Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): update gomod #58

Merged
merged 3 commits into from
Jan 18, 2024
Merged

chore(deps): update gomod #58

merged 3 commits into from
Jan 18, 2024

Conversation

mend-for-github-com[bot]
Copy link
Contributor

@mend-for-github-com mend-for-github-com bot commented Jan 15, 2024

This PR contains the following updates:

EDIT: Removed protobuf and grpc from this manually. - Sheldon/Andrii

Package Change Age Adoption Passing Confidence
github.com/bitfield/script v0.21.4 -> v0.22.0 age adoption passing confidence
github.com/golang/protobuf v1.2.0 -> v1.5.3 age adoption passing confidence
github.com/gorilla/mux v1.8.0 -> v1.8.1 age adoption passing confidence
github.com/magefile/mage v1.14.0 -> v1.15.0 age adoption passing confidence
github.com/pterm/pterm v0.12.58 -> v0.12.75 age adoption passing confidence
github.com/sheldonhull/magetools v1.0.0 -> v1.0.1 age adoption passing confidence
github.com/sirupsen/logrus v1.2.0 -> v1.9.3 age adoption passing confidence
github.com/stretchr/testify v1.8.2 -> v1.8.4 age adoption passing confidence

Release Notes

bitfield/script (github.com/bitfield/script)

v0.22.0

Compare Source

golang/protobuf (github.com/golang/protobuf)

v1.5.3

Compare Source

Notable changes

*( #​1363) jsonpb: accept 'null' as a valid representation of NullValue in unmarshal

v1.5.2

Compare Source

Notable changes:

  • (#​1306) all: deprecate the module
  • (#​1300) jsonpb: restore previous behavior for handling nulls and JSONPBUnmarshaler

v1.5.1

Compare Source

Notable changes:

v1.5.0

Compare Source

Overview

This marks the ptypes package as deprecated and upgrades the dependency on google.golang.org/protobuf to a pre-release version of v1.26.0. A subsequent patch release will update the dependency to v1.26.0 proper.

Notable changes

  • (#​1217) ptypes: deprecate the package
  • (#​1214) rely on protodesc.ToFileDescriptorProto

v1.4.3

Compare Source

Notable changes:

  • (#​1221) jsonpb: Fix marshaling of Duration
  • (#​1210) proto: convert integer to rune before converting to string

v1.4.2

Compare Source

Notable changes:

v1.4.1

Compare Source

Notable changes:

v1.4.0

Compare Source

Overview

This release of the github.com/golang/protobuf module introduces a number of significant changes relative to the previous minor release. In particular, this module is now implemented in terms of the new google.golang.org/protobuf module, which is the next major revision of Go bindings for protocol buffers. From this point onwards, most of the development effort for Go protobufs will be dedicated to the new module, with minimal changes being made to this module.

See the release notes for the new module for specific implementation details that may affect this release.

Backwards compatibility

This release maintains backwards compatibility with previous releases of this module. Any observable changes in behavior are to fix bugs, change unspecified behavior, or to make behavior more compliant with the protobuf specification. The compatibility document provides us the freedom to make changes in these areas.

Notable changes

Wire serialization

Wire serialization is now implemented in terms of the new proto package by calling out to the relevant functionality in that package (e.g., proto.Marshal and proto.Unmarshal). There should be no observable changes in behavior other what is mentioned elsewhere in the release notes (e.g., behavior around errors or nil values).

JSON and text serialization

The JSON and text format implementations have been ported to use protobuf reflection under the hood instead of relying on Go reflection. This provides flexibility as they can operate on any concrete message type that properly implements the new proto.Message interface.

The implementations do not use the new protojson or prototext packages in order to maintain a higher degree of backwards compatibility. Our analysis unfortunately showed us that too many tests rely on their output being stable by performing byte-for-byte comparisons. Even though the compatibility promise gives us the freedom to change the output, we have chosen not to do so for pragmatic reasons. The implementations are now functionally frozen (bugs and all) and will not receive future improvements. Users are encouraged to migrate to the protojson or prototext packages instead.

Well-known types

The well-known types declared under ptypes are moved to the google.golang.org/protobuf module. The packages continue to exist, but all declarations forward to ones in the new module.

For a period of time, it is expected that the protoc-gen-go plugin continues to generate code with dependencies on the well-known types in this module. The import paths for the well-known types are determined by the go_package option specified in the .proto files. Since these files are managed by the main protocol buffers project, it will require a new release of the protobuf toolchain before the new import paths take effect. Depending on this module’s packages for well-known types is fine since they simply forward over to the new packages.

While descriptor and plugin are not packages for well-known types, they too have also been moved to the new module.

Types registry

In order for dynamic usages of protobufs to operate correctly, there must be a unified registry between this module and the new google.golang.org/protobuf module. The protoregistry package is the primary registry for all protobuf files that are linked into a Go program. The registration functions (e.g., proto.RegisterType) in this package forward to the global registries in that module, and the lookup functions (e.g., proto.MessageType) in this package source from the global registries in that module.

Nil values

Use of the google.golang.org/protobuf module for the underlying implementation means that semantics for nil values may have changed. See that module’s release notes for details.

Errors

A consequence of using the google.golang.org/protobuf module as the underlying implementation means that the text for some errors may change in trivial ways. This may break brittle tests depending on the error message. See that module’s release notes for details.

Generated code

The protoc-gen-go plugin in this module is now a thin wrapper over the protoc-gen-go plugin in the google.golang.org/protobuf module. As a result, there are many changes to the generated code. See that module’s release notes for details. Users should migrate to use the new protoc-gen-go plugin instead of the old one. Code generated by either plugin should be compatible with either module.

For backward compatibility purposes, the protoc-gen-go plugin in this module continues to support generation of gRPC bindings, while the protoc-gen-go plugin in the new module does not.

Upcoming breakage changes

Per the compatibility agreement for Go protobufs, we promise to make announcements about deliberate or potentially breaking changes 6 months in advance.

None of these changes are effective yet in this release.

Deprecation of Descriptor methods

The Descriptor methods on generated messages are deprecated and may be removed in the future.

The descriptor.Message type is deprecated as fewer and fewer message types in the future will implement the descriptor.Message interface. Existing usages should migrate to the new proto.Message interface.

The descriptor.ForMessage function is also deprecated. Users should migrate the code to use protobuf reflection to access descriptor information.

Removal of generator package

The generator package is an internal implementation detail of protoc-gen-go and existed before the internal package mechanism. It has long been exempt from the compatibility promise. A future release of this module will remove the package. Existing users must migrate to the new compiler/protogen package, which is a stable API for implementing protoc plugins, or fork the existing generator package.

Similarly, the grpc package is also an internal implementation detail of protoc-gen-go and will also be deleted in a future release of this module.

v1.3.5

Compare Source

Notable changes:

  • Set go.mod Go version to go 1.9.

v1.3.4

Compare Source

Notable changes:

  • Updated google/protobuf/*.proto to github.com/protocolbuffers/protobuf v3.11.4.
  • Minor change to protoc-gen-go output to avoid post-gofmt variation between go1.13 and go1.14.

v1.3.3

Compare Source

Notable changes:

  • #​1025 grpc: accept interface in NewClient functions

v1.3.2

Compare Source

Notable changes:

  • #​785: grpc code generation: add an UnimplementedServer type implementing each server interface, returning an unimplemented error for each method
  • #​851: convert prints to os.Stderr to use log.Printf
  • #​883: jsonpb: fix marshaling of Duration with negative nanoseconds

v1.3.1

Compare Source

Notable change:

  • The set of dependencies specified in go.mod has now been reduced to only the standard library.

v1.3.0

Compare Source

Notable changes:

  • #​699: add a go.mod module file
  • #​701: stop generating package "// import" comment
  • #​741: deprecate {Unm,M}arshalMessageSet{JSON}
  • #​760: different internal implementation of oneofs
  • various minor changes to code generation
gorilla/mux (github.com/gorilla/mux)

v1.8.1

Compare Source

What's Changed

New Contributors

Full Changelog: gorilla/mux@v1.8.0...v1.8.1

magefile/mage (github.com/magefile/mage)

v1.15.0

Compare Source

Changelog

pterm/pterm (github.com/pterm/pterm)

v0.12.75

Compare Source

What's Changed

Fixes 🔧

Full Changelog: pterm/pterm@v0.12.74...v0.12.75

v0.12.74

Compare Source

What's Changed

Exciting New Features 🎉
Other Changes

Full Changelog: pterm/pterm@v0.12.73...v0.12.74

v0.12.73

Compare Source

What's Changed

Fixes 🔧
Other Changes

New Contributors

Full Changelog: pterm/pterm@v0.12.72...v0.12.73

v0.12.72

Compare Source

What's Changed

Fixes 🔧
Other Changes

New Contributors

Full Changelog: pterm/pterm@v0.12.71...v0.12.72

v0.12.71

Compare Source

What's Changed

Fixes 🔧

Full Changelog: pterm/pterm@v0.12.70...v0.12.71

v0.12.70: Heatmap Printer 🎉

Compare Source

What's Changed

Exciting New Features 🎉
Fixes 🔧

Full Changelog: pterm/pterm@v0.12.69...v0.12.70

v0.12.69

Compare Source

What's Changed

Exciting New Features 🎉

New Contributors

Full Changelog: pterm/pterm@v0.12.68...v0.12.69

v0.12.68

Compare Source

What's Changed

Fixes 🔧

New Contributors

Full Changelog: pterm/pterm@v0.12.67...v0.12.68

v0.12.67: Pretty slog handler!

Compare Source

What's Changed

Exciting New Features 🎉

Demo

Full Changelog: pterm/pterm@v0.12.66...v0.12.67

v0.12.66

Compare Source

What's Changed

Exciting New Features 🎉

Animation

Other Changes

Full Changelog: pterm/pterm@v0.12.65...v0.12.66

v0.12.65

Compare Source

What's Changed

Fixes 🔧

Full Changelog: pterm/pterm@v0.12.64...v0.12.65

v0.12.64

Compare Source

What's Changed

Exciting New Features 🎉

New Contributors

Full Changelog: pterm/pterm@v0.12.63...v0.12.64

v0.12.63

Compare Source

What's Changed

Exciting New Features 🎉
Fixes 🔧
Other Changes

New Contributors

Full Changelog: pterm/pterm@v0.12.62...v0.12.63

v0.12.62

Compare Source

What's Changed

Fixes 🔧

New Contributors

Full Changelog: pterm/pterm@v0.12.61...v0.12.62

v0.12.61

Compare Source

What's Changed

Fixes 🔧

Full Changelog: pterm/pterm@v0.12.60...v0.12.61

v0.12.60

Compare Source

What's Changed

Exciting New Features 🎉
Fixes 🔧
Other Changes

Full Changelog: pterm/pterm@v0.12.59...v0.12.60

v0.12.59

Compare Source

What's Changed

Exciting New Features 🎉
Other Changes

New Contributors

Full Changelog: pterm/pterm@v0.12.58...v0.12.59

sheldonhull/magetools (github.com/sheldonhull/magetools)

v1.0.1

Compare Source

🎉 Feature
  • New package trunk for automation on trunk installation, upgrades, and setup.
🤖 CI & Build
  • Adjust changie to latest version with block input support and new cleaned up categories.
🐛 Bug Fix
  • Label on go:lint incorrectly stated gotestsum found. This is fixed.
🔨 Refactor
  • Adjust magetoolsutils output to be less verbose and output to debug when matching condition instead of Info level, as this has to be used in many functions and is noisy.
  • Improve ci.IsCI() to detect GitHub specifically, Gitlab, and then resolve CI=1 as generic CI instead.
sirupsen/logrus (github.com/sirupsen/logrus)

v1.9.3

Compare Source

Full Changelog: sirupsen/logrus@v1.9.2...v1.9.3

v1.9.2

Compare Source

Full Changelog: sirupsen/logrus@v1.9.1...v1.9.2

v1.9.1

Compare Source

What's Changed

New Contributors

Full Changelog: sirupsen/logrus@v1.9.0...v1.9.1

v1.9.0

Compare Source

v1.8.3

Compare Source

What's Changed

New Contributors

Full Changelog: sirupsen/logrus@v1.8.2...v1.8.3

v1.8.2

Compare Source

What's Changed

New Contributors

Full Changelog: sirupsen/logrus@v1.8.1...v1.8.2

v1.8.1

Compare Source

v1.8.0

Compare Source

Correct versioning number replacing v1.7.1

v1.7.1

Compare Source

Code quality:

  • use go 1.15 in travis
  • use magefile as task runner

Fixes:

  • small fixes about new go 1.13 error formatting system
  • Fix for long time race condiction with mutating data hooks

Features:

  • build support for zos

v1.7.0: Add new BufferPool and LogFunction APIs

Compare Source

  • a new buffer pool management API has been added
  • a set of <LogLevel>Fn() functions have been added

Configuration

📅 Schedule: Branch creation - "every weekday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

@mend-for-github-com mend-for-github-com bot requested a review from a team as a code owner January 15, 2024 18:37
@mend-for-github-com mend-for-github-com bot enabled auto-merge (squash) January 15, 2024 18:37
renovate-approve[bot]
renovate-approve bot previously approved these changes Jan 15, 2024
Copy link
Contributor

@sheldonhull sheldonhull left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

also related AB#548696

sheldonhull
sheldonhull previously approved these changes Jan 16, 2024
@sheldonhull
Copy link
Contributor

Not sure why it's having an issue with the kubernetes libraries vs the third party one as this doesn't update anything related to those. Have to dig more.

- update transitive dependencies for go
- update only the compatible packages that don't require api changes (so known issue on protobuf and grpc
sheldonhull
sheldonhull previously approved these changes Jan 18, 2024
Copy link
Contributor

@sheldonhull sheldonhull left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

worked through manual updates and excluded the packages that are incompatible.

@sheldonhull sheldonhull disabled auto-merge January 18, 2024 15:32
@sheldonhull sheldonhull dismissed stale reviews from andrii-zakurenyi and themself via efbcd41 January 18, 2024 15:33
@sheldonhull sheldonhull merged commit 3f2d176 into main Jan 18, 2024
6 of 7 checks passed
@sheldonhull sheldonhull deleted the whitesource-remediate/gomod branch January 18, 2024 15:36
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants