fix(deps): update gomod (major) #443

renovate · 2024-11-19T04:25:41Z

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/Antonboom/errname	`v0.1.13` -> `v1.0.0`
github.com/Antonboom/nilnil	`v0.1.9` -> `v1.0.1`
github.com/ashanbrown/forbidigo	`v1.6.0` -> `v2.1.0`
github.com/ashanbrown/makezero	`v1.1.1` -> `v2.0.1`
github.com/campoy/embedmd	`v1.0.0` -> `v2.0.0`
github.com/cenkalti/backoff/v4	`v4.3.0` -> `v5.0.2`
github.com/golang-jwt/jwt/v4	`v4.5.1` -> `v5.2.1`
github.com/google/go-github/v60	`v60.0.0` -> `v69.1.0`
github.com/grpc-ecosystem/go-grpc-middleware	`v1.3.0` -> `v2.2.0`
github.com/hashicorp/hcl	`v1.0.0` -> `v2.23.0`
github.com/matoous/godox	`v0.0.0-20230222163458-006bad1f9d26` -> `v1.1.0`
github.com/pelletier/go-toml	`v1.9.5` -> `v2.2.3`
github.com/santhosh-tekuri/jsonschema/v5	`v5.3.1` -> `v6.0.1`
go.etcd.io/etcd/client/v2	`v2.306.0-alpha.0` -> `v3.5.18`
gopkg.in/yaml.v2	`v2.4.0` -> `v3.0.1`

Release Notes

Antonboom/errname (github.com/Antonboom/errname)

`v1.0.0`

Compare Source

What's Changed

Incredible refactoring by @Antonboom in https://github.com/Antonboom/errname/pull/46
Go 1.23 by @Antonboom in https://github.com/Antonboom/errname/pull/46
Assumption for array error types by @Antonboom in https://github.com/Antonboom/errname/pull/47

Full Changelog: Antonboom/errname@v0.1.13...v1.0.0

Antonboom/nilnil (github.com/Antonboom/nilnil)

ashanbrown/forbidigo (github.com/ashanbrown/forbidigo)

`v2.1.0`

Compare Source

What's Changed

Support forbidding access to methods on builtin identifiers by @isergieienkov and @ashanbrown at https://github.com/ashanbrown/forbidigo/pull/59

Full Changelog: ashanbrown/forbidigo@v2.0.1...v2.1.0

`v2.0.1`: Drop golang < 1.18

Compare Source

`v2.0.0`: Upgrade x/tools

Compare Source

Upgrades x-tools to fix go 1.23, drops support for go < 1.18

ashanbrown/makezero (github.com/ashanbrown/makezero)

`v2.0.1`

Compare Source

Fix v2 release following https://go.dev/wiki/Modules#releasing-modules-v2-or-higher

`v2.0.0`: Bump minimum required go version to 1.18 and upgrade deps

Compare Source

What's Changed

bump golang.org/x/tools to v0.13.0 to fix panic in tests by @alexandear in https://github.com/ashanbrown/makezero/pull/17

New Contributors

@alexandear made their first contribution in https://github.com/ashanbrown/makezero/pull/17

Full Changelog: ashanbrown/makezero@v1.2.0...v2.0.0

`v1.2.0`: Upgrade x/tools

Compare Source

campoy/embedmd (github.com/campoy/embedmd)

`v2.0.0`

Compare Source

cenkalti/backoff (github.com/cenkalti/backoff/v4)

`v5.0.2`

Compare Source

`v5.0.1`

Compare Source

`v5.0.0`

Compare Source

golang-jwt/jwt (github.com/golang-jwt/jwt/v4)

`v5.2.1`

Compare Source

What's Changed

chore: remove unnecessary conversions from tests by @estensen in https://github.com/golang-jwt/jwt/pull/370
Trivial: Typo fix for ECDSA error message by @tjs-cinemo in https://github.com/golang-jwt/jwt/pull/373
Fix incorrect error return by @ss49919201 in https://github.com/golang-jwt/jwt/pull/371

New Contributors

@tjs-cinemo made their first contribution in https://github.com/golang-jwt/jwt/pull/373
@ss49919201 made their first contribution in https://github.com/golang-jwt/jwt/pull/371

Full Changelog: golang-jwt/jwt@v5.2.0...v5.2.1

`v5.2.0`

Compare Source

What's Changed

Exported NewValidator by @oxisto in https://github.com/golang-jwt/jwt/pull/349
Improve ErrInvalidKeyType error messages by @Laurin-Notemann in https://github.com/golang-jwt/jwt/pull/361
Update MIGRATION_GUIDE.md by @jbarham in https://github.com/golang-jwt/jwt/pull/363

New Contributors

@Laurin-Notemann made their first contribution in https://github.com/golang-jwt/jwt/pull/361
@jbarham made their first contribution in https://github.com/golang-jwt/jwt/pull/363

Full Changelog: golang-jwt/jwt@v5.1.0...v5.2.0

`v5.1.0`

Compare Source

What's Changed

Using jwt's native ErrInvalidType instead of json.UnsupportedTypeError by @oxisto in https://github.com/golang-jwt/jwt/pull/316
Fix typos in comments and test names by @alexandear in https://github.com/golang-jwt/jwt/pull/317
Format: add whitespaces, remove empty lines by @alexandear in https://github.com/golang-jwt/jwt/pull/319
Refactor example: use io.ReadAll instead of io.Copy by @alexandear in https://github.com/golang-jwt/jwt/pull/320
Refactor code by using switch instead of if-else by @alexandear in https://github.com/golang-jwt/jwt/pull/318
A quick way to validate token string by @dcalsky in https://github.com/golang-jwt/jwt/pull/302
Refactor: remove unnecessary []byte conversion to string by @alexandear in https://github.com/golang-jwt/jwt/pull/330
Refactor: compare strings with strings.EqualFold by @alexandear in https://github.com/golang-jwt/jwt/pull/329
Avoid use of json.NewDecoder by @craigpastro in https://github.com/golang-jwt/jwt/pull/313
Update ParseUnverified godoc by @duhaesbaert in https://github.com/golang-jwt/jwt/pull/341
Update ci workflows (add go1.21) by @mfridman in https://github.com/golang-jwt/jwt/pull/345
Bump actions/checkout from 3 to 4 by @dependabot in https://github.com/golang-jwt/jwt/pull/346
Key rotation with VerificationKeySet by @mfridman in https://github.com/golang-jwt/jwt/pull/344
Add explicit ClaimsValidator implementation check for custom claims by @epelc in https://github.com/golang-jwt/jwt/pull/343
feat: allow making exp claim required by @tareksha in https://github.com/golang-jwt/jwt/pull/351
Add error handling to examples by @craigpastro in https://github.com/golang-jwt/jwt/pull/312

New Contributors

@alexandear made their first contribution in https://github.com/golang-jwt/jwt/pull/317
@dcalsky made their first contribution in https://github.com/golang-jwt/jwt/pull/302
@craigpastro made their first contribution in https://github.com/golang-jwt/jwt/pull/313
@duhaesbaert made their first contribution in https://github.com/golang-jwt/jwt/pull/341
@epelc made their first contribution in https://github.com/golang-jwt/jwt/pull/343
@tareksha made their first contribution in https://github.com/golang-jwt/jwt/pull/351

Full Changelog: golang-jwt/jwt@v5.0.0...v5.1.0

`v5.0.0`

Compare Source

🚀 New Major Version `v5` 🚀

It's finally here, the release you have been waiting for! We don't take breaking changes lightly, but the changes outlined below were necessary to address some of the challenges of the previous API. A big thanks for @mfridman for all the reviews, all contributors for their commits and of course @dgrijalva for the original code. I hope we kept some of the spirit of your original v4 branch alive in the approach we have taken here.
~@oxisto, on behalf of @golang-jwt/maintainers

Version v5 contains a major rework of core functionalities in the jwt-go library. This includes support for several validation options as well as a re-design of the Claims interface. Lastly, we reworked how errors work under the hood, which should provide a better overall developer experience.

Starting from v5.0.0, the import path will be:

"github.com/golang-jwt/jwt/v5"

For most users, changing the import path should suffice. However, since we intentionally changed and cleaned some of the public API, existing programs might need to be updated. The following sections describe significant changes and corresponding updates for existing programs.

Parsing and Validation Options

Under the hood, a new validator struct takes care of validating the claims. A long awaited feature has been the option to fine-tune the validation of tokens. This is now possible with several ParserOption functions that can be appended to most Parse functions, such as ParseWithClaims. The most important options and changes are:

Added WithLeeway to support specifying the leeway that is allowed when validating time-based claims, such as exp or nbf.
Changed default behavior to not check the iat claim. Usage of this claim is OPTIONAL according to the JWT RFC. The claim itself is also purely informational according to the RFC, so a strict validation failure is not recommended. If you want to check for sensible values in these claims, please use the WithIssuedAt parser option.
Added WithAudience, WithSubject and WithIssuer to support checking for expected aud, sub and iss.
Added WithStrictDecoding and WithPaddingAllowed options to allow previously global settings to enable base64 strict encoding and the parsing of base64 strings with padding. The latter is strictly speaking against the standard, but unfortunately some of the major identity providers issue some of these incorrect tokens. Both options are disabled by default.

Changes to the `Claims` interface

Complete Restructuring

Previously, the claims interface was satisfied with an implementation of a Valid() error function. This had several issues:

The different claim types (struct claims, map claims, etc.) then contained similar (but not 100 % identical) code of how this validation was done. This lead to a lot of (almost) duplicate code and was hard to maintain
It was not really semantically close to what a "claim" (or a set of claims) really is; which is a list of defined key/value pairs with a certain semantic meaning.

Since all the validation functionality is now extracted into the validator, all VerifyXXX and Valid functions have been removed from the Claims interface. Instead, the interface now represents a list of getters to retrieve values with a specific meaning. This allows us to completely decouple the validation logic with the underlying storage representation of the claim, which could be a struct, a map or even something stored in a database.

type Claims interface {
	GetExpirationTime() (*NumericDate, error)
	GetIssuedAt() (*NumericDate, error)
	GetNotBefore() (*NumericDate, error)
	GetIssuer() (string, error)
	GetSubject() (string, error)
	GetAudience() (ClaimStrings, error)
}

Supported Claim Types and Removal of `StandardClaims`

The two standard claim types supported by this library, MapClaims and RegisteredClaims both implement the necessary functions of this interface. The old StandardClaims struct, which has already been deprecated in v4 is now removed.

Users using custom claims, in most cases, will not experience any changes in the behavior as long as they embedded RegisteredClaims. If they created a new claim type from scratch, they now need to implemented the proper getter functions.

Migrating Application Specific Logic of the old `Valid`

Previously, users could override the Valid method in a custom claim, for example to extend the validation with application-specific claims. However, this was always very dangerous, since once could easily disable the standard validation and signature checking.

In order to avoid that, while still supporting the use-case, a new ClaimsValidator interface has been introduced. This interface consists of the Validate() error function. If the validator sees, that a Claims struct implements this interface, the errors returned to the Validate function will be appended to the regular standard validation. It is not possible to disable the standard validation anymore (even only by accident).

Usage examples can be found in example_test.go, to build claims structs like the following.

// MyCustomClaims includes all registered claims, plus Foo.
type MyCustomClaims struct {
	Foo string `json:"foo"`
	jwt.RegisteredClaims
}

// Validate can be used to execute additional application-specific claims
// validation.
func (m MyCustomClaims) Validate() error {
	if m.Foo != "bar" {
		return errors.New("must be foobar")
	}

	return nil
}

Changes to the `Token` and `Parser` struct

The previously global functions DecodeSegment and EncodeSegment were moved to the Parser and Token struct respectively. This will allow us in the future to configure the behavior of these two based on options supplied on the parser or the token (creation). This also removes two previously global variables and moves them to parser options WithStrictDecoding and WithPaddingAllowed.

In order to do that, we had to adjust the way signing methods work. Previously they were given a base64 encoded signature in Verify and were expected to return a base64 encoded version of the signature in Sign, both as a string. However, this made it necessary to have DecodeSegment and EncodeSegment global and was a less than perfect design because we were repeating encoding/decoding steps for all signing methods. Now, Sign and Verify operate on a decoded signature as a []byte, which feels more natural for a cryptographic operation anyway. Lastly, Parse and SignedString take care of the final encoding/decoding part.

In addition to that, we also changed the Signature field on Token from a string to []byte and this is also now populated with the decoded form. This is also more consistent, because the other parts of the JWT, mainly Header and Claims were already stored in decoded form in Token. Only the signature was stored in base64 encoded form, which was redundant with the information in the Raw field, which contains the complete token as base64.

type Token struct {
	Raw       string                 // Raw contains the raw token
	Method    SigningMethod          // Method is the signing method used or to be used
	Header    map[string]interface{} // Header is the first segment of the token in decoded form
	Claims    Claims                 // Claims is the second segment of the token in decoded form
	Signature []byte                 // Signature is the third segment of the token in decoded form
	Valid     bool                   // Valid specifies if the token is valid
}

Most (if not all) of these changes should not impact the normal usage of this library. Only users directly accessing the Signature field as well as developers of custom signing methods should be affected.

What's Changed

Added GitHub Actions Markdown by @oxisto in https://github.com/golang-jwt/jwt/pull/260
Remove StandardClaims in favor of RegisteredClaims by @oxisto in #235
Adding more coverage by @oxisto in #268
More consistent way of handling validation errors by @oxisto in #274
New Validation API by @oxisto in https://github.com/golang-jwt/jwt/pull/236
v5 Pre-Release by @oxisto in https://github.com/golang-jwt/jwt/pull/234
no need for string slice and call to strings.join by @moneszarrugh in https://github.com/golang-jwt/jwt/pull/115
Update MIGRATION_GUIDE.md by @liam-verta in https://github.com/golang-jwt/jwt/pull/289
Moving DecodeSegement to Parser by @oxisto in https://github.com/golang-jwt/jwt/pull/278
Adjusting the error checking example by @oxisto in https://github.com/golang-jwt/jwt/pull/270
add documentation to hmac Verify & Sign to detail why string is not an advisable input for key by @dillonstreator in https://github.com/golang-jwt/jwt/pull/249
Add golangci-lint by @mfridman in https://github.com/golang-jwt/jwt/pull/279
Added dependabot updates for GitHub actions by @oxisto in https://github.com/golang-jwt/jwt/pull/298
Bump actions/checkout from 2 to 3 by @dependabot in https://github.com/golang-jwt/jwt/pull/299
Bump actions/setup-go from 3 to 4 by @dependabot in https://github.com/golang-jwt/jwt/pull/300
Added coverage reporting by @oxisto in https://github.com/golang-jwt/jwt/pull/304
Last Documentation cleanups for v5 release by @oxisto in https://github.com/golang-jwt/jwt/pull/291
enable jwt.ParsePublicKeyFromPEM to parse PKCS1 Public Key by @twocs in https://github.com/golang-jwt/jwt/pull/120

New Contributors

@moneszarrugh made their first contribution in https://github.com/golang-jwt/jwt/pull/115
@liam-verta made their first contribution in https://github.com/golang-jwt/jwt/pull/289
@dillonstreator made their first contribution in https://github.com/golang-jwt/jwt/pull/249
@dependabot made their first contribution in https://github.com/golang-jwt/jwt/pull/299
@twocs made their first contribution in https://github.com/golang-jwt/jwt/pull/120

Full Changelog: golang-jwt/jwt@v4.5.0...v5.0.0

google/go-github (github.com/google/go-github/v60)

`v69.1.0`

Compare Source

This minor release contains the following changes:

Bump go-github from v68 to v69 in /scrape (#3464)
Use a max retry after duration for secondary rate limit if specified (#3438)
docs: Clarify ListPullRequestsWithCommit usage (#3465)
fix: go 1.22 test breakage (#3459)
feat: Add link to bored-engineer/github-conditional-http-transport to conditional requests documentation (#3469)
build(deps): bump golang.org/x/sync from 0.10.0 to 0.11.0 in /tools (#3472)
build(deps): bump golang.org/x/net from 0.34.0 to 0.35.0 in /scrape (#3470)
build(deps): bump github.com/alecthomas/kong from 1.7.0 to 1.8.0 in /tools (#3471)
Update workflow and tools to use Go1.24 and 1.23 (#3474)
chore: Only use master test runs for status badge (#3475)
feat: Add ListProvisionedScimGroupsForEnterprise inside SCIM service (#3467)
fix: Add missing query params to AlertListOptions (#3477)
Bump version of go-github to v69.1.0 (#3478)

`v69.0.0`

Compare Source

This release contains the following breaking API changes:

feat!: Add support for enterprise rulesets (#3417)
BREAKING CHANGE: Create*Ruleset and Update*Ruleset now pass ruleset parameter by-value instead of by-reference.
fix!: Typo in field names in the CheckSuite struct (#3444)
BREAKING CHANGE: Rerequstable=>Rerequestable, RunsRerequstable=>RunsRerequestable
fix!: Typo in field names in the PullStats struct (#3445)
BREAKING CHANGE: MergablePulls=>MergeablePulls, UnmergablePulls=>UnmergeablePulls
refactor!: Do not capitalize error strings (#3446)
BREAKING CHANGE: Some error strings are slightly modified - please do not rely on error text in general.
fix!: Refactor the repository ruleset code (#3430)
BREAKING CHANGES: The following types have been renamed:
- Ruleset -> RepositoryRuleset
- RulesetLink -> RepositoryRulesetLink
- RulesetLinks -> RepositoryRulesetLinks
- RulesetRefConditionParameters -> RepositoryRulesetRefConditionParameters
- RulesetRepositoryNamesConditionParameters -> RepositoryRulesetRepositoryNamesConditionParameters
- RulesetRepositoryIDsConditionParameters -> RepositoryRulesetRepositoryIDsConditionParameters
- RulesetRepositoryPropertyTargetParameters -> Repository
- RulesetRepositoryPropertyConditionParameters -> RepositoryRulesetRepositoryPropertyConditionParameters
- RulesetOrganizationNamesConditionParameters -> RepositoryRulesetOrganizationNamesConditionParameters
- RulesetOrganizationIDsConditionParameters -> RepositoryRulesetOrganizationIDsConditionParameters
- RulesetConditions -> RepositoryRulesetConditions
- RepositoryRulesetEditedChanges -> RepositoryRulesetChanges
- RepositoryRulesetEditedSource -> RepositoryRulesetChangeSource
- RepositoryRulesetEditedSources -> RepositoryRulesetChangeSources
- RepositoryRulesetEditedConditions -> RepositoryRulesetUpdatedConditions
- RepositoryRulesetUpdatedConditionsEdited -> RepositoryRulesetUpdatedCondition
- RepositoryRulesetEditedRules -> RepositoryRulesetChangedRules
- RepositoryRulesetUpdatedRules -> RepositoryRulesetUpdatedRules
- RepositoryRulesetEditedRuleChanges -> RepositoryRulesetChangedRule
chore!: Add sliceofpointers custom linter (#3447)
BREAKING CHANGE: ListOAuthApps now returns ([]*OAuthApp, error) instead of ([]OAuthApp, error).
feat!: Change User.InheritedFrom to a slice (#3460)
BREAKING CHANGE: User.InheritedFrom is changed from a *Team to a []*Team.

...and the following additional changes:

Bump go-github from v67 to v68 in /scrape (#3398)
build(deps): bump golang.org/x/net from 0.32.0 to 0.33.0 in /scrape (#3400)
build(deps): bump codecov/codecov-action from 5.1.1 to 5.1.2 (#3401)
Bump golang.org/x/net to v0.33.0 (#3402)
Add TokenID and TokenName to PersonalAccessToken struct (#3404)
Bump github.com/PuerkitoBio/goquery from 1.9.2 to 1.10.1 in /scrape (#3408)
Bump Go to 1.22.10 or 1.23.4 in go.mod files (#3410)
Add opt-in rate limit support on endpoints returning 302s (#3411)
Update OpenAPI (#3419)
build(deps): bump golang.org/x/net from 0.33.0 to 0.34.0 in /scrape (#3420)
Permit toggling rate limit check by consumers (#3386)
build(deps): Pin and group actions/* (#3424)
Add deprecation messages to security managers APIs (#3426)
fix: Relax go directive in go.mod to 1.22.0 (#3423)
Enforce toolchain requirement in generate.sh (#3428)
feat: Add missing notification_setting to Team (#3431)
chore: Add reviewers file (#3435)
gen-accessors: Update dumping of getters (#3437)
chore: Fix codecov upload (#3440)
chore: Spell "unmarshal" consistently with one el (#3441)
fix: Typos in func parameter, vars, error, and comments (#3442)
feat: Add manage_ghes endpoints introduced in 3.15 (#3433)
Fix minor typo (#3448)
chore: Check and fix license headers (#3449)
Add new fields for IssueType (#3451)
ci: update golangci-lint to v1.63.4 (#3452)
Extend Rate and Rate Limiting with X-Ratelimit-Used and X-Ratelimit-Resource headers (#3453)
build(deps): bump actions/setup-go from 5.2.0 to 5.3.0 in the actions group (#3454)
build(deps): bump codecov/codecov-action from 5.1.2 to 5.3.1 (#3455)
docs: Add clarifications for mergeable field in pull requests (#3396)
build(deps): bump github.com/alecthomas/kong from 1.6.0 to 1.7.0 in /tools (#3458)
Bump version of go-github to v69.0.0 (#3463)

`v68.0.0`

Compare Source

This release contains the following breaking API changes:

feat!: Remove Project (classic) support (#3380)
BREAKING CHANGE: All support for "Project (classic)" is removed and Project responses are replaced by ProjectV2 (renamed from ProjectsV2).
fix!: Remove unused Stats field from Commit struct (#3395)
BREAKING CHANGE: The unused Stats field is removed from the Commit struct.

...and the following additional changes:

Bump go-github from v66 to v67 in /scrape (#3361)
Map more missing installation permissions (#3363)
build(deps): bump github.com/alecthomas/kong from 1.4.0 to 1.5.0 in /tools (#3365)
fix: Preserve HTTP Response in URL Errors (#3369)
Update OpenAPI (#3374)
feat: Add assignment for org role associations (#3371)
build(deps): bump codecov/codecov-action from 5.0.7 to 5.1.1 (#3375)
build(deps): bump github.com/alecthomas/kong from 1.5.0 to 1.6.0 in /tools (#3376)
build(deps): bump golang.org/x/sync from 0.9.0 to 0.10.0 in /tools (#3377)
build(deps): bump golang.org/x/net from 0.31.0 to 0.32.0 in /scrape (#3378)
chore: Deprecate legacy ID-based team methods (#3373)
feat: Support resolution_comment to update alert API (#3357)
feat: Add custom_property events (#3379)
feat: Deprecate and replace Bool,Int,Int64,String with Ptr using generics (#3355)
feat: Add GET for custom org repo role (#3372)
chore: Remove commented out test code (#3381)
build(deps): bump golang.org/x/crypto from 0.27.0 to 0.31.0 in /example in the go_modules group (#3383)
feat: Add enterprise custom properties (#3382)
Change header keys to be canonical (#3389)
chore: Sort std imports (#3390)
feat: Document review request events in Timeline struct (#3391)
fix: DownloadReleaseAsset handles renamed repository (#3392)
Bump version of go-github to v68.0.0 (#3397)

`v67.0.0`

Compare Source

This release contains the following breaking API changes:

feat!: Add name query parameter to ActionsService.ListArtifacts (#3330)
BREAKING CHANGE: opts argument to ActionsService.ListArtifacts changed from ListOptions to ListArtifactsOptions.
feat!: Rename code scanning params from plural to singular (#3331)
BREAKING CHANGE: Rename RuleRequiredCodeScanningTools to RuleRequiredCodeScanningTool.
feat!: Fix source property on Repo Custom Properties (#3333)
BREAKING CHANGE: Change RulesetRepositoryPropertyTargetParameters.Source from string to *string.

...and the following additional changes:

Bump go-github from v65 to v66 in /scrape (#3311)
build(deps): bump golang.org/x/net from 0.29.0 to 0.30.0 in /scrape (#3313)
build(deps): bump codecov/codecov-action from 4.5.0 to 4.6.0 (#3312)
build(deps): bump github.com/getkin/kin-openapi from 0.127.0 to 0.128.0 in /tools (#3314)
refactor: Remove unneeded strings.Join calls (#3317)
feat: Add CreatedAt and UpdatedAt to Ruleset (#3316)
feat: Add Expired to RepositoryInvitation (#3320)
Update openapi_operations.yaml (#3322)
refactor: Enable perfsprint; fix appeared lint issues (#3324)
refactor: Replace 'println' with 'fmt.Println' (#3326)
docs: Add dots at the end of sentences (#3325)
scrape: refactor tests with t.Fatal (#3299)
feat: Support Code Security Configurations API (#3319)
Add Copilot Usage Summary for Organization (#3321)
chore: Remove deprecated build constraints (#3306)
refactor: Replace 'print' with 'fmt.Print' (#3327)
Add Webhook for Repository ruleset (#3305)
feat: Add support for code_scanning (#3256)
docs: put a space between // and comment text (#3329)
Add support for fetching artifact attestations at the org, repo and user levels (#3334)
Add BranchProtectionConfigurationEvent and SecretScanningAlertLocationEvent (#3332)
build(deps): bump github.com/theupdateframework/go-tuf/v2 from 2.0.0 to 2.0.1 in /example in the go_modules group (#3338)
Allow RemoveReviewers to remove only teams (#3337)
build(deps): bump github.com/alecthomas/kong from 1.2.1 to 1.3.0 in /tools (#3342)
build(deps): bump github.com/golang-jwt/jwt/v4 from 4.5.0 to 4.5.1 in /example in the go_modules group (#3343)
feat(secret scanning): Support pull_request_comment_url (#3344)
build(deps): bump golang.org/x/net from 0.30.0 to 0.31.0 in /scrape (#3348)
build(deps): bump golang.org/x/sync from 0.8.0 to 0.9.0 in /tools (#3347)
build(deps): bump github.com/alecthomas/kong from 1.3.0 to 1.4.0 in /tools (#3346)
refactor: Enable revive linter and fix up lint issues (#3345)
Add missing permissions to InstallationPermissions struct (#3349)
build(deps): bump codecov/codecov-action from 4.6.0 to 5.0.2 (#3351)
Update OpenAPI (#3352)
Add missing Deployment field to workflow_job event type (#3353)
feat: Support Copilot metrics endpoints (#3350)
feat: Remove the beta endpoint for Copilot usage (#3354)
build(deps): bump codecov/codecov-action from 5.0.2 to 5.0.

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate · 2024-11-19T04:25:43Z

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

any of the package files in this branch needs updating, or
the branch becomes conflicted, or
you click the rebase/retry checkbox if found above, or
you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: server/go.sum

Command failed: mod upgrade --mod-name=github.com/grpc-ecosystem/go-grpc-middleware -t=2
go: finding module for package github.com/grpc-ecosystem/go-grpc-middleware/v2/logging/zap
go: downloading github.com/grpc-ecosystem/go-grpc-middleware/v2 v2.2.0
go: finding module for package github.com/grpc-ecosystem/go-grpc-middleware/v2/tags
go: go.etcd.io/etcd/server/v3/etcdmain imports
	github.com/grpc-ecosystem/go-grpc-middleware/v2/logging/zap: module github.com/grpc-ecosystem/go-grpc-middleware/v2@latest found (v2.2.0), but does not contain package github.com/grpc-ecosystem/go-grpc-middleware/v2/logging/zap
go: go.etcd.io/etcd/server/v3/etcdmain imports
	github.com/grpc-ecosystem/go-grpc-middleware/v2/tags: module github.com/grpc-ecosystem/go-grpc-middleware/v2@latest found (v2.2.0), but does not contain package github.com/grpc-ecosystem/go-grpc-middleware/v2/tags
exit status 1

renovate bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Nov 19, 2024

renovate bot force-pushed the renovate/major-gomod branch from 540f005 to 9b0934e Compare November 28, 2024 02:50

renovate bot changed the title ~~chore(deps): update gomod (major)~~ Update gomod (major) Dec 5, 2024

ivanvc force-pushed the main branch from e2385e3 to 985840a Compare December 5, 2024 00:33

renovate bot force-pushed the renovate/major-gomod branch from 9b0934e to 95c3b39 Compare December 5, 2024 00:37

renovate bot changed the title ~~Update gomod (major)~~ chore(deps): update gomod (major) Dec 5, 2024

renovate bot changed the title ~~chore(deps): update gomod (major)~~ fix(deps): update gomod (major) Dec 11, 2024

renovate bot force-pushed the renovate/major-gomod branch 2 times, most recently from c7de1e0 to 63ac240 Compare December 17, 2024 06:48

renovate bot force-pushed the renovate/major-gomod branch 2 times, most recently from 4ec19d1 to 77899ea Compare December 24, 2024 06:20

renovate bot force-pushed the renovate/major-gomod branch from 77899ea to 0e5fbd7 Compare January 9, 2025 19:53

renovate bot force-pushed the renovate/major-gomod branch 3 times, most recently from 328be65 to ead7233 Compare January 26, 2025 04:55

renovate bot force-pushed the renovate/major-gomod branch from ead7233 to 24904bb Compare January 28, 2025 19:16

renovate bot force-pushed the renovate/major-gomod branch 2 times, most recently from 4a0d537 to ebdd880 Compare February 10, 2025 06:34

fix(deps): update gomod

381a748

renovate bot force-pushed the renovate/major-gomod branch from ebdd880 to 381a748 Compare February 14, 2025 06:53

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

fix(deps): update gomod (major) #443

fix(deps): update gomod (major) #443

renovate bot commented Nov 19, 2024 •

edited

Loading

renovate bot commented Nov 19, 2024 •

edited

Loading

fix(deps): update gomod (major) #443

Are you sure you want to change the base?

fix(deps): update gomod (major) #443

Conversation

renovate bot commented Nov 19, 2024 • edited Loading

Release Notes

What's Changed

v1.0.1: Support type aliases by Go 1.23

What's Changed

New Contributors

v1.0.0: Go 1.23 and "detect opposite" feature

What's Changed

What's Changed

v2.0.1: Drop golang < 1.18

v2.0.0: Upgrade x/tools

v2.0.0: Bump minimum required go version to 1.18 and upgrade deps

What's Changed

New Contributors

v1.2.0: Upgrade x/tools

What's Changed

New Contributors

What's Changed

New Contributors

What's Changed

New Contributors

🚀 New Major Version v5 🚀

Parsing and Validation Options

Changes to the Claims interface

Complete Restructuring

Supported Claim Types and Removal of StandardClaims

Migrating Application Specific Logic of the old Valid

Changes to the Token and Parser struct

What's Changed

New Contributors

Configuration

renovate bot commented Nov 19, 2024 • edited Loading

⚠️ Artifact update problem

File name: server/go.sum

renovate bot commented Nov 19, 2024 •

edited

Loading

`v1.0.1`: Support type aliases by Go 1.23

`v1.0.0`: Go 1.23 and "detect opposite" feature

`v2.0.1`: Drop golang < 1.18

`v2.0.0`: Upgrade x/tools

`v2.0.0`: Bump minimum required go version to 1.18 and upgrade deps

`v1.2.0`: Upgrade x/tools

🚀 New Major Version `v5` 🚀

Changes to the `Claims` interface

Supported Claim Types and Removal of `StandardClaims`

Migrating Application Specific Logic of the old `Valid`

Changes to the `Token` and `Parser` struct

renovate bot commented Nov 19, 2024 •

edited

Loading