chore: bump github.com/zclconf/go-cty from 1.16.3 to 1.17.0 (#19735)

dependabot[bot] · web-flow · commit 2e06b6f75e2a · 2025-09-08T11:52:11.000Z
Bumps [github.com/zclconf/go-cty](https://github.com/zclconf/go-cty) from 1.16.3 to 1.17.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/zclconf/go-cty/releases">github.com/zclconf/go-cty's releases</a>.</em></p> <blockquote> <h2>v1.17.0</h2> <p><code>cty</code> now requires Go 1.23 or later.</p> <ul> <li> <p><code>cty.Value.Elements</code> offers a modern <code>iter.Seq2</code>-based equivalent of <code>cty.Value.ElementIterator</code>.</p> </li> <li> <p><code>cty.DeepValues</code> offers a modern <code>iter.Seq2</code>-based equivalent of <code>cty.Walk</code>.</p> </li> <li> <p><code>cty.Value.WrangleMarksDeep</code> allows inspecting and modifying individual marks throughout a possibly-nested data structure.</p> <p>Having now got some experience using marks more extensively in some callers, it's become clear that it's often necessary for different subsystems to be able to collaborate using independent marks without upsetting each other's assumptions. Today that tends to be achieved using hand-written transforms either with <code>cty.Transform</code> or <code>cty.Value.UnmarkDeepWithPaths</code>/<code>cty.Value.MarkWithPaths</code>, both of which can be pretty expensive even in the common case where there are no marks present at all.</p> <p>This new function allows inspecting and transforming marks with far less overhead, by creating new values only for parts of a structure that actually need to change and by reusing (rather than recreating) the &quot;payloads&quot; of the values being modified when we know that only the marks have changed.</p> </li> <li> <p><code>cty.ValueMarksOfType</code> and <code>cty.ValueMarksOfTypeDeep</code> make it easier to use type-based rather than value-based mark schemes, where different values of a common type are used to track a specific kind of relationship with multiple external values.</p> </li> <li> <p><code>cty.Value.HasMarkDeep</code> provides a &quot;deep&quot; version of the existing <code>cty.Value.HasMark</code>, searching throughout a possibly-nested structure for any values that have the given mark.</p> </li> <li> <p><code>cty.Value.UnmarkDeep</code> and <code>cty.Value.UnmarkDeepWithPaths</code> are now implemented in terms of <code>cty.Value.WrangleMarksDeep</code>, so they benefit from its reduced overhead. In particular they avoid reconstructing a data structure that contains no marked values at all.</p> </li> <li> <p><code>cty.Value.MarkWithPaths</code> now has a fast path when it's given a zero-length <code>PathValueMarks</code>, in which case it just returns the value it was given with no modifications.</p> </li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md">github.com/zclconf/go-cty's changelog</a>.</em></p> <blockquote> <h1>1.17.0 (September 5, 2025)</h1> <p><code>cty</code> now requires Go 1.23 or later.</p> <ul> <li> <p><code>cty.Value.Elements</code> offers a modern <code>iter.Seq2</code>-based equivalent of <code>cty.Value.ElementIterator</code>.</p> </li> <li> <p><code>cty.DeepValues</code> offers a modern <code>iter.Seq2</code>-based equivalent of <code>cty.Walk</code>.</p> </li> <li> <p><code>cty.Value.WrangleMarksDeep</code> allows inspecting and modifying individual marks throughout a possibly-nested data structure.</p> <p>Having now got some experience using marks more extensively in some callers, it's become clear that it's often necessary for different subsystems to be able to collaborate using independent marks without upsetting each other's assumptions. Today that tends to be achieved using hand-written transforms either with <code>cty.Transform</code> or <code>cty.Value.UnmarkDeepWithPaths</code>/<code>cty.Value.MarkWithPaths</code>, both of which can be pretty expensive even in the common case where there are no marks present at all.</p> <p>This new function allows inspecting and transforming marks with far less overhead, by creating new values only for parts of a structure that actually need to change and by reusing (rather than recreating) the &quot;payloads&quot; of the values being modified when we know that only the marks have changed.</p> </li> <li> <p><code>cty.ValueMarksOfType</code> and <code>cty.ValueMarksOfTypeDeep</code> make it easier to use type-based rather than value-based mark schemes, where different values of a common type are used to track a specific kind of relationship with multiple external values.</p> </li> <li> <p><code>cty.Value.HasMarkDeep</code> provides a &quot;deep&quot; version of the existing <code>cty.Value.HasMark</code>, searching throughout a possibly-nested structure for any values that have the given mark.</p> </li> <li> <p><code>cty.Value.UnmarkDeep</code> and <code>cty.Value.UnmarkDeepWithPaths</code> are now implemented in terms of <code>cty.Value.WrangleMarksDeep</code>, so they benefit from its reduced overhead. In particular they avoid reconstructing a data structure that contains no marked values at all.</p> </li> <li> <p><code>cty.Value.MarkWithPaths</code> now has a fast path when it's given a zero-length <code>PathValueMarks</code>, in which case it just returns the value it was given with no modifications.</p> </li> </ul> <h1>1.16.4 (August 20, 2025)</h1> <ul> <li><code>cty.UnknownAsNull</code> now accepts marked values and preserves the given marks in its result. Previously it had no direct support for marks and so would either panic or return incorrect results when given marked values.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/zclconf/go-cty/commit/da4c600729aefcf628d6b042ee439e6927d1104e"><code>da4c600</code></a> CHANGELOG: Prepare for v1.17.0 release</li> <li><a href="https://github.com/zclconf/go-cty/commit/b13ddd40b1cd39b19c1acfab789049d7ff34358c"><code>b13ddd4</code></a> cty: Use WrangleMarksDeep for UnmarkDeep and UnmarkDeepWithPaths</li> <li><a href="https://github.com/zclconf/go-cty/commit/4453ac2b7f5200601370c6a3f27207ebc81d2df4"><code>4453ac2</code></a> cty: Use DeepValues instead of Walk for deep marks inspections</li> <li><a href="https://github.com/zclconf/go-cty/commit/f833b10b8efd62c42155b93ab1864c77c836dbc0"><code>f833b10</code></a> Bulk replace interface{} -&gt; any</li> <li><a href="https://github.com/zclconf/go-cty/commit/d4bb9d4fb66471b4ffd521770f5a9f4ff277ee04"><code>d4bb9d4</code></a> cty: Various new mark-inspecting helpers</li> <li><a href="https://github.com/zclconf/go-cty/commit/31572cfc28dc2446e7f163451f78116c6cf776bb"><code>31572cf</code></a> cty+ctymarks: Deep mark wrangling helper</li> <li><a href="https://github.com/zclconf/go-cty/commit/d95a68cf6be26d4d0c841a6de102483c9d382006"><code>d95a68c</code></a> cty: Modern iter.Seq2 equivalents of Value.ElementIterator and Walk</li> <li><a href="https://github.com/zclconf/go-cty/commit/e76eeea526f53bec67a8fda74d68c9593f1a500a"><code>e76eeea</code></a> v1.16.4 release</li> <li><a href="https://github.com/zclconf/go-cty/commit/700a2bccfebdc72ce9270b9715dd2d4e86bd1fa6"><code>700a2bc</code></a> cty: UnknownAsNull accepts marked values and preserves marks</li> <li><a href="https://github.com/zclconf/go-cty/commit/3c2b6a0e21d8e541c2ff5b3825b27483fad0bd1b"><code>3c2b6a0</code></a> Prepare for future v1.16.4 release</li> <li>See full diff in <a href="https://github.com/zclconf/go-cty/compare/v1.16.3...v1.17.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/zclconf/go-cty&package-manager=go_modules&previous-version=1.16.3&new-version=1.17.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
diff --git a/go.mod b/go.mod
@@ -433,7 +433,7 @@ require (
 	github.com/yuin/goldmark v1.7.12 // indirect
 	github.com/yuin/goldmark-emoji v1.0.6 // indirect
 	github.com/yusufpapurcu/wmi v1.2.4 // indirect
-	github.com/zclconf/go-cty v1.16.3
+	github.com/zclconf/go-cty v1.17.0
 	github.com/zeebo/errs v1.4.0 // indirect
 	go.opentelemetry.io/auto/sdk v1.1.0 // indirect
 	go.opentelemetry.io/collector/component v1.27.0 // indirect
diff --git a/go.sum b/go.sum
@@ -1908,8 +1908,8 @@ github.com/yuin/goldmark-emoji v1.0.6 h1:QWfF2FYaXwL74tfGOW5izeiZepUDroDJfWubQI9
 github.com/yuin/goldmark-emoji v1.0.6/go.mod h1:ukxJDKFpdFb5x0a5HqbdlcKtebh086iJpI31LTKmWuA=
 github.com/yusufpapurcu/wmi v1.2.4 h1:zFUKzehAFReQwLys1b/iSMl+JQGSCSjtVqQn9bBrPo0=
 github.com/yusufpapurcu/wmi v1.2.4/go.mod h1:SBZ9tNy3G9/m5Oi98Zks0QjeHVDvuK0qfxQmPyzfmi0=
-github.com/zclconf/go-cty v1.16.3 h1:osr++gw2T61A8KVYHoQiFbFd1Lh3JOCXc/jFLJXKTxk=
-github.com/zclconf/go-cty v1.16.3/go.mod h1:VvMs5i0vgZdhYawQNq5kePSpLAoz8u1xvZgrPIxfnZE=
+github.com/zclconf/go-cty v1.17.0 h1:seZvECve6XX4tmnvRzWtJNHdscMtYEx5R7bnnVyd/d0=
+github.com/zclconf/go-cty v1.17.0/go.mod h1:wqFzcImaLTI6A5HfsRwB0nj5n0MRZFwmey8YoFPPs3U=
 github.com/zclconf/go-cty-debug v0.0.0-20240509010212-0d6042c53940 h1:4r45xpDWB6ZMSMNJFMOjqrGHynW3DIBuR2H9j0ug+Mo=
 github.com/zclconf/go-cty-debug v0.0.0-20240509010212-0d6042c53940/go.mod h1:CmBdvvj3nqzfzJ6nTCIwDTPZ56aVGvDrmztiO5g3qrM=
 github.com/zclconf/go-cty-yaml v1.1.0 h1:nP+jp0qPHv2IhUVqmQSzjvqAWcObN0KBkUl2rWBdig0=
