apitech/loki - loki - Gitea: Git with a cup of tea

Commit Graph

Author	SHA1	Message	Date
dependabot[bot]	b4dd0ca432	Bump github.com/alicebob/miniredis/v2 from 2.30.0 to 2.30.2 (#9461 ) Bumps [github.com/alicebob/miniredis/v2](https://github.com/alicebob/miniredis) from 2.30.0 to 2.30.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/alicebob/miniredis/releases">github.com/alicebob/miniredis/v2's releases</a>.</em></p> <blockquote> <h2>XADD minid, BLMOVE, COMMAND fix, XREAD fix</h2> <ul> <li>support MINID in XADD (thanks <a href="https://github.com/nathan-cormier"><code>@nathan-cormier</code></a>)</li> <li>support BLMOVE (thanks <a href="https://github.com/sevein"><code>@sevein</code></a>)</li> <li>fix COMMAND (thanks <a href="https://github.com/pje"><code>@pje</code></a>)</li> <li>fix 'XREAD ... $' on a non-existing stream</li> </ul> <h2>SET NX GET</h2> <ul> <li>support SET NX GET special case</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/alicebob/miniredis/blob/master/CHANGELOG.md">github.com/alicebob/miniredis/v2's changelog</a>.</em></p> <blockquote> <h3>v2.30.2</h3> <ul> <li>support MINID in XADD (thanks <a href="https://github.com/nathan-cormier"><code>@nathan-cormier</code></a>)</li> <li>support BLMOVE (thanks <a href="https://github.com/sevein"><code>@sevein</code></a>)</li> <li>fix COMMAND (thanks <a href="https://github.com/pje"><code>@pje</code></a>)</li> <li>fix 'XREAD ... $' on a non-existing stream</li> </ul> <h3>v2.30.1</h3> <ul> <li>support SET NX GET special case</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`d807499fc3`"><code>d807499</code></a> update changelog</li> <li><a href="`4be3b8260d`"><code>4be3b82</code></a> fix 'XREAD ... $' on a non-existing stream</li> <li><a href="`2f1aeb304a`"><code>2f1aeb3</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/323">#323</a> from pje/pje/bring-back-273-fix</li> <li><a href="`c71c3127c1`"><code>c71c312</code></a> Bring back the COMMAND response fix introduced in <a href="https://redirect.github.com/alicebob/miniredis/issues/273">#273</a></li> <li><a href="`84b7146f54`"><code>84b7146</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/321">#321</a> from sevein/dev/cmd-list-blmove</li> <li><a href="`93ce01ac66`"><code>93ce01a</code></a> Implement BLMOVE</li> <li><a href="`9077c868d4`"><code>9077c86</code></a> Merge pull request <a href="https://redirect.github.com/alicebob/miniredis/issues/318">#318</a> from nathan-cormier/minid</li> <li><a href="`a80f1409fc`"><code>a80f140</code></a> Support MINID in XADD</li> <li><a href="`e5c9dd403d`"><code>e5c9dd4</code></a> changelog</li> <li><a href="`5c16d558d3`"><code>5c16d55</code></a> support SET NX GET special case</li> <li>Additional commits viewable in <a href="https://github.com/alicebob/miniredis/compare/v2.30.0...v2.30.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/alicebob/miniredis/v2&package-manager=go_modules&previous-version=2.30.0&new-version=2.30.2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Dylan Guedes	e81dd8aed2	Loki: Bump `dskit` to inherit new backoff configs (#9484 ) What this PR does / why we need it: Bump `dskit` to inherit https://github.com/grafana/dskit/pull/296. It will allow us to configure custom backoff timeouts. Which issue(s) this PR fixes: N/A	2 years ago
dependabot[bot]	e46e650b50	Bump github.com/prometheus/client_golang from 1.14.0 to 1.15.1 (#9386 ) Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.14.0 to 1.15.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/releases">github.com/prometheus/client_golang's releases</a>.</em></p> <blockquote> <h2>v1.15.1</h2> <h2>Changes</h2> <ul> <li>[BUGFIX] Fixed promhttp.Instrument* handlers wrongly trying to attach exemplar to unsupported metrics (e.g. summary), <br /> causing panics <a href="https://redirect.github.com/prometheus/client_golang/issues/1253">#1253</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_golang/compare/v1.15.0...v1.15.1">https://github.com/prometheus/client_golang/compare/v1.15.0...v1.15.1</a></p> <h2>v1.15.0</h2> <h2>Changed</h2> <p>[BUGFIX] Fix issue with atomic variables on ppc64le <a href="https://redirect.github.com/prometheus/client_golang/issues/1171">#1171</a> [BUGFIX] Support for multiple samples within same metric <a href="https://redirect.github.com/prometheus/client_golang/issues/1181">#1181</a> [BUGFIX] Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149 <a href="https://redirect.github.com/prometheus/client_golang/issues/1187">#1187</a> [ENHANCEMENT] Add exemplars and middleware examples <a href="https://redirect.github.com/prometheus/client_golang/issues/1173">#1173</a> [ENHANCEMENT] Add more context to "duplicate label names" error to enable debugging <a href="https://redirect.github.com/prometheus/client_golang/issues/1177">#1177</a> [ENHANCEMENT] Add constrained labels and constrained variant for all MetricVecs <a href="https://redirect.github.com/prometheus/client_golang/issues/1151">#1151</a> [ENHANCEMENT] Moved away from deprecated github.com/golang/protobuf package <a href="https://redirect.github.com/prometheus/client_golang/issues/1183">#1183</a> [ENHANCEMENT] Add possibility to dynamically get label values for http instrumentation <a href="https://redirect.github.com/prometheus/client_golang/issues/1066">#1066</a> [ENHANCEMENT] Add ability to Pusher to add custom headers <a href="https://redirect.github.com/prometheus/client_golang/issues/1218">#1218</a> [ENHANCEMENT] api: Extend and improve efficiency of json-iterator usage <a href="https://redirect.github.com/prometheus/client_golang/issues/1225">#1225</a> [ENHANCEMENT] Added (official) support for go 1.20 <a href="https://redirect.github.com/prometheus/client_golang/issues/1234">#1234</a> [ENHANCEMENT] timer: Added support for exemplars <a href="https://redirect.github.com/prometheus/client_golang/issues/1233">#1233</a> [ENHANCEMENT] Filter expected metrics as well in CollectAndCompare <a href="https://redirect.github.com/prometheus/client_golang/issues/1143">#1143</a> [ENHANCEMENT] ⚠️ Only set start/end if time is not Zero. This breaks compatibility in experimental api package. If you strictly depend on empty time.Time as actual value, the behavior is now changed <a href="https://redirect.github.com/prometheus/client_golang/issues/1238">#1238</a></p> <!-- raw HTML omitted --> <ul> <li>Merge release 1.14 to main by <a href="https://github.com/bwplotka"><code>@bwplotka</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1164">prometheus/client_golang#1164</a></li> <li>Fix typo in doc comment by <a href="https://github.com/beorn7"><code>@beorn7</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1166">prometheus/client_golang#1166</a></li> <li>Fix issue with atomic variables on ppc64le by <a href="https://github.com/beorn7"><code>@beorn7</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1171">prometheus/client_golang#1171</a></li> <li>examples: Add exemplars and middleware examples by <a href="https://github.com/jessicalins"><code>@jessicalins</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1173">prometheus/client_golang#1173</a></li> <li>Add context to "duplicate label names" to enable debugging by <a href="https://github.com/SpencerMalone"><code>@SpencerMalone</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1177">prometheus/client_golang#1177</a></li> <li>Add constrained labels and Constrained variant for all MetricVecs by <a href="https://github.com/Okhoshi"><code>@Okhoshi</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1151">prometheus/client_golang#1151</a></li> <li>Support for multiple samples within same metric by <a href="https://github.com/machadovilaca"><code>@machadovilaca</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1181">prometheus/client_golang#1181</a></li> <li>Replace deprecated github.com/golang/protobuf package by <a href="https://github.com/zhsj"><code>@zhsj</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1183">prometheus/client_golang#1183</a></li> <li>Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149 by <a href="https://github.com/b4bay"><code>@b4bay</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1187">prometheus/client_golang#1187</a></li> <li>typo fix by <a href="https://github.com/ibreakthecloud"><code>@ibreakthecloud</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1178">prometheus/client_golang#1178</a></li> <li>Add possibility to dynamically get label values for http instrumentation by <a href="https://github.com/Okhoshi"><code>@Okhoshi</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1066">prometheus/client_golang#1066</a></li> <li>Bump github.com/cespare/xxhash/v2 from 2.1.2 to 2.2.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1199">prometheus/client_golang#1199</a></li> <li>Bump github.com/prometheus/procfs from 0.8.0 to 0.9.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1198">prometheus/client_golang#1198</a></li> <li>Bump golang.org/x/sys from 0.3.0 to 0.4.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1217">prometheus/client_golang#1217</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1213">prometheus/client_golang#1213</a></li> <li>Bump github.com/prometheus/common from 0.37.0 to 0.39.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1197">prometheus/client_golang#1197</a></li> <li>Add <code>Header</code> method to Pusher for custom header by <a href="https://github.com/songjiayang"><code>@songjiayang</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1218">prometheus/client_golang#1218</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1224">prometheus/client_golang#1224</a></li> <li>api: Extend and improve json-iterator usage by <a href="https://github.com/beorn7"><code>@beorn7</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1225">prometheus/client_golang#1225</a></li> <li>Indent example in godoc consistently by <a href="https://github.com/lamida"><code>@lamida</code></a> in <a href="https://redirect.github.com/prometheus/client_golang/pull/1226">prometheus/client_golang#1226</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md">github.com/prometheus/client_golang's changelog</a>.</em></p> <blockquote> <h2>Unreleased</h2> <h2>1.15.0 / 2023-04-13</h2> <h2>What's Changed</h2> <ul> <li>[BUGFIX] Fix issue with atomic variables on ppc64le <a href="https://redirect.github.com/prometheus/client_golang/issues/1171">#1171</a></li> <li>[BUGFIX] Support for multiple samples within same metric <a href="https://redirect.github.com/prometheus/client_golang/issues/1181">#1181</a></li> <li>[BUGFIX] Bump golang.org/x/text to v0.3.8 to mitigate CVE-2022-32149 <a href="https://redirect.github.com/prometheus/client_golang/issues/1187">#1187</a></li> <li>[ENHANCEMENT] Add exemplars and middleware examples <a href="https://redirect.github.com/prometheus/client_golang/issues/1173">#1173</a></li> <li>[ENHANCEMENT] Add more context to "duplicate label names" error to enable debugging <a href="https://redirect.github.com/prometheus/client_golang/issues/1177">#1177</a></li> <li>[ENHANCEMENT] Add constrained labels and constrained variant for all MetricVecs <a href="https://redirect.github.com/prometheus/client_golang/issues/1151">#1151</a></li> <li>[ENHANCEMENT] Moved away from deprecated github.com/golang/protobuf package <a href="https://redirect.github.com/prometheus/client_golang/issues/1183">#1183</a></li> <li>[ENHANCEMENT] Add possibility to dynamically get label values for http instrumentation <a href="https://redirect.github.com/prometheus/client_golang/issues/1066">#1066</a></li> <li>[ENHANCEMENT] Add ability to Pusher to add custom headers <a href="https://redirect.github.com/prometheus/client_golang/issues/1218">#1218</a></li> <li>[ENHANCEMENT] api: Extend and improve efficiency of json-iterator usage <a href="https://redirect.github.com/prometheus/client_golang/issues/1225">#1225</a></li> <li>[ENHANCEMENT] Added (official) support for go 1.20 <a href="https://redirect.github.com/prometheus/client_golang/issues/1234">#1234</a></li> <li>[ENHANCEMENT] timer: Added support for exemplars <a href="https://redirect.github.com/prometheus/client_golang/issues/1233">#1233</a></li> <li>[ENHANCEMENT] Filter expected metrics as well in CollectAndCompare <a href="https://redirect.github.com/prometheus/client_golang/issues/1143">#1143</a></li> <li>[ENHANCEMENT] ⚠️ Only set start/end if time is not Zero. This breaks compatibility in experimental api package. If you strictly depend on empty time.Time as actual value, the behavior is now changed <a href="https://redirect.github.com/prometheus/client_golang/issues/1238">#1238</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`4bbb297e54`"><code>4bbb297</code></a> Cut 1.15.1 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1266">#1266</a>)</li> <li><a href="`2eaffbdb02`"><code>2eaffbd</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1253">#1253</a> from prometheus/fixpro</li> <li><a href="`b8fdd239b2`"><code>b8fdd23</code></a> Added clarification.</li> <li><a href="`2ea234eef0`"><code>2ea234e</code></a> Revert "Remove unnecessary check if label is nil in observeWithExemplar (<a href="https://redirect.github.com/prometheus/client_golang/issues/1235">#1235</a>)"</li> <li><a href="`d7896d4bd0`"><code>d7896d4</code></a> Cut v1.15.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1249">#1249</a>)</li> <li><a href="`bba12b5514`"><code>bba12b5</code></a> Bump github.com/prometheus/common from 0.41.0 to 0.42.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1244">#1244</a>)</li> <li><a href="`9015fcfc2c`"><code>9015fcf</code></a> Bump github.com/golang/protobuf from 1.5.2 to 1.5.3 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1245">#1245</a>)</li> <li><a href="`1bb8cf8306`"><code>1bb8cf8</code></a> Bump golang.org/x/sys from 0.5.0 to 0.6.0 (<a href="https://redirect.github.com/prometheus/client_golang/issues/1246">#1246</a>)</li> <li><a href="`ff7efedd43`"><code>ff7efed</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_golang/issues/1243">#1243</a> from prometheus/dependabot/go_modules/google.golang....</li> <li><a href="`852a282f10`"><code>852a282</code></a> Bump google.golang.org/protobuf from 1.28.1 to 1.30.0</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/client_golang/compare/v1.14.0...v1.15.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/client_golang&package-manager=go_modules&previous-version=1.14.0&new-version=1.15.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	405c523422	Bump github.com/prometheus/client_model from 0.3.0 to 0.4.0 (#9447 ) Bumps [github.com/prometheus/client_model](https://github.com/prometheus/client_model) from 0.3.0 to 0.4.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_model/releases">github.com/prometheus/client_model's releases</a>.</em></p> <blockquote> <h2>0.4.0 / 2023-05-03</h2> <h2>What's Changed</h2> <ul> <li>Update proto tools by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://redirect.github.com/prometheus/client_model/pull/64">prometheus/client_model#64</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/SuperQ"><code>@SuperQ</code></a> made their first contribution in <a href="https://redirect.github.com/prometheus/client_model/pull/64">prometheus/client_model#64</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/client_model/compare/v0.3.0...v0.4.0">https://github.com/prometheus/client_model/compare/v0.3.0...v0.4.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`91c3945f2c`"><code>91c3945</code></a> Merge pull request <a href="https://redirect.github.com/prometheus/client_model/issues/64">#64</a> from prometheus/superq/update_proto</li> <li><a href="`31ca668385`"><code>31ca668</code></a> Update proto tools</li> <li>See full diff in <a href="https://github.com/prometheus/client_model/compare/v0.3.0...v0.4.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/prometheus/client_model&package-manager=go_modules&previous-version=0.3.0&new-version=0.4.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	d43c0bb23b	Bump github.com/docker/distribution from 2.8.1+incompatible to 2.8.2+incompatible (#9450 ) Bumps [github.com/docker/distribution](https://github.com/docker/distribution) from 2.8.1+incompatible to 2.8.2+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/distribution/releases">github.com/docker/distribution's releases</a>.</em></p> <blockquote> <h2>v2.8.2</h2> <h2>What's Changed</h2> <ul> <li>Revert registry/client: set <code>Accept: identity</code> header when getting layers by <a href="https://github.com/ndeloof"><code>@ndeloof</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3783">distribution/distribution#3783</a></li> <li>Parse <code>http</code> forbidden as denied by <a href="https://github.com/vvoland"><code>@vvoland</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3914">distribution/distribution#3914</a></li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2022-28391">CVE-2022-28391</a> by bumping alpine from 3.14 to 3.16 by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> (<a href="https://redirect.github.com/distribution/distribution/pull/3650">#3650</a>)</li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2023-2253">CVE-2023-2253</a> runaway allocation on /v2/_catalog by <a href="https://github.com/josegomezr"><code>@josegomezr</code></a> <a href="`521ea3d973`"><code>521ea3d9</code></a></li> <li>Fix panic in inmemory driver by <a href="https://github.com/wy65701436"><code>@wy65701436</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li> <li>bump up golang version (alternative) by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li> <li>Dockerfile: update xx to v1.2.1 by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li> <li>update to go1.19.9 by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li> <li>Add code to handle pagination of parts. Fixes max layer size of 10GB bug by <a href="https://github.com/DavidSpek"><code>@DavidSpek</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li> <li>Dockerfile: fix filenames of artifacts by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3911">distribution/distribution#3911</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2</a></p> <h2>v2.8.2-beta.2</h2> <h2>What's Changed</h2> <ul> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2022-28391">CVE-2022-28391</a> by bumping alpine from 3.14 to 3.16 by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> (<a href="https://redirect.github.com/distribution/distribution/pull/3650">#3650</a>)</li> <li>Fix <a href="https://www.cve.org/CVERecord?id=CVE-2023-2253">CVE-2023-2253</a> runaway allocation on /v2/_catalog by <a href="https://github.com/josegomezr"><code>@josegomezr</code></a> <a href="`521ea3d973`"><code>521ea3d9</code></a></li> <li>Fix panic in inmemory driver by <a href="https://github.com/wy65701436"><code>@wy65701436</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li> <li>bump up golang version (alternative) by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li> <li>Dockerfile: update xx to v1.2.1 by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li> <li>update to go1.19.9 by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li> <li>Add code to handle pagination of parts. Fixes max layer size of 10GB bug by <a href="https://github.com/DavidSpek"><code>@DavidSpek</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li> <li>Dockerfile: fix filenames of artifacts by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3911">distribution/distribution#3911</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.2">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.2</a></p> <h2>v2.8.2-beta.1</h2> <h3><strong>NOTE: This is a pre-release that does not contain any artifacts!</strong></h3> <h2>What's Changed</h2> <ul> <li>Fix runaway allocation on /v2/_catalog by <a href="https://github.com/josegomezr"><code>@josegomezr</code></a> <a href="`521ea3d973`"><code>521ea3d9</code></a></li> <li>Fix CVE-2022-28391 by bumping alpine from 3.14 to 3.16 by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3650">distribution/distribution#3650</a></li> <li>Fix panic in inmemory driver by <a href="https://github.com/wy65701436"><code>@wy65701436</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3815">distribution/distribution#3815</a></li> <li>bump up golang version (alternative) by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3903">distribution/distribution#3903</a></li> <li>Dockerfile: update xx to v1.2.1 by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3907">distribution/distribution#3907</a></li> <li>update to go1.19.9 by <a href="https://github.com/thaJeztah"><code>@thaJeztah</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3908">distribution/distribution#3908</a></li> <li>Add code to handle pagination of parts. Fixes max layer size of 10GB bug by <a href="https://github.com/DavidSpek"><code>@DavidSpek</code></a> in <a href="https://redirect.github.com/distribution/distribution/pull/3893">distribution/distribution#3893</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.1">https://github.com/distribution/distribution/compare/v2.8.1...v2.8.2-beta.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`7c354a4b40`"><code>7c354a4</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3915">#3915</a> from distribution/2.8.2-release-notes</li> <li><a href="`a173a9c625`"><code>a173a9c</code></a> Add v2.8.2 release notes</li> <li><a href="`4894d35ecc`"><code>4894d35</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3914">#3914</a> from vvoland/handle-forbidden-28</li> <li><a href="`f067f66d3d`"><code>f067f66</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3783">#3783</a> from ndeloof/accept-encoding-28</li> <li><a href="`483ad69da3`"><code>483ad69</code></a> registry/errors: Parse http forbidden as denied</li> <li><a href="`2b0f84df21`"><code>2b0f84d</code></a> Revert "registry/client: set Accept: identity header when getting layers"</li> <li><a href="`320d6a141f`"><code>320d6a1</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3912">#3912</a> from distribution/2.8.2-beta.2-release-notes</li> <li><a href="`5f3ca1b2fb`"><code>5f3ca1b</code></a> Add release notes for 2.8.2-beta.2 release</li> <li><a href="`cb840f63b3`"><code>cb840f6</code></a> Merge pull request <a href="https://redirect.github.com/docker/distribution/issues/3911">#3911</a> from thaJeztah/2.8_backport_fix_releaser_filenames</li> <li><a href="`e884644fff`"><code>e884644</code></a> Dockerfile: fix filenames of artifacts</li> <li>Additional commits viewable in <a href="https://github.com/docker/distribution/compare/v2.8.1...v2.8.2">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/distribution&package-manager=go_modules&previous-version=2.8.1+incompatible&new-version=2.8.2+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/loki/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	428b05d7b7	Bump github.com/imdario/mergo from 0.3.13 to 0.3.15 (#9439 ) Bumps [github.com/imdario/mergo](https://github.com/imdario/mergo) from 0.3.13 to 0.3.15. <details> <summary>Commits</summary> <ul> <li><a href="`fb3c082091`"><code>fb3c082</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="`c9e40b59db`"><code>c9e40b5</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/227">#227</a> from eh-steve/should-not-dereference</li> <li><a href="`acd16ec124`"><code>acd16ec</code></a> Merge branch 'master' into should-not-dereference</li> <li><a href="`62d1cf2897`"><code>62d1cf2</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="`dcef160919`"><code>dcef160</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/226">#226</a> from ronaudinho/fix/202</li> <li><a href="`404749e66d`"><code>404749e</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="`bd316d34ac`"><code>bd316d3</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/221">#221</a> from zhiyu0729/issue220</li> <li><a href="`5b9bbdb8b6`"><code>5b9bbdb</code></a> Update stackaid dependencies for imdario/mergo</li> <li><a href="`90db0ad2f4`"><code>90db0ad</code></a> Merge pull request <a href="https://redirect.github.com/imdario/mergo/issues/170">#170</a> from mdeltour/fix/naming-typo</li> <li><a href="`d19834bb68`"><code>d19834b</code></a> Update stackaid dependencies for imdario/mergo</li> <li>Additional commits viewable in <a href="https://github.com/imdario/mergo/compare/v0.3.13...v0.3.15">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/imdario/mergo&package-manager=go_modules&previous-version=0.3.13&new-version=0.3.15)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	978606b641	Bump golang.org/x/crypto from 0.7.0 to 0.9.0 (#9428 ) Bumps [golang.org/x/crypto](https://github.com/golang/crypto) from 0.7.0 to 0.9.0. <details> <summary>Commits</summary> <ul> <li><a href="`a4e984136a`"><code>a4e9841</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="`3ef8056490`"><code>3ef8056</code></a> ssh/test: enable on solaris</li> <li><a href="`a8cc953517`"><code>a8cc953</code></a> ssh: skip unsupported tests on wasip1</li> <li><a href="`7d6d3f5d4a`"><code>7d6d3f5</code></a> ssh/test: skip TestValidTerminalMode on non-Bourne shells</li> <li><a href="`1faeef9713`"><code>1faeef9</code></a> cryptobyte: reject Object Identifiers with leading 0x80</li> <li><a href="`00fd4ff485`"><code>00fd4ff</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="`018c28f8a1`"><code>018c28f</code></a> all: fix some comments</li> <li><a href="`9cd0187c09`"><code>9cd0187</code></a> curve25519: use crypto/ecdh on Go 1.20</li> <li><a href="`c6a20f9984`"><code>c6a20f9</code></a> ssh: document that ParseRawPrivateKey supports Ed25519 keys</li> <li>See full diff in <a href="https://github.com/golang/crypto/compare/v0.7.0...v0.9.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/crypto&package-manager=go_modules&previous-version=0.7.0&new-version=0.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	9cd6d079d1	Bump github.com/Azure/go-autorest/autorest from 0.11.28 to 0.11.29 (#9338 ) Bumps [github.com/Azure/go-autorest/autorest](https://github.com/Azure/go-autorest) from 0.11.28 to 0.11.29. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/Azure/go-autorest/releases">github.com/Azure/go-autorest/autorest's releases</a>.</em></p> <blockquote> <h2>autorest/v0.11.29</h2> <p>Remove undefined behavior during return <a href="https://redirect.github.com/Azure/go-autorest/issues/723">#723</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`c2958ac74c`"><code>c2958ac</code></a> Remove undefined behavior during return (<a href="https://redirect.github.com/Azure/go-autorest/issues/723">#723</a>)</li> <li><a href="`553a90ae65`"><code>553a90a</code></a> fix: enable update jwt via callback for workloadidentity (<a href="https://redirect.github.com/Azure/go-autorest/issues/719">#719</a>)</li> <li><a href="`ee71315119`"><code>ee71315</code></a> Update dependencies (<a href="https://redirect.github.com/Azure/go-autorest/issues/720">#720</a>)</li> <li><a href="`9038e4a609`"><code>9038e4a</code></a> feat: allow getting authorizer from existing file settings (<a href="https://redirect.github.com/Azure/go-autorest/issues/709">#709</a>)</li> <li><a href="`79575dd7ba`"><code>79575dd</code></a> Retract adal versions with token refresh errors (<a href="https://redirect.github.com/Azure/go-autorest/issues/716">#716</a>)</li> <li><a href="`93a6fda0d7`"><code>93a6fda</code></a> Update CI to latest Go and Ubuntu images (<a href="https://redirect.github.com/Azure/go-autorest/issues/717">#717</a>)</li> <li><a href="`2fa44cb18b`"><code>2fa44cb</code></a> Fix validation in resource id parsing (<a href="https://redirect.github.com/Azure/go-autorest/issues/704">#704</a>)</li> <li>See full diff in <a href="https://github.com/Azure/go-autorest/compare/autorest/v0.11.28...autorest/v0.11.29">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/Azure/go-autorest/autorest&package-manager=go_modules&previous-version=0.11.28&new-version=0.11.29)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	ad3a04326d	Bump golang.org/x/net from 0.8.0 to 0.9.0 (#9318 ) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.8.0 to 0.9.0. <details> <summary>Commits</summary> <ul> <li><a href="`694cff8668`"><code>694cff8</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="`6960703597`"><code>6960703</code></a> http2: log the correct error when retrying in (*Transport).RoundTripOpt</li> <li><a href="`9f24bb44e6`"><code>9f24bb4</code></a> http2: properly discard data received after request/response body is closed</li> <li><a href="`08dda57501`"><code>08dda57</code></a> html: fix package doc typo</li> <li>See full diff in <a href="https://github.com/golang/net/compare/v0.8.0...v0.9.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/net&package-manager=go_modules&previous-version=0.8.0&new-version=0.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	b3ca9fc219	Bump github.com/fatih/color from 1.14.1 to 1.15.0 (#9296 ) Bumps [github.com/fatih/color](https://github.com/fatih/color) from 1.14.1 to 1.15.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/fatih/color/releases">github.com/fatih/color's releases</a>.</em></p> <blockquote> <h2>v1.15.0</h2> <h2>What's Changed</h2> <ul> <li>windows: enable virtual terminal processing, fixes <a href="https://redirect.github.com/fatih/color/issues/169">#169</a> by <a href="https://github.com/martinlindhe"><code>@martinlindhe</code></a> in <a href="https://redirect.github.com/fatih/color/pull/186">fatih/color#186</a></li> <li>ci: update dependencies by <a href="https://github.com/fatih"><code>@fatih</code></a> in <a href="https://redirect.github.com/fatih/color/pull/191">fatih/color#191</a></li> <li>Bump golang.org/x/sys from 0.5.0 to 0.6.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://redirect.github.com/fatih/color/pull/189">fatih/color#189</a></li> <li>Refactor color_windows.go by <a href="https://github.com/pellared"><code>@pellared</code></a> in <a href="https://redirect.github.com/fatih/color/pull/188">fatih/color#188</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/martinlindhe"><code>@martinlindhe</code></a> made their first contribution in <a href="https://redirect.github.com/fatih/color/pull/186">fatih/color#186</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/fatih/color/compare/v1.14.1...v1.15.0">https://github.com/fatih/color/compare/v1.14.1...v1.15.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`12126ed593`"><code>12126ed</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/188">#188</a> from pellared/patch-1</li> <li><a href="`770038b843`"><code>770038b</code></a> Merge branch 'main' into patch-1</li> <li><a href="`c5d9a2b926`"><code>c5d9a2b</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/189">#189</a> from fatih/dependabot/go_modules/golang.org/x/sys-0.6.0</li> <li><a href="`1ceb74688c`"><code>1ceb746</code></a> Bump golang.org/x/sys from 0.5.0 to 0.6.0</li> <li><a href="`66a1b893b7`"><code>66a1b89</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/191">#191</a> from fatih/update-ci-deps</li> <li><a href="`3228f5ab22`"><code>3228f5a</code></a> ci: update dependencies</li> <li><a href="`0226ec9472`"><code>0226ec9</code></a> Refactor color_windows.go</li> <li><a href="`d080a5b792`"><code>d080a5b</code></a> Merge pull request <a href="https://redirect.github.com/fatih/color/issues/186">#186</a> from martinlindhe/main</li> <li><a href="`02ab2eaae1`"><code>02ab2ea</code></a> windows: enable virtual terminal processing, fixes <a href="https://redirect.github.com/fatih/color/issues/169">#169</a></li> <li>See full diff in <a href="https://github.com/fatih/color/compare/v1.14.1...v1.15.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/fatih/color&package-manager=go_modules&previous-version=1.14.1&new-version=1.15.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	bea5481a54	Bump github.com/klauspost/compress from 1.16.0 to 1.16.5 (#9281 ) Bumps [github.com/klauspost/compress](https://github.com/klauspost/compress) from 1.16.0 to 1.16.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/klauspost/compress/releases">github.com/klauspost/compress's releases</a>.</em></p> <blockquote> <h2>v1.16.5</h2> <h2>What's Changed</h2> <ul> <li>zstd: readByte needs to use io.ReadFull by <a href="https://github.com/jnoxon"><code>@jnoxon</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/802">klauspost/compress#802</a></li> <li>gzip: Fix WriterTo after initial read by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/804">klauspost/compress#804</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jnoxon"><code>@jnoxon</code></a> made their first contribution in <a href="https://redirect.github.com/klauspost/compress/pull/802">klauspost/compress#802</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.4...v1.16.5">https://github.com/klauspost/compress/compare/v1.16.4...v1.16.5</a></p> <h2>v1.16.4</h2> <h2>What's Changed</h2> <ul> <li>s2: Fix huge block overflow by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/779">klauspost/compress#779</a></li> <li>s2: Allow CustomEncoder fallback by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/780">klauspost/compress#780</a></li> <li>zstd: Fix amd64 not always detecting corrupt data by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/785">klauspost/compress#785</a></li> <li>zstd: Improve zstd best efficiency by <a href="https://github.com/klauspost"><code>@klauspost</code></a> and <a href="https://github.com/greatroar"><code>@greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/784">klauspost/compress#784</a></li> <li>zstd: Make load(32\|64)32 safer and smaller by <a href="https://github.com/greatroar"><code>@greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/788">klauspost/compress#788</a></li> <li>zstd: Fix quick reject on long backmatches by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/787">klauspost/compress#787</a></li> <li>zstd: Revert table size change by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/789">klauspost/compress#789</a></li> <li>zstd: Respect WithAllLitEntropyCompression by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/792">klauspost/compress#792</a></li> <li>zstd: Fix back-referenced offset by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/793">klauspost/compress#793</a></li> <li>zstd: Load source value at start of loop by <a href="https://github.com/greatroar"><code>@greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/794">klauspost/compress#794</a></li> <li>zstd: Shorten checksum code by <a href="https://github.com/greatroar"><code>@greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/795">klauspost/compress#795</a></li> <li>zstd: Fix fallback on incompressible block by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/798">klauspost/compress#798</a></li> <li>gzhttp: Suppport ResponseWriter Unwrap() in gzhttp handler by <a href="https://github.com/jgimenez"><code>@jgimenez</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/799">klauspost/compress#799</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/jgimenez"><code>@jgimenez</code></a> made their first contribution in <a href="https://redirect.github.com/klauspost/compress/pull/799">klauspost/compress#799</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.3...v1.16.4">https://github.com/klauspost/compress/compare/v1.16.3...v1.16.4</a></p> <h2>v1.16.3</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.2...v1.16.3">https://github.com/klauspost/compress/compare/v1.16.2...v1.16.3</a></p> <h2>v1.16.2</h2> <h2>What's Changed</h2> <ul> <li>Fix Goreleaser permissions by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/777">klauspost/compress#777</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/klauspost/compress/compare/v1.16.1...v1.16.2">https://github.com/klauspost/compress/compare/v1.16.1...v1.16.2</a></p> <h2>v1.16.1</h2> <h2>What's Changed</h2> <ul> <li>zstd: Speed up + improve best encoder by <a href="https://github.com/greatroar"><code>@greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/776">klauspost/compress#776</a></li> <li>s2: Add Intel LZ4s converter by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/766">klauspost/compress#766</a></li> <li>gzhttp: Add BREACH mitigation by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/762">klauspost/compress#762</a></li> <li>gzhttp: Remove a few unneeded allocs by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/768">klauspost/compress#768</a></li> <li>gzhttp: Fix crypto/rand.Read usage by <a href="https://github.com/greatroar"><code>@greatroar</code></a> in <a href="https://redirect.github.com/klauspost/compress/pull/770">klauspost/compress#770</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="`ed6feffc3b`"><code>ed6feff</code></a> gzip: Fix WriterTo after initial read (<a href="https://redirect.github.com/klauspost/compress/issues/804">#804</a>)</li> <li><a href="`62dad8110a`"><code>62dad81</code></a> readerWrapper: readByte needs to use io.ReadFull (<a href="https://redirect.github.com/klauspost/compress/issues/802">#802</a>)</li> <li><a href="`b0f7a9437e`"><code>b0f7a94</code></a> Update README.md</li> <li><a href="`3c61d32490`"><code>3c61d32</code></a> Allow access to internal ResponseWriter in gzhttp handler (<a href="https://redirect.github.com/klauspost/compress/issues/799">#799</a>)</li> <li><a href="`9243a1faf0`"><code>9243a1f</code></a> Update README.md</li> <li><a href="`47eb6d4224`"><code>47eb6d4</code></a> zstd: Fix fallback on incompressible block (<a href="https://redirect.github.com/klauspost/compress/issues/798">#798</a>)</li> <li><a href="`5753c12f5f`"><code>5753c12</code></a> zstd: Shorten checksum code (<a href="https://redirect.github.com/klauspost/compress/issues/795">#795</a>)</li> <li><a href="`6c7dd07ffa`"><code>6c7dd07</code></a> zstd: Load source value at start of loop (<a href="https://redirect.github.com/klauspost/compress/issues/794">#794</a>)</li> <li><a href="`2a02ad2836`"><code>2a02ad2</code></a> zstd: Fix back-referenced offset (<a href="https://redirect.github.com/klauspost/compress/issues/793">#793</a>)</li> <li><a href="`dc198c145e`"><code>dc198c1</code></a> zstd: Respect WithAllLitEntropyCompression (<a href="https://redirect.github.com/klauspost/compress/issues/792">#792</a>)</li> <li>Additional commits viewable in <a href="https://github.com/klauspost/compress/compare/v1.16.0...v1.16.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/klauspost/compress&package-manager=go_modules&previous-version=1.16.0&new-version=1.16.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	5a102bcc1e	Bump github.com/IBM/ibm-cos-sdk-go from 1.9.4 to 1.10.0 (#9256 ) Bumps [github.com/IBM/ibm-cos-sdk-go](https://github.com/IBM/ibm-cos-sdk-go) from 1.9.4 to 1.10.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/IBM/ibm-cos-sdk-go/releases">github.com/IBM/ibm-cos-sdk-go's releases</a>.</em></p> <blockquote> <h2>Release 1.10.0</h2> <h2>Content</h2> <h3>Features</h3> <ul> <li>S3 Compatible Object Lock Support</li> <li>One Rate Active Plan Support</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/IBM/ibm-cos-sdk-go/blob/master/CHANGELOG.md">github.com/IBM/ibm-cos-sdk-go's changelog</a>.</em></p> <blockquote> <h2>1.10.0</h2> <h3>Content</h3> <h4>Features</h4> <ul> <li>S3 Compatible Object Lock Support</li> <li>One Rate Active Plan Support</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`3e0dffac4c`"><code>3e0dffa</code></a> Release 1.10.0</li> <li>See full diff in <a href="https://github.com/IBM/ibm-cos-sdk-go/compare/v1.9.4...v1.10.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/IBM/ibm-cos-sdk-go&package-manager=go_modules&previous-version=1.9.4&new-version=1.10.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	bce8d6bda7	Bump golang.org/x/text from 0.8.0 to 0.9.0 (#9257 ) Bumps [golang.org/x/text](https://github.com/golang/text) from 0.8.0 to 0.9.0. <details> <summary>Commits</summary> <ul> <li><a href="`48e4a4a957`"><code>48e4a4a</code></a> all: fix some comments</li> <li>See full diff in <a href="https://github.com/golang/text/compare/v0.8.0...v0.9.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/text&package-manager=go_modules&previous-version=0.8.0&new-version=0.9.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Periklis Tsirakidis	3abd260975	Bump dskit from 528d8a7 to 1725bcc (#9184 )	2 years ago
dependabot[bot]	c91bfdf6fd	Bump github.com/minio/minio-go/v7 from 7.0.45 to 7.0.52 (#9208 ) Bumps [github.com/minio/minio-go/v7](https://github.com/minio/minio-go) from 7.0.45 to 7.0.52. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/minio/minio-go/releases">github.com/minio/minio-go/v7's releases</a>.</em></p> <blockquote> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>Revert "Add missing aws-chunked transfer encoding (<a href="https://redirect.github.com/minio/minio-go/issues/1803">#1803</a>)" by <a href="https://github.com/harshavardhana"><code>@harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1804">minio/minio-go#1804</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.51...v7.0.52">https://github.com/minio/minio-go/compare/v7.0.51...v7.0.52</a></p> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>Fix listobjects with metadata by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1795">minio/minio-go#1795</a></li> <li>Add missing aws-chunked transfer encoding by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1803">minio/minio-go#1803</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.50...v7.0.51">https://github.com/minio/minio-go/compare/v7.0.50...v7.0.51</a></p> <h2>Bugfix release</h2> <h2>What's Changed</h2> <ul> <li>Update minio.Core API by <a href="https://github.com/donatello"><code>@donatello</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1764">minio/minio-go#1764</a></li> <li>remove sse-s3 header in completeMultipartUpload by <a href="https://github.com/harshavardhana"><code>@harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1777">minio/minio-go#1777</a></li> <li>upgrade all deps by <a href="https://github.com/harshavardhana"><code>@harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1778">minio/minio-go#1778</a></li> <li>allow setting region via custom function by <a href="https://github.com/harshavardhana"><code>@harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1786">minio/minio-go#1786</a></li> <li>allow virtual host style for GetBucketLocation API, if requested by <a href="https://github.com/harshavardhana"><code>@harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1785">minio/minio-go#1785</a></li> <li>Add ap-south-2 to endpoints by <a href="https://github.com/Prajithp"><code>@Prajithp</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1781">minio/minio-go#1781</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/Prajithp"><code>@Prajithp</code></a> made their first contribution in <a href="https://redirect.github.com/minio/minio-go/pull/1781">minio/minio-go#1781</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.49...v7.0.50">https://github.com/minio/minio-go/compare/v7.0.49...v7.0.50</a></p> <h2>Bugfix Release</h2> <h2>What's Changed</h2> <ul> <li>support If-Match/If-None-Match for PUT operations by <a href="https://github.com/harshavardhana"><code>@harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1772">minio/minio-go#1772</a></li> <li>upgrade minio-go deps by <a href="https://github.com/harshavardhana"><code>@harshavardhana</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1774">minio/minio-go#1774</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/minio/minio-go/compare/v7.0.48...v7.0.49">https://github.com/minio/minio-go/compare/v7.0.48...v7.0.49</a></p> <h2>Bugfix Release</h2> <h2>What's Changed</h2> <ul> <li>Fix sharing of MD5 hasher by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1753">minio/minio-go#1753</a></li> <li>feat(<a href="https://redirect.github.com/minio/minio-go/issues/1755">#1755</a>): GetObject supports overriding response header values by <a href="https://github.com/reedchan7"><code>@reedchan7</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1756">minio/minio-go#1756</a></li> <li>Snowball: If Modtime unset, use current time by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1763">minio/minio-go#1763</a></li> <li>Bump Go versions by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1768">minio/minio-go#1768</a></li> <li>feat: add aws ap-southeast-4 region by <a href="https://github.com/ianmuge"><code>@ianmuge</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1767">minio/minio-go#1767</a></li> <li>STSCertificateIdentity: Init request form by <a href="https://github.com/klauspost"><code>@klauspost</code></a> in <a href="https://redirect.github.com/minio/minio-go/pull/1770">minio/minio-go#1770</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/reedchan7"><code>@reedchan7</code></a> made their first contribution in <a href="https://redirect.github.com/minio/minio-go/pull/1756">minio/minio-go#1756</a></li> <li><a href="https://github.com/ianmuge"><code>@ianmuge</code></a> made their first contribution in <a href="https://redirect.github.com/minio/minio-go/pull/1767">minio/minio-go#1767</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="`11eb82d85f`"><code>11eb82d</code></a> Revert "Add missing aws-chunked transfer encoding (<a href="https://redirect.github.com/minio/minio-go/issues/1803">#1803</a>)" (<a href="https://redirect.github.com/minio/minio-go/issues/1804">#1804</a>)</li> <li><a href="`7bf8079be6`"><code>7bf8079</code></a> Update version to next release</li> <li><a href="`8175bf7bda`"><code>8175bf7</code></a> Add missing aws-chunked transfer encoding (<a href="https://redirect.github.com/minio/minio-go/issues/1803">#1803</a>)</li> <li><a href="`5b15988473`"><code>5b15988</code></a> Fix listobjects with metadata (<a href="https://redirect.github.com/minio/minio-go/issues/1795">#1795</a>)</li> <li><a href="`6fcbe6de97`"><code>6fcbe6d</code></a> Update version to next release</li> <li><a href="`7c9b5ff1c0`"><code>7c9b5ff</code></a> fix: all the linter issues reported</li> <li><a href="`5d09d8f78b`"><code>5d09d8f</code></a> Add ap-south-2 to endpoints (<a href="https://redirect.github.com/minio/minio-go/issues/1781">#1781</a>)</li> <li><a href="`24cdd7fc94`"><code>24cdd7f</code></a> allow virtual host style for GetBucketLocation API, if requested (<a href="https://redirect.github.com/minio/minio-go/issues/1785">#1785</a>)</li> <li><a href="`5384d69d15`"><code>5384d69</code></a> allow setting region via custom function (<a href="https://redirect.github.com/minio/minio-go/issues/1786">#1786</a>)</li> <li><a href="`9948a7b56c`"><code>9948a7b</code></a> upgrade all deps (<a href="https://redirect.github.com/minio/minio-go/issues/1778">#1778</a>)</li> <li>Additional commits viewable in <a href="https://github.com/minio/minio-go/compare/v7.0.45...v7.0.52">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/minio/minio-go/v7&package-manager=go_modules&previous-version=7.0.45&new-version=7.0.52)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	8c0e4fbe83	Bump github.com/aliyun/aliyun-oss-go-sdk from 2.2.2+incompatible to 2.2.7+incompatible (#9225 ) Bumps [github.com/aliyun/aliyun-oss-go-sdk](https://github.com/aliyun/aliyun-oss-go-sdk) from 2.2.2+incompatible to 2.2.7+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/aliyun/aliyun-oss-go-sdk/releases">github.com/aliyun/aliyun-oss-go-sdk's releases</a>.</em></p> <blockquote> <h2>v2.2.7</h2> <p>增加：support get info form EC & x-oss-err. 增加：support bucket replication time control api. 增加：support bucket style api. 增加：support list bucket cname api. 增加：support bucket resource group api. 修复：do not use uname -* cmd to get platform information. 修复：call rand.Seed only once.</p> <h2>v2.2.6</h2> <p>增加：the object name cannot be empty in object's apis. 增加：support access monitor api. 修复：fix GetBucketStat bug. 增加：lifecycle rule supports filter configuration. 增加：support deleting the specified bucket tags. 修复：can't delete objects where the keys contain special characters.</p> <h2>v2.2.5</h2> <p>增加：add meta data indexing api 删除：remove github.com/baiyubin/aliyun-sts-go-sdk/sts deps. 修改：remove chartset info in text/* mime type. 增加：add restore info in listObjects/listObjectVersions 增加：add x-oss-ac-* into subresource list. 修改：fix select object bug. 增加：getBucketStat api returns more info 增加：support X-Oss-Notification header in CompleteMultipartUpload api.</p> <h2>v2.2.4</h2> <ul> <li>增加：支持cname的创建和删除</li> <li>增加：增加inventory xml 接口</li> </ul> <h2>v2.2.3</h2> <ul> <li>增加：支持云盒</li> <li>增加：支持v4签名</li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/aliyun/aliyun-oss-go-sdk/blob/master/CHANGELOG.md">github.com/aliyun/aliyun-oss-go-sdk's changelog</a>.</em></p> <blockquote> <h1>ChangeLog - Aliyun OSS SDK for Go</h1> <h2>版本号：v2.2.7 日期：2023-03-23</h2> <h3>变更内容</h3> <ul> <li>增加：support get info form EC & x-oss-err.</li> <li>增加：support bucket replication time control api.</li> <li>增加：support bucket style api.</li> <li>增加：support list bucket cname api.</li> <li>增加：support bucket resource group api.</li> <li>修复：do not use uname -* cmd to get platform information.</li> <li>修复：call rand.Seed only once.</li> </ul> <h2>版本号：v2.2.6 日期：2022-11-16</h2> <h3>变更内容</h3> <ul> <li>增加：the object name cannot be empty in object's apis.</li> <li>增加：support access monitor api.</li> <li>修复：fix GetBucketStat bug.</li> <li>增加：lifecycle rule supports filter configuration.</li> <li>增加：support deleting the specified bucket tags.</li> <li>修复：can't delete objects where the keys contain special characters.</li> </ul> <h2>版本号：v2.2.5 日期：2022-08-19</h2> <h3>变更内容</h3> <ul> <li>增加：add meta data indexing api</li> <li>删除：remove github.com/baiyubin/aliyun-sts-go-sdk/sts deps.</li> <li>修改：remove chartset info in text/* mime type.</li> <li>增加：add restore info in listObjects/listObjectVersions</li> <li>增加：add x-oss-ac-* into subresource list.</li> <li>修改：fix select object bug.</li> <li>增加：getBucketStat api returns more info</li> <li>增加：support X-Oss-Notification header in CompleteMultipartUpload api.</li> </ul> <h2>版本号：v2.2.4 日期：2022-05-25</h2> <h3>变更内容</h3> <ul> <li>增加：add cname api</li> <li>增加：add inventory api for xml config</li> </ul> <h1>ChangeLog - Aliyun OSS SDK for Go</h1> <h2>版本号：v2.2.3 日期：2022-05-13</h2> <h3>变更内容</h3> <ul> <li>增加：support cloud-box</li> <li>增加：support v4 signature</li> </ul> <h1>ChangeLog - Aliyun OSS SDK for Go</h1> <h2>版本号：v2.2.2 日期：2022-03-24</h2> <h3>变更内容</h3> <ul> <li>增加：add GetBucketCORSXml,SetBucketCORSXml,GetBucketLifecycleXml</li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="`77977ff44f`"><code>77977ff</code></a> release v2.2.7</li> <li><a href="`95400a14f6`"><code>95400a1</code></a> modify read err from header unit testing (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/372">#372</a>)</li> <li><a href="`64b34dc5dd`"><code>64b34dc</code></a> Read error information from header (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/369">#369</a>)</li> <li><a href="`72974c6a13`"><code>72974c6</code></a> modify fuction TestBucketResourceGroup</li> <li><a href="`f1516b15e1`"><code>f1516b1</code></a> modify bucket replication api (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/366">#366</a>)</li> <li><a href="`4543270634`"><code>4543270</code></a> modify aes key random number (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/368">#368</a>)</li> <li><a href="`2273dd713f`"><code>2273dd7</code></a> Modify the document address and error comments (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/367">#367</a>)</li> <li><a href="`8e7b9543bf`"><code>8e7b954</code></a> add bucket style api (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/361">#361</a>)</li> <li><a href="`b416f9d761`"><code>b416f9d</code></a> add bucket cname sample and modify list bucket cname api (<a href="https://redirect.github.com/aliyun/aliyun-oss-go-sdk/issues/364">#364</a>)</li> <li><a href="`c74b4e865f`"><code>c74b4e8</code></a> add bucket resource group api</li> <li>Additional commits viewable in <a href="https://github.com/aliyun/aliyun-oss-go-sdk/compare/v2.2.2...v2.2.7">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/aliyun/aliyun-oss-go-sdk&package-manager=go_modules&previous-version=2.2.2+incompatible&new-version=2.2.7+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	155eb522e2	Bump github.com/spf13/afero from 1.9.3 to 1.9.5 (#8992 ) Bumps [github.com/spf13/afero](https://github.com/spf13/afero) from 1.9.3 to 1.9.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/spf13/afero/releases">github.com/spf13/afero's releases</a>.</em></p> <blockquote> <h2>v1.9.5</h2> <p><strong>Full Changelog</strong>: <a href="https://github.com/spf13/afero/compare/v1.9.4...v1.9.5">https://github.com/spf13/afero/compare/v1.9.4...v1.9.5</a></p> <h2>v1.9.4</h2> <h2>What's Changed</h2> <ul> <li>Fix renaming a dir with sub-directories by <a href="https://github.com/nono"><code>@nono</code></a> in <a href="https://redirect.github.com/spf13/afero/pull/239">spf13/afero#239</a></li> <li>github: Update Go build matrix by <a href="https://github.com/bep"><code>@bep</code></a> in <a href="https://redirect.github.com/spf13/afero/pull/385">spf13/afero#385</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/nono"><code>@nono</code></a> made their first contribution in <a href="https://redirect.github.com/spf13/afero/pull/239">spf13/afero#239</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/spf13/afero/compare/v1.9.3...v1.9.4">https://github.com/spf13/afero/compare/v1.9.3...v1.9.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="`d92c300a1b`"><code>d92c300</code></a> Fix failing tests on Windows with Go 1.20</li> <li><a href="`501e8d313c`"><code>501e8d3</code></a> Fix io.Seek* deprecation errors</li> <li><a href="`1edd01aa5f`"><code>1edd01a</code></a> Run go mod tidy</li> <li><a href="`4ba522f8c8`"><code>4ba522f</code></a> fix(deps): golang.org/x/crypto, golang.org/x/text</li> <li><a href="`cf95922e71`"><code>cf95922</code></a> all: Run gofumpt -l -w .</li> <li><a href="`a6023d20a1`"><code>a6023d2</code></a> github: Update Go build matrix</li> <li><a href="`3b1116bc67`"><code>3b1116b</code></a> memmap: Fix renaming a dir with sub-directories (<a href="https://redirect.github.com/spf13/afero/issues/239">#239</a>)</li> <li>See full diff in <a href="https://github.com/spf13/afero/compare/v1.9.3...v1.9.5">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/spf13/afero&package-manager=go_modules&previous-version=1.9.3&new-version=1.9.5)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
Peter Štibraný	90a1d4593e	Update Prometheus dependency (#9205 )	2 years ago
Robert Fratto	7bec727c6d	promtail: support configurable polling interval (#8874 ) Currently, Promtail always polls files every 250ms. This PR allows the polling period to be customized, starting at a minimum polling period and exponentially increasing the polling frequency to a bounded maximum if the file has no changes. When file changes are detected, the polling frequency resets to the minimum. The default behavior is the existing behavior; both the minimum and maximum polling intervals are set to 250ms. I'm opening this in draft to get early feedback. There's a few open questions: * Where can I add validations to ensure that the min/max polling intervals are configured properly? * Is this the right approach for implementation? Do I need to make any changes? * Does this need tests? I'll update the CHANGELOG and Documentation after we're agreed on an approach.	2 years ago
dependabot[bot]	e9bc461c63	Bump github.com/docker/docker from 20.10.23+incompatible to 23.0.3+incompatible (#9035 ) Bumps [github.com/docker/docker](https://github.com/docker/docker) from 20.10.23+incompatible to 23.0.3+incompatible. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/docker/releases">github.com/docker/docker's releases</a>.</em></p> <blockquote> <h2>v23.0.3</h2> <h2>23.0.3</h2> <blockquote> <p><strong>Note</strong></p> <p>Due to an issue with CentOS 9 Stream's package repositories, packages for CentOS 9 are currently unavailable. Packages for CentOS 9 may be added later, or as part of the next (23.0.4) patch release.</p> </blockquote> <h3>Bug fixes and enhancements</h3> <ul> <li>Fixed a number of issues that can cause Swarm encrypted overlay networks to fail to uphold their guarantees, addressing <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28841">CVE-2023-28841</a>, <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28840">CVE-2023-28840</a>, and <a href="https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28842">CVE-2023-28842</a>. <ul> <li>A lack of kernel support for encrypted overlay networks now reports as an error.</li> <li>Encrypted overlay networks are eagerly set up, rather than waiting for multiple nodes to attach.</li> <li>Encrypted overlay networks are now usable on Red Hat Enterprise Linux 9 through the use of the <code>xt_bpf</code> kernel module.</li> <li>Users of Swarm overlay networks should review <a href="https://github.com/moby/moby/security/advisories/GHSA-vwm3-crmr-xfxw">GHSA-vwm3-crmr-xfxw</a> to ensure that unintentional exposure has not occurred.</li> </ul> </li> </ul> <h3>Packaging Updates</h3> <ul> <li>Update containerd to <a href="https://github.com/containerd/containerd/releases/tag/v1.6.20">v1.6.20</a>.</li> <li>Update runc to <a href="https://github.com/opencontainers/runc/releases/tag/v1.1.5">v1.1.5</a>.</li> </ul> <h2>v23.0.2</h2> <h2>23.0.2</h2> <p>For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:</p> <ul> <li><a href="https://github.com/docker/cli/milestone/75?closed=1">docker/cli, 23.0.2 milestone</a></li> <li><a href="https://github.com/moby/moby/milestone/114?closed=1">moby/moby, 23.0.2 milestone</a></li> </ul> <h3>Bug fixes and enhancements</h3> <ul> <li>Fully resolve missing checks for <code>apparmor_parser</code> when an AppArmor enabled kernel is detected. <a href="https://redirect.github.com/containerd/containerd/pull/8087">containerd/containerd#8087</a>, <a href="https://redirect.github.com/moby/moby/pull/45043">moby/moby#45043</a></li> <li>Ensure that credentials are redacted from Git URLs when generating BuildKit buildinfo. Fixes <a href="https://github.com/moby/buildkit/security/advisories/GHSA-gc89-7gcr-jxqc">CVE-2023-26054</a>. <a href="https://redirect.github.com/moby/moby/pull/45110">moby/moby#45110</a></li> <li>Fix anonymous volumes created by a <code>VOLUME</code> line in a Dockerfile being excluded from volume prune. <a href="https://redirect.github.com/moby/moby/pull/45159">moby/moby#45159</a></li> <li>Fix a failure to properly propagate errors during removal of volumes on a Swarm node. <a href="https://redirect.github.com/moby/moby/pull/45155">moby/moby#45155</a></li> <li>Temporarily work around a bug in BuildKit <code>COPY --link</code> by disabling mergeop/diffop optimization. <a href="https://redirect.github.com/moby/moby/pull/45112">moby/moby#45112</a></li> <li>Properly clean up child tasks when a parent Swarm job is removed. <a href="https://redirect.github.com/moby/swarmkit/pull/3112">moby/swarmkit#3112</a>, <a href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li> <li>Fix Swarm service creation logic so that both a GenericResource and a non-default network can be used together. <a href="https://redirect.github.com/moby/swarmkit/pull/3082">moby/swarmkit#3082</a>, <a href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li> <li>Fix Swarm CSI support requiring the CSI plugin to offer staging endpoints in order to publish a volume. <a href="https://redirect.github.com/moby/swarmkit/pull/3116">moby/swarmkit#3116</a>, <a href="https://redirect.github.com/moby/moby/pull/45107">moby/moby#45107</a></li> <li>Fix a panic caused by log buffering in some configurations. <a href="https://redirect.github.com/containerd/fifo/pull/47">containerd/fifo#47</a>, <a href="https://redirect.github.com/moby/moby/pull/45051">moby/moby#45051</a></li> <li>Log errors in the REST to Swarm gRPC API translation layer at the debug level to reduce redundancy and noise. <a href="https://redirect.github.com/moby/moby/pull/45016">moby/moby#45016</a></li> <li>Fix a DNS resolution issue affecting containers created with <code>--dns-opt</code> or <code>--dns-search</code> when <code>systemd-resolved</code> is used outside the container. <a href="https://redirect.github.com/moby/moby/pull/45000">moby/moby#45000</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="`59118bff50`"><code>59118bf</code></a> Merge pull request from GHSA-232p-vwff-86mp</li> <li><a href="`219f21bf07`"><code>219f21b</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/45196">#45196</a> from vvoland/integration-restart-race-23</li> <li><a href="`b87f7f18b8`"><code>b87f7f1</code></a> libnet/d/overlay: insert the input-drop rule</li> <li><a href="`c6bf3071fe`"><code>c6bf307</code></a> StartWithLogFile: Fix d.cmd race</li> <li><a href="`7f49ca259b`"><code>7f49ca2</code></a> TestDaemonRestartKillContainers: Fix loop capture</li> <li><a href="`98cbcb8003`"><code>98cbcb8</code></a> libnet/d/overlay: add BPF-powered VNI matcher</li> <li><a href="`5c5fac2374`"><code>5c5fac2</code></a> libnet/d/overlay: extract VNI match rule builder</li> <li><a href="`c492a22287`"><code>c492a22</code></a> libn/d/overlay: enforce encryption on sandbox init</li> <li><a href="`018edb0284`"><code>018edb0</code></a> libnet/d/overlay: document some encryption code</li> <li><a href="`a1fd2f22f6`"><code>a1fd2f2</code></a> Merge pull request <a href="https://redirect.github.com/docker/docker/issues/45157">#45157</a> from thaJeztah/23.0_backport_update_shfmt</li> <li>Additional commits viewable in <a href="https://github.com/docker/docker/compare/v20.10.23...v23.0.3">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/docker/docker&package-manager=go_modules&previous-version=20.10.23+incompatible&new-version=23.0.3+incompatible)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
Suruthi-G-K	e7b0d4d26e	feat(cos): Support authentication with trusted profiles (#8939 ) What this PR does / why we need it: Add trusted profile authentication in COS client Which issue(s) this PR fixes: Fixes NA Checklist - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (required) - [x] Documentation added - [x] Tests updated - [x] `CHANGELOG.md` updated - [ ] Changes that require user attention or interaction to upgrade are documented in `docs/sources/upgrading/_index.md` --------- Co-authored-by: shahulsonhal <shahulsonhal@gmail.com> Co-authored-by: tareqmamari <tariq.mamari@de.ibm.com>	2 years ago
Athira Varghese	ffb961c439	feat(storage): add support for IBM cloud object storage as storage client (#8826 ) What this PR does / why we need it: Add support for IBM cloud object storage as storage client Which issue(s) this PR fixes: Fixes NA Checklist - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (required) - [x] Documentation added - [x] Tests updated - [ ] `CHANGELOG.md` updated --------- Signed-off-by: Shahul <shahulsonhal@gmail.com> Co-authored-by: Aman Kumar Singh <amankrsingh2110@gmail.com> Co-authored-by: Suruthi-G-K <shruthi.suruthi@gmail.com> Co-authored-by: tareqmamari <tariq.mamari@de.ibm.com> Co-authored-by: shahulsonhal <shahulsonhal@gmail.com> Co-authored-by: Aditya C S <aditya.gnu@gmail.com> Co-authored-by: Tareq Al-Maamari <tariq.mamari@gmail.com>	2 years ago
dependabot[bot]	0b1bffaa9e	Bump golang.org/x/net from 0.5.0 to 0.7.0 (#8563 ) Bumps [golang.org/x/net](https://github.com/golang/net) from 0.5.0 to 0.7.0. <details> <summary>Commits</summary> <ul> <li><a href="`8e2b117aee`"><code>8e2b117</code></a> http2/hpack: avoid quadratic complexity in hpack decoding</li> <li><a href="`547e7edf38`"><code>547e7ed</code></a> http2: avoid referencing ResponseWrite.Write parameter after returning</li> <li><a href="`39940adcaa`"><code>39940ad</code></a> html: parse comments per HTML spec</li> <li><a href="`87ce33ecb4`"><code>87ce33e</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="`415cb6d518`"><code>415cb6d</code></a> all: fix some comments</li> <li><a href="`7e3c19ca52`"><code>7e3c19c</code></a> all: correct typos in comments</li> <li><a href="`296f09aa38`"><code>296f09a</code></a> http2: case insensitive handling for 100-continue</li> <li><a href="`f8411da775`"><code>f8411da</code></a> nettest: fix tests on dragonfly and js/wasm</li> <li>See full diff in <a href="https://github.com/golang/net/compare/v0.5.0...v0.7.0">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=golang.org/x/net&package-manager=go_modules&previous-version=0.5.0&new-version=0.7.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) You can disable automated security fix PRs for this repo from the [Security Alerts page](https://github.com/grafana/loki/network/alerts). </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
Bryan Boreham	6fd4b5e89b	Update prometheus/prometheus from 2.41 to 2.42 (#8571 ) What this PR does / why we need it: Brings in the latest updates from upstream. These open up some opportunities for optimisations in TSDB indexing. Dependencies updated: * github.com/Azure/go-autorest/autorest/adal v0.9.21 -> v0.9.22 (comment-only change) * github.com/docker/docker v20.10.21 -> v20.10.23 (fixing filters bug) * golang.org/x/exp fae10dda9338 -> d38c7dcee874 (optimisations in `BinarySearch` function) Indirect dependencies also updated: * github.com/digitalocean/godo v1.91.1 -> v1.95.0 (nothing alarming in [release notes](https://github.com/digitalocean/godo/releases)) * github.com/google/pprof aee1124e3a93 -> 76d1ae5aea2b (no changes pulled into vendor) * golang.org/x/tools v0.4.0 -> v0.5.0 (relating to Go compiler utilities) * google.golang.org/genproto 76db0878b65f -> 31e0e69b6fc2 * k8s.io/api v0.26.0 -> v0.26.1 (comment-only change) * k8s.io/apimachinery v0.26.0 -> v0.26.1 (no changes pulled into vendor) * k8s.io/client-go v0.26.0 -> v0.26.1 (small fixes) Special notes for your reviewer: A couple of interfaces changed; these have required matching changes in Loki code. Those changes are split into separate commits. I also note that most calls to `relabel` ignore when the rule says "drop". Maybe this is wrong?	2 years ago
Aditya C S	b94c8aaf16	feature: geoip stage in promtail (#3493 ) Co-authored-by: Ed Welch <edward.welch@grafana.com>	2 years ago
Tristan Morgan	2e11ff00eb	Replace deprecated inet.af/netaddr (#8560 ) This removes the deprecated `inet.af/netaddr` that imports `go4.org/unsafe/assume-no-moving-gc` and panic when it's not updated. Fixes #8399 and replaces #8495	2 years ago
justcompile	ea55f285b6	S3 Storage Class Configuration (#8532 )	2 years ago
李国忠	1fc00fa02d	[new] chunk backend: Integrate Alibaba Cloud oss (#8410 )	2 years ago
dependabot[bot]	918ac0c1ca	Bump google.golang.org/api from 0.108.0 to 0.109.0 (#8395 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	bbb70ee2c3	Bump github.com/fatih/color from 1.13.0 to 1.14.1 (#8385 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	b4541b8bf3	Bump github.com/bmatcuk/doublestar from 1.2.2 to 1.3.4 (#8368 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Kaviraj Kanagaraj	352e747911	chore: Vendor `runtimeconfig` package patch (#8366 ) Includes patch for runtimeconfig manager fix grafana/dskit#262 Signed-off-by: Kaviraj <kavirajkanagaraj@gmail.com>	2 years ago
dependabot[bot]	6b8a37da58	Bump github.com/go-logfmt/logfmt from 0.5.1 to 0.6.0 (#8350 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	9416812858	Bump cloud.google.com/go/pubsub from 1.27.1 to 1.28.0 (#8349 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	ab9ef39cc6	Bump google.golang.org/grpc from 1.52.0 to 1.52.3 (#8335 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	2198fccb54	Bump github.com/drone/envsubst from 1.0.2 to 1.0.3 (#8334 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
Irina	855d2b74bc	[chore] update pkg/push version (#8312 )	2 years ago
dependabot[bot]	eca911b7d0	Bump github.com/cristalhq/hedgedhttp from 0.7.0 to 0.7.2 (#8310 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	b347dca897	Bump github.com/Azure/go-autorest/autorest/azure/auth from 0.5.11 to 0.5.12 (#8309 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Irina	4cd1246b88	Logproto: Extract push.proto from logproto package to the separate module (#8259 ) Co-authored-by: Owen Diehl <ow.diehl@gmail.com>	2 years ago
dependabot[bot]	ddc1d171a2	Bump github.com/felixge/fgprof from 0.9.2 to 0.9.3 (#8289 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
dependabot[bot]	ffc5d78908	Bump github.com/aws/aws-sdk-go from 1.44.156 to 1.44.187 (#8288 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
Bryan Boreham	560440a58d	Update Prometheus to v2.41, plus dependencies (#8290 )	2 years ago
Travis Patterson	71979f0f42	Fix pubsub pull target (#8281 )	2 years ago
dependabot[bot]	4aa73505fc	Bump google.golang.org/api from 0.102.0 to 0.108.0 (#8275 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	fd72aa8908	Bump cloud.google.com/go/storage from 1.27.0 to 1.29.0 (#8276 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago
dependabot[bot]	4faf7b9979	Bump github.com/baidubce/bce-sdk-go from 0.9.111 to 0.9.141 (#8255 ) Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Michel Hollands <42814411+MichelHollands@users.noreply.github.com>	2 years ago
Travis Patterson	fad028b4c3	Change tests to bump sarama dependency (#8249 )	2 years ago
Bryan Boreham	15b382294e	Remove dependency on thanos-io/thanos (#8227 ) What this PR does / why we need it: This avoids complications trying to match up versions between Prometheus and Thanos. Special notes for your reviewer: I don't know why the dependency on `github.com/efficientgo/e2e` has appeared in go.mod, but it doesn't seem to change what is in vendor. Checklist - [x] Reviewed the [`CONTRIBUTING.md`](https://github.com/grafana/loki/blob/main/CONTRIBUTING.md) guide (required) - NA Documentation added - NA Tests updated - NA `CHANGELOG.md` updated - NA Changes that require user attention or interaction to upgrade are documented in `docs/sources/upgrading/_index.md`	2 years ago
dependabot[bot]	2e834ae18d	Bump github.com/mitchellh/go-wordwrap from 1.0.0 to 1.0.1 (#8222 ) Bumps [github.com/mitchellh/go-wordwrap](https://github.com/mitchellh/go-wordwrap) from 1.0.0 to 1.0.1. <details> <summary>Commits</summary> <ul> <li><a href="`ecf0936a07`"><code>ecf0936</code></a> Merge pull request <a href="https://github-redirect.dependabot.com/mitchellh/go-wordwrap/issues/3">#3</a> from dtolnay/nbsp</li> <li><a href="`a2d9f5454f`"><code>a2d9f54</code></a> Wrap multibyte characters properly</li> <li><a href="`7256b9c0a8`"><code>7256b9c</code></a> update go.mod</li> <li><a href="`271c4e5dd7`"><code>271c4e5</code></a> Do not break on non-breaking space</li> <li>See full diff in <a href="https://github.com/mitchellh/go-wordwrap/compare/v1.0.0...v1.0.1">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/mitchellh/go-wordwrap&package-manager=go_modules&previous-version=1.0.0&new-version=1.0.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>	2 years ago

1 2 3 4 5 ...

330 Commits (b7359c5d5379f0fc3ad958a752cca53db8449ab6)