Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

chore(deps): update all non-major dependencies #983

Merged
merged 2 commits into from
Feb 26, 2024
Merged

chore(deps): update all non-major dependencies #983

merged 2 commits into from
Feb 26, 2024

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Feb 26, 2024 •
edited
Loading

Mend Renovate

This PR contains the following updates:

Package Change Age Adoption Passing Confidence Type Update
@types/react (source) 18.2.56 -> 18.2.58 age adoption passing confidence devDependencies patch
@viz-js/viz (source) 3.2.4 -> 3.3.1 age adoption passing confidence dependencies minor
eslint (source) 8.56.0 -> 8.57.0 age adoption passing confidence devDependencies minor
github.com/jellydator/ttlcache/v3 v3.1.1 -> v3.2.0 age adoption passing confidence require minor
github.com/swaggest/jsonschema-go v0.3.64 -> v0.3.66 age adoption passing confidence require patch
github.com/tmc/langchaingo v0.1.4 -> v0.1.5 age adoption passing confidence require patch
go.opentelemetry.io/otel v1.23.1 -> v1.24.0 age adoption passing confidence require minor
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.23.1 -> v1.24.0 age adoption passing confidence require minor
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.23.1 -> v1.24.0 age adoption passing confidence require minor
go.opentelemetry.io/otel/metric v1.23.1 -> v1.24.0 age adoption passing confidence require minor
go.opentelemetry.io/otel/sdk v1.23.1 -> v1.24.0 age adoption passing confidence require minor
go.opentelemetry.io/otel/sdk/metric v1.23.1 -> v1.24.0 age adoption passing confidence require minor
go.opentelemetry.io/otel/trace v1.23.1 -> v1.24.0 age adoption passing confidence require minor
helm 3.14.1 -> 3.14.2 age adoption passing confidence patch
json-schema-faker (source) 0.5.5 -> 0.5.6 age adoption passing confidence dependencies patch
kubectl 1.28.1 -> 1.29.2 age adoption passing confidence minor
modernc.org/sqlite v1.29.1 -> v1.29.2 age adoption passing confidence require patch
staticcheck 2023.1.6 -> 2023.1.7 age adoption passing confidence patch
yq 4.41.1 -> 4.42.1 age adoption passing confidence minor
org.apache.maven.plugins:maven-shade-plugin 3.5.1 -> 3.5.2 age adoption passing confidence build patch
org.codehaus.mojo:exec-maven-plugin (source) 3.1.1 -> 3.2.0 age adoption passing confidence build minor
org.postgresql:postgresql (source) 42.7.1 -> 42.7.2 age adoption passing confidence compile patch

Release Notes

mdaines/viz-js (@​viz-js/viz)

v3.3.1

Compare Source

  • Accept "images" entries with duplicate names.

v3.3.0

Compare Source

  • Add support for an images option, similar to the previous version.

    Sizes of images referenced by the image attribute can be specified using an "images" render option:

    viz.render("graph { a[image=\"test.png\"] }", {
  images: [
    { name: "test.png", width: 300, height: 200 }
  ]
});

    The property "name" is used instead of "path" to match the Graphviz documentation.

eslint/eslint (eslint)

v8.57.0

Compare Source

Features

  • 1120b9b feat: Add loadESLint() API method for v8 (#​18098) (Nicholas C. Zakas)
  • dca7d0f feat: Enable eslint.config.mjs and eslint.config.cjs (#​18066) (Nitin Kumar)

Bug Fixes

  • 2196d97 fix: handle absolute file paths in FlatRuleTester (#​18064) (Nitin Kumar)
  • 69dd1d1 fix: Ensure config keys are printed for config errors (#​18067) (Nitin Kumar)
  • 9852a31 fix: deep merge behavior in flat config (#​18065) (Nitin Kumar)
  • 4c7e9b0 fix: allow circular references in config (#​18056) (Milos Djermanovic)

Documentation

Chores

jellydator/ttlcache (github.com/jellydator/ttlcache/v3)

v3.2.0

Compare Source

What's Changed

Full Changelog: jellydator/ttlcache@v3.1.1...v3.2.0

swaggest/jsonschema-go (github.com/swaggest/jsonschema-go)

v0.3.66

Compare Source

What's Changed

Full Changelog: swaggest/jsonschema-go@v0.3.65...v0.3.66

v0.3.65

Compare Source

What's Changed

Full Changelog: swaggest/jsonschema-go@v0.3.64...v0.3.65

tmc/langchaingo (github.com/tmc/langchaingo)

v0.1.5

Compare Source

open-telemetry/opentelemetry-go (go.opentelemetry.io/otel)

v1.24.0: /v0.46.0/v0.0.1-alpha

Compare Source

This release is the last to support Go 1.20. The next release will require at least Go 1.21.

Added
  • Support Go 1.22. (#​4890)
  • Add exemplar support to go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc. (#​4900)
  • Add exemplar support to go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp. (#​4900)
  • The go.opentelemetry.io/otel/log module is added. This module includes OpenTelemetry Go's implementation of the Logs Bridge API. This module is in an alpha state, it is subject to breaking changes. See our versioning policy for more info. (#​4961)
Fixed
  • Fix registration of multiple callbacks when using the global meter provider from go.opentelemetry.io/otel. (#​4945)
  • Fix negative buckets in output of exponential histograms. (#​4956)
New Contributors

Full Changelog: open-telemetry/opentelemetry-go@v1.23.1...v1.24.0

helm/helm (helm)

v3.14.2: Helm v3.14.2

Helm v3.14.2 is a security (patch) release. Users are strongly recommended to update to this release.

A Helm contributor discovered uninitialized variable vulnerability when Helm parses index and plugin yaml files missing expected content.

Jakub Ciolek with AlphaSense discovered the vulnerability.

Installation and Upgrading

Download Helm v3.14.2. The common platform binaries are here:

This release was signed with 672C 657B E06B 4B30 969C 4A57 4614 49C2 5E36 B98E and can be found at @​mattfarina keybase account. Please use the attached signatures for verifying this release using gpg.

The Quickstart Guide will get you going from there. For upgrade instructions or detailed installation notes, check the install guide. You can also use a script to install on any system with bash.

What's Next

  • 3.14.3 will contain only bug fixes and be released on March 13, 2024.
  • 3.15.0 is the next feature release and will be on May 08, 2024.
json-schema-faker/json-schema-faker (json-schema-faker)

v0.5.6

Compare Source

kubernetes/kubectl (kubectl)

v1.28.7

v1.28.6

cznic/sqlite (modernc.org/sqlite)

v1.29.2

Compare Source

dominikh/go-tools (staticcheck)

v2023.1.7: Staticcheck 2023.1.7 (v0.4.7)

Compare Source

This release fixes some minor issues in Staticcheck’s intermediate representation. Furthermore, it improves the way QF1003 generates suggested fixes, working around constraints in the language server protocol.

The released binaries for this version have been built with Go 1.22 and should no longer panic when checking code targeting Go 1.22.

mikefarah/yq (yq)

v4.42.1

  • Can execute yq expression files directly with shebang #​1851
mojohaus/exec-maven-plugin (org.codehaus.mojo:exec-maven-plugin)

v3.2.0

Compare Source

🚀 New features and improvements

🐛 Bug Fixes

📦 Dependency updates

👻 Maintenance

🔧 Build

pgjdbc/pgjdbc (org.postgresql:postgresql)

v42.7.2

Security
  • security: SQL Injection via line comment generation, it is possible in SimpleQuery mode to generate a line comment by having a placeholder for a numeric with a -
    such as -?. There must be second placeholder for a string immediately after. Setting the parameter to a -ve value creates a line comment.
    This has been fixed in this version fixes CVE-2024-1597. Reported by Paul Gerste. See the security advisory for more details. This has been fixed in versions 42.7.2, 42.6.1 42.5.5, 42.4.4, 42.3.9, 42.2.28.jre7. See the security advisory for work arounds.
Changed
  • fix: Use simple query for isValid. Using Extended query sends two messages checkConnectionQuery was never ever set or used, removed PR #​3101
  • perf: Avoid autoboxing bind indexes by @​bokken in PR #​1244
  • refactor: Document that encodePassword will zero out the password array, and remove driver's default encodePassword by @​vlsi in PR #​3084
Added
  • feat: Add PasswordUtil for encrypting passwords client side PR #​3082

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate Renovate
Copy link
Contributor Author

renovate bot commented Feb 26, 2024

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.

@alecthomas alecthomas merged commit 016dfdc into main Feb 26, 2024
@alecthomas alecthomas deleted the renovate/all-minor-patch branch February 26, 2024 09:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@alecthomas alecthomas Awaiting requested review from alecthomas alecthomas is a code owner

@dhanji dhanji Awaiting requested review from dhanji

@wesbillman wesbillman Awaiting requested review from wesbillman

@worstell worstell Awaiting requested review from worstell

Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
1 participant
@alecthomas