-
Notifications
You must be signed in to change notification settings - Fork 12
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update module github.com/spf13/cobra to v1 #363
Conversation
✅ Sider has resolved the errors or warnings via the commit ad4c853! See the analysis result for details. You can turn off such notifications if unnecessary. |
4dd56bd
to
0fa4227
Compare
e67e722
to
f285bf2
Compare
go.sum
Outdated
cloud.google.com/go/bigquery v1.4.0/go.mod h1:S8dzgnTigyfTmLBfrtrhyYhwRxG72rYxvftPBK2Dvzc= | ||
cloud.google.com/go/bigquery v1.5.0/go.mod h1:snEHRnqQbz117VIFhE8bmtwIDY80NLUZUMb4Nv6dBIg= | ||
cloud.google.com/go/bigquery v1.7.0/go.mod h1://okPTzCYNXSlb24MZs83e2Do+h+VXtc4gLoIoXIAPc= | ||
cloud.google.com/go/bigquery v1.8.0/go.mod h1:J5hqkt3O0uAFnINi6JXValWIb1v0goeZM77hZzJN/fQ= |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
[Secret Scan] It may be dangerous to commit the AWS secret access key. (view)
AWS secret access key is an important credential that allows you to use AWS programmatically.
Once this leaks, an attacker can access and operate your AWS resources.See also:
Rule Severity sider.secrets.aws.secret_access_key
warning
You can close this issue if no need to fix it. Learn more.
I closed this issue. Reason:
- When this is not an AWS secret access key.
go.sum
Outdated
google.golang.org/api v0.36.0/go.mod h1:+z5ficQTmoYpPn8LCUNVpK5I7hwkpjbcgqA7I34qYtE= | ||
google.golang.org/api v0.40.0/go.mod h1:fYKFpnQN0DsDSKRVRcQSDQNtqWPfM9i+zNPxepjRCQ8= | ||
google.golang.org/api v0.41.0/go.mod h1:RkxM5lITDfTzmyKFPt+wGrCJbVfniCr2ool8kTBzRTU= | ||
google.golang.org/api v0.43.0/go.mod h1:nQsDGjRXMo4lvh5hP0TKqF244gqhGcr/YSIykhUk/94= |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
[Secret Scan] It may be dangerous to commit the AWS secret access key. (view)
AWS secret access key is an important credential that allows you to use AWS programmatically.
Once this leaks, an attacker can access and operate your AWS resources.See also:
Rule Severity sider.secrets.aws.secret_access_key
warning
You can close this issue if no need to fix it. Learn more.
I closed this issue. Reason:
- When this is not an AWS secret access key.
go.sum
Outdated
google.golang.org/grpc v1.26.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= | ||
google.golang.org/grpc v1.27.0/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= | ||
google.golang.org/grpc v1.27.1/go.mod h1:qbnxyOmOxrQa7FizSgH+ReBfzJrCY1pSN7KXBS8abTk= | ||
google.golang.org/grpc v1.28.0/go.mod h1:rpkK4SK4GF4Ach/+MFLZUBavHOvF2JJB5uozKKal+60= |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
[Secret Scan] It may be dangerous to commit the AWS secret access key. (view)
AWS secret access key is an important credential that allows you to use AWS programmatically.
Once this leaks, an attacker can access and operate your AWS resources.See also:
Rule Severity sider.secrets.aws.secret_access_key
warning
You can close this issue if no need to fix it. Learn more.
I closed this issue. Reason:
- When this is not an AWS secret access key.
3fe1b49
to
ad4c853
Compare
This PR contains the following updates:
v0.0.7
->v1.4.0
Release Notes
spf13/cobra
v1.4.0
Compare Source
Winter 2022 Release ❄️
Another season, another release!
Goodbye viper! 🐍 🚀
The core Cobra library no longer requires Viper and all of its indirect dependencies. This means that Cobra's dependency tree has been drastically thinned! The Viper dependency was included because of the
cobra
CLI generation tool. This tool has migrated tospf13/cobra-cli
.It's pretty unlikely you were importing and using the bootstrapping CLI tool as part of your application (after all, it's just a tool to get going with core
cobra
).But if you were, replace occurrences of
with
And in your
go.mod
, you'll want to also include this dependency:Again, the maintainers do not anticipate this being a breaking change to users of the core
cobra
library, so minimal work should be required for users to integrate with this new release. Moreover, this means the dependency tree for your application using Cobra should no longer require dependencies that were inherited from Viper. Huzzah! 🥳If you'd like to read more
Documentation 📝
@latest
: https://github.com/spf13/cobra/pull/1576Other 💭
Shoutout to our awesome contributors helping to make this cobra release possible!!
@spf13 @marckhouzam @johnSchnake @jpmcb @liggitt @umarcor @hiljusti @marians @shyim @htroisi
v1.3.0
Compare Source
v1.3.0 - The Fall 2021 release 🍁
Completion fixes & enhancements 💇🏼
In
v1.2.0
, we introduced a new model for completions. Thanks to everyone for trying it, giving feedback, and providing numerous fixes! Continue to work with the new model as the old one (as noted in code comments) will be deprecated in a coming release.DisableFlagParsing
now triggers custom completions for flag names #1161help
completion formatting improvements & fixes #1444help
example: short desc are now capitalized and removes extra spacing from long description #1455menu-complete
,menu-complete-backward
andinsert-completions
. These descriptions are now purposefully removed in support of this model. #1509~/.cobra.yaml
. Log messageUsing config file: ~/.cobra.yaml
now printed to stderr #1510completion
command #1541__complete
command for programs without subcommands #1563Generator changes ⚙️
Thanks to @spf13 for providing a number of changes to the Cobra generator tool, streamlining it for new users!
none
New Features ⭐
MatchAll
allows combining several PositionalArgs to work in concert. This now allows for enabling composingPositionalArgs
#896Bug Fixes 🐛
init
boilerplates #1463 #1552 #1557Testing 👀
args_test
#1426golangci-lint
github action #1477Security 🔏
v1.10.0
viper
: https://github.com/spf13/cobra/issues/1538. This will be patched in a future releaseDocumentation 📝
projects_using_cobra.md
file: #1377 #1501 #1454--author
flag is specified #1009shell_completions.md
has an easier to use snippet for copying and pasting shell completions #1372Other 💭
cpuguy83/go-md2man
to v2.0.1 #1460lesser
typo from the GPL-2.0 license #880Thank you to all our amazing contributors ⭐🐍🚀
v1.2.1
Compare Source
Bug fixes
cmd.RegisterFlagCompletionFunc()
(and subsequent map) now works correctly and flag completions now work againv1.2.0
Compare Source
🌠 v1.2.0 - The completions release
Welcome to v1.2.0 of Cobra! This release focuses on code completions, several critical bug fixes, some documentation updates, and security bumps. Upgrading should be simple but note please take note of the introduction of completions V2 and their default use. The v1 completions library is still available, but will be deprecated in the future. Please open an issue with any problems!
New Features
completion
command for shell completions. If acompletion
command is already provided, uses that instead. This will automatically provide shell completions for bash, zsh, fish, and PowerShell https://github.com/spf13/cobra/pull/1192--no-descriptions
flag for "always on" completion descriptionsmitchellh/go-homedir
in favor of core Goos.UserHomeDir()
- spf13/cobra@8eaca5fBug Fixes
ShellDirectiveCompletionNoSpace
and file completion all the time - https://github.com/spf13/cobra/pull/1213RegisterFlagCompletionFunc
as a global var not working in multi-threaded programs: https://github.com/spf13/cobra/pull/1423Testing
Security
Other
Thank you to all our amazing contributors 🐍🚀
v1.1.3
Compare Source
release-branch.cobra1.1
only: Revert "Deprecate Go < 1.14" to maintain backward compatibilityv1.1.2
Compare Source
Notable Changes
v1.1.1
Compare Source
v1.1.0
Compare Source
Notable Changes
cmd.DisableAutoGenTag = true
(#1104)v1.0.0
Compare Source
v1.0.0
Announcing v1.0.0 of Cobra. 🎉
Notable Changes
Configuration
📅 Schedule: At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 Ignore: Close this PR and you won't be reminded about this update again.
This PR has been generated by Mend Renovate. View repository job log here.