Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

build(deps): bump the dependencies group across 1 directory with 8 updates #378

Closed
wants to merge 1 commit into from
Closed

build(deps): bump the dependencies group across 1 directory with 8 updates #378

wants to merge 1 commit into from

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 23, 2024 •
edited
Loading

Bumps the dependencies group with 7 updates in the / directory:

Package From To
github.com/getsentry/sentry-go 0.28.1 0.29.0
github.com/prometheus/client_golang 1.20.0 1.20.4
github.com/prometheus/common 0.55.0 0.59.1
github.com/sagernet/sing 0.4.2 0.4.3
github.com/sagernet/sing-box 1.9.4 1.9.6
github.com/xtls/xray-core 1.8.23 1.8.24
modernc.org/sqlite 1.32.0 1.33.1

Updates github.com/getsentry/sentry-go from 0.28.1 to 0.29.0

Release notes

Sourced from github.com/getsentry/sentry-go's releases.

0.29.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.29.0.

Breaking Changes

  • Remove the sentrymartini integration (#861)
  • The WrapResponseWriter has been moved from the sentryhttp package to the internal/httputils package. If you've imported it previosuly, you'll need to copy the implementation in your project. (#871)

Features

  • Add new convenience methods to continue a trace and propagate tracing headers for error-only use cases. (#862)

    If you are not using one of our integrations, you can manually continue an incoming trace by using sentry.ContinueTrace() by providing the sentry-trace and baggage header received from a downstream SDK.

    hub := sentry.CurrentHub()
sentry.ContinueTrace(hub, r.Header.Get(sentry.SentryTraceHeader), r.Header.Get(sentry.SentryBaggageHeader)),

    You can use hub.GetTraceparent() and hub.GetBaggage() to fetch the necessary header values for outgoing HTTP requests.

    hub := sentry.GetHubFromContext(ctx)
req, _ := http.NewRequest("GET", "http://localhost:3000", nil)
req.Header.Add(sentry.SentryTraceHeader, hub.GetTraceparent())
req.Header.Add(sentry.SentryBaggageHeader, hub.GetBaggage())

Bug Fixes

  • Initialize HTTPTransport.limit if nil (#844)
  • Fix sentry.StartTransaction() returning a transaction with an outdated context on existing transactions (#854)
  • Treat Proxy-Authorization as a sensitive header (#859)
  • Add support for the http.Hijacker interface to the sentrynegroni package (#871)
  • Go version >= 1.23: Use value from http.Request.Pattern for HTTP transaction names when using sentryhttp & sentrynegroni (#875)
  • Go version >= 1.21: Fix closure functions name grouping (#877)

Misc

  • Collect span origins (#849)
Changelog

Sourced from github.com/getsentry/sentry-go's changelog.

0.29.0

The Sentry SDK team is happy to announce the immediate availability of Sentry Go SDK v0.29.0.

Breaking Changes

  • Remove the sentrymartini integration (#861)
  • The WrapResponseWriter has been moved from the sentryhttp package to the internal/httputils package. If you've imported it previosuly, you'll need to copy the implementation in your project. (#871)

Features

  • Add new convenience methods to continue a trace and propagate tracing headers for error-only use cases. (#862)

    If you are not using one of our integrations, you can manually continue an incoming trace by using sentry.ContinueTrace() by providing the sentry-trace and baggage header received from a downstream SDK.

    hub := sentry.CurrentHub()
sentry.ContinueTrace(hub, r.Header.Get(sentry.SentryTraceHeader), r.Header.Get(sentry.SentryBaggageHeader)),

    You can use hub.GetTraceparent() and hub.GetBaggage() to fetch the necessary header values for outgoing HTTP requests.

    hub := sentry.GetHubFromContext(ctx)
req, _ := http.NewRequest("GET", "http://localhost:3000", nil)
req.Header.Add(sentry.SentryTraceHeader, hub.GetTraceparent())
req.Header.Add(sentry.SentryBaggageHeader, hub.GetBaggage())

Bug Fixes

  • Initialize HTTPTransport.limit if nil (#844)
  • Fix sentry.StartTransaction() returning a transaction with an outdated context on existing transactions (#854)
  • Treat Proxy-Authorization as a sensitive header (#859)
  • Add support for the http.Hijacker interface to the sentrynegroni package (#871)
  • Go version >= 1.23: Use value from http.Request.Pattern for HTTP transaction names when using sentryhttp & sentrynegroni (#875)
  • Go version >= 1.21: Fix closure functions name grouping (#877)

Misc

  • Collect span origins (#849)
Commits

Updates github.com/prometheus/client_golang from 1.20.0 to 1.20.4

Release notes

Sourced from github.com/prometheus/client_golang's releases.

v1.20.4

  • [BUGFIX] histograms: Fix a possible data race when appending exemplars vs metrics gather. #1623

v1.20.3

  • [BUGFIX] histograms: Fix possible data race when appending exemplars. #1608

v1.20.2

  • [BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. #1596

v1.20.1

This release contains the critical fix for the issue. Thanks to @​geberl, @​CubicrootXYZ, @​zetaab and @​timofurrer for helping us with the investigation!

  • [BUGFIX] process-collector: Fixed unregistered descriptor error when using process collector with PedanticRegistry on Linux machines. #1587
Changelog

Sourced from github.com/prometheus/client_golang's changelog.

Unreleased

  • [BUGFIX] histograms: Fix possible data race when appending exemplars vs metrics gather. #1623

1.20.3 / 2024-09-05

  • [BUGFIX] histograms: Fix possible data race when appending exemplars. #1608

1.20.2 / 2024-08-23

  • [BUGFIX] promhttp: Unset Content-Encoding header when data is uncompressed. #1596

1.20.1 / 2024-08-20

  • [BUGFIX] process-collector: Fixed unregistered descriptor error when using process collector with PedanticRegistry on linux machines. #1587
Commits
  • 05fcde9 Merge pull request #1623 from krajorama/data-race-in-histogram-write
  • 209f4c0 Add changelog
  • 1e398cc native histogram: Fix race between Write and addExemplar
  • ef2f87e Merge pull request #1620 from prometheus/arthursens/prepare-1.20.3
  • 937ac63 Add changelog entry for 1.20.3
  • 6e9914d Merge pull request #1608 from krajorama/index-out-of-range-native-histogram-e...
  • d6b8c89 Update comments with more explanations
  • 504566f Use simplified solution from #1609 for the data race
  • dc8e9a4 fix: native histogram: Simplify and fix addExemplar
  • dc819ce Use a trivial solution to #1605
  • Additional commits viewable in compare view

Updates github.com/prometheus/common from 0.55.0 to 0.59.1

Release notes

Sourced from github.com/prometheus/common's releases.

v0.59.1

What's Changed

Full Changelog: prometheus/common@v0.59.0...v0.59.1

v0.59.0

What's Changed

Full Changelog: prometheus/common@v0.58.0...v0.59.0

v0.58.0

What's Changed

Full Changelog: prometheus/common@v0.57.0...v0.58.0

v0.57.0

What's Changed

New Contributors

Full Changelog: prometheus/common@v0.56.0...v0.57.0

v0.56.0

What's Changed

... (truncated)

Commits
  • be8a747 fix(utf8): Fix multiple metric name inside braces validation (#691)
  • bf4843e Merge pull request #690 from ywwg/owilliams/default-escaping
  • 01da226 Change the default escape method to UnderscoreEscaping
  • 4f8e8f4 expfmt: Add WithEscapingScheme to help construct Formats (#688)
  • b1880d0 Merge pull request #687 from roidelapluie/checkheader
  • 334963d Change the logic for SetDirectory
  • d64a747 Remove secret file existence check in Validate for headers
  • 06c2425 Bump golang.org/x/net from 0.27.0 to 0.28.0 (#685)
  • 4606c0a Bump golang.org/x/oauth2 from 0.21.0 to 0.22.0 (#684)
  • d98411b Merge pull request #683 from tjhop/docs/promslog-README
  • Additional commits viewable in compare view

Updates github.com/sagernet/sing from 0.4.2 to 0.4.3

Commits

Updates github.com/sagernet/sing-box from 1.9.4 to 1.9.6

Release notes

Sourced from github.com/sagernet/sing-box's releases.

1.9.6

📝 Release Notes

  • Fixes and improvements

1.9.5

📝 Release Notes

  • Update quic-go to v0.47.0
  • Fix direct dialer not resolving domain
  • Fix no error return when empty DNS cache retrieved
  • Fix build with go1.23
  • Fix stream sniffer
  • Fix bad redirect in clash-api
  • Fix wireguard events chan leak
  • Fix cached conn eats up read deadlines
  • Fix disconnected interface selected as default in windows
  • Update Bundle Identifiers for Apple platform clients 1

1:

See Migration.

We are still working on getting all sing-box apps back on the App Store, which should be completed within a week (SFI on the App Store and others on TestFlight are already available).

Changelog

Sourced from github.com/sagernet/sing-box's changelog.

1.9.6

  • Fixes and improvements

1.9.5

  • Update quic-go to v0.47.0
  • Fix direct dialer not resolving domain
  • Fix no error return when empty DNS cache retrieved
  • Fix build with go1.23
  • Fix stream sniffer
  • Fix bad redirect in clash-api
  • Fix wireguard events chan leak
  • Fix cached conn eats up read deadlines
  • Fix disconnected interface selected as default in windows
  • Update Bundle Identifiers for Apple platform clients 1

1:

See Migration.

We are still working on getting all sing-box apps back on the App Store, which should be completed within a week (SFI on the App Store and others on TestFlight are already available).

1.10.0-beta.8

  • Fixes and improvements

With the help of a netizen, we are in the process of getting sing-box apps back on the App Store, which should be completed within a month (TestFlight is already available).

1.10.0-beta.7

  • Update quic-go to v0.47.0
  • Fixes and improvements

1.10.0-beta.6

  • Add RDP sniffer
  • Fixes and improvements

1.10.0-beta.5

  • Add PNA support for Clash API
  • Fixes and improvements

1.10.0-beta.3

  • Add SSH sniffer
  • Fixes and improvements

... (truncated)

Commits

Updates github.com/xtls/xray-core from 1.8.23 to 1.8.24

Release notes

Sourced from github.com/xtls/xray-core's releases.

Xray-core v1.8.24

Donation & NFTs

在等待 SplitHTTP multiplex controller 期间，main 分支已经积累了大量重要更新，所以我们决定先发一个版本，主要有：

  • SplitHTTP 的 header padding，H3 支持 dialerProxy，以及一些修复
  • Socks 入站默认兼容 HTTP 代理请求（mixed）
  • Fragment 支持 tlshello 被分片后在同一个 TCP 帧中发送
  • UDP noise（preview，下个版本可能会改）

And we have created Project VLESS for non-Chinese participants (Russian mainly).

此外，我们开始通过 NFT 的形式接受捐款，详见 [Announcement of NFTs by Project X #3633](XTLS/Xray-core#3633)

正如大家所看到的，Xray-core v1.8 已经不小心持续了一年多的时间，我们发现流式更新是一个不错的形式。然而由于传统版本号的存在，为每个版本规划功能、进行排期已经严重阻碍了新功能的开发、合并、发布。就像这次本来在等 multiplex controller，以及已经有很多 PR 在等 v1.9，并且我们还给 v1.10 及以后的版本号规划了更多功能，要很久才能排到。

所以我们决定从下个版本开始弃用传统的版本号，改用发版日期作为版本号，如 v24.8.30，并取消版本规划，全面采用流式更新，写好的功能直接合并，不再等待，预计每月月底发一个版本。 毕竟对于反审查软件来说，相较于传统的版本号，新功能的及时性、每月更新更为重要，而不是发一个功能确定的版本并长期维护，我们也没有过这样的习惯。

补充：并不一定按月更新，changes 突然积累多了同样可以发版，如果新版有 bug 的话应当给至少一天冷静期，不会同一天发两个版本。下个版本会移除一些历史久远的代码，以后日常积累新代码、提醒迁移，跨年新版删代码、breaking。

我们相信有了各位的捐款以及对发版形式的革新，Xray-core 这个项目会发展得更好。

Changes

以及更新 README，升级一些依赖，使用 Go 1.23 进行编译。

Commits

Updates google.golang.org/grpc from 1.65.0 to 1.66.0

Release notes

Sourced from google.golang.org/grpc's releases.

Release 1.66.0

New Features

  • metadata: stabilize ValueFromIncomingContext (#7368)
  • client: stabilize the WaitForStateChange and GetState methods, which were previously experimental. (#7425)
  • xds: Implement ADS flow control mechanism (#7458)
  • balancer/rls: Add metrics for data cache and picker internals (#7484, #7495)
  • xds: LRS load reports now include the total_issued_requests field. (#7544)

Bug Fixes

  • grpc: Clients now return status code INTERNAL instead of UNIMPLEMENTED when the server uses an unsupported compressor. This is consistent with the gRPC compression spec. (#7461)
  • transport: Fix a bug which could result in writes busy looping when the underlying conn.Write returns errors (#7394)
  • client: fix race that could lead to orphaned connections and associated resources. (#7390)
  • xds: use locality from the connected address for load reporting with pick_first (#7378)
    • without this fix, if a priority contains multiple localities with pick_first, load was reported for the wrong locality
  • client: prevent hanging during ClientConn.Close() when the network is unreachable (#7540)

Performance Improvements

  • transport: double buffering is avoided when using an http connect proxy and the target server waits for client to send the first message. (#7424)
  • codec: Implement a new Codec which uses buffer recycling for encoded message (#7356)
Commits

Updates modernc.org/sqlite from 1.32.0 to 1.33.1

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

@dependabot
build(deps): bump the dependencies group across 1 directory with 8 up…
8e45fdd 
…dates

Bumps the dependencies group with 7 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/getsentry/sentry-go](https://github.com/getsentry/sentry-go) | `0.28.1` | `0.29.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.0` | `1.20.4` |
| [github.com/prometheus/common](https://github.com/prometheus/common) | `0.55.0` | `0.59.1` |
| [github.com/sagernet/sing](https://github.com/sagernet/sing) | `0.4.2` | `0.4.3` |
| [github.com/sagernet/sing-box](https://github.com/sagernet/sing-box) | `1.9.4` | `1.9.6` |
| [github.com/xtls/xray-core](https://github.com/xtls/xray-core) | `1.8.23` | `1.8.24` |
| [modernc.org/sqlite](https://gitlab.com/cznic/sqlite) | `1.32.0` | `1.33.1` |



Updates `github.com/getsentry/sentry-go` from 0.28.1 to 0.29.0
- [Release notes](https://github.com/getsentry/sentry-go/releases)
- [Changelog](https://github.com/getsentry/sentry-go/blob/master/CHANGELOG.md)
- [Commits](getsentry/sentry-go@v0.28.1...v0.29.0)

Updates `github.com/prometheus/client_golang` from 1.20.0 to 1.20.4
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.20.0...v1.20.4)

Updates `github.com/prometheus/common` from 0.55.0 to 0.59.1
- [Release notes](https://github.com/prometheus/common/releases)
- [Changelog](https://github.com/prometheus/common/blob/main/RELEASE.md)
- [Commits](prometheus/common@v0.55.0...v0.59.1)

Updates `github.com/sagernet/sing` from 0.4.2 to 0.4.3
- [Commits](SagerNet/sing@v0.4.2...v0.4.3)

Updates `github.com/sagernet/sing-box` from 1.9.4 to 1.9.6
- [Release notes](https://github.com/sagernet/sing-box/releases)
- [Changelog](https://github.com/SagerNet/sing-box/blob/dev-next/docs/changelog.md)
- [Commits](SagerNet/sing-box@v1.9.4...v1.9.6)

Updates `github.com/xtls/xray-core` from 1.8.23 to 1.8.24
- [Release notes](https://github.com/xtls/xray-core/releases)
- [Commits](XTLS/Xray-core@v1.8.23...v1.8.24)

Updates `google.golang.org/grpc` from 1.65.0 to 1.66.0
- [Release notes](https://github.com/grpc/grpc-go/releases)
- [Commits](grpc/grpc-go@v1.65.0...v1.66.0)

Updates `modernc.org/sqlite` from 1.32.0 to 1.33.1
- [Commits](https://gitlab.com/cznic/sqlite/compare/v1.32.0...v1.33.1)

---
updated-dependencies:
- dependency-name: github.com/getsentry/sentry-go
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/prometheus/common
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: github.com/sagernet/sing
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/sagernet/sing-box
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: github.com/xtls/xray-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: dependencies
- dependency-name: google.golang.org/grpc
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: modernc.org/sqlite
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Sep 23, 2024
@dependabot Dependabot
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 7, 2024

Looks like these dependencies are updatable in another way, so this is no longer needed.

@dependabot dependabot bot closed this Oct 7, 2024
@dependabot dependabot bot deleted the dependabot/go_modules/dependencies-0569990d8b branch October 7, 2024 05:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
dependencies Pull requests that update a dependency file go Pull requests that update Go code
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
0 participants