Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the modules group across 1 directory with 13 updates #237

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 18, 2025

Bumps the modules group with 11 updates in the / directory:

Package From To
github.com/bitfield/script 0.22.0 0.24.0
github.com/bytedance/sonic 1.12.8 1.13.1
github.com/caddyserver/caddy/v2 2.8.4 2.9.1
github.com/dwisiswant0/pcregexp 0.1.0 0.2.0
github.com/expr-lang/expr 1.16.3 1.17.0
github.com/go-playground/validator/v10 10.19.0 10.25.0
github.com/hashicorp/go-getter 1.7.5 1.7.8
github.com/otiai10/copy 1.14.0 1.14.1
github.com/stretchr/testify 1.9.0 1.10.0
github.com/valyala/fastjson 1.6.3 1.6.4
tlog.app/go/loc 0.7.0 0.7.2

Updates github.com/bitfield/script from 0.22.0 to 0.24.0

Commits

Updates github.com/bytedance/sonic from 1.12.8 to 1.13.1

Release notes

Sourced from github.com/bytedance/sonic's releases.

v1.13.1

What's Changed

New Contributors

Full Changelog: bytedance/sonic@v1.12.10...v1.13.1

v1.12.10

Bugfix

Full Changelog: bytedance/sonic@v1.12.9...v1.12.10

v1.12.9

What's Changed

BugFix( for aarch64)

  • fix crash cause by sigprof , not useX28 register in arm64 of native C [PR: #746, Issue: #743]
  • fix bug when parsing invalid json that contains unescaped control chars [PR: #745, Issue: #739]
  • fix bug when parsing large json [PR: #745, Issue: #744]

Chore

New Contributors

Full Changelog: bytedance/sonic@v1.12.8...v1.12.9

Commits

Updates github.com/caddyserver/caddy/v2 from 2.8.4 to 2.9.1

Release notes

Sourced from github.com/caddyserver/caddy/v2's releases.

v2.9.1

This is a patch release fixing a few issues related to FastCGI, HTTP/3 and unix sockets, log file permissions, repeated TERM signals, and an ARI edge case. It also adds Caddyfile support for response matching in the header directive.

Thanks to everyone who reported bugs and helped with fixes!

Changelog

  • 34cff4af7db1365bba6decc647ccfb6bf1b21afd core: Only initiate exit once (should fix #6707)
  • 50778b55425d378f709599c0d424b0138af592f4 fix: disable h3 for unix domain socket (#6769)
  • 0e570e0cc717f02cf3800ae741df70cd074c7275 go.mod: Upgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  • e48b75843b7eff2948b573391fb41535b5e333ef header: match subdirective for response matching (#6765)
  • 1f927d6b07d52d7cf46f1f3020c1ea5993a3e5e8 log: Only chmod if permission bits differ; make log dir (#6761)
  • 1bd567d7ad41d5509e2aa60cf36e749f195ad83c reverseproxy: buffer requests for fastcgi by default (#6759)

What's Changed

New Contributors

Full Changelog: caddyserver/caddy@v2.9.0...v2.9.1

v2.9.0

Happy New Year! We're pleased to release Caddy 2.9. Aside from some minor new features, this release is mainly focused on refinements and bug fixes in many areas, including:

  • Config loading
  • Events
  • Logging
  • Placeholders
  • Reverse proxy and HTTP server performance
  • Matchers
  • HTTP (esp. HTTP/3)
  • Metrics (per-host metrics)
  • Security
  • TLS automation & ACME ARI

We realize there is extensive interest in Encrypted Client Hello (ECH) and post-quantum ciphers. These are slated to be supported in Go 1.24, which is scheduled for a stable release in approximately February. We did not want to force users to go through the inconvenience of installing pre-release, non-stock installations of Go, even though the RCs are quite stable and production-ready, in order to even compile Caddy, which is quite common given our plugin ecosystem. We anticipate a Caddy 2.10 release in the near future with these capabilities, built on Go 1.24.

We hope you will enjoy the 2.9 release. Thanks to all contributors, bug reporters, and helpers, and those organizations which deployed pre-release versions to production to help verify patches and features.

Changelog

  • ef4e0224a8495fc29847d865087febdee8736e3b caddyfile: Fix comma edgecase in address parsing (#6616)
  • b116dcea3d022cd2b060a978c499ac17e5d0a2e1 caddyhttp: Add {?query} placeholder (#6714)
  • c216cf551dcbd2de1da1b9fe8a7e179b76827753 caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
  • 197c564f2032becba14aeec0152fe5eeb639d6c1 caddyhttp: Set default ReadHeaderTimeout (1 min)
  • 09b2cbcf4d839adec91b189fea549d64a69e0595 caddyhttp: Add MatchWithError to replace SetVar hack (#6596)
  • c6f2979986d87d7236b132c687c8887c92248dd8 caddyhttp: Close http3 server gracefully (#6213)

... (truncated)

Commits
  • 0e570e0 go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
  • e48b758 header: match subdirective for response matching (#6765)
  • 1f927d6 log: Only chmod if permission bits differ; make log dir (#6761)
  • 50778b5 fix: disable h3 for unix domain socket (#6769)
  • 1bd567d reverseproxy: buffer requests for fastcgi by default (#6759)
  • 34cff4a core: Only initiate exit once (should fix #6707)
  • 3f3f8b3 go.mod: Upgrade CertMagic to v0.21.5
  • f2c17d1 testing: sort force-automated hosts (#6756)
  • afa778a httpcaddyfile: Implement experimental force_automate option (#6712)
  • 5ba1e06 encode: try to use sendfile when compression is not used (#6749)
  • Additional commits viewable in compare view

Updates github.com/dwisiswant0/pcregexp from 0.1.0 to 0.2.0

Commits

Updates github.com/expr-lang/expr from 1.16.3 to 1.17.0

Release notes

Sourced from github.com/expr-lang/expr's releases.

v1.17.0

Expr is a Go-centric expression language designed to deliver dynamic configurations with unparalleled accuracy, safety, and speed.

program, err := expr.Compile(`let foo = bar(); baz(foo, foo)`)

In this release:

This release added the biggest change to the Expr language: if-else expressions and sequential expressions. #736 e750878

if foo > 42 {
    assert(foo);
    calc(foo, foo / 2)
} else {
    calc(0, 0)
}

A sequence of expression may be separated by ; char. The last semicolon must be omitted. Expr returns the value of the last expression in the sequence.

If-else is also expressions. Each if must have an else part. Result of if-else can be used as an expression:

let foo = if bar > 0 {
    process(bar)
} else {
    fallback()
};
foo + 42

Added:

  • Added ast.Find helper for easy AST searching. 579de74
  • Added compile node budget and memory limits (#762)
  • Added uniq() builtin (#705)
  • Added flatten() builtin (#684)
  • Added types pkg (#665 #667 #668)

Improvements:

  • Allow tailing comma in arguments (#623)
  • Improved type checker for named types 6fa83ad
  • Now len() return runes count for string e8bd7f8

... (truncated)

Commits
  • 3be6386 Code style: remove repeated helper functions
  • 25690fe chore: Added SOLO to the companies list (#769)
  • a9cda30 Test for issue 756
  • 2bc0eed Remove duplicated dereferences
  • f4bbea5 Add support deref in all builtins
  • 7d564c0 Remove print
  • 80f0ea6 Correctly add OpDeref if needed
  • 2d9f616 Add more tailing comma tests
  • 8f83203 Allow tailing comma in arguments (#623)
  • 435b79d Make sure get() returns nil for map[string]string on missing keys
  • Additional commits viewable in compare view

Updates github.com/go-playground/validator/v10 from 10.19.0 to 10.25.0

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

Release 10.25.0

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.24.0...v10.25.0

Release 10.24.0

What's Changed

The MSGV(Minimum Supported Go Version) has been bumped to v1.20 to address a security issues in the gaoling net package.

Full Changelog: go-playground/validator@v10.23.0...v10.24.0

Release 10.23.0

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.22.1...v10.23.0

Release 10.22.1

What's Changed

New Contributors

Full Changelog: go-playground/validator@v10.22.0...v10.22.1

Release 10.22.0

No release notes provided.

... (truncated)

Commits

Updates github.com/hashicorp/go-getter from 1.7.5 to 1.7.8

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.7.8

What's Changed

Full Changelog: hashicorp/go-getter@v1.7.7...v1.7.8

v1.7.7

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.7.6...v1.7.7

v1.7.6

What's Changed

New Contributors

Full Changelog: hashicorp/go-getter@v1.7.5...v1.7.6

Commits
  • f7836fb sec: fix s3 and gcs host checks (#512)
  • 7dddd13 Merge pull request #515 from hashicorp/Vulnerability_Fix_v1
  • 0f05341 IND-1804 Updating .goreleaser.yml file with valid version
  • 81c6950 Merge pull request #514 from hashicorp/Vulnerability_Fix_v1
  • d315d97 IND-1804 Updating arguments in github release CI
  • 6552f72 Merge pull request #513 from hashicorp/Vulnerability_Fix_v1
  • 2e56c18 IND-1804 Bump up dependencies to remediate vulnerabiities
  • 842d6c3 Merge pull request #505 from mukeshjc/main
  • 7edd4e0 Add CODEOWNERS file in .github/CODEOWNERS
  • 6077ad5 Merge pull request #409 from hashicorp/compliance/add-headers
  • Additional commits viewable in compare view

Updates github.com/klauspost/compress from 1.17.8 to 1.17.11

Release notes

Sourced from github.com/klauspost/compress's releases.

v1.17.11

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.10...v1.17.11

v1.17.10

What's Changed

New Contributors

Full Changelog: klauspost/compress@v1.17.9...v1.17.10

v1.17.9

What's Changed

Full Changelog: klauspost/compress@v1.17.8...v1.17.9

Commits

Updates github.com/otiai10/copy from 1.14.0 to 1.14.1

Commits
  • 5ef5923 Revert "CopyMethod" since it's not ready
  • 49b0b59 Merge pull request #164 from eth-p/feat-copymethod-api
  • f530620 ci: Allow triggering Go workflow manually
  • b4dd789 refactor: Split common code out of CopyBytes
  • 9205813 feat: Add FileCopyMethod option / API
  • 2f93b8f Merge pull request #159 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • 87072f3 Bump golang.org/x/sys from 0.23.0 to 0.24.0
  • d0690cb Merge pull request #158 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • b87119d Bump golang.org/x/sys from 0.22.0 to 0.23.0
  • 355527c Merge pull request #157 from otiai10/dependabot/go_modules/main/golang.org/x/...
  • Additional commits viewable in compare view

Updates github.com/stretchr/testify from 1.9.0 to 1.10.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.10.0

What's Changed

Functional Changes

Fixes

Documantation, Build & CI

New Contributors

... (truncated)

Commits
  • 89cbdd9 Merge pull request #1626 from arjun-1/fix-functional-options-diff-indirect-calls
  • 07bac60 Merge pull request #1667 from sikehish/flaky
  • 716de8d Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI
  • 118fb83 NotSame should fail if args are not pointers #1661 (#1664)
  • 7d99b2b attempt 2
  • 05f87c0 more similar
  • ea7129e better fmt
  • a1b9c9e Merge pull request #1663 from ybrustin/master
  • 8302de9 Merge branch 'master' into master
  • 89352f7 Merge pull request #1518 from hendrywiranto/adjust-readme-remove-v2
  • Additional commits viewable in compare view

Updates github.com/valyala/fastjson from 1.6.3 to 1.6.4

Commits
  • 93f67d9 fastfloat: localize handling of invalid number without integer and fractional...
  • 6f52d1b fastfloat: support elided integer or float part (#84)
  • 6dae91c Fix 64-bit tests on 32-bit systems (#60)
  • See full diff in compare view

Updates golang.org/x/net from 0.30.0 to 0.34.0

Commits

Bumps the modules group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/bitfield/script](https://github.com/bitfield/script) | `0.22.0` | `0.24.0` |
| [github.com/bytedance/sonic](https://github.com/bytedance/sonic) | `1.12.8` | `1.13.1` |
| [github.com/caddyserver/caddy/v2](https://github.com/caddyserver/caddy) | `2.8.4` | `2.9.1` |
| [github.com/dwisiswant0/pcregexp](https://github.com/dwisiswant0/pcregexp) | `0.1.0` | `0.2.0` |
| [github.com/expr-lang/expr](https://github.com/expr-lang/expr) | `1.16.3` | `1.17.0` |
| [github.com/go-playground/validator/v10](https://github.com/go-playground/validator) | `10.19.0` | `10.25.0` |
| [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.5` | `1.7.8` |
| [github.com/otiai10/copy](https://github.com/otiai10/copy) | `1.14.0` | `1.14.1` |
| [github.com/stretchr/testify](https://github.com/stretchr/testify) | `1.9.0` | `1.10.0` |
| [github.com/valyala/fastjson](https://github.com/valyala/fastjson) | `1.6.3` | `1.6.4` |
| [tlog.app/go/loc](https://github.com/tlog-dev/loc) | `0.7.0` | `0.7.2` |



Updates `github.com/bitfield/script` from 0.22.0 to 0.24.0
- [Commits](bitfield/script@v0.22.0...v0.24.0)

Updates `github.com/bytedance/sonic` from 1.12.8 to 1.13.1
- [Release notes](https://github.com/bytedance/sonic/releases)
- [Commits](bytedance/sonic@v1.12.8...v1.13.1)

Updates `github.com/caddyserver/caddy/v2` from 2.8.4 to 2.9.1
- [Release notes](https://github.com/caddyserver/caddy/releases)
- [Changelog](https://github.com/caddyserver/caddy/blob/master/.goreleaser.yml)
- [Commits](caddyserver/caddy@v2.8.4...v2.9.1)

Updates `github.com/dwisiswant0/pcregexp` from 0.1.0 to 0.2.0
- [Commits](dwisiswant0/pcregexp@v0.1.0...v0.2.0)

Updates `github.com/expr-lang/expr` from 1.16.3 to 1.17.0
- [Release notes](https://github.com/expr-lang/expr/releases)
- [Commits](expr-lang/expr@v1.16.3...v1.17.0)

Updates `github.com/go-playground/validator/v10` from 10.19.0 to 10.25.0
- [Release notes](https://github.com/go-playground/validator/releases)
- [Commits](go-playground/validator@v10.19.0...v10.25.0)

Updates `github.com/hashicorp/go-getter` from 1.7.5 to 1.7.8
- [Release notes](https://github.com/hashicorp/go-getter/releases)
- [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml)
- [Commits](hashicorp/go-getter@v1.7.5...v1.7.8)

Updates `github.com/klauspost/compress` from 1.17.8 to 1.17.11
- [Release notes](https://github.com/klauspost/compress/releases)
- [Changelog](https://github.com/klauspost/compress/blob/master/.goreleaser.yml)
- [Commits](klauspost/compress@v1.17.8...v1.17.11)

Updates `github.com/otiai10/copy` from 1.14.0 to 1.14.1
- [Release notes](https://github.com/otiai10/copy/releases)
- [Commits](otiai10/copy@v1.14.0...v1.14.1)

Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.9.0...v1.10.0)

Updates `github.com/valyala/fastjson` from 1.6.3 to 1.6.4
- [Commits](valyala/fastjson@v1.6.3...v1.6.4)

Updates `golang.org/x/net` from 0.30.0 to 0.34.0
- [Commits](golang/net@v0.30.0...v0.34.0)

Updates `tlog.app/go/loc` from 0.7.0 to 0.7.2
- [Commits](tlog-dev/loc@v0.7.0...v0.7.2)

---
updated-dependencies:
- dependency-name: github.com/bitfield/script
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: github.com/bytedance/sonic
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: github.com/caddyserver/caddy/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: github.com/dwisiswant0/pcregexp
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: github.com/expr-lang/expr
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: github.com/go-playground/validator/v10
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: github.com/hashicorp/go-getter
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: modules
- dependency-name: github.com/klauspost/compress
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: modules
- dependency-name: github.com/otiai10/copy
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: modules
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: github.com/valyala/fastjson
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: modules
- dependency-name: golang.org/x/net
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: modules
- dependency-name: tlog.app/go/loc
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: modules
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot requested a review from dwisiswant0 as a code owner March 18, 2025 01:40
@dependabot dependabot bot added the dependencies Dependencies update label Mar 18, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Dependencies update
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants