Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): bump the go group across 1 directory with 11 updates #419

Closed
wants to merge 2 commits into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jun 25, 2024

Bumps the go group with 10 updates in the / directory:

Package From To
github.com/elliotchance/pie/v2 2.8.0 2.8.1
github.com/hashicorp/go-getter 1.7.4 1.7.5
github.com/hashicorp/go-retryablehttp 0.7.6 0.7.7
github.com/hashicorp/hcl/v2 2.20.1 2.21.0
github.com/rs/zerolog 1.32.0 1.33.0
github.com/spf13/cobra 1.8.0 1.8.1
github.com/spf13/viper 1.18.2 1.19.0
golang.org/x/oauth2 0.20.0 0.21.0
github.com/mach-composer/mach-composer-plugin-sdk/v2 2.0.0 2.0.1
golang.org/x/mod 0.17.0 0.18.0

Updates github.com/elliotchance/pie/v2 from 2.8.0 to 2.8.1

Commits

Updates github.com/hashicorp/go-getter from 1.7.4 to 1.7.5

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.7.5

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.7.4...v1.7.5

Commits
  • 5a63fd9 Merge pull request #497 from hashicorp/fix-git-update
  • 5b7ec5f fetch tags on update and fix tests
  • 9906874 recreate git config during update to prevent config alteration
  • See full diff in compare view

Updates github.com/hashicorp/go-retryablehttp from 0.7.6 to 0.7.7

Changelog

Sourced from github.com/hashicorp/go-retryablehttp's changelog.

0.7.7 (May 30, 2024)

BUG FIXES:

  • client: avoid potentially leaking URL-embedded basic authentication credentials in logs (#158)
Commits
  • 1542b31 v0.7.7
  • defb9f4 v0.7.7
  • a99f07b Merge pull request #158 from dany74q/danny/redacted-url-in-logs
  • 8a28c57 Merge branch 'main' into danny/redacted-url-in-logs
  • 86e852d Merge pull request #227 from hashicorp/dependabot/github_actions/actions/chec...
  • 47fe99e Bump actions/checkout from 4.1.5 to 4.1.6
  • 490fc06 Merge pull request #226 from testwill/ioutil
  • f3e9417 chore: remove refs to deprecated io/ioutil
  • See full diff in compare view

Updates github.com/hashicorp/hcl/v2 from 2.20.1 to 2.21.0

Release notes

Sourced from github.com/hashicorp/hcl/v2's releases.

v2.21.0

Enhancements

  • Introduce ParseTraversalPartial, which allows traversals that include the splat ([*]) index operator. (#673)
  • ext/dynblock: Now accepts marked values in for_each, and will transfer those marks (as much as technically possible) to values in the generated blocks. (#679)

Bugs Fixed

  • Expression evaluation will no longer panic if the splat operator is applied to an unknown value that has cty marks. (#678)
Changelog

Sourced from github.com/hashicorp/hcl/v2's changelog.

v2.21.0 (June 19, 2024)

Enhancements

  • Introduce ParseTraversalPartial, which allows traversals that include the splat ([*]) index operator. (#673)
  • ext/dynblock: Now accepts marked values in for_each, and will transfer those marks (as much as technically possible) to values in the generated blocks. (#679)

Bugs Fixed

  • Expression evaluation will no longer panic if the splat operator is applied to an unknown value that has cty marks. (#678)
Commits
  • 360ae57 prepare for v2.21.0 release
  • f7e093a github: Pin action refs to latest trusted by TSCCR (#683)
  • 212a40e Update CHANGELOG.md
  • 318bbfe hcldec: Allow body-derived values to be marked
  • 9a64c17 dynblock: Preserve marks from for_each expression into result
  • bc75765 hclsyntax: Don't panic if splat operand is unknown and marked
  • bf54697 github: Set up Dependabot to manage HashiCorp-owned Actions versioning
  • 4521ae9 github: Pin action refs to latest trusted by TSCCR (#677)
  • 1c5ae8f Update CHANGELOG.md
  • f7cd61a Add additional function for parsing traversals with [*] keys (#673)
  • See full diff in compare view

Updates github.com/rs/zerolog from 1.32.0 to 1.33.0

Commits

Updates github.com/spf13/cobra from 1.8.0 to 1.8.1

Release notes

Sourced from github.com/spf13/cobra's releases.

v1.8.1

✨ Features

🐛 Bug fixes

🔧 Maintenance

🧪 Testing & CI/CD

✏️ Documentation

... (truncated)

Commits

Updates github.com/spf13/viper from 1.18.2 to 1.19.0

Release notes

Sourced from github.com/spf13/viper's releases.

v1.19.0

What's Changed

Bug Fixes 🐛

Dependency Updates ⬆️

... (truncated)

Commits
  • b9733f0 build(deps): bump actions/checkout from 4.1.4 to 4.1.6
  • 6ecc5c8 build(deps): bump cachix/install-nix-action from 26 to 27
  • 248c6fd build(deps): bump github/codeql-action from 3.25.4 to 3.25.7
  • abea773 Update references to bketelsen/crypt
  • f17acb4 build(deps): bump golangci/golangci-lint-action from 4.0.0 to 6.0.1
  • 8e285a5 build(deps): bump github/codeql-action from 3.25.2 to 3.25.4
  • 4017620 build(deps): bump actions/setup-go from 5.0.0 to 5.0.1
  • b67e814 build(deps): bump github.com/pelletier/go-toml/v2 from 2.2.1 to 2.2.2
  • 4a182c7 build(deps): bump actions/dependency-review-action from 4.2.5 to 4.3.2
  • 45a0e12 build(deps): bump mheap/github-action-required-labels
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.20.0 to 0.21.0

Commits

Updates github.com/google/uuid from 1.5.0 to 1.6.0

Release notes

Sourced from github.com/google/uuid's releases.

v1.6.0

1.6.0 (2024-01-16)

Features

Bug Fixes

Changelog

Sourced from github.com/google/uuid's changelog.

1.6.0 (2024-01-16)

Features

Bug Fixes

Commits

Updates github.com/mach-composer/mach-composer-plugin-sdk/v2 from 2.0.0 to 2.0.1

Changelog

Sourced from github.com/mach-composer/mach-composer-plugin-sdk/v2's changelog.

v2.0.1 - 2024-05-17

Dependency

  • chore(deps): bump github/codeql-action from 2 to 3 in the github-actions group across 1 directory
  • chore(deps): bump github.com/hashicorp/go-plugin from 1.6.0 to 1.6.1 in the go group
Commits
  • 0a0f7fc Merge pull request #14 from mach-composer/release/v2.0.1
  • ea3a14b Release v2.0.1
  • 4eb1571 Merge pull request #15 from mach-composer/dependabot/go_modules/go-8aa7a72b71
  • b144d85 chore(deps): add changelog for dependabot updates
  • 8a11fbf chore(deps): bump github.com/hashicorp/go-plugin in the go group
  • 4a31eb7 Create Dependency-20240510-142032.yaml
  • f4598f2 Merge pull request #13 from mach-composer/dependabot/github_actions/github-ac...
  • 09e6121 Merge pull request #11 from mach-composer/dependabot/go_modules/go-8442f99f56
  • 3fb67c2 chore(deps): bump github/codeql-action
  • aa8bea7 chore(deps): bump the go group with 3 updates
  • Additional commits viewable in compare view

Updates golang.org/x/mod from 0.17.0 to 0.18.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 10 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/elliotchance/pie/v2](https://github.com/elliotchance/pie) | `2.8.0` | `2.8.1` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.4` | `1.7.5` |
| [github.com/hashicorp/go-retryablehttp](https://github.com/hashicorp/go-retryablehttp) | `0.7.6` | `0.7.7` |
| [github.com/hashicorp/hcl/v2](https://github.com/hashicorp/hcl) | `2.20.1` | `2.21.0` |
| [github.com/rs/zerolog](https://github.com/rs/zerolog) | `1.32.0` | `1.33.0` |
| [github.com/spf13/cobra](https://github.com/spf13/cobra) | `1.8.0` | `1.8.1` |
| [github.com/spf13/viper](https://github.com/spf13/viper) | `1.18.2` | `1.19.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.20.0` | `0.21.0` |
| [github.com/mach-composer/mach-composer-plugin-sdk/v2](https://github.com/mach-composer/mach-composer-plugin-sdk) | `2.0.0` | `2.0.1` |
| [golang.org/x/mod](https://github.com/golang/mod) | `0.17.0` | `0.18.0` |



Updates `github.com/elliotchance/pie/v2` from 2.8.0 to 2.8.1
- [Release notes](https://github.com/elliotchance/pie/releases)
- [Commits](elliotchance/pie@v2.8.0...v2.8.1)

Updates `github.com/hashicorp/go-getter` from 1.7.4 to 1.7.5
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](hashicorp/go-getter@v1.7.4...v1.7.5)

Updates `github.com/hashicorp/go-retryablehttp` from 0.7.6 to 0.7.7
- [Changelog](https://github.com/hashicorp/go-retryablehttp/blob/main/CHANGELOG.md)
- [Commits](hashicorp/go-retryablehttp@v0.7.6...v0.7.7)

Updates `github.com/hashicorp/hcl/v2` from 2.20.1 to 2.21.0
- [Release notes](https://github.com/hashicorp/hcl/releases)
- [Changelog](https://github.com/hashicorp/hcl/blob/main/CHANGELOG.md)
- [Commits](hashicorp/hcl@v2.20.1...v2.21.0)

Updates `github.com/rs/zerolog` from 1.32.0 to 1.33.0
- [Commits](rs/zerolog@v1.32.0...v1.33.0)

Updates `github.com/spf13/cobra` from 1.8.0 to 1.8.1
- [Release notes](https://github.com/spf13/cobra/releases)
- [Commits](spf13/cobra@v1.8.0...v1.8.1)

Updates `github.com/spf13/viper` from 1.18.2 to 1.19.0
- [Release notes](https://github.com/spf13/viper/releases)
- [Commits](spf13/viper@v1.18.2...v1.19.0)

Updates `golang.org/x/oauth2` from 0.20.0 to 0.21.0
- [Commits](golang/oauth2@v0.20.0...v0.21.0)

Updates `github.com/google/uuid` from 1.5.0 to 1.6.0
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](google/uuid@v1.5.0...v1.6.0)

Updates `github.com/mach-composer/mach-composer-plugin-sdk/v2` from 2.0.0 to 2.0.1
- [Release notes](https://github.com/mach-composer/mach-composer-plugin-sdk/releases)
- [Changelog](https://github.com/mach-composer/mach-composer-plugin-sdk/blob/main/CHANGELOG.md)
- [Commits](mach-composer/mach-composer-plugin-sdk@v2.0.0...v2.0.1)

Updates `golang.org/x/mod` from 0.17.0 to 0.18.0
- [Commits](golang/mod@v0.17.0...v0.18.0)

---
updated-dependencies:
- dependency-name: github.com/elliotchance/pie/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/go-getter
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/go-retryablehttp
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/hashicorp/hcl/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/rs/zerolog
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/spf13/cobra
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: github.com/spf13/viper
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
- dependency-name: github.com/mach-composer/mach-composer-plugin-sdk/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: go
- dependency-name: golang.org/x/mod
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from a team as a code owner June 25, 2024 21:36
@dependabot dependabot bot requested a review from demeyerthom June 25, 2024 21:36
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Jun 25, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Jul 9, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Jul 9, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/go-8ec5cf28d3 branch July 9, 2024 21:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

0 participants