Skip to content

fix(deps): update all non-major dependencies for go #58

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom
Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

fix(deps): update all non-major dependencies for go #58

wants to merge 1 commit into from
+11 −11

Conversation

renovate[bot]
Copy link
Contributor

@renovate renovate bot commented Nov 16, 2024 •
edited
Loading

This PR contains the following updates:

Package Change Age Confidence
github.com/getkin/kin-openapi v0.128.0 -> v0.133.0 age confidence
github.com/go-chi/chi/v5 v5.1.0 -> v5.2.3 age confidence
github.com/go-chi/cors v1.2.1 -> v1.2.2 age confidence
github.com/lmittmann/tint v1.0.5 -> v1.1.2 age confidence
github.com/mattn/go-colorable v0.1.13 -> v0.1.14 age confidence
github.com/oapi-codegen/nethttp-middleware v1.0.2 -> v1.1.2 age confidence
github.com/oapi-codegen/oapi-codegen/v2 v2.4.1 -> v2.5.0 age confidence
github.com/oapi-codegen/runtime v1.1.1 -> v1.1.2 age confidence
github.com/stretchr/testify v1.9.0 -> v1.11.1 age confidence
go.uber.org/mock v0.5.0 -> v0.6.0 age confidence
modernc.org/sqlite v1.33.1 -> v1.39.1 age confidence

Release Notes

getkin/kin-openapi (github.com/getkin/kin-openapi)

v0.133.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.132.0...v0.133.0

v0.132.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.131.0...v0.132.0

v0.131.0

Compare Source

What's Changed

  • openapi3filter: de-register ZipFileBodyDecoder and make a few decoders public by @​fenollp in #​1059

Full Changelog: getkin/kin-openapi@v0.130.0...v0.131.0

v0.130.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.129.0...v0.130.0

v0.129.0

Compare Source

What's Changed

New Contributors

Full Changelog: getkin/kin-openapi@v0.128.0...v0.129.0

go-chi/chi (github.com/go-chi/chi/v5)

v5.2.3

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.2.2...v5.2.3

v5.2.2

Compare Source

What's Changed

Security fix

  • Fixes GHSA-vrw8-fxc6-2r93 - "Host Header Injection Leads to Open Redirect in RedirectSlashes" commit
    • a lower-severity Open Redirect that can't be exploited in browser or email client, as it requires manipulation of a Host header
    • reported by Anuraag Baishya, @​anuraagbaishya. Thank you!

New Contributors

Full Changelog: go-chi/chi@v5.2.1...v5.2.2

v5.2.1

Compare Source

⚠️ Chi supports Go 1.20+

Starting this release, we will now support the four most recent major versions of Go. See #​963 for related discussion.

What's Changed

Full Changelog: go-chi/chi@v5.2.0...v5.2.1

v5.2.0

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/chi@v5.1.0...v5.2.0

go-chi/cors (github.com/go-chi/cors)

v1.2.2

Compare Source

What's Changed

New Contributors

Full Changelog: go-chi/cors@v1.2.1...v1.2.2

lmittmann/tint (github.com/lmittmann/tint)

v1.1.2

Compare Source

What's Changed

New Contributors

Full Changelog: lmittmann/tint@v1.1.1...v1.1.2

v1.1.1

Compare Source

Bug-fix release with performance improvements for time value handling.

What's Changed

Full Changelog: lmittmann/tint@v1.1.0...v1.1.1

v1.1.0

Compare Source

This release adds a much-requested feature: function tint.Attr(color uint8, attr slog.Attr) writes colored attributes. Like tint.Err, which writes red-colored errors, tint.Attr can be used with other slog handlers (e.g. slog.JSONHandler) and does not emit raw ANSI codes.

What's Changed

Full Changelog: lmittmann/tint@v1.0.7...v1.1.0

v1.0.7

Compare Source

What's Changed

Full Changelog: lmittmann/tint@v1.0.6...v1.0.7

v1.0.6

Compare Source

What's Changed

New Contributors

Full Changelog: lmittmann/tint@v1.0.5...v1.0.6

mattn/go-colorable (github.com/mattn/go-colorable)

v0.1.14

Compare Source

oapi-codegen/nethttp-middleware (github.com/oapi-codegen/nethttp-middleware)

v1.1.2: : Request bodies can now be re-used, after being read in an AuthenticationFunc and Go 1.22+-only

Compare Source

🔊 Notable features

Go 1.22+ requirement

This module now requires Go 1.22 to build (previously we supported Go 1.20+).

Go 1.22 is still fairly old, and was marked as unsupported by the Go team in 2025-02-11, and is a new requirement as part of a dependency bump from kin-openapi.

This shouldn't technically be a breaking change given the age of the Go version used and it being unsupported - so ideally isn't being used heavily - but we wanted to flag it as such in case this came as a surprise.

Request body can now be re-used, after being read in an AuthenticationFunc

A longstanding issue with the openapi3filter from kin-openapi, that we build on top of for this middleware, resulted in cases where the request body could not be re-parsed after being consumed in a middleware's AuthenticationFunc.

This could lead to errors such as:

request body has an error: value is required but missing

Or:

request body has an error: reading failed: http: invalid Read on closed Body

This has now been fixed upstream, and therefore fixed for users of this middleware as part of this release.

👻 Maintenance

📦 Dependency updates

  • fix(deps)!: update module github.com/getkin/kin-openapi to v0.132.0 (#​19) @​renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

Elastic logo

DevZero logo

Speakeasy logo

Cybozu logo

Livepeer logo

v1.1.1: : fix an incorrect HTTP status code (in an unlikely failure case)

Compare Source

🐛 Bug fixes

📦 Dependency updates

  • chore(deps): update module github.com/golangci/golangci-lint to v2.1.5 (#​39) @​renovate[bot]

Sponsors

We would like to thank our sponsors for their support during this release.

Elastic logo

DevZero logo

Speakeasy logo

Cybozu logo

Livepeer logo

v1.1.0: : Better error handling, allow not validating Servers (by configuration) and return an HTTP 405 Method Not Allowed where appropriate

Compare Source

🔊 Notable features

Error handling is now significantly better

As part of #​35, we have introduced a much more powerful means to handle the errors returned by the OpenAPI Validation middleware.

This has been a long-standing issue, and we appreciate the community's patience as well as different proposals over time.

Previously, when creating an error handler, the method signature was fairly lacking:

// create middleware
mw := middleware.OapiRequestValidatorWithOptions(spec, &middleware.Options{
    Options: openapi3filter.Options{
        AuthenticationFunc: authenticationFunc,
    },
    ErrorHandler: func(w http.ResponseWriter, message string, statusCode int) {
        http.Error(w, "This text/plain response will be returned to the caller: " + message, statusCode)
    },
})

This didn't give much information around what had happened - or in which route/endpoint - and not having the raw error made observability and additional steps to respond appropriately more difficult.

With this release, it's now possible to have the raw error, information about the current request + its context.Context, as well as some additional pieces of metadata inside the ErrorHandlerWithOpts:

// create middleware
mw := middleware.OapiRequestValidatorWithOptions(spec, &middleware.Options{
    // other options
    // ...
    ErrorHandlerWithOpts: func(ctx context.Context, err error, w http.ResponseWriter, r *http.Request, opts middleware.ErrorHandlerOpts) {
        // NOTE that ErrorHandlerOpts contains further information, and allows us to add additional information in the future, in an extensible and non-breaking way
    }
})

There is a full example of usage in the Go doc for this project.

Note that the old method, ErrorHandler has been marked as deprecated - there is no planned removal date, and this is largely as a way to "nudge" folks to using the new, more powerful, method.

🚀 New features and improvements

🐛 Bug fixes

📝 Documentation updates

👻 Maintenance

📦 Dependency updates

Sponsors

We would like to thank our sponsors for their support during this release.

Elastic logo

DevZero logo

Speakeasy logo

Cybozu logo

Livepeer logo

oapi-codegen/oapi-codegen (github.com/oapi-codegen/oapi-codegen/v2)

v2.5.0: : No more optional pointers (optionally), omitzero, better control over initialisms, and so much more!

Compare Source

v2.5.0: No more optional pointers (optionally)!

🎉 Notable changes

Begone optional pointers! (optionally)

One of the key things oapi-codegen does is to use an "optional pointer", following idiomatic Go practices, to indicate that a field/type is optional.

This can be tuned on a per-field basis, using the x-go-type-skip-optional-pointer extension, but it can be a bit repetitive, or can be more complex when using an OpenAPI Overlay.

As of oapi-codegen v2.5.0, this can be tuned in two specific ways, via the following Output Options:

  • prefer-skip-optional-pointer: a global default that you do not want the "optional pointer" generated. Optional fields will not have an "optional pointer", and will have an omitempty JSON tag
  • prefer-skip-optional-pointer-with-omitzero: when used in conjunction with prefer-skip-optional-pointer, any optional fields are generated with an omitzero JSON tag. Requires Go 1.24+

In both cases, there is control on a per-field level to set x-go-type-skip-optional-pointer: false or x-omitzero: false to undo these to field(s).

[!NOTE]
The default is not changing.

We take care to avoid breaking changes so this is, as many changes, an opt-in.

See Globally skipping the "optional pointer" for more details.

Generating omitzero JSON tags, with x-omitzero

Related to the above functionality, it is possible to define the OpenAPI extension x-omitzero on fields to generate the omitzero JSON tag, based on the (now not-so-new) Go 1.24 release.

Thanks to @​lzap for the contribution 🚀

[!NOTE]
oapi-codegen does not currently validate the Go version that the module it's generating code for.

This could lead to the omitzero JSON tag being generated, but not being actually usable.

Ensure that you're using a Go 1.24+ version, and that your go directive (for source compatibility) is go 1.24 or i.e. go 1.24.1

Using OpenAPI 3.1 w

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot changed the title fix(deps): update module modernc.org/sqlite to v1.34.1 fix(deps): update all non-major dependencies for go Nov 23, 2024
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from 8776367 to 75fae42 Compare November 23, 2024 14:21
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from 75fae42 to 3865000 Compare December 2, 2024 11:32
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 4 times, most recently from 7391cc6 to d92f15e Compare December 22, 2024 15:49
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from d92f15e to e3e8613 Compare January 10, 2025 10:41
@renovate Renovate
Copy link
Contributor Author

renovate bot commented Jan 10, 2025 •
edited
Loading

ℹ Artifact update notice

File name: backend/go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 7 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.22.3 -> 1.24.1
golang.org/x/mod v0.18.0 -> v0.19.0
golang.org/x/sys v0.22.0 -> v0.30.0
golang.org/x/tools v0.22.0 -> v0.23.0
modernc.org/libc v1.55.3 -> v1.61.13
modernc.org/mathutil v1.6.0 -> v1.7.1
modernc.org/memory v1.8.0 -> v1.8.2
modernc.org/strutil v1.2.0 -> v1.2.1

@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from e3e8613 to 9a87079 Compare January 16, 2025 01:40
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 2 times, most recently from 3eba11e to 5379b69 Compare January 29, 2025 13:29
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from 5379b69 to 40201fc Compare February 4, 2025 12:21
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 3 times, most recently from 0ece8eb to 035e241 Compare February 13, 2025 15:43
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from 035e241 to 05afe4b Compare February 26, 2025 15:32
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 5 times, most recently from 2a5fd69 to ef0b93b Compare March 13, 2025 15:27
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 3 times, most recently from f06756a to 7822e73 Compare March 17, 2025 17:32
@renovate Renovate
Copy link
Contributor Author

renovate bot commented Mar 17, 2025 •
edited
Loading

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

  • any of the package files in this branch needs updating, or
  • the branch becomes conflicted, or
  • you click the rebase/retry checkbox if found above, or
  • you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: backend/go.sum
Command failed: go get -t ./...
go: module github.com/getkin/[email protected] requires go >= 1.22.5; switching to go1.24.8
go: downloading go1.24.8 (linux/amd64)
go: download go1.24.8: golang.org/[email protected]: verifying module: checksum database disabled by GOSUMDB=off

@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 2 times, most recently from a205899 to 1e73f70 Compare March 24, 2025 19:58
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 2 times, most recently from 3641805 to 58b6173 Compare March 30, 2025 17:41
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from 58b6173 to dfd8863 Compare April 7, 2025 22:18
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 4 times, most recently from 2cdcf41 to ec67a2c Compare April 30, 2025 19:48
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 2 times, most recently from ffaef58 to a359baa Compare May 21, 2025 13:47
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from a359baa to 60e9795 Compare May 28, 2025 12:23
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 2 times, most recently from 0266cd7 to 537b568 Compare June 9, 2025 13:14
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from 537b568 to ddfc341 Compare June 20, 2025 17:48
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from ddfc341 to 3a77328 Compare July 1, 2025 17:59
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 2 times, most recently from c456903 to a24319a Compare July 15, 2025 16:55
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 2 times, most recently from 6fb5a06 to bb52a76 Compare July 29, 2025 11:36
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch 5 times, most recently from 12cade9 to 220cd18 Compare August 25, 2025 11:02
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from 220cd18 to fc2c156 Compare August 27, 2025 17:47
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from fc2c156 to 2c67640 Compare September 15, 2025 19:59
@renovate renovate bot force-pushed the renovate/go-all-minor-patch branch from 2c67640 to 56788f6 Compare October 11, 2025 20:58
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

None yet

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants