chore(deps): bump the go group with 8 updates #481

dependabot · 2025-02-01T21:22:23Z

Bumps the go group with 8 updates:

Package	From	To
github.com/go-git/go-billy/v5	`5.6.1`	`5.6.2`
github.com/go-git/go-git/v5	`5.13.0`	`5.13.2`
github.com/hashicorp/go-getter	`1.7.6`	`1.7.8`
github.com/hashicorp/go-plugin	`1.6.2`	`1.6.3`
github.com/spf13/afero	`1.11.0`	`1.12.0`
github.com/spf13/pflag	`1.0.5`	`1.0.6`
github.com/zclconf/go-cty	`1.15.1`	`1.16.2`
golang.org/x/oauth2	`0.24.0`	`0.25.0`

Updates github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2

Release notes

Sourced from github.com/go-git/go-billy/v5's releases.

v5.6.2

What's Changed

Enable the iofs adapter to also return other interfaces from io/fs by @JAORMX in go-git/go-billy#102

build: Bump dependencies by @pjbgf in go-git/go-billy#103

New Contributors

@JAORMX made their first contribution in go-git/go-billy#102

Full Changelog: go-git/go-billy@v5.6.1...v5.6.2

Commits

9f8b16d Merge pull request #103 from pjbgf/bump-deps
783f58c build: Bump dependencies
0009381 Merge pull request #102 from JAORMX/iofs-extra-interfaces-v5
21beb15 Enable the iofs adapter to also return other interfaces from io/fs
See full diff in compare view

Updates github.com/go-git/go-git/v5 from 5.13.0 to 5.13.2

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.13.2

What's Changed

plumbing: use the correct user agent string. Fixes #883 by @uragirii in go-git/go-git#1364

build: bump golang.org/x/sys from 0.28.0 to 0.29.0 in the golang-org group by @dependabot in go-git/go-git#1365

build: bump the golang-org group with 2 updates by @dependabot in go-git/go-git#1367

build: bump github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4 by @dependabot in go-git/go-git#1368

build: bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by @dependabot in go-git/go-git#1378

build: bump github/codeql-action from 3.28.0 to 3.28.1 by @dependabot in go-git/go-git#1376

build: bump github.com/elazarl/goproxy from 1.2.3 to 1.4.0 by @dependabot in go-git/go-git#1377

git: worktree, fix restoring dot slash files (backported to v5). Fixes #1176 by @BeChris in go-git/go-git#1361

build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2 by @dependabot in go-git/go-git#1392

git: worktree_status, fix adding dot slash files to working tree (backported to v5). Fixes #1150 by @BeChris in go-git/go-git#1359

build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5 by @dependabot in go-git/go-git#1383

Full Changelog: go-git/go-git@v5.13.1...v5.13.2

v5.13.1

What's Changed

build: bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.1 by @dependabot in go-git/go-git#1327

build: bump github.com/elazarl/goproxy from 1.2.1 to 1.2.2 by @dependabot in go-git/go-git#1329

build: bump github.com/elazarl/goproxy from 1.2.2 to 1.2.3 by @dependabot in go-git/go-git#1340

Revert "plumbing: transport/ssh, Add support for SSH @cert-authority." by @pjbgf in #1346

Full Changelog: go-git/go-git@v5.13.0...v5.13.1

Commits

2c68247 Merge pull request #1383 from go-git/dependabot/go_modules/github.com/ProtonM...
d462c2e Merge pull request #1359 from BeChris/issue1150-v5
32ac23a Merge pull request #1392 from go-git/dependabot/go_modules/github.com/pjbgf/s...
93e635a build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2
b2bb975 git: worktree_status, took into account code review remarks
518ac88 git: worktree_status, fix adding dot slash files to working tree (backported ...
21b3150 build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5
189e7e4 Merge pull request #1361 from BeChris/issue1176-v5
654815a Merge pull request #1377 from go-git/dependabot/go_modules/github.com/elazarl...
91dbdb9 Merge pull request #1376 from go-git/dependabot/github_actions/github/codeql-...
Additional commits viewable in compare view

Updates github.com/hashicorp/go-getter from 1.7.6 to 1.7.8

Release notes

Sourced from github.com/hashicorp/go-getter's releases.

v1.7.8

What's Changed

sec: fix s3 and gcs host checks by @dduzgun-security in hashicorp/go-getter#512

Full Changelog: hashicorp/go-getter@v1.7.7...v1.7.8

v1.7.7

What's Changed

Clean up git repo on disk when the ref checkout fails by @james-warren0 in hashicorp/go-getter#504

[COMPLIANCE] Add Copyright and License Headers by @hashicorp-copywrite in hashicorp/go-getter#409

Add CODEOWNERS file in .github/CODEOWNERS by @mukeshjc in hashicorp/go-getter#505

IND-1804 Bump up dependencies to remediate vulnerabiities by @mohanmanikanta2299 in hashicorp/go-getter#513

Updating arguments in github release CI by @mohanmanikanta2299 in hashicorp/go-getter#514

Updating .goreleaser.yml file with valid version by @mohanmanikanta2299 in hashicorp/go-getter#515

New Contributors

@james-warren0 made their first contribution in hashicorp/go-getter#504

@mukeshjc made their first contribution in hashicorp/go-getter#505

@mohanmanikanta2299 made their first contribution in hashicorp/go-getter#513

Full Changelog: hashicorp/go-getter@v1.7.6...v1.7.7

Commits

f7836fb sec: fix s3 and gcs host checks (#512)
7dddd13 Merge pull request #515 from hashicorp/Vulnerability_Fix_v1
0f05341 IND-1804 Updating .goreleaser.yml file with valid version
81c6950 Merge pull request #514 from hashicorp/Vulnerability_Fix_v1
d315d97 IND-1804 Updating arguments in github release CI
6552f72 Merge pull request #513 from hashicorp/Vulnerability_Fix_v1
2e56c18 IND-1804 Bump up dependencies to remediate vulnerabiities
842d6c3 Merge pull request #505 from mukeshjc/main
7edd4e0 Add CODEOWNERS file in .github/CODEOWNERS
6077ad5 Merge pull request #409 from hashicorp/compliance/add-headers
Additional commits viewable in compare view

Updates github.com/hashicorp/go-plugin from 1.6.2 to 1.6.3

Release notes

Sourced from github.com/hashicorp/go-plugin's releases.

v1.6.3

ENHANCEMENTS:

Bump golang.org/x/net dependencies for vulnerability remediation.

Full Changelog: hashicorp/go-plugin@v1.6.2...v1.6.3

Commits

5b05b3e Dependency Bump for Vulnerability Fix (#332)
2f0e0da Add CODEOWNERS file in .github/CODEOWNERS (#324)
See full diff in compare view

Updates github.com/spf13/afero from 1.11.0 to 1.12.0

Release notes

Sourced from github.com/spf13/afero's releases.

v1.12.0

What's Changed

improve ci by @sagikazarmark in spf13/afero#438

Update dependencies by @sagikazarmark in spf13/afero#439

add dependabot by @sagikazarmark in spf13/afero#440

Update README.md by @sean9999 in spf13/afero#434

fix lint violations by @sagikazarmark in spf13/afero#441

New Contributors

@sagikazarmark made their first contribution in spf13/afero#438

@sean9999 made their first contribution in spf13/afero#434

Full Changelog: spf13/afero@v1.11.0...v1.12.0

Commits

d4d55e8 Merge pull request #441 from spf13/lint
15743bc fix lint violations
024e183 Merge pull request #434 from sean9999/patch-1
6504f4c Merge pull request #440 from spf13/dependabot
09a514e add dependabot
1ba15b5 Merge pull request #439 from spf13/update-dependencies
dac11c4 exclude google test lib from golangci
e0bdbe3 update all dependencies
22d41e8 drop iam from google testing library
ee4067b drop google-cloud-go-testing
Additional commits viewable in compare view

Updates github.com/spf13/pflag from 1.0.5 to 1.0.6

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.0.6

What's Changed

Add exported functions to preserve pkg/flag compatibility by @mckern in spf13/pflag#220

remove dead code for checking error nil by @yashbhutwala in spf13/pflag#282

Add IPNetSlice and unit tests by @rpothier in spf13/pflag#170

allow for blank ip addresses by @duhruh in spf13/pflag#316

add github actions by @sagikazarmark in spf13/pflag#419

New Contributors

@mckern made their first contribution in spf13/pflag#220

@yashbhutwala made their first contribution in spf13/pflag#282

@rpothier made their first contribution in spf13/pflag#170

@duhruh made their first contribution in spf13/pflag#316

@sagikazarmark made their first contribution in spf13/pflag#419

Full Changelog: spf13/pflag@v1.0.5...v1.0.6

Commits

5ca8134 Merge pull request #419 from spf13/ci
100ab0e disable unsupported dependency graph for now
a0f4ddd fix govet
f48cbd1 add github actions
d5e0c06 allow for blank ip addresses (#316)
85dd5c8 Add IPNetSlice and unit tests (#170)
6971c29 remove dead code for checking error nil (#282)
81378bb Add exported functions to preserve pkg/flag compatibility (#220)
See full diff in compare view

Updates github.com/zclconf/go-cty from 1.15.1 to 1.16.2

Release notes

Sourced from github.com/zclconf/go-cty's releases.

v1.16.0

convert: When converting between two different capsule types, will now try to use the "conversion from" implementation from the target type if the source type doesn't have a suitable "conversion to" implementation. (#194)

convert: When converting to a map whose element type is an object type with optional attributes, will no longer construct a broken result when a final map is empty. (#198)

Changelog

Sourced from github.com/zclconf/go-cty's changelog.

1.16.2 (January 21, 2025)

json: ImpliedType now returns an error if a JSON object contains two properties of the same name. As a compatibility concession it allows duplicates whose values have the same implied type, since it was unintentionally possible to combine ImpliedType and Unmarshal successfully in that case before, but this is not an endorsement of using duplicate property names since that makes the input ambiguous in any case. (#199)

function/stdlib: ElementFunc no longer crashes when asked for a negative index into a tuple. This fixes a miss in the negative index support added back in v1.15.0. (#200)

1.16.1 (January 13, 2025)

cty: Value.HasElement now treats unknown set elements consistently with how much of the rest of cty treats them.

function/stdlib: FormatFunc and FormatListFunc now handle unknown and null values of unknown type as arguments, rather than letting the function system's short-circuit behavior take care of it. This allows cty.DynamicVal and cty.NullVal(cty.DynamicPseudoType) to be treated consistently with other values, returning results consistent with the documented behavior, rather than forcing the function to immediately return cty.DynamicVal.

1.16.0 (January 3, 2025)

convert: When converting between two different capsule types, will now try to use the "conversion from" implementation from the target type if the source type doesn't have a suitable "conversion to" implementation. (#194)

convert: When converting to a map whose element type is an object type with optional attributes, will no longer construct a broken result when a final map is empty. (#198)

Commits

51a6901 v1.16.2 release
1c48de3 json: ImpliedType rejects duplicate property names of different types
d13b46e function/stdlib: ElementFunc handles negative index into tuple
0ed0ebb Prepare for future v1.16.2 release
b319524 v1.16.1 release
e41d261 cty: Fix various Value.HasElement quirks, and add tests
8920baa function/stdlib: FormatFunc and FormatListFunc can handle DynamicPseudoType
6edebd2 Prepare for v1.16.1 development
6e06def v1.16.0 release
9dc31e2 Update CHANGELOG.md
Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.24.0 to 0.25.0

Commits

49a531d all: make method and struct comments match the names
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 8 updates: | Package | From | To | | --- | --- | --- | | [github.com/go-git/go-billy/v5](https://github.com/go-git/go-billy) | `5.6.1` | `5.6.2` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.13.0` | `5.13.2` | | [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) | `1.7.6` | `1.7.8` | | [github.com/hashicorp/go-plugin](https://github.com/hashicorp/go-plugin) | `1.6.2` | `1.6.3` | | [github.com/spf13/afero](https://github.com/spf13/afero) | `1.11.0` | `1.12.0` | | [github.com/spf13/pflag](https://github.com/spf13/pflag) | `1.0.5` | `1.0.6` | | [github.com/zclconf/go-cty](https://github.com/zclconf/go-cty) | `1.15.1` | `1.16.2` | | [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.24.0` | `0.25.0` | Updates `github.com/go-git/go-billy/v5` from 5.6.1 to 5.6.2 - [Release notes](https://github.com/go-git/go-billy/releases) - [Commits](go-git/go-billy@v5.6.1...v5.6.2) Updates `github.com/go-git/go-git/v5` from 5.13.0 to 5.13.2 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.13.0...v5.13.2) Updates `github.com/hashicorp/go-getter` from 1.7.6 to 1.7.8 - [Release notes](https://github.com/hashicorp/go-getter/releases) - [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml) - [Commits](hashicorp/go-getter@v1.7.6...v1.7.8) Updates `github.com/hashicorp/go-plugin` from 1.6.2 to 1.6.3 - [Release notes](https://github.com/hashicorp/go-plugin/releases) - [Changelog](https://github.com/hashicorp/go-plugin/blob/main/CHANGELOG.md) - [Commits](hashicorp/go-plugin@v1.6.2...v1.6.3) Updates `github.com/spf13/afero` from 1.11.0 to 1.12.0 - [Release notes](https://github.com/spf13/afero/releases) - [Commits](spf13/afero@v1.11.0...v1.12.0) Updates `github.com/spf13/pflag` from 1.0.5 to 1.0.6 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.5...v1.0.6) Updates `github.com/zclconf/go-cty` from 1.15.1 to 1.16.2 - [Release notes](https://github.com/zclconf/go-cty/releases) - [Changelog](https://github.com/zclconf/go-cty/blob/main/CHANGELOG.md) - [Commits](zclconf/go-cty@v1.15.1...v1.16.2) Updates `golang.org/x/oauth2` from 0.24.0 to 0.25.0 - [Commits](golang/oauth2@v0.24.0...v0.25.0) --- updated-dependencies: - dependency-name: github.com/go-git/go-billy/v5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/go-git/go-git/v5 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-getter dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/hashicorp/go-plugin dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/spf13/afero dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/spf13/pflag dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/zclconf/go-cty dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/oauth2 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Feb 1, 2025

dependabot bot requested a review from a team as a code owner February 1, 2025 21:22

dependabot bot requested a review from demeyerthom February 1, 2025 21:22

chore(deps): add changelog for dependabot updates

f018d62

demeyerthom merged commit a18472a into main Feb 28, 2025

demeyerthom deleted the dependabot/go_modules/go-5a9ba18a8d branch February 28, 2025 09:35

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore(deps): bump the go group with 8 updates #481

chore(deps): bump the go group with 8 updates #481

dependabot bot commented on behalf of github Feb 1, 2025

chore(deps): bump the go group with 8 updates #481

chore(deps): bump the go group with 8 updates #481

Conversation

dependabot bot commented on behalf of github Feb 1, 2025

v5.6.2

What's Changed

New Contributors

v5.13.2

What's Changed

v5.13.1

What's Changed

v1.7.8

What's Changed

v1.7.7

What's Changed

New Contributors

v1.6.3

v1.12.0

What's Changed

New Contributors

v1.0.6

What's Changed

New Contributors

v1.16.0

1.16.2 (January 21, 2025)

1.16.1 (January 13, 2025)

1.16.0 (January 3, 2025)