build(deps): bump the go_modules group across 3 directories with 13 updates by dependabot[bot] · Pull Request #67 · testfailed/sourcegraph

dependabot · 2024-03-14T21:54:25Z

Bumps the go_modules group with 6 updates in the / directory:

Package	From	To
github.com/crewjam/saml	`0.4.1`	`0.4.14`
github.com/jackc/pgx/v4	`4.13.0`	`4.18.2`
google.golang.org/protobuf	`1.27.1`	`1.33.0`
k8s.io/client-go	`0.17.0`	`0.17.16`
github.com/go-git/go-git/v5	`5.4.2`	`5.11.0`
google.golang.org/grpc	`1.40.0`	`1.56.3`
Bumps the go_modules group with 1 update in the /dev/sg directory: github.com/jackc/pgx/v4.
Bumps the go_modules group with 2 updates in the /lib directory: golang.org/x/sys and gopkg.in/yaml.v3.

Updates github.com/crewjam/saml from 0.4.1 to 0.4.14

Commits

b07b16c Merge pull request from GHSA-267v-3v32-g6q5
5f6e5ab Bump golang.org/x/crypto (#538)
193e551 update for most recent three go versions (#537)
34930b2 Add support for hardware security module (HSM) signing. (#503)
f9e6716 Update golangci-lint version, linting fixes. (#511)
8e92368 Merge pull request from GHSA-5mqj-xc49-246p
2aeb2ef Update README example to use displayName attribute (#486)
5049389 Bump github.com/kr/pretty from 0.3.0 to 0.3.1 (#484)
73bf1ff Bump github.com/stretchr/testify from 1.6.1 to 1.8.1 (#483)
cfc9c75 Bump github.com/golang-jwt/jwt/v4 from 4.4.2 to 4.4.3 (#467)
Additional commits viewable in compare view

Updates github.com/jackc/pgx/v4 from 4.13.0 to 4.18.2

Changelog

Sourced from github.com/jackc/pgx/v4's changelog.

4.18.2 (March 4, 2024)

Fix CVE-2024-27289

SQL injection can occur when all of the following conditions are met:

The non-default simple protocol is used.

A placeholder for a numeric value must be immediately preceded by a minus.

There must be a second placeholder for a string value after the first placeholder; both must be on the same line.

Both parameter values must be user-controlled.

Thanks to Paul Gerste for reporting this issue.

Fix CVE-2024-27304

SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control.

Thanks to Paul Gerste for reporting this issue.

Fix *dbTx.Exec not checking if it is already closed

4.18.1 (February 27, 2023)

Fix: Support pgx v4 and v5 stdlib in same program (Tomáš Procházka)

4.18.0 (February 11, 2023)

Upgrade pgconn to v1.14.0

Upgrade pgproto3 to v2.3.2

Upgrade pgtype to v1.14.0

Fix query sanitizer when query text contains Unicode replacement character

Fix context with value in BeforeConnect (David Harju)

Support pgx v4 and v5 stdlib in same program (Vitalii Solodilov)

4.17.2 (September 3, 2022)

Fix panic when logging batch error (Tom Möller)

4.17.1 (August 27, 2022)

Upgrade puddle to v1.3.0 - fixes context failing to cancel Acquire when acquire is creating resource which was introduced in v4.17.0 (James Hartig)

Fix atomic alignment on 32-bit platforms

4.17.0 (August 6, 2022)

Upgrade pgconn to v1.13.0

Upgrade pgproto3 to v2.3.1

Upgrade pgtype to v1.12.0

... (truncated)

Commits

14690df Update changelog
779548e Update required Go version to 1.17
80e9662 Update github.com/jackc/pgconn to v1.14.3
0bf9ac3 Fix erroneous test case
f94eb0e Always wrap arguments in parentheses in the SQL sanitizer
826a892 Fix SQL injection via line comment creation in simple protocol
7d882f9 Fix *dbTx.Exec not checking if it is already closed
1d07b8b go mod tidy
13468eb Release v4.18.1
7fed69b simplify duplicate pgx registration guard
Additional commits viewable in compare view

Updates github.com/russellhaering/goxmldsig from 1.1.1-0.20201210191726-3541f5e554ee to 1.3.0

Commits

See full diff in compare view

Updates golang.org/x/crypto from 0.0.0-20210817164053-32db794688a5 to 0.20.0

Commits

See full diff in compare view

Updates golang.org/x/net from 0.0.0-20210813160813-60bc85c4be6d to 0.21.0

Commits

See full diff in compare view

Updates golang.org/x/sys from 0.0.0-20210823070655-63515b42dcdf to 0.17.0

Commits

See full diff in compare view

Updates google.golang.org/protobuf from 1.27.1 to 1.33.0

Updates k8s.io/client-go from 0.17.0 to 0.17.16

Commits

6d083d1 Update dependencies to v0.17.16 tag
fac82db Merge pull request #95355sfowl/automated-cherry-pick-of-#95316
ffaa190 Merge pull request #95928ialidzhikov/automated-cherry-pick-of-#80954
19875a3 Mask bearer token in logs when logLevel >= 9
2ea9231 Add lease release tests in leader election
7d1b704 Generate complete leader election record to resolve leader election issues wi...
8df661e Merge pull request #95620roycaihw/automated-cherry-pick-of-#95427
b7e3da0 don't cache transports for incomparable configs
92dd56d Merge pull request #94425gobomb/automated-cherry-pick-of-#93646
59ba4f9 Merge pull request #94149 from liggitt/json-patch-1.17
Additional commits viewable in compare view

Updates github.com/go-git/go-git/v5 from 5.4.2 to 5.11.0

Release notes

Sourced from github.com/go-git/go-git/v5's releases.

v5.11.0

What's Changed

git: validate reference names (#929) by @aymanbagabas in go-git/go-git#950

git: stop iterating at oldest shallow when pulling. Fixes #305 by @dhoizner in go-git/go-git#939

plumbing: object, enable renames in getFileStatsFromFilePatches by @djmoch in go-git/go-git#941

storage: filesystem, Add option to set a specific FS for alternates by @pjbgf in go-git/go-git#953

Align worktree validation with upstream and remove build warnings by @pjbgf in go-git/go-git#958

New Contributors

@dhoizner made their first contribution in go-git/go-git#939

@djmoch made their first contribution in go-git/go-git#941

Full Changelog: go-git/go-git@v5.10.1...v5.11.0

v5.10.1

What's Changed

Worktree, ignore ModeSocket files by @steiler in go-git/go-git#930

git: add tracer package by @aymanbagabas in go-git/go-git#916

remote: Flip clause for fast-forward only check by @adityasaky in go-git/go-git#875

plumbing: transport/ssh, Fix nil pointer dereference caused when an unreachable proxy server is set. Fixes #900 by @anandf in go-git/go-git#901

plumbing: uppload-server-info, implement upload-server-info by @aymanbagabas in go-git/go-git#896

plumbing: optimise memory consumption for filesystem storage by @pjbgf in go-git/go-git#799

plumbing: format/packfile, Refactor patch delta by @pjbgf in go-git/go-git#908

plumbing: fix empty uploadpack request error by @aymanbagabas in go-git/go-git#932

plumbing: transport/git, Improve tests error message by @pjbgf in go-git/go-git#752

plumbing: format/pktline, Respect pktline error-line errors by @aymanbagabas in go-git/go-git#936

utils: remove ioutil.Pipe and use std library io.Pipe by @aymanbagabas in go-git/go-git#922

utils: move trace to utils by @aymanbagabas in go-git/go-git#931

cli: separate go module for cli by @aymanbagabas in go-git/go-git#914

build: bump github.com/google/go-cmp from 0.5.9 to 0.6.0 by @dependabot in go-git/go-git#887

build: bump actions/setup-go from 3 to 4 by @dependabot in go-git/go-git#891

build: bump github.com/skeema/knownhosts from 1.2.0 to 1.2.1 by @dependabot in go-git/go-git#888

build: bump actions/checkout from 3 to 4 by @dependabot in go-git/go-git#890

build: bump golang.org/x/sys from 0.13.0 to 0.14.0 by @dependabot in go-git/go-git#907

build: bump golang.org/x/text from 0.13.0 to 0.14.0 by @dependabot in go-git/go-git#906

build: bump golang.org/x/crypto from 0.14.0 to 0.15.0 by @dependabot in go-git/go-git#917

build: bump golang.org/x/net from 0.17.0 to 0.18.0 by @dependabot in go-git/go-git#918

New Contributors

@anandf made their first contribution in go-git/go-git#901

@steiler made their first contribution in go-git/go-git#930

Full Changelog: go-git/go-git@v5.10.0...v5.10.1

v5.10.0

What's Changed

PlainInitOptions.Bare and allow using InitOptions with PlainInitWithOptions by @ThinkChaos in go-git/go-git#782

... (truncated)

Commits

5d08d3b Merge pull request #958 from pjbgf/workval
5bd1d8f build: Ensure checkout is the first operation
b2c1982 git: worktree, Align validation with upstream rules
cec7da6 Merge pull request #953 from pjbgf/alternates
8b47ceb storage: filesystem, Add option to set a specific FS for alternates
4f61489 Merge pull request #941 from djmoch/filestats-rename
ae552ce Merge pull request #939 from dhoizner/fix-pull-after-shallow
cc1895b Merge pull request #950 from aymanbagabas/validate-ref
de1d5a5 git: validate reference names
d87110b Merge pull request #948 from go-git/dependabot/go_modules/cli/go-git/github.c...
Additional commits viewable in compare view

Updates github.com/jackc/pgproto3/v2 from 2.1.1 to 2.3.3

Commits

945c212 Backport fixes from pgx v5
0c0f7b0 Add pgx v5 note
f59ff94 UnmarshalJSON: removing hex decode
fd427c0 Don't panic when receiving zero bytes with "slice bounds out of range"
175856f add GSS authentication to pgproto3
c6ccb4b Addressing feedback
e145003 Addressing feedback
1d7886b Adding UTs
fa2b096 fix: Adding overall format before appending ColumnFormatCodes
40ecac4 Remove unimplemented JSON marshalling for FunctionCall type.
Additional commits viewable in compare view

Updates golang.org/x/text from 0.3.6 to 0.14.0

Commits

6c97a16 all: update go directive to 1.18
f488e19 unicode/norm: fix function name on comment
fb697c0 cmd/gotext: actually use -dir flag
f3e69ed cmd/gotext: fix misbehaviors
ab07ad1 all: remove repetitive words
e503480 encoding/japanese, language: shorten very long sub-test names
2df65d7 all: regenerate for Unicode 15.0.0
e3c038a all: prepare for Unicode 15.0.0
3a7a255 internal/export/idna: make more space for mapping index
d61dd50 go.mod: delete repeated "indirect"
Additional commits viewable in compare view

Updates google.golang.org/grpc from 1.40.0 to 1.56.3

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.56.3

Security

server: prohibit more than MaxConcurrentStreams handlers from running at once (CVE-2023-44487)

In addition to this change, applications should ensure they do not leave running tasks behind related to the RPC before returning from method handlers, or should enforce appropriate limits on any such work.

Release 1.56.2

status: To fix a panic, status.FromError now returns an error with codes.Unknown when the error implements the GRPCStatus() method, and calling GRPCStatus() returns nil. (#6374)

Release 1.56.1

client: handle empty address lists correctly in addrConn.updateAddrs

Release 1.56.0

New Features

client: support channel idleness using WithIdleTimeout dial option (#6263)

This feature is currently disabled by default, but will be enabled with a 30 minute default in the future.

client: when using pickfirst, keep channel state in TRANSIENT_FAILURE until it becomes READY (gRFC A62) (#6306)

xds: Add support for Custom LB Policies (gRFC A52) (#6224)

xds: support pick_first Custom LB policy (gRFC A62) (#6314) (#6317)

client: add support for pickfirst address shuffling (gRFC A62) (#6311)

xds: Add support for String Matcher Header Matcher in RDS (#6313)

xds/outlierdetection: Add Channelz Logger to Outlier Detection LB (#6145)

Special Thanks: @s-matyukevich

xds: enable RLS in xDS by default (#6343)

orca: add support for application_utilization field and missing range checks on several metrics setters

balancer/weightedroundrobin: add new LB policy for balancing between backends based on their load reports (gRFC A58) (#6241)

authz: add conversion of json to RBAC Audit Logging config (#6192)

authz: add support for stdout logger (#6230 and #6298)

authz: support customizable audit functionality for authorization policy (#6192 #6230 #6298 #6158 #6304 and #6225)

Bug Fixes

orca: fix a race at startup of out-of-band metric subscriptions that would cause the report interval to request 0 (#6245)

xds/xdsresource: Fix Outlier Detection Config Handling and correctly set xDS Defaults (#6361)

xds/outlierdetection: Fix Outlier Detection Config Handling by setting defaults in ParseConfig() (#6361)

API Changes

orca: allow a ServerMetricsProvider to be passed to the ORCA service and ServerOption (#6223)

Release 1.55.1

status: To fix a panic, status.FromError now returns an error with codes.Unknown when the error implements the GRPCStatus() method, and calling GRPCStatus() returns nil. (#6374)

Release 1.55.0

Behavior Changes

xds: enable federation support by default (#6151)

status: status.Code and status.FromError handle wrapped errors (#6031 and #6150)

... (truncated)

Commits

1055b48 Update version.go to 1.56.3 (#6713)
5efd7bd server: prohibit more than MaxConcurrentStreams handlers from running at once...
bd1f038 Upgrade version.go to 1.56.3-dev (#6434)
faab873 Update version.go to v1.56.2 (#6432)
6b0b291 status: fix panic when servers return a wrapped error with status OK (#6374) ...
ed56401 [PSM interop] Don't fail target if sub-target already failed (#6390) (#6405)
cd6a794 Update version.go to v1.56.2-dev (#6387)
5b67e5e Update version.go to v1.56.1 (#6386)
d0f5150 client: handle empty address lists correctly in addrConn.updateAddrs (#6354) ...
997c1ea Change version to 1.56.1-dev (#6345)
Additional commits viewable in compare view

Updates gopkg.in/yaml.v3 from 3.0.0-20210107192922-496545a6307b to 3.0.1

Updates github.com/jackc/pgx/v4 from 4.11.0 to 4.18.2

Changelog

Sourced from github.com/jackc/pgx/v4's changelog.

4.18.2 (March 4, 2024)

Fix CVE-2024-27289

SQL injection can occur when all of the following conditions are met:

The non-default simple protocol is used.

A placeholder for a numeric value must be immediately preceded by a minus.

There must be a second placeholder for a string value after the first placeholder; both must be on the same line.

Both parameter values must be user-controlled.

Thanks to Paul Gerste for reporting this issue.

Fix CVE-2024-27304

SQL injection can occur if an attacker can cause a single query or bind message to exceed 4 GB in size. An integer overflow in the calculated message size can cause the one large message to be sent as multiple messages under the attacker's control.

Thanks to Paul Gerste for reporting this issue.

Fix *dbTx.Exec not checking if it is already closed

4.18.1 (February 27, 2023)

Fix: Support pgx v4 and v5 stdlib in same program (Tomáš Procházka)

4.18.0 (February 11, 2023)

Upgrade pgconn to v1.14.0

Upgrade pgproto3 to v2.3.2

Upgrade pgtype to v1.14.0

Fix query sanitizer when query text contains Unicode replacement character

Fix context with value in BeforeConnect (David Harju)

Support pgx v4 and v5 stdlib in same program (Vitalii Solodilov)

4.17.2 (September 3, 2022)

Fix panic when logging batch error (Tom Möller)

4.17.1 (August 27, 2022)

Upgrade puddle to v1.3.0 - fixes context failing to cancel Acquire when acquire is creating resource which was introduced in v4.17.0 (James Hartig)

Fix atomic alignment on 32-bit platforms

4.17.0 (August 6, 2022)

Upgrade pgconn to v1.13.0

Upgrade pgproto3 to v2.3.1

Upgrade pgtype to v1.12.0

... (truncated)

Commits

14690df Update changelog
779548e Update required Go version to 1.17
80e9662 Update github.com/jackc/pgconn to v1.14.3
0bf9ac3 Fix erroneous test case
f94eb0e Always wrap arguments in parentheses in the SQL sanitizer
826a892 Fix SQL injection via line comment creation in simple protocol
7d882f9 Fix *dbTx.Exec not checking if it is already closed
1d07b8b go mod tidy
13468eb Release v4.18.1
7fed69b simplify duplicate pgx registration guard
Additional commits viewable in compare view

Updates golang.org/x/sys from 0.0.0-20210616094352-59db8d763f22 to 0.1.0

Commits

See full diff in compare view

Updates gopkg.in/yaml.v3 from 3.0.0-20210107192922-496545a6307b to 3.0.0

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
You can disable automated security fix PRs for this repo from the Security Alerts page.

…pdates Bumps the go_modules group with 6 updates in the / directory: | Package | From | To | | --- | --- | --- | | [github.com/crewjam/saml](https://github.com/crewjam/saml) | `0.4.1` | `0.4.14` | | [github.com/jackc/pgx/v4](https://github.com/jackc/pgx) | `4.13.0` | `4.18.2` | | google.golang.org/protobuf | `1.27.1` | `1.33.0` | | [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.17.0` | `0.17.16` | | [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) | `5.4.2` | `5.11.0` | | [google.golang.org/grpc](https://github.com/grpc/grpc-go) | `1.40.0` | `1.56.3` | Bumps the go_modules group with 1 update in the /dev/sg directory: [github.com/jackc/pgx/v4](https://github.com/jackc/pgx). Bumps the go_modules group with 2 updates in the /lib directory: [golang.org/x/sys](https://github.com/golang/sys) and gopkg.in/yaml.v3. Updates `github.com/crewjam/saml` from 0.4.1 to 0.4.14 - [Commits](crewjam/saml@v0.4.1...v0.4.14) Updates `github.com/jackc/pgx/v4` from 4.13.0 to 4.18.2 - [Changelog](https://github.com/jackc/pgx/blob/v4.18.2/CHANGELOG.md) - [Commits](jackc/pgx@v4.13.0...v4.18.2) Updates `github.com/russellhaering/goxmldsig` from 1.1.1-0.20201210191726-3541f5e554ee to 1.3.0 - [Release notes](https://github.com/russellhaering/goxmldsig/releases) - [Commits](https://github.com/russellhaering/goxmldsig/commits/v1.3.0) Updates `golang.org/x/crypto` from 0.0.0-20210817164053-32db794688a5 to 0.20.0 - [Commits](https://github.com/golang/crypto/commits/v0.20.0) Updates `golang.org/x/net` from 0.0.0-20210813160813-60bc85c4be6d to 0.21.0 - [Commits](https://github.com/golang/net/commits/v0.21.0) Updates `golang.org/x/sys` from 0.0.0-20210823070655-63515b42dcdf to 0.17.0 - [Commits](https://github.com/golang/sys/commits/v0.1.0) Updates `google.golang.org/protobuf` from 1.27.1 to 1.33.0 Updates `k8s.io/client-go` from 0.17.0 to 0.17.16 - [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md) - [Commits](kubernetes/client-go@v0.17.0...v0.17.16) Updates `github.com/go-git/go-git/v5` from 5.4.2 to 5.11.0 - [Release notes](https://github.com/go-git/go-git/releases) - [Commits](go-git/go-git@v5.4.2...v5.11.0) Updates `github.com/jackc/pgproto3/v2` from 2.1.1 to 2.3.3 - [Commits](jackc/pgproto3@v2.1.1...v2.3.3) Updates `golang.org/x/text` from 0.3.6 to 0.14.0 - [Release notes](https://github.com/golang/text/releases) - [Commits](golang/text@v0.3.6...v0.14.0) Updates `google.golang.org/grpc` from 1.40.0 to 1.56.3 - [Release notes](https://github.com/grpc/grpc-go/releases) - [Commits](grpc/grpc-go@v1.40.0...v1.56.3) Updates `gopkg.in/yaml.v3` from 3.0.0-20210107192922-496545a6307b to 3.0.1 Updates `github.com/jackc/pgx/v4` from 4.11.0 to 4.18.2 - [Changelog](https://github.com/jackc/pgx/blob/v4.18.2/CHANGELOG.md) - [Commits](jackc/pgx@v4.13.0...v4.18.2) Updates `golang.org/x/sys` from 0.0.0-20210616094352-59db8d763f22 to 0.1.0 - [Commits](https://github.com/golang/sys/commits/v0.1.0) Updates `gopkg.in/yaml.v3` from 3.0.0-20210107192922-496545a6307b to 3.0.0 --- updated-dependencies: - dependency-name: github.com/crewjam/saml dependency-type: direct:production dependency-group: go_modules-security-group - dependency-name: github.com/jackc/pgx/v4 dependency-type: direct:production dependency-group: go_modules-security-group - dependency-name: github.com/russellhaering/goxmldsig dependency-type: direct:production dependency-group: go_modules-security-group - dependency-name: golang.org/x/crypto dependency-type: direct:production dependency-group: go_modules-security-group - dependency-name: golang.org/x/net dependency-type: direct:production dependency-group: go_modules-security-group - dependency-name: golang.org/x/sys dependency-type: direct:production dependency-group: go_modules-security-group - dependency-name: google.golang.org/protobuf dependency-type: direct:production dependency-group: go_modules-security-group - dependency-name: k8s.io/client-go dependency-type: direct:production dependency-group: go_modules-security-group - dependency-name: github.com/go-git/go-git/v5 dependency-type: indirect dependency-group: go_modules-security-group - dependency-name: github.com/jackc/pgproto3/v2 dependency-type: indirect dependency-group: go_modules-security-group - dependency-name: golang.org/x/text dependency-type: indirect dependency-group: go_modules-security-group - dependency-name: google.golang.org/grpc dependency-type: indirect dependency-group: go_modules-security-group - dependency-name: gopkg.in/yaml.v3 dependency-type: indirect dependency-group: go_modules-security-group - dependency-name: github.com/jackc/pgx/v4 dependency-type: direct:production dependency-group: go_modules-security-group - dependency-name: golang.org/x/sys dependency-type: direct:production dependency-group: go_modules-security-group - dependency-name: gopkg.in/yaml.v3 dependency-type: direct:production dependency-group: go_modules-security-group ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot · 2024-04-19T10:16:37Z

Superseded by #81.

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Mar 14, 2024

This was referenced Mar 14, 2024

build(deps): bump golang.org/x/sys from 0.0.0-20210630005230-0f9fa26af87c to 0.1.0 in /dev/sg #66

Closed

build(deps): bump the go_modules group across 3 directories with 12 updates #65

Closed

dependabot Bot closed this Apr 19, 2024

dependabot Bot deleted the dependabot/go_modules/go_modules-security-group-a6c5eeb63c branch April 19, 2024 10:16

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): bump the go_modules group across 3 directories with 13 updates#67

build(deps): bump the go_modules group across 3 directories with 13 updates#67
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/go_modules-security-group-a6c5eeb63c

dependabot Bot commented on behalf of github Mar 14, 2024

Uh oh!

dependabot Bot commented on behalf of github Apr 19, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Conversation

dependabot Bot commented on behalf of github Mar 14, 2024

4.18.2 (March 4, 2024)

4.18.1 (February 27, 2023)

4.18.0 (February 11, 2023)

4.17.2 (September 3, 2022)

4.17.1 (August 27, 2022)

4.17.0 (August 6, 2022)

v5.11.0

What's Changed

New Contributors

v5.10.1

What's Changed

New Contributors

v5.10.0

What's Changed

Release 1.56.3

Security

Release 1.56.2

Release 1.56.1

Release 1.56.0

New Features

Bug Fixes

API Changes

Release 1.55.1

Release 1.55.0

Behavior Changes

4.18.2 (March 4, 2024)

4.18.1 (February 27, 2023)

4.18.0 (February 11, 2023)

4.17.2 (September 3, 2022)

4.17.1 (August 27, 2022)

4.17.0 (August 6, 2022)

Uh oh!

dependabot Bot commented on behalf of github Apr 19, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants