build(deps): Bump github.com/hashicorp/go-getter from 1.7.5 to 1.7.6 #21347
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [github.com/hashicorp/go-getter](https://github.com/hashicorp/go-getter) from 1.7.5 to 1.7.6. - [Release notes](https://github.com/hashicorp/go-getter/releases) - [Changelog](https://github.com/hashicorp/go-getter/blob/main/.goreleaser.yml) - [Commits](hashicorp/go-getter@v1.7.5...v1.7.6) --- updated-dependencies: - dependency-name: github.com/hashicorp/go-getter dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
A:automerge
WalkthroughWalkthroughThe changes encompass updates to multiple Changes
Possibly related issues
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configuration File (
|
…in /x/upgrade for all modules
sontrinh16
changed the title
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 0
Review details
Configuration used: .coderabbit.yml
Review profile: CHILL
Files ignored due to path filters (5)
simapp/go.sumis excluded by!**/*.sumsimapp/v2/go.sumis excluded by!**/*.sumtests/go.sumis excluded by!**/*.sumtools/cosmovisor/go.sumis excluded by!**/*.sumx/upgrade/go.sumis excluded by!**/*.sum
Files selected for processing (5)
- simapp/go.mod (4 hunks)
- simapp/v2/go.mod (4 hunks)
- tests/go.mod (4 hunks)
- tools/cosmovisor/go.mod (4 hunks)
- x/upgrade/go.mod (4 hunks)
Files skipped from review due to trivial changes (3)
- simapp/go.mod
- tests/go.mod
- tools/cosmovisor/go.mod
Additional comments not posted (14)
x/upgrade/go.mod (7)
25-25: Dependency update:github.com/hashicorp/go-getterThe dependency
github.com/hashicorp/go-getterhas been updated from v1.7.5 to v1.7.6. This update addresses a panic issue with invalid S3 URLs, aligning with the PR objectives.
32-32: Dependency update:google.golang.org/genproto/googleapis/apiThe dependency
google.golang.org/genproto/googleapis/apihas been updated to a new version. Ensure that this update does not introduce any breaking changes in your application.
58-58: Dependency update:github.com/aws/aws-sdk-goThe dependency
github.com/aws/aws-sdk-gohas been updated from v1.54.6 to v1.55.5. This update may enhance AWS service interactions. Verify that the update does not introduce any issues.
107-110: Dependency updates: Google APIsThe Google APIs dependencies have been updated to newer versions. Ensure that these updates do not introduce breaking changes in your application.
40-45: Dependency updates: Google Cloud packagesThe Google Cloud packages have been updated to newer versions. These updates may include bug fixes and performance improvements. Ensure compatibility with your application.
188-193: Dependency updates:golang.org/xpackagesThe
golang.org/xpackages have been updated to newer versions. These updates may include security fixes or enhancements. Ensure compatibility with your application.Verification successful
Dependency updates verified:
golang.org/xpackagesThe
golang.org/x/sync/errgrouppackage is actively used in the codebase, and its compatibility should be reviewed. Other updated packages (golang.org/x/oauth2,golang.org/x/sys,golang.org/x/term,golang.org/x/text,golang.org/x/time) were not found in direct usage, suggesting minimal or indirect impact. Ensure to test thoroughly for any indirect dependencies or runtime issues.
- Files using
golang.org/x/sync/errgroup:
x/gov/types/v1/genesis.gotestutil/network/util.gotestutil/network/validator.goserver/util.goserver/v2/server.gostore/v2/migration/manager.goserver/start.gostore/v2/root/store.goScripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Verify the impact of the updated `golang.org/x` packages. # Test: Search for usages of updated `golang.org/x` packages. rg --type go 'golang.org/x/'Length of output: 2970
Script:
#!/bin/bash # Description: Check for indirect usage of updated `golang.org/x` packages. # List all Go files to search for indirect dependencies fd --extension go # Check for indirect usage of updated packages in the Go files rg --type go 'golang.org/x/oauth2|golang.org/x/sync|golang.org/x/sys|golang.org/x/term|golang.org/x/text|golang.org/x/time'Length of output: 87932
178-182: Dependency updates: OpenTelemetry packagesThe OpenTelemetry packages have been updated from v1.27.0 to v1.28.0. These updates may include improvements in observability features. Ensure compatibility with your application.
simapp/v2/go.mod (7)
141-141: Dependency update:github.com/hashicorp/go-getterThe dependency
github.com/hashicorp/go-getterhas been updated from v1.7.5 to v1.7.6. This update addresses a panic issue with invalid S3 URLs, aligning with the PR objectives.
229-232: Dependency updates: Google APIsThe Google APIs dependencies have been updated to newer versions. Ensure that these updates do not introduce breaking changes in your application.
72-72: Dependency update:github.com/aws/aws-sdk-goThe dependency
github.com/aws/aws-sdk-gohas been updated from v1.54.6 to v1.55.5. This update may enhance AWS service interactions. Verify that the update does not introduce any issues.Verification successful
No impact from
github.com/aws/aws-sdk-goupdateThe dependency
github.com/aws/aws-sdk-gois not directly or indirectly used in the codebase, as indicated by the absence of any matches in the Go files. Therefore, updating it to version v1.55.5 should not introduce any issues.Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Verify the impact of the updated `github.com/aws/aws-sdk-go` dependency. # Test: Search for usages of `github.com/aws/aws-sdk-go`. rg --type go 'github.com/aws/aws-sdk-go'Length of output: 40
Script:
#!/bin/bash # Description: Search for any indirect references to `github.com/aws/aws-sdk-go` by checking for other related AWS SDK imports. rg --type go 'aws-sdk-go'Length of output: 25
130-133: Dependency updates: Google APIsThe Google APIs dependencies have been updated to newer versions. Ensure that these updates do not introduce breaking changes in your application.
212-216: Dependency updates: OpenTelemetry packagesThe OpenTelemetry packages have been updated from v1.27.0 to v1.28.0. These updates may include improvements in observability features. Ensure compatibility with your application.
48-53: Dependency updates: Google Cloud packagesThe Google Cloud packages have been updated to newer versions. These updates may include bug fixes and performance improvements. Ensure compatibility with your application.
222-227: Dependency updates:golang.org/xpackagesThe
golang.org/xpackages have been updated to newer versions. These updates may include security fixes or enhancements. Ensure compatibility with your application.
There was a problem hiding this comment.
Actionable comments posted: 0
Review details
Configuration used: .coderabbit.yml
Review profile: CHILL
Files ignored due to path filters (5)
simapp/go.sumis excluded by!**/*.sumsimapp/v2/go.sumis excluded by!**/*.sumtests/go.sumis excluded by!**/*.sumtools/cosmovisor/go.sumis excluded by!**/*.sumx/upgrade/go.sumis excluded by!**/*.sum
Files selected for processing (5)
- simapp/go.mod (4 hunks)
- simapp/v2/go.mod (4 hunks)
- tests/go.mod (4 hunks)
- tools/cosmovisor/go.mod (4 hunks)
- x/upgrade/go.mod (4 hunks)
Files skipped from review due to trivial changes (3)
- simapp/v2/go.mod
- tests/go.mod
- x/upgrade/go.mod
Additional comments not posted (14)
tools/cosmovisor/go.mod (7)
16-21: Dependency Updates: Cloud LibrariesThe updates to the
cloud.google.com/golibraries (lines 16-21) indicate minor version bumps, which typically include bug fixes and minor improvements. Ensure that these updates are compatible with your existing codebase and do not introduce any breaking changes.
36-36: Dependency Update: AWS SDKThe update to
github.com/aws/aws-sdk-gofromv1.54.6tov1.55.5is a minor version bump. Check for any changes in the AWS SDK that might affect your application, especially if you are using any specific AWS services.
88-91: Dependency Updates: Google LibrariesThe updates to
github.com/google/s2a-goandgithub.com/googleapis/gax-go/v2(lines 88-91) are minor version increments. These updates may include bug fixes or minor feature enhancements. Ensure that these changes do not affect any critical functionality in your application.
99-99: Key Update:github.com/hashicorp/go-getterThe update to
github.com/hashicorp/go-getterfromv1.7.5tov1.7.6addresses a panic issue with invalid S3 URLs. This is an important fix, and you should verify that this resolves any related issues in your application. Ensure that the updated version is tested thoroughly.
159-163: Dependency Updates: OpenTelemetryThe updates to the OpenTelemetry libraries (lines 159-163) reflect minor version changes. These updates may include enhancements in observability features. Ensure that these updates are compatible with your existing telemetry setup.
168-168: Dependency Update: OAuth2The update to
golang.org/x/oauth2fromv0.21.0tov0.22.0may include security improvements or changes in OAuth2 flows. Verify that your authentication mechanisms remain functional with this update.
173-177: Dependency Updates: Google API and GenprotoThe updates to
google.golang.org/apiandgoogle.golang.org/genprotolibraries (lines 173-177) are significant version changes. These updates might introduce new features or breaking changes. Ensure that your application is tested with these new versions to prevent any runtime issues.simapp/go.mod (7)
56-61: Dependency Updates: Cloud LibrariesThe updates to the
cloud.google.com/golibraries (lines 56-61) reflect minor version increments, which typically include bug fixes and minor improvements. Verify that these updates are compatible with your codebase and do not introduce any breaking changes.
71-71: Dependency Update: AWS SDKThe update to
github.com/aws/aws-sdk-gofromv1.54.6tov1.55.5is a minor version bump. Check for any changes in the AWS SDK that might affect your application, especially if you are using specific AWS services.
126-129: Dependency Updates: Google LibrariesThe updates to
github.com/google/s2a-goandgithub.com/googleapis/gax-go/v2(lines 126-129) are minor version increments. These updates may include bug fixes or minor feature enhancements. Ensure that these changes do not affect any critical functionality in your application.
137-137: Key Update:github.com/hashicorp/go-getterThe update to
github.com/hashicorp/go-getterfromv1.7.5tov1.7.6addresses a panic issue with invalid S3 URLs. This is an important fix, and you should verify that this resolves any related issues in your application. Ensure that the updated version is tested thoroughly.
206-210: Dependency Updates: OpenTelemetryThe updates to the OpenTelemetry libraries (lines 206-210) reflect minor version changes. These updates may include enhancements in observability features. Ensure that these updates are compatible with your existing telemetry setup.
216-216: Dependency Update: OAuth2The update to
golang.org/x/oauth2fromv0.21.0tov0.22.0may include security improvements or changes in OAuth2 flows. Verify that your authentication mechanisms remain functional with this update.
221-226: Dependency Updates: Google API and GenprotoThe updates to
google.golang.org/apiandgoogle.golang.org/genprotolibraries (lines 221-226) are significant version changes. These updates might introduce new features or breaking changes. Ensure that your application is tested with these new versions to prevent any runtime issues.
tac0turtle
deleted the
dependabot/go_modules/x/upgrade/github.com/hashicorp/go-getter-1.7.6
branch
Bumps github.com/hashicorp/go-getter from 1.7.5 to 1.7.6.
Release notes
Sourced from github.com/hashicorp/go-getter's releases.
Commits
4f07d24Merge pull request #501 from liamg/patch-18339301add tests83fd927Fix panic when s3 URL is invalidDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit
New Features
Bug Fixes
Chores