teler-waf
teler-waf copied to clipboard
build(deps): bump the modules group across 1 directory with 13 updates
Bumps the modules group with 11 updates in the / directory:
| Package | From | To |
|---|---|---|
| github.com/bitfield/script | 0.22.0 |
0.24.0 |
| github.com/bytedance/sonic | 1.12.8 |
1.13.1 |
| github.com/caddyserver/caddy/v2 | 2.8.4 |
2.9.1 |
| github.com/dwisiswant0/pcregexp | 0.1.0 |
0.2.0 |
| github.com/expr-lang/expr | 1.16.3 |
1.17.0 |
| github.com/go-playground/validator/v10 | 10.19.0 |
10.25.0 |
| github.com/hashicorp/go-getter | 1.7.5 |
1.7.8 |
| github.com/otiai10/copy | 1.14.0 |
1.14.1 |
| github.com/stretchr/testify | 1.9.0 |
1.10.0 |
| github.com/valyala/fastjson | 1.6.3 |
1.6.4 |
| tlog.app/go/loc | 0.7.0 |
0.7.2 |
Updates github.com/bitfield/script from 0.22.0 to 0.24.0
Commits
29d5eb2update readme (#219)bf66ef5Make FindFiles ignore (trivial) errors (#217)dd8d444Slice now produces empty pipe for empty slice (fixes #110) (#216)6fff62aAddHash/HashSums(#215)0296fd2release v0.232d95834addWithEnvfor setting command environment (#208)0edd895fix data race onp.stderr(#209)0daf4b2return pipe error fromWait(#211)10e8421add EncodeBase64 / DecodeBase64 filters (#210)6c1c252use latest stable go for vulncheck (#205)- Additional commits viewable in compare view
Updates github.com/bytedance/sonic from 1.12.8 to 1.13.1
Release notes
Sourced from github.com/bytedance/sonic's releases.
v1.13.1
What's Changed
- fix(aarch64): avoid using the boundary pointer of an array by
@liuq19in bytedance/sonic#763- fix: Write version warning to stderr by
@royscin bytedance/sonic#761- feat: support golang 1.24 by
@liuq19in bytedance/sonic#741- fix(compat): duplicate description by
@y1jiongin bytedance/sonic#767- chore: add notice for go1.24.0 on README by
@AsterDYin bytedance/sonic#766- fix: loader version by
@liuq19in bytedance/sonic#770New Contributors
@royscmade their first contribution in bytedance/sonic#761@y1jiongmade their first contribution in bytedance/sonic#767Full Changelog: https://github.com/bytedance/sonic/compare/v1.12.10...v1.13.1
v1.12.10
Bugfix
- fix(aarch64): support parse map that key is float by
@liuq19in bytedance/sonic#748- fix(aarch64): bug when unmarshal into prefilled interface slice by
@liuq19in bytedance/sonic#751- fix: bug when marshal nil interface{} that contains not-indirect value by
@liuq19in bytedance/sonic#756- fix(loader): invalid binary length in stackmap by
@liuq19in bytedance/sonic#754- fix(aarch64): bug when unmarshal into non-nil interface by
@liuq19in bytedance/sonic#759- fix bug when serde with unsupported type by
@liuq19in bytedance/sonic#757Full Changelog: https://github.com/bytedance/sonic/compare/v1.12.9...v1.12.10
v1.12.9
What's Changed
BugFix( for aarch64)
- fix crash cause by
sigprof, not useX28register in arm64 of native C [PR: #746, Issue: #743]- fix bug when parsing invalid json that contains unescaped control chars [PR: #745, Issue: #739]
- fix bug when parsing large json [PR: #745, Issue: #744]
Chore
- chore: fix ci by
@liuq19in bytedance/sonic#740- Update codeql-analysis.yml by
@willem-bdin bytedance/sonic#736- chore: add issue and pr template by
@liuq19in bytedance/sonic#742New Contributors
@willem-bdmade their first contribution in bytedance/sonic#736Full Changelog: https://github.com/bytedance/sonic/compare/v1.12.8...v1.12.9
Commits
035787cfix: loader version (#770)e3ad5b2chore: add notice for go1.24.0 on README (#766)ece85a2fix(compat): duplicate description (#767)8afb40efeat: support golang 1.24 (#741)d03a290fix: Write version warning to stderr (#761)768ec28fix(aarch64): avoid using the boundary pointer of an array (#763)ffadff0fix bug when serde with unsupported type (#757)f79eeddchore: add benchmark with fastjson (#760)a6f8114fix(aarch64): bug when unmarshal into non-nil interface (#759)86fae91fix(loader): invalid binary length in stackmap (#754)- Additional commits viewable in compare view
Updates github.com/caddyserver/caddy/v2 from 2.8.4 to 2.9.1
Release notes
Sourced from github.com/caddyserver/caddy/v2's releases.
v2.9.1
This is a patch release fixing a few issues related to FastCGI, HTTP/3 and unix sockets, log file permissions, repeated TERM signals, and an ARI edge case. It also adds Caddyfile support for response matching in the
headerdirective.Thanks to everyone who reported bugs and helped with fixes!
Changelog
- 34cff4af7db1365bba6decc647ccfb6bf1b21afd core: Only initiate exit once (should fix #6707)
- 50778b55425d378f709599c0d424b0138af592f4 fix: disable h3 for unix domain socket (#6769)
- 0e570e0cc717f02cf3800ae741df70cd074c7275 go.mod: Upgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)
- e48b75843b7eff2948b573391fb41535b5e333ef header:
matchsubdirective for response matching (#6765)- 1f927d6b07d52d7cf46f1f3020c1ea5993a3e5e8 log: Only chmod if permission bits differ; make log dir (#6761)
- 1bd567d7ad41d5509e2aa60cf36e749f195ad83c reverseproxy: buffer requests for fastcgi by default (#6759)
What's Changed
- reverse proxy: fastcgi buffer requests for fastcgi by default by
@WeidiDengin caddyserver/caddy#6759- fix: disable h3 for unix domain socket by
@Geun-Ohin caddyserver/caddy#6769- log: Only chmod if permission bits differ by
@mholtin caddyserver/caddy#6761- header:
matchsubdirective for response matching by@lilnasyin caddyserver/caddy#6765New Contributors
@Geun-Ohmade their first contribution in caddyserver/caddy#6769@lilnasymade their first contribution in caddyserver/caddy#6765Full Changelog: https://github.com/caddyserver/caddy/compare/v2.9.0...v2.9.1
v2.9.0
Happy New Year! We're pleased to release Caddy 2.9. Aside from some minor new features, this release is mainly focused on refinements and bug fixes in many areas, including:
- Config loading
- Events
- Logging
- Placeholders
- Reverse proxy and HTTP server performance
- Matchers
- HTTP (esp. HTTP/3)
- Metrics (per-host metrics)
- Security
- TLS automation & ACME ARI
We realize there is extensive interest in Encrypted Client Hello (ECH) and post-quantum ciphers. These are slated to be supported in Go 1.24, which is scheduled for a stable release in approximately February. We did not want to force users to go through the inconvenience of installing pre-release, non-stock installations of Go, even though the RCs are quite stable and production-ready, in order to even compile Caddy, which is quite common given our plugin ecosystem. We anticipate a Caddy 2.10 release in the near future with these capabilities, built on Go 1.24.
We hope you will enjoy the 2.9 release. Thanks to all contributors, bug reporters, and helpers, and those organizations which deployed pre-release versions to production to help verify patches and features.
Changelog
- ef4e0224a8495fc29847d865087febdee8736e3b caddyfile: Fix comma edgecase in address parsing (#6616)
- b116dcea3d022cd2b060a978c499ac17e5d0a2e1 caddyhttp: Add
{?query}placeholder (#6714)- c216cf551dcbd2de1da1b9fe8a7e179b76827753 caddyhttp: Allow matching Transfer-Encoding, add to access logs (#6629)
- 197c564f2032becba14aeec0152fe5eeb639d6c1 caddyhttp: Set default ReadHeaderTimeout (1 min)
- 09b2cbcf4d839adec91b189fea549d64a69e0595 caddyhttp: Add
MatchWithErrorto replace SetVar hack (#6596)- c6f2979986d87d7236b132c687c8887c92248dd8 caddyhttp: Close http3 server gracefully (#6213)
... (truncated)
Commits
0e570e0go.mod: UPgrade CertMagic to 0.21.6 (fix ARI handshake maintenance)e48b758header:matchsubdirective for response matching (#6765)1f927d6log: Only chmod if permission bits differ; make log dir (#6761)50778b5fix: disable h3 for unix domain socket (#6769)1bd567dreverseproxy: buffer requests for fastcgi by default (#6759)34cff4acore: Only initiate exit once (should fix #6707)3f3f8b3go.mod: Upgrade CertMagic to v0.21.5f2c17d1testing: sort force-automated hosts (#6756)afa778ahttpcaddyfile: Implement experimentalforce_automateoption (#6712)5ba1e06encode: try to use sendfile when compression is not used (#6749)- Additional commits viewable in compare view
Updates github.com/dwisiswant0/pcregexp from 0.1.0 to 0.2.0
Commits
Updates github.com/expr-lang/expr from 1.16.3 to 1.17.0
Release notes
Sourced from github.com/expr-lang/expr's releases.
v1.17.0
Expr is a Go-centric expression language designed to deliver dynamic configurations with unparalleled accuracy, safety, and speed.
program, err := expr.Compile(`let foo = bar(); baz(foo, foo)`)In this release:
This release added the biggest change to the Expr language: if-else expressions and sequential expressions. #736 e750878
if foo > 42 { assert(foo); calc(foo, foo / 2) } else { calc(0, 0) }A sequence of expression may be separated by
;char. The last semicolon must be omitted. Expr returns the value of the last expression in the sequence.If-else is also expressions. Each
ifmust have anelsepart. Result of if-else can be used as an expression:let foo = if bar > 0 { process(bar) } else { fallback() }; foo + 42Added:
- Added
ast.Findhelper for easy AST searching. 579de74- Added compile node budget and memory limits (#762)
- Added
uniq()builtin (#705)- Added
flatten()builtin (#684)- Added types pkg (#665 #667 #668)
Improvements:
- Allow tailing comma in arguments (#623)
- Improved type checker for named types 6fa83ad
- Now
len()return runes count for string e8bd7f8
... (truncated)
Commits
3be6386Code style: remove repeated helper functions25690fechore: Added SOLO to the companies list (#769)a9cda30Test for issue 7562bc0eedRemove duplicated dereferencesf4bbea5Add support deref in all builtins7d564c0Remove print80f0ea6Correctly add OpDeref if needed2d9f616Add more tailing comma tests8f83203Allow tailing comma in arguments (#623)435b79dMake sure get() returns nil for map[string]string on missing keys- Additional commits viewable in compare view
Updates github.com/go-playground/validator/v10 from 10.19.0 to 10.25.0
Release notes
Sourced from github.com/go-playground/validator/v10's releases.
Release 10.25.0
What's Changed
- Fix postcode_iso3166_alpha2_field validation by
@ddevcapin go-playground/validator#1359- Update README to replace the Travis CI badge with a GitHub Actions badge by
@nodivbyzeroin go-playground/validator#1362- chore: using errors.As instead of type assertion by
@fateleiin go-playground/validator#1346- Fix/remove issue template md by
@ganeshdipdumbarein go-playground/validator#1375- feat: Add support for omitting empty and zero values in validation (including nil pointer and empty content of pointer) by
@zeewellin go-playground/validator#1289New Contributors
@ddevcapmade their first contribution in go-playground/validator#1359@fateleimade their first contribution in go-playground/validator#1346@zeewellmade their first contribution in go-playground/validator#1289Full Changelog: https://github.com/go-playground/validator/compare/v10.24.0...v10.25.0
Release 10.24.0
What's Changed
- MSGV additions by
@deankarnin go-playground/validator#1361The MSGV(Minimum Supported Go Version) has been bumped to v1.20 to address a security issues in the gaoling
netpackage.Full Changelog: https://github.com/go-playground/validator/compare/v10.23.0...v10.24.0
Release 10.23.0
What's Changed
- fix: cron validation support for star step value by
@cgetzenin go-playground/validator#1302- doc(oneof): mention 'enum' by
@Crocmagnonin go-playground/validator#1326- Add oneofci validator (oneof case insensitive) by
@connorcarnesin go-playground/validator#1321- feat: add validator for numeric ports by
@nodivbyzeroin go-playground/validator#1294New Contributors
@cgetzenmade their first contribution in go-playground/validator#1302@Crocmagnonmade their first contribution in go-playground/validator#1326@connorcarnesmade their first contribution in go-playground/validator#1321Full Changelog: https://github.com/go-playground/validator/compare/v10.22.1...v10.23.0
Release 10.22.1
What's Changed
- fix(#1310): fix excluded_if for pointers by
@ganeshdipdumbarein go-playground/validator#1313New Contributors
@ganeshdipdumbaremade their first contribution in go-playground/validator#1313Full Changelog: https://github.com/go-playground/validator/compare/v10.22.0...v10.22.1
Release 10.22.0
No release notes provided.
... (truncated)
Commits
0240917Update README.mdf5f02dcfeat: Add support for omitting empty and zero values in validation (including...c171f2dFix/remove issue template md (#1375)e564451chore: using errors.As instead of type assertion (#1346)57dcfdcUpdate README to replace the Travis CI badge with a GitHub Actions badge (#1362)b111154Fix postcode_iso3166_alpha2_field validation (#1359)2cce309MSGV additions (#1361)6c3307eUpdate README.md606fdceUpdate README.md48992fafeat: add validator for numeric ports (#1294)- Additional commits viewable in compare view
Updates github.com/hashicorp/go-getter from 1.7.5 to 1.7.8
Release notes
Sourced from github.com/hashicorp/go-getter's releases.
v1.7.8
What's Changed
- sec: fix s3 and gcs host checks by
@dduzgun-securityin hashicorp/go-getter#512Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.7...v1.7.8
v1.7.7
What's Changed
- Clean up git repo on disk when the ref checkout fails by
@james-warren0in hashicorp/go-getter#504- [COMPLIANCE] Add Copyright and License Headers by
@hashicorp-copywritein hashicorp/go-getter#409- Add CODEOWNERS file in .github/CODEOWNERS by
@mukeshjcin hashicorp/go-getter#505- IND-1804 Bump up dependencies to remediate vulnerabiities by
@mohanmanikanta2299in hashicorp/go-getter#513- Updating arguments in github release CI by
@mohanmanikanta2299in hashicorp/go-getter#514- Updating .goreleaser.yml file with valid version by
@mohanmanikanta2299in hashicorp/go-getter#515New Contributors
@james-warren0made their first contribution in hashicorp/go-getter#504@mukeshjcmade their first contribution in hashicorp/go-getter#505@mohanmanikanta2299made their first contribution in hashicorp/go-getter#513Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.6...v1.7.7
v1.7.6
What's Changed
- fix: Avoid panic when s3 URL is invalid by
@liamgin hashicorp/go-getter#501New Contributors
@liamgmade their first contribution in hashicorp/go-getter#501Full Changelog: https://github.com/hashicorp/go-getter/compare/v1.7.5...v1.7.6
Commits
f7836fbsec: fix s3 and gcs host checks (#512)7dddd13Merge pull request #515 from hashicorp/Vulnerability_Fix_v10f05341IND-1804 Updating .goreleaser.yml file with valid version81c6950Merge pull request #514 from hashicorp/Vulnerability_Fix_v1d315d97IND-1804 Updating arguments in github release CI6552f72Merge pull request #513 from hashicorp/Vulnerability_Fix_v12e56c18IND-1804 Bump up dependencies to remediate vulnerabiities842d6c3Merge pull request #505 from mukeshjc/main7edd4e0Add CODEOWNERS file in .github/CODEOWNERS6077ad5Merge pull request #409 from hashicorp/compliance/add-headers- Additional commits viewable in compare view
Updates github.com/klauspost/compress from 1.17.8 to 1.17.11
Release notes
Sourced from github.com/klauspost/compress's releases.
v1.17.11
What's Changed
- zstd: Fix extra CRC written with multiple Close calls by
@klauspostin klauspost/compress#1017- s2: Don't use stack for index tables by
@klauspostin klauspost/compress#1014- gzhttp: No content-type on no body response code by
@juliensin klauspost/compress#1011- gzhttp: Do not set the content-type when response has no body by
@kevinpolletin klauspost/compress#1013New Contributors
@juliensmade their first contribution in klauspost/compress#1011@kevinpolletmade their first contribution in klauspost/compress#1013Full Changelog: https://github.com/klauspost/compress/compare/v1.17.10...v1.17.11
v1.17.10
What's Changed
- gzhttp: Add TransportAlwaysDecompress option. by
@klauspostin klauspost/compress#978- s2: Add EncodeBuffer buffer recycling callback by
@klauspostin klauspost/compress#982- zstd: Improve memory usage on small streaming encodes by
@klauspostin klauspost/compress#1007- gzhttp: Add supported decompress request body by
@mireclin klauspost/compress#1002- flate: read data written with partial flush by
@vajexalin klauspost/compress#996- ci: Upgrade Go & other by
@klauspostin klauspost/compress#1008- docs: Small typofix in comment by
@Jillein klauspost/compress#976- build(deps): bump the github-actions group with 2 updates by
@dependabotin klauspost/compress#979- docs: Fix URL typo when installing builddict by
@Wikidepiain klauspost/compress#980- build(deps): bump the github-actions group with 2 updates by
@dependabotin klauspost/compress#985- Fix typos by
@deiningin klauspost/compress#986- build(deps): bump github/codeql-action from 3.25.15 to 3.26.6 in the github-actions group by
@dependabotin klauspost/compress#997New Contributors
@Wikidepiamade their first contribution in klauspost/compress#980@deiningmade their first contribution in klauspost/compress#986@vajexalmade their first contribution in klauspost/compress#996@mireclmade their first contribution in klauspost/compress#1002Full Changelog: https://github.com/klauspost/compress/compare/v1.17.9...v1.17.10
v1.17.9
What's Changed
- s2: Reduce ReadFrom temporary allocations by
@klauspostin klauspost/compress#949- Fix arm64 vet issues by
@klauspostin klauspost/compress#964- flate, zstd: Shave some bytes off amd64 matchLen by
@greatroarin klauspost/compress#963- Upgrade zip to 1.22.4 upstream by
@klauspostin klauspost/compress#970- zstd: BuildDict fails with RLE table by
@klauspostin klauspost/compress#951- Upgrade zlib to upstream by
@klauspostin klauspost/compress#971Full Changelog: https://github.com/klauspost/compress/compare/v1.17.8...v1.17.9
Commits
72cd4a9zstd: Fix extra CRC written with multiple Close calls (#1017)dbd6c38s2: Don't use stack for index tables (#1014)f73ab1eDo not set the content-type when response has no body (#1013)f2a4f25build(deps): bump github/codeql-action in the github-actions group (#1012)8e14b1bNo content-type on no body response code (#1011)13a1ce6ci: Match goreleaser version (#1009)6c5a195Update README.md2a46d6bUpdate README.md4dafca9ci: Upgrade Go & other (#1008)26519f8zstd: Improve memory usage on small streaming encodes (#1007)- Additional commits viewable in compare view
Updates github.com/otiai10/copy from 1.14.0 to 1.14.1
Commits
5ef5923Revert "CopyMethod" since it's not ready49b0b59Merge pull request #164 from eth-p/feat-copymethod-apif530620ci: Allow triggering Go workflow manuallyb4dd789refactor: Split common code out of CopyBytes9205813feat: Add FileCopyMethod option / API2f93b8fMerge pull request #159 from otiai10/dependabot/go_modules/main/golang.org/x/...87072f3Bump golang.org/x/sys from 0.23.0 to 0.24.0d0690cbMerge pull request #158 from otiai10/dependabot/go_modules/main/golang.org/x/...b87119dBump golang.org/x/sys from 0.22.0 to 0.23.0355527cMerge pull request #157 from otiai10/dependabot/go_modules/main/golang.org/x/...- Additional commits viewable in compare view
Updates github.com/stretchr/testify from 1.9.0 to 1.10.0
Release notes
Sourced from github.com/stretchr/testify's releases.
v1.10.0
What's Changed
Functional Changes
- Add PanicAssertionFunc by
@fahimbagarin stretchr/testify#1337- assert: deprecate CompareType by
@dolmenin stretchr/testify#1566- assert: make YAML dependency pluggable via build tags by
@dolmenin stretchr/testify#1579- assert: new assertion NotElementsMatch by
@hendrywirantoin stretchr/testify#1600- mock: in order mock calls by
@ReyOrtizin stretchr/testify#1637- Add assertion for NotErrorAs by
@palsivertsenin stretchr/testify#1129- Record Return Arguments of a Call by
@jayd3ein stretchr/testify#1636- assert.EqualExportedValues: accepts everything by
@redachlin stretchr/testify#1586Fixes
- assert: make tHelper a type alias by
@dolmenin stretchr/testify#1562- Do not get argument again unnecessarily in Arguments.Error() by
@TomWrightin stretchr/testify#820- Fix time.Time compare by
@myxoin stretchr/testify#1582- assert.Regexp: handle []byte array properly by
@kevinburkesegmentin stretchr/testify#1587- assert: collect.FailNow() should not panic by
@marshall-leein stretchr/testify#1481- mock: simplify implementation of FunctionalOptions by
@dolmenin stretchr/testify#1571- mock: caller information for unexpected method call by
@spirinin stretchr/testify#1644- suite: fix test failures by
@stevenhin stretchr/testify#1421- Fix issue #1662 (comparing infs should fail) by
@ybrustinin stretchr/testify#1663- NotSame should fail if args are not pointers #1661 by
@sikehishin stretchr/testify#1664- Increase timeouts in Test_Mock_Called_blocks to reduce flakiness in CI by
@sikehishin stretchr/testify#1667- fix: compare functional option names for indirect calls by
@arjun-1in stretchr/testify#1626Documantation, Build & CI
- .gitignore: ignore "go test -c" binaries by
@dolmenin stretchr/testify#1565- mock: improve doc by
@dolmenin stretchr/testify#1570- mock: fix FunctionalOptions docs by
@sniryein stretchr/testify#1433- README: link out to the excellent testifylint by
@brackendawsonin stretchr/testify#1568- assert: fix typo in comment by
@JohnEndsonin stretchr/testify#1580- Correct the EventuallyWithT and EventuallyWithTf example by
@JonCrowtherin stretchr/testify#1588- CI: bump softprops/action-gh-release from 1 to 2 by
@dependabotin stretchr/testify#1575- mock: document more alternatives to deprecated AnythingOfTypeArgument by
@dolmenin stretchr/testify#1569- assert: Correctly document EqualValues behavior by
@brackendawsonin stretchr/testify#1593- fix: grammar in godoc by
@miparnisariin stretchr/testify#1607- .github/workflows: Run tests for Go 1.22 by
@HaraldNordgrenin stretchr/testify#1629- Document suite's lack of support for t.Parallel by
@brackendawsonin stretchr/testify#1645- assert: fix typos in comments by
@alexandearin stretchr/testify#1650- mock: fix doc comment for NotBefore by
@alexandearin stretchr/testify#1651- Generate better comments for require package by
@Neokilin stretchr/testify#1610- README: replace Testify V2 notice with
@dolmen's V2 manifesto by@hendrywirantoin stretchr/testify#1518New Contributors
@fahimbagarmade their first contribution in stretchr/testify#1337@TomWrightmade their first contribution in stretchr/testify#820@sniryemade their first contribution in stretchr/testify#1433@myxomade their first contribution in stretchr/testify#1582@JohnEndsonmade their first contribution in stretchr/testify#1580
... (truncated)
Commits
89cbdd9Merge pull request #1626 from arjun-1/fix-functional-options-diff-indirect-calls07bac60Merge pull request #1667 from sikehish/flaky716de8dIncrease timeouts in Test_Mock_Called_blocks to reduce flakiness in CI118fb83NotSame should fail if args are not pointers #1661 (#1664)7d99b2battempt 205f87c0more similarea7129ebetter fmta1b9c9eMerge pull request #1663 from ybrustin/master8302de9Merge branch 'master' into master89352f7Merge pull request #1518 from hendrywiranto/adjust-readme-remove-v2- Additional commits viewable in compare view
Updates github.com/valyala/fastjson from 1.6.3 to 1.6.4
Commits
Updates golang.org/x/net from 0.30.0 to 0.34.0
Commits
8da7ed1go.mod: update golang.org/x dependencies2124140all: make function and struct comments match the namese9d9...Description has been truncated