renovate[bot]
6ffb3b1bd6
fix(deps): update module github.com/moby/moby to v24.0.9+incompatible [security] ( #3323 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [github.com/moby/moby](https://togithub.com/moby/moby ) |
`v24.0.8+incompatible` -> `v24.0.9+incompatible` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmoby%2fmoby/v24.0.9+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fmoby%2fmoby/v24.0.9+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fmoby%2fmoby/v24.0.8+incompatible/v24.0.9+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmoby%2fmoby/v24.0.8+incompatible/v24.0.9+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
### GitHub Vulnerability Alerts
####
[CVE-2024-24557](https://togithub.com/moby/moby/security/advisories/GHSA-xw73-rw38-6vjc )
The classic builder cache system is prone to cache poisoning if the
image is built `FROM scratch`.
Also, changes to some instructions (most important being `HEALTHCHECK`
and `ONBUILD`) would not cause a cache miss.
An attacker with the knowledge of the Dockerfile someone is using could
poison their cache by making them pull a specially crafted image that
would be considered as a valid cache candidate for some build steps.
For example, an attacker could create an image that is considered as a
valid cache candidate for:
```
FROM scratch
MAINTAINER Pawel
```
when in fact the malicious image used as a cache would be an image built
from a different Dockerfile.
In the second case, the attacker could for example substitute a
different `HEALTCHECK` command.
### Impact
23.0+ users are only affected if they explicitly opted out of Buildkit
(`DOCKER_BUILDKIT=0` environment variable) or are using the `/build` API
endpoint (which uses the classic builder by default).
All users on versions older than 23.0 could be impacted. An example
could be a CI with a shared cache, or just a regular Docker user pulling
a malicious image due to misspelling/typosquatting.
Image build API endpoint (`/build`) and `ImageBuild` function from
`github.com/docker/docker/client` is also affected as it the uses
classic builder by default.
### Patches
Patches are included in Moby releases:
- v25.0.2
- v24.0.9
### Workarounds
- Use `--no-cache` or use Buildkit if possible (`DOCKER_BUILDKIT=1`,
it's default on 23.0+ assuming that the buildx plugin is installed).
- Use `Version = types.BuilderBuildKit` or `NoCache = true` in
`ImageBuildOptions` for `ImageBuild` call.
---
### Release Notes
<details>
<summary>moby/moby (github.com/moby/moby)</summary>
###
[`v24.0.9+incompatible`](https://togithub.com/moby/moby/compare/v24.0.8...v24.0.9 )
[Compare
Source](https://togithub.com/moby/moby/compare/v24.0.8...v24.0.9 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "" (UTC), Automerge - "before 4am"
(UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xNTMuMiIsInVwZGF0ZWRJblZlciI6IjM3LjE1My4yIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
2024-02-04 07:53:53 +01:00
renovate[bot]
da7d3f5d82
fix(deps): update golang (packages) ( #3284 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [github.com/docker/cli](https://togithub.com/docker/cli ) |
`v24.0.7+incompatible` -> `v24.0.8+incompatible` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fdocker%2fcli/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fdocker%2fcli/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fdocker%2fcli/v24.0.7+incompatible/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fdocker%2fcli/v24.0.7+incompatible/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
| [github.com/docker/docker](https://togithub.com/docker/docker ) |
`v24.0.7+incompatible` -> `v24.0.8+incompatible` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fdocker%2fdocker/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fdocker%2fdocker/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fdocker%2fdocker/v24.0.7+incompatible/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fdocker%2fdocker/v24.0.7+incompatible/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
| [github.com/expr-lang/expr](https://togithub.com/expr-lang/expr ) |
`v1.15.8` -> `v1.16.0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fexpr-lang%2fexpr/v1.16.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fexpr-lang%2fexpr/v1.16.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fexpr-lang%2fexpr/v1.15.8/v1.16.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fexpr-lang%2fexpr/v1.15.8/v1.16.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
| [github.com/mattn/go-sqlite3](https://togithub.com/mattn/go-sqlite3 ) |
`v1.14.19` -> `v1.14.20` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmattn%2fgo-sqlite3/v1.14.20?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fmattn%2fgo-sqlite3/v1.14.20?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fmattn%2fgo-sqlite3/v1.14.19/v1.14.20?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmattn%2fgo-sqlite3/v1.14.19/v1.14.20?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
| [github.com/moby/moby](https://togithub.com/moby/moby ) |
`v24.0.7+incompatible` -> `v24.0.8+incompatible` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fmoby%2fmoby/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fmoby%2fmoby/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fmoby%2fmoby/v24.0.7+incompatible/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fmoby%2fmoby/v24.0.7+incompatible/v24.0.8+incompatible?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
| [google.golang.org/grpc](https://togithub.com/grpc/grpc-go ) |
`v1.60.1` -> `v1.61.0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/google.golang.org%2fgrpc/v1.61.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/google.golang.org%2fgrpc/v1.61.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/google.golang.org%2fgrpc/v1.60.1/v1.61.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/google.golang.org%2fgrpc/v1.60.1/v1.61.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
| xorm.io/xorm | `v1.3.6` -> `v1.3.7` |
[![age](https://developer.mend.io/api/mc/badges/age/go/xorm.io%2fxorm/v1.3.7?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/xorm.io%2fxorm/v1.3.7?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/xorm.io%2fxorm/v1.3.6/v1.3.7?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/xorm.io%2fxorm/v1.3.6/v1.3.7?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>docker/cli (github.com/docker/cli)</summary>
###
[`v24.0.8+incompatible`](https://togithub.com/docker/cli/compare/v24.0.7...v24.0.8 )
[Compare
Source](https://togithub.com/docker/cli/compare/v24.0.7...v24.0.8 )
</details>
<details>
<summary>docker/docker (github.com/docker/docker)</summary>
###
[`v24.0.8+incompatible`](https://togithub.com/docker/docker/compare/v24.0.7...v24.0.8 )
[Compare
Source](https://togithub.com/docker/docker/compare/v24.0.7...v24.0.8 )
</details>
<details>
<summary>expr-lang/expr (github.com/expr-lang/expr)</summary>
###
[`v1.16.0`](https://togithub.com/expr-lang/expr/releases/tag/v1.16.0 )
[Compare
Source](https://togithub.com/expr-lang/expr/compare/v1.15.8...v1.16.0 )
**Expr** is a Go-centric expression language designed to deliver dynamic
configurations with unparalleled accuracy, safety, and speed.
<p align="center"><img
src="https://github.com/antonmedv/expr/assets/141232/b1f97d78-83c9-42fd-bdd1-631bb6f4f7e1 "
alt="expr repl demo" width="600"></p>
##### In this release:
* Improved VM speed by 5%-15% (#​521)
* Improve AST printing for boolean operators
* Improved type checker (#​527)
* Added option to override built-ins (#​522)
* Added method to get AST tree from program: `.Node()` (#​528)
* Added new `Valuer` patcher (#​525)
* Added `expr.WarnOnAny()` option
* Changed `expr.As*()` options behavior to accept `any` by default
* Fixed type checker to visit all arguments of func even if arguments
count mismatch
* Fixed type propagation in AST for `any` type in type checker
* Fixed context patcher (#​526)
* Fixed race condition in working with variables (#​523)
* Fixed pipeline and call parsing
##### Addition
In addition to open-source version of Expr, we have an embeddable [Expr
Editor](https://expr-lang.org/editor ) and [Expr
Pro](https://expr-lang.org/expr-pro ) packages.
</details>
<details>
<summary>mattn/go-sqlite3 (github.com/mattn/go-sqlite3)</summary>
###
[`v1.14.20`](https://togithub.com/mattn/go-sqlite3/compare/v1.14.19...v1.14.20 )
[Compare
Source](https://togithub.com/mattn/go-sqlite3/compare/v1.14.19...v1.14.20 )
</details>
<details>
<summary>moby/moby (github.com/moby/moby)</summary>
###
[`v24.0.8+incompatible`](https://togithub.com/moby/moby/compare/v24.0.7...v24.0.8 )
[Compare
Source](https://togithub.com/moby/moby/compare/v24.0.7...v24.0.8 )
</details>
<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>
### [`v1.61.0`](https://togithub.com/grpc/grpc-go/releases/tag/v1.61.0 ):
Release 1.61.0
[Compare
Source](https://togithub.com/grpc/grpc-go/compare/v1.60.1...v1.61.0 )
### New Features
- resolver: provide method, `AuthorityOverrider`, to allow
resolver.Builders to override the default authority for a `ClientConn`.
(EXPERIMENTAL)
([#​6752](https://togithub.com/grpc/grpc-go/issues/6752 ))
- Special Thanks:
[@​Aditya-Sood](https://togithub.com/Aditya-Sood )
- xds: add support for mTLS Credentials in xDS bootstrap ([gRFC
A65](github.com/grpc/proposal/blob/8c31bfedded5f0a51c4933e9e9a8246122f9c41a/A65-xds-mtls-creds-in-bootstrap.md))
([#​6757](https://togithub.com/grpc/grpc-go/issues/6757 ))
- Special Thanks: [@​atollena](https://togithub.com/atollena )
- server: add `grpc.WaitForHandlers` `ServerOption` to cause
`Server.Stop` to block until method handlers return. (EXPERIMENTAL)
([#​6922](https://togithub.com/grpc/grpc-go/issues/6922 ))
### Performance Improvements
- grpc: skip compression of empty messages as an optimization
([#​6842](https://togithub.com/grpc/grpc-go/issues/6842 ))
- Special Thanks: [@​jroper](https://togithub.com/jroper )
- orca: use atomic pointer to improve performance in server metrics
recorder ([#​6799](https://togithub.com/grpc/grpc-go/issues/6799 ))
- Special Thanks:
[@​danielzhaotongliu](https://togithub.com/danielzhaotongliu )
### Bug Fixes
- client: correctly enable TCP keepalives with OS defaults on windows
([#​6863](https://togithub.com/grpc/grpc-go/issues/6863 ))
- Special Thanks: [@​mmatczuk](https://togithub.com/mmatczuk )
- server: change some stream operations to return `UNAVAILABLE` instead
of `UNKNOWN` when underlying connection is broken
([#​6891](https://togithub.com/grpc/grpc-go/issues/6891 ))
- Special Thanks:
[@​mustafasen81](https://togithub.com/mustafasen81 )
- server: fix `GracefulStop` to block until all method handlers return
(v1.60 regression).
([#​6922](https://togithub.com/grpc/grpc-go/issues/6922 ))
- server: fix two bugs that could lead to panics at shutdown when using
[`NumStreamWorkers`](https://pkg.go.dev/google.golang.org/grpc#NumStreamWorkers )
(EXPERIMENTAL).
([#​6856](https://togithub.com/grpc/grpc-go/issues/6856 ))
- reflection: do not send invalid descriptors to clients for files that
cannot be fully resolved
([#​6771](https://togithub.com/grpc/grpc-go/issues/6771 ))
- Special Thanks: [@​jhump](https://togithub.com/jhump )
- xds: don't fail channel/server startup when xds creds is specified,
but bootstrap is missing certificate providers
([#​6848](https://togithub.com/grpc/grpc-go/issues/6848 ))
- xds: Atomically read and write xDS security configuration client side
([#​6796](https://togithub.com/grpc/grpc-go/issues/6796 ))
- xds/server: fix RDS handling for non-inline route configs
([#​6915](https://togithub.com/grpc/grpc-go/issues/6915 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge -
"before 4am" (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMzUuMCIsInVwZGF0ZWRJblZlciI6IjM3LjEzNS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-27 07:33:16 +01:00
renovate[bot]
9f215ab932
fix(deps): update golang (packages) ( #3218 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Change | Age | Adoption | Passing | Confidence |
|---|---|---|---|---|---|
| [github.com/xanzy/go-gitlab](https://togithub.com/xanzy/go-gitlab ) |
`v0.95.2` -> `v0.96.0` |
[![age](https://developer.mend.io/api/mc/badges/age/go/github.com%2fxanzy%2fgo-gitlab/v0.96.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/github.com%2fxanzy%2fgo-gitlab/v0.96.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/github.com%2fxanzy%2fgo-gitlab/v0.95.2/v0.96.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/github.com%2fxanzy%2fgo-gitlab/v0.95.2/v0.96.0?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
| [k8s.io/api](https://togithub.com/kubernetes/api ) | `v0.29.0` ->
`v0.29.1` |
[![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fapi/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/k8s.io%2fapi/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/k8s.io%2fapi/v0.29.0/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fapi/v0.29.0/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
| [k8s.io/apimachinery](https://togithub.com/kubernetes/apimachinery ) |
`v0.29.0` -> `v0.29.1` |
[![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fapimachinery/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/k8s.io%2fapimachinery/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/k8s.io%2fapimachinery/v0.29.0/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fapimachinery/v0.29.0/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
| [k8s.io/client-go](https://togithub.com/kubernetes/client-go ) |
`v0.29.0` -> `v0.29.1` |
[![age](https://developer.mend.io/api/mc/badges/age/go/k8s.io%2fclient-go/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![adoption](https://developer.mend.io/api/mc/badges/adoption/go/k8s.io%2fclient-go/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![passing](https://developer.mend.io/api/mc/badges/compatibility/go/k8s.io%2fclient-go/v0.29.0/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
[![confidence](https://developer.mend.io/api/mc/badges/confidence/go/k8s.io%2fclient-go/v0.29.0/v0.29.1?slim=true )](https://docs.renovatebot.com/merge-confidence/ )
|
---
### Release Notes
<details>
<summary>xanzy/go-gitlab (github.com/xanzy/go-gitlab)</summary>
###
[`v0.96.0`](https://togithub.com/xanzy/go-gitlab/compare/v0.95.2...v0.96.0 )
[Compare
Source](https://togithub.com/xanzy/go-gitlab/compare/v0.95.2...v0.96.0 )
</details>
<details>
<summary>kubernetes/api (k8s.io/api)</summary>
###
[`v0.29.1`](https://togithub.com/kubernetes/api/compare/v0.29.0...v0.29.1 )
[Compare
Source](https://togithub.com/kubernetes/api/compare/v0.29.0...v0.29.1 )
</details>
<details>
<summary>kubernetes/apimachinery (k8s.io/apimachinery)</summary>
###
[`v0.29.1`](https://togithub.com/kubernetes/apimachinery/compare/v0.29.0...v0.29.1 )
[Compare
Source](https://togithub.com/kubernetes/apimachinery/compare/v0.29.0...v0.29.1 )
</details>
<details>
<summary>kubernetes/client-go (k8s.io/client-go)</summary>
###
[`v0.29.1`](https://togithub.com/kubernetes/client-go/compare/v0.29.0...v0.29.1 )
[Compare
Source](https://togithub.com/kubernetes/client-go/compare/v0.29.0...v0.29.1 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge -
"before 4am" (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy4xMzUuMCIsInVwZGF0ZWRJblZlciI6IjM3LjEzNS4wIiwidGFyZ2V0QnJhbmNoIjoibWFpbiJ9-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: 6543 <6543@obermui.de>
2024-01-19 04:17:09 +01:00
renovate[bot]
57dd88f94a
fix(deps): update module github.com/google/go-github/v57 to v58 ( #3187 )
2024-01-13 08:13:22 +01:00
6543
78a815ec96
fix(deps): update golang (packages) ( #3185 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2024-01-13 00:33:41 +01:00
6543
0cc0f482df
chore(deps): update golang packages ( #2999 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-23 01:33:00 +01:00
renovate[bot]
7d837e625e
fix(deps): update module google.golang.org/grpc to v1.60.1 ( #2969 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [google.golang.org/grpc](https://togithub.com/grpc/grpc-go ) | require
| patch | `v1.60.0` -> `v1.60.1` |
---
### Release Notes
<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>
### [`v1.60.1`](https://togithub.com/grpc/grpc-go/releases/tag/v1.60.1 )
[Compare
Source](https://togithub.com/grpc/grpc-go/compare/v1.60.0...v1.60.1 )
### Bug Fixes
- server: fix two bugs that could lead to panics at shutdown when using
[NumStreamWorkers](https://pkg.go.dev/google.golang.org/grpc#NumStreamWorkers )
(experimental feature).
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge -
"before 4am" (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy45My4xIiwidXBkYXRlZEluVmVyIjoiMzcuOTMuMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: 6543 <6543@obermui.de>
2023-12-19 06:25:39 +01:00
Thomas Anderson
01a955ed0e
Kubernetes refactor ( #2794 )
...
Kubernetes backend refactoring and tests
---------
Co-authored-by: 6543 <6543@obermui.de>
2023-12-19 04:53:52 +01:00
6543
4d298bd6b5
update golang.org/x/crypto v0.16.0 => v0.17.0 ( #2966 )
...
we are not affected by CVE-2023-48795 crypto/ssh - but we should update
anyway :)
2023-12-19 03:55:18 +01:00
renovate[bot]
b66f6cb118
fix(deps): update golang (packages) ( #2958 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
|
[github.com/caddyserver/certmagic](https://togithub.com/caddyserver/certmagic )
| require | minor | `v0.19.2` -> `v0.20.0` |
| [github.com/expr-lang/expr](https://togithub.com/expr-lang/expr ) |
require | patch | `v1.15.6` -> `v1.15.7` |
| [github.com/google/uuid](https://togithub.com/google/uuid ) | require |
minor | `v1.4.0` -> `v1.5.0` |
|
[github.com/jellydator/ttlcache/v3](https://togithub.com/jellydator/ttlcache )
| require | patch | `v3.1.0` -> `v3.1.1` |
| [github.com/mattn/go-sqlite3](https://togithub.com/mattn/go-sqlite3 ) |
require | patch | `v1.14.18` -> `v1.14.19` |
| [github.com/xanzy/go-gitlab](https://togithub.com/xanzy/go-gitlab ) |
require | minor | `v0.94.0` -> `v0.95.2` |
| [google.golang.org/grpc](https://togithub.com/grpc/grpc-go ) | require
| minor | `v1.59.0` -> `v1.60.0` |
| [k8s.io/api](https://togithub.com/kubernetes/api ) | require | minor |
`v0.28.4` -> `v0.29.0` |
| [k8s.io/apimachinery](https://togithub.com/kubernetes/apimachinery ) |
require | minor | `v0.28.4` -> `v0.29.0` |
| [k8s.io/client-go](https://togithub.com/kubernetes/client-go ) |
require | minor | `v0.28.4` -> `v0.29.0` |
---
### Release Notes
<details>
<summary>caddyserver/certmagic
(github.com/caddyserver/certmagic)</summary>
###
[`v0.20.0`](https://togithub.com/caddyserver/certmagic/releases/tag/v0.20.0 )
[Compare
Source](https://togithub.com/caddyserver/certmagic/compare/v0.19.2...v0.20.0 )
This release vastly improves storage cleaning as well improving a few
smaller things. There is a minor breaking change as we get ever closer
to v1.0.
- ⚠️ The `DecisionFunc` for On-Demand TLS now takes a
`context.Context` value as its first argument. The context carries the
`ClientHelloInfo` value (keyed by `ClientHelloInfoCtxKey`) for logging
purposes.
- Storage cleaning is now synchronized across the cluster, including
process restarts. The state of cleaning expired certificates and OCSP
staples is written to storage, and distributed locking is used to ensure
that only 1 instance does it at a time. This greatly reduces costs for
expensive storage backends! Cleaning is also done less often when the
process is frequently restarted because the state is written to storage,
so it is not forgotten after shutting down.
- `.home.arpa` is now considered an internal suffix.
- Backoff timings have been tuned based on real-world experience.
#### What's Changed
- README: Add hint about NextProtos for certmagic.TLS by
[@​oliverpool](https://togithub.com/oliverpool ) in
[https://github.com/caddyserver/certmagic/pull/251 ](https://togithub.com/caddyserver/certmagic/pull/251 )
- Bump golang.org/x/net from 0.11.0 to 0.17.0 by
[@​dependabot](https://togithub.com/dependabot ) in
[https://github.com/caddyserver/certmagic/pull/253 ](https://togithub.com/caddyserver/certmagic/pull/253 )
- Optionally pass the context argument down to the OnDemand decision
func by [@​ankon](https://togithub.com/ankon ) in
[https://github.com/caddyserver/certmagic/pull/255 ](https://togithub.com/caddyserver/certmagic/pull/255 )
- Retain the error stack if `checkIfCertShouldBeObtained` returns an
error by [@​ankon](https://togithub.com/ankon ) in
[https://github.com/caddyserver/certmagic/pull/256 ](https://togithub.com/caddyserver/certmagic/pull/256 )
- Add OCSP stapling unit tests by
[@​kenjenkins](https://togithub.com/kenjenkins ) in
[https://github.com/caddyserver/certmagic/pull/259 ](https://togithub.com/caddyserver/certmagic/pull/259 )
#### New Contributors
- [@​oliverpool](https://togithub.com/oliverpool ) made their first
contribution in
[https://github.com/caddyserver/certmagic/pull/251 ](https://togithub.com/caddyserver/certmagic/pull/251 )
**Full Changelog**:
https://github.com/caddyserver/certmagic/compare/v0.19.2...v0.20.0
</details>
<details>
<summary>expr-lang/expr (github.com/expr-lang/expr)</summary>
###
[`v1.15.7`](https://togithub.com/expr-lang/expr/releases/tag/v1.15.7 )
[Compare
Source](https://togithub.com/expr-lang/expr/compare/v1.15.6...v1.15.7 )
**Expr** is a Go-centric expression language designed to deliver dynamic
configurations with unparalleled accuracy, safety, and speed.
##### In this release:
- Fixed commutative property for comparison between a value and a
pointer. ([#​490](https://togithub.com/expr-lang/expr/issues/490 ))
- Checker: forbid accessing built-ins and custom functions from `$env`.
([#​495](https://togithub.com/expr-lang/expr/issues/495 ))
- Enhanced the number parser to include support for parsing hexadecimal,
binary, and octal literals.
([#​483](https://togithub.com/expr-lang/expr/issues/483 ))
- Added `GetSource()` method to `vm.Program`.
([#​491](https://togithub.com/expr-lang/expr/issues/491 ))
</details>
<details>
<summary>google/uuid (github.com/google/uuid)</summary>
### [`v1.5.0`](https://togithub.com/google/uuid/releases/tag/v1.5.0 )
[Compare
Source](https://togithub.com/google/uuid/compare/v1.4.0...v1.5.0 )
##### Features
- Validate UUID without creating new UUID
([#​141](https://togithub.com/google/uuid/issues/141 ))
([9ee7366](9ee7366e66
))
</details>
<details>
<summary>jellydator/ttlcache
(github.com/jellydator/ttlcache/v3)</summary>
###
[`v3.1.1`](https://togithub.com/jellydator/ttlcache/releases/tag/v3.1.1 )
[Compare
Source](https://togithub.com/jellydator/ttlcache/compare/v3.1.0...v3.1.1 )
Fix a bug in the `Range` method that causes a panic when the cache is
empty
</details>
<details>
<summary>mattn/go-sqlite3 (github.com/mattn/go-sqlite3)</summary>
###
[`v1.14.19`](https://togithub.com/mattn/go-sqlite3/compare/v1.14.18...v1.14.19 )
[Compare
Source](https://togithub.com/mattn/go-sqlite3/compare/v1.14.18...v1.14.19 )
</details>
<details>
<summary>xanzy/go-gitlab (github.com/xanzy/go-gitlab)</summary>
###
[`v0.95.2`](https://togithub.com/xanzy/go-gitlab/compare/v0.95.1...v0.95.2 )
[Compare
Source](https://togithub.com/xanzy/go-gitlab/compare/v0.95.1...v0.95.2 )
###
[`v0.95.1`](https://togithub.com/xanzy/go-gitlab/compare/v0.95.0...v0.95.1 )
[Compare
Source](https://togithub.com/xanzy/go-gitlab/compare/v0.95.0...v0.95.1 )
###
[`v0.95.0`](https://togithub.com/xanzy/go-gitlab/compare/v0.94.0...v0.95.0 )
[Compare
Source](https://togithub.com/xanzy/go-gitlab/compare/v0.94.0...v0.95.0 )
</details>
<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>
### [`v1.60.0`](https://togithub.com/grpc/grpc-go/releases/tag/v1.60.0 ):
Release 1.60.0
[Compare
Source](https://togithub.com/grpc/grpc-go/compare/v1.59.0...v1.60.0 )
### Security
- credentials/tls: if not set, set TLS MinVersion to 1.2 and
CipherSuites according to supported suites not forbidden by RFC7540.
- This is a behavior change to bring us into better alignment with RFC
7540.
### API Changes
- resolver: remove deprecated and experimental
`ClientConn.NewServiceConfig`
([#​6784](https://togithub.com/grpc/grpc-go/issues/6784 ))
- client: remove deprecated `grpc.WithServiceConfig` `DialOption`
([#​6800](https://togithub.com/grpc/grpc-go/issues/6800 ))
### Bug Fixes
- client: fix race that could cause a deadlock while entering idle mode
and receiving a name resolver update
([#​6804](https://togithub.com/grpc/grpc-go/issues/6804 ))
- client: always enable TCP keepalives with OS defaults
([#​6834](https://togithub.com/grpc/grpc-go/issues/6834 ))
- credentials/alts: fix a bug preventing ALTS from connecting to the
metadata server if the default scheme is overridden
([#​6686](https://togithub.com/grpc/grpc-go/issues/6686 ))
- Special Thanks: [@​mjamaloney](https://togithub.com/mjamaloney )
### Behavior Changes
- server: Do not return from Stop() or GracefulStop() until all
resources are released
([#​6489](https://togithub.com/grpc/grpc-go/issues/6489 ))
- Special Thanks: [@​fho](https://togithub.com/fho )
### Documentation
- codes: clarify that only codes defined by this package are valid and
that users should not cast other values to `codes.Code`
([#​6701](https://togithub.com/grpc/grpc-go/issues/6701 ))
</details>
<details>
<summary>kubernetes/api (k8s.io/api)</summary>
###
[`v0.29.0`](https://togithub.com/kubernetes/api/compare/v0.28.4...v0.29.0 )
[Compare
Source](https://togithub.com/kubernetes/api/compare/v0.28.4...v0.29.0 )
</details>
<details>
<summary>kubernetes/apimachinery (k8s.io/apimachinery)</summary>
###
[`v0.29.0`](https://togithub.com/kubernetes/apimachinery/compare/v0.28.4...v0.29.0 )
[Compare
Source](https://togithub.com/kubernetes/apimachinery/compare/v0.28.4...v0.29.0 )
</details>
<details>
<summary>kubernetes/client-go (k8s.io/client-go)</summary>
###
[`v0.29.0`](https://togithub.com/kubernetes/client-go/compare/v0.28.4...v0.29.0 )
[Compare
Source](https://togithub.com/kubernetes/client-go/compare/v0.28.4...v0.29.0 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge -
"before 4am" (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy45My4xIiwidXBkYXRlZEluVmVyIjoiMzcuOTMuMSIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Robert Kaussow <mail@thegeeklab.de>
2023-12-17 14:37:26 +01:00
renovate[bot]
428fe659fe
Update golang (packages) ( #2904 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| code.gitea.io/sdk/gitea | require | minor | `v0.16.0` -> `v0.17.0` |
| [github.com/antonmedv/expr](https://togithub.com/antonmedv/expr ) |
require | patch | `v1.15.5` -> `v1.15.6` |
| [github.com/golang-jwt/jwt/v5](https://togithub.com/golang-jwt/jwt ) |
require | minor | `v5.1.0` -> `v5.2.0` |
| [github.com/urfave/cli/v2](https://togithub.com/urfave/cli ) | require
| minor | `v2.25.7` -> `v2.26.0` |
---
### Release Notes
<details>
<summary>antonmedv/expr (github.com/antonmedv/expr)</summary>
###
[`v1.15.6`](https://togithub.com/expr-lang/expr/releases/tag/v1.15.6 )
[Compare
Source](https://togithub.com/antonmedv/expr/compare/v1.15.5...v1.15.6 )
- This is a new release for `expr-lang/epxr`.
</details>
<details>
<summary>golang-jwt/jwt (github.com/golang-jwt/jwt/v5)</summary>
### [`v5.2.0`](https://togithub.com/golang-jwt/jwt/releases/tag/v5.2.0 )
[Compare
Source](https://togithub.com/golang-jwt/jwt/compare/v5.1.0...v5.2.0 )
#### What's Changed
- Exported `NewValidator` by
[@​oxisto](https://togithub.com/oxisto ) in
[https://github.com/golang-jwt/jwt/pull/349 ](https://togithub.com/golang-jwt/jwt/pull/349 )
- Improve ErrInvalidKeyType error messages by
[@​Laurin-Notemann](https://togithub.com/Laurin-Notemann ) in
[https://github.com/golang-jwt/jwt/pull/361 ](https://togithub.com/golang-jwt/jwt/pull/361 )
- Update MIGRATION_GUIDE.md by
[@​jbarham](https://togithub.com/jbarham ) in
[https://github.com/golang-jwt/jwt/pull/363 ](https://togithub.com/golang-jwt/jwt/pull/363 )
#### New Contributors
- [@​Laurin-Notemann](https://togithub.com/Laurin-Notemann ) made
their first contribution in
[https://github.com/golang-jwt/jwt/pull/361 ](https://togithub.com/golang-jwt/jwt/pull/361 )
- [@​jbarham](https://togithub.com/jbarham ) made their first
contribution in
[https://github.com/golang-jwt/jwt/pull/363 ](https://togithub.com/golang-jwt/jwt/pull/363 )
**Full Changelog**:
https://github.com/golang-jwt/jwt/compare/v5.1.0...v5.2.0
</details>
<details>
<summary>urfave/cli (github.com/urfave/cli/v2)</summary>
### [`v2.26.0`](https://togithub.com/urfave/cli/releases/tag/v2.26.0 )
[Compare
Source](https://togithub.com/urfave/cli/compare/v2.25.7...v2.26.0 )
#### What's Changed
- Bash completion nits by
[@​meatballhat](https://togithub.com/meatballhat ) in
[https://github.com/urfave/cli/pull/1762 ](https://togithub.com/urfave/cli/pull/1762 )
- Chore: Rename mkdocs requirements file name by
[@​dearchap](https://togithub.com/dearchap ) in
[https://github.com/urfave/cli/pull/1776 ](https://togithub.com/urfave/cli/pull/1776 )
- Fix:(issue\_1787) Add fix for commands not listed when hide help
comma… by [@​dearchap](https://togithub.com/dearchap ) in
[https://github.com/urfave/cli/pull/1788 ](https://togithub.com/urfave/cli/pull/1788 )
- Fix nil HelpFlag panic (v2) by
[@​wxiaoguang](https://togithub.com/wxiaoguang ) in
[https://github.com/urfave/cli/pull/1795 ](https://togithub.com/urfave/cli/pull/1795 )
- Always get 0 for a nested int64 value in v2.25.7 by
[@​stephenfire](https://togithub.com/stephenfire ) in
[https://github.com/urfave/cli/pull/1799 ](https://togithub.com/urfave/cli/pull/1799 )
- Helper messages for documenting build process by
[@​abitrolly](https://togithub.com/abitrolly ) in
[https://github.com/urfave/cli/pull/1800 ](https://togithub.com/urfave/cli/pull/1800 )
- fix: check duplicated sub command name and alias by
[@​linrl3](https://togithub.com/linrl3 ) in
[https://github.com/urfave/cli/pull/1805 ](https://togithub.com/urfave/cli/pull/1805 )
- Fix:(issue\_1689) Have consistent behavior for default text in man
and… by [@​dearchap](https://togithub.com/dearchap ) in
[https://github.com/urfave/cli/pull/1825 ](https://togithub.com/urfave/cli/pull/1825 )
- Fix linting issues by
[@​skelouse](https://togithub.com/skelouse ) in
[https://github.com/urfave/cli/pull/1696 ](https://togithub.com/urfave/cli/pull/1696 )
#### New Contributors
- [@​stephenfire](https://togithub.com/stephenfire ) made their
first contribution in
[https://github.com/urfave/cli/pull/1799 ](https://togithub.com/urfave/cli/pull/1799 )
- [@​linrl3](https://togithub.com/linrl3 ) made their first
contribution in
[https://github.com/urfave/cli/pull/1805 ](https://togithub.com/urfave/cli/pull/1805 )
**Full Changelog**:
https://github.com/urfave/cli/compare/v2.25.7...v2.26.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge -
"before 4am" (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44MS4zIiwidXBkYXRlZEluVmVyIjoiMzcuODEuMyIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: qwerty287 <ndev@web.de>
2023-12-04 20:53:46 +01:00
renovate[bot]
621eed6205
Update module github.com/google/go-github/v56 to v57 ( #2899 )
2023-12-02 15:19:39 +01:00
renovate[bot]
fb7d5ae395
Update golang (packages) ( #2894 )
...
[![Mend Renovate logo
banner](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/antonmedv/expr](https://togithub.com/antonmedv/expr ) |
require | patch | `v1.15.4` -> `v1.15.5` |
| golang.org/x/crypto | require | minor | `v0.15.0` -> `v0.16.0` |
| golang.org/x/net | require | minor | `v0.18.0` -> `v0.19.0` |
| golang.org/x/oauth2 | require | minor | `v0.14.0` -> `v0.15.0` |
| golang.org/x/term | require | minor | `v0.14.0` -> `v0.15.0` |
---
### Release Notes
<details>
<summary>antonmedv/expr (github.com/antonmedv/expr)</summary>
###
[`v1.15.5`](https://togithub.com/antonmedv/expr/releases/tag/v1.15.5 )
[Compare
Source](https://togithub.com/antonmedv/expr/compare/v1.15.4...v1.15.5 )
- Added `ceil()`, `floor()` and `round()` function.
- Fixed type checker for float arguments.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge -
"before 4am" (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy41OS44IiwidXBkYXRlZEluVmVyIjoiMzcuNTkuOCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-12-01 12:43:41 +01:00
qwerty287
7bacbd5699
Migrate to Xormigrate ( #2711 )
...
Co-authored-by: Anbraten <anton@ju60.de>
2023-11-28 10:31:54 +01:00
renovate[bot]
f0f57ec961
Update golang (packages) ( #2839 )
...
[![Mend Renovate logo
banner](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/antonmedv/expr](https://togithub.com/antonmedv/expr ) |
require | patch | `v1.15.3` -> `v1.15.4` |
| [github.com/xanzy/go-gitlab](https://togithub.com/xanzy/go-gitlab ) |
require | minor | `v0.93.2` -> `v0.94.0` |
| [k8s.io/api](https://togithub.com/kubernetes/api ) | require | patch |
`v0.28.3` -> `v0.28.4` |
| [k8s.io/apimachinery](https://togithub.com/kubernetes/apimachinery ) |
require | patch | `v0.28.3` -> `v0.28.4` |
| [k8s.io/client-go](https://togithub.com/kubernetes/client-go ) |
require | patch | `v0.28.3` -> `v0.28.4` |
---
### Release Notes
<details>
<summary>antonmedv/expr (github.com/antonmedv/expr)</summary>
###
[`v1.15.4`](https://togithub.com/antonmedv/expr/releases/tag/v1.15.4 )
[Compare
Source](https://togithub.com/antonmedv/expr/compare/v1.15.3...v1.15.4 )
- Improved type checking for `$env`
- Added support for floats in `sort()` built-in
- Fixed: AST printing for `??` operator
- Fixed: only emit `OpEqual{Int,String}` for simple types
- Fixed: fetch without `OpDeref`
([#​467](https://togithub.com/antonmedv/expr/issues/467 ))
- Docs: categorize Language Definition functions
([#​452](https://togithub.com/antonmedv/expr/issues/452 ))
- Changed: `ast.Node` type now is not copied with `ast.Patch`
</details>
<details>
<summary>xanzy/go-gitlab (github.com/xanzy/go-gitlab)</summary>
###
[`v0.94.0`](https://togithub.com/xanzy/go-gitlab/compare/v0.93.2...v0.94.0 )
[Compare
Source](https://togithub.com/xanzy/go-gitlab/compare/v0.93.2...v0.94.0 )
</details>
<details>
<summary>kubernetes/api (k8s.io/api)</summary>
###
[`v0.28.4`](https://togithub.com/kubernetes/api/compare/v0.28.3...v0.28.4 )
[Compare
Source](https://togithub.com/kubernetes/api/compare/v0.28.3...v0.28.4 )
</details>
<details>
<summary>kubernetes/apimachinery (k8s.io/apimachinery)</summary>
###
[`v0.28.4`](https://togithub.com/kubernetes/apimachinery/compare/v0.28.3...v0.28.4 )
[Compare
Source](https://togithub.com/kubernetes/apimachinery/compare/v0.28.3...v0.28.4 )
</details>
<details>
<summary>kubernetes/client-go (k8s.io/client-go)</summary>
###
[`v0.28.4`](https://togithub.com/kubernetes/client-go/compare/v0.28.3...v0.28.4 )
[Compare
Source](https://togithub.com/kubernetes/client-go/compare/v0.28.3...v0.28.4 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge -
"before 4am" (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy41OS44IiwidXBkYXRlZEluVmVyIjoiMzcuNTkuOCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: qwerty287 <ndev@web.de>
2023-11-20 08:23:01 +01:00
renovate[bot]
d6f65a0f23
Update golang (packages) ( #2815 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/golang-jwt/jwt/v5](https://togithub.com/golang-jwt/jwt ) |
require | minor | `v5.0.0` -> `v5.1.0` |
| golang.org/x/crypto | require | minor | `v0.14.0` -> `v0.15.0` |
| golang.org/x/net | require | minor | `v0.17.0` -> `v0.18.0` |
| golang.org/x/oauth2 | require | minor | `v0.13.0` -> `v0.14.0` |
| golang.org/x/term | require | minor | `v0.13.0` -> `v0.14.0` |
---
### Release Notes
<details>
<summary>golang-jwt/jwt (github.com/golang-jwt/jwt/v5)</summary>
### [`v5.1.0`](https://togithub.com/golang-jwt/jwt/releases/tag/v5.1.0 )
[Compare
Source](https://togithub.com/golang-jwt/jwt/compare/v5.0.0...v5.1.0 )
#### What's Changed
- Using jwt's native `ErrInvalidType` instead of
`json.UnsupportedTypeError` by
[@​oxisto](https://togithub.com/oxisto ) in
[https://github.com/golang-jwt/jwt/pull/316 ](https://togithub.com/golang-jwt/jwt/pull/316 )
- Fix typos in comments and test names by
[@​alexandear](https://togithub.com/alexandear ) in
[https://github.com/golang-jwt/jwt/pull/317 ](https://togithub.com/golang-jwt/jwt/pull/317 )
- Format: add whitespaces, remove empty lines by
[@​alexandear](https://togithub.com/alexandear ) in
[https://github.com/golang-jwt/jwt/pull/319 ](https://togithub.com/golang-jwt/jwt/pull/319 )
- Refactor example: use io.ReadAll instead of io.Copy by
[@​alexandear](https://togithub.com/alexandear ) in
[https://github.com/golang-jwt/jwt/pull/320 ](https://togithub.com/golang-jwt/jwt/pull/320 )
- Refactor code by using switch instead of if-else by
[@​alexandear](https://togithub.com/alexandear ) in
[https://github.com/golang-jwt/jwt/pull/318 ](https://togithub.com/golang-jwt/jwt/pull/318 )
- A quick way to validate token string by
[@​dcalsky](https://togithub.com/dcalsky ) in
[https://github.com/golang-jwt/jwt/pull/302 ](https://togithub.com/golang-jwt/jwt/pull/302 )
- Refactor: remove unnecessary \[]byte conversion to string by
[@​alexandear](https://togithub.com/alexandear ) in
[https://github.com/golang-jwt/jwt/pull/330 ](https://togithub.com/golang-jwt/jwt/pull/330 )
- Refactor: compare strings with strings.EqualFold by
[@​alexandear](https://togithub.com/alexandear ) in
[https://github.com/golang-jwt/jwt/pull/329 ](https://togithub.com/golang-jwt/jwt/pull/329 )
- Avoid use of json.NewDecoder by
[@​craigpastro](https://togithub.com/craigpastro ) in
[https://github.com/golang-jwt/jwt/pull/313 ](https://togithub.com/golang-jwt/jwt/pull/313 )
- Update ParseUnverified godoc by
[@​duhaesbaert](https://togithub.com/duhaesbaert ) in
[https://github.com/golang-jwt/jwt/pull/341 ](https://togithub.com/golang-jwt/jwt/pull/341 )
- Update ci workflows (add go1.21) by
[@​mfridman](https://togithub.com/mfridman ) in
[https://github.com/golang-jwt/jwt/pull/345 ](https://togithub.com/golang-jwt/jwt/pull/345 )
- Bump actions/checkout from 3 to 4 by
[@​dependabot](https://togithub.com/dependabot ) in
[https://github.com/golang-jwt/jwt/pull/346 ](https://togithub.com/golang-jwt/jwt/pull/346 )
- Key rotation with VerificationKeySet by
[@​mfridman](https://togithub.com/mfridman ) in
[https://github.com/golang-jwt/jwt/pull/344 ](https://togithub.com/golang-jwt/jwt/pull/344 )
- Add explicit ClaimsValidator implementation check for custom claims by
[@​epelc](https://togithub.com/epelc ) in
[https://github.com/golang-jwt/jwt/pull/343 ](https://togithub.com/golang-jwt/jwt/pull/343 )
- feat: allow making exp claim required by
[@​tareksha](https://togithub.com/tareksha ) in
[https://github.com/golang-jwt/jwt/pull/351 ](https://togithub.com/golang-jwt/jwt/pull/351 )
- Add error handling to examples by
[@​craigpastro](https://togithub.com/craigpastro ) in
[https://github.com/golang-jwt/jwt/pull/312 ](https://togithub.com/golang-jwt/jwt/pull/312 )
#### New Contributors
- [@​alexandear](https://togithub.com/alexandear ) made their first
contribution in
[https://github.com/golang-jwt/jwt/pull/317 ](https://togithub.com/golang-jwt/jwt/pull/317 )
- [@​dcalsky](https://togithub.com/dcalsky ) made their first
contribution in
[https://github.com/golang-jwt/jwt/pull/302 ](https://togithub.com/golang-jwt/jwt/pull/302 )
- [@​craigpastro](https://togithub.com/craigpastro ) made their
first contribution in
[https://github.com/golang-jwt/jwt/pull/313 ](https://togithub.com/golang-jwt/jwt/pull/313 )
- [@​duhaesbaert](https://togithub.com/duhaesbaert ) made their
first contribution in
[https://github.com/golang-jwt/jwt/pull/341 ](https://togithub.com/golang-jwt/jwt/pull/341 )
- [@​epelc](https://togithub.com/epelc ) made their first
contribution in
[https://github.com/golang-jwt/jwt/pull/343 ](https://togithub.com/golang-jwt/jwt/pull/343 )
- [@​tareksha](https://togithub.com/tareksha ) made their first
contribution in
[https://github.com/golang-jwt/jwt/pull/351 ](https://togithub.com/golang-jwt/jwt/pull/351 )
**Full Changelog**:
https://github.com/golang-jwt/jwt/compare/v5.0.0...v5.1.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge -
"before 4am" (UTC).
🚦 **Automerge**: Enabled.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy40Ni4wIiwidXBkYXRlZEluVmVyIjoiMzcuNDYuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-11-13 07:54:35 +01:00
renovate[bot]
18414cc29f
Update golang (packages) ( #2742 )
2023-11-05 08:57:05 +01:00
Anbraten
5ff006614f
Enhance linter and errors ( #1572 )
...
Co-authored-by: 6543 <m.huber@kithara.com>
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
2023-11-03 11:44:03 +01:00
renovate[bot]
e4fe5022c0
fix(deps): update golang (packages) ( #2671 )
2023-10-31 12:55:47 +01:00
renovate[bot]
8a21a4c08e
fix(deps): update docker to v24 ( #2675 )
2023-10-31 12:33:27 +01:00
qwerty287
31240b5771
Remove SSH backend ( #2635 )
...
The SSH backend is, similar to Gogs and Coding for forges, completely
unmaintained and seems unused (it is likely broken but we didn't get any
reports).
Instead, you should directly run the agent on the SSH machine with the
`local` backend.
2023-10-24 01:55:30 +02:00
renovate[bot]
121457b76e
fix(deps): update golang (packages) ( #2614 )
2023-10-23 08:45:34 +02:00
renovate[bot]
62e1081b24
fix(deps): update golang (packages) to v23.0.7+incompatible ( #2586 )
2023-10-15 08:21:56 +02:00
Patrick Schratz
1b98e58014
Update to docker 23 ( #2577 )
...
fix #1807
2023-10-14 12:39:45 +02:00
renovate[bot]
b1cedecc42
fix(deps): update module github.com/google/go-github/v55 to v56 ( #2573 )
2023-10-12 15:28:00 +02:00
renovate[bot]
27168804f0
fix(deps): update golang deps non-major ( #2566 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| golang.org/x/net | require | minor | `v0.16.0` -> `v0.17.0` |
| [google.golang.org/grpc](https://togithub.com/grpc/grpc-go ) | require
| patch | `v1.58.2` -> `v1.58.3` |
---
### ⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the
Dependency Dashboard for more information.
---
### Release Notes
<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>
### [`v1.58.3`](https://togithub.com/grpc/grpc-go/releases/tag/v1.58.3 )
[Compare
Source](https://togithub.com/grpc/grpc-go/compare/v1.58.2...v1.58.3 )
### Security
- server: prohibit more than MaxConcurrentStreams handlers from running
at once (CVE-2023-44487)
In addition to this change, applications should ensure they do not leave
running tasks behind related to the RPC before returning from method
handlers, or should enforce appropriate limits on any such work.
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge - At any
time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44LjEiLCJ1cGRhdGVkSW5WZXIiOiIzNy44LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-11 10:46:29 +02:00
renovate[bot]
1c62f9f22e
fix(deps): update module github.com/xanzy/go-gitlab to v0.93.1 ( #2560 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/xanzy/go-gitlab](https://togithub.com/xanzy/go-gitlab ) |
require | patch | `v0.93.0` -> `v0.93.1` |
---
### Release Notes
<details>
<summary>xanzy/go-gitlab (github.com/xanzy/go-gitlab)</summary>
###
[`v0.93.1`](https://togithub.com/xanzy/go-gitlab/compare/v0.93.0...v0.93.1 )
[Compare
Source](https://togithub.com/xanzy/go-gitlab/compare/v0.93.0...v0.93.1 )
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge - At any
time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNy44LjEiLCJ1cGRhdGVkSW5WZXIiOiIzNy44LjEiLCJ0YXJnZXRCcmFuY2giOiJtYWluIn0=-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-10 07:52:17 +02:00
qwerty287
46273e54d8
Require Go 1.21 ( #2553 )
...
Main change are the new `maps` and `slices` stdlib packages so we can
replace `golang.org/x/exp`.
2023-10-09 09:11:08 +02:00
renovate[bot]
4b4e91e4ee
fix(deps): update golang.org/x/exp digest to 7918f67 ( #2535 )
2023-10-07 08:46:08 +02:00
renovate[bot]
14fb564629
fix(deps): update golang deps non-major ( #2533 )
2023-10-06 17:33:06 +02:00
renovate[bot]
931af16d14
fix(deps): update golang.org/x/exp digest to 3e424a5 ( #2530 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-05 23:39:39 +02:00
renovate[bot]
e8ef1fb3c1
fix(deps): update module github.com/docker/distribution to v2.8.3+incompatible ( #2517 )
2023-10-03 09:35:40 +02:00
renovate[bot]
dd335f43f7
fix(deps): update module github.com/melbahja/goph to v1.4.0 ( #2513 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-10-01 09:50:10 +01:00
renovate[bot]
64951d6a9e
fix(deps): update golang deps non-major ( #2500 )
2023-09-30 09:23:11 +02:00
renovate[bot]
f6d551c8b7
fix(deps): update golang deps non-major ( #2486 )
2023-09-22 16:01:09 +02:00
qwerty287
134b7b0a49
Update gitea sdk ( #2464 )
...
update gitea sdk to 0.16.0. Renovate didn't notice this?
2023-09-16 09:53:27 +02:00
renovate[bot]
bb6347e800
fix(deps): update golang deps non-major ( #2462 )
2023-09-16 08:42:27 +02:00
renovate[bot]
3d19d863d1
fix(deps): update module github.com/tevino/abool to v2 ( #2460 )
2023-09-14 07:34:36 +02:00
renovate[bot]
3eced32b81
fix(deps): update module github.com/google/go-github/v39 to v55 ( #2456 )
2023-09-13 14:49:39 +02:00
renovate[bot]
97a7438ab1
fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 ( #2449 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/golang-jwt/jwt/v4](https://togithub.com/golang-jwt/jwt ) |
require | major | `v4.5.0` -> `v5.0.0` |
---
### ⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the
Dependency Dashboard for more information.
---
### Release Notes
<details>
<summary>golang-jwt/jwt (github.com/golang-jwt/jwt/v4)</summary>
### [`v5.0.0`](https://togithub.com/golang-jwt/jwt/releases/tag/v5.0.0 )
[Compare
Source](https://togithub.com/golang-jwt/jwt/compare/v4.5.0...v5.0.0 )
### 🚀 New Major Version `v5` 🚀
It's finally here, the release you have been waiting for! We don't take
breaking changes lightly, but the changes outlined below were necessary
to address some of the challenges of the previous API. A big thanks for
[@​mfridman](https://togithub.com/mfridman ) for all the reviews,
all contributors for their commits and of course
[@​dgrijalva](https://togithub.com/dgrijalva ) for the original
code. I hope we kept some of the spirit of your original `v4` branch
alive in the approach we have taken here.
\~[@​oxisto](https://togithub.com/oxisto ), on behalf of
[@​golang-jwt/maintainers](https://togithub.com/golang-jwt/maintainers )
Version `v5` contains a major rework of core functionalities in the
`jwt-go` library. This includes support for several validation options
as well as a re-design of the `Claims` interface. Lastly, we reworked
how errors work under the hood, which should provide a better overall
developer experience.
Starting from
[v5.0.0](https://togithub.com/golang-jwt/jwt/releases/tag/v5.0.0 ), the
import path will be:
"github.com/golang-jwt/jwt/v5"
For most users, changing the import path *should* suffice. However,
since we intentionally changed and cleaned some of the public API,
existing programs might need to be updated. The following sections
describe significant changes and corresponding updates for existing
programs.
#### Parsing and Validation Options
Under the hood, a new `validator` struct takes care of validating the
claims. A long awaited feature has been the option to fine-tune the
validation of tokens. This is now possible with several `ParserOption`
functions that can be appended to most `Parse` functions, such as
`ParseWithClaims`. The most important options and changes are:
- Added `WithLeeway` to support specifying the leeway that is allowed
when validating time-based claims, such as `exp` or `nbf`.
- Changed default behavior to not check the `iat` claim. Usage of this
claim is OPTIONAL according to the JWT RFC. The claim itself is also
purely informational according to the RFC, so a strict validation
failure is not recommended. If you want to check for sensible values in
these claims, please use the `WithIssuedAt` parser option.
- Added `WithAudience`, `WithSubject` and `WithIssuer` to support
checking for expected `aud`, `sub` and `iss`.
- Added `WithStrictDecoding` and `WithPaddingAllowed` options to allow
previously global settings to enable base64 strict encoding and the
parsing of base64 strings with padding. The latter is strictly speaking
against the standard, but unfortunately some of the major identity
providers issue some of these incorrect tokens. Both options are
disabled by default.
#### Changes to the `Claims` interface
##### Complete Restructuring
Previously, the claims interface was satisfied with an implementation of
a `Valid() error` function. This had several issues:
- The different claim types (struct claims, map claims, etc.) then
contained similar (but not 100 % identical) code of how this validation
was done. This lead to a lot of (almost) duplicate code and was hard to
maintain
- It was not really semantically close to what a "claim" (or a set of
claims) really is; which is a list of defined key/value pairs with a
certain semantic meaning.
Since all the validation functionality is now extracted into the
validator, all `VerifyXXX` and `Valid` functions have been removed from
the `Claims` interface. Instead, the interface now represents a list of
getters to retrieve values with a specific meaning. This allows us to
completely decouple the validation logic with the underlying storage
representation of the claim, which could be a struct, a map or even
something stored in a database.
```go
type Claims interface {
GetExpirationTime() (*NumericDate, error)
GetIssuedAt() (*NumericDate, error)
GetNotBefore() (*NumericDate, error)
GetIssuer() (string, error)
GetSubject() (string, error)
GetAudience() (ClaimStrings, error)
}
```
##### Supported Claim Types and Removal of `StandardClaims`
The two standard claim types supported by this library, `MapClaims` and
`RegisteredClaims` both implement the necessary functions of this
interface. The old `StandardClaims` struct, which has already been
deprecated in `v4` is now removed.
Users using custom claims, in most cases, will not experience any
changes in the behavior as long as they embedded `RegisteredClaims`. If
they created a new claim type from scratch, they now need to implemented
the proper getter functions.
##### Migrating Application Specific Logic of the old `Valid`
Previously, users could override the `Valid` method in a custom claim,
for example to extend the validation with application-specific claims.
However, this was always very dangerous, since once could easily disable
the standard validation and signature checking.
In order to avoid that, while still supporting the use-case, a new
`ClaimsValidator` interface has been introduced. This interface consists
of the `Validate() error` function. If the validator sees, that a
`Claims` struct implements this interface, the errors returned to the
`Validate` function will be *appended* to the regular standard
validation. It is not possible to disable the standard validation
anymore (even only by accident).
Usage examples can be found in [example_test.go](./example_test.go), to
build claims structs like the following.
```go
// MyCustomClaims includes all registered claims, plus Foo.
type MyCustomClaims struct {
Foo string `json:"foo"`
jwt.RegisteredClaims
}
// Validate can be used to execute additional application-specific claims
// validation.
func (m MyCustomClaims) Validate() error {
if m.Foo != "bar" {
return errors.New("must be foobar")
}
return nil
}
```
#### Changes to the `Token` and `Parser` struct
The previously global functions `DecodeSegment` and `EncodeSegment` were
moved to the `Parser` and `Token` struct respectively. This will allow
us in the future to configure the behavior of these two based on options
supplied on the parser or the token (creation). This also removes two
previously global variables and moves them to parser options
`WithStrictDecoding` and `WithPaddingAllowed`.
In order to do that, we had to adjust the way signing methods work.
Previously they were given a base64 encoded signature in `Verify` and
were expected to return a base64 encoded version of the signature in
`Sign`, both as a `string`. However, this made it necessary to have
`DecodeSegment` and `EncodeSegment` global and was a less than perfect
design because we were repeating encoding/decoding steps for all signing
methods. Now, `Sign` and `Verify` operate on a decoded signature as a
`[]byte`, which feels more natural for a cryptographic operation anyway.
Lastly, `Parse` and `SignedString` take care of the final
encoding/decoding part.
In addition to that, we also changed the `Signature` field on `Token`
from a `string` to `[]byte` and this is also now populated with the
decoded form. This is also more consistent, because the other parts of
the JWT, mainly `Header` and `Claims` were already stored in decoded
form in `Token`. Only the signature was stored in base64 encoded form,
which was redundant with the information in the `Raw` field, which
contains the complete token as base64.
```go
type Token struct {
Raw string // Raw contains the raw token
Method SigningMethod // Method is the signing method used or to be used
Header map[string]interface{} // Header is the first segment of the token in decoded form
Claims Claims // Claims is the second segment of the token in decoded form
Signature []byte // Signature is the third segment of the token in decoded form
Valid bool // Valid specifies if the token is valid
}
```
Most (if not all) of these changes should not impact the normal usage of
this library. Only users directly accessing the `Signature` field as
well as developers of custom signing methods should be affected.
#### What's Changed
- Added GitHub Actions Markdown by
[@​oxisto](https://togithub.com/oxisto ) in
[https://github.com/golang-jwt/jwt/pull/260 ](https://togithub.com/golang-jwt/jwt/pull/260 )
- Remove `StandardClaims` in favor of `RegisteredClaims` by
[@​oxisto](https://togithub.com/oxisto ) in
[#​235](https://togithub.com/golang-jwt/jwt/issues/235 )
- Adding more coverage by [@​oxisto](https://togithub.com/oxisto )
in [#​268](https://togithub.com/golang-jwt/jwt/issues/268 )
- More consistent way of handling validation errors by
[@​oxisto](https://togithub.com/oxisto ) in
[#​274](https://togithub.com/golang-jwt/jwt/issues/274 )
- New Validation API by [@​oxisto](https://togithub.com/oxisto ) in
[https://github.com/golang-jwt/jwt/pull/236 ](https://togithub.com/golang-jwt/jwt/pull/236 )
- `v5` Pre-Release by [@​oxisto](https://togithub.com/oxisto ) in
[https://github.com/golang-jwt/jwt/pull/234 ](https://togithub.com/golang-jwt/jwt/pull/234 )
- no need for string slice and call to strings.join by
[@​moneszarrugh](https://togithub.com/moneszarrugh ) in
[https://github.com/golang-jwt/jwt/pull/115 ](https://togithub.com/golang-jwt/jwt/pull/115 )
- Update MIGRATION_GUIDE.md by
[@​liam-verta](https://togithub.com/liam-verta ) in
[https://github.com/golang-jwt/jwt/pull/289 ](https://togithub.com/golang-jwt/jwt/pull/289 )
- Moving `DecodeSegement` to `Parser` by
[@​oxisto](https://togithub.com/oxisto ) in
[https://github.com/golang-jwt/jwt/pull/278 ](https://togithub.com/golang-jwt/jwt/pull/278 )
- Adjusting the error checking example by
[@​oxisto](https://togithub.com/oxisto ) in
[https://github.com/golang-jwt/jwt/pull/270 ](https://togithub.com/golang-jwt/jwt/pull/270 )
- add documentation to hmac `Verify` & `Sign` to detail why string is
not an advisable input for key by
[@​dillonstreator](https://togithub.com/dillonstreator ) in
[https://github.com/golang-jwt/jwt/pull/249 ](https://togithub.com/golang-jwt/jwt/pull/249 )
- Add golangci-lint by [@​mfridman](https://togithub.com/mfridman )
in
[https://github.com/golang-jwt/jwt/pull/279 ](https://togithub.com/golang-jwt/jwt/pull/279 )
- Added dependabot updates for GitHub actions by
[@​oxisto](https://togithub.com/oxisto ) in
[https://github.com/golang-jwt/jwt/pull/298 ](https://togithub.com/golang-jwt/jwt/pull/298 )
- Bump actions/checkout from 2 to 3 by
[@​dependabot](https://togithub.com/dependabot ) in
[https://github.com/golang-jwt/jwt/pull/299 ](https://togithub.com/golang-jwt/jwt/pull/299 )
- Bump actions/setup-go from 3 to 4 by
[@​dependabot](https://togithub.com/dependabot ) in
[https://github.com/golang-jwt/jwt/pull/300 ](https://togithub.com/golang-jwt/jwt/pull/300 )
- Added coverage reporting by
[@​oxisto](https://togithub.com/oxisto ) in
[https://github.com/golang-jwt/jwt/pull/304 ](https://togithub.com/golang-jwt/jwt/pull/304 )
- Last Documentation cleanups for `v5` release by
[@​oxisto](https://togithub.com/oxisto ) in
[https://github.com/golang-jwt/jwt/pull/291 ](https://togithub.com/golang-jwt/jwt/pull/291 )
- enable jwt.ParsePublicKeyFromPEM to parse PKCS1 Public Key by
[@​twocs](https://togithub.com/twocs ) in
[https://github.com/golang-jwt/jwt/pull/120 ](https://togithub.com/golang-jwt/jwt/pull/120 )
#### New Contributors
- [@​moneszarrugh](https://togithub.com/moneszarrugh ) made their
first contribution in
[https://github.com/golang-jwt/jwt/pull/115 ](https://togithub.com/golang-jwt/jwt/pull/115 )
- [@​liam-verta](https://togithub.com/liam-verta ) made their first
contribution in
[https://github.com/golang-jwt/jwt/pull/289 ](https://togithub.com/golang-jwt/jwt/pull/289 )
- [@​dillonstreator](https://togithub.com/dillonstreator ) made
their first contribution in
[https://github.com/golang-jwt/jwt/pull/249 ](https://togithub.com/golang-jwt/jwt/pull/249 )
- [@​dependabot](https://togithub.com/dependabot ) made their first
contribution in
[https://github.com/golang-jwt/jwt/pull/299 ](https://togithub.com/golang-jwt/jwt/pull/299 )
- [@​twocs](https://togithub.com/twocs ) made their first
contribution in
[https://github.com/golang-jwt/jwt/pull/120 ](https://togithub.com/golang-jwt/jwt/pull/120 )
**Full Changelog**:
https://github.com/golang-jwt/jwt/compare/v4.5.0...v5.0.0
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi44My4wIiwidXBkYXRlZEluVmVyIjoiMzYuODMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
---------
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: qwerty287 <ndev@web.de>
2023-09-13 09:01:01 +02:00
renovate[bot]
b27c95627a
fix(deps): update module github.com/golang-jwt/jwt/v4 to v5 ( #2447 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-12 13:52:02 +02:00
renovate[bot]
7d2bf54685
fix(deps): update golang deps non-major ( #2437 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| golang.org/x/oauth2 | require | minor | `v0.8.0` -> `v0.12.0` |
| [google.golang.org/grpc](https://togithub.com/grpc/grpc-go ) | require
| minor | `v1.55.0` -> `v1.58.0` |
---
### ⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the
Dependency Dashboard for more information.
---
### Release Notes
<details>
<summary>grpc/grpc-go (google.golang.org/grpc)</summary>
### [`v1.58.0`](https://togithub.com/grpc/grpc-go/releases/tag/v1.58.0 ):
Release 1.58.0
[Compare
Source](https://togithub.com/grpc/grpc-go/compare/v1.57.0...v1.58.0 )
### API Changes
See [#​6472](https://togithub.com/grpc/grpc-go/issues/6472 ) for
details about these changes.
- balancer: add `StateListener` to `NewSubConnOptions` for `SubConn`
state updates and deprecate `Balancer.UpdateSubConnState`
([#​6481](https://togithub.com/grpc/grpc-go/issues/6481 ))
- `UpdateSubConnState` will be deleted in the future.
- balancer: add `SubConn.Shutdown` and deprecate
`Balancer.RemoveSubConn`
([#​6493](https://togithub.com/grpc/grpc-go/issues/6493 ))
- `RemoveSubConn` will be deleted in the future.
- resolver: remove deprecated `AddressType`
([#​6451](https://togithub.com/grpc/grpc-go/issues/6451 ))
- This was previously used as a signal to enable the "grpclb" load
balancing policy, and to pass LB addresses to the policy. Instead,
`balancer/grpclb/state.Set()` should be used to add these addresses to
the name resolver's output. The built-in "dns" name resolver already
does this.
- resolver: add new field `Endpoints` to `State` and deprecate
`Addresses`
([#​6471](https://togithub.com/grpc/grpc-go/issues/6471 ))
- `Addresses` will be deleted in the future.
### New Features
- balancer/leastrequest: Add experimental support for least request LB
policy and least request configured as a custom xDS policy
([#​6510](https://togithub.com/grpc/grpc-go/issues/6510 ),
[#​6517](https://togithub.com/grpc/grpc-go/issues/6517 ))
- Set `GRPC_EXPERIMENTAL_ENABLE_LEAST_REQUEST=true` to enable
- stats: Add an RPC event for blocking caused by the LB policy's picker
([#​6422](https://togithub.com/grpc/grpc-go/issues/6422 ))
### Bug Fixes
- clusterresolver: fix deadlock when dns resolver responds inline with
update or error at build time
([#​6563](https://togithub.com/grpc/grpc-go/issues/6563 ))
- grpc: fix a bug where the channel could erroneously report
`TRANSIENT_FAILURE` when actually moving to `IDLE`
([#​6497](https://togithub.com/grpc/grpc-go/issues/6497 ))
- balancergroup: do not cache closed sub-balancers by default; affects
`rls`, `weightedtarget` and `clustermanager` LB policies
([#​6523](https://togithub.com/grpc/grpc-go/issues/6523 ))
- client: fix a bug that prevented detection of RPC status in
trailers-only RPC responses when using `ClientStream.Header()`, and
prevented retry of the RPC
([#​6557](https://togithub.com/grpc/grpc-go/issues/6557 ))
### Performance Improvements
- client & server: Add experimental `[With]SharedWriteBuffer` to improve
performance by reducing allocations when sending RPC messages. (Disabled
by default.)
([#​6309](https://togithub.com/grpc/grpc-go/issues/6309 ))
- Special Thanks:
[@​s-matyukevich](https://togithub.com/s-matyukevich )
### [`v1.57.0`](https://togithub.com/grpc/grpc-go/releases/tag/v1.57.0 ):
Release 1.57.0
[Compare
Source](https://togithub.com/grpc/grpc-go/compare/v1.56.2...v1.57.0 )
### API Changes
- resolver: remove deprecated `Target.Scheme` and `Target.Authority`.
Use `URL.Scheme` and `URL.Host` instead, respectively
([#​6363](https://togithub.com/grpc/grpc-go/issues/6363 ))
### Behavior Changes
- client: percent-encode the default authority for the channel
([#​6428](https://togithub.com/grpc/grpc-go/issues/6428 ))
- xds: require EDS service name to be set in a CDS cluster with an
'xdstp' resource name (gRFC A47)
([#​6438](https://togithub.com/grpc/grpc-go/issues/6438 ))
### New Features
- reflection: support the v1 reflection service and update `Register` to
register both v1alpha and v1
([#​6329](https://togithub.com/grpc/grpc-go/issues/6329 ))
- xds: add support for string matcher in RBAC header matching
([#​6419](https://togithub.com/grpc/grpc-go/issues/6419 ))
- alts: add support for `GRPC_ALTS_MAX_CONCURRENT_HANDSHAKES` env var
([#​6267](https://togithub.com/grpc/grpc-go/issues/6267 ))
- balancer/weightedroundrobin: de-experimentalize name of LB policy
([#​6477](https://togithub.com/grpc/grpc-go/issues/6477 ))
### Bug Fixes
- status: `status.FromError` now returns an error with `codes.Unknown`
when the error implements the `GRPCStatus()` method, and calling
`GRPCStatus()` returns `nil`
([#​6374](https://togithub.com/grpc/grpc-go/issues/6374 ))
- Special Thanks: [@​atollena](https://togithub.com/atollena )
- server: fix bug preventing TCP user timeout from being set on the
connection when TLS is used
([#​6321](https://togithub.com/grpc/grpc-go/issues/6321 ))
- Special Thanks: [@​tobotg](https://togithub.com/tobotg )
- client: eliminate connection churn during an address update that
differs only in balancer attributes
([#​6439](https://togithub.com/grpc/grpc-go/issues/6439 ))
- clusterresolver: handle EDS nacks, resource-not-found errors, and DNS
Resolver errors correctly
([#​6436](https://togithub.com/grpc/grpc-go/issues/6436 ),
[#​6461](https://togithub.com/grpc/grpc-go/issues/6461 ))
- xds/ringhash: cache connectivity state of subchannels inside picker to
avoid rare races
([#​6351](https://togithub.com/grpc/grpc-go/issues/6351 ))
### [`v1.56.2`](https://togithub.com/grpc/grpc-go/releases/tag/v1.56.2 ):
Release 1.56.2
[Compare
Source](https://togithub.com/grpc/grpc-go/compare/v1.56.1...v1.56.2 )
- status: To fix a panic, `status.FromError` now returns an error with
`codes.Unknown` when the error implements the `GRPCStatus()` method, and
calling `GRPCStatus()` returns `nil`.
([#​6374](https://togithub.com/grpc/grpc-go/issues/6374 ))
### [`v1.56.1`](https://togithub.com/grpc/grpc-go/releases/tag/v1.56.1 ):
Release 1.56.1
[Compare
Source](https://togithub.com/grpc/grpc-go/compare/v1.56.0...v1.56.1 )
- client: handle empty address lists correctly in addrConn.updateAddrs
### [`v1.56.0`](https://togithub.com/grpc/grpc-go/releases/tag/v1.56.0 ):
Release 1.56.0
[Compare
Source](https://togithub.com/grpc/grpc-go/compare/v1.55.1...v1.56.0 )
### New Features
- client: support channel idleness using `WithIdleTimeout` dial option
([#​6263](https://togithub.com/grpc/grpc-go/issues/6263 ))
- This feature is currently disabled by default, but will be enabled
with a 30 minute default in the future.
- client: when using pickfirst, keep channel state in TRANSIENT_FAILURE
until it becomes READY ([gRFC
A62](https://togithub.com/grpc/proposal/blob/master/A62-pick-first.md ))
([#​6306](https://togithub.com/grpc/grpc-go/issues/6306 ))
- xds: Add support for Custom LB Policies ([gRFC
A52](https://togithub.com/grpc/proposal/blob/master/A52-xds-custom-lb-policies.md ))
([#​6224](https://togithub.com/grpc/grpc-go/issues/6224 ))
- xds: support pick_first Custom LB policy ([gRFC
A62](https://togithub.com/grpc/proposal/blob/master/A62-pick-first.md ))
([#​6314](https://togithub.com/grpc/grpc-go/issues/6314 ))
([#​6317](https://togithub.com/grpc/grpc-go/issues/6317 ))
- client: add support for pickfirst address shuffling ([gRFC
A62](https://togithub.com/grpc/proposal/blob/master/A62-pick-first.md ))
([#​6311](https://togithub.com/grpc/grpc-go/issues/6311 ))
- xds: Add support for String Matcher Header Matcher in RDS
([#​6313](https://togithub.com/grpc/grpc-go/issues/6313 ))
- xds/outlierdetection: Add Channelz Logger to Outlier Detection LB
([#​6145](https://togithub.com/grpc/grpc-go/issues/6145 ))
- Special Thanks:
[@​s-matyukevich](https://togithub.com/s-matyukevich )
- xds: enable RLS in xDS by default
([#​6343](https://togithub.com/grpc/grpc-go/issues/6343 ))
- orca: add support for application_utilization field and missing range
checks on several metrics setters
- balancer/weightedroundrobin: add new LB policy for balancing between
backends based on their load reports ([gRFC
A58](https://togithub.com/grpc/proposal/blob/master/A58-client-side-weighted-round-robin-lb-policy.md ))
([#​6241](https://togithub.com/grpc/grpc-go/issues/6241 ))
- authz: add conversion of json to RBAC Audit Logging config
([#​6192](https://togithub.com/grpc/grpc-go/issues/6192 ))
- authz: add support for stdout logger
([#​6230](https://togithub.com/grpc/grpc-go/issues/6230 ) and
[#​6298](https://togithub.com/grpc/grpc-go/issues/6298 ))
- authz: support customizable audit functionality for authorization
policy ([#​6192](https://togithub.com/grpc/grpc-go/issues/6192 )
[#​6230](https://togithub.com/grpc/grpc-go/issues/6230 ) [#​6298](https://togithub.com/grpc/grpc-go/issues/6298 )
[#​6158](https://togithub.com/grpc/grpc-go/issues/6158 )
[#​6304](https://togithub.com/grpc/grpc-go/issues/6304 ) and
[#​6225](https://togithub.com/grpc/grpc-go/issues/6225 ))
### Bug Fixes
- orca: fix a race at startup of out-of-band metric subscriptions that
would cause the report interval to request 0
([#​6245](https://togithub.com/grpc/grpc-go/issues/6245 ))
- xds/xdsresource: Fix Outlier Detection Config Handling and correctly
set xDS Defaults
([#​6361](https://togithub.com/grpc/grpc-go/issues/6361 ))
- xds/outlierdetection: Fix Outlier Detection Config Handling by setting
defaults in ParseConfig()
([#​6361](https://togithub.com/grpc/grpc-go/issues/6361 ))
### API Changes
- orca: allow a ServerMetricsProvider to be passed to the ORCA service
and ServerOption
([#​6223](https://togithub.com/grpc/grpc-go/issues/6223 ))
### [`v1.55.1`](https://togithub.com/grpc/grpc-go/releases/tag/v1.55.1 ):
Release 1.55.1
[Compare
Source](https://togithub.com/grpc/grpc-go/compare/v1.55.0...v1.55.1 )
- status: To fix a panic, `status.FromError` now returns an error with
`codes.Unknown` when the error implements the `GRPCStatus()` method, and
calling `GRPCStatus()` returns `nil`.
([#​6374](https://togithub.com/grpc/grpc-go/issues/6374 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - "before 4am" (UTC), Automerge - At any
time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
👻 **Immortal**: This PR will be recreated if closed unmerged. Get
[config help](https://togithub.com/renovatebot/renovate/discussions ) if
that's undesired.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi44My4wIiwidXBkYXRlZEluVmVyIjoiMzYuODMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-10 22:46:15 +02:00
renovate[bot]
5bb8ff546d
fix(deps): update module xorm.io/xorm to v1.3.3 ( #2393 )
2023-09-10 09:51:14 +02:00
renovate[bot]
06dc186e46
fix(deps): update module github.com/rs/zerolog to v1.30.0 ( #2404 )
2023-09-10 09:07:21 +02:00
renovate[bot]
78e487d1d8
fix(deps): update module github.com/jellydator/ttlcache/v3 to v3.1.0 ( #2402 )
2023-09-10 08:48:31 +02:00
renovate[bot]
c73247f330
fix(deps): update module github.com/xanzy/go-gitlab to v0.91.1 ( #2405 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-09 17:31:39 +02:00
renovate[bot]
b60b922514
fix(deps): update module github.com/antonmedv/expr to v1.15.1 ( #2400 )
2023-09-09 15:14:41 +02:00
renovate[bot]
6d59bd1130
fix(deps): update module github.com/prometheus/client_golang to v1.16.0 ( #2403 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Patrick Schratz <patrick.schratz@gmail.com>
2023-09-09 14:25:25 +02:00
renovate[bot]
f925d35283
fix(deps): update module github.com/urfave/cli/v2 to v2.25.7 ( #2391 )
2023-09-09 14:04:59 +02:00
renovate[bot]
2ccbe2d532
fix(deps): update module google.golang.org/protobuf to v1.31.0 ( #2409 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-09 13:40:36 +02:00
renovate[bot]
af73526cbc
fix(deps): update kubernetes packages to v0.28.1 ( #2399 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-09 10:01:54 +02:00
renovate[bot]
23f61fcc30
fix(deps): update module github.com/swaggo/swag to v1.16.2 ( #2390 )
...
[![Mend
Renovate](https://app.renovatebot.com/images/banner.svg )](https://renovatebot.com )
This PR contains the following updates:
| Package | Type | Update | Change |
|---|---|---|---|
| [github.com/swaggo/swag](https://togithub.com/swaggo/swag ) | require |
patch | `v1.16.1` -> `v1.16.2` |
---
### ⚠ Dependency Lookup Warnings ⚠
Warnings were logged while processing this repo. Please check the
Dependency Dashboard for more information.
---
### Release Notes
<details>
<summary>swaggo/swag (github.com/swaggo/swag)</summary>
### [`v1.16.2`](https://togithub.com/swaggo/swag/releases/tag/v1.16.2 )
[Compare
Source](https://togithub.com/swaggo/swag/compare/v1.16.1...v1.16.2 )
#### Changelog
- [`f05ccdc`](https://togithub.com/swaggo/swag/commit/f05ccdc ) add byte
check before and after file is formatted
([#​1637](https://togithub.com/swaggo/swag/issues/1637 ))
- [`7534a13`](https://togithub.com/swaggo/swag/commit/7534a13 ) add cli
flag --pdl to determine whether parse operations in dependency
([#​1605](https://togithub.com/swaggo/swag/issues/1605 ))
- [`21d34e2`](https://togithub.com/swaggo/swag/commit/21d34e2 ) add
retract to fix proxy cache caused by accidentally pushed tags
([#​1562](https://togithub.com/swaggo/swag/issues/1562 ))
- [`b2f325f`](https://togithub.com/swaggo/swag/commit/b2f325f )
chore(deps): bump github.com/gin-gonic/gin
([#​1598](https://togithub.com/swaggo/swag/issues/1598 ))
- [`8e5b314`](https://togithub.com/swaggo/swag/commit/8e5b314 )
chore(deps): bump github.com/gin-gonic/gin in /example/celler
([#​1599](https://togithub.com/swaggo/swag/issues/1599 ))
- [`c8372f6`](https://togithub.com/swaggo/swag/commit/c8372f6 )
chore(deps): bump github.com/gin-gonic/gin in /example/go-module-support
([#​1600](https://togithub.com/swaggo/swag/issues/1600 ))
- [`23c9b5c`](https://togithub.com/swaggo/swag/commit/23c9b5c )
chore(deps): bump gopkg.in/yaml.v3
([#​1663](https://togithub.com/swaggo/swag/issues/1663 ))
- [`8ebf32f`](https://togithub.com/swaggo/swag/commit/8ebf32f )
docs(readme): fix param brace
([#​1647](https://togithub.com/swaggo/swag/issues/1647 ))
- [`27b27bd`](https://togithub.com/swaggo/swag/commit/27b27bd )
enchancement: report which property is triggering a parsing error
([#​1439](https://togithub.com/swaggo/swag/issues/1439 ))
- [`d0f9dc5`](https://togithub.com/swaggo/swag/commit/d0f9dc5 ) feat: add
--packagePrefix=P for only parse packages matched by prefix P
([#​1582](https://togithub.com/swaggo/swag/issues/1582 ))
- [`1bf0078`](https://togithub.com/swaggo/swag/commit/1bf0078 ) feat:
global security
([#​1620](https://togithub.com/swaggo/swag/issues/1620 ))
- [`9f128b4`](https://togithub.com/swaggo/swag/commit/9f128b4 ) feat:
preserve file permission when write formatted files
([#​1636](https://togithub.com/swaggo/swag/issues/1636 ))
- [`ea35767`](https://togithub.com/swaggo/swag/commit/ea35767 ) fix bug:
enums of underscored number
([#​1581](https://togithub.com/swaggo/swag/issues/1581 ))
- [`0cee1c5`](https://togithub.com/swaggo/swag/commit/0cee1c5 ) fix
required params parsing for routes with multiple paths and multiple
params ([#​1621](https://togithub.com/swaggo/swag/issues/1621 ))
- [`e73a0d0`](https://togithub.com/swaggo/swag/commit/e73a0d0 ) fix using
tab (\t) as separator for custom type names
([#​1594](https://togithub.com/swaggo/swag/issues/1594 ))
- [`4536bf2`](https://togithub.com/swaggo/swag/commit/4536bf2 ) fix:
enums in body got parse incorrectly
([#​1625](https://togithub.com/swaggo/swag/issues/1625 ))
- [`e749ad5`](https://togithub.com/swaggo/swag/commit/e749ad5 ) fix: lint
error for generated docs.go
([#​1583](https://togithub.com/swaggo/swag/issues/1583 ))
- [`575963e`](https://togithub.com/swaggo/swag/commit/575963e ) parse
binary literal const
([#​1593](https://togithub.com/swaggo/swag/issues/1593 ))
- [`fe971d2`](https://togithub.com/swaggo/swag/commit/fe971d2 ) parser:
if all tags negate return true on no hits
([#​1624](https://togithub.com/swaggo/swag/issues/1624 ))
- [`e9d0aa5`](https://togithub.com/swaggo/swag/commit/e9d0aa5 ) yaml.v3
security patch
([#​1664](https://togithub.com/swaggo/swag/issues/1664 ))
</details>
---
### Configuration
📅 **Schedule**: Branch creation - At any time (no schedule defined),
Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you
are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the
rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update
again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check
this box
---
This PR has been generated by [Mend
Renovate](https://www.mend.io/free-developer-tools/renovate/ ). View
repository job log
[here](https://developer.mend.io/github/woodpecker-ci/woodpecker ).
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiIzNi44My4wIiwidXBkYXRlZEluVmVyIjoiMzYuODMuMCIsInRhcmdldEJyYW5jaCI6Im1haW4ifQ==-->
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-09 09:02:00 +02:00
renovate[bot]
41f6ecfa1b
fix(deps): update module github.com/stretchr/testify to v1.8.4 ( #2389 )
2023-09-09 08:29:30 +02:00
renovate[bot]
acb6ee0fcf
fix(deps): update module github.com/caddyserver/certmagic to v0.19.2 ( #2401 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Patrick Schratz <patrick.schratz@gmail.com>
2023-09-09 00:16:52 +02:00
renovate[bot]
d10db8991c
fix(deps): update module github.com/mattn/go-sqlite3 to v1.14.17 ( #2387 )
2023-09-08 18:27:21 +02:00
renovate[bot]
e4225a5caf
fix(deps): update module github.com/google/uuid to v1.3.1 ( #2386 )
2023-09-08 17:52:00 +02:00
renovate[bot]
0a2aa3fb2d
fix(deps): update module github.com/moby/moby to v20.10.25+incompatible ( #2388 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-08 16:40:30 +02:00
renovate[bot]
49773da33a
fix(deps): update module github.com/docker/docker to v20.10.25+incompatible ( #2385 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-08 15:10:02 +02:00
renovate[bot]
b1092bafde
fix(deps): update module github.com/docker/cli to v20.10.25+incompatible ( #2384 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-08 13:27:19 +02:00
renovate[bot]
d7000e06e0
fix(deps): update module github.com/alessio/shellescape to v1.4.2 ( #2381 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Co-authored-by: Patrick Schratz <patrick.schratz@gmail.com>
2023-09-08 10:39:25 +02:00
renovate[bot]
70e7571607
fix(deps): update golang.org/x/exp digest to 9212866 ( #2380 )
...
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
2023-09-08 09:55:21 +02:00
6543
f337d31455
bump github.com/6543/logfile-open ... ( #2240 )
...
to make woodpecker compile on windows again
---
*Sponsored by Kithara Software GmbH*
2023-08-18 15:35:12 +02:00
Harry Pidcock
e4ff041882
Improve agent rpc retry logic with exponential backoff ( #2205 )
...
Existing retry logic was a simple second delay, replacing it with a
exponential backoff.
Initial delay is 10ms up to 10s for the max delay. In the future this
should be made configurable.
With an extended max delay it becomes important to notice context
cancelation, so this now also selects on both the delay and context
done.
2023-08-18 15:13:13 +02:00
qwerty287
6e0def58a1
Switch to upstream ttlcache ( #2187 )
...
We've been using https://github.com/lafriks/ttlcache but it's archived.
It does work with the upstream library too, so its better to use it.
2023-08-10 09:17:12 +02:00
6543
11ba724bbf
bump xorm.io to db7c2640627d ( #2185 )
...
pull got merged so we can switch back to upstream
2023-08-10 02:39:41 +02:00
6543
db057b8d82
Release file lock on USR1 signal ( #2151 )
...
close #2136
2023-08-08 08:47:45 +02:00
6543
17ab945825
Fix 'add-orgs' migration ( #2117 )
...
close #2096
~~blocked by https://gitea.com/xorm/xorm/pulls/2320~~
2023-08-08 00:16:50 +03:00
6543
3d4758578a
Add opt save global log output to file ( #2115 )
...
close #1933
---------
*Sponsored by Kithara Software GmbH*
2023-08-07 20:47:30 +02:00
6543
4d2f824fb8
fix docs nits ( #2025 )
2023-07-21 21:56:24 +02:00
6543
d1213afdc8
[Docs] use redocusaurus to display swagger file ( #1818 )
...
https://redocusaurus.vercel.app/
followup of #1782
---------
Co-authored-by: Anbraten <anton@ju60.de>
2023-06-04 05:07:39 +02:00
Martin W. Kirst
14177635b6
Update swagger API specification ( #1782 )
...
# Summary
This PR drops the outdated former swagger.yaml/json and introduced
automatic API document generation from Go code.
The generated code is also used to generate documentation/markdown for
the community page,
as well as enable the Woodpecker server to serve a Swagger Web UI for
manual tinkering.
I did opt-in for gin-swagger, a middleware for the Gin framework, to
ease implementation and have a sophisticated output.
This middleware only produces Swagger v2 specs. AFAIK the newer OpenApi
3x tooling is not yet that mature,
so I guess that's fine for now.
## Implemenation notes
- former swagger.json files removed
- former // swagger godocs removed
- introduced new dependency gin-swagger, which uses godoc annotations on
top of Gin Handler functions.
- reworked Makefile to automatically generate Go code for the server
- introduce new dependency go-swagger, to generate Markdown for
documentation purposes
- add a Swagger Web UI, incl. capabilities for manual API exploration
- consider relative root paths in the implementation
- write documentation for all exposed API endpoints
- incl. API docs in the community website (auto-generated)
- provide developer documentation, for the Woodpecker authors
- no other existing logic/code was intentionally changed
---------
close #292
---------
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
Co-authored-by: 6543 <6543@obermui.de>
2023-06-03 21:38:36 +02:00
Patrick Schratz
3d0338315f
Revert to docker 20.10.x for API 1.41 compatibility ( #1792 )
...
fix #1786
---------
Co-authored-by: 6543 <6543@obermui.de>
2023-06-02 15:09:38 +02:00
qwerty287
dc3f7d61ea
Update Gin ( #1797 )
...
Fixes the security issue (we aren't affected)
Closes #1756
2023-06-01 08:25:17 +02:00
qwerty287
94e63b43f2
Update github.com/docker/distribution ( #1749 )
...
Update github.com/docker/distribution to 2.8.2
https://github.com/distribution/distribution/releases/tag/v2.8.2
https://github.com/advisories/GHSA-hqxw-f8mx-cpmw
2023-05-14 12:48:32 +02:00
qwerty287
2ccf7c6f1a
Drop Gogs support ( #1752 )
...
Gogs support is broken (and we won't fix it because we don't care about
it...) because it does not support OAuth, at least after we introduced
the new Vue UI.
See:
77d830d5b5/server/forge/gogs/gogs.go (L84)
This route is not present in the new UI.
2023-05-14 10:34:05 +02:00
Anbraten
188123ea74
Update dependencies ( #1744 )
2023-05-11 00:28:02 +02:00
6543
204d05f447
Implement YAML Map Merge, Overrides, and Sequence Merge Support ( #1720 )
...
close #1192
2023-04-29 14:49:41 +02:00
Lauris BH
46452fbd84
Update Go dependencies and minimal Go version to 1.20 ( #1650 )
...
Signed-off-by: 6543 <6543@obermui.de>
Co-authored-by: 6543 <6543@obermui.de>
2023-03-21 00:48:15 +01:00
Lauris BH
f1f722645c
Update dependencies golang/x libs ( #1612 )
2023-03-10 19:23:07 +01:00
6543
18d3139e9e
Use modern error handling and enforce it via lint ( #1327 )
...
Co-authored-by: Anbraten <anton@ju60.de>
2023-02-02 00:08:02 +01:00
antomy-gc
6516a28cdd
Secrets encryption in database ( #1475 )
...
closes #101
Added secrets encryption in database
- Google TINK or simple AES as encryption mechanisms
- Keys rotation support on TINK
- Existing SecretService is wrapped by encryption layer
- Encryption can be enabled and disabled at any time
Co-authored-by: Kuzmin Ilya <ilia.kuzmin@indrive.com>
Co-authored-by: 6543 <6543@obermui.de>
2023-01-12 20:59:07 +01:00
6543
fc4af44b43
router: create apiBase ( #1442 )
...
- refactor to dedup string `api`
- bump golang.org/x/next
2022-12-21 16:16:36 +01:00
6543
e8490a757f
GenerateScript should not return encoded script ( #1397 )
...
followup to #1395
2022-11-06 13:36:34 +01:00
qwerty287
8f183c82a8
Support changed files for Gitea PRs ( #1342 )
...
- add tests to fetch changed files
- ignore error if gitea version is to low
- adjust docs accordingly
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: Lauris BH <lauris@nix.lv>
2022-10-28 19:17:30 +02:00
Joonhyeok Ahn (Joon)
186aee61cf
Check if repo exists before creating pipeline ( #1297 )
...
Close #1257
make sure the repo exists first before triggering the pipeline
2022-10-22 01:34:11 +02:00
qwerty287
38198f83c4
Update all dependencies ( #1291 )
2022-10-19 10:15:58 +02:00
6543
9fae0dafaa
Update dep moby & golang.org/x/text ( #1263 )
...
* CVE-2022-36109
* CVE-2022-32149
2022-10-14 13:01:06 +02:00
Anbraten
287800ac62
Add when evaluate filter ( #1213 )
...
closes #312
closes #224
closes #963
Have a look for
https://github.com/antonmedv/expr/blob/master/docs/Language-Definition.md
2022-10-06 01:49:23 +02:00
[X]
b4d89a1cce
Add ability to trigger manual builds ( #1156 )
...
closes #83
closes #240
Co-authored-by: Anbraten <anton@ju60.de>
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
Co-authored-by: 6543 <6543@obermui.de>
2022-09-27 11:05:00 +02:00
6543
afb02d2dd5
Update golang.org/x/net dep
2022-09-14 07:32:06 +02:00
Anbraten
3b0263442a
Adding initial version of Kubernetes backend ( #552 )
...
Co-authored-by: laszlocph <laszlo@laszlo.cloud>
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: Rynoxx <rynoxx@grid-servers.net>
2022-09-05 06:01:14 +02:00
Anbraten
dbbd369c9a
Migrate to certmagic ( #360 )
...
closes #219
closes #850
Co-authored-by: 6543 <6543@obermui.de>
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
2022-09-04 03:24:42 +02:00
6543
383f273392
Add cron feature ( #934 )
...
https://woodpecker-ci.org/docs/usage/cron
Co-authored-by: Anbraten <anton@ju60.de>
Co-authored-by: qwerty287 <80460567+qwerty287@users.noreply.github.com>
2022-09-01 00:36:32 +02:00
6543
d3eea72663
Bump deps ( #1125 )
...
* upgrade to codeberg.org/6543/go-yaml2json v0.2.1
* upgraded github.com/bmatcuk/doublestar/v4 v4.0.2 => v4.2.0
* upgraded github.com/docker/cli v20.10.14+incompatible => v20.10.17+incompatible
* upgraded github.com/docker/docker v20.10.14+incompatible => v20.10.17+incompatible
* upgraded github.com/gin-gonic/gin v1.7.7 => v1.8.1
* upgraded github.com/golang-jwt/jwt/v4 v4.4.1 => v4.4.2
* upgraded github.com/moby/moby v20.10.14+incompatible => v20.10.17+incompatible
* upgraded github.com/moby/term v0.0.0-20210619224110-3f7ff695adc6 => v0.0.0-20220808134915-39b0c02b01ae
* upgraded github.com/lafriks/ttlcache/v3 v3.1.0 => v3.2.0
* upgraded github.com/mattn/go-sqlite3 v1.14.12 => v1.14.15
* upgraded github.com/lib/pq v1.10.5 => v1.10.6
* github.com/prometheus/client_golang v1.12.1 => v1.13.0
* upgraded github.com/urfave/cli/v2 v2.5.1 => v2.11.2
* upgraded github.com/rs/zerolog v1.26.1 => v1.27.0
* upgraded golang.org/x/oauth2 v0.0.0-20220411215720-9780585627b5 => v0.0.0-20220822191816-0ebed06d0094
* upgraded github.com/xanzy/go-gitlab v0.64.0 => v0.73.1
* upgraded google.golang.org/grpc v1.47.0 => v1.49.0
2022-08-25 08:09:05 +02:00
Lauris BH
1ac2c42652
Add global and organization secrets ( #1027 )
...
* Implement database changes and store methods for global and organization secrets
* Add tests for new store methods
* Add organization secret API and UI
* Add global secrets API and UI
* Add suggestions
* Update warning style
* Apply suggestions from code review
Co-authored-by: Anbraten <anton@ju60.de>
* Fix lint warning
Co-authored-by: Anbraten <anton@ju60.de>
2022-08-14 13:48:53 +02:00
Lauris BH
19dfc331f4
Add method to check organization membership ( #1037 )
...
* Add remote method to check organization membership
* Use named return parameters in interface
* Add membership check service
* Update Gitea SDK
2022-07-25 03:09:35 +02:00
6543
69ec44075c
Let single line command be a single command ( #1009 )
...
* rm go-shlex usage
* update
2022-07-19 07:20:27 +02:00
6543
31bad81979
Use external lib to convert yaml to json ( #1028 )
...
this move shared/yml/* into an independent lib
2022-07-17 17:23:31 +02:00
6543
17999da20f
Minim golang 1.18 and drop vendor folder ( #979 )
2022-06-17 01:57:02 +02:00
6543
904f9bb194
Update github.com/containerd/containerd ( #978 )
...
* update github.com/containerd/containerd
* go mod tidy && go mod vendor
2022-06-16 17:35:56 +02:00