Update go updates

[platform-engineering-bot]

This PR contains the following updates:

Package	Type	Update	Change
github.com/emicklei/go-restful/v3	indirect	minor	v3.11.0 -> v3.12.0
github.com/go-logr/logr	indirect	minor	v1.3.0 -> v1.4.1
github.com/go-openapi/jsonpointer	indirect	minor	v0.19.6 -> v0.21.0
github.com/go-openapi/jsonreference	indirect	minor	v0.20.2 -> v0.21.0
github.com/go-openapi/swag	indirect	minor	v0.22.3 -> v0.23.0
github.com/golang/protobuf	indirect	patch	v1.5.3 -> v1.5.4
github.com/google/uuid	indirect	minor	v1.3.0 -> v1.6.0
github.com/gorilla/websocket	indirect	patch	v1.5.0 -> v1.5.1
github.com/imdario/mergo	indirect	major	v0.3.6 -> v1.0.0
go.arcalot.io/assert	require	minor	v1.7.0 -> v1.8.0
golang.org/x/net	indirect	minor	v0.19.0 -> v0.24.0
golang.org/x/oauth2	indirect	minor	v0.10.0 -> v0.19.0
golang.org/x/sys	indirect	minor	v0.15.0 -> v0.19.0
golang.org/x/term	indirect	minor	v0.15.0 -> v0.19.0
golang.org/x/time	indirect	minor	v0.3.0 -> v0.5.0
google.golang.org/appengine	indirect	major	v1.6.7 -> v2.0.6
google.golang.org/protobuf	indirect	minor	v1.31.0 -> v1.33.0
gopkg.in/yaml.v2	indirect	major	v2.4.0 -> v3.0.1
k8s.io/klog/v2	indirect	minor	v2.110.1 -> v2.120.1
k8s.io/kube-openapi	indirect	digest	2dd684a -> dc4e619
k8s.io/utils	indirect	digest	3b25d92 -> 4693a02
sigs.k8s.io/yaml	indirect	minor	v1.3.0 -> v1.4.0

---

Release Notes

emicklei/go-restful (github.com/emicklei/go-restful/v3)

v3.12.0

Compare Source

• add Flush method #​529 (#​538)
• fix: Improper handling of empty POST requests (#​543)

v3.11.3

Compare Source

• better not have 2 tags on one commit

v3.11.2

Compare Source

• fix by restoring custom JSON handler functions (Mike Beaumont #​540)

v3.11.1

Compare Source

• fix by restoring custom JSON handler functions (Mike Beaumont #​540)

go-logr/logr (github.com/go-logr/logr)

v1.4.1

Compare Source

What's Changed

• slogr: fix unintended API break in v1.4.0 by @​pohly in https://github.com/go-logr/logr/pull/253

Full Changelog: go-logr/logr@v1.4.0...v1.4.1

v1.4.0

Compare Source

This release dramatically improves interoperability with Go's log/slog package. In particular, logr.NewContext and logr.NewContextWithSlogLogger use the same context key, which allows logr.FromContext and logr.FromContextAsSlogLogger to return logr.Logger or *slog.Logger respectively, including transparently converting each to the other as needed.

Functions logr/slogr.NewLogr and logr/slogr.ToSlogHandler have been superceded by logr.FromSlogHandler and logr.ToSlogHandler respectively, and type logr/slogr.SlogSink has been superceded by logr.SlogSink. All of the old names in logr/slogr remain, for compatibility.

Package logr/funcr now supports logr.SlogSink, meaning that it's output passes all but one of the Slog conformance tests (that exception being that funcr handles the timestamp itself).

Users who have a logr.Logger and need a *slog.Logger can call slog.New(logr.ToSlogHandler(...)) and all output will go through the same stack.

Users who have a *slog.Logger or slog.Handler can call logr.FromSlogHandler(...) and all output will go through the same stack.

What's Changed

• slog context support by @​pohly in https://github.com/go-logr/logr/pull/237
• slog support: fix WithGroup + WithValues combination by @​pohly in https://github.com/go-logr/logr/pull/243
• Add tests for context with slog by @​thockin in https://github.com/go-logr/logr/pull/246
• sloghandler: unnamed groups should be inlined by @​thockin in https://github.com/go-logr/logr/pull/245
• Add SlogSink support to funcr by @​thockin in https://github.com/go-logr/logr/pull/241
• funcr: Add LogInfoLevel Option to skip logging level in the info log by @​spacewander in https://github.com/go-logr/logr/pull/240

New Contributors

• @​spacewander made their first contribution in https://github.com/go-logr/logr/pull/240

Full Changelog: go-logr/logr@v1.3.0...v1.4.0

go-openapi/jsonpointer (github.com/go-openapi/jsonpointer)

v0.21.0

Compare Source

v0.20.3

Compare Source

v0.20.2

Compare Source

v0.20.1

Compare Source

v0.20.0

Compare Source

go-openapi/jsonreference (github.com/go-openapi/jsonreference)

v0.21.0

Compare Source

v0.20.5

Compare Source

v0.20.4

Compare Source

v0.20.3

Compare Source

go-openapi/swag (github.com/go-openapi/swag)

v0.23.0

Compare Source

v0.22.10

Compare Source

v0.22.9

Compare Source

v0.22.8

Compare Source

v0.22.7

Compare Source

v0.22.6

Compare Source

v0.22.5

Compare Source

v0.22.4

Compare Source

golang/protobuf (github.com/golang/protobuf)

v1.5.4

Compare Source

Notable changes

• update descriptor.proto to latest version

google/uuid (github.com/google/uuid)

v1.6.0

Compare Source

Features

• add Max UUID constant (#​149) (c58770e)

Bug Fixes

• fix typo in version 7 uuid documentation (#​153) (016b199)
• Monotonicity in UUIDv7 (#​150) (a2b2b32)

v1.5.0

Compare Source

Features

• Validate UUID without creating new UUID (#​141) (9ee7366)

v1.4.0

Compare Source

Features

• UUIDs slice type with Strings() convenience method (#​133) (cd5fbbd)

Fixes

• Clarify that Parse's job is to parse but not necessarily validate strings. (Documents current behavior)

v1.3.1

Compare Source

Bug Fixes

• Use .EqualFold() to parse urn prefixed UUIDs (#​118) (574e687)

gorilla/websocket (github.com/gorilla/websocket)

v1.5.1

Compare Source

What's Changed

• Add check for Sec-WebSocket-Key header by @​hirasawayuki in https://github.com/gorilla/websocket/pull/752
• Changed the method name UnderlyingConn to NetConn by @​JWSong in https://github.com/gorilla/websocket/pull/773
• remove all versions < 1.16 and add 1.18 by @​ChannyClaus in https://github.com/gorilla/websocket/pull/793
• Check for and report bad protocol in TLSClientConfig.NextProtos by @​ChannyClaus in https://github.com/gorilla/websocket/pull/788
• check err before GotConn for trace by @​junnplus in https://github.com/gorilla/websocket/pull/798
• Update README.md by @​coreydaley in https://github.com/gorilla/websocket/pull/839
• Correct way to save memory using write buffer pool and freeing net.http default buffers by @​FMLS in https://github.com/gorilla/websocket/pull/761
• Update go version & add verification/testing tools by @​coreydaley in https://github.com/gorilla/websocket/pull/840
• update golang.org/x/net by @​coreydaley in https://github.com/gorilla/websocket/pull/856
• update GitHub workflows by @​coreydaley in https://github.com/gorilla/websocket/pull/857

New Contributors

• @​hirasawayuki made their first contribution in https://github.com/gorilla/websocket/pull/752
• @​JWSong made their first contribution in https://github.com/gorilla/websocket/pull/773
• @​ChannyClaus made their first contribution in https://github.com/gorilla/websocket/pull/793
• @​junnplus made their first contribution in https://github.com/gorilla/websocket/pull/798
• @​coreydaley made their first contribution in https://github.com/gorilla/websocket/pull/839
• @​FMLS made their first contribution in https://github.com/gorilla/websocket/pull/761

Full Changelog: gorilla/websocket@v1.5.0...v1.5.1

imdario/mergo (github.com/imdario/mergo)

v1.0.0: 1.0.0 released with new module URL: dario.cat/mergo

Compare Source

This PR is a release containing 0.3.15 features but changing the module URL to dario.cat/mergo.

What's Changed

• feat: v1.0.0 released by @​imdario in https://github.com/imdario/mergo/pull/238

Full Changelog: darccio/mergo@v0.3.16...v1.0.0

v0.3.16: Announcement: v1.0.0 will be released on June 18th

Compare Source

This release doesn't contain code changes.

After 10 years, with many corner cases covered, very few issues pending (at least, comparing them with the usage of the library as part of Docker, Kubernetes, Datadog's agent, etc.), and a very stable API, I think it's time to release a 1.0.0 version.

This version will be released under a vanity URL: dario.cat/mergo

PS: although I'll make sure that github.com/imdario/mergo will be available, I'm going to also change my GitHub handle, so expect for a few minutes to not be able to pull from github.com/imdario as I fork it from the new handle to the old one.

PS2: I'm creating a discussion for this release to make sure we can have a conversation around the topic, and anything else about Mergo that you care about.

v0.3.15: Issues #​131, #​170, #​220, and #​202 fixed

Compare Source

v0.3.14: fix: Respect overwriteWithEmptySrc when merging maps #​231

Compare Source

v0.3.13: Merging same-type slices supported, YAML upgraded to v3 (only used in tests), and more flexibility for transformers

Compare Source

What's Changed

• Fix typo in README.md by @​eltociear in https://github.com/imdario/mergo/pull/184
• Adding StructBot to Mergo in the wild section by @​tjpnz in https://github.com/imdario/mergo/pull/193
• Add Goreleaser to featured projects by @​marcauberer in https://github.com/imdario/mergo/pull/191
• fix: gate transformers on valid non-nil destinations by @​zaquestion in https://github.com/imdario/mergo/pull/211
• Support slices of same type by @​heaths in https://github.com/imdario/mergo/pull/210
• Upgrade yaml to v3 by @​imdario in https://github.com/imdario/mergo/pull/212

New Contributors

• @​eltociear made their first contribution in https://github.com/imdario/mergo/pull/184
• @​tjpnz made their first contribution in https://github.com/imdario/mergo/pull/193
• @​marcauberer made their first contribution in https://github.com/imdario/mergo/pull/191
• @​zaquestion made their first contribution in https://github.com/imdario/mergo/pull/211
• @​heaths made their first contribution in https://github.com/imdario/mergo/pull/210

Full Changelog: darccio/mergo@0.3.12...v0.3.13

v0.3.12: Some bug fixes

Compare Source

Thanks to @​abicky and @​ndeloof to help to improve Mergo. They fixed issues #​90 & #​174.

v0.3.11

Compare Source

v0.3.10: : frozen codebase + next steps

Compare Source

After the broken 0.3.9, I decided to revert the faulty PR #​105, reopening the issues #​90 and #​103. Also, this release includes all the other pending bugs. As it is getting harder to modify the codebase, I decided to freeze it. I'm going to merge only PRs fixing bugs with proper tests.

On the other hand, I will start a new cleanroom implementation. Existing tests will be reviewed and used as "test subjects". Also, I plan to collect real-world examples to use them also as "test subjects" in a separate repository.

In this process, I would like to work from the bottom to the top, focusing on getting the core right. I plan to keep a legacy compatibility layer, but the new API may differ from the current one to allow better maintenance and new features.

v0.3.9: Support for Struct in Map

Compare Source

v0.3.8: Several PRs merged

Compare Source

v0.3.7

Compare Source

Two PR merged to fix bugs. Thanks @​requilence, @​smgladkovskiy, @​vdemeester and @​luisdavim for your time!

arcalot/go-assert (go.arcalot.io/assert)

v1.8.0: : Improved Panic Assertions

Compare Source

This release adds more functions for asserting that a panic has occurred. They allow validating that the value in the panic has the expected value.

Pull Requests

• Added assertions to validate the value of a panic by @​jaredoconnell in https://github.com/arcalot/go-assert/pull/24

Full Changelog: arcalot/go-assert@v1.7.0...v1.8.0

golang/appengine (google.golang.org/appengine)

v2.0.6

Compare Source

What's Changed

• CI: Define minimal permissions to GitHub Workflows by @​diogoteles08 in https://github.com/golang/appengine/pull/325
• Create Security Policy by @​diogoteles08 in https://github.com/golang/appengine/pull/329
• Feature: Hash-pin sensitive workflow dependencies and enable dependabot for them by @​diogoteles08 in https://github.com/golang/appengine/pull/332
• Update go versions to 1.22 by @​kennethye1 in https://github.com/golang/appengine/pull/353

New Contributors

• @​diogoteles08 made their first contribution in https://github.com/golang/appengine/pull/325

Full Changelog: golang/appengine@v1.6.8...v2.0.6

v2.0.5

Compare Source

What's Changed

• [Automation] Update go-version matrix by @​chizhg in https://github.com/golang/appengine/pull/319
• Memcache item timestamps by @​Deleplace in https://github.com/golang/appengine/pull/323
• Replace deprecated command with environment file by @​jongwooo in https://github.com/golang/appengine/pull/318

New Contributors

• @​jongwooo made their first contribution in https://github.com/golang/appengine/pull/318

Full Changelog: golang/appengine@v2.0.4...v2.0.5

v2.0.4

Compare Source

What's Changed

• fix: regenerate all protos under new namespace by @​codyoss in https://github.com/golang/appengine/pull/314
• Upgrade python version being used by the ci workflow. by @​jinglundong in https://github.com/golang/appengine/pull/315
• Extend the deadline of a test context to fix a timeout issue. by @​jinglundong in https://github.com/golang/appengine/pull/316

New Contributors

• @​codyoss made their first contribution in https://github.com/golang/appengine/pull/314
• @​jinglundong made their first contribution in https://github.com/golang/appengine/pull/315

Full Changelog: golang/appengine@v2.0.3...v2.0.4

v2.0.3

Compare Source

What's Changed

• re-apply PR #​232 to v2 by @​zevdg in https://github.com/golang/appengine/pull/289
• re-apply PR #​235 to v2 by @​zevdg in https://github.com/golang/appengine/pull/290
• Add Go 1.18 and Go 1.19 to tested Go versions by @​jihuin in https://github.com/golang/appengine/pull/293
• remove golang.org/x/net dependency by @​thaJeztah in https://github.com/golang/appengine/pull/295
• Add Go 1.20 to tested Go versions by @​jihuin in https://github.com/golang/appengine/pull/303
• v2/README.md: fix typos by @​cuishuang in https://github.com/golang/appengine/pull/276
• README.md: fix typo by @​cuishuang in https://github.com/golang/appengine/pull/288
• all: fix some comments by @​cuishuang in https://github.com/golang/appengine/pull/296
• Install Python2 in base image for DevAppServer tests and change test matrix for 1.11 and 1.20.x by @​ludoch in https://github.com/golang/appengine/pull/304
• just a small refactor of api_test by @​zevdg in https://github.com/golang/appengine/pull/291
• Add v2/search by @​Deleplace in https://github.com/golang/appengine/pull/297
• build(deps): bump golang.org/x/text from 0.3.7 to 0.3.8 in /v2 by @​dependabot in https://github.com/golang/appengine/pull/299
• Run go get google.golang.org/appengine/v2/search by @​ludoch in https://github.com/golang/appengine/pull/305
• build(deps): bump golang.org/x/text from 0.3.6 to 0.3.8 by @​dependabot in https://github.com/golang/appengine/pull/300
• all: using the more elegant way to deal milliseconds and nanoseconds by @​cuishuang in https://github.com/golang/appengine/pull/292
• Revert "all: using the more elegant way to deal milliseconds and nanoseconds" by @​ludoch in https://github.com/golang/appengine/pull/306
• Add a ci-update-workflow GitHub Actions to update the go-version matrix by @​chizhg in https://github.com/golang/appengine/pull/307
• Fix the ci-update-workflow GitHub Actions by @​chizhg in https://github.com/golang/appengine/pull/308
• Update go-version matrix by @​chizhg in https://github.com/golang/appengine/pull/309

New Contributors

• @​jihuin made their first contribution in https://github.com/golang/appengine/pull/293
• @​thaJeztah made their first contribution in https://github.com/golang/appengine/pull/295
• @​cuishuang made their first contribution in https://github.com/golang/appengine/pull/276
• @​ludoch made their first contribution in https://github.com/golang/appengine/pull/304
• @​Deleplace made their first contribution in https://github.com/golang/appengine/pull/297
• @​dependabot made their first contribution in https://github.com/golang/appengine/pull/299
• @​chizhg made their first contribution in https://github.com/golang/appengine/pull/307

Full Changelog: golang/appengine@v2.0.2...v2.0.3

v2.0.2: Release App Engine golang SDK v2.0.2

Compare Source

What's Changed

• Add Go 1.16 to tested Go versions by @​lukasberger in https://github.com/golang/appengine/pull/255
• switch default logStream from stdout to stderr by @​zevdg in https://github.com/golang/appengine/pull/272
• Fix header name to associate log entry & trace by @​pokutuna in https://github.com/golang/appengine/pull/263
• refactor: pin setup-gcloud gh action to v0 by @​KaylaNguyen in https://github.com/golang/appengine/pull/274
• Fix golang/appengine CI by @​bsiegert in https://github.com/golang/appengine/pull/280
• run gofmt with go1.19 release candidate by @​zevdg in https://github.com/golang/appengine/pull/282
• respect GAE_ENV=localdev by @​zevdg in https://github.com/golang/appengine/pull/283
• prevent github from cancelling all test jobs when one fails by @​zevdg in https://github.com/golang/appengine/pull/285
• allow API calls without GAE context by @​zevdg in https://github.com/golang/appengine/pull/284
• Security Vulnerability Upgrading golang.org/x/text by @​ybocalandro in https://github.com/golang/appengine/pull/287

New Contributors

• @​pokutuna made their first contribution in https://github.com/golang/appengine/pull/263
• @​bsiegert made their first contribution in https://github.com/golang/appengine/pull/280
• @​ybocalandro made their first contribution in https://github.com/golang/appengine/pull/287

Full Changelog: golang/appengine@v2.0.1...v2.0.2

v2.0.1: Version 2.0.1

Compare Source

• delay: let user use unique function keys using delay.MustRegister
• aefix: fix v2/aefix to work with appengine/v2
• Clean up interfaces for legacy APIs that will be supported for Go 1.12+

v1.6.8

Compare Source

protocolbuffers/protobuf-go (google.golang.org/protobuf)

v1.33.0

Compare Source

This release contains one security fix:

• encoding/protojson: Unmarshal could enter an infinite loop when unmarshaling certain forms of invalid JSON. This condition can occur when unmarshaling into a message which contains a google.protobuf.Any value, or when the UnmarshalOptions.DiscardUnknown option is set. Unmarshal now correctly returns an error when handling these inputs. This is CVE-2024-24786.

v1.32.0

Compare Source

Full Changelog: protocolbuffers/protobuf-go@v1.31.0...v1.32.0

This release contains commit protocolbuffers/protobuf-go@bfcd647, which fixes a denial of service vulnerability by preventing a stack overflow through a default maximum recursion limit. See https://github.com/golang/protobuf/issues/1583 and https://github.com/golang/protobuf/issues/1584 for details.

go-yaml/yaml (gopkg.in/yaml.v2)

v3.0.1

Compare Source

v3.0.0

Compare Source

kubernetes/klog (k8s.io/klog/v2)

v2.120.1: Prepare klog release for Kubernetes v1.30 (Take 2)

Compare Source

What's Changed

• textlogger: allow caller to override stack unwinding by @​pohly in https://github.com/kubernetes/klog/pull/397

Full Changelog: kubernetes/klog@v2.120.0...v2.120.1

v2.120.0: Prepare klog release for Kubernetes v1.30 (Take 1)

Compare Source

What's Changed

• OWNERS: remove serathius, add mengjiao-liu, promote pohly by @​pohly in https://github.com/kubernetes/klog/pull/394
• docs: clarify relationship between different features by @​pohly in https://github.com/kubernetes/klog/pull/395
• Add SafePtr wrapper by @​kaisoz in https://github.com/kubernetes/klog/pull/393
• logr v1.4.1 + SetSlogLogger by @​pohly in https://github.com/kubernetes/klog/pull/396

New Contributors

• @​kaisoz made their first contribution in https://github.com/kubernetes/klog/pull/393

Full Changelog: kubernetes/klog@v2.110.1...v2.120.0

kubernetes-sigs/yaml (sigs.k8s.io/yaml)

v1.4.0

Compare Source

• Adds a goyaml.v2 subpackage containing a fork of gopkg.in/yaml.v2 at v2.4.0
• Adds a goyaml.v3 subpackage containing a fork of gopkg.in/yaml.v3 at v3.0.1
• Adds an Encoder#CompactSeqIndent() encoder option to sigs.k8.io/goyaml.v3 to allow opting into indentation compatible with gopkg.in/yaml.v2

---

Configuration

📅 Schedule: Branch creation - "before 4am on Monday" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[platform-engineering-bot]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: go.sum

Command failed: go get -d -t ./...
go: github.com/imdario/[email protected]: parsing go.mod:
	module declares its path as: dario.cat/mergo
	        but was required as: github.com/imdario/mergo

[webbnh]

Needs revision.

[webbnh]

The change to Mergo requires additional action: we either need to change the reference in the dependency (if we can) to dario.cat/mergo or we need to add a replace directive here:

replace github.com/imdario/mergo => github.com/imdario/mergo v0.3.16

[platform-engineering-bot]

Edited/Blocked Notification

Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.

You can manually request rebase by checking the rebase/retry box above.

⚠ Warning: custom changes will be lost.