build(deps): Bump the go group with 10 updates by dependabot[bot] · Pull Request #1558 · getsops/sops

dependabot · 2024-07-15T09:22:11Z

Bumps the go group with 10 updates:

Package	From	To
cloud.google.com/go/kms	`1.18.2`	`1.18.3`
github.com/aws/aws-sdk-go-v2	`1.30.1`	`1.30.3`
github.com/aws/aws-sdk-go-v2/config	`1.27.24`	`1.27.26`
github.com/aws/aws-sdk-go-v2/credentials	`1.17.24`	`1.17.26`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.17.5`	`1.17.7`
github.com/aws/aws-sdk-go-v2/service/kms	`1.35.1`	`1.35.3`
github.com/aws/aws-sdk-go-v2/service/s3	`1.58.0`	`1.58.2`
github.com/aws/aws-sdk-go-v2/service/sts	`1.30.1`	`1.30.3`
google.golang.org/api	`0.187.0`	`0.188.0`
google.golang.org/genproto/googleapis/rpc	`0.0.0-20240624140628-dc46fd24d27d`	`0.0.0-20240708141625-4ad9e859172b`

Updates cloud.google.com/go/kms from 1.18.2 to 1.18.3

Release notes

Sourced from cloud.google.com/go/kms's releases.

kms: v1.18.3

1.18.3 (2024-07-10)

Bug Fixes

kms: Bump google.golang.org/grpc@v1.64.1 (8ecc4e9)

Commits

dbd3f0a chore: release main (#10490)
74b07fd chore: run goimports (#10534)
3b9a830 feat(compute/metadata): add sys check for windows OnGCE (#10521)
f4cc536 feat(containeranalysis): add GetVulnerabilityOccurrencesSummary RPC (#10533)
8ecc4e9 chore: bump deps (#10529)
11d7272 chore(privilegedaccessmanager): add config to generate apiv1 (#10530)
9e5707a chore(main): release auth/oauth2adapt 0.2.3 (#10523)
c3e2618 chore(storage): remove x-goog-api-client header merging from invoke (#10514)
fd16a17 feat(bigtable): add column family type to FamilyInfo in TableInfo (#10520)
f46b747 feat(aiplatform): enable rest_numeric_enums for aiplatform v1 and v1beta1 (#1...
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.30.1 to 1.30.3

Commits

0599931 Release 2024-07-10.2
ca2a30e Regenerated Clients
e2dff5f temporarily re-add jmespath dependency (#2712)
383fd26 Release 2024-07-10
4a055f9 Regenerated Clients
e345795 Update endpoints model
52a10ac Update API model
adab0de remove unused jmespath dependency from main module (#2707)
0e07cc8 Release 2024-07-09
5e35834 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.27.24 to 1.27.26

Commits

0599931 Release 2024-07-10.2
ca2a30e Regenerated Clients
e2dff5f temporarily re-add jmespath dependency (#2712)
383fd26 Release 2024-07-10
4a055f9 Regenerated Clients
e345795 Update endpoints model
52a10ac Update API model
adab0de remove unused jmespath dependency from main module (#2707)
0e07cc8 Release 2024-07-09
5e35834 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.24 to 1.17.26

Commits

0599931 Release 2024-07-10.2
ca2a30e Regenerated Clients
e2dff5f temporarily re-add jmespath dependency (#2712)
383fd26 Release 2024-07-10
4a055f9 Regenerated Clients
e345795 Update endpoints model
52a10ac Update API model
adab0de remove unused jmespath dependency from main module (#2707)
0e07cc8 Release 2024-07-09
5e35834 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.5 to 1.17.7

Changelog

Sourced from github.com/aws/aws-sdk-go-v2/feature/s3/manager's changelog.

Release (2023-03-21)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging: v1.13.0

Feature: Amazon Chime SDK messaging customers can now manage streaming configuration for messaging data for archival and analysis.

github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.1.0

Feature: GA Release of AWS Clean Rooms, Added Tagging Functionality

github.com/aws/aws-sdk-go-v2/service/ec2: v1.91.0

Feature: This release adds support for AWS Network Firewall, AWS PrivateLink, and Gateway Load Balancers to Amazon VPC Reachability Analyzer, and it makes the path destination optional as long as a destination address in the filter at source is provided.

github.com/aws/aws-sdk-go-v2/service/internal/s3shared: v1.14.0

Feature: port v1 sdk 100-continue http header customization for s3 PutObject/UploadPart request and enable user config

github.com/aws/aws-sdk-go-v2/service/iotsitewise: v1.28.0

Feature: Provide support for tagging of data streams and enabling tag based authorization for property alias

github.com/aws/aws-sdk-go-v2/service/mgn: v1.18.0

Feature: This release introduces the Import and export feature and expansion of the post-launch actions

github.com/aws/aws-sdk-go-v2/service/s3: v1.31.0

Feature: port v1 sdk 100-continue http header customization for s3 PutObject/UploadPart request and enable user config

Release (2023-03-20)

Module Highlights

github.com/aws/aws-sdk-go-v2/service/applicationautoscaling: v1.19.0

Feature: With this release customers can now tag their Application Auto Scaling registered targets with key-value pairs and manage IAM permissions for all the tagged resources centrally.

github.com/aws/aws-sdk-go-v2/service/neptune: v1.20.0

Feature: This release makes following few changes. db-cluster-identifier is now a required parameter of create-db-instance. describe-db-cluster will now return PendingModifiedValues and GlobalClusterIdentifier fields in the response.

github.com/aws/aws-sdk-go-v2/service/s3outposts: v1.16.0

Feature: S3 On Outposts added support for endpoint status, and a failed endpoint reason, if any

github.com/aws/aws-sdk-go-v2/service/workdocs: v1.14.0

Feature: This release adds a new API, SearchResources, which enable users to search through metadata and content of folders, documents, document versions and comments in a WorkDocs site.

Release (2023-03-17)

Module Highlights

github.com/aws/aws-sdk-go-v2/service/billingconductor: v1.6.0

Feature: This release adds a new filter to ListAccountAssociations API and a new filter to ListBillingGroups API.

github.com/aws/aws-sdk-go-v2/service/configservice: v1.30.0

Feature: This release adds resourceType enums for types released from October 2022 through February 2023.

github.com/aws/aws-sdk-go-v2/service/databasemigrationservice: v1.25.0

Feature: S3 setting to create AWS Glue Data Catalog. Oracle setting to control conversion of timestamp column. Support for Kafka SASL Plain authentication. Setting to map boolean from PostgreSQL to Redshift. SQL Server settings to force lob lookup on inline LOBs and to control access of database logs.

Release (2023-03-16)

General Highlights

Dependency Update: Updated to the latest SDK module versions

Module Highlights

github.com/aws/aws-sdk-go-v2/config: v1.18.18

... (truncated)

Commits

390cf19 Release 2023-03-21
c37c72a Regenerated Clients
d1e5193 Update endpoints model
2506101 Update API model
c93b5cc Merge pull request #2051 from aws/add100ContinueCustomization
c01aac6 Keep one changelog for PR
3780faa Keep one changelog for PR
b94b5b7 Merge remote-tracking branch 'origin/add100ContinueCustomization' into add100...
6174ff2 Change some variable name and use operation shape id to represent operation s...
83491fc add changelog to last commit
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.35.1 to 1.35.3

Commits

728f21f Release 2024-05-16
3dbd5ca Regenerated Clients
c87adfd Update endpoints model
e209d02 Update API model
ef4a9a0 internal: capture user-agent in metrics (#2644)
c964dbd Release 2024-05-15
ce84395 Regenerated Clients
8de9119 Update API model
05fcf66 internal: true up internal metrics collection for post-SRA middleware (#2642)
1148427 reformat signer/v4 package doc (#2640)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.58.0 to 1.58.2

Commits

0599931 Release 2024-07-10.2
ca2a30e Regenerated Clients
e2dff5f temporarily re-add jmespath dependency (#2712)
383fd26 Release 2024-07-10
4a055f9 Regenerated Clients
e345795 Update endpoints model
52a10ac Update API model
adab0de remove unused jmespath dependency from main module (#2707)
0e07cc8 Release 2024-07-09
5e35834 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.30.1 to 1.30.3

Commits

0599931 Release 2024-07-10.2
ca2a30e Regenerated Clients
e2dff5f temporarily re-add jmespath dependency (#2712)
383fd26 Release 2024-07-10
4a055f9 Regenerated Clients
e345795 Update endpoints model
52a10ac Update API model
adab0de remove unused jmespath dependency from main module (#2707)
0e07cc8 Release 2024-07-09
5e35834 Regenerated Clients
Additional commits viewable in compare view

Updates google.golang.org/api from 0.187.0 to 0.188.0

Release notes

Sourced from google.golang.org/api's releases.

v0.188.0

0.188.0 (2024-07-09)

Features

all: Auto-regenerate discovery clients (#2665) (e84fa65)

all: Auto-regenerate discovery clients (#2669) (6df3749)

all: Auto-regenerate discovery clients (#2671) (0d54a85)

all: Auto-regenerate discovery clients (#2673) (88240e3)

all: Auto-regenerate discovery clients (#2674) (d465cec)

all: Auto-regenerate discovery clients (#2675) (a9177bd)

all: Auto-regenerate discovery clients (#2677) (5dd2fb2)

all: Auto-regenerate discovery clients (#2678) (d17f6be)

Bug Fixes

Allow ForceSendFields to work for map types (#2670) (40b5113)

Check []bytes > 0 instead of nil (#2667) (711eb91), refs #2647

Changelog

Sourced from google.golang.org/api's changelog.

0.188.0 (2024-07-09)

Features

all: Auto-regenerate discovery clients (#2665) (e84fa65)

all: Auto-regenerate discovery clients (#2669) (6df3749)

all: Auto-regenerate discovery clients (#2671) (0d54a85)

all: Auto-regenerate discovery clients (#2673) (88240e3)

all: Auto-regenerate discovery clients (#2674) (d465cec)

all: Auto-regenerate discovery clients (#2675) (a9177bd)

all: Auto-regenerate discovery clients (#2677) (5dd2fb2)

all: Auto-regenerate discovery clients (#2678) (d17f6be)

Bug Fixes

Allow ForceSendFields to work for map types (#2670) (40b5113)

Check []bytes > 0 instead of nil (#2667) (711eb91), refs #2647

Commits

9957790 chore(main): release 0.188.0 (#2666)
7021e3e chore: bump some deps (#2679)
d17f6be feat(all): auto-regenerate discovery clients (#2678)
40b5113 fix: allow ForceSendFields to work for map types (#2670)
5cdcbe0 chore(all): update all (#2676)
5dd2fb2 feat(all): auto-regenerate discovery clients (#2677)
a9177bd feat(all): auto-regenerate discovery clients (#2675)
d465cec feat(all): auto-regenerate discovery clients (#2674)
88240e3 feat(all): auto-regenerate discovery clients (#2673)
0d54a85 feat(all): auto-regenerate discovery clients (#2671)
Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20240624140628-dc46fd24d27d to 0.0.0-20240708141625-4ad9e859172b

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go group with 10 updates: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go) | `1.18.2` | `1.18.3` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.30.1` | `1.30.3` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.27.24` | `1.27.26` | | [github.com/aws/aws-sdk-go-v2/credentials](https://github.com/aws/aws-sdk-go-v2) | `1.17.24` | `1.17.26` | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.5` | `1.17.7` | | [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.35.1` | `1.35.3` | | [github.com/aws/aws-sdk-go-v2/service/s3](https://github.com/aws/aws-sdk-go-v2) | `1.58.0` | `1.58.2` | | [github.com/aws/aws-sdk-go-v2/service/sts](https://github.com/aws/aws-sdk-go-v2) | `1.30.1` | `1.30.3` | | [google.golang.org/api](https://github.com/googleapis/google-api-go-client) | `0.187.0` | `0.188.0` | | [google.golang.org/genproto/googleapis/rpc](https://github.com/googleapis/go-genproto) | `0.0.0-20240624140628-dc46fd24d27d` | `0.0.0-20240708141625-4ad9e859172b` | Updates `cloud.google.com/go/kms` from 1.18.2 to 1.18.3 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md) - [Commits](googleapis/google-cloud-go@kms/v1.18.2...kms/v1.18.3) Updates `github.com/aws/aws-sdk-go-v2` from 1.30.1 to 1.30.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.30.1...v1.30.3) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.24 to 1.27.26 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.27.24...config/v1.27.26) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.24 to 1.17.26 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.17.24...credentials/v1.17.26) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.5 to 1.17.7 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/v1.17.7/CHANGELOG.md) - [Commits](aws/aws-sdk-go-v2@v1.17.5...v1.17.7) Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.35.1 to 1.35.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/fms/v1.35.1...service/ivs/v1.35.3) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.58.0 to 1.58.2 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.58.0...service/s3/v1.58.2) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.30.1 to 1.30.3 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.30.1...v1.30.3) Updates `google.golang.org/api` from 0.187.0 to 0.188.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.187.0...v0.188.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240624140628-dc46fd24d27d to 0.0.0-20240708141625-4ad9e859172b - [Commits](https://github.com/googleapis/go-genproto/commits) --- updated-dependencies: - dependency-name: cloud.google.com/go/kms dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/kms dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [getsops/sops](https://github.com/getsops/sops) | patch | `v3.9.0` -> `v3.9.1` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>getsops/sops (getsops/sops)</summary> ### [`v3.9.1`](https://github.com/getsops/sops/releases/tag/v3.9.1) [Compare Source](getsops/sops@v3.9.0...v3.9.1) #### Installation To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release. For instance, if you are using Linux on an AMD64 architecture: ```shell ### Download the binary curl -LO https://github.com/getsops/sops/releases/download/v3.9.1/sops-v3.9.1.linux.amd64 ### Move the binary in to your PATH mv sops-v3.9.1.linux.amd64 /usr/local/bin/sops ### Make the binary executable chmod +x /usr/local/bin/sops ``` ##### Verify checksums file signature The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ### Download the checksums file, certificate and signature curl -LO https://github.com/getsops/sops/releases/download/v3.9.1/sops-v3.9.1.checksums.txt curl -LO https://github.com/getsops/sops/releases/download/v3.9.1/sops-v3.9.1.checksums.pem curl -LO https://github.com/getsops/sops/releases/download/v3.9.1/sops-v3.9.1.checksums.sig ### Verify the checksums file cosign verify-blob sops-v3.9.1.checksums.txt \ --certificate sops-v3.9.1.checksums.pem \ --signature sops-v3.9.1.checksums.sig \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature: ```shell ### Verify the binary using the checksums file sha256sum -c sops-v3.9.1.checksums.txt --ignore-missing ``` ##### Verify artifact provenance The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.9.1.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool: ```shell ### Download the metadata file curl -LO https://github.com/getsops/sops/releases/download/v3.9.1/sops-v3.9.1.intoto.jsonl ### Verify the provenance of the artifact slsa-verifier verify-artifact <artifact> \ --provenance-path sops-v3.9.1.intoto.jsonl \ --source-uri github.com/getsops/sops \ --source-tag v3.9.1 ``` #### Container Images The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies. These container images are available for the following architectures: `linux/amd64` and `linux/arm64`. ##### GitHub Container Registry - `ghcr.io/getsops/sops:v3.9.1` - `ghcr.io/getsops/sops:v3.9.1-alpine` ##### Quay.io - `quay.io/getsops/sops:v3.9.1` - `quay.io/getsops/sops:v3.9.1-alpine` ##### Verify container image signature The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command: ```shell cosign verify ghcr.io/getsops/sops:v3.9.1 \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ -o text ``` ##### Verify container image provenance The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers). #### Software Bill of Materials The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`. #### What's Changed - Explicitly mark goreleaser's version, to avoid confusion with the Go version by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1548 - build(deps): Bump the go group with 8 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1550 - build(deps): Bump github/codeql-action from 3.25.10 to 3.25.11 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1551 - Fix the URL used for determining the latest SOPS version by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1553 - build(deps): Bump the ci group with 4 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1555 - build(deps): Bump the go group with 11 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1554 - build(deps): Bump the go group with 10 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1558 - build(deps): Bump the ci group with 3 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1559 - build(deps): Bump the go group with 5 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1562 - build(deps): Bump the ci group across 1 directory with 5 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1564 - build(deps): Bump the go group with 4 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1565 - build(deps): Bump github/codeql-action from 3.25.13 to 3.25.15 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1566 - build(deps): Bump github.com/docker/docker from 27.0.1+incompatible to 27.1.0+incompatible by [@dependabot](https://github.com/dependabot) in getsops/sops#1568 - build(deps): Bump the go group with 5 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1575 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1574 - build(deps): Bump github.com/docker/docker from 27.1.0+incompatible to 27.1.1+incompatible by [@dependabot](https://github.com/dependabot) in getsops/sops#1581 - build(deps): Bump the ci group with 3 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1584 - Note on the name of the configuration file by [@ErraticMaker](https://github.com/ErraticMaker) in getsops/sops#1569 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1586 - build(deps): Bump the go group across 1 directory with 15 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1589 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1590 - build(deps): Bump the go group with 7 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1593 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1592 - tests: ignore env var SOPS_AGE_KEY_FILE by [@duthils](https://github.com/duthils) in getsops/sops#1595 - build(deps): Bump the go group with 12 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1602 - build(deps): Bump github.com/opencontainers/runc from 1.1.13 to 1.1.14 by [@dependabot](https://github.com/dependabot) in getsops/sops#1603 - updatekeys subcommand: actually use option `--shamir-secret-sharing-threshold` by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1608 - Added example of having age recipients in .sops.yaml by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1607 - GitHub Actions linter for Rust formatting by [@duthils](https://github.com/duthils) in getsops/sops#1604 - github actions: set rust version globally by [@duthils](https://github.com/duthils) in getsops/sops#1612 - Fix `--config` being ignored by `loadConfig` by [@lopter](https://github.com/lopter) in getsops/sops#1613 - build(deps): Bump the go group with 4 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1618 - build(deps): Bump github/codeql-action from 3.26.6 to 3.26.7 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1619 - unit tests: add coverage for unset by [@duthils](https://github.com/duthils) in getsops/sops#1617 - sops_test: homogenize use of asserts by [@duthils](https://github.com/duthils) in getsops/sops#1622 - sops_test: add more tests on errors by [@duthils](https://github.com/duthils) in getsops/sops#1624 - Add 'check' task to CI that makes sure everything is green by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1621 - build(deps): Bump the go group with 10 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1629 - build(deps): Bump github/codeql-action from 3.26.7 to 3.26.8 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1628 - refactor: specify missing file in error message by [@t3hmrman](https://github.com/t3hmrman) in getsops/sops#1625 - CI: Build with Go 1.22 and 1.23; update Vault to 1.14 by [@reneleonhardt](https://github.com/reneleonhardt) in getsops/sops#1531 - Allow edit subcommand to create files by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1596 - Build release with Go 1.22.x by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1615 - GHA: fix checkout action version by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1630 - Do not encrypt if a key group is empty, or there are no key groups by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1600 - updatekeys subcommand: show changes in shamir_threshold by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1609 - Dependabot: fix config for Docker, add config for Rust/Cargo by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1632 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1634 - build(deps): Bump the go group with 7 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1635 - Add Cargo.lock for better reproducability of functional tests by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1637 - build(deps): Bump the go group with 7 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1639 - build(deps): Bump the rust group in /functional-tests with 5 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1638 - Update all go deps with 'go get -t -u ./...' by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1640 - Do not ignore errors when trying to parse a config file by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1614 - Release 3.9.1 by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1642 #### New Contributors - [@ErraticMaker](https://github.com/ErraticMaker) made their first contribution in getsops/sops#1569 - [@lopter](https://github.com/lopter) made their first contribution in getsops/sops#1613 - [@t3hmrman](https://github.com/t3hmrman) made their first contribution in getsops/sops#1625 - [@reneleonhardt](https://github.com/reneleonhardt) made their first contribution in getsops/sops#1531 **Full Changelog**: getsops/sops@v3.9.0...v3.9.1 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

dependabot bot added the dependencies Pull requests that update a dependency file label Jul 15, 2024

felixfontein approved these changes Jul 15, 2024

View reviewed changes

felixfontein merged commit 18f4582 into main Jul 15, 2024

felixfontein deleted the dependabot/go_modules/go-2ad88ccd0d branch July 15, 2024 12:18

BrewTestBot mentioned this pull request Oct 4, 2024

sops 3.9.1 Homebrew/homebrew-core#192798

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): Bump the go group with 10 updates#1558

build(deps): Bump the go group with 10 updates#1558
felixfontein merged 1 commit intomainfrom
dependabot/go_modules/go-2ad88ccd0d

dependabot bot commented on behalf of github Jul 15, 2024

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments

Conversation

dependabot bot commented on behalf of github Jul 15, 2024

kms: v1.18.3

1.18.3 (2024-07-10)

Bug Fixes

Release (2023-03-21)

General Highlights

Module Highlights

Release (2023-03-20)

Module Highlights

Release (2023-03-17)

Module Highlights

Release (2023-03-16)

General Highlights

Module Highlights

v0.188.0

0.188.0 (2024-07-09)

Features

Bug Fixes

0.188.0 (2024-07-09)

Features

Bug Fixes

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments