Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the go-dependencies group across 1 directory with 8 updates #393

Closed

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 10, 2024

Bumps the go-dependencies group with 6 updates in the / directory:

Package From To
github.com/charmbracelet/lipgloss 0.10.0 0.11.0
github.com/spf13/viper 1.18.2 1.19.0
go.pinniped.dev 0.29.0 0.31.0
github.com/fatih/color 1.16.0 1.17.0
github.com/itchyny/gojq 0.12.15 0.12.16
google.golang.org/protobuf 1.34.0 1.34.1

Updates github.com/charmbracelet/lipgloss from 0.10.0 to 0.11.0

Release notes

Sourced from github.com/charmbracelet/lipgloss's releases.

v0.11.0

Immutable Styles and Raw Speed, Baby

So! The big news in this release is:

  • Style methods will now always return new styles
  • Style and ANSI operations under the hood are faster

There are also a handful of great lil' bug fixes. Read on for more.

Immutable Styles

Every Style method now returns a completely new style with its own underlying data structure no matter what. This means working with Styles is a lot easier. No more need for Copy()!

// Before
s := lipgloss.NewStyle().Bold(true)
newStyle := s.Copy()
// After
s := lipgloss.NewStyle().Bold(true)
newStyle := s // this is a true copy

Okay, but why are styles easier to work with now? Consider this:

// Before
baseStyle := lipgloss.NewStyle().Background(lipgloss.Color("59"))
styleAtRuntime := baseStyle.Copy().Width(m.Width)
// After
baseStyle := lipgloss.NewStyle().Padding(1, 2)
styleAtRuntime := baseStyle.Width(m.Width)

It might seem small, but eliminating the risk of mutations in persistent styles in an enormous usability improvement.

How to upgrade

There's nothing to do, however Style.Copy() is now deprecated and only returns itself, so you can just remove Style.Copy() calls. If you need to just copy a style without any changes to it you can simply b := a.

Faster ANSI

Sometimes watch companies brag about their "in-house" watch movement. Well, now we're bragging about our in-house-amazing x/ansi library by our own @​aymanbagabas. It's a fine-tuned, low-level way to manage ANSI sequencing and, because we're pretty nerdy, we’re super excited about it.


What's Changed

... (truncated)

Commits
  • 5cd858c fix: respect UnderlineSpaces and StrikethroughSpaces (#299)
  • c91ab3e chore(ci): enable gofumpt
  • 83fa9be chore: use x/ansi instead of exp/term
  • ce5323e chore(deps): bump golangci/golangci-lint-action from 5 to 6 (#290)
  • e3596ae chore(ci): test for different GOOS & GOARCH
  • 2fe044a fix: Change the propkeys from int to int64
  • 3ee5dca chore(docs): doc updates with regard to style.Copy() deprecation
  • 517b1a1 fix: remove unused type
  • d2795c7 refactor: replace props map with struct fields (#276)
  • c986440 chore(lint): remove deprecated ifshort linting option
  • Additional commits viewable in compare view

Updates github.com/spf13/viper from 1.18.2 to 1.19.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.19.0

What's Changed

Bug Fixes 🐛

Dependency Updates ⬆️

... (truncated)

Commits
  • b9733f0 build(deps): bump actions/checkout from 4.1.4 to 4.1.6
  • 6ecc5c8 build(deps): bump cachix/install-nix-action from 26 to 27
  • 248c6fd build(deps): bump github/codeql-action from 3.25.4 to 3.25.7
  • abea773 Update references to bketelsen/crypt
  • f17acb4 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1
  • 8e285a5 build(deps): bump github/codeql-action from 3.25.2 to 3.25.4
  • 4017620 build(deps): bump actions/setup-go from 5.0.0 to 5.0.1
  • b67e814 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
  • 4a182c7 build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2
  • 45a0e12 build(deps): bump mheap/github-action-required-labels
  • Additional commits viewable in compare view

Updates go.pinniped.dev from 0.29.0 to 0.31.0

Release notes

Sourced from go.pinniped.dev's releases.

v0.31.0

Release v0.31.0

Release Image

Image Registry
ghcr.io/vmware-tanzu/pinniped/pinniped-server:v0.31.0 GitHub Container Registry
docker.io/getpinniped/pinniped-server:v0.31.0 DockerHub

These images can also be referenced by their digest: sha256:d07ee61c059b36337e17893c91b7bd4ac3c13d0258f9de11759d5b42b7b2060d.

Changes

This release adds support for using GitHub as an identity provider, along with other new features, and upgrades project dependencies.

Major Changes

  • The Pinniped Supervisor now supports using GitHub as an identity provider using browser-based authentication, configured via a new custom resource called GitHubIdentityProvider. (#1978)
    • Both github.com and GitHub Enterprise are supported.
    • Administrators can optionally limit authentication by GitHub organization membership.
    • GitHub team membership is automatically mapped to Kubernetes group membership.
    • Frequent session refreshes check that the user's GitHub access token is still valid, revalidate the user's identity, and update the user's group memberships. In a typical setup, any changes to org or team membership will be reflected to end-user sessions within about 5 minutes.
    • As with any identity provider in the Supervisor, the administrator can optionally configure policies to restrict authentication by username and group (GitHub team) membership, and can modify usernames and group memberships by configuring CEL expressions on the FederationDomain.
    • Note that at least v0.31.0 of the Pinniped CLI should be used by end-users for GitHub authentication.
    • End-users of webapp clients configured as OIDCClients in the Supervisor can also authenticate via GitHub.
    • For more information see the blog post for this release, the GitHub configuration guide and the GitHubIdentityProvider resource documentation.
    • Many PRs were merged into the final cumulative PR #1978 for this feature: #1976, #1975, #1963, #1966, #1960, #1958, #1959, #1860, #1946, #1929, #1944, #1910, #1930, #1908, #1925, #1924, #1907, #1912, #1903, #1900.

Minor Changes

Diffs

A complete list of changes (177 commits, 494 changed files with 26,750 additions and 2,482 deletions) can be found here.

v0.30.0

Release v0.30.0

Release Image

Image Registry
ghcr.io/vmware-tanzu/pinniped/pinniped-server:v0.30.0 GitHub Container Registry
docker.io/getpinniped/pinniped-server:v0.30.0 DockerHub

... (truncated)

Commits
  • 05fb8b7 Merge pull request #1982 from vmware-tanzu/pinny/bump-deps
  • ee2aa9c Bump dependencies
  • ca9560e Merge pull request #1978 from vmware-tanzu/github_identity_provider
  • 6b64a8a ran update.sh to update generated code
  • dd3c1ac Merge branch 'main' into github_identity_provider
  • 16c8911 Merge pull request #1979 from vmware-tanzu/update_codegen_kube_versions
  • 8ea9ba8 ran go generate to update mocks
  • 1d8decf ran update.sh to update generated code
  • 57431ce update kube versions for codegen
  • 01723e0 Merge branch 'main' into github_identity_provider
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.19.0 to 0.21.0

Commits
  • 5fd4241 google: update compute token refresh
  • 84cb9f7 oauth2: fix typo in comment
  • 4b7f0bd go.mod: update cloud.google.com/go/compute/metadata dependency
  • e11eea8 microsoft: added DeviceAuthURL to AzureADEndpoint
  • See full diff in compare view

Updates golang.org/x/term from 0.19.0 to 0.21.0

Commits

Updates github.com/fatih/color from 1.16.0 to 1.17.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.17.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.16.0...v1.17.0

Commits
  • b6598b1 Merge pull request #228 from klauspost/fix-println-issue-218
  • 00b1811 Fix multi-parameter println spacing
  • 04994a8 Merge pull request #224 from fatih/dependabot/go_modules/golang.org/x/sys-0.18.0
  • 7526cad Merge branch 'main' into dependabot/go_modules/golang.org/x/sys-0.18.0
  • 8d058ca Merge pull request #222 from fatih/ci-updates
  • 2ac809f Bump golang.org/x/sys from 0.17.0 to 0.18.0
  • 51a7bbf ci: update Go and Staticcheck versions
  • 799c49c Merge pull request #217 from fatih/dependabot/github_actions/actions/setup-go-5
  • f8e0ec9 Merge branch 'main' into dependabot/github_actions/actions/setup-go-5
  • 298abd8 Merge pull request #221 from fatih/dependabot/go_modules/golang.org/x/sys-0.17.0
  • Additional commits viewable in compare view

Updates github.com/itchyny/gojq from 0.12.15 to 0.12.16

Release notes

Sourced from github.com/itchyny/gojq's releases.

Release v0.12.16

  • fix offset of query parsing error on multi-byte characters
  • fix tests of exp10 and atan2 failing on some platforms
  • fix debug/1 to be available only when debug/0 is defined
  • improve parser to allow binary operators as object values
  • improve compiler to emit error if query is missing
Changelog

Sourced from github.com/itchyny/gojq's changelog.

v0.12.16 (2024-06-01)

  • fix offset of query parsing error on multi-byte characters
  • fix tests of exp10 and atan2 failing on some platforms
  • fix debug/1 to be available only when debug/0 is defined
  • improve parser to allow binary operators as object values
  • improve compiler to emit error if query is missing
Commits
  • 0607aa5 bump up version to 0.12.16
  • 0709341 update CHANGELOG.md for v0.12.16
  • 1324e6e update dependencies
  • 01355e9 improve parser to allow binary operators as object values
  • a41a5f8 fix debug/1 function to be available only when debug/0 is defined
  • f694c1b fix a benchmark test BenchmarkCompile
  • f2559f6 remove private compare function
  • 0cd3a66 improve compiler to abort with error if query is missing
  • 422cc9d refactor stringify function declarations of query
  • 1130c4e refactor program body, rename rules, remove empty actions in parser
  • Additional commits viewable in compare view

Updates google.golang.org/protobuf from 1.34.0 to 1.34.1

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-dependencies group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/charmbracelet/lipgloss](https://github.com/charmbracelet/lipgloss) | `0.10.0` | `0.11.0` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.18.2` | `1.19.0` |
| [go.pinniped.dev](https://github.com/vmware-tanzu/pinniped) | `0.29.0` | `0.31.0` |
| [github.com/fatih/color](https://github.com/fatih/color) | `1.16.0` | `1.17.0` |
| [github.com/itchyny/gojq](https://github.com/itchyny/gojq) | `0.12.15` | `0.12.16` |
| google.golang.org/protobuf | `1.34.0` | `1.34.1` |



Updates `github.com/charmbracelet/lipgloss` from 0.10.0 to 0.11.0
- [Release notes](https://github.com/charmbracelet/lipgloss/releases)
- [Commits](charmbracelet/lipgloss@v0.10.0...v0.11.0)

Updates `github.com/spf13/viper` from 1.18.2 to 1.19.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.18.2...v1.19.0)

Updates `go.pinniped.dev` from 0.29.0 to 0.31.0
- [Release notes](https://github.com/vmware-tanzu/pinniped/releases)
- [Commits](vmware-tanzu/pinniped@v0.29.0...v0.31.0)

Updates `golang.org/x/oauth2` from 0.19.0 to 0.21.0
- [Commits](golang/oauth2@v0.19.0...v0.21.0)

Updates `golang.org/x/term` from 0.19.0 to 0.21.0
- [Commits](golang/term@v0.19.0...v0.21.0)

Updates `github.com/fatih/color` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.16.0...v1.17.0)

Updates `github.com/itchyny/gojq` from 0.12.15 to 0.12.16
- [Release notes](https://github.com/itchyny/gojq/releases)
- [Changelog](https://github.com/itchyny/gojq/blob/main/CHANGELOG.md)
- [Commits](itchyny/gojq@v0.12.15...v0.12.16)

Updates `google.golang.org/protobuf` from 1.34.0 to 1.34.1

---
updated-dependencies:
- dependency-name: github.com/charmbracelet/lipgloss
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/spf13/viper
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: go.pinniped.dev
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: golang.org/x/term
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/fatih/color
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-dependencies
- dependency-name: github.com/itchyny/gojq
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from pnickolov as a code owner June 10, 2024 01:25
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 10, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Jun 17, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jun 17, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go-dependencies-ead09e11e5 branch June 17, 2024 01:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants