build(deps): Bump the go group across 1 directory with 15 updates by dependabot[bot] · Pull Request #1589 · getsops/sops

dependabot · 2024-08-26T09:11:01Z

Bumps the go group with 7 updates in the / directory:

Package	From	To
cloud.google.com/go/kms	`1.18.4`	`1.19.0`
github.com/Azure/azure-sdk-for-go/sdk/azcore	`1.13.0`	`1.14.0`
github.com/aws/aws-sdk-go-v2	`1.30.3`	`1.30.4`
github.com/aws/aws-sdk-go-v2/config	`1.27.27`	`1.27.30`
github.com/aws/aws-sdk-go-v2/feature/s3/manager	`1.17.10`	`1.17.14`
github.com/aws/aws-sdk-go-v2/service/kms	`1.35.3`	`1.35.5`
github.com/ory/dockertest/v3	`3.10.0`	`3.11.0`

Updates cloud.google.com/go/kms from 1.18.4 to 1.19.0

Release notes

Sourced from cloud.google.com/go/kms's releases.

functions: v1.19.0

1.19.0 (2024-08-20)

Features

functions: Add support for Go 1.23 iterators (84461c0)

kms: v1.19.0

1.19.0 (2024-08-20)

Features

kms: Add support for Go 1.23 iterators (84461c0)

datastore: v1.19.0

1.19.0 (2024-08-22)

Features

datastore: Reference new protos (#10724) (d8887df)

Changelog

Sourced from cloud.google.com/go/kms's changelog.

1.19.0 (2023-05-30)

Features

documentai: Update all direct dependencies (b340d03)

1.18.1 (2023-05-08)

Bug Fixes

documentai: Update grpc to v1.55.0 (1147ce0)

1.18.0 (2023-03-22)

Features

documentai: Add ImportProcessorVersion in v1beta3 (c967961)

1.17.0 (2023-03-15)

Features

documentai: Added hints.language_hints field in OcrConfig (#7522) (b2c40c3)

1.16.0 (2023-02-22)

Features

documentai: ROLLBACK (#7439) (932ddc8)

1.15.0 (2023-02-14)

⚠ BREAKING CHANGES

documentai: The TrainProcessorVersion parent was incorrectly annotated.

Features

documentai: Add REST client (06a54a1)

documentai: Added advanced_ocr_options field in OcrConfig (45c70e3)

documentai: Added EvaluationReference to evaluation.proto (#7290) (4623db8)

documentai: Added field_mask field in DocumentOutputConfig.GcsOutputConfig in document_io.proto (2a0b1ae)

documentai: Added font_family to document.proto feat: added ImageQualityScores message to document.proto feat: added PropertyMetadata and EntityTypeMetadata to document_schema.proto (9c5d6c8)

documentai: Added TrainProcessorVersion, EvaluateProcessorVersion, GetEvaluation, and ListEvaluations v1beta3 APIs feat: added evaluation.proto feat: added document_schema field in ProcessorVersion processor.proto feat: added image_quality_scores field in Document.Page in document.proto feat: added font_family field in Document.Style in document.proto (ac0c5c2)

... (truncated)

Commits

f5833e6 chore: release main (#10690)
6692abb chore(all): update deps (#10705)
0130d06 chore(datastore): add owlbot config for protos (#10708)
e265371 feat(apihub): new clients (#10713)
84461c0 docs(batch): clarify tasks success criteria for background runnable (#10702)
4c519e3 fix(spanner): json null handling (#10660)
95ae207 chore(main): release pubsub 1.42.0 (#10656)
bbd3366 feat(pubsub): add opentelemetry tracing support (#10709)
106174a chore(apihub): add config to generate apiv1 (#10701)
2b7a912 chore(main): release auth 0.9.0 (#10693)
Additional commits viewable in compare view

Updates github.com/Azure/azure-sdk-for-go/sdk/azcore from 1.13.0 to 1.14.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azcore's releases.

sdk/azcore/v1.14.0

1.14.0 (2024-08-07)

Features Added

Added field Attributes to runtime.StartSpanOptions to simplify creating spans with attributes.

Other Changes

Include the HTTP verb and URL in log.EventRetryPolicy log entries so it's clear which operation is being retried.

Commits

0495c20 Prep azcore 1.14.0 for release (#23293)
217edee fix(generator tool): filter tsp-client diagnostics log (#23292)
023c88f Increment package version after release of azidentity (#23290)
17f3361 Sync eng/common directory with azure-sdk-tools for PR 8760 (#23271)
f5f3234 bump proxy to one with an audit log and more correct locking (#23288)
d707091 Prepare azidentity v1.8.0-beta.2 for release (#23289)
84d213c NewManagedIdentityCredential returns an error for unsupported ID options (#23...
ea67e9c azcontainerregistry: move method to function (#23270)
40dad0a fix (#23287)
a368082 fix generator tool: ExecuteGoGenerate func (#23286)
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2 from 1.30.3 to 1.30.4

Commits

1d44177 Release 2024-08-15
bab4916 Regenerated Clients
2d4ecf5 Update endpoints model
df4f4e1 Update API model
51ca5b5 bump smithy-go and go version (#2750)
39ddd61 Release 2024-08-14
ffaf282 Regenerated Clients
6beafa8 Update API model
57f6f2d Release 2024-08-13
cdeb8a6 Regenerated Clients
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/config from 1.27.27 to 1.27.30

Commits

87cea8b Release 2024-08-23
93f8d22 Regenerated Clients
bd44016 Update API model
097b04b Merge pull request #2761 from aws/fix-dont-fail-test-if-credentials-set
c10d543 Don't fail credentials unit tests if credentials are found on a file
d1d210d Release 2024-08-22
afb0408 Regenerated Clients
05f4492 Update partitions file
600651a Update endpoints model
ebaae40 Update API model
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/credentials from 1.17.27 to 1.17.29

Commits

d1d210d Release 2024-08-22
afb0408 Regenerated Clients
05f4492 Update partitions file
600651a Update endpoints model
ebaae40 Update API model
38fe812 Release 2024-08-21
b504211 Regenerated Clients
02f3045 Update endpoints model
f7d2cf6 Update API model
4d36126 Release 2024-08-20
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/feature/s3/manager from 1.17.10 to 1.17.14

Commits

c964dbd Release 2024-05-15
ce84395 Regenerated Clients
8de9119 Update API model
05fcf66 internal: true up internal metrics collection for post-SRA middleware (#2642)
1148427 reformat signer/v4 package doc (#2640)
b238d3f Release 2024-05-14
85f8268 Regenerated Clients
ebaee4c Update endpoints model
593b966 Update API model
bfb02f0 Merge customizations for S3
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/kms from 1.35.3 to 1.35.5

Commits

f2706c8 Release 2023-12-08
1dac0c9 Regenerated Clients
cbd9216 Update API model
c7357bb fix: reinstate presence of retryer when functional opts run but still respect...
c5c34b3 fix: translation of ini service sections into shared config (#2416)
b3c7fbf update express cache key (#2414)
9b90af4 fix: add non-vhostable buckets to path when using legacy endpoint resolver (#...
0d643a8 Release 2023-12-07
e38b534 Regenerated Clients
f394daf Update SDK's smithy-go dependency to v1.19.0
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/s3 from 1.58.3 to 1.60.1

Commits

d1d210d Release 2024-08-22
afb0408 Regenerated Clients
05f4492 Update partitions file
600651a Update endpoints model
ebaae40 Update API model
38fe812 Release 2024-08-21
b504211 Regenerated Clients
02f3045 Update endpoints model
f7d2cf6 Update API model
4d36126 Release 2024-08-20
Additional commits viewable in compare view

Updates github.com/aws/aws-sdk-go-v2/service/sts from 1.30.3 to 1.30.5

Commits

89a5b69 Release 2023-02-22
c863429 Regenerated Clients
aa8a947 Update API model
e845552 Merge pull request #2037 from aws/fix-struct-errorcode
cbeebab cl
5c057fd fix: prevent nil pointer deref on struct ErrorCode method
0f8b6e7 Release 2023-02-21
e5cb2ee Regenerated Clients
6120ee6 Update endpoints model
42acd6a Update API model
Additional commits viewable in compare view

Updates github.com/ory/dockertest/v3 from 3.10.0 to 3.11.0

Release notes

Sourced from github.com/ory/dockertest/v3's releases.

v3.11.0

What's Changed

chore(deps): bump github.com/opencontainers/runc from 1.1.5 to 1.1.6 by @dependabot in ory/dockertest#435

chore(deps): bump github.com/Microsoft/go-winio from 0.6.0 to 0.6.1 by @dependabot in ory/dockertest#437

chore(deps): bump github.com/lib/pq from 0.0.0-20180327071824-d34b9ff171c2 to 1.10.8 by @dependabot in ory/dockertest#438

chore(deps): bump github.com/docker/docker from 20.10.7+incompatible to 20.10.24+incompatible by @dependabot in ory/dockertest#426

chore(deps): bump actions/checkout from 2 to 3 by @dependabot in ory/dockertest#427

chore(deps): bump github.com/sirupsen/logrus from 1.9.0 to 1.9.2 by @dependabot in ory/dockertest#450

chore(deps): bump github.com/containerd/continuity from 0.3.0 to 0.4.1 by @dependabot in ory/dockertest#451

chore(deps): bump github.com/stretchr/testify from 1.8.0 to 1.8.3 by @dependabot in ory/dockertest#449

chore(deps): bump github.com/opencontainers/runc from 1.1.6 to 1.1.7 by @dependabot in ory/dockertest#442

chore(deps): bump golang.org/x/sys from 0.7.0 to 0.8.0 by @dependabot in ory/dockertest#445

chore(deps): bump github.com/moby/term from 0.0.0-20201216013528-df9cb8a40635 to 0.5.0 by @dependabot in ory/dockertest#446

chore(deps): bump github.com/docker/cli from 20.10.17+incompatible to 24.0.1+incompatible by @dependabot in ory/dockertest#448

chore: bump dependencies and fix some lint by @alnr in ory/dockertest#499

chore(deps): bump golang.org/x/sys from 0.19.0 to 0.21.0 by @dependabot in ory/dockertest#501

chore(deps): bump actions/checkout from 2 to 4 by @dependabot in ory/dockertest#475

feat: fall back to podman if available by @SoMuchForSubtlety in ory/dockertest#452

test: refactor asserts by @alexandear in ory/dockertest#497

use defer instead of os.Exit(m.Run()) by @pmenglund in ory/dockertest#493

docs: remove outdated dep install instruction by @alexandear in ory/dockertest#505

chore: remove direct dependency on gotest.tools/v3 by @alexandear in ory/dockertest#504

chore: replace deprecated ioutil.TempDir with os.MkdirTemp by @alexandear in ory/dockertest#506

chore(deps): bump github.com/opencontainers/runc from 1.1.12 to 1.1.13 by @dependabot in ory/dockertest#509

move tests to dockertest_test package by @siraj-mx51 in ory/dockertest#490

chore(deps): bump github.com/opencontainers/image-spec from 1.0.2 to 1.1.0 by @dependabot in ory/dockertest#510

chore(deps): bump actions/setup-node from 2.pre.beta to 4.0.2 by @dependabot in ory/dockertest#503

chore(deps): bump actions/setup-go from 4 to 5 by @dependabot in ory/dockertest#508

chore(deps): bump actions/stale from 4 to 9 by @dependabot in ory/dockertest#507

feat: introduce cve scanners by @Demonsthere in ory/dockertest#500

chore: update docker to v27.1.1 by @adamwalach in ory/dockertest#522

New Contributors

@alnr made their first contribution in ory/dockertest#499

@SoMuchForSubtlety made their first contribution in ory/dockertest#452

@siraj-mx51 made their first contribution in ory/dockertest#490

@Demonsthere made their first contribution in ory/dockertest#500

@adamwalach made their first contribution in ory/dockertest#522

Full Changelog: ory/dockertest@v3.10.0...v3.11.0

Commits

6110e9a chore: update docker to v27.1.1 (#522)
d229e74 feat: introduce cve scanners (#500)
1b46b29 chore(deps): bump actions/stale from 4 to 9 (#507)
44496a3 chore(deps): bump actions/setup-go from 4 to 5 (#508)
1aa8cd7 chore(deps): bump actions/setup-node from 2.pre.beta to 4.0.2 (#503)
0c91bda chore(deps): bump github.com/opencontainers/image-spec (#510)
3328cf9 move tests to dockertest_test package (#490)
05f6347 chore(deps): bump github.com/opencontainers/runc from 1.1.12 to 1.1.13 (#509)
6539ccd chore: replace deprecated ioutil.TempDir with os.MkdirTemp (#506)
84015fd chore: remove direct dependency on gotest.tools/v3 (#504)
Additional commits viewable in compare view

Updates golang.org/x/net from 0.27.0 to 0.28.0

Commits

4542a42 go.mod: update golang.org/x dependencies
765c7e8 xsrftoken: create no padding base64 string by RawURLEncoding
032e4e4 LICENSE: update per Google Legal
See full diff in compare view

Updates golang.org/x/sys from 0.23.0 to 0.24.0

Commits

914deed unix: add missing ETHTOOL_FLAG_ constants
4c7077e windows: add enums for IpAdapterUnicastAddress
29298aa windows: delete TestGetKeyboardLayout
See full diff in compare view

Updates golang.org/x/term from 0.22.0 to 0.23.0

Commits

d598954 go.mod: update golang.org/x dependencies
d4346f0 LICENSE: update per Google Legal
See full diff in compare view

Updates google.golang.org/api from 0.190.0 to 0.193.0

Release notes

Sourced from google.golang.org/api's releases.

v0.193.0

0.193.0 (2024-08-20)

Features

all: Auto-regenerate discovery clients (#2733) (4118ec2)

all: Auto-regenerate discovery clients (#2736) (6b81f1a)

all: Auto-regenerate discovery clients (#2737) (a2308c1)

all: Auto-regenerate discovery clients (#2738) (7296c72)

all: Auto-regenerate discovery clients (#2739) (9d915ff)

all: Auto-regenerate discovery clients (#2742) (cb825c8)

v0.192.0

0.192.0 (2024-08-13)

Features

all: Auto-regenerate discovery clients (#2725) (b2c7c05)

all: Auto-regenerate discovery clients (#2727) (36e3fa7)

all: Auto-regenerate discovery clients (#2728) (97c7f2e)

all: Auto-regenerate discovery clients (#2729) (a0ed1f3)

Move storage, bigquery, and compute to new auth lib (#2730) (2b4e9f4)

Bug Fixes

internal/cba: Update credsNewAuth path to use nil oauth2 client (#2731) (b457582)

v0.191.0

0.191.0 (2024-08-07)

Features

all: Auto-regenerate discovery clients (#2719) (a5ddb40)

all: Auto-regenerate discovery clients (#2722) (0d15913)

all: Auto-regenerate discovery clients (#2724) (918e3d2)

Bug Fixes

Reference gax import in storage libs (#2720) (fffff7f)

transport: Disable automatic universe domain check (#2717) (f5b0bb5)

Changelog

Sourced from google.golang.org/api's changelog.

0.193.0 (2024-08-20)

Features

all: Auto-regenerate discovery clients (#2733) (4118ec2)

all: Auto-regenerate discovery clients (#2736) (6b81f1a)

all: Auto-regenerate discovery clients (#2737) (a2308c1)

all: Auto-regenerate discovery clients (#2738) (7296c72)

all: Auto-regenerate discovery clients (#2739) (9d915ff)

all: Auto-regenerate discovery clients (#2742) (cb825c8)

0.192.0 (2024-08-13)

Features

all: Auto-regenerate discovery clients (#2725) (b2c7c05)

all: Auto-regenerate discovery clients (#2727) (36e3fa7)

all: Auto-regenerate discovery clients (#2728) (97c7f2e)

all: Auto-regenerate discovery clients (#2729) (a0ed1f3)

Move storage, bigquery, and compute to new auth lib (#2730) (2b4e9f4)

Bug Fixes

internal/cba: Update credsNewAuth path to use nil oauth2 client (#2731) (b457582)

0.191.0 (2024-08-07)

Features

all: Auto-regenerate discovery clients (#2719) (a5ddb40)

all: Auto-regenerate discovery clients (#2722) (0d15913)

all: Auto-regenerate discovery clients (#2724) (918e3d2)

Bug Fixes

Reference gax import in storage libs (#2720) (fffff7f)

transport: Disable automatic universe domain check (#2717) (f5b0bb5)

Commits

d994b67 chore(main): release 0.193.0 (#2734)
254bbe1 chore(all): update all (#2740)
cb825c8 feat(all): auto-regenerate discovery clients (#2742)
9d915ff feat(all): auto-regenerate discovery clients (#2739)
7296c72 feat(all): auto-regenerate discovery clients (#2738)
a2308c1 feat(all): auto-regenerate discovery clients (#2737)
6b81f1a feat(all): auto-regenerate discovery clients (#2736)
c2b2ac9 chore: update to 1.21 (#2735)
4118ec2 feat(all): auto-regenerate discovery clients (#2733)
c616f47 chore(main): release 0.192.0 (#2726)
Additional commits viewable in compare view

Updates google.golang.org/genproto/googleapis/rpc from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20240814211410-ddb44dafa142

Commits

See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

go.mod

Bumps the go group with 7 updates in the / directory: | Package | From | To | | --- | --- | --- | | [cloud.google.com/go/kms](https://github.com/googleapis/google-cloud-go) | `1.18.4` | `1.19.0` | | [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.13.0` | `1.14.0` | | [github.com/aws/aws-sdk-go-v2](https://github.com/aws/aws-sdk-go-v2) | `1.30.3` | `1.30.4` | | [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) | `1.27.27` | `1.27.30` | | [github.com/aws/aws-sdk-go-v2/feature/s3/manager](https://github.com/aws/aws-sdk-go-v2) | `1.17.10` | `1.17.14` | | [github.com/aws/aws-sdk-go-v2/service/kms](https://github.com/aws/aws-sdk-go-v2) | `1.35.3` | `1.35.5` | | [github.com/ory/dockertest/v3](https://github.com/ory/dockertest) | `3.10.0` | `3.11.0` | Updates `cloud.google.com/go/kms` from 1.18.4 to 1.19.0 - [Release notes](https://github.com/googleapis/google-cloud-go/releases) - [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md) - [Commits](googleapis/google-cloud-go@kms/v1.18.4...kms/v1.19.0) Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.13.0 to 1.14.0 - [Release notes](https://github.com/Azure/azure-sdk-for-go/releases) - [Changelog](https://github.com/Azure/azure-sdk-for-go/blob/main/documentation/release.md) - [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.13.0...sdk/azcore/v1.14.0) Updates `github.com/aws/aws-sdk-go-v2` from 1.30.3 to 1.30.4 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.30.3...v1.30.4) Updates `github.com/aws/aws-sdk-go-v2/config` from 1.27.27 to 1.27.30 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.27.27...config/v1.27.30) Updates `github.com/aws/aws-sdk-go-v2/credentials` from 1.17.27 to 1.17.29 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@credentials/v1.17.27...credentials/v1.17.29) Updates `github.com/aws/aws-sdk-go-v2/feature/s3/manager` from 1.17.10 to 1.17.14 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@config/v1.17.10...credentials/v1.17.14) Updates `github.com/aws/aws-sdk-go-v2/service/kms` from 1.35.3 to 1.35.5 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/ivs/v1.35.3...service/ecs/v1.35.5) Updates `github.com/aws/aws-sdk-go-v2/service/s3` from 1.58.3 to 1.60.1 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@service/s3/v1.58.3...service/s3/v1.60.1) Updates `github.com/aws/aws-sdk-go-v2/service/sts` from 1.30.3 to 1.30.5 - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Commits](aws/aws-sdk-go-v2@v1.30.3...service/s3/v1.30.5) Updates `github.com/ory/dockertest/v3` from 3.10.0 to 3.11.0 - [Release notes](https://github.com/ory/dockertest/releases) - [Commits](ory/dockertest@v3.10.0...v3.11.0) Updates `golang.org/x/net` from 0.27.0 to 0.28.0 - [Commits](golang/net@v0.27.0...v0.28.0) Updates `golang.org/x/sys` from 0.23.0 to 0.24.0 - [Commits](golang/sys@v0.23.0...v0.24.0) Updates `golang.org/x/term` from 0.22.0 to 0.23.0 - [Commits](golang/term@v0.22.0...v0.23.0) Updates `google.golang.org/api` from 0.190.0 to 0.193.0 - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.190.0...v0.193.0) Updates `google.golang.org/genproto/googleapis/rpc` from 0.0.0-20240730163845-b1a4ccb954bf to 0.0.0-20240814211410-ddb44dafa142 - [Commits](https://github.com/googleapis/go-genproto/commits) --- updated-dependencies: - dependency-name: cloud.google.com/go/kms dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/credentials dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/feature/s3/manager dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/kms dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/s3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: github.com/aws/aws-sdk-go-v2/service/sts dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go - dependency-name: github.com/ory/dockertest/v3 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/net dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/sys dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: golang.org/x/term dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/api dependency-type: direct:production update-type: version-update:semver-minor dependency-group: go - dependency-name: google.golang.org/genproto/googleapis/rpc dependency-type: direct:production update-type: version-update:semver-patch dependency-group: go ... Signed-off-by: dependabot[bot] <support@github.com>

Signed-off-by: Felix Fontein <felix@fontein.de>

This MR contains the following updates: | Package | Update | Change | |---|---|---| | [getsops/sops](https://github.com/getsops/sops) | patch | `v3.9.0` -> `v3.9.1` | MR created with the help of [el-capitano/tools/renovate-bot](https://gitlab.com/el-capitano/tools/renovate-bot). **Proposed changes to behavior should be submitted there as MRs.** --- ### Release Notes <details> <summary>getsops/sops (getsops/sops)</summary> ### [`v3.9.1`](https://github.com/getsops/sops/releases/tag/v3.9.1) [Compare Source](getsops/sops@v3.9.0...v3.9.1) #### Installation To install `sops`, download one of the pre-built binaries provided for your platform from the artifacts attached to this release. For instance, if you are using Linux on an AMD64 architecture: ```shell ### Download the binary curl -LO https://github.com/getsops/sops/releases/download/v3.9.1/sops-v3.9.1.linux.amd64 ### Move the binary in to your PATH mv sops-v3.9.1.linux.amd64 /usr/local/bin/sops ### Make the binary executable chmod +x /usr/local/bin/sops ``` ##### Verify checksums file signature The checksums file provided within the artifacts attached to this release is signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of this file, run the following commands: ```shell ### Download the checksums file, certificate and signature curl -LO https://github.com/getsops/sops/releases/download/v3.9.1/sops-v3.9.1.checksums.txt curl -LO https://github.com/getsops/sops/releases/download/v3.9.1/sops-v3.9.1.checksums.pem curl -LO https://github.com/getsops/sops/releases/download/v3.9.1/sops-v3.9.1.checksums.sig ### Verify the checksums file cosign verify-blob sops-v3.9.1.checksums.txt \ --certificate sops-v3.9.1.checksums.pem \ --signature sops-v3.9.1.checksums.sig \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com ``` ##### Verify binary integrity To verify the integrity of the downloaded binary, you can utilize the checksums file after having validated its signature: ```shell ### Verify the binary using the checksums file sha256sum -c sops-v3.9.1.checksums.txt --ignore-missing ``` ##### Verify artifact provenance The [SLSA provenance](https://slsa.dev/provenance/v0.2) of the binaries, packages, and SBOMs can be found within the artifacts associated with this release. It is presented through an [in-toto](https://in-toto.io/) link metadata file named `sops-v3.9.1.intoto.jsonl`. To verify the provenance of an artifact, you can utilize the [`slsa-verifier`](https://github.com/slsa-framework/slsa-verifier#artifacts) tool: ```shell ### Download the metadata file curl -LO https://github.com/getsops/sops/releases/download/v3.9.1/sops-v3.9.1.intoto.jsonl ### Verify the provenance of the artifact slsa-verifier verify-artifact <artifact> \ --provenance-path sops-v3.9.1.intoto.jsonl \ --source-uri github.com/getsops/sops \ --source-tag v3.9.1 ``` #### Container Images The `sops` binaries are also available as container images, based on Debian (slim) and Alpine Linux. The Debian-based container images include any dependencies which may be required to make use of certain key services, such as GnuPG, AWS KMS, Azure Key Vault, and Google Cloud KMS. The Alpine-based container images are smaller in size, but do not include these dependencies. These container images are available for the following architectures: `linux/amd64` and `linux/arm64`. ##### GitHub Container Registry - `ghcr.io/getsops/sops:v3.9.1` - `ghcr.io/getsops/sops:v3.9.1-alpine` ##### Quay.io - `quay.io/getsops/sops:v3.9.1` - `quay.io/getsops/sops:v3.9.1-alpine` ##### Verify container image signature The container images are signed using [Cosign](https://docs.sigstore.dev/cosign/overview/) with GitHub OIDC. To validate the signature of an image, run the following command: ```shell cosign verify ghcr.io/getsops/sops:v3.9.1 \ --certificate-identity-regexp=https://github.com/getsops \ --certificate-oidc-issuer=https://token.actions.githubusercontent.com \ -o text ``` ##### Verify container image provenance The container images include [SLSA provenance](https://slsa.dev/provenance/v0.2) attestations. For more information around the verification of this, please refer to the [`slsa-verifier` documentation](https://github.com/slsa-framework/slsa-verifier#containers). #### Software Bill of Materials The Software Bill of Materials (SBOM) for each binary is accessible within the artifacts enclosed with this release. It is presented as an [SPDX](https://spdx.dev/) JSON file, formatted as `<binary>.spdx.sbom.json`. #### What's Changed - Explicitly mark goreleaser's version, to avoid confusion with the Go version by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1548 - build(deps): Bump the go group with 8 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1550 - build(deps): Bump github/codeql-action from 3.25.10 to 3.25.11 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1551 - Fix the URL used for determining the latest SOPS version by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1553 - build(deps): Bump the ci group with 4 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1555 - build(deps): Bump the go group with 11 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1554 - build(deps): Bump the go group with 10 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1558 - build(deps): Bump the ci group with 3 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1559 - build(deps): Bump the go group with 5 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1562 - build(deps): Bump the ci group across 1 directory with 5 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1564 - build(deps): Bump the go group with 4 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1565 - build(deps): Bump github/codeql-action from 3.25.13 to 3.25.15 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1566 - build(deps): Bump github.com/docker/docker from 27.0.1+incompatible to 27.1.0+incompatible by [@dependabot](https://github.com/dependabot) in getsops/sops#1568 - build(deps): Bump the go group with 5 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1575 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1574 - build(deps): Bump github.com/docker/docker from 27.1.0+incompatible to 27.1.1+incompatible by [@dependabot](https://github.com/dependabot) in getsops/sops#1581 - build(deps): Bump the ci group with 3 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1584 - Note on the name of the configuration file by [@ErraticMaker](https://github.com/ErraticMaker) in getsops/sops#1569 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1586 - build(deps): Bump the go group across 1 directory with 15 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1589 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1590 - build(deps): Bump the go group with 7 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1593 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1592 - tests: ignore env var SOPS_AGE_KEY_FILE by [@duthils](https://github.com/duthils) in getsops/sops#1595 - build(deps): Bump the go group with 12 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1602 - build(deps): Bump github.com/opencontainers/runc from 1.1.13 to 1.1.14 by [@dependabot](https://github.com/dependabot) in getsops/sops#1603 - updatekeys subcommand: actually use option `--shamir-secret-sharing-threshold` by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1608 - Added example of having age recipients in .sops.yaml by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1607 - GitHub Actions linter for Rust formatting by [@duthils](https://github.com/duthils) in getsops/sops#1604 - github actions: set rust version globally by [@duthils](https://github.com/duthils) in getsops/sops#1612 - Fix `--config` being ignored by `loadConfig` by [@lopter](https://github.com/lopter) in getsops/sops#1613 - build(deps): Bump the go group with 4 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1618 - build(deps): Bump github/codeql-action from 3.26.6 to 3.26.7 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1619 - unit tests: add coverage for unset by [@duthils](https://github.com/duthils) in getsops/sops#1617 - sops_test: homogenize use of asserts by [@duthils](https://github.com/duthils) in getsops/sops#1622 - sops_test: add more tests on errors by [@duthils](https://github.com/duthils) in getsops/sops#1624 - Add 'check' task to CI that makes sure everything is green by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1621 - build(deps): Bump the go group with 10 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1629 - build(deps): Bump github/codeql-action from 3.26.7 to 3.26.8 in the ci group by [@dependabot](https://github.com/dependabot) in getsops/sops#1628 - refactor: specify missing file in error message by [@t3hmrman](https://github.com/t3hmrman) in getsops/sops#1625 - CI: Build with Go 1.22 and 1.23; update Vault to 1.14 by [@reneleonhardt](https://github.com/reneleonhardt) in getsops/sops#1531 - Allow edit subcommand to create files by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1596 - Build release with Go 1.22.x by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1615 - GHA: fix checkout action version by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1630 - Do not encrypt if a key group is empty, or there are no key groups by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1600 - updatekeys subcommand: show changes in shamir_threshold by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1609 - Dependabot: fix config for Docker, add config for Rust/Cargo by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1632 - build(deps): Bump the ci group with 2 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1634 - build(deps): Bump the go group with 7 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1635 - Add Cargo.lock for better reproducability of functional tests by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1637 - build(deps): Bump the go group with 7 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1639 - build(deps): Bump the rust group in /functional-tests with 5 updates by [@dependabot](https://github.com/dependabot) in getsops/sops#1638 - Update all go deps with 'go get -t -u ./...' by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1640 - Do not ignore errors when trying to parse a config file by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1614 - Release 3.9.1 by [@felixfontein](https://github.com/felixfontein) in getsops/sops#1642 #### New Contributors - [@ErraticMaker](https://github.com/ErraticMaker) made their first contribution in getsops/sops#1569 - [@lopter](https://github.com/lopter) made their first contribution in getsops/sops#1613 - [@t3hmrman](https://github.com/t3hmrman) made their first contribution in getsops/sops#1625 - [@reneleonhardt](https://github.com/reneleonhardt) made their first contribution in getsops/sops#1531 **Full Changelog**: getsops/sops@v3.9.0...v3.9.1 </details> --- ### Configuration 📅 **Schedule**: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever MR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this MR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this MR, check this box --- This MR has been generated by [Renovate Bot](https://github.com/renovatebot/renovate).

dependabot bot added the dependencies Pull requests that update a dependency file label Aug 26, 2024

felixfontein reviewed Aug 26, 2024

View reviewed changes

go.mod Show resolved Hide resolved

felixfontein reviewed Aug 26, 2024

View reviewed changes

go.mod Outdated Show resolved Hide resolved

dependabot bot and others added 2 commits August 26, 2024 11:29

Bump go version.

0e27406

Signed-off-by: Felix Fontein <felix@fontein.de>

felixfontein force-pushed the dependabot/go_modules/go-5aefa9f0d8 branch from 65a01fe to 0e27406 Compare August 26, 2024 09:29

felixfontein approved these changes Aug 26, 2024

View reviewed changes

felixfontein merged commit c43ba98 into main Aug 26, 2024

felixfontein deleted the dependabot/go_modules/go-5aefa9f0d8 branch August 26, 2024 09:36

duthils mentioned this pull request Sep 14, 2024

CVE-2024-24791 in sops binary v3.9.0 #1572

Closed

BrewTestBot mentioned this pull request Oct 4, 2024

sops 3.9.1 Homebrew/homebrew-core#192798

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

build(deps): Bump the go group across 1 directory with 15 updates#1589

build(deps): Bump the go group across 1 directory with 15 updates#1589
felixfontein merged 2 commits intomainfrom
dependabot/go_modules/go-5aefa9f0d8

dependabot bot commented on behalf of github Aug 26, 2024

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments

Conversation

dependabot bot commented on behalf of github Aug 26, 2024

functions: v1.19.0

1.19.0 (2024-08-20)

Features

kms: v1.19.0

1.19.0 (2024-08-20)

Features

datastore: v1.19.0

1.19.0 (2024-08-22)

Features

1.19.0 (2023-05-30)

Features

1.18.1 (2023-05-08)

Bug Fixes

1.18.0 (2023-03-22)

Features

1.17.0 (2023-03-15)

Features

1.16.0 (2023-02-22)

Features

1.15.0 (2023-02-14)

⚠ BREAKING CHANGES

Features

sdk/azcore/v1.14.0

1.14.0 (2024-08-07)

Features Added

Other Changes

v3.11.0

What's Changed

New Contributors

v0.193.0

0.193.0 (2024-08-20)

Features

v0.192.0

0.192.0 (2024-08-13)

Features

Bug Fixes

v0.191.0

0.191.0 (2024-08-07)

Features

Bug Fixes

0.193.0 (2024-08-20)

Features

0.192.0 (2024-08-13)

Features

Bug Fixes

0.191.0 (2024-08-07)

Features

Bug Fixes

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments