Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Updates go mod version to 1.23.0 #596

Closed
wants to merge 250 commits into from
Closed

Updates go mod version to 1.23.0 #596

wants to merge 250 commits into from

Conversation

paketo-bot
Copy link
Member

No description provided.

Ryan Moran and others added 30 commits December 7, 2021 08:06
Adds v2 branch
39b9455
@ryanmoran
Fixes import statement for v2 module
c810215
@ForestEckhardt
Removes syft replace directive to use upstream
5bda788
@dependabot @ForestEckhardt
Bump github.com/anchore/syft from 0.32.0 to 0.32.1
8ae6429 
Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.32.0 to 0.32.1.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.32.0...v0.32.1)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@ForestEckhardt
Updates expectations to match new Syft output
4f67806
@dependabot @sophiewigmore
Bump github.com/anchore/syft from 0.32.1 to 0.32.2
592fec7 
Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.32.1 to 0.32.2.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.32.1...v0.32.2)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump github.com/anchore/syft from 0.32.2 to 0.33.0 (#270)
0f61b71 
* Bump github.com/anchore/syft from 0.32.2 to 0.33.0

Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.32.2 to 0.33.0.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.32.2...v0.33.0)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* extract dependency IDs from syft output

since these seem to change with syft releases

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Frankie Gallina-Jones <frankieg@vmware.com>
@sophiewigmore
streamline sbom test assertions
6bec663 
to avoid brittleness from irrelevant SBOM content changes
@sophiewigmore
extract SBOM output structs; share across tests
5b4d81b
@sophiewigmore
remove unused structs
56c823a
@dependabot
Bump github.com/anchore/syft from 0.33.0 to 0.34.0 (#271)
14956ac 
* Bump github.com/anchore/syft from 0.33.0 to 0.34.0

Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.33.0 to 0.34.0.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.33.0...v0.34.0)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* in tests: extract syft SBOM schema info from actual SBOM

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Frankie Gallina-Jones <frankieg@vmware.com>
Co-authored-by: Sophie Wigmore <swigmore@vmware.com>
@ryanmoran
Add a WithLevel function to scribe.Emitter
b0348e1
@noamichael @ryanmoran
fix(servicebindings): trim provider/type whitespace
98052d2 
Currently, the servicebindings.Resolve(...) function does not consider
whitespace when comparing the requested type/providers with what's on the
filesystem. This change ensures that the type/providers read from disk
are sanitized before they are used.
@dependabot @ryanmoran
Bump github.com/anchore/syft from 0.34.0 to 0.35.0
c6f84d7 
Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.34.0 to 0.35.0.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.34.0...v0.35.0)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@ryanmoran
Update input to syft.CatalogPackages
bbd6771
@dependabot @ryanmoran
Bump github.com/anchore/syft from 0.35.0 to 0.35.1
f1329b1 
Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.35.0 to 0.35.1.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.35.0...v0.35.1)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (#279)
f498877 
* Bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0

Bumps [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) from 0.4.1 to 1.0.0.
- [Release notes](https://github.com/BurntSushi/toml/releases)
- [Commits](BurntSushi/toml@v0.4.1...v1.0.0)

---
updated-dependencies:
- dependency-name: github.com/BurntSushi/toml
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>

* update toml decoding

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Frankie Gallina-Jones <frankieg@vmware.com>
@dependabot @ForestEckhardt
Bump github.com/onsi/gomega from 1.17.0 to 1.18.0
56ac668 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.17.0 to 1.18.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.17.0...v1.18.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @ryanmoran
Bump github.com/anchore/syft from 0.35.1 to 0.36.0
3790bd4 
Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.35.1 to 0.36.0.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.35.1...v0.36.0)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@ryanmoran
Fixes breaking changes in syft sbom package
8a2660d
@dependabot @ForestEckhardt
Bump github.com/onsi/gomega from 1.18.0 to 1.18.1
ebf2e8a 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.18.0 to 1.18.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.18.0...v1.18.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
Bump github.com/anchore/syft from 0.36.0 to 0.37.5 (#285)
246b9c4 
Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.36.0 to 0.37.5.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.36.0...v0.37.5)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
@dependabot @ForestEckhardt
Bump github.com/anchore/syft from 0.37.5 to 0.37.10
8f080ea 
Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.37.5 to 0.37.10.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.37.5...v0.37.10)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
make logger writers public (#284)
02183b6
@dependabot @ForestEckhardt
Bump github.com/anchore/syft from 0.37.10 to 0.38.0
82fbf79 
Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.37.10 to 0.38.0.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.37.10...v0.38.0)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@ForestEckhardt
add SBOM logging to scribe.Emitter
07ce8a2
@ryanmoran @ForestEckhardt
Fixes error interpolation case where err is nil (#289)
99c168f 
* Fixes error interpolation case where err is nil

* Adds failure case where there is additional data on the tar file

Co-authored-by: Forest Eckhardt <feckhardt@pivotal.io>
@dependabot @ForestEckhardt
Bump github.com/anchore/syft from 0.38.0 to 0.39.3
fb8c35f 
Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.38.0 to 0.39.3.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.38.0...v0.39.3)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@ryanmoran
Trims whitespace around dependency-mapping values (#291)
06a914f
@dependabot @ForestEckhardt
Bump github.com/anchore/syft from 0.39.3 to 0.40.0
e3ed2b9 
Bumps [github.com/anchore/syft](https://github.com/anchore/syft) from 0.39.3 to 0.40.0.
- [Release notes](https://github.com/anchore/syft/releases)
- [Changelog](https://github.com/anchore/syft/blob/main/RELEASE.md)
- [Commits](anchore/syft@v0.39.3...v0.40.0)

---
updated-dependencies:
- dependency-name: github.com/anchore/syft
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
dependabot bot and others added 24 commits November 8, 2023 21:49
@dependabot @paketo-bot
Bump github.com/onsi/gomega from 1.29.0 to 1.30.0
0649674 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.29.0 to 1.30.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.29.0...v1.30.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@paketo-bot
Updating github-config
c10f263
@dependabot @paketo-bot
Bump github.com/google/uuid from 1.4.0 to 1.5.0
703e4fb 
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.4.0 to 1.5.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](google/uuid@v1.4.0...v1.5.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @paketo-bot
Bump github.com/onsi/gomega from 1.30.0 to 1.31.0
dbbbbc5 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.30.0 to 1.31.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.30.0...v1.31.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @paketo-bot
Bump github.com/onsi/gomega from 1.31.0 to 1.31.1
b31dc83 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.31.0 to 1.31.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.31.0...v1.31.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @paketo-bot
Bump github.com/google/uuid from 1.5.0 to 1.6.0
c1b785b 
Bumps [github.com/google/uuid](https://github.com/google/uuid) from 1.5.0 to 1.6.0.
- [Release notes](https://github.com/google/uuid/releases)
- [Changelog](https://github.com/google/uuid/blob/master/CHANGELOG.md)
- [Commits](google/uuid@v1.5.0...v1.6.0)

---
updated-dependencies:
- dependency-name: github.com/google/uuid
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @paketo-bot
Bump github.com/stretchr/testify from 1.8.4 to 1.9.0
777a503 
Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.8.4 to 1.9.0.
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.8.4...v1.9.0)

---
updated-dependencies:
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @paketo-bot
Bump github.com/onsi/gomega from 1.31.1 to 1.32.0
95b8056 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.31.1 to 1.32.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.31.1...v1.32.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @paketo-bot
Bump github.com/ulikunitz/xz from 0.5.11 to 0.5.12
dd77ec5 
Bumps [github.com/ulikunitz/xz](https://github.com/ulikunitz/xz) from 0.5.11 to 0.5.12.
- [Commits](ulikunitz/xz@v0.5.11...v0.5.12)

---
updated-dependencies:
- dependency-name: github.com/ulikunitz/xz
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @paketo-bot
Bump github.com/onsi/gomega from 1.32.0 to 1.33.0
4e9c21d 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.32.0 to 1.33.0.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.32.0...v1.33.0)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@TisVictress
Allows users to set a dependency mirror (#563)
4c9f338
@TisVictress
Fixes mirror bug when originalHost is excluded (#569)
ce376b7
@dependabot @paketo-bot
Bump github.com/onsi/gomega from 1.33.0 to 1.33.1
35d8f76 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.33.0 to 1.33.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.33.0...v1.33.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@pbusko @modulo11
Support reading service bindings from VCAP_SERVICES env var (#566)
13393ec 
Co-authored-by: Johannes Dillmann <j.dillmann@sap.com>
@dependabot @paketo-bot
Bump github.com/BurntSushi/toml from 1.3.2 to 1.4.0
4ff7347 
Bumps [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) from 1.3.2 to 1.4.0.
- [Release notes](https://github.com/BurntSushi/toml/releases)
- [Commits](BurntSushi/toml@v1.3.2...v1.4.0)

---
updated-dependencies:
- dependency-name: github.com/BurntSushi/toml
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @paketo-bot
Bump github.com/gabriel-vasile/mimetype from 1.4.3 to 1.4.4
a8ac405 
Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.3 to 1.4.4.
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.3...v1.4.4)

---
updated-dependencies:
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@paketo-bot
Updating github-config
e366827
@nicolasbender @ForestEckhardt
Fix override of existing values in prepend & append
7222905
@nicolasbender @ForestEckhardt
Include error handling
b6530bc
@paketo-bot
Updating github-config
b117031
@dependabot @paketo-bot
Bump github.com/gabriel-vasile/mimetype from 1.4.4 to 1.4.5
9f2a7b3 
Bumps [github.com/gabriel-vasile/mimetype](https://github.com/gabriel-vasile/mimetype) from 1.4.4 to 1.4.5.
- [Release notes](https://github.com/gabriel-vasile/mimetype/releases)
- [Commits](gabriel-vasile/mimetype@v1.4.4...v1.4.5)

---
updated-dependencies:
- dependency-name: github.com/gabriel-vasile/mimetype
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot @paketo-bot
Bump github.com/onsi/gomega from 1.33.1 to 1.34.1
d558b87 
Bumps [github.com/onsi/gomega](https://github.com/onsi/gomega) from 1.33.1 to 1.34.1.
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.33.1...v1.34.1)

---
updated-dependencies:
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@ForestEckhardt
do not run draft release workflow on branches named v2-<something>
3bc586e
@paketo-bot
Updates go mod version to 1.23.0
6feabde
@paketo-bot paketo-bot requested a review from a team as a code owner August 22, 2024 19:19
@linux-foundation-easycla Linux Foundation: EasyCLA
Copy link

CLA Missing ID CLA Not Signed

@ForestEckhardt ForestEckhardt deleted the automation/go-mod-update/update-main branch August 22, 2024 19:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@robdimsdale robdimsdale Awaiting requested review from robdimsdale robdimsdale is a code owner automatically assigned from paketo-buildpacks/tooling-maintainers

@sophiewigmore sophiewigmore Awaiting requested review from sophiewigmore sophiewigmore is a code owner automatically assigned from paketo-buildpacks/tooling-maintainers

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.