294 Commits (416e01ca8e8f6e606135ea7b18f9db3393345ede)

Author	SHA1	Message	Date
Salva Corts	15af77ba83	Remove Prometheus dependency for push pkg (#9937) ... **What this PR does / why we need it**: In https://github.com/grafana/loki/pull/9694, we modified the `push` pkg to import Prometheus as a dependency to use the `labels.Labels` type for the entries' non-indexed labels. Having Prometheus as a dependency is problematic since any project importing the `push` pkg will need to import Prometheus as a result. In fact, this is one of the reasons why the `push` pkg was extracted from Loki in the first place (https://github.com/grafana/loki/pull/8259). This PR removes the dependency of Prometheus from the `push` pkg by copying some bits of the implementation for Prometheus' `labels.Labels`. We copy: - The Labels struct definition - The JSON Marshaling and Unmarshaling methods for the labels. We need this so labels are encoded as maps instead of an array of objects. --- **Notes for reviewers:** - To implement the JSON Marshaling and Unmarshaling methods the `push` pkg now depends on `golang.org/x/exp`. I think it should be fine for projects importing the `push` pkg to also depend on `golang.org/x/exp`, right?	3 years ago
Vladyslav Diachenko	be1a9c4ec5	Revert "updated to the latest version of dskit" (#9953) ... Reverts grafana/loki#9920	3 years ago
dependabot[bot]	89d00fbccd	Bump golang.org/x/oauth2 from 0.7.0 to 0.10.0 (#9903) ... Bumps [golang.org/x/oauth2](https://github.com/golang/oauth2) from 0.7.0 to 0.10.0. <details> <summary>Commits</summary> <ul> <li><a href="ec5679f607"><code>ec5679f</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="989acb1bfe"><code>989acb1</code></a> all: update dependencies to their latest versions</li> <li><a href="2323c81c8d"><code>2323c81</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="839de2255f"><code>839de22</code></a> google: don't check for IsNotExist for well-known file</li> <li><a href="0690208dba"><code>0690208</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="451d5d662f"><code>451d5d6</code></a> internal: remove repeated definite articles</li> <li><a href="cfe200d5bb"><code>cfe200d</code></a> oauth2: parse RFC 6749 error response</li> <li>See full diff in <a href="https://github.com/golang/oauth2/compare/v0.7.0...v0.10.0">compare view</a></li> </ul> </details> <br />	3 years ago
Callum Styan	4d3b15ae89	Implement probabilistic topk via count min sketch and min heap (#9882) ... This PR currently implements the following structures: - **Count Min Sketch**: http://dimacs.rutgers.edu/~graham/pubs/papers/cmencyc.pdf - **sketch-bf**: https://ietresearch.onlinelibrary.wiley.com/doi/epdf/10.1049/ell2.12482 improvements to the heap usage for Count Min Sketch - HeavyKeeper: https://www.usenix.org/system/files/conference/atc18/atc18-gong.pdf I also read and evaluated the following: - topkapi: https://www.cs.rice.edu/~as143/Papers/topkapi.pdf - space saving algorithm: https://www.cse.ust.hk/~raywong/comp5331/References/EfficientComputationOfFrequentAndTop-kElementsInDataStreams.pdf **Description**: As part of our work to ensure every query type is parallelizable we started exploring probabilistic data structures as a way to reduce memory consumption and allow merging of partial results after sharding of queries. In this PR I have implemented a few sketch structures as part of investigating structures that are applicable to topk queries. Unfortunately while many papers made claims of improved performance over the original count min sketch paper, topkapi and heavy keeper either didn't behave as expected or were not mergeable while keeping the same degree of accuracy. Count min sketch when using conservative updates (which vastly reduces error over counting, especially for low flows), also can't keep the same degree of accuracy, but it is still more accurate after merging than heavy keeper. I've also applied some of the principles outlined in the sketchbf paper related to reducing the # of heap operations required when observing events into the sketch, which sped up processing in my benchmark of 100k unique streams each with 1-2k randomized # of occurrences by nearly 3x. --------- Signed-off-by: Callum Styan <callumstyan@gmail.com> Co-authored-by: Karsten Jeschkies <karsten.jeschkies@grafana.com>	3 years ago
Salva Corts	aae13c376d	Add metadata to push payload (#9694) ... **What this PR does / why we need it**: We are adding support for attaching labels to each log line. This is one of the series of the PRs broken up to make it easier to review changes. This PR updates the push payload to send labels with each log entry optionally. The log labels are supposed to be in the same format as the stream labels. Just to put it out, here is how it would look for proto and json push payload with same data: **proto(`endpoint`: `(/loki/api/v1/push|/api/prom/push)`, `Content-Type`: `application/x-protobuf`)**(payload built using [push.Stream](4cd1246b88/pkg/push/types.go (L12))): ``` push.Stream{ Entries: []logproto.Entry{ { Timestamp: time.Unix(0, 1688515200000000000), Line: "log line", Labels: `{foo="bar"}`, }, }, Labels: `{app="test"}`, } ``` **v1(`endpoint`: `/loki/api/v1/push`, `Content-Type`: `application/json`)**: ```json { "streams": [{ "stream": { "app": "test" }, "values": [ ["1688515200000000000", "log line", { "foo": "bar" }] ] }] } ``` **legacy-json(`/api/prom/push`, `Content-Type`: `application/json`)**: ```json { "streams": [{ "labels": "{app=\"test\"}", "entries": [{ "ts": "2023-07-05T00:00:00.000000000Z", "line": "log line", "labels": "{foo=\"bar\"}" }] }] } ``` **Which issue(s) this PR fixes**: **Special notes for your reviewer**: We may need to add more thoughtful tests. **Checklist** - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [ ] Documentation added - [x] Tests updated - [ ] `CHANGELOG.md` updated - [ ] Changes that require user attention or interaction to upgrade are documented in `docs/sources/upgrading/_index.md` - [ ] For Helm chart changes bump the Helm chart version in `production/helm/loki/Chart.yaml` and update `production/helm/loki/CHANGELOG.md` and `production/helm/loki/README.md`. [Example PR](d10549e3ec) --------- Co-authored-by: Sandeep Sukhani <sandeep.d.sukhani@gmail.com>	3 years ago
Vladyslav Diachenko	3243676f4c	updated to the latest version of dskit (#9920) ... **What this PR does / why we need it**: Updated Loki with the latest version of dskit **Checklist** - [ ] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [ ] Documentation added - [ ] Tests updated - [ ] `CHANGELOG.md` updated - [ ] If the change is worth mentioning in the release notes, add `add-to-release-notes` label - [ ] Changes that require user attention or interaction to upgrade are documented in `docs/sources/upgrading/_index.md` - [ ] For Helm chart changes bump the Helm chart version in `production/helm/loki/Chart.yaml` and update `production/helm/loki/CHANGELOG.md` and `production/helm/loki/README.md`. [Example PR](d10549e3ec) --------- Signed-off-by: Vladyslav Diachenko <vlad.diachenko@grafana.com>	3 years ago
Christian Rohmann	d04dc31f92	Bump tail dependency to address issue in retry logic (#9915) ... **What this PR does / why we need it**: This bumps the grafana/tail version used, mostly to address an issue with the retry logic (https://github.com/grafana/tail/pull/16) **Which issue(s) this PR fixes**: Fixes #9864 #9877 #9869, maybe others **Special notes for your reviewer**: I did NOT add a note about this dependency bump in the changelog. Let me know if you want me to add that ... or kindly add that line yourself. **Checklist** - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [ ] Documentation added - [ ] Tests updated - [ ] `CHANGELOG.md` updated - [ ] If the change is worth mentioning in the release notes, add `add-to-release-notes` label - [ ] Changes that require user attention or interaction to upgrade are documented in `docs/sources/upgrading/_index.md` - [ ] For Helm chart changes bump the Helm chart version in `production/helm/loki/Chart.yaml` and update `production/helm/loki/CHANGELOG.md` and `production/helm/loki/README.md`. [Example PR](d10549e3ec)	3 years ago
dependabot[bot]	0d9a124e69	Bump github.com/alicebob/miniredis/v2 from 2.30.2 to 2.30.4 (#9850) ... Bumps [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) from 2.30.2 to 2.30.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/alicebob/miniredis/releases">github.com/alicebob/miniredis/v2's releases</a>.</em></p> <blockquote> <h2>fix ZADD, fix COPY, speedy SPOP</h2> <ul> <li>fix ZADD LT/LG (thanks <a href="https://github.com/sejin-P"><code>@​sejin-P</code></a>)</li> <li>fix COPY (thanks <a href="https://github.com/jerargus"><code>@​jerargus</code></a>)</li> <li>quicker SPOP</li> </ul> <h2>ZMSCORE, lua error_reply, lua cache</h2> <ul> <li>fix lua error_reply (thanks <a href="https://github.com/pkierski"><code>@​pkierski</code></a>)</li> <li>fix use of blocking functions in lua</li> <li>support for ZMSCORE (thanks <a href="https://github.com/lsgndln"><code>@​lsgndln</code></a>)</li> <li>lua cache (thanks <a href="https://github.com/tonyhb"><code>@​tonyhb</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md">github.com/alicebob/miniredis/v2's changelog</a>.</em></p> <blockquote> <h3>v2.30.4</h3> <ul> <li>fix ZADD LT/LG (thanks <a href="https://github.com/sejin-P"><code>@​sejin-P</code></a>)</li> <li>fix COPY (thanks <a href="https://github.com/jerargus"><code>@​jerargus</code></a>)</li> <li>quicker SPOP</li> </ul> <h3>v2.30.3</h3> <ul> <li>fix lua error_reply (thanks <a href="https://github.com/pkierski"><code>@​pkierski</code></a>)</li> <li>fix use of blocking functions in lua</li> <li>support for ZMSCORE (thanks <a href="https://github.com/lsgndln"><code>@​lsgndln</code></a>)</li> <li>lua cache (thanks <a href="https://github.com/tonyhb"><code>@​tonyhb</code></a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="082add4914"><code>082add4</code></a> changelog</li> <li><a href="1dfc2776b5"><code>1dfc277</code></a> quicker SPOP</li> <li><a href="fb75409cf5"><code>fb75409</code></a> do proper list copy</li> <li><a href="f507fa8d65"><code>f507fa8</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/330">#330</a> from sejin-P/ZADD-LT-default-value</li> <li><a href="b0d3aeee12"><code>b0d3aee</code></a> fix; check value existence when applying LT GT option to ZADD</li> <li><a href="df419454ee"><code>df41945</code></a> gofmt error</li> <li><a href="ae47488375"><code>ae47488</code></a> typo</li> <li><a href="d6eb001ed5"><code>d6eb001</code></a> update changelog</li> <li><a href="a946a99f2c"><code>a946a99</code></a> use the cleaner variable to get the result length</li> <li><a href="a3211dedea"><code>a3211de</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/328">#328</a> from tonyhb/perf/precompile-lua-functions</li> <li>Additional commits viewable in <a href="https://github.com/alicebob/miniredis/compare/v2.30.2...v2.30.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	579e54228e	Bump github.com/prometheus/client_golang from 1.15.1 to 1.16.0 (#9794) ... Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.15.1 to 1.16.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/releases">github.com/prometheus/client_golang's releases</a>.</em></p> <blockquote> <h2>v1.16.0</h2> <h2>What's Changed</h2> <ul> <li>[BUGFIX] api: Switch to POST for LabelNames, Series, and QueryExemplars. <a href="https://redirect.github.com/prometheus/client_golang/issues/1252">#1252</a></li> <li>[BUGFIX] api: Fix undefined execution order in return statements. <a href="https://redirect.github.com/prometheus/client_golang/issues/1260">#1260</a></li> <li>[BUGFIX] native histograms: Fix bug in bucket key calculation. <a href="https://redirect.github.com/prometheus/client_golang/issues/1279">#1279</a></li> <li>[ENHANCEMENT] Reduce constrainLabels allocations for all metrics. <a href="https://redirect.github.com/prometheus/client_golang/issues/1272">#1272</a></li> <li>[ENHANCEMENT] promhttp: Add process start time header for scrape efficiency. <a href="https://redirect.github.com/prometheus/client_golang/issues/1278">#1278</a></li> <li>[ENHANCEMENT] promlint: Improve metricUnits runtime. <a href="https://redirect.github.com/prometheus/client_golang/issues/1286">#1286</a></li> </ul> <!-- raw HTML omitted --> <ul> <li>Merge v1.15 to main by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1250">prometheus/client_golang#1250</a></li> <li>Switch to POST for LabelNames, Series, and QueryExemplars to DoGetFallback by <a href="https://github.com/jacksontj"><code>@​jacksontj</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1252">prometheus/client_golang#1252</a></li> <li>✏️ [collectors]: fix typo in test assertion by <a href="https://github.com/vegerot"><code>@​vegerot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1153">prometheus/client_golang#1153</a></li> <li>Added interactive tutorial [kubeCon] by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1255">prometheus/client_golang#1255</a></li> <li>Fixed tutorial. by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1256">prometheus/client_golang#1256</a></li> <li>Bump golang.org/x/sys from 0.6.0 to 0.7.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1265">prometheus/client_golang#1265</a></li> <li>Cleanup proto use in tests by <a href="https://github.com/SuperQ"><code>@​SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1264">prometheus/client_golang#1264</a></li> <li>Fix tutorial on WSL-based systems by <a href="https://github.com/marevers"><code>@​marevers</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1257">prometheus/client_golang#1257</a></li> <li>Fix undefined execution order in return statements by <a href="https://github.com/PiotrLewandowski323"><code>@​PiotrLewandowski323</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1260">prometheus/client_golang#1260</a></li> <li>Merge release 1.15.1 to main by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1267">prometheus/client_golang#1267</a></li> <li>GitHub Workflows security hardening by <a href="https://github.com/sashashura"><code>@​sashashura</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1180">prometheus/client_golang#1180</a></li> <li>add process start time header to client_golang prometheus by <a href="https://github.com/logicalhan"><code>@​logicalhan</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1278">prometheus/client_golang#1278</a></li> <li>Fix bug in bucket key calculation by <a href="https://github.com/beorn7"><code>@​beorn7</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1279">prometheus/client_golang#1279</a></li> <li>Bump github.com/prometheus/procfs from 0.9.0 to 0.10.1 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1283">prometheus/client_golang#1283</a></li> <li>Reduce constrainLabels allocations by <a href="https://github.com/khasanovbi"><code>@​khasanovbi</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1272">prometheus/client_golang#1272</a></li> <li>added circleci as gh action YAML by <a href="https://github.com/krishnaduttPanchagnula"><code>@​krishnaduttPanchagnula</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1281">prometheus/client_golang#1281</a></li> <li>Improve metricUnits runtime by <a href="https://github.com/avlitman"><code>@​avlitman</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1286">prometheus/client_golang#1286</a></li> <li>Moving fully to GH actions. by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1288">prometheus/client_golang#1288</a></li> <li>Fix docstring references to renamed native histogram fields / functions. by <a href="https://github.com/juliusv"><code>@​juliusv</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1290">prometheus/client_golang#1290</a></li> <li>Fixed README &amp; CHANGELOG; Added fmt makefile command (+bingo) for easier contributions. by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1289">prometheus/client_golang#1289</a></li> <li></li> </ul> <!-- raw HTML omitted --> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/vegerot"><code>@​vegerot</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1153">prometheus/client_golang#1153</a></li> <li><a href="https://github.com/marevers"><code>@​marevers</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1257">prometheus/client_golang#1257</a></li> <li><a href="https://github.com/PiotrLewandowski323"><code>@​PiotrLewandowski323</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1260">prometheus/client_golang#1260</a></li> <li><a href="https://github.com/sashashura"><code>@​sashashura</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1180">prometheus/client_golang#1180</a></li> <li><a href="https://github.com/logicalhan"><code>@​logicalhan</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1278">prometheus/client_golang#1278</a></li> <li><a href="https://github.com/khasanovbi"><code>@​khasanovbi</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1272">prometheus/client_golang#1272</a></li> <li><a href="https://github.com/krishnaduttPanchagnula"><code>@​krishnaduttPanchagnula</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1281">prometheus/client_golang#1281</a></li> <li><a href="https://github.com/avlitman"><code>@​avlitman</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_golang/pull/1286">prometheus/client_golang#1286</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_golang/compare/v1.15.1...v1.16.0">https://github.com/prometheus/client_golang/compare/v1.15.1...v1.16.0</a></p> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md">github.com/prometheus/client_golang's changelog</a>.</em></p> <blockquote> <h2>1.16.0 / 2023-06-15</h2> <ul> <li>[BUGFIX] api: Switch to POST for LabelNames, Series, and QueryExemplars. <a href="https://redirect.github.com/prometheus/client_golang/issues/1252">#1252</a></li> <li>[BUGFIX] api: Fix undefined execution order in return statements. <a href="https://redirect.github.com/prometheus/client_golang/issues/1260">#1260</a></li> <li>[BUGFIX] native histograms: Fix bug in bucket key calculation. <a href="https://redirect.github.com/prometheus/client_golang/issues/1279">#1279</a></li> <li>[ENHANCEMENT] Reduce constrainLabels allocations for all metrics. <a href="https://redirect.github.com/prometheus/client_golang/issues/1272">#1272</a></li> <li>[ENHANCEMENT] promhttp: Add process start time header for scrape efficiency. <a href="https://redirect.github.com/prometheus/client_golang/issues/1278">#1278</a></li> <li>[ENHANCEMENT] promlint: Improve metricUnits runtime. <a href="https://redirect.github.com/prometheus/client_golang/issues/1286">#1286</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="3583c1e1d0"><code>3583c1e</code></a> Cut v1.16.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1292">#1292</a>)</li> <li><a href="2feda42e44"><code>2feda42</code></a> Fixed README &amp; CHANGELOG; Added fmt makefile command (+bingo) for easier cont...</li> <li><a href="5b9cf9c6a8"><code>5b9cf9c</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1290">#1290</a> from prometheus/fix-nh-docstring-refs</li> <li><a href="1b19d5f458"><code>1b19d5f</code></a> Fix docstring references to renamed native histogram fields / functions.</li> <li><a href="7352ab7f80"><code>7352ab7</code></a> Moving fully to GH actions. (<a href="https://redirect.github.com/prometheus/client_golang/issues/1288">#1288</a>)</li> <li><a href="e4ff34d23e"><code>e4ff34d</code></a> Improve metricUnits runtime (<a href="https://redirect.github.com/prometheus/client_golang/issues/1286">#1286</a>)</li> <li><a href="781ea28024"><code>781ea28</code></a> added circleci as gh action YAML (<a href="https://redirect.github.com/prometheus/client_golang/issues/1281">#1281</a>)</li> <li><a href="a09a1d34cb"><code>a09a1d3</code></a> Reduce constrainLabels allocations (<a href="https://redirect.github.com/prometheus/client_golang/issues/1272">#1272</a>)</li> <li><a href="8840afcfc2"><code>8840afc</code></a> Bump github.com/prometheus/procfs from 0.9.0 to 0.10.1 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1283">#1283</a>)</li> <li><a href="5e78d5f66b"><code>5e78d5f</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1279">#1279</a> from prometheus/beorn7/histogram</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/client_golang/compare/v1.15.1...v1.16.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	b4dd0ca432	Bump github.com/alicebob/miniredis/v2 from 2.30.0 to 2.30.2 (#9461) ... Bumps [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) from 2.30.0 to 2.30.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/alicebob/miniredis/releases">github.com/alicebob/miniredis/v2's releases</a>.</em></p> <blockquote> <h2>XADD minid, BLMOVE, COMMAND fix, XREAD fix</h2> <ul> <li>support MINID in XADD (thanks <a href="https://github.com/nathan-cormier"><code>@​nathan-cormier</code></a>)</li> <li>support BLMOVE (thanks <a href="https://github.com/sevein"><code>@​sevein</code></a>)</li> <li>fix COMMAND (thanks <a href="https://github.com/pje"><code>@​pje</code></a>)</li> <li>fix 'XREAD ... $' on a non-existing stream</li> </ul> <h2>SET NX GET</h2> <ul> <li>support SET NX GET special case</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md">github.com/alicebob/miniredis/v2's changelog</a>.</em></p> <blockquote> <h3>v2.30.2</h3> <ul> <li>support MINID in XADD (thanks <a href="https://github.com/nathan-cormier"><code>@​nathan-cormier</code></a>)</li> <li>support BLMOVE (thanks <a href="https://github.com/sevein"><code>@​sevein</code></a>)</li> <li>fix COMMAND (thanks <a href="https://github.com/pje"><code>@​pje</code></a>)</li> <li>fix 'XREAD ... $' on a non-existing stream</li> </ul> <h3>v2.30.1</h3> <ul> <li>support SET NX GET special case</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="d807499fc3"><code>d807499</code></a> update changelog</li> <li><a href="4be3b8260d"><code>4be3b82</code></a> fix 'XREAD ... $' on a non-existing stream</li> <li><a href="2f1aeb304a"><code>2f1aeb3</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/323">#323</a> from pje/pje/bring-back-273-fix</li> <li><a href="c71c3127c1"><code>c71c312</code></a> Bring back the COMMAND response fix introduced in <a href="https://redirect.github.com/alicebob/miniredis/issues/273">#273</a></li> <li><a href="84b7146f54"><code>84b7146</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/321">#321</a> from sevein/dev/cmd-list-blmove</li> <li><a href="93ce01ac66"><code>93ce01a</code></a> Implement BLMOVE</li> <li><a href="9077c868d4"><code>9077c86</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/318">#318</a> from nathan-cormier/minid</li> <li><a href="a80f1409fc"><code>a80f140</code></a> Support MINID in XADD</li> <li><a href="e5c9dd403d"><code>e5c9dd4</code></a> changelog</li> <li><a href="5c16d558d3"><code>5c16d55</code></a> support SET NX GET special case</li> <li>Additional commits viewable in <a href="https://github.com/alicebob/miniredis/compare/v2.30.0...v2.30.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Dylan Guedes	e81dd8aed2	Loki: Bump `dskit` to inherit new backoff configs (#9484) ... **What this PR does / why we need it**: Bump `dskit` to inherit https://github.com/grafana/dskit/pull/296. It will allow us to configure custom backoff timeouts. **Which issue(s) this PR fixes**: N/A	3 years ago
dependabot[bot]	e46e650b50	Bump github.com/prometheus/client_golang from 1.14.0 to 1.15.1 (#9386) ... Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.14.0 to 1.15.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/releases">github.com/prometheus/client_golang's releases</a>.</em></p> <blockquote> <h2>v1.15.1</h2> <h2>Changes</h2> <ul> <li>[BUGFIX] Fixed promhttp.Instrument* handlers wrongly trying to attach exemplar to unsupported metrics (e.g. summary), <br /> causing panics <a href="https://redirect.github.com/prometheus/client_golang/issues/1253">#1253</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_golang/compare/v1.15.0...v1.15.1">https://github.com/prometheus/client_golang/compare/v1.15.0...v1.15.1</a></p> <h2>v1.15.0</h2> <h2>Changed</h2> <p>[BUGFIX] Fix issue with atomic variables on ppc64le <a href="https://redirect.github.com/prometheus/client_golang/issues/1171">#1171</a> [BUGFIX] Support for multiple samples within same metric <a href="https://redirect.github.com/prometheus/client_golang/issues/1181">#1181</a> [BUGFIX] Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149 <a href="https://redirect.github.com/prometheus/client_golang/issues/1187">#1187</a> [ENHANCEMENT] Add exemplars and middleware examples <a href="https://redirect.github.com/prometheus/client_golang/issues/1173">#1173</a> [ENHANCEMENT] Add more context to &quot;duplicate label names&quot; error to enable debugging <a href="https://redirect.github.com/prometheus/client_golang/issues/1177">#1177</a> [ENHANCEMENT] Add constrained labels and constrained variant for all MetricVecs <a href="https://redirect.github.com/prometheus/client_golang/issues/1151">#1151</a> [ENHANCEMENT] Moved away from deprecated github.com/golang/protobuf package <a href="https://redirect.github.com/prometheus/client_golang/issues/1183">#1183</a> [ENHANCEMENT] Add possibility to dynamically get label values for http instrumentation <a href="https://redirect.github.com/prometheus/client_golang/issues/1066">#1066</a> [ENHANCEMENT] Add ability to Pusher to add custom headers <a href="https://redirect.github.com/prometheus/client_golang/issues/1218">#1218</a> [ENHANCEMENT] api: Extend and improve efficiency of json-iterator usage <a href="https://redirect.github.com/prometheus/client_golang/issues/1225">#1225</a> [ENHANCEMENT] Added (official) support for go 1.20 <a href="https://redirect.github.com/prometheus/client_golang/issues/1234">#1234</a> [ENHANCEMENT] timer: Added support for exemplars <a href="https://redirect.github.com/prometheus/client_golang/issues/1233">#1233</a> [ENHANCEMENT] Filter expected metrics as well in CollectAndCompare <a href="https://redirect.github.com/prometheus/client_golang/issues/1143">#1143</a> [ENHANCEMENT] ⚠️ Only set start/end if time is not Zero. This breaks compatibility in experimental api package. If you strictly depend on empty time.Time as actual value, the behavior is now changed <a href="https://redirect.github.com/prometheus/client_golang/issues/1238">#1238</a></p> <!-- raw HTML omitted --> <ul> <li>Merge release 1.14 to main by <a href="https://github.com/bwplotka"><code>@​bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1164">prometheus/client_golang#1164</a></li> <li>Fix typo in doc comment by <a href="https://github.com/beorn7"><code>@​beorn7</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1166">prometheus/client_golang#1166</a></li> <li>Fix issue with atomic variables on ppc64le by <a href="https://github.com/beorn7"><code>@​beorn7</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1171">prometheus/client_golang#1171</a></li> <li>examples: Add exemplars and middleware examples by <a href="https://github.com/jessicalins"><code>@​jessicalins</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1173">prometheus/client_golang#1173</a></li> <li>Add context to &quot;duplicate label names&quot; to enable debugging by <a href="https://github.com/SpencerMalone"><code>@​SpencerMalone</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1177">prometheus/client_golang#1177</a></li> <li>Add constrained labels and Constrained variant for all MetricVecs by <a href="https://github.com/Okhoshi"><code>@​Okhoshi</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1151">prometheus/client_golang#1151</a></li> <li>Support for multiple samples within same metric by <a href="https://github.com/machadovilaca"><code>@​machadovilaca</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1181">prometheus/client_golang#1181</a></li> <li>Replace deprecated github.com/golang/protobuf package by <a href="https://github.com/zhsj"><code>@​zhsj</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1183">prometheus/client_golang#1183</a></li> <li>Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149 by <a href="https://github.com/b4bay"><code>@​b4bay</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1187">prometheus/client_golang#1187</a></li> <li>typo fix by <a href="https://github.com/ibreakthecloud"><code>@​ibreakthecloud</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1178">prometheus/client_golang#1178</a></li> <li>Add possibility to dynamically get label values for http instrumentation by <a href="https://github.com/Okhoshi"><code>@​Okhoshi</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1066">prometheus/client_golang#1066</a></li> <li>Bump github.com/cespare/xxhash/v2 from 2.1.2 to 2.2.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1199">prometheus/client_golang#1199</a></li> <li>Bump github.com/prometheus/procfs from 0.8.0 to 0.9.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1198">prometheus/client_golang#1198</a></li> <li>Bump golang.org/x/sys from 0.3.0 to 0.4.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1217">prometheus/client_golang#1217</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@​prombot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1213">prometheus/client_golang#1213</a></li> <li>Bump github.com/prometheus/common from 0.37.0 to 0.39.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1197">prometheus/client_golang#1197</a></li> <li>Add <code>Header</code> method to Pusher for custom header by <a href="https://github.com/songjiayang"><code>@​songjiayang</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1218">prometheus/client_golang#1218</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@​prombot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1224">prometheus/client_golang#1224</a></li> <li>api: Extend and improve json-iterator usage by <a href="https://github.com/beorn7"><code>@​beorn7</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1225">prometheus/client_golang#1225</a></li> <li>Indent example in godoc consistently by <a href="https://github.com/lamida"><code>@​lamida</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1226">prometheus/client_golang#1226</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md">github.com/prometheus/client_golang's changelog</a>.</em></p> <blockquote> <h2>Unreleased</h2> <h2>1.15.0 / 2023-04-13</h2> <h2>What's Changed</h2> <ul> <li>[BUGFIX] Fix issue with atomic variables on ppc64le <a href="https://redirect.github.com/prometheus/client_golang/issues/1171">#1171</a></li> <li>[BUGFIX] Support for multiple samples within same metric <a href="https://redirect.github.com/prometheus/client_golang/issues/1181">#1181</a></li> <li>[BUGFIX] Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149 <a href="https://redirect.github.com/prometheus/client_golang/issues/1187">#1187</a></li> <li>[ENHANCEMENT] Add exemplars and middleware examples <a href="https://redirect.github.com/prometheus/client_golang/issues/1173">#1173</a></li> <li>[ENHANCEMENT] Add more context to &quot;duplicate label names&quot; error to enable debugging <a href="https://redirect.github.com/prometheus/client_golang/issues/1177">#1177</a></li> <li>[ENHANCEMENT] Add constrained labels and constrained variant for all MetricVecs <a href="https://redirect.github.com/prometheus/client_golang/issues/1151">#1151</a></li> <li>[ENHANCEMENT] Moved away from deprecated github.com/golang/protobuf package <a href="https://redirect.github.com/prometheus/client_golang/issues/1183">#1183</a></li> <li>[ENHANCEMENT] Add possibility to dynamically get label values for http instrumentation <a href="https://redirect.github.com/prometheus/client_golang/issues/1066">#1066</a></li> <li>[ENHANCEMENT] Add ability to Pusher to add custom headers <a href="https://redirect.github.com/prometheus/client_golang/issues/1218">#1218</a></li> <li>[ENHANCEMENT] api: Extend and improve efficiency of json-iterator usage <a href="https://redirect.github.com/prometheus/client_golang/issues/1225">#1225</a></li> <li>[ENHANCEMENT] Added (official) support for go 1.20 <a href="https://redirect.github.com/prometheus/client_golang/issues/1234">#1234</a></li> <li>[ENHANCEMENT] timer: Added support for exemplars <a href="https://redirect.github.com/prometheus/client_golang/issues/1233">#1233</a></li> <li>[ENHANCEMENT] Filter expected metrics as well in CollectAndCompare <a href="https://redirect.github.com/prometheus/client_golang/issues/1143">#1143</a></li> <li>[ENHANCEMENT] ⚠️ Only set start/end if time is not Zero. This breaks compatibility in experimental api package. If you strictly depend on empty time.Time as actual value, the behavior is now changed <a href="https://redirect.github.com/prometheus/client_golang/issues/1238">#1238</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="4bbb297e54"><code>4bbb297</code></a> Cut 1.15.1 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1266">#1266</a>)</li> <li><a href="2eaffbdb02"><code>2eaffbd</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1253">#1253</a> from prometheus/fixpro</li> <li><a href="b8fdd239b2"><code>b8fdd23</code></a> Added clarification.</li> <li><a href="2ea234eef0"><code>2ea234e</code></a> Revert &quot;Remove unnecessary check if label is nil in observeWithExemplar (<a href="https://redirect.github.com/prometheus/client_golang/issues/1235">#1235</a>)&quot;</li> <li><a href="d7896d4bd0"><code>d7896d4</code></a> Cut v1.15.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1249">#1249</a>)</li> <li><a href="bba12b5514"><code>bba12b5</code></a> Bump github.com/prometheus/common from 0.41.0 to 0.42.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1244">#1244</a>)</li> <li><a href="9015fcfc2c"><code>9015fcf</code></a> Bump github.com/golang/protobuf from 1.5.2 to 1.5.3 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1245">#1245</a>)</li> <li><a href="1bb8cf8306"><code>1bb8cf8</code></a> Bump golang.org/x/sys from 0.5.0 to 0.6.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1246">#1246</a>)</li> <li><a href="ff7efedd43"><code>ff7efed</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1243">#1243</a> from prometheus/dependabot/go_modules/google.golang....</li> <li><a href="852a282f10"><code>852a282</code></a> Bump google.golang.org/protobuf from 1.28.1 to 1.30.0</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/client_golang/compare/v1.14.0...v1.15.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	405c523422	Bump github.com/prometheus/client_model from 0.3.0 to 0.4.0 (#9447) ... Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model) from 0.3.0 to 0.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_model/releases">github.com/prometheus/client_model's releases</a>.</em></p> <blockquote> <h2>0.4.0 / 2023-05-03</h2> <h2>What's Changed</h2> <ul> <li>Update proto tools by <a href="https://github.com/SuperQ"><code>@​SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/client_model/pull/64">prometheus/client_model#64</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/SuperQ"><code>@​SuperQ</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_model/pull/64">prometheus/client_model#64</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_model/compare/v0.3.0...v0.4.0">https://github.com/prometheus/client_model/compare/v0.3.0...v0.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="91c3945f2c"><code>91c3945</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_model/issues/64">#64</a> from prometheus/superq/update_proto</li> <li><a href="31ca668385"><code>31ca668</code></a> Update proto tools</li> <li>See full diff in <a href="https://github.com/prometheus/client_model/compare/v0.3.0...v0.4.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	d43c0bb23b	Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible (#9450) ... Bumps [github.com/docker/distribution](https://github.com/docker/distribution) from 2.8.1+incompatible to 2.8.2+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/distribution/releases">github.com/docker/distribution's releases</a>.</em></p> <blockquote> <h2>v2.8.2</h2> <h2>What's Changed</h2> <ul> <li>Revert registry/client: set <code>Accept: identity</code> header when getting layers by <a href="https://github.com/ndeloof"><code>@​ndeloof</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3783">distribution/distribution#3783</a></li> <li>Parse <code>http</code> forbidden as denied by <a href="https://github.com/vvoland"><code>@​vvoland</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3914">distribution/distribution#3914</a></li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2022-28391">CVE-2022-28391</a> by bumping alpine from 3.14 to 3.16 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> (<a href="https://redirect.github.com/distribution/distribution/pull/3650">#3650</a>)</li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2023-2253">CVE-2023-2253</a> runaway allocation on /v2/_catalog by <a href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a href="521ea3d973"><code>521ea3d9</code></a></li> <li>Fix panic in inmemory driver by <a href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li> <li>bump up golang version (alternative) by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li> <li>Dockerfile: update xx to v1.2.1 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li> <li>update to go1.19.9 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li> <li>Add code to handle pagination of parts. Fixes max layer size of 10GB bug by <a href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li> <li>Dockerfile: fix filenames of artifacts by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3911">distribution/distribution#3911</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2</a></p> <h2>v2.8.2-beta.2</h2> <h2>What's Changed</h2> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2022-28391">CVE-2022-28391</a> by bumping alpine from 3.14 to 3.16 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> (<a href="https://redirect.github.com/distribution/distribution/pull/3650">#3650</a>)</li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2023-2253">CVE-2023-2253</a> runaway allocation on /v2/_catalog by <a href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a href="521ea3d973"><code>521ea3d9</code></a></li> <li>Fix panic in inmemory driver by <a href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li> <li>bump up golang version (alternative) by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li> <li>Dockerfile: update xx to v1.2.1 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li> <li>update to go1.19.9 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li> <li>Add code to handle pagination of parts. Fixes max layer size of 10GB bug by <a href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li> <li>Dockerfile: fix filenames of artifacts by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3911">distribution/distribution#3911</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.2">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.2</a></p> <h2>v2.8.2-beta.1</h2> <h3><strong>NOTE: This is a pre-release that does not contain any artifacts!</strong></h3> <h2>What's Changed</h2> <ul> <li>Fix runaway allocation on /v2/_catalog by <a href="https://github.com/josegomezr"><code>@​josegomezr</code></a> <a href="521ea3d973"><code>521ea3d9</code></a></li> <li>Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3650">distribution/distribution#3650</a></li> <li>Fix panic in inmemory driver by <a href="https://github.com/wy65701436"><code>@​wy65701436</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li> <li>bump up golang version (alternative) by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li> <li>Dockerfile: update xx to v1.2.1 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li> <li>update to go1.19.9 by <a href="https://github.com/thaJeztah"><code>@​thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li> <li>Add code to handle pagination of parts. Fixes max layer size of 10GB bug by <a href="https://github.com/DavidSpek"><code>@​DavidSpek</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.1">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="7c354a4b40"><code>7c354a4</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3915">#3915</a> from distribution/2.8.2-release-notes</li> <li><a href="a173a9c625"><code>a173a9c</code></a> Add v2.8.2 release notes</li> <li><a href="4894d35ecc"><code>4894d35</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3914">#3914</a> from vvoland/handle-forbidden-28</li> <li><a href="f067f66d3d"><code>f067f66</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3783">#3783</a> from ndeloof/accept-encoding-28</li> <li><a href="483ad69da3"><code>483ad69</code></a> registry/errors: Parse http forbidden as denied</li> <li><a href="2b0f84df21"><code>2b0f84d</code></a> Revert &quot;registry/client: set Accept: identity header when getting layers&quot;</li> <li><a href="320d6a141f"><code>320d6a1</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3912">#3912</a> from distribution/2.8.2-beta.2-release-notes</li> <li><a href="5f3ca1b2fb"><code>5f3ca1b</code></a> Add release notes for 2.8.2-beta.2 release</li> <li><a href="cb840f63b3"><code>cb840f6</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3911">#3911</a> from thaJeztah/2.8_backport_fix_releaser_filenames</li> <li><a href="e884644fff"><code>e884644</code></a> Dockerfile: fix filenames of artifacts</li> <li>Additional commits viewable in <a href="https://github.com/docker/distribution/compare/v2.8.1...v2.8.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/loki/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	428b05d7b7	Bump github.com/imdario/mergo from 0.3.13 to 0.3.15 (#9439) ... Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from 0.3.13 to 0.3.15. <details> <summary>Commits</summary> <ul> <li><a href="fb3c082091"><code>fb3c082</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="c9e40b59db"><code>c9e40b5</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/227">#227</a> from eh-steve/should-not-dereference</li> <li><a href="acd16ec124"><code>acd16ec</code></a> Merge branch 'master' into should-not-dereference</li> <li><a href="62d1cf2897"><code>62d1cf2</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="dcef160919"><code>dcef160</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/226">#226</a> from ronaudinho/fix/202</li> <li><a href="404749e66d"><code>404749e</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="bd316d34ac"><code>bd316d3</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/221">#221</a> from zhiyu0729/issue220</li> <li><a href="5b9bbdb8b6"><code>5b9bbdb</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="90db0ad2f4"><code>90db0ad</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/170">#170</a> from mdeltour/fix/naming-typo</li> <li><a href="d19834bb68"><code>d19834b</code></a> Update stackaid dependencies for imdario/mergo</li> <li>Additional commits viewable in <a href="https://github.com/imdario/mergo/compare/v0.3.13...v0.3.15">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	3 years ago
dependabot[bot]	9cd6d079d1	Bump github.com/Azure/go-autorest/autorest from 0.11.28 to 0.11.29 (#9338) ... Bumps [github.com/Azure/go-autorest/autorest](https://github.com/Azure/go-autorest) from 0.11.28 to 0.11.29. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Azure/go-autorest/releases">github.com/Azure/go-autorest/autorest's releases</a>.</em></p> <blockquote> <h2>autorest/v0.11.29</h2> <p>Remove undefined behavior during return <a href="https://redirect.github.com/Azure/go-autorest/issues/723">#723</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="c2958ac74c"><code>c2958ac</code></a> Remove undefined behavior during return (<a href="https://redirect.github.com/Azure/go-autorest/issues/723">#723</a>)</li> <li><a href="553a90ae65"><code>553a90a</code></a> fix: enable update jwt via callback for workloadidentity (<a href="https://redirect.github.com/Azure/go-autorest/issues/719">#719</a>)</li> <li><a href="ee71315119"><code>ee71315</code></a> Update dependencies (<a href="https://redirect.github.com/Azure/go-autorest/issues/720">#720</a>)</li> <li><a href="9038e4a609"><code>9038e4a</code></a> feat: allow getting authorizer from existing file settings (<a href="https://redirect.github.com/Azure/go-autorest/issues/709">#709</a>)</li> <li><a href="79575dd7ba"><code>79575dd</code></a> Retract adal versions with token refresh errors (<a href="https://redirect.github.com/Azure/go-autorest/issues/716">#716</a>)</li> <li><a href="93a6fda0d7"><code>93a6fda</code></a> Update CI to latest Go and Ubuntu images (<a href="https://redirect.github.com/Azure/go-autorest/issues/717">#717</a>)</li> <li><a href="2fa44cb18b"><code>2fa44cb</code></a> Fix validation in resource id parsing (<a href="https://redirect.github.com/Azure/go-autorest/issues/704">#704</a>)</li> <li>See full diff in <a href="https://github.com/Azure/go-autorest/compare/autorest/v0.11.28...autorest/v0.11.29">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	3 years ago
dependabot[bot]	b3ca9fc219	Bump github.com/fatih/color from 1.14.1 to 1.15.0 (#9296) ... Bumps [github.com/fatih/color](https://github.com/fatih/color) from 1.14.1 to 1.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fatih/color/releases">github.com/fatih/color's releases</a>.</em></p> <blockquote> <h2>v1.15.0</h2> <h2>What's Changed</h2> <ul> <li>windows: enable virtual terminal processing, fixes <a href="https://redirect.github.com/fatih/color/issues/169">#169</a> by <a href="https://github.com/martinlindhe"><code>@​martinlindhe</code></a> in <a href="https://redirect.github.com/fatih/color/pull/186">fatih/color#186</a></li> <li>ci: update dependencies by <a href="https://github.com/fatih"><code>@​fatih</code></a> in <a href="https://redirect.github.com/fatih/color/pull/191">fatih/color#191</a></li> <li>Bump golang.org/x/sys from 0.5.0 to 0.6.0 by <a href="https://github.com/dependabot"><code>@​dependabot</code></a> in <a href="https://redirect.github.com/fatih/color/pull/189">fatih/color#189</a></li> <li>Refactor color_windows.go by <a href="https://github.com/pellared"><code>@​pellared</code></a> in <a href="https://redirect.github.com/fatih/color/pull/188">fatih/color#188</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/martinlindhe"><code>@​martinlindhe</code></a> made their first contribution in <a href="https://redirect.github.com/fatih/color/pull/186">fatih/color#186</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fatih/color/compare/v1.14.1...v1.15.0">https://github.com/fatih/color/compare/v1.14.1...v1.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="12126ed593"><code>12126ed</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/188">#188</a> from pellared/patch-1</li> <li><a href="770038b843"><code>770038b</code></a> Merge branch 'main' into patch-1</li> <li><a href="c5d9a2b926"><code>c5d9a2b</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/189">#189</a> from fatih/dependabot/go_modules/golang.org/x/sys-0.6.0</li> <li><a href="1ceb74688c"><code>1ceb746</code></a> Bump golang.org/x/sys from 0.5.0 to 0.6.0</li> <li><a href="66a1b893b7"><code>66a1b89</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/191">#191</a> from fatih/update-ci-deps</li> <li><a href="3228f5ab22"><code>3228f5a</code></a> ci: update dependencies</li> <li><a href="0226ec9472"><code>0226ec9</code></a> Refactor color_windows.go</li> <li><a href="d080a5b792"><code>d080a5b</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/186">#186</a> from martinlindhe/main</li> <li><a href="02ab2eaae1"><code>02ab2ea</code></a> windows: enable virtual terminal processing, fixes <a href="https://redirect.github.com/fatih/color/issues/169">#169</a></li> <li>See full diff in <a href="https://github.com/fatih/color/compare/v1.14.1...v1.15.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	bea5481a54	Bump github.com/klauspost/compress from 1.16.0 to 1.16.5 (#9281) ... Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.16.0 to 1.16.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/klauspost/compress/releases">github.com/klauspost/compress's releases</a>.</em></p> <blockquote> <h2>v1.16.5</h2> <h2>What's Changed</h2> <ul> <li>zstd: readByte needs to use io.ReadFull by <a href="https://github.com/jnoxon"><code>@​jnoxon</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/802">klauspost/compress#802</a></li> <li>gzip: Fix WriterTo after initial read by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/804">klauspost/compress#804</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jnoxon"><code>@​jnoxon</code></a> made their first contribution in <a href="https://redirect.github.com/klauspost/compress/pull/802">klauspost/compress#802</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.4...v1.16.5">https://github.com/klauspost/compress/compare/v1.16.4...v1.16.5</a></p> <h2>v1.16.4</h2> <h2>What's Changed</h2> <ul> <li>s2: Fix huge block overflow by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/779">klauspost/compress#779</a></li> <li>s2: Allow CustomEncoder fallback by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/780">klauspost/compress#780</a></li> <li>zstd: Fix amd64 not always detecting corrupt data by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/785">klauspost/compress#785</a></li> <li>zstd: Improve zstd best efficiency by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> and <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/784">klauspost/compress#784</a></li> <li>zstd: Make load(32|64)32 safer and smaller by <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/788">klauspost/compress#788</a></li> <li>zstd: Fix quick reject on long backmatches by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/787">klauspost/compress#787</a></li> <li>zstd: Revert table size change by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/789">klauspost/compress#789</a></li> <li>zstd: Respect WithAllLitEntropyCompression by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/792">klauspost/compress#792</a></li> <li>zstd: Fix back-referenced offset by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/793">klauspost/compress#793</a></li> <li>zstd: Load source value at start of loop by <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/794">klauspost/compress#794</a></li> <li>zstd: Shorten checksum code by <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/795">klauspost/compress#795</a></li> <li>zstd: Fix fallback on incompressible block by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/798">klauspost/compress#798</a></li> <li>gzhttp: Suppport ResponseWriter Unwrap() in gzhttp handler by <a href="https://github.com/jgimenez"><code>@​jgimenez</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/799">klauspost/compress#799</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jgimenez"><code>@​jgimenez</code></a> made their first contribution in <a href="https://redirect.github.com/klauspost/compress/pull/799">klauspost/compress#799</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.3...v1.16.4">https://github.com/klauspost/compress/compare/v1.16.3...v1.16.4</a></p> <h2>v1.16.3</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.2...v1.16.3">https://github.com/klauspost/compress/compare/v1.16.2...v1.16.3</a></p> <h2>v1.16.2</h2> <h2>What's Changed</h2> <ul> <li>Fix Goreleaser permissions by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/777">klauspost/compress#777</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.1...v1.16.2">https://github.com/klauspost/compress/compare/v1.16.1...v1.16.2</a></p> <h2>v1.16.1</h2> <h2>What's Changed</h2> <ul> <li>zstd: Speed up + improve best encoder by <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/776">klauspost/compress#776</a></li> <li>s2: Add Intel LZ4s converter by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/766">klauspost/compress#766</a></li> <li>gzhttp: Add BREACH mitigation by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/762">klauspost/compress#762</a></li> <li>gzhttp: Remove a few unneeded allocs by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/768">klauspost/compress#768</a></li> <li>gzhttp: Fix crypto/rand.Read usage by <a href="https://github.com/greatroar"><code>@​greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/770">klauspost/compress#770</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="ed6feffc3b"><code>ed6feff</code></a> gzip: Fix WriterTo after initial read (<a href="https://redirect.github.com/klauspost/compress/issues/804">#804</a>)</li> <li><a href="62dad8110a"><code>62dad81</code></a> readerWrapper: readByte needs to use io.ReadFull (<a href="https://redirect.github.com/klauspost/compress/issues/802">#802</a>)</li> <li><a href="b0f7a9437e"><code>b0f7a94</code></a> Update README.md</li> <li><a href="3c61d32490"><code>3c61d32</code></a> Allow access to internal ResponseWriter in gzhttp handler (<a href="https://redirect.github.com/klauspost/compress/issues/799">#799</a>)</li> <li><a href="9243a1faf0"><code>9243a1f</code></a> Update README.md</li> <li><a href="47eb6d4224"><code>47eb6d4</code></a> zstd: Fix fallback on incompressible block (<a href="https://redirect.github.com/klauspost/compress/issues/798">#798</a>)</li> <li><a href="5753c12f5f"><code>5753c12</code></a> zstd: Shorten checksum code (<a href="https://redirect.github.com/klauspost/compress/issues/795">#795</a>)</li> <li><a href="6c7dd07ffa"><code>6c7dd07</code></a> zstd: Load source value at start of loop (<a href="https://redirect.github.com/klauspost/compress/issues/794">#794</a>)</li> <li><a href="2a02ad2836"><code>2a02ad2</code></a> zstd: Fix back-referenced offset (<a href="https://redirect.github.com/klauspost/compress/issues/793">#793</a>)</li> <li><a href="dc198c145e"><code>dc198c1</code></a> zstd: Respect WithAllLitEntropyCompression (<a href="https://redirect.github.com/klauspost/compress/issues/792">#792</a>)</li> <li>Additional commits viewable in <a href="https://github.com/klauspost/compress/compare/v1.16.0...v1.16.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	5a102bcc1e	Bump github.com/IBM/ibm-cos-sdk-go from 1.9.4 to 1.10.0 (#9256) ... Bumps [github.com/IBM/ibm-cos-sdk-go](https://github.com/IBM/ibm-cos-sdk-go) from 1.9.4 to 1.10.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/IBM/ibm-cos-sdk-go/releases">github.com/IBM/ibm-cos-sdk-go's releases</a>.</em></p> <blockquote> <h2>Release 1.10.0</h2> <h2>Content</h2> <h3>Features</h3> <ul> <li>S3 Compatible Object Lock Support</li> <li>One Rate Active Plan Support</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/IBM/ibm-cos-sdk-go/blob/master/CHANGELOG.md">github.com/IBM/ibm-cos-sdk-go's changelog</a>.</em></p> <blockquote> <h2>1.10.0</h2> <h3>Content</h3> <h4>Features</h4> <ul> <li>S3 Compatible Object Lock Support</li> <li>One Rate Active Plan Support</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="3e0dffac4c"><code>3e0dffa</code></a> Release 1.10.0</li> <li>See full diff in <a href="https://github.com/IBM/ibm-cos-sdk-go/compare/v1.9.4...v1.10.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Periklis Tsirakidis	3abd260975	Bump dskit from 528d8a7 to 1725bcc (#9184)	3 years ago
dependabot[bot]	c91bfdf6fd	Bump github.com/minio/minio-go/v7 from 7.0.45 to 7.0.52 (#9208) ... Bumps [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) from 7.0.45 to 7.0.52. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/minio/minio-go/releases">github.com/minio/minio-go/v7's releases</a>.</em></p> <blockquote> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>Revert &quot;Add missing aws-chunked transfer encoding (<a href="https://redirect.github.com/minio/minio-go/issues/1803">#1803</a>)&quot; by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1804">minio/minio-go#1804</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.51...v7.0.52">https://github.com/minio/minio-go/compare/v7.0.51...v7.0.52</a></p> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>Fix listobjects with metadata by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1795">minio/minio-go#1795</a></li> <li>Add missing aws-chunked transfer encoding by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1803">minio/minio-go#1803</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.50...v7.0.51">https://github.com/minio/minio-go/compare/v7.0.50...v7.0.51</a></p> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>Update minio.Core API by <a href="https://github.com/donatello"><code>@​donatello</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1764">minio/minio-go#1764</a></li> <li>remove sse-s3 header in completeMultipartUpload by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1777">minio/minio-go#1777</a></li> <li>upgrade all deps by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1778">minio/minio-go#1778</a></li> <li>allow setting region via custom function by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1786">minio/minio-go#1786</a></li> <li>allow virtual host style for GetBucketLocation API, if requested by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1785">minio/minio-go#1785</a></li> <li>Add ap-south-2 to endpoints by <a href="https://github.com/Prajithp"><code>@​Prajithp</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1781">minio/minio-go#1781</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Prajithp"><code>@​Prajithp</code></a> made their first contribution in <a href="https://redirect.github.com/minio/minio-go/pull/1781">minio/minio-go#1781</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.49...v7.0.50">https://github.com/minio/minio-go/compare/v7.0.49...v7.0.50</a></p> <h2>Bugfix Release</h2> <h2>What's Changed</h2> <ul> <li>support If-Match/If-None-Match for PUT operations by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1772">minio/minio-go#1772</a></li> <li>upgrade minio-go deps by <a href="https://github.com/harshavardhana"><code>@​harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1774">minio/minio-go#1774</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.48...v7.0.49">https://github.com/minio/minio-go/compare/v7.0.48...v7.0.49</a></p> <h2>Bugfix Release</h2> <h2>What's Changed</h2> <ul> <li>Fix sharing of MD5 hasher by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1753">minio/minio-go#1753</a></li> <li>feat(<a href="https://redirect.github.com/minio/minio-go/issues/1755">#1755</a>): GetObject supports overriding response header values by <a href="https://github.com/reedchan7"><code>@​reedchan7</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1756">minio/minio-go#1756</a></li> <li>Snowball: If Modtime unset, use current time by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1763">minio/minio-go#1763</a></li> <li>Bump Go versions by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1768">minio/minio-go#1768</a></li> <li>feat: add aws ap-southeast-4 region by <a href="https://github.com/ianmuge"><code>@​ianmuge</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1767">minio/minio-go#1767</a></li> <li>STSCertificateIdentity: Init request form by <a href="https://github.com/klauspost"><code>@​klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1770">minio/minio-go#1770</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/reedchan7"><code>@​reedchan7</code></a> made their first contribution in <a href="https://redirect.github.com/minio/minio-go/pull/1756">minio/minio-go#1756</a></li> <li><a href="https://github.com/ianmuge"><code>@​ianmuge</code></a> made their first contribution in <a href="https://redirect.github.com/minio/minio-go/pull/1767">minio/minio-go#1767</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="11eb82d85f"><code>11eb82d</code></a> Revert &quot;Add missing aws-chunked transfer encoding (<a href="https://redirect.github.com/minio/minio-go/issues/1803">#1803</a>)&quot; (<a href="https://redirect.github.com/minio/minio-go/issues/1804">#1804</a>)</li> <li><a href="7bf8079be6"><code>7bf8079</code></a> Update version to next release</li> <li><a href="8175bf7bda"><code>8175bf7</code></a> Add missing aws-chunked transfer encoding (<a href="https://redirect.github.com/minio/minio-go/issues/1803">#1803</a>)</li> <li><a href="5b15988473"><code>5b15988</code></a> Fix listobjects with metadata (<a href="https://redirect.github.com/minio/minio-go/issues/1795">#1795</a>)</li> <li><a href="6fcbe6de97"><code>6fcbe6d</code></a> Update version to next release</li> <li><a href="7c9b5ff1c0"><code>7c9b5ff</code></a> fix: all the linter issues reported</li> <li><a href="5d09d8f78b"><code>5d09d8f</code></a> Add ap-south-2 to endpoints (<a href="https://redirect.github.com/minio/minio-go/issues/1781">#1781</a>)</li> <li><a href="24cdd7fc94"><code>24cdd7f</code></a> allow virtual host style for GetBucketLocation API, if requested (<a href="https://redirect.github.com/minio/minio-go/issues/1785">#1785</a>)</li> <li><a href="5384d69d15"><code>5384d69</code></a> allow setting region via custom function (<a href="https://redirect.github.com/minio/minio-go/issues/1786">#1786</a>)</li> <li><a href="9948a7b56c"><code>9948a7b</code></a> upgrade all deps (<a href="https://redirect.github.com/minio/minio-go/issues/1778">#1778</a>)</li> <li>Additional commits viewable in <a href="https://github.com/minio/minio-go/compare/v7.0.45...v7.0.52">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	3 years ago
dependabot[bot]	8c0e4fbe83	Bump github.com/aliyun/aliyun-oss-go-sdk from 2.2.2+incompatible to 2.2.7+incompatible (#9225) ... Bumps [github.com/aliyun/aliyun-oss-go-sdk](https://github.com/aliyun/aliyun-oss-go-sdk) from 2.2.2+incompatible to 2.2.7+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aliyun/aliyun-oss-go-sdk/releases">github.com/aliyun/aliyun-oss-go-sdk's releases</a>.</em></p> <blockquote> <h2>v2.2.7</h2> <p>增加：support get info form EC &amp; x-oss-err. 增加：support bucket replication time control api. 增加：support bucket style api. 增加：support list bucket cname api. 增加：support bucket resource group api. 修复：do not use uname -* cmd to get platform information. 修复：call rand.Seed only once.</p> <h2>v2.2.6</h2> <p>增加：the object name cannot be empty in object's apis. 增加：support access monitor api. 修复：fix GetBucketStat bug. 增加：lifecycle rule supports filter configuration. 增加：support deleting the specified bucket tags. 修复：can't delete objects where the keys contain special characters.</p> <h2>v2.2.5</h2> <p>增加：add meta data indexing api 删除：remove github.com/baiyubin/aliyun-sts-go-sdk/sts deps. 修改：remove chartset info in text/* mime type. 增加：add restore info in listObjects/listObjectVersions 增加：add x-oss-ac-* into subresource list. 修改：fix select object bug. 增加：getBucketStat api returns more info 增加：support X-Oss-Notification header in CompleteMultipartUpload api.</p> <h2>v2.2.4</h2> <ul> <li>增加： 支持cname的创建和删除</li> <li>增加： 增加inventory xml 接口</li> </ul> <h2>v2.2.3</h2> <ul> <li>增加： 支持云盒</li> <li>增加： 支持v4签名</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/aliyun/aliyun-oss-go-sdk/blob/master/CHANGELOG.md">github.com/aliyun/aliyun-oss-go-sdk's changelog</a>.</em></p> <blockquote> <h1>ChangeLog - Aliyun OSS SDK for Go</h1> <h2>版本号：v2.2.7 日期：2023-03-23</h2> <h3>变更内容</h3> <ul> <li>增加：support get info form EC &amp; x-oss-err.</li> <li>增加：support bucket replication time control api.</li> <li>增加：support bucket style api.</li> <li>增加：support list bucket cname api.</li> <li>增加：support bucket resource group api.</li> <li>修复：do not use uname -* cmd to get platform information.</li> <li>修复：call rand.Seed only once.</li> </ul> <h2>版本号：v2.2.6 日期：2022-11-16</h2> <h3>变更内容</h3> <ul> <li>增加：the object name cannot be empty in object's apis.</li> <li>增加：support access monitor api.</li> <li>修复：fix GetBucketStat bug.</li> <li>增加：lifecycle rule supports filter configuration.</li> <li>增加：support deleting the specified bucket tags.</li> <li>修复：can't delete objects where the keys contain special characters.</li> </ul> <h2>版本号：v2.2.5 日期：2022-08-19</h2> <h3>变更内容</h3> <ul> <li>增加：add meta data indexing api</li> <li>删除：remove github.com/baiyubin/aliyun-sts-go-sdk/sts deps.</li> <li>修改：remove chartset info in text/* mime type.</li> <li>增加：add restore info in listObjects/listObjectVersions</li> <li>增加：add x-oss-ac-* into subresource list.</li> <li>修改：fix select object bug.</li> <li>增加：getBucketStat api returns more info</li> <li>增加：support X-Oss-Notification header in CompleteMultipartUpload api.</li> </ul> <h2>版本号：v2.2.4 日期：2022-05-25</h2> <h3>变更内容</h3> <ul> <li>增加：add cname api</li> <li>增加：add inventory api for xml config</li> </ul> <h1>ChangeLog - Aliyun OSS SDK for Go</h1> <h2>版本号：v2.2.3 日期：2022-05-13</h2> <h3>变更内容</h3> <ul> <li>增加：support cloud-box</li> <li>增加：support v4 signature</li> </ul> <h1>ChangeLog - Aliyun OSS SDK for Go</h1> <h2>版本号：v2.2.2 日期：2022-03-24</h2> <h3>变更内容</h3> <ul> <li>增加：add GetBucketCORSXml,SetBucketCORSXml,GetBucketLifecycleXml</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="77977ff44f"><code>77977ff</code></a> release v2.2.7</li> <li><a href="95400a14f6"><code>95400a1</code></a> modify read err from header unit testing (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/372">#372</a>)</li> <li><a href="64b34dc5dd"><code>64b34dc</code></a> Read error information from header (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/369">#369</a>)</li> <li><a href="72974c6a13"><code>72974c6</code></a> modify fuction TestBucketResourceGroup</li> <li><a href="f1516b15e1"><code>f1516b1</code></a> modify bucket replication api (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/366">#366</a>)</li> <li><a href="4543270634"><code>4543270</code></a> modify aes key random number (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/368">#368</a>)</li> <li><a href="2273dd713f"><code>2273dd7</code></a> Modify the document address and error comments (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/367">#367</a>)</li> <li><a href="8e7b9543bf"><code>8e7b954</code></a> add bucket style api (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/361">#361</a>)</li> <li><a href="b416f9d761"><code>b416f9d</code></a> add bucket cname sample and modify list bucket cname api (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/364">#364</a>)</li> <li><a href="c74b4e865f"><code>c74b4e8</code></a> add bucket resource group api</li> <li>Additional commits viewable in <a href="https://github.com/aliyun/aliyun-oss-go-sdk/compare/v2.2.2...v2.2.7">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	155eb522e2	Bump github.com/spf13/afero from 1.9.3 to 1.9.5 (#8992) ... Bumps [github.com/spf13/afero](https://github.com/spf13/afero) from 1.9.3 to 1.9.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spf13/afero/releases">github.com/spf13/afero's releases</a>.</em></p> <blockquote> <h2>v1.9.5</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/spf13/afero/compare/v1.9.4...v1.9.5">https://github.com/spf13/afero/compare/v1.9.4...v1.9.5</a></p> <h2>v1.9.4</h2> <h2>What's Changed</h2> <ul> <li>Fix renaming a dir with sub-directories by <a href="https://github.com/nono"><code>@​nono</code></a> in <a href="https://redirect.github.com/spf13/afero/pull/239">spf13/afero#239</a></li> <li>github: Update Go build matrix by <a href="https://github.com/bep"><code>@​bep</code></a> in <a href="https://redirect.github.com/spf13/afero/pull/385">spf13/afero#385</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/nono"><code>@​nono</code></a> made their first contribution in <a href="https://redirect.github.com/spf13/afero/pull/239">spf13/afero#239</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/spf13/afero/compare/v1.9.3...v1.9.4">https://github.com/spf13/afero/compare/v1.9.3...v1.9.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="d92c300a1b"><code>d92c300</code></a> Fix failing tests on Windows with Go 1.20</li> <li><a href="501e8d313c"><code>501e8d3</code></a> Fix io.Seek* deprecation errors</li> <li><a href="1edd01aa5f"><code>1edd01a</code></a> Run go mod tidy</li> <li><a href="4ba522f8c8"><code>4ba522f</code></a> fix(deps): golang.org/x/crypto, golang.org/x/text</li> <li><a href="cf95922e71"><code>cf95922</code></a> all: Run gofumpt -l -w .</li> <li><a href="a6023d20a1"><code>a6023d2</code></a> github: Update Go build matrix</li> <li><a href="3b1116bc67"><code>3b1116b</code></a> memmap: Fix renaming a dir with sub-directories (<a href="https://redirect.github.com/spf13/afero/issues/239">#239</a>)</li> <li>See full diff in <a href="https://github.com/spf13/afero/compare/v1.9.3...v1.9.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	3 years ago
Peter Štibraný	90a1d4593e	Update Prometheus dependency (#9205)	3 years ago
Robert Fratto	7bec727c6d	promtail: support configurable polling interval (#8874) ... Currently, Promtail always polls files every 250ms. This PR allows the polling period to be customized, starting at a minimum polling period and exponentially increasing the polling frequency to a bounded maximum if the file has no changes. When file changes are detected, the polling frequency resets to the minimum. The default behavior is the existing behavior; both the minimum and maximum polling intervals are set to 250ms. I'm opening this in draft to get early feedback. There's a few open questions: * Where can I add validations to ensure that the min/max polling intervals are configured properly? * Is this the right approach for implementation? Do I need to make any changes? * Does this need tests? I'll update the CHANGELOG and Documentation after we're agreed on an approach.	3 years ago
dependabot[bot]	e9bc461c63	Bump github.com/docker/docker from 20.10.23+incompatible to 23.0.3+incompatible (#9035) ... Bumps [github.com/docker/docker](https://github.com/docker/docker) from 20.10.23+incompatible to 23.0.3+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/docker/releases">github.com/docker/docker's releases</a>.</em></p> <blockquote> <h2>v23.0.3</h2> <h2>23.0.3</h2> <blockquote> <p><strong>Note</strong></p> <p>Due to an issue with CentOS 9 Stream's package repositories, packages for CentOS 9 are currently unavailable. Packages for CentOS 9 may be added later, or as part of the next (23.0.4) patch release.</p> </blockquote> <h3>Bug fixes and enhancements</h3> <ul> <li>Fixed a number of issues that can cause Swarm encrypted overlay networks to fail to uphold their guarantees, addressing <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841">CVE-2023-28841</a>, <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840">CVE-2023-28840</a>, and <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842">CVE-2023-28842</a>. <ul> <li>A lack of kernel support for encrypted overlay networks now reports as an error.</li> <li>Encrypted overlay networks are eagerly set up, rather than waiting for multiple nodes to attach.</li> <li>Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9 through the use of the <code>xt_bpf</code> kernel module.</li> <li>Users of Swarm overlay networks should review <a href="https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw">GHSA-vwm3-crmr-xfxw</a> to ensure that unintentional exposure has not occurred.</li> </ul> </li> </ul> <h3>Packaging Updates</h3> <ul> <li>Update containerd to <a href="https://github.com/containerd/containerd/releases/tag/v1.6.20">v1.6.20</a>.</li> <li>Update runc to <a href="https://github.com/opencontainers/runc/releases/tag/v1.1.5">v1.1.5</a>.</li> </ul> <h2>v23.0.2</h2> <h2>23.0.2</h2> <p>For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:</p> <ul> <li><a href="https://github.com/docker/cli/milestone/75?closed=1">docker/cli, 23.0.2 milestone</a></li> <li><a href="https://github.com/moby/moby/milestone/114?closed=1">moby/moby, 23.0.2 milestone</a></li> </ul> <h3>Bug fixes and enhancements</h3> <ul> <li>Fully resolve missing checks for <code>apparmor_parser</code> when an AppArmor enabled kernel is detected. <a href="https://redirect.github.com/containerd/containerd/pull/8087">containerd/containerd#8087</a>, <a href="https://redirect.github.com/moby/moby/pull/45043">moby/moby#45043</a></li> <li>Ensure that credentials are redacted from Git URLs when generating BuildKit buildinfo. Fixes <a href="https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc">CVE-2023-26054</a>. <a href="https://redirect.github.com/moby/moby/pull/45110">moby/moby#45110</a></li> <li>Fix anonymous volumes created by a <code>VOLUME</code> line in a Dockerfile being excluded from volume prune. <a href="https://redirect.github.com/moby/moby/pull/45159">moby/moby#45159</a></li> <li>Fix a failure to properly propagate errors during removal of volumes on a Swarm node. <a href="https://redirect.github.com/moby/moby/pull/45155">moby/moby#45155</a></li> <li>Temporarily work around a bug in BuildKit <code>COPY --link</code> by disabling mergeop/diffop optimization. <a href="https://redirect.github.com/moby/moby/pull/45112">moby/moby#45112</a></li> <li>Properly clean up child tasks when a parent Swarm job is removed. <a href="https://redirect.github.com/moby/swarmkit/pull/3112">moby/swarmkit#3112</a>, <a href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li> <li>Fix Swarm service creation logic so that both a GenericResource and a non-default network can be used together. <a href="https://redirect.github.com/moby/swarmkit/pull/3082">moby/swarmkit#3082</a>, <a href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li> <li>Fix Swarm CSI support requiring the CSI plugin to offer staging endpoints in order to publish a volume. <a href="https://redirect.github.com/moby/swarmkit/pull/3116">moby/swarmkit#3116</a>, <a href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li> <li>Fix a panic caused by log buffering in some configurations. <a href="https://redirect.github.com/containerd/fifo/pull/47">containerd/fifo#47</a>, <a href="https://redirect.github.com/moby/moby/pull/45051">moby/moby#45051</a></li> <li>Log errors in the REST to Swarm gRPC API translation layer at the debug level to reduce redundancy and noise. <a href="https://redirect.github.com/moby/moby/pull/45016">moby/moby#45016</a></li> <li>Fix a DNS resolution issue affecting containers created with <code>--dns-opt</code> or <code>--dns-search</code> when <code>systemd-resolved</code> is used outside the container. <a href="https://redirect.github.com/moby/moby/pull/45000">moby/moby#45000</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="59118bff50"><code>59118bf</code></a> Merge pull request from GHSA-232p-vwff-86mp</li> <li><a href="219f21bf07"><code>219f21b</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/45196">#45196</a> from vvoland/integration-restart-race-23</li> <li><a href="b87f7f18b8"><code>b87f7f1</code></a> libnet/d/overlay: insert the input-drop rule</li> <li><a href="c6bf3071fe"><code>c6bf307</code></a> StartWithLogFile: Fix d.cmd race</li> <li><a href="7f49ca259b"><code>7f49ca2</code></a> TestDaemonRestartKillContainers: Fix loop capture</li> <li><a href="98cbcb8003"><code>98cbcb8</code></a> libnet/d/overlay: add BPF-powered VNI matcher</li> <li><a href="5c5fac2374"><code>5c5fac2</code></a> libnet/d/overlay: extract VNI match rule builder</li> <li><a href="c492a22287"><code>c492a22</code></a> libn/d/overlay: enforce encryption on sandbox init</li> <li><a href="018edb0284"><code>018edb0</code></a> libnet/d/overlay: document some encryption code</li> <li><a href="a1fd2f22f6"><code>a1fd2f2</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/45157">#45157</a> from thaJeztah/23.0_backport_update_shfmt</li> <li>Additional commits viewable in <a href="https://github.com/docker/docker/compare/v20.10.23...v23.0.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	3 years ago
Suruthi-G-K	e7b0d4d26e	feat(cos): Support authentication with trusted profiles (#8939) ... **What this PR does / why we need it**: Add trusted profile authentication in COS client **Which issue(s) this PR fixes**: Fixes NA **Checklist** - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [x] Documentation added - [x] Tests updated - [x] `CHANGELOG.md` updated - [ ] Changes that require user attention or interaction to upgrade are documented in `docs/sources/upgrading/_index.md` --------- Co-authored-by: shahulsonhal <shahulsonhal@gmail.com> Co-authored-by: tareqmamari <tariq.mamari@de.ibm.com>	3 years ago
Athira Varghese	ffb961c439	feat(storage): add support for IBM cloud object storage as storage client (#8826) ... **What this PR does / why we need it**: Add support for IBM cloud object storage as storage client **Which issue(s) this PR fixes**: Fixes NA **Checklist** - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - [x] Documentation added - [x] Tests updated - [ ] `CHANGELOG.md` updated --------- Signed-off-by: Shahul <shahulsonhal@gmail.com> Co-authored-by: Aman Kumar Singh <amankrsingh2110@gmail.com> Co-authored-by: Suruthi-G-K <shruthi.suruthi@gmail.com> Co-authored-by: tareqmamari <tariq.mamari@de.ibm.com> Co-authored-by: shahulsonhal <shahulsonhal@gmail.com> Co-authored-by: Aditya C S <aditya.gnu@gmail.com> Co-authored-by: Tareq Al-Maamari <tariq.mamari@gmail.com>	3 years ago
Bryan Boreham	6fd4b5e89b	Update prometheus/prometheus from 2.41 to 2.42 (#8571) ... **What this PR does / why we need it**: Brings in the latest updates from upstream. These open up some opportunities for optimisations in TSDB indexing. Dependencies updated: * github.com/Azure/go-autorest/autorest/adal v0.9.21 -> v0.9.22 (comment-only change) * github.com/docker/docker v20.10.21 -> v20.10.23 (fixing filters bug) * golang.org/x/exp fae10dda9338 -> d38c7dcee874 (optimisations in `BinarySearch` function) Indirect dependencies also updated: * github.com/digitalocean/godo v1.91.1 -> v1.95.0 (nothing alarming in [release notes](https://github.com/digitalocean/godo/releases)) * github.com/google/pprof aee1124e3a93 -> 76d1ae5aea2b (no changes pulled into vendor) * golang.org/x/tools v0.4.0 -> v0.5.0 (relating to Go compiler utilities) * google.golang.org/genproto 76db0878b65f -> 31e0e69b6fc2 * k8s.io/api v0.26.0 -> v0.26.1 (comment-only change) * k8s.io/apimachinery v0.26.0 -> v0.26.1 (no changes pulled into vendor) * k8s.io/client-go v0.26.0 -> v0.26.1 (small fixes) **Special notes for your reviewer**: A couple of interfaces changed; these have required matching changes in Loki code. Those changes are split into separate commits. I also note that most calls to `relabel` ignore when the rule says "drop". Maybe this is wrong?	3 years ago
Aditya C S	b94c8aaf16	feature: geoip stage in promtail (#3493) ... Co-authored-by: Ed Welch <edward.welch@grafana.com>	3 years ago
justcompile	ea55f285b6	S3 Storage Class Configuration (#8532)	3 years ago
李国忠	1fc00fa02d	[new] chunk backend: Integrate Alibaba Cloud oss (#8410)	3 years ago
dependabot[bot]	bbb70ee2c3	Bump github.com/fatih/color from 1.13.0 to 1.14.1 (#8385) ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	3 years ago
dependabot[bot]	b4541b8bf3	Bump github.com/bmatcuk/doublestar from 1.2.2 to 1.3.4 (#8368) ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Kaviraj Kanagaraj	352e747911	chore: Vendor `runtimeconfig` package patch (#8366) ... Includes patch for runtimeconfig manager fix grafana/dskit#262 Signed-off-by: Kaviraj <kavirajkanagaraj@gmail.com>	3 years ago
dependabot[bot]	6b8a37da58	Bump github.com/go-logfmt/logfmt from 0.5.1 to 0.6.0 (#8350) ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	3 years ago
dependabot[bot]	2198fccb54	Bump github.com/drone/envsubst from 1.0.2 to 1.0.3 (#8334) ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	3 years ago
dependabot[bot]	b347dca897	Bump github.com/Azure/go-autorest/autorest/azure/auth from 0.5.11 to 0.5.12 (#8309) ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Irina	4cd1246b88	Logproto: Extract push.proto from logproto package to the separate module (#8259) ... Co-authored-by: Owen Diehl <ow.diehl@gmail.com>	3 years ago
dependabot[bot]	ddc1d171a2	Bump github.com/felixge/fgprof from 0.9.2 to 0.9.3 (#8289) ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	3 years ago
dependabot[bot]	ffc5d78908	Bump github.com/aws/aws-sdk-go from 1.44.156 to 1.44.187 (#8288) ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
Bryan Boreham	560440a58d	Update Prometheus to v2.41, plus dependencies (#8290)	3 years ago
dependabot[bot]	fd72aa8908	Bump cloud.google.com/go/storage from 1.27.0 to 1.29.0 (#8276) ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	4faf7b9979	Bump github.com/baidubce/bce-sdk-go from 0.9.111 to 0.9.141 (#8255) ... Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	3 years ago
Travis Patterson	fad028b4c3	Change tests to bump sarama dependency (#8249)	3 years ago
Bryan Boreham	15b382294e	Remove dependency on thanos-io/thanos (#8227) ... **What this PR does / why we need it**: This avoids complications trying to match up versions between Prometheus and Thanos. **Special notes for your reviewer**: I don't know why the dependency on `github.com/efficientgo/e2e` has appeared in go.mod, but it doesn't seem to change what is in vendor. **Checklist** - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (**required**) - NA Documentation added - NA Tests updated - NA `CHANGELOG.md` updated - NA Changes that require user attention or interaction to upgrade are documented in `docs/sources/upgrading/_index.md`	3 years ago
dependabot[bot]	2e834ae18d	Bump github.com/mitchellh/go-wordwrap from 1.0.0 to 1.0.1 (#8222) ... Bumps [github.com/mitchellh/go-wordwrap](https://github.com/mitchellh/go-wordwrap) from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="ecf0936a07"><code>ecf0936</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/mitchellh/go-wordwrap/issues/3">#3</a> from dtolnay/nbsp</li> <li><a href="a2d9f5454f"><code>a2d9f54</code></a> Wrap multibyte characters properly</li> <li><a href="7256b9c0a8"><code>7256b9c</code></a> update go.mod</li> <li><a href="271c4e5dd7"><code>271c4e5</code></a> Do not break on non-breaking space</li> <li>See full diff in <a href="https://github.com/mitchellh/go-wordwrap/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	1b025e967a	Bump github.com/heroku/x from 0.0.50 to 0.0.55 (#8209) ... Bumps [github.com/heroku/x](https://github.com/heroku/x) from 0.0.50 to 0.0.55. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/heroku/x/releases">github.com/heroku/x's releases</a>.</em></p> <blockquote> <h2>Add pkg for low cardinality metrics providers</h2> <p>This release adds a <code>lowcard</code> pkg that allows for wrapping of metrics providers. Labels added to instruments using <code>With()</code> will be ignored unless explicitly marked for inclusion. Label inclusion is indicated by passing the list to <code>NewLowCardinalityWrappedProvider()</code> as an argument when creating the low card wrapper.</p> <h2>Add support for blocking in Redis Pools</h2> <p>No release notes provided.</p> <h2>Support dyno ID verification</h2> <p>This merges <a href="https://github-redirect.dependabot.com/heroku/x/issues/176">#176</a> to support dyno ID verification.</p> <h2>Adding support for redispool DialContext</h2> <p>The <code>redispool</code> package was updated to support passed-in contexts.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="280e8db3bb"><code>280e8db</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/heroku/x/issues/181">#181</a> from heroku/slizco-add-low-card-provider-wrapper</li> <li><a href="6c1897a8ec"><code>6c1897a</code></a> Satisfy linter</li> <li><a href="38ecadf682"><code>38ecadf</code></a> Add low card provider for optionally skipping labels</li> <li><a href="c12028c4f9"><code>c12028c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/heroku/x/issues/180">#180</a> from heroku/allow-redis-pools-to-wait</li> <li><a href="47f5f0972b"><code>47f5f09</code></a> allow redigo pools to wait</li> <li><a href="0e73480512"><code>0e73480</code></a> Merge branch 'support-dyno-id-verification'</li> <li><a href="36b4e8c10e"><code>36b4e8c</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/heroku/x/issues/178">#178</a> from heroku/redis-compat</li> <li><a href="21d183853d"><code>21d1838</code></a> deal with Redis 4,5 &amp; 6 compatibility issues</li> <li><a href="33262c0e71"><code>33262c0</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/heroku/x/issues/177">#177</a> from heroku/quick-enhancements</li> <li><a href="65db653d72"><code>65db653</code></a> upgrade redigo and utilize DialContext instead of Dial</li> <li>Additional commits viewable in <a href="https://github.com/heroku/x/compare/v0.0.50...v0.0.55">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	5cfd6a3c49	Bump github.com/spf13/afero from 1.9.2 to 1.9.3 (#8191) ... Bumps [github.com/spf13/afero](https://github.com/spf13/afero) from 1.9.2 to 1.9.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spf13/afero/releases">github.com/spf13/afero's releases</a>.</em></p> <blockquote> <h2>v1.9.3</h2> <h2>What's Changed</h2> <ul> <li>Fix concurrency issue in MemMapFs.Mkdir/MkdirAll by <a href="https://github.com/bep"><code>@​bep</code></a> in <a href="https://github-redirect.dependabot.com/spf13/afero/pull/379">spf13/afero#379</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/spf13/afero/compare/v1.9.2...v1.9.3">https://github.com/spf13/afero/compare/v1.9.2...v1.9.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="a800a9de53"><code>a800a9d</code></a> Fix concurrency issue in MemMapFs.Mkdir/MkdirAll</li> <li>See full diff in <a href="https://github.com/spf13/afero/compare/v1.9.2...v1.9.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago
dependabot[bot]	70997fd090	Bump github.com/imdario/mergo from 0.3.12 to 0.3.13 (#8176) ... Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from 0.3.12 to 0.3.13. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/imdario/mergo/releases">github.com/imdario/mergo's releases</a>.</em></p> <blockquote> <h2>Merging same-type slices supported, YAML upgraded to v3 (only used in tests), and more flexibility for transformers</h2> <h2>What's Changed</h2> <ul> <li>Fix typo in README.md by <a href="https://github.com/eltociear"><code>@​eltociear</code></a> in <a href="https://github-redirect.dependabot.com/imdario/mergo/pull/184">imdario/mergo#184</a></li> <li>Adding StructBot to Mergo in the wild section by <a href="https://github.com/tjpnz"><code>@​tjpnz</code></a> in <a href="https://github-redirect.dependabot.com/imdario/mergo/pull/193">imdario/mergo#193</a></li> <li>Add Goreleaser to featured projects by <a href="https://github.com/marcauberer"><code>@​marcauberer</code></a> in <a href="https://github-redirect.dependabot.com/imdario/mergo/pull/191">imdario/mergo#191</a></li> <li>fix: gate transformers on valid non-nil destinations by <a href="https://github.com/zaquestion"><code>@​zaquestion</code></a> in <a href="https://github-redirect.dependabot.com/imdario/mergo/pull/211">imdario/mergo#211</a></li> <li>Support slices of same type by <a href="https://github.com/heaths"><code>@​heaths</code></a> in <a href="https://github-redirect.dependabot.com/imdario/mergo/pull/210">imdario/mergo#210</a></li> <li>Upgrade yaml to v3 by <a href="https://github.com/imdario"><code>@​imdario</code></a> in <a href="https://github-redirect.dependabot.com/imdario/mergo/pull/212">imdario/mergo#212</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/eltociear"><code>@​eltociear</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/imdario/mergo/pull/184">imdario/mergo#184</a></li> <li><a href="https://github.com/tjpnz"><code>@​tjpnz</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/imdario/mergo/pull/193">imdario/mergo#193</a></li> <li><a href="https://github.com/marcauberer"><code>@​marcauberer</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/imdario/mergo/pull/191">imdario/mergo#191</a></li> <li><a href="https://github.com/zaquestion"><code>@​zaquestion</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/imdario/mergo/pull/211">imdario/mergo#211</a></li> <li><a href="https://github.com/heaths"><code>@​heaths</code></a> made their first contribution in <a href="https://github-redirect.dependabot.com/imdario/mergo/pull/210">imdario/mergo#210</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/imdario/mergo/compare/0.3.12...v0.3.13">https://github.com/imdario/mergo/compare/0.3.12...v0.3.13</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="1949787570"><code>1949787</code></a> Update README.md</li> <li><a href="80c13e16e7"><code>80c13e1</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/imdario/mergo/issues/212">#212</a> from imdario/dcc/issue-206</li> <li><a href="f86e6f60b7"><code>f86e6f6</code></a> Upgrade yaml to v3</li> <li><a href="39ebbbb298"><code>39ebbbb</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/imdario/mergo/issues/210">#210</a> from heaths/issue209</li> <li><a href="fd7d2bcdb0"><code>fd7d2bc</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/imdario/mergo/issues/211">#211</a> from zaquestion/transformer_valid_destination</li> <li><a href="8109749b3e"><code>8109749</code></a> add test for deepMerge panic</li> <li><a href="4bed36ec55"><code>4bed36e</code></a> add test for keeping zero values with transformer</li> <li><a href="ab6b2707a1"><code>ab6b270</code></a> fix: gate transformers on valid non-nil destinations</li> <li><a href="200f90d970"><code>200f90d</code></a> Support slices of same type</li> <li><a href="fd3dfc91a2"><code>fd3dfc9</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/imdario/mergo/issues/191">#191</a> from marcauberer/master</li> <li>Additional commits viewable in <a href="https://github.com/imdario/mergo/compare/0.3.12...v0.3.13">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	3 years ago