Merge branch 'master' into cli_upload_fields

.github/dependabot.yml

@@ -11,3 +11,10 @@ updates:
       interval: daily
     labels:
       - "topic: infrastructure"
+  - package-ecosystem: gomod
+    directory: /
+    schedule:
+      interval: daily
+    open-pull-requests-limit: 10
+    labels:
+      - "topic: infrastructure"

.github/workflows/check-protobuf-task.yml

@@ -61,12 +61,12 @@ jobs:
       - name: Install protoc compiler
         uses: arduino/setup-protoc@v2
         with:
-          version: v23.2
+          version: v24.3
           repo-token: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Install Go deps
         run: |
-          go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.30.0
+          go install google.golang.org/protobuf/cmd/protoc-gen-go@v1.31.0
           go install google.golang.org/grpc/cmd/[email protected]
 
       - name: Install Task

.licensed.yml

@@ -45,6 +45,24 @@ reviewed:
     - golang.org/x/crypto/argon2
     - golang.org/x/crypto/blake2b
     - golang.org/x/crypto/sha3
+    - github.com/russross/blackfriday/v2
+    - github.com/go-git/gcfg
+    - github.com/go-git/gcfg/scanner
+    - github.com/go-git/gcfg/token
+    - github.com/go-git/gcfg/types
+    - golang.org/x/crypto/openpgp
+    - golang.org/x/crypto/openpgp/armor
+    - golang.org/x/crypto/openpgp/elgamal
+    - golang.org/x/crypto/openpgp/errors
+    - golang.org/x/crypto/openpgp/packet
+    - golang.org/x/crypto/openpgp/s2k
+    - golang.org/x/sys/execabs
+    - golang.org/x/text/encoding
+    - golang.org/x/text/encoding/internal
+    - golang.org/x/text/encoding/internal/identifier
+    - golang.org/x/text/encoding/unicode
+    - golang.org/x/text/internal/utf8internal
+    - github.com/sagikazarmark/slog-shim
 
 # Source: https://github.com/arduino/tooling-project-assets/blob/main/workflow-templates/assets/check-dependencies/GPL-3.0/.licensed.yml
 allowed:

.licenses/go/github.com/arduino/go-paths-helper.dep.yml

@@ -1,8 +1,8 @@
 ---
 name: github.com/arduino/go-paths-helper
-version: v1.9.0
+version: v1.9.2
 type: go
-summary:
+summary: 
 homepage: https://pkg.go.dev/github.com/arduino/go-paths-helper
 license: gpl-2.0-or-later
 licenses:

.licenses/go/github.com/arduino/go-properties-orderedmap.dep.yml

@@ -1,6 +1,6 @@
 ---
 name: github.com/arduino/go-properties-orderedmap
-version: v1.7.1
+version: v1.8.0
 type: go
 summary: Package properties is a library for handling maps of hierarchical properties.
 homepage: https://pkg.go.dev/github.com/arduino/go-properties-orderedmap

.licenses/go/github.com/cpuguy83/go-md2man/v2/md2man.dep.yml

@@ -1,12 +1,12 @@
 ---
 name: github.com/cpuguy83/go-md2man/v2/md2man
-version: v2.0.0
+version: v2.0.2
 type: go
 summary: 
 homepage: https://pkg.go.dev/github.com/cpuguy83/go-md2man/v2/md2man
 license: mit
 licenses:
-- sources: [email protected].0/LICENSE.md
+- sources: [email protected].2/LICENSE.md
   text: |
     The MIT License (MIT)
 

.licenses/go/github.com/cyphar/filepath-securejoin.dep.yml

@@ -0,0 +1,44 @@
+---
+name: github.com/cyphar/filepath-securejoin
+version: v0.2.4
+type: go
+summary: Package securejoin is an implementation of the hopefully-soon-to-be-included
+  SecureJoin helper that is meant to be part of the "path/filepath" package.
+homepage: https://pkg.go.dev/github.com/cyphar/filepath-securejoin
+license: bsd-3-clause
+licenses:
+- sources: LICENSE
+  text: |
+    Copyright (C) 2014-2015 Docker Inc & Go Authors. All rights reserved.
+    Copyright (C) 2017 SUSE LLC. All rights reserved.
+
+    Redistribution and use in source and binary forms, with or without
+    modification, are permitted provided that the following conditions are
+    met:
+
+       * Redistributions of source code must retain the above copyright
+    notice, this list of conditions and the following disclaimer.
+       * Redistributions in binary form must reproduce the above
+    copyright notice, this list of conditions and the following disclaimer
+    in the documentation and/or other materials provided with the
+    distribution.
+       * Neither the name of Google Inc. nor the names of its
+    contributors may be used to endorse or promote products derived from
+    this software without specific prior written permission.
+
+    THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS
+    "AS IS" AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT
+    LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR
+    A PARTICULAR PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT
+    OWNER OR CONTRIBUTORS BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL,
+    SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT
+    LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE,
+    DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY
+    THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT
+    (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE
+    OF THIS SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
+- sources: README.md
+  text: |-
+    The license of this project is the same as Go, which is a BSD 3-clause license
+    available in the `LICENSE` file.
+notices: []

.licenses/go/github.com/djherbis/buffer.dep.yml

@@ -1,6 +1,6 @@
 ---
 name: github.com/djherbis/buffer
-version: v1.1.0
+version: v1.2.0
 type: go
 summary: Package buffer implements a series of Buffers which can be composed to implement
   complicated buffering strategies

.licenses/go/github.com/djherbis/buffer/limio.dep.yml

@@ -1,12 +1,12 @@
 ---
 name: github.com/djherbis/buffer/limio
-version: v1.1.0
+version: v1.2.0
 type: go
 summary: 
 homepage: https://pkg.go.dev/github.com/djherbis/buffer/limio
 license: mit
 licenses:
-- sources: buffer@v1.1.0/LICENSE.txt
+- sources: buffer@v1.2.0/LICENSE.txt
   text: |
     The MIT License (MIT)
 

.licenses/go/github.com/djherbis/buffer/wrapio.dep.yml

@@ -1,12 +1,12 @@
 ---
 name: github.com/djherbis/buffer/wrapio
-version: v1.1.0
+version: v1.2.0
 type: go
 summary: 
 homepage: https://pkg.go.dev/github.com/djherbis/buffer/wrapio
 license: mit
 licenses:
-- sources: buffer@v1.1.0/LICENSE.txt
+- sources: buffer@v1.2.0/LICENSE.txt
   text: |
     The MIT License (MIT)
 

.licenses/go/github.com/emirpasic/gods/containers.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/containers
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package containers provides core interfaces and functions for data structures.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/containers
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/emirpasic/gods/lists.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/lists
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package lists provides an abstract List interface.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/lists
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/emirpasic/gods/lists/arraylist.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/lists/arraylist
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package arraylist implements the array list.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/lists/arraylist
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/emirpasic/gods/trees.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/trees
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package trees provides an abstract Tree interface.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/trees
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/emirpasic/gods/trees/binaryheap.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/trees/binaryheap
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package binaryheap implements a binary heap backed by array list.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/trees/binaryheap
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/emirpasic/gods/utils.dep.yml

@@ -1,13 +1,12 @@
 ---
 name: github.com/emirpasic/gods/utils
-version: v1.12.0
+version: v1.18.1
 type: go
 summary: Package utils provides common utility functions.
 homepage: https://pkg.go.dev/github.com/emirpasic/gods/utils
-# The code is licensed as BSD-2-Clause except for trees/avltree/avrtree.go and trees/avltree/iterator.go
 license: bsd-2-clause
 licenses:
-- sources: gods@v1.12.0/LICENSE
+- sources: gods@v1.18.1/LICENSE
   text: |
     Copyright (c) 2015, Emir Pasic
     All rights reserved.
@@ -50,7 +49,7 @@ licenses:
     WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS, WHETHER IN AN
     ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION, ARISING OUT OF
     OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS SOFTWARE.
-- sources: gods@v1.12.0/README.md
+- sources: gods@v1.18.1/README.md
   text: This library is distributed under the BSD-style license found in the [LICENSE](https://github.com/emirpasic/gods/blob/master/LICENSE)
     file.
 notices: []

.licenses/go/github.com/fatih/color.dep.yml

@@ -1,6 +1,6 @@
 ---
 name: github.com/fatih/color
-version: v1.7.0
+version: v1.15.0
 type: go
 summary: Package color is an ANSI color package to output colorized or SGR defined
   output to the standard output.