Bump the go_modules group across 1 directory with 9 updates#92
Open
dependabot[bot] wants to merge 1 commit intomainfrom
Open
Bump the go_modules group across 1 directory with 9 updates#92dependabot[bot] wants to merge 1 commit intomainfrom
dependabot[bot] wants to merge 1 commit intomainfrom
Conversation
Bumps the go_modules group with 4 updates in the / directory: [github.com/ClickHouse/ch-go](https://github.com/ClickHouse/ch-go?target=https://github.com), [github.com/compose-spec/compose-go/v2](https://github.com/compose-spec/compose-go?target=https://github.com), [github.com/containerd/containerd](https://github.com/containerd/containerd?target=https://github.com) and [github.com/docker/buildx](https://github.com/docker/buildx?target=https://github.com). Updates `github.com/ClickHouse/ch-go` from 0.61.5 to 0.65.0 - [Release notes](https://github.com/ClickHouse/ch-go/releases?target=https://github.com) - [Commits](ClickHouse/ch-go@v0.61.5...v0.65.0) Updates `github.com/compose-spec/compose-go/v2` from 2.1.1 to 2.4.1 - [Release notes](https://github.com/compose-spec/compose-go/releases?target=https://github.com) - [Commits](compose-spec/compose-go@v2.1.1...v2.4.1) Updates `github.com/containerd/containerd` from 1.7.17 to 1.7.29 - [Release notes](https://github.com/containerd/containerd/releases?target=https://github.com) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md?target=https://github.com) - [Commits](containerd/containerd@v1.7.17...v1.7.29) Updates `github.com/docker/buildx` from 0.14.1 to 0.21.3 - [Release notes](https://github.com/docker/buildx/releases?target=https://github.com) - [Commits](docker/buildx@v0.14.1...v0.21.3) Updates `github.com/docker/docker` from 26.1.5+incompatible to 28.0.0-rc.2+incompatible - [Release notes](https://github.com/docker/docker/releases?target=https://github.com) - [Commits](moby/moby@v26.1.5...v28.0.0-rc.2) Updates `go.opentelemetry.io/otel/sdk` from 1.24.0 to 1.34.0 - [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases?target=https://github.com) - [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md?target=https://github.com) - [Commits](open-telemetry/opentelemetry-go@v1.24.0...v1.34.0) Updates `golang.org/x/crypto` from 0.33.0 to 0.40.0 - [Commits](golang/crypto@v0.33.0...v0.40.0) Updates `golang.org/x/net` from 0.35.0 to 0.42.0 - [Commits](golang/net@v0.35.0...v0.42.0) Updates `golang.org/x/oauth2` from 0.15.0 to 0.30.0 - [Commits](golang/oauth2@v0.15.0...v0.30.0) --- updated-dependencies: - dependency-name: github.com/ClickHouse/ch-go dependency-version: 0.65.0 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/compose-spec/compose-go/v2 dependency-version: 2.4.1 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/containerd/containerd dependency-version: 1.7.29 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/docker/buildx dependency-version: 0.21.3 dependency-type: indirect dependency-group: go_modules - dependency-name: github.com/docker/docker dependency-version: 28.0.0-rc.2+incompatible dependency-type: indirect dependency-group: go_modules - dependency-name: go.opentelemetry.io/otel/sdk dependency-version: 1.34.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/crypto dependency-version: 0.40.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/net dependency-version: 0.42.0 dependency-type: indirect dependency-group: go_modules - dependency-name: golang.org/x/oauth2 dependency-version: 0.30.0 dependency-type: indirect dependency-group: go_modules ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps the go_modules group with 4 updates in the / directory: github.com/ClickHouse/ch-go, github.com/compose-spec/compose-go/v2, github.com/containerd/containerd and github.com/docker/buildx.
Updates
github.com/ClickHouse/ch-gofrom 0.61.5 to 0.65.0Release notes
Sourced from github.com/ClickHouse/ch-go's releases.
... (truncated)
Commits
0e83566Merge pull request #1041 from ClickHouse/fix_potential_overflowb64209frefactor: simplify overflow check05fba0afix(security): overflow that could smuggle queryaadb7eeMerge pull request #1040 from ClickHouse/compressor_etc65a3012perf(compressor): use new compression code, refactor/optimize4cdb83aMerge pull request #1039 from pablomatiasgomez/allow-creating-compressor-with...b9258c0perf(compress.writer): revert back to ifs in NewWriterWithMethods743c9d7perf(compress.writer): use %s instead of %vb26ebf4perf(compress.writer): revert nil check and use fixed length array1d4ba47perf(compress.writer): remove methods map and instaed do nil checkUpdates
github.com/compose-spec/compose-go/v2from 2.1.1 to 2.4.1Release notes
Sourced from github.com/compose-spec/compose-go/v2's releases.
... (truncated)
Commits
222d93cfix reset.go88ca71bfix(reset): Add cycle detector in reset.go156e22dintroduce OmitEmpty in yaml processing pipeline74c1d59always test to load config with localFileLoaderc558adcingest config files with ResourceLoaderbff5006detect project dir is a symlink and warn user35c9659add support for bind mount recursive97c49fcnormalize volume.target to drop trailing slashfb8e04dseiralise NanoCPUs as string7218685introduce service.gpusUpdates
github.com/containerd/containerdfrom 1.7.17 to 1.7.29Release notes
Sourced from github.com/containerd/containerd's releases.
... (truncated)
Commits
442cb34Merge commit from forke5cb6ddMerge commit from fork9772966Merge pull request #12486 from dmcgowan/prepare-v1.7.291fc2daaPrepare release notes for v1.7.2993f710aMerge pull request #12480 from k8s-infra-cherrypick-robot/cherry-pick-12475-t...68d04beMerge pull request #12471 from austinvazquez/1_7_update_ci_go_and_images3f5f9f8runc: Update runc binary to v1.3.3667409fci: bump Go 1.24.9, 1.25.3294f8c0Update GHA runners to use latest images for basic binaries buildcf66b41Update GHA runners to use latest image for most jobsUpdates
github.com/docker/buildxfrom 0.14.1 to 0.21.3Release notes
Sourced from github.com/docker/buildx's releases.
... (truncated)
Commits
7b5fecbMerge pull request #3067 from crazy-max/0.21_picks_0.21.305f75a5localstate: remove definition and inputs fields from group0982070otel: avoid tracing raw os arguments1360a9eMerge pull request #3037 from crazy-max/0.21_picks_0.21.26019a2bbuildflags: skip empty cache entries when parsing6da88e1Fix handling of attest extra arguments41f8e5cAdd attest extra args tests7c2359cMerge pull request #3018 from crazy-max/0.21_picks_0.21.165a52b5remove accidental debug34ed52eMerge pull request #3011 from jsternberg/v0.21.0-picksUpdates
github.com/docker/dockerfrom 26.1.5+incompatible to 28.0.0-rc.2+incompatibleRelease notes
Sourced from github.com/docker/docker's releases.
... (truncated)
Commits
57d4d23Merge pull request #49468 from thaJeztah/update_branch_status8b2f6fbMerge pull request #49471 from thaJeztah/container_cleanups54c43a7Merge pull request #49472 from thaJeztah/splunk_nits2fc9009project: update status of branchesbd92f2bdaemon/logger/splunk: New(): combine switches for format validationeac39ffdaemon/logger/splunk: remove some intermediate variables9bb3900daemon/logger: Info.ExtraAttributes: make env-var handling conditionalcbbff10daemon/logger: use consistent name for "extra attributes"ba559c4daemon/logger/fluentd: fix minor (linting) issuesb9e7e82daemon/logger/splunk: plunkLogger.postMessages(): improve logsUpdates
go.opentelemetry.io/otel/sdkfrom 1.24.0 to 1.34.0Changelog
Sourced from go.opentelemetry.io/otel/sdk's changelog.
... (truncated)
Commits
edc378fRelease v1.34.0/v0.56.0/v0.10.0 (#6174)e18299flog: Make whole Logs API user-facing (#6167)cbc3b6afix(deps): update module google.golang.org/protobuf to v1.36.3 (#6166)2dcb9b3chore(deps): update module github.com/protonmail/go-crypto to v1.1.5 (#6165)764ae10fix(deps): update googleapis to 1a7da9e (#6164)f87ccedchore(deps): update module github.com/ldez/exptostd to v0.4.0 (#6163)be76ebfchore(deps): update module github.com/crocmagnon/fatcontext to v0.6.0 (#6162)3e60bd4fix(deps): update module golang.org/x/vuln to v1.1.4 (#6161)79b1fc1Fix demo links (#6160)4a87cfefix(deps): update module google.golang.org/grpc to v1.69.4 (#6159)Updates
golang.org/x/cryptofrom 0.33.0 to 0.40.0Commits
459a9dbgo.mod: update golang.org/x dependencies74e709assh: add AlgorithmNegotiationErrorb3790b8acme: fix TLSALPN01ChallengeCert for IP address identifiers1dc4269acme: add Pebble integration testing97bf787blake2b: implement hash.XOF952517dx509roots/fallback: update bundlec6fce02ssh: refuse to parse certificates that use a certificate as signing key0ae49b8ssh: reject certificate keys used as signature keys for SSH certs3bf9d2assh/test: skip KEX test if unsupported by system SSH client9bab967go.mod: update golang.org/x dependenciesUpdates
golang.org/x/netfrom 0.35.0 to 0.42.0Commits
76358aago.mod: update golang.org/x dependencies6e41caego.mod: update golang.org/x dependencies15f7d40http2: correctly wrap ErrFrameTooLarge in Framer.ReadFrameef33bc0internal/http3: use bubbled context in synctest tests919c6bchttp2: use an array instead of a map in typeFrameParserbae01a7trace: add missing td tag7d6e62ago.mod: update golang.org/x dependenciesea0c1d9internal/timeseries: use built-in max/min to simplify the code3e7a445quic: skip packet numbers for optimistic ack defense3f563d3quic: use an enum for sentPacket stateUpdates
golang.org/x/oauth2from 0.15.0 to 0.30.0Commits
cf14319oauth2: fix expiration time window check32d34efinternal: include clientID in auth style cache key2d34e30oauth2: replace a magic number with AuthStyleUnknown696f7b3all: modernize with doc links and any471209boauth2: drop dependency on go-cmp6968da2oauth2: sync Token.ExpiresIn from internal Tokend2c4e0aoauth2: context instead of golang.org/x/net/context in doc883dc3cendpoints: add various endpoints from stale CLs1c06e87all: make use of oauth.Token.ExpiresIn65c15a3oauth2: remove extra periodDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore <dependency name> major versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)@dependabot ignore <dependency name> minor versionwill close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)@dependabot ignore <dependency name>will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)@dependabot unignore <dependency name>will remove all of the ignore conditions of the specified dependency@dependabot unignore <dependency name> <ignore condition>will remove the ignore condition of the specified dependency and ignore conditionsYou can disable automated security fix PRs for this repo from the Security Alerts page.