merge: v0.38.17 #18
Merged
merge: v0.38.17 #18
Conversation
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
…ometbft#3914) Bumps [github.com/minio/highwayhash](https://github.com/minio/highwayhash) from 1.0.2 to 1.0.3. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/minio/highwayhash/releases">github.com/minio/highwayhash's releases</a>.</em></p> <blockquote> <h2>Version v1.0.3</h2> <p>Added support for ARM SVE instructions, resulting in performance improvements over existing NEON implementation.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/minio/highwayhash/commit/030a8b332625f1501d534324055b1de810fe9233"><code>030a8b3</code></a> Disable SVE2 support until tested on real hardware (not just emulator)</li> <li><a href="https://github.com/minio/highwayhash/commit/b2d40df9d11faf657708d4b24a24b7b92c5b23d9"><code>b2d40df</code></a> Fix build on non-ARM architectures</li> <li><a href="https://github.com/minio/highwayhash/commit/ff8131595115a8e3d2af219b1ded0d11658baf2a"><code>ff81315</code></a> Update function for SVE2</li> <li><a href="https://github.com/minio/highwayhash/commit/a48b3f20491775094a4cbb7d93da8ab945c7ecbf"><code>a48b3f2</code></a> Add separate test case for Update function</li> <li><a href="https://github.com/minio/highwayhash/commit/3346a584da73836f01ab720398a8d61999ff35e4"><code>3346a58</code></a> ARM SVE code for update method</li> <li><a href="https://github.com/minio/highwayhash/commit/6a9c19b1156f8704d73a73a2d8ba2ef653988f25"><code>6a9c19b</code></a> Update ARM performance on Graviton3</li> <li><a href="https://github.com/minio/highwayhash/commit/1304c103e59f69c73f8b461d5c65a6bce0b11395"><code>1304c10</code></a> > Warning: 1 issue was detected with this workflow: git checkout HEAD^2 is no...</li> <li><a href="https://github.com/minio/highwayhash/commit/b6f6ef7b89a1265fd1e2cf0ec1c513ec5027de0f"><code>b6f6ef7</code></a> Upgrade CI versions</li> <li><a href="https://github.com/minio/highwayhash/commit/1a96f281b5c687cf18030f723e303c6093a3c3d0"><code>1a96f28</code></a> Bump golang.org/x/sys from 0.0.0-20190130150945-aca44879d564 to 0.1.0</li> <li><a href="https://github.com/minio/highwayhash/commit/9cb37b8cb4e3ed1cf7e0fda944dce3e64c35bddc"><code>9cb37b8</code></a> Fix build tags for newer Go.</li> <li>Additional commits viewable in <a href="https://github.com/minio/highwayhash/compare/v1.0.2...v1.0.3">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…ometbft#3911) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.55.0 to 0.57.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/common/releases">github.com/prometheus/common's releases</a>.</em></p> <blockquote> <h2>v0.57.0</h2> <h2>What's Changed</h2> <ul> <li>feat: new promslog and promslog/flag packages to wrap log/slog by <a href="https://github.com/tjhop"><code>@tjhop</code></a> in <a href="https://github.com/prometheus/common/pull/677">prometheus/common#677</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/tjhop"><code>@tjhop</code></a> made their first contribution in <a href="https://github.com/prometheus/common/pull/677">prometheus/common#677</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.56.0...v0.57.0">https://github.com/prometheus/common/compare/v0.56.0...v0.57.0</a></p> <h2>v0.56.0</h2> <h2>What's Changed</h2> <ul> <li>Don't always fetch a OAuth2 token, if the secret from a file didn't change by <a href="https://github.com/multani"><code>@multani</code></a> in <a href="https://github.com/prometheus/common/pull/647">prometheus/common#647</a></li> <li>remove dependency to github.com/prometheus/client_golang by <a href="https://github.com/ilius"><code>@ilius</code></a> in <a href="https://github.com/prometheus/common/pull/662">prometheus/common#662</a></li> <li>Bump github.com/aws/aws-sdk-go from 1.54.7 to 1.54.11 in /sigv4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/661">prometheus/common#661</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://github.com/prometheus/common/pull/664">prometheus/common#664</a></li> <li>Revert <a href="https://github.com/prometheus/common/issues/576">#576</a> and add deprecation notice by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://github.com/prometheus/common/pull/665">prometheus/common#665</a></li> <li>Bump golang.org/x/net from 0.26.0 to 0.27.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/667">prometheus/common#667</a></li> <li>use basic string in IsValidLegacyMetricName by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://github.com/prometheus/common/pull/668">prometheus/common#668</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://github.com/prometheus/common/pull/672">prometheus/common#672</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://github.com/prometheus/common/pull/674">prometheus/common#674</a></li> <li>Bump github.com/aws/aws-sdk-go from 1.54.19 to 1.55.5 in /sigv4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/671">prometheus/common#671</a></li> <li>sigv4: support nil body by <a href="https://github.com/roidelapluie"><code>@roidelapluie</code></a> in <a href="https://github.com/prometheus/common/pull/673">prometheus/common#673</a></li> <li>Fix overflows of untyped int constants on 32-bit by <a href="https://github.com/dswarbrick"><code>@dswarbrick</code></a> in <a href="https://github.com/prometheus/common/pull/675">prometheus/common#675</a></li> <li>Update client_golang by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://github.com/prometheus/common/pull/676">prometheus/common#676</a></li> <li>Update golangci lint by <a href="https://github.com/roidelapluie"><code>@roidelapluie</code></a> in <a href="https://github.com/prometheus/common/pull/679">prometheus/common#679</a></li> <li>expfmt: Add UTF-8 syntax support in text_parse.go by <a href="https://github.com/fedetorres93"><code>@fedetorres93</code></a> in <a href="https://github.com/prometheus/common/pull/670">prometheus/common#670</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://github.com/prometheus/common/pull/681">prometheus/common#681</a></li> <li>fix(utf8): provide a method for explicitly checking label names for legacy validity by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://github.com/prometheus/common/pull/682">prometheus/common#682</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/multani"><code>@multani</code></a> made their first contribution in <a href="https://github.com/prometheus/common/pull/647">prometheus/common#647</a></li> <li><a href="https://github.com/ilius"><code>@ilius</code></a> made their first contribution in <a href="https://github.com/prometheus/common/pull/662">prometheus/common#662</a></li> <li><a href="https://github.com/dswarbrick"><code>@dswarbrick</code></a> made their first contribution in <a href="https://github.com/prometheus/common/pull/675">prometheus/common#675</a></li> <li><a href="https://github.com/fedetorres93"><code>@fedetorres93</code></a> made their first contribution in <a href="https://github.com/prometheus/common/pull/670">prometheus/common#670</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.55.0...v0.56.0">https://github.com/prometheus/common/compare/v0.55.0...v0.56.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/common/commit/9bbc9cb5e3685e0dbb85461dde3385509a507550"><code>9bbc9cb</code></a> Merge pull request <a href="https://github.com/prometheus/common/issues/677">#677</a> from tjhop/feat/add-promslog-pkg</li> <li><a href="https://github.com/prometheus/common/commit/6ea2584af7f3a2c136ccf2f7844d9d7015680479"><code>6ea2584</code></a> feat: new promslog and promslog/flag packages to wrap log/slog</li> <li><a href="https://github.com/prometheus/common/commit/6623230f2fa6d06f840b03469d6d786172c4a74f"><code>6623230</code></a> Provide a method for explicitly checking label names for legacy validity. (<a href="https://github.com/prometheus/common/issues/682">#682</a>)</li> <li><a href="https://github.com/prometheus/common/commit/19d07967696b0039bc5b76fc1e72f2be289961e1"><code>19d0796</code></a> Merge pull request <a href="https://github.com/prometheus/common/issues/681">#681</a> from prometheus/repo_sync</li> <li><a href="https://github.com/prometheus/common/commit/29a2d2c75f018a6b6da1309e44b8210a7c48406e"><code>29a2d2c</code></a> Update common Prometheus files</li> <li><a href="https://github.com/prometheus/common/commit/8968b6c1d012c44709ce098644b57d681a5eb571"><code>8968b6c</code></a> expfmt: Add UTF-8 syntax support in text_parse.go (<a href="https://github.com/prometheus/common/issues/670">#670</a>)</li> <li><a href="https://github.com/prometheus/common/commit/cd4bcc02f4479542b7b360049c2ce7db52d3163d"><code>cd4bcc0</code></a> Update golangci lint (<a href="https://github.com/prometheus/common/issues/679">#679</a>)</li> <li><a href="https://github.com/prometheus/common/commit/2cac84e1490776cacb3f46f14e7adbaf8dcb4596"><code>2cac84e</code></a> Update client_golang (<a href="https://github.com/prometheus/common/issues/676">#676</a>)</li> <li><a href="https://github.com/prometheus/common/commit/79c0459359c4f5fa2113241540dca24054c1b348"><code>79c0459</code></a> Merge pull request <a href="https://github.com/prometheus/common/issues/675">#675</a> from dswarbrick/fix-32bit-overflows</li> <li><a href="https://github.com/prometheus/common/commit/008d7b8628857284ef9162e41a8734f1e479dd80"><code>008d7b8</code></a> Fix overflows of untyped int constants on 32-bit</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/common/compare/v0.55.0...v0.57.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…metbft#3938) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.38.0 to 1.39.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.39.0</h2> <p>Release v1.39.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/54abbed4fe8d8d45173eca4798b0c39a53a7b658"><code>54abbed</code></a> Release v1.39.0 (<a href="https://github.com/bufbuild/buf-setup-action/issues/221">#221</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.38.0...v1.39.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…ometbft#3939) Bumps [slackapi/slack-github-action](https://github.com/slackapi/slack-github-action) from 1.26.0 to 1.27.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/slackapi/slack-github-action/releases">slackapi/slack-github-action's releases</a>.</em></p> <blockquote> <h2>Slack Send V1.27.0</h2> <h2>What's changed</h2> <p>This release introduces an optional <code>payload-delimiter</code> parameter for flattening nested objects with a customized delimiter before the payload is sent to Slack Workflow Builder when using workflow webhook triggers.</p> <pre lang="diff"><code> - name: Send a custom flattened payload uses: slackapi/[email protected] + with: + payload-delimiter: "_" env: SLACK_WEBHOOK_URL: ${{ secrets.SLACK_WEBHOOK_URL }} </code></pre> <p>Setting this value to an underscore (<code>_</code>) is recommended when using nested inputs within Workflow Builder to match expected input formats of Workflow Builder, but the actual value can be changed to something else! This "flattening" behavior <strong>did</strong> exist prior to this version, but used a period (<code>.</code>) which is not valid for webook inputs in Workflow Builder.</p> <!-- raw HTML omitted --> <p>The resulting output of flattened objects is not always clear, but the following can hopefully serve as a quick reference as well as <a href="https://github.com/slackapi/slack-github-action/blob/5d1fb07d3c4f410b8d278134c714edff31264beb/test/slack-send-test.js#L264-L319">these specs</a> when using <code>_</code> as the delimiter:</p> <p><strong>Input</strong>:</p> <pre lang="json"><code>{ "apples": "tree", "bananas": { "truthiness": true } } </code></pre> <p><strong>Output</strong>:</p> <pre lang="json"><code>{ "apples": "tree", "bananas_truthiness": "true" } </code></pre> <p>Notice that <code>bananas_truthiness</code> is also stringified in this process, as part of updating values to match the expected inputs of Workflow Builder!</p> <!-- raw HTML omitted --> <h2>Changes</h2> <p>In addition to the changes above, the following lists all of the changes since the prior version with the <strong>complete changelog</strong> changes found here: <a href="https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0">https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0</a></p> <h4>🎁 Enhancements</h4> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/slackapi/slack-github-action/commit/37ebaef184d7626c5f204ab8d3baff4262dd30f0"><code>37ebaef</code></a> Automatic compilation</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/5d1fb07d3c4f410b8d278134c714edff31264beb"><code>5d1fb07</code></a> chore(release): tag version 1.27.0</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/3bc06716971bb1dc2899ccd0332da69b8b778356"><code>3bc0671</code></a> chore(deps): bump axios to 1.7.5 (<a href="https://github.com/slackapi/slack-github-action/issues/332">#332</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/b452451af72f751bd902edfbbc084a8b2e6e5031"><code>b452451</code></a> feat: make the payload delimiter configurable for workflow webhook triggers (...</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/c50e848fe18b1da5665e19286e3c9b86ad1b3bf5"><code>c50e848</code></a> build(deps-dev): bump mocha from 10.5.2 to 10.7.0 (<a href="https://github.com/slackapi/slack-github-action/issues/328">#328</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/e4a9c4b6853f8b64ba9fee848d3f30198f9427c1"><code>e4a9c4b</code></a> build(deps): bump <code>@slack/web-api</code> from 7.2.0 to 7.3.2 (<a href="https://github.com/slackapi/slack-github-action/issues/327">#327</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/9a7f0fa18816ae797b801ec2c27a04499fc2381b"><code>9a7f0fa</code></a> build(deps-dev): bump chai from 4.4.1 to 4.5.0 (<a href="https://github.com/slackapi/slack-github-action/issues/326">#326</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/73b7062b8dccf12c0d62626d19953ea628e418ba"><code>73b7062</code></a> build(deps-dev): bump eslint-plugin-jsdoc from 48.5.0 to 48.10.2 (<a href="https://github.com/slackapi/slack-github-action/issues/325">#325</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/3d5207b5cf109bd2640ec20613ed7f29ab46e853"><code>3d5207b</code></a> build(deps): bump https-proxy-agent from 7.0.4 to 7.0.5 (<a href="https://github.com/slackapi/slack-github-action/issues/320">#320</a>)</li> <li><a href="https://github.com/slackapi/slack-github-action/commit/4e15b6a964ca554d1a7b7a56850baa97e8316be2"><code>4e15b6a</code></a> build(deps): bump <code>@slack/web-api</code> from 7.0.4 to 7.2.0 (<a href="https://github.com/slackapi/slack-github-action/issues/323">#323</a>)</li> <li>Additional commits viewable in <a href="https://github.com/slackapi/slack-github-action/compare/v1.26.0...v1.27.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…metbft#4024) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.39.0 to 1.40.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.40.1</h2> <p>Release v1.40.1</p> <h2>v1.40.0</h2> <p>Release v1.40.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/2dbfb63c8b0cc4f1707ba5dd23017e998a25b2f0"><code>2dbfb63</code></a> Release v1.40.1 (<a href="https://github.com/bufbuild/buf-setup-action/issues/223">#223</a>)</li> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/51c53201f0da34af376e0b998c889ebb2813d479"><code>51c5320</code></a> Release v1.40.0 (<a href="https://github.com/bufbuild/buf-setup-action/issues/222">#222</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.39.0...v1.40.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…rejected_txs` (backport cometbft#4019) (cometbft#4052) #### PR checklist - [ ] Tests written/updated - [x] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [X] Updated relevant documentation (`docs/` or `spec/`) and code comments <hr>This is an automatic backport of pull request cometbft#4019 done by [Mergify](https://mergify.com). --------- Co-authored-by: Hernán Vanzetto <[email protected]> Co-authored-by: hvanz <[email protected]> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
### Context We are updating CometBFT dependencies to fix new CVE vulnerabilities. Cometbft-db v0.9.5 updates its Go version to 1.22 and updates some of its dependencies vulnerable to CVEs. See its [CHANGELOG](https://github.com/cometbft/cometbft-db/blob/v0.9.x/CHANGELOG.md#v095) ### This Change This PR updates cometbft-db to v0.9.5. --- #### PR checklist ~- [ ] Tests written/updated~ - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) ~- [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments~ <hr>This is an automatic backport of pull request cometbft#4059 done by [Mergify](https://mergify.com).<hr>This is an automatic backport of pull request cometbft#4072 done by [Mergify](https://mergify.com). --------- Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> Co-authored-by: Anton Kaliaev <[email protected]>
…ft#2073) This is an automatic backport of pull request cometbft#2046 done by [Mergify](https://mergify.com). Cherry-pick of 2bbb5c1 has failed: ``` On branch mergify/bp/v0.38.x/pr-2046 Your branch is up to date with 'origin/v0.38.x'. You are currently cherry-picking commit 2bbb5c1. (fix conflicts and run "git cherry-pick --continue") (use "git cherry-pick --skip" to skip this patch) (use "git cherry-pick --abort" to cancel the cherry-pick operation) Changes to be committed: modified: scripts/mockery_generate.sh deleted: tools/proto/Dockerfile deleted: tools/tools.go modified: types/params.go Unmerged paths: (use "git add/rm <file>..." as appropriate to mark resolution) both modified: go.mod both modified: go.sum deleted by them: tools/README.md ``` To fix up this pull request, you can check it out locally. See documentation: https://docs.github.com/en/github/collaborating-with-pull-requests/reviewing-changes-in-pull-requests/checking-out-pull-requests-locally --- <details> <summary>Mergify commands and options</summary> <br /> More conditions and actions can be found in the [documentation](https://docs.mergify.com/). You can also trigger Mergify actions by commenting on this pull request: - `@Mergifyio refresh` will re-evaluate the rules - `@Mergifyio rebase` will rebase this PR on its base branch - `@Mergifyio update` will merge the base branch into this PR - `@Mergifyio backport <destination>` will backport this PR on `<destination>` branch Additionally, on Mergify [dashboard](https://dashboard.mergify.com) you can: - look at your merge queues - generate the Mergify configuration with the config editor. Finally, you can contact us on https://mergify.com </details> --------- Co-authored-by: Jacob Gadikian <[email protected]> Co-authored-by: Anton Kaliaev <[email protected]>
…3910) Bumps [gonum.org/v1/gonum](https://github.com/gonum/gonum) from 0.12.0 to 0.15.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/gonum/gonum/releases">gonum.org/v1/gonum's releases</a>.</em></p> <blockquote> <h2>v0.15.1</h2> <p>Release v0.15.1 is a bug fix release in the v0.15 branch.</p> <p>Fixes since v0.15.0:</p> <p>b6147192 stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for alpha <= 1 5bc3fec2 mat: fix dst matrix shape check in QR.RTo 354eb431 mat: calculate Q elements lazily when calling QR.At</p> <h2>v0.15.0</h2> <p>Release v0.15.0 is a minor release in the v0.15 branch.</p> <p>Bug fixes/improvements since v0.14.0:</p> <p>269815f0 spatial/curve: new package to constuct 2-, 3- and 4-D Hilbert curves b27ae13f lapack/gonum: add Dptcon 55edfc1d lapack/testlapack: add dlanst 3462e90a lapack/gonum: add Dptsv 44d84c93 lapack/gonum: add Dpttrs c4e3bfbe lapack/gonum: add Dpttrf fa306f21 lapack/gonum: handle NaN and Inf input to Dgecon db43f45c graph/path: do not keep duplicate paths in YenKShortestPaths 5e05b179 lapack/gonum: fix accumulation in Dlassq 606793d4 stat/distmv: add EigenSym interface ff24a548 stat/distmv: add special case in NormalRandCov for mat.EigenSym 83fd3a6d mat: add RawValues and RawQ to EigenSym 999e48d0 mat: make EigenSym satisfy Matrix 71ca02b7 mat: delegate to SolveTo method in *Dense.Solve f560d5cb stat/distmv: add NormalRandCov b2722176 mat: make LQ satisfy Matrix 78bc3a48 mat: add VecDense.Permute 6e2f5c58 lapack/gonum: require exact length of tau in QR routines bd767ae5 mat: don't panic in Dims on zero Cholesky types 45b74210 mat: make QR satisfy Matrix aef3c5f3 mat: make LU satisfy Matrix 2d1137f1 mat: add LU.RowPivots and deprecate LU.Pivot ef75f4dd mat: return U and ColumnPivots from PivotedCholesky 5f74663e mat: add Dense.PermuteRows and PermuteCols ff3e3209 lapack/lapack64: add Geqp3 and clean up docs 7df15c33 lapack/gonum: clean up Dgghrd and its test f0a57a45 lapack/gonum: add Dgghrd and its test 7bed099d lapack/gonum: clean up Dlanhs and its test aa92aa08 spatial/kdtree: update value in place in NKeeper.Keep</p> <h2>v0.14.0</h2> <p>Release v0.14.0 is a minor release in the v0.14 branch.</p> <p>API breaking changes:</p> <p>9e7bb936 graph/path: allow cost-based Yen shortest path calculation</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/gonum/gonum/commit/bdcda9a453049449163d160b98285b64ec8093a1"><code>bdcda9a</code></a> graph: use slices package for sorting and reversing slices</li> <li><a href="https://github.com/gonum/gonum/commit/a9b228ed6bdcfafd52ce8ba413595310823a0004"><code>a9b228e</code></a> A+C: add Tristan Nicholls</li> <li><a href="https://github.com/gonum/gonum/commit/1f29d7b1d1724243c9f4a156cb1e16c9cbb15de1"><code>1f29d7b</code></a> mat: calculate Q elements lazily when calling QR.At</li> <li><a href="https://github.com/gonum/gonum/commit/f1a62e187e273b2d99f9c2a04fa8931df9c22947"><code>f1a62e1</code></a> mat: fix dst matrix shape check in QR.RTo</li> <li><a href="https://github.com/gonum/gonum/commit/4cb1c6f4a863dd4bde148d9b8736b7d69af4b75b"><code>4cb1c6f</code></a> ci,mod: update to go1.23</li> <li><a href="https://github.com/gonum/gonum/commit/0c62273e338b91cd9578ed93572c693ba55e1eaa"><code>0c62273</code></a> A+C: add Dirk Müller</li> <li><a href="https://github.com/gonum/gonum/commit/0efa2841bf9d1f6ad3b4f5638089c8d6cc72f51e"><code>0efa284</code></a> A+C: add Tom Payne</li> <li><a href="https://github.com/gonum/gonum/commit/f48364e31d40fb9c3b6de7b7d20223edd6d49779"><code>f48364e</code></a> interp: increase speed of findSegment</li> <li><a href="https://github.com/gonum/gonum/commit/1dd194f95b64cda4727b9548bcd2471b4372c7c8"><code>1dd194f</code></a> stat/distuv: correct Gamma Mode doc comment</li> <li><a href="https://github.com/gonum/gonum/commit/35bb474ac513c77971be8e1e9ab2bd1eaca07c79"><code>35bb474</code></a> stat/distuv: correct Gamma Mode() and LogProb(0)/Prob(0) for alpha <= 1</li> <li>Additional commits viewable in <a href="https://github.com/gonum/gonum/compare/v0.12.0...v0.15.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…metbft#4096) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.40.1 to 1.41.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.41.0</h2> <p>Release v1.41.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/2881ede27923557cb71f4ddc8954905c2639d1fb"><code>2881ede</code></a> Release v1.41.0 (<a href="https://github.com/bufbuild/buf-setup-action/issues/224">#224</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.40.1...v1.41.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ometbft#4123) (cometbft#4145) it happens in benchmark or production when traffic is high, the log frequency is very high because it's triggered by p2p tx propagation message. Solution: - change it to debug level <hr>This is an automatic backport of pull request cometbft#4123 done by [Mergify](https://mergify.com). --------- Co-authored-by: yihuang <[email protected]> Co-authored-by: Andy Nogueira <[email protected]>
…metbft#4160) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.41.0 to 1.42.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.42.0</h2> <p>Release v1.42.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/a8b4a18369a5feb07d4bf9cb2b24f81d105d7bab"><code>a8b4a18</code></a> Release v1.42.0 (<a href="https://github.com/bufbuild/buf-setup-action/issues/225">#225</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.41.0...v1.42.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…bft#4194) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.7.0 to 6.8.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.8.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.37.1 to 0.38.0 in <a href="https://github.com/docker/build-push-action/pull/1230">docker/build-push-action#1230</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0">https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/32945a339266b759abcbdc89316275140b0fc960"><code>32945a3</code></a> Merge pull request <a href="https://github.com/docker/build-push-action/issues/1230">#1230</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/e0fe9cf0f26132beab7b62929bd647eef9e7df31"><code>e0fe9cf</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/8f1ff6bf9a836299c21b10f942be49efb52a832c"><code>8f1ff6b</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.37.1 to 0.38.0</li> <li>See full diff in <a href="https://github.com/docker/build-push-action/compare/v6.7.0...v6.8.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ometbft#4207) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.11.0 to 5.12.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.12.0</h2> <h2>What's Changed</h2> <ul> <li>git: Worktree.AddWithOptions: add skipStatus option when providing a specific path by <a href="https://github.com/moranCohen26"><code>@moranCohen26</code></a> in <a href="https://github.com/go-git/go-git/pull/994">go-git/go-git#994</a></li> <li>git: Signer: fix usage of crypto.Signer interface by <a href="https://github.com/wlynch"><code>@wlynch</code></a> in <a href="https://github.com/go-git/go-git/pull/1029">go-git/go-git#1029</a></li> <li>git: Remote, fetch, adds the prune option. by <a href="https://github.com/juliens"><code>@juliens</code></a> in <a href="https://github.com/go-git/go-git/pull/366">go-git/go-git#366</a></li> <li>git: Add crypto.Signer option to CommitOptions. by <a href="https://github.com/wlynch"><code>@wlynch</code></a> in <a href="https://github.com/go-git/go-git/pull/996">go-git/go-git#996</a></li> <li>git: Worktree checkout tag hash id (<a href="https://github.com/go-git/go-git/issues/959">#959</a>) by <a href="https://github.com/aymanbagabas"><code>@aymanbagabas</code></a> in <a href="https://github.com/go-git/go-git/pull/966">go-git/go-git#966</a></li> <li>git: Worktree, Don't panic on empty or root path when checking if it is valid by <a href="https://github.com/tim775"><code>@tim775</code></a> in <a href="https://github.com/go-git/go-git/pull/1042">go-git/go-git#1042</a></li> <li>git: Add commit validation for Reset by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://github.com/go-git/go-git/pull/1048">go-git/go-git#1048</a></li> <li>git: worktree_commit, Fix amend commit to apply changes. Fixes <a href="https://github.com/go-git/go-git/issues/1024">#1024</a> by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://github.com/go-git/go-git/pull/1045">go-git/go-git#1045</a></li> <li>git: Implement Merge function with initial <code>FastForwardMerge</code> support by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://github.com/go-git/go-git/pull/1044">go-git/go-git#1044</a></li> <li>plumbing: object, Make first commit visible on logs filtered with filename. Fixes <a href="https://github.com/go-git/go-git/issues/191">#191</a> by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://github.com/go-git/go-git/pull/1036">go-git/go-git#1036</a></li> <li>plumbing: no panic in printStats function. Fixes <a href="https://github.com/go-git/go-git/issues/177">#177</a> by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://github.com/go-git/go-git/pull/971">go-git/go-git#971</a></li> <li>plumbing: object, Optimize logging with file. by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://github.com/go-git/go-git/pull/1046">go-git/go-git#1046</a></li> <li>plumbing: object, check legitimacy in (*Tree).Encode by <a href="https://github.com/niukuo"><code>@niukuo</code></a> in <a href="https://github.com/go-git/go-git/pull/967">go-git/go-git#967</a></li> <li>plumbing: format/gitattributes, close file in ReadAttributesFile by <a href="https://github.com/prskr"><code>@prskr</code></a> in <a href="https://github.com/go-git/go-git/pull/1018">go-git/go-git#1018</a></li> <li>plumbing: check setAuth error. Fixes <a href="https://github.com/go-git/go-git/issues/185">#185</a> by <a href="https://github.com/nodivbyzero"><code>@nodivbyzero</code></a> in <a href="https://github.com/go-git/go-git/pull/969">go-git/go-git#969</a></li> <li>plumbing: object, fix variable defaultUtf8CommitMessageEncoding name spell error by <a href="https://github.com/Jerry-yz"><code>@Jerry-yz</code></a> in <a href="https://github.com/go-git/go-git/pull/987">go-git/go-git#987</a></li> <li>utils: merkletrie, calculate filesystem node's hash lazily. by <a href="https://github.com/candid82"><code>@candid82</code></a> in <a href="https://github.com/go-git/go-git/pull/825">go-git/go-git#825</a></li> <li>utils: update comment in node.go's Hash() by <a href="https://github.com/codablock"><code>@codablock</code></a> in <a href="https://github.com/go-git/go-git/pull/992">go-git/go-git#992</a></li> <li>_example: fix 404 link and added ssh-agent clone link by <a href="https://github.com/grinish21"><code>@grinish21</code></a> in <a href="https://github.com/go-git/go-git/pull/1022">go-git/go-git#1022</a></li> <li>_example: checkout-branch example by <a href="https://github.com/dlambda"><code>@dlambda</code></a> in <a href="https://github.com/go-git/go-git/pull/446">go-git/go-git#446</a></li> <li>_example: example for git clone using ssh-agent by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://github.com/go-git/go-git/pull/998">go-git/go-git#998</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/candid82"><code>@candid82</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/825">go-git/go-git#825</a></li> <li><a href="https://github.com/codablock"><code>@codablock</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/992">go-git/go-git#992</a></li> <li><a href="https://github.com/Jerry-yz"><code>@Jerry-yz</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/987">go-git/go-git#987</a></li> <li><a href="https://github.com/wlynch"><code>@wlynch</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/996">go-git/go-git#996</a></li> <li><a href="https://github.com/moranCohen26"><code>@moranCohen26</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/994">go-git/go-git#994</a></li> <li><a href="https://github.com/grinish21"><code>@grinish21</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/1022">go-git/go-git#1022</a></li> <li><a href="https://github.com/prskr"><code>@prskr</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/1018">go-git/go-git#1018</a></li> <li><a href="https://github.com/dlambda"><code>@dlambda</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/446">go-git/go-git#446</a></li> <li><a href="https://github.com/juliens"><code>@juliens</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/366">go-git/go-git#366</a></li> <li><a href="https://github.com/onee-only"><code>@onee-only</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/1036">go-git/go-git#1036</a></li> <li><a href="https://github.com/tim775"><code>@tim775</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/1042">go-git/go-git#1042</a></li> <li><a href="https://github.com/niukuo"><code>@niukuo</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/967">go-git/go-git#967</a></li> <li><a href="https://github.com/avoidalone"><code>@avoidalone</code></a> made their first contribution in <a href="https://github.com/go-git/go-git/pull/1047">go-git/go-git#1047</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0">https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/302dddeda962e4bb3477a8e4080bc6f5a253e2bb"><code>302ddde</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1060">#1060</a> from go-git/dependabot/go_modules/github.com/gliderl...</li> <li><a href="https://github.com/go-git/go-git/commit/6bba34deab858ad5d74733686f0a8b4c2940f388"><code>6bba34d</code></a> build: bump github.com/gliderlabs/ssh from 0.3.6 to 0.3.7</li> <li><a href="https://github.com/go-git/go-git/commit/feaeb36df2438dd5f861be2c1041f4e07c126233"><code>feaeb36</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/937">#937</a> from matejrisek/feature/rename-short-fields</li> <li><a href="https://github.com/go-git/go-git/commit/7959a42552a99b2e2df21a6aacafc97b2b5c7457"><code>7959a42</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1052">#1052</a> from go-git/dependabot/go_modules/github.com/skeema/...</li> <li><a href="https://github.com/go-git/go-git/commit/4c17ce7c6a7936a61cea17bee56daf5d9c2b21e4"><code>4c17ce7</code></a> build: bump github.com/skeema/knownhosts from 1.2.1 to 1.2.2</li> <li><a href="https://github.com/go-git/go-git/commit/3f77e6f0292bdabb6368a42ef0f5fa925ed42f60"><code>3f77e6f</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1048">#1048</a> from pjbgf/fix-reset-validation</li> <li><a href="https://github.com/go-git/go-git/commit/6af38e000608a795320cd17c99491853f0b8ad3a"><code>6af38e0</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1047">#1047</a> from avoidalone/master</li> <li><a href="https://github.com/go-git/go-git/commit/e6c3e58198d176c497bb2dba1a2adb9302597676"><code>e6c3e58</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1044">#1044</a> from pjbgf/ff-merge</li> <li><a href="https://github.com/go-git/go-git/commit/04f7b23cbb85040a276ab2b7d6879223779451fd"><code>04f7b23</code></a> *: fix some comments</li> <li><a href="https://github.com/go-git/go-git/commit/f4f1a876e622c45ed51d05df1298d421a6868fcc"><code>f4f1a87</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/971">#971</a> from nodivbyzero/fix-177-diff-print-file-stats</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.11.0...v5.12.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ometbft#4205) Bumps [github.com/sasha-s/go-deadlock](https://github.com/sasha-s/go-deadlock) from 0.3.1 to 0.3.5. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/sasha-s/go-deadlock/releases">github.com/sasha-s/go-deadlock's releases</a>.</em></p> <blockquote> <h2>v0.3.3</h2> <h2>What's Changed</h2> <ul> <li>Add missing sync.NewCond wrapper by <a href="https://github.com/ncw"><code>@ncw</code></a> in <a href="https://github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li> <li>fixed the comment of Opts.DeadlockTimeout in deadlock.go by <a href="https://github.com/h3n4l"><code>@h3n4l</code></a> in <a href="https://github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li> <li>deadlock: Add TryLock wrappers by <a href="https://github.com/jrajahalme"><code>@jrajahalme</code></a> in <a href="https://github.com/sasha-s/go-deadlock/pull/30">sasha-s/go-deadlock#30</a></li> <li>Reuse timers with sync.Pool by <a href="https://github.com/millfort"><code>@millfort</code></a> in <a href="https://github.com/sasha-s/go-deadlock/pull/31">sasha-s/go-deadlock#31</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/ncw"><code>@ncw</code></a> made their first contribution in <a href="https://github.com/sasha-s/go-deadlock/pull/22">sasha-s/go-deadlock#22</a></li> <li><a href="https://github.com/h3n4l"><code>@h3n4l</code></a> made their first contribution in <a href="https://github.com/sasha-s/go-deadlock/pull/23">sasha-s/go-deadlock#23</a></li> <li><a href="https://github.com/jrajahalme"><code>@jrajahalme</code></a> made their first contribution in <a href="https://github.com/sasha-s/go-deadlock/pull/30">sasha-s/go-deadlock#30</a></li> <li><a href="https://github.com/millfort"><code>@millfort</code></a> made their first contribution in <a href="https://github.com/sasha-s/go-deadlock/pull/31">sasha-s/go-deadlock#31</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/sasha-s/go-deadlock/compare/v0.3.1...v0.3.3">https://github.com/sasha-s/go-deadlock/compare/v0.3.1...v0.3.3</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/sasha-s/go-deadlock/commit/464d34347a399b840a4f963cc96dfc993ccf8c62"><code>464d343</code></a> update github workflows to test on go 1.23</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/564b73de7bb88918c298624d530f83efcec20cbf"><code>564b73d</code></a> update goid</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/ed6f7f6d979ce0a3df1ba7683c7735373a9a97c7"><code>ed6f7f6</code></a> Reuse timers with sync.Pool (<a href="https://github.com/sasha-s/go-deadlock/issues/31">#31</a>)</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/20e556a2e9adcf7184892aeb8d5f254293e505d7"><code>20e556a</code></a> deadlock: Add TryLock wrappers (<a href="https://github.com/sasha-s/go-deadlock/issues/30">#30</a>)</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/5afde13977e624ab3bd64e5801f75f9e8eb1f41b"><code>5afde13</code></a> fixed the comment of Opts.DeadlockTimeout in deadlock.go (<a href="https://github.com/sasha-s/go-deadlock/issues/23">#23</a>)</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/f58e13930c01bb88ec001b9eddffa3c2afcadbeb"><code>f58e139</code></a> Add missing sync.NewCond wrapper (<a href="https://github.com/sasha-s/go-deadlock/issues/22">#22</a>)</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/4a6d8f385ee1559eaf7147969730022208b3506f"><code>4a6d8f3</code></a> Create go.yml</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/e8cdaa485d8bad7743135de6082a4332c83592c4"><code>e8cdaa4</code></a> update go versions in CI</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/1182f7860fd571d1092e0483285e995aff8a0a70"><code>1182f78</code></a> Update Readme.md</li> <li><a href="https://github.com/sasha-s/go-deadlock/commit/82c26c5c235b3c675d9ddfda5792ab33a1f171f8"><code>82c26c5</code></a> migrate to travis-ci.com</li> <li>See full diff in <a href="https://github.com/sasha-s/go-deadlock/compare/v0.3.1...v0.3.5">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
) Bumps [github.com/lib/pq](https://github.com/lib/pq) from 1.10.7 to 1.10.9. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/lib/pq/releases">github.com/lib/pq's releases</a>.</em></p> <blockquote> <h2>v1.10.9</h2> <ul> <li>Fixes backwards incompat bug with 1.13.</li> <li>Fixes pgpass issue</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/lib/pq/commit/2a217b94f5ccd3de31aec4152a541b9ff64bed05"><code>2a217b9</code></a> add version check for go 1.15 (<a href="https://github.com/lib/pq/issues/1123">#1123</a>)</li> <li><a href="https://github.com/lib/pq/commit/d8d93a38df0048951ff15830d793024f890f6c3c"><code>d8d93a3</code></a> fix handle pgpass (<a href="https://github.com/lib/pq/issues/1120">#1120</a>)</li> <li><a href="https://github.com/lib/pq/commit/c10fcfec9389c2e257cf50b7e6d218dde1d062f4"><code>c10fcfe</code></a> remove stray debugging code</li> <li><a href="https://github.com/lib/pq/commit/96e73eb9aa7ba849b24eae15477456d8bbb1c9b7"><code>96e73eb</code></a> conn: Implement driver.Validator, SessionResetter for cancelation</li> <li><a href="https://github.com/lib/pq/commit/922c00e176fb3960d912dc2c7f67ea2cf18d27b0"><code>922c00e</code></a> Update codeql-analysis.yml</li> <li><a href="https://github.com/lib/pq/commit/a2a317360bd33f51c5804bde348c35a65f5644b1"><code>a2a3173</code></a> Update test.yml</li> <li><a href="https://github.com/lib/pq/commit/3a6282fb835a9901f95a9ba9c3b21e16afed61f3"><code>3a6282f</code></a> Reduced the complexity of handlePgpass (<a href="https://github.com/lib/pq/issues/1101">#1101</a>)</li> <li><a href="https://github.com/lib/pq/commit/133ac67c2960135f7e0823cb7ba858101ba3d87f"><code>133ac67</code></a> Improved the performance of CopyIn and CopyInSchema and added BufferQuoteIden...</li> <li>See full diff in <a href="https://github.com/lib/pq/compare/v1.10.7...v1.10.9">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…ometbft#4204) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.57.0 to 0.59.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/common/releases">github.com/prometheus/common's releases</a>.</em></p> <blockquote> <h2>v0.59.1</h2> <h2>What's Changed</h2> <ul> <li>fix(utf8): Fix multiple metric name inside braces validation by <a href="https://github.com/fedetorres93"><code>@fedetorres93</code></a> in <a href="https://github.com/prometheus/common/pull/691">prometheus/common#691</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.59.0...v0.59.1">https://github.com/prometheus/common/compare/v0.59.0...v0.59.1</a></p> <h2>v0.59.0</h2> <h2>What's Changed</h2> <ul> <li>expfmt: Add WithEscapingScheme to help construct Formats by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://github.com/prometheus/common/pull/688">prometheus/common#688</a></li> <li>Change the default escape method to UnderscoreEscaping by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://github.com/prometheus/common/pull/690">prometheus/common#690</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.58.0...v0.59.0">https://github.com/prometheus/common/compare/v0.58.0...v0.59.0</a></p> <h2>v0.58.0</h2> <h2>What's Changed</h2> <ul> <li>docs: mention new promslog package in package list in README by <a href="https://github.com/tjhop"><code>@tjhop</code></a> in <a href="https://github.com/prometheus/common/pull/683">prometheus/common#683</a></li> <li>Bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/684">prometheus/common#684</a></li> <li>Bump golang.org/x/net from 0.27.0 to 0.28.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/685">prometheus/common#685</a></li> <li>Remove secret file existence check in Validate for headers by <a href="https://github.com/roidelapluie"><code>@roidelapluie</code></a> in <a href="https://github.com/prometheus/common/pull/687">prometheus/common#687</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.57.0...v0.58.0">https://github.com/prometheus/common/compare/v0.57.0...v0.58.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/common/commit/be8a747a1cf9f34dd301ff4e9f8527262e66c153"><code>be8a747</code></a> fix(utf8): Fix multiple metric name inside braces validation (<a href="https://github.com/prometheus/common/issues/691">#691</a>)</li> <li><a href="https://github.com/prometheus/common/commit/bf4843e30aed46215093a79e381b07ba8df96e0a"><code>bf4843e</code></a> Merge pull request <a href="https://github.com/prometheus/common/issues/690">#690</a> from ywwg/owilliams/default-escaping</li> <li><a href="https://github.com/prometheus/common/commit/01da22614fd688ce9040f3c72169b09b8104eec1"><code>01da226</code></a> Change the default escape method to UnderscoreEscaping</li> <li><a href="https://github.com/prometheus/common/commit/4f8e8f4cacf11e4d69d587e30d99ae7d88cc0878"><code>4f8e8f4</code></a> expfmt: Add WithEscapingScheme to help construct Formats (<a href="https://github.com/prometheus/common/issues/688">#688</a>)</li> <li><a href="https://github.com/prometheus/common/commit/b1880d0dabb633dbf29b999c6a046637efb602fe"><code>b1880d0</code></a> Merge pull request <a href="https://github.com/prometheus/common/issues/687">#687</a> from roidelapluie/checkheader</li> <li><a href="https://github.com/prometheus/common/commit/334963d1a28ee07975f6777cf65539ecddb89ae0"><code>334963d</code></a> Change the logic for SetDirectory</li> <li><a href="https://github.com/prometheus/common/commit/d64a7472ab6d74cc6b7984cd36f0c5c6129b7a68"><code>d64a747</code></a> Remove secret file existence check in Validate for headers</li> <li><a href="https://github.com/prometheus/common/commit/06c24259364465e6a0728c58dd1f1c99cc07fc3d"><code>06c2425</code></a> Bump golang.org/x/net from 0.27.0 to 0.28.0 (<a href="https://github.com/prometheus/common/issues/685">#685</a>)</li> <li><a href="https://github.com/prometheus/common/commit/4606c0a4f9447038e704e4d928b1d0e587e81e63"><code>4606c0a</code></a> Bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (<a href="https://github.com/prometheus/common/issues/684">#684</a>)</li> <li><a href="https://github.com/prometheus/common/commit/d98411bbf37c7f936cef6d32a6ca965588521b4d"><code>d98411b</code></a> Merge pull request <a href="https://github.com/prometheus/common/issues/683">#683</a> from tjhop/docs/promslog-README</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/common/compare/v0.57.0...v0.59.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…ft#4208) Bumps [github.com/adlio/schema](https://github.com/adlio/schema) from 1.3.3 to 1.3.6. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/adlio/schema/releases">github.com/adlio/schema's releases</a>.</em></p> <blockquote> <h2>v1.3.6</h2> <h2>What's Changed</h2> <ul> <li>Bump golang.org/x/net from 0.10.0 to 0.23.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/adlio/schema/pull/30">adlio/schema#30</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/adlio/schema/compare/v1.3.5...v1.3.6">https://github.com/adlio/schema/compare/v1.3.5...v1.3.6</a></p> <h2>v1.3.5</h2> <h2>What's Changed</h2> <ul> <li>Fix embedded migrations example by <a href="https://github.com/kalafut"><code>@kalafut</code></a> in <a href="https://github.com/adlio/schema/pull/24">adlio/schema#24</a></li> <li>Bump golang.org/x/crypto from 0.1.0 to 0.17.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/adlio/schema/pull/27">adlio/schema#27</a></li> <li>Bump github.com/docker/docker from 20.10.24+incompatible to 24.0.7+incompatible by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/adlio/schema/pull/26">adlio/schema#26</a></li> <li>Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/adlio/schema/pull/28">adlio/schema#28</a></li> <li>Bump github.com/docker/docker from 24.0.7+incompatible to 24.0.9+incompatible by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/adlio/schema/pull/29">adlio/schema#29</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/adlio/schema/compare/v1.3.4...v1.3.5">https://github.com/adlio/schema/compare/v1.3.4...v1.3.5</a></p> <h2>v1.3.4</h2> <h2>What's Changed</h2> <ul> <li>Bump golang.org/x/net from 0.0.0-20220617184016-355a448f1bc9 to 0.7.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/adlio/schema/pull/18">adlio/schema#18</a></li> <li>Update golangci-lint by <a href="https://github.com/adlio"><code>@adlio</code></a> in <a href="https://github.com/adlio/schema/pull/22">adlio/schema#22</a></li> <li>Bump golang.org/x/crypto from 0.0.0-20201016220609-9e8e0b390897 to 0.1.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/adlio/schema/pull/19">adlio/schema#19</a></li> <li>Bump github.com/docker/docker from 20.10.17+incompatible to 20.10.24+incompatible by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/adlio/schema/pull/21">adlio/schema#21</a></li> <li>Bump github.com/opencontainers/runc from 1.1.3 to 1.1.5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/adlio/schema/pull/20">adlio/schema#20</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/adlio/schema/compare/v1.3.3...v1.3.4">https://github.com/adlio/schema/compare/v1.3.3...v1.3.4</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/adlio/schema/commit/3dd37bbbdaec4b0a8e864122ffc5941d79dd37a0"><code>3dd37bb</code></a> Merge pull request <a href="https://github.com/adlio/schema/issues/30">#30</a> from adlio/dependabot/go_modules/golang.org/x/net-0.23.0</li> <li><a href="https://github.com/adlio/schema/commit/898b2da7fa18496ac02ff8c7cc4a6ad1089e4040"><code>898b2da</code></a> Bump golang.org/x/net from 0.10.0 to 0.23.0</li> <li><a href="https://github.com/adlio/schema/commit/3d4bda6646decc46eb5e70806d6ef0aa446f6271"><code>3d4bda6</code></a> Merge pull request <a href="https://github.com/adlio/schema/issues/29">#29</a> from adlio/dependabot/go_modules/github.com/docker/doc...</li> <li><a href="https://github.com/adlio/schema/commit/6cab430cf151260ed7fd86a8a81ea3454b1f2830"><code>6cab430</code></a> Merge pull request <a href="https://github.com/adlio/schema/issues/28">#28</a> from adlio/dependabot/go_modules/github.com/opencontai...</li> <li><a href="https://github.com/adlio/schema/commit/60e7bc511525c50d2da6453b7613f6b466edc6f7"><code>60e7bc5</code></a> Bump github.com/docker/docker</li> <li><a href="https://github.com/adlio/schema/commit/1084587924d92a067d1d94f9e958b9865b307ac2"><code>1084587</code></a> Bump github.com/opencontainers/runc from 1.1.5 to 1.1.12</li> <li><a href="https://github.com/adlio/schema/commit/1b012c934c70723f04025310c1607683f9d95a1c"><code>1b012c9</code></a> Merge pull request <a href="https://github.com/adlio/schema/issues/26">#26</a> from adlio/dependabot/go_modules/github.com/docker/doc...</li> <li><a href="https://github.com/adlio/schema/commit/2330eec246224f782e2f6997b544839445ab0576"><code>2330eec</code></a> Merge pull request <a href="https://github.com/adlio/schema/issues/27">#27</a> from adlio/dependabot/go_modules/golang.org/x/crypto-0...</li> <li><a href="https://github.com/adlio/schema/commit/99d0e6c6c17eaf98330aa592b0f51aa7acb807be"><code>99d0e6c</code></a> Adjust CircleCI config</li> <li><a href="https://github.com/adlio/schema/commit/64f56765a6101f32541967f7360b4c58a61c68ce"><code>64f5676</code></a> Bump golang.org/x/crypto from 0.1.0 to 0.17.0</li> <li>Additional commits viewable in <a href="https://github.com/adlio/schema/compare/v1.3.3...v1.3.6">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…ft#4206) Bumps [github.com/go-kit/kit](https://github.com/go-kit/kit) from 0.12.0 to 0.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-kit/kit/releases">github.com/go-kit/kit's releases</a>.</em></p> <blockquote> <h2>v0.13.0</h2> <p>Go kit v0.13.0 is released, containing mostly minor fixes and dependency updates.</p> <h2>What's Changed</h2> <ul> <li>Remove unused code by <a href="https://github.com/sashamelentyev"><code>@sashamelentyev</code></a> in <a href="https://github.com/go-kit/kit/pull/1188">go-kit/kit#1188</a></li> <li>Use errors.Is for error handling by <a href="https://github.com/sashamelentyev"><code>@sashamelentyev</code></a> in <a href="https://github.com/go-kit/kit/pull/1187">go-kit/kit#1187</a></li> <li>Fix docs by <a href="https://github.com/sashamelentyev"><code>@sashamelentyev</code></a> in <a href="https://github.com/go-kit/kit/pull/1198">go-kit/kit#1198</a></li> <li>Refactor metrics/cloudwatch by <a href="https://github.com/sina-devel"><code>@sina-devel</code></a> in <a href="https://github.com/go-kit/kit/pull/1202">go-kit/kit#1202</a></li> <li>README: add chaseSpace/kit, closes <a href="https://github.com/go-kit/kit/issues/1027">#1027</a> by <a href="https://github.com/peterbourgon"><code>@peterbourgon</code></a> in <a href="https://github.com/go-kit/kit/pull/1052">go-kit/kit#1052</a></li> <li>feat: move from <code>streadway/amqp</code> to <code>rabbitmq-amqp091-go</code> by <a href="https://github.com/Juneezee"><code>@Juneezee</code></a> in <a href="https://github.com/go-kit/kit/pull/1210">go-kit/kit#1210</a></li> <li>feat(http): make interceptingWriter reimplement common interfaces by <a href="https://github.com/Reasno"><code>@Reasno</code></a> in <a href="https://github.com/go-kit/kit/pull/1212">go-kit/kit#1212</a></li> <li>Fixes Framework Beego URL by <a href="https://github.com/vpereira01"><code>@vpereira01</code></a> in <a href="https://github.com/go-kit/kit/pull/1219">go-kit/kit#1219</a></li> <li>Fixed instancer loop logic that was causing Consul to get spammed by <a href="https://github.com/jkratz55"><code>@jkratz55</code></a> in <a href="https://github.com/go-kit/kit/pull/1215">go-kit/kit#1215</a></li> <li>go.mod | go.sum: update dependencies for prometheus client_golang by <a href="https://github.com/vcruzmj"><code>@vcruzmj</code></a> in <a href="https://github.com/go-kit/kit/pull/1225">go-kit/kit#1225</a></li> <li>ci: add go 1.18 by <a href="https://github.com/sashamelentyev"><code>@sashamelentyev</code></a> in <a href="https://github.com/go-kit/kit/pull/1233">go-kit/kit#1233</a></li> <li>Update README.md by <a href="https://github.com/cxtruong70"><code>@cxtruong70</code></a> in <a href="https://github.com/go-kit/kit/pull/1239">go-kit/kit#1239</a></li> <li>ci: add go 1.19 by <a href="https://github.com/sashamelentyev"><code>@sashamelentyev</code></a> in <a href="https://github.com/go-kit/kit/pull/1245">go-kit/kit#1245</a></li> <li>go.mod | go.sum: Update nats-io/jwt/v2 & nats-io/nats-server/v2 dependencies to fix CVE-2021-3127 & CVE-2022-24450 by <a href="https://github.com/denopink"><code>@denopink</code></a> in <a href="https://github.com/go-kit/kit/pull/1237">go-kit/kit#1237</a></li> <li>Update link pointing to protobuf generator by <a href="https://github.com/sagikazarmark"><code>@sagikazarmark</code></a> in <a href="https://github.com/go-kit/kit/pull/1248">go-kit/kit#1248</a></li> <li>Update github.com/hashicorp/serf and github.com/hashicorp/consul/api to fix CVE-2019-19794 by <a href="https://github.com/francogeller"><code>@francogeller</code></a> in <a href="https://github.com/go-kit/kit/pull/1250">go-kit/kit#1250</a></li> <li>Replace microgen with the maintained fork by <a href="https://github.com/ShayNehmad-RecoLabs"><code>@ShayNehmad-RecoLabs</code></a> in <a href="https://github.com/go-kit/kit/pull/1254">go-kit/kit#1254</a></li> <li>Remove dead link to code generator from README by <a href="https://github.com/heymatthew"><code>@heymatthew</code></a> in <a href="https://github.com/go-kit/kit/pull/1256">go-kit/kit#1256</a></li> <li>README: update codegen link to truss by <a href="https://github.com/matthewhartstonge"><code>@matthewhartstonge</code></a> in <a href="https://github.com/go-kit/kit/pull/1262">go-kit/kit#1262</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/sashamelentyev"><code>@sashamelentyev</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1188">go-kit/kit#1188</a></li> <li><a href="https://github.com/sina-devel"><code>@sina-devel</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1202">go-kit/kit#1202</a></li> <li><a href="https://github.com/Juneezee"><code>@Juneezee</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1210">go-kit/kit#1210</a></li> <li><a href="https://github.com/Reasno"><code>@Reasno</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1212">go-kit/kit#1212</a></li> <li><a href="https://github.com/vpereira01"><code>@vpereira01</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1219">go-kit/kit#1219</a></li> <li><a href="https://github.com/jkratz55"><code>@jkratz55</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1215">go-kit/kit#1215</a></li> <li><a href="https://github.com/vcruzmj"><code>@vcruzmj</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1225">go-kit/kit#1225</a></li> <li><a href="https://github.com/cxtruong70"><code>@cxtruong70</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1239">go-kit/kit#1239</a></li> <li><a href="https://github.com/denopink"><code>@denopink</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1237">go-kit/kit#1237</a></li> <li><a href="https://github.com/francogeller"><code>@francogeller</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1250">go-kit/kit#1250</a></li> <li><a href="https://github.com/ShayNehmad-RecoLabs"><code>@ShayNehmad-RecoLabs</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1254">go-kit/kit#1254</a></li> <li><a href="https://github.com/heymatthew"><code>@heymatthew</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1256">go-kit/kit#1256</a></li> <li><a href="https://github.com/matthewhartstonge"><code>@matthewhartstonge</code></a> made their first contribution in <a href="https://github.com/go-kit/kit/pull/1262">go-kit/kit#1262</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-kit/kit/compare/v0.12.0...v0.13.0">https://github.com/go-kit/kit/compare/v0.12.0...v0.13.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-kit/kit/commit/dfe43fa6a8d72c23e2205d0b80e762346e203f78"><code>dfe43fa</code></a> README: update codegen link to truss (<a href="https://github.com/go-kit/kit/issues/1262">#1262</a>)</li> <li><a href="https://github.com/go-kit/kit/commit/7f14cb4dc16cd4005dc7770c131ae685cc4943b7"><code>7f14cb4</code></a> Remove dead link to code generator from README (<a href="https://github.com/go-kit/kit/issues/1256">#1256</a>)</li> <li><a href="https://github.com/go-kit/kit/commit/e923d5df8514423885b3a6d25cd44ae1d1db6d9d"><code>e923d5d</code></a> Replace microgen with the maintained fork (<a href="https://github.com/go-kit/kit/issues/1254">#1254</a>)</li> <li><a href="https://github.com/go-kit/kit/commit/a7ba4fa4e2898501f7f0969fee1050ff7a55e9e9"><code>a7ba4fa</code></a> Update github.com/hashicorp/serf and github.com/hashicorp/consul/api (<a href="https://github.com/go-kit/kit/issues/1250">#1250</a>)</li> <li><a href="https://github.com/go-kit/kit/commit/04090c3c7422dd9e1f20908709b00c58e36c2dae"><code>04090c3</code></a> Update link pointing to protobuf generator (<a href="https://github.com/go-kit/kit/issues/1248">#1248</a>)</li> <li><a href="https://github.com/go-kit/kit/commit/62c81a0f3047b5d4a6e437c7c2d5eda799fe91c3"><code>62c81a0</code></a> Update nats-io/jwt/v2 & nats-io/nats-server/v2 dependencies to fix CVE-2021-3...</li> <li><a href="https://github.com/go-kit/kit/commit/0cd2b272b599cb0cda4b16c5de50370d29e0298c"><code>0cd2b27</code></a> Merge pull request <a href="https://github.com/go-kit/kit/issues/1245">#1245</a> from sashamelentyev/patch-1</li> <li><a href="https://github.com/go-kit/kit/commit/35bf40162e2583c662d5cb0487a5ca5e7e984de8"><code>35bf401</code></a> ci: add go 1.19</li> <li><a href="https://github.com/go-kit/kit/commit/50c38262a8c71be2532f45100e622025bc5ffedf"><code>50c3826</code></a> Update README.md (<a href="https://github.com/go-kit/kit/issues/1239">#1239</a>)</li> <li><a href="https://github.com/go-kit/kit/commit/44ed82941aa3943b669b41ba3736d05b0383a8e8"><code>44ed829</code></a> ci: add go 1.18 (<a href="https://github.com/go-kit/kit/issues/1233">#1233</a>)</li> <li>Additional commits viewable in <a href="https://github.com/go-kit/kit/compare/v0.12.0...v0.13.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…1.20.4 (cometbft#4203) Bumps [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) from 1.20.1 to 1.20.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/releases">github.com/prometheus/client_golang's releases</a>.</em></p> <blockquote> <h2>v1.20.4</h2> <ul> <li>[BUGFIX] histograms: Fix a possible data race when appending exemplars vs metrics gather. <a href="https://github.com/prometheus/client_golang/issues/1623">#1623</a></li> </ul> <h2>v1.20.3</h2> <ul> <li>[BUGFIX] histograms: Fix possible data race when appending exemplars. <a href="https://github.com/prometheus/client_golang/issues/1608">#1608</a></li> </ul> <h2>v1.20.2</h2> <ul> <li>[BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. <a href="https://github.com/prometheus/client_golang/issues/1596">#1596</a></li> </ul> </blockquote> </details> <details> <summary>Changelog</summary> <p><em>Sourced from <a href="https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md">github.com/prometheus/client_golang's changelog</a>.</em></p> <blockquote> <h2>Unreleased</h2> <ul> <li>[BUGFIX] histograms: Fix possible data race when appending exemplars vs metrics gather. <a href="https://github.com/prometheus/client_golang/issues/1623">#1623</a></li> </ul> <h2>1.20.3 / 2024-09-05</h2> <ul> <li>[BUGFIX] histograms: Fix possible data race when appending exemplars. <a href="https://github.com/prometheus/client_golang/issues/1608">#1608</a></li> </ul> <h2>1.20.2 / 2024-08-23</h2> <ul> <li>[BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. <a href="https://github.com/prometheus/client_golang/issues/1596">#1596</a></li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/client_golang/commit/05fcde9fe4eb93d3fb7b56ebe51acf80536f0583"><code>05fcde9</code></a> Merge pull request <a href="https://github.com/prometheus/client_golang/issues/1623">#1623</a> from krajorama/data-race-in-histogram-write</li> <li><a href="https://github.com/prometheus/client_golang/commit/209f4c041ed1764866f44dd053a8d94aa051c610"><code>209f4c0</code></a> Add changelog</li> <li><a href="https://github.com/prometheus/client_golang/commit/1e398ccb1259d20836e3003885bdd949cb21e635"><code>1e398cc</code></a> native histogram: Fix race between Write and addExemplar</li> <li><a href="https://github.com/prometheus/client_golang/commit/ef2f87ea986252194ea960187b20b409180044dd"><code>ef2f87e</code></a> Merge pull request <a href="https://github.com/prometheus/client_golang/issues/1620">#1620</a> from prometheus/arthursens/prepare-1.20.3</li> <li><a href="https://github.com/prometheus/client_golang/commit/937ac63d3d2dda83847f4ca842d62edabce4e743"><code>937ac63</code></a> Add changelog entry for 1.20.3</li> <li><a href="https://github.com/prometheus/client_golang/commit/6e9914db5af255f5def17d54a7ca9c531771f4ca"><code>6e9914d</code></a> Merge pull request <a href="https://github.com/prometheus/client_golang/issues/1608">#1608</a> from krajorama/index-out-of-range-native-histogram-e...</li> <li><a href="https://github.com/prometheus/client_golang/commit/d6b8c8925bd16626cf168e642eb70724b17a0d61"><code>d6b8c89</code></a> Update comments with more explanations</li> <li><a href="https://github.com/prometheus/client_golang/commit/504566f07c680f68743c3a5d239dede48538c7ec"><code>504566f</code></a> Use simplified solution from <a href="https://github.com/prometheus/client_golang/issues/1609">#1609</a> for the data race</li> <li><a href="https://github.com/prometheus/client_golang/commit/dc8e9a4d8a4c7c64d5ae2c9d29a91bb1407d549b"><code>dc8e9a4</code></a> fix: native histogram: Simplify and fix addExemplar</li> <li><a href="https://github.com/prometheus/client_golang/commit/dc819ceb1b0f906f1ab124f7492693970733a54d"><code>dc819ce</code></a> Use a trivial solution to <a href="https://github.com/prometheus/client_golang/issues/1605">#1605</a></li> <li>Additional commits viewable in <a href="https://github.com/prometheus/client_golang/compare/v1.20.1...v1.20.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…bft#4202) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.66.1 to 1.67.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.67.0</h2> <h1>Bug Fixes</h1> <ul> <li>ringhash: when used with multiple EDS priorities, fix bug that could prevent a higher priority from recovering from transient failure. (<a href="https://github.com/grpc/grpc-go/issues/7364">#7364</a>) <ul> <li>Special Thanks: <a href="https://github.com/atollena"><code>@atollena</code></a></li> </ul> </li> </ul> <h1>Behavior Changes</h1> <ul> <li>In accordance with <a href="https://tools.ietf.org/html/rfc7540#section-3.3">RFC 7540</a>, clients and servers will now reject TLS connections that don't support ALPN. This can be disabled by setting the environment variable <code>GRPC_ENFORCE_ALPN_ENABLED</code> to <code>false</code> (case insensitive). Please file a bug if you encounter any issues with this behavior. The environment variable to revert this behavior will be removed in an upcoming release. (<a href="https://github.com/grpc/grpc-go/issues/7535">#7535</a>)</li> </ul> <h2>Release 1.66.2</h2> <h1>Dependencies</h1> <ul> <li>Remove unintentional dependency on the <code>testing</code> package (<a href="https://github.com/grpc/grpc-go/issues/7579">#7579</a>)</li> <li>Remove unintentional dependency on the <code>flate</code> package (<a href="https://github.com/grpc/grpc-go/issues/7595">#7595</a>) <ul> <li>Special Thanks: <a href="https://github.com/ash2k"><code>@ash2k</code></a></li> </ul> </li> </ul> <h1>Bug Fixes</h1> <ul> <li>client: fix a bug that prevented memory reuse after handling unary RPCs (<a href="https://github.com/grpc/grpc-go/issues/7571">#7571</a>) <ul> <li>Special Thanks: <a href="https://github.com/coxley"><code>@coxley</code></a></li> </ul> </li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/6f50403edb0c2db1bb557168cf4e6f87ea2efdb5"><code>6f50403</code></a> Change version to 1.67.0 (<a href="https://github.com/grpc/grpc-go/issues/7604">#7604</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/3c3a0257a33b59b0d0a072696775b53392c7d8ae"><code>3c3a025</code></a> mem: replace flate.Reader reference (<a href="https://github.com/grpc/grpc-go/issues/7595">#7595</a>) (<a href="https://github.com/grpc/grpc-go/issues/7637">#7637</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/3ffb98b2c93a9a633f7415893c40946e2a6a6e89"><code>3ffb98b</code></a> .*: fix revive lints <code>redefines-builtin-id</code> (<a href="https://github.com/grpc/grpc-go/issues/7552">#7552</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/56660492e4a669c8c0f02bd7f31ad31a3ef59883"><code>5666049</code></a> vet: enforce revive linter (<a href="https://github.com/grpc/grpc-go/issues/7589">#7589</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/c6ad07fa041eea78cd6757a51f252dd407105452"><code>c6ad07f</code></a> protoc: regenerate protos (<a href="https://github.com/grpc/grpc-go/issues/7590">#7590</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/70f19eecd168b0ea1f15e991170576bf36f74b40"><code>70f19ee</code></a> credentials/tls: default GRPC_ENFORCE_ALPN_ENABLED to true (<a href="https://github.com/grpc/grpc-go/issues/7535">#7535</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/92111dc36694c570dc873b9a5a461ef953ea2b54"><code>92111dc</code></a> xds: keep ads flow control local to xdsclient/transport package (<a href="https://github.com/grpc/grpc-go/issues/7578">#7578</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/535bdce10d2c1127e526e986b04b38995fe84712"><code>535bdce</code></a> estats: remove dependency on testing package (<a href="https://github.com/grpc/grpc-go/issues/7579">#7579</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/0f03c747b13b41c3601ee835f1f8bf0f457b3fd2"><code>0f03c74</code></a> .*: fix revive lint issues <code>unused-parameter</code> (<a href="https://github.com/grpc/grpc-go/issues/7580">#7580</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/6147c81cd047f0237c9bfa553fb61ce74bfa37aa"><code>6147c81</code></a> stats/opentelemetry: Optimize slice allocations (<a href="https://github.com/grpc/grpc-go/issues/7525">#7525</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.66.1...v1.67.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…metbft#4265) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.42.0 to 1.44.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.44.0</h2> <p>Release v1.44.0</p> <h2>v1.43.0</h2> <p>Release v1.43.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/e7628ee2d941d14dc87d468ed93bdb35c2f7bfea"><code>e7628ee</code></a> Release v1.44.0 (<a href="https://github.com/bufbuild/buf-setup-action/issues/227">#227</a>)</li> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/62ee92603c244ad0da98bab36a834a999a5329e6"><code>62ee926</code></a> Release v1.43.0 (<a href="https://github.com/bufbuild/buf-setup-action/issues/226">#226</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.42.0...v1.44.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…bft#4266) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.8.0 to 6.9.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.9.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.38.0 to 0.39.0 in <a href="https://github.com/docker/build-push-action/pull/1234">docker/build-push-action#1234</a></li> <li>Bump path-to-regexp from 6.2.2 to 6.3.0 in <a href="https://github.com/docker/build-push-action/pull/1232">docker/build-push-action#1232</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v6.8.0...v6.9.0">https://github.com/docker/build-push-action/compare/v6.8.0...v6.9.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/4f58ea79222b3b9dc2c8bbdd6debcef730109a75"><code>4f58ea7</code></a> Merge pull request <a href="https://github.com/docker/build-push-action/issues/1234">#1234</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/49b5ea61c60477d214908bb6e23ce05c074ef04e"><code>49b5ea6</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/13c9fddd72db0ce3cd9d87eb53e0480d2a32a77b"><code>13c9fdd</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.38.0 to 0.39.0</li> <li><a href="https://github.com/docker/build-push-action/commit/e44afff3590e1d4f93b6adc72376512edb012a7c"><code>e44afff</code></a> Merge pull request <a href="https://github.com/docker/build-push-action/issues/1232">#1232</a> from docker/dependabot/npm_and_yarn/path-to-regexp-6...</li> <li><a href="https://github.com/docker/build-push-action/commit/67ebad331f4ca45e39184b280dbacb11eb3beae0"><code>67ebad3</code></a> chore(deps): Bump path-to-regexp from 6.2.2 to 6.3.0</li> <li>See full diff in <a href="https://github.com/docker/build-push-action/compare/v6.8.0...v6.9.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Hernán Vanzetto <[email protected]>
…etbft#4264) Bumps [docker/setup-buildx-action](https://github.com/docker/setup-buildx-action) from 3.6.1 to 3.7.1. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/setup-buildx-action/releases">docker/setup-buildx-action's releases</a>.</em></p> <blockquote> <h2>v3.7.1</h2> <ul> <li>Switch back to <code>uuid</code> package by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://github.com/docker/setup-buildx-action/pull/369">docker/setup-buildx-action#369</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.7.0...v3.7.1">https://github.com/docker/setup-buildx-action/compare/v3.7.0...v3.7.1</a></p> <h2>v3.7.0</h2> <ul> <li>Always set <code>buildkitd-flags</code> if opt-in by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://github.com/docker/setup-buildx-action/pull/363">docker/setup-buildx-action#363</a></li> <li>Remove <code>uuid</code> package and switch to <code>crypto</code> by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://github.com/docker/setup-buildx-action/pull/366">docker/setup-buildx-action#366</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.35.0 to 0.39.0 in <a href="https://github.com/docker/setup-buildx-action/pull/362">docker/setup-buildx-action#362</a></li> <li>Bump path-to-regexp from 6.2.2 to 6.3.0 in <a href="https://github.com/docker/setup-buildx-action/pull/354">docker/setup-buildx-action#354</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/setup-buildx-action/compare/v3.6.1...v3.7.0">https://github.com/docker/setup-buildx-action/compare/v3.6.1...v3.7.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/setup-buildx-action/commit/c47758b77c9736f4b2ef4073d4d51994fabfe349"><code>c47758b</code></a> Merge pull request <a href="https://github.com/docker/setup-buildx-action/issues/369">#369</a> from crazy-max/revert-crypto</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/8fea3825134d99989287350b6429e3e86fa5d320"><code>8fea382</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/2874e980e877332a8fe575054d8c083109b8fede"><code>2874e98</code></a> switch back to uuid package</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/8026d2bc3645ea78b0d2544766a1225eb5691f89"><code>8026d2b</code></a> Merge pull request <a href="https://github.com/docker/setup-buildx-action/issues/362">#362</a> from docker/dependabot/npm_and_yarn/docker/actions-to...</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/e51aab53e9e6264bc11f62da6fbc352686b2147f"><code>e51aab5</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/fd7390e14dc77aa9df3fbc8a021cf91ac9fe7aa5"><code>fd7390e</code></a> build(deps): bump <code>@docker/actions-toolkit</code> from 0.35.0 to 0.39.0</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/910a3040053b5bd9636a487f0054cfe150829ae7"><code>910a304</code></a> Merge pull request <a href="https://github.com/docker/setup-buildx-action/issues/366">#366</a> from crazy-max/remove-uuid</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/3623ee443e01d4daf9e9107d28e162a058c52ca8"><code>3623ee4</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/e0e5ecf670bf33d756abc55962778de1286f70e1"><code>e0e5ecf</code></a> remove uuid package and switch to crypto</li> <li><a href="https://github.com/docker/setup-buildx-action/commit/5334dd0cdd27e0ac92d6c98d35f3398fcc13195f"><code>5334dd0</code></a> Merge pull request <a href="https://github.com/docker/setup-buildx-action/issues/363">#363</a> from crazy-max/set-buildkitd-flags-optin</li> <li>Additional commits viewable in <a href="https://github.com/docker/setup-buildx-action/compare/v3.6.1...v3.7.1">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…metbft#4288) Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Because, in cometbft-db v0.13+, the iterator is being reused so we need to always copy key and value if we're storing them in a map or other in-memory structure. Closes cometbft#4295
…ft#4328) Use `github.com/decred/dcrd/dcrec/secp256k1/v4` directly rather than `github.com/btcsuite/btcd/btcec/v2` which is just a wrapper around the underlying decred library. Inspired by cosmos/cosmos-sdk#15018 `github.com/btcsuite/btcd/btcec/v2` has a very annoying breaking change when upgrading from `v2.3.3` to `v2.3.4`. The easiest way to workaround this is to just remove the wrapper. Would be very nice if you could backport this to v0.37.x and v0.38.x. References: - btcsuite/btcd#2221 - cometbft#3728 - zeta-chain/node#2934 --- #### PR checklist - [ ] Tests written/updated - [x] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments <hr>This is an automatic backport of pull request cometbft#4294 done by [Mergify](https://mergify.com). --------- Co-authored-by: Alex Gartner <[email protected]> Co-authored-by: Anton Kaliaev <[email protected]>
[CHANGELOG](https://github.com/cometbft/cometbft/blob/release/v0.38.13/CHANGELOG.md) #### PR checklist - [ ] Tests written/updated - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments
[CHANGELOG](https://github.com/cometbft/cometbft/blob/release/v0.38.13/CHANGELOG.md) #### PR checklist - [ ] Tests written/updated - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments
…metbft#4711) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.47.2 to 1.48.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.48.0</h2> <p>Release v1.48.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/1115d0acd3d2a120b30023fac52abc46807c8fd6"><code>1115d0a</code></a> Release v1.48.0 (<a href="https://github.com/bufbuild/buf-setup-action/issues/233">#233</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.47.2...v1.48.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…metbft#4802) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.48.0 to 1.49.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.49.0</h2> <p>Release v1.49.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/480b44ac64eb7784931d42dcddaf762c626186a6"><code>480b44a</code></a> Release v1.49.0 (<a href="https://github.com/bufbuild/buf-setup-action/issues/236">#236</a>)</li> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/2ff90c60795eee77ba6134f1fb1aa7ceba7845ff"><code>2ff90c6</code></a> Update license year range (<a href="https://github.com/bufbuild/buf-setup-action/issues/235">#235</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.48.0...v1.49.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…etbft#4801) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.10.0 to 6.11.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.11.0</h2> <ul> <li>Handlebar <code>defaultContext</code> support for <code>build-contexts</code> input by <a href="https://github.com/crazy-max"><code>@crazy-max</code></a> in <a href="https://github.com/docker/build-push-action/pull/1283">docker/build-push-action#1283</a></li> <li>Bump <code>@docker/actions-toolkit</code> from 0.46.0 to 0.49.0 in <a href="https://github.com/docker/build-push-action/pull/1281">docker/build-push-action#1281</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v6.10.0...v6.11.0">https://github.com/docker/build-push-action/compare/v6.10.0...v6.11.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/b32b51a8eda65d6793cd0494a773d4f6bcef32dc"><code>b32b51a</code></a> Merge pull request <a href="https://github.com/docker/build-push-action/issues/1281">#1281</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/594bf46f0f6d32fd8bd98a553127950004165c96"><code>594bf46</code></a> Merge pull request <a href="https://github.com/docker/build-push-action/issues/1294">#1294</a> from crazy-max/fix-e2e</li> <li><a href="https://github.com/docker/build-push-action/commit/fd37bd55af0b8c458ea0ff376ce151a332fa7aed"><code>fd37bd5</code></a> ci(e2e): fix setup docker config</li> <li><a href="https://github.com/docker/build-push-action/commit/e6478a2405f3527f33b93efb6857519c3ffd91f2"><code>e6478a2</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/78785bddff35ca36f384e0c6a8a367584317df9f"><code>78785bd</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.46.0 to 0.49.0</li> <li><a href="https://github.com/docker/build-push-action/commit/128779fed7edb034b3f8006e9dac81a8593c040e"><code>128779f</code></a> Merge pull request <a href="https://github.com/docker/build-push-action/issues/1283">#1283</a> from crazy-max/named-context-handlebars</li> <li><a href="https://github.com/docker/build-push-action/commit/7e094594beda23fc8f21fa31049f4b203e51096b"><code>7e09459</code></a> Merge pull request <a href="https://github.com/docker/build-push-action/issues/1282">#1282</a> from crazy-max/remove-buildkit-5561</li> <li><a href="https://github.com/docker/build-push-action/commit/32ee877a58507615d974839965ef8e530d66362e"><code>32ee877</code></a> Revert "init buildkit-5561 workflow"</li> <li><a href="https://github.com/docker/build-push-action/commit/d1a4129c41bb3f92b731b33dc29cfe5f6cd9298f"><code>d1a4129</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/49c623eaf82513814393adabc13bf2535384d735"><code>49c623e</code></a> handlebar defaultContext support for build-contexts input</li> <li>Additional commits viewable in <a href="https://github.com/docker/build-push-action/compare/v6.10.0...v6.11.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…metbft#4836) Bumps [bufbuild/buf-setup-action](https://github.com/bufbuild/buf-setup-action) from 1.49.0 to 1.50.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/bufbuild/buf-setup-action/releases">bufbuild/buf-setup-action's releases</a>.</em></p> <blockquote> <h2>v1.50.0</h2> <p>Release v1.50.0</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/bufbuild/buf-setup-action/commit/a47c93e0b1648d5651a065437926377d060baa99"><code>a47c93e</code></a> Release v1.50.0 (<a href="https://github.com/bufbuild/buf-setup-action/issues/238">#238</a>)</li> <li>See full diff in <a href="https://github.com/bufbuild/buf-setup-action/compare/v1.49.0...v1.50.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…etbft#4835) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.11.0 to 6.12.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.12.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.49.0 to 0.51.0 in <a href="https://github.com/docker/build-push-action/pull/1300">docker/build-push-action#1300</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v6.11.0...v6.12.0">https://github.com/docker/build-push-action/compare/v6.11.0...v6.12.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/67a2d409c0a876cbe6b11854e3e25193efe4e62d"><code>67a2d40</code></a> Merge pull request <a href="https://github.com/docker/build-push-action/issues/1300">#1300</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/0b1b1c9c43ec788c199860037a0545356ea03d26"><code>0b1b1c9</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/b6a7c2c4eec8151a4dbcd3823747fe1b77d5b280"><code>b6a7c2c</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.49.0 to 0.51.0</li> <li><a href="https://github.com/docker/build-push-action/commit/31ca4e5d51253d7e4a2317bfe74699cbe3a398a9"><code>31ca4e5</code></a> Merge pull request <a href="https://github.com/docker/build-push-action/issues/1296">#1296</a> from crazy-max/bake-v6</li> <li><a href="https://github.com/docker/build-push-action/commit/e613db9d5a93dda4d07aeb81991e80164577ae4a"><code>e613db9</code></a> update bake-action to v6</li> <li>See full diff in <a href="https://github.com/docker/build-push-action/compare/v6.11.0...v6.12.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Adding @cometbft/interchain-inc to CODEOWNERS --- #### PR checklist - [ ] Tests written/updated - [ ] Changelog entry added in `.changelog` (we use [unclog](https://github.com/informalsystems/unclog) to manage our changelog) - [ ] Updated relevant documentation (`docs/` or `spec/`) and code comments <hr>This is an automatic backport of pull request cometbft#4848 done by [Mergify](https://mergify.com). --------- Co-authored-by: Zachary Becker <[email protected]>
…ometbft#4753) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.12.0 to 5.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.13.0</h2> <h2>What's Changed</h2> <ul> <li>build: bump github.com/go-git/go-git/v5 from 5.11.0 to 5.12.0 in /cli/go-git by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1065">go-git/go-git#1065</a></li> <li>build: bump golang.org/x/net from 0.22.0 to 0.23.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1068">go-git/go-git#1068</a></li> <li>build: bump golang.org/x/net from 0.23.0 to 0.24.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1071">go-git/go-git#1071</a></li> <li>Properly support skipping of non-mandatory extensions by <a href="https://github.com/codablock"><code>@codablock</code></a> in <a href="https://github.com/go-git/go-git/pull/1066">go-git/go-git#1066</a></li> <li>git: Refine some codes in test and non-test. by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://github.com/go-git/go-git/pull/1077">go-git/go-git#1077</a></li> <li>plumbing: protocol/packp, client-side filter capability support by <a href="https://github.com/edigaryev"><code>@edigaryev</code></a> in <a href="https://github.com/go-git/go-git/pull/1000">go-git/go-git#1000</a></li> <li>build: bump golang.org/x/net from 0.22.0 to 0.23.0 in /cli/go-git by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1078">go-git/go-git#1078</a></li> <li>plumbing: fix sideband demux on flush by <a href="https://github.com/aymanbagabas"><code>@aymanbagabas</code></a> in <a href="https://github.com/go-git/go-git/pull/1084">go-git/go-git#1084</a></li> <li>storage: dotgit, head reference usually comes first by <a href="https://github.com/aymanbagabas"><code>@aymanbagabas</code></a> in <a href="https://github.com/go-git/go-git/pull/1085">go-git/go-git#1085</a></li> <li>build: bump golang.org/x/text from 0.14.0 to 0.15.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1091">go-git/go-git#1091</a></li> <li>build: bump golang.org/x/crypto from 0.22.0 to 0.23.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1094">go-git/go-git#1094</a></li> <li>build: bump golang.org/x/net from 0.24.0 to 0.25.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1093">go-git/go-git#1093</a></li> <li>git: Added an example for Repository.Branches by <a href="https://github.com/johnmatthiggins"><code>@johnmatthiggins</code></a> in <a href="https://github.com/go-git/go-git/pull/1088">go-git/go-git#1088</a></li> <li>git: worktree_commit, Modify checking empty commit. Fixes <a href="https://github.com/go-git/go-git/issues/723">#723</a> by <a href="https://github.com/onee-only"><code>@onee-only</code></a> in <a href="https://github.com/go-git/go-git/pull/1050">go-git/go-git#1050</a></li> <li>plumbing: transport/http, Wrap http errors to return reason. Fixes <a href="https://github.com/go-git/go-git/issues/1097">#1097</a> by <a href="https://github.com/ggambetti"><code>@ggambetti</code></a> in <a href="https://github.com/go-git/go-git/pull/1100">go-git/go-git#1100</a></li> <li>build: bump golang.org/x/sys from 0.20.0 to 0.21.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1106">go-git/go-git#1106</a></li> <li>build: bump golang.org/x/text from 0.15.0 to 0.16.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1107">go-git/go-git#1107</a></li> <li>Bumps Go versions and go-billy by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://github.com/go-git/go-git/pull/1056">go-git/go-git#1056</a></li> <li>_examples: Fixed a dead link COMPATIBILITY.md by <a href="https://github.com/gecko655"><code>@gecko655</code></a> in <a href="https://github.com/go-git/go-git/pull/1109">go-git/go-git#1109</a></li> <li>build: bump github.com/jessevdk/go-flags from 1.5.0 to 1.6.1 in /cli/go-git by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1115">go-git/go-git#1115</a></li> <li>build: bump github.com/elazarl/goproxy from v0.0.0-20230808193330-2592e75ae04a to v0.0.0-20240618083138-03be62527ccb by <a href="https://github.com/hbelmiro"><code>@hbelmiro</code></a> in <a href="https://github.com/go-git/go-git/pull/1124">go-git/go-git#1124</a></li> <li>build: bump golang.org/x/net from 0.25.0 to 0.26.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1104">go-git/go-git#1104</a></li> <li>Add option approximating <code>git clean -x</code> flag. by <a href="https://github.com/msuozzo"><code>@msuozzo</code></a> in <a href="https://github.com/go-git/go-git/pull/995">go-git/go-git#995</a></li> <li>Revert "Add option approximating <code>git clean -x</code> flag." by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://github.com/go-git/go-git/pull/1129">go-git/go-git#1129</a></li> <li>Fix reference updated concurrently error for the filesystem storer by <a href="https://github.com/Javier-varez"><code>@Javier-varez</code></a> in <a href="https://github.com/go-git/go-git/pull/1116">go-git/go-git#1116</a></li> <li>build: bump golang.org/x/net from 0.26.0 to 0.27.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1134">go-git/go-git#1134</a></li> <li>utils: merkletrie, Align error message with upstream by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://github.com/go-git/go-git/pull/1142">go-git/go-git#1142</a></li> <li>plumbing: transport/file, Change paths to absolute by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://github.com/go-git/go-git/pull/1141">go-git/go-git#1141</a></li> <li>plumbing: gitignore, Fix loading of ignored .gitignore files. by <a href="https://github.com/Achilleshiel"><code>@Achilleshiel</code></a> in <a href="https://github.com/go-git/go-git/pull/1114">go-git/go-git#1114</a></li> <li>build: bump github.com/skeema/knownhosts from 1.2.2 to 1.3.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1147">go-git/go-git#1147</a></li> <li>plumbing: transport/ssh, Add support for SSH <a href="https://github.com/cert-authority"><code>@cert-authority</code></a>. by <a href="https://github.com/Javier-varez"><code>@Javier-varez</code></a> in <a href="https://github.com/go-git/go-git/pull/1157">go-git/go-git#1157</a></li> <li>build: run example tests during CI workflow by <a href="https://github.com/crazybolillo"><code>@crazybolillo</code></a> in <a href="https://github.com/go-git/go-git/pull/1030">go-git/go-git#1030</a></li> <li>storage: filesystem, Fix object cache not working due to uninitialised objects being put into cache by <a href="https://github.com/SatelliteMind"><code>@SatelliteMind</code></a> in <a href="https://github.com/go-git/go-git/pull/1138">go-git/go-git#1138</a></li> <li>git: Fix fetching missing commits by <a href="https://github.com/AriehSchneier"><code>@AriehSchneier</code></a> in <a href="https://github.com/go-git/go-git/pull/1032">go-git/go-git#1032</a></li> <li>plumbing: format/packfile, remove duplicate checks in findMatch() by <a href="https://github.com/edigaryev"><code>@edigaryev</code></a> in <a href="https://github.com/go-git/go-git/pull/1152">go-git/go-git#1152</a></li> <li>git: worktree, Fix file reported as <code>Untracked</code> while it is committed by <a href="https://github.com/rodrigocam"><code>@rodrigocam</code></a> in <a href="https://github.com/go-git/go-git/pull/1023">go-git/go-git#1023</a></li> <li>build: bump golang.org/x/sys from 0.22.0 to 0.23.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1160">go-git/go-git#1160</a></li> <li>plumbing: filemode, Remove check for setting size of .git/index file by <a href="https://github.com/nicholasSUSE"><code>@nicholasSUSE</code></a> in <a href="https://github.com/go-git/go-git/pull/1159">go-git/go-git#1159</a></li> <li>build: bump golang.org/x/net from 0.27.0 to 0.28.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1163">go-git/go-git#1163</a></li> <li>Fix some lint warning and increase stalebot to 180 days by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://github.com/go-git/go-git/pull/1128">go-git/go-git#1128</a></li> <li>adjust path extracted from file: url on Windows by <a href="https://github.com/tomqwpl"><code>@tomqwpl</code></a> in <a href="https://github.com/go-git/go-git/pull/416">go-git/go-git#416</a></li> <li>build: bump golang.org/x/sys from 0.23.0 to 0.24.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1164">go-git/go-git#1164</a></li> <li>Add RestoreStaged to Worktree that mimics the behaviour of git restore --staged <!-- raw HTML omitted -->... by <a href="https://github.com/ben-tbotlabs"><code>@ben-tbotlabs</code></a> in <a href="https://github.com/go-git/go-git/pull/493">go-git/go-git#493</a></li> <li>plumbing: signature, support the same x509 signature formats as git by <a href="https://github.com/yoavamit"><code>@yoavamit</code></a> in <a href="https://github.com/go-git/go-git/pull/1169">go-git/go-git#1169</a></li> <li>fix: allow discovery of non bare repos in fsLoader by <a href="https://github.com/jakobmoellerdev"><code>@jakobmoellerdev</code></a> in <a href="https://github.com/go-git/go-git/pull/1170">go-git/go-git#1170</a></li> <li>build: bump golang.org/x/sys from 0.24.0 to 0.25.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1178">go-git/go-git#1178</a></li> <li>build: bump golang.org/x/text from 0.17.0 to 0.18.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1179">go-git/go-git#1179</a></li> <li>build: bump golang.org/x/net from 0.28.0 to 0.29.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1184">go-git/go-git#1184</a></li> </ul> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/94bd4af1deb15a64e90c6287eaf9e9f09b192a1f"><code>94bd4af</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1261">#1261</a> from BeChris/issue680</li> <li><a href="https://github.com/go-git/go-git/commit/8b7f5ba6f0cade1a25c5c4ca9e4d07a95c639945"><code>8b7f5ba</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1262">#1262</a> from go-git/dependabot/go_modules/github.com/elazarl...</li> <li><a href="https://github.com/go-git/go-git/commit/41d80a059a481d4c623bc8185c41ce82ed8ce985"><code>41d80a0</code></a> build: bump github.com/elazarl/goproxy</li> <li><a href="https://github.com/go-git/go-git/commit/499814044f111480b2a17a07c5a7a4c523ce5b87"><code>4998140</code></a> git: worktree_commit, sanitize author and commiter name and email before crea...</li> <li><a href="https://github.com/go-git/go-git/commit/9049625b98bd05edb9f1d00e7ff5da763afc0745"><code>9049625</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1260">#1260</a> from go-git/dependabot/github_actions/github/codeql-...</li> <li><a href="https://github.com/go-git/go-git/commit/dae48b4340d1cc6b562ade40b54049584075991f"><code>dae48b4</code></a> build: bump github/codeql-action from 3.27.9 to 3.28.0</li> <li><a href="https://github.com/go-git/go-git/commit/7d6fbc2c2a05eb6327b298b816bc0c4f854820a6"><code>7d6fbc2</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1220">#1220</a> from BeChris/accept_uppercase_hexa_in_pktline_length</li> <li><a href="https://github.com/go-git/go-git/commit/62a77b7d343dc1ed08d1d691efa13d81788cbc29"><code>62a77b7</code></a> plumbing: Fix invalid reference name error while cloning branches containing ...</li> <li><a href="https://github.com/go-git/go-git/commit/5e11196652708f339737b31bf9639373610dd7d1"><code>5e11196</code></a> plumbing: format/pktline, accept upercase hexadecimal value as pktline length...</li> <li><a href="https://github.com/go-git/go-git/commit/65f5e1ade083cfabacc2de4aaa68f7880e22b642"><code>65f5e1a</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1256">#1256</a> from go-git/dependabot/go_modules/golang-org-232a611e2d</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.12.0...v5.13.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Bumps [golang.org/x/sync](https://github.com/golang/sync) from 0.9.0 to 0.10.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/sync/commit/913fb63af28f446cd10c684ee847b5606cf328f7"><code>913fb63</code></a> singleflight: fix typo in singleflight_test.go</li> <li>See full diff in <a href="https://github.com/golang/sync/compare/v0.9.0...v0.10.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> Co-authored-by: Zachary Becker <[email protected]>
…bft#4754) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.68.0 to 1.69.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.69.2</h2> <h1>Bug Fixes</h1> <ul> <li>stats/experimental: add type aliases for symbols (<code>Metrics</code>/etc) that were moved to the stats package (<a href="https://github.com/grpc/grpc-go/issues/7929">#7929</a>).</li> <li>client: set user-agent string to the correct version.</li> </ul> <h2>Release 1.69.0</h2> <h1>Known Issues</h1> <ul> <li>The recently added <code>grpc.NewClient</code> function is incompatible with forward proxies, because it resolves the target hostname on the client instead of passing the hostname to the proxy. A fix is expected to be a part of grpc-go v1.70. (<a href="https://github.com/grpc/grpc-go/issues/7556">#7556</a>)</li> </ul> <h1>New Features</h1> <ul> <li>stats/opentelemetry: Introduce new APIs to enable OpenTelemetry instrumentation for metrics on servers and clients (<a href="https://github.com/grpc/grpc-go/issues/7874">#7874</a>)</li> <li>xdsclient: add support to fallback to lower priority servers when higher priority ones are down (<a href="https://github.com/grpc/grpc-go/issues/7701">#7701</a>)</li> <li>dns: Add support for link local IPv6 addresses (<a href="https://github.com/grpc/grpc-go/issues/7889">#7889</a>)</li> <li>The new experimental <code>pickfirst</code> LB policy (disabled by default) supports Happy Eyeballs, interleaving IPv4 and IPv6 address as described in <a href="https://www.rfc-editor.org/rfc/rfc8305#section-4">RFC-8305 section 4</a>, to attempt connections to multiple backends concurrently. The experimental <code>pickfirst</code> policy can be enabled by setting the environment variable <code>GRPC_EXPERIMENTAL_ENABLE_NEW_PICK_FIRST</code> to <code>true</code>. (<a href="https://github.com/grpc/grpc-go/issues/7725">#7725</a>, <a href="https://github.com/grpc/grpc-go/issues/7742">#7742</a>)</li> <li>balancer/pickfirst: Emit metrics from the <code>pick_first</code> load balancing policy (<a href="https://github.com/grpc/grpc-go/issues/7839">#7839</a>)</li> <li>grpc: export <code>MethodHandler</code>, which is the type of an already-exported field in <code>MethodDesc</code> (<a href="https://github.com/grpc/grpc-go/issues/7796">#7796</a>) <ul> <li>Special Thanks: <a href="https://github.com/mohdjishin"><code>@mohdjishin</code></a></li> </ul> </li> </ul> <h1>Bug Fixes</h1> <ul> <li>credentials/google: set scope for application default credentials (<a href="https://github.com/grpc/grpc-go/issues/7887">#7887</a>) <ul> <li>Special Thanks: <a href="https://github.com/halvards"><code>@halvards</code></a></li> </ul> </li> <li>xds: fix edge-case issues where some clients or servers would not initialize correctly or would not receive errors when resources are invalid or unavailable if another channel or server with the same target was already in use . (<a href="https://github.com/grpc/grpc-go/issues/7851">#7851</a>, <a href="https://github.com/grpc/grpc-go/issues/7853">#7853</a>)</li> <li>examples: fix the debugging example, which was broken by a recent change (<a href="https://github.com/grpc/grpc-go/issues/7833">#7833</a>)</li> </ul> <h1>Behavior Changes</h1> <ul> <li>client: update retry attempt backoff to apply jitter per updates to <a href="https://github.com/grpc/proposal/blob/master/A6-client-retries.md">gRFC A6</a>. (<a href="https://github.com/grpc/grpc-go/issues/7869">#7869</a>) <ul> <li>Special Thanks: <a href="https://github.com/isgj"><code>@isgj</code></a></li> </ul> </li> <li>balancer/weightedroundrobin: use the <code>pick_first</code> LB policy to manage connections (<a href="https://github.com/grpc/grpc-go/issues/7826">#7826</a>)</li> </ul> <h1>API Changes</h1> <ul> <li>balancer: An internal method is added to the <code>balancer.SubConn</code> interface to force implementors to embed a delegate implementation. This requirement is present in the interface documentation, but wasn't enforced earlier. (<a href="https://github.com/grpc/grpc-go/issues/7840">#7840</a>)</li> </ul> <h1>Performance Improvements</h1> <ul> <li>mem: implement a <code>ReadAll()</code> method for more efficient <code>io.Reader</code> consumption (<a href="https://github.com/grpc/grpc-go/issues/7653">#7653</a>) <ul> <li>Special Thanks: <a href="https://github.com/ash2k"><code>@ash2k</code></a></li> </ul> </li> <li>mem: use slice capacity instead of length to determine whether to pool buffers or directly allocate them (<a href="https://github.com/grpc/grpc-go/issues/7702">#7702</a>) <ul> <li>Special Thanks: <a href="https://github.com/PapaCharlie"><code>@PapaCharlie</code></a></li> </ul> </li> </ul> <h1>Documentation</h1> <ul> <li>examples/csm_observability: Add xDS Credentials and switch server to be xDS enabled (<a href="https://github.com/grpc/grpc-go/issues/7875">#7875</a>)</li> </ul> <h2>Release 1.68.2</h2> <h1>Dependencies</h1> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/b615b35c4feb932a0ac658fb86b7127f10ef664e"><code>b615b35</code></a> Change version to 1.69.2 (<a href="https://github.com/grpc/grpc-go/issues/7947">#7947</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/6b36a3e60ae03bc1aebf3f3e6bce58a2bc496ded"><code>6b36a3e</code></a> experimental/stats: re-add type aliases for migration (<a href="https://github.com/grpc/grpc-go/issues/7929">#7929</a>) (<a href="https://github.com/grpc/grpc-go/issues/7941">#7941</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/4535c6d2699749b5cd423e07caa7459fa42a76a7"><code>4535c6d</code></a> Change version to 1.69.2-dev (<a href="https://github.com/grpc/grpc-go/issues/7928">#7928</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/b6e7c72ece4bc35a2fd79952cee6305a7ce5aaef"><code>b6e7c72</code></a> examples/features/csm_observability: Make CSM Observability example server li...</li> <li><a href="https://github.com/grpc/grpc-go/commit/9355fbcc19aca55a3b6803626cb9f26f2ac7874e"><code>9355fbc</code></a> Change version to 1.69.1 (<a href="https://github.com/grpc/grpc-go/issues/7927">#7927</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/927a1e1d1ae83fd60664b2d9d7d07539dea38eaa"><code>927a1e1</code></a> Change version to 1.69.1-dev (<a href="https://github.com/grpc/grpc-go/issues/7902">#7902</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/97d633a62e60acb359d26b3a5fa390ac5e04b732"><code>97d633a</code></a> Change version to 1.69.0 (<a href="https://github.com/grpc/grpc-go/issues/7901">#7901</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/317271b232677b7869576a49855b01b9f4775d67"><code>317271b</code></a> pickfirst: Register a health listener when used as a leaf policy (<a href="https://github.com/grpc/grpc-go/issues/7832">#7832</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/5565631455d326987ad3f9dba6d45478cc426c9f"><code>5565631</code></a> balancer/pickfirst: replace grpc.Dial with grpc.NewClient in tests (<a href="https://github.com/grpc/grpc-go/issues/7879">#7879</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/634497b75899887567d48ff134059443069b8196"><code>634497b</code></a> test: Split import paths for generated message and service code (<a href="https://github.com/grpc/grpc-go/issues/7891">#7891</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.68.0...v1.69.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> Co-authored-by: Zachary Becker <[email protected]>
…ometbft#4755) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.60.1 to 0.61.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/common/releases">github.com/prometheus/common's releases</a>.</em></p> <blockquote> <h2>v0.61.0</h2> <h2>What's Changed</h2> <ul> <li>Mark sigv4 deprecated by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://github.com/prometheus/common/pull/715">prometheus/common#715</a></li> <li>Provide a way to get UserAgent by <a href="https://github.com/mmorel-35"><code>@mmorel-35</code></a> in <a href="https://github.com/prometheus/common/pull/716">prometheus/common#716</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://github.com/prometheus/common/pull/714">prometheus/common#714</a></li> <li>Bump golang.org/x/net from 0.29.0 to 0.30.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/712">prometheus/common#712</a></li> <li>chore: enable perfsprint linter by <a href="https://github.com/mmorel-35"><code>@mmorel-35</code></a> in <a href="https://github.com/prometheus/common/pull/717">prometheus/common#717</a></li> <li>chore: use testify instead of testing.Fatal by <a href="https://github.com/mmorel-35"><code>@mmorel-35</code></a> in <a href="https://github.com/prometheus/common/pull/718">prometheus/common#718</a></li> <li>Bump google.golang.org/protobuf from 1.34.2 to 1.35.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/711">prometheus/common#711</a></li> <li>setup dependabot for <code>github.com/prometheus/common/assets</code> by <a href="https://github.com/mmorel-35"><code>@mmorel-35</code></a> in <a href="https://github.com/prometheus/common/pull/719">prometheus/common#719</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://github.com/prometheus/common/pull/721">prometheus/common#721</a></li> <li>Mark promlog deprecated by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://github.com/prometheus/common/pull/720">prometheus/common#720</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://github.com/prometheus/common/pull/722">prometheus/common#722</a></li> <li>Allow custom user-agent definition by <a href="https://github.com/mmorel-35"><code>@mmorel-35</code></a> in <a href="https://github.com/prometheus/common/pull/725">prometheus/common#725</a></li> <li>fix: values escaping bugs by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://github.com/prometheus/common/pull/727">prometheus/common#727</a></li> <li>fix(promslog): always use UTC for time by <a href="https://github.com/tjhop"><code>@tjhop</code></a> in <a href="https://github.com/prometheus/common/pull/735">prometheus/common#735</a></li> <li>Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 in /assets by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/729">prometheus/common#729</a></li> <li>Bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/730">prometheus/common#730</a></li> <li>promslog: always lowercase log level from CLI by <a href="https://github.com/jkroepke"><code>@jkroepke</code></a> in <a href="https://github.com/prometheus/common/pull/728">prometheus/common#728</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://github.com/prometheus/common/pull/726">prometheus/common#726</a></li> <li>Bump golang.org/x/net from 0.30.0 to 0.32.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/736">prometheus/common#736</a></li> <li>Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/731">prometheus/common#731</a></li> <li>Bump google.golang.org/protobuf from 1.35.1 to 1.35.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/732">prometheus/common#732</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.60.1...v0.61.0">https://github.com/prometheus/common/compare/v0.60.1...v0.61.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/common/commit/7b484e97ca04d69d5db9a46326f399f230e1e4e0"><code>7b484e9</code></a> Bump google.golang.org/protobuf from 1.35.1 to 1.35.2 (<a href="https://github.com/prometheus/common/issues/732">#732</a>)</li> <li><a href="https://github.com/prometheus/common/commit/05e3c4037f304834166c34a305a0658ef5b8db4c"><code>05e3c40</code></a> Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 (<a href="https://github.com/prometheus/common/issues/731">#731</a>)</li> <li><a href="https://github.com/prometheus/common/commit/a0ef7371c3226c0353f663af2779e573dce2bd89"><code>a0ef737</code></a> Bump golang.org/x/net from 0.30.0 to 0.32.0 (<a href="https://github.com/prometheus/common/issues/736">#736</a>)</li> <li><a href="https://github.com/prometheus/common/commit/f99f029bc33e969a04aa799cb0e3fb96ab55ac7c"><code>f99f029</code></a> Update common Prometheus files (<a href="https://github.com/prometheus/common/issues/726">#726</a>)</li> <li><a href="https://github.com/prometheus/common/commit/b88f24cd1d8e9dc895a67e5de83aa15b75cb1243"><code>b88f24c</code></a> promslog: always lowercase log level from CLI (<a href="https://github.com/prometheus/common/issues/728">#728</a>)</li> <li><a href="https://github.com/prometheus/common/commit/2c3c048674edaf6067181aaeae0496d8234d9b02"><code>2c3c048</code></a> Bump golang.org/x/oauth2 from 0.23.0 to 0.24.0 (<a href="https://github.com/prometheus/common/issues/730">#730</a>)</li> <li><a href="https://github.com/prometheus/common/commit/ec7291f51d0897a24d460e5b9d3640f78b37bdeb"><code>ec7291f</code></a> Bump github.com/stretchr/testify from 1.9.0 to 1.10.0 in /assets (<a href="https://github.com/prometheus/common/issues/729">#729</a>)</li> <li><a href="https://github.com/prometheus/common/commit/145b50adb4ece06ea09a5b0abcbedb76bd1b123a"><code>145b50a</code></a> fix(promslog): always use UTC for time (<a href="https://github.com/prometheus/common/issues/735">#735</a>)</li> <li><a href="https://github.com/prometheus/common/commit/39a62f7ded818701bb7c79d88119d6a1c9e72154"><code>39a62f7</code></a> fix: values escaping bugs (<a href="https://github.com/prometheus/common/issues/727">#727</a>)</li> <li><a href="https://github.com/prometheus/common/commit/7ed45232224c2722ad677589452579095a42e4fe"><code>7ed4523</code></a> Allow custom user-agent definition (<a href="https://github.com/prometheus/common/issues/725">#725</a>)</li> <li>Additional commits viewable in <a href="https://github.com/prometheus/common/compare/v0.60.1...v0.61.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com> Co-authored-by: Zachary Becker <[email protected]>
…ometbft#4757) Bumps google.golang.org/protobuf from 1.35.2 to 1.36.1. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…bft#4856) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.69.2 to 1.69.4. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.69.4</h2> <h1>Bug Fixes</h1> <ul> <li>rbac: fix support for :path header matchers, which would previously never successfully match (<a href="https://github.com/grpc/grpc-go/issues/7965">#7965</a>).</li> </ul> <h1>Documentation</h1> <ul> <li>examples/features/csm_observability: update example client and server to use the helloworld service instead of echo service (<a href="https://github.com/grpc/grpc-go/issues/7945">#7945</a>).</li> </ul> <p>Release 1.69.3 was accidentally tagged on the master branch and will be deleted. Please update to 1.69.4 instead.</p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/4103cfc52a951673d441f8b2c02eee96e31f1897"><code>4103cfc</code></a> Change version to 1.69.4 (<a href="https://github.com/grpc/grpc-go/issues/8005">#8005</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/cf6ddaa06db9da8bcdc23e682b72dcf831abfda8"><code>cf6ddaa</code></a> Change version to 1.69.4-dev (<a href="https://github.com/grpc/grpc-go/issues/8001">#8001</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/94a0c2cbfc5fa21cdc3f2a3eecad7f5ae5e23e99"><code>94a0c2c</code></a> Change version to 1.69.3 (<a href="https://github.com/grpc/grpc-go/issues/8000">#8000</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/ec415604a2f817c7c44fbadfa3f7983c9f6ab8d5"><code>ec41560</code></a> Cherry pick <a href="https://github.com/grpc/grpc-go/issues/7965">#7965</a> <a href="https://github.com/grpc/grpc-go/issues/7945">#7945</a> to v1.69.x (<a href="https://github.com/grpc/grpc-go/issues/7996">#7996</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/3b328ba4d21148e7d4526e938b0b2cde611b388f"><code>3b328ba</code></a> Change version to 1.69.3-dev (<a href="https://github.com/grpc/grpc-go/issues/7948">#7948</a>)</li> <li>See full diff in <a href="https://github.com/grpc/grpc-go/compare/v1.69.2...v1.69.4">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ometbft#4858) Bumps google.golang.org/protobuf from 1.36.1 to 1.36.3. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Bumps [golang.org/x/net](https://github.com/golang/net) from 0.33.0 to 0.34.0. <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/golang/net/commit/8da7ed17cdaf5e1d42aa868f0b0322a207a17dcd"><code>8da7ed1</code></a> go.mod: update golang.org/x dependencies</li> <li><a href="https://github.com/golang/net/commit/2124140b044c3cbbd6a3ed7c45e2d4420be7039d"><code>2124140</code></a> all: make function and struct comments match the names</li> <li><a href="https://github.com/golang/net/commit/e9d95ba163f72442cc09dca1865147a62351ac72"><code>e9d95ba</code></a> http2: do not surface errors from a conn's idle timer expiring</li> <li><a href="https://github.com/golang/net/commit/c2be9921fe46b336b1991c4e5984666bd75b941f"><code>c2be992</code></a> quic: remember which remote connection IDs have been retired</li> <li>See full diff in <a href="https://github.com/golang/net/compare/v0.33.0...v0.34.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…ometbft#4861) Bumps [github.com/go-git/go-git/v5](https://github.com/go-git/go-git) from 5.13.0 to 5.13.2. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/go-git/go-git/releases">github.com/go-git/go-git/v5's releases</a>.</em></p> <blockquote> <h2>v5.13.2</h2> <h2>What's Changed</h2> <ul> <li>plumbing: use the correct user agent string. Fixes <a href="https://github.com/go-git/go-git/issues/883">#883</a> by <a href="https://github.com/uragirii"><code>@uragirii</code></a> in <a href="https://github.com/go-git/go-git/pull/1364">go-git/go-git#1364</a></li> <li>build: bump golang.org/x/sys from 0.28.0 to 0.29.0 in the golang-org group by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1365">go-git/go-git#1365</a></li> <li>build: bump the golang-org group with 2 updates by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1367">go-git/go-git#1367</a></li> <li>build: bump github.com/ProtonMail/go-crypto from 1.1.3 to 1.1.4 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1368">go-git/go-git#1368</a></li> <li>build: bump github.com/go-git/go-billy/v5 from 5.6.1 to 5.6.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1378">go-git/go-git#1378</a></li> <li>build: bump github/codeql-action from 3.28.0 to 3.28.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1376">go-git/go-git#1376</a></li> <li>build: bump github.com/elazarl/goproxy from 1.2.3 to 1.4.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1377">go-git/go-git#1377</a></li> <li>git: worktree, fix restoring dot slash files (backported to v5). Fixes <a href="https://github.com/go-git/go-git/issues/1176">#1176</a> by <a href="https://github.com/BeChris"><code>@BeChris</code></a> in <a href="https://github.com/go-git/go-git/pull/1361">go-git/go-git#1361</a></li> <li>build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1392">go-git/go-git#1392</a></li> <li>git: worktree_status, fix adding dot slash files to working tree (backported to v5). Fixes <a href="https://github.com/go-git/go-git/issues/1150">#1150</a> by <a href="https://github.com/BeChris"><code>@BeChris</code></a> in <a href="https://github.com/go-git/go-git/pull/1359">go-git/go-git#1359</a></li> <li>build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1383">go-git/go-git#1383</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.13.1...v5.13.2">https://github.com/go-git/go-git/compare/v5.13.1...v5.13.2</a></p> <h2>v5.13.1</h2> <h2>What's Changed</h2> <ul> <li>build: bump github.com/go-git/go-billy/v5 from 5.6.0 to 5.6.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1327">go-git/go-git#1327</a></li> <li>build: bump github.com/elazarl/goproxy from 1.2.1 to 1.2.2 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1329">go-git/go-git#1329</a></li> <li>build: bump github.com/elazarl/goproxy from 1.2.2 to 1.2.3 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/go-git/go-git/pull/1340">go-git/go-git#1340</a></li> <li>Revert "plumbing: transport/ssh, Add support for SSH <a href="https://github.com/cert-authority"><code>@cert-authority</code></a>." by <a href="https://github.com/pjbgf"><code>@pjbgf</code></a> in <a href="https://github.com/go-git/go-git/issues/1346">#1346</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/go-git/go-git/compare/v5.13.0...v5.13.1">https://github.com/go-git/go-git/compare/v5.13.0...v5.13.1</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/go-git/go-git/commit/2c6824768b483ea030ba312972e508c23e62d75c"><code>2c68247</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1383">#1383</a> from go-git/dependabot/go_modules/github.com/ProtonM...</li> <li><a href="https://github.com/go-git/go-git/commit/d462c2e805717c5f084657eede3b8804b7d0566b"><code>d462c2e</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1359">#1359</a> from BeChris/issue1150-v5</li> <li><a href="https://github.com/go-git/go-git/commit/32ac23a70733b230478a7431f0210d5615e1c5b5"><code>32ac23a</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1392">#1392</a> from go-git/dependabot/go_modules/github.com/pjbgf/s...</li> <li><a href="https://github.com/go-git/go-git/commit/93e635a0f5255658775091b975512c7774b60767"><code>93e635a</code></a> build: bump github.com/pjbgf/sha1cd from 0.3.0 to 0.3.2</li> <li><a href="https://github.com/go-git/go-git/commit/b2bb975dca41917cc2efe5c40f7be0cdf9eeb0e9"><code>b2bb975</code></a> git: worktree_status, took into account code review remarks</li> <li><a href="https://github.com/go-git/go-git/commit/518ac8860920e2b52c039828f821321b53cb7f64"><code>518ac88</code></a> git: worktree_status, fix adding dot slash files to working tree (backported ...</li> <li><a href="https://github.com/go-git/go-git/commit/21b3150921b0ce9786fb38a81cd9a8dbad0207b2"><code>21b3150</code></a> build: bump github.com/ProtonMail/go-crypto from 1.1.4 to 1.1.5</li> <li><a href="https://github.com/go-git/go-git/commit/189e7e463f747abdd8e31ef2abcbd72ad1b90621"><code>189e7e4</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1361">#1361</a> from BeChris/issue1176-v5</li> <li><a href="https://github.com/go-git/go-git/commit/654815aad1bd5bc35d9f5eb3d7a201af0c4457f5"><code>654815a</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1377">#1377</a> from go-git/dependabot/go_modules/github.com/elazarl...</li> <li><a href="https://github.com/go-git/go-git/commit/91dbdb92df7594bc8e42e355e82bf2c63be31a22"><code>91dbdb9</code></a> Merge pull request <a href="https://github.com/go-git/go-git/issues/1376">#1376</a> from go-git/dependabot/github_actions/github/codeql-...</li> <li>Additional commits viewable in <a href="https://github.com/go-git/go-git/compare/v5.13.0...v5.13.2">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…ometbft#4865) Bumps [github.com/prometheus/common](https://github.com/prometheus/common) from 0.61.0 to 0.62.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/prometheus/common/releases">github.com/prometheus/common's releases</a>.</em></p> <blockquote> <h2>v0.62.0</h2> <p>⚠️ This releases switches internal global to <code>UTF8Validation</code> from <code>LegacyValidation</code>. This is a breaking change, relaxing the validation. We don't intend to add more schemas and we have to have a global for unmarshalling interfaces, thus the change was made⚠️ </p> <h2>What's Changed</h2> <ul> <li>Change default validation scheme to UTF8Validation by <a href="https://github.com/ywwg"><code>@ywwg</code></a> in <a href="https://github.com/prometheus/common/pull/724">prometheus/common#724</a></li> <li>Remove deprecated promlog package by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://github.com/prometheus/common/pull/738">prometheus/common#738</a></li> <li>Remove deprecated sigv4 module by <a href="https://github.com/SuperQ"><code>@SuperQ</code></a> in <a href="https://github.com/prometheus/common/pull/737">prometheus/common#737</a></li> <li>update links to openmetrics to reference the v1.0.0 release by <a href="https://github.com/dashpole"><code>@dashpole</code></a> in <a href="https://github.com/prometheus/common/pull/740">prometheus/common#740</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://github.com/prometheus/common/pull/742">prometheus/common#742</a></li> <li>Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/744">prometheus/common#744</a></li> <li>Bump golang.org/x/net from 0.32.0 to 0.33.0 by <a href="https://github.com/dependabot"><code>@dependabot</code></a> in <a href="https://github.com/prometheus/common/pull/743">prometheus/common#743</a></li> <li>Synchronize common files from prometheus/prometheus by <a href="https://github.com/prombot"><code>@prombot</code></a> in <a href="https://github.com/prometheus/common/pull/747">prometheus/common#747</a></li> <li>http_config: Allow customizing TLS config and settings. by <a href="https://github.com/bwplotka"><code>@bwplotka</code></a> in <a href="https://github.com/prometheus/common/pull/748">prometheus/common#748</a></li> </ul> <h2>New Contributors</h2> <ul> <li><a href="https://github.com/dashpole"><code>@dashpole</code></a> made their first contribution in <a href="https://github.com/prometheus/common/pull/740">prometheus/common#740</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/prometheus/common/compare/v0.61.0...v0.62.0">https://github.com/prometheus/common/compare/v0.61.0...v0.62.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/prometheus/common/commit/280b0e7d5bdf09ddfd2d93c226671cb2ebdb7d5f"><code>280b0e7</code></a> http_config: Allow customizing TLS config and settings. (<a href="https://github.com/prometheus/common/issues/748">#748</a>)</li> <li><a href="https://github.com/prometheus/common/commit/aea8919bdc8b0b593086473f99c50ca6d5796c0c"><code>aea8919</code></a> Update common Prometheus files (<a href="https://github.com/prometheus/common/issues/747">#747</a>)</li> <li><a href="https://github.com/prometheus/common/commit/8d916fab5bd4b281fe2797100a6cabe2515d3d59"><code>8d916fa</code></a> Bump golang.org/x/net from 0.32.0 to 0.33.0 (<a href="https://github.com/prometheus/common/issues/743">#743</a>)</li> <li><a href="https://github.com/prometheus/common/commit/fe88605b113417b6baba52ec2850187ac127cc1c"><code>fe88605</code></a> Bump google.golang.org/protobuf from 1.35.2 to 1.36.1 (<a href="https://github.com/prometheus/common/issues/744">#744</a>)</li> <li><a href="https://github.com/prometheus/common/commit/5d9961df0b3ac7927a16495c3bf40f2de421725c"><code>5d9961d</code></a> Update common Prometheus files (<a href="https://github.com/prometheus/common/issues/742">#742</a>)</li> <li><a href="https://github.com/prometheus/common/commit/0a89b987581831cf1f9061b3197b8d86f7c7b21c"><code>0a89b98</code></a> Merge pull request <a href="https://github.com/prometheus/common/issues/740">#740</a> from dashpole/update_om_links</li> <li><a href="https://github.com/prometheus/common/commit/e3926e2a56435b2213296803d4e6c6f66fc3c423"><code>e3926e2</code></a> update links to openmetrics to reference the v1.0.0 release</li> <li><a href="https://github.com/prometheus/common/commit/d88ee1f244f31e9376f4aa8ad865bd5c7dd4a814"><code>d88ee1f</code></a> Remove deprecated sigv4 module (<a href="https://github.com/prometheus/common/issues/737">#737</a>)</li> <li><a href="https://github.com/prometheus/common/commit/c3fdb171ceca4b3f86385f2f436c7e8cac676548"><code>c3fdb17</code></a> Remove deprecated promlog package (<a href="https://github.com/prometheus/common/issues/738">#738</a>)</li> <li><a href="https://github.com/prometheus/common/commit/cf5f48f181f5270eeac48e077e974ba0e00f5c58"><code>cf5f48f</code></a> Change default validation scheme to UTF8Validation (<a href="https://github.com/prometheus/common/issues/724">#724</a>)</li> <li>See full diff in <a href="https://github.com/prometheus/common/compare/v0.61.0...v0.62.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
…etbft#4882) Bumps [docker/build-push-action](https://github.com/docker/build-push-action) from 6.12.0 to 6.13.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/docker/build-push-action/releases">docker/build-push-action's releases</a>.</em></p> <blockquote> <h2>v6.13.0</h2> <ul> <li>Bump <code>@docker/actions-toolkit</code> from 0.51.0 to 0.53.0 in <a href="https://github.com/docker/build-push-action/pull/1308">docker/build-push-action#1308</a></li> </ul> <p><strong>Full Changelog</strong>: <a href="https://github.com/docker/build-push-action/compare/v6.12.0...v6.13.0">https://github.com/docker/build-push-action/compare/v6.12.0...v6.13.0</a></p> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/docker/build-push-action/commit/ca877d9245402d1537745e0e356eab47c3520991"><code>ca877d9</code></a> Merge pull request <a href="https://github.com/docker/build-push-action/issues/1308">#1308</a> from docker/dependabot/npm_and_yarn/docker/actions-t...</li> <li><a href="https://github.com/docker/build-push-action/commit/d2fe919bb5012a6186426dc91c361c4980d10c2d"><code>d2fe919</code></a> chore: update generated content</li> <li><a href="https://github.com/docker/build-push-action/commit/f0fc9ece82cf2ace13ec8f35687697ae511bdf74"><code>f0fc9ec</code></a> chore(deps): Bump <code>@docker/actions-toolkit</code> from 0.51.0 to 0.53.0</li> <li>See full diff in <a href="https://github.com/docker/build-push-action/compare/v6.12.0...v6.13.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
…ometbft#4900) Bumps google.golang.org/protobuf from 1.36.3 to 1.36.4. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
lower than what was previously reported GHSA-22qq-3xwm-r5x4
…bft#4901) Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.69.4 to 1.70.0. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/grpc/grpc-go/releases">google.golang.org/grpc's releases</a>.</em></p> <blockquote> <h2>Release 1.70.0</h2> <h1>Behavior Changes</h1> <ul> <li>client: reject service configs containing an invalid retryPolicy in accordance with gRFCs <a href="https://github.com/grpc/proposal/blob/master/A21-service-config-error-handling.md">A21</a> and <a href="https://github.com/grpc/proposal/blob/master/A6-client-retries.md">A6</a>. (<a href="https://github.com/grpc/grpc-go/issues/7905">#7905</a>) <ul> <li>Note that this is a potential breaking change for some users using an invalid configuration, but continuing to allow this behavior would violate our cross-language compatibility requirements.</li> </ul> </li> </ul> <h1>New Features</h1> <ul> <li>xdsclient: fallback to a secondary management server (if specified in the bootstrap configuration) when the primary is down is enabled by default. Can be disabled by setting the environment variable <code>GRPC_EXPERIMENTAL_XDS_FALLBACK</code> to <code>false</code>. (<a href="https://github.com/grpc/grpc-go/issues/7949">#7949</a>)</li> <li>experimental/credentials: experimental transport credentials are added which don't enforce ALPN. (<a href="https://github.com/grpc/grpc-go/issues/7980">#7980</a>) <ul> <li>These credentials will be removed in an upcoming grpc-go release. Users must not rely on these credentials directly. Instead, they should either vendor a specific version of gRPC or copy the relevant credentials into their own codebase if absolutely necessary.</li> </ul> </li> </ul> <h1>Bug Fixes</h1> <ul> <li>xds: fix a possible deadlock that happens when both the client application and the xDS management server (responsible for configuring the client) are using the xds:/// scheme in their target URIs. (<a href="https://github.com/grpc/grpc-go/issues/8011">#8011</a>)</li> </ul> <h1>Performance</h1> <ul> <li>server: for unary requests, free raw request message data as soon as parsing is finished instead of waiting until the method handler returns. (<a href="https://github.com/grpc/grpc-go/issues/7998">#7998</a>) <ul> <li>Special Thanks: <a href="https://github.com/lqs"><code>@lqs</code></a></li> </ul> </li> </ul> <h1>Documentation</h1> <ul> <li>examples/features/gracefulstop: add example to demonstrate server graceful stop. (<a href="https://github.com/grpc/grpc-go/issues/7865">#7865</a>)</li> </ul> </blockquote> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/grpc/grpc-go/commit/98a0092952dd4d8443229c3a335ec592d9c40c9b"><code>98a0092</code></a> Change version to 1.70.0 (<a href="https://github.com/grpc/grpc-go/issues/7984">#7984</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/bf380dec5e059ea6e7d07cec015dd0c913831a6a"><code>bf380de</code></a> Cherrypick <a href="https://github.com/grpc/grpc-go/issues/7998">#7998</a>, <a href="https://github.com/grpc/grpc-go/issues/8011">#8011</a>, <a href="https://github.com/grpc/grpc-go/issues/8010">#8010</a> into 1.70.x (<a href="https://github.com/grpc/grpc-go/issues/8028">#8028</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/54b3eb97dbf7400efb5750f26084c2d3b2eff120"><code>54b3eb9</code></a> experimental/credentials: Add credentials that don't enforce ALPN (<a href="https://github.com/grpc/grpc-go/issues/7980">#7980</a>) (<a href="https://github.com/grpc/grpc-go/issues/8">#8</a>...</li> <li><a href="https://github.com/grpc/grpc-go/commit/62b9185a6296155e47efd39d60298d8de0a6ed1d"><code>62b9185</code></a> clustetresolver: Copy endpoints.Addresses slice from DNS updates to avoid dat...</li> <li><a href="https://github.com/grpc/grpc-go/commit/724f450f77a09bade8174e5052625977069aaf81"><code>724f450</code></a> examples/features/csm_observability: use helloworld client and server instead...</li> <li><a href="https://github.com/grpc/grpc-go/commit/e8d5feb181766059429259ce3345ddb1f667ded5"><code>e8d5feb</code></a> rbac: add method name to :path in headers (<a href="https://github.com/grpc/grpc-go/issues/7965">#7965</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/e912015fd3f4aabdff6d6cf835e321c19a204afb"><code>e912015</code></a> cleanup: Fix usages of non-constant format strings (<a href="https://github.com/grpc/grpc-go/issues/7959">#7959</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/681334a46115da3a5f9086c47e3d501a19362256"><code>681334a</code></a> cleanup: replace dial with newclient (<a href="https://github.com/grpc/grpc-go/issues/7943">#7943</a>)</li> <li><a href="https://github.com/grpc/grpc-go/commit/063d352de07403a582ef33f8f5f8149e3b57c47e"><code>063d352</code></a> internal/resolver: introduce a new resolver to handle target URI and proxy ad...</li> <li><a href="https://github.com/grpc/grpc-go/commit/10c7e13311f48bf5237738f4f19b53f62b1146cd"><code>10c7e13</code></a> outlierdetection: Support health listener for ejection updates (<a href="https://github.com/grpc/grpc-go/issues/7908">#7908</a>)</li> <li>Additional commits viewable in <a href="https://github.com/grpc/grpc-go/compare/v1.69.4...v1.70.0">compare view</a></li> </ul> </details> <br /> [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: mergify[bot] <37929162+mergify[bot]@users.noreply.github.com>
Tagged v0.38.17 release
WalkthroughThis update comprises numerous changes across dependency management, bug fixes, feature enhancements, documentation, and test improvements. Notably, it pins specific versions for tools like Mockery and Go, refines workflow configurations (including Slack notifications and Docker actions), and updates mock function comments to uniformly indicate “no fields.” Enhancements to block synchronization include additional peer validation and banning, while documentation and error handling have been updated. Overall, the changes span both the core functionality and auxiliary tooling, ensuring improved clarity, stability, and maintainability. Changes
Sequence Diagram(s)sequenceDiagram
participant Peer
participant BlockPool
participant Logger
Note over BlockPool: Receiving peer block range update
Peer->>BlockPool: Send (base, height)
BlockPool->>BlockPool: Compare with previous record
alt Lower than expected
BlockPool->>Logger: Log warning/info
BlockPool->>BlockPool: Ban and remove peer
else Acceptable
BlockPool->>Peer: Update peer range
end
sequenceDiagram
participant Reactor
participant PeerManager
Note over Reactor,PeerManager: Periodic peer ensuring routine
Reactor->>PeerManager: Call ensurePeers(ensurePeersPeriodElapsed: true/false)
PeerManager->>Reactor: Process current peer connections
Poem
Tip 🌐 Web search-backed reviews and chat
✨ Finishing Touches
🪧 TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (Invoked using PR comments)
Other keywords and placeholders
CodeRabbit Configuration File (
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 0
🧹 Nitpick comments (14)
.changelog/v0.38.16/summary.md (2)
1-1: Date Formatting Suggestion
The date currently reads "December 20 2024". For improved clarity and to follow common writing conventions, consider adding a comma between the day and the year (e.g. "December 20, 2024").🧰 Tools
🪛 LanguageTool
[uncategorized] ~1-~1: Commas set off the year in a month-day-year date.
Context: December 20 2024 This release: - fixes a bug that...(MISSING_COMMA_BETWEEN_DAY_AND_YEAR)
4-4: Grammar Correction Needed on Bug Description
The sentence “fixes a bug that caused a node produce errors caused by the sending of next PEX requests too soon.” appears to be missing a preposition. Consider changing it to:
“fixes a bug that caused a node to produce errors due to sending the next PEX requests too soon.”
A slight rephrasing could also improve clarity.🧰 Tools
🪛 LanguageTool
[uncategorized] ~4-~4: Possible missing preposition found.
Context: ...lease: - fixes a bug that caused a node produce errors caused by the sending of next PE...(AI_HYDRA_LEO_MISSING_TO)
[style] ~4-~4: To make your writing clearer, consider a shorter, more direct phrase.
Context: ... sending of next PEX requests too soon. As a consequence of this incorrect behavior a node would be...(AS_A_CONSEQUENCE_OF)
spec/abci/abci++_methods.md (1)
820-832: ExtendedVoteInfo Documentation – Duplicate Word Correction
The updatedExtendedVoteInfoblock properly introduces both theextension_signatureandblock_id_flagfields. However, there is a minor typo in the description forextension_signaturewhere “verified” appears twice. Consider revising the line to:- * `extension_signature` is the signature of the vote extension, which was verified verified by CometBFT. This way, we expose the signature to the application for further processing or verification. + * `extension_signature` is the signature of the vote extension, which was verified by CometBFT. This exposes the signature to the application for further processing or verification.This will improve the clarity and professionalism of the documentation.
p2p/pex/pex_reactor_test.go (1)
277-285: Consider using a constant instead of a magic number.The loop uses a hardcoded value of 3. Consider extracting this to a named constant to improve maintainability and make the test's intent clearer.
+const defaultTestPeerCount = 3 + -for id = 0; id < 3; id++ { +for id = 0; id < defaultTestPeerCount; id++ {blocksync/pool_test.go (4)
323-335: Time-based block creation simulation.Using a ticker to increment peer heights can introduce flakiness if the test environment is slow or heavily loaded. In most cases, this is acceptable for integration-style testing, but consider alternatives if timing-based failures appear in CI.
341-359: Periodic block verification logic.Verifying blocks every 500 milliseconds is convenient for testing but can also lead to nondeterministic results if system delays occur. Be mindful of potential race conditions, though the current approach appears controlled with
pool.Quit().
361-390: Loop logic for malicious peer handling.This loop robustly checks whether the pool has caught up, ensures the malicious peer has been banned, and bounds the test duration to
MaliciousTestMaximumLength. While effective, you could consider additional logging to diagnose intermittent failures, as timing-based tests can occasionally exhibit flakiness.
392-510: New test function with extreme height:TestBlockPoolMaliciousNodeMaxInt64.This test covers a critical malicious scenario. Note that using
math.MaxInt64may elevate the test runtime, especially since the loop runs until the pool catches up or the maximum time elapses (5 minutes). If you notice slowdowns or CI timeouts, consider a smaller upper bound or a strategy that bypasses extremely large heights in a more controlled manner.types/part_set.go (1)
53-58: Enhanced error handling with better context.The validation logic now returns more descriptive errors using
ErrInvalidPart, making it easier to debug issues. The check for index matching betweenpart.Indexandpart.Proof.Indexis a critical security enhancement.Consider adding unit tests to verify this new validation check with various edge cases.
blocksync/pool.go (1)
469-470: Enhanced logging for peer banning.Added debug logging when banning a peer, which will help with troubleshooting.
Consider adding more context to the log message, such as the reason for banning:
-pool.Logger.Debug("Banning peer", peerID) +pool.Logger.Debug("Banning peer", "peer", peerID, "reason", "reported lower height/base")docs/guides/go.md (1)
245-255: Persistent Data Store Integration:
The updatedKVStoreApplicationstruct now includes adb *badger.DBandonGoingBlock *badger.Txn, and the constructorNewKVStoreApplication(db *badger.DB)is modified accordingly. This clearly documents the new dependency on Badger and accommodates persistent storage.It might be helpful to include a brief comment in the code noting that the
onGoingBlockfield tracks the active transaction.docs/guides/go-built-in.md (1)
244-254: Updated Built-in Application Structure:
TheKVStoreApplicationstruct now includes persistent storage members (dbandonGoingBlock), and the constructor is updated toNewKVStoreApplication(db *badger.DB). This aligns with the persistent store integration strategy and helps users understand how to wire up their application state.A small inline comment explaining the purpose of each new field might further improve clarity.
CHANGELOG.md (1)
3-21: Markdown Formatting Consistency
As a nitpick, please ensure that list items (e.g. under BUG FIXES and DEPENDENCIES) are surrounded by blank lines as suggested by markdown linting guidelines (MD032). This will improve readability in the rendered changelog..changelog/v0.38.12/dependencies/4605-fix-mockery-version.md (1)
1-3: File-Level Markdown Improvements
As a suggestion, consider adding a top-level heading to this file (per MD041) and ensure that the file ends with a single trailing newline (per MD047) for consistency with markdown best practices.🧰 Tools
🪛 markdownlint-cli2 (0.17.2)
1-1: First line in a file should be a top-level heading
null(MD041, first-line-heading, first-line-h1)
3-3: Files should end with a single newline character
null(MD047, single-trailing-newline)
📜 Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Plan: Pro
⛔ Files ignored due to path filters (1)
go.sumis excluded by!**/*.sum
📒 Files selected for processing (42)
.changelog/v0.38.12/dependencies/4605-fix-mockery-version.md(1 hunks).changelog/v0.38.16/bug-fixes/4521-fixes-breaking-mock.md(1 hunks).changelog/v0.38.16/summary.md(1 hunks).changelog/v0.38.17/bug-fixes/2025-001-malicious-peer-can-make-node-stuck-in-blocksync.md(1 hunks).changelog/v0.38.17/bug-fixes/2025-002-block-part-validation.md(1 hunks).changelog/v0.38.17/dependencies/4891-update-go.md(1 hunks).changelog/v0.38.17/summary.md(1 hunks).github/CODEOWNERS(1 hunks).github/workflows/cometbft-docker.yml(2 hunks).github/workflows/fuzz-nightly.yml(1 hunks).github/workflows/pre-release.yml(1 hunks).github/workflows/proto-lint.yml(1 hunks).github/workflows/release.yml(1 hunks).github/workflows/testapp-docker.yml(2 hunks).mockery.yml(1 hunks)CHANGELOG.md(2 hunks)abci/client/mocks/client.go(10 hunks)blocksync/pool.go(3 hunks)blocksync/pool_test.go(3 hunks)docs/guides/go-built-in.md(1 hunks)docs/guides/go.md(1 hunks)evidence/mocks/block_store.go(1 hunks)go.mod(7 hunks)light/rpc/mocks/light_client.go(1 hunks)mempool/mocks/mempool.go(6 hunks)p2p/mocks/peer.go(19 hunks)p2p/pex/pex_reactor.go(3 hunks)p2p/pex/pex_reactor_test.go(4 hunks)proxy/mocks/app_conn_consensus.go(1 hunks)proxy/mocks/app_conn_mempool.go(1 hunks)proxy/mocks/app_conn_query.go(1 hunks)proxy/mocks/app_conn_snapshot.go(1 hunks)proxy/mocks/client_creator.go(1 hunks)scripts/mockery_generate.sh(1 hunks)spec/abci/abci++_methods.md(3 hunks)state/mocks/block_store.go(7 hunks)state/mocks/store.go(4 hunks)test/e2e/docker/Dockerfile(1 hunks)test/e2e/run-multiple.sh(1 hunks)types/part_set.go(3 hunks)types/part_set_test.go(3 hunks)version/version.go(1 hunks)
✅ Files skipped from review due to trivial changes (20)
- .changelog/v0.38.17/summary.md
- .changelog/v0.38.17/dependencies/4891-update-go.md
- .changelog/v0.38.16/bug-fixes/4521-fixes-breaking-mock.md
- scripts/mockery_generate.sh
- proxy/mocks/app_conn_snapshot.go
- .github/workflows/testapp-docker.yml
- proxy/mocks/app_conn_consensus.go
- proxy/mocks/app_conn_query.go
- evidence/mocks/block_store.go
- light/rpc/mocks/light_client.go
- test/e2e/docker/Dockerfile
- version/version.go
- proxy/mocks/client_creator.go
- proxy/mocks/app_conn_mempool.go
- .mockery.yml
- state/mocks/block_store.go
- state/mocks/store.go
- mempool/mocks/mempool.go
- abci/client/mocks/client.go
- p2p/mocks/peer.go
🧰 Additional context used
🪛 LanguageTool
.changelog/v0.38.16/summary.md
[uncategorized] ~1-~1: Commas set off the year in a month-day-year date.
Context: December 20 2024 This release: - fixes a bug that...
(MISSING_COMMA_BETWEEN_DAY_AND_YEAR)
[uncategorized] ~4-~4: Possible missing preposition found.
Context: ...lease: - fixes a bug that caused a node produce errors caused by the sending of next PE...
(AI_HYDRA_LEO_MISSING_TO)
[style] ~4-~4: To make your writing clearer, consider a shorter, more direct phrase.
Context: ... sending of next PEX requests too soon. As a consequence of this incorrect behavior a node would be...
(AS_A_CONSEQUENCE_OF)
CHANGELOG.md
[uncategorized] ~24-~24: Commas set off the year in a month-day-year date.
Context: ...bft/cometbft/pull/4891)) ## v0.38.16 December 20 2024 This release: - fixes a bug that...
(MISSING_COMMA_BETWEEN_DAY_AND_YEAR)
[style] ~27-~27: To make your writing clearer, consider a shorter, more direct phrase.
Context: ... sending of next PEX requests too soon. As a consequence of this incorrect behavior a node would be...
(AS_A_CONSEQUENCE_OF)
🪛 markdownlint-cli2 (0.17.2)
CHANGELOG.md
27-27: Lists should be surrounded by blank lines
null
(MD032, blanks-around-lists)
.changelog/v0.38.12/dependencies/4605-fix-mockery-version.md
1-1: First line in a file should be a top-level heading
null
(MD041, first-line-heading, first-line-h1)
3-3: Files should end with a single newline character
null
(MD047, single-trailing-newline)
🔇 Additional comments (53)
.github/workflows/cometbft-docker.yml (2)
44-44: Updated Docker Buildx Action VersionThe version for
docker/setup-buildx-actionhas been updated tov3.8.0. Please verify that all subsequent steps (and any potential caching or build configuration settings) remain compatible with this new version.
54-54: Updated Docker Build-Push Action VersionThe version for
docker/build-push-actionhas been updated tov6.13.0. Make sure to confirm that the new version does not introduce any changes affecting build flags or behaviors, ensuring consistency with the existing Dockerfile and build context..github/workflows/release.yml (1)
59-73: Slack Notification Action Update: Verify Compatibility and Clean-up
The Slack notification step now usesslackapi/[email protected]and switches from environment variables to explicit input parameters (webhookandwebhook-type) along with a YAML-formatted payload. Please double-check the latest documentation for this GitHub Action to ensure that both the new input parameters and the payload structure are correctly configured. Additionally, since environment variablesSLACK_WEBHOOK_URLandSLACK_WEBHOOK_TYPEare still passed in theenvblock (lines 62–63), confirm if these are still required to avoid redundancy..github/workflows/pre-release.yml (1)
59-71: Pre-release Slack Notification Update: Confirm Input Parameters and Payload
The pre-release workflow now uses the updated Slack action version (v2.0.0) with the new inputswebhookandwebhook-type(lines 64–65) along with the YAML-like payload. This change improves readability but requires verifying that the new configuration meets your team's requirements for Slack notifications. Also, ensure that the custom environment variableRELEASE_URL(line 62) is correctly used in the payload..github/workflows/fuzz-nightly.yml (1)
80-93: Fuzz-nightly Failure Notification: Validate Updated Slack Action Usage
The failure notification step for the nightly fuzz tests now usesslackapi/[email protected]with updated input parameters (webhookandwebhook-type) and a YAML-based payload. The configuration also leverages environment variables (BRANCH,CRASHERS, andRUN_URL) for message composition. Please verify that the integration works as expected with the new action version and that the message formatting looks correct in Slack..changelog/v0.38.16/summary.md (1)
6-6: Approval of Specification Update
The changelog now properly notes the addition of descriptive details forExtendedVoteInfoandVoteInfoin the spec. This documentation update improves clarity regarding these entities.spec/abci/abci++_methods.md (1)
807-811: VoteInfo Enhancement Verification
The addition of theblock_id_flagfield to theVoteInfodata type is clearly documented here. Ensure that the field number (3) and its description are consistent with how it is used elsewhere in the codebase and specification.p2p/pex/pex_reactor_test.go (3)
303-304: Verify the expected peer count.The test expects exactly 2 peers to be connected. This seems to be related to the hardcoded loop count of 3 peers above. Consider adding a comment explaining why we expect 2 peers when we create 3.
311-311: LGTM: Improved dialing limit validation.The assertion now correctly validates that the number of dialing peers doesn't exceed the available slots (MaxNumOutboundPeers + MaxNumInboundPeers - outbound - inbound).
562-566: LGTM: Simplified timeout handling.The timeout handling has been improved by using
time.Afterinstead of manual time tracking. This is a more idiomatic approach in Go.p2p/pex/pex_reactor.go (3)
443-443: LGTM: Improved control over peer address requests.The addition of the
ensurePeersPeriodElapsedparameter provides better control over when to request addresses from peers, preventing too frequent requests.
421-431: LGTM: Consistent parameter passing.The calls to
ensurePeerscorrectly differentiate between periodic (true) and on-demand (false) invocations, ensuring consistent behavior.
511-515: LGTM: Rate-limited peer address requests.The condition
ensurePeersPeriodElapsedensures that address requests are only made during periodic checks, not during on-demand calls. This helps prevent overwhelming peers with too frequent requests.blocksync/pool_test.go (1)
5-5: Imported "math" for MaxInt64 usage.No specific issues found. This aligns with the new test scenario checking
math.MaxInt64..github/CODEOWNERS (1)
10-13: Expanded code owners for broader coverage.Adding
@cometbft/devreland@cometbft/interchain-incbroadens the review scope and ensures more inclusive collaboration.types/part_set_test.go (4)
128-128: Renamed test function toTestPart_ValidateBasic.This naming convention is valid and clarifies the scope of the test.
140-140: Ensuring proof index for a good small last part.Assigning
pt.Proof.Index = 1aligns the part index with the proof index, improving test coverage.
153-154: Extended scenario for "Too big proof" test.Setting
pt.Index = 1is consistent with testing a valid index in contrast to an excessively large proof.
156-158: Explicit check for index mismatch.Good job ensuring that mismatched indexes between
pt.Indexandpt.Proof.Indexare flagged as errors.types/part_set.go (2)
25-36: Well-structured error type implementation.The new
ErrInvalidParttype follows Go's best practices for error handling by:
- Wrapping the underlying error
- Implementing both
Error()andUnwrap()methods- Providing clear error messages
294-294: Important contract documented.The comment clearly states the precondition that the part must be validated using
ValidateBasicbefore being added.Let's verify that all callers of
AddPartrespect this contract:✅ Verification successful
I'm not seeing any matches from the original AST search, so let's broaden our search to manually inspect all contexts where
AddPart(is used. Please run the following script to search for all occurrences (with some context) ofAddPart(and help us verify if the caller code is indeed validating parts usingValidateBasic.
Verification of AddPart Usage and ValidateBasic Contract
All observed callers (in both production and test code) use parts that originate from constructors likeNewPartSetFromHeader, which are assumed to produce valid parts, or they intentionally modify parts to test error conditions. There’s no evidence of calls toAddPartwith unchecked parts—callers rely on earlier validation (directly or via construction) that fulfills the contract.🏁 Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Search for all calls to AddPart to verify they validate parts first ast-grep --pattern 'AddPart($$$)'Length of output: 35
Script:
#!/bin/bash # Search for all occurrences of "AddPart(" and display 5 lines of context around each occurrence. rg -C 5 'AddPart\(' || trueLength of output: 5888
blocksync/pool.go (2)
454-459: Good encapsulation of peer ban status.The new public method provides a thread-safe way to check if a peer is banned, properly encapsulating the internal state.
Let's verify this method is used consistently:
✅ Verification successful
Peer Ban Check Encapsulation Verified. The output shows that both the public
IsPeerBannedmethod and the internalisPeerBannedfunction are used consistently across the codebase—including in production logic and tests—ensuring thread safety and proper encapsulation.🏁 Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Search for all usages of IsPeerBanned and isPeerBanned rg -A 2 "IsPeerBanned|isPeerBanned"Length of output: 1369
374-383: Enhanced security against malicious peers.The implementation now properly handles peers that report decreasing heights or base values by:
- Logging the inconsistency for debugging
- Removing and banning the peer
- Early return to prevent further processing
Let's verify the test coverage for this security enhancement:
✅ Verification successful
The test suite in
blocksync/pool_test.goincludes several tests—such as TestBlockPoolRemovePeer, TestBlockPoolMaliciousNode, and TestBlockPoolMaliciousNodeMaxInt64—that cover scenarios involving peer misbehavior. These cases simulate peers that behave unexpectedly (for example, reporting block ranges that are inconsistent with the expected progression). In particular, the malicious node tests trigger the conditions that lead to removal (and banning) of peers; this confirms that the security enhancement in handling decreased height or base values is exercised by the tests.Thus, the test coverage for this security enhancement is properly in place.
Action: The test cases validate that peers reporting decreasing heights or bases are logged, removed, and banned as intended.
🏁 Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Search for test cases covering this scenario rg -A 5 "TestBlockPool.*" "blocksync/pool_test.go"Length of output: 1604
.changelog/v0.38.17/bug-fixes/2025-001-malicious-peer-can-make-node-stuck-in-blocksync.md (1)
1-3: Well-documented security fixes.The changelog entries properly document the security fixes with:
- Clear descriptions of the changes
- Links to the security advisories
- Proper module tagging
Also applies to: 1-3
.github/workflows/proto-lint.yml (1)
18-18: Upgrade Action Version:
The action version has been bumped fromv1.46.0tov1.50.0. This update likely brings bug fixes or improved features. Please verify any changes in Buf’s output if you haven’t already.test/e2e/run-multiple.sh (2)
23-24: Enhanced Manifest Logging:
Adding the explicit"==> Manifest:"line followed bycat "$MANIFEST"improves the clarity of logs during testnet execution. This will help diagnose issues when a testnet fails.
27-27: Simplified Failure Message:
The failure message has been simplified to"==> Testnet failed", which keeps the output concise. Ensure that additional context in the subsequent steps (like dumping the manifest) still provides all necessary debugging information.go.mod (4)
3-3: Go Version Bump:
The Go version has been updated fromgo 1.22.7togo 1.22.11. This minor upgrade should bring subtle improvements and security fixes. Verify that all go‑tools behave correctly with this new version.
25-35: Dependency Version Upgrades (Part 1):
Several key dependencies have been bumped—for example,github.com/prometheus/commonis now atv0.62.0andgithub.jparrowsec.cn/stretchr/testifyatv1.10.0. These changes should enhance stability and security. Verify that any API updates in these libraries do not break existing tests.
41-51: Dependency Version Upgrades (Part 2):
Additional dependency updates—including libraries such asgolang.org/x/crypto,golang.org/x/net,google.golang.org/grpc, and others—ensure that we’re on patched, secure versions. Double-check that there is no unintended behavior from upstream changes.
151-160: Retraction Section:
The retract block now clearly lists removed or superseded versions. This is useful for package consumers to avoid regressions caused by outdated versions.docs/guides/go.md (7)
49-50: Documented Go Version Update:
The snippet now correctly shows the output forgo version go1.22.11 darwin/amd64. This update is important to ensure readers install the appropriate Go version as required by the application.
271-273: Constructor Invocation Update:
The sample inmain.gohas been updated to invokeNewKVStoreApplication(nil). Ensure that when integrating this example into production code, an actual database handle is provided rather thannil.
287-295: Addition ofisValidHelper:
The helper functionisValid(tx []byte) uint32is now added to validate the transaction format (ensuring it contains exactly one "="). This improves code modularity and helps prevent duplicate logic in bothCheckTxandFinalizeBlock.
300-304: Update toCheckTxImplementation:
CheckTxnow callsisValid(check.Tx)and returns the resulting code. This creates consistency with the new validation logic. Verify that all transaction formats (and potential edge cases) are handled as expected.
353-380: EnhancedFinalizeBlockwith Transaction Processing:
The changes inFinalizeBlocknow create a new Badger transaction and process each transaction by:
– validating again usingisValid
– splitting the transaction into key/value pairs viabytes.SplitN
– logging both attempted and successful database writes
Usinglog.Panicfon database write errors forces a crash on unexpected errors, which is acceptable for ensuring deterministic behavior but you might want to confirm this is the desired fault–tolerance model.
394-397: Commit Operation Update:
TheCommitmethod now commits the pending Badger transaction (app.onGoingBlock.Commit()). This ensures state changes are persisted after processing a block. The approach is straightforward; just be aware that any error here will propagate immediately via the returned error.
421-446: UpdatedQueryMethod:
TheQuerymethod has been updated to use a read–only Badger transaction. It retrieves the value associated with a key and sets an appropriate log message if the key is not found. This documentation also explains that data is returned as base64–encoded when displayed externally.docs/guides/go-built-in.md (9)
49-50: Documented Go Version Update:
Similar to the other guide, the output now correctly showsgo version go1.22.11 darwin/amd64, ensuring readers know the required Go version.
271-272: Constructor Usage Update:
The sample usage now correctly callsNewKVStoreApplication(nil)to reflect the updated signature. In practice, using a valid Badger database handle is recommended.
286-295: NewisValidFunction Addition:
The helper function added here validates the transaction format by checking for the presence of a single "=". This modular approach simplifies theCheckTxand other validation paths.
300-304: RevisedCheckTxImplementation:
CheckTxnow uses the newisValidhelper to determine the transaction’s validity. This makes intent clearer and centralizes transaction format validation.
353-380: RefinedFinalizeBlockfor Built-in Application:
The changes show the creation of an on–going Badger transaction and processing each transaction with validation, logging, and setting key/value pairs. This mirrors the external guide’s improvements and is critical for ensuring transactional integrity.Again, consider if crashing via
log.Panicfis acceptable or if a more graceful error–handling strategy is needed in production.
397-400: UpdatedCommitMethod for Persistence:
The built-in application'sCommitnow terminates the pending Badger transaction by calling itsCommit()method. This change is straightforward and consistent with the external guide.
427-451: EnhancedQueryMethod:
TheQueryfunction has been rewritten to use a read–only view of the database. It handles the case when a key is missing by setting an appropriate log message and returns the value if found. This is a clear and concise approach.
473-490: Proposal Methods Implementation:
BothPrepareProposalandProcessProposalare now documented. The implementations here simply pass through the transaction set or accept all proposals. This basic implementation is acceptable for a tutorial but may need extension for production use.
500-603: Main Application and Node Startup Updates:
The updatedmain.goin this guide now shows how to load configuration with Viper, open the Badger database, initialize the application, set up the private validator and node key, and finally start the node along with graceful shutdown on SIGTERM. This comprehensive snippet is a solid reference for users building a built-in application using CometBFT.CHANGELOG.md (3)
3-9: New Release Entry for v0.38.17
The new version entry is clear: it displays the version, the release date (February 3, 2025), and a concise description of the security issues being fixed. Please verify that the date format (with the comma) conforms to your project’s style guide.
10-16: New BUG FIXES Section Added
The BUG FIXES section lists two corrective measures for the[blocksync]and[types]components, each with a corresponding security advisory link. Ensure that the advisory IDs and URLs (GHSA-22qq-3xwm-r5x4 and GHSA-r3r4-g7hq-pq4f) are accurate and up to date.
17-21: Dependency Update Added
The DEPENDENCIES section now includes a bump of the minimum Go version to 1.22.11. Confirm that this update is consistently reflected in your build configurations and documentation..changelog/v0.38.12/dependencies/4605-fix-mockery-version.md (1)
1-3: Mockery Version Pinning Update
This file pins the mockery version to v2.49.2 to prevent unwanted changes in mocks with future releases. The change is succinct and includes a reference to issue #4605. Please also ensure that the version in your automation script (e.g. inscripts/mockery_generate.sh) is updated accordingly.🧰 Tools
🪛 markdownlint-cli2 (0.17.2)
1-1: First line in a file should be a top-level heading
null(MD041, first-line-heading, first-line-h1)
3-3: Files should end with a single newline character
null(MD047, single-trailing-newline)
.changelog/v0.38.17/bug-fixes/2025-002-block-part-validation.md (2)
1-1: Clear and Concise Validation DescriptionThe changelog entry clearly explains the new validation rule that requires
Part.Indexto equalPart.Proof.Indexas part of enforcing security advisory ASA-2025-001. This succinct description is excellent for documentation.
2-2: Proper Inclusion of Security Advisory ReferenceLinking the security advisory (ASA-2025-001) directly in the changelog enhances traceability and helps users quickly access detailed information about the advisory.
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
PR checklist
.changelog(we use unclog to manage our changelog)docs/orspec/) and code commentsSummary by CodeRabbit
Bug Fixes
New Features
Chores