Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the go-modules group with 20 updates #377

Closed
wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Apr 19, 2024

Bumps the go-modules group with 20 updates:

Package From To
github.com/onsi/gomega 1.27.10 1.33.0
github.com/paketo-buildpacks/packit/v2 2.11.0 2.12.0
github.com/cenkalti/backoff/v4 4.2.1 4.3.0
github.com/containerd/containerd 1.7.0 1.7.15
github.com/distribution/reference 0.5.0 0.6.0
github.com/docker/go-connections 0.4.0 0.5.0
github.com/gabriel-vasile/mimetype 1.4.2 1.4.3
github.com/golang/protobuf 1.5.3 1.5.4
github.com/google/uuid 1.3.1 1.6.0
github.com/klauspost/compress 1.16.4 1.17.8
github.com/moby/patternmatcher 0.5.0 0.6.0
github.com/opencontainers/runc 1.1.9 1.1.12
github.com/ulikunitz/xz 0.5.11 0.5.12
golang.org/x/mod 0.13.0 0.14.0
golang.org/x/net 0.17.0 0.23.0
golang.org/x/sys 0.15.0 0.18.0
golang.org/x/text 0.13.0 0.14.0
golang.org/x/tools 0.14.0 0.17.0
google.golang.org/grpc 1.54.0 1.58.3
google.golang.org/protobuf 1.31.0 1.33.0

Updates github.com/onsi/gomega from 1.27.10 to 1.33.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.33.0

1.33.0

Features

Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]
  • Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]
  • Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]

v1.32.0

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

v1.31.1

1.31.1

Fixes

  • Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]
  • Update test in case keeping msg is desired [ad1a367]

Maintenance

  • Show how to import the format sub package [24e958d]
  • tidy up go.sum [26661b8]
  • bump dependencies [bde8f7a]

v1.31.0

1.31.0

Features

  • Async assertions include context cancellation cause if present [121c37f]

Maintenance

  • Bump minimum go version [dee1e3c]
  • docs: fix typo in example usage "occured" -> "occurred" [49005fe]
  • Bump actions/setup-go from 4 to 5 (#714) [f1c8757]
  • Bump github/codeql-action from 2 to 3 (#715) [9836e76]
  • Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.2 (#713) [54726f0]

... (truncated)

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.33.0

Features

Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.

Maintenance

  • Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]
  • Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]
  • Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]

1.32.0

Maintenance

  • Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

    This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @​jbduncan !). Please open an issue if you run into one.

  • chore: test with Go 1.22 (#733) [32ef35e]

  • Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

  • Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

  • docs: fix typo and broken anchor link to gstruct [f460154]

  • docs: fix HaveEach matcher signature [a2862e4]

1.31.1

Fixes

  • Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]
  • Update test in case keeping msg is desired [ad1a367]

Maintenance

  • Show how to import the format sub package [24e958d]
  • tidy up go.sum [26661b8]
  • bump dependencies [bde8f7a]

1.31.0

Features

  • Async assertions include context cancellation cause if present [121c37f]

Maintenance

  • Bump minimum go version [dee1e3c]
  • docs: fix typo in example usage "occured" -> "occurred" [49005fe]
  • Bump actions/setup-go from 4 to 5 (#714) [f1c8757]
  • Bump github/codeql-action from 2 to 3 (#715) [9836e76]
  • Bump github.com/onsi/ginkgo/v2 from 2.13.0 to 2.13.2 (#713) [54726f0]
  • Bump golang.org/x/net from 0.17.0 to 0.19.0 (#711) [df97ecc]
  • docs: fix HaveExactElement typo (#712) [a672c86]

1.30.0

... (truncated)

Commits
  • f2e65fc v1.33.0
  • 02e8706 docs: Receive(POINTER, MATCHER)
  • ec1f186 feat: receiver matcher accepting (POINTER, MATCHER), includes unit tests
  • 9999deb Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745)
  • cb5ff21 Bump github-pages from 229 to 230 in /docs (#735)
  • bac6596 Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746)
  • 4379951 v1.32.0
  • a350b95 Maintain source backwards compatibility
  • a6c8875 Fix failing test
  • 436a197 Migrate github.com/golang/protobuf to google.golang.org/protobuf
  • Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.11.0 to 2.12.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.12.0

What's Changed

New Contributors

Full Changelog: paketo-buildpacks/packit@v2.11.0...v2.12.0

Commits
  • fb332c0 Enable Alternative Checksum format of algorithm_hash (#526)
  • 14ebfa0 Bump github.com/onsi/gomega from 1.28.0 to 1.28.1
  • 0ce6d54 Bump github.com/gabriel-vasile/mimetype from 1.4.2 to 1.4.3
  • 7893a5c Updating github-config
  • 8a7cf8f Bump github.com/onsi/gomega from 1.27.10 to 1.28.0
  • de0f00f Bump github.com/google/uuid from 1.3.0 to 1.3.1
  • abeb000 Bump github.com/onsi/gomega from 1.27.9 to 1.27.10
  • 2ef9116 Bump github.com/onsi/gomega from 1.27.8 to 1.27.9
  • 65e47b8 Bump github.com/BurntSushi/toml from 1.3.1 to 1.3.2
  • 6c889fc Bump github.com/BurntSushi/toml from 1.3.0 to 1.3.1
  • Additional commits viewable in compare view

Updates github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0

Commits
  • 720b789 remove travis badge from readme
  • a83af7f feat(backoff): Add functional options for ExponentialBackOff Closes #136
  • See full diff in compare view

Updates github.com/containerd/containerd from 1.7.0 to 1.7.15

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.15

Welcome to the v1.7.15 release of containerd!

The fifteenth patch release for containerd 1.7 contains various fixes; one for a regression introduced in v1.7.14 in the way process exits were handled.

Highlights

  • Adds mediatype to OCI index record on export (#9990)

Runtime

  • Fix runc shim to only defer init process exits (#10037)

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

  • Derek McGowan
  • Phil Estes
  • Austin Vazquez
  • Laura Brehm
  • Sebastiaan van Stijn
  • Talon

Changes

  • Prepare for v1.7.15 release (#10039)
  • Fix runc shim to only defer init process exits (#10037)
    • 21df46766 runc-shim: only defer init process exits
  • Fix compile from version control system (source) use case (#10012)
    • 2a054213e Fix compile from version control system (source) use case
  • Adds mediatype to OCI index record on export (#9990)
    • 6605c47a4 adds mediatype to oci index record
  • vendor: google.golang.org/protobuf 1.33.0, github.com/golang/protobuf v1.5.4 (#9975)
    • e6d91d843 vendor: github.com/golang/protobuf v1.5.4
    • 2d136c5f5 build(deps): bump google.golang.org/protobuf from 1.32.0 to 1.33.0
    • a1a7af7a3 build(deps): bump google.golang.org/protobuf from 1.31.0 to 1.32.0

Dependency Changes

  • github.com/golang/protobuf v1.5.3 -> v1.5.4
  • google.golang.org/protobuf v1.31.0 -> v1.33.0

... (truncated)

Commits
  • 926c958 Merge pull request #10039 from estesp/prep-1.7.15
  • 4d4759b Prep v1.7.15 release
  • 52fc8ab Merge pull request #10037 from laurazard/backport-1.7-exec-fix
  • 21df467 runc-shim: only defer init process exits
  • 0dcf21c Merge pull request #10012 from austinvazquez/release-1.7-fix-offline-compilation
  • 2a05421 Fix compile from version control system (source) use case
  • ec5222f Merge pull request #9990 from daghack/oci-add-mediatype-1.7
  • 6605c47 adds mediatype to oci index record
  • be5ec97 Merge pull request #9975 from thaJeztah/1.7_bump_protobuf
  • e6d91d8 vendor: github.com/golang/protobuf v1.5.4
  • Additional commits viewable in compare view

Updates github.com/distribution/reference from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/distribution/reference's releases.

v0.6.0

What's Changed

New Contributors

Full Changelog: distribution/reference@v0.5.0...v0.6.0

Commits
  • ff14faf Merge pull request #9 from ozairasim/exclude-domain-from-name-length-validation
  • 2a66312 Merge pull request #10 from xrstf/patch-1
  • 094e717 fix typo in readme
  • aaca75e Exclude domain from name length check
  • 8507c7f Merge pull request #7 from thaJeztah/cleanup_splitDockerDomain
  • 89ee7ec refactor splitDockerDomain to include more documentation
  • a3fb784 Merge pull request #5 from thaJeztah/rm_deprecated
  • 4894124 remove deprecated SplitHostname
  • See full diff in compare view

Updates github.com/docker/go-connections from 0.4.0 to 0.5.0

Commits
  • fa09c95 Merge pull request #108 from thaJeztah/carry_6
  • 7a67a58 Swap CloseRead and CloseWrite
  • 481d3d2 Merge pull request #107 from thaJeztah/drop_legacy_go
  • 9548f9f tlsconfig: remove deprecated io/ioutil
  • c564c21 drop support for go1.17 and older
  • 7cbebcf gha: update actions
  • 2cf423f tlsconfig: move allTLSVersions var
  • dca283b tlsconfig: drop support for go1.12 and older
  • 21876c5 tlsconfig: drop support for go1.6 and older
  • 4d174db tlsconfig: drop support for go1.4 and older
  • Additional commits viewable in compare view

Updates github.com/gabriel-vasile/mimetype from 1.4.2 to 1.4.3

Release notes

Sourced from github.com/gabriel-vasile/mimetype's releases.

v1.4.3

What's Changed

New Contributors

Full Changelog: gabriel-vasile/mimetype@v1.4.2...v1.4.3

Commits
  • e64d6bd enable reusing records in csv/tsv detection (#443)
  • b4da7ba Bump the gomod group with 1 update (#441)
  • 918baec Bump the github-actions group with 4 updates (#442)
  • 9df6903 Switch csv and tsv method 'sv' from ReadAll() to stream each record with Read...
  • 85b2cdc Merge pull request #414 from gabriel-vasile/dependabot/github_actions/github-...
  • 24e5745 Merge pull request #412 from gabriel-vasile/dependabot/go_modules/gomod-939bd...
  • 6bd9427 Bump the github-actions group with 5 updates
  • 4f0da4f Bump the gomod group with 1 update
  • 1a4b844 Group all dependabot PRs together (#409)
  • f5a14c2 Remove old travis build status link from readme (#407)
  • Additional commits viewable in compare view

Updates github.com/golang/protobuf from 1.5.3 to 1.5.4

Release notes

Sourced from github.com/golang/protobuf's releases.

v1.5.4

Notable changes

  • update descriptor.proto to latest version
Commits

Updates github.com/google/uuid from 1.3.1 to 1.6.0

Release notes

Sourced from github.com/google/uuid's releases.

v1.6.0

1.6.0 (2024-01-16)

Features

Bug Fixes

v1.5.0

1.5.0 (2023-12-12)

Features

  • Validate UUID without creating new UUID (#141) (9ee7366)

v1.4.0

1.4.0 (2023-10-26)

Features

  • UUIDs slice type with Strings() convenience method (#133) (cd5fbbd)

Fixes

  • Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior)
Changelog

Sourced from github.com/google/uuid's changelog.

1.6.0 (2024-01-16)

Features

Bug Fixes

1.5.0 (2023-12-12)

Features

  • Validate UUID without creating new UUID (#141) (9ee7366)

1.4.0 (2023-10-26)

Features

  • UUIDs slice type with Strings() convenience method (#133) (cd5fbbd)

Fixes

  • Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior)
Commits

Updates github.com/klauspost/compress from 1.16.4 to 1.17.8

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.8

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.7...v1.17.8

v1.17.7

What's Changed

Full Changelog: klauspost/compress@v1.17.6...v1.17.7

v1.17.6

What's Changed

Full Changelog: klauspost/compress@v1.17.5...v1.17.6

v1.17.5

What's Changed

New Contributors

... (truncated)

Commits
  • c0ff47e Update README.md
  • 657dc16 chore: remove repetitive words (#946)
  • 3f77d8c build(deps): bump the github-actions group with 1 update (#944)
  • de4073a zstd: Add RLE detection+encoding (#938)
  • 165be36 zstd: Reject blocks where reserved values are not 0 (#885)
  • 4f3f95b ci: Add testing replacement (#935)
  • 3976394 build(deps): bump the github-actions group with 1 update (#934)
  • 4d78e54 Remove sed for internal/fuzz/helpers.go (#933)
  • 46c00ca doc: Remove an excess word in a documentation comment (#932)
  • 1e2b275 tests: Rename fuzz helpers back. (#931)
  • Additional commits viewable in compare view

Updates github.com/moby/patternmatcher from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/moby/patternmatcher's releases.

v0.6.0

This release integrates the "frontend/dockerfile/dockerignore" package from github.com/moby/buildkit at commit 9da03ce42beb47d0d0a34c68ea90cac793b79851

What's Changed

Full Changelog: moby/patternmatcher@v0.5.0...v0.6.0

Commits
  • 347bb8d Merge pull request #1 from thaJeztah/integrate_dockerignore
  • 36a4227 integrate frontend/dockerfile/dockerignore from buildkit
  • 8a1649d Merge pull request #2 from thaJeztah/update_go_versions
  • c512fc5 gha: test against go1.20.x
  • 2345cde gha: update actions/setup-go@v4
  • 555cf69 gha: update golangci-lint to v1.53.x
  • 666020c frontend/dockerfile/dockerignore: remove hard-coded filename from error
  • dba575f frontend/dockerfile/dockerignore: touch-up godoc and code
  • 318a4a5 frontend/dockerfile/dockerignore: cleanup unit test
  • 00aab4f chore: refactor dockerfile to use errors pkg
  • Additional commits viewable in compare view

Updates github.com/opencontainers/runc from 1.1.9 to 1.1.12

Release notes

Sourced from github.com/opencontainers/runc's releases.

runc 1.1.12 -- "Now you're thinking with Portals™!"

This is the twelfth patch release in the 1.1.z release branch of runc. It fixes a high-severity container breakout vulnerability involving leaked file descriptors, and users are strongly encouraged to update as soon as possible.

  • Fix CVE-2024-21626, a container breakout attack that took advantage of a file descriptor that was leaked internally within runc (but never leaked to the container process).

    In addition to fixing the leak, several strict hardening measures were added to ensure that future internal leaks could not be used to break out in this manner again.

    Based on our research, while no other container runtime had a similar leak, none had any of the hardening steps we've introduced (and some runtimes would not check for any file descriptors that a calling process may have leaked to them, allowing for container breakouts due to basic user error).

Static Linking Notices

The runc binary distributed with this release are statically linked with the following GNU LGPL-2.1 licensed libraries, with runc acting as a "work that uses the Library":

The versions of these libraries were not modified from their upstream versions, but in order to comply with the LGPL-2.1 (§6(a)), we have attached the complete source code for those libraries which (when combined with the attached runc source code) may be used to exercise your rights under the LGPL-2.1.

However we strongly suggest that you make use of your distribution's packages or download them from the authoritative upstream sources, especially since these libraries are related to the security of your containers.

Thanks to all of the contributors who made this release possible:

Signed-off-by: Aleksa Sarai [email protected]

... (truncated)

Changelog

Sourced from github.com/opencontainers/runc's changelog.

[1.1.12] - 2024-01-31

Now you're thinking with Portals™!

Security

  • Fix CVE-2024-21626, a container breakout attack that took advantage of a file descriptor that was leaked internally within runc (but never leaked to the container process). In addition to fixing the leak, several strict hardening measures were added to ensure that future internal leaks could not be used to break out in this manner again. Based on our research, while no other container runtime had a similar leak, none had any of the hardening steps we've introduced (and some runtimes would not check for any file descriptors that a calling process may have leaked to them, allowing for container breakouts due to basic user error).

[1.1.11] - 2024-01-01

Happy New Year!

Fixed

Changed

  • Support memory.peak and memory.swap.peak in cgroups v2. Add swapOnlyUsage in MemoryStats. This field reports swap-only usage. For cgroupv1, Usage and Failcnt are set by subtracting memory usage from memory+swap usage. For cgroupv2, Usage, Limit, and MaxUsage are set. (#4000, #4010, #4131)
  • build(deps): bump github.com/cyphar/filepath-securejoin. (#4140)

[1.1.10] - 2023-10-31

Śruba, przykręcona we śnie, nie zmieni sytuacji, jaka panuje na jawie.

Added

  • Support for hugetlb.<pagesize>.rsvd limiting and accounting. Fixes the issue of postres failing when hugepage limits are set. (#3859, #4077)

Fixed

  • Fixed permissions of a newly created directories to not depend on the value of umask in tmpcopyup feature implementation. (#3991, #4060)
  • libcontainer: cgroup v1 GetStats now ignores missing kmem.limit_in_bytes (fixes the compatibility with Linux kernel 6.1+). (#4028)

... (truncated)

Commits
  • 51d5e94 VERSION: release 1.1.12
  • 2a4ed3e merge 1.1-GHSA-xr7r-f8xq-vfvv into release-1.1
  • e9665f4 init: don't special-case logrus fds
  • 683ad2f libcontainer: mark all non-stdio fds O_CLOEXEC before spawning init
  • b6633f4 cgroup: plug leaks of /sys/fs/cgroup handle
  • 284ba30 init: close internal fds before execve
  • fbe3eed setns init: do explicit lookup of execve argument early
  • 0994249 init: verify after chdir that cwd is inside the container
  • 506552a Fix File to Close
  • 099ff69 merge #4177 into opencontainers/runc:release-1.1
  • Additional commits viewable in compare view

Updates github.com/ulikunitz/xz from 0.5.11 to 0.5.12

Commits
  • 4f11dce Update README.md and SECURITY.md to address security questions
  • f56ebbf TODO.md: fix a typo
  • See full diff in compare view

Updates golang.org/x/mod from 0.13.0 to 0.14.0

Commits
  • 6e58e47 modfile: improve directory path detection and error text consistency
  • See full diff in compare view

Updates golang.org/x/net from 0.17.0 to 0.23.0

Commits
  • c48da13 http2: fix TestServerContinuationFlood flakes
  • 762b58d http2: fix tipos in comment
  • ba87210 http2: close connections when receiving too many headers
  • ebc8168 all: fix some typos
  • 3678185 http2: make TestCanonicalHeaderCacheGrowth faster
  • 448c44f http2: remove clientTester
  • c7877ac http2: convert the remaining clientTester tests to testClientConn
  • d8870b0 http2: use synthetic time in TestIdleConnTimeout
  • d73acff http2: only set up deadline when Server.IdleTimeout is positive
  • 89f602b http2: validate client/outgoing trailers
  • Additional commits viewable in compare view

Updates golang.org/x/sys from 0.15.0 to 0.18.0

Commits
  • 360f961 unix: add API for fsconfig system call
  • 7ff74af unix: drop go version tags for unsupported versions
  • 6b4eab5 unix: suppress ENOMEM errors from sysctl's implementing Uname(uname *Utsname)...
  • 2f2cc5d unix: update IFLA and NETKIT constants with Linux kernel 6.7
  • 914b96c windows: support ...

    Description has been truncated

Bumps the go-modules group with 20 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.27.10` | `1.33.0` |
| [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.11.0` | `2.12.0` |
| [github.com/cenkalti/backoff/v4](https://github.com/cenkalti/backoff) | `4.2.1` | `4.3.0` |
| [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.0` | `1.7.15` |
| [github.com/distribution/reference](https://github.com/distribution/reference) | `0.5.0` | `0.6.0` |
| [github.com/docker/go-connections](https://github.com/docker/go-connections) | `0.4.0` | `0.5.0` |
| [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.2` | `1.4.3` |
| [github.com/golang/protobuf](https://github.com/golang/protobuf) | `1.5.3` | `1.5.4` |
| [github.com/google/uuid](https://github.com/google/uuid) | `1.3.1` | `1.6.0` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.16.4` | `1.17.8` |
| [github.com/moby/patternmatcher](https://github.com/moby/patternmatcher) | `0.5.0` | `0.6.0` |
| [github.com/opencontainers/runc](https://github.com/opencontainers/runc) | `1.1.9` | `1.1.12` |
| [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.11` | `0.5.12` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.13.0` | `0.14.0` |
| [golang.org/x/net](https://github.com/golang/net) | `0.17.0` | `0.23.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.15.0` | `0.18.0` |
| [golang.org/x/text](https://github.com/golang/text) | `0.13.0` | `0.14.0` |
| [golang.org/x/tools](https://github.com/golang/tools) | `0.14.0` | `0.17.0` |
| [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.54.0` | `1.58.3` |
| google.golang.org/protobuf | `1.31.0` | `1.33.0` |


Updates `github.com/onsi/gomega` from 1.27.10 to 1.33.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.27.10...v1.33.0)

Updates `github.com/paketo-buildpacks/packit/v2` from 2.11.0 to 2.12.0
- [Release notes](https://github.com/paketo-buildpacks/packit/releases)
- [Commits](paketo-buildpacks/packit@v2.11.0...v2.12.0)

Updates `github.com/cenkalti/backoff/v4` from 4.2.1 to 4.3.0
- [Commits](cenkalti/backoff@v4.2.1...v4.3.0)

Updates `github.com/containerd/containerd` from 1.7.0 to 1.7.15
- [Release notes](https://github.com/containerd/containerd/releases)
- [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md)
- [Commits](containerd/containerd@v1.7.0...v1.7.15)

Updates `github.com/distribution/reference` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/distribution/reference/releases)
- [Commits](distribution/reference@v0.5.0...v0.6.0)

Updates `github.com/docker/go-connections` from 0.4.0 to 0.5.0
- [Commits](docker/go-connections@v0.4.0...v0.5.0)

Updates `github.com/gabriel-vasile/mimetype` from 1.4.2 to 1.4.3
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.2...v1.4.3)

Updates `github.com/golang/protobuf` from 1.5.3 to 1.5.4
- [Release notes](https://github.com/golang/protobuf/releases)
- [Commits](golang/protobuf@v1.5.3...v1.5.4)

Updates `github.com/google/uuid` from 1.3.1 to 1.6.0
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](google/uuid@v1.3.1...v1.6.0)

Updates `github.com/klauspost/compress` from 1.16.4 to 1.17.8
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.16.4...v1.17.8)

Updates `github.com/moby/patternmatcher` from 0.5.0 to 0.6.0
- [Release notes](https://github.com/moby/patternmatcher/releases)
- [Commits](moby/patternmatcher@v0.5.0...v0.6.0)

Updates `github.com/opencontainers/runc` from 1.1.9 to 1.1.12
- [Release notes](https://github.com/opencontainers/runc/releases)
- [Changelog](https://github.com/opencontainers/runc/blob/main/CHANGELOG.md)
- [Commits](opencontainers/runc@v1.1.9...v1.1.12)

Updates `github.com/ulikunitz/xz` from 0.5.11 to 0.5.12
- [Commits](ulikunitz/xz@v0.5.11...v0.5.12)

Updates `golang.org/x/mod` from 0.13.0 to 0.14.0
- [Commits](golang/mod@v0.13.0...v0.14.0)

Updates `golang.org/x/net` from 0.17.0 to 0.23.0
- [Commits](golang/net@v0.17.0...v0.23.0)

Updates `golang.org/x/sys` from 0.15.0 to 0.18.0
- [Commits](golang/sys@v0.15.0...v0.18.0)

Updates `golang.org/x/text` from 0.13.0 to 0.14.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.13.0...v0.14.0)

Updates `golang.org/x/tools` from 0.14.0 to 0.17.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.14.0...v0.17.0)

Updates `google.golang.org/grpc` from 1.54.0 to 1.58.3
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.54.0...v1.58.3)

Updates `google.golang.org/protobuf` from 1.31.0 to 1.33.0

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/paketo-buildpacks/packit/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/cenkalti/backoff/v4
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/containerd/containerd
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/distribution/reference
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/docker/go-connections
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/golang/protobuf
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/google/uuid
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/klauspost/compress
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/moby/patternmatcher
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: github.com/opencontainers/runc
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: github.com/ulikunitz/xz
  dependency-type: indirect
  update-type: version-update:semver-patch
  dependency-group: go-modules
- dependency-name: golang.org/x/mod
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/net
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/sys
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/text
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/tools
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/grpc
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: google.golang.org/protobuf
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner April 19, 2024 13:51
@dependabot dependabot bot added the failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow label Apr 19, 2024
@paketo-bot paketo-bot added the semver:patch A change requiring a patch version bump label Apr 19, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Apr 22, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Apr 22, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go-modules-4c32bac622 branch April 22, 2024 14:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
failure:update-dependencies An issue filed automatically when updating buildpack.toml dependencies fails in a workflow semver:patch A change requiring a patch version bump
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant