Skip to content

Bump the production-dependencies group across 1 directory with 17 updates - #5

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/production-dependencies-94f0beea5b
Closed

Bump the production-dependencies group across 1 directory with 17 updates#5
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/production-dependencies-94f0beea5b

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github May 29, 2024 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the production-dependencies group with 14 updates in the / directory:

Package From To
cuelang.org/go 0.7.0 0.8.2
github.com/cenkalti/backoff/v4 4.2.1 4.3.0
github.com/fatih/color 1.16.0 1.17.0
github.com/golang-jwt/jwt/v5 5.2.0 5.2.1
github.com/itchyny/gojq 0.12.14 0.12.15
github.com/klauspost/compress 1.17.7 1.17.8
github.com/linkedin/goavro/v2 2.12.0 2.13.0
github.com/matoous/go-nanoid/v2 2.0.0 2.1.0
github.com/microcosm-cc/bluemonday 1.0.25 1.0.26
github.com/rickb777/date 1.20.5 1.20.6
github.com/urfave/cli/v2 2.27.1 2.27.2
go.opentelemetry.io/otel 1.24.0 1.27.0
golang.org/x/crypto 0.21.0 0.23.0
golang.org/x/sync 0.6.0 0.7.0

Updates cuelang.org/go from 0.7.0 to 0.8.2

Updates github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0

Commits
  • 720b789 remove travis badge from readme
  • a83af7f feat(backoff): Add functional options for ExponentialBackOff Closes #136
  • See full diff in compare view

Updates github.com/fatih/color from 1.16.0 to 1.17.0

Release notes

Sourced from github.com/fatih/color's releases.

v1.17.0

What's Changed

New Contributors

Full Changelog: fatih/color@v1.16.0...v1.17.0

Commits
  • b6598b1 Merge pull request #228 from klauspost/fix-println-issue-218
  • 00b1811 Fix multi-parameter println spacing
  • 04994a8 Merge pull request #224 from fatih/dependabot/go_modules/golang.org/x/sys-0.18.0
  • 7526cad Merge branch 'main' into dependabot/go_modules/golang.org/x/sys-0.18.0
  • 8d058ca Merge pull request #222 from fatih/ci-updates
  • 2ac809f Bump golang.org/x/sys from 0.17.0 to 0.18.0
  • 51a7bbf ci: update Go and Staticcheck versions
  • 799c49c Merge pull request #217 from fatih/dependabot/github_actions/actions/setup-go-5
  • f8e0ec9 Merge branch 'main' into dependabot/github_actions/actions/setup-go-5
  • 298abd8 Merge pull request #221 from fatih/dependabot/go_modules/golang.org/x/sys-0.17.0
  • Additional commits viewable in compare view

Updates github.com/golang-jwt/jwt/v5 from 5.2.0 to 5.2.1

Release notes

Sourced from github.com/golang-jwt/jwt/v5's releases.

v5.2.1

What's Changed

New Contributors

Full Changelog: golang-jwt/jwt@v5.2.0...v5.2.1

Commits

Updates github.com/itchyny/gojq from 0.12.14 to 0.12.15

Release notes

Sourced from github.com/itchyny/gojq's releases.

Release v0.12.15

  • implement ltrim, rtrim, and trim functions
  • implement gojq.ParseError for getting the offset and token of query parsing error
  • implement gojq.HaltError for detecting halt errors and stopping outer iteration
  • fix object construction with duplicate keys ({x:0,y:1} | {a:.x,a:.y})
  • fix halt and halt_error functions to stop the command execution immediately
  • fix variable scope of binding syntax ("a" as $v | def f: $v; "b" as $v | f)
  • fix pre-defined variables to be available in initial modules ($ARGS in ~/.jq)
  • fix ltrimstr and rtrimstr functions to emit error on non-string input
  • fix nearbyint and rint functions to round ties to even
  • improve parser to allow reduce, foreach, if, try-catch syntax as object values
  • remove pow10 in favor of exp10, define scalbn and scalbln by ldexp
Changelog

Sourced from github.com/itchyny/gojq's changelog.

v0.12.15 (2024-04-01)

  • implement ltrim, rtrim, and trim functions
  • implement gojq.ParseError for getting the offset and token of query parsing error
  • implement gojq.HaltError for detecting halt errors and stopping outer iteration
  • fix object construction with duplicate keys ({x:0,y:1} | {a:.x,a:.y})
  • fix halt and halt_error functions to stop the command execution immediately
  • fix variable scope of binding syntax ("a" as $v | def f: $v; "b" as $v | f)
  • fix pre-defined variables to be available in initial modules ($ARGS in ~/.jq)
  • fix ltrimstr and rtrimstr functions to emit error on non-string input
  • fix nearbyint and rint functions to round ties to even
  • improve parser to allow reduce, foreach, if, try-catch syntax as object values
  • remove pow10 in favor of exp10, define scalbn and scalbln by ldexp
Commits
  • ca9fd97 bump up version to 0.12.15
  • 3b43597 update CHANGELOG.md for v0.12.15
  • 88cca90 update jq differences to clarify regular expression differences
  • 79e6f53 add document comments to methods of HaltError
  • 13da5a1 login to Docker registries only when pushing a tag
  • e7e015b update dependencies
  • 2cc65b6 improve .gitattributes to mark generated files
  • bbbbe84 export HaltError struct type not interface
  • c8171c6 align caret in error messages using width specifier
  • 57cf553 move Parse to query.go to enable document comments
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.17.7 to 1.17.8

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.8

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.7...v1.17.8

Commits

Updates github.com/linkedin/goavro/v2 from 2.12.0 to 2.13.0

Release notes

Sourced from github.com/linkedin/goavro/v2's releases.

Release to expose underlying TypeName in Codec

This release updates the Codec type to surface the underlying typeName via a public API

  • Adds the TypeName method to Codec to expose the underlying type name outside the goavro package scope
  • Adds the ShortName method to Name to expose the short name (i.e. record name excluding classpath) as a public method

Ref. PR: linkedin/goavro#285 by @​mittal-aashay

Commits
  • d517b19 Merge pull request #285 from mittal-aashay/master
  • 3cdeb7c lint fix II
  • 36b6d31 Lint fix
  • caf1f15 feat(goavro) Adding method to return typename associated with Codec
  • 8eb9f0e Merge pull request #260 from xmcqueen/master
  • 6649606 fixed dangling link to gogen-avro per recommendation
  • See full diff in compare view

Updates github.com/matoous/go-nanoid/v2 from 2.0.0 to 2.1.0

Release notes

Sourced from github.com/matoous/go-nanoid/v2's releases.

v2.1.0

Last version of go-nanoid drops support for older Go versions. From now on we will maintain support for last 3 major versions (that is, right now the oldest supported version is v1.20). Other than that, a few small updates and dependency bumps, see changelog for more details.

What's Changed

New Contributors

Full Changelog: matoous/go-nanoid@v1.5.0...v2.1.0

Commits
  • df99abc fix(docs): readme CI badge
  • 2e2a1c4 Bump github.com/stretchr/testify from 1.7.0 to 1.9.0 (#51)
  • 6a21e72 Bump actions/setup-go from 2 to 5 (#52)
  • b55fea2 feat: more ci updates
  • e49a925 chore: automatic dependency updates
  • 4ad88ca feat: bump go version to 1.20
  • 91ced39 feat(docs): mention second implementation
  • b0c529d chore(deps): update actions/checkout action to v2
  • b9a7df5 chore(deps): update actions/setup-go action to v2
  • b658bf4 Add renovate.json
  • Additional commits viewable in compare view

Updates github.com/microcosm-cc/bluemonday from 1.0.25 to 1.0.26

Release notes

Sourced from github.com/microcosm-cc/bluemonday's releases.

Update golang.org/x/net to latest and force latest version

Bumping version and ensuring latest golang.org/x/net as the HTTP rapid reset is triggering primitive vuln scanners, we do not implement a HTTP2 server and are not vulnerable but a minor bump can still help reduce noise for those searching for what they need to upgrade and patch.

Nothing else is in this release aside from the dependency updates and some staticcheck messages being resolved that should not modify behaviour.

Commits
  • 0eb99d2 Update go.mod to force golang.org/x/net to latest
  • 162f8e5 Merge pull request #193 from microcosm-cc/buro9/update_deps
  • a50ca5f Update deps and resolve staticcheck messages
  • c9ef7b1 Hacktober warning
  • c0ab8c9 Merge pull request #186 from microcosm-cc/dependabot/go_modules/golang.org/x/...
  • fdaa434 Bump golang.org/x/net from 0.12.0 to 0.14.0
  • See full diff in compare view

Updates github.com/rickb777/date from 1.20.5 to 1.20.6

Commits

Updates github.com/urfave/cli/v2 from 2.27.1 to 2.27.2

Release notes

Sourced from github.com/urfave/cli/v2's releases.

v2.27.2

What's Changed

New Contributors

Full Changelog: urfave/cli@v2.27.1...v2.27.2

Commits
  • a1a099b Merge pull request #1888 from urfave/v2-maint-deps-up
  • 9b5850b Update dependencies, actions steps, and usage for v2-maint
  • 67566bb Merge pull request #1872 from edeustua/v2-maint
  • fa2b127 fix tests
  • 427677a fix: Fix repeated [arguments...] in usage template
  • 8728c19 Merge pull request #1868 from dearchap/issue_1860
  • 64b40d2 Merge branch 'v2-maint' into issue_1860
  • 09c3974 Merge pull request #1867 from dearchap/issue_1866
  • 7b1f820 Add more tests
  • 7d74b97 Fix:(issue_1860) Remove hidden flags from flag categories
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel from 1.24.0 to 1.27.0

Changelog

Sourced from go.opentelemetry.io/otel's changelog.

[1.27.0/0.49.0/0.3.0] 2024-05-21

Added

  • Add example for go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#5242)
  • Add RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest to facilitate testing exporter and processor implementations. (#5258)
  • Add RecordFactory in go.opentelemetry.io/otel/log/logtest to facilitate testing bridge implementations. (#5263)
  • The count of dropped records from the BatchProcessor in go.opentelemetry.io/otel/sdk/log is logged. (#5276)
  • Add metrics in the otel-collector example. (#5283)
  • Add the synchronous gauge instrument to go.opentelemetry.io/otel/metric. (#5304)
    • An int64 or float64 synchronous gauge instrument can now be created from a Meter.
    • All implementations of the API (go.opentelemetry.io/otel/metric/noop, go.opentelemetry.io/otel/sdk/metric) are updated to support this instrument.
  • Add logs to go.opentelemetry.io/otel/example/dice. (#5349)

Changed

  • The Shutdown method of Exporter in go.opentelemetry.io/otel/exporters/stdout/stdouttrace ignores the context cancellation and always returns nil. (#5189)
  • The ForceFlush and Shutdown methods of the exporter returned by New in go.opentelemetry.io/otel/exporters/stdout/stdoutmetric ignore the context cancellation and always return nil. (#5189)
  • Apply the value length limits to Record attributes in go.opentelemetry.io/otel/sdk/log. (#5230)
  • De-duplicate map attributes added to a Record in go.opentelemetry.io/otel/sdk/log. (#5230)
  • go.opentelemetry.io/otel/exporters/stdout/stdoutlog won't print timestamps when WithoutTimestamps option is set. (#5241)
  • The go.opentelemetry.io/otel/exporters/stdout/stdoutlog exporter won't print AttributeValueLengthLimit and AttributeCountLimit fields now, instead it prints the DroppedAttributes field. (#5272)
  • Improved performance in the Stringer implementation of go.opentelemetry.io/otel/baggage.Member by reducing the number of allocations. (#5286)
  • Set the start time for last-value aggregates in go.opentelemetry.io/otel/sdk/metric. (#5305)
  • The Span in go.opentelemetry.io/otel/sdk/trace will record links without span context if either non-empty TraceState or attributes are provided. (#5315)
  • Upgrade all dependencies of go.opentelemetry.io/otel/semconv/v1.24.0 to go.opentelemetry.io/otel/semconv/v1.25.0. (#5374)

Fixed

  • Comparison of unordered maps for go.opentelemetry.io/otel/log.KeyValue and go.opentelemetry.io/otel/log.Value. (#5306)
  • Fix the empty output of go.opentelemetry.io/otel/log.Value in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#5311)
  • Split the behavior of Recorder in go.opentelemetry.io/otel/log/logtest so it behaves as a LoggerProvider only. (#5365)
  • Fix wrong package name of the error message when parsing endpoint URL in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5371)
  • Identify the Logger returned from the global LoggerProvider in go.opentelemetry.io/otel/log/global with its schema URL. (#5375)

[1.26.0/0.48.0/0.2.0-alpha] 2024-04-24

Added

  • Add Recorder in go.opentelemetry.io/otel/log/logtest to facilitate testing the log bridge implementations. (#5134)
  • Add span flags to OTLP spans and links exported by go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#5194)
  • Make the initial alpha release of go.opentelemetry.io/otel/sdk/log. This new module contains the Go implementation of the OpenTelemetry Logs SDK. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • Make the initial alpha release of go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. This new module contains an OTLP exporter that transmits log telemetry using HTTP. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • Make the initial alpha release of go.opentelemetry.io/otel/exporters/stdout/stdoutlog.

... (truncated)

Commits
  • 5661ff0 Release v1.27.0/v0.49.0/v0.3.0 (#5392)
  • 0d3dddc Fix exported instrument kind const value change (#5385)
  • 7aae7a8 chore(deps): update benchmark-action/github-action-benchmark action to v1.20....
  • 8c3120f chore(deps): update module google.golang.org/genproto/googleapis/api to v0.0....
  • d55658e chore(deps): update codecov/codecov-action action to v4.4.1 (#5387)
  • 49c866f fix(deps): update module github.com/golangci/golangci-lint to v1.58.2 (#5382)
  • 999c6a0 Update all semconv use to v1.25.0 (#5374)
  • 14441ae Identify logger with schemaURL in global logger provider (#5375)
  • ebd0ade Split log/logtest into a recorder and a logger (#5365)
  • 0d1e77c Fix package prefix of error in otlploghttp (#5371)
  • Additional commits viewable in compare view

Updates go.opentelemetry.io/otel/trace from 1.24.0 to 1.27.0

Changelog

Sourced from go.opentelemetry.io/otel/trace's changelog.

[1.27.0/0.49.0/0.3.0] 2024-05-21

Added

  • Add example for go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#5242)
  • Add RecordFactory in go.opentelemetry.io/otel/sdk/log/logtest to facilitate testing exporter and processor implementations. (#5258)
  • Add RecordFactory in go.opentelemetry.io/otel/log/logtest to facilitate testing bridge implementations. (#5263)
  • The count of dropped records from the BatchProcessor in go.opentelemetry.io/otel/sdk/log is logged. (#5276)
  • Add metrics in the otel-collector example. (#5283)
  • Add the synchronous gauge instrument to go.opentelemetry.io/otel/metric. (#5304)
    • An int64 or float64 synchronous gauge instrument can now be created from a Meter.
    • All implementations of the API (go.opentelemetry.io/otel/metric/noop, go.opentelemetry.io/otel/sdk/metric) are updated to support this instrument.
  • Add logs to go.opentelemetry.io/otel/example/dice. (#5349)

Changed

  • The Shutdown method of Exporter in go.opentelemetry.io/otel/exporters/stdout/stdouttrace ignores the context cancellation and always returns nil. (#5189)
  • The ForceFlush and Shutdown methods of the exporter returned by New in go.opentelemetry.io/otel/exporters/stdout/stdoutmetric ignore the context cancellation and always return nil. (#5189)
  • Apply the value length limits to Record attributes in go.opentelemetry.io/otel/sdk/log. (#5230)
  • De-duplicate map attributes added to a Record in go.opentelemetry.io/otel/sdk/log. (#5230)
  • go.opentelemetry.io/otel/exporters/stdout/stdoutlog won't print timestamps when WithoutTimestamps option is set. (#5241)
  • The go.opentelemetry.io/otel/exporters/stdout/stdoutlog exporter won't print AttributeValueLengthLimit and AttributeCountLimit fields now, instead it prints the DroppedAttributes field. (#5272)
  • Improved performance in the Stringer implementation of go.opentelemetry.io/otel/baggage.Member by reducing the number of allocations. (#5286)
  • Set the start time for last-value aggregates in go.opentelemetry.io/otel/sdk/metric. (#5305)
  • The Span in go.opentelemetry.io/otel/sdk/trace will record links without span context if either non-empty TraceState or attributes are provided. (#5315)
  • Upgrade all dependencies of go.opentelemetry.io/otel/semconv/v1.24.0 to go.opentelemetry.io/otel/semconv/v1.25.0. (#5374)

Fixed

  • Comparison of unordered maps for go.opentelemetry.io/otel/log.KeyValue and go.opentelemetry.io/otel/log.Value. (#5306)
  • Fix the empty output of go.opentelemetry.io/otel/log.Value in go.opentelemetry.io/otel/exporters/stdout/stdoutlog. (#5311)
  • Split the behavior of Recorder in go.opentelemetry.io/otel/log/logtest so it behaves as a LoggerProvider only. (#5365)
  • Fix wrong package name of the error message when parsing endpoint URL in go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. (#5371)
  • Identify the Logger returned from the global LoggerProvider in go.opentelemetry.io/otel/log/global with its schema URL. (#5375)

[1.26.0/0.48.0/0.2.0-alpha] 2024-04-24

Added

  • Add Recorder in go.opentelemetry.io/otel/log/logtest to facilitate testing the log bridge implementations. (#5134)
  • Add span flags to OTLP spans and links exported by go.opentelemetry.io/otel/exporters/otlp/otlptrace. (#5194)
  • Make the initial alpha release of go.opentelemetry.io/otel/sdk/log. This new module contains the Go implementation of the OpenTelemetry Logs SDK. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • Make the initial alpha release of go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp. This new module contains an OTLP exporter that transmits log telemetry using HTTP. This module is unstable and breaking changes may be introduced. See our versioning policy for more information about these stability guarantees. (#5240)
  • Make the initial alpha release of go.opentelemetry.io/otel/exporters/stdout/stdoutlog.

... (truncated)

Commits
  • 5661ff0 Release v1.27.0/v0.49.0/v0.3.0 (#5392)
  • 0d3dddc Fix exported instrument kind const value change (#5385)
  • 7aae7a8 chore(deps): update benchmark-action/github-action-benchmark action to v1.20....
  • 8c3120f chore(deps): update module google.golang.org/genproto/googleapis/api to v0.0....
  • d55658e chore(deps): update codecov/codecov-action action to v4.4.1 (#5387)
  • 49c866f fix(deps): update module github.com/golangci/golangci-lint to v1.58.2 (#5382)
  • 999c6a0 Update all semconv use to v1.25.0 (#5374)
  • 14441ae Identify logger with schemaURL in global logger provider (#5375)
  • ebd0ade Split log/logtest into a recorder and a logger (#5365)
  • 0d1e77c Fix package prefix of error in otlploghttp (#5371)
  • Additional commits viewable in compare view

Updates golang.org/x/crypto from 0.21.0 to 0.23.0

Commits
  • 905d78a go.mod: update golang.org/x dependencies
  • ebb717d ssh: validate key type in SSH_MSG_USERAUTH_PK_OK response
  • 0da2a6a openpgp: fix function name in comment
  • 5defcc1 sha3: fix Sum results for SHAKE functions on s390x
  • d042a39 go.mod: update golang.org/x dependencies
  • b92bf94 ssh: respect MaxAuthTries also for "none" auth attempts
  • 6f79b5a ssh: add server side multi-step authentication
  • 8d0d405 x/crypto/chacha20: cleanup chacha_ppc64le.s
  • b91329d all: remove redundant words in comments and fix some typos
  • See full diff in compare view

Updates golang.org/x/oauth2 from 0.17.0 to 0.18.0

Commits
  • 85231f9 go.mod: update golang.org/x dependencies
  • 34a7afa google/externalaccount: add Config.UniverseDomain
  • 95bec95 google/externalaccount: moves externalaccount package out of internal and exp...
  • See full diff in compare view

Updates golang.org/x/sync from 0.6.0 to 0.7.0

Commits

Updates golang.org/x/text from 0.14.0 to 0.15.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
Bump the production-dependencies group across 1 directory with 17 upd…
91573e5 
…ates

Bumps the production-dependencies group with 14 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| cuelang.org/go | `0.7.0` | `0.8.2` |
| [github.com/cenkalti/backoff/v4](https://github.com/cenkalti/backoff) | `4.2.1` | `4.3.0` |
| [github.com/fatih/color](https://github.com/fatih/color) | `1.16.0` | `1.17.0` |
| [github.com/golang-jwt/jwt/v5](https://github.com/golang-jwt/jwt) | `5.2.0` | `5.2.1` |
| [github.com/itchyny/gojq](https://github.com/itchyny/gojq) | `0.12.14` | `0.12.15` |
| [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.7` | `1.17.8` |
| [github.com/linkedin/goavro/v2](https://github.com/linkedin/goavro) | `2.12.0` | `2.13.0` |
| [github.com/matoous/go-nanoid/v2](https://github.com/matoous/go-nanoid) | `2.0.0` | `2.1.0` |
| [github.com/microcosm-cc/bluemonday](https://github.com/microcosm-cc/bluemonday) | `1.0.25` | `1.0.26` |
| [github.com/rickb777/date](https://github.com/rickb777/date) | `1.20.5` | `1.20.6` |
| [github.com/urfave/cli/v2](https://github.com/urfave/cli) | `2.27.1` | `2.27.2` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.24.0` | `1.27.0` |
| [golang.org/x/crypto](https://github.com/golang/crypto) | `0.21.0` | `0.23.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.6.0` | `0.7.0` |



Updates `cuelang.org/go` from 0.7.0 to 0.8.2

Updates `github.com/cenkalti/backoff/v4` from 4.2.1 to 4.3.0
- [Commits](cenkalti/backoff@v4.2.1...v4.3.0)

Updates `github.com/fatih/color` from 1.16.0 to 1.17.0
- [Release notes](https://github.com/fatih/color/releases)
- [Commits](fatih/color@v1.16.0...v1.17.0)

Updates `github.com/golang-jwt/jwt/v5` from 5.2.0 to 5.2.1
- [Release notes](https://github.com/golang-jwt/jwt/releases)
- [Changelog](https://github.com/golang-jwt/jwt/blob/main/VERSION_HISTORY.md)
- [Commits](golang-jwt/jwt@v5.2.0...v5.2.1)

Updates `github.com/itchyny/gojq` from 0.12.14 to 0.12.15
- [Release notes](https://github.com/itchyny/gojq/releases)
- [Changelog](https://github.com/itchyny/gojq/blob/main/CHANGELOG.md)
- [Commits](itchyny/gojq@v0.12.14...v0.12.15)

Updates `github.com/klauspost/compress` from 1.17.7 to 1.17.8
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.7...v1.17.8)

Updates `github.com/linkedin/goavro/v2` from 2.12.0 to 2.13.0
- [Release notes](https://github.com/linkedin/goavro/releases)
- [Changelog](https://github.com/linkedin/goavro/blob/master/debug_release.go)
- [Commits](linkedin/goavro@v2.12...v2.13.0)

Updates `github.com/matoous/go-nanoid/v2` from 2.0.0 to 2.1.0
- [Release notes](https://github.com/matoous/go-nanoid/releases)
- [Commits](matoous/go-nanoid@v2.0.0...v2.1.0)

Updates `github.com/microcosm-cc/bluemonday` from 1.0.25 to 1.0.26
- [Release notes](https://github.com/microcosm-cc/bluemonday/releases)
- [Commits](microcosm-cc/bluemonday@v1.0.25...v1.0.26)

Updates `github.com/rickb777/date` from 1.20.5 to 1.20.6
- [Release notes](https://github.com/rickb777/date/releases)
- [Commits](rickb777/date@v1.20.5...v1.20.6)

Updates `github.com/urfave/cli/v2` from 2.27.1 to 2.27.2
- [Release notes](https://github.com/urfave/cli/releases)
- [Changelog](https://github.com/urfave/cli/blob/main/docs/CHANGELOG.md)
- [Commits](urfave/cli@v2.27.1...v2.27.2)

Updates `go.opentelemetry.io/otel` from 1.24.0 to 1.27.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.24.0...v1.27.0)

Updates `go.opentelemetry.io/otel/trace` from 1.24.0 to 1.27.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.24.0...v1.27.0)

Updates `golang.org/x/crypto` from 0.21.0 to 0.23.0
- [Commits](golang/crypto@v0.21.0...v0.23.0)

Updates `golang.org/x/oauth2` from 0.17.0 to 0.18.0
- [Commits](golang/oauth2@v0.17.0...v0.18.0)

Updates `golang.org/x/sync` from 0.6.0 to 0.7.0
- [Commits](golang/sync@v0.6.0...v0.7.0)

Updates `golang.org/x/text` from 0.14.0 to 0.15.0
- [Release notes](https://github.com/golang/text/releases)
- [Commits](golang/text@v0.14.0...v0.15.0)

---
updated-dependencies:
- dependency-name: cuelang.org/go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/cenkalti/backoff/v4
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/fatih/color
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/golang-jwt/jwt/v5
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/itchyny/gojq
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/linkedin/goavro/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/matoous/go-nanoid/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/microcosm-cc/bluemonday
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/rickb777/date
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/urfave/cli/v2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/crypto
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/sync
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/text
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels May 29, 2024
@dependabot @github

dependabot Bot commented on behalf of github May 29, 2024

Copy link
Copy Markdown
Contributor Author

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot Bot closed this May 29, 2024
@dependabot
dependabot Bot deleted the dependabot/go_modules/production-dependencies-94f0beea5b branch May 29, 2024 14:05
Jeffail added a commit that referenced this pull request Feb 27, 2026
@Jeffail
blobl(v2): Address review items 1-8
f9af939 
- #1: Void is now an error in map_array/map_object (must return a value)
- #2: Variable path assignment defined with output-like semantics and COW
- #3: Namespace calls use :: syntax to eliminate grammar ambiguity
- #4: output = input copy semantics explicitly specified as COW
- #5: bytes + bytes defined as concatenation
- #6: Unary minus + method call precedence trap documented
- #7: New variables in statement blocks are block-scoped (compile-time error)
- #8: Maps described as "isolated" rather than "pure"

Updated REVIEW.md to remove resolved items and renumber remaining.
Jeffail added a commit that referenced this pull request May 1, 2026
@Jeffail
blobl(v2): Address review items 1-8
5a6a505 
- #1: Void is now an error in map_array/map_object (must return a value)
- #2: Variable path assignment defined with output-like semantics and COW
- #3: Namespace calls use :: syntax to eliminate grammar ambiguity
- #4: output = input copy semantics explicitly specified as COW
- #5: bytes + bytes defined as concatenation
- #6: Unary minus + method call precedence trap documented
- #7: New variables in statement blocks are block-scoped (compile-time error)
- #8: Maps described as "isolated" rather than "pure"

Updated REVIEW.md to remove resolved items and renumber remaining.
Jeffail added a commit that referenced this pull request May 19, 2026
@Jeffail
blobl(v2): Address review items 1-8
9def98c 
- #1: Void is now an error in map_array/map_object (must return a value)
- #2: Variable path assignment defined with output-like semantics and COW
- #3: Namespace calls use :: syntax to eliminate grammar ambiguity
- #4: output = input copy semantics explicitly specified as COW
- #5: bytes + bytes defined as concatenation
- #6: Unary minus + method call precedence trap documented
- #7: New variables in statement blocks are block-scoped (compile-time error)
- #8: Maps described as "isolated" rather than "pure"

Updated REVIEW.md to remove resolved items and renumber remaining.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants