Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(deps): Bump the production-dependencies group with 5 updates #1031

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 5, 2024

Bumps the production-dependencies group with 5 updates:

Package From To
github.com/google/cel-go 0.20.1 0.21.0
golang.org/x/oauth2 0.21.0 0.22.0
golang.org/x/sync 0.7.0 0.8.0
golang.org/x/sys 0.22.0 0.23.0
golang.org/x/time 0.5.0 0.6.0

Updates github.com/google/cel-go from 0.20.1 to 0.21.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.21.0

Features

  • Math extensions update to include bitwise ops and floating point helpers #923
  • Better support custom types with custom type registries #931
  • repl: implement %parse #933
  • Fixed partial variables extended bug and split PartialVarsEnvExtended test into two #955
  • Added partial evaluations example #959
  • Enable conformance tests for extensions #930
  • Update cel-spec and enable optional_type conformance tests #919
  • Improve token representation in AST #932
  • Add function accessor to Env #978

CEL Policy Compiler

Policies which use CEL often evolve to express complex logic using multiple statements and decision criteria. The CEL Policy Compiler provides an extensible format for parsing, compiling, and composing expression graphs. Below is a simple example which can easily be compiled to a single CEL expression.

name: "my-policy"
rule:
  variables:
    - name: greeting
      expression: "'%s, %s!'"
    - name: people
      expression: >
       ['Tristan', 'Calla', 'Antoine', 'Jonathan', 'Sokwhan', 'Rebecca']
  match:
    - condition: "request.user in variables.people"
      output: "variables.greeting.format(['hello', request.user])"
    - output: "variables.greeting.format(['goodbye', 'stranger'])"
  • Simple Policy Compiler #924
  • Introduce protobuf message testing to policies #961
  • Generate policy explanations during compilation #977
  • Variable and nested rule limits #989
  • Improved support for nested rules #991]

Fixes

  • Delete dangling source info from macro expansion #934
  • Do not re-use ID twice in exists_one macro #935
  • Avoid iterating over the source multiple times during parse #936
  • Fix for working with byte arrays by #958
  • Stabilize macro id generation during optimization #962
  • String formatting panic fix for non-literal format strings #987
  • Add nil checking for wrapperspb's types #960

... (truncated)

Commits
  • 3545aac Improved support for nested rules (#991)
  • 5bcdb8b Check for output type agreement during the compile phase (#992)
  • 1f51886 Use bytes interface value for zero native type struct fields instead of dynam...
  • c9164bc Variable and nested rule limits (#989)
  • 5cbef66 Prevent self-append for Issues (#988)
  • 25457de Add nil checking for wrapperspb's types (#960)
  • badfce0 Fix panic in formatting string for non-literal formats (#987)
  • 9e64eb7 Decompose the compile and compose methods (#986)
  • 37d5b96 Add a function to return a policy whose output is the explanation. (#977)
  • bc96f3b Fix math.bitShiftRight for negative int (#983)
  • Additional commits viewable in compare view

Updates golang.org/x/oauth2 from 0.21.0 to 0.22.0

Commits

Updates golang.org/x/sync from 0.7.0 to 0.8.0

Commits

Updates golang.org/x/sys from 0.22.0 to 0.23.0

Commits
  • aa1c4c8 unix: provide Mount on openbsd
  • cde4660 unix: add linux mseal system call
  • 31ef9e7 unix: update to Linux kernel 6.10
  • d03a807 unix: update glibc to 2.40
  • beb5949 windows: correctly generate GetAce syscall
  • 7bb0bf7 cpu: add Int8 matrix multiplication instructions CPU feature flag for ARM64
  • bce4cf7 windows: add GetKeyboardLayout & ToUnicodeEx
  • 0eac9b5 windows: add flags for GetAdaptersAddresses
  • 0c18c88 cpu: add DIT option and hwcap DIT support
  • dce4e64 LICENSE: update per Google Legal
  • Additional commits viewable in compare view

Updates golang.org/x/time from 0.5.0 to 0.6.0

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the production-dependencies group with 5 updates:

| Package | From | To |
| --- | --- | --- |
| [github.com/google/cel-go](https://github.com/google/cel-go) | `0.20.1` | `0.21.0` |
| [golang.org/x/oauth2](https://github.com/golang/oauth2) | `0.21.0` | `0.22.0` |
| [golang.org/x/sync](https://github.com/golang/sync) | `0.7.0` | `0.8.0` |
| [golang.org/x/sys](https://github.com/golang/sys) | `0.22.0` | `0.23.0` |
| [golang.org/x/time](https://github.com/golang/time) | `0.5.0` | `0.6.0` |


Updates `github.com/google/cel-go` from 0.20.1 to 0.21.0
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.20.1...v0.21.0)

Updates `golang.org/x/oauth2` from 0.21.0 to 0.22.0
- [Commits](golang/oauth2@v0.21.0...v0.22.0)

Updates `golang.org/x/sync` from 0.7.0 to 0.8.0
- [Commits](golang/sync@v0.7.0...v0.8.0)

Updates `golang.org/x/sys` from 0.22.0 to 0.23.0
- [Commits](golang/sys@v0.22.0...v0.23.0)

Updates `golang.org/x/time` from 0.5.0 to 0.6.0
- [Commits](golang/time@v0.5.0...v0.6.0)

---
updated-dependencies:
- dependency-name: github.com/google/cel-go
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/oauth2
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/sync
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/sys
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: golang.org/x/time
  dependency-type: indirect
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the release-note-none Denotes a PR that doesn't merit a release note. label Aug 5, 2024
@kubevirt-bot kubevirt-bot added the dco-signoff: yes Indicates the PR's author has DCO signed all their commits. label Aug 5, 2024
Copy link

sonarcloud bot commented Aug 5, 2024

@akrejcir
Copy link
Collaborator

akrejcir commented Aug 5, 2024

/approve
/lgtm

@kubevirt-bot kubevirt-bot added the lgtm Indicates that a PR is ready to be merged. label Aug 5, 2024
@kubevirt-bot
Copy link
Contributor

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: akrejcir

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@kubevirt-bot kubevirt-bot added the approved Indicates a PR has been approved by an approver from all required OWNERS files. label Aug 5, 2024
@kubevirt-bot kubevirt-bot merged commit 9f35324 into main Aug 5, 2024
16 checks passed
@dependabot dependabot bot deleted the dependabot/go_modules/production-dependencies-064bf0aca7 branch August 5, 2024 06:22
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
approved Indicates a PR has been approved by an approver from all required OWNERS files. dco-signoff: yes Indicates the PR's author has DCO signed all their commits. lgtm Indicates that a PR is ready to be merged. release-note-none Denotes a PR that doesn't merit a release note. size/XXL
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants