300 Commits (407ab22d9d7c30b3daba6ae4783ae02801fd1780)

Author	SHA1	Message	Date
renovate[bot]	8935d991ee	chore(deps): update module go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp to v0.44.0 [security] (release-2.9.x) (#11994) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	1 year ago
renovate[bot]	61ac9fa15c	chore(deps): update module golang.org/x/net to v0.23.0 [security] (release-2.9.x) (#12461) ... Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>	1 year ago
Michel Hollands	3186520350	fix: update google.golang.org/protobuf to v1.33.0 (#12269) (#12287) ... Signed-off-by: Michel Hollands <michel.hollands@gmail.com>	1 year ago
Trevor Whitney	eee35983f3	fix: bump base images and go deps to address CVEs (#12092)	1 year ago
Poyzan	c9a0bd2be8	Update golang.org/x/crypto for v2.9.x #11743 (#11745) ... **What this PR does / why we need it**: Updates the `golang.org/x/crypto` dependency to its latest version `v0.18.0` **Which issue(s) this PR fixes**: Resolves [CVE-2023-48795](https://github.com/advisories/GHSA-45x7-px36-x8w8) Medium golang.org/x/crypto Go https://github.com/grafana/support-escalations/issues/8977 **Special notes for your reviewer**: **Checklist** - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [ ] Documentation added - [ ] Tests updated - [x] `CHANGELOG.md` updated - [ ] If the change is worth mentioning in the release notes, add `add-to-release-notes` label - [ ] Changes that require user attention or interaction to upgrade are documented in `docs/sources/setup/upgrade/_index.md` - [ ] For Helm chart changes bump the Helm chart version in `production/helm/loki/Chart.yaml` and update `production/helm/loki/CHANGELOG.md` and `production/helm/loki/README.md`. [Example PR](d10549e3ec) - [ ] If the change is deprecating or removing a configuration option, update the `deprecated-config.yaml` and `deleted-config.yaml` files respectively in the `tools/deprecated-config-checker` directory. [Example PR](0d4416a4b0)	1 year ago
Trevor Whitney	2535f9bede	Patch CVEs to prepare for 2.9.3 release (#11433) ... **What this PR does / why we need it**: This PR fixes a few high vuln CVES in Loki 2.9.2 so we can release 2.9.3 **Which issue(s) this PR fixes**: Fixes: * https://github.com/advisories/GHSA-rcjv-mgp8-qvmr * https://github.com/advisories/GHSA-cg3q-j54f-5p7p * https://github.com/advisories/GHSA-xw78-pcr6-wrg8	1 year ago
Dylan Guedes	ae889c4666	upgrade golang.org/x/net@v0.17.0 (#10872) (#10879) ... Backport https://github.com/grafana/loki/pull/10872 to 2.9.x --------- Co-authored-by: Ashwanth <iamashwanth@gmail.com>	2 years ago
Ashwanth	aef1dd8a76	use go 1.21.3 and go-grpc v1.56.3 (#10869) (#10871) ... **What this PR does / why we need it**: Fixes CVE-2023-39325 / CVE-2023-44487 https://github.com/grpc/grpc-go/releases/tag/v1.56.3 **Which issue(s) this PR fixes**: Fixes #<issue number>	2 years ago
Charles Korn	bde65667f7	Upgrade dskit to use packages migrated from weaveworks/common (#10164) ... **What this PR does / why we need it**: This PR upgrades dskit and replaces use of packages from weaveworks/common with their migrated equivalents in dskit. See https://github.com/grafana/dskit/pull/342 for more details. Note that Loki still uses some packages from weaveworks/common that I haven't migrated (`aws` and `test`) - I'll migrate these separately. If this PR needs to be rebuilt, I used `rewrite.sh` ([source](https://gist.github.com/charleskorn/48efe62a09d6d70f3de30327003df5c5#file-rewrite-sh)) to generate most of these changes. **Which issue(s) this PR fixes**: (none) **Special notes for your reviewer**: (none) **Checklist** - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [n/a] Documentation added - [n/a] Tests updated - [n/a] `CHANGELOG.md` updated - [n/a] If the change is worth mentioning in the release notes, add `add-to-release-notes` label - [n/a] Changes that require user attention or interaction to upgrade are documented in `docs/sources/setup/upgrade/_index.md` - [n/a] For Helm chart changes bump the Helm chart version in `production/helm/loki/Chart.yaml` and update `production/helm/loki/CHANGELOG.md` and `production/helm/loki/README.md`. [Example PR](d10549e3ec) Co-authored-by: Kaviraj Kanagaraj <kavirajkanagaraj@gmail.com>	2 years ago
Dylan Guedes	1221658fc5	Introduces cache to TSDB postings (#9621) ... **What this PR does / why we need it**: Introduces a new interface for fetching TSDB postings and implements a cached TSDB postings. The new postings interface is named `PostingsReader` and contains two implementations: a simple one, which is identical to the former Postings behavior, and a new one, that caches postings using the existing `index_queries_cache_config`. By default, the simple/former implementation is used. The new cached implementation can be configured in the following way: ```yaml storage_config: tsdb_shipper: cache_postings: true ``` In the future, we'll remove the `cache_postings` flag and change the behavior to cache postings by default.	2 years ago
dependabot[bot]	8177cd2a55	build(deps): bump github.com/aws/aws-sdk-go from 1.44.311 to 1.44.315 (#10159) ... Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.311 to 1.44.315. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aws/aws-sdk-go/releases">github.com/aws/aws-sdk-go's releases</a>.</em></p> <blockquote> <h1>Release v1.44.315 (2023-08-02)</h1> <h3>Service Client Updates</h3> <ul> <li><code>service/budgets</code>: Updates service API and documentation <ul> <li>As part of CAE tagging integration we need to update our budget names regex filter to prevent customers from using &quot;/action/&quot; in their budget names.</li> </ul> </li> <li><code>service/cognito-idp</code>: Updates service API and documentation</li> <li><code>service/glue</code>: Updates service API and documentation <ul> <li>This release includes additional Glue Streaming KAKFA SASL property types.</li> </ul> </li> <li><code>service/resiliencehub</code>: Updates service API, documentation, and paginators</li> <li><code>service/sagemaker</code>: Updates service API and documentation <ul> <li>SageMaker Inference Recommender introduces a new API GetScalingConfigurationRecommendation to recommend auto scaling policies based on completed Inference Recommender jobs.</li> </ul> </li> </ul> <h1>Release v1.44.314 (2023-08-01)</h1> <h3>Service Client Updates</h3> <ul> <li><code>service/batch</code>: Updates service API and documentation <ul> <li>This release adds support for price capacity optimized allocation strategy for Spot Instances.</li> </ul> </li> <li><code>service/dms</code>: Updates service API, documentation, and paginators <ul> <li>Adding new API describe-engine-versions which provides information about the lifecycle of a replication instance's version.</li> </ul> </li> <li><code>service/internetmonitor</code>: Updates service API and documentation</li> <li><code>service/medialive</code>: Updates service API and documentation <ul> <li>AWS Elemental Link devices now report their Availability Zone. Link devices now support the ability to change their Availability Zone.</li> </ul> </li> <li><code>service/polly</code>: Updates service API <ul> <li>Amazon Polly adds new French Belgian voice - Isabelle. Isabelle is available as Neural voice only.</li> </ul> </li> <li><code>service/rds</code>: Updates service API, documentation, waiters, paginators, and examples <ul> <li>Added support for deleted clusters PiTR.</li> </ul> </li> <li><code>service/sagemaker</code>: Updates service API and documentation <ul> <li>Add Stairs TrafficPattern and FlatInvocations to RecommendationJobStoppingConditions</li> </ul> </li> </ul> <h1>Release v1.44.313 (2023-07-31)</h1> <h3>Service Client Updates</h3> <ul> <li><code>service/amplifyuibuilder</code>: Updates service API and documentation</li> <li><code>service/autoscaling</code>: Updates service API, documentation, and examples <ul> <li>You can now configure an instance refresh to set its status to 'failed' when it detects that a specified CloudWatch alarm has gone into the ALARM state. You can also choose to roll back the instance refresh automatically when the alarm threshold is met.</li> </ul> </li> <li><code>service/cleanrooms</code>: Updates service API, documentation, and paginators</li> <li><code>service/codestar-connections</code>: Updates service API and documentation</li> <li><code>service/drs</code>: Updates service API</li> <li><code>service/inspector2</code>: Updates service API and documentation</li> <li><code>service/lookoutequipment</code>: Updates service API, documentation, and paginators</li> <li><code>service/omics</code>: Updates service API and documentation</li> <li><code>service/rds</code>: Updates service API, documentation, waiters, paginators, and examples <ul> <li>This release adds support for Aurora MySQL local write forwarding, which allows for forwarding of write operations from reader DB instances to the writer DB instance.</li> </ul> </li> <li><code>service/route53</code>: Updates service API and documentation <ul> <li>Amazon Route 53 now supports the Israel (Tel Aviv) Region (il-central-1) for latency records, geoproximity records, and private DNS for Amazon VPCs in that region.</li> </ul> </li> <li><code>service/scheduler</code>: Updates service API and documentation</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="dd615a45d3"><code>dd615a4</code></a> Release v1.44.315 (2023-08-02) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4935">#4935</a>)</li> <li><a href="8ce2209abd"><code>8ce2209</code></a> Release v1.44.314 (2023-08-01) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4934">#4934</a>)</li> <li><a href="38e5c8181e"><code>38e5c81</code></a> Release v1.44.313 (2023-07-31) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4933">#4933</a>)</li> <li><a href="b75b2a7b3c"><code>b75b2a7</code></a> Release v1.44.312 (2023-07-28) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4931">#4931</a>)</li> <li>See full diff in <a href="https://github.com/aws/aws-sdk-go/compare/v1.44.311...v1.44.315">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Karsten Jeschkies	fbcaa1d5d8	Lazily decode series protobuf. (#10071) ... **What this PR does / why we need it**: The protobuf decoding for series responses runs into a memory issue for many series. The response is only merged and passed through the front end. It is more efficient to decode the protobuf encoded series lazily. And `decode`, `merge`, `encode` benchmark shows the benefit of transcoding the protobuf series message into a JSON response directly. This change will not impact production code since it only applies to protobuf encoding messaging between the querier and query frontend that must be explicitly enabled. ``` › go test -v -run=^$ -bench "Benchmark_DecodeMergeEncodeCycle" -memprofile memory_base.prof -count=10 ./pkg/querier/queryrange > before.txt › go test -v -run=^$ -bench "Benchmark_DecodeMergeEncodeCycle" -memprofile memory_base.prof -count=10 ./pkg/querier/queryrange > before.txt › benchstat before.txt after.txt before.txt:5: missing iteration count after.txt:5: missing iteration count goos: linux goarch: amd64 pkg: github.com/grafana/loki/pkg/querier/queryrange cpu: AMD Ryzen 7 3700X 8-Core Processor │ before.txt │ after.txt │ │ sec/op │ sec/op vs base │ _DecodeMergeEncodeCycle-16 2537.7m ± 2% 934.2m ± 1% -63.19% (p=0.000 n=10) │ before.txt │ after.txt │ │ B/op │ B/op vs base │ _DecodeMergeEncodeCycle-16 1723.4Mi ± 0% 641.1Mi ± 0% -62.80% (p=0.000 n=10) │ before.txt │ after.txt │ │ allocs/op │ allocs/op vs base │ _DecodeMergeEncodeCycle-16 20240.6k ± 0% 203.0k ± 0% -99.00% (p=0.000 n=10) ``` **Checklist** - [ ] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [ ] Documentation added - [x] Tests updated - [ ] `CHANGELOG.md` updated - [ ] If the change is worth mentioning in the release notes, add `add-to-release-notes` label - [ ] Changes that require user attention or interaction to upgrade are documented in `docs/sources/setup/upgrade/_index.md` - [ ] For Helm chart changes bump the Helm chart version in `production/helm/loki/Chart.yaml` and update `production/helm/loki/CHANGELOG.md` and `production/helm/loki/README.md`. [Example PR](d10549e3ec)	2 years ago
Danny Kopping	8fa4134ef9	Update dskit (#10091)	2 years ago
dependabot[bot]	05e36ca435	Bump github.com/aws/aws-sdk-go from 1.44.306 to 1.44.311 (#10093) ... Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.306 to 1.44.311. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aws/aws-sdk-go/releases">github.com/aws/aws-sdk-go's releases</a>.</em></p> <blockquote> <h1>Release v1.44.311 (2023-07-28)</h1> <h3>Service Client Updates</h3> <ul> <li><code>service/sqs</code>: Updates service documentation <ul> <li>Documentation changes related to SQS APIs.</li> </ul> </li> </ul> <h3>SDK Bugs</h3> <ul> <li><code>aws/session</code>: Modify resolving sso credential logic to fix stack overflow bug while configuring shared config profile via env var. <ul> <li>Fixes <a href="https://redirect.github.com/aws/aws-sdk-go/issues/4912">4912</a></li> </ul> </li> </ul> <h1>Release v1.44.310 (2023-07-27)</h1> <h3>Service Client Updates</h3> <ul> <li><code>service/autoscaling</code>: Updates service API, documentation, paginators, and examples <ul> <li>This release updates validation for instance types used in the AllowedInstanceTypes and ExcludedInstanceTypes parameters of the InstanceRequirements property of a MixedInstancesPolicy.</li> </ul> </li> <li><code>service/ebs</code>: Updates service API and documentation</li> <li><code>service/ec2</code>: Updates service API, documentation, and waiters <ul> <li>SDK and documentation updates for Amazon Elastic Block Store APIs</li> </ul> </li> <li><code>service/eks</code>: Updates service API</li> <li><code>service/sagemaker</code>: Updates service API and documentation <ul> <li>Expose ProfilerConfig attribute in SageMaker Search API response.</li> </ul> </li> </ul> <h1>Release v1.44.309 (2023-07-26)</h1> <h3>Service Client Updates</h3> <ul> <li><code>service/cloudcontrol</code>: Updates service documentation</li> <li><code>service/entityresolution</code>: Adds new service</li> <li><code>service/glue</code>: Updates service API and documentation <ul> <li>Release Glue Studio Snowflake Connector Node for SDK/CLI</li> </ul> </li> <li><code>service/healthlake</code>: Updates service documentation</li> <li><code>service/managedblockchain-query</code>: Adds new service</li> <li><code>service/mediaconvert</code>: Updates service API and documentation <ul> <li>This release includes general updates to user documentation.</li> </ul> </li> <li><code>service/omics</code>: Updates service documentation</li> <li><code>service/opensearchserverless</code>: Updates service API and documentation</li> <li><code>service/polly</code>: Updates service API <ul> <li>Amazon Polly adds 1 new voice - Lisa (nl-BE)</li> </ul> </li> <li><code>service/route53</code>: Updates service documentation <ul> <li>Update that corrects the documents for received feedback.</li> </ul> </li> </ul> <h1>Release v1.44.308 (2023-07-25)</h1> <h3>Service Client Updates</h3> <ul> <li><code>service/billingconductor</code>: Updates service API and documentation</li> <li><code>service/customer-profiles</code>: Updates service API and documentation</li> <li><code>service/datasync</code>: Updates service API and documentation</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="7f89e94e3c"><code>7f89e94</code></a> Release v1.44.311 (2023-07-28) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4930">#4930</a>)</li> <li><a href="1b1dc9b5fa"><code>1b1dc9b</code></a> Modify resolving sso credential logic (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4917">#4917</a>)</li> <li><a href="14bc14a3f9"><code>14bc14a</code></a> Merge pull request <a href="https://redirect.github.com/aws/aws-sdk-go/issues/4913">#4913</a> from luisgerhorst/patch-1</li> <li><a href="853c5ee498"><code>853c5ee</code></a> Release v1.44.310 (2023-07-27) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4929">#4929</a>)</li> <li><a href="909f3e1b15"><code>909f3e1</code></a> Release v1.44.309 (2023-07-26) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4928">#4928</a>)</li> <li><a href="756289a6f7"><code>756289a</code></a> Release v1.44.308 (2023-07-25) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4927">#4927</a>)</li> <li><a href="0b6a21fb8c"><code>0b6a21f</code></a> Release v1.44.307 (2023-07-24) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4926">#4926</a>)</li> <li><a href="03554b14b1"><code>03554b1</code></a> Merge pull request <a href="https://redirect.github.com/aws/aws-sdk-go/issues/4911">#4911</a> from khushail/khushail/handleStalediscussions</li> <li><a href="03bc85877f"><code>03bc858</code></a> Fix typo in v4.go: &quot;many&quot; should be &quot;may&quot;</li> <li><a href="3520bfe05f"><code>3520bfe</code></a> added workflow for handling answerable discussions</li> <li>See full diff in <a href="https://github.com/aws/aws-sdk-go/compare/v1.44.306...v1.44.311">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	7584513a7c	Bump github.com/aws/aws-sdk-go from 1.44.217 to 1.44.306 (#10031) ... Bumps [github.com/aws/aws-sdk-go](https://github.com/aws/aws-sdk-go) from 1.44.217 to 1.44.306. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aws/aws-sdk-go/releases">github.com/aws/aws-sdk-go's releases</a>.</em></p> <blockquote> <h1>Release v1.44.306 (2023-07-21)</h1> <h3>Service Client Updates</h3> <ul> <li><code>service/glue</code>: Updates service API and documentation <ul> <li>This release adds support for AWS Glue Crawler with Apache Hudi Tables, allowing Crawlers to discover Hudi Tables in S3 and register them in Glue Data Catalog for query engines to query against.</li> </ul> </li> <li><code>service/mediaconvert</code>: Updates service documentation <ul> <li>This release includes improvements to Preserve 444 handling, compatibility of HEVC sources without frame rates, and general improvements to MP4 outputs.</li> </ul> </li> <li><code>service/rds</code>: Updates service API, documentation, waiters, paginators, and examples <ul> <li>Adds support for the DBSystemID parameter of CreateDBInstance to RDS Custom for Oracle.</li> </ul> </li> <li><code>service/workspaces</code>: Updates service documentation <ul> <li>Fixed VolumeEncryptionKey descriptions</li> </ul> </li> </ul> <h3>SDK Bugs</h3> <ul> <li><code>codegen</code>: Prevent unused imports from being generated for event streams. <ul> <li>Potentially-unused <code>&quot;time&quot;</code> import was causing vet failures on generated code.</li> </ul> </li> </ul> <h1>Release v1.44.305 (2023-07-20)</h1> <h3>Service Client Updates</h3> <ul> <li><code>service/connectcases</code>: Updates service API and documentation</li> <li><code>service/models.lex.v2</code>: Updates service API and documentation</li> <li><code>service/route53resolver</code>: Updates service API, documentation, and paginators</li> <li><code>service/s3</code>: Updates service examples <ul> <li>Improve performance of S3 clients by simplifying and optimizing endpoint resolution.</li> </ul> </li> <li><code>service/sagemaker</code>: Updates service API, documentation, and paginators <ul> <li>Cross account support for SageMaker Feature Store</li> </ul> </li> <li><code>service/sagemaker-featurestore-runtime</code>: Updates service API and documentation</li> <li><code>service/securitylake</code>: Updates service API and documentation</li> <li><code>service/transcribe</code>: Updates service API and documentation</li> </ul> <h1>Release v1.44.304 (2023-07-20)</h1> <h3>Service Client Updates</h3> <ul> <li><code>service/savingsplans</code>: Updates service documentation</li> </ul> <h1>Release v1.44.303 (2023-07-19)</h1> <h3>Service Client Updates</h3> <ul> <li><code>service/cloudformation</code>: Updates service API and documentation <ul> <li>SDK and documentation updates for GetTemplateSummary API (unrecognized resources)</li> </ul> </li> <li><code>service/ec2</code>: Updates service documentation <ul> <li>Amazon EC2 documentation updates.</li> </ul> </li> <li><code>service/grafana</code>: Updates service API, documentation, and paginators</li> <li><code>service/medical-imaging</code>: Adds new service</li> <li><code>service/ram</code>: Updates service API and documentation</li> <li><code>service/ssm-sap</code>: Updates service API and documentation</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="7175ab4707"><code>7175ab4</code></a> Release v1.44.306 (2023-07-21) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4924">#4924</a>)</li> <li><a href="e7c3b2520d"><code>e7c3b25</code></a> Merge pull request <a href="https://redirect.github.com/aws/aws-sdk-go/issues/4919">#4919</a> from aws/fix-eventstream-imports</li> <li><a href="cb7ed6e37d"><code>cb7ed6e</code></a> Release v1.44.305 (2023-07-20) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4922">#4922</a>)</li> <li><a href="beb9940dde"><code>beb9940</code></a> Release v1.44.304 (2023-07-20) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4920">#4920</a>)</li> <li><a href="37fd36153b"><code>37fd361</code></a> prevent unused time import in event streams</li> <li><a href="e4acaad3a1"><code>e4acaad</code></a> Release v1.44.303 (2023-07-19) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4918">#4918</a>)</li> <li><a href="e7bdeb8a79"><code>e7bdeb8</code></a> Release v1.44.302 (2023-07-18) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4915">#4915</a>)</li> <li><a href="e078cf7741"><code>e078cf7</code></a> Release v1.44.301 (2023-07-17) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4914">#4914</a>)</li> <li><a href="f219aebae1"><code>f219aeb</code></a> Release v1.44.300 (2023-07-13) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4909">#4909</a>)</li> <li><a href="633dbc1aad"><code>633dbc1</code></a> Release v1.44.299 (2023-07-11) (<a href="https://redirect.github.com/aws/aws-sdk-go/issues/4906">#4906</a>)</li> <li>Additional commits viewable in <a href="https://github.com/aws/aws-sdk-go/compare/v1.44.217...v1.44.306">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	5db96f2d78	Bump github.com/minio/minio-go/v7 from 7.0.52 to 7.0.61 (#10012) ... Bumps [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) from 7.0.52 to 7.0.61. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/minio/minio-go/releases">github.com/minio/minio-go/v7's releases</a>.</em></p> <blockquote> <h2>Bugfix Release</h2> <h2>What's Changed</h2> <ul> <li>update go1.20.6 to vulncheck by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1853">minio/minio-go#1853</a></li> <li>run gofumpt -extra -w on all files by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1854">minio/minio-go#1854</a></li> <li>allow users to provide their custom httptrace.ClientTrace by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1857">minio/minio-go#1857</a></li> <li>upgrade all deps by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1858">minio/minio-go#1858</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.60...v7.0.61">https://github.com/minio/minio-go/compare/v7.0.60...v7.0.61</a></p> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>add all the internal data type by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1849">minio/minio-go#1849</a></li> <li>return context error if the context was canceled mid-way by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1852">minio/minio-go#1852</a></li> <li>support new ExpiredObjectAllVersions feature by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1851">minio/minio-go#1851</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.59...v7.0.60">https://github.com/minio/minio-go/compare/v7.0.59...v7.0.60</a></p> <h2>Feature Release</h2> <h2>What's Changed</h2> <ul> <li>replication: change metrics API by <a href="https://github.com/poornas"><code>@​poornas</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1833">minio/minio-go#1833</a></li> <li>replication: add validation API by <a href="https://github.com/poornas"><code>@​poornas</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1844">minio/minio-go#1844</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.58...v7.0.59">https://github.com/minio/minio-go/compare/v7.0.58...v7.0.59</a></p> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>HealthCheck: Set initial state by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1841">minio/minio-go#1841</a></li> <li>Added missing Buckets Events by <a href="https://github.com/bexsoft"><code>@​bexsoft</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1843">minio/minio-go#1843</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/bexsoft"><code>@​bexsoft</code></a> made their first contribution in <a href="https://redirect.github.com/minio/minio-go/pull/1843">minio/minio-go#1843</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.57...v7.0.58">https://github.com/minio/minio-go/compare/v7.0.57...v7.0.58</a></p> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>fix: Send correct host header when an endpoint is IPv4 by <a href="https://github.com/vadmeste"><code>@​vadmeste</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1835">minio/minio-go#1835</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.55...v7.0.56">https://github.com/minio/minio-go/compare/v7.0.55...v7.0.56</a></p> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>GetBucketLifecycleWithInfo tracks changes to ILM by <a href="https://github.com/krisis"><code>@​krisis</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1831">minio/minio-go#1831</a></li> <li>Add simpler checksum types by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1832">minio/minio-go#1832</a></li> <li>Add PutObject CRC &amp; trailing checksum tests by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1817">minio/minio-go#1817</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="9f66976cc9"><code>9f66976</code></a> upgrade all deps (<a href="https://redirect.github.com/minio/minio-go/issues/1858">#1858</a>)</li> <li><a href="afb31a8a7f"><code>afb31a8</code></a> allow users to provide their custom httptrace.ClientTrace (<a href="https://redirect.github.com/minio/minio-go/issues/1857">#1857</a>)</li> <li><a href="b75cfd43c1"><code>b75cfd4</code></a> remove outdated chinese translation docs</li> <li><a href="589ff8dc7d"><code>589ff8d</code></a> run gofumpt -extra -w on all files (<a href="https://redirect.github.com/minio/minio-go/issues/1854">#1854</a>)</li> <li><a href="b7aec2f654"><code>b7aec2f</code></a> update go1.20.6 to vulncheck (<a href="https://redirect.github.com/minio/minio-go/issues/1853">#1853</a>)</li> <li><a href="c8ab312aac"><code>c8ab312</code></a> Update version to next release</li> <li><a href="aadf946238"><code>aadf946</code></a> return count for number of tags and add a testcase</li> <li><a href="e9dd1e0076"><code>e9dd1e0</code></a> support new ExpiredObjectAllVersions feature (<a href="https://redirect.github.com/minio/minio-go/issues/1851">#1851</a>)</li> <li><a href="47e4bd92b8"><code>47e4bd9</code></a> return context error if the context was canceled mid-way (<a href="https://redirect.github.com/minio/minio-go/issues/1852">#1852</a>)</li> <li><a href="b27c007dd3"><code>b27c007</code></a> add all the internal data type (<a href="https://redirect.github.com/minio/minio-go/issues/1849">#1849</a>)</li> <li>Additional commits viewable in <a href="https://github.com/minio/minio-go/compare/v7.0.52...v7.0.61">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	85d23c2452	Bump go.uber.org/atomic from 1.10.0 to 1.11.0 (#9940) ... Bumps [go.uber.org/atomic](https://github.com/uber-go/atomic) from 1.10.0 to 1.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/uber-go/atomic/releases">go.uber.org/atomic's releases</a>.</em></p> <blockquote> <h2>v1.11.0</h2> <h3>Fixed</h3> <ul> <li>Fix <code>Swap</code> and <code>CompareAndSwap</code> for <code>Value</code> wrappers without initialization.</li> </ul> <h3>Added</h3> <ul> <li>Add <code>String</code> method to <code>atomic.Pointer[T]</code> type allowing users to safely print underlying values of pointers.</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/uber-go/atomic/blob/master/CHANGELOG.md">go.uber.org/atomic's changelog</a>.</em></p> <blockquote> <h2><a href="https://github.com/uber-go/atomic/compare/v1.10.0...v1.11.0">1.11.0</a> - 2023-05-02</h2> <h3>Fixed</h3> <ul> <li>Fix <code>Swap</code> and <code>CompareAndSwap</code> for <code>Value</code> wrappers without initialization.</li> </ul> <h3>Added</h3> <ul> <li>Add <code>String</code> method to <code>atomic.Pointer[T]</code> type allowing users to safely print underlying values of pointers.</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="76f817c8b7"><code>76f817c</code></a> Update CHANGELOG.md</li> <li><a href="2a750c4499"><code>2a750c4</code></a> Preparing release v1.11.0</li> <li><a href="544d6aa5c2"><code>544d6aa</code></a> Minimize permissions to CI workflows (<a href="https://redirect.github.com/uber-go/atomic/issues/133">#133</a>)</li> <li><a href="1505d282ac"><code>1505d28</code></a> Fix Swap and CompareAndSwap for Value wrappers (<a href="https://redirect.github.com/uber-go/atomic/issues/130">#130</a>)</li> <li><a href="78a3b8ec6c"><code>78a3b8e</code></a> Implement String method for pointers (<a href="https://redirect.github.com/uber-go/atomic/issues/122">#122</a>)</li> <li><a href="159e329dd8"><code>159e329</code></a> chore(gen-*): Move templates into external files (<a href="https://redirect.github.com/uber-go/atomic/issues/121">#121</a>)</li> <li>See full diff in <a href="https://github.com/uber-go/atomic/compare/v1.10.0...v1.11.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Vladyslav Diachenko	be1a9c4ec5	Revert "updated to the latest version of dskit" (#9953) ... Reverts grafana/loki#9920	2 years ago
dependabot[bot]	89d00fbccd	Bump golang.org/x/oauth2 from 0.7.0 to 0.10.0 (#9903) ... Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.7.0 to 0.10.0. <details> <summary>Commits</summary> <ul> <li><a href="ec5679f607"><code>ec5679f</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="989acb1bfe"><code>989acb1</code></a> all: update dependencies to their latest versions</li> <li><a href="2323c81c8d"><code>2323c81</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="839de2255f"><code>839de22</code></a> google: don't check for IsNotExist for well-known file</li> <li><a href="0690208dba"><code>0690208</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="451d5d662f"><code>451d5d6</code></a> internal: remove repeated definite articles</li> <li><a href="cfe200d5bb"><code>cfe200d</code></a> oauth2: parse RFC 6749 error response</li> <li>See full diff in <a href="https://github.com/golang/oauth2/compare/v0.7.0...v0.10.0">compare view</a></li> </ul> </details> <br />	2 years ago
dependabot[bot]	8b5dcb0fb9	Bump golang.org/x/net from 0.10.0 to 0.12.0 (#9902) ... Bumps [golang.org/x/net](https://github.com/golang/net) from 0.10.0 to 0.12.0. <details> <summary>Commits</summary> <ul> <li><a href="c73c09c390"><code>c73c09c</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="4fc2eb9973"><code>4fc2eb9</code></a> http2: revert Transport change from CL 486156</li> <li><a href="63727cc582"><code>63727cc</code></a> http2: validate Host header before sending</li> <li><a href="1bb09e6b1e"><code>1bb09e6</code></a> quic: pass the connection ID length into 1-RTT packet parsing</li> <li><a href="952fc9c67e"><code>952fc9c</code></a> quic: move ack_delay_exponent handling out of frame parsing</li> <li><a href="02fe9a5973"><code>02fe9a5</code></a> quic: loss detection</li> <li><a href="c8a2c5a181"><code>c8a2c5a</code></a> quic: remove stray debugging print</li> <li><a href="5d50b4094a"><code>5d50b40</code></a> quic: add packetFate enum</li> <li><a href="ee81e8c8e8"><code>ee81e8c</code></a> quic: correct rttvar updates</li> <li><a href="ab184e6fa8"><code>ab184e6</code></a> quic: rename side type to connSide</li> <li>Additional commits viewable in <a href="https://github.com/golang/net/compare/v0.10.0...v0.12.0">compare view</a></li> </ul> </details> <br /> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Callum Styan	4d3b15ae89	Implement probabilistic topk via count min sketch and min heap (#9882) ... This PR currently implements the following structures: - **Count Min Sketch**: http://dimacs.rutgers.edu/~graham/pubs/papers/cmencyc.pdf - **sketch-bf**: https://ietresearch.onlinelibrary.wiley.com/doi/epdf/10.1049/ell2.12482 improvements to the heap usage for Count Min Sketch - HeavyKeeper: https://www.usenix.org/system/files/conference/atc18/atc18-gong.pdf I also read and evaluated the following: - topkapi: https://www.cs.rice.edu/~as143/Papers/topkapi.pdf - space saving algorithm: https://www.cse.ust.hk/~raywong/comp5331/References/EfficientComputationOfFrequentAndTop-kElementsInDataStreams.pdf **Description**: As part of our work to ensure every query type is parallelizable we started exploring probabilistic data structures as a way to reduce memory consumption and allow merging of partial results after sharding of queries. In this PR I have implemented a few sketch structures as part of investigating structures that are applicable to topk queries. Unfortunately while many papers made claims of improved performance over the original count min sketch paper, topkapi and heavy keeper either didn't behave as expected or were not mergeable while keeping the same degree of accuracy. Count min sketch when using conservative updates (which vastly reduces error over counting, especially for low flows), also can't keep the same degree of accuracy, but it is still more accurate after merging than heavy keeper. I've also applied some of the principles outlined in the sketchbf paper related to reducing the # of heap operations required when observing events into the sketch, which sped up processing in my benchmark of 100k unique streams each with 1-2k randomized # of occurrences by nearly 3x. --------- Signed-off-by: Callum Styan <callumstyan@gmail.com> Co-authored-by: Karsten Jeschkies <karsten.jeschkies@grafana.com>	2 years ago
Vladyslav Diachenko	3243676f4c	updated to the latest version of dskit (#9920) ... **What this PR does / why we need it**: Updated Loki with the latest version of dskit **Checklist** - [ ] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [ ] Documentation added - [ ] Tests updated - [ ] `CHANGELOG.md` updated - [ ] If the change is worth mentioning in the release notes, add `add-to-release-notes` label - [ ] Changes that require user attention or interaction to upgrade are documented in `docs/sources/upgrading/_index.md` - [ ] For Helm chart changes bump the Helm chart version in `production/helm/loki/Chart.yaml` and update `production/helm/loki/CHANGELOG.md` and `production/helm/loki/README.md`. [Example PR](d10549e3ec) --------- Signed-off-by: Vladyslav Diachenko <vlad.diachenko@grafana.com>	2 years ago
Christian Rohmann	d04dc31f92	Bump tail dependency to address issue in retry logic (#9915) ... **What this PR does / why we need it**: This bumps the grafana/tail version used, mostly to address an issue with the retry logic (https://github.com/grafana/tail/pull/16) **Which issue(s) this PR fixes**: Fixes #9864 #9877 #9869, maybe others **Special notes for your reviewer**: I did NOT add a note about this dependency bump in the changelog. Let me know if you want me to add that ... or kindly add that line yourself. **Checklist** - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [ ] Documentation added - [ ] Tests updated - [ ] `CHANGELOG.md` updated - [ ] If the change is worth mentioning in the release notes, add `add-to-release-notes` label - [ ] Changes that require user attention or interaction to upgrade are documented in `docs/sources/upgrading/_index.md` - [ ] For Helm chart changes bump the Helm chart version in `production/helm/loki/Chart.yaml` and update `production/helm/loki/CHANGELOG.md` and `production/helm/loki/README.md`. [Example PR](d10549e3ec)	2 years ago
dependabot[bot]	f986492bb7	Bump github.com/Workiva/go-datastructures from 1.0.53 to 1.1.0 (#9886) ... Bumps [github.com/Workiva/go-datastructures](https://github.com/Workiva/go-datastructures) from 1.0.53 to 1.1.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Workiva/go-datastructures/releases">github.com/Workiva/go-datastructures's releases</a>.</em></p> <blockquote> <h2>v1.1.0</h2> <h2>Info</h2> <p>Build: <a href="https://ci.webfilings.com/build/4575457">https://ci.webfilings.com/build/4575457</a> Skynet Results: <a href="https://wf-skynet-hrd.appspot.com/apps/test/smithy/4575457/latest">https://wf-skynet-hrd.appspot.com/apps/test/smithy/4575457/latest</a> Pipeline: No Pipeline This <strong>minor</strong> release includes the following changes:</p> <h2>Miscellaneous</h2> <ul> <li>[x] <a href="https://redirect.github.com/Workiva/go-datastructures/issues/221">#221</a> Add <code>GetSetBits</code> and <code>Count</code> to <code>BitArray</code></li> </ul> <p>Notes created on Thursday, May 18 02:26 PM UTC</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="68e77ee215"><code>68e77ee</code></a> Merge pull request <a href="https://redirect.github.com/Workiva/go-datastructures/issues/221">#221</a> from Workiva/add-bitarray-getsetbits</li> <li><a href="8f1c722b5c"><code>8f1c722</code></a> Clarify purpose of bit-clearing expression</li> <li><a href="33a45f0b71"><code>33a45f0</code></a> Return an empty slice from <code>GetSetBits</code> for <code>nil</code>/empty buffers</li> <li><a href="9c88543cfc"><code>9c88543</code></a> Make <code>BitArray.Count</code> return an <code>int</code></li> <li><a href="e309fb35d0"><code>e309fb3</code></a> Fix spacing for binary expression example</li> <li><a href="64dafb748c"><code>64dafb7</code></a> Implement <code>Count</code> for <code>bitArray</code> and <code>sparseBitArray</code></li> <li><a href="d95ee5d5fa"><code>d95ee5d</code></a> Define <code>BitArray.Count</code> and add test coverage</li> <li><a href="9eab2dfcee"><code>9eab2df</code></a> Implement <code>GetSetBits</code> for <code>bitArray</code> and <code>sparseBitArray</code></li> <li><a href="42ddd6d73a"><code>42ddd6d</code></a> Add test coverage for <code>GetSetBits</code></li> <li><a href="4a54802cc0"><code>4a54802</code></a> Define <code>BitArray.GetSetBits</code></li> <li>See full diff in <a href="https://github.com/Workiva/go-datastructures/compare/v1.0.53...v1.1.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	497dccea83	Bump golang.org/x/crypto from 0.10.0 to 0.11.0 (#9876) ... Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.10.0 to 0.11.0. <details> <summary>Commits</summary> <ul> <li><a href="e98487292d"><code>e984872</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="183630ada7"><code>183630a</code></a> x509roots: generate a stable sort, for real this time</li> <li><a href="a9e447dde7"><code>a9e447d</code></a> x509roots/fallback: add //go:build go1.20 to bundle.go</li> <li><a href="64c3993f5c"><code>64c3993</code></a> ssh: add hmac-sha2-512</li> <li><a href="5fe8145aca"><code>5fe8145</code></a> x509roots: remove list hash and generation date, change ordering</li> <li><a href="043e94c17a"><code>043e94c</code></a> x509roots: fix generate script argument checking</li> <li><a href="0d502d7cd6"><code>0d502d7</code></a> x509roots: use &quot;generate&quot; build tag</li> <li><a href="0ff60057bb"><code>0ff6005</code></a> ssh/test: set a timeout and WaitDelay on sshd subcommands</li> <li>See full diff in <a href="https://github.com/golang/crypto/compare/v0.10.0...v0.11.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	9aadb348ed	Bump golang.org/x/crypto from 0.9.0 to 0.10.0 (#9865) ... Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.9.0 to 0.10.0. <details> <summary>Commits</summary> <ul> <li><a href="8e447d8cc5"><code>8e447d8</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="22c9997952"><code>22c9997</code></a> go.mod: tell x repo tagging to ignore dep on net</li> <li><a href="d0b316056b"><code>d0b3160</code></a> x509roots: add new module</li> <li><a href="16222386f4"><code>1622238</code></a> Add support for &quot;<a href="mailto:hmac-sha2-512-etm@openssh.com">hmac-sha2-512-etm@openssh.com</a>&quot;</li> <li>See full diff in <a href="https://github.com/golang/crypto/compare/v0.9.0...v0.10.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	0d9a124e69	Bump github.com/alicebob/miniredis/v2 from 2.30.2 to 2.30.4 (#9850) ... Bumps [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) from 2.30.2 to 2.30.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/alicebob/miniredis/releases">github.com/alicebob/miniredis/v2's releases</a>.</em></p> <blockquote> <h2>fix ZADD, fix COPY, speedy SPOP</h2> <ul> <li>fix ZADD LT/LG (thanks <a href="https://github.com/sejin-P"><code>@​sejin-P</code></a>)</li> <li>fix COPY (thanks <a href="https://github.com/jerargus"><code>@​jerargus</code></a>)</li> <li>quicker SPOP</li> </ul> <h2>ZMSCORE, lua error_reply, lua cache</h2> <ul> <li>fix lua error_reply (thanks <a href="https://github.com/pkierski"><code>@​pkierski</code></a>)</li> <li>fix use of blocking functions in lua</li> <li>support for ZMSCORE (thanks <a href="https://github.com/lsgndln"><code>@​lsgndln</code></a>)</li> <li>lua cache (thanks <a href="https://github.com/tonyhb"><code>@​tonyhb</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md">github.com/alicebob/miniredis/v2's changelog</a>.</em></p> <blockquote> <h3>v2.30.4</h3> <ul> <li>fix ZADD LT/LG (thanks <a href="https://github.com/sejin-P"><code>@​sejin-P</code></a>)</li> <li>fix COPY (thanks <a href="https://github.com/jerargus"><code>@​jerargus</code></a>)</li> <li>quicker SPOP</li> </ul> <h3>v2.30.3</h3> <ul> <li>fix lua error_reply (thanks <a href="https://github.com/pkierski"><code>@​pkierski</code></a>)</li> <li>fix use of blocking functions in lua</li> <li>support for ZMSCORE (thanks <a href="https://github.com/lsgndln"><code>@​lsgndln</code></a>)</li> <li>lua cache (thanks <a href="https://github.com/tonyhb"><code>@​tonyhb</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="082add4914"><code>082add4</code></a> changelog</li> <li><a href="1dfc2776b5"><code>1dfc277</code></a> quicker SPOP</li> <li><a href="fb75409cf5"><code>fb75409</code></a> do proper list copy</li> <li><a href="f507fa8d65"><code>f507fa8</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/330">#330</a> from sejin-P/ZADD-LT-default-value</li> <li><a href="b0d3aeee12"><code>b0d3aee</code></a> fix; check value existence when applying LT GT option to ZADD</li> <li><a href="df419454ee"><code>df41945</code></a> gofmt error</li> <li><a href="ae47488375"><code>ae47488</code></a> typo</li> <li><a href="d6eb001ed5"><code>d6eb001</code></a> update changelog</li> <li><a href="a946a99f2c"><code>a946a99</code></a> use the cleaner variable to get the result length</li> <li><a href="a3211dedea"><code>a3211de</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/328">#328</a> from tonyhb/perf/precompile-lua-functions</li> <li>Additional commits viewable in <a href="https://github.com/alicebob/miniredis/compare/v2.30.2...v2.30.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	579e54228e	Bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0 (#9794) ... Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.15.1 to 1.16.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/releases">github.com/prometheus/client_golang's releases</a>.</em></p> <blockquote> <h2>v1.16.0</h2> <h2>What's Changed</h2> <ul> <li>[BUGFIX] api: Switch to POST for LabelNames, Series, and QueryExemplars. <a href="https://redirect.github.com/prometheus/client_golang/issues/1252">#1252</a></li> <li>[BUGFIX] api: Fix undefined execution order in return statements. <a href="https://redirect.github.com/prometheus/client_golang/issues/1260">#1260</a></li> <li>[BUGFIX] native histograms: Fix bug in bucket key calculation. <a href="https://redirect.github.com/prometheus/client_golang/issues/1279">#1279</a></li> <li>[ENHANCEMENT] Reduce constrainLabels allocations for all metrics. <a href="https://redirect.github.com/prometheus/client_golang/issues/1272">#1272</a></li> <li>[ENHANCEMENT] promhttp: Add process start time header for scrape efficiency. <a href="https://redirect.github.com/prometheus/client_golang/issues/1278">#1278</a></li> <li>[ENHANCEMENT] promlint: Improve metricUnits runtime. <a href="https://redirect.github.com/prometheus/client_golang/issues/1286">#1286</a></li> </ul> <!-- raw HTML omitted --> <ul> <li>Merge v1.15 to main by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1250">prometheus/client_golang#1250</a></li> <li>Switch to POST for LabelNames, Series, and QueryExemplars to DoGetFallback by <a href="https://github.com/jacksontj"><code>@​jacksontj</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1252">prometheus/client_golang#1252</a></li> <li>✏️ [collectors]: fix typo in test assertion by <a href="https://github.com/vegerot"><code>@​vegerot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1153">prometheus/client_golang#1153</a></li> <li>Added interactive tutorial [kubeCon] by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1255">prometheus/client_golang#1255</a></li> <li>Fixed tutorial. by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1256">prometheus/client_golang#1256</a></li> <li>Bump golang.org/x/sys from 0.6.0 to 0.7.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1265">prometheus/client_golang#1265</a></li> <li>Cleanup proto use in tests by <a href="https://github.com/SuperQ"><code>@​SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1264">prometheus/client_golang#1264</a></li> <li>Fix tutorial on WSL-based systems by <a href="https://github.com/marevers"><code>@​marevers</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1257">prometheus/client_golang#1257</a></li> <li>Fix undefined execution order in return statements by <a href="https://github.com/PiotrLewandowski323"><code>@​PiotrLewandowski323</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1260">prometheus/client_golang#1260</a></li> <li>Merge release 1.15.1 to main by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1267">prometheus/client_golang#1267</a></li> <li>GitHub Workflows security hardening by <a href="https://github.com/sashashura"><code>@​sashashura</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1180">prometheus/client_golang#1180</a></li> <li>add process start time header to client_golang prometheus by <a href="https://github.com/logicalhan"><code>@​logicalhan</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1278">prometheus/client_golang#1278</a></li> <li>Fix bug in bucket key calculation by <a href="https://github.com/beorn7"><code>@​beorn7</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1279">prometheus/client_golang#1279</a></li> <li>Bump github.com/prometheus/procfs from 0.9.0 to 0.10.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1283">prometheus/client_golang#1283</a></li> <li>Reduce constrainLabels allocations by <a href="https://github.com/khasanovbi"><code>@​khasanovbi</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1272">prometheus/client_golang#1272</a></li> <li>added circleci as gh action YAML by <a href="https://github.com/krishnaduttPanchagnula"><code>@​krishnaduttPanchagnula</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1281">prometheus/client_golang#1281</a></li> <li>Improve metricUnits runtime by <a href="https://github.com/avlitman"><code>@​avlitman</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1286">prometheus/client_golang#1286</a></li> <li>Moving fully to GH actions. by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1288">prometheus/client_golang#1288</a></li> <li>Fix docstring references to renamed native histogram fields / functions. by <a href="https://github.com/juliusv"><code>@​juliusv</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1290">prometheus/client_golang#1290</a></li> <li>Fixed README &amp; CHANGELOG; Added fmt makefile command (+bingo) for easier contributions. by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1289">prometheus/client_golang#1289</a></li> <li></li> </ul> <!-- raw HTML omitted --> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/vegerot"><code>@​vegerot</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1153">prometheus/client_golang#1153</a></li> <li><a href="https://github.com/marevers"><code>@​marevers</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1257">prometheus/client_golang#1257</a></li> <li><a href="https://github.com/PiotrLewandowski323"><code>@​PiotrLewandowski323</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1260">prometheus/client_golang#1260</a></li> <li><a href="https://github.com/sashashura"><code>@​sashashura</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1180">prometheus/client_golang#1180</a></li> <li><a href="https://github.com/logicalhan"><code>@​logicalhan</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1278">prometheus/client_golang#1278</a></li> <li><a href="https://github.com/khasanovbi"><code>@​khasanovbi</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1272">prometheus/client_golang#1272</a></li> <li><a href="https://github.com/krishnaduttPanchagnula"><code>@​krishnaduttPanchagnula</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1281">prometheus/client_golang#1281</a></li> <li><a href="https://github.com/avlitman"><code>@​avlitman</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1286">prometheus/client_golang#1286</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_golang/compare/v1.15.1...v1.16.0">https://github.com/prometheus/client_golang/compare/v1.15.1...v1.16.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md">github.com/prometheus/client_golang's changelog</a>.</em></p> <blockquote> <h2>1.16.0 / 2023-06-15</h2> <ul> <li>[BUGFIX] api: Switch to POST for LabelNames, Series, and QueryExemplars. <a href="https://redirect.github.com/prometheus/client_golang/issues/1252">#1252</a></li> <li>[BUGFIX] api: Fix undefined execution order in return statements. <a href="https://redirect.github.com/prometheus/client_golang/issues/1260">#1260</a></li> <li>[BUGFIX] native histograms: Fix bug in bucket key calculation. <a href="https://redirect.github.com/prometheus/client_golang/issues/1279">#1279</a></li> <li>[ENHANCEMENT] Reduce constrainLabels allocations for all metrics. <a href="https://redirect.github.com/prometheus/client_golang/issues/1272">#1272</a></li> <li>[ENHANCEMENT] promhttp: Add process start time header for scrape efficiency. <a href="https://redirect.github.com/prometheus/client_golang/issues/1278">#1278</a></li> <li>[ENHANCEMENT] promlint: Improve metricUnits runtime. <a href="https://redirect.github.com/prometheus/client_golang/issues/1286">#1286</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="3583c1e1d0"><code>3583c1e</code></a> Cut v1.16.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1292">#1292</a>)</li> <li><a href="2feda42e44"><code>2feda42</code></a> Fixed README &amp; CHANGELOG; Added fmt makefile command (+bingo) for easier cont...</li> <li><a href="5b9cf9c6a8"><code>5b9cf9c</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1290">#1290</a> from prometheus/fix-nh-docstring-refs</li> <li><a href="1b19d5f458"><code>1b19d5f</code></a> Fix docstring references to renamed native histogram fields / functions.</li> <li><a href="7352ab7f80"><code>7352ab7</code></a> Moving fully to GH actions. (<a href="https://redirect.github.com/prometheus/client_golang/issues/1288">#1288</a>)</li> <li><a href="e4ff34d23e"><code>e4ff34d</code></a> Improve metricUnits runtime (<a href="https://redirect.github.com/prometheus/client_golang/issues/1286">#1286</a>)</li> <li><a href="781ea28024"><code>781ea28</code></a> added circleci as gh action YAML (<a href="https://redirect.github.com/prometheus/client_golang/issues/1281">#1281</a>)</li> <li><a href="a09a1d34cb"><code>a09a1d3</code></a> Reduce constrainLabels allocations (<a href="https://redirect.github.com/prometheus/client_golang/issues/1272">#1272</a>)</li> <li><a href="8840afcfc2"><code>8840afc</code></a> Bump github.com/prometheus/procfs from 0.9.0 to 0.10.1 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1283">#1283</a>)</li> <li><a href="5e78d5f66b"><code>5e78d5f</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1279">#1279</a> from prometheus/beorn7/histogram</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/client_golang/compare/v1.15.1...v1.16.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	4c32ff83fc	bump github.com/heroku/x from 0.0.55 to 0.0.59 (#9732) ... [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	b4dd0ca432	Bump github.com/alicebob/miniredis/v2 from 2.30.0 to 2.30.2 (#9461) ... Bumps [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) from 2.30.0 to 2.30.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/alicebob/miniredis/releases">github.com/alicebob/miniredis/v2's releases</a>.</em></p> <blockquote> <h2>XADD minid, BLMOVE, COMMAND fix, XREAD fix</h2> <ul> <li>support MINID in XADD (thanks <a href="https://github.com/nathan-cormier"><code>@​nathan-cormier</code></a>)</li> <li>support BLMOVE (thanks <a href="https://github.com/sevein"><code>@​sevein</code></a>)</li> <li>fix COMMAND (thanks <a href="https://github.com/pje"><code>@​pje</code></a>)</li> <li>fix 'XREAD ... $' on a non-existing stream</li> </ul> <h2>SET NX GET</h2> <ul> <li>support SET NX GET special case</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md">github.com/alicebob/miniredis/v2's changelog</a>.</em></p> <blockquote> <h3>v2.30.2</h3> <ul> <li>support MINID in XADD (thanks <a href="https://github.com/nathan-cormier"><code>@​nathan-cormier</code></a>)</li> <li>support BLMOVE (thanks <a href="https://github.com/sevein"><code>@​sevein</code></a>)</li> <li>fix COMMAND (thanks <a href="https://github.com/pje"><code>@​pje</code></a>)</li> <li>fix 'XREAD ... $' on a non-existing stream</li> </ul> <h3>v2.30.1</h3> <ul> <li>support SET NX GET special case</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="d807499fc3"><code>d807499</code></a> update changelog</li> <li><a href="4be3b8260d"><code>4be3b82</code></a> fix 'XREAD ... $' on a non-existing stream</li> <li><a href="2f1aeb304a"><code>2f1aeb3</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/323">#323</a> from pje/pje/bring-back-273-fix</li> <li><a href="c71c3127c1"><code>c71c312</code></a> Bring back the COMMAND response fix introduced in <a href="https://redirect.github.com/alicebob/miniredis/issues/273">#273</a></li> <li><a href="84b7146f54"><code>84b7146</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/321">#321</a> from sevein/dev/cmd-list-blmove</li> <li><a href="93ce01ac66"><code>93ce01a</code></a> Implement BLMOVE</li> <li><a href="9077c868d4"><code>9077c86</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/318">#318</a> from nathan-cormier/minid</li> <li><a href="a80f1409fc"><code>a80f140</code></a> Support MINID in XADD</li> <li><a href="e5c9dd403d"><code>e5c9dd4</code></a> changelog</li> <li><a href="5c16d558d3"><code>5c16d55</code></a> support SET NX GET special case</li> <li>Additional commits viewable in <a href="https://github.com/alicebob/miniredis/compare/v2.30.0...v2.30.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Dylan Guedes	e81dd8aed2	Loki: Bump `dskit` to inherit new backoff configs (#9484) ... **What this PR does / why we need it**: Bump `dskit` to inherit https://github.com/grafana/dskit/pull/296. It will allow us to configure custom backoff timeouts. **Which issue(s) this PR fixes**: N/A	2 years ago
dependabot[bot]	e46e650b50	Bump github.com/prometheus/client_golang from 1.14.0 to 1.15.1 (#9386) ... Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.14.0 to 1.15.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/releases">github.com/prometheus/client_golang's releases</a>.</em></p> <blockquote> <h2>v1.15.1</h2> <h2>Changes</h2> <ul> <li>[BUGFIX] Fixed promhttp.Instrument* handlers wrongly trying to attach exemplar to unsupported metrics (e.g. summary), <br /> causing panics <a href="https://redirect.github.com/prometheus/client_golang/issues/1253">#1253</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_golang/compare/v1.15.0...v1.15.1">https://github.com/prometheus/client_golang/compare/v1.15.0...v1.15.1</a></p> <h2>v1.15.0</h2> <h2>Changed</h2> <p>[BUGFIX] Fix issue with atomic variables on ppc64le <a href="https://redirect.github.com/prometheus/client_golang/issues/1171">#1171</a> [BUGFIX] Support for multiple samples within same metric <a href="https://redirect.github.com/prometheus/client_golang/issues/1181">#1181</a> [BUGFIX] Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149 <a href="https://redirect.github.com/prometheus/client_golang/issues/1187">#1187</a> [ENHANCEMENT] Add exemplars and middleware examples <a href="https://redirect.github.com/prometheus/client_golang/issues/1173">#1173</a> [ENHANCEMENT] Add more context to &quot;duplicate label names&quot; error to enable debugging <a href="https://redirect.github.com/prometheus/client_golang/issues/1177">#1177</a> [ENHANCEMENT] Add constrained labels and constrained variant for all MetricVecs <a href="https://redirect.github.com/prometheus/client_golang/issues/1151">#1151</a> [ENHANCEMENT] Moved away from deprecated github.com/golang/protobuf package <a href="https://redirect.github.com/prometheus/client_golang/issues/1183">#1183</a> [ENHANCEMENT] Add possibility to dynamically get label values for http instrumentation <a href="https://redirect.github.com/prometheus/client_golang/issues/1066">#1066</a> [ENHANCEMENT] Add ability to Pusher to add custom headers <a href="https://redirect.github.com/prometheus/client_golang/issues/1218">#1218</a> [ENHANCEMENT] api: Extend and improve efficiency of json-iterator usage <a href="https://redirect.github.com/prometheus/client_golang/issues/1225">#1225</a> [ENHANCEMENT] Added (official) support for go 1.20 <a href="https://redirect.github.com/prometheus/client_golang/issues/1234">#1234</a> [ENHANCEMENT] timer: Added support for exemplars <a href="https://redirect.github.com/prometheus/client_golang/issues/1233">#1233</a> [ENHANCEMENT] Filter expected metrics as well in CollectAndCompare <a href="https://redirect.github.com/prometheus/client_golang/issues/1143">#1143</a> [ENHANCEMENT] ⚠️ Only set start/end if time is not Zero. This breaks compatibility in experimental api package. If you strictly depend on empty time.Time as actual value, the behavior is now changed <a href="https://redirect.github.com/prometheus/client_golang/issues/1238">#1238</a></p> <!-- raw HTML omitted --> <ul> <li>Merge release 1.14 to main by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1164">prometheus/client_golang#1164</a></li> <li>Fix typo in doc comment by <a href="https://github.com/beorn7"><code>@​beorn7</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1166">prometheus/client_golang#1166</a></li> <li>Fix issue with atomic variables on ppc64le by <a href="https://github.com/beorn7"><code>@​beorn7</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1171">prometheus/client_golang#1171</a></li> <li>examples: Add exemplars and middleware examples by <a href="https://github.com/jessicalins"><code>@​jessicalins</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1173">prometheus/client_golang#1173</a></li> <li>Add context to &quot;duplicate label names&quot; to enable debugging by <a href="https://github.com/SpencerMalone"><code>@​SpencerMalone</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1177">prometheus/client_golang#1177</a></li> <li>Add constrained labels and Constrained variant for all MetricVecs by <a href="https://github.com/Okhoshi"><code>@​Okhoshi</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1151">prometheus/client_golang#1151</a></li> <li>Support for multiple samples within same metric by <a href="https://github.com/machadovilaca"><code>@​machadovilaca</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1181">prometheus/client_golang#1181</a></li> <li>Replace deprecated github.com/golang/protobuf package by <a href="https://github.com/zhsj"><code>@​zhsj</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1183">prometheus/client_golang#1183</a></li> <li>Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149 by <a href="https://github.com/b4bay"><code>@​b4bay</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1187">prometheus/client_golang#1187</a></li> <li>typo fix by <a href="https://github.com/ibreakthecloud"><code>@​ibreakthecloud</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1178">prometheus/client_golang#1178</a></li> <li>Add possibility to dynamically get label values for http instrumentation by <a href="https://github.com/Okhoshi"><code>@​Okhoshi</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1066">prometheus/client_golang#1066</a></li> <li>Bump github.com/cespare/xxhash/v2 from 2.1.2 to 2.2.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1199">prometheus/client_golang#1199</a></li> <li>Bump github.com/prometheus/procfs from 0.8.0 to 0.9.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1198">prometheus/client_golang#1198</a></li> <li>Bump golang.org/x/sys from 0.3.0 to 0.4.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1217">prometheus/client_golang#1217</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@​prombot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1213">prometheus/client_golang#1213</a></li> <li>Bump github.com/prometheus/common from 0.37.0 to 0.39.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1197">prometheus/client_golang#1197</a></li> <li>Add <code>Header</code> method to Pusher for custom header by <a href="https://github.com/songjiayang"><code>@​songjiayang</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1218">prometheus/client_golang#1218</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@​prombot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1224">prometheus/client_golang#1224</a></li> <li>api: Extend and improve json-iterator usage by <a href="https://github.com/beorn7"><code>@​beorn7</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1225">prometheus/client_golang#1225</a></li> <li>Indent example in godoc consistently by <a href="https://github.com/lamida"><code>@​lamida</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1226">prometheus/client_golang#1226</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md">github.com/prometheus/client_golang's changelog</a>.</em></p> <blockquote> <h2>Unreleased</h2> <h2>1.15.0 / 2023-04-13</h2> <h2>What's Changed</h2> <ul> <li>[BUGFIX] Fix issue with atomic variables on ppc64le <a href="https://redirect.github.com/prometheus/client_golang/issues/1171">#1171</a></li> <li>[BUGFIX] Support for multiple samples within same metric <a href="https://redirect.github.com/prometheus/client_golang/issues/1181">#1181</a></li> <li>[BUGFIX] Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149 <a href="https://redirect.github.com/prometheus/client_golang/issues/1187">#1187</a></li> <li>[ENHANCEMENT] Add exemplars and middleware examples <a href="https://redirect.github.com/prometheus/client_golang/issues/1173">#1173</a></li> <li>[ENHANCEMENT] Add more context to &quot;duplicate label names&quot; error to enable debugging <a href="https://redirect.github.com/prometheus/client_golang/issues/1177">#1177</a></li> <li>[ENHANCEMENT] Add constrained labels and constrained variant for all MetricVecs <a href="https://redirect.github.com/prometheus/client_golang/issues/1151">#1151</a></li> <li>[ENHANCEMENT] Moved away from deprecated github.com/golang/protobuf package <a href="https://redirect.github.com/prometheus/client_golang/issues/1183">#1183</a></li> <li>[ENHANCEMENT] Add possibility to dynamically get label values for http instrumentation <a href="https://redirect.github.com/prometheus/client_golang/issues/1066">#1066</a></li> <li>[ENHANCEMENT] Add ability to Pusher to add custom headers <a href="https://redirect.github.com/prometheus/client_golang/issues/1218">#1218</a></li> <li>[ENHANCEMENT] api: Extend and improve efficiency of json-iterator usage <a href="https://redirect.github.com/prometheus/client_golang/issues/1225">#1225</a></li> <li>[ENHANCEMENT] Added (official) support for go 1.20 <a href="https://redirect.github.com/prometheus/client_golang/issues/1234">#1234</a></li> <li>[ENHANCEMENT] timer: Added support for exemplars <a href="https://redirect.github.com/prometheus/client_golang/issues/1233">#1233</a></li> <li>[ENHANCEMENT] Filter expected metrics as well in CollectAndCompare <a href="https://redirect.github.com/prometheus/client_golang/issues/1143">#1143</a></li> <li>[ENHANCEMENT] ⚠️ Only set start/end if time is not Zero. This breaks compatibility in experimental api package. If you strictly depend on empty time.Time as actual value, the behavior is now changed <a href="https://redirect.github.com/prometheus/client_golang/issues/1238">#1238</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="4bbb297e54"><code>4bbb297</code></a> Cut 1.15.1 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1266">#1266</a>)</li> <li><a href="2eaffbdb02"><code>2eaffbd</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1253">#1253</a> from prometheus/fixpro</li> <li><a href="b8fdd239b2"><code>b8fdd23</code></a> Added clarification.</li> <li><a href="2ea234eef0"><code>2ea234e</code></a> Revert &quot;Remove unnecessary check if label is nil in observeWithExemplar (<a href="https://redirect.github.com/prometheus/client_golang/issues/1235">#1235</a>)&quot;</li> <li><a href="d7896d4bd0"><code>d7896d4</code></a> Cut v1.15.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1249">#1249</a>)</li> <li><a href="bba12b5514"><code>bba12b5</code></a> Bump github.com/prometheus/common from 0.41.0 to 0.42.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1244">#1244</a>)</li> <li><a href="9015fcfc2c"><code>9015fcf</code></a> Bump github.com/golang/protobuf from 1.5.2 to 1.5.3 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1245">#1245</a>)</li> <li><a href="1bb8cf8306"><code>1bb8cf8</code></a> Bump golang.org/x/sys from 0.5.0 to 0.6.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1246">#1246</a>)</li> <li><a href="ff7efedd43"><code>ff7efed</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1243">#1243</a> from prometheus/dependabot/go_modules/google.golang....</li> <li><a href="852a282f10"><code>852a282</code></a> Bump google.golang.org/protobuf from 1.28.1 to 1.30.0</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/client_golang/compare/v1.14.0...v1.15.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	405c523422	Bump github.com/prometheus/client_model from 0.3.0 to 0.4.0 (#9447) ... Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model) from 0.3.0 to 0.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_model/releases">github.com/prometheus/client_model's releases</a>.</em></p> <blockquote> <h2>0.4.0 / 2023-05-03</h2> <h2>What's Changed</h2> <ul> <li>Update proto tools by <a href="https://github.com/SuperQ"><code>@​SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/client_model/pull/64">prometheus/client_model#64</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/SuperQ"><code>@​SuperQ</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_model/pull/64">prometheus/client_model#64</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_model/compare/v0.3.0...v0.4.0">https://github.com/prometheus/client_model/compare/v0.3.0...v0.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="91c3945f2c"><code>91c3945</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_model/issues/64">#64</a> from prometheus/superq/update_proto</li> <li><a href="31ca668385"><code>31ca668</code></a> Update proto tools</li> <li>See full diff in <a href="https://github.com/prometheus/client_model/compare/v0.3.0...v0.4.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	d43c0bb23b	Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible (#9450) ... Bumps [github.com/docker/distribution](https://github.com/docker/distribution) from 2.8.1+incompatible to 2.8.2+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/distribution/releases">github.com/docker/distribution's releases</a>.</em></p> <blockquote> <h2>v2.8.2</h2> <h2>What's Changed</h2> <ul> <li>Revert registry/client: set <code>Accept: identity</code> header when getting layers by <a href="https://github.com/ndeloof"><code>@​ndeloof</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3783">distribution/distribution#3783</a></li> <li>Parse <code>http</code> forbidden as denied by <a href="https://github.com/vvoland"><code>@​vvoland</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3914">distribution/distribution#3914</a></li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2022-28391">CVE-2022-28391</a> by bumping alpine from 3.14 to 3.16 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> (<a href="https://redirect.github.com/distribution/distribution/pull/3650">#3650</a>)</li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2023-2253">CVE-2023-2253</a> runaway allocation on /v2/_catalog by <a href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a href="521ea3d973"><code>521ea3d9</code></a></li> <li>Fix panic in inmemory driver by <a href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li> <li>bump up golang version (alternative) by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li> <li>Dockerfile: update xx to v1.2.1 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li> <li>update to go1.19.9 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li> <li>Add code to handle pagination of parts. Fixes max layer size of 10GB bug by <a href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li> <li>Dockerfile: fix filenames of artifacts by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3911">distribution/distribution#3911</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2</a></p> <h2>v2.8.2-beta.2</h2> <h2>What's Changed</h2> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2022-28391">CVE-2022-28391</a> by bumping alpine from 3.14 to 3.16 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> (<a href="https://redirect.github.com/distribution/distribution/pull/3650">#3650</a>)</li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2023-2253">CVE-2023-2253</a> runaway allocation on /v2/_catalog by <a href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a href="521ea3d973"><code>521ea3d9</code></a></li> <li>Fix panic in inmemory driver by <a href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li> <li>bump up golang version (alternative) by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li> <li>Dockerfile: update xx to v1.2.1 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li> <li>update to go1.19.9 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li> <li>Add code to handle pagination of parts. Fixes max layer size of 10GB bug by <a href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li> <li>Dockerfile: fix filenames of artifacts by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3911">distribution/distribution#3911</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.2">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.2</a></p> <h2>v2.8.2-beta.1</h2> <h3><strong>NOTE: This is a pre-release that does not contain any artifacts!</strong></h3> <h2>What's Changed</h2> <ul> <li>Fix runaway allocation on /v2/_catalog by <a href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a href="521ea3d973"><code>521ea3d9</code></a></li> <li>Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3650">distribution/distribution#3650</a></li> <li>Fix panic in inmemory driver by <a href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li> <li>bump up golang version (alternative) by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li> <li>Dockerfile: update xx to v1.2.1 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li> <li>update to go1.19.9 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li> <li>Add code to handle pagination of parts. Fixes max layer size of 10GB bug by <a href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.1">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="7c354a4b40"><code>7c354a4</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3915">#3915</a> from distribution/2.8.2-release-notes</li> <li><a href="a173a9c625"><code>a173a9c</code></a> Add v2.8.2 release notes</li> <li><a href="4894d35ecc"><code>4894d35</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3914">#3914</a> from vvoland/handle-forbidden-28</li> <li><a href="f067f66d3d"><code>f067f66</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3783">#3783</a> from ndeloof/accept-encoding-28</li> <li><a href="483ad69da3"><code>483ad69</code></a> registry/errors: Parse http forbidden as denied</li> <li><a href="2b0f84df21"><code>2b0f84d</code></a> Revert &quot;registry/client: set Accept: identity header when getting layers&quot;</li> <li><a href="320d6a141f"><code>320d6a1</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3912">#3912</a> from distribution/2.8.2-beta.2-release-notes</li> <li><a href="5f3ca1b2fb"><code>5f3ca1b</code></a> Add release notes for 2.8.2-beta.2 release</li> <li><a href="cb840f63b3"><code>cb840f6</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3911">#3911</a> from thaJeztah/2.8_backport_fix_releaser_filenames</li> <li><a href="e884644fff"><code>e884644</code></a> Dockerfile: fix filenames of artifacts</li> <li>Additional commits viewable in <a href="https://github.com/docker/distribution/compare/v2.8.1...v2.8.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/loki/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	428b05d7b7	Bump github.com/imdario/mergo from 0.3.13 to 0.3.15 (#9439) ... Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from 0.3.13 to 0.3.15. <details> <summary>Commits</summary> <ul> <li><a href="fb3c082091"><code>fb3c082</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="c9e40b59db"><code>c9e40b5</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/227">#227</a> from eh-steve/should-not-dereference</li> <li><a href="acd16ec124"><code>acd16ec</code></a> Merge branch 'master' into should-not-dereference</li> <li><a href="62d1cf2897"><code>62d1cf2</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="dcef160919"><code>dcef160</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/226">#226</a> from ronaudinho/fix/202</li> <li><a href="404749e66d"><code>404749e</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="bd316d34ac"><code>bd316d3</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/221">#221</a> from zhiyu0729/issue220</li> <li><a href="5b9bbdb8b6"><code>5b9bbdb</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="90db0ad2f4"><code>90db0ad</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/170">#170</a> from mdeltour/fix/naming-typo</li> <li><a href="d19834bb68"><code>d19834b</code></a> Update stackaid dependencies for imdario/mergo</li> <li>Additional commits viewable in <a href="https://github.com/imdario/mergo/compare/v0.3.13...v0.3.15">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	978606b641	Bump golang.org/x/crypto from 0.7.0 to 0.9.0 (#9428) ... Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.7.0 to 0.9.0. <details> <summary>Commits</summary> <ul> <li><a href="a4e984136a"><code>a4e9841</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="3ef8056490"><code>3ef8056</code></a> ssh/test: enable on solaris</li> <li><a href="a8cc953517"><code>a8cc953</code></a> ssh: skip unsupported tests on wasip1</li> <li><a href="7d6d3f5d4a"><code>7d6d3f5</code></a> ssh/test: skip TestValidTerminalMode on non-Bourne shells</li> <li><a href="1faeef9713"><code>1faeef9</code></a> cryptobyte: reject Object Identifiers with leading 0x80</li> <li><a href="00fd4ff485"><code>00fd4ff</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="018c28f8a1"><code>018c28f</code></a> all: fix some comments</li> <li><a href="9cd0187c09"><code>9cd0187</code></a> curve25519: use crypto/ecdh on Go 1.20</li> <li><a href="c6a20f9984"><code>c6a20f9</code></a> ssh: document that ParseRawPrivateKey supports Ed25519 keys</li> <li>See full diff in <a href="https://github.com/golang/crypto/compare/v0.7.0...v0.9.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	9cd6d079d1	Bump github.com/Azure/go-autorest/autorest from 0.11.28 to 0.11.29 (#9338) ... Bumps [github.com/Azure/go-autorest/autorest](https://github.com/Azure/go-autorest) from 0.11.28 to 0.11.29. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Azure/go-autorest/releases">github.com/Azure/go-autorest/autorest's releases</a>.</em></p> <blockquote> <h2>autorest/v0.11.29</h2> <p>Remove undefined behavior during return <a href="https://redirect.github.com/Azure/go-autorest/issues/723">#723</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="c2958ac74c"><code>c2958ac</code></a> Remove undefined behavior during return (<a href="https://redirect.github.com/Azure/go-autorest/issues/723">#723</a>)</li> <li><a href="553a90ae65"><code>553a90a</code></a> fix: enable update jwt via callback for workloadidentity (<a href="https://redirect.github.com/Azure/go-autorest/issues/719">#719</a>)</li> <li><a href="ee71315119"><code>ee71315</code></a> Update dependencies (<a href="https://redirect.github.com/Azure/go-autorest/issues/720">#720</a>)</li> <li><a href="9038e4a609"><code>9038e4a</code></a> feat: allow getting authorizer from existing file settings (<a href="https://redirect.github.com/Azure/go-autorest/issues/709">#709</a>)</li> <li><a href="79575dd7ba"><code>79575dd</code></a> Retract adal versions with token refresh errors (<a href="https://redirect.github.com/Azure/go-autorest/issues/716">#716</a>)</li> <li><a href="93a6fda0d7"><code>93a6fda</code></a> Update CI to latest Go and Ubuntu images (<a href="https://redirect.github.com/Azure/go-autorest/issues/717">#717</a>)</li> <li><a href="2fa44cb18b"><code>2fa44cb</code></a> Fix validation in resource id parsing (<a href="https://redirect.github.com/Azure/go-autorest/issues/704">#704</a>)</li> <li>See full diff in <a href="https://github.com/Azure/go-autorest/compare/autorest/v0.11.28...autorest/v0.11.29">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	ad3a04326d	Bump golang.org/x/net from 0.8.0 to 0.9.0 (#9318) ... Bumps [golang.org/x/net](https://github.com/golang/net) from 0.8.0 to 0.9.0. <details> <summary>Commits</summary> <ul> <li><a href="694cff8668"><code>694cff8</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="6960703597"><code>6960703</code></a> http2: log the correct error when retrying in (*Transport).RoundTripOpt</li> <li><a href="9f24bb44e6"><code>9f24bb4</code></a> http2: properly discard data received after request/response body is closed</li> <li><a href="08dda57501"><code>08dda57</code></a> html: fix package doc typo</li> <li>See full diff in <a href="https://github.com/golang/net/compare/v0.8.0...v0.9.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	b3ca9fc219	Bump github.com/fatih/color from 1.14.1 to 1.15.0 (#9296) ... Bumps [github.com/fatih/color](https://github.com/fatih/color) from 1.14.1 to 1.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fatih/color/releases">github.com/fatih/color's releases</a>.</em></p> <blockquote> <h2>v1.15.0</h2> <h2>What's Changed</h2> <ul> <li>windows: enable virtual terminal processing, fixes <a href="https://redirect.github.com/fatih/color/issues/169">#169</a> by <a href="https://github.com/martinlindhe"><code>@​martinlindhe</code></a> in <a href="https://redirect.github.com/fatih/color/pull/186">fatih/color#186</a></li> <li>ci: update dependencies by <a href="https://github.com/fatih"><code>@​fatih</code></a> in <a href="https://redirect.github.com/fatih/color/pull/191">fatih/color#191</a></li> <li>Bump golang.org/x/sys from 0.5.0 to 0.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/fatih/color/pull/189">fatih/color#189</a></li> <li>Refactor color_windows.go by <a href="https://github.com/pellared"><code>@​pellared</code></a> in <a href="https://redirect.github.com/fatih/color/pull/188">fatih/color#188</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/martinlindhe"><code>@​martinlindhe</code></a> made their first contribution in <a href="https://redirect.github.com/fatih/color/pull/186">fatih/color#186</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fatih/color/compare/v1.14.1...v1.15.0">https://github.com/fatih/color/compare/v1.14.1...v1.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="12126ed593"><code>12126ed</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/188">#188</a> from pellared/patch-1</li> <li><a href="770038b843"><code>770038b</code></a> Merge branch 'main' into patch-1</li> <li><a href="c5d9a2b926"><code>c5d9a2b</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/189">#189</a> from fatih/dependabot/go_modules/golang.org/x/sys-0.6.0</li> <li><a href="1ceb74688c"><code>1ceb746</code></a> Bump golang.org/x/sys from 0.5.0 to 0.6.0</li> <li><a href="66a1b893b7"><code>66a1b89</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/191">#191</a> from fatih/update-ci-deps</li> <li><a href="3228f5ab22"><code>3228f5a</code></a> ci: update dependencies</li> <li><a href="0226ec9472"><code>0226ec9</code></a> Refactor color_windows.go</li> <li><a href="d080a5b792"><code>d080a5b</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/186">#186</a> from martinlindhe/main</li> <li><a href="02ab2eaae1"><code>02ab2ea</code></a> windows: enable virtual terminal processing, fixes <a href="https://redirect.github.com/fatih/color/issues/169">#169</a></li> <li>See full diff in <a href="https://github.com/fatih/color/compare/v1.14.1...v1.15.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	bea5481a54	Bump github.com/klauspost/compress from 1.16.0 to 1.16.5 (#9281) ... Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.16.0 to 1.16.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/klauspost/compress/releases">github.com/klauspost/compress's releases</a>.</em></p> <blockquote> <h2>v1.16.5</h2> <h2>What's Changed</h2> <ul> <li>zstd: readByte needs to use io.ReadFull by <a href="https://github.com/jnoxon"><code>@​jnoxon</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/802">klauspost/compress#802</a></li> <li>gzip: Fix WriterTo after initial read by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/804">klauspost/compress#804</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jnoxon"><code>@​jnoxon</code></a> made their first contribution in <a href="https://redirect.github.com/klauspost/compress/pull/802">klauspost/compress#802</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.4...v1.16.5">https://github.com/klauspost/compress/compare/v1.16.4...v1.16.5</a></p> <h2>v1.16.4</h2> <h2>What's Changed</h2> <ul> <li>s2: Fix huge block overflow by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/779">klauspost/compress#779</a></li> <li>s2: Allow CustomEncoder fallback by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/780">klauspost/compress#780</a></li> <li>zstd: Fix amd64 not always detecting corrupt data by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/785">klauspost/compress#785</a></li> <li>zstd: Improve zstd best efficiency by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> and <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/784">klauspost/compress#784</a></li> <li>zstd: Make load(32|64)32 safer and smaller by <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/788">klauspost/compress#788</a></li> <li>zstd: Fix quick reject on long backmatches by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/787">klauspost/compress#787</a></li> <li>zstd: Revert table size change by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/789">klauspost/compress#789</a></li> <li>zstd: Respect WithAllLitEntropyCompression by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/792">klauspost/compress#792</a></li> <li>zstd: Fix back-referenced offset by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/793">klauspost/compress#793</a></li> <li>zstd: Load source value at start of loop by <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/794">klauspost/compress#794</a></li> <li>zstd: Shorten checksum code by <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/795">klauspost/compress#795</a></li> <li>zstd: Fix fallback on incompressible block by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/798">klauspost/compress#798</a></li> <li>gzhttp: Suppport ResponseWriter Unwrap() in gzhttp handler by <a href="https://github.com/jgimenez"><code>@​jgimenez</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/799">klauspost/compress#799</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jgimenez"><code>@​jgimenez</code></a> made their first contribution in <a href="https://redirect.github.com/klauspost/compress/pull/799">klauspost/compress#799</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.3...v1.16.4">https://github.com/klauspost/compress/compare/v1.16.3...v1.16.4</a></p> <h2>v1.16.3</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.2...v1.16.3">https://github.com/klauspost/compress/compare/v1.16.2...v1.16.3</a></p> <h2>v1.16.2</h2> <h2>What's Changed</h2> <ul> <li>Fix Goreleaser permissions by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/777">klauspost/compress#777</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.1...v1.16.2">https://github.com/klauspost/compress/compare/v1.16.1...v1.16.2</a></p> <h2>v1.16.1</h2> <h2>What's Changed</h2> <ul> <li>zstd: Speed up + improve best encoder by <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/776">klauspost/compress#776</a></li> <li>s2: Add Intel LZ4s converter by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/766">klauspost/compress#766</a></li> <li>gzhttp: Add BREACH mitigation by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/762">klauspost/compress#762</a></li> <li>gzhttp: Remove a few unneeded allocs by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/768">klauspost/compress#768</a></li> <li>gzhttp: Fix crypto/rand.Read usage by <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/770">klauspost/compress#770</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="ed6feffc3b"><code>ed6feff</code></a> gzip: Fix WriterTo after initial read (<a href="https://redirect.github.com/klauspost/compress/issues/804">#804</a>)</li> <li><a href="62dad8110a"><code>62dad81</code></a> readerWrapper: readByte needs to use io.ReadFull (<a href="https://redirect.github.com/klauspost/compress/issues/802">#802</a>)</li> <li><a href="b0f7a9437e"><code>b0f7a94</code></a> Update README.md</li> <li><a href="3c61d32490"><code>3c61d32</code></a> Allow access to internal ResponseWriter in gzhttp handler (<a href="https://redirect.github.com/klauspost/compress/issues/799">#799</a>)</li> <li><a href="9243a1faf0"><code>9243a1f</code></a> Update README.md</li> <li><a href="47eb6d4224"><code>47eb6d4</code></a> zstd: Fix fallback on incompressible block (<a href="https://redirect.github.com/klauspost/compress/issues/798">#798</a>)</li> <li><a href="5753c12f5f"><code>5753c12</code></a> zstd: Shorten checksum code (<a href="https://redirect.github.com/klauspost/compress/issues/795">#795</a>)</li> <li><a href="6c7dd07ffa"><code>6c7dd07</code></a> zstd: Load source value at start of loop (<a href="https://redirect.github.com/klauspost/compress/issues/794">#794</a>)</li> <li><a href="2a02ad2836"><code>2a02ad2</code></a> zstd: Fix back-referenced offset (<a href="https://redirect.github.com/klauspost/compress/issues/793">#793</a>)</li> <li><a href="dc198c145e"><code>dc198c1</code></a> zstd: Respect WithAllLitEntropyCompression (<a href="https://redirect.github.com/klauspost/compress/issues/792">#792</a>)</li> <li>Additional commits viewable in <a href="https://github.com/klauspost/compress/compare/v1.16.0...v1.16.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	5a102bcc1e	Bump github.com/IBM/ibm-cos-sdk-go from 1.9.4 to 1.10.0 (#9256) ... Bumps [github.com/IBM/ibm-cos-sdk-go](https://github.com/IBM/ibm-cos-sdk-go) from 1.9.4 to 1.10.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/IBM/ibm-cos-sdk-go/releases">github.com/IBM/ibm-cos-sdk-go's releases</a>.</em></p> <blockquote> <h2>Release 1.10.0</h2> <h2>Content</h2> <h3>Features</h3> <ul> <li>S3 Compatible Object Lock Support</li> <li>One Rate Active Plan Support</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/IBM/ibm-cos-sdk-go/blob/master/CHANGELOG.md">github.com/IBM/ibm-cos-sdk-go's changelog</a>.</em></p> <blockquote> <h2>1.10.0</h2> <h3>Content</h3> <h4>Features</h4> <ul> <li>S3 Compatible Object Lock Support</li> <li>One Rate Active Plan Support</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="3e0dffac4c"><code>3e0dffa</code></a> Release 1.10.0</li> <li>See full diff in <a href="https://github.com/IBM/ibm-cos-sdk-go/compare/v1.9.4...v1.10.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	bce8d6bda7	Bump golang.org/x/text from 0.8.0 to 0.9.0 (#9257) ... Bumps [golang.org/x/text](https://github.com/golang/text) from 0.8.0 to 0.9.0. <details> <summary>Commits</summary> <ul> <li><a href="48e4a4a957"><code>48e4a4a</code></a> all: fix some comments</li> <li>See full diff in <a href="https://github.com/golang/text/compare/v0.8.0...v0.9.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Periklis Tsirakidis	3abd260975	Bump dskit from 528d8a7 to 1725bcc (#9184)	2 years ago
dependabot[bot]	c91bfdf6fd	Bump github.com/minio/minio-go/v7 from 7.0.45 to 7.0.52 (#9208) ... Bumps [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) from 7.0.45 to 7.0.52. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/minio/minio-go/releases">github.com/minio/minio-go/v7's releases</a>.</em></p> <blockquote> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>Revert &quot;Add missing aws-chunked transfer encoding (<a href="https://redirect.github.com/minio/minio-go/issues/1803">#1803</a>)&quot; by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1804">minio/minio-go#1804</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.51...v7.0.52">https://github.com/minio/minio-go/compare/v7.0.51...v7.0.52</a></p> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>Fix listobjects with metadata by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1795">minio/minio-go#1795</a></li> <li>Add missing aws-chunked transfer encoding by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1803">minio/minio-go#1803</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.50...v7.0.51">https://github.com/minio/minio-go/compare/v7.0.50...v7.0.51</a></p> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>Update minio.Core API by <a href="https://github.com/donatello"><code>@​donatello</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1764">minio/minio-go#1764</a></li> <li>remove sse-s3 header in completeMultipartUpload by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1777">minio/minio-go#1777</a></li> <li>upgrade all deps by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1778">minio/minio-go#1778</a></li> <li>allow setting region via custom function by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1786">minio/minio-go#1786</a></li> <li>allow virtual host style for GetBucketLocation API, if requested by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1785">minio/minio-go#1785</a></li> <li>Add ap-south-2 to endpoints by <a href="https://github.com/Prajithp"><code>@​Prajithp</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1781">minio/minio-go#1781</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Prajithp"><code>@​Prajithp</code></a> made their first contribution in <a href="https://redirect.github.com/minio/minio-go/pull/1781">minio/minio-go#1781</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.49...v7.0.50">https://github.com/minio/minio-go/compare/v7.0.49...v7.0.50</a></p> <h2>Bugfix Release</h2> <h2>What's Changed</h2> <ul> <li>support If-Match/If-None-Match for PUT operations by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1772">minio/minio-go#1772</a></li> <li>upgrade minio-go deps by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1774">minio/minio-go#1774</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.48...v7.0.49">https://github.com/minio/minio-go/compare/v7.0.48...v7.0.49</a></p> <h2>Bugfix Release</h2> <h2>What's Changed</h2> <ul> <li>Fix sharing of MD5 hasher by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1753">minio/minio-go#1753</a></li> <li>feat(<a href="https://redirect.github.com/minio/minio-go/issues/1755">#1755</a>): GetObject supports overriding response header values by <a href="https://github.com/reedchan7"><code>@​reedchan7</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1756">minio/minio-go#1756</a></li> <li>Snowball: If Modtime unset, use current time by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1763">minio/minio-go#1763</a></li> <li>Bump Go versions by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1768">minio/minio-go#1768</a></li> <li>feat: add aws ap-southeast-4 region by <a href="https://github.com/ianmuge"><code>@​ianmuge</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1767">minio/minio-go#1767</a></li> <li>STSCertificateIdentity: Init request form by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1770">minio/minio-go#1770</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/reedchan7"><code>@​reedchan7</code></a> made their first contribution in <a href="https://redirect.github.com/minio/minio-go/pull/1756">minio/minio-go#1756</a></li> <li><a href="https://github.com/ianmuge"><code>@​ianmuge</code></a> made their first contribution in <a href="https://redirect.github.com/minio/minio-go/pull/1767">minio/minio-go#1767</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="11eb82d85f"><code>11eb82d</code></a> Revert &quot;Add missing aws-chunked transfer encoding (<a href="https://redirect.github.com/minio/minio-go/issues/1803">#1803</a>)&quot; (<a href="https://redirect.github.com/minio/minio-go/issues/1804">#1804</a>)</li> <li><a href="7bf8079be6"><code>7bf8079</code></a> Update version to next release</li> <li><a href="8175bf7bda"><code>8175bf7</code></a> Add missing aws-chunked transfer encoding (<a href="https://redirect.github.com/minio/minio-go/issues/1803">#1803</a>)</li> <li><a href="5b15988473"><code>5b15988</code></a> Fix listobjects with metadata (<a href="https://redirect.github.com/minio/minio-go/issues/1795">#1795</a>)</li> <li><a href="6fcbe6de97"><code>6fcbe6d</code></a> Update version to next release</li> <li><a href="7c9b5ff1c0"><code>7c9b5ff</code></a> fix: all the linter issues reported</li> <li><a href="5d09d8f78b"><code>5d09d8f</code></a> Add ap-south-2 to endpoints (<a href="https://redirect.github.com/minio/minio-go/issues/1781">#1781</a>)</li> <li><a href="24cdd7fc94"><code>24cdd7f</code></a> allow virtual host style for GetBucketLocation API, if requested (<a href="https://redirect.github.com/minio/minio-go/issues/1785">#1785</a>)</li> <li><a href="5384d69d15"><code>5384d69</code></a> allow setting region via custom function (<a href="https://redirect.github.com/minio/minio-go/issues/1786">#1786</a>)</li> <li><a href="9948a7b56c"><code>9948a7b</code></a> upgrade all deps (<a href="https://redirect.github.com/minio/minio-go/issues/1778">#1778</a>)</li> <li>Additional commits viewable in <a href="https://github.com/minio/minio-go/compare/v7.0.45...v7.0.52">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	8c0e4fbe83	Bump github.com/aliyun/aliyun-oss-go-sdk from 2.2.2+incompatible to 2.2.7+incompatible (#9225) ... Bumps [github.com/aliyun/aliyun-oss-go-sdk](https://github.com/aliyun/aliyun-oss-go-sdk) from 2.2.2+incompatible to 2.2.7+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aliyun/aliyun-oss-go-sdk/releases">github.com/aliyun/aliyun-oss-go-sdk's releases</a>.</em></p> <blockquote> <h2>v2.2.7</h2> <p>增加：support get info form EC &amp; x-oss-err. 增加：support bucket replication time control api. 增加：support bucket style api. 增加：support list bucket cname api. 增加：support bucket resource group api. 修复：do not use uname -* cmd to get platform information. 修复：call rand.Seed only once.</p> <h2>v2.2.6</h2> <p>增加：the object name cannot be empty in object's apis. 增加：support access monitor api. 修复：fix GetBucketStat bug. 增加：lifecycle rule supports filter configuration. 增加：support deleting the specified bucket tags. 修复：can't delete objects where the keys contain special characters.</p> <h2>v2.2.5</h2> <p>增加：add meta data indexing api 删除：remove github.com/baiyubin/aliyun-sts-go-sdk/sts deps. 修改：remove chartset info in text/* mime type. 增加：add restore info in listObjects/listObjectVersions 增加：add x-oss-ac-* into subresource list. 修改：fix select object bug. 增加：getBucketStat api returns more info 增加：support X-Oss-Notification header in CompleteMultipartUpload api.</p> <h2>v2.2.4</h2> <ul> <li>增加： 支持cname的创建和删除</li> <li>增加： 增加inventory xml 接口</li> </ul> <h2>v2.2.3</h2> <ul> <li>增加： 支持云盒</li> <li>增加： 支持v4签名</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/aliyun/aliyun-oss-go-sdk/blob/master/CHANGELOG.md">github.com/aliyun/aliyun-oss-go-sdk's changelog</a>.</em></p> <blockquote> <h1>ChangeLog - Aliyun OSS SDK for Go</h1> <h2>版本号：v2.2.7 日期：2023-03-23</h2> <h3>变更内容</h3> <ul> <li>增加：support get info form EC &amp; x-oss-err.</li> <li>增加：support bucket replication time control api.</li> <li>增加：support bucket style api.</li> <li>增加：support list bucket cname api.</li> <li>增加：support bucket resource group api.</li> <li>修复：do not use uname -* cmd to get platform information.</li> <li>修复：call rand.Seed only once.</li> </ul> <h2>版本号：v2.2.6 日期：2022-11-16</h2> <h3>变更内容</h3> <ul> <li>增加：the object name cannot be empty in object's apis.</li> <li>增加：support access monitor api.</li> <li>修复：fix GetBucketStat bug.</li> <li>增加：lifecycle rule supports filter configuration.</li> <li>增加：support deleting the specified bucket tags.</li> <li>修复：can't delete objects where the keys contain special characters.</li> </ul> <h2>版本号：v2.2.5 日期：2022-08-19</h2> <h3>变更内容</h3> <ul> <li>增加：add meta data indexing api</li> <li>删除：remove github.com/baiyubin/aliyun-sts-go-sdk/sts deps.</li> <li>修改：remove chartset info in text/* mime type.</li> <li>增加：add restore info in listObjects/listObjectVersions</li> <li>增加：add x-oss-ac-* into subresource list.</li> <li>修改：fix select object bug.</li> <li>增加：getBucketStat api returns more info</li> <li>增加：support X-Oss-Notification header in CompleteMultipartUpload api.</li> </ul> <h2>版本号：v2.2.4 日期：2022-05-25</h2> <h3>变更内容</h3> <ul> <li>增加：add cname api</li> <li>增加：add inventory api for xml config</li> </ul> <h1>ChangeLog - Aliyun OSS SDK for Go</h1> <h2>版本号：v2.2.3 日期：2022-05-13</h2> <h3>变更内容</h3> <ul> <li>增加：support cloud-box</li> <li>增加：support v4 signature</li> </ul> <h1>ChangeLog - Aliyun OSS SDK for Go</h1> <h2>版本号：v2.2.2 日期：2022-03-24</h2> <h3>变更内容</h3> <ul> <li>增加：add GetBucketCORSXml,SetBucketCORSXml,GetBucketLifecycleXml</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="77977ff44f"><code>77977ff</code></a> release v2.2.7</li> <li><a href="95400a14f6"><code>95400a1</code></a> modify read err from header unit testing (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/372">#372</a>)</li> <li><a href="64b34dc5dd"><code>64b34dc</code></a> Read error information from header (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/369">#369</a>)</li> <li><a href="72974c6a13"><code>72974c6</code></a> modify fuction TestBucketResourceGroup</li> <li><a href="f1516b15e1"><code>f1516b1</code></a> modify bucket replication api (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/366">#366</a>)</li> <li><a href="4543270634"><code>4543270</code></a> modify aes key random number (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/368">#368</a>)</li> <li><a href="2273dd713f"><code>2273dd7</code></a> Modify the document address and error comments (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/367">#367</a>)</li> <li><a href="8e7b9543bf"><code>8e7b954</code></a> add bucket style api (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/361">#361</a>)</li> <li><a href="b416f9d761"><code>b416f9d</code></a> add bucket cname sample and modify list bucket cname api (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/364">#364</a>)</li> <li><a href="c74b4e865f"><code>c74b4e8</code></a> add bucket resource group api</li> <li>Additional commits viewable in <a href="https://github.com/aliyun/aliyun-oss-go-sdk/compare/v2.2.2...v2.2.7">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	155eb522e2	Bump github.com/spf13/afero from 1.9.3 to 1.9.5 (#8992) ... Bumps [github.com/spf13/afero](https://github.com/spf13/afero) from 1.9.3 to 1.9.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spf13/afero/releases">github.com/spf13/afero's releases</a>.</em></p> <blockquote> <h2>v1.9.5</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/spf13/afero/compare/v1.9.4...v1.9.5">https://github.com/spf13/afero/compare/v1.9.4...v1.9.5</a></p> <h2>v1.9.4</h2> <h2>What's Changed</h2> <ul> <li>Fix renaming a dir with sub-directories by <a href="https://github.com/nono"><code>@​nono</code></a> in <a href="https://redirect.github.com/spf13/afero/pull/239">spf13/afero#239</a></li> <li>github: Update Go build matrix by <a href="https://github.com/bep"><code>@​bep</code></a> in <a href="https://redirect.github.com/spf13/afero/pull/385">spf13/afero#385</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/nono"><code>@​nono</code></a> made their first contribution in <a href="https://redirect.github.com/spf13/afero/pull/239">spf13/afero#239</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/spf13/afero/compare/v1.9.3...v1.9.4">https://github.com/spf13/afero/compare/v1.9.3...v1.9.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="d92c300a1b"><code>d92c300</code></a> Fix failing tests on Windows with Go 1.20</li> <li><a href="501e8d313c"><code>501e8d3</code></a> Fix io.Seek* deprecation errors</li> <li><a href="1edd01aa5f"><code>1edd01a</code></a> Run go mod tidy</li> <li><a href="4ba522f8c8"><code>4ba522f</code></a> fix(deps): golang.org/x/crypto, golang.org/x/text</li> <li><a href="cf95922e71"><code>cf95922</code></a> all: Run gofumpt -l -w .</li> <li><a href="a6023d20a1"><code>a6023d2</code></a> github: Update Go build matrix</li> <li><a href="3b1116bc67"><code>3b1116b</code></a> memmap: Fix renaming a dir with sub-directories (<a href="https://redirect.github.com/spf13/afero/issues/239">#239</a>)</li> <li>See full diff in <a href="https://github.com/spf13/afero/compare/v1.9.3...v1.9.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
Peter Štibraný	90a1d4593e	Update Prometheus dependency (#9205)	2 years ago
Robert Fratto	7bec727c6d	promtail: support configurable polling interval (#8874) ... Currently, Promtail always polls files every 250ms. This PR allows the polling period to be customized, starting at a minimum polling period and exponentially increasing the polling frequency to a bounded maximum if the file has no changes. When file changes are detected, the polling frequency resets to the minimum. The default behavior is the existing behavior; both the minimum and maximum polling intervals are set to 250ms. I'm opening this in draft to get early feedback. There's a few open questions: * Where can I add validations to ensure that the min/max polling intervals are configured properly? * Is this the right approach for implementation? Do I need to make any changes? * Does this need tests? I'll update the CHANGELOG and Documentation after we're agreed on an approach.	2 years ago
Trevor Whitney	38c9c6c460	Bump go from 1.20.1 -> 1.20.3 (#9106) ... **What this PR does / why we need it**: Bumps our go dependency from 1.20.1 to 1.20.3 to address [security fixes](https://groups.google.com/g/golang-announce/c/Xdv6JL9ENs8) **Checklist** - [ ] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [ ] Documentation added - [ ] Tests updated - [ ] `CHANGELOG.md` updated - [ ] Changes that require user attention or interaction to upgrade are documented in `docs/sources/upgrading/_index.md`	2 years ago
dependabot[bot]	e9bc461c63	Bump github.com/docker/docker from 20.10.23+incompatible to 23.0.3+incompatible (#9035) ... Bumps [github.com/docker/docker](https://github.com/docker/docker) from 20.10.23+incompatible to 23.0.3+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/docker/releases">github.com/docker/docker's releases</a>.</em></p> <blockquote> <h2>v23.0.3</h2> <h2>23.0.3</h2> <blockquote> <p><strong>Note</strong></p> <p>Due to an issue with CentOS 9 Stream's package repositories, packages for CentOS 9 are currently unavailable. Packages for CentOS 9 may be added later, or as part of the next (23.0.4) patch release.</p> </blockquote> <h3>Bug fixes and enhancements</h3> <ul> <li>Fixed a number of issues that can cause Swarm encrypted overlay networks to fail to uphold their guarantees, addressing <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841">CVE-2023-28841</a>, <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840">CVE-2023-28840</a>, and <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842">CVE-2023-28842</a>. <ul> <li>A lack of kernel support for encrypted overlay networks now reports as an error.</li> <li>Encrypted overlay networks are eagerly set up, rather than waiting for multiple nodes to attach.</li> <li>Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9 through the use of the <code>xt_bpf</code> kernel module.</li> <li>Users of Swarm overlay networks should review <a href="https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw">GHSA-vwm3-crmr-xfxw</a> to ensure that unintentional exposure has not occurred.</li> </ul> </li> </ul> <h3>Packaging Updates</h3> <ul> <li>Update containerd to <a href="https://github.com/containerd/containerd/releases/tag/v1.6.20">v1.6.20</a>.</li> <li>Update runc to <a href="https://github.com/opencontainers/runc/releases/tag/v1.1.5">v1.1.5</a>.</li> </ul> <h2>v23.0.2</h2> <h2>23.0.2</h2> <p>For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:</p> <ul> <li><a href="https://github.com/docker/cli/milestone/75?closed=1">docker/cli, 23.0.2 milestone</a></li> <li><a href="https://github.com/moby/moby/milestone/114?closed=1">moby/moby, 23.0.2 milestone</a></li> </ul> <h3>Bug fixes and enhancements</h3> <ul> <li>Fully resolve missing checks for <code>apparmor_parser</code> when an AppArmor enabled kernel is detected. <a href="https://redirect.github.com/containerd/containerd/pull/8087">containerd/containerd#8087</a>, <a href="https://redirect.github.com/moby/moby/pull/45043">moby/moby#45043</a></li> <li>Ensure that credentials are redacted from Git URLs when generating BuildKit buildinfo. Fixes <a href="https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc">CVE-2023-26054</a>. <a href="https://redirect.github.com/moby/moby/pull/45110">moby/moby#45110</a></li> <li>Fix anonymous volumes created by a <code>VOLUME</code> line in a Dockerfile being excluded from volume prune. <a href="https://redirect.github.com/moby/moby/pull/45159">moby/moby#45159</a></li> <li>Fix a failure to properly propagate errors during removal of volumes on a Swarm node. <a href="https://redirect.github.com/moby/moby/pull/45155">moby/moby#45155</a></li> <li>Temporarily work around a bug in BuildKit <code>COPY --link</code> by disabling mergeop/diffop optimization. <a href="https://redirect.github.com/moby/moby/pull/45112">moby/moby#45112</a></li> <li>Properly clean up child tasks when a parent Swarm job is removed. <a href="https://redirect.github.com/moby/swarmkit/pull/3112">moby/swarmkit#3112</a>, <a href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li> <li>Fix Swarm service creation logic so that both a GenericResource and a non-default network can be used together. <a href="https://redirect.github.com/moby/swarmkit/pull/3082">moby/swarmkit#3082</a>, <a href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li> <li>Fix Swarm CSI support requiring the CSI plugin to offer staging endpoints in order to publish a volume. <a href="https://redirect.github.com/moby/swarmkit/pull/3116">moby/swarmkit#3116</a>, <a href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li> <li>Fix a panic caused by log buffering in some configurations. <a href="https://redirect.github.com/containerd/fifo/pull/47">containerd/fifo#47</a>, <a href="https://redirect.github.com/moby/moby/pull/45051">moby/moby#45051</a></li> <li>Log errors in the REST to Swarm gRPC API translation layer at the debug level to reduce redundancy and noise. <a href="https://redirect.github.com/moby/moby/pull/45016">moby/moby#45016</a></li> <li>Fix a DNS resolution issue affecting containers created with <code>--dns-opt</code> or <code>--dns-search</code> when <code>systemd-resolved</code> is used outside the container. <a href="https://redirect.github.com/moby/moby/pull/45000">moby/moby#45000</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="59118bff50"><code>59118bf</code></a> Merge pull request from GHSA-232p-vwff-86mp</li> <li><a href="219f21bf07"><code>219f21b</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/45196">#45196</a> from vvoland/integration-restart-race-23</li> <li><a href="b87f7f18b8"><code>b87f7f1</code></a> libnet/d/overlay: insert the input-drop rule</li> <li><a href="c6bf3071fe"><code>c6bf307</code></a> StartWithLogFile: Fix d.cmd race</li> <li><a href="7f49ca259b"><code>7f49ca2</code></a> TestDaemonRestartKillContainers: Fix loop capture</li> <li><a href="98cbcb8003"><code>98cbcb8</code></a> libnet/d/overlay: add BPF-powered VNI matcher</li> <li><a href="5c5fac2374"><code>5c5fac2</code></a> libnet/d/overlay: extract VNI match rule builder</li> <li><a href="c492a22287"><code>c492a22</code></a> libn/d/overlay: enforce encryption on sandbox init</li> <li><a href="018edb0284"><code>018edb0</code></a> libnet/d/overlay: document some encryption code</li> <li><a href="a1fd2f22f6"><code>a1fd2f2</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/45157">#45157</a> from thaJeztah/23.0_backport_update_shfmt</li> <li>Additional commits viewable in <a href="https://github.com/docker/docker/compare/v20.10.23...v23.0.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago