-
Notifications
You must be signed in to change notification settings - Fork 2k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Improve encoding layer #1167
Improve encoding layer #1167
Conversation
11112e7
to
e3e831f
Compare
e3e831f
to
646eeb1
Compare
|
||
"github.com/spf13/viper/internal/encoding" | ||
"github.com/spf13/viper/internal/encoding/dotenv" |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
do you have a plans to make the codecs pluggable like drivers in sql/database package? For example if I use only yaml I would import _ github.com/spf13/viper/codecs/yaml
. So as a result I don't need to add json, hcl, etc dependencies into vendors.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
That's the plan, but it probably won't happen before v2
This interface is specific to decoding data into Viper's internal, so it's okay to make it Viper specific. BREAKING CHANGE: the decoder interface now accepts a map instead of an interface Signed-off-by: Mark Sagi-Kazar <[email protected]>
This interface is specific to encoding data from Viper's internal, so it's okay to make it Viper specific. BREAKING CHANGE: the encoder interface now accepts a map instead of an interface Signed-off-by: Mark Sagi-Kazar <[email protected]>
Signed-off-by: Mark Sagi-Kazar <[email protected]>
Signed-off-by: Mark Sagi-Kazar <[email protected]>
Some codecs might have options that rely on Viper in the future (eg. key delimiter) which requires initializing codecs for each Viper instance. Signed-off-by: Mark Sagi-Kazar <[email protected]>
Signed-off-by: Mark Sagi-Kazar <[email protected]>
Signed-off-by: Mark Sagi-Kazar <[email protected]>
Signed-off-by: Mark Sagi-Kazar <[email protected]>
Signed-off-by: Mark Sagi-Kazar <[email protected]>
Signed-off-by: Mark Sagi-Kazar <[email protected]>
646eeb1
to
aa10a08
Compare
I decided to merge this PR. We can always make changes to it before we finalize the API. |
[![WhiteSource Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/spf13/viper](https://github.com/spf13/viper) | require | minor | `v1.10.1` -> `v1.11.0` | --- ### Release Notes <details> <summary>spf13/viper</summary> ### [`v1.11.0`](https://github.com/spf13/viper/releases/v1.11.0) [Compare Source](https://github.com/spf13/viper/compare/v1.10.1...v1.11.0) <!-- Release notes generated using configuration in .github/release.yml at v1.11.0 --> #### What's Changed ##### Exciting New Features 🎉 - Experimental yaml v3 library support by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1273 - Experimental toml v2 support by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1274 - Experimental logger by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1275 ##### Enhancements 🚀 - Remove unnecessary operand by [@​steviebps](https://github.com/steviebps) in [spf13/viper#1213 - Improve encoding layer by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1167 - Allow merging configs with different types of leaf values by [@​illarion](https://github.com/illarion) in [spf13/viper#1181 ##### Bug Fixes 🐛 - Disable race detector on windows by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1269 ##### Breaking Changes 🛠 - Drop Go 1.14 support by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1327 ##### Dependency Updates ⬆️ - build(deps): bump github.com/spf13/afero from 1.6.0 to 1.7.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1265 - build(deps): bump github.com/spf13/afero from 1.7.0 to 1.7.1 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1271 - build(deps): bump github.com/spf13/afero from 1.7.1 to 1.8.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1281 - build(deps): bump gopkg.in/ini.v1 from 1.66.2 to 1.66.3 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1287 - build(deps): bump github.com/spf13/afero from 1.8.0 to 1.8.1 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1291 - build(deps): bump actions/github-script from 5 to 6 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1295 - build(deps): bump actions/checkout from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1304 - build(deps): bump github.com/magiconair/properties from 1.8.5 to 1.8.6 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1299 - build(deps): bump gopkg.in/ini.v1 from 1.66.3 to 1.66.4 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1293 - build(deps): bump github.com/spf13/afero from 1.8.1 to 1.8.2 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1311 - build(deps): bump actions/setup-go from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1319 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.6 to 2.0.0-beta.7 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1320 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.7 to 2.0.0-beta.8 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1322 - Update crypt by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1325 #### New Contributors - [@​steviebps](https://github.com/steviebps) made their first contribution in [spf13/viper#1213 - [@​illarion](https://github.com/illarion) made their first contribution in [spf13/viper#1181 **Full Changelog**: spf13/viper@v1.10.1...v1.11.0 </details> --- ### Configuration 📅 **Schedule**: At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR is behind base branch, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, click this checkbox. --- This PR has been generated by [WhiteSource Renovate](https://renovate.whitesourcesoftware.com). View repository job log [here](https://app.renovatebot.com/dashboard#github/googleapis/gapic-showcase).
Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]>
commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364)
commit 2fc6ae5 Author: Andrew Nikitin <[email protected]> Date: Tue Aug 16 15:48:13 2022 +0300 build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 7485eb2 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:37:31 2022 +0100 chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 1e3e807 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:14:40 2022 +0100 chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364)
commit 48d1512 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Aug 16 22:09:31 2022 +0100 chore(deps): Bump github.com/gabriel-vasile/mimetype from 1.4.0 to 1.4.1 (#370) Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> commit 1bd0801 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Aug 16 21:10:29 2022 +0100 chore(deps): Bump github.com/multiformats/go-multibase from 0.0.3 to 0.1.1 (#371) * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 4b2da73 Author: Ankur Banerjee <[email protected]> Date: Tue Aug 16 17:06:51 2022 +0100 ci: Fix CodeQL Golang version commit 2fc6ae5 Author: Andrew Nikitin <[email protected]> Date: Tue Aug 16 15:48:13 2022 +0300 build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 7485eb2 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:37:31 2022 +0100 chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 1e3e807 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:14:40 2022 +0100 chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364)
….19 to 0.34.20 (#367) * ci: Cleanup old workflow runs (#364) * ci: Make workflow cleanup choices easier * ci: Fix linting error * ci: Disable cleanup dry-run * ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> * build: Optimise Docker build (#365) * chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> * ci: Fix CodeQL Golang version * chore(deps): Bump github.com/multiformats/go-multibase from 0.0.3 to 0.1.1 (#371) * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/gabriel-vasile/mimetype from 1.4.0 to 1.4.1 (#370) Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): Bump github.com/tendermint/tendermint Bumps [github.com/tendermint/tendermint](https://github.com/tendermint/tendermint) from 0.34.19 to 0.34.20. - [Release notes](https://github.com/tendermint/tendermint/releases) - [Changelog](https://github.com/tendermint/tendermint/blob/main/CHANGELOG.md) - [Commits](tendermint/tendermint@v0.34.19...v0.34.20) --- updated-dependencies: - dependency-name: github.com/tendermint/tendermint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
commit ab0cb89 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed Aug 17 00:34:56 2022 +0100 security(tendermint): Bump github.com/tendermint/tendermint from 0.34.19 to 0.34.20 (#367) * ci: Cleanup old workflow runs (#364) * ci: Make workflow cleanup choices easier * ci: Fix linting error * ci: Disable cleanup dry-run * ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> * build: Optimise Docker build (#365) * chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> * ci: Fix CodeQL Golang version * chore(deps): Bump github.com/multiformats/go-multibase from 0.0.3 to 0.1.1 (#371) * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/gabriel-vasile/mimetype from 1.4.0 to 1.4.1 (#370) Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): Bump github.com/tendermint/tendermint Bumps [github.com/tendermint/tendermint](https://github.com/tendermint/tendermint) from 0.34.19 to 0.34.20. - [Release notes](https://github.com/tendermint/tendermint/releases) - [Changelog](https://github.com/tendermint/tendermint/blob/main/CHANGELOG.md) - [Commits](tendermint/tendermint@v0.34.19...v0.34.20) --- updated-dependencies: - dependency-name: github.com/tendermint/tendermint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> commit f7b2d4f Author: Ankur Banerjee <[email protected]> Date: Tue Aug 16 22:21:43 2022 +0100 Squashed commit of the following: commit 48d1512 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Aug 16 22:09:31 2022 +0100 chore(deps): Bump github.com/gabriel-vasile/mimetype from 1.4.0 to 1.4.1 (#370) Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> commit 1bd0801 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Aug 16 21:10:29 2022 +0100 chore(deps): Bump github.com/multiformats/go-multibase from 0.0.3 to 0.1.1 (#371) * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 4b2da73 Author: Ankur Banerjee <[email protected]> Date: Tue Aug 16 17:06:51 2022 +0100 ci: Fix CodeQL Golang version commit 2fc6ae5 Author: Andrew Nikitin <[email protected]> Date: Tue Aug 16 15:48:13 2022 +0300 build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 7485eb2 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:37:31 2022 +0100 chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 1e3e807 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:14:40 2022 +0100 chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364) commit ed9b26f Author: Ankur Banerjee <[email protected]> Date: Tue Aug 16 17:02:09 2022 +0100 Squashed commit of the following: commit 2fc6ae5 Author: Andrew Nikitin <[email protected]> Date: Tue Aug 16 15:48:13 2022 +0300 build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 7485eb2 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:37:31 2022 +0100 chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 1e3e807 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:14:40 2022 +0100 chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364)
Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]>
* ci: Make workflow cleanup choices easier * ci: Fix linting error * ci: Disable cleanup dry-run * ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> * build: Optimise Docker build (#365) * chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * fix!: Ledger nano doesn't work with cheqd transactions * build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
commit cfa13e7 Author: Alexander Kolesov <[email protected]> Date: Wed Aug 17 18:13:55 2022 +0300 fix!: Ledger nano doesn't work with cheqd transactions [DEV-1651] (#372) * ci: Make workflow cleanup choices easier * ci: Fix linting error * ci: Disable cleanup dry-run * ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> * build: Optimise Docker build (#365) * chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * fix!: Ledger nano doesn't work with cheqd transactions * build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
commit 11fb42f Author: Ankur Banerjee <[email protected]> Date: Mon Aug 22 22:11:05 2022 +0100 ci: Add v0.6.x release branch (#378) Update .releaserc.json commit 94babfc Author: Ankur Banerjee <[email protected]> Date: Mon Aug 22 18:51:22 2022 +0100 fix(release): Bump semantic release package (#377) Bump semantic release commit 716c816 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 22 16:07:15 2022 +0100 feat(installer): Get installer to handle multi-platform binaries [DEV-1667] (#376) * Add support for determining the correct Github Release asset based on OS type and architecture * Set recommended Docker image version Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> commit 4971c01 Author: Ankur Banerjee <[email protected]> Date: Fri Aug 19 19:32:20 2022 +0100 ci(release): Bump Semantic release package lock commit b15fff3 Author: Ankur Banerjee <[email protected]> Date: Fri Aug 19 19:17:33 2022 +0100 build(docker): Bump Docker image version in environment file (#375) * Update docker-compose.env * Update shields on README for correct pre-release version commit c279317 Author: Andrew Nikitin <[email protected]> Date: Fri Aug 19 19:42:52 2022 +0300 fix(installer): Change snapshot URL calculating logic (#374) * fix: Change snapshot URL calculating logic * Change archive format to lz4 * Fixed default paths in state sync file * Change the directory for untarring Signed-off-by: Andrew Nikitin <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 48d1512 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Aug 16 22:09:31 2022 +0100 chore(deps): Bump github.com/gabriel-vasile/mimetype from 1.4.0 to 1.4.1 (#370) Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> commit 1bd0801 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Aug 16 21:10:29 2022 +0100 chore(deps): Bump github.com/multiformats/go-multibase from 0.0.3 to 0.1.1 (#371) * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 4b2da73 Author: Ankur Banerjee <[email protected]> Date: Tue Aug 16 17:06:51 2022 +0100 ci: Fix CodeQL Golang version commit 2fc6ae5 Author: Andrew Nikitin <[email protected]> Date: Tue Aug 16 15:48:13 2022 +0300 build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 7485eb2 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:37:31 2022 +0100 chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 1e3e807 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:14:40 2022 +0100 chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364)
commit 2fc6ae5 Author: Andrew Nikitin <[email protected]> Date: Tue Aug 16 15:48:13 2022 +0300 build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 7485eb2 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:37:31 2022 +0100 chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 1e3e807 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:14:40 2022 +0100 chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364)
commit 48d1512 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Aug 16 22:09:31 2022 +0100 chore(deps): Bump github.com/gabriel-vasile/mimetype from 1.4.0 to 1.4.1 (#370) Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> commit 1bd0801 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Aug 16 21:10:29 2022 +0100 chore(deps): Bump github.com/multiformats/go-multibase from 0.0.3 to 0.1.1 (#371) * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 4b2da73 Author: Ankur Banerjee <[email protected]> Date: Tue Aug 16 17:06:51 2022 +0100 ci: Fix CodeQL Golang version commit 2fc6ae5 Author: Andrew Nikitin <[email protected]> Date: Tue Aug 16 15:48:13 2022 +0300 build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 7485eb2 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:37:31 2022 +0100 chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 1e3e807 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:14:40 2022 +0100 chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364)
….19 to 0.34.20 (#367) * ci: Cleanup old workflow runs (#364) * ci: Make workflow cleanup choices easier * ci: Fix linting error * ci: Disable cleanup dry-run * ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> * build: Optimise Docker build (#365) * chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> * ci: Fix CodeQL Golang version * chore(deps): Bump github.com/multiformats/go-multibase from 0.0.3 to 0.1.1 (#371) * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/gabriel-vasile/mimetype from 1.4.0 to 1.4.1 (#370) Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): Bump github.com/tendermint/tendermint Bumps [github.com/tendermint/tendermint](https://github.com/tendermint/tendermint) from 0.34.19 to 0.34.20. - [Release notes](https://github.com/tendermint/tendermint/releases) - [Changelog](https://github.com/tendermint/tendermint/blob/main/CHANGELOG.md) - [Commits](tendermint/tendermint@v0.34.19...v0.34.20) --- updated-dependencies: - dependency-name: github.com/tendermint/tendermint dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
* ci: Make workflow cleanup choices easier * ci: Fix linting error * ci: Disable cleanup dry-run * ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> * build: Optimise Docker build (#365) * chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> * fix!: Ledger nano doesn't work with cheqd transactions * build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
commit 11fb42f Author: Ankur Banerjee <[email protected]> Date: Mon Aug 22 22:11:05 2022 +0100 ci: Add v0.6.x release branch (#378) Update .releaserc.json commit 94babfc Author: Ankur Banerjee <[email protected]> Date: Mon Aug 22 18:51:22 2022 +0100 fix(release): Bump semantic release package (#377) Bump semantic release commit 716c816 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 22 16:07:15 2022 +0100 feat(installer): Get installer to handle multi-platform binaries [DEV-1667] (#376) * Add support for determining the correct Github Release asset based on OS type and architecture * Set recommended Docker image version Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> commit 4971c01 Author: Ankur Banerjee <[email protected]> Date: Fri Aug 19 19:32:20 2022 +0100 ci(release): Bump Semantic release package lock commit b15fff3 Author: Ankur Banerjee <[email protected]> Date: Fri Aug 19 19:17:33 2022 +0100 build(docker): Bump Docker image version in environment file (#375) * Update docker-compose.env * Update shields on README for correct pre-release version commit c279317 Author: Andrew Nikitin <[email protected]> Date: Fri Aug 19 19:42:52 2022 +0300 fix(installer): Change snapshot URL calculating logic (#374) * fix: Change snapshot URL calculating logic * Change archive format to lz4 * Fixed default paths in state sync file * Change the directory for untarring Signed-off-by: Andrew Nikitin <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 48d1512 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Aug 16 22:09:31 2022 +0100 chore(deps): Bump github.com/gabriel-vasile/mimetype from 1.4.0 to 1.4.1 (#370) Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.0 to 1.4.1. - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.0...v1.4.1) --- updated-dependencies: - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> commit 1bd0801 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue Aug 16 21:10:29 2022 +0100 chore(deps): Bump github.com/multiformats/go-multibase from 0.0.3 to 0.1.1 (#371) * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> * chore(deps): Bump github.com/multiformats/go-multibase Bumps [github.com/multiformats/go-multibase](https://github.com/multiformats/go-multibase) from 0.0.3 to 0.1.1. - [Release notes](https://github.com/multiformats/go-multibase/releases) - [Commits](multiformats/go-multibase@v0.0.3...v0.1.1) --- updated-dependencies: - dependency-name: github.com/multiformats/go-multibase dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 4b2da73 Author: Ankur Banerjee <[email protected]> Date: Tue Aug 16 17:06:51 2022 +0100 ci: Fix CodeQL Golang version commit 2fc6ae5 Author: Andrew Nikitin <[email protected]> Date: Tue Aug 16 15:48:13 2022 +0300 build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 7485eb2 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:37:31 2022 +0100 chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 1e3e807 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:14:40 2022 +0100 chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364)
commit 2fc6ae5 Author: Andrew Nikitin <[email protected]> Date: Tue Aug 16 15:48:13 2022 +0300 build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 7485eb2 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:37:31 2022 +0100 chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 1e3e807 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:14:40 2022 +0100 chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364)
#488) * fix(installer): Backport to v0.6.x release branch (#379) * dragonberry * dragonberry * build: Backport workflow and other fixes to release/0.6.x branch [DEV-1822] (#410) * feat(installer): Get installer to handle multi-platform binaries [DEV-1667] (#376) * Add support for determining the correct Github Release asset based on OS type and architecture * Set recommended Docker image version Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> * fix(release): Bump semantic release package (#377) Bump semantic release * ci: Add v0.6.x release branch (#378) Update .releaserc.json * chore(deps-dev): Bump semantic-release from 19.0.4 to 19.0.5 (#383) Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 19.0.4 to 19.0.5. - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v19.0.4...v19.0.5) --- updated-dependencies: - dependency-name: semantic-release dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * bump: Proto dependencies (#391) * chore(deps): Bump bufbuild/buf-setup-action from 1.7.0 to 1.8.0 (#393) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.7.0 to 1.8.0. - [Release notes](https://github.com/bufbuild/buf-setup-action/releases) - [Commits](bufbuild/buf-setup-action@v1.7.0...v1.8.0) --- updated-dependencies: - dependency-name: bufbuild/buf-setup-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: Fix installer template for rsyslog [DEV-1815] (#403) * Remove Debian postinstall/purge scripts * Fix rsyslog template * ci: Sync workflow changes to main [DEV-1816] (#407) * Fix localnet running * Squashed commit of the following: * Change dispatch dependencies * Add persist credentials to CodeQL * Update .releaserc.json * Update package-lock.json * Added Docker metadata step to build * Add updated caching and tagging in release * Update test.yml * Cache go setup * Deactivate junit action * Update dispatch.yml * Bump go mod * Revert changes in sync * Reset testify Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alexander Kolesov <[email protected]> Co-authored-by: abdulla-ashurov <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> * Merge branch 'dragonberry-fix' into dragonberry * fix: dragonberry (#409) Draft of Dragonberry fix (needs to be tested) * Bump version of cosmos sdk Signed-off-by: Andrew Nikitin <[email protected]> * Go mod tidy * Switch back to cheqd cosmos fork * Fix build * Bump dockerfile go v1.18 * Added recommended patch changes * Update configure.go * Woraround for Tendermint's defaut storage config * Fix dockerfile * Remove .dockerignore * Fix cosmos deafult config * fix(security): Bump version of cosmos sdk (#413) * Merge branch 'release/0.6.x' into dragonberry-fix * Create .dockerignore * Revert copy stage changes * Bump golang CI linter to 1.18 * Bump CodeQL to 1.18 * ci(docker): Docker build for Dragonberry patch [DEV-1824] (#411) * ci: Sync tag version format * Squashed commit of the following: commit 2fc6ae5 Author: Andrew Nikitin <[email protected]> Date: Tue Aug 16 15:48:13 2022 +0300 build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 7485eb2 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:37:31 2022 +0100 chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 1e3e807 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:14:40 2022 +0100 chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364) * chore(deps): Bump goreleaser/goreleaser-action from 3 to 4 (#486) Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 3 to 4. - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@v3...v4) --- updated-dependencies: - dependency-name: goreleaser/goreleaser-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): Bump bufbuild/buf-setup-action from 1.8.0 to 1.10.0 (#477) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.8.0 to 1.10.0. - [Release notes](https://github.com/bufbuild/buf-setup-action/releases) - [Commits](bufbuild/buf-setup-action@v1.8.0...v1.10.0) --- updated-dependencies: - dependency-name: bufbuild/buf-setup-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci: Update PR title check (#463) Update pull-request.yml * fix: Error handling (#425) * Update go.mod * Bump package * Fix broken link * Fix protobuf breaking reference * Deactivate protobuf workflows * Change build runners * Don't wrap release * Update Dockerfile Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Jacob Gadikian <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alexander Kolesov <[email protected]> Co-authored-by: abdulla-ashurov <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> Co-authored-by: Alexandr Kolesov <[email protected]> Co-authored-by: Tasos <[email protected]> Co-authored-by: Alexander Kolesov <[email protected]>
* Fix for importing DIDs from genesis file * fix(installer): Backport to v0.6.x release branch (#379) * dragonberry * dragonberry * build: Backport workflow and other fixes to release/0.6.x branch [DEV-1822] (#410) * feat(installer): Get installer to handle multi-platform binaries [DEV-1667] (#376) * Add support for determining the correct Github Release asset based on OS type and architecture * Set recommended Docker image version Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> * fix(release): Bump semantic release package (#377) Bump semantic release * ci: Add v0.6.x release branch (#378) Update .releaserc.json * chore(deps-dev): Bump semantic-release from 19.0.4 to 19.0.5 (#383) Bumps [semantic-release](https://github.com/semantic-release/semantic-release) from 19.0.4 to 19.0.5. - [Release notes](https://github.com/semantic-release/semantic-release/releases) - [Commits](semantic-release/semantic-release@v19.0.4...v19.0.5) --- updated-dependencies: - dependency-name: semantic-release dependency-type: direct:development update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * bump: Proto dependencies (#391) * chore(deps): Bump bufbuild/buf-setup-action from 1.7.0 to 1.8.0 (#393) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.7.0 to 1.8.0. - [Release notes](https://github.com/bufbuild/buf-setup-action/releases) - [Commits](bufbuild/buf-setup-action@v1.7.0...v1.8.0) --- updated-dependencies: - dependency-name: bufbuild/buf-setup-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore: Fix installer template for rsyslog [DEV-1815] (#403) * Remove Debian postinstall/purge scripts * Fix rsyslog template * ci: Sync workflow changes to main [DEV-1816] (#407) * Fix localnet running * Squashed commit of the following: * Change dispatch dependencies * Add persist credentials to CodeQL * Update .releaserc.json * Update package-lock.json * Added Docker metadata step to build * Add updated caching and tagging in release * Update test.yml * Cache go setup * Deactivate junit action * Update dispatch.yml * Bump go mod * Revert changes in sync * Reset testify Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alexander Kolesov <[email protected]> Co-authored-by: abdulla-ashurov <[email protected]> Co-authored-by: Andrew Nikitin <[email protected]> * Merge branch 'dragonberry-fix' into dragonberry * fix: dragonberry (#409) Draft of Dragonberry fix (needs to be tested) * Bump version of cosmos sdk Signed-off-by: Andrew Nikitin <[email protected]> * Go mod tidy * Switch back to cheqd cosmos fork * Fix build * Bump dockerfile go v1.18 * Added recommended patch changes * Update configure.go * Woraround for Tendermint's defaut storage config * Fix dockerfile * Remove .dockerignore * Fix cosmos deafult config * fix(security): Bump version of cosmos sdk (#413) * Merge branch 'release/0.6.x' into dragonberry-fix * Create .dockerignore * Revert copy stage changes * Bump golang CI linter to 1.18 * Bump CodeQL to 1.18 * ci(docker): Docker build for Dragonberry patch [DEV-1824] (#411) * ci: Sync tag version format * Squashed commit of the following: commit 2fc6ae5 Author: Andrew Nikitin <[email protected]> Date: Tue Aug 16 15:48:13 2022 +0300 build: Multi-platform AMD64/ARM64 for Linux (#366) Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> commit 7485eb2 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:37:31 2022 +0100 chore(deps): Bump github.com/stretchr/testify from 1.7.1 to 1.8.0 (#362) Bumps github.com/stretchr/testify from 1.7.1 to 1.8.0. Commits 181cea6 impr: CallerInfo should print full paths to the terminal (#1201) cf1284f Allow mock expectations to be ordered (#1106) 66eef0e fix: assert.MapSubset (or just support maps in assert.Subset) (#1178) 2fab6df Add WithinTimeRange method (#1188) b5ce165 fixing panic in calls to assertion with nil m.mutex (#1212) c206b2e Mock can be deadlocked by a panic (#1157) 1b73601 suite: correctly set stats on test panic (#1195) ba1076d Add .Unset method to mock (#982) c31ea03 Support comparing byte slice (#1202) 48391ba Fix panic in AssertExpectations for mocks without expectations (#1207) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit 1e3e807 Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 15:14:40 2022 +0100 chore(deps): Bump github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25 (#359) Bumps github.com/lestrrat-go/jwx from 1.2.20 to 1.2.25. Release notes Sourced from github.com/lestrrat-go/jwx's releases. v1.2.25 v1.2.25 23 May 2022 [Bug Fixes][Security] * [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary ([#744](lestrrat-go/jwx#744)) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 v1.2.24 05 May 2022 [Security] * Upgrade golang.org/x/crypto ([#724](lestrrat-go/jwx#724)) v1.2.23 v1.2.23 13 Apr 2022 [Bug fixes] * [jwk] jwk.AutoRefresh had a race condition when `Configure()` was called concurrently ([#686](lestrrat-go/jwx#686)) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 v1.2.22 08 Apr 2022 [Bug fixes] * [jws] jws.Verify was ignoring the `b64` header when it was present in the protected headers ([#681](lestrrat-go/jwx#681)). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 v1.2.21 30 Mar 2022 [Bug fixes] * [jwk] RSA keys without p and q can now be parsed. Changelog Sourced from github.com/lestrrat-go/jwx's changelog. v1.2.25 23 May 2022 [Bug Fixes][Security] [jwe] An old bug from at least 7 years ago existed in handling AES-CBC unpadding, where the unpad operation might remove more bytes than necessary (#744) This affects all jwx code that is available before v2.0.2 and v1.2.25. v1.2.24 05 May 2022 [Security] Upgrade golang.org/x/crypto (#724) v1.2.23 13 Apr 2022 [Bug fixes] [jwk] jwk.AutoRefresh had a race condition when Configure() was called concurrently (#686) (It has been patched correctly, but we may come back to revisit the design choices in the near future) v1.2.22 08 Apr 2022 [Bug fixes] [jws] jws.Verify was ignoring the b64 header when it was present in the protected headers (#681). Now the following should work: jws.Sign(..., jws.WithDetachedPayload(payload)) // previously payload had to be base64 encoded jws.Verify(..., jws.WithDetachedPayload(payload)) (note: v2 branch was not affected) v1.2.21 30 Mar 2022 [Bug fixes] [jwk] RSA keys without p and q can now be parsed. Commits ad8c29d merge develop/v1 (#747) e38f677 Merge develop/v1 (#727) baba561 Merge branch 'develop/v1' into v1 8ff6c75 Update Changes ea97e8c Fix race in jwk.AutoRefresh (#686) f4701e1 Update Changes e831228 Fix jws.Verify not respecting the b64 header in the protected headers (#683) b66a2cb backport: Update golangci lint (#679) (#680) 4899c32 reword error dd9e4c4 Bump github.com/lestrrat-go/httpcc from 1.0.0 to 1.0.1 (#675) Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a56cfeb Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon Aug 15 14:50:56 2022 +0100 chore(deps): Bump github.com/spf13/viper from 1.10.1 to 1.12.0 (#360) Bumps github.com/spf13/viper from 1.10.1 to 1.12.0. Release notes Sourced from github.com/spf13/viper's releases. v1.12.0 This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding viper_yaml2 and viper_toml1 to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! What's Changed Exciting New Features 🎉 Add etcd3 support to remote by @sagikazarmark in spf13/viper#1356 Make YAML 3 the default by @sagikazarmark in spf13/viper#1357 Make TOML 2 the default by @sagikazarmark in spf13/viper#1358 Enhancements 🚀 chore: fix Error log calls in mergeMaps by @wwade in spf13/viper#1341 Add MustBindEnv by @meowfaceman in spf13/viper#1301 Dependency Updates ⬆️ build(deps): bump github/codeql-action from 1 to 2 by @dependabot in spf13/viper#1336 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by @dependabot in spf13/viper#1339 build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by @dependabot in spf13/viper#1332 build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by @dependabot in spf13/viper#1335 build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by @dependabot in spf13/viper#1338 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by @dependabot in spf13/viper#1344 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by @dependabot in spf13/viper#1343 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by @dependabot in spf13/viper#1349 New Contributors @meowfaceman made their first contribution in spf13/viper#1301 @wwade made their first contribution in spf13/viper#1341 Full Changelog: spf13/[email protected] v1.11.0 What's Changed Exciting New Features 🎉 Experimental yaml v3 library support by @sagikazarmark in spf13/viper#1273 Experimental toml v2 support by @sagikazarmark in spf13/viper#1274 Experimental logger by @sagikazarmark in spf13/viper#1275 Enhancements 🚀 Remove unnecessary operand by @steviebps in spf13/viper#1213 Improve encoding layer by @sagikazarmark in spf13/viper#1167 Allow merging configs with different types of leaf values by @illarion in spf13/viper#1181 Bug Fixes 🐛 Disable race detector on windows by @sagikazarmark in spf13/viper#1269 ... (truncated) Commits 4322cf2 feat: make toml2 the default 8d02999 feat: make yaml3 the default 7c35aa9 chore(deps): update yaml3 433821f feat: add etcd3 support to remote 2080d43 chore: update crypt da55858 chore: fix Error log calls in mergeMaps f50ce90 Add in MustBindEnv. 3b836e5 build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 5d65186 build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 9f85518 build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 Additional commits viewable in compare view Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot merge will merge this PR after your CI passes on it @dependabot squash and merge will squash and merge this PR after your CI passes on it @dependabot cancel merge will cancel a previously requested merge and block automerging @dependabot reopen will reopen this PR if it is closed @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Ankur Banerjee <[email protected]> commit a5aef25 Author: Ankur Banerjee <[email protected]> Date: Mon Aug 15 10:44:13 2022 +0100 build: Optimise Docker build (#365) commit 4517a19 Author: Andrew Nikitin <[email protected]> Date: Sat Aug 13 03:55:47 2022 +0300 ci: Add automated semantic release using Goreleaser (#357) Co-authored-by: Ankur Banerjee <[email protected]> commit 5a30740 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:53:06 2022 +0100 ci: Disable cleanup dry-run commit 3e8aea4 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:42:43 2022 +0100 ci: Fix linting error commit c335aba Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:38:00 2022 +0100 ci: Make workflow cleanup choices easier commit d89f496 Author: Ankur Banerjee <[email protected]> Date: Sat Aug 13 01:29:14 2022 +0100 ci: Cleanup old workflow runs (#364) * chore(deps): Bump goreleaser/goreleaser-action from 3 to 4 (#486) Bumps [goreleaser/goreleaser-action](https://github.com/goreleaser/goreleaser-action) from 3 to 4. - [Release notes](https://github.com/goreleaser/goreleaser-action/releases) - [Commits](goreleaser/goreleaser-action@v3...v4) --- updated-dependencies: - dependency-name: goreleaser/goreleaser-action dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * chore(deps): Bump bufbuild/buf-setup-action from 1.8.0 to 1.10.0 (#477) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.8.0 to 1.10.0. - [Release notes](https://github.com/bufbuild/buf-setup-action/releases) - [Commits](bufbuild/buf-setup-action@v1.8.0...v1.10.0) --- updated-dependencies: - dependency-name: bufbuild/buf-setup-action dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> * ci: Update PR title check (#463) Update pull-request.yml * fix: Error handling (#425) * Update go.mod * Bump package * Fix broken link * Fix protobuf breaking reference * Deactivate protobuf workflows * Change build runners * Don't wrap release * Update Dockerfile * Remove redundant set DID count * gofumpt Signed-off-by: dependabot[bot] <[email protected]> Signed-off-by: Andrew Nikitin <[email protected]> Co-authored-by: Ankur Banerjee <[email protected]> Co-authored-by: Jacob Gadikian <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Alexander Kolesov <[email protected]> Co-authored-by: abdulla-ashurov <[email protected]> Co-authored-by: Alexandr Kolesov <[email protected]> Co-authored-by: Tasos <[email protected]> Co-authored-by: Alexander Kolesov <[email protected]>
[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Type | Update | Change | |---|---|---|---| | [github.com/spf13/viper](https://github.com/spf13/viper) | require | minor | `v1.8.0` -> `v1.18.1` | | [github.com/spf13/viper](https://github.com/spf13/viper) | require | minor | `v1.17.0` -> `v1.18.1` | --- ### Release Notes <details> <summary>spf13/viper (github.com/spf13/viper)</summary> ### [`v1.18.1`](https://github.com/spf13/viper/releases/tag/v1.18.1) [Compare Source](https://github.com/spf13/viper/compare/v1.18.0...v1.18.1) <!-- Release notes generated using configuration in .github/release.yml at v1.18.1 --> #### What's Changed ##### Bug Fixes 🐛 - Merge missing struct keys inside UnmarshalExact by [@​krakowski](https://github.com/krakowski) in [spf13/viper#1704 **Full Changelog**: spf13/viper@v1.18.0...v1.18.1 ### [`v1.18.0`](https://github.com/spf13/viper/releases/tag/v1.18.0) [Compare Source](https://github.com/spf13/viper/compare/v1.17.0...v1.18.0) #### Major changes Highlighting some of the changes for better visibility. Please share your feedback in the Discussion forum. Thanks! ❤️ ##### `AutomaticEnv` works with `Unmarshal` Previously, environment variables that weren't bound manually or had no defaults could not be mapped by `Unmarshal`. (The problem is explained in details in this issue: [#​761](https://github.com/spf13/viper/issues/761)) [#​1429](https://github.com/spf13/viper/issues/1429) introduced a solution that solves that issue. #### What's Changed ##### Enhancements 🚀 - chore: rename files according to enabled build tags by [@​alexandear](https://github.com/alexandear) in [spf13/viper#1642 - test: replace ifs with asserts to simplify tests by [@​alexandear](https://github.com/alexandear) in [spf13/viper#1656 - ci: enable test shuffle and fix tests by [@​alexandear](https://github.com/alexandear) in [spf13/viper#1643 - fix: gocritic lint issues by [@​alexandear](https://github.com/alexandear) in [spf13/viper#1696 ##### Bug Fixes 🐛 - Implement viper.BindStruct for automatic unmarshalling from environment variables by [@​krakowski](https://github.com/krakowski) in [spf13/viper#1429 - fix isPathShadowedInFlatMap type cast bug by [@​linuxsong](https://github.com/linuxsong) in [spf13/viper#1585 ##### Dependency Updates ⬆️ - build(deps): bump github/codeql-action from 2.21.9 to 2.22.3 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1661 - build(deps): bump golang.org/x/net from 0.15.0 to 0.17.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1659 - build(deps): bump actions/checkout from 4.1.0 to 4.1.1 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1663 - build(deps): bump actions/github-script from 6.4.1 to 7.0.1 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1686 - build(deps): bump github/codeql-action from 2.22.3 to 2.22.8 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1688 - build(deps): bump github.com/spf13/afero from 1.10.0 to 1.11.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1692 - build(deps): bump actions/dependency-review-action from 3.1.0 to 3.1.4 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1690 - build(deps): bump cachix/install-nix-action from 23 to 24 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1689 - build(deps): bump github.com/nats-io/nkeys from 0.4.5 to 0.4.6 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1672 - build(deps): bump github.com/spf13/cast from 1.5.1 to 1.6.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1691 - build(deps): bump github.com/fsnotify/fsnotify from 1.6.0 to 1.7.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1668 - chore: update dependencies by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1694 - chore: update crypt by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1701 ##### Other Changes - Add info about multiple hosts for remote config by [@​KaymeKaydex](https://github.com/KaymeKaydex) in [spf13/viper#1684 - refactor: drop fsonitfy wrapper by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1693 - Note Get\* behavior on parse failure by [@​scop](https://github.com/scop) in [spf13/viper#1687 - fix: godot lint issues by [@​alexandear](https://github.com/alexandear) in [spf13/viper#1657 #### New Contributors - [@​KaymeKaydex](https://github.com/KaymeKaydex) made their first contribution in [spf13/viper#1684 - [@​krakowski](https://github.com/krakowski) made their first contribution in [spf13/viper#1429 - [@​linuxsong](https://github.com/linuxsong) made their first contribution in [spf13/viper#1585 **Full Changelog**: spf13/viper@v1.17.0...v1.18.0 ### [`v1.17.0`](https://github.com/spf13/viper/releases/tag/v1.17.0) [Compare Source](https://github.com/spf13/viper/compare/v1.16.0...v1.17.0) #### Major changes Highlighting some of the changes for better visibility. Please share your feedback in the Discussion forum. Thanks! ❤️ ##### Minimum Go version: 1.19 Viper now requires Go 1.19 This change ensures we can stay up to date with modern practices and dependencies. ##### `log/slog` support **\[BREAKING]** Viper [v1.11.0](https://github.com/spf13/viper/releases/tag/v1.11.0) added an experimental `Logger` interface to allow custom implementations (besides [jwalterweatherman](https://github.com/spf13/jwalterweatherman)). In addition, it also exposed an experimental `WithLogger` function allowing to set a custom logger. This release deprecates that interface in favor of [log/slog](https://pkg.go.dev/log/slog) released in Go 1.21. > \[!WARNING] > `WithLogger` accepts an [\*slog.Logger](https://pkg.go.dev/log/slog#Logger) from now on. To preserve backwards compatibility with older Go versions, prior to Go 1.21 Viper accepts a [\*golang.org/x/exp/slog.Logger](https://pkg.go.dev/golang.org/x/exp/slog#Logger). The experimental flag is removed. ##### New finder implementation **\[BREAKING]** As of this release, Viper uses a new library to look for files, called [locafero](https://github.com/sagikazarmark/locafero). The new library is better covered by tests and has been built from scratch as a general purpose file finder library. The implementation is experimental and is hidden behind a `finder` build tag. > \[!WARNING] > The `io/fs` based implementation (that used to be hidden behind a `finder` build tag) has been removed. #### What's Changed ##### Exciting New Features 🎉 - Add NATS support by [@​hooksie1](https://github.com/hooksie1) in [spf13/viper#1590 - Add slog support by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1627 ##### Enhancements 🚀 - chore: add local development environment using nix by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1572 - feat: add func GetEnvPrefix by [@​baruchiro](https://github.com/baruchiro) in [spf13/viper#1565 - Improve dev env by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1575 - fix: code optimization by [@​testwill](https://github.com/testwill) in [spf13/viper#1557 - test: remove not needed testutil.Setenv by [@​alexandear](https://github.com/alexandear) in [spf13/viper#1610 - new finder library based on afero by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1625 - refactor: make use of `strings.Cut` by [@​scop](https://github.com/scop) in [spf13/viper#1650 ##### Breaking Changes 🛠 - feat: drop support for Go 1.17 by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1574 ##### Dependency Updates ⬆️ - build(deps): bump mheap/github-action-required-labels from 4 to 5 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1563 - build(deps): bump github.com/stretchr/testify from 1.8.3 to 1.8.4 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1558 - build(deps): bump cachix/install-nix-action from 21 to 22 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1573 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.8 to 2.0.9 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1586 - chore: upgrade crypt by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1589 - build(deps): bump actions/checkout from 3.5.3 to 4.0.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1616 - build(deps): bump github/codeql-action from 2.21.2 to 2.21.5 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1615 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.9 to 2.1.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1614 - build(deps): bump actions/dependency-review-action from 3.0.6 to 3.0.8 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1605 - build(deps): bump golangci/golangci-lint-action from 3.6.0 to 3.7.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1604 - build(deps): bump actions/setup-go from 4.0.1 to 4.1.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1593 - build(deps): bump github.com/subosito/gotenv from 1.4.2 to 1.6.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1603 - build(deps): bump cachix/install-nix-action from 22 to 23 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1620 - chore(deps): update crypt by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1621 - build(deps): bump actions/dependency-review-action from 3.0.8 to 3.1.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1623 - Bump minimum Go version to 1.19 by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1626 - build(deps): bump github/codeql-action from 2.21.5 to 2.21.6 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1632 - build(deps): bump github/codeql-action from 2.21.6 to 2.21.7 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1634 - build(deps): bump actions/checkout from 4.0.0 to 4.1.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1641 - build(deps): bump github.com/spf13/afero from 1.9.5 to 1.10.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1640 - build(deps): bump github/codeql-action from 2.21.7 to 2.21.8 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1638 - build(deps): bump github/codeql-action from 2.21.8 to 2.21.9 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1648 - chore(deps): update crypt by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1652 ##### Other Changes - \[StepSecurity] ci: Harden GitHub Actions by [@​step-security-bot](https://github.com/step-security-bot) in [spf13/viper#1592 - Add Vitess to list of projects using Viper by [@​systay](https://github.com/systay) in [spf13/viper#1619 - docs: fix typos in comments by [@​alexandear](https://github.com/alexandear) in [spf13/viper#1609 - ci: add Go 1.21 to the test matrix by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1622 - Remove usages of deprecated io/ioutil; simplify viper tests by [@​alexandear](https://github.com/alexandear) in [spf13/viper#1631 - chore: remove deprecated build tags by [@​alexandear](https://github.com/alexandear) in [spf13/viper#1630 - refactor: replace 'interface{}' with 'any' by [@​alexandear](https://github.com/alexandear) in [spf13/viper#1646 - test: refactor asserts by [@​alexandear](https://github.com/alexandear) in [spf13/viper#1644 - docs: add set subset KV example by [@​yhliyr](https://github.com/yhliyr) in [spf13/viper#1647 - Make deps fixes by [@​bersace](https://github.com/bersace) in [spf13/viper#1628 #### New Contributors - [@​goldeneggg](https://github.com/goldeneggg) made their first contribution in [spf13/viper#1561 - [@​baruchiro](https://github.com/baruchiro) made their first contribution in [spf13/viper#1565 - [@​testwill](https://github.com/testwill) made their first contribution in [spf13/viper#1557 - [@​step-security-bot](https://github.com/step-security-bot) made their first contribution in [spf13/viper#1592 - [@​systay](https://github.com/systay) made their first contribution in [spf13/viper#1619 - [@​alexandear](https://github.com/alexandear) made their first contribution in [spf13/viper#1609 - [@​hooksie1](https://github.com/hooksie1) made their first contribution in [spf13/viper#1590 - [@​yhliyr](https://github.com/yhliyr) made their first contribution in [spf13/viper#1647 - [@​bersace](https://github.com/bersace) made their first contribution in [spf13/viper#1628 - [@​scop](https://github.com/scop) made their first contribution in [spf13/viper#1650 **Full Changelog**: spf13/viper@v1.16.0...v1.17.0 ### [`v1.16.0`](https://github.com/spf13/viper/releases/tag/v1.16.0) [Compare Source](https://github.com/spf13/viper/compare/v1.15.0...v1.16.0) <!-- Release notes generated using configuration in .github/release.yml at v1.16.0 --> #### What's Changed ##### Enhancements 🚀 - Sub parent inheritance by [@​TaylorOno](https://github.com/TaylorOno) in [spf13/viper#1056 - fix: fix typo by [@​yquansah](https://github.com/yquansah) in [spf13/viper#1523 - ci: add Go 1.20 to build matrix by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1506 - extend v.find() to handle stringToInt value types with stringToInt pflag [#​1435](https://github.com/spf13/viper/issues/1435) by [@​vorishirne](https://github.com/vorishirne) in [spf13/viper#1462 - add:viper: allow to disable internal log messages by [@​burgesQ](https://github.com/burgesQ) in [spf13/viper#1483 - Allow ConfigParseError to unwrap by [@​andig](https://github.com/andig) in [spf13/viper#1433 ##### Bug Fixes 🐛 - fix: time.Duration slice type conversion by [@​UrbanskiDawid](https://github.com/UrbanskiDawid) in [spf13/viper#1498 ##### Dependency Updates ⬆️ - build(deps): bump mheap/github-action-required-labels from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1533 - build(deps): bump actions/setup-go from 3 to 4 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1526 - build(deps): bump golang.org/x/net from 0.4.0 to 0.7.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1519 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.6 to 2.0.7 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1516 - build(deps): bump github.com/stretchr/testify from 1.8.1 to 1.8.2 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1515 - build(deps): bump github.com/spf13/afero from 1.9.3 to 1.9.5 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1518 - build(deps): bump github.com/sagikazarmark/crypt from 0.9.0 to 0.10.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1550 - build(deps): bump github.com/spf13/cast from 1.5.0 to 1.5.1 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1551 - build(deps): bump github.com/stretchr/testify from 1.8.2 to 1.8.3 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1553 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.7 to 2.0.8 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1555 ##### Other Changes - Update main image to better handle dark background by [@​Deleplace](https://github.com/Deleplace) in [spf13/viper#1532 #### New Contributors - [@​UrbanskiDawid](https://github.com/UrbanskiDawid) made their first contribution in [spf13/viper#1498 - [@​TaylorOno](https://github.com/TaylorOno) made their first contribution in [spf13/viper#1056 - [@​yquansah](https://github.com/yquansah) made their first contribution in [spf13/viper#1523 - [@​Azanul](https://github.com/Azanul) made their first contribution in [spf13/viper#1544 - [@​Deleplace](https://github.com/Deleplace) made their first contribution in [spf13/viper#1532 - [@​cfabianski](https://github.com/cfabianski) made their first contribution in [spf13/viper#1552 - [@​vorishirne](https://github.com/vorishirne) made their first contribution in [spf13/viper#1462 - [@​burgesQ](https://github.com/burgesQ) made their first contribution in [spf13/viper#1483 - [@​andig](https://github.com/andig) made their first contribution in [spf13/viper#1433 **Full Changelog**: spf13/viper@v1.15.0...v1.16.0 ### [`v1.15.0`](https://github.com/spf13/viper/releases/tag/v1.15.0) [Compare Source](https://github.com/spf13/viper/compare/v1.14.0...v1.15.0) <!-- Release notes generated using configuration in .github/release.yml at v1.15.0 --> #### What's Changed ##### Exciting New Features 🎉 - feat: add multiple endpoints support for remote by [@​mozartz](https://github.com/mozartz) in [spf13/viper#1464 ##### Enhancements 🚀 - Add DocBlock to WatchConfig by [@​glebik000](https://github.com/glebik000) in [spf13/viper#1467 ##### Breaking Changes 🛠 - Drop YAML v2 and TOML v1 by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1493 - Drop support for Go 1.16 by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1494 ##### Dependency Updates ⬆️ - build(deps): bump github.com/spf13/afero from 1.9.2 to 1.9.3 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1465 - build(deps): bump github.com/magiconair/properties from 1.8.6 to 1.8.7 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1475 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.5 to 2.0.6 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1466 - build(deps): bump mheap/github-action-required-labels from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1482 - build(deps): bump github.com/subosito/gotenv from 1.4.1 to 1.4.2 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1488 - build(deps): bump github.com/sagikazarmark/crypt from 0.8.0 to 0.9.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1490 #### New Contributors - [@​choar816](https://github.com/choar816) made their first contribution in [spf13/viper#1481 - [@​lol768](https://github.com/lol768) made their first contribution in [spf13/viper#1485 - [@​mozartz](https://github.com/mozartz) made their first contribution in [spf13/viper#1464 - [@​glebik000](https://github.com/glebik000) made their first contribution in [spf13/viper#1467 **Full Changelog**: spf13/viper@v1.14.0...v1.15.0 ### [`v1.14.0`](https://github.com/spf13/viper/releases/tag/v1.14.0) [Compare Source](https://github.com/spf13/viper/compare/v1.13.0...v1.14.0) <!-- Release notes generated using configuration in .github/release.yml at v1.14.0 --> #### What's Changed ##### Enhancements 🚀 - feat: make Viper compile on platforms unsupported by fsnotify by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1457 - Fsnotify improvements by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1458 - Disable watch on appengine by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1460 ##### Breaking Changes 🛠 - Drop support for Go 1.15 by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1428 ##### Dependency Updates ⬆️ - build(deps): bump github.com/spf13/afero from 1.8.2 to 1.9.2 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1406 - build(deps): bump github.com/sagikazarmark/crypt from 0.6.0 to 0.7.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1437 - build(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.1 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1453 - build(deps): bump github.com/fsnotify/fsnotify from 1.5.4 to 1.6.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1449 - chore: update crypt by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1461 **Full Changelog**: spf13/viper@v1.13.0...v1.14.0 ### [`v1.13.0`](https://github.com/spf13/viper/releases/tag/v1.13.0) [Compare Source](https://github.com/spf13/viper/compare/v1.12.0...v1.13.0) **Important:** This is the last release supporting Go 1.15. #### What's Changed ##### Exciting New Features 🎉 - Add etcd3 to supported remote providers by [@​franklinkim](https://github.com/franklinkim) in [spf13/viper#1371 ##### Enhancements 🚀 - Fix go-staticcheck failures (ST1005) by [@​mjmaisey](https://github.com/mjmaisey) in [spf13/viper#1373 - Use jsonc in markdown codeblocks for better readability by [@​HurSungYun](https://github.com/HurSungYun) in [spf13/viper#1393 - Add Go 1.19 support by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1424 - Adds support for uint16 with `GetUint16` by [@​oxisto](https://github.com/oxisto) in [spf13/viper#1405 - Add a DebugTo convenience funtion by [@​bcrochet](https://github.com/bcrochet) in [spf13/viper#1414 ##### Bug Fixes 🐛 - Recurse into arrays when converting keys to lowercase by [@​awrichar](https://github.com/awrichar) in [spf13/viper#1387 ##### Dependency Updates ⬆️ - build(deps): bump github.com/stretchr/testify from 1.7.1 to 1.7.2 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1374 - build(deps): bump github.com/subosito/gotenv from 1.3.0 to 1.4.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1375 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.1 to 2.0.2 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1378 - build(deps): bump gopkg.in/yaml.v3 from 3.0.0 to 3.0.1 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1360 - build(deps): bump github.com/stretchr/testify from 1.7.2 to 1.7.3 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1381 - build(deps): bump github.com/stretchr/testify from 1.7.3 to 1.7.4 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1384 - build(deps): bump mheap/github-action-required-labels from 1 to 2 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1383 - build(deps): bump github.com/stretchr/testify from 1.7.4 to 1.8.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1395 - build(deps): bump github.com/subosito/gotenv from 1.4.0 to 1.4.1 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1420 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.2 to 2.0.5 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1422 - build(deps): bump gopkg.in/ini.v1 from 1.66.4 to 1.67.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1412 #### New Contributors - [@​mjmaisey](https://github.com/mjmaisey) made their first contribution in [spf13/viper#1373 - [@​HurSungYun](https://github.com/HurSungYun) made their first contribution in [spf13/viper#1393 - [@​franklinkim](https://github.com/franklinkim) made their first contribution in [spf13/viper#1371 - [@​awrichar](https://github.com/awrichar) made their first contribution in [spf13/viper#1387 - [@​oxisto](https://github.com/oxisto) made their first contribution in [spf13/viper#1405 - [@​bcrochet](https://github.com/bcrochet) made their first contribution in [spf13/viper#1414 **Full Changelog**: spf13/viper@v1.12.0...v1.13.0 ### [`v1.12.0`](https://github.com/spf13/viper/releases/tag/v1.12.0) [Compare Source](https://github.com/spf13/viper/compare/v1.11.0...v1.12.0) This release makes YAML v3 and TOML v2 the default versions used for encoding. You can switch back to the old versions by adding `viper_yaml2` and `viper_toml1` to the build tags. Please note that YAML v2 and TOML v1 are considered deprecated from this release and may be removed in a future release. Please provide feedback in discussions and report bugs on the issue tracker. Thanks! <!-- Release notes generated using configuration in .github/release.yml at v1.12.0 --> #### What's Changed ##### Exciting New Features 🎉 - Add etcd3 support to remote by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1356 - Make YAML 3 the default by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1357 - Make TOML 2 the default by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1358 ##### Enhancements 🚀 - chore: fix Error log calls in mergeMaps by [@​wwade](https://github.com/wwade) in [spf13/viper#1341 - Add MustBindEnv by [@​meowfaceman](https://github.com/meowfaceman) in [spf13/viper#1301 ##### Dependency Updates ⬆️ - build(deps): bump github/codeql-action from 1 to 2 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1336 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.8 to 2.0.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1339 - build(deps): bump github.com/mitchellh/mapstructure from 1.4.3 to 1.5.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1332 - build(deps): bump github.com/pelletier/go-toml from 1.9.4 to 1.9.5 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1335 - build(deps): bump github.com/fsnotify/fsnotify from 1.5.1 to 1.5.4 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1338 - build(deps): bump github.com/spf13/cast from 1.4.1 to 1.5.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1344 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0 to 2.0.1 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1343 - build(deps): bump github.com/subosito/gotenv from 1.2.0 to 1.3.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1349 #### New Contributors - [@​meowfaceman](https://github.com/meowfaceman) made their first contribution in [spf13/viper#1301 - [@​wwade](https://github.com/wwade) made their first contribution in [spf13/viper#1341 **Full Changelog**: spf13/viper@v1.11.0...v1.12.0 ### [`v1.11.0`](https://github.com/spf13/viper/releases/tag/v1.11.0) [Compare Source](https://github.com/spf13/viper/compare/v1.10.1...v1.11.0) <!-- Release notes generated using configuration in .github/release.yml at v1.11.0 --> #### What's Changed ##### Exciting New Features 🎉 - Experimental yaml v3 library support by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1273 - Experimental toml v2 support by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1274 - Experimental logger by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1275 ##### Enhancements 🚀 - Remove unnecessary operand by [@​steviebps](https://github.com/steviebps) in [spf13/viper#1213 - Improve encoding layer by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1167 - Allow merging configs with different types of leaf values by [@​illarion](https://github.com/illarion) in [spf13/viper#1181 ##### Bug Fixes 🐛 - Disable race detector on windows by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1269 ##### Breaking Changes 🛠 - Drop Go 1.14 support by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1327 ##### Dependency Updates ⬆️ - build(deps): bump github.com/spf13/afero from 1.6.0 to 1.7.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1265 - build(deps): bump github.com/spf13/afero from 1.7.0 to 1.7.1 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1271 - build(deps): bump github.com/spf13/afero from 1.7.1 to 1.8.0 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1281 - build(deps): bump gopkg.in/ini.v1 from 1.66.2 to 1.66.3 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1287 - build(deps): bump github.com/spf13/afero from 1.8.0 to 1.8.1 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1291 - build(deps): bump actions/github-script from 5 to 6 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1295 - build(deps): bump actions/checkout from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1304 - build(deps): bump github.com/magiconair/properties from 1.8.5 to 1.8.6 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1299 - build(deps): bump gopkg.in/ini.v1 from 1.66.3 to 1.66.4 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1293 - build(deps): bump github.com/spf13/afero from 1.8.1 to 1.8.2 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1311 - build(deps): bump actions/setup-go from 2 to 3 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1319 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.6 to 2.0.0-beta.7 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1320 - build(deps): bump github.com/pelletier/go-toml/v2 from 2.0.0-beta.7 to 2.0.0-beta.8 by [@​dependabot](https://github.com/dependabot) in [spf13/viper#1322 - Update crypt by [@​sagikazarmark](https://github.com/sagikazarmark) in [spf13/viper#1325 #### New Contributors - [@​steviebps](https://github.com/steviebps) made their first contribution in [spf13/viper#1213 - [@​illarion](https://github.com/illarion) made their first contribution in [spf13/viper#1181 **Full Changelog**: spf13/viper@v1.10.1...v1.11.0 ### [`v1.10.1`](https://github.com/spf13/viper/releases/tag/v1.10.1) [Compare Source](https://github.com/spf13/viper/compare/v1.10.0...v1.10.1) This is a maintenance release upgrading the Consul dependency fixing CVEs. ### [`v1.10.0`](https://github.com/spf13/viper/releases/tag/v1.10.0) [Compare Source](https://github.com/spf13/viper/compare/v1.9.0...v1.10.0) This is a maintenance release primarily containing minor fixes and improvements. #### Changes ##### Added - Experimental finder based on io/fs - Tests are executed on Windows - Tests are executed on Go 1.17 - Logger interface to decouple Viper from JWW *** In addition to the above changes, this release comes with minor improvements, documentation changes an dependency updates. **Many thanks to everyone who contributed to this release!** ### [`v1.9.0`](https://github.com/spf13/viper/releases/tag/v1.9.0) [Compare Source](https://github.com/spf13/viper/compare/v1.8.1...v1.9.0) This is a maintenance release primarily containing minor fixes and improvements. #### Changes ##### Added - Experimental new encoding layer - Add support for `tfvars` files ##### Fixed - Writing hidden files with no extension - `InConfig` processing paths *** In addition to the above changes, this release comes with tons of minor improvements, documentation changes an dependency updates. **Many thanks to everyone who contributed to this release!** ### [`v1.8.1`](https://github.com/spf13/viper/releases/tag/v1.8.1) [Compare Source](https://github.com/spf13/viper/compare/v1.8.0...v1.8.1) This patch releases fixes two minor issues: - Replace `%s` with `%w` when wrapping errors - Fix `pflag.StringArray` processing </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about these updates again. --- - [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://developer.mend.io/github/PingCAP-QE/ee-apps). <!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44Ny4yIiwidXBkYXRlZEluVmVyIjoiMzcuODcuMiIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==--> Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
This is an attempt to further improve the encoding layer specified in #888 and introduced in #986.
Major changes introduced by this PR:
map[string]interface{}
instead of justinterface{}
. The rationale behind that change is that the encoding library is supposed to be used with Viper (it's not a generic library), so it's okay to make the interface Viper specific.The PR also adds some basic tests to the existing encoder implementations.
A couple notes and concerns regarding this change:
Both INI and Java properties require the key delimiter to do some key mutation magic. It's required because both file formats contain key-value pairs (unlike the more common formats like YAML or JSON where you can have more nested configurations). As a result, the codecs have to be instantiated per Viper instance (since the key delimiter can be changed on instantiation).
In Viper 2 this should be a separate configuration of the codec, not tied to Viper's internal key delimiter config to allow storing keys in different formats.
Another problem introduced by the Java properties codec is that it's actually stateful: Viper saves the properties structure so it can write back properties files preserving comments and order. This is problematic, because the interface itself is designed for stateless codec instances.
For Viper 2 I think we should drop this feature, because it makes things a lot more complicated. We can hack things around for Viper 1 (eg. create a codec for Viper 1 specifically or make statefullness optional). I can't think of any viable alternative than dropping this feature for Java props. It's not like the most actively used file format and we want to discourage saving config from Viper anyway.
To Do
Java properties will probably have to be added back to Viper, since codec registries can be reset. Not sure if it's a problem though.No need to reset codecs (for now).Misc
Fixes #923