.test-10                 677.2m ± 0%   306.3m ± 1%  -54.76% (p=0.001 n=7)
TinyGo/Compile/container_list.test-10                 673.2m ± 1%   309.3m ± 8%  -54.05% (p=0.001 n=7)
TinyGo/Compile/container_ring.test-10                 665.1m ± 1%   299.5m ± 0%  -54.97% (p=0.001 n=7)
TinyGo/Compile/crypto_des.test-10                     686.4m ± 0%   311.6m ± 0%  -54.61% (p=0.001 n=7)
TinyGo/Compile/crypto_md5.test-10                     685.5m ± 1%   312.7m ± 4%  -54.38% (p=0.001 n=7)
TinyGo/Compile/crypto_rc4.test-10                     666.5m ± 0%   297.9m ± 0%  -55.31% (p=0.001 n=7)
TinyGo/Compile/crypto_sha1.test-10                    683.7m ± 0%   310.1m ± 0%  -54.65% (p=0.001 n=7)
TinyGo/Compile/crypto_sha256.test-10                  692.0m ± 1%   315.0m ± 2%  -54.48% (p=0.001 n=7)
TinyGo/Compile/crypto_sha512.test-10                  692.7m ± 0%   316.6m ± 1%  -54.29% (p=0.001 n=7)
TinyGo/Compile/encoding_ascii85.test-10               680.6m ± 1%   309.3m ± 1%  -54.55% (p=0.001 n=7)
TinyGo/Compile/encoding_base32.test-10               1637.6m ± 1%   650.8m ± 0%  -60.26% (p=0.001 n=7)
TinyGo/Compile/encoding_csv.test-10                   740.0m ± 1%   333.5m ± 0%  -54.92% (p=0.001 n=7)
TinyGo/Compile/encoding_hex.test-10                   708.7m ± 3%   320.9m ± 0%  -54.72% (p=0.001 n=7)
TinyGo/Compile/go_scanner.test-10                     773.2m ± 1%   347.1m ± 6%  -55.11% (p=0.001 n=7)
TinyGo/Compile/hash.test-10                           951.8m ± 1%   410.8m ± 0%  -56.84% (p=0.001 n=7)
TinyGo/Compile/hash_adler32.test-10                   665.8m ± 1%   297.5m ± 0%  -55.32% (p=0.001 n=7)
TinyGo/Compile/hash_crc64.test-10                     893.9m ± 1%   385.1m ± 1%  -56.92% (p=0.001 n=7)
TinyGo/Compile/hash_fnv.test-10                       695.8m ± 2%   312.4m ± 0%  -55.10% (p=0.001 n=7)
TinyGo/Compile/html.test-10                            2.426 ± 1%    2.012 ± 1%  -17.07% (p=0.001 n=7)
TinyGo/Compile/internal_itoa.test-10                  662.5m ± 1%   296.0m ± 1%  -55.32% (p=0.001 n=7)
TinyGo/Compile/internal_profile.test-10               893.6m ± 1%   417.9m ± 0%  -53.24% (p=0.001 n=7)
TinyGo/Compile/math.test-10                           821.1m ± 0%   398.4m ± 0%  -51.48% (p=0.001 n=7)
TinyGo/Compile/math_cmplx.test-10                     701.7m ± 0%   338.8m ± 1%  -51.71% (p=0.001 n=7)
TinyGo/Compile/net.test-10                            755.4m ± 1%   356.5m ± 3%  -52.81% (p=0.001 n=7)
TinyGo/Compile/net_http_internal_ascii.test-10        661.5m ± 1%   296.8m ± 2%  -55.14% (p=0.001 n=7)
TinyGo/Compile/net_mail.test-10                       927.1m ± 2%   398.9m ± 2%  -56.97% (p=0.001 n=7)
TinyGo/Compile/os.test-10                             754.9m ± 0%   370.5m ± 0%  -50.92% (p=0.001 n=7)
</tr></table> 

... (truncated)

Commits

Updates golang.org/x/sync from 0.7.0 to 0.8.0

Commits

Updates google.golang.org/grpc from 1.63.2 to 1.65.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.65.0

Dependencies

  • Change support policy to cover only the latest TWO releases of Go, matching the policy for Go itself. See #7249 for more information. (#7250)
  • Update x/net/http2 to address CVE-2023-45288 (#7282)

Behavior Changes

  • credentials/tls: clients and servers will now reject connections that don't support ALPN when environment variable GRPC_ENFORCE_ALPN_ENABLED is set to "true" (case insensitive). (#7184)
    • NOTE: this behavior will become the default in a future release.
  • metadata: remove String method from MD to make printing more consistent (#7373)

New Features

  • grpc: add WithMaxCallAttempts to configure gRPC's retry behavior per-channel. (#7229)

Bug Fixes

  • ringhash: properly apply endpoint weights instead of ignoring them (#7156)
  • xds: fix a bug that could cause xds-enabled servers to stop accepting new connections after handshaking errors (#7128)

Release 1.64.1

Dependencies

  • Update x/net/http2 to address CVE-2023-45288 (#7352)
  • metadata: remove String method from MD to make printing consistent (#7374)

Release 1.64.0

API Changes

  • stats: Deprecate InPayload.Data and OutPayload.Data; they were experimental and will be deleted in the next release (#7121)

Behavior Changes

  • codec: Remove handling of environment variable GRPC_GO_ADVERTISE_COMPRESSORS to suppress setting supported compressors in grpc-accept-encoding header. Compressors will always be advertised, as they have been by default for some time (#7203)

New Features

  • resolver/dns: Add SetMinResolutionInterval to set the minimum interval at which DNS re-resolutions may occur (#6962)
  • peer/peer: Implement the fmt.Stringer interface for pretty printing Peer, and
  • metadata/metadata: Implement the fmt.Stringer interface for pretty printing MD (#7137)

Performance Improvements

... (truncated)

Commits
  • 2da9769 Change version to 1.65.0 (#7306)
  • ede96b7 metadata: remove String method (#7373)
  • 64be203 grpc: Readd pick first name (#7336) (#7341)
  • 25e33a6 examples: Add CSM Observability example (#7302) (#7318)
  • 04a5f46 xds/internal/xdsclient: Emit unknown for CSM Labels if not present in CDS (#7...
  • cff5c3e stats/opentelemetry: Add e2e testing for CSM Observability (#7279) (#7316)
  • 9b970fd dns: fix constant 30s backoff for re-resolution (#7262) (#7311)
  • 6d23620 documentation: on server, use FromIncomingContext for retrieving context and...
  • 7e5898e xds: unify xDS client creation APIs meant for testing (#7268)
  • 5d7bd7a interop/xds: Interop client and server changes for CSM Observability (#7280)
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.34.1 to 1.34.2

Updates modernc.org/sqlite from 1.29.9 to 1.31.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

…y with 9 updates

Bumps the production-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/antlr4-go/antlr/v4](https://github.com/antlr4-go/antlr) | `4.13.0` | `4.13.1` |
| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.20.1` | `0.21.0` |
| [github.com/jackc/pgx/v5](https://github.com/jackc/pgx) | `5.5.5` | `5.6.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.0` | `1.8.1` |
| [github.com/tetratelabs/wazero](https://github.com/tetratelabs/wazero) | `1.7.2` | `1.7.3` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.7.0` | `0.8.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.63.2` | `1.65.0` |
| google.golang.org/protobuf | `1.34.1` | `1.34.2` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.29.9` | `1.31.1` |



Updates `github.com/antlr4-go/antlr/v4` from 4.13.0 to 4.13.1
- [Release notes](https://github.com/antlr4-go/antlr/releases)
- [Commits](antlr4-go/antlr@v4.13.0...v4.13.1)

Updates `github.com/google/cel-go` from 0.20.1 to 0.21.0
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.20.1...v0.21.0)

Updates `github.com/jackc/pgx/v5` from 5.5.5 to 5.6.0
- [Changelog](https://github.com/jackc/pgx/blob/master/CHANGELOG.md)
- [Commits](jackc/pgx@v5.5.5...v5.6.0)

Updates `github.com/spf13/cobra` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.8.0...v1.8.1)

Updates `github.com/tetratelabs/wazero` from 1.7.2 to 1.7.3
- [Release notes](https://github.com/tetratelabs/wazero/releases)
- [Commits](tetratelabs/wazero@v1.7.2...v1.7.3)

Updates `golang.org/x/sync` from 0.7.0 to 0.8.0
- [Commits](golang/sync@v0.7.0...v0.8.0)

Updates `google.golang.org/grpc` from 1.63.2 to 1.65.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.63.2...v1.65.0)

Updates `google.golang.org/protobuf` from 1.34.1 to 1.34.2

Updates `modernc.org/sqlite` from 1.29.9 to 1.31.1
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.29.9...v1.31.1)

---
updated-dependencies:
- dependency-name: github.com/antlr4-go/antlr/v4
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/google/cel-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/jackc/pgx/v5
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/tetratelabs/wazero
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: golang.org/x/sync
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: modernc.org/sqlite
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Aug 5, 2024
@kyleconroy kyleconroy merged commit 2304269 into main Aug 5, 2024
8 checks passed
@kyleconroy kyleconroy deleted the dependabot/go_modules/production-dependencies-546b05f81b branch August 5, 2024 03:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant