test: update test dependencies

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
github.com/nats-io/nats-server/v2	v2.10.17 -> v2.10.24
github.com/onsi/ginkgo/v2	v2.19.0 -> v2.22.1
github.com/onsi/gomega	v1.33.1 -> v1.36.1

---

Release Notes

nats-io/nats-server (github.com/nats-io/nats-server/v2)

v2.10.24

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

CVEs

• Vulnerability check warnings for CVE-2024-45337 are addressed by the dependency update to x/crypto, although the NATS Server does not use the affected functionality and is therefore not vulnerable

Go Version

• 1.23.4

Dependencies

• golang.org/x/crypto v0.31.0 (#​6246)
• github.com/nats-io/jwt/v2 v2.7.3 (#​6256)
• github.com/nats-io/nkeys v0.4.9 (#​6255)

Fixed

General

• Request/reply tracking with allow_responses permission is now pruned more regularly, fixing performance issues that can get worse over time (#​6064)

JetStream

• Revert a change introduced in 2.10.23 that could potentially cause a consumer info call to fail if it takes place immediately after the consumer was created in some large or heavily-loaded clustered setups (#​6250)
• Minor fixes to subject state tracking (#​6244)
• Minor fixes to healthz and healthchecks (#​6247, #​6248, #​6232)
• A calculation used to determine if exceeding limits has been corrected (#​6264)
• Raft groups will no longer spin when truncating the log fails, i.e. during shutdown (#​6271)

WebSockets

• A WebSocket close frame will no longer incorrectly include a status code when not needed (#​6260)

Complete Changes

v2.10.23

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.23.4 (#​6228)

Dependencies

• golang.org/x/crypto v0.30.0 (#​6230)
• golang.org/x/sys v0.27.0 (#​6229)
• golang.org/x/time v0.8.0 (#​6105)
• github.com/nats-io/nkeys v0.4.8 (#​6192)

Added

JetStream

• Support for responding to forwarded proposals (for future use, #​6157)

Windows

• New ca_certs_match option has been added in the tls block for searching the certificate store for only certificates matching the specified CAs (#​5115)
• New cert_match_skip_invalid option has been added in the tls block for ignoring certificates that have expired or are not valid yet (#​6042)
• The cert_match_by option can now be set to thumbprint, allowing an SHA1 thumbprint to be specified in cert_match (#​6042, #​6047)

Improved

JetStream

• Reduced the number of allocations in consumers from get-next requests and when returning some error codes (#​6039)
• Metalayer recovery at startup will now more reliably group assets for creation/update/deletion and handle pending consumers more reliably, reducing the chance of ghost consumers and misconfigured streams happening after restarts (#​6066, #​6069, #​6088, #​6092)
• Creation of filtered consumers is now considerably faster with the addition of a new multi-subject num-pending calculation (#​6089, #​6112)
• Consumer backoff should now be correctly respected with multiple in-flight deliveries to clients (#​6104)
• Add node10 node size to stree, providing better memory utilisation for some subject spaces, particularly those that are primarily numeric or with numeric tokens (#​6106)
• Some JetStream log lines have been made more consistent (#​6065)
• File-backed Raft groups will now use the same sync intervals as the filestore, including when sync always is in use (#​6041)
• Metalayer snapshots will now always be attempted on shutdown (#​6067)
• Consumers will now detect if an ack is received past the stream last sequence and will no longer register pre-acks from a snapshot if this happens, reducing memory usage (#​6109)
• Reduced copies and number of allocations when generating headers for republished messages (#​6127)
• Adjusted the spread of filestore sync timers (#​6128)
• Reduced the number of allocations in Raft group send queues, improving performance (#​6132)
• Improvements to Raft append entry handling and log consistency (#​5661, #​5689, #​5714, #​5957, #​6027, #​6073)
• Improvements to Raft stepdown behaviour (#​5666, #​5344, #​5717)
• Improvements to Raft elections and vote handling (#​5671, #​6056)
• Improvements to Raft term handling (#​5684, #​5792, #​5975, #​5848, #​6060)
• Improvements to Raft catchups (#​5987, #​6038, #​6072)
• Improvements to Raft snapshot handling (#​6053, #​6055)
• Reduced the overall metalayer snapshot frequency by increasing the minimum interval and no longer pre-empting consumer deletes (#​6165)
• Consumer info requests for non-existent consumers will no longer be relayed, reducing overall load on the metaleader (#​6176)
• The metaleader will now log if it takes a long time to perform a metalayer snapshot (#​6178)
• Unnecessary client and subject information will no longer be included in the meta snapshots, reducing the size and encoding time (#​6185)
• Sourcing consumers for R1 streams will now be set up inline when the stream is recovered (#​6219)
• Introduced additional jitter to the timer for writing stream state, to smooth out sudden spikes in I/O (#​6220)

Fixed

General

• Load balancing queue groups from leaf nodes in a cluster (#​6043)

JetStream

• Invalidate the stream state when a drift between the tracking states has been detected (#​6034)
• Fixed a panic in the subject tree when checking for full wildcards (#​6049)
• Snapshot processing should no longer spin when there is no leader (#​6050)
• Replicated stream message framing can no longer overflow with extremely long subjects, headers or reply subjects (#​6052)
• Don’t replace the leader’s snapshot when shutting down, potentially causing a desync (#​6053)
• Consumer start sequence when specifying an optional start time has been fixed (#​6082)
• Raft snapshots will no longer be incorrectly removed when truncating the log back to applied (#​6055)
• Raft state will no longer be deleted if creating a stream/consumer failed because the server was shutting down (#​6061)
• Fixed a panic when shutting down whilst trying to set up the metagroup (#​6075)
• Raft entries that we cannot be sure were applied during a shutdown will no longer be reported as applied (#​6087)
• Corrected an off-by-one error in the run-length encoding of interior deletes, which could incorrectly remove an extra message (#​6111)
• Don’t process duplicate stream assignment responses when the stream is being reassigned due to placement issues (#​6121)
• Corrected use of the stream mutex when checking interest (#​6122)
• Raft entries for consumers that we cannot be sure were applied during a shutdown will no longer be reported as applied (#​6133)
• Consistent state update behavior between file store and memory store, including a fixed integer underflow (#​6147)
• No longer send a state snapshot when becoming a consumer leader as it may not include all applied state (#​6151)
• Do not install snapshots on shutdown from outside the monitor goroutines as it may race with upper layer state (#​6153)
• The consumer Backoff configuration option now correctly checks the MaxDelivery constraint (#​6154)
• Consumer check floor will no longer surpass the store ack floor (#​6146)
• Replicated consumers will no longer update their delivered state until quorum is reached, fixing some drifts that can occur on a leader change (#​6139)
• Resolved a deadlock when removing the leader from the peer set (#​5912)
• Don’t delete disk state if a stream or consumer creation fails during shutdown (#​6061)
• The metalayer will no longer generate and send snapshots when switching leaders, reducing the chance that snapshots can be sent with stale assignments (#​5700)
• When restarting a Raft group, wait for previous goroutines to shut down, fixing a race condition (#​5832)
• Correctly empty the Raft snapshots directory for in-memory assets (#​6169)
• A race condition when accessing the stream assignments has been fixed (#​6173)
• Subject state will now be correctly cleared when compacting in-memory streams, fixing some potential replica drift issues (#​6187)
• Stream-level catchups no longer return more than they should (#​6213)

Leafnodes

• Fixed queue distribution where a leafnode expressed interest on behalf of a gateway in complex setups (#​6126)
• A number of leafnode interest propagation issues have been fixed, making it possible to distinguish leaf subscriptions from local routed subscriptions (#​6161)
• Credential files containing CRLF line endings will no longer error (#​6175)

WebSockets

• Ensure full writes are made when compression is in use (#​6091)

Windows

• Using the LocalMachine certificate store is now possible from a non-administrator user (#​6019)

Tests

• A number of unit tests have been improved (#​6086, #​6096, #​6098, #​6097, #​5691, #​5707, #​5991, #​6107, #​6183, #​6218)

Complete Changes

v2.10.22

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.22.8

Dependencies

• golang.org/x/crypto v0.28.0 (#​5971)
• golang.org/x/sys v0.26.0 (#​5971)
• golang.org/x/time v0.7.0 (#​5971)
• go.uber.org/automaxprocs v1.6.0 (#​5944)
• github.com/klauspost/compress v1.17.11 (#​6002)

Added

Config

• A warning will now be logged at startup if the JetStream store directory appears to be in a temporary folder (#​5935)

Improved

General

• More efficient searching of sublists for the number of subscriptions (#​5918)

JetStream

• Improve performance when checking interest and correcting ack state on interest-based or work queue streams (#​5963)
• Safer default file permissions for JetStream filestore and logs (#​6013)

Fixed

JetStream

• Large number of message delete tombstones will no longer result in unusually large message blocks on disk (#​5973)
• The server will no longer panic when restoring corrupted subject state containing null characters (#​5978)
• A data race when processing append entries has been fixed (#​5970)
• Fix a stream desync across replicas that could occur after stalled or failed catch-ups (#​5939)
• Consumers will no longer race with the filestore when fetching messages, fixing some cases where consumers can get stuck with workqueue streams and max messages per subject limits (#​6003)
• Pull consumers will now recalculate max delivered when expiring messages, such that the redelivered status does not report incorrectly and cause a stall with a max deliver limit (#​5995)
• Clustered streams should no longer desync if a catch-up fails due to a loss of leader (#​5986)
• Fixed a panic that could occur when calculating asset placement in a JetStream cluster (#​5996)
• Fixed a panic when shutting down a clustered stream (#​6007)
• Revert earlier PR #​5785 to restore consumer start sequence clipping, fixing an issue where sourcing/mirroring consumers could skip messages (#​6014)

Leafnodes

• Load balancing of queue groups over leafnode connections (#​5982)

Complete Changes

v2.10.21

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.22.7

Dependencies

• golang.org/x/crypto v0.27.0 (#​5869)
• golang.org/x/sys v0.25.0 (#​5869)

Added

Config

• New TLS min_version option for configuring the minimum supported TLS version (#​5904)

Improved

JetStream

• Global JetStream API queue hard limit for protecting the system (#​5900, #​5923)
• Orphaned ephemeral consumer clean-up is now logged at debug level only (#​5917)

Monitoring

• statsz messages are now sent every 10 seconds instead of every 30 seconds (#​5925)
• Include JetStream pending API request count in statsz messages and jsz responses for monitoring (#​5923, #​5926)

Fixed

JetStream

• Fix an issue comparing the stream configuration with the updated stream assignment on stream create (#​5854)
• Improvements to recovering from old or corrupted index.db (#​5893, #​5901, #​5907)
• Ensure that consumer replicas and placement are adjusted properly when scaling down a replicated stream (#​5927)
• Fix a panic that could occur when trying to shut down while the JetStream meta group was in the process of being set up (#​5934)

Monitoring

• Always update account issuer in accountsz (#​5886)

OCSP

• Fix peer validation on the HTTPS monitoring port when OCSP is enabled (#​5906)

Config

• Support multiple trusted operators using a config file (#​5896)

Complete Changes

v2.10.20

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.22.6

Fixed

JetStream

• Fix regression in KV CAS operations on R=1 replicas introduced in v2.10.19 (#​5841) Thanks to @​cbrewster for the report!

Complete Changes

v2.10.19

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.22.6

Dependencies

• golang.org/x/crypto v0.26.0 (#​5782)
• golang.org/x/sys v0.24.0 (#​5782)
• golang.org/x/time v0.6.0 (#​5751)

Improved

General

• Reduced allocations in various code paths that check for subscription interest (#​5736, #​5744)
• Subscription matching for gateways and reply tracking has been optimized (#​5735)
• Client outbound queues now limit the number of flushed vectors to ensure that very large outbound buffers don’t unfairly compete with write deadlines (#​5750)
• In client and leafnode results cache, populate new entry after pruning (#​5760)
• Use newly-available generic sorting functions (#​5757)
• Set a HTTP read timeout on profiling, monitoring and OCSP HTTP servers (#​5790)
• Improve behavior of rate-limited warning logs (#​5793)
• Use dedicated queues for the handling of statsz and profilez system events (#​5816)

Clustering

• Reduce the chances of implicit routes being duplicated (#​5602)

JetStream

• Optimize LoadNextMsg for wildcard consumers that are consuming over a large subject space (#​5710)
• When sync/sync_interval is set to always, metadata files for streams and consumers are now written using O_SYNC to guarantee flushes to disk (#​5729)
• Walking an entire subject tree is now faster and allocates less (#​5734)
• Try to snapshot stream state when a change in the clustered last failed sequence is detected (#​5812)
• Message blocks are no longer loaded into memory unnecessarily when checking if we can skip ahead when loading the next message (#​5819)
• Don’t attempt to re-compact blocks that cannot be compacted, reducing unnecessary CPU usage and disk I/Os (#​5831)

Monitoring

• Add StreamLeaderOnly filter option to return replica results only for groups for which that node is the leader (#​5704)
• The profilez API endpoint in the system account can now acquire and return CPU profiles (#​5743)

Miscellaneous

• Various improvements to unit tests (#​5668, #​5607, #​5695, #​5706, #​5825, #​5834)

Fixed

General

• Fixed a panic when looking up the account for a client (#​5713)
• The ClientURL() function now returns correctly formatted IPv6 host literals (#​5725)
• Fixed incorrect import cycle warnings when subject mapping is in use (#​5755)
• A race condition that could cause slow consumers to leave behind subscription interest after the connection has been closed has been fixed (#​5754)
• Corrected an off-by-one condition when growing to or shrinking from node48 in the subject tree (#​5826)

JetStream

• Retention issue that could cause messages to be incorrectly removed on a WorkQueuePolicy stream when consumers did not cover the entire subject space (#​5697)
• Fixed a panic when calling the raftz endpoint during shutdown (#​5672)
• Don’t delete NRG group persistent state on disk when failing to create subscriptions (#​5687)
• Fixed behavior when checking for the first block that matches a consumer subject filter (#​5709)
• Reduce the number of compactions made on filestore blocks due to deleted message tombstones (#​5719)
• Fixed maximum messages per subject exceeded unexpected error on streams using a max messages per subject limit of 1 and discard new retention policy (#​5761)
• Fixed bad meta state on restart that could cause deletion of assets (#​5767)
• Fixed R1 streams exceeding quota limits (#​5771)
• Return the correct sequence for a duplicated message on an interest policy stream when there is no interest (#​5818)
• Fixed setting the consumer start sequence when that sequence does not yet appear in the stream (#​5785)
• Connection type in scoped signing keys are now honored correctly (#​5789)
• Expected last sequence per subject logic has now been harmonized across clustered stream leaders and followers, fixing a potential drift (#​5794)
• Stream snapshots are now always installed correctly on graceful shutdown (#​5809)
• A data race between consumer and stream updates has been resolved (#​5820)
• Avoid increasing the cluster last failed sequence when the message was likely deleted (#​5821)

Leafnodes

• Leafnode connections will now be rejected when the cluster name contains spaces (#​5732)

Complete Changes

v2.10.18

Compare Source

Changelog

Refer to the 2.10 Upgrade Guide for backwards compatibility notes with 2.9.x.

Go Version

• 1.22.5

Dependencies

• github.com/nats-io/jwt v2.5.8 (#​5618)
• github.com/minio/highwayhash v1.0.3 (#​5627)
• golang.org/x/crypto v0.25.0 (#​5627)
• golang.org/x/sys v0.22.0 (#​5627)

Improved

Embedded

• Export server function to initiate “lame duck mode” when embedding NATS (#​5660)

JetStream

• CPU spike during recalculation of first message in the memory store (#​5629)

Fixed

JetStream

• Fix duplicate callbacks on full wildcard match (#​5610)
• Multiple fixes for the filestore per-subject state (#​5616)
• Fix checkSkipFirstBlock which could return a negative index if the first block in the per-subject index is outdated (#​5630)
• Don't ack messages if consumer is filtered and they were not applicable (#​5639, #​5612, #​5638)
• Protect against possible panic in the filestore where the stree index is nil (#​5662)
• Prevent panic when shutting down a server immediately after starting it (#​5663)

Complete Changes

onsi/ginkgo (github.com/onsi/ginkgo/v2)

v2.22.1

Compare Source

2.22.1

Fixes

Fix CSV encoding

• Update tests [aab3da6]
• Properly encode CSV rows [c09df39]
• Add test case for proper csv escaping [96a80fc]
• Add meta-test [43dad69]

Maintenance

• ensure *.test files are gitignored so we don't accidentally commit compiled tests again [c88c634]
• remove golang.org/x/net/context in favour of stdlib context [4df44bf]

v2.22.0

Compare Source

2.22.0

Features

• Add label to serial nodes [0fcaa08]

This allows serial tests to be filtered using the label-filter

Maintenance

Various doc fixes

v2.21.0

Compare Source

2.21.0

Features

• add support for GINKGO_TIME_FORMAT [a69eb39]
• add GINKGO_NO_COLOR to disable colors via environment variables [bcab9c8]

Fixes

• increase threshold in timeline matcher [e548367]
• Fix the document by replacing SpecsThatWillBeRun with SpecsThatWillRun
  [c2c4d3c]

Maintenance

• bump various dependencies [7e65a00]

v2.20.2

Compare Source

2.20.2

Require Go 1.22+

Maintenance

• bump go to v1.22 [a671816]

v2.20.1

Compare Source

2.20.1

Fixes

• make BeSpecEvent duration matcher more forgiving [d6f9640]

v2.20.0

Compare Source

2.20.0

Features

• Add buildvcs flag [be5ab95]

Maintenance

• Add update-deps to makefile [d303d14]
• bump all dependencies [7a50221]

v2.19.1

Compare Source

2.19.1

Fixes

• update supported platforms for race conditions [63c8c30]
• [build] Allow custom name for binaries. [ff41e27]

Maintenance

• bump gomega [76f4e0c]
• Bump rexml from 3.2.6 to 3.2.8 in /docs (#​1417) [b69c00d]
• Bump golang.org/x/sys from 0.20.0 to 0.21.0 (#​1425) [f097741]

onsi/gomega (github.com/onsi/gomega)

v1.36.1

Compare Source

1.36.1

Fixes

• Fix https://github.com/onsi/gomega/issues/803 [1c6c112]
• resolves #​696: make HaveField great on pointer receivers given only a non-addressable value [4feb9d7]

v1.36.0

Compare Source

1.36.0

Features

• new: make collection-related matchers Go 1.23 iterator aware [4c964c6]

Maintenance

• Replace min/max helpers with built-in min/max [ece6872]
• Fix some typos in docs [8e924d7]

v1.35.1

Compare Source

1.35.1

Fixes

• Export EnforceDefaultTimeoutsWhenUsingContexts and DisableDefaultTimeoutsWhenUsingContext [ca36da1]

v1.35.0

Compare Source

1.35.0

Features

• You can now call EnforceDefaultTimeoutsWhenUsingContexts() to have Eventually honor the default timeout when passed a context. (prior to this you had to expclility add a timeout) [e4c4265]
• You can call StopTrying(message).Successfully() to abort a Consistently early without failure [eeca931]

Fixes

• Stop memoizing the result of HaveField to avoid unexpected errors when used with async assertions. [3bdbc4e]

Maintenance

• Bump all dependencies [a05a416]

v1.34.2

Compare Source

1.34.2

Require Go 1.22+

Maintenance

• bump ginkgo as well [c59c6dc]
• bump to go 1.22 - remove x/exp dependency [8158b99]

v1.34.1

Compare Source

1.34.1

Maintenance

• Use slices from exp/slices to keep golang 1.20 compat [5e71dcd]

v1.34.0

Compare Source

1.34.0

Features

• Add RoundTripper method to ghttp.Server [c549e0d]

Fixes

• fix incorrect handling of nil slices in HaveExactElements (fixes #​771) [878940c]
• issue_765 - fixed bug in Hopcroft-Karp algorithm [ebadb67]

Maintenance

• bump ginkgo [8af2ece]
• Fix typo in docs [123a071]
• Bump github.com/onsi/ginkgo/v2 from 2.17.2 to 2.17.3 (#​756) [0e69083]
• Bump google.golang.org/protobuf from 1.33.0 to 1.34.1 (#​755) [2675796]
• Bump golang.org/x/net from 0.24.0 to 0.25.0 (#​754) [4160c0f]
• Bump github-pages from 230 to 231 in /docs (#​748) [892c303]

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 13 additional dependencies were updated
• The go directive was updated for compatibility reasons

Details:

Package	Change
go	1.22 -> 1.23.4
google.golang.org/protobuf	v1.34.2 -> v1.35.1
github.com/google/pprof	v0.0.0-20240424215950-a892ee059fd6 -> v0.0.0-20241210010833-40e02aabc2ad
github.com/klauspost/compress	v1.17.9 -> v1.17.11
github.com/minio/highwayhash	v1.0.2 -> v1.0.3
github.com/nats-io/jwt/v2	v2.5.7 -> v2.7.3
github.com/nats-io/nkeys	v0.4.7 -> v0.4.9
go.uber.org/automaxprocs	v1.5.3 -> v1.6.0
golang.org/x/crypto	v0.24.0 -> v0.31.0
golang.org/x/net	v0.26.0 -> v0.32.0
golang.org/x/sys	v0.21.0 -> v0.28.0
golang.org/x/text	v0.16.0 -> v0.21.0
golang.org/x/time	v0.5.0 -> v0.8.0
golang.org/x/tools	v0.21.1-0.20240508182429-e35e4ccd0d2d -> v0.28.0

[codecov]

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 54.44%. Comparing base (3cf2082) to head (9b1735d).

Additional details and impacted files

@@            Coverage Diff             @@
##             main      #65      +/-   ##
==========================================
- Coverage   54.81%   54.44%   -0.38%     
==========================================
  Files          25       25              
  Lines        1609     1969     +360     
==========================================
+ Hits          882     1072     +190     
- Misses        630      800     +170     
  Partials       97       97              

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.