Bump the go-modules group with 29 updates #1

dependabot · 2024-05-29T04:55:59Z

Bumps the go-modules group with 29 updates:

Package	From	To
github.com/BurntSushi/toml	`1.3.2`	`1.4.0`
github.com/onsi/gomega	`1.30.0`	`1.33.1`
github.com/paketo-buildpacks/occam	`0.18.0`	`0.18.5`
github.com/paketo-buildpacks/packit/v2	`2.12.0`	`2.14.0`
github.com/Microsoft/go-winio	`0.6.1`	`0.6.2`
github.com/Microsoft/hcsshim	`0.11.4`	`0.12.3`
github.com/cenkalti/backoff/v4	`4.2.1`	`4.3.0`
github.com/containerd/containerd	`1.7.11`	`1.7.12`
github.com/distribution/reference	`0.5.0`	`0.6.0`
github.com/docker/docker	`24.0.9+incompatible`	`26.0.1+incompatible`
github.com/gabriel-vasile/mimetype	`1.4.3`	`1.4.4`
github.com/golang/protobuf	`1.5.3`	`1.5.4`
github.com/google/go-containerregistry	`0.17.0`	`0.19.1`
github.com/google/uuid	`1.5.0`	`1.6.0`
github.com/klauspost/compress	`1.17.4`	`1.17.8`
github.com/opencontainers/image-spec	`1.1.0-rc5`	`1.1.0`
github.com/shirou/gopsutil/v3	`3.23.12`	`3.24.4`
github.com/testcontainers/testcontainers-go	`0.27.0`	`0.30.0`
github.com/tklauser/go-sysconf	`0.3.13`	`0.3.14`
github.com/tklauser/numcpus	`0.7.0`	`0.8.0`
github.com/ulikunitz/xz	`0.5.11`	`0.5.12`
github.com/yusufpapurcu/wmi	`1.2.3`	`1.2.4`
golang.org/x/exp	`0.0.0-20230510235704-dd950f8aeaea`	`0.0.0-20231006140011-7918f672742d`
golang.org/x/net	`0.24.0`	`0.25.0`
golang.org/x/sys	`0.19.0`	`0.20.0`
golang.org/x/text	`0.14.0`	`0.15.0`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20231002182017-d307bd883b97`	`0.0.0-20240123012728-ef4313101c80`
google.golang.org/grpc	`1.60.1`	`1.62.0`
google.golang.org/protobuf	`1.33.0`	`1.34.1`

Updates github.com/BurntSushi/toml from 1.3.2 to 1.4.0

Release notes

Sourced from github.com/BurntSushi/toml's releases.

v1.4.0

This version requires Go 1.18

Add toml.Marshal() (#405)

Require 2-digit hour (#320)

Wrap UnmarshalTOML() and UnmarshalText() return values in ParseError for position information (#398)

Fix inline tables with dotted keys inside inline arrays (e.g. k=[{a.b=1}]) (#400)

Commits

1e2c053 Undeprecate PrimitiveDecode and MetaData.PrimitiveDecode()
f8f7e48 Update toml-test
9a80667 Add -json flag to tomlv
3203540 fuzz: move fuzz_targets from oss-fuzz (#406)
77ce858 Add Marshal Function (#405)
0e879cb Fix panic when trying to set subkey for a value that's not a table
c299e75 Update toml-test
4223137 Fix inline tables with dotted keys inside inline arrays (#400)
45e7e49 Update toml-test
c320c2d Fix utf8.RuneError test
Additional commits viewable in compare view

Updates github.com/onsi/gomega from 1.30.0 to 1.33.1

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.33.1

1.33.1

Fixes

fix confusing eventually docs [3a66379]

Maintenance

Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]

v1.33.0

1.33.0

Features

Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.

Maintenance

Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]

Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]

Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]

v1.32.0

1.32.0

Maintenance

Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @jbduncan !). Please open an issue if you run into one.

chore: test with Go 1.22 (#733) [32ef35e]

Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

docs: fix typo and broken anchor link to gstruct [f460154]

docs: fix HaveEach matcher signature [a2862e4]

v1.31.1

1.31.1

Fixes

Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]

Update test in case keeping msg is desired [ad1a367]

Maintenance

Show how to import the format sub package [24e958d]

tidy up go.sum [26661b8]

bump dependencies [bde8f7a]

v1.31.0

1.31.0

... (truncated)

Changelog

Sourced from github.com/onsi/gomega's changelog.

1.33.1

Fixes

fix confusing eventually docs [3a66379]

Maintenance

Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2 [e9bc35a]

1.33.0

Features

Receive not accepts Receive(<POINTER>, MATCHER>), allowing you to pick out a specific value on the channel that satisfies the provided matcher and is stored in the provided pointer.

Maintenance

Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745) [9999deb]

Bump github-pages from 229 to 230 in /docs (#735) [cb5ff21]

Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746) [bac6596]

1.32.0

Maintenance

Migrate github.com/golang/protobuf to google.golang.org/protobuf [436a197]

This release drops the deprecated github.com/golang/protobuf and adopts google.golang.org/protobuf. Care was taken to ensure the release is backwards compatible (thanks @jbduncan !). Please open an issue if you run into one.

chore: test with Go 1.22 (#733) [32ef35e]

Bump golang.org/x/net from 0.19.0 to 0.20.0 (#717) [a0d0387]

Bump github-pages and jekyll-feed in /docs (#732) [b71e477]

docs: fix typo and broken anchor link to gstruct [f460154]

docs: fix HaveEach matcher signature [a2862e4]

1.31.1

Fixes

Inverted arguments order of FailureMessage of BeComparableToMatcher [e0dd999]

Update test in case keeping msg is desired [ad1a367]

Maintenance

Show how to import the format sub package [24e958d]

tidy up go.sum [26661b8]

bump dependencies [bde8f7a]

1.31.0

Features

Async assertions include context cancellation cause if present [121c37f]

Maintenance

Bump minimum go version [dee1e3c]

... (truncated)

Commits

8a658bb v1.33.1
e9bc35a Bump github.com/onsi/ginkgo/v2 from 2.17.1 to 2.17.2
3a66379 fix confusing eventually docs
f2e65fc v1.33.0
02e8706 docs: Receive(POINTER, MATCHER)
ec1f186 feat: receiver matcher accepting (POINTER, MATCHER), includes unit tests
9999deb Bump github.com/onsi/ginkgo/v2 from 2.15.0 to 2.17.1 (#745)
cb5ff21 Bump github-pages from 229 to 230 in /docs (#735)
bac6596 Bump golang.org/x/net from 0.20.0 to 0.23.0 (#746)
4379951 v1.32.0
Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/occam from 0.18.0 to 0.18.5

Release notes

Sourced from github.com/paketo-buildpacks/occam's releases.

v0.18.5

What's Changed

use go 1.20 by @sophiewigmore in paketo-buildpacks/occam#288

Full Changelog: paketo-buildpacks/occam@v0.18.4...v0.18.5

v0.18.4

What's Changed

remove toolchain from go.mod by @sophiewigmore in paketo-buildpacks/occam#287

Full Changelog: paketo-buildpacks/occam@v0.18.3...v0.18.4

v0.18.3

What's Changed

Bump google.golang.org/protobuf from 1.31.0 to 1.33.0 by @dependabot in paketo-buildpacks/occam#280

Bump github.com/testcontainers/testcontainers-go from 0.26.0 to 0.30.0 by @dependabot in paketo-buildpacks/occam#285

Bump github.com/onsi/gomega from 1.30.0 to 1.32.0 by @dependabot in paketo-buildpacks/occam#282

Bump github.com/docker/docker from 25.0.5+incompatible to 26.0.1+incompatible by @dependabot in paketo-buildpacks/occam#286

Bump github.com/google/go-containerregistry from 0.14.0 to 0.19.1 by @dependabot in paketo-buildpacks/occam#281

Full Changelog: paketo-buildpacks/occam@v0.18.2...v0.18.3

v0.18.2

What's Changed

Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12 by @dependabot in paketo-buildpacks/occam#274

Full Changelog: paketo-buildpacks/occam@v0.18.1...v0.18.2

v0.18.1

No release notes provided.

Commits

f23ed80 use go 1.20 (#288)
4e0efea remove toolchain from go.mod
ea10e39 update fakes
059d6bc Bump github.com/google/go-containerregistry from 0.14.0 to 0.19.1
1f22679 Bump github.com/docker/docker
37cf400 Bump github.com/onsi/gomega from 1.30.0 to 1.32.0
122482e Bump github.com/testcontainers/testcontainers-go from 0.26.0 to 0.30.0 (#285)
393f58f Bump google.golang.org/protobuf from 1.31.0 to 1.33.0
f37d228 Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12
1d68391 tests: adding tests for NewContainerFromInspectOutput function
Additional commits viewable in compare view

Updates github.com/paketo-buildpacks/packit/v2 from 2.12.0 to 2.14.0

Release notes

Sourced from github.com/paketo-buildpacks/packit/v2's releases.

v2.14.0

What's Changed

Fixes mirror bug when originalHost is excluded by @TisVictress in paketo-buildpacks/packit#569

Bump github.com/onsi/gomega from 1.33.0 to 1.33.1 by @dependabot in paketo-buildpacks/packit#571

Support reading service bindings from VCAP_SERVICES env var by @pbusko in paketo-buildpacks/packit#566

New Contributors

@pbusko made their first contribution in paketo-buildpacks/packit#566 🥳

Full Changelog: paketo-buildpacks/packit@v2.13.0...v2.14.0

v2.13.0

What's Changed

Bump github.com/onsi/gomega from 1.28.1 to 1.29.0 by @dependabot in paketo-buildpacks/packit#531

Bump github.com/google/uuid from 1.3.1 to 1.4.0 by @dependabot in paketo-buildpacks/packit#533

Updates github-config by @paketo-bot in paketo-buildpacks/packit#532

Bump github.com/onsi/gomega from 1.29.0 to 1.30.0 by @dependabot in paketo-buildpacks/packit#536

Updates github-config by @paketo-bot in paketo-buildpacks/packit#534

Bump github.com/google/uuid from 1.4.0 to 1.5.0 by @dependabot in paketo-buildpacks/packit#541

Bump github.com/onsi/gomega from 1.30.0 to 1.31.0 by @dependabot in paketo-buildpacks/packit#544

Bump github.com/onsi/gomega from 1.31.0 to 1.31.1 by @dependabot in paketo-buildpacks/packit#547

Bump github.com/google/uuid from 1.5.0 to 1.6.0 by @dependabot in paketo-buildpacks/packit#548

Bump github.com/stretchr/testify from 1.8.4 to 1.9.0 by @dependabot in paketo-buildpacks/packit#556

Bump github.com/onsi/gomega from 1.31.1 to 1.32.0 by @dependabot in paketo-buildpacks/packit#560

Bump github.com/ulikunitz/xz from 0.5.11 to 0.5.12 by @dependabot in paketo-buildpacks/packit#562

Bump github.com/onsi/gomega from 1.32.0 to 1.33.0 by @dependabot in paketo-buildpacks/packit#568

Allows users to set a dependency mirror by @TisVictress in paketo-buildpacks/packit#563

New Contributors

@TisVictress made their first contribution in paketo-buildpacks/packit#563

Full Changelog: paketo-buildpacks/packit@v2.12.0...v2.13.0

Commits

13393ec Support reading service bindings from VCAP_SERVICES env var (#566)
35d8f76 Bump github.com/onsi/gomega from 1.33.0 to 1.33.1
ce376b7 Fixes mirror bug when originalHost is excluded (#569)
4c9f338 Allows users to set a dependency mirror (#563)
4e9c21d Bump github.com/onsi/gomega from 1.32.0 to 1.33.0
dd77ec5 Bump github.com/ulikunitz/xz from 0.5.11 to 0.5.12
95b8056 Bump github.com/onsi/gomega from 1.31.1 to 1.32.0
777a503 Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
c1b785b Bump github.com/google/uuid from 1.5.0 to 1.6.0
b31dc83 Bump github.com/onsi/gomega from 1.31.0 to 1.31.1
Additional commits viewable in compare view

Updates github.com/Microsoft/go-winio from 0.6.1 to 0.6.2

Release notes

Sourced from github.com/Microsoft/go-winio's releases.

v0.6.2

What's Changed

[etw] Add String() functions, JSON field option by @helsaawy in microsoft/go-winio#285

enable dependency updates by @helsaawy in microsoft/go-winio#287

Isolate tools dependencies in tools package by @helsaawy in microsoft/go-winio#293

Update tests; run fuzzing by @helsaawy in microsoft/go-winio#294

Add support for flushing and disconnecting named pipes by @dgolub in microsoft/go-winio#292

Add ResolvePath tests by @helsaawy in microsoft/go-winio#276

[lint] Fix errors from #276 by @helsaawy in microsoft/go-winio#296

Switch from sycall to windows by @helsaawy in microsoft/go-winio#295

[lint] Remove deprecated tar.TypeRegA by @helsaawy in microsoft/go-winio#300

sd.go: fix calculation of security descriptor length in SddlToSecurit… by @dblohm7 in microsoft/go-winio#299

fix: already typo by @testwill in microsoft/go-winio#303

pipe.go: add DialPipeAccessImpLevel by @dblohm7 in microsoft/go-winio#302

Bug: Close hvsock handle on listen error; fix tests by @helsaawy in microsoft/go-winio#310

fileinfo: internally fix FileBasicInfo memory alignment by @dagood in microsoft/go-winio#312

Update go1.21 and CI by @helsaawy in microsoft/go-winio#315

New Contributors

@dgolub made their first contribution in microsoft/go-winio#292

@dblohm7 made their first contribution in microsoft/go-winio#299

@testwill made their first contribution in microsoft/go-winio#303

@dagood made their first contribution in microsoft/go-winio#312

Full Changelog: microsoft/go-winio@v0.6.1...v0.6.2

Commits

3c9576c Update go1.21 and CI (#315)
008bc6e fileinfo: internally fix FileBasicInfo memory alignment (#312)
bc421d9 Bug: Close hvsock handle on listen error; fix tests (#310)
553a715 Merge pull request #302 from dblohm7/implevel2
1963303 pipe.go: add DialPipeAccessImpLevel
e6aebd6 fix: already typo (#303)
eb5b095 sd.go: fix calculation of security descriptor length in SddlToSecurityDescrip...
87c84cf [lint] Remove deprecated tar.TypeRegA (#300)
9f0d5dc Switch from sycall to windows (#295)
fec52bd [lint] Fix errors from #276 (#296)
Additional commits viewable in compare view

Updates github.com/Microsoft/hcsshim from 0.11.4 to 0.12.3

Release notes

Sourced from github.com/Microsoft/hcsshim's releases.

v0.12.3

What's Changed

[release/0.12] Update go-winio to v0.6.2 by @kiashok in microsoft/hcsshim#2114

Full Changelog: microsoft/hcsshim@v0.12.2...v0.12.3

v0.12.2

No release notes provided.

v0.12.1

What's Changed

Add spans and drop large size high volume trace logs by @kiashok in microsoft/hcsshim#2068

Updating permissions and github release action versions (#2078) by @hgarvison in microsoft/hcsshim#2079

fix: move permissions to the correct job (#2080) by @anmaxvl in microsoft/hcsshim#2081

Full Changelog: microsoft/hcsshim@v0.12.0...v0.12.1

v0.12.0

What's Changed

adding option of using buffered image reader for faster dmverity hashing by @SethHollandsworth in microsoft/hcsshim#2013

Fix process handle leak when launching a job container by @kevpar in microsoft/hcsshim#2020

Revert "gcs: Support routing container stdio to sidecar" by @kevpar in microsoft/hcsshim#2023

internal/exec: Fix stdio pipe problems by @kevpar in microsoft/hcsshim#2021

Allow mounting multiple dev nodes per assigned device by @katiewasnothere in microsoft/hcsshim#2003

tests: update docker images by @anmaxvl in microsoft/hcsshim#2012

Don't create container scratch per base layer by @ambarve in microsoft/hcsshim#2002

Removing internal tests from hcsshim's cri-containerd tests by @yyatmsft in microsoft/hcsshim#1998

Fix CodeQL pipeline failure by @helsaawy in microsoft/hcsshim#2032

Update Cmd IO handling by @helsaawy in microsoft/hcsshim#1937

[deps] Omni-bus dependency update by @helsaawy in microsoft/hcsshim#2039

Upgrade to go1.21 by @kiashok in microsoft/hcsshim#2033

New Contributors

@yyatmsft made their first contribution in microsoft/hcsshim#1998

Full Changelog: microsoft/hcsshim@v0.12.0-rc.3...v0.12.0

v0.12.0-rc.3

What's Changed

SNP Direct DM-Verity Boot by @darracott in microsoft/hcsshim#1952

tests: update test images used for cri-containerd tests by @anmaxvl in microsoft/hcsshim#1991

Add CodeQL suppression for tar extraction code by @ambarve in microsoft/hcsshim#2006

Update nvidia hook log file paths to use container bundle path as base dir by @katiewasnothere in microsoft/hcsshim#1999

Switch to using new errdefs repo by @kiashok in microsoft/hcsshim#2016

Full Changelog: microsoft/hcsshim@v0.12.0-rc.2...v0.12.0-rc.3

... (truncated)

Commits

c950974 Update go-winio to v0.6.2 & fix lint errors
ad1ccf5 fix: move permissions to the correct job (#2080) (#2081)
6588c1c Updating permissions and github release action versions (#2078) (#2079)
202f90a Add spans and drop large size high volume trace logs
fe8c673 update newBinaryCmd URL path handling (#2041)
85086d7 Upgrade to go1.21 + fix lint errors
8039310 [deps] Omni-bus dependency update (#2039)
7458e58 Update Cmd IO handling (#1937)
5f9910a Fix CodeQL pipeline failure (#2032)
c56a09c Merge pull request #1998 from yyatmsft/removeInternalTests2
Additional commits viewable in compare view

Updates github.com/cenkalti/backoff/v4 from 4.2.1 to 4.3.0

Commits

720b789 remove travis badge from readme
a83af7f feat(backoff): Add functional options for ExponentialBackOff Closes #136
See full diff in compare view

Updates github.com/containerd/containerd from 1.7.11 to 1.7.12

Release notes

Sourced from github.com/containerd/containerd's releases.

containerd 1.7.12

Welcome to the v1.7.12 release of containerd!

The twelfth patch release for containerd 1.7 contains various fixes and updates.

Notable Updates

Fix on dialer function for Windows (#9501)

Improve /etc/group handling when appending groups (#9544)

Update shim pidfile permissions to 0644 (#9548)

Update runc binary to v1.1.11 (#9596)

Allow import and export to reference missing content (#9600)

Remove runc import (#9605)

Update Go version to 1.20.13 (#9624)

Deprecation Warnings

Emit deprecation warning for containerd.io/restart.logpath label usage (#9567)

See the changelog for complete list of changes

Please try out the release binaries and report any issues at https://github.com/containerd/containerd/issues.

Contributors

Akihiro Suda

Sebastiaan van Stijn

Wei Fu

Derek McGowan

Paweł Gronowski

Jaroslav Jindrak

Maksym Pavlenko

Samuel Karp

Anthony Nandaa

Bjorn Neergaard

Djordje Lukic

Kay Yan

Changes

[release/1.7] Prepare release notes for v1.7.12 (#9632)

775d544fe Prepare release notes for v1.7.12

[release/1.7] update to go1.20.13, test go1.21.6 (#9624)

a5dc5b894 update to go1.20.13, test go1.21.6

[release/1.7] shim: Create pid-file and address with 0644 permissions (#9548)

8d82242eb shim: Create address file with 0644 permissions

260963a35 shim: Create pid-file with 0644 permissions

... (truncated)

Commits

71909c1 Merge pull request #9632 from dmcgowan/prepare-v1.7.12
775d544 Prepare release notes for v1.7.12
4ebe8e2 Merge pull request #9624 from thaJeztah/1.7_update_golang_1.20.13
a5dc5b8 update to go1.20.13, test go1.21.6
50e7359 Merge pull request #9548 from Dzejrou/1.7_fix_ignoring_umask
5a675f2 Merge pull request #9602 from thaJeztah/1.7_backport_no_execabs
ccca466 Merge pull request #9605 from thaJeztah/1.7_backport_switch_moby_user
9251072 remove github.com/opencontainers/runc dependency
4e67213 vendor: github.com/cncf-tags/container-device-interface v0.6.1
e0ee0be go.mod: github.com/opencontainers/runtime-spec v1.1.0
Additional commits viewable in compare view

Updates github.com/distribution/reference from 0.5.0 to 0.6.0

Release notes

Sourced from github.com/distribution/reference's releases.

v0.6.0

What's Changed

remove deprecated SplitHostname by @thaJeztah in distribution/reference#5

refactor splitDockerDomain to include more documentation by @thaJeztah in distribution/reference#7

fix typo in readme by @xrstf in distribution/reference#10

Exclude domain from name length check by @ozairasim in distribution/reference#9

New Contributors

@xrstf made their first contribution in distribution/reference#10

@ozairasim made their first contribution in distribution/reference#9

Full Changelog: distribution/reference@v0.5.0...v0.6.0

Commits

ff14faf Merge pull request #9 from ozairasim/exclude-domain-from-name-length-validation
2a66312 Merge pull request #10 from xrstf/patch-1
094e717 fix typo in readme
aaca75e Exclude domain from name length check
8507c7f Merge pull request #7 from thaJeztah/cleanup_splitDockerDomain
89ee7ec refactor splitDockerDomain to include more documentation
a3fb784 Merge pull request #5 from thaJeztah/rm_deprecated
4894124 remove deprecated SplitHostname
See full diff in compare view

Updates github.com/docker/docker from 24.0.9+incompatible to 26.0.1+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v26.0.1

26.0.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 26.0.1 milestone

moby/moby, 26.0.1 milestone

Deprecated and removed features, see Deprecated Features.

Changes to the Engine API, see API version history.

Bug fixes and enhancements

Fix a regression that meant network interface specific --sysctl options prevented container startup. moby/moby#47646

Remove erroneous platform from image config OCI descriptor in docker save output. moby/moby#47694

containerd image store: OCI archives produced by docker save will now have a non-empty mediaType field in index.json moby/moby#47701

Fix a regression that prevented the internal resolver from forwarding requests from IPvlan L3 networks to external resolvers. moby/moby#47705

Prevent the use of external resolvers in IPvlan and Macvlan networks created with no parent interface specified. moby/moby#47705

Packaging updates

Update Go runtime to 1.21.9 moby/moby#47671, docker/cli#4987

Update Compose to v1.26.1 , docker/docker-ce-packaging#1009

Update containerd to v1.7.15 (static binaries only) moby/moby#47692

v26.0.0

26.0.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

docker/cli, 26.0.0 milestone

moby/moby, 26.0.0 milestone

Deprecated and removed features, see Deprecated Features.

Changes to the Engine API, see API version history.

Security

This release contains a security fix for [CVE-2024-29018], a potential data exfiltration from 'internal' networks via authoritative DNS servers.

New

Add Subpath field to the VolumeOptions making it possible to mount a subpath of a volume. moby/moby#45687

Add volume-subpath support to the mount flag (--mount type=volume,...,volume-subpath=<subpath>). docker/cli#4331

Accept = separators and [ipv6] in compose files for docker stack deploy. docker/cli#4860

rootless: Add support for enabling host loopback by setting the DOCKERD_ROOTLESS_ROOTLESSKIT_DISABLE_HOST_LOOPBACK environment variable to false (defaults to true). This lets containers connect to the host by using IP address 10.0.2.2. moby/moby#47352

containerd image store: docker image ls no longer creates duplicates entries for multi-platform images. moby/moby#45967

containerd image store: Send Prometheus metrics. moby/moby#47555

Bug fixes and enhancements

[CVE-2024-29018]: Do not forward requests to external DNS servers for a container that is only connected to an 'internal' network. Previously, requests were forwarded if the host's DNS server was running on a loopback address, like systemd's 127.0.0.53. moby/moby#47589

Ensure that a generated MAC address is not restored when a container is restarted, but a configured MAC address is preserved. moby/moby#47233

... (truncated)

Commits

60b9add Merge pull request #47705 from robmry/backport-26.0/47662_ipvlan_l3_dns
8ad7f86 Run ipvlan tests even if 'modprobe ipvlan' fails
dc27552 Stop macvlan with no parent from using ext-dns
7b570f0 Enable DNS proxying for ipvlan-l3
8cdcc4f Move dummy DNS server to integration/internal/network
ed752f6 Merge pull request #47701 from vvoland/v26.0-47691
9db1b6f Merge pull request #47702 from vvoland/v26.0-47647
6261281 Merge pull request #47700 from vvoland/v26.0-47673
90355e5 Merge pull request #47696 from vvoland/v26.0-47658
72615b1 github/ci: Check if backport is opened against the expected branch
Additional commits viewable in compare view

Updates github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4

Release notes

Sourced from github.com/gabriel-vasile/mimetype's releases.

v1.4.4

What's Changed

Security fixes:

Update golang.org/x/net to latest. Fixes: CVE-2023-45288

Performance improvements:

Change tar detection to use checksum instead of legal ranges of values in gabriel-vasile/mimetype#466

ftyp: exit asap to prevent mem allocs in gabriel-vasile/mimetype#517

Improve x-subrip detection performance in gabriel-vasile/mimetype#524

improve performance for text detection in gabriel-vasile/mimetype#532

Using io.ReadAll instead of ioutil.ReadAll by @phihungtf in gabriel-vasile/mimetype#525

Benchmarks:
before:
BenchmarkText/application/x-ndjson-8              663314              2027 ns/op            4306 B/op          6 allocs/op
BenchmarkSliceRand-8                              688160              1690 ns/op             728 B/op         75 allocs/op
BenchmarkSrt-8                                    946042              1089 ns/op            4240 B/op          5 allocs/op
after:
BenchmarkText/application/x-ndjson-8             1930292               678.6 ns/op           160 B/op          4 allocs/op
BenchmarkSliceRand-8                             1232066              1173 ns/op             160 B/op          4 allocs/op
BenchmarkSrt-8                                   3235448               368.8 ns/op            64 B/op          2 allocs/op
New Contributors

@phihungtf made their first contribution in gabriel-vasile/mimetype#525

Full Changelog: gabriel-vasile/mimetype@v1.4.3...v1.4.4

Commits

43192c8 Bump the github-actions group across 1 directory with 3 updates (#534)
07821d3 Using io.ReadAll instead of ioutil.ReadAll (#525)
9bd6023 github actions & readme: remove codecov badge (#533)
ff4d3d0 improve performance for text detection (#532)
bc511b8 add defaultLimit and use it when resetting back (#531)
341c422 Improve x-subrip detection performance (#524)
043efb9 fix benchmark files order (#518)
fd7639e ftyp: exit asap to p...
Description has been truncated

Bumps the go-modules group with 29 updates: | Package | From | To | | --- | --- | --- | | [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) | `1.3.2` | `1.4.0` | | [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.30.0` | `1.33.1` | | [github.com/paketo-buildpacks/occam](https://github.com/paketo-buildpacks/occam) | `0.18.0` | `0.18.5` | | [github.com/paketo-buildpacks/packit/v2](https://github.com/paketo-buildpacks/packit) | `2.12.0` | `2.14.0` | | [github.com/Microsoft/go-winio](https://github.com/Microsoft/go-winio) | `0.6.1` | `0.6.2` | | [github.com/Microsoft/hcsshim](https://github.com/Microsoft/hcsshim) | `0.11.4` | `0.12.3` | | [github.com/cenkalti/backoff/v4](https://github.com/cenkalti/backoff) | `4.2.1` | `4.3.0` | | [github.com/containerd/containerd](https://github.com/containerd/containerd) | `1.7.11` | `1.7.12` | | [github.com/distribution/reference](https://github.com/distribution/reference) | `0.5.0` | `0.6.0` | | [github.com/docker/docker](https://github.com/docker/docker) | `24.0.9+incompatible` | `26.0.1+incompatible` | | [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) | `1.4.3` | `1.4.4` | | [github.com/golang/protobuf](https://github.com/golang/protobuf) | `1.5.3` | `1.5.4` | | [github.com/google/go-containerregistry](https://github.com/google/go-containerregistry) | `0.17.0` | `0.19.1` | | [github.com/google/uuid](https://github.com/google/uuid) | `1.5.0` | `1.6.0` | | [github.com/klauspost/compress](https://github.com/klauspost/compress) | `1.17.4` | `1.17.8` | | [github.com/opencontainers/image-spec](https://github.com/opencontainers/image-spec) | `1.1.0-rc5` | `1.1.0` | | [github.com/shirou/gopsutil/v3](https://github.com/shirou/gopsutil) | `3.23.12` | `3.24.4` | | [github.com/testcontainers/testcontainers-go](https://github.com/testcontainers/testcontainers-go) | `0.27.0` | `0.30.0` | | [github.com/tklauser/go-sysconf](https://github.com/tklauser/go-sysconf) | `0.3.13` | `0.3.14` | | [github.com/tklauser/numcpus](https://github.com/tklauser/numcpus) | `0.7.0` | `0.8.0` | | [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) | `0.5.11` | `0.5.12` | | [github.com/yusufpapurcu/wmi](https://github.com/yusufpapurcu/wmi) | `1.2.3` | `1.2.4` | | [golang.org/x/exp](https://github.com/golang/exp) | `0.0.0-20230510235704-dd950f8aeaea` | `0.0.0-20231006140011-7918f672742d` | | [golang.org/x/net](https://github.com/golang/net) | `0.24.0` | `0.25.0` | | [golang.org/x/sys](https://github.com/golang/sys) | `0.19.0` | `0.20.0` | | [golang.org/x/text](https://github.com/golang/text) | `0.14.0` | `0.15.0` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20231002182017-d307bd883b97` | `0.0.0-20240123012728-ef4313101c80` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.60.1` | `1.62.0` | | google.golang.org/protobuf | `1.33.0` | `1.34.1` | Updates `github.com/BurntSushi/toml` from 1.3.2 to 1.4.0 - [Release notes](https://github.com/BurntSushi/toml/releases) - [Commits](BurntSushi/toml@v1.3.2...v1.4.0) Updates `github.com/onsi/gomega` from 1.30.0 to 1.33.1 - [Release notes](https://github.com/onsi/gomega/releases) - [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md) - [Commits](onsi/gomega@v1.30.0...v1.33.1) Updates `github.com/paketo-buildpacks/occam` from 0.18.0 to 0.18.5 - [Release notes](https://github.com/paketo-buildpacks/occam/releases) - [Commits](paketo-buildpacks/occam@v0.18.0...v0.18.5) Updates `github.com/paketo-buildpacks/packit/v2` from 2.12.0 to 2.14.0 - [Release notes](https://github.com/paketo-buildpacks/packit/releases) - [Commits](paketo-buildpacks/packit@v2.12.0...v2.14.0) Updates `github.com/Microsoft/go-winio` from 0.6.1 to 0.6.2 - [Release notes](https://github.com/Microsoft/go-winio/releases) - [Commits](microsoft/go-winio@v0.6.1...v0.6.2) Updates `github.com/Microsoft/hcsshim` from 0.11.4 to 0.12.3 - [Release notes](https://github.com/Microsoft/hcsshim/releases) - [Commits](microsoft/hcsshim@v0.11.4...v0.12.3) Updates `github.com/cenkalti/backoff/v4` from 4.2.1 to 4.3.0 - [Commits](cenkalti/backoff@v4.2.1...v4.3.0) Updates `github.com/containerd/containerd` from 1.7.11 to 1.7.12 - [Release notes](https://github.com/containerd/containerd/releases) - [Changelog](https://github.com/containerd/containerd/blob/main/RELEASES.md) - [Commits](containerd/containerd@v1.7.11...v1.7.12) Updates `github.com/distribution/reference` from 0.5.0 to 0.6.0 - [Release notes](https://github.com/distribution/reference/releases) - [Commits](distribution/reference@v0.5.0...v0.6.0) Updates `github.com/docker/docker` from 24.0.9+incompatible to 26.0.1+incompatible - [Release notes](https://github.com/docker/docker/releases) - [Commits](moby/moby@v24.0.9...v26.0.1) Updates `github.com/gabriel-vasile/mimetype` from 1.4.3 to 1.4.4 - [Release notes](https://github.com/gabriel-vasile/mimetype/releases) - [Commits](gabriel-vasile/mimetype@v1.4.3...v1.4.4) Updates `github.com/golang/protobuf` from 1.5.3 to 1.5.4 - [Release notes](https://github.com/golang/protobuf/releases) - [Commits](golang/protobuf@v1.5.3...v1.5.4) Updates `github.com/google/go-containerregistry` from 0.17.0 to 0.19.1 - [Release notes](https://github.com/google/go-containerregistry/releases) - [Changelog](https://github.com/google/go-containerregistry/blob/main/.goreleaser.yml) - [Commits](google/go-containerregistry@v0.17.0...v0.19.1) Updates `github.com/google/uuid` from 1.5.0 to 1.6.0 - [Release notes](https://github.com/google/uuid/releases) - [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md) - [Commits](google/uuid@v1.5.0...v1.6.0) Updates `github.com/klauspost/compress` from 1.17.4 to 1.17.8 - [Release notes](https://github.com/klauspost/compress/releases) - [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml) - [Commits](klauspost/compress@v1.17.4...v1.17.8) Updates `github.com/opencontainers/image-spec` from 1.1.0-rc5 to 1.1.0 - [Release notes](https://github.com/opencontainers/image-spec/releases) - [Changelog](https://github.com/opencontainers/image-spec/blob/main/RELEASES.md) - [Commits](opencontainers/image-spec@v1.1.0-rc5...v1.1.0) Updates `github.com/shirou/gopsutil/v3` from 3.23.12 to 3.24.4 - [Release notes](https://github.com/shirou/gopsutil/releases) - [Commits](shirou/gopsutil@v3.23.12...v3.24.4) Updates `github.com/testcontainers/testcontainers-go` from 0.27.0 to 0.30.0 - [Release notes](https://github.com/testcontainers/testcontainers-go/releases) - [Commits](testcontainers/testcontainers-go@v0.27.0...v0.30.0) Updates `github.com/tklauser/go-sysconf` from 0.3.13 to 0.3.14 - [Release notes](https://github.com/tklauser/go-sysconf/releases) - [Commits](tklauser/go-sysconf@v0.3.13...v0.3.14) Updates `github.com/tklauser/numcpus` from 0.7.0 to 0.8.0 - [Release notes](https://github.com/tklauser/numcpus/releases) - [Commits](tklauser/numcpus@v0.7.0...v0.8.0) Updates `github.com/ulikunitz/xz` from 0.5.11 to 0.5.12 - [Commits](ulikunitz/xz@v0.5.11...v0.5.12) Updates `github.com/yusufpapurcu/wmi` from 1.2.3 to 1.2.4 - [Release notes](https://github.com/yusufpapurcu/wmi/releases) - [Commits](yusufpapurcu/wmi@v1.2.3...v1.2.4) Updates `golang.org/x/exp` from 0.0.0-20230510235704-dd950f8aeaea to 0.0.0-20231006140011-7918f672742d - [Commits](https://github.com/golang/exp/commits) Updates `golang.org/x/net` from 0.24.0 to 0.25.0 - [Commits](golang/net@v0.24.0...v0.25.0) Updates `golang.org/x/sys` from 0.19.0 to 0.20.0 - [Commits](golang/sys@v0.19.0...v0.20.0) Updates `golang.org/x/text` from 0.14.0 to 0.15.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.14.0...v0.15.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20231002182017-d307bd883b97 to 0.0.0-20240123012728-ef4313101c80 - [Commits](https://github.com/googleapis/go-genproto/commits) Updates `google.golang.org/grpc` from 1.60.1 to 1.62.0 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.60.1...v1.62.0) Updates `google.golang.org/protobuf` from 1.33.0 to 1.34.1 --- updated-dependencies: - dependency-name: github.com/BurntSushi/toml dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/onsi/gomega dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/paketo-buildpacks/occam dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/paketo-buildpacks/packit/v2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/Microsoft/go-winio dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/Microsoft/hcsshim dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/cenkalti/backoff/v4 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/containerd/containerd dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/distribution/reference dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/docker/docker dependency-type: indirect update-type: version-update:semver-major dependency-group: go-modules - dependency-name: github.com/gabriel-vasile/mimetype dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/golang/protobuf dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/google/go-containerregistry dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/google/uuid dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/klauspost/compress dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/opencontainers/image-spec dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/shirou/gopsutil/v3 dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/testcontainers/testcontainers-go dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/tklauser/go-sysconf dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/tklauser/numcpus dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: github.com/ulikunitz/xz dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: github.com/yusufpapurcu/wmi dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: golang.org/x/exp dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: golang.org/x/net dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/sys dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: golang.org/x/text dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-type: indirect update-type: version-update:semver-patch dependency-group: go-modules - dependency-name: google.golang.org/grpc dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules - dependency-name: google.golang.org/protobuf dependency-type: indirect update-type: version-update:semver-minor dependency-group: go-modules ... Signed-off-by: dependabot[bot] <support@github.com>

github-advanced-security · 2024-05-29T04:57:03Z

This pull request sets up GitHub code scanning for this repository. Once the scans have completed and the checks have passed, the analysis results for this pull request branch will appear on this overview. Once you merge this pull request, the 'Security' tab will show more code scanning analysis results (for example, for the default branch). Depending on your configuration and choice of analysis tool, future pull requests will be annotated with code scanning analysis results. For more information about GitHub code scanning, check out the documentation.

dependabot · 2024-05-29T05:01:52Z

Looks like these dependencies are updatable in another way, so this is no longer needed.

dependabot bot added the dependencies Pull requests that update a dependency file label May 29, 2024

dependabot bot closed this May 29, 2024

dependabot bot deleted the dependabot/go_modules/go-modules-a02f66f24e branch May 29, 2024 05:01

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump the go-modules group with 29 updates #1

Bump the go-modules group with 29 updates #1

dependabot bot commented on behalf of github May 29, 2024 •

edited

Loading

github-advanced-security bot commented May 29, 2024

dependabot bot commented on behalf of github May 29, 2024

Bump the go-modules group with 29 updates #1

Bump the go-modules group with 29 updates #1

Conversation

dependabot bot commented on behalf of github May 29, 2024 • edited Loading

v1.4.0

v1.33.1

1.33.1

Fixes

Maintenance

v1.33.0

1.33.0

Features

Maintenance

v1.32.0

1.32.0

Maintenance

v1.31.1

1.31.1

Fixes

Maintenance

v1.31.0

1.31.0

1.33.1

Fixes

Maintenance

1.33.0

Features

Maintenance

1.32.0

Maintenance

1.31.1

Fixes

Maintenance

1.31.0

Features

Maintenance

v0.18.5

What's Changed

v0.18.4

What's Changed

v0.18.3

What's Changed

v0.18.2

What's Changed

v0.18.1

v2.14.0

What's Changed

New Contributors

v2.13.0

What's Changed

New Contributors

v0.6.2

What's Changed

New Contributors

v0.12.3

What's Changed

v0.12.2

v0.12.1

What's Changed

v0.12.0

What's Changed

New Contributors

v0.12.0-rc.3

What's Changed

containerd 1.7.12

Notable Updates

Deprecation Warnings

Contributors

Changes

v0.6.0

What's Changed

New Contributors

v26.0.1

26.0.1

Bug fixes and enhancements

Packaging updates

v26.0.0

26.0.0

Security

New

dependabot bot commented on behalf of github May 29, 2024 •

edited

Loading