aboutsummaryrefslogtreecommitdiff
AgeCommit message (Collapse)Author
2025-01-16Version v0.14.1 (#3501)v0.14.1helm-dendrite-0.15.1Till
2025-01-16Merge commit from forkTravis Ralston
* Support configuring allow/deny networks * Make the DNS cache aware of the allow/deny networks * Allow all networks in CI * Update GMSL * Add missed file --------- Co-authored-by: Till Faelligen <2353100+S7evinK@users.noreply.github.com>
2025-01-16Update DCO in the GH PR template and the docs (#3496)Till
2024-12-19Speed up loading ACLs on startup (#3469)Till
Currently d.m.org struggles to start, as it is fetching several thousand ACLs on startup. The reason is that we're loading the entire room state into memory, only to filter out the majority of it, because we only care about certain types. This change filters the types (tuples) directly when querying the database, so we don't end up with unneeded state.
2024-12-18Fix pinecone demo overwritting the yggdrasil imageTill Faelligen
[skip ci]
2024-12-18Version 0.14.0 (#3468)v0.14.0helm-dendrite-0.15.0Till
2024-12-18Avoid image confusionTill Faelligen
[skip ci]
2024-12-18Add docker syntax and re-add cache-fromTill Faelligen
[skip ci]
2024-12-18Remove cache from build steps, as they already use FROMTill Faelligen
dendrite:buildcache [skip ci]
2024-12-18Actually push and tag as buildcacheTill Faelligen
[skip ci]
2024-12-18Remove pushTill Faelligen
2024-12-18Fix identifierTill Faelligen
2024-12-18Speedup building docker images in CI (#3467)Till
This should significantly speedup building the pinecone and yggdrasil demos, as they now reuse the new `dendrite:buildcache`, which already builds all binaries.
2024-12-18Fix docker build for yggdrasilTill Faelligen
2024-12-18Bump yokawasa/action-setup-kube-tools from 0.8.2 to 0.11.2 (#3464)dependabot[bot]
Bumps [yokawasa/action-setup-kube-tools](https://github.com/yokawasa/action-setup-kube-tools) from 0.8.2 to 0.11.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/yokawasa/action-setup-kube-tools/releases">yokawasa/action-setup-kube-tools's releases</a>.</em></p> <blockquote> <h2>v0.11.2</h2> <h2>What's Changed</h2> <ul> <li>Change kubectl download url, update README by <a href="https://github.com/mmalyska"><code>@​mmalyska</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/63">yokawasa/action-setup-kube-tools#63</a></li> <li>Bump braces from 3.0.2 to 3.0.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/58">yokawasa/action-setup-kube-tools#58</a></li> <li>Bump ws from 8.7.0 to 8.17.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/59">yokawasa/action-setup-kube-tools#59</a></li> <li>Bump dset from 3.1.2 to 3.1.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/61">yokawasa/action-setup-kube-tools#61</a></li> <li>v0.11.2 release by <a href="https://github.com/yokawasa"><code>@​yokawasa</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/64">yokawasa/action-setup-kube-tools#64</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mmalyska"><code>@​mmalyska</code></a> made their first contribution in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/63">yokawasa/action-setup-kube-tools#63</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/yokawasa/action-setup-kube-tools/compare/v0.11.1...v0.11.2">https://github.com/yokawasa/action-setup-kube-tools/compare/v0.11.1...v0.11.2</a></p> <h2>v0.11.1</h2> <h2>What's Changed</h2> <ul> <li>updated sample tool versions in README by <a href="https://github.com/yokawasa"><code>@​yokawasa</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/55">yokawasa/action-setup-kube-tools#55</a></li> <li>Bump undici from 5.28.3 to 5.28.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/56">yokawasa/action-setup-kube-tools#56</a></li> <li>Release v0.11.1 by <a href="https://github.com/yokawasa"><code>@​yokawasa</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/57">yokawasa/action-setup-kube-tools#57</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/yokawasa/action-setup-kube-tools/compare/v0.11.0...v0.11.1">https://github.com/yokawasa/action-setup-kube-tools/compare/v0.11.0...v0.11.1</a></p> <h2>v0.11.0</h2> <h2>What's Changed</h2> <ul> <li>Support <code>arch-type</code> by <a href="https://github.com/yokawasa"><code>@​yokawasa</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/53">yokawasa/action-setup-kube-tools#53</a></li> <li>release v0.11.0 by <a href="https://github.com/yokawasa"><code>@​yokawasa</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/54">yokawasa/action-setup-kube-tools#54</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/yokawasa/action-setup-kube-tools/compare/v0.10.0...v0.11.0">https://github.com/yokawasa/action-setup-kube-tools/compare/v0.10.0...v0.11.0</a></p> <h2>v0.10.0</h2> <h2>What's Changed</h2> <ul> <li>node 20 by <a href="https://github.com/till"><code>@​till</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/49">yokawasa/action-setup-kube-tools#49</a></li> <li>Bump word-wrap from 1.2.3 to 1.2.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/45">yokawasa/action-setup-kube-tools#45</a></li> <li>Bump undici from 5.19.1 to 5.26.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/46">yokawasa/action-setup-kube-tools#46</a></li> <li>Bump undici from 5.26.3 to 5.28.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/50">yokawasa/action-setup-kube-tools#50</a></li> <li>Bump <code>@​babel/traverse</code> from 7.7.4 to 7.23.9 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/51">yokawasa/action-setup-kube-tools#51</a></li> <li>fix readme and add dependencies for v0.10.0 release by <a href="https://github.com/yokawasa"><code>@​yokawasa</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/52">yokawasa/action-setup-kube-tools#52</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/till"><code>@​till</code></a> made their first contribution in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/49">yokawasa/action-setup-kube-tools#49</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/yokawasa/action-setup-kube-tools/compare/v0.9.3...v0.10.0">https://github.com/yokawasa/action-setup-kube-tools/compare/v0.9.3...v0.10.0</a></p> <h2>v0.9.3</h2> <h2>What's Changed</h2> <ul> <li>v0.9.2 release by <a href="https://github.com/yokawasa"><code>@​yokawasa</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/40">yokawasa/action-setup-kube-tools#40</a></li> <li>Bump json5 from 2.1.3 to 2.2.3 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/41">yokawasa/action-setup-kube-tools#41</a></li> <li>Bump undici from 5.11.0 to 5.19.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/43">yokawasa/action-setup-kube-tools#43</a></li> <li>upgrade default tools version by <a href="https://github.com/yokawasa"><code>@​yokawasa</code></a> in <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/pull/44">yokawasa/action-setup-kube-tools#44</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/yokawasa/action-setup-kube-tools/commit/9e25a4277af127b60011c95b6ed2da7e3b3613b1"><code>9e25a42</code></a> Merge pull request <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/issues/64">#64</a> from yokawasa/v0.11.2</li> <li><a href="https://github.com/yokawasa/action-setup-kube-tools/commit/25e4c6f6195a1bd43ac24d4b099e7f995bf78398"><code>25e4c6f</code></a> v0.11.2 release</li> <li><a href="https://github.com/yokawasa/action-setup-kube-tools/commit/95a279b60a0598bea098165e82c5bd8713db9c0c"><code>95a279b</code></a> Merge pull request <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/issues/61">#61</a> from yokawasa/dependabot/npm_and_yarn/dset-3.1.4</li> <li><a href="https://github.com/yokawasa/action-setup-kube-tools/commit/a9fba302f8256fddfa6e810851146c623962f0bd"><code>a9fba30</code></a> Merge pull request <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/issues/59">#59</a> from yokawasa/dependabot/npm_and_yarn/ws-8.17.1</li> <li><a href="https://github.com/yokawasa/action-setup-kube-tools/commit/cfc65736b7f1b908ea413ee1d5441e3bd7ddc1c7"><code>cfc6573</code></a> Merge pull request <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/issues/58">#58</a> from yokawasa/dependabot/npm_and_yarn/braces-3.0.3</li> <li><a href="https://github.com/yokawasa/action-setup-kube-tools/commit/c1bf253d99579084dfc269422627323e9e30e289"><code>c1bf253</code></a> Merge pull request <a href="https://redirect.github.com/yokawasa/action-setup-kube-tools/issues/63">#63</a> from mmalyska/releases/v0.12.0</li> <li><a href="https://github.com/yokawasa/action-setup-kube-tools/commit/02d934bdc9246de8e57484d670ab10479ae9a904"><code>02d934b</code></a> rollback version change</li> <li><a href="https://github.com/yokawasa/action-setup-kube-tools/commit/d692acff463ffbe868d1542da15e6e255433e58b"><code>d692acf</code></a> change kubectl download url, update README</li> <li><a href="https://github.com/yokawasa/action-setup-kube-tools/commit/f553a0eba9914d8b2a1a568510ef687a9baf970c"><code>f553a0e</code></a> Bump dset from 3.1.2 to 3.1.4</li> <li><a href="https://github.com/yokawasa/action-setup-kube-tools/commit/d577ac8c741882663caca49a3b70ea035e380e05"><code>d577ac8</code></a> Bump ws from 8.7.0 to 8.17.1</li> <li>Additional commits viewable in <a href="https://github.com/yokawasa/action-setup-kube-tools/compare/v0.8.2...v0.11.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=yokawasa/action-setup-kube-tools&package-manager=github_actions&previous-version=0.8.2&new-version=0.11.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-18Bump helm/chart-testing-action from 2.3.1 to 2.6.1 (#3463)dependabot[bot]
Bumps [helm/chart-testing-action](https://github.com/helm/chart-testing-action) from 2.3.1 to 2.6.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/helm/chart-testing-action/releases">helm/chart-testing-action's releases</a>.</em></p> <blockquote> <h2>v2.6.1</h2> <h2>What's Changed</h2> <ul> <li>bump ct to v3.10.1 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/136">helm/chart-testing-action#136</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/helm/chart-testing-action/compare/v2...v2.6.1">https://github.com/helm/chart-testing-action/compare/v2...v2.6.1</a></p> <h2>v2.6.0</h2> <h2>What's Changed</h2> <ul> <li>docs: bump helm/kind-action version by <a href="https://github.com/dunglas"><code>@​dunglas</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/122">helm/chart-testing-action#122</a></li> <li>bump ct to v3.10.0 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/134">helm/chart-testing-action#134</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/helm/chart-testing-action/compare/v2...v2.6.0">https://github.com/helm/chart-testing-action/compare/v2...v2.6.0</a></p> <h2>v2.5.0</h2> <h2>What's Changed</h2> <ul> <li>Download binary with right arch by <a href="https://github.com/Ludea"><code>@​Ludea</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/118">helm/chart-testing-action#118</a></li> <li>Bump ct and cleanup script by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/124">helm/chart-testing-action#124</a></li> <li>Bump sigstore/cosign-installer from c3667d99424e7e6047999fb6246c0da843953c65 to 6e04d228eb30da1757ee4e1dd75a0ec73a653e06 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/125">helm/chart-testing-action#125</a></li> <li>Bump sigstore/cosign-installer from 3.1.1 to 3.1.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/127">helm/chart-testing-action#127</a></li> <li>Bump actions/checkout from 3 to 4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/128">helm/chart-testing-action#128</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Ludea"><code>@​Ludea</code></a> made their first contribution in <a href="https://redirect.github.com/helm/chart-testing-action/pull/118">helm/chart-testing-action#118</a></li> <li><a href="https://github.com/dependabot"><code>@​dependabot</code></a> made their first contribution in <a href="https://redirect.github.com/helm/chart-testing-action/pull/125">helm/chart-testing-action#125</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/helm/chart-testing-action/compare/v2.4.0...v2.5.0">https://github.com/helm/chart-testing-action/compare/v2.4.0...v2.5.0</a></p> <h2>v2.4.0</h2> <h2>What's Changed</h2> <ul> <li>Retry artifact downloads by <a href="https://github.com/steven-sheehy"><code>@​steven-sheehy</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/111">helm/chart-testing-action#111</a></li> <li>fix example workflow by <a href="https://github.com/CrowdSalat"><code>@​CrowdSalat</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/115">helm/chart-testing-action#115</a></li> <li>docs: only run chart lint if changed by <a href="https://github.com/fty4"><code>@​fty4</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/106">helm/chart-testing-action#106</a></li> <li>docs: use GITHUB_OUTPUT in example workflow by <a href="https://github.com/fty4"><code>@​fty4</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/107">helm/chart-testing-action#107</a></li> <li>Use cosign to verify the release and update chart-testing to v3.8.0 by <a href="https://github.com/cpanato"><code>@​cpanato</code></a> in <a href="https://redirect.github.com/helm/chart-testing-action/pull/116">helm/chart-testing-action#116</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/steven-sheehy"><code>@​steven-sheehy</code></a> made their first contribution in <a href="https://redirect.github.com/helm/chart-testing-action/pull/111">helm/chart-testing-action#111</a></li> <li><a href="https://github.com/CrowdSalat"><code>@​CrowdSalat</code></a> made their first contribution in <a href="https://redirect.github.com/helm/chart-testing-action/pull/115">helm/chart-testing-action#115</a></li> <li><a href="https://github.com/fty4"><code>@​fty4</code></a> made their first contribution in <a href="https://redirect.github.com/helm/chart-testing-action/pull/106">helm/chart-testing-action#106</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/helm/chart-testing-action/compare/v2...v2.4.0">https://github.com/helm/chart-testing-action/compare/v2...v2.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/helm/chart-testing-action/commit/e6669bcd63d7cb57cb4380c33043eebe5d111992"><code>e6669bc</code></a> bump ct to v3.10.1 (<a href="https://redirect.github.com/helm/chart-testing-action/issues/136">#136</a>)</li> <li><a href="https://github.com/helm/chart-testing-action/commit/b43128a8b25298e1e7b043b78ea6613844e079b1"><code>b43128a</code></a> bump ct to v3.10.0 (<a href="https://redirect.github.com/helm/chart-testing-action/issues/134">#134</a>)</li> <li><a href="https://github.com/helm/chart-testing-action/commit/649a6365f8d0d1e620922904077647d7544d1631"><code>649a636</code></a> docs: bump helm/kind-action version (<a href="https://redirect.github.com/helm/chart-testing-action/issues/122">#122</a>)</li> <li><a href="https://github.com/helm/chart-testing-action/commit/cb49023b9227b1097e5eddd8824f48bdea11b1aa"><code>cb49023</code></a> Bump actions/checkout from 3 to 4 (<a href="https://redirect.github.com/helm/chart-testing-action/issues/128">#128</a>)</li> <li><a href="https://github.com/helm/chart-testing-action/commit/271b78b2b8f4b27ee1d5f6f28eee368c471afb26"><code>271b78b</code></a> Bump sigstore/cosign-installer from 3.1.1 to 3.1.2 (<a href="https://redirect.github.com/helm/chart-testing-action/issues/127">#127</a>)</li> <li><a href="https://github.com/helm/chart-testing-action/commit/90e5bd42d6fa7a91ca2945994517359c92b53de2"><code>90e5bd4</code></a> Bump sigstore/cosign-installer from c3667d99424e7e6047999fb6246c0da843953c65 ...</li> <li><a href="https://github.com/helm/chart-testing-action/commit/a629e844a9d081a827cf96486ef29f60afef87e4"><code>a629e84</code></a> Bump ct and cleanup script (<a href="https://redirect.github.com/helm/chart-testing-action/issues/124">#124</a>)</li> <li><a href="https://github.com/helm/chart-testing-action/commit/2fffad315319f278a64ba2e94505768bd9e2a633"><code>2fffad3</code></a> Download binary with right arch (<a href="https://redirect.github.com/helm/chart-testing-action/issues/118">#118</a>)</li> <li><a href="https://github.com/helm/chart-testing-action/commit/e8788873172cb653a90ca2e819d79d65a66d4e76"><code>e878887</code></a> Use cosign to verify the release and update chart-testing to v3.8.0 (<a href="https://redirect.github.com/helm/chart-testing-action/issues/116">#116</a>)</li> <li><a href="https://github.com/helm/chart-testing-action/commit/68148c920ae2a4f6fa169ca9d80f6905ddae6906"><code>68148c9</code></a> docs: use GITHUB_OUTPUT in example workflow (<a href="https://redirect.github.com/helm/chart-testing-action/issues/107">#107</a>)</li> <li>Additional commits viewable in <a href="https://github.com/helm/chart-testing-action/compare/v2.3.1...v2.6.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=helm/chart-testing-action&package-manager=github_actions&previous-version=2.3.1&new-version=2.6.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-18Bump actions/setup-python from 4 to 5 (#3460)dependabot[bot]
[//]: # (dependabot-start) ⚠️ **Dependabot is rebasing this PR** ⚠️ Rebasing might not happen immediately, so don't worry if this takes some time. Note: if you make any changes to this PR yourself, they will take precedence over the rebase. --- [//]: # (dependabot-end) Bumps [actions/setup-python](https://github.com/actions/setup-python) from 4 to 5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-python/releases">actions/setup-python's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <h2>What's Changed</h2> <p>In scope of this release, we update node version runtime from node16 to node20 (<a href="https://redirect.github.com/actions/setup-python/pull/772">actions/setup-python#772</a>). Besides, we update dependencies to the latest versions.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v4.8.0...v5.0.0">https://github.com/actions/setup-python/compare/v4.8.0...v5.0.0</a></p> <h2>v4.8.0</h2> <h2>What's Changed</h2> <p>In scope of this release we added support for GraalPy (<a href="https://redirect.github.com/actions/setup-python/pull/694">actions/setup-python#694</a>). You can use this snippet to set up GraalPy:</p> <pre lang="yaml"><code>steps: - uses: actions/checkout@v4 - uses: actions/setup-python@v4 with: python-version: 'graalpy-22.3' - run: python my_script.py </code></pre> <p>Besides, the release contains such changes as:</p> <ul> <li>Trim python version when reading from file by <a href="https://github.com/FerranPares"><code>@​FerranPares</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/628">actions/setup-python#628</a></li> <li>Use non-deprecated versions in examples by <a href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/724">actions/setup-python#724</a></li> <li>Change deprecation comment to past tense by <a href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/723">actions/setup-python#723</a></li> <li>Bump <code>@​babel/traverse</code> from 7.9.0 to 7.23.2 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/743">actions/setup-python#743</a></li> <li>advanced-usage.md: Encourage the use actions/checkout@v4 by <a href="https://github.com/cclauss"><code>@​cclauss</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/729">actions/setup-python#729</a></li> <li>Examples now use checkout@v4 by <a href="https://github.com/simonw"><code>@​simonw</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/738">actions/setup-python#738</a></li> <li>Update actions/checkout to v4 by <a href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/761">actions/setup-python#761</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/FerranPares"><code>@​FerranPares</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/628">actions/setup-python#628</a></li> <li><a href="https://github.com/timfel"><code>@​timfel</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/694">actions/setup-python#694</a></li> <li><a href="https://github.com/jeffwidman"><code>@​jeffwidman</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-python/pull/724">actions/setup-python#724</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v4...v4.8.0">https://github.com/actions/setup-python/compare/v4...v4.8.0</a></p> <h2>v4.7.1</h2> <h2>What's Changed</h2> <ul> <li>Bump word-wrap from 1.2.3 to 1.2.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/702">actions/setup-python#702</a></li> <li>Add range validation for toml files by <a href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a> in <a href="https://redirect.github.com/actions/setup-python/pull/726">actions/setup-python#726</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-python/compare/v4...v4.7.1">https://github.com/actions/setup-python/compare/v4...v4.7.1</a></p> <h2>v4.7.0</h2> <p>In scope of this release, the support for reading python version from pyproject.toml was added (<a href="https://redirect.github.com/actions/setup-python/pull/669">actions/setup-python#669</a>).</p> <pre lang="yaml"><code> - name: Setup Python uses: actions/setup-python@v4 &lt;/tr&gt;&lt;/table&gt; </code></pre> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-python/commit/0b93645e9fea7318ecaed2b359559ac225c90a2b"><code>0b93645</code></a> Enhance workflows: Add macOS 13 support, upgrade publish-action, and update d...</li> <li><a href="https://github.com/actions/setup-python/commit/9c76e716502b18322365741b762fee22a8cffad8"><code>9c76e71</code></a> Bump pillow from 7.2 to 10.2.0 in /<strong>tests</strong>/data (<a href="https://redirect.github.com/actions/setup-python/issues/956">#956</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/f4c5a1183d69690d31b6304b7af403a5b56a88d6"><code>f4c5a11</code></a> Revise <code>isGhes</code> logic (<a href="https://redirect.github.com/actions/setup-python/issues/963">#963</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/19dfb7b659fa9e60c2f89c33335ab5f6f1792b6e"><code>19dfb7b</code></a> Bump default versions to latest (<a href="https://redirect.github.com/actions/setup-python/issues/905">#905</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/e9675cc634901ff55d92c575ecd6945e65464b00"><code>e9675cc</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-python/issues/943">#943</a> from actions/Jcambass-patch-1</li> <li><a href="https://github.com/actions/setup-python/commit/3226af69c08a4851edf81cffc8849d2db148b21f"><code>3226af6</code></a> Upgrade IA publish</li> <li><a href="https://github.com/actions/setup-python/commit/70dcb22d269dc9546a5d97f4b11548f130526421"><code>70dcb22</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-python/issues/941">#941</a> from actions/Jcambass-patch-1</li> <li><a href="https://github.com/actions/setup-python/commit/65b48c71155ac3186106d8d8de14787f5914b8d1"><code>65b48c7</code></a> Create publish-immutable-actions.yml</li> <li><a href="https://github.com/actions/setup-python/commit/29a37be0a3d3e8bf5bc1eb19cd0502922f5b312a"><code>29a37be</code></a> initial commit (<a href="https://redirect.github.com/actions/setup-python/issues/938">#938</a>)</li> <li><a href="https://github.com/actions/setup-python/commit/f677139bbe7f9c59b41e40162b753c062f5d49a3"><code>f677139</code></a> Bump pyinstaller from 3.6 to 5.13.1 in /<strong>tests</strong>/data (<a href="https://redirect.github.com/actions/setup-python/issues/923">#923</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-python/compare/v4...v5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-python&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-18Bump actions/upload-pages-artifact from 1 to 3 (#3461)dependabot[bot]
Bumps [actions/upload-pages-artifact](https://github.com/actions/upload-pages-artifact) from 1 to 3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/upload-pages-artifact/releases">actions/upload-pages-artifact's releases</a>.</em></p> <blockquote> <h2>v3.0.0</h2> <h1>Changelog</h1> <ul> <li>Use <code>v4</code> upload-artifact tag <a href="https://github.com/robherley"><code>@​robherley</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/80">#80</a>)</li> <li>Upload pages artifact with upload-artifact v4-beta <a href="https://github.com/konradpabjan"><code>@​konradpabjan</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/78">#78</a>)</li> </ul> <p>To deploy a GitHub Pages site which has been uploaded with this version of <code>actions/upload-pages-artifact</code>, you must also use <code>actions/deploy-pages@v4</code> or newer.</p> <p>:warning: For use with products other than GitHub.com, such as GitHub Enterprise Server, please be aware that this new Actions artifacts service is not yet supported in the latest GHES release at this time.</p> <p>See details of <a href="https://github.com/actions/upload-pages-artifact/compare/v2.0.0...v3.0.0">all code changes</a> since previous release.</p> <h2>v2.0.0</h2> <h1>Changelog</h1> <ul> <li>:warning: <strong>BREAKING CHANGE:</strong> Remove built-in <code>chmod</code> commands for <code>v2</code> <a href="https://github.com/JamesMGreene"><code>@​JamesMGreene</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/69">#69</a>)</li> <li>Update README for <code>v2</code> <a href="https://github.com/JamesMGreene"><code>@​JamesMGreene</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/70">#70</a>)</li> </ul> <p>See details of <a href="https://github.com/actions/upload-pages-artifact/compare/v1.0.10...v2.0.0">all code changes</a> since previous release.</p> <h2>v1.0.10</h2> <h1>Changelog</h1> <ul> <li>readme: fix/improve note about permissions <a href="https://github.com/tshepang"><code>@​tshepang</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/65">#65</a>)</li> <li>Revert <code>chmod</code> removal for <code>v1</code> <a href="https://github.com/JamesMGreene"><code>@​JamesMGreene</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/68">#68</a>)</li> <li>Add file perms handling <a href="https://github.com/tsusdere"><code>@​tsusdere</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/64">#64</a>)</li> </ul> <p>See details of <a href="https://github.com/actions/upload-pages-artifact/compare/v1.0.9...v1.0.10">all code changes</a> since previous release.</p> <h2>v1.0.9</h2> <p>Removed <code>chmod</code> as we moved towards trusting correct file permissions have been set. In the event this isn't the case then we raise an error in the action related to the file permissions.</p> <h2>v1.0.8</h2> <h1>Changelog</h1> <ul> <li>Fail if no artifact file is found to upload <a href="https://github.com/JamesMGreene"><code>@​JamesMGreene</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/55">#55</a>)</li> <li>Fix link to releases in README <a href="https://github.com/waldyrious"><code>@​waldyrious</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/53">#53</a>)</li> <li>Bump actions/publish-action from 0.2.1 to 0.2.2 <a href="https://github.com/dependabot"><code>@​dependabot</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/47">#47</a>)</li> <li>Add Dependabot config for Actions usage updates <a href="https://github.com/JamesMGreene"><code>@​JamesMGreene</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/46">#46</a>)</li> </ul> <p>See details of <a href="https://github.com/actions/upload-pages-artifact/compare/v1.0.7...v1.0.8">all code changes</a> since previous release.</p> <h2>v1.0.7</h2> <h1>Changelog</h1> <ul> <li>Don't change file permissions of other files <a href="https://github.com/KyeRussell"><code>@​KyeRussell</code></a> (<a href="https://redirect.github.com/actions/upload-pages-artifact/issues/44">#44</a>)</li> </ul> <p>See details of <a href="https://github.com/actions/upload-pages-artifact/compare/v1.0.6...v1.0.7">all code changes</a> since previous release.</p> <h2>v1.0.6</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/upload-pages-artifact/commit/56afc609e74202658d3ffba0e8f6dda462b719fa"><code>56afc60</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-pages-artifact/issues/94">#94</a> from SilverRainZ/main</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/d12fdfb149f081bbfa1306b8824e4c1956665c12"><code>d12fdfb</code></a> Merge branch 'main' into main</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/aef55427626493469ffe424d7360e50763bab035"><code>aef5542</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-pages-artifact/issues/88">#88</a> from uiolee/patch-1</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/29cedd75fc8a23a4cc15e68025e4e2bd93e0a559"><code>29cedd7</code></a> Merge branch 'main' into patch-1</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/a69c22e32e3560be19ac13563460007948d6420d"><code>a69c22e</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-pages-artifact/issues/92">#92</a> from actions/dependabot/github_actions/non-breaking-ch...</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/794e304fb3768a063f373a13c21816485c0dbbdf"><code>794e304</code></a> Group tar's output to prevent it from messing up logs</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/14007f64647e79cbbb4404c56867428684f2995c"><code>14007f6</code></a> Bump the non-breaking-changes group with 1 update</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/0191170de1016adb0df3e653dd87f50ff6687ad7"><code>0191170</code></a> Merge pull request <a href="https://redirect.github.com/actions/upload-pages-artifact/issues/91">#91</a> from actions/dependabot-grouping</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/0e7832dab2d8824cb675c4dc3592266b132d8f0d"><code>0e7832d</code></a> Update Dependabot config to group non-breaking changes</li> <li><a href="https://github.com/actions/upload-pages-artifact/commit/1a6d9fac9a9b6ddb5b9d3b6ae82faec4133c7e19"><code>1a6d9fa</code></a> Update README.md</li> <li>Additional commits viewable in <a href="https://github.com/actions/upload-pages-artifact/compare/v1...v3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/upload-pages-artifact&package-manager=github_actions&previous-version=1&new-version=3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-18Bump actions/setup-go from 4 to 5 (#3462)dependabot[bot]
Bumps [actions/setup-go](https://github.com/actions/setup-go) from 4 to 5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/actions/setup-go/releases">actions/setup-go's releases</a>.</em></p> <blockquote> <h2>v5.0.0</h2> <h2>What's Changed</h2> <p>In scope of this release, we change Nodejs runtime from node16 to node20 (<a href="https://redirect.github.com/actions/setup-go/pull/421">actions/setup-go#421</a>). Moreover, we update some dependencies to the latest versions (<a href="https://redirect.github.com/actions/setup-go/pull/445">actions/setup-go#445</a>).</p> <p>Besides, this release contains such changes as:</p> <ul> <li>Fix hosted tool cache usage on windows by <a href="https://github.com/galargh"><code>@​galargh</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/411">actions/setup-go#411</a></li> <li>Improve documentation regarding dependencies caching by <a href="https://github.com/artemgavrilov"><code>@​artemgavrilov</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/417">actions/setup-go#417</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/galargh"><code>@​galargh</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/411">actions/setup-go#411</a></li> <li><a href="https://github.com/artemgavrilov"><code>@​artemgavrilov</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/417">actions/setup-go#417</a></li> <li><a href="https://github.com/chenrui333"><code>@​chenrui333</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/421">actions/setup-go#421</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-go/compare/v4...v5.0.0">https://github.com/actions/setup-go/compare/v4...v5.0.0</a></p> <h2>v4.1.0</h2> <h2>What's Changed</h2> <p>In scope of this release, slow installation on Windows was fixed by <a href="https://github.com/dsame"><code>@​dsame</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/393">actions/setup-go#393</a> and OS version was added to <code>primaryKey</code> for Ubuntu runners to avoid conflicts (<a href="https://redirect.github.com/actions/setup-go/pull/383">actions/setup-go#383</a>)</p> <p>This release also includes the following changes:</p> <ul> <li>Remove implicit dependencies by <a href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/378">actions/setup-go#378</a></li> <li>Update action.yml by <a href="https://github.com/mkelly"><code>@​mkelly</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/379">actions/setup-go#379</a></li> <li>Added a description that go-version should be specified as a string type by <a href="https://github.com/n3xem"><code>@​n3xem</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/367">actions/setup-go#367</a></li> <li>Add note about YAML parsing versions by <a href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/382">actions/setup-go#382</a></li> <li>Automatic update of configuration files from 05/23/2023 by <a href="https://github.com/github-actions"><code>@​github-actions</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/377">actions/setup-go#377</a></li> <li>Bump tough-cookie and <code>@​azure/ms-rest-js</code> by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/392">actions/setup-go#392</a></li> <li>Bump word-wrap from 1.2.3 to 1.2.4 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/397">actions/setup-go#397</a></li> <li>Bump semver from 6.3.0 to 6.3.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/396">actions/setup-go#396</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/mkelly"><code>@​mkelly</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/379">actions/setup-go#379</a></li> <li><a href="https://github.com/n3xem"><code>@​n3xem</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/367">actions/setup-go#367</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-go/compare/v4...v4.1.0">https://github.com/actions/setup-go/compare/v4...v4.1.0</a></p> <h2>v4.0.1</h2> <h2>What's Changed</h2> <ul> <li>Update documentation for <code>v4</code> by <a href="https://github.com/dsame"><code>@​dsame</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/354">actions/setup-go#354</a></li> <li>Fix glob bug in the package.json scripts section by <a href="https://github.com/IvanZosimov"><code>@​IvanZosimov</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/359">actions/setup-go#359</a></li> <li>Bump <code>xml2js</code> dependency by <a href="https://github.com/dmitry-shibanov"><code>@​dmitry-shibanov</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/370">actions/setup-go#370</a></li> <li>Bump <code>@actions/cache</code> dependency to v3.2.1 by <a href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a> in <a href="https://redirect.github.com/actions/setup-go/pull/374">actions/setup-go#374</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/nikolai-laevskii"><code>@​nikolai-laevskii</code></a> made their first contribution in <a href="https://redirect.github.com/actions/setup-go/pull/374">actions/setup-go#374</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/actions/setup-go/compare/v4...v4.0.1">https://github.com/actions/setup-go/compare/v4...v4.0.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/actions/setup-go/commit/3041bf56c941b39c61721a86cd11f3bb1338122a"><code>3041bf5</code></a> feat: fallback to &quot;raw&quot; endpoint for manifest when rate limit is reached (<a href="https://redirect.github.com/actions/setup-go/issues/496">#496</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/41dfa10bad2bb2ae585af6ee5bb4d7d973ad74ed"><code>41dfa10</code></a> Enhance workflows and Upgrade micromatch Dependency (<a href="https://redirect.github.com/actions/setup-go/issues/510">#510</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/941977282cd715ac8e0b3adc8555bef6dc794b7e"><code>9419772</code></a> Revise <code>isGhes</code> logic (<a href="https://redirect.github.com/actions/setup-go/issues/511">#511</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/d60b41a563a30eac31c3ec623e6ff0b3f16e1a06"><code>d60b41a</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-go/issues/502">#502</a> from actions/Jcambass-patch-1</li> <li><a href="https://github.com/actions/setup-go/commit/e09f57f6a9dc1a4c326dfc2aaf66b49f6c56f9f8"><code>e09f57f</code></a> Upgrade IA Publish</li> <li><a href="https://github.com/actions/setup-go/commit/df1a11710ed378b187f40c71eb3d6c08d82e7108"><code>df1a117</code></a> Merge pull request <a href="https://redirect.github.com/actions/setup-go/issues/500">#500</a> from actions/Jcambass-patch-1</li> <li><a href="https://github.com/actions/setup-go/commit/49582f64768fe5808736e4f6d4a39b55b1d0ee52"><code>49582f6</code></a> Add workflow file for publishing releases to immutable action package</li> <li><a href="https://github.com/actions/setup-go/commit/b26d40294f8ad76fcc90b915dac85892322fe62d"><code>b26d402</code></a> fix: add arch to cache key (<a href="https://redirect.github.com/actions/setup-go/issues/493">#493</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/0a12ed9d6a96ab950c8f026ed9f722fe0da7ef32"><code>0a12ed9</code></a> Bump braces from 3.0.2 to 3.0.3 (<a href="https://redirect.github.com/actions/setup-go/issues/487">#487</a>)</li> <li><a href="https://github.com/actions/setup-go/commit/4ab57d7ea2fd0c9948210b2e0784e280674e7144"><code>4ab57d7</code></a> Fix versions check failure (<a href="https://redirect.github.com/actions/setup-go/issues/479">#479</a>)</li> <li>Additional commits viewable in <a href="https://github.com/actions/setup-go/compare/v4...v5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=actions/setup-go&package-manager=github_actions&previous-version=4&new-version=5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-18Bump nhooyr.io/websocket from 1.8.7 to 1.8.17 (#3456)dependabot[bot]
Bumps [nhooyr.io/websocket](https://github.com/nhooyr/websocket-old) from 1.8.7 to 1.8.17. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/nhooyr/websocket-old/releases">nhooyr.io/websocket's releases</a>.</em></p> <blockquote> <h2>v1.8.17</h2> <ul> <li>This library is now deprecated. Please do not use this library any longer at the <code>nhooyr.io/websocket</code> import path. It will not receive any further updates. Coder is now maintaining it at <a href="https://github.com/coder/websocket">https://github.com/coder/websocket</a> under the <code>github.com/coder/websocket</code> import path.</li> </ul> <h2>v1.8.16</h2> <ul> <li>Please do not use this library any longer at the <code>nhooyr.io/websocket</code> import path as it is deprecated. It will not receive any maintenance updates. Coder is maintaining it now at <a href="https://github.com/coder/websocket">https://github.com/coder/websocket</a> under the <code>github.com/coder/websocket</code> import path.</li> </ul> <h2>v1.8.15</h2> <ul> <li>Please do not use this library any longer at the <code>nhooyr.io/websocket</code> import path as it is deprecated. It will not receive any maintenance updates. Coder is maintaining it now at <a href="https://github.com/coder/websocket">https://github.com/coder/websocket</a> under the <code>github.com/coder/websocket</code> import path.</li> </ul> <h2>v1.8.14</h2> <ul> <li>Please do not use this library any longer at the <code>nhooyr.io/websocket</code> import path as it is deprecated. It will not receive any maintenance updates. Coder is maintaining it now at <a href="https://github.com/coder/websocket">https://github.com/coder/websocket</a> under the <code>github.com/coder/websocket</code> import path.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li>See full diff in <a href="https://github.com/nhooyr/websocket-old/commits/v1.8.17">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=nhooyr.io/websocket&package-manager=go_modules&previous-version=1.8.7&new-version=1.8.17)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Till Faelligen <2353100+S7evinK@users.noreply.github.com>
2024-12-17Bump github.com/gorilla/websocket from 1.5.0 to 1.5.3 (#3455)dependabot[bot]
Bumps [github.com/gorilla/websocket](https://github.com/gorilla/websocket) from 1.5.0 to 1.5.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gorilla/websocket/releases">github.com/gorilla/websocket's releases</a>.</em></p> <blockquote> <h2>v1.5.3</h2> <h2>Important change</h2> <p>This reverts the websockets package back to <a href="https://github.com/gorilla/websocket/commit/931041c5ee6de24fe9cba1aa16f1a0b910284d6d">https://github.com/gorilla/websocket/commit/931041c5ee6de24fe9cba1aa16f1a0b910284d6d</a></p> <h2>What's Changed</h2> <ul> <li>Fixes subprotocol selection (aling with rfc6455) by <a href="https://github.com/KSDaemon"><code>@​KSDaemon</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/823">gorilla/websocket#823</a></li> <li>Update README.md, replace master to main by <a href="https://github.com/mstmdev"><code>@​mstmdev</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/862">gorilla/websocket#862</a></li> <li>Use status code constant by <a href="https://github.com/mstmdev"><code>@​mstmdev</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/864">gorilla/websocket#864</a></li> <li>conn.go: default close handler should not return ErrCloseSent. by <a href="https://github.com/pnx"><code>@​pnx</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/865">gorilla/websocket#865</a></li> <li>fix: replace ioutil.readfile with os.readfile by <a href="https://github.com/rfyiamcool"><code>@​rfyiamcool</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/868">gorilla/websocket#868</a></li> <li>fix: add comment for the readBufferSize and writeBufferSize by <a href="https://github.com/rfyiamcool"><code>@​rfyiamcool</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/869">gorilla/websocket#869</a></li> <li>Remove noisy printf in NextReader() and beginMessage() by <a href="https://github.com/bcreane"><code>@​bcreane</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/878">gorilla/websocket#878</a></li> <li>docs(echoreadall): fix function echoReadAll comment by <a href="https://github.com/XdpCs"><code>@​XdpCs</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/881">gorilla/websocket#881</a></li> <li>make tests parallel by <a href="https://github.com/ninedraft"><code>@​ninedraft</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/872">gorilla/websocket#872</a></li> <li>Upgrader.Upgrade: use http.ResposnseController by <a href="https://github.com/ninedraft"><code>@​ninedraft</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/871">gorilla/websocket#871</a></li> <li>Do not handle network error in <code>SetCloseHandler()</code> by <a href="https://github.com/nak3"><code>@​nak3</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/863">gorilla/websocket#863</a></li> <li>perf: reduce timer in write_control by <a href="https://github.com/rfyiamcool"><code>@​rfyiamcool</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/879">gorilla/websocket#879</a></li> <li>fix: lint example code by <a href="https://github.com/rfyiamcool"><code>@​rfyiamcool</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/890">gorilla/websocket#890</a></li> <li>feat: format message type by <a href="https://github.com/rfyiamcool"><code>@​rfyiamcool</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/889">gorilla/websocket#889</a></li> <li>Remove hideTempErr to allow downstream users to check for errors like net.ErrClosed by <a href="https://github.com/UnAfraid"><code>@​UnAfraid</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/894">gorilla/websocket#894</a></li> <li>Do not timeout when WriteControl deadline is zero in <a href="https://redirect.github.com/gorilla/websocket/pull/898">gorilla/websocket#898</a></li> <li>Excludes errchecks linter by <a href="https://github.com/apoorvajagtap"><code>@​apoorvajagtap</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/904">gorilla/websocket#904</a></li> <li>Return errors instead of printing to logs by <a href="https://github.com/apoorvajagtap"><code>@​apoorvajagtap</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/897">gorilla/websocket#897</a></li> <li>Revert &quot; Update go version &amp; add verification/testing tools (<a href="https://redirect.github.com/gorilla/websocket/issues/840">#840</a>)&quot; by <a href="https://github.com/apoorvajagtap"><code>@​apoorvajagtap</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/908">gorilla/websocket#908</a></li> <li>Fixes broken random value generation by <a href="https://github.com/apoorvajagtap"><code>@​apoorvajagtap</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/926">gorilla/websocket#926</a></li> <li>Reverts back to v1.5.0 by <a href="https://github.com/apoorvajagtap"><code>@​apoorvajagtap</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/929">gorilla/websocket#929</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/KSDaemon"><code>@​KSDaemon</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/websocket/pull/823">gorilla/websocket#823</a></li> <li><a href="https://github.com/mstmdev"><code>@​mstmdev</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/websocket/pull/862">gorilla/websocket#862</a></li> <li><a href="https://github.com/pnx"><code>@​pnx</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/websocket/pull/865">gorilla/websocket#865</a></li> <li><a href="https://github.com/rfyiamcool"><code>@​rfyiamcool</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/websocket/pull/868">gorilla/websocket#868</a></li> <li><a href="https://github.com/bcreane"><code>@​bcreane</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/websocket/pull/878">gorilla/websocket#878</a></li> <li><a href="https://github.com/XdpCs"><code>@​XdpCs</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/websocket/pull/881">gorilla/websocket#881</a></li> <li><a href="https://github.com/ninedraft"><code>@​ninedraft</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/websocket/pull/872">gorilla/websocket#872</a></li> <li><a href="https://github.com/nak3"><code>@​nak3</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/websocket/pull/863">gorilla/websocket#863</a></li> <li><a href="https://github.com/UnAfraid"><code>@​UnAfraid</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/websocket/pull/894">gorilla/websocket#894</a></li> <li><a href="https://github.com/apoorvajagtap"><code>@​apoorvajagtap</code></a> made their first contribution in <a href="https://redirect.github.com/gorilla/websocket/pull/904">gorilla/websocket#904</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/gorilla/websocket/compare/v1.5.1...v1.5.3">https://github.com/gorilla/websocket/compare/v1.5.1...v1.5.3</a></p> <h2>v1.5.2</h2> <h2>What's Changed</h2> <ul> <li>Fixes subprotocol selection (aling with rfc6455) by <a href="https://github.com/KSDaemon"><code>@​KSDaemon</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/823">gorilla/websocket#823</a></li> <li>Update README.md, replace master to main by <a href="https://github.com/mstmdev"><code>@​mstmdev</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/862">gorilla/websocket#862</a></li> <li>Use status code constant by <a href="https://github.com/mstmdev"><code>@​mstmdev</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/864">gorilla/websocket#864</a></li> <li>conn.go: default close handler should not return ErrCloseSent. by <a href="https://github.com/pnx"><code>@​pnx</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/865">gorilla/websocket#865</a></li> <li>fix: replace ioutil.readfile with os.readfile by <a href="https://github.com/rfyiamcool"><code>@​rfyiamcool</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/868">gorilla/websocket#868</a></li> <li>fix: add comment for the readBufferSize and writeBufferSize by <a href="https://github.com/rfyiamcool"><code>@​rfyiamcool</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/869">gorilla/websocket#869</a></li> <li>Remove noisy printf in NextReader() and beginMessage() by <a href="https://github.com/bcreane"><code>@​bcreane</code></a> in <a href="https://redirect.github.com/gorilla/websocket/pull/878">gorilla/websocket#878</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gorilla/websocket/commit/ce903f6d1d961af3a8602f2842c8b1c3fca58c4d"><code>ce903f6</code></a> Reverts to v1.5.0</li> <li><a href="https://github.com/gorilla/websocket/commit/9ec25ca502ec881a7e873d3cdf35da60eab22037"><code>9ec25ca</code></a> fixes broken random value generation</li> <li><a href="https://github.com/gorilla/websocket/commit/1bddf2e0dba6f35492b0f5614905b291cd0ab88d"><code>1bddf2e</code></a> bumps go version &amp; removes deprecated module usage</li> <li><a href="https://github.com/gorilla/websocket/commit/750bf92096b4cd4d75082948a4e143f303a65390"><code>750bf92</code></a> adds GHA &amp; Makefile configs</li> <li><a href="https://github.com/gorilla/websocket/commit/b2c246b2ec6f86b53889c79022fec8dabe0a20bb"><code>b2c246b</code></a> Revert &quot; Update go version &amp; add verification/testing tools (<a href="https://redirect.github.com/gorilla/websocket/issues/840">#840</a>)&quot;</li> <li><a href="https://github.com/gorilla/websocket/commit/09a6bab4667fc302c7f23ad770ce48be6fc2d15f"><code>09a6bab</code></a> removing error handling while closing connections</li> <li><a href="https://github.com/gorilla/websocket/commit/58af150309a40ad57463b8087fe33d59d5a490d3"><code>58af150</code></a> return errors instead of printing to logs</li> <li><a href="https://github.com/gorilla/websocket/commit/e5f1a0aad0accdff7dc9131fdcce912e28d8f4d5"><code>e5f1a0a</code></a> excludes errchecks linter</li> <li><a href="https://github.com/gorilla/websocket/commit/b2a86a174473e870c9fcc3eaba8957689090d2cc"><code>b2a86a1</code></a> Do not timeout when WriteControl deadline is zero</li> <li><a href="https://github.com/gorilla/websocket/commit/695e9095ce8736ac99c83939ca6b0fe93768f680"><code>695e909</code></a> Remove hideTempErr to allow downstream users to check for errors like net.Err...</li> <li>Additional commits viewable in <a href="https://github.com/gorilla/websocket/compare/v1.5.0...v1.5.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/gorilla/websocket&package-manager=go_modules&previous-version=1.5.0&new-version=1.5.3)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-17Bump github.com/docker/go-connections from 0.4.0 to 0.5.0 (#3465)dependabot[bot]
Bumps [github.com/docker/go-connections](https://github.com/docker/go-connections) from 0.4.0 to 0.5.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/go-connections/commit/fa09c952e3eadbffaf8afc5b8a1667158ba38ace"><code>fa09c95</code></a> Merge pull request <a href="https://redirect.github.com/docker/go-connections/issues/108">#108</a> from thaJeztah/carry_6</li> <li><a href="https://github.com/docker/go-connections/commit/7a67a58690ec00e92abd9fedb3b1b99c95bbbd59"><code>7a67a58</code></a> Swap CloseRead and CloseWrite</li> <li><a href="https://github.com/docker/go-connections/commit/481d3d26b3705da4932f3fb11d3b47a5b5abcb46"><code>481d3d2</code></a> Merge pull request <a href="https://redirect.github.com/docker/go-connections/issues/107">#107</a> from thaJeztah/drop_legacy_go</li> <li><a href="https://github.com/docker/go-connections/commit/9548f9f7bdd4e95eb9d3a20c430517f69f5c62cf"><code>9548f9f</code></a> tlsconfig: remove deprecated io/ioutil</li> <li><a href="https://github.com/docker/go-connections/commit/c564c210e1404800194d27aad617dde3c4f4f831"><code>c564c21</code></a> drop support for go1.17 and older</li> <li><a href="https://github.com/docker/go-connections/commit/7cbebcf931b3107a81a923ce6e1874380c65c436"><code>7cbebcf</code></a> gha: update actions</li> <li><a href="https://github.com/docker/go-connections/commit/2cf423f0ad95e0e87577d9740c647015c00ed8fd"><code>2cf423f</code></a> tlsconfig: move allTLSVersions var</li> <li><a href="https://github.com/docker/go-connections/commit/dca283b66503865dfa3869d7976a925105b82211"><code>dca283b</code></a> tlsconfig: drop support for go1.12 and older</li> <li><a href="https://github.com/docker/go-connections/commit/21876c5afda7f3fe2b7505a72a04eb4a021b64f1"><code>21876c5</code></a> tlsconfig: drop support for go1.6 and older</li> <li><a href="https://github.com/docker/go-connections/commit/4d174dba226cc3a556fa2f158b209f4d54c64281"><code>4d174db</code></a> tlsconfig: drop support for go1.4 and older</li> <li>Additional commits viewable in <a href="https://github.com/docker/go-connections/compare/v0.4.0...v0.5.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/go-connections&package-manager=go_modules&previous-version=0.4.0&new-version=0.5.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-17Bump github.com/docker/docker from 26.1.0+incompatible to ↵dependabot[bot]
26.1.5+incompatible (#3466) Bumps [github.com/docker/docker](https://github.com/docker/docker) from 26.1.0+incompatible to 26.1.5+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/docker/releases">github.com/docker/docker's releases</a>.</em></p> <blockquote> <h2>v26.1.5</h2> <h2>26.1.5</h2> <h3>Security</h3> <p>This release contains a fix for <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-41110">CVE-2024-41110</a> / <a href="https://github.com/moby/moby/security/advisories/GHSA-v23v-6jw2-98fq">GHSA-v23v-6jw2-98fq</a> that impacted setups using <a href="https://docs.docker.com/engine/extend/plugins_authorization/">authorization plugins (AuthZ)</a> for access control. No other changes are included in this release, and this release is otherwise identical for users not using AuthZ plugins.</p> <p><strong>Full Changelog</strong>: <a href="https://github.com/moby/moby/compare/v26.1.4...v26.1.5">https://github.com/moby/moby/compare/v26.1.4...v26.1.5</a></p> <h2>v26.1.4</h2> <h2>26.1.4</h2> <p>For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:</p> <ul> <li><a href="https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A26.1.4">docker/cli, 26.1.4 milestone</a></li> <li><a href="https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A26.1.4">moby/moby, 26.1.4 milestone</a></li> <li>Deprecated and removed features, see <a href="https://github.com/docker/cli/blob/v26.1.4/docs/deprecated.md">Deprecated Features</a>.</li> <li>Changes to the Engine API, see <a href="https://github.com/moby/moby/blob/v26.1.4/docs/api/version-history.md">API version history</a>.</li> </ul> <h3>Security</h3> <p>This release updates the Go runtime to 1.21.11 which contains security fixes for:</p> <ul> <li><a href="https://redirect.github.com/golang/go/issues/66869">CVE-2024-24789</a></li> <li><a href="https://redirect.github.com/golang/go/issues/67680">CVE-2024-24790</a></li> <li>A symlink time of check to time of use race condition during directory removal reported by Addison Crump (<a href="https://github.com/addisoncrump"><code>@​addisoncrump</code></a>).</li> </ul> <h3>Bug fixes and enhancements</h3> <ul> <li>Fixed an issue where promoting a node immediately after another node was demoted could cause the promotion to fail. <a href="https://redirect.github.com/moby/moby/pull/47870">moby/moby#47870</a></li> <li>Prevent the daemon log from being spammed with <code>superfluous response.WriteHeader call ...</code> messages.. <a href="https://redirect.github.com/moby/moby/pull/47843">moby/moby#47843</a></li> <li>Don't show empty hints when plugins return an empty hook message. <a href="https://redirect.github.com/docker/cli/pull/5083">docker/cli#5083</a></li> <li>Added <code>ContextType: &quot;moby&quot;</code> to the context list/inspect output to address a compatibility issue with Visual Studio Container Tools. <a href="https://redirect.github.com/docker/cli/pull/5095">docker/cli#5095</a></li> <li>Fix a compatibility issue with Visual Studio Container Tools. <a href="https://redirect.github.com/docker/cli/pull/5095">docker/cli#5095</a></li> </ul> <h3>Packaging updates</h3> <ul> <li>Update containerd (static binaries only) to <a href="https://github.com/containerd/containerd/releases/tag/v1.7.17">v1.7.17</a>. <a href="https://redirect.github.com/moby/moby/pull/47841">moby/moby#47841</a></li> <li><a href="https://redirect.github.com/golang/go/issues/66869">CVE-2024-24789</a>, <a href="https://redirect.github.com/golang/go/issues/67680">CVE-2024-24790</a>: Update Go runtime to 1.21.11. <a href="https://redirect.github.com/moby/moby/pull/47904">moby/moby#47904</a></li> <li>Update Compose to <a href="https://github.com/docker/compose/releases/tag/v2.27.1">v2.27.1</a>. <a href="https://redirect.github.com/docker/docker-ce-packaging/pull/1022">docker/docker-ce-packages#1022</a></li> <li>Update Buildx to <a href="https://github.com/docker/buildx/releases/tag/v0.14.1">v0.14.1</a>. <a href="https://redirect.github.com/docker/docker-ce-packaging/pull/1021">docker/docker-ce-packages#1021</a></li> </ul> <h2>v26.1.3</h2> <h2>26.1.3</h2> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/moby/moby/commit/411e817ddf710ff8e08fa193da80cb78af708191"><code>411e817</code></a> Merge commit from fork</li> <li><a href="https://github.com/moby/moby/commit/9cc85eaef15739234909e9c1d4b9915b37bac4ab"><code>9cc85ea</code></a> If url includes scheme, urlPath will drop hostname, which would not match the...</li> <li><a href="https://github.com/moby/moby/commit/820cab90bc2cfc6fadf9bf9f0f460e1f6d07434a"><code>820cab9</code></a> Authz plugin security fixes for 0-length content and path validation</li> <li><a href="https://github.com/moby/moby/commit/6bc49067a6c7647db245d77e0660778c8f61f314"><code>6bc4906</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/48123">#48123</a> from vvoland/v26.1-48120</li> <li><a href="https://github.com/moby/moby/commit/6fbdce4b94456b6aad2b83a661bbbbed4dafa583"><code>6fbdce4</code></a> update to go1.21.12</li> <li><a href="https://github.com/moby/moby/commit/f5334644ecc787861fef75c7f6d08756ffe8bbd7"><code>f533464</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/47986">#47986</a> from vvoland/v26.1-47985</li> <li><a href="https://github.com/moby/moby/commit/c1d4587d769bae94305de974fcb97d614fa7b4ef"><code>c1d4587</code></a> builder/mobyexporter: Add missing nil check</li> <li><a href="https://github.com/moby/moby/commit/d6428049a53212ee798fedd90b1328a381492d28"><code>d642804</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/47940">#47940</a> from thaJeztah/26.1_backport_api_remove_container_c...</li> <li><a href="https://github.com/moby/moby/commit/daba2462f545b155011e1f183a85f00a18926181"><code>daba246</code></a> docs: api: image inspect: remove Container and ContainerConfig</li> <li><a href="https://github.com/moby/moby/commit/de5c9cf0b96e4e172b96db54abababa4a328462f"><code>de5c9cf</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/47912">#47912</a> from thaJeztah/26.1_backport_vendor_containerd_1.7.18</li> <li>Additional commits viewable in <a href="https://github.com/docker/docker/compare/v26.1.0...v26.1.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/docker&package-manager=go_modules&previous-version=26.1.0+incompatible&new-version=26.1.5+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/element-hq/dendrite/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-17Bump github.com/docker/docker from 25.0.6+incompatible to ↵dependabot[bot]
27.4.0+incompatible (#3458) Bumps [github.com/docker/docker](https://github.com/docker/docker) from 25.0.6+incompatible to 27.4.0+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/docker/releases">github.com/docker/docker's releases</a>.</em></p> <blockquote> <h2>v27.4.0</h2> <h2>27.4.0</h2> <p>For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:</p> <ul> <li><a href="https://github.com/docker/cli/issues?q=is%3Aclosed+milestone%3A27.4.0">docker/cli, 27.4.0 milestone</a></li> <li><a href="https://github.com/moby/moby/issues?q=is%3Aclosed+milestone%3A27.4.0">moby/moby, 27.4.0 milestone</a></li> </ul> <h3>API</h3> <ul> <li><code>GET /images/json</code> with the <code>manifests</code> option enabled now preserves the original order in which manifests appeared in the manifest-index. <a href="https://redirect.github.com/moby/moby/pull/48712">moby/moby#48712</a></li> </ul> <h3>Bug fixes and enhancements</h3> <ul> <li>When reading logs with the <code>jsonfile</code> or <code>local</code> log drivers, any errors while trying to read or parse underlying log files will cause the rest of the file to be skipped and move to the next log file (if one exists) rather than returning an error to the client and closing the stream. The errors are viewable in the Docker Daemon logs and exported to traces when tracing is configured. <a href="https://redirect.github.com/moby/moby/pull/48842">moby/moby#48842</a></li> <li>When reading log files, compressed log files are now only decompressed when needed rather than decompressing all files before starting the log stream. <a href="https://redirect.github.com/moby/moby/pull/48842">moby/moby#48842</a></li> <li>Fix an issue that meant published ports from one container on a bridge network were not accessible from another container on the same network with <code>userland-proxy</code> disabled, if the kernel's <code>br_netfilter</code> module was not loaded and enabled. The daemon will now attempt to load the module and enable <code>bridge-nf-call-iptables</code> or <code>bridge-nf-call-ip6tables</code> when creating a network with the userland proxy disabled. <a href="https://redirect.github.com/moby/moby/pull/48685">moby/moby#48685</a></li> <li>Fix loading of <code>bridge</code> and <code>br_netfilter</code> kernel modules. <a href="https://redirect.github.com/moby/moby/pull/48966">moby/moby#48966</a></li> <li>containerd image store: Fix Docker daemon failing to fully start with a &quot;context deadline exceeded error&quot; with containerd snapshotter and many builds/images. <a href="https://redirect.github.com/moby/moby/pull/48954">moby/moby#48954</a></li> <li>containerd image-store: Fix partially pulled images not being garbage-collected. <a href="https://redirect.github.com/moby/moby/pull/48910">moby#48910</a>, <a href="https://redirect.github.com/moby/moby/pull/48957">moby/moby#48957</a></li> <li>containerd image store: Fix <code>docker image inspect</code> outputting duplicate references in <code>RepoDigests</code>. <a href="https://redirect.github.com/moby/moby/pull/48785">moby/moby#48785</a></li> <li>containerd image store: Fix not being able to connect to some insecure registries in cases where the HTTPS request failed due to a non-TLS related error. <a href="https://redirect.github.com/moby/moby/pull/48758">moby/moby#48758</a></li> <li>containerd image store: Remove a confusing warning log when tagging a non-dangling image. <a href="https://redirect.github.com/moby/moby/pull/49010">moby/moby#49010</a></li> <li>dockerd-rootless-setuptool.sh: let --force ignore smoke test errors <a href="https://redirect.github.com/moby/moby/pull/48695">moby/moby#48695</a></li> <li>Disable IPv6 Duplicate Address Detection (DAD) for addresses assigned to the bridges belonging to bridge networks. <a href="https://redirect.github.com/moby/moby/pull/48684">moby/moby#48684</a></li> <li>Remove BuildKit init timeout. <a href="https://redirect.github.com/moby/moby/pull/48963">moby/moby#48963</a></li> <li>Ignore &quot;dataset does not exist&quot; error when removing dataset on ZFS. <a href="https://redirect.github.com/moby/moby/pull/48968">moby/moby#48968</a></li> <li>Client: Prevent idle connections leaking FDs. <a href="https://redirect.github.com/moby/moby/pull/48764">moby/moby#48764</a></li> <li>Fix anonymous volumes being created through the <code>--mount</code> option not being marked as anonymous. <a href="https://redirect.github.com/moby/moby/pull/48755">moby/moby#48755</a></li> <li>After a daemon restart with live-restore, ensure an iptables jump to the <code>DOCKER-USER</code> chain is placed before other rules. <a href="https://redirect.github.com/moby/moby/pull/48714">moby/moby#48714</a></li> <li>Fix a possible memory leak caused by OTel meters. <a href="https://redirect.github.com/moby/moby/pull/48693">moby/moby#48693</a></li> <li>Create distinct build history db for each store. <a href="https://redirect.github.com/moby/moby/pull/48688">moby/moby#48688</a></li> <li>Fix an issue that caused excessive memory usage when DNS resolution was made in a tight loop. <a href="https://redirect.github.com/moby/moby/pull/48840">moby/moby#48840</a></li> <li>containerd image store: Do not underline names in <code>docker image ls --tree</code>. <a href="https://redirect.github.com/docker/cli/pull/5519">docker/cli#5519</a></li> <li>containerd image store: Change name of <code>USED</code> column in <code>docker image ls --tree</code> to <code>IN USE</code>. <a href="https://redirect.github.com/docker/cli/pull/5518">docker/cli#5518</a></li> <li>Fix a bug preventing image pulls from being cancelled during <code>docker run</code>. <a href="https://redirect.github.com/docker/cli/pull/5654">docker/cli#5654</a></li> <li>Port some completions from the bash completion to the new cobra based completion. <a href="https://redirect.github.com/docker/cli/pull/5618">docker/cli#5618</a></li> <li>The <code>docker login</code> and <code>docker logout</code> command no longer update the configuration file if the credentials didn't change. <a href="https://redirect.github.com/docker/cli/pull/5569">docker/cli#5569</a></li> <li>Optimise <code>docker stats</code> to reduce flickering issues. <a href="https://redirect.github.com/docker/cli/pull/5588">docker/cli#5588</a>, <a href="https://redirect.github.com/docker/cli/pull/5635">docker/cli#5635</a></li> <li>Fix inaccessible plugins paths preventing plugins from being detected. <a href="https://redirect.github.com/docker/cli/pull/5652">docker/cli#5652</a></li> <li>Add support for <code>events --filter</code> in cobra generated shell completions. <a href="https://redirect.github.com/docker/cli/pull/5614">docker/cli#5614</a></li> <li>Fix bash completion for <code>events --filter daemon=</code>. <a href="https://redirect.github.com/docker/cli/pull/5563">docker/cli#5563</a></li> <li>Improve shell-completion of containers for <code>docker rm</code>. <a href="https://redirect.github.com/docker/cli/pull/5540">docker/cli#5540</a></li> <li>Add shell-completion for <code>--platform</code> flags. <a href="https://redirect.github.com/docker/cli/pull/5540">docker/cli#5540</a></li> <li>rootless: Make <code>/etc/cdi</code> and <code>/var/run/cdi</code> accessible by the Container Device Interface (CDI) integration. <a href="https://redirect.github.com/moby/moby/pull/49027">moby/moby#49027</a></li> </ul> <h3>Removed</h3> <ul> <li>Deprecate <code>Daemon.Exists()</code> and <code>Daemon.IsPaused()</code>. These functions are no longer used and will be removed in the next release. <a href="https://redirect.github.com/moby/moby/pull/48719">moby/moby#48719</a></li> <li>Deprecate <code>container.ErrNameReserved</code> and <code>container.ErrNameNotReserved</code>. <a href="https://redirect.github.com/moby/moby/pull/48697">moby/moby#48697</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/moby/moby/commit/92a83937d0280dcbea92099b01e01aa4251c1777"><code>92a8393</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/49027">#49027</a> from thaJeztah/27.x_backport_cdi-rootless</li> <li><a href="https://github.com/moby/moby/commit/9163aa379a8212c08c14aeff45a25131faa3d47b"><code>9163aa3</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/49026">#49026</a> from thaJeztah/27.x_update_go_1.22.10</li> <li><a href="https://github.com/moby/moby/commit/4775621ab6ab5adb94450d8edfa7f85c790070f7"><code>4775621</code></a> Dockerd rootless: make {/etc,/var/run}/cdi available</li> <li><a href="https://github.com/moby/moby/commit/0176f4a5c3b354fa2c7aa76f1249c1ef93d2d8a1"><code>0176f4a</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/49024">#49024</a> from thaJeztah/27.x_vendor_buildkit_0.17.3</li> <li><a href="https://github.com/moby/moby/commit/0e34b3956b6e95324d67517305a3376d36896490"><code>0e34b39</code></a> update to go1.22.10</li> <li><a href="https://github.com/moby/moby/commit/7919b806e7654c999656ff2288fed76542b2707e"><code>7919b80</code></a> [27.x] vendor: github.com/moby/buildkit v0.17.3</li> <li><a href="https://github.com/moby/moby/commit/a92d4c5a575722f61bfe6f659360a17fb6a53f0d"><code>a92d4c5</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/49013">#49013</a> from vvoland/49006-27.x</li> <li><a href="https://github.com/moby/moby/commit/1cc127466dcb3ad693b5285ff13ba3e24163277f"><code>1cc1274</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/49010">#49010</a> from vvoland/49009-27.x</li> <li><a href="https://github.com/moby/moby/commit/525b929947e8cf02246ab53915d1ea89936a2181"><code>525b929</code></a> registry: deprecate RepositoryInfo.Class</li> <li><a href="https://github.com/moby/moby/commit/d6d43b29126043b479ff967f20259a5491d58f0f"><code>d6d43b2</code></a> c8d/tag: Don't log a warning if the source image is not dangling</li> <li>Additional commits viewable in <a href="https://github.com/docker/docker/compare/v25.0.6...v27.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/docker&package-manager=go_modules&previous-version=25.0.6+incompatible&new-version=27.4.0+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Till Faelligen <2353100+S7evinK@users.noreply.github.com>
2024-12-17Bump github.com/dgraph-io/ristretto from 0.1.1 to 0.2.0 (#3457)dependabot[bot]
Bumps [github.com/dgraph-io/ristretto](https://github.com/dgraph-io/ristretto) from 0.1.1 to 0.2.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/dgraph-io/ristretto/releases">github.com/dgraph-io/ristretto's releases</a>.</em></p> <blockquote> <h2>v0.2.0</h2> <h2>What's Changed</h2> <p>*`docs(readme): Use new Wait method by <a href="https://github.com/angadn"><code>@​angadn</code></a> in <a href="https://redirect.github.com/dgraph-io/ristretto/pull/327">dgraph-io/ristretto#327</a></p> <ul> <li>docs: format example on readme by <a href="https://github.com/rfyiamcool"><code>@​rfyiamcool</code></a> in <a href="https://redirect.github.com/dgraph-io/ristretto/pull/339">dgraph-io/ristretto#339</a></li> <li>Fix flakes in TestDropUpdates by <a href="https://github.com/evanj"><code>@​evanj</code></a> in <a href="https://redirect.github.com/dgraph-io/ristretto/pull/334">dgraph-io/ristretto#334</a></li> <li>docs(Cache): document Wait, clarify Get by <a href="https://github.com/evanj"><code>@​evanj</code></a> in <a href="https://redirect.github.com/dgraph-io/ristretto/pull/333">dgraph-io/ristretto#333</a></li> <li>chore: fix typo error by <a href="https://github.com/proost"><code>@​proost</code></a> in <a href="https://redirect.github.com/dgraph-io/ristretto/pull/341">dgraph-io/ristretto#341</a></li> <li>fix: support compilation to wasip1 by <a href="https://github.com/achille-roussel"><code>@​achille-roussel</code></a> in <a href="https://redirect.github.com/dgraph-io/ristretto/pull/344">dgraph-io/ristretto#344</a></li> <li>remove glog dependency by <a href="https://github.com/jhawk28"><code>@​jhawk28</code></a> in <a href="https://redirect.github.com/dgraph-io/ristretto/pull/350">dgraph-io/ristretto#350</a></li> <li>add config for cleanup ticker duration by <a href="https://github.com/singhvikash11"><code>@​singhvikash11</code></a> in <a href="https://redirect.github.com/dgraph-io/ristretto/pull/342">dgraph-io/ristretto#342</a></li> <li>fix(OnEvict): Set missing Expiration field on evicted items by <a href="https://github.com/0x1ee7"><code>@​0x1ee7</code></a> in <a href="https://redirect.github.com/dgraph-io/ristretto/pull/345">dgraph-io/ristretto#345</a></li> <li>uint32 -&gt; uint64 in slice methods by <a href="https://github.com/mocurin"><code>@​mocurin</code></a> in <a href="https://redirect.github.com/dgraph-io/ristretto/pull/323">dgraph-io/ristretto#323</a></li> <li>fix: cleanupTicker not being stopped by <a href="https://github.com/IlyaFloppy"><code>@​IlyaFloppy</code></a> in <a href="https://redirect.github.com/dgraph-io/ristretto/pull/343">dgraph-io/ristretto#343</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/dgraph-io/ristretto/compare/v0.1.1...v0.2.0">https://github.com/dgraph-io/ristretto/compare/v0.1.1...v0.2.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/dgraph-io/ristretto/blob/main/CHANGELOG.md">github.com/dgraph-io/ristretto's changelog</a>.</em></p> <blockquote> <h2>[v0.2.0] - 2024-10-06</h2> <h3>Added</h3> <ul> <li><a href="https://redirect.github.com/dgraph-io/ristretto/pull/344"><code>fix: support compilation to wasip1 by @​achille-roussel</code></a></li> <li><a href="https://redirect.github.com/dgraph-io/ristretto/pull/342"><code>add config for cleanup ticker duration by @​singhvikash11</code></a></li> </ul> <h3>Fixed</h3> <ul> <li><a href="https://redirect.github.com/dgraph-io/ristretto/pull/327"><code>docs(readme): Use new Wait method by @​angadn</code></a></li> <li><a href="https://redirect.github.com/dgraph-io/ristretto/pull/339"><code>docs: format example on readme by @​rfyiamcool</code></a></li> <li><a href="https://redirect.github.com/dgraph-io/ristretto/pull/334"><code>Fix flakes in TestDropUpdates by @​evanj</code></a></li> <li><a href="https://redirect.github.com/dgraph-io/ristretto/pull/333"><code>docs(Cache): document Wait, clarify Get by @​evanj</code></a></li> <li><a href="https://redirect.github.com/dgraph-io/ristretto/pull/341"><code>chore: fix typo error by @​proost</code></a></li> <li><a href="https://redirect.github.com/dgraph-io/ristretto/pull/350"><code>remove glog dependency by @​jhawk28</code></a></li> <li><a href="https://redirect.github.com/dgraph-io/ristretto/pull/345"><code>fix(OnEvict): Set missing Expiration field on evicted items by @​0x1ee7</code></a></li> <li><a href="https://redirect.github.com/dgraph-io/ristretto/pull/323"><code>uint32 -&gt; uint64 in slice methods by @​mocurin</code></a></li> <li><a href="https://redirect.github.com/dgraph-io/ristretto/pull/343"><code>fix: cleanupTicker not being stopped by @​IlyaFloppy</code></a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/dgraph-io/ristretto/compare/v0.1.1...v0.2.0">https://github.com/dgraph-io/ristretto/compare/v0.1.1...v0.2.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/dgraph-io/ristretto/commit/185461756714d72b458a7fb6cf9441a96db82dcb"><code>1854617</code></a> minor repo cleanup (<a href="https://redirect.github.com/dgraph-io/ristretto/issues/352">#352</a>)</li> <li><a href="https://github.com/dgraph-io/ristretto/commit/91446626cc3b34a596a024bd711f786e74851aeb"><code>9144662</code></a> stop cleanupTicker while closing cache (<a href="https://redirect.github.com/dgraph-io/ristretto/issues/343">#343</a>)</li> <li><a href="https://github.com/dgraph-io/ristretto/commit/c00b3525a6a1c4cead9cc26b8d453da4b0e85e52"><code>c00b352</code></a> uint32 to uint64 in slice methods (<a href="https://redirect.github.com/dgraph-io/ristretto/issues/323">#323</a>)</li> <li><a href="https://github.com/dgraph-io/ristretto/commit/e6d62cbfa02d3bd4bfd1f50f8d86786dc668ec46"><code>e6d62cb</code></a> chore(ci): separate out coverage report workflow (<a href="https://redirect.github.com/dgraph-io/ristretto/issues/353">#353</a>)</li> <li><a href="https://github.com/dgraph-io/ristretto/commit/f0e70276b93a49aa672dd247f4dddfc5f208d07f"><code>f0e7027</code></a> set missing Expiration field on evicted items (<a href="https://redirect.github.com/dgraph-io/ristretto/issues/345">#345</a>)</li> <li><a href="https://github.com/dgraph-io/ristretto/commit/e8dc5b0073351c9bf2a0c4ca8567089da049da44"><code>e8dc5b0</code></a> add config for cleanup ticker duration (<a href="https://redirect.github.com/dgraph-io/ristretto/issues/342">#342</a>)</li> <li><a href="https://github.com/dgraph-io/ristretto/commit/c5789d66fddc048e40318067bb60cf8395d8a3f8"><code>c5789d6</code></a> update golangci config and cleanup repo (<a href="https://redirect.github.com/dgraph-io/ristretto/issues/351">#351</a>)</li> <li><a href="https://github.com/dgraph-io/ristretto/commit/bdcf5e99ac1dcfc086482e8041b79d01167c7590"><code>bdcf5e9</code></a> remove glog dependency (<a href="https://redirect.github.com/dgraph-io/ristretto/issues/350">#350</a>)</li> <li><a href="https://github.com/dgraph-io/ristretto/commit/3f6b44a6092c4a0ad1f3ece5db1d54438ddcb39b"><code>3f6b44a</code></a> fix: support compilation to wasip1 (<a href="https://redirect.github.com/dgraph-io/ristretto/issues/344">#344</a>)</li> <li><a href="https://github.com/dgraph-io/ristretto/commit/c73d585ee67e15661e8148de2657f0939b0a63b4"><code>c73d585</code></a> chore: fix typo error (<a href="https://redirect.github.com/dgraph-io/ristretto/issues/341">#341</a>)</li> <li>Additional commits viewable in <a href="https://github.com/dgraph-io/ristretto/compare/v0.1.1...v0.2.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/dgraph-io/ristretto&package-manager=go_modules&previous-version=0.1.1&new-version=0.2.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2024-12-17Add GHA dependabot config, bump codecov action (#3459)Till
2024-12-17Fetch oldest OTKs first (MSC4225) (#3452)Till
As per https://github.com/matrix-org/matrix-spec-proposals/pull/4225, fetch the oldest OTKs first.
2024-12-17Support for fallback keys (#3451)Neil
Backports support for fallback keys from Harmony, which should make E2EE more reliable in the face of OTK exhaustion. Signed-off-by: Neil Alexander <git@neilalexander.dev> Co-authored-by: Neil Alexander <neilalexander@users.noreply.github.com> [skip ci]
2024-12-17Add dependabot config (#3450)Till
[skip ci]
2024-12-17 Various fixes in `fetchAuthEvents` (#3447)Till
This might fix issues with state events gone missing. --------- Co-authored-by: Neil Alexander <neilalexander@users.noreply.github.com> [skip ci]
2024-12-17Add temporary repository flag (#3453)Till
As long as we don't have any releases in this organization, upgrade tests are going to fail. This adds a `repository` flag which allows overwriting the repository to pull old version archives from.
2024-12-15Update dependencies (#3449)Neil
Signed-off-by: Neil Alexander <git@neilalexander.dev> --------- Co-authored-by: Neil Alexander <neilalexander@users.noreply.github.com>
2024-12-09 Add via parameter on join room requests as per MSC4156 (#3441)Johannes Marbach
This implements [MSC4156](https://github.com/matrix-org/matrix-spec-proposals/pull/4156) which will ship with Matrix 1.12 and is the continuation of https://github.com/matrix-org/dendrite/pull/3438. ### Pull Request Checklist <!-- Please read https://matrix-org.github.io/dendrite/development/contributing before submitting your pull request --> * [ ] I have added Go unit tests or [Complement integration tests](https://github.com/matrix-org/complement) for this PR _or_ I have justified why this PR doesn't need tests * [x] Pull request includes a [sign off below using a legally identifiable name](https://matrix-org.github.io/dendrite/development/contributing#sign-off) _or_ I have already signed off privately Signed-off-by: Johannes Marbach <n0-0ne+github@mailbox.org> Signed-off-by: Johannes Marbach <n0-0ne+github@mailbox.org> Co-authored-by: Till <2353100+S7evinK@users.noreply.github.com>
2024-11-14Update GHCR_NAME space to element-hqTill Faelligen
2024-11-14Fix lintingTill Faelligen
2024-11-14Fix missed matrix-org bits, run go mod tidyTill Faelligen
2024-10-18Update the CODEOWNERS to use @element-hq/dendrite-coreQuentin Gliech
2024-10-18Update the license headers to mention the commercial licenseQuentin Gliech
2024-10-18Add commercial licenseQuentin Gliech
2024-10-17Replace references to the repositoryQuentin Gliech
2024-10-17Rename the go packageQuentin Gliech
github.com/matrix-org/dendrite to github.com/element-hq/dendrite
2024-10-17fixup! Update license in Docker image annotationsQuentin Gliech
2024-10-17Fixup missed license headersQuentin Gliech
2024-10-17Update license in Docker image annotationsQuentin Gliech
2024-10-17Update license fileQuentin Gliech
2024-10-17Update the copyright headers in all filesQuentin Gliech
2024-09-23Adds support for listening on and connecting to I2P and Onion services ↵idk
securely (#3293) This PR adds 2 `dendrite-demo` main's, each designed expressly to serve a Hidden Service/Overlay network. The first, `dendrite-demo-i2p` add self-configuration for use of dendrite as an I2P hidden service(eepsite) and to connect to I2P services(federate) as an I2P client. It further disables the `dendrite` server from communicating with non-anonymous servers by federation(because I2P does not canonically have the ability to exit, we rely on donors for exit traffic), and enables the use of self-signed TLS certificates([because I2P services are self-authenticating but TLS is still required for other aspects of the system to work reliably](https://tor.stackexchange.com/questions/13887/registering-onion-with-certificate-authority)). This demo turns the system into an "pseudonymous" homeserver which people can connect to using an I2P-enabled Matrix client(I like `cinny` and it's what I tested with). The second, `dendrite-demo-tor` adds self-configuration for the use of dendrite as an Onion service and to connect to other onion services and non-anonymous web sites using Tor to obfuscate it's physical location and providing, optionally, pseudonymity. It also enables the use of self-signed TLS certificates, for the same reason as with I2P, because onion services aren't typically eligible for TLS certificates. It has also been tested with `cinny`. These services are both pseudonymous like myself, not anonymous. I will be meeting members of the element team at the CCC assembly shortly to discuss contributing under my pseudonym. As none of the other `dendrite-demo` have unit tests I did not add them to these checkins. * [*] I have added Go unit tests or [Complement integration tests](https://github.com/matrix-org/complement) for this PR _or_ I have justified why this PR doesn't need tests --------- Co-authored-by: eyedeekay <idk@mulder> Co-authored-by: Till Faelligen <2353100+S7evinK@users.noreply.github.com>
2024-09-22Make OPTIONS method on MSC3916 endpoints available without auth (#3431)arenekosreal
OPTIONS method is usually sent by browser in preflight requests, most of the time we cannot control preflight request to add auth header. Synapse will return a 204 response directly without authentication for those OPTIONS method. According to firefox's documentation, both 200 and 204 are acceptable so I think there is no need to change handler in dendrite. This closes https://github.com/matrix-org/dendrite/issues/3424 No need to add a test because this is just a fix and I have tested on my Cinny Web client personally. ### Pull Request Checklist <!-- Please read https://matrix-org.github.io/dendrite/development/contributing before submitting your pull request --> * [x] I have added Go unit tests or [Complement integration tests](https://github.com/matrix-org/complement) for this PR _or_ I have justified why this PR doesn't need tests * [x] Pull request includes a [sign off below using a legally identifiable name](https://matrix-org.github.io/dendrite/development/contributing#sign-off) _or_ I have already signed off privately Signed-off-by: `arenekosreal <17194552+arenekosreal@users.noreply.github.com>` Signed-off-by: arenekosreal <17194552+arenekosreal@users.noreply.github.com>
2024-09-20Helm Chart - Add configuration for node selector / tolerations / affi… (#3433)helm-dendrite-0.14.6Rhea Danzey
For some experimentation I'm doing, I need to pin Dendrite to a specific node pool. This should be available configuration within the chart ideally, and this should do it in theory. ### Pull Request Checklist <!-- Please read https://matrix-org.github.io/dendrite/development/contributing before submitting your pull request --> * [x] I have added Go unit tests or [Complement integration tests](https://github.com/matrix-org/complement) for this PR _or_ I have justified why this PR doesn't need tests * [x] Pull request includes a [sign off below using a legally identifiable name](https://matrix-org.github.io/dendrite/development/contributing#sign-off) _or_ I have already signed off privately Signed-off-by: `Rhea Danzey <rdanzey@element.io>` --------- Signed-off-by: Rhea Danzey <rdanzey@element.io>
2024-09-20Helm chart - Fix image pull secrets for signing-key job (#3430)helm-dendrite-0.14.5Rhea Danzey
Forgotten in https://github.com/matrix-org/dendrite/pull/3428 - Pull secrets need to be used for signing-key job since it uses Dendrite container as well ### Pull Request Checklist <!-- Please read https://matrix-org.github.io/dendrite/development/contributing before submitting your pull request --> * [x] I have added Go unit tests or [Complement integration tests](https://github.com/matrix-org/complement) for this PR _or_ I have justified why this PR doesn't need tests * [x] Pull request includes a [sign off below using a legally identifiable name](https://matrix-org.github.io/dendrite/development/contributing#sign-off) _or_ I have already signed off privately Signed-off-by: `Rhea Danzey <rdanzey@element.io>` --------- Signed-off-by: Rhea Danzey <rdanzey@element.io>