-
-
Notifications
You must be signed in to change notification settings - Fork 0
chore: bump the go_modules group across 1 directory with 9 updates #2
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
Conversation
Bumps the go_modules group with 8 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/go-jose/go-jose/v3](https://github.com/go-jose/go-jose) | `3.0.0` | `3.0.4` | | [github.com/golang-jwt/jwt/v4](https://github.com/golang-jwt/jwt) | `4.5.0` | `4.5.2` | | [github.com/moby/moby](https://github.com/moby/moby) | `24.0.1+incompatible` | `26.1.0+incompatible` | | [golang.org/x/net](https://github.com/golang/net) | `0.18.0` | `0.38.0` | | google.golang.org/protobuf | `1.31.0` | `1.33.0` | | [github.com/cloudflare/circl](https://github.com/cloudflare/circl) | `1.3.3` | `1.3.7` | | [github.com/docker/docker](https://github.com/docker/docker) | `24.0.7+incompatible` | `25.0.6+incompatible` | | [github.com/google/nftables](https://github.com/google/nftables) | `0.1.1-0.20230115205135-9aa6fdf5a28c` | `0.2.0` | Updates `github.com/go-jose/go-jose/v3` from 3.0.0 to 3.0.4 - [Release notes](https://github.com/go-jose/go-jose/releases) - [Changelog](https://github.com/go-jose/go-jose/blob/main/CHANGELOG.md) - [Commits](go-jose/go-jose@v3.0.0...v3.0.4) Updates `github.com/golang-jwt/jwt/v4` from 4.5.0 to 4.5.2 - [Release notes](https://github.com/golang-jwt/jwt/releases) - [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md) - [Commits](golang-jwt/jwt@v4.5.0...v4.5.2) Updates `github.com/moby/moby` from 24.0.1+incompatible to 26.1.0+incompatible - [Release notes](https://github.com/moby/moby/releases) - [Commits](moby/moby@v24.0.1...v26.1.0) Updates `golang.org/x/crypto` from 0.15.0 to 0.19.0 - [Commits](golang/crypto@v0.15.0...v0.19.0) Updates `golang.org/x/net` from 0.18.0 to 0.38.0 - [Commits](golang/net@v0.18.0...v0.38.0) Updates `google.golang.org/protobuf` from 1.31.0 to 1.33.0 Updates `github.com/cloudflare/circl` from 1.3.3 to 1.3.7 - [Release notes](https://github.com/cloudflare/circl/releases) - [Commits](cloudflare/circl@v1.3.3...v1.3.7) Updates `github.com/docker/docker` from 24.0.7+incompatible to 25.0.6+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v24.0.7...v25.0.6) Updates `github.com/google/nftables` from 0.1.1-0.20230115205135-9aa6fdf5a28c to 0.2.0 - [Commits](https://github.com/google/nftables/commits/v0.2.0) --- updated-dependencies: - dependency-name: github.com/go-jose/go-jose/v3 dependency-version: 3.0.4 dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/golang-jwt/jwt/v4 dependency-version: 4.5.2 dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/moby/moby dependency-version: 26.1.0+incompatible dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.19.0 dependency-type: direct:production dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.38.0 dependency-type: direct:production dependency-group: go_modules - dependency-name: google.golang.org/protobuf dependency-version: 1.33.0 dependency-type: direct:production dependency-group: go_modules - dependency-name: github.com/cloudflare/circl dependency-version: 1.3.7 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/docker/docker dependency-version: 25.0.6+incompatible dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/google/nftables dependency-version: 0.2.0 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
|
Important Review skippedBot user detected. To trigger a single review, invoke the You can disable this status message by setting the 🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
SupportNeed help? Join our Discord community for assistance with any issues or questions. Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
Bumps the go_modules group with 8 updates in the / directory:
3.0.0
3.0.4
4.5.0
4.5.2
24.0.1+incompatible
26.1.0+incompatible
0.18.0
0.38.0
1.31.0
1.33.0
1.3.3
1.3.7
24.0.7+incompatible
25.0.6+incompatible
0.1.1-0.20230115205135-9aa6fdf5a28c
0.2.0
Updates
github.com/go-jose/go-jose/v3
from 3.0.0 to 3.0.4Release notes
Sourced from github.com/go-jose/go-jose/v3's releases.
Changelog
Sourced from github.com/go-jose/go-jose/v3's changelog.
... (truncated)
Commits
5253038
Backport fix 167 to v3 (#174)047dc99
CI: Update github actions and go version (#173)0f017e9
Revert #26 (ignore unsupported JWKs in Sets) (#131)3e2bbef
Unmarshal jwk keys with unsupported key type or algorithm into empty … (#26)add6a28
v3: backport decompression limit fix (#107)11bb4e7
doc: in v3 branch's README, point to v4 as latest (#101)863f73b
v3.0.2: Update changelog (#95)bdbc794
Update golang.org/x/crypto to v0.19 (backport) (#94)25bce79
Updated go-jose v3.0.0 to v3.0.1 in jose-util (#70)aa386df
jwe/CompactSerialize: improve performance. (#67)Updates
github.com/golang-jwt/jwt/v4
from 4.5.0 to 4.5.2Release notes
Sourced from github.com/golang-jwt/jwt/v4's releases.
Commits
2f0e9ad
Backporting 0951d18 to v47b1c1c0
Merge commit from forkUpdates
github.com/moby/moby
from 24.0.1+incompatible to 26.1.0+incompatibleRelease notes
Sourced from github.com/moby/moby's releases.
... (truncated)
Commits
c8af8eb
Merge pull request #47738 from vvoland/c8d-walk-image-badimagetarget7d95fe8
c8d/list: Ignore unexpected image target801fd16
Merge pull request #47735 from cpuguy83/better_walk_error6667e96
Include more details in errnotManifestOrIndexee8b788
Merge pull request #47734 from krissetto/image-history-timestamp-dereference96c9353
Merge pull request #47723 from vvoland/builder-fix-workdir-slashab570ab
nil dereference fix on image history Created value7532420
container/SetupWorkingDirectory: Don't mutate configa4d5b6b
builder/normalizeWorkdir: Always return cleaned pathe829cca
Merge pull request #47584 from robmry/upstream_dns_windowsUpdates
golang.org/x/crypto
from 0.15.0 to 0.19.0Commits
405cb3b
go.mod: update golang.org/x dependencies913d3ae
x509roots/fallback: update bundledbb6ec1
ssh/test: skip tests on darwin that fail on the darwin-amd64-longtest LUCI bu...403f699
ssh/test: avoid leaking a net.UnixConn in server.TryDialWithAddr055043d
go.mod: update golang.org/x dependencies08396bb
internal/poly1305: drop Go 1.12 compatibility9d2ee97
ssh: implement strict KEX protocol changes4e5a261
ssh: close net.Conn on all NewServerConn errors152cdb1
x509roots/fallback: update bundlefdfe1f8
ssh: defer channel window adjustmentUpdates
golang.org/x/net
from 0.18.0 to 0.38.0Commits
e1fcd82
html: properly handle trailing solidus in unquoted attribute value in foreign...ebed060
internal/http3: fix build of tests with GOEXPERIMENT=nosynctest1f1fa29
publicsuffix: regenerate table1215081
http2: improve error when server sends HTTP/1312450e
html: ensure <search> tag closes <p> and update tests09731f9
http2: improve handling of lost PING in Server55989e2
http2/h2c: use ResponseController for hijacking connections2914f46
websocket: re-recommend gorilla/websocket99b3ae0
go.mod: update golang.org/x dependencies85d1d54
go.mod: update golang.org/x dependenciesUpdates
google.golang.org/protobuf
from 1.31.0 to 1.33.0Updates
github.com/cloudflare/circl
from 1.3.3 to 1.3.7Release notes
Sourced from github.com/cloudflare/circl's releases.
Commits
c48866b
Releasing CIRCL v1.3.775ef91e
kyber: remove division by q in ciphertext compression899732a
build(deps): bump golang.org/x/crypto99f0f71
Releasing CIRCL v1.3.6e728d0d
Apply thibmeu code review suggestionsceb2d90
Updating blindrsa to be compliant with RFC9474.44133f7
spelling: trippedc2076d6
spelling: transposesdad2166
spelling: title171c418
spelling: thresholdUpdates
github.com/docker/docker
from 24.0.7+incompatible to 25.0.6+incompatibleRelease notes
Sourced from github.com/docker/docker's releases.
... (truncated)
Commits
b08a51f
Merge pull request #48231 from austinvazquez/backport-vendor-otel-v0.46.1-to-...d151b0f
vendor: OTEL v0.46.1 / v1.21.0c6ba9a5
Merge pull request #48225 from austinvazquez/backport-workflow-artifact-reten...4673a3c
Merge pull request #48227 from austinvazquez/backport-backport-branch-check-t...30f8908
github/ci: Check if backport is opened against the expected branch7454d6a
ci: update workflow artifacts retention65cc597
Merge commit from forkb722836
Merge pull request #48199 from austinvazquez/update-containerd-binary-to-1.7.20e8ecb9c
update containerd binary to v1.7.20e6cae1f
update containerd binary to v1.7.19Updates
github.com/google/nftables
from 0.1.1-0.20230115205135-9aa6fdf5a28c to 0.2.0Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebase
will rebase this PR@dependabot recreate
will recreate this PR, overwriting any edits that have been made to it@dependabot merge
will merge this PR after your CI passes on it@dependabot squash and merge
will squash and merge this PR after your CI passes on it@dependabot cancel merge
will cancel a previously requested merge and block automerging@dependabot reopen
will reopen this PR if it is closed@dependabot close
will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditions
will show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major version
will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor version
will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>
will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>
will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>
will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.