You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

207 lines
10 KiB

build(deps): Bump github.com/BurntSushi/toml from 0.4.1 to 1.0.0 (#7562) Bumps [github.com/BurntSushi/toml](https://github.com/BurntSushi/toml) from 0.4.1 to 1.0.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/BurntSushi/toml/releases">github.com/BurntSushi/toml's releases</a>.</em></p> <blockquote> <h2>v1.0.0</h2> <p>This release adds much more detailed errors, support for the <code>toml.Marshaler</code> interface, and several fixes.</p> <p>There is no special meaning in the jump to v1.0; the 0.x releases were always treated as if they're 1.x with regards to compatibility; the versioning scheme for this library predates the release of modules.</p> <h2>New features</h2> <ul> <li> <p>Error reporting is much improved; the reported position of errors should now always be correct and the library can print more detailed errors (<a href="https://github-redirect.dependabot.com/BurntSushi/toml/issues/299">#299</a>, <a href="https://github-redirect.dependabot.com/BurntSushi/toml/issues/332">#332</a>)</p> <p>Decode always return a <code>toml.ParseError</code>, which has three methods:</p> <ul> <li> <p><code>Error()</code> behaves as before and shows a single concise line with the error.</p> </li> <li> <p><code>ErrorWithLocation()</code> shows the same error, but also shows the line the error occurred at, similar to e.g. clang or the Rust compiler.</p> </li> <li> <p><code>ErrorWithUsage()</code> is the same as <code>ErrorWithPosition()</code>, but may also show a longer usage guidance message. This isn't always present (in which case it behaves identical to <code>ErrorWithPosition()</code>), but it should be present for most common mistakes and sources of confusion.</p> </li> </ul> <p>Which error the correct one to use is depends on your application and preferences; in general I would recommend using at least <code>ErrorWithPosition()</code> for user-facing errors, as it's much more helpful for users of any skill level. If your users are likely to be non-technical then <code>ErrorWithUsage()</code> is probably a good idea; I did my best to avoid technical jargon such as &quot;newline&quot; and phrase things in a way that's understandable by most people not intimately familiar with these sort of things.</p> <p>Additionally, the TOML key that fialed should now always be reported in all errors.</p> </li> <li> <p>Add <code>toml.Marshaler</code> interface. This can be used if you want full control over how something is marshalled as TOML, similar to <code>json.Marshaler</code> etc. This takes precedence over <code>encoding.TextMarshaler</code>. (<a href="https://github-redirect.dependabot.com/BurntSushi/toml/issues/327">#327</a>)</p> </li> <li> <p>Allow TOML integers to be decoded to a Go float (<a href="https://github-redirect.dependabot.com/BurntSushi/toml/issues/325">#325</a>)</p> <p>Previously <code>int = 42</code> could only be decoded to an <code>int*</code> type; now this can also be decoded in a <code>float</code> type as long as it can be represented without loss of data.</p> </li> </ul> <h2>Fixes</h2> <ul> <li> <p>Key.String() is now quoted when needed (<a href="https://github-redirect.dependabot.com/BurntSushi/toml/issues/333">#333</a>)</p> </li> <li> <p>Fix decoding of nested structs on 32bit platforms (<a href="https://github-redirect.dependabot.com/BurntSushi/toml/issues/314">#314</a>)</p> </li> <li> <p>Empty slices are now always <code>[]T{}</code> rather than nil, which was the behaviour in v0.3.1 and before. While they are identical for most purposes, encoding/json encodes them different (<code>[]</code> vs. <code>null</code>), making it an (accidentally) incompatible change (<a href="https://github-redirect.dependabot.com/BurntSushi/toml/issues/339">#339</a>)</p> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/BurntSushi/toml/commit/4272474656f1b35414cdee32185a45e36b39246e"><code>4272474</code></a> Reject control characters everywhere</li> <li><a href="https://github.com/BurntSushi/toml/commit/9bbaaec997900f53eebd078adb4f041f7f45f5ef"><code>9bbaaec</code></a> Update toml-test</li> <li><a href="https://github.com/BurntSushi/toml/commit/8a54f3e8df7eea389c18e58707d6215333f1e47e"><code>8a54f3e</code></a> Merge TestDecodeInterfaceSlice in TestDecodeSlices</li> <li><a href="https://github.com/BurntSushi/toml/commit/9515b929790931bfe0e72976a031c3a5f0e4c664"><code>9515b92</code></a> Decode S=[] into a non-nil []interface{}. (<a href="https://github-redirect.dependabot.com/BurntSushi/toml/issues/339">#339</a>)</li> <li><a href="https://github.com/BurntSushi/toml/commit/7d0236fe74765a731cf768bea23b9132b8c2b9e0"><code>7d0236f</code></a> Make sure quoted keys with dots work well (<a href="https://github-redirect.dependabot.com/BurntSushi/toml/issues/333">#333</a>)</li> <li><a href="https://github.com/BurntSushi/toml/commit/ff0a3f89c20b18b5a8637bc3526e5abc0bce25e1"><code>ff0a3f8</code></a> Add back build tags for toml-test files</li> <li><a href="https://github.com/BurntSushi/toml/commit/7356d5f88875523b62c873d04211212bcf03553b"><code>7356d5f</code></a> Few staticcheck fixes</li> <li><a href="https://github.com/BurntSushi/toml/commit/b1471ff6cfa7e6d80627cbae2eefcb7ecec96c99"><code>b1471ff</code></a> Don't allow &quot;0_0&quot;</li> <li><a href="https://github.com/BurntSushi/toml/commit/847ee8a07aeacf66cbe16c51cde1dfed0d81fcf1"><code>847ee8a</code></a> Update toml-test</li> <li><a href="https://github.com/BurntSushi/toml/commit/461925704ed4d72ccc1fd51fe69bb3ac47091330"><code>4619257</code></a> Clearer errors when decoding to invalid types (<a href="https://github-redirect.dependabot.com/BurntSushi/toml/issues/332">#332</a>)</li> <li>Additional commits viewable in <a href="https://github.com/BurntSushi/toml/compare/v0.4.1...v1.0.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/BurntSushi/toml&package-manager=go_modules&previous-version=0.4.1&new-version=1.0.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
3 years ago
build(deps): Bump github.com/adlio/schema from 1.2.2 to 1.2.3 (#7432) Bumps [github.com/adlio/schema](https://github.com/adlio/schema) from 1.2.2 to 1.2.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/adlio/schema/releases">github.com/adlio/schema's releases</a>.</em></p> <blockquote> <h2>1.2.3</h2> <h2>What's Changed</h2> <ul> <li>Restore ability to chain NewMigrartor().Apply() by <a href="https://github.com/adlio"><code>@​adlio</code></a> in <a href="https://github-redirect.dependabot.com/adlio/schema/pull/14">adlio/schema#14</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/adlio/schema/compare/v1.2.2...v1.2.3">https://github.com/adlio/schema/compare/v1.2.2...v1.2.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/adlio/schema/commit/770089bd7517c63f5f10d9e8f1249981963635b3"><code>770089b</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/adlio/schema/issues/14">#14</a> from adlio/pointer-fix</li> <li><a href="https://github.com/adlio/schema/commit/1fd2bbf008088abd306b733669ac4605e6c86b61"><code>1fd2bbf</code></a> Restore the ability to run NewMigrator().Apply()</li> <li>See full diff in <a href="https://github.com/adlio/schema/compare/v1.2.2...v1.2.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/adlio/schema&package-manager=go_modules&previous-version=1.2.2&new-version=1.2.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
3 years ago
build(deps): Bump github.com/golangci/golangci-lint from 1.42.1 to 1.43.0 (#7219) Bumps [github.com/golangci/golangci-lint](https://github.com/golangci/golangci-lint) from 1.42.1 to 1.43.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/golangci/golangci-lint/releases">github.com/golangci/golangci-lint's releases</a>.</em></p> <blockquote> <h2>v1.43.0</h2> <h2>Changelog</h2> <p>bdc2f96d Add code comments to document source code (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2306">#2306</a>) 861262b7 Add github.com/breml/bidichk linter (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2330">#2330</a>) 32292622 Add nilnil linter (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2236">#2236</a>) 20699a72 Add tenv linter (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2221">#2221</a>) e612577d Bump gochecknoglobals to v0.1.0 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2317">#2317</a>) 1be9570a Refactor: preallocate slices (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2340">#2340</a>) 813ba7d9 Update index.mdx (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2230">#2230</a>) f500e4cb add varnamelen linter (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2240">#2240</a>) e6c56694 build(deps): bump github.com/Antonboom/errname from 0.1.4 to 0.1.5 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2249">#2249</a>) a37843b1 build(deps): bump github.com/butuzov/ireturn from 0.1.0 to 0.1.1 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2246">#2246</a>) 680f3e6c build(deps): bump github.com/charithe/durationcheck from 0.0.8 to 0.0.9 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2289">#2289</a>) 00e47702 build(deps): bump github.com/esimonov/ifshort from 1.0.2 to 1.0.3 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2303">#2303</a>) d3fc84bc build(deps): bump github.com/fatih/color from 1.12.0 to 1.13.0 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2259">#2259</a>) 4ce9a19e build(deps): bump github.com/go-critic/go-critic from 0.5.6 to 0.6.0 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2041">#2041</a>) 5adafe52 build(deps): bump github.com/jingyugao/rowserrcheck from 1.1.0 to 1.1.1 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2326">#2326</a>) 3fe324a1 build(deps): bump github.com/kunwardeep/paralleltest from 1.0.2 to 1.0.3 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2244">#2244</a>) 739ccd3f build(deps): bump github.com/mattn/go-colorable from 0.1.10 to 0.1.11 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2277">#2277</a>) c6c55d25 build(deps): bump github.com/mattn/go-colorable from 0.1.8 to 0.1.9 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2252">#2252</a>) 8f2af022 build(deps): bump github.com/mattn/go-colorable from 0.1.9 to 0.1.10 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2260">#2260</a>) 78d309e7 build(deps): bump github.com/mgechev/revive from 1.1.1 to 1.1.2 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2276">#2276</a>) 1012c10d build(deps): bump github.com/nakabonne/nestif from 0.3.0 to 0.3.1 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2325">#2325</a>) 6edca924 build(deps): bump github.com/securego/gosec/v2 from 2.8.1 to 2.9.1 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2299">#2299</a>) 963257f9 build(deps): bump github.com/shirou/gopsutil/v3 from 3.21.7 to 3.21.8 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2225">#2225</a>) b9f015cc build(deps): bump github.com/shirou/gopsutil/v3 from 3.21.8 to 3.21.9 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2275">#2275</a>) 9f628531 build(deps): bump github.com/shirou/gopsutil/v3 from 3.21.9 to 3.21.10 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2327">#2327</a>) f1258315 build(deps): bump github.com/spf13/viper from 1.8.1 to 1.9.0 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2243">#2243</a>) 60a9d16f build(deps): bump github.com/tetafro/godot from 1.4.10 to 1.4.11 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2248">#2248</a>) 8c60147b build(deps): bump github.com/tetafro/godot from 1.4.9 to 1.4.10 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2226">#2226</a>) 2fb65636 build(deps): bump github.com/tomarrell/wrapcheck/v2 from 2.3.0 to 2.3.1 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2278">#2278</a>) 9bb917de build(deps): bump github.com/tomarrell/wrapcheck/v2 from 2.3.1 to 2.4.0 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2324">#2324</a>) 59c7b10b build(deps): bump github.com/valyala/quicktemplate from 1.6.3 to 1.7.0 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2250">#2250</a>) 5d4fe00f build(deps): bump golang.org/x/tools from 0.1.5 to 0.1.6 (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2245">#2245</a>) 91016acc build(deps): bump tmpl from 1.0.4 to 1.0.5 in /.github/peril (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2247">#2247</a>) f47f4f55 codeql: Remove unneeded steps (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2336">#2336</a>) 413bec6a errcheck: empty selector name. (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2309">#2309</a>) 7fc2fe81 feat: add contextcheck linter (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2216">#2216</a>) 8cb9c769 fix: Add missing space in &quot;disabled by config&quot; warning (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2310">#2310</a>) a8887d56 fix: don't hide enable-all option (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2338">#2338</a>) cf9f3f95 fix: go.sum (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2262">#2262</a>) 2c01ea7f gocritic: add support for variable substitution in ruleguard path settings (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2308">#2308</a>) cc262bba gosec: filter issues according to the severity and confidence (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2295">#2295</a>) 9b577fcb new-from-rev: add support for finding issues in entire files in a diff (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2264">#2264</a>) 2ea496f2 new-linter: ireturn (checks for function return type) (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2219">#2219</a>) 17d24ebd nlreturn: add block-size option (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2237">#2237</a>)</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golangci/golangci-lint/commit/861262b71f42542304a28afe0b396e788e6e4638"><code>861262b</code></a> Add github.com/breml/bidichk linter (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2330">#2330</a>)</li> <li><a href="https://github.com/golangci/golangci-lint/commit/77d4115b0f784bd5a48506ee4fb11e4b10ab2584"><code>77d4115</code></a> docs: add documentation for go-critic and ruleguard settings (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2304">#2304</a>)</li> <li><a href="https://github.com/golangci/golangci-lint/commit/2c01ea7ff2bb8aefd99c428d21f66c9376b9f0d2"><code>2c01ea7</code></a> gocritic: add support for variable substitution in ruleguard path settings (#...</li> <li><a href="https://github.com/golangci/golangci-lint/commit/f9f6486e15f209382d820a69296d4ab9f7e67c8d"><code>f9f6486</code></a> docs: change Github to GitHub in comments and docs (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2341">#2341</a>)</li> <li><a href="https://github.com/golangci/golangci-lint/commit/1be9570abf08ac3b2fc7ff9ddd65fb2436dab358"><code>1be9570</code></a> Refactor: preallocate slices (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2340">#2340</a>)</li> <li><a href="https://github.com/golangci/golangci-lint/commit/a8887d565597fb898c0db74c739c2dbb04d2ca24"><code>a8887d5</code></a> fix: don't hide enable-all option (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2338">#2338</a>)</li> <li><a href="https://github.com/golangci/golangci-lint/commit/f47f4f5557711767c6858d10a7704977c79b20aa"><code>f47f4f5</code></a> codeql: Remove unneeded steps (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2336">#2336</a>)</li> <li><a href="https://github.com/golangci/golangci-lint/commit/8cb9c769ff546f72f527a00f516a8b1097033286"><code>8cb9c76</code></a> fix: Add missing space in &quot;disabled by config&quot; warning (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2310">#2310</a>)</li> <li><a href="https://github.com/golangci/golangci-lint/commit/a2b2968b12afa7df428f471f9eebb77c089458b8"><code>a2b2968</code></a> build(deps): bump gatsby-plugin-robots-txt in /docs (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2332">#2332</a>)</li> <li><a href="https://github.com/golangci/golangci-lint/commit/dcaaa894afab7d315aa48548fc8df9f0a7d656e1"><code>dcaaa89</code></a> build(deps): bump gatsby-remark-copy-linked-files in /docs (<a href="https://github-redirect.dependabot.com/golangci/golangci-lint/issues/2335">#2335</a>)</li> <li>Additional commits viewable in <a href="https://github.com/golangci/golangci-lint/compare/v1.42.1...v1.43.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/golangci/golangci-lint&package-manager=go_modules&previous-version=1.42.1&new-version=1.43.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
3 years ago
build(deps): Bump github.com/grpc-ecosystem/go-grpc-middleware from 1.2.2 to 1.3.0 (#6387) Bumps [github.com/grpc-ecosystem/go-grpc-middleware](https://github.com/grpc-ecosystem/go-grpc-middleware) from 1.2.2 to 1.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc-ecosystem/go-grpc-middleware/releases">github.com/grpc-ecosystem/go-grpc-middleware's releases</a>.</em></p> <blockquote> <h2>v1.3.0</h2> <p><a href="https://github.com/grpc-ecosystem/go-grpc-middleware/compare/v1.2.2...v1.3.0">Full changelog</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc-ecosystem/go-grpc-middleware/commit/df0f91b29bbbdfc3a686a7a8edbe2b9de2072fdd"><code>df0f91b</code></a> validator: add support for protoc-gen-validate 0.6.0 (<a href="https://github-redirect.dependabot.com/grpc-ecosystem/go-grpc-middleware/issues/417">#417</a>)</li> <li><a href="https://github.com/grpc-ecosystem/go-grpc-middleware/commit/165f605a7bd1a023d57002bc4e0b64c03c862cd6"><code>165f605</code></a> Updating gogo/protobuf to v1.3.2 from v1.2.1 to fix CVE-2021-3121 (<a href="https://github-redirect.dependabot.com/grpc-ecosystem/go-grpc-middleware/issues/416">#416</a>)</li> <li><a href="https://github.com/grpc-ecosystem/go-grpc-middleware/commit/baff2d4634a5b5f8d4c187d29d50f674881dc6e8"><code>baff2d4</code></a> wrong example misguide user to catch panic (<a href="https://github-redirect.dependabot.com/grpc-ecosystem/go-grpc-middleware/issues/414">#414</a>)</li> <li><a href="https://github.com/grpc-ecosystem/go-grpc-middleware/commit/315ddd9812c3d867d8a79a050aa691e9b6332063"><code>315ddd9</code></a> logging/zap/ctxzap: add shorthand functions (<a href="https://github-redirect.dependabot.com/grpc-ecosystem/go-grpc-middleware/issues/408">#408</a>)</li> <li><a href="https://github.com/grpc-ecosystem/go-grpc-middleware/commit/a77ba4df9c270ec918ed6a6d506309078e3e4c4d"><code>a77ba4d</code></a> Settable grpc logger (<a href="https://github-redirect.dependabot.com/grpc-ecosystem/go-grpc-middleware/issues/402">#402</a>)</li> <li><a href="https://github.com/grpc-ecosystem/go-grpc-middleware/commit/be4c235f9d1c9c4efad8dd2bad3cce712eabdeb0"><code>be4c235</code></a> Support customization of timestamp format (<a href="https://github-redirect.dependabot.com/grpc-ecosystem/go-grpc-middleware/issues/398">#398</a>)</li> <li><a href="https://github.com/grpc-ecosystem/go-grpc-middleware/commit/912313c08fd900de27f9beddb75e9fd59c9b238b"><code>912313c</code></a> use status.Error instead of status.Errorf (<a href="https://github-redirect.dependabot.com/grpc-ecosystem/go-grpc-middleware/issues/397">#397</a>)</li> <li><a href="https://github.com/grpc-ecosystem/go-grpc-middleware/commit/fab13c27ec1d74ec053740349a01efaae87e5aa4"><code>fab13c2</code></a> downgrade grpc requirements to &lt;1.30.0 (<a href="https://github-redirect.dependabot.com/grpc-ecosystem/go-grpc-middleware/issues/381">#381</a>)</li> <li><a href="https://github.com/grpc-ecosystem/go-grpc-middleware/commit/48900393c7f37e2136684cf7b0657940f001048f"><code>4890039</code></a> Added stale bot (<a href="https://github-redirect.dependabot.com/grpc-ecosystem/go-grpc-middleware/issues/370">#370</a>)</li> <li><a href="https://github.com/grpc-ecosystem/go-grpc-middleware/commit/83ed827d3ce088a87b607396c2885fd4104d61f7"><code>83ed827</code></a> Fix logrus verbosity level checker (<a href="https://github-redirect.dependabot.com/grpc-ecosystem/go-grpc-middleware/issues/369">#369</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc-ecosystem/go-grpc-middleware/compare/v1.2.2...v1.3.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/grpc-ecosystem/go-grpc-middleware&package-manager=go_modules&previous-version=1.2.2&new-version=1.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
4 years ago
build(deps): Bump github.com/lib/pq from 1.10.3 to 1.10.4 (#7261) Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.10.3 to 1.10.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lib/pq/releases">github.com/lib/pq's releases</a>.</em></p> <blockquote> <h2>v1.10.4</h2> <ul> <li>Keep track of (context cancelled) error on connection.</li> <li>Fix android build</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lib/pq/commit/8446d16b8935fdf2b5c0fe333538ac395e3e1e4b"><code>8446d16</code></a> issue 1062: Keep track of (context cancelled) error on connection, and make r...</li> <li><a href="https://github.com/lib/pq/commit/6a102c04ac8dc082f1684b0488275575c374cb4c"><code>6a102c0</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/lib/pq/issues/1060">#1060</a> from ian4hu/patch-1</li> <li><a href="https://github.com/lib/pq/commit/a54251e1b60c91ce89814464354126a513dd97bc"><code>a54251e</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/lib/pq/issues/1061">#1061</a> from mjl-/fix-flaky-TestConnPrepareContext</li> <li><a href="https://github.com/lib/pq/commit/2b4fa17b445c38f6f7b881db1491488d74645126"><code>2b4fa17</code></a> Fix flaky TestConnPrepareContext</li> <li><a href="https://github.com/lib/pq/commit/b33a1b722c28a144366eec52c9f6f811fcf9efc6"><code>b33a1b7</code></a> Fix android build</li> <li><a href="https://github.com/lib/pq/commit/16e9cadb5a5e9211740bcadebb36c448391dca1e"><code>16e9cad</code></a> Fix build in android</li> <li><a href="https://github.com/lib/pq/commit/26399a76874b6cf27f551d02b9576e77b211ead1"><code>26399a7</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/lib/pq/issues/1057">#1057</a> from jfcg/master</li> <li><a href="https://github.com/lib/pq/commit/087077605f249dfccb8cec814474bf2a7a9b23bd"><code>0870776</code></a> fix possible integer truncation</li> <li><a href="https://github.com/lib/pq/commit/c01ab770915b19453b6e4fdb11be725adfce76de"><code>c01ab77</code></a> Create codeql-analysis.yml</li> <li>See full diff in <a href="https://github.com/lib/pq/compare/v1.10.3...v1.10.4">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/lib/pq&package-manager=go_modules&previous-version=1.10.3&new-version=1.10.4)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
3 years ago
crypto: Use a different library for ed25519/sr25519 (#6526) At Oasis we have spend some time writing a new Ed25519/X25519/sr25519 implementation called curve25519-voi. This PR switches the import from ed25519consensus/go-schnorrkel, which should lead to performance gains on most systems. Summary of changes: * curve25519-voi is now used for Ed25519 operations, following the existing ZIP-215 semantics. * curve25519-voi's public key cache is enabled (hardcoded size of 4096 entries, should be tuned, see the code comment) to accelerate repeated Ed25519 verification with the same public key(s). * (BREAKING) curve25519-voi is now used for sr25519 operations. This is a breaking change as the current sr25519 support does something decidedly non-standard when going from a MiniSecretKey to a SecretKey and or PublicKey (The expansion routine is called twice). While I believe the new behavior (that expands once and only once) to be more "correct", this changes the semantics as implemented. * curve25519-voi is now used for merlin since the included STROBE implementation produces much less garbage on the heap. Side issues fixed: * The version of go-schnorrkel that is currently imported by tendermint has a badly broken batch verification implementation. Upstream has fixed the issue after I reported it, so the version should be bumped in the interim. Open design questions/issues: * As noted, the public key cache size should be tuned. It is currently backed by a trivial thread-safe LRU cache, which is not scan-resistant, but replacing it with something better is a matter of implementing an interface. * As far as I can tell, the only reason why serial verification on batch failure is necessary is to provide more detailed error messages (that are only used in some unit tests). If you trust the batch verification to be consistent with serial verification then the fallback can be eliminated entirely (the BatchVerifier provided by the new library supports an option that omits the fallback if this is chosen as the way forward). * curve25519-voi's sr25519 support could use more optimization and more eyes on the code. The algorithm unfortunately is woefully under-specified, and the implementation was done primarily because I got really sad when I actually looked at go-schnorrkel, and we do not use the algorithm at this time.
3 years ago
[RPC] Static swagger (#3880) * manually swagging Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * three definitions with polymorphism Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * added blockchain and block Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * low quality generation, commit, block_response and validators Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * genesis and consensus states endpoints Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * fix indentation Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * consensus parameters Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * fix indentation Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * add height to consensus parameters endpoint Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * unconfirmed_txs and num_unconfirmed_txs Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * add missing query parameter Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * add ABCI queries Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * added index document for swagger documentation Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * add missing routes Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * contract tests added on CCI Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * contract tests job should be in the test suite Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * simplify requirements to test Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * typo Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * build is a prerequisite to start localnet Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * reduce nodejs size, move goodman to get_tools, add docs, fix comments Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * Update scripts/get_tools.sh That's cleaner, thanks! Co-Authored-By: Anton Kaliaev <anton.kalyaev@gmail.com> * xz not supported by cci image, let's keep it simple Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * REMOVE-indirect debug of CCI paths Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * dirty experiment, volume is empty but binary has been produced Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * dirty experiment, volume is empty but binary has been produced Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * dirty experiment going on Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * locally works, CCI have difficulties with second layaer containers volumes Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * restore experiment, use machine instead of docker for contract tests Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * simplify a bit Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * rollback on machine golang Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * Document the changes Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * Changelog Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com> * comments Signed-off-by: Karoly Albert Szabo <szabo.karoly.a@gmail.com>
5 years ago
build(deps): Bump github.com/spf13/cobra from 1.2.1 to 1.3.0 (#7456) Bumps [github.com/spf13/cobra](https://github.com/spf13/cobra) from 1.2.1 to 1.3.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spf13/cobra/releases">github.com/spf13/cobra's releases</a>.</em></p> <blockquote> <h1>v1.3.0 - The Fall 2021 release 🍁</h1> <h2>Completion fixes &amp; enhancements 💇🏼</h2> <p>In <code>v1.2.0</code>, we introduced a new model for completions. Thanks to everyone for trying it, giving feedback, and providing numerous fixes! Continue to work with the new model as the old one (as noted in code comments) will be deprecated in a coming release.</p> <ul> <li><code>DisableFlagParsing</code> now triggers custom completions for flag names <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1161">#1161</a></li> <li>Fixed unbound variables in bash completions causing edge case errors <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1321">#1321</a></li> <li><code>help</code> completion formatting improvements &amp; fixes <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1444">#1444</a></li> <li>All completions now follow the <code>help</code> example: short desc are now capitalized and removes extra spacing from long description <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1455">#1455</a></li> <li>Typo fixes in bash &amp; zsh completions <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1459">#1459</a></li> <li>Fixed mixed tab/spaces indentation in completion scripts. Now just 4 spaces <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1473">#1473</a></li> <li>Support for different bash completion options. Bash completions v2 supports descriptions and requires descriptions to be removed for <code>menu-complete</code>, <code>menu-complete-backward</code> and <code>insert-completions</code>. These descriptions are now purposefully removed in support of this model. <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1509">#1509</a></li> <li>Fix for invalid shell completions when using <code>~/.cobra.yaml</code>. Log message <code>Using config file: ~/.cobra.yaml</code> now printed to stderr <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1510">#1510</a></li> <li>Removes unnecessary trailing spaces from completion command descriptions <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1520">#1520</a></li> <li>Option to hid default <code>completion</code> command <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1541">#1541</a></li> <li>Remove <code>__complete</code> command for programs without subcommands <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1563">#1563</a></li> </ul> <h2>Generator changes ⚙️</h2> <p>Thanks to <a href="https://github.com/spf13"><code>@​spf13</code></a> for providing a number of changes to the Cobra generator tool, streamlining it for new users!</p> <ul> <li>The Cobra generator now <em>won't</em> automatically include Viper and cleans up a number of unused imports when not using Viper.</li> <li>The Cobra generator's default license is now <code>none</code></li> <li>The Cobra generator now works with Go modules</li> <li>Documentation to reflect these changes</li> </ul> <h2>New Features ⭐</h2> <ul> <li>License can be specified by their SPDX identifiers <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1159">#1159</a></li> <li><code>MatchAll</code> allows combining several PositionalArgs to work in concert. This now allows for enabling composing <code>PositionalArgs</code> <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/896">#896</a></li> </ul> <h2>Bug Fixes 🐛</h2> <ul> <li>Fixed multiple error message from cobra <code>init</code> boilerplates <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1463">#1463</a> <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1552">#1552</a> <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1557">#1557</a></li> </ul> <h2>Testing 👀</h2> <ul> <li>Now testing golang 1.16.x and 1.17.x in CI <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1425">#1425</a></li> <li>Fix for running diff test to ignore CR for windows <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/949">#949</a></li> <li>Added helper functions and reduced code reproduction in <code>args_test</code> <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1426">#1426</a></li> <li>Now using official <code>golangci-lint</code> github action <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1477">#1477</a></li> </ul> <h2>Security 🔏</h2> <ul> <li>Added GitHub dependabot <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1427">#1427</a></li> <li>Now using Viper <code>v1.10.0</code> <ul> <li>There is a known CVE in an <em>indirect</em> dependency from <code>viper</code>: <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1538">spf13/cobra#1538</a>. This will be patched in a future release</li> </ul> </li> </ul> <h2>Documentation 📝</h2> <ul> <li>Multiple projects added to the <code>projects_using_cobra.md</code> file: <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1377">#1377</a> <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1501">#1501</a> <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1454">#1454</a></li> <li>Removed ToC from main readme file as it is now automagically displayed by GitHub <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1429">#1429</a></li> <li>Documentation correct for when the <code>--author</code> flag is specified <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1009">#1009</a></li> <li><code>shell_completions.md</code> has an easier to use snippet for copying and pasting shell completions <a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1372">#1372</a></li> </ul> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spf13/cobra/commit/178edbb247f35e466578211dcf5f4892dbbd369b"><code>178edbb</code></a> Bump github.com/spf13/viper from 1.9.0 to 1.10.0 (<a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1561">#1561</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/9054739e08187aab9294b7a773d54c92fabc23d3"><code>9054739</code></a> Remove __complete cmd for program without subcmds (<a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1563">#1563</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/19c9c7438498bf4ba07506b4eaa76670cd37ae2d"><code>19c9c74</code></a> Always include the os package import when generating the root command (<a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1557">#1557</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/01e05b8ea13c594aecf11fcdf5da065dce51de5e"><code>01e05b8</code></a> Bump github.com/spf13/viper from 1.8.1 to 1.9.0 (<a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1554">#1554</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/36bff0a4d54129f4d26b47f6700829f8ac652f19"><code>36bff0a</code></a> fix root.go.golden (<a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1552">#1552</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/1854bb5c96beeb559b85af56b09ea50a463280a0"><code>1854bb5</code></a> Fix some typos (mostly found by codespell) (<a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1514">#1514</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/ff2c55e32312d66f6898ed3f2b48a654b94a207c"><code>ff2c55e</code></a> chore(ci): use golangci-lint-action (<a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1477">#1477</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/1beb476da9b46aef65cc176d683f4278cb944085"><code>1beb476</code></a> fix: Duplicate error message from cobra init boilerplates (<a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1463">#1463</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/6f84ef48750fe6355a267117837ba6ee3da254e7"><code>6f84ef4</code></a> Provide option to hide default 'completion' cmd (<a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1541">#1541</a>)</li> <li><a href="https://github.com/spf13/cobra/commit/ee75a2b1edeb8001c4b7e36edcf2768479abffe6"><code>ee75a2b</code></a> Remove trailing spaces from bash completion command description (<a href="https://github-redirect.dependabot.com/spf13/cobra/issues/1520">#1520</a>)</li> <li>Additional commits viewable in <a href="https://github.com/spf13/cobra/compare/v1.2.1...v1.3.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/cobra&package-manager=go_modules&previous-version=1.2.1&new-version=1.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
3 years ago
build(deps): Bump github.com/spf13/viper from 1.10.0 to 1.10.1 (#7470) Bumps [github.com/spf13/viper](https://github.com/spf13/viper) from 1.10.0 to 1.10.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spf13/viper/releases">github.com/spf13/viper's releases</a>.</em></p> <blockquote> <h2>v1.10.1</h2> <p>This is a maintenance release upgrading the Consul dependency fixing CVEs.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spf13/viper/commit/f646c50b184a0bec644dd1147d6b0e57be17c7aa"><code>f646c50</code></a> chore(deps): update dependencies</li> <li>See full diff in <a href="https://github.com/spf13/viper/compare/v1.10.0...v1.10.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/viper&package-manager=go_modules&previous-version=1.10.0&new-version=1.10.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
3 years ago
build(deps): Bump github.com/stretchr/testify from 1.6.1 to 1.7.0 (#5897) Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.6.1 to 1.7.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/stretchr/testify/releases">github.com/stretchr/testify's releases</a>.</em></p> <blockquote> <h2>Minor improvements and bug fixes</h2> <p>Minor feature improvements and bug fixes</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/stretchr/testify/commit/acba37e5db06f0093b465a7d47822bf13644b66c"><code>acba37e</code></a> Only use repeatability if no repeatability left</li> <li><a href="https://github.com/stretchr/testify/commit/eb8c41ec07f965071ac51cf2ac45ae1e50b6faed"><code>eb8c41e</code></a> Add more tests to mock package</li> <li><a href="https://github.com/stretchr/testify/commit/a5830c56d3a29615f93698ad0b1f00206bb03b73"><code>a5830c5</code></a> Extract method to evaluate closest match</li> <li><a href="https://github.com/stretchr/testify/commit/1962448488982378ba761489a1d48b22a8283121"><code>1962448</code></a> Use Repeatability as tie-breaker for closest match</li> <li><a href="https://github.com/stretchr/testify/commit/92707c0b2d501c60de82176c4aa1cf880abac720"><code>92707c0</code></a> Fixed the link to not point to assert only</li> <li><a href="https://github.com/stretchr/testify/commit/05dd0b2b35daf0c6f6ecc1dff3c1c81cdf17a3b2"><code>05dd0b2</code></a> Updated the readme to point to pkg.dev</li> <li><a href="https://github.com/stretchr/testify/commit/c26b7f39f88ecc339b622fcbe6531ac5fdccd799"><code>c26b7f3</code></a> Update assertions.go</li> <li><a href="https://github.com/stretchr/testify/commit/8fb4b2442e11c5a798920eb5a9c19dbc2603481b"><code>8fb4b24</code></a> [Fix] The most recent changes to golang/protobuf breaks the spew Circular dat...</li> <li><a href="https://github.com/stretchr/testify/commit/dc8af7208cb2e78de14b80dd5e5b412713b57508"><code>dc8af72</code></a> add generated code for positive/negative assertion</li> <li><a href="https://github.com/stretchr/testify/commit/1544508911aa5fdb73c633fab172cd0e161df0d8"><code>1544508</code></a> add assert positive/negative</li> <li>Additional commits viewable in <a href="https://github.com/stretchr/testify/compare/v1.6.1...v1.7.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=go_modules&previous-version=1.6.1&new-version=1.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
4 years ago
build(deps): Bump github.com/tendermint/tm-db from 0.6.4 to 0.6.6 (#7287) Bumps [github.com/tendermint/tm-db](https://github.com/tendermint/tm-db) from 0.6.4 to 0.6.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/tendermint/tm-db/releases">github.com/tendermint/tm-db's releases</a>.</em></p> <blockquote> <h2>Release v0.6.6</h2> <p>This release is the same API as v0.6.4, but bypasses the accidental v0.6.5 release that exported a different API. Any existing users of v0.6.5 may continue to use that tag.</p> <p><a href="https://github.com/tendermint/tm-db/blob/v0.6.6/CHANGELOG.md">https://github.com/tendermint/tm-db/blob/v0.6.6/CHANGELOG.md</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/tendermint/tm-db/blob/master/CHANGELOG.md">github.com/tendermint/tm-db's changelog</a>.</em></p> <blockquote> <h2>0.6.6</h2> <p><strong>2021-11-08</strong></p> <p><strong>Important note:</strong> Version v0.6.5 was accidentally tagged and should be avoided. This version is identical to v0.6.4 in package structure and API, but has updated the version marker so that normal <code>go get</code> upgrades will not require modifying existing use of v0.6.4.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/tendermint/tm-db/commit/0e6efdda1b15ef02cdb8f66b36bac942943ab7d5"><code>0e6efdd</code></a> Prepare a new compatibility release v0.6.6. (<a href="https://github-redirect.dependabot.com/tendermint/tm-db/issues/203">#203</a>)</li> <li><a href="https://github.com/tendermint/tm-db/commit/8f92601b6539a3611063709f65256150e198cfd9"><code>8f92601</code></a> testing: tools/Dockerfile: Upgrade RocksDB to 6.24.2 (<a href="https://github-redirect.dependabot.com/tendermint/tm-db/issues/197">#197</a>)</li> <li><a href="https://github.com/tendermint/tm-db/commit/16415bfbd73b4a28e46c8c4f72f3285a5f8b6358"><code>16415bf</code></a> build(deps): bump google.golang.org/grpc from 1.38.0 to 1.42.0 (<a href="https://github-redirect.dependabot.com/tendermint/tm-db/issues/193">#193</a>)</li> <li><a href="https://github.com/tendermint/tm-db/commit/11c5e90c12f9151ebe03386af4b650c1438fb39e"><code>11c5e90</code></a> Update mergify configuration. (<a href="https://github-redirect.dependabot.com/tendermint/tm-db/issues/198">#198</a>)</li> <li><a href="https://github.com/tendermint/tm-db/commit/d3744d52e8bb46b3bbe76ea48e850267eb893a29"><code>d3744d5</code></a> Retract the accidentally-released v0.6.5. (<a href="https://github-redirect.dependabot.com/tendermint/tm-db/issues/194">#194</a>)</li> <li><a href="https://github.com/tendermint/tm-db/commit/6dc0379403b860e475b9b05d0baef15eaa7ba5f6"><code>6dc0379</code></a> Update CODEOWNERS file. (<a href="https://github-redirect.dependabot.com/tendermint/tm-db/issues/196">#196</a>)</li> <li><a href="https://github.com/tendermint/tm-db/commit/63a566e76533e635270fa8a860614de0623c2533"><code>63a566e</code></a> Enable cgo for testing. (<a href="https://github-redirect.dependabot.com/tendermint/tm-db/issues/200">#200</a>)</li> <li><a href="https://github.com/tendermint/tm-db/commit/451c8444fb1732632a7a9b1f2ccdc491b70d6d81"><code>451c844</code></a> Revert rocksdb version at tip. (<a href="https://github-redirect.dependabot.com/tendermint/tm-db/issues/202">#202</a>)</li> <li><a href="https://github.com/tendermint/tm-db/commit/d65205892e9e5ab5606161acc86c75a5cdc8233d"><code>d652058</code></a> build: fix the image to work with golangci-lint (<a href="https://github-redirect.dependabot.com/tendermint/tm-db/issues/201">#201</a>)</li> <li><a href="https://github.com/tendermint/tm-db/commit/8882f2706633b2944b4084961fab1aaeb7ec3c09"><code>8882f27</code></a> Update Go version in the build container. (<a href="https://github-redirect.dependabot.com/tendermint/tm-db/issues/195">#195</a>)</li> <li>Additional commits viewable in <a href="https://github.com/tendermint/tm-db/compare/v0.6.4...v0.6.6">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/tendermint/tm-db&package-manager=go_modules&previous-version=0.6.4&new-version=0.6.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
3 years ago
build(deps): Bump google.golang.org/grpc from 1.42.0 to 1.43.0 (#7455) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.42.0 to 1.43.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.43.0</h2> <h1>API Changes</h1> <ul> <li>grpc: stabilize <code>WithConnectParams</code> <code>DialOption</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4915">#4915</a>) <ul> <li>Special Thanks: <a href="https://github.com/hypnoglow"><code>@​hypnoglow</code></a></li> </ul> </li> </ul> <h1>Behavior Changes</h1> <ul> <li>status: support wrapped errors in <code>FromContextError</code> (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4977">#4977</a>) <ul> <li>Special Thanks: <a href="https://github.com/bestbeforetoday"><code>@​bestbeforetoday</code></a></li> </ul> </li> <li>config: remove the environment variable to disable retry support (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4922">#4922</a>)</li> </ul> <h1>New Features</h1> <ul> <li>balancer: new field <code>Authority</code> in <code>BuildOptions</code> for server name to use in the authentication handshake with a remote load balancer (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4969">#4969</a>)</li> </ul> <h1>Bug Fixes</h1> <ul> <li>xds/resolver: fix possible <code>ClientConn</code> leak upon resolver initialization failure (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4900">#4900</a>)</li> <li>client: fix <code>nil</code> panic in rare race conditions with the pick first LB policy (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4971">#4971</a>)</li> <li>xds: improve RPC error messages when xDS connection errors occur (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/5032">#5032</a>, <a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/5054">#5054</a>)</li> <li>transport: do not create stream object in the face of illegal stream IDs (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4873">#4873</a>) <ul> <li>Special Thanks: <a href="https://github.com/uds5501"><code>@​uds5501</code></a></li> </ul> </li> </ul> <h1>Documentation</h1> <ul> <li>client: clarify errors to indicate whether compressed or uncompressed messages exceeded size limits (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4918">#4918</a>) <ul> <li>Special Thanks: <a href="https://github.com/uds5501"><code>@​uds5501</code></a></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/14c11384b76b67f7b1b32a5d18f865762634c0ae"><code>14c1138</code></a> Change version to 1.43.0 (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/5039">#5039</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/ae29ac3e1e62a7b47fb672dec21de2dd83e4f027"><code>ae29ac3</code></a> xds/client: send NewStream errors to the watchers (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/5032">#5032</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/296afc2e579c14228edadb3debcb040204a0870f"><code>296afc2</code></a> transport: better error message when per-RPC creds fail (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/5033">#5033</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/e15d978c827661f8e7cfe807cb9fd8fd8f15a262"><code>e15d978</code></a> xds/client: send connection errors to all watchers (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/5054">#5054</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/46e883a9ab006a3000afe0a510aea62b75495b8f"><code>46e883a</code></a> Backport &quot;xds/c2p: replace C2P resolver env var with experimental scheme suff...</li> <li><a href="https://github.com/grpc/grpc-go/commit/3786ae1778f5bfcc49da81cbd925b7175ec81839"><code>3786ae1</code></a> xds/resolver: Add support for cluster specifier plugins (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4987">#4987</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/512e89474bfbd567806e026e0afdec468b1ee1ea"><code>512e894</code></a> rls: support extra_keys and constant_keys (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/4995">#4995</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/f3bbd12084380987ae0c9fcccdd7c4d405294a68"><code>f3bbd12</code></a> xds/bootstrap_config: add a string function to server config (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/5031">#5031</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/46935b96506deef74e73192e70cc44e3795b1452"><code>46935b9</code></a> fix possible nil before casting (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/5017">#5017</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/c2bccd0b1594416da57a74d15f09f8eb0a3d727b"><code>c2bccd0</code></a> xds/kokoro: install go 1.17, and retry go build (<a href="https://github-redirect.dependabot.com/grpc/grpc-go/issues/5015">#5015</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.42.0...v1.43.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=go_modules&previous-version=1.42.0&new-version=1.43.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
3 years ago
build(deps): Bump github.com/spf13/viper from 1.10.0 to 1.10.1 (#7470) Bumps [github.com/spf13/viper](https://github.com/spf13/viper) from 1.10.0 to 1.10.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spf13/viper/releases">github.com/spf13/viper's releases</a>.</em></p> <blockquote> <h2>v1.10.1</h2> <p>This is a maintenance release upgrading the Consul dependency fixing CVEs.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/spf13/viper/commit/f646c50b184a0bec644dd1147d6b0e57be17c7aa"><code>f646c50</code></a> chore(deps): update dependencies</li> <li>See full diff in <a href="https://github.com/spf13/viper/compare/v1.10.0...v1.10.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/viper&package-manager=go_modules&previous-version=1.10.0&new-version=1.10.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details>
3 years ago
  1. module github.com/tendermint/tendermint
  2. go 1.17
  3. require (
  4. github.com/BurntSushi/toml v1.0.0
  5. github.com/adlio/schema v1.2.3
  6. github.com/btcsuite/btcd v0.22.0-beta
  7. github.com/btcsuite/btcutil v1.0.3-0.20201208143702-a53e38424cce
  8. github.com/fortytw2/leaktest v1.3.0
  9. github.com/go-kit/kit v0.12.0
  10. github.com/gogo/protobuf v1.3.2
  11. github.com/golang/protobuf v1.5.2
  12. github.com/golangci/golangci-lint v1.43.0
  13. github.com/google/orderedcode v0.0.1
  14. github.com/google/uuid v1.3.0
  15. github.com/gorilla/websocket v1.4.2
  16. github.com/grpc-ecosystem/go-grpc-middleware v1.3.0
  17. github.com/grpc-ecosystem/go-grpc-prometheus v1.2.0
  18. github.com/lib/pq v1.10.4
  19. github.com/libp2p/go-buffer-pool v0.0.2
  20. github.com/mroth/weightedrand v0.4.1
  21. github.com/oasisprotocol/curve25519-voi v0.0.0-20210609091139-0a56a4bca00b
  22. github.com/ory/dockertest v3.3.5+incompatible
  23. github.com/prometheus/client_golang v1.11.0
  24. github.com/rcrowley/go-metrics v0.0.0-20200313005456-10cdbea86bc0
  25. github.com/rs/cors v1.8.2
  26. github.com/rs/zerolog v1.26.1
  27. github.com/snikch/goodman v0.0.0-20171125024755-10e37e294daa
  28. github.com/spf13/cobra v1.3.0
  29. github.com/spf13/viper v1.10.1
  30. github.com/stretchr/testify v1.7.0
  31. github.com/tendermint/tm-db v0.6.6
  32. github.com/vektra/mockery/v2 v2.9.4
  33. golang.org/x/crypto v0.0.0-20211215165025-cf75a172585e
  34. golang.org/x/net v0.0.0-20211208012354-db4efeb81f4b
  35. golang.org/x/sync v0.0.0-20210220032951-036812b2e83c
  36. google.golang.org/grpc v1.43.0
  37. gopkg.in/check.v1 v1.0.0-20200902074654-038fdea0a05b // indirect
  38. pgregory.net/rapid v0.4.7
  39. )
  40. require (
  41. 4d63.com/gochecknoglobals v0.1.0 // indirect
  42. github.com/Antonboom/errname v0.1.5 // indirect
  43. github.com/Antonboom/nilnil v0.1.0 // indirect
  44. github.com/Azure/go-ansiterm v0.0.0-20210617225240-d185dfc1b5a1 // indirect
  45. github.com/DataDog/zstd v1.4.1 // indirect
  46. github.com/Djarvur/go-err113 v0.0.0-20210108212216-aea10b59be24 // indirect
  47. github.com/Masterminds/semver v1.5.0 // indirect
  48. github.com/Microsoft/go-winio v0.5.1 // indirect
  49. github.com/Nvveen/Gotty v0.0.0-20120604004816-cd527374f1e5 // indirect
  50. github.com/OpenPeeDeeP/depguard v1.0.1 // indirect
  51. github.com/alexkohler/prealloc v1.0.0 // indirect
  52. github.com/ashanbrown/forbidigo v1.2.0 // indirect
  53. github.com/ashanbrown/makezero v0.0.0-20210520155254-b6261585ddde // indirect
  54. github.com/beorn7/perks v1.0.1 // indirect
  55. github.com/bkielbasa/cyclop v1.2.0 // indirect
  56. github.com/blizzy78/varnamelen v0.3.0 // indirect
  57. github.com/bombsimon/wsl/v3 v3.3.0 // indirect
  58. github.com/breml/bidichk v0.1.1 // indirect
  59. github.com/butuzov/ireturn v0.1.1 // indirect
  60. github.com/cenkalti/backoff v2.2.1+incompatible // indirect
  61. github.com/cespare/xxhash v1.1.0 // indirect
  62. github.com/cespare/xxhash/v2 v2.1.2 // indirect
  63. github.com/charithe/durationcheck v0.0.9 // indirect
  64. github.com/chavacava/garif v0.0.0-20210405164556-e8a0a408d6af // indirect
  65. github.com/containerd/continuity v0.2.1 // indirect
  66. github.com/daixiang0/gci v0.2.9 // indirect
  67. github.com/davecgh/go-spew v1.1.1 // indirect
  68. github.com/denis-tingajkin/go-header v0.4.2 // indirect
  69. github.com/dgraph-io/badger/v2 v2.2007.2 // indirect
  70. github.com/dgraph-io/ristretto v0.0.3-0.20200630154024-f66de99634de // indirect
  71. github.com/dgryski/go-farm v0.0.0-20190423205320-6a90982ecee2 // indirect
  72. github.com/docker/go-connections v0.4.0 // indirect
  73. github.com/docker/go-units v0.4.0 // indirect
  74. github.com/dustin/go-humanize v1.0.0 // indirect
  75. github.com/esimonov/ifshort v1.0.3 // indirect
  76. github.com/ettle/strcase v0.1.1 // indirect
  77. github.com/facebookgo/ensure v0.0.0-20160127193407-b4ab57deab51 // indirect
  78. github.com/facebookgo/stack v0.0.0-20160209184415-751773369052 // indirect
  79. github.com/facebookgo/subset v0.0.0-20150612182917-8dac2c3c4870 // indirect
  80. github.com/fatih/color v1.13.0 // indirect
  81. github.com/fatih/structtag v1.2.0 // indirect
  82. github.com/fsnotify/fsnotify v1.5.1 // indirect
  83. github.com/fzipp/gocyclo v0.3.1 // indirect
  84. github.com/go-critic/go-critic v0.6.1 // indirect
  85. github.com/go-toolsmith/astcast v1.0.0 // indirect
  86. github.com/go-toolsmith/astcopy v1.0.0 // indirect
  87. github.com/go-toolsmith/astequal v1.0.1 // indirect
  88. github.com/go-toolsmith/astfmt v1.0.0 // indirect
  89. github.com/go-toolsmith/astp v1.0.0 // indirect
  90. github.com/go-toolsmith/strparse v1.0.0 // indirect
  91. github.com/go-toolsmith/typep v1.0.2 // indirect
  92. github.com/go-xmlfmt/xmlfmt v0.0.0-20191208150333-d5b6f63a941b // indirect
  93. github.com/gobwas/glob v0.2.3 // indirect
  94. github.com/gofrs/flock v0.8.1 // indirect
  95. github.com/golang/snappy v0.0.3 // indirect
  96. github.com/golangci/check v0.0.0-20180506172741-cfe4005ccda2 // indirect
  97. github.com/golangci/dupl v0.0.0-20180902072040-3e9179ac440a // indirect
  98. github.com/golangci/go-misc v0.0.0-20180628070357-927a3d87b613 // indirect
  99. github.com/golangci/gofmt v0.0.0-20190930125516-244bba706f1a // indirect
  100. github.com/golangci/lint-1 v0.0.0-20191013205115-297bf364a8e0 // indirect
  101. github.com/golangci/maligned v0.0.0-20180506175553-b1d89398deca // indirect
  102. github.com/golangci/misspell v0.3.5 // indirect
  103. github.com/golangci/revgrep v0.0.0-20210930125155-c22e5001d4f2 // indirect
  104. github.com/golangci/unconvert v0.0.0-20180507085042-28b1c447d1f4 // indirect
  105. github.com/google/btree v1.0.0 // indirect
  106. github.com/google/go-cmp v0.5.6 // indirect
  107. github.com/gordonklaus/ineffassign v0.0.0-20210225214923-2e10b2664254 // indirect
  108. github.com/gostaticanalysis/analysisutil v0.7.1 // indirect
  109. github.com/gostaticanalysis/comment v1.4.2 // indirect
  110. github.com/gostaticanalysis/forcetypeassert v0.0.0-20200621232751-01d4955beaa5 // indirect
  111. github.com/gostaticanalysis/nilerr v0.1.1 // indirect
  112. github.com/hashicorp/errwrap v1.0.0 // indirect
  113. github.com/hashicorp/go-multierror v1.1.1 // indirect
  114. github.com/hashicorp/hcl v1.0.0 // indirect
  115. github.com/inconshreveable/mousetrap v1.0.0 // indirect
  116. github.com/jgautheron/goconst v1.5.1 // indirect
  117. github.com/jingyugao/rowserrcheck v1.1.1 // indirect
  118. github.com/jirfag/go-printf-func-name v0.0.0-20200119135958-7558a9eaa5af // indirect
  119. github.com/jmhodges/levigo v1.0.0 // indirect
  120. github.com/julz/importas v0.0.0-20210419104244-841f0c0fe66d // indirect
  121. github.com/kisielk/errcheck v1.6.0 // indirect
  122. github.com/kisielk/gotool v1.0.0 // indirect
  123. github.com/kulti/thelper v0.4.0 // indirect
  124. github.com/kunwardeep/paralleltest v1.0.3 // indirect
  125. github.com/kyoh86/exportloopref v0.1.8 // indirect
  126. github.com/ldez/gomoddirectives v0.2.2 // indirect
  127. github.com/ldez/tagliatelle v0.2.0 // indirect
  128. github.com/magiconair/properties v1.8.5 // indirect
  129. github.com/maratori/testpackage v1.0.1 // indirect
  130. github.com/matoous/godox v0.0.0-20210227103229-6504466cf951 // indirect
  131. github.com/mattn/go-colorable v0.1.12 // indirect
  132. github.com/mattn/go-isatty v0.0.14 // indirect
  133. github.com/mattn/go-runewidth v0.0.9 // indirect
  134. github.com/matttproud/golang_protobuf_extensions v1.0.1 // indirect
  135. github.com/mbilski/exhaustivestruct v1.2.0 // indirect
  136. github.com/mgechev/dots v0.0.0-20210922191527-e955255bf517 // indirect
  137. github.com/mgechev/revive v1.1.2 // indirect
  138. github.com/mitchellh/go-homedir v1.1.0 // indirect
  139. github.com/mitchellh/mapstructure v1.4.3 // indirect
  140. github.com/moricho/tparallel v0.2.1 // indirect
  141. github.com/nakabonne/nestif v0.3.1 // indirect
  142. github.com/nbutton23/zxcvbn-go v0.0.0-20210217022336-fa2cb2858354 // indirect
  143. github.com/nishanths/exhaustive v0.2.3 // indirect
  144. github.com/nishanths/predeclared v0.2.1 // indirect
  145. github.com/olekukonko/tablewriter v0.0.5 // indirect
  146. github.com/opencontainers/go-digest v1.0.0 // indirect
  147. github.com/opencontainers/image-spec v1.0.2 // indirect
  148. github.com/opencontainers/runc v1.0.3 // indirect
  149. github.com/pelletier/go-toml v1.9.4 // indirect
  150. github.com/phayes/checkstyle v0.0.0-20170904204023-bfd46e6a821d // indirect
  151. github.com/pkg/errors v0.9.1 // indirect
  152. github.com/pmezard/go-difflib v1.0.0 // indirect
  153. github.com/polyfloyd/go-errorlint v0.0.0-20210722154253-910bb7978349 // indirect
  154. github.com/prometheus/client_model v0.2.0 // indirect
  155. github.com/prometheus/common v0.30.0 // indirect
  156. github.com/prometheus/procfs v0.7.3 // indirect
  157. github.com/quasilyte/go-ruleguard v0.3.13 // indirect
  158. github.com/quasilyte/regex/syntax v0.0.0-20200407221936-30656e2c4a95 // indirect
  159. github.com/ryancurrah/gomodguard v1.2.3 // indirect
  160. github.com/ryanrolds/sqlclosecheck v0.3.0 // indirect
  161. github.com/sanposhiho/wastedassign/v2 v2.0.6 // indirect
  162. github.com/securego/gosec/v2 v2.9.1 // indirect
  163. github.com/shazow/go-diff v0.0.0-20160112020656-b6b7b6733b8c // indirect
  164. github.com/sirupsen/logrus v1.8.1 // indirect
  165. github.com/sivchari/tenv v1.4.7 // indirect
  166. github.com/sonatard/noctx v0.0.1 // indirect
  167. github.com/sourcegraph/go-diff v0.6.1 // indirect
  168. github.com/spf13/afero v1.6.0 // indirect
  169. github.com/spf13/cast v1.4.1 // indirect
  170. github.com/spf13/jwalterweatherman v1.1.0 // indirect
  171. github.com/spf13/pflag v1.0.5 // indirect
  172. github.com/ssgreg/nlreturn/v2 v2.2.1 // indirect
  173. github.com/stretchr/objx v0.1.1 // indirect
  174. github.com/subosito/gotenv v1.2.0 // indirect
  175. github.com/sylvia7788/contextcheck v1.0.4 // indirect
  176. github.com/syndtr/goleveldb v1.0.1-0.20200815110645-5c35d600f0ca // indirect
  177. github.com/tdakkota/asciicheck v0.0.0-20200416200610-e657995f937b // indirect
  178. github.com/tecbot/gorocksdb v0.0.0-20191217155057-f0fad39f321c // indirect
  179. github.com/tetafro/godot v1.4.11 // indirect
  180. github.com/timakin/bodyclose v0.0.0-20200424151742-cb6215831a94 // indirect
  181. github.com/tomarrell/wrapcheck/v2 v2.4.0 // indirect
  182. github.com/tommy-muehle/go-mnd/v2 v2.4.0 // indirect
  183. github.com/ultraware/funlen v0.0.3 // indirect
  184. github.com/ultraware/whitespace v0.0.4 // indirect
  185. github.com/uudashr/gocognit v1.0.5 // indirect
  186. github.com/yeya24/promlinter v0.1.0 // indirect
  187. go.etcd.io/bbolt v1.3.6 // indirect
  188. golang.org/x/mod v0.5.0 // indirect
  189. golang.org/x/sys v0.0.0-20211210111614-af8b64212486 // indirect
  190. golang.org/x/term v0.0.0-20201126162022-7de9c90e9dd1 // indirect
  191. golang.org/x/text v0.3.7 // indirect
  192. golang.org/x/tools v0.1.7 // indirect
  193. golang.org/x/xerrors v0.0.0-20200804184101-5ec99f83aff1 // indirect
  194. google.golang.org/genproto v0.0.0-20211208223120-3a66f561d7aa // indirect
  195. google.golang.org/protobuf v1.27.1 // indirect
  196. gopkg.in/ini.v1 v1.66.2 // indirect
  197. gopkg.in/yaml.v2 v2.4.0 // indirect
  198. gopkg.in/yaml.v3 v3.0.0-20210107192922-496545a6307b // indirect
  199. honnef.co/go/tools v0.2.1 // indirect
  200. mvdan.cc/gofumpt v0.1.1 // indirect
  201. mvdan.cc/interfacer v0.0.0-20180901003855-c20040233aed // indirect
  202. mvdan.cc/lint v0.0.0-20170908181259-adc824a0674b // indirect
  203. mvdan.cc/unparam v0.0.0-20210104141923-aac4ce9116a7 // indirect
  204. )