chore(deps): update go dependencies #1366
Closed
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
This PR contains the following updates:
v0.6.1->v0.6.2v0.5.0->v0.6.0v0.4.0->v0.6.0v1.7.0->v1.9.0v1.4.1->v1.4.3v0.20.2->v0.22.1v0.20.4->v0.21.2v0.22.9->v0.25.152ccab3->6e46e2e41bb18b->2c02b82v1.1.7->v1.3.2v0.6.8->v0.7.0v0.6.0->v0.7.0ff6d637->9e5a51av1.6.0->v1.7.2v0.0.0-20240620165639-de9c06129bec->v0.20250929.0v0.7.7->v0.9.1v1.1.0-rc5->v1.1.10f638a8->7f24529v0.22.0->v0.34.0v0.70.0->v0.85.0v1.18.0->v1.23.2v0.6.0->v0.6.2v0.48.0->v0.66.1v0.12.0->v0.17.0v0.9.0->v0.9.1v1.4.4->v1.7.1v1.8.15->v1.9.5v1.0.5->v1.0.101.22.9->1.23.6v0.32.0->v0.42.0ec58324->df92998v0.17.0->v0.28.0v0.25.0->v0.44.0v0.26.0->v0.31.0v0.10.0->v0.17.0v0.29.0->v0.36.0v0.28.0->v0.35.0v0.21.0->v0.29.0v0.5.0->v0.13.0v0.21.1-0.20240508182429-e35e4ccd0d2d->v0.37.0dc85e6b->57b25aev0.28.5->v0.34.1v0.28.5->v0.34.1v0.28.5->v0.34.1v0.28.5->v0.34.1v0.28.5->v0.34.12ac9dc5->589584fe7106e6->0af2bdav0.16.3->v0.22.1bc3834c->2d32026v1.4.0->v1.6.0Warning
Some dependencies could not be looked up. Check the warning logs for more information.
Release Notes
Microsoft/go-winio (github.com/Microsoft/go-winio)
v0.6.2Compare Source
What's Changed
New Contributors
Full Changelog: microsoft/go-winio@v0.6.1...v0.6.2
distribution/reference (github.com/distribution/reference)
v0.6.0Compare Source
What's Changed
New Contributors
Full Changelog: distribution/reference@v0.5.0...v0.6.0
docker/go-connections (github.com/docker/go-connections)
v0.6.0Compare Source
v0.5.0Compare Source
fsnotify/fsnotify (github.com/fsnotify/fsnotify)
v1.9.0Compare Source
Changes and fixes
all: make BufferedWatcher buffered again (#657)
inotify: fix race when adding/removing watches while a watched path is being deleted (#678, #686)
inotify: don't send empty event if a watched path is unmounted (#655)
inotify: don't register duplicate watches when watching both a symlink and its target; previously that would get "half-added" and removing the second would panic (#679)
kqueue: fix watching relative symlinks (#681)
kqueue: correctly mark pre-existing entries when watching a link to a dir on kqueue (#682)
illumos: don't send error if changed file is deleted while processing the event (#678)
v1.8.0Compare Source
Additions
FSNOTIFY_DEBUGto print debug logs to stderr (#619)Changes and fixes
windows: fix behaviour of
WatchList()to be consistent with other platforms (#610)kqueue: ignore events with Ident=0 (#590)
kqueue: set O_CLOEXEC to prevent passing file descriptors to children (#617)
kqueue: emit events as "/path/dir/file" instead of "path/link/file" when watching a symlink (#625)
inotify: don't send event for IN_DELETE_SELF when also watching the parent (#620)
inotify: fix panic when calling Remove() in a goroutine (#650)
fen: allow watching subdirectories of watched directories (#621)
go-logr/logr (github.com/go-logr/logr)
v1.4.3Compare Source
Minor release.
What's Changed
New Contributors
Full Changelog: go-logr/logr@v1.4.2...v1.4.3
v1.4.2Compare Source
What's Changed
Dependencies:
Full Changelog: go-logr/logr@v1.4.1...v1.4.2
go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)
v0.22.1Compare Source
v0.22.0Compare Source
v0.21.2Compare Source
v0.21.1Compare Source
v0.21.0Compare Source
v0.20.3Compare Source
go-openapi/jsonreference (github.com/go-openapi/jsonreference)
v0.21.2Compare Source
v0.21.1Compare Source
v0.21.0Compare Source
v0.20.5Compare Source
go-openapi/swag (github.com/go-openapi/swag)
v0.25.1Compare Source
v0.25.0Compare Source
v0.24.1Compare Source
v0.24.0Compare Source
v0.23.1Compare Source
v0.23.0Compare Source
v0.22.10Compare Source
google/certificate-transparency-go (github.com/google/certificate-transparency-go)
v1.3.2Compare Source
Misc
CTFE Storage Saving: Extra Data Issuance Chain Deduplication
CTFE Rate Limiting Of Non-Fresh Submissions
To protect a log from being flooded with requests for "old" certificates, optional rate limiting for "non-fresh submissions" can be configured by providing the following flags:
non_fresh_submission_agenon_fresh_submission_burstnon_fresh_submission_limitThis can help to ensure that the log maintains its ability to (1) accept "fresh" submissions and (2) distribute all log entries to monitors.
Dependency updates
v1.3.1Compare Source
Dependency Update
v1.3.0Compare Source
CTFE Storage Saving: Extra Data Issuance Chain Deduplication
This feature now supports PostgreSQL, in addition to the support for MySQL/MariaDB that was added in v1.2.0.
Log operators can choose to enable this feature for new PostgreSQL-based CT logs by adding new CTFE configs in the LogMultiConfig and importing the database schema. The other available options are documented in the v1.2.0 changelog entry.
This change is tested in Cloud Build tests using the
postgres:17Docker image as of the time of writing.Misc
Dependency update
v1.2.2Compare Source
Add TLS Support
Add TLS support for Trillian: By using
--trillian_tls_ca_cert_fileflag, users can provide a CA certificate, that is used to establish a secure communication with Trillian log server.Add TLS support for ct_server: By using
--tls_certificateand--tls_keyflags, users can provide a service certificate and key, that enables the server to handle HTTPS requests.HTTP Idle Connection Timeout Flag
A new flag
http_idle_timeoutis added to set the HTTP server's idle timeout value in the ct_server binary. This controls the maximum amount of time to wait for the next request when keep-alives are enabled.Misc
Fixes
Dependency update
aec4784to9678844in /internal/witness/cmd/witness in the all-deps group by @dependabot in #1518aec4784to9678844in /internal/witness/cmd/feeder in the all-deps group by @dependabot in #1517aec4784to9678844in /trillian/examples/deployment/docker/ctfe in the all-deps group by @dependabot in #1513aec4784to9678844in /integration in the all-deps group by @dependabot in #151477726eftob89d9c9in /trillian/examples/deployment/docker/envsubst in the all-deps group by @dependabot in #151977726eftob89d9c9in /internal/witness/cmd/feeder in the all-deps group by @dependabot in #15206c27802toaf9b40fin /trillian/examples/deployment/docker/ctfe in the all-deps group by @dependabot in #15446c27802toaf9b40fin /internal/witness/cmd/witness in the all-deps group by @dependabot in #15486c27802toaf9b40fin /integration in the all-deps group by @dependabot in #1547b89d9c9to0a4eaa0in /trillian/examples/deployment/docker/envsubst in the all-deps group by @dependabot in #1546Configuration
📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
To execute skipped test pipelines write comment
/ok-to-test.This PR has been generated by MintMaker (powered by Renovate Bot).