Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix(deps): update module google.golang.org/grpc to v1.58.3 #2231

Merged
merged 2 commits into from
Oct 11, 2023

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Oct 11, 2023

Mend Renovate

This PR contains the following updates:

Package Type Update Change
google.golang.org/grpc require patch v1.58.2 -> v1.58.3

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.


Release Notes

grpc/grpc-go (google.golang.org/grpc)

v1.58.3

Compare Source

Security

  • server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487)

    In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work.


Configuration

📅 Schedule: Branch creation - "after 1am and before 7am every weekday" in timezone Europe/Berlin, Automerge - At any time (no schedule defined).

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

@renovate renovate bot added the dependencies Pull requests that update a dependency file label Oct 11, 2023
@renovate
Copy link
Contributor Author

renovate bot commented Oct 11, 2023

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: src/autoscaler/go.sum
Command failed: docker run --rm --name=renovate_a_sidecar --label=renovate_a_child --memory=3584m -v "/tmp/worker/22418d/6884ea/repos/github/cloudfoundry/app-autoscaler-release":"/tmp/worker/22418d/6884ea/repos/github/cloudfoundry/app-autoscaler-release" -v "/tmp/worker/22418d/6884ea/cache":"/tmp/worker/22418d/6884ea/cache" -e GOPATH -e GOPROXY -e GOSUMDB -e GOFLAGS -e CGO_ENABLED -e GIT_CONFIG_KEY_0 -e GIT_CONFIG_VALUE_0 -e GIT_CONFIG_KEY_1 -e GIT_CONFIG_VALUE_1 -e GIT_CONFIG_KEY_2 -e GIT_CONFIG_VALUE_2 -e GIT_CONFIG_COUNT -e CONTAINERBASE_CACHE_DIR -w "/tmp/worker/22418d/6884ea/repos/github/cloudfoundry/app-autoscaler-release/src/autoscaler" ghcr.io/containerbase/sidecar:9.20.8 bash -l -c "install-tool golang 1.21.3 && go get -d -t ./... && go mod tidy && go mod tidy"
go: downloading github.com/maxbrunsfeld/counterfeiter/v6 v6.7.0
go: downloading code.cloudfoundry.org/lager/v3 v3.0.2
go: downloading github.com/nu7hatch/gouuid v0.0.0-20131221200532-179d4d0c4d8d
go: downloading github.com/pivotal-cf/brokerapi/v10 v10.0.0
go: downloading golang.org/x/exp v0.0.0-20231006140011-7918f672742d
go: downloading github.com/onsi/ginkgo/v2 v2.13.0
go: downloading github.com/onsi/gomega v1.28.0
go: downloading github.com/go-chi/chi/v5 v5.0.10
go: downloading github.com/tedsuo/ifrit v0.0.0-20230516164442-7862c310ad26
go: downloading golang.org/x/crypto v0.14.0
go: downloading code.cloudfoundry.org/clock v1.1.0
go: downloading github.com/prometheus/client_golang v1.17.0
go: downloading gopkg.in/yaml.v3 v3.0.1
go: downloading github.com/xeipuuv/gojsonschema v1.2.0
go: downloading github.com/gorilla/mux v1.8.0
go: downloading code.cloudfoundry.org/cfhttp/v2 v2.0.1-0.20230113212937-05beac96f8c7
go: downloading github.com/hashicorp/go-retryablehttp v0.7.4
go: downloading github.com/stretchr/testify v1.8.4
go: downloading github.com/patrickmn/go-cache v2.1.0+incompatible
go: downloading github.com/go-sql-driver/mysql v1.7.1
go: downloading code.cloudfoundry.org/go-loggregator/v9 v9.0.8
go: downloading dario.cat/mergo v1.0.0
go: downloading github.com/jackc/pgx/v5 v5.4.3
go: downloading github.com/jmoiron/sqlx v1.3.5
go: downloading code.cloudfoundry.org/go-log-cache v1.0.1-0.20230106184352-6dc0e9ab2e65
go: downloading google.golang.org/grpc v1.58.3
go: downloading github.com/rubyist/circuitbreaker v2.2.1+incompatible
go: downloading github.com/cenkalti/backoff/v4 v4.2.1
go: downloading github.com/pkg/errors v0.9.1
go: downloading github.com/steinfletcher/apitest v1.5.15
go: downloading golang.org/x/net v0.16.0
go: downloading github.com/gorilla/websocket v1.5.0
go: downloading github.com/golang/protobuf v1.5.3
go: downloading code.cloudfoundry.org/tlsconfig v0.0.0-20220621140725-0e6fbd869921
go: downloading golang.org/x/time v0.3.0
go: downloading github.com/openzipkin/zipkin-go v0.4.1
go: downloading github.com/go-logr/logr v1.2.4
go: downloading github.com/google/go-cmp v0.5.9
go: downloading github.com/beorn7/perks v1.0.1
go: downloading github.com/cespare/xxhash/v2 v2.2.0
go: downloading github.com/prometheus/client_model v0.4.1-0.20230718164431-9a2bf3000d16
go: downloading github.com/prometheus/common v0.44.0
go: downloading github.com/prometheus/procfs v0.11.1
go: downloading golang.org/x/sys v0.13.0
go: downloading google.golang.org/protobuf v1.31.0
go: downloading github.com/xeipuuv/gojsonreference v0.0.0-20180127040603-bd5ef7bd5415
go: downloading github.com/hashicorp/go-cleanhttp v0.5.2
go: downloading github.com/davecgh/go-spew v1.1.1
go: downloading github.com/pmezard/go-difflib v1.0.0
go: downloading github.com/jackc/puddle/v2 v2.2.1
go: downloading github.com/blang/semver v3.5.1+incompatible
go: downloading github.com/grpc-ecosystem/grpc-gateway/v2 v2.15.0
go: downloading google.golang.org/genproto/googleapis/api v0.0.0-20230711160842-782d3b101e98
go: downloading github.com/cenk/backoff v2.2.1+incompatible
go: downloading github.com/facebookgo/clock v0.0.0-20150410010913-600d898af40a
go: downloading code.cloudfoundry.org/go-diodes v0.0.0-20221212174934-b8cb650f2489
go: downloading google.golang.org/genproto v0.0.0-20230711160842-782d3b101e98
go: downloading google.golang.org/genproto/googleapis/rpc v0.0.0-20230711160842-782d3b101e98
go: downloading golang.org/x/tools v0.14.0
go: downloading github.com/pborman/uuid v1.2.1
go: downloading github.com/matttproud/golang_protobuf_extensions v1.0.4
go: downloading github.com/xeipuuv/gojsonpointer v0.0.0-20180127040702-4e3ac2762d5f
go: downloading github.com/jackc/pgpassfile v1.0.0
go: downloading github.com/jackc/pgservicefile v0.0.0-20221227161230-091c0ba34f0a
go: downloading golang.org/x/text v0.13.0
go: downloading golang.org/x/sync v0.4.0
go: downloading github.com/go-task/slim-sprig v0.0.0-20230315185526-52ccab3ef572
go: downloading github.com/google/uuid v1.3.0
go: downloading golang.org/x/mod v0.13.0
go: downloading github.com/google/pprof v0.0.0-20230228050547-1710fef4ab10
go: downloading code.cloudfoundry.org/app-autoscaler v0.0.0-20211201103113-81a4f0cac637
go: code.cloudfoundry.org/app-autoscaler/src/autoscaler/api/broker tested by
	code.cloudfoundry.org/app-autoscaler/src/autoscaler/api/broker.test imports
	code.cloudfoundry.org/app-autoscaler/src/autoscaler/fakes: cannot find module providing package code.cloudfoundry.org/app-autoscaler/src/autoscaler/fakes
go: module github.com/golang/protobuf is deprecated: Use the "google.golang.org/protobuf" module instead.

@app-autoscaler-ci-bot app-autoscaler-ci-bot enabled auto-merge (squash) October 11, 2023 01:39
@renovate renovate bot force-pushed the renovate/google.golang.org-grpc-1.x branch from 29f9e49 to 81e8404 Compare October 11, 2023 02:26
@sonarqubecloud
Copy link

Kudos, SonarCloud Quality Gate passed!    Quality Gate passed

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
No Duplication information No Duplication information

@app-autoscaler-ci-bot app-autoscaler-ci-bot merged commit d8f9471 into main Oct 11, 2023
29 of 30 checks passed
@app-autoscaler-ci-bot app-autoscaler-ci-bot deleted the renovate/google.golang.org-grpc-1.x branch October 11, 2023 03:46
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant