Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the modules group with 10 updates #226

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jan 25, 2025

Bumps the modules group with 10 updates:

Package From To
github.com/bitfield/script 0.22.0 0.24.0
github.com/caddyserver/caddy/v2 2.8.4 2.9.1
github.com/expr-lang/expr 1.16.3 1.16.9
github.com/go-playground/validator/v10 10.19.0 10.24.0
github.com/hashicorp/go-getter 1.7.5 1.7.8
github.com/klauspost/compress 1.17.8 1.17.11
github.com/otiai10/copy 1.14.0 1.14.1
github.com/stretchr/testify 1.9.0 1.10.0
github.com/valyala/fastjson 1.6.3 1.6.4
golang.org/x/net 0.30.0 0.34.0

Updates github.com/bitfield/script from 0.22.0 to 0.24.0

Commits

Updates github.com/caddyserver/caddy/v2 from 2.8.4 to 2.9.1

Release notes

Sourced from github.com/caddyserver/caddy/v2's releases.

v2.9.1

This is a patch release fixing a few issues related to FastCGI, HTTP/3 and unix sockets, log file permissions, repeated TERM signals, and an ARI edge case. It also adds Caddyfile support for response matching in the header directive.

Thanks to everyone who reported bugs and helped with fixes!

Changelog

  • 34cff4af7db1365bba6decc647ccfb6bf1b21afd core: Only initiate exit once (should fix #6707)
  • 50778b55425d378f709599c0d424b0138af592f4 fix: disable h3 for unix domain socket (#6769)
  • 0e570e0cc717f02cf3800ae741df70cd074c7275 go.mod: Upgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  • e48b75843b7eff2948b573391fb41535b5e333ef header: match subdirective for response matching (#6765)
  • 1f927d6b07d52d7cf46f1f3020c1ea5993a3e5e8 log: Only chmod if permission bits differ; make log dir (#6761)
  • 1bd567d7ad41d5509e2aa60cf36e749f195ad83c reverseproxy: buffer requests for fastcgi by default (#6759)

What's Changed

New Contributors

Full Changelog: caddyserver/caddy@v2.9.0...v2.9.1

v2.9.0

Happy New Year! We're pleased to release Caddy 2.9. Aside from some minor new features, this release is mainly focused on refinements and bug fixes in many areas, including:

  • Config loading
  • Events
  • Logging
  • Placeholders
  • Reverse proxy and HTTP server performance
  • Matchers
  • HTTP (esp. HTTP/3)
  • Metrics (per-host metrics)
  • Security
  • TLS automation & ACME ARI

We realize there is extensive interest in Encrypted Client Hello (ECH) and post-quantum ciphers. These are slated to be supported in Go 1.24, which is scheduled for a stable release in approximately February. We did not want to force users to go through the inconvenience of installing pre-release, non-stock installations of Go, even though the RCs are quite stable and production-ready, in order to even compile Caddy, which is quite common given our plugin ecosystem. We anticipate a Caddy 2.10 release in the near future with these capabilities, built on Go 1.24.

We hope you will enjoy the 2.9 release. Thanks to all contributors, bug reporters, and helpers, and those organizations which deployed pre-release versions to production to help verify patches and features.

Changelog

  • ef4e0224a8495fc29847d865087febdee8736e3b caddyfile: Fix comma edgecase in address parsing (#6616)
  • b116dcea3d022cd2b060a978c499ac17e5d0a2e1 caddyhttp: Add {?query} placeholder (#6714)
  • c216cf551dcbd2de1da1b9fe8a7e179b76827753 caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  • 197c564f2032becba14aeec0152fe5eeb639d6c1 caddyhttp: Set default ReadHeaderTimeout (1 min)
  • 09b2cbcf4d839adec91b189fea549d64a69e0595 caddyhttp: Add MatchWithError to replace SetVar hack (#6596)
  • c6f2979986d87d7236b132c687c8887c92248dd8 caddyhttp: Close http3 server gracefully (#6213)

... (truncated)

Commits
  • 0e570e0 go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  • e48b758 header: match subdirective for response matching (#6765)
  • 1f927d6 log: Only chmod if permission bits differ; make log dir (#6761)
  • 50778b5 fix: disable h3 for unix domain socket (#6769)
  • 1bd567d reverseproxy: buffer requests for fastcgi by default (#6759)
  • 34cff4a core: Only initiate exit once (should fix #6707)
  • 3f3f8b3 go.mod: Upgrade CertMagic to v0.21.5
  • f2c17d1 testing: sort force-automated hosts (#6756)
  • afa778a httpcaddyfile: Implement experimental force_automate option (#6712)
  • 5ba1e06 encode: try to use sendfile when compression is not used (#6749)
  • Additional commits viewable in compare view

Updates github.com/expr-lang/expr from 1.16.3 to 1.16.9

Release notes

Sourced from github.com/expr-lang/expr's releases.

v1.16.9

Expr is a Go-centric expression language designed to deliver dynamic configurations with unparalleled accuracy, safety, and speed.

In this release:

v1.16.8

Expr is a Go-centric expression language designed to deliver dynamic configurations with unparalleled accuracy, safety, and speed.

program, err := expr.Compile(`now() - created_at < duration("24h")`)

In this release:

  • Added checks for nil before string casts in VM (#654)
  • Added int overflow checks. 45c1ae7
  • Improved lexer (#653)
  • Improved error messages for index out of bounds errors. 6cf0edb
  • Fixed: invoke the Deref function as needed for the function arguments. (#651)
  • Fixed build on 386 arch. cae6003

Expr Editor

The Expr Editor is an embeddable code editor written in JavaScript with full support of Expr language.

Expr Pro

Expr Pro is a set of extensions for Expr for advanced use cases. It includes expressions explanation, performance profiling, and more.

v1.16.7

Expr is a Go-centric expression language designed to deliver dynamic configurations with unparalleled accuracy, safety, and speed.

program, err := expr.Compile(`now() - created_at < duration("24h")`)

In this release:

  • Improved now() and date() type validation

... (truncated)

Commits
  • 55ff9aa Fix coverage reporting
  • eca9bd7 Fix function calls with int64 params (#663)
  • b45ee4f Add Melrōse to "Who uses Expr?" section
  • 596f54f Invoke the Deref function as needed for the function arguments. (#651)
  • c6c7227 Return tree on parse errors
  • 65c7bc9 Add checker.ParseCheck func
  • cae6003 Fix build for 386 and add build.yml workflow
  • eb70f94 Add checks for nil before string casts in VM (#654)
  • 1659c23 Refactor lexer (#653)
  • 6cf0edb Add better error messages for index out of bounds errors
  • Additional commits viewable in compare view

Updates github.com/go-playground/validator/v10 from 10.19.0 to 10.24.0

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.24.0

What's Changed

The MSGV(Minimum Supported Go Version) has been bumped to v1.20 to address a security issues in the gaoling net package.

Full Changelog: go-playground/validator@v10.23.0...v10.24.0

Release 10.23.0

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.22.1...v10.23.0

Release 10.22.1

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.22.0...v10.22.1

Release 10.22.0

No release notes provided.

Release 10.21.0

What's Changed

New Contributors

... (truncated)

Commits

Updates github.com/hashicorp/go-getter from 1.7.5 to 1.7.8

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.7.8

What's Changed

Full Changelog: hashicorp/go-getter@v1.7.7...v1.7.8

v1.7.7

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.7.6...v1.7.7

v1.7.6

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.7.5...v1.7.6

Commits
  • f7836fb sec: fix s3 and gcs host checks (#512)
  • 7dddd13 Merge pull request #515 from hashicorp/Vulnerability_Fix_v1
  • 0f05341 IND-1804 Updating .goreleaser.yml file with valid version
  • 81c6950 Merge pull request #514 from hashicorp/Vulnerability_Fix_v1
  • d315d97 IND-1804 Updating arguments in github release CI
  • 6552f72 Merge pull request #513 from hashicorp/Vulnerability_Fix_v1
  • 2e56c18 IND-1804 Bump up dependencies to remediate vulnerabiities
  • 842d6c3 Merge pull request #505 from mukeshjc/main
  • 7edd4e0 Add CODEOWNERS file in .github/CODEOWNERS
  • 6077ad5 Merge pull request #409 from hashicorp/compliance/add-headers
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.17.8 to 1.17.11

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.11

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.10...v1.17.11

v1.17.10

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.9...v1.17.10

v1.17.9

What's Changed

Full Changelog: klauspost/compress@v1.17.8...v1.17.9

Commits

Updates github.com/otiai10/copy from 1.14.0 to 1.14.1

Commits
  • 5ef5923 Revert "CopyMethod" since it's not ready
  • 49b0b59 Merge pull request #164 from eth-p/feat-copymethod-api
  • f530620 ci: Allow triggering Go workflow manually
  • b4dd789 refactor: Split common code out of CopyBytes
  • 9205813 feat: Add FileCopyMethod option / API
  • 2f93b8f Merge pull request #159 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • 87072f3 Bump golang.org/x/sys from 0.23.0 to 0.24.0
  • d0690cb Merge pull request #158 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • b87119d Bump golang.org/x/sys from 0.22.0 to 0.23.0
  • 355527c Merge pull request #157 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.9.0 to 1.10.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.10.0

What's Changed

Functional Changes

Fixes

Documantation, Build & CI

New Contributors

... (truncated)

Commits
  • 89cbdd9 Merge pull request #1626 from arjun-1/fix-functional-options-diff-indirect-calls
  • 07bac60 Merge pull request #1667 from sikehish/flaky
  • 716de8d Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI
  • 118fb83 NotSame should fail if args are not pointers #1661 (#1664)
  • 7d99b2b attempt 2
  • 05f87c0 more similar
  • ea7129e better fmt
  • a1b9c9e Merge pull request #1663 from ybrustin/master
  • 8302de9 Merge branch 'master' into master
  • 89352f7 Merge pull request #1518 from hendrywiranto/adjust-readme-remove-v2
  • Additional commits viewable in compare view

Updates github.com/valyala/fastjson from 1.6.3 to 1.6.4

Commits
  • 93f67d9 fastfloat: localize handling of invalid number without integer and fractional...
  • 6f52d1b fastfloat: support elided integer or float part (#84)
  • 6dae91c Fix 64-bit tests on 32-bit systems (#60)
  • See full diff in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits
  • 8da7ed1 go.mod: update golang.org/x dependencies
  • 2124140 all: make function and struct comments match the names
  • e9d95ba http2: do not surface errors from a conn's idle timer expiring
  • c2be992 quic: remember which remote connection IDs have been retired
  • dfc720d go.mod: update golang.org/x dependencies
  • 8e66b04 html: use strings.EqualFold instead of lowering ourselves
  • b935f7b html: avoid endless loop on error token
  • 9af49ef route: remove unused sizeof* consts
  • 6705db9 quic: clean up crypto streams when dropping packet protection keys
  • 4ef7588 quic: handle ACK frame in packet which drops number space
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the modules group with 10 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/bitfield/script](https://github.com/bitfield/script) | `0.22.0` | `0.24.0` |
| [github.com/caddyserver/caddy/v2](https://github.com/caddyserver/caddy) | `2.8.4` | `2.9.1` |
| [github.com/expr-lang/expr](https://github.com/expr-lang/expr) | `1.16.3` | `1.16.9` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.19.0` | `10.24.0` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.5` | `1.7.8` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.8` | `1.17.11` |
| [github.com/otiai10/copy](https://github.com/otiai10/copy) | `1.14.0` | `1.14.1` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.9.0` | `1.10.0` |
| [github.com/valyala/fastjson](https://github.com/valyala/fastjson) | `1.6.3` | `1.6.4` |
| [golang.org/x/net](https://github.com/golang/net) | `0.30.0` | `0.34.0` |


Updates `github.com/bitfield/script` from 0.22.0 to 0.24.0
- [Commits](bitfield/script@v0.22.0...v0.24.0)

Updates `github.com/caddyserver/caddy/v2` from 2.8.4 to 2.9.1
- [Release notes](https://github.com/caddyserver/caddy/releases)
- [Changelog](https://github.com/caddyserver/caddy/blob/master/.goreleaser.yml)
- [Commits](caddyserver/caddy@v2.8.4...v2.9.1)

Updates `github.com/expr-lang/expr` from 1.16.3 to 1.16.9
- [Release notes](https://github.com/expr-lang/expr/releases)
- [Commits](expr-lang/expr@v1.16.3...v1.16.9)

Updates `github.com/go-playground/validator/v10` from 10.19.0 to 10.24.0
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.19.0...v10.24.0)

Updates `github.com/hashicorp/go-getter` from 1.7.5 to 1.7.8
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](hashicorp/go-getter@v1.7.5...v1.7.8)

Updates `github.com/klauspost/compress` from 1.17.8 to 1.17.11
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.8...v1.17.11)

Updates `github.com/otiai10/copy` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/otiai10/copy/releases)
- [Commits](otiai10/copy@v1.14.0...v1.14.1)

Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.9.0...v1.10.0)

Updates `github.com/valyala/fastjson` from 1.6.3 to 1.6.4
- [Commits](valyala/fastjson@v1.6.3...v1.6.4)

Updates `golang.org/x/net` from 0.30.0 to 0.34.0
- [Commits](golang/net@v0.30.0...v0.34.0)

---
updated-dependencies:
- dependency-name: github.com/bitfield/script
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: github.com/caddyserver/caddy/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: github.com/expr-lang/expr
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: modules
- dependency-name: github.com/go-playground/validator/v10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: github.com/hashicorp/go-getter
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: modules
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: modules
- dependency-name: github.com/otiai10/copy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: modules
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: github.com/valyala/fastjson
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: modules
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot force-pushed the dependabot/go_modules/modules-1152842e8f branch from db9ff30 to 3532081 Compare January 25, 2025 00:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Dependencies update
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants