Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

build(deps): bump the dependabot group across 1 directory with 4 updates #1059

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 23, 2024

Bumps the dependabot group with 3 updates in the / directory: github.com/docker/docker, go.mongodb.org/mongo-driver and google.golang.org/api.

Updates github.com/docker/docker from 27.2.1+incompatible to 27.3.1+incompatible

Release notes

Sourced from github.com/docker/docker's releases.

v27.3.1

27.3.1

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • CLI: Fix issue with command execution metrics not being exported due to the CLI MeterProvider being shutdown too early. docker/cli#5457

Packaging updates

v27.3.0

27.3.0

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

Bug fixes and enhancements

  • containerd image store: Fix docker image prune -a untagging images used by containers started from images referenced by a digested reference. moby/moby#48488
  • Add a --feature flag to the daemon options. moby/moby#48487
  • Updated the handling of the --gpus=0 flag to be consistent with the NVIDIA Container Runtime. moby/moby#48483 (docker/cli#5432)
  • Support WSL2 mirrored-mode networking's use of interface loopback0 for packets from the Windows host. moby/moby#48514
  • Fix an issue that prevented communication between containers on an IPv4 bridge network when running with --iptables=false, --ip6tables=true (the default), a firewall with a DROP rule for forwarded packets on hosts where the br_netfilter kernel module was not normally loaded. moby/moby#48511
  • CLI: Fix issue where docker volume update command would cause the CLI to panic if no argument/volume was passed. docker/cli#5426
  • docker/cli#5432

Packaging updates

v27.3.0-rc.2

27.3.0-rc.2

For a full list of pull requests and changes in this release, refer to the relevant GitHub milestones:

... (truncated)

Commits
  • 41ca978 Merge pull request #48525 from thaJeztah/27.x_backport_govulncheck_permissions
  • a6b772b gha: govulncheck: make sure read permissions are set
  • 856359c Merge pull request #48514 from robmry/backport-27.x/wsl2_mirrored_loopback0_w...
  • cd21af7 Do not DNAT packets from WSL2's loopback0
  • 8516f3b Merge pull request #48510 from thaJeztah/27.x_backport_bump_buildx_compose
  • 3a7779a Merge pull request #48511 from robmry/backport-27.x/48375_bridge_netfiltering
  • 5c499fc Only enable bridge netfiltering when needed
  • 98f24aa Merge pull request #48506 from thaJeztah/27.x_backport_man_dockerd_logformat
  • 8adc8e4 Dockerfile: update compose to v2.29.4
  • 576fc88 Dockerfile: update buildx to v0.17.1
  • Additional commits viewable in compare view

Updates go.mongodb.org/mongo-driver from 1.16.1 to 1.17.0

Release notes

Sourced from go.mongodb.org/mongo-driver's releases.

MongoDB Go Driver 1.17.0

The MongoDB Go Driver Team is pleased to release version 1.17.0 of the official MongoDB Go driver.

Release Notes

This release adds support for client authentication using OpenID Connect (MONGODB-OIDC), and for the Queryable Encryption Range Protocol. The driver now supports MongoDB 8.0. Additionally, IndexView has been extended to include methods for dropping indexes by key (i.e. DropOneWithKey and DropWithKey).

[!NOTE]

This is the last planned minor release in the 1.x series. Future driver versions will be in the 2.x series. The v1.17.x will still receive security and bug fixes for a year.

Queryable Encryption Range Protocol

Added range protocol support for Queryable Encryption.

MONGODB-OIDC

Added support OpenID Connect (OIDC) authentication for workload identities. A workload identity is an identity you assign to a software workload, such as an application, service, script, or container, to authenticate and access other services and resources.

See the documentation for more details.


For a full list of tickets included in this release, please see the links below:

Full Changelog: v1.16.1...v1.17.0

Documentation for the Go driver can be found on pkg.go.dev and the MongoDB documentation site. BSON library documentation is also available on pkg.go.dev. Questions and inquiries can be asked on the MongoDB Developer Community. Bugs can be reported in the Go Driver project in the MongoDB JIRA where a list of current issues can be found. Your feedback on the Go driver is greatly appreciated!

Commits
  • 5484657 BUMP v1.17.0
  • be25b9a GODRIVER-3302 Handle malformatted message length properly. (#1758)
  • 4757f44 GODRIVER-3312 Use remaining test secrets from the vault [v1] (#1811)
  • 6bcc3dc Remove GCP from supplied callback example (#1809)
  • b133d71 GODRIVER-2587 Implement modifyCollection for the unified test runner (#1796) ...
  • c5b9705 GODRIVER-3331 Fix default authSource for SRV connections (#1795)
  • 485e74d GODRIVER-2758: Add documentation examples (#1759)
  • ac03e73 GODRIVER-3324 Upgrade CI Go to 1.22 and golangci-lint to 1.59.1. (#1783)
  • 56e75b2 GODRIVER-3195 Sync updated QE Range tests (#1789) [v1] (#1790)
  • 783cc6c GODRIVER-3290 Mention the final 1.x release in the release notes (#1788)
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.196.0 to 0.198.0

Release notes

Sourced from google.golang.org/api's releases.

v0.198.0

0.198.0 (2024-09-19)

Features

v0.197.0

0.197.0 (2024-09-10)

Features

Bug Fixes

  • transport: Set UniverseDomain in http.NewClient for new auth (#2773) (140d0a5)
Changelog

Sourced from google.golang.org/api's changelog.

0.198.0 (2024-09-19)

Features

0.197.0 (2024-09-10)

Features

Bug Fixes

  • transport: Set UniverseDomain in http.NewClient for new auth (#2773) (140d0a5)
Commits

Updates google.golang.org/grpc from 1.66.1 to 1.66.2

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.66.2

Dependencies

  • Remove unintentional dependency on the testing package (#7579)
  • Remove unintentional dependency on the flate package (#7595)

Bug Fixes

  • client: fix a bug that prevented memory reuse after handling unary RPCs (#7571)
Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependabot group with 3 updates in the / directory: [github.com/docker/docker](https://github.com/docker/docker), [go.mongodb.org/mongo-driver](https://github.com/mongodb/mongo-go-driver) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).


Updates `github.com/docker/docker` from 27.2.1+incompatible to 27.3.1+incompatible
- [Release notes](https://github.com/docker/docker/releases)
- [Commits](moby/moby@v27.2.1...v27.3.1)

Updates `go.mongodb.org/mongo-driver` from 1.16.1 to 1.17.0
- [Release notes](https://github.com/mongodb/mongo-go-driver/releases)
- [Commits](mongodb/mongo-go-driver@v1.16.1...v1.17.0)

Updates `google.golang.org/api` from 0.196.0 to 0.198.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.196.0...v0.198.0)

Updates `google.golang.org/grpc` from 1.66.1 to 1.66.2
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.66.1...v1.66.2)

---
updated-dependencies:
- dependency-name: github.com/docker/docker
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependabot
- dependency-name: go.mongodb.org/mongo-driver
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependabot
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependabot
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependabot
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 23, 2024
Copy link

netlify bot commented Sep 23, 2024

Deploy Preview for ohsu-comp-bio-funnel canceled.

Name Link
🔨 Latest commit d4cab3b
🔍 Latest deploy log https://app.netlify.com/sites/ohsu-comp-bio-funnel/deploys/66f1548fcf985600080d7d24

Copy link
Contributor Author

dependabot bot commented on behalf of github Sep 25, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Sep 25, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/develop/dependabot-5786727218 branch September 25, 2024 21:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Development

Successfully merging this pull request may close these issues.

0 participants