Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump the global group across 1 directory with 8 updates #217

Merged
merged 1 commit into from
Dec 6, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Dec 3, 2024

Bumps the global group with 6 updates in the / directory:

Package From To
github.com/chia-network/go-chia-libs 0.18.1 0.20.1
github.com/onsi/ginkgo/v2 2.21.0 2.22.0
github.com/onsi/gomega 1.35.1 1.36.0
k8s.io/api 0.31.2 0.31.3
k8s.io/client-go 0.31.2 0.31.3
sigs.k8s.io/controller-runtime 0.19.1 0.19.3

Updates github.com/chia-network/go-chia-libs from 0.18.1 to 0.20.1

Release notes

Sourced from github.com/chia-network/go-chia-libs's releases.

v0.20.1

What's Changed

Full Changelog: Chia-Network/go-chia-libs@v0.20.0...v0.20.1

v0.20.0

This release has a behavior change in the RPC package. Previously, if the RPC returned success: false, error: <message>, the err returned from the RPC client functions was nil, and it was up to the caller to check the response for success: false. This release checks for that automatically and returns a ChiaRPCError error with the message from the RPC automatically. This should make it easier and more familiar to check for errors in RPC responses.

The response struct will still be returned in these cases, so any existing code checking for Success: false will still work, though it may not be reached if errors were checked before those lines.

What's Changed

Full Changelog: Chia-Network/go-chia-libs@v0.19.0...v0.20.0

v0.19.0

What's Changed

Full Changelog: Chia-Network/go-chia-libs@v0.18.6...v0.19.0

v0.18.6

What's Changed

Full Changelog: Chia-Network/go-chia-libs@v0.18.5...v0.18.6

v0.18.5

Fixes a bug where start_rpc_server is set to false instead of true if it was not in the config file at all

What's Changed

Full Changelog: Chia-Network/go-chia-libs@v0.18.4...v0.18.5

v0.18.4

What's Changed

Full Changelog: Chia-Network/go-chia-libs@v0.18.3...v0.18.4

v0.18.3

... (truncated)

Commits
  • a34eef4 Don't return a ChiaRPCError if we don't have an actual resp from the … (#184)
  • ee7ea7a Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 in the global group (#183)
  • c80025e RPC Refactor (#182)
  • ba851ab Dont return nil, nil, nil when block record is nil - the response has… (#181)
  • 7784312 Add IsTransactionBlock helper (#180)
  • 86ba0cb Start wallet rpc to pointer since it may not be in some configs (#178)
  • 3268fcc Allows filling structs/maps/slices with the actual type in addition t… (#177)
  • eccfa8e Support setting entire slices when filling config values (#176)
  • ead46cf Add latest config changes from main (#175)
  • See full diff in compare view

Updates github.com/onsi/ginkgo/v2 from 2.21.0 to 2.22.0

Release notes

Sourced from github.com/onsi/ginkgo/v2's releases.

v2.22.0

2.22.0

Features

  • Add label to serial nodes [0fcaa08]

This allows serial tests to be filtered using the label-filter

Maintenance

Various doc fixes

Changelog

Sourced from github.com/onsi/ginkgo/v2's changelog.

2.22.0

Features

  • Add label to serial nodes [0fcaa08]

This allows serial tests to be filtered using the label-filter

Maintenance

Various doc fixes

Commits

Updates github.com/onsi/gomega from 1.35.1 to 1.36.0

Release notes

Sourced from github.com/onsi/gomega's releases.

v1.36.0

1.36.0

Features

  • new: make collection-related matchers Go 1.23 iterator aware [4c964c6]

Maintenance

  • Replace min/max helpers with built-in min/max [ece6872]
  • Fix some typos in docs [8e924d7]
Changelog

Sourced from github.com/onsi/gomega's changelog.

1.36.0

Features

  • new: make collection-related matchers Go 1.23 iterator aware [4c964c6]

Maintenance

  • Replace min/max helpers with built-in min/max [ece6872]
  • Fix some typos in docs [8e924d7]
Commits
  • f1ff459 v1.36.0
  • 4c964c6 new: make collection-related matchers Go 1.23 iterator aware
  • ece6872 Replace min/max helpers with built-in min/max
  • 8e924d7 Fix some typos in docs
  • See full diff in compare view

Updates github.com/stretchr/testify from 1.9.0 to 1.10.0

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.10.0

What's Changed

Functional Changes

Fixes

Documantation, Build & CI

New Contributors

... (truncated)

Commits
  • 89cbdd9 Merge pull request #1626 from arjun-1/fix-functional-options-diff-indirect-calls
  • 07bac60 Merge pull request #1667 from sikehish/flaky
  • 716de8d Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI
  • 118fb83 NotSame should fail if args are not pointers #1661 (#1664)
  • 7d99b2b attempt 2
  • 05f87c0 more similar
  • ea7129e better fmt
  • a1b9c9e Merge pull request #1663 from ybrustin/master
  • 8302de9 Merge branch 'master' into master
  • 89352f7 Merge pull request #1518 from hendrywiranto/adjust-readme-remove-v2
  • Additional commits viewable in compare view

Updates k8s.io/api from 0.31.2 to 0.31.3

Commits

Updates k8s.io/apimachinery from 0.31.2 to 0.31.3

Commits

Updates k8s.io/client-go from 0.31.2 to 0.31.3

Commits

Updates sigs.k8s.io/controller-runtime from 0.19.1 to 0.19.3

Release notes

Sourced from sigs.k8s.io/controller-runtime's releases.

v0.19.3

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.19.2...v0.19.3

v0.19.2

What's Changed

Full Changelog: kubernetes-sigs/controller-runtime@v0.19.1...v0.19.2

Commits
  • 3e66810 Merge pull request #3037 from kubernetes-sigs/backport019-watch
  • 2085acc add watch deprecated to certwatcher
  • 0823530 Merge pull request #3031 from k8s-infra-cherrypick-robot/cherry-pick-3028-to-...
  • e727239 [release-0.19] 🐛 Refactor certificate watcher to use polling, instead of fsno...
  • 2a0ce59 🌱 Make using leader elector with client timeout non-breaking
  • 4bc3811 🐛 Fix RenewDeadline typo in leader election
  • 0170742 warning: Use leader elector with client timeout
  • bfd1cf9 [release-0.19] ✨ Add EnableWatchBookmarks option to cache informers (#3018)
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the global group with 6 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/chia-network/go-chia-libs](https://github.com/chia-network/go-chia-libs) | `0.18.1` | `0.20.1` |
| [github.com/onsi/ginkgo/v2](https://github.com/onsi/ginkgo) | `2.21.0` | `2.22.0` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.35.1` | `1.36.0` |
| [k8s.io/api](https://github.com/kubernetes/api) | `0.31.2` | `0.31.3` |
| [k8s.io/client-go](https://github.com/kubernetes/client-go) | `0.31.2` | `0.31.3` |
| [sigs.k8s.io/controller-runtime](https://github.com/kubernetes-sigs/controller-runtime) | `0.19.1` | `0.19.3` |



Updates `github.com/chia-network/go-chia-libs` from 0.18.1 to 0.20.1
- [Release notes](https://github.com/chia-network/go-chia-libs/releases)
- [Commits](Chia-Network/go-chia-libs@v0.18.1...v0.20.1)

Updates `github.com/onsi/ginkgo/v2` from 2.21.0 to 2.22.0
- [Release notes](https://github.com/onsi/ginkgo/releases)
- [Changelog](https://github.com/onsi/ginkgo/blob/master/CHANGELOG.md)
- [Commits](onsi/ginkgo@v2.21.0...v2.22.0)

Updates `github.com/onsi/gomega` from 1.35.1 to 1.36.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.35.1...v1.36.0)

Updates `github.com/stretchr/testify` from 1.9.0 to 1.10.0
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.9.0...v1.10.0)

Updates `k8s.io/api` from 0.31.2 to 0.31.3
- [Commits](kubernetes/api@v0.31.2...v0.31.3)

Updates `k8s.io/apimachinery` from 0.31.2 to 0.31.3
- [Commits](kubernetes/apimachinery@v0.31.2...v0.31.3)

Updates `k8s.io/client-go` from 0.31.2 to 0.31.3
- [Changelog](https://github.com/kubernetes/client-go/blob/master/CHANGELOG.md)
- [Commits](kubernetes/client-go@v0.31.2...v0.31.3)

Updates `sigs.k8s.io/controller-runtime` from 0.19.1 to 0.19.3
- [Release notes](https://github.com/kubernetes-sigs/controller-runtime/releases)
- [Changelog](https://github.com/kubernetes-sigs/controller-runtime/blob/main/RELEASE.md)
- [Commits](kubernetes-sigs/controller-runtime@v0.19.1...v0.19.3)

---
updated-dependencies:
- dependency-name: github.com/chia-network/go-chia-libs
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: global
- dependency-name: github.com/onsi/ginkgo/v2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: global
- dependency-name: github.com/onsi/gomega
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: global
- dependency-name: github.com/stretchr/testify
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: global
- dependency-name: k8s.io/api
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: global
- dependency-name: k8s.io/apimachinery
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: global
- dependency-name: k8s.io/client-go
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: global
- dependency-name: sigs.k8s.io/controller-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: global
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Dec 3, 2024
Copy link
Contributor Author

dependabot bot commented on behalf of github Dec 3, 2024

The following labels could not be found: go, Changed.

Copy link

socket-security bot commented Dec 3, 2024

👍 Dependency issues cleared. Learn more about Socket for GitHub ↗︎

This PR previously contained dependency changes with security issues that have been resolved, removed, or ignored.

Ignoring: golang/github.com/onsi/ginkgo/[email protected], golang/k8s.io/[email protected], golang/k8s.io/[email protected], golang/k8s.io/[email protected], golang/github.com/stretchr/[email protected], golang/github.com/onsi/[email protected], golang/github.com/chia-network/[email protected], golang/sigs.k8s.io/[email protected]

View full report↗︎

Next steps

Take a deeper look at the dependency

Take a moment to review the security alert above. Review the linked package source code to understand the potential risk. Ensure the package is not malicious before proceeding. If you're unsure how to proceed, reach out to your security team or ask the Socket team for help at support [AT] socket [DOT] dev.

Remove the package

If you happen to install a dependency that Socket reports as Known Malware you should immediately remove it and select a different dependency. For other alert types, you may may wish to investigate alternative packages or consider if there are other ways to mitigate the specific risk posed by the dependency.

Mark a package as acceptable risk

To ignore an alert, reply with a comment starting with @SocketSecurity ignore followed by a space separated list of ecosystem/package-name@version specifiers. e.g. @SocketSecurity ignore npm/[email protected] or ignore all packages with @SocketSecurity ignore-all

@Starttoaster
Copy link
Contributor

@SocketSecurity ignore-all

@Starttoaster Starttoaster merged commit c73cc89 into main Dec 6, 2024
11 checks passed
@Starttoaster Starttoaster deleted the dependabot/go_modules/global-6313ef0378 branch December 6, 2024 16:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant